TechSpot

Help needed for a blue Screen

By dmemo2
Oct 28, 2008
  1. i keep getting the blue Screen Error at sarting my windows sometimes.

    the Error says

    Beginning dump of physical memory.
    Physical memory dump complete.........etc.

    i tried to analye the last dump file and got this result:

    --------------------------------------------------------------------------------------
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 806373fd, The address that the exception occurred at
    Arg3: b5b4e9cc, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

    FAULTING_IP:
    nt!RtlReserveChunkLZNT1+94
    806373fd 8b4304 mov eax,dword ptr [ebx+4]

    TRAP_FRAME: b5b4e9cc -- (.trap 0xffffffffb5b4e9cc)
    ErrCode = 00000000
    eax=00000000 ebx=00000000 ecx=8aaf4198 edx=00000300 esi=e1037008 edi=00000c00
    eip=806373fd esp=b5b4ea40 ebp=b5b4ea88 iopl=0 nv up ei pl zr na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
    nt!RtlReserveChunkLZNT1+0x94:
    806373fd 8b4304 mov eax,dword ptr [ebx+4] ds:0023:00000004=????????
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x8E

    PROCESS_NAME: services.exe

    LAST_CONTROL_TRANSFER: from 80638990 to 806373fd

    STACK_TEXT:
    b5b4ea88 80638990 e1037008 60000c00 e1037008 nt!RtlReserveChunkLZNT1+0x94
    b5b4eaa4 806392a3 e1037008 60000c00 e1037008 nt!SeAuditSystemTimeChange+0x168
    b5b4eaec 80639840 e1037008 0027bba8 003e7bd0 nt!SepAdtDeleteObjectAuditAlarm+0xf8
    b5b4eb2c 8063994d e1364000 00000400 00000002 nt!SeAuditProcessCreation+0x5d
    b5b4eb5c 8062604e e1037008 000001b8 e1037008 nt!SeAuditProcessCreation+0x16a
    b5b4eccc 80621946 00010002 b5b4ed64 b5b4ece8 nt!NtMapUserPhysicalPages+0x259
    b5b4ecdc 8054162c 00000004 b5b4ed64 8050047d nt!PpBiosResourcesToNtResources+0x7d
    b5b4ece8 8050047d badb0d00 b5b4ed60 00000000 nt!RtlIpv4StringToAddressExW+0xad
    b5b4ed64 7c90e4f4 badb0d00 00f1f874 b5b4ed98 nt!IopfCompleteRequest+0x71
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    b5b4ed68 badb0d00 00f1f874 b5b4ed98 b5b4edcc 0x7c90e4f4
    b5b4ed6c 00f1f874 b5b4ed98 b5b4edcc 00000000 0xbadb0d00
    b5b4ed70 b5b4ed98 b5b4edcc 00000000 00000000 0xf1f874
    b5b4ed74 b5b4edcc 00000000 00000000 00000000 0xb5b4ed98
    b5b4ed98 00000000 ffffff01 000b3980 77b72408 0xb5b4edcc


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!RtlReserveChunkLZNT1+94
    806373fd 8b4304 mov eax,dword ptr [ebx+4]

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!RtlReserveChunkLZNT1+94

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntoskrnl.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 48a3fbd9

    FAILURE_BUCKET_ID: 0x8E_nt!RtlReserveChunkLZNT1+94

    BUCKET_ID: 0x8E_nt!RtlReserveChunkLZNT1+94

    Followup: MachineOwner

    ---------------------------------------------------------------------------------------------------------

    can anybody help me to understand this output and to diagnose the Problem?
     
  2. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    0x8E errors are caused by hardware. What the hardware is we can't tell at this time. There is a sticky in the forum entitled "Before posting your minidumps..." by Juio.

    I suggest reading it and applying the troubleshooting steps to your situation. I would especially do the MemTest on your RAM.
     
  3. dmemo2

    dmemo2 TS Rookie Topic Starter

    Hi Route,

    at first thank you very much for your answer.

    i have read that thread and did every single step. It didnt seem to be an easy topic.

    the Memory test passed every time i did it...

    same to the Hard disk test and renew the Paging files.

    to be sure that i didnt make a mistake with the analysis my Dumpfile i attached the last 4 files.

    I will be very gratefull for every help.

    many thanks in advance.
     
  4. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    All four minidumps are 0x8E errors and as I previously posted these are caused by hardware. The driver cited is ntkrpamp.exe which is a core Windows driver and thus too general to be much help.

    How many Passes did you run MemTest for? it should be a minimum of 7.
     
  5. dmemo2

    dmemo2 TS Rookie Topic Starter

    i did it for 16 times.

    i did memory test with "Windows Memory Diagnostic" too. There is no Errors for more than 9 Passes.

    i see that a core Windows driver is the Problem. I agree you there is something wrong with the Hardware...and cos of that, the Format didnt help.

