Hello. I'm new to the forums, although I've frequently browsed the threads here when I have technical issues or just want to read up on how something works.
Lately I've been experiencing semi-regular BSOD crashes on one of my computers. It's an extremely mediocre setup (Sempron 2400+, 512mb, etc) that I use solely for running some P2P clients, so I don't have to waste resources on my other computer or leave it on constantly. Anyway, back to the issue.
Maybe 4-5 times a day I've been getting a blue screen of death. It used to just reboot, until I changed the "automatically restart" option in the hopes of getting some more info to try to solve the issue. The blue screen mentions TCPIP.SYS and some memory addresses, but aside from that doesn't give much of a clue as to what's going on. I *think* the problem is related to BitComet, as it only seems to happen when that app is running, though I haven't extensively tested that theory (I'm going to tonight, I plan on leaving it on without BitComet running and see if it crashes).
At first, after Googling the "Your System has Recovered from a Serious Error" message that I initially was getting after an auto-reboot, I thought it might be bad RAM, so I ran MEMTEST and sure enough there were errors, so I replaced that right away. MEMTEST no longer finds errors in the RAM, but the problem persists, unchanged.
Then I got to thinking about what had changed recently that might be a factor, and thought that the problem might have begun when I switched from my motherboard's onboard Marvell LAN to the onboard NVidia LAN, so I switched back and disabled the NVidia LAN in the BIOS, but no luck there either - it just crashed again right before I came here and started writing this post.
I've created debug logs of my minidumps for two of the crashes - the most recent one after switching back to the Marvel LAN, and an earlier one with NVidia LAN. I'll attach both, if anyone thinks they can glean any useful information from them. One difference I noticed is that the latter debug log, the one for the crash that occurred with the Marvel LAN, has a few error messages about being unable to identify modules, while the earlier crash does not.
I know for sure that it's not malware or a virus, as I've had Kaspersky Internet Security Suite running real-time protection and I've done a full scan on the highest protection settings. I also should mention that I did a fresh format very recently, installed all Windows updates, etc. Oh and, the problem DID exist before the format, I was hoping it would get rid of it.
I haven't completely ruled out the NVidia LAN as the culprit, since even though it's disabled in the BIOS the drivers would still be installed, would they not? Right now that's my only lead, since the problem did seem to start when I switched to that onboard LAN. Aside from that there's nothing I can think of except a hardware failure of some sort, and I've already ruled out the RAM by replacing it with a brand new stick.
Sorry this post is so long, but I always prefer to err on the side of too much detail than not enough.
So, can anyone suggest anything, or gather any clues from the debug logs? I'd be eternally grateful for any help.
PS. Crash1.txt is the earlier crash, with the NVidia LAN, and Crash2.txt is the later crash with the Marvell LAN.
cpc2004
08-13-2007, 06:47 AM
Although the minidumps are crashed at tcpip and I believe the problem is related to hardware. The module list of the second debug report was corrupted and it is the symptom of hardware problem. Probably the ram, psu or overheat. Attach more debug reports here if you have. It can help us to confirm whether it is hardware or software problem.
I've attached zip files of all my minidumps since the format. The most recent one, 04 in the Aug12.zip file, is the one for which I posted a debug log that contained the errors you mentioned. Only that most recent minidump happened while running the Marvell onboard LAN, all the rest happened with the NVidia LAN.
Last night I tested a different theory than what I said initially - I ran BitComet all night, but by itself - the last few times that the crash has occurred I was running BitComet and eMule together. Anyway, NO crash last night with BitComet running alone. I'm going to leave it running that way for the rest of the day, and then try running it with just eMule tonight to see if that will crash it. If eMule alone doesn't crash it then that means it only happens when both apps are running.
The fact that the crash seems to be dependant on exactly what software I have running leads me to suspect that it isn't hardware... Am I wrong to think that? I truly hope it isn't hardware... As I said before, the RAM was JUST replaced, so I really doubt it's the cause. PSU, I could buy a new one if that turns out to be the problem, but I do have ASUS' PC Probe utility running and monitoring different aspects of the power supply, and it hasn't popped up any warnings. As for motherboard, I have a couple of spare Socket A motherboards that I could swap in to test that, but both would be a step backwards as far as features, etc. But my gut is telling me it's not hardware here; maybe it's just wishful thinking, but I find it really odd that the crash would be dependant on which of two very similar programs happens to be running at the time.
HorseloverFat
08-13-2007, 06:00 PM
Okay, I just came back to the computer to find that it HAS crashed again, with just BitComet running. It just took a LOT longer before it crashed, it seems. In my system tray, all that I had running was BitComet, NetLimiter, and PeerGuardian. So that rules out Kaspersky Internet Security Suite and eMule, but doesn't conclusively place the blame on BitComet yet. Tonight I still plan to run it without BitComet and see if it crashes still.
This is really frustrating, but I do sort of feel like I'm making progress, at least in ruling things out.
Here's the debug log and minidump for this latest crash.
cpc2004
08-13-2007, 11:00 PM
Your Windows maybe crashed with multiple culprits. It is software problem of Kaspersky Anti-Virus and ram problem. The reason why I suspected it is ram problem because some dumps have corrupted module list. Most of the crashes are at tcpip!TcpipBufferVirtualAddress+8. TCPIP.sys is very stable module and it is unlikely it is the software error of tcpip.
I find klif.sys is installed at your windows and your version has known software problem. You can search google with "44d328c7 bsod" and you will find a lot of hit. You had better de-install Kaspersky Anti-Virus or upgrade it to latest level.
Your version of Kaspersky AV
klif.sys Fri Aug 04 19:00:23 2006 (44D328C7)
BTW, some version of emule has conflict with ZoneAlarm. But your PC does not have ZA.
HorseloverFat
08-14-2007, 01:22 AM
Thanks again for your reply cpc2004.
Kaspersky Anti-Virus isn't running on my computer anymore, and the crash still happens. I didn't uninstall it though, I'll try that.
I posted this same topic on the MSFN.org forums and someone there says that he thinks it looks like the culprit is either the NVidia LAN driver or some interaction between it and BitComet, and recommended that I re-enable it, uninstall it, and then disable it at the BIOS level again, so I'm going to try that. He also posted a link to a thread on another forum about a similar problem to mine.
http://www.pcguide.com/vb/showthread.php?t=42196
What do you think? His thoughts on the matter jibe with my suspicions about the NVidia LAN and the fact that, as far as I can remember, the problem began around the same time that I switched to it from the Marvell LAN.
cpc2004
08-14-2007, 04:43 AM
The stack trace of the minidump does not have the footprint of the module that you mention. I believe that some device driver screws up memory and it causes TCPIP crashing. It maybe NVidia LAN driver but I cannot prove it.
Uninstall NetLimiter, this seems to the problem with most of these types of BSODS.
Check Here, shows how the problem was resolved.
hxxp://doubleudoubleudoublueu.techspot.com/vb/showthread.php?p=241684#post241684
I cant post links yet, so subtitute hxxp with http and doubleudoubleudoubleu with www