Link to home
Start Free TrialLog in
Avatar of dhjensen
dhjensen

asked on

STOP: Ox0000007E BSOD

Laptop is approximately 2 years old; 1GB RAM (2-512MB modules), 160GB HD--plenty of free space.
I've been receiving this error for about a month now, and attempting seemingly every possible solution.  The last stop messages have been as follows:
STOP:  Ox0000007E (OxC0000005, Ox804E4337, OxF7A4FBBC, OxF7A4F8B8)
STOP:  Ox0000007E (OxC0000005, Ox804E4337, OxF7A2FBBC, OxF7A2F8B8)
STOP:  Ox0000007E (OxC0000005, Ox804E4337, OxF7A3BBBC, OxF7A3B8B8)
STOP:  Ox0000007E (OxC0000005, Ox804E4337, OxF7A4BBBC, OxF7A4B8B8)
STOP:  Ox0000007E (OxC0000005, Ox804E4337, OxF7A2FBBC, OxF7A2F8B8)
The first two numbers in parenths are always the same, the last two are close--don't know if that's significant or not.  There have been no other error messages in all caps such as "IRQ_LESS_THAN_OR_EQUAL_TO".

Here's what been done so far:
1)  Flashed BIOS successfully to latest version from Toshiba website.  (This helped a little--can now boot to safe mode w/o BSOD.)
2)  Updated drivers to latest drivers from Intel and Toshiba website for chipset, video, modem, LAN.  (Seemingly difference.)
3)  To my knowledge, up-to-date on MS service packs, updates, etc.
4)  Booted to Recovery Console, and ran chkdsk /r.  Errors reported, and supposedly fixed.
4)  Ran Fujitsu HD quick (no errors reported) and comprehensive (errors *reported*) diags--but no fixes applied.  (See next step.)
5)  Ran SpinRite6 (from grc.com) on level 4--reported bad cluster.  Was able to recover some files; some not.  Don't know which files were affected.  Rest of disk checked out OK.
6)  Re-ran Fujitsu HD comprehensive diags, and now reports no errors--all clean.
7)  Have run multiple CPU, and memory tests (Memtest86+) from new copy of Ultimate Boot CD; several passes without failure.
8)  All devices listed on Device Manager *appear* to be working correctly.

I've noticed (from attached NTBTLOG.TXT file) that some drivers are not loading.  Also have incloded Hijackthis log file, if that helps.  Can include mini-dump file too, if that would help.  Let me know if I need to clarify anything--thanks in advance for your help.  This has been extremely frustrating, and would prefer not to buy another laptop.  

ntbtlog.txt
hijackthis.log
Avatar of Member_2_49692
Member_2_49692

you hijack this log has a couple of things
O18 - Protocol: a5res - (no CLSID) - (no file)  
 
O18 - Protocol: XBasic - (no CLSID) - (no file)

your nbtlog you posted is empty.

Please post the minidump file
Also have you tried removing the ram and reinstalling one at a time ?

Have you installed anything new since the BSOD errors started, hardware or software ?
Avatar of dhjensen

ASKER

briancassin:
Thanks, I'll re-post the NTBTLOG.TXT file, and upload the minidump.  (Changed extension to .TXT per EE's allowed files.)
I have re-seated the ram, but not re-installed one at a time--will do.  No new HW or SW additions, etc.  Bear with me, the laptop is at home--can't take to work due to security restrictions, etc.

Thanks again.
Mini021108-01.txt
ntbtlog.txt
ASKER CERTIFIED SOLUTION
Avatar of Member_2_49692
Member_2_49692

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for the post--will perform thoses tasks tonight.  To answer your questions:
Have you tried doing a repair install of windows ? Not yet.

What type of network card is in the laptop ?  From Toshiba website:  
" Intel PRO/100 VE Network Connection - 10/100 Base-TX Ethernet
" Integrated Intel Pro/Wireless Network Connection 3945ABG (802.11a/b/g)

Do you have any client login software like Novell or so forth ? No.