    I dont really know what to do next.
     
  6. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    it would be very helpful if you could list your system specs like harddrive, power supply (make and wattage), cpu, amount and type of RAM, video and sound cards, as well as your operating system.

    Also, include your security software, i.e., antivirus, firewall, etc. Let us know if you had a previous maker's security software but you uninstalled to install the current one(s).
     
  7. almcneil

    almcneil TS Guru Posts: 1,277

    Did you try booting into Safe Mode? If you can successfully, it give us an idea of which devices may be the cause.

    Best,
    -- Andy
     
  8. dmemo2

    dmemo2 TS Rookie Topic Starter

    it gets a blue screen with the following Error:

    Beginning dump of physical memory.
    Physical memory dump complete.............contact system administrator, etc.

    i dont get it all the time. it comes just sometimes. i can use my computer till 9 hours with no Problems. But sometimes i can start it for just 15 Minutes and then Error comes.

    The Computer can boot at normal situations. When i installed Programm like Visual Studio...then i got the Error so often and direkt after the boot always...so i had to uninstall it.

    I noticed that, to get the Erorr now i have just to boot...and wait 10 Minutes and then try to login to windows...in this situation the erorr will come.

    My Anti virus is: Avast 4.8 home...i have it since 1 year with no Problems. I didnt try to uninstall it or something like that.

    My Notebook is Acer Aspire Aspire 5685 WLMI...Actually i still have guarantee for the Hardware but cos of my college i cant stay for a whole month without a Notebook.

    The operating System is Windows xp

    more technical information about my Notebook is in the attached file.
     
  9. almcneil

    almcneil TS Guru Posts: 1,277

    Sounds like one of your "core" hardware devices is turning flacky. In most cases, when hardware flacks out, it just stops working. But there are some cases it flacks out sporadically and it's hell trying to isolate and determine what it is.

    Visual Studio is an enormous program (I used it when I was in high tech engineering!) If the problem is most frequent, then I'd check the memory, next to that the hard drive. Try running diagnostics on both.

    Best,
    -- Andy
     
  10. dmemo2

    dmemo2 TS Rookie Topic Starter

    i see it alike too.

    I have called the Hotline of Acer. They are useless. They told me to install Vista cos it is the Original OS. If i don't do that...and send them the Notebook, this will cost 50 Euro.

    i think to install Vista is a stupid Idea, isn't it?

    at the Weekend i will see if Vista is a solution.
     
  11. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Attach your minidumps in your next post. How to find your minidumps:

    My Computer > C Drive > Windows Folder > Minidump Folder > Minidump Files. We need these files and not the folder.

    See the Manage Attachment button when you reply and attach the files.
     
  12. dmemo2

    dmemo2 TS Rookie Topic Starter

    Here is the latest one attached.

    i attached the others up (in an older Reply).

    Not always will be such File created. I mean not everytime the computer freezes.
     
  13. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    It is another 0x8E error citing a core Windows driver. Again, these are almost always hardware issue but it can be caused by either a driver or sometimes a need for a BIOS upgrade.

    I have seen people experiencing the same issues you are when they buy a laptop with Vista but reformat and reinstall with XP.

    Vista is a lot more stable now. My daughter has a laptop with Vista without any problems for one and a half years.

    Yes, by all means see if reinstalling Vista is the solution and let us know. How much memory do you have? I wouldn't run less than 2 gigs because this OS loves memory.
     
  14. almcneil

    almcneil TS Guru Posts: 1,277

    If this is a software issues, then re-isntalling is guaranted too work. Also, you decide to go this route, use the image recovery program from Acer. All computer manufacturers now take a "factory image" of your hard drive just before shipping. It's a fallback in a case like this. You can't figure where in the Windows installation is messed up so you hit the "smart bomb" and retore from image. *POOF*, working computer. Make sure you backup all your files before doing it.

    Best,
    -- Andy
     
  15. dmemo2

    dmemo2 TS Rookie Topic Starter

    Hi dear friends,

    i did the Format. It seems that the Computer works. I think i have to use it for at least one Week before saying the problem is fixed.

    i will let you know ...

    i want to thank you very much for your Help.

    many thanks.;)
     
  16. almcneil

    almcneil TS Guru Posts: 1,277

    If you used the factory image, then your problem is resolved. Your whole installation is now exactly as it was when you received your computer. Whatever software issue was erased by the new image.

    -- Andy
     
  17. King Ping

    King Ping TS Rookie

    Have he recently added any new hardware?
     
  18. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Thanks for getting back to us. So when you say format, you reinstalled Vista, correct?
     
  19. dmemo2

    dmemo2 TS Rookie Topic Starter

    correct, with the factory cd.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...