TechSpot

XP Pro BSOD every 24 hours (+/- 12 hours)

By drsills
Aug 11, 2011
Post New Reply
  1. Thanks for your attention; I've got spirals for eyes trying to figure this out.

    My HP dc5750 small factor was quite reliable until April of this year, when it suddenly began to crash daily (give or take a few hours). The BSOD message was almost never the same, so I thought I'd treat it as a hardware problem. I swapped RAM, ran with just one or the other -- no appreciable difference.

    I've also tried deleting, defragging, and rebuilding the page file. No difference.

    I've updated the drivers and bios. Sigh.

    I'm attaching my (abbreviated) EVEREST report and I'm also attaching the last four minidumps.

    Thanks again!
     

    Attached Files:

  2. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Three of your errors are 0x000000C2: BAD_POOL_CALLER
    A kernel-mode process or driver incorrectly attempted to perform memory operations. Typically, a faulty driver or buggy software causes this.

    One error is 0x000000BE: ATTEMPTED_WRITE_TO_READONLY_MEMORY
    A driver attempted to write to read-only memory. Commonly occurs after installing a faulty device driver, system service, or firmware.

    Unfortunately nothing definitive was cited. Therefore please do the following and note any Yellow Triangles or Red X's and what they flag...

    Start > Run > EventVwr.msc > Okay
     
  3. drsills

    drsills TS Rookie Topic Starter

    Thankyouthankyouthankyou for your speedy reply; I'm very much obliged.
    You've asked that I report from Event Viewer
    Right before it crashed this morning (I'm attaching the minidump), this "red x error" was logged:
    The above looks like clinching evidence of something; is it significant that the following warning was logged yesterday?

    The same "warning" Event ID (1020) was logged in regard to ASP.NET 4.0.30319.0 three minutes earlier. Five days ago, this error was recorded:
    From the "system" tab of the Event Viewer I find a quantity (eleven identical entries within two minutes) of Event ID 7001 errors logged:
    Warnings in the System event viewer include Event 4226:
    ...and also event id 36, which looks like this:
    Another warning recorded among the system events is this one:
    As long as we're on the subject of errors and warnings, may I volunteer this information about my Device Manager window?

    When set to "show hidden devices," it shows a yellow exclamation icon next to "alps Pointing-device" under "Mice and other pointing devices -- probably because I'm using a USB mouse (hardwired) and nothing's plugged into the mouse socket.

    Also among the hidden devices are a number of entries of the form "MpKslxxxxxxxx," where the x's are an assortment of letters and numbers. I understand that this warning, filed under the M's in "Non-Plug and Play Drivers," is related to Microsoft Security Essentials.

    I hope the above is helpful. Thanks again for your expert attention!
     

    Attached Files:

  4. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Nothing definitive in the minidump. If you have them please give us five of the most recent minidumps - not including the one you just gave - in one Zip file and attach.
     
  5. drsills

    drsills TS Rookie Topic Starter

    Ok, here's the previous five minidumps zipped together.
     

    Attached Files:

  6. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    You are having a bunch of different error codes with no one thing definitively cited. This can be a sign of corrupted memory but until we test it we will not know.

    Have you ever run memtest before? Also, what firewall are you using?
     
  7. drsills

    drsills TS Rookie Topic Starter

    I did run memtest when this began months ago. Because a) memtest did not find any error, and because b) memtest can sometimes fail to detect problems in RAM, I tried running the system on either one of the two 512 mb dimms. Neither swapping dimms in slots, nor running with only one or the other of them seemed to make any difference in the frequency of BSODs.

    I'm using the stock Windows firewall.

    Again, thanks for your attention.
     
  8. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    First, memtest while known for sometimes showing no errors on bad RAM this is the exception and not the rule. How many Passes did you allow with memtest?

    Second, the Windows XP firewall is very poor.

    Third, the reason I asked about what firewall is because one of your drivers that came up was the Windows ipnat.sys and when using the Windows XP firewall it has been know to cause conflicts resulting in system crashes.
     
  9. drsills

    drsills TS Rookie Topic Starter

    Honestly, I don't remember. Couldn't hurt to let it go all of tonight, right?

    Ok. I'll scrap it. I've had Sygate Personal Firewall Pro (ver 5.6) for a while but hadn't bothered to install it; I've just done so.

    So, shall I run a night-long memtest and reconnoiter with you tomorrow?

    Thanks.
     
  10. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Yes, let it run throughout the night; it is the best way to run the test.

    An excellent place to read on various firewalls by user experiences is Wilders Security forums.
     
  11. drsills

    drsills TS Rookie Topic Starter

    After 14 hours and 30 iterations, memtest (ver. 4.1) found no errors. Dang!
    ...where the consensus seems to be that only a raving loony would want a firewall that hasn't been updated since 2005 (i.e., Sygate). Gotcha. I'm going to try the free personal firewall Comodo produces; it seems popular with the Wilders crowd.

    So, we've ruled out the RAM, I suppose. Today, I'll run this machine as per my usual custom but now with a non-Windows Firewall. Anything I ought to do in the meanwhile?
    Thanks!
     
  12. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    No, your course is a wise one. Try a non-Windows firewall and see if that brings stability. For XP I run Online Armor. They have a good free version but be prepared to have it learn your online habits. You'll get pop-ups asking you what you want to do. It can be annoying but then again it is doing what it wants.

    Glad the Wilders Security forums helped. It really is a great place for security softwares.

    Great work on your part. :grinthumb
     
  13. drsills

    drsills TS Rookie Topic Starter

    I'm checking in this morning to say my computer has been stable for one day, seventeen hours and forty-eight minutes. Not a record, yet, but unusually long relative to the performance it's delivered in the last four months.

    It's still too early to call, but right now the writing on the wall reads, "Windows' firewall is not compatible with the Windows operating system," which strikes me as just a little absurd, but there it is.

    If we make it to tomorrow morning without a crash, I'll be wishing a big, healthy trout onto Route44's hook and calling my computer "healed!"

    Here's hoping!
     
  14. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Look forward on reading that the system remains stable.
     
  15. drsills

    drsills TS Rookie Topic Starter

    I am happy to report that, after 2 days, 20 hours, 16 min and 1 sec, my machine remains stable. This is a record uptime for this machine, and marks the end (knock on wood) of its propensity to deliver random BSODs, each of which pointed to any one of a variety of drivers or system files as the "culprit," when none of them really were.

    I'll ask Route44 to correct me if I'm mistaken, but the real "culprit" appears to have been the stock Windows Firewall running on my XP Pro (sp3) system. I'm running Comodo's free Firewall now (along with Microsoft Security Essentials), and subsequently God has returned to His Heaven where all His angels are now singing.

    Kudos go to Route44 in any abundance you might care to imagine. Much obliged, and happy fishing!
     
  16. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Excellent! And, yes, it appears your issue confirms what I wrote in one of my previous posts: Third, the reason I asked about what firewall is because one of your drivers that came up was the Windows ipnat.sys and when using the Windows XP firewall it has been know to cause conflicts resulting in system crashes.

    Comodo is a good choice. Glad everything is working out for you. :)
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...