Link to home
Start Free TrialLog in
Avatar of Donnie616
Donnie616Flag for United States of America

asked on

Memory (kernel) dump BSOD's 2X per week: Why?

Hi Experts.
By the way, I dont even remember what that title means any more.
This problem is way over my head wherein it was not that way a few years ago. For about 2 weeks now,  Basically, I am Crashing win XP SP3 2X per week. It freezes, does not start, screen flickers, goes black 2 seconds then back, blah, blah,  and acts like it is virused up. (I am in safe mode now)

 I ran ERD Commander and fixed it for short while a few times, but I do not remember what I am doing Inside the hives and fear that part. Basically I am lost where I could fix these issues easily before. I have been away from computing too long. I have a permanenent version of UBCD4Win360 (Barts PE) on the PC but when I went to Use "combofix" I was tricked into not using it AND THEN IT DISAPPEA%RED. A Virus? I just installed that entire repair app (UBCD4win.exe) on the PC today.  A bootup disk is not required now.

 My ram is getting eaten up by something right down to one GB sometimes, then I can boost it to about 300MB max. Firefox also destroys the memory.

Process explorer says it is the memory dump using 100% of CPU which freezes it in normal startup.  So did ERD say that may be a problem driver. I had saved the ERD analaysis for you experts but I cant find it in safe mode. PC sometimes boots in "DEBUG" mode

Backups also take forever..., I mean forever, so it is not an option now.  I need this

I did the old windows memory boot up diagnostic but all seemed well.  I do know enough that "Memory dump", in BSOD is problematic . Just dont know how to fix it. I do not remember how to use all my WIN PE repair cds and I have dozens.

QUESTION IS:
Can anyone tell me how to fix this issue,  short of a repair install?
and do I need the original XP CD to do that type of installation?
I installed from XP SP2  cd, then added SP3 later.

Dont know if I can get back to you if it doesnt reboot.  Another thing>>>I forgot how to get to the recovery Console which I installed years ago.

This is a home built PC from 2007 with an AMD 3000 CPU and ASUS MB. 2000GB ram. It runs beauatiffully when all is normal. I have replaced some major hardware and used the best stuff when I built it. I prefer to repair this one than to use my others. I know the answer is right in front of me.

Another thing is I cannot update the AGP graphics driver with success.  That is showing up in Windows update  yellow shield. I thought there was no more support?
Enough! Sorry.

Thanks in advance.
D.
Avatar of bas2754
bas2754
Flag of United States of America image

XP support ended earlier this year from Microsoft.  This means no more fixes to be rolled out every.  Microsoft has stated that they do not recommend anyone using Windows XP even connect their systems to the internet due to the security of the OS vs. the new malware that is out there.

So you could have a piece of malware, or you could have a bad drive, or you could have a failing piece of hardware.  Can you run a memory test from the UBCD (Can't remember if it is available or not)?  Also run a chkdsk and just be sure nothing is corrupted.

Most helpful would be to post the first line of the BSOD - Espectially the 0x00000000XX code that shows.  When you go to task manager and exmine the running processes, sort them by memory usage.  What are the top 5 memory users?

Get that info back here and let's see if we can figure this out.
Avatar of Donnie616

ASKER

Thanksbas;
>>I did the old windows memory boot up diagnostic<<From ubcd4win It found no issues on a 2 hour extended scan.
also sfc /scannow,
chkdsk  /r and P/     on my own

Combofix must have removed something. I got another copy from the original site and ran it and PC started right into windows. PC is moving smoothly but as U know that means nothing. Love that program.

Will do as you suggest next Bluesscreen. Hopefully it wont come back.
Thanks again.
D
Avatar of dbrunton
Also hit the machine with Adwcleaner http://www.bleepingcomputer.com/download/adwcleaner/

If it finds anything then remove the infection and then hit the machine once more with Malwarebytes https://www.malwarebytes.org/mwb-download/sem/
I also suggest you use TDS Killer from Kaspersky because your symptoms are signs of a rootkit virus.
SOLUTION
Avatar of dbrunton
dbrunton
Flag of New Zealand image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
post the memory dump here
find it n Windows\minidumps
All my old buddies and helpers on EE. WOW. Nice to hear from you all....The creAM OF THE CROP OF EE.

I regularly spot check with ALL the above but I have ancient versions, so thanks and I will be back.

PC is running well do to Combofix...but that bug is hiding somewhere.  No freezing so far since yesterday.

Dont know how to open  .dmp file . Or send it to You.  I will run the scans noww.

Thank you all  D.
OK  problem s are being caused by
1. svchost.exe (network service)
2. dumprep.exe
3 Firefox

These 3 are using the most memory and cpu. After the scans, I lost some good old reliable programs, Cant get some back. I think the scanners thought they were bugs because they were so old and disposed of them.

Anyway,

dont know how to get the Minidump log icon to EE. I have no log just an icon.
>>  After the scans, I lost some good old reliable programs.

