TechSpot

System error 102, Event ID 1003

By hfinlay10
Apr 4, 2009
  1. Hi,

    Am getting random restarts and system errors, as follows:

    Error code 000000000000009c,
    parameter1 0000000000000000,
    parameter2 fffffadf90881240,
    parameter3 00000000b2000040,
    parameter4 0000000000000800.

    Initially thought it was overheating (am not overclocking) but it happened again today with CPU (Q9300) temps at ~45.

    Tried to donwload dumpchk but it seems to be obsolete now (according to MS support).

    Running Xp x64, SP2, has been stable since building 12 months ago, then suddenyl getting errors. Ran memory checker for 4 hours with no errors.

    Have included four minidumps here - if anyone can work out what's going on I'd be hugely grateful.

    TIA

    I just noticed in event viewer that (usually) just before the 1003 error there's three of the following errors:

    Event ID 122 Source WMIxWDM

    Machine Check Event reported is a fatal Bus or Interconnect error.
    Memory Hierarchy Level: 3
    Participation: 3
    Request Type: 0
    Memory/IO: 3
    Address: 0

    Don't know if this is significant or not.
     
  2. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    All four minidumps are error code 0x0000009C: MACHINE_CHECK_EXCEPTION

    This is a hardware issue: an unrecoverable hardware error has occurred. The parameters have different meanings depending on what type of CPU you have but, while diagnostic, rarely lead to a clear solution. Most commonly it results from overheating, from failed hardware (RAM, CPU, hardware bus, power supply, etc.), or from pushing hardware beyond its capabilities (e.g., overclocking a CPU).

    1, Have you overclocked? If so, ease back on your timinings.

    2. Run a harddrive diagnostics. Your HD manufacturer will supply a free utility to do so.

    * Also, two of your minidumps only cited Windows OS drivers which are too general to help, but the other two specifically cited klif.sys as the probable cause which is a Kaspersky driver.
     
  3. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    Thanks for the response.

    1, Have you overclocked? If so, ease back on your timinings.

    Have done no overclocking.

    2. Run a harddrive diagnostics. Your HD manufacturer will supply a free utility to do so.

    Will try that.

    * Also, two of your minidumps only cited Windows OS drivers which are too general to help, but the other two specifically cited klif.sys as the probable cause which is a Kaspersky driver.

    Hmm, if the hdd diagnositc doesn't reveal anything, I may reinstal Kaspersky perhpas.

    Thanks.
     
  4. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Kaspersky is an excellent product but klif.sys is a driver that shows up here fairly regularly. There is a lot on the 'net concerning this driver as well.
     
  5. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    Latest minidump

    Hi,

    WD HD diagnostic showed up nothing.

    I've attached the latest minidump. Is klif.sys the likely culprit again?

    Thanks again.
     
  6. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

  7. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    Hi,

    Ran memtest for 4 hours with no errors, but didn't test the two sticks separately, so will do that when I get time.

    Thanks.
     
  8. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  9. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    Hi,

    AFAIK, This is a BOINC project for the UK Met office, not malware.
     
  10. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    That's the process that's causing the issue ;)
     
  11. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    OK, I'll kill that for the moment and see if it makes a difference.

    Thanks.
     
  12. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    Ongoing issues

    Hi,

    Killing the BOINC project seems to have rectified the 9c error, but today I had the following BSOD error:

    Error code 0000000000000050,
    parameter1 fffffa8006e110a4,
    parameter2 0000000000000000,
    parameter3 fffff97fff0f0c39,
    parameter4 0000000000000000.

    Any clues here?

    Thanks.
     
  13. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  14. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    OK, I will do the full malware/spyware clean and see if that helps.

    Thanks again.

    Hi,

    attached:

    malware log
    superantispyware log
    hijack this log
     
  15. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    lol :)

    Well at least we confirmed that you are riddled with Malware among other illegal things! :D (on Server 2003 I might add !)

    Anyway Kaspersky Anti-Virus 2009 hasn't really protected you along the way either

    Please do the following exactly: (if you happen to trust what I say is correct of course ;))

    Uninstall Kaspersky Anti-Virus 2009
    Restart
    Install Avira free AntiVirus
    Startup SuperAntispyware again => Update it => run another full scan => save the log
    Startup Malwarebytes again=> Update it => run another full scan => save the log
    Restart
    Run HijackThis => scan only => save the log

    Go to: Virus & Malware removal forum
    Create a New Thread
    Submit the logs

    --------------

    By the way, I'll just quote something from the UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions guide:
    So probably make sure any P2P programs are uninstalled before running the scans ;)
     
  16. hfinlay10

    hfinlay10 TS Rookie Topic Starter

    further

    Hi,

    OK,

    Will follow your instructions and see where it gets me.

    Thanks.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...