STOP 0x1000000d1 in ipnat.xyx

I've been having BSODs for quite a while now and I'm at the end of my (admittedly short) rope. They show up in ipnat.sys at various addresses but I think that's just a red herring. I deleted and recreated my Windows XP paging space, I ran verifier and found that I had a bluetooth audio driver that failed so I disabled it, I replaced both my RAM and hard drive and ran memtest for about 12 hours without any failure - HELP!!!

Would someone PLEASE help interpret my minidumps?  I zipped the last six of them and put them in www.geocities.com/minidiump (it's the file called minidump.zip in that directory).

Please help!
madcityguyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

baconyiCommented:
best solution is do clean install, but if you dont want to do that, do a repair install...

boot up with the xp cd, hit enter to install like normal, f8 to agree, then it will search for previously installed windows...
if it finds it, great, hit R for repair install, you will need the product key again, but this doesnt delete any files/programs you have...

if it does NOT find a copy ofwindows and only option is to hit enter to install clean, then quit out of that and let us know.
Billy
0
madcityguyAuthor Commented:
Oh, yuck, this is a Dell 700m with preloaded WinXP. I see there's a program on the hard drive to create a recovery CD but I'm afraid it'll just be a full hard drive reload, and I'd rather not do that if I can help it.
0
baconyiCommented:
well lets hope someone else has some solutions, but if not, and you want to, last resort do a format/clean install... but before doing so, download the drivers from dell first, esepcially the network card driver, brun it to a cd so you have them if you do decide you need to reload...
good luck
0
Cloud Class® Course: CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

madcityguyAuthor Commented:
I'm going to increase the point value from its initial 250 points by 25 points each time I blue screen.  Guess what...
0
KenneniahCommented:
If you don't mind, go to C:\WINDOWS\system32\drivers and take a look at ipnat.sys by right-clicking on it and hitting properties.
I'd like to know the modified date, version number, and file size.
Some malicious programs, spyware, virii etc. have been known to modifiy or replace this file.
With that information I should be able to verify if is the correct Windows file.

Also to find out if it is a red herring, or the problem itself....
You can disable the Windows Firewall/Internet Connection.... service in services.msc and reboot.
Then see if the blue screen happens again.
 
0
madcityguyAuthor Commented:
Very interesting.  It's great to have someone question my assumptions.

ipnat.sys size is 134,912 bytes, size on disk is 135,168 bytes. Modified date is Wednesday, September 29, 2004 at 5:28:37 pm.  Version is 5.1.2600.2524 copyright Microsoft Corporation.  BTW, I forgot to mention that I'm running XP Pro SP2.

Also - you pointed out something interesting that I hadn't noticed.  I'm running McAfee and both McAfee and Windows Firewalls are running.  As you suggested I'm stopped the Windows Firewall/ICS service and changed the startup to manual.  With McAfee Firewall running do I need it on at all?

By the way, I'm headed out for the evening so I'll be shutting this PC down for the night soon so I won't have blue screens for a while!
0
KenneniahCommented:
No, there shouldn't be a need for Windows Firewall if you have Mcafee. Mcafee does everything the XP one does plus some.

The likelihood that they 2 firewalls are conflicting and causing the problem is small IMO, but before looking farther I like to try to rule things out.

Looks like the actual file is fine though.
0
cpc2004Commented:
I cani't download the minidump as the url is incorrect. Dump analysis is the proper procedure to diagnostic the problem.
0
madcityguyAuthor Commented:
Oops - my bad. It's www.geocities.com/gtung/minidump.  Oh, and today I'm running with the Windows firewall turned off (the service is off) but McAfee's firewall running, the way I THOUGHT I was running all along.  So far so good!
0
cpc2004Commented:
Your version of McAfee has known problem. Refer the following case
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21695283.html
0
cpc2004Commented:
Your version of MpFirewall is the same as the above cases and it is at Nov 12 2005 (timestamp is 43751098)

MpFirewall.sys Sat Nov 12 05:43:52 2005 (43751098)

You also install ZoneAlarm at your windows and the version is at 2003. Why your windows have two firewalls?
0
madcityguyAuthor Commented:
When I upgraded to SP2 I didn't notice that the install activated the Windows firewall - I didn't mean to run two firewalls.  I have NEVER gotten any messages from the Windows firewall.

So far today my PC has been stable with McAfee firewall running and Windows firewall stopped.  I'm going to just let things run for a while as is before I turn off the McAfee firewall.  It could be that my problem is related to both firewalls being active at the same time.

Thank you for your reference to the problems that the other person had with MpFirewall.  I'm suspicious that my problems are related either to McAfee firewall or the combination of McAfee and Windows firewall being enabled at the same time.
0
cpc2004Commented:
I mean ZoneAlarm and not windows firewall. You had better de-install ZoneAlarm if it is not in-used.

ab194000 ab1bddc0   vsdatant vsdatant.sys Fri Feb 28 11:29:53 2003 (3E5ED7B1) <-- ZoneAlarm
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
madcityguyAuthor Commented:
I never installed ZoneAlarm on this PC and it doesn't show up in either services or my Add/Remove programs list.  Is there something in the minidump that indicates that it's installed?
0
KenneniahCommented:
Yes, in the first minidump...Mini041706-01.dmp

ab194000 ab1bddc0   vsdatant   (deferred)            
    Image path: vsdatant.sys
    Image name: vsdatant.sys
    Timestamp:        Thu Feb 27 21:29:53 2003 (3E5ED7B1)
    CheckSum:         0002F2CC
    ImageSize:        00029DC0
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0

Yet I don't see it in any of the other dmp files.

This would be the True Vector part of Zone Alarm, and if I remember correctly shows up as True Vector Service in services.msc

But as I said, don't see it in any of the other minidumps.
0
madcityguyAuthor Commented:
Omigosh - I looked in the Device Manager Non-Plug and Play Drivers and see it there.  Status is stopped, startup type is demand.  With a bit of research I now believe that it got loaded on my system with my Cicso VPN client and only gets enabled when I enable the Cisco VPH client.  I was probably using the VPN client during the time that the first minidump was created.  I'm not sure I can get rid of it but I don't use the VPN client very often so it's probably not really a problem.
0
KenneniahCommented:
I wouldn't worry about it. It wasn't listed as being likely to have caused the problem, especially since it only gets loaded when needed.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.