Names of the programs please.
FreeRAM XP Pro

CS Fire Monitor

Using them since day one. I got the DLs but I am not able to reinstall them

Also Firefox updated itself which I was not ready to do.  Within last couple of hours.

Another thing, memory been sitting at 200mb or less and CPU at 95%-100% usage until after whatever is running stops, since this stuff started
These 2 apps have  always let me know the status, right in Sys tray. Now I am back up to 900. Usually, about 1200mb is normal for me,

Oh Oh Free ram just popped up in the tray. ???  

Now I have another issue on my new win 8.1 laptop where I am trying to back my stuff up to. another question, .. I cant read my documents which are all important.

This memory dump  seems to be the big issue. That is what the BSOD states, then it times out and when I reboot it gets stuck at "Windows is starting" must fool around in safe mode where I no longer know what to do or go back in system restore. Right now PC is running like new
Where did you download those apps from?

>>  I cant read my documents which are all important.

Types of documents?  Word, Excel etc.  Seems like you still have infections ...
I use a word processor called abiword. I can read my files on XP machine but teh backups on my 8.1 laptop are not readable until I stick in the Flashdrive I copied them to. this is another question for tomorrow. i am exhaustedttonite, but i cannot lose theses ongoing legal papers  or all my ebay photos on that flasher.  I am still working on the xp machine. I stubled and broke 2 usb receptacles on the xxp machine too. so i am almost done now. my office program office 10) became disabled on XP as well and I just uninstalled it. got a feeling I wont be needing it soon. If I lose this XP PC, I lose six months of typing hundreds of pages, because teh backup files are not readable. also I make my living on ebay. that xp PC just cannot crash on me. 10 GB of stuff I need. still have to print half of legal briefs yet yet. speak again tomorrow. next question will be titled Cant read files in win 8.
 thaks for sticking with me. good nite D
donnie - just copy the dmp file and attach the file her - use "attach file" at the bottom
of the input box
Mini082715-01.dmp

I tried but this is the best I can do.

Ran tests all nite. Not a hardware issue. It is corrupted files. i think
Mini082715-01.dmp
Now many of my apps are being closed on their own WITH pre notification.  Also looking for cds of programs I have not used in years.

I think I need to learn how to safely copy  Entire documents and settings, My Documents and desktop. It would be about 50-60 GB. I dont care about the programs.

Would a repair install work here?  Can I use any CD or does it have to be the original?

I need my text documents...all of them.  Due in court soon and need some editing.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
If this is the Windows XP box hard drive that is crashing, I'd suggest taking the drive out and placing it in a USB caddy and connecting it to the other machine and copying all of the files across that way.
Donnie  the dmp refers to cmuda.sys which is  C-Media WDM Audio Interface or C-Media Audio Driver
so i would uninstall the audio driver - and reinstall it  again, then test
ok thanks  john,  dbr, nobus:  You guys are great

 ERD commander found Cmuda.sys as the problem too. have been unable to find cmuda.sys to do that. where can I get to that in XP?
i will try a repair install
I will do hard drive suggestion as  last  resort If I can find my old usb caddy set up

been working on a new win 7 machine with issues if XP PC does not work out Another QUESTION....soonThanks again.
donnie -i posted it above ! its the audio driver
but if you don't post the pc model, or the mobo model  - i cannot help in more detail...sooorrrrryyyy
OK do I have some huge problems for my next question related to this.
This current XP  is a home built PC from 2006 1576 mb ddr ram 3200.  

CPU is old AMD 64 3000+, 2000mhz              chipset K8M800
MB is ASROCK .K8UVM000800 KM8Upgrade_VM800 MB   BIOS P 2.00 (never updated)
audio, video, lan are integrated but I have a AGP 6200 video card installed overriding the MB audio  CHIPSET from VIA.  BIOS is AMI 2005 Only Bios update I ever did I blew up the machinr so never did bios upgrade afterwards anymore.

ALL HARDWARE tests passed Extensive tasks, over the weekend, someeven  from YOUR suggested ancient CDs
I actually found that driver(cmuda.sys) but was afraid to uninsatll it on Saturday.
XP PC will not start  except in safe mode but I dont know what to do once there beyond what I already have done. I would love to do Hive repair but I forgot what to do once inside hives.  I Lost some greatstep by step  instructions you once gave me for that. On A win 8 laptop now and win7 bfand new components PC  will not let me log into certain several site including EExchange. Otherfwise it is a powerhouse. One of AMD's best ever.  Black edition, 9950 next question after  this one. 3 computers all 3 with different bad issuees.

thanks
run siw, or belarc, and see what model of mobo it lists  http://www.gtopala.com/
the one you list is not correct
I ALWAYS USE BELARC as 1st choice.  Below is copied/pasted from Belarc:

Board: K8Upgrade-VM800 1.00
Bus Clock: 200 megahertz
BIOS: American Megatrends Inc. P2.00 11/30/2005

I gave you too much info last post. sorry it confused you.

This mobo may be so old it is not listed anywhere. It has 2 separate CPU slots to upgrade to at the time,  newer "939" AMD cpu....that is why it is called "Upgrade, because  CPU could be swapped without buying a new MB.  It has laste 10 years so far without upgrading.