Let me know if you have any additional questions--otherwise my next post will contain the results of the testing.
Let me know what the results are I have no other questions right now
I find klif.sys is installed (Kaspery AV) and it is bundled with ZoneAlarm.  Maybe klif.sys has conflict with AVG. For problem isolation, I suggest to uninstall ZA.  if no more BSOD occurs, ZA is the culprit.
cpc2004:  Thanks, I'll give that a try.  (Although I think it's disabled at the moment, and still BSOD, but willing try at this point--see below.)
Ran MSConfig, disabled everything on startup tab, rebooted.
Ran combofix, got BSOD after a while--log is enclosed (generated automatically after restart).  Should I run in safe mode to avoid BSOD?
Ran CCleanup without BSOD incident--cleaned over 300MB of junk.
Ran superantispyware.  Scanned memory, registry, and approximately 12,000 files before BSOD, but no errors detected before crash.  Run in safe mode?
Am continuing to run the rest of the utilities--taking a little longer than anticipated.  Thanks for the help.

ComboFix.txt
hijackthis.log
Mini021208-01.txt
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Uninstalled AVG anti-virus (to isolate possible conflich with ZoneAlarm AV).  Ran MS Rootkitreveal on one ram stick--BSOD after approximately 15 min.  Don't think it's a conflict there--they've (ZA & AVG) coexisted peacefully for several years now.  Changed memory chip and slot, ran ComboFix *completely* without BSOD (that's a first).  Now running MS Rootkitreveal tool....so far so good--fingers crossed.  Will run other suggested programs also.  Will advise regarding progress.
ComboFix2.txt
I see a couple off oddities

C:\DOCUME~1\David\LOCALS~1\Temp\GLGFGG.exe [2008-02-12 07:56]
C:\DOCUME~1\David\LOCALS~1\Temp\HNTV.exe [2008-02-12 11:57]

you have executables running from your temp directory... go to that dirctory and find these right click on them and get the properties see if there is a manufacturer at all these do not look like good programs since they are coming from the temp directory

looks like you may have a hotbar infection based on the second file.

I would continue with the anti spyware apps especially run spyware doctor and superanti spyware

http://www.superantispyware.com download it update it and run it

http://pack.google.com/intl/en/pack_installer_new.html?hl=en&gl=us&utm_source=en_US-et-more&utm_medium=et&utm_campaign=en_US&ciNum=11
these need to be deleted after you get the information on them

C:\DOCUME~1\David\LOCALS~1\Temp\GLGFGG.exe [2008-02-12 07:56]
C:\DOCUME~1\David\LOCALS~1\Temp\HNTV.exe [2008-02-12 11:57]
briancassin:
MS Rootkitreveal kit completed successfully w/o BSOD--didn't find anything, but so far the laptop has completed superantispyware, adaware, spybot, and spyware doctor without BSOD--that's a major development.  I think you found the issue with the RAM--and very interesting since I couldn't get any of the RAM diagnostic tests to fail--not once!    Adaware, spybot, and spyware doctor all found minor infections which I deleted.  Running TM Housecall at the moment.

Interestingly I checked for the C:\DOCUME~1\David\LOCALS~1\Temp\GLGFGG.exe and C:\DOCUME~1\David\LOCALS~1\Temp\HNTV.exe, and they not in those directories.  Even attrib *.* doesn't reveal them as hidden.  They're still showing up on Combofix's log as of this morning.  Any suggestions?
thats fine they may have been removed by one of the other applications you are running.

What ram testing software did you use ?

Docmemory or another ?
Memtest86+ (and a few others) from the Ultimate Boot Disk.
Thanks for the help--I'll let you know the outcome of the other tests when they finish, but IMO the major problem is solved.  Thanks again.
your welcome... I always used docmemory myself
I'll try it and see if it fails--once the other tests are done.