Dan
asked on
PC blue screen
For some strange reason, my PC just got a blue screen today, it happened twice so far, after I reboot, I checked the system logs and thsi is the only error I get. Any idea's what this means or how to fix it?
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000027 (0x00000000baad0073, 0xfffff880078e4538, 0xfffff880078e3d90, 0xfffff880051baad7). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 122811-9297-01.
Log Name: System
Source: Microsoft Antimalware
Date: 12/28/2011 3:50:21 PM
Event ID: 3002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: pcname.domain.org
Description:
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
Feature: Behavior Monitoring
Error Code: 0x80004005
Error description: Unspecified error
Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Antimalware" />
<EventID Qualifiers="0">3002</Event ID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2011-12-28T23: 50:21.0000 00000Z" />
<EventRecordID>21732</Even tRecordID>
<Channel>System</Channel>
<Computer>pcname.domain.or g</Compute r>
<Security />
</System>
<EventData>
<Data>%%860</Data>
<Data>3.0.8402.0</Data>
<Data>%%835</Data>
<Data>%%842</Data>
<Data>0x80004005</Data>
<Data>Unspecified error </Data>
<Data>5</Data>
</EventData>
</Event>
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000027 (0x00000000baad0073, 0xfffff880078e4538, 0xfffff880078e3d90, 0xfffff880051baad7). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 122811-9297-01.
Log Name: System
Source: Microsoft Antimalware
Date: 12/28/2011 3:50:21 PM
Event ID: 3002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: pcname.domain.org
Description:
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
Feature: Behavior Monitoring
Error Code: 0x80004005
Error description: Unspecified error
Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Antimalware" />
<EventID Qualifiers="0">3002</Event
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2011-12-28T23:
<EventRecordID>21732</Even
<Channel>System</Channel>
<Computer>pcname.domain.or
<Security />
</System>
<EventData>
<Data>%%860</Data>
<Data>3.0.8402.0</Data>
<Data>%%835</Data>
<Data>%%842</Data>
<Data>0x80004005</Data>
<Data>Unspecified error </Data>
<Data>5</Data>
</EventData>
</Event>
I see a couple of references to CD/DVD. Can you try disabling or removing the CD device and see it the problem persists? .... Thinkpads_User
ASKER
i didnt make any changes to my DVD or CD, its been the same ever sine I got the computer, about 1 year ago.
They are hardware devices and they fail. I am not saying for sure that is it, but I think it might be worth checking.
.... Thinkpads_User
.... Thinkpads_User
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Upload minidump file here for analysis.
Location
C:\Windows\minidump
Ded9
Location
C:\Windows\minidump
Ded9
ASKER
does the dump file contain any conf. info?
NO ...just has info about the faulty driver.
Ded9
Ded9
that's the first time somebody asks that about a dmp file...
but no dmp file - as stated from MS contains only technical data
but no dmp file - as stated from MS contains only technical data
ASKER
ASKER
Any help?
>>> Any help? <---- Did you check out the possibilities in the link I left you ? Results? And did you try disabling the CD/DVD at least to see ? .... Thinkpads_User
ASKER
thankpads user, not yet, I'm leaving the office now, but I will do that when I return on Wednesday.
Thanks
Thanks
Crash dump points to mrxsmb10.sys.
To fix this issue ...install this hotfix from Microsoft website.
http://support.microsoft.com/kb/2563210
Make sure you download the right version ....64bit. Reboot computer after installing update.
Also make sure all windows updates are installed.
Can also try rename mrxsmb10.sys to mrxsmb10.old and then do sfc scannow...do this only if the hotfix or windows update is not able to resolve your issue.
Ded9
To fix this issue ...install this hotfix from Microsoft website.
http://support.microsoft.com/kb/2563210
Make sure you download the right version ....64bit. Reboot computer after installing update.
Also make sure all windows updates are installed.
Can also try rename mrxsmb10.sys to mrxsmb10.old and then do sfc scannow...do this only if the hotfix or windows update is not able to resolve your issue.
Ded9
Pl ignore my previous comments ..follow the steps mentioned in my next post
Ded9
Ded9
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
What is mrxsmb10.sys, what exactly is that, what driver or application?
I will try the fix on Wednesday, as I am on vacation until then.
I will try the fix on Wednesday, as I am on vacation until then.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
hope your question is answered.
Ded9
Ded9
ASKER
Thanks guys for your help, I installed the hotfix so I'll see what happens.