This pc is loaded with suggestions and tricks and apps and repair tools, blah, blah taught to me by a guy named Nobus

I uninstalled cmuda and reinstalled an hour ago. Seems to be running OK.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thx I will get to that tomorrow. been working on the problwems I have with pc that was to teplace this one.
oK set pc to run checkdisk /R at startup  its been running 12 hours. Normal? before that I finally got the regular BSOD that BEGAN this question.  Note: before the BSOD I ran EVERY SINGLE SUGGESTION I GOT from you Experts. The PC appears to be malware free.
 I hand copied last nites BSOD errors for your diagnosis. Please stay with me. I am down to one win 8.1 laptop which if it breaks, I dont even know how to boot into safe mode. so PLEASE stay with me. Hope the BSOD numbers asked for help the experts make a diagnosis.

BSOD
Stop:
0X  0000008E
OX C0000005
0X 080866440  <   (not sure. 2nd 8 digit maybe 5?) --POOR PENMANSHIP
0X B7B34AB8   <  (not sure. 2nd B digit maybe 3?)  
OX 00000000
With respect to your Windows 8 machine, start it, run MSCONIFG.EXE, go to the Boot tab and select Safe Boot. Exit and restart and it will come up in Safe Mode.
12 hours is too long imo - or points at least to too many errors/problems
Thanks for Win 8 hint

I believe it was because the PC was going to sleep periodically.

It was freezing a few minutes ago but I messed around with an ancient program called "Firetune"  Firefox was a problem besides dumprep all along as I suspected.

QUESTIONS
1.should I reset firefox? (Bookmarks are importanat for me to preserve)
2. Should I continue to terminate dumprep in Process explorer ?
these 2 things seem to have things back to normal FOR NOW
3. did the BSOD log help you?
4. Should I still update the old drivers from MB site?

Feels good to be working from old faithful XP machine. Hope it lasts
backup your bookmarks then :  https://support.mozilla.org/en-US/kb/export-firefox-bookmarks-to-backup-or-transfer
i want the dmp files - not such lists for BSOD
i would update the drivers, yes
PAGEDUMP  
thats the best I could doafter  another Bkuescreen 3 hours ago  I also lost Firefox its GONE.  I think I screwed up with Xmarks I had it syncing bookmarks in guadruplicate  my bkmrks tlbar was full of same folders  Only thing holding me back from transferring few GBs I need is ISScript.nsi that keeps trying to load a program i havnt used i  years  Machine is a mess but I need my txt docs . the rest Is old stuff anyway

Also did something wrong with networking 3 computers UNINTENTIONALL what a mess.

Thamks for helping
donnie - it seems you are really in a mess
is a fresh install not an option?  i would do that, at least you would be sure it is a clean OS
of course, backup everything - and maybe best make an image of the drive as 2nd backup - if needed

for getting your data - 2 options :
1- boot from any live cd, like the knoppix cd, or rescue kit from paragon, and copy what you need
2-hook the drive to a worrking pc , as 2nd drive, and copy over what is needed

here paragon rescue kit :  http://www.paragon-software.com/home/rk-express/
thanks I am going to use paragon. I would bet my life that google has removed my firefox. It is not eevn in the registry. GONE COMPLETEly. but PC seems to be working "fine" I quess til next BSOD. Google has been the problem all along  as I tried to sync things. Even my Gmail on the phone was inaccessible wrong passwrd which was NOT TRUE.  I am on XP machine using recent instal of chrome.  All other Browsers (opera, Tor,) have disappeared from this PC. Google should be sanctioned for that BS.

IMO
D.
I repeat ABOVE   Chrome installation took out my 4  other browseras within an hour of installing it. Not a trace of any of them. It even screwed up my gmail password on my  phone. Anyway backing up just the photos and .txts ,all i really need)freeze on me so I WANT to try a repair install 1st. If that dos not work,  then I am goint to reinstall XP with a slipstreamed SP4 disk. working on the slipped CD RIGHT NOW. A suggestion from dbr in my other question.  Havwe some studying to do
nite
D.
There is no Microsoft legitimate SP4 and never was. Reinstall XP and bring it to SP3 - that's all there is. I think you can still run Windows Updates to fill in the gaps.

This thread is OLD and you are not making progress. When nothing works, reinstall and move on.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Repair istall in place now but lats quest====Will this old hard ware take windows 7 on? It might be time to quit XP. . Thanks for all your patrience
it will run windows 7, but since there are no drivers for it, you may end up missing some
in anycase, it will NOT be fast at all
thanks Nobus.

I will try a slipstreamed SP3 old XP Black version CD  i never used before. still using an ancient volumn licence key i bought in 2003.  with  freshly added 400 updates slippedtreamed  onto the new dvd with WSUS ( my XP4? I guess) frmRyanVM.

Back ups went very smoothly 60GB in only 30 minutes. backed up 2 PCs that were bad. Thank you again old buddy
no problem; anytime :-)