also @ TechSpot: HDD supply to recover by Q3 2012, prices to remain high
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Sign up or Login to participate.

Go Back   TechSpot OpenBoards > Tech Support > Windows BSOD, Freezing, Restarting Help

Collaborate in the cloud with Office, Exchange, SharePoint, and Lync

System error 102, Event ID 1003

Thread Tools Search this Thread
  #1  
Old 04-04-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
Hi,

Am getting random restarts and system errors, as follows:

Error code 000000000000009c,
parameter1 0000000000000000,
parameter2 fffffadf90881240,
parameter3 00000000b2000040,
parameter4 0000000000000800.

Initially thought it was overheating (am not overclocking) but it happened again today with CPU (Q9300) temps at ~45.

Tried to donwload dumpchk but it seems to be obsolete now (according to MS support).

Running Xp x64, SP2, has been stable since building 12 months ago, then suddenyl getting errors. Ran memory checker for 4 hours with no errors.

Have included four minidumps here - if anyone can work out what's going on I'd be hugely grateful.

TIA

I just noticed in event viewer that (usually) just before the 1003 error there's three of the following errors:

Event ID 122 Source WMIxWDM

Machine Check Event reported is a fatal Bus or Interconnect error.
Memory Hierarchy Level: 3
Participation: 3
Request Type: 0
Memory/IO: 3
Address: 0

Don't know if this is significant or not.
Attached Files
File Type: zip Mini040209-01.zip (75.2 KB, 2 views)

Last edited by kimsland; 04-04-2009 at 08:26 AM.. Reason: merged recent posts
  #2  
Old 04-04-2009
Route44's Avatar
TechSpot Ambassador
 
Location: The Socialist Republic of New Jersey
Member since: Sep 2006, 11,805 posts
All four minidumps are error code 0x0000009C: MACHINE_CHECK_EXCEPTION

This is a hardware issue: an unrecoverable hardware error has occurred. The parameters have different meanings depending on what type of CPU you have but, while diagnostic, rarely lead to a clear solution. Most commonly it results from overheating, from failed hardware (RAM, CPU, hardware bus, power supply, etc.), or from pushing hardware beyond its capabilities (e.g., overclocking a CPU).

1, Have you overclocked? If so, ease back on your timinings.

2. Run a harddrive diagnostics. Your HD manufacturer will supply a free utility to do so.

* Also, two of your minidumps only cited Windows OS drivers which are too general to help, but the other two specifically cited klif.sys as the probable cause which is a Kaspersky driver.
  #3  
Old 04-04-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
Thanks for the response.

1, Have you overclocked? If so, ease back on your timinings.

Have done no overclocking.

2. Run a harddrive diagnostics. Your HD manufacturer will supply a free utility to do so.

Will try that.

* Also, two of your minidumps only cited Windows OS drivers which are too general to help, but the other two specifically cited klif.sys as the probable cause which is a Kaspersky driver.

Hmm, if the hdd diagnositc doesn't reveal anything, I may reinstal Kaspersky perhpas.

Thanks.
  #4  
Old 04-04-2009
Route44's Avatar
TechSpot Ambassador
 
Location: The Socialist Republic of New Jersey
Member since: Sep 2006, 11,805 posts
Kaspersky is an excellent product but klif.sys is a driver that shows up here fairly regularly. There is a lot on the 'net concerning this driver as well.
  #5  
Old 04-05-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
Latest minidump

Hi,

WD HD diagnostic showed up nothing.

I've attached the latest minidump. Is klif.sys the likely culprit again?

Thanks again.
Attached Files
File Type: dmp Mini040509-01.dmp (152.0 KB, 3 views)
  #6  
Old 04-05-2009
Route44's Avatar
TechSpot Ambassador
 
Location: The Socialist Republic of New Jersey
Member since: Sep 2006, 11,805 posts
Another 0x9C but it only gives a Windows OS driver which is too genral to help.

Run memtest on your RAM: http://www.techspot.com/vb/topic62524.html
  #7  
Old 04-05-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
Hi,

Ran memtest for 4 hours with no errors, but didn't test the two sticks separately, so will do that when I get time.

Thanks.
  #8  
Old 04-05-2009
Ex-TechSpotter
 
Member since: Dec 2007, 18,354 posts
You have Malware installed
Stated file is: hadam3p_um_6.06 also known as hadam3p_um_6.06_windows_intelx86.exe

Have a look at:

UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions
  #9  
Old 04-05-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
Hi,

AFAIK, This is a BOINC project for the UK Met office, not malware.
  #10  
Old 04-05-2009
Ex-TechSpotter
 
Member since: Dec 2007, 18,354 posts
That's the process that's causing the issue
  #11  
Old 04-05-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
OK, I'll kill that for the moment and see if it makes a difference.

Thanks.
  #12  
Old 04-07-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
Ongoing issues

Hi,

Killing the BOINC project seems to have rectified the 9c error, but today I had the following BSOD error:

Error code 0000000000000050,
parameter1 fffffa8006e110a4,
parameter2 0000000000000000,
parameter3 fffff97fff0f0c39,
parameter4 0000000000000000.

Any clues here?

Thanks.
Attached Files
File Type: dmp Mini040809-01.dmp (152.0 KB, 3 views)
  #13  
Old 04-07-2009
Ex-TechSpotter
 
Member since: Dec 2007, 18,354 posts
Inside the new Minidump:
Quote:
BugCheck 50, {fffffa8006e110a4, 0, fffff97fff0f0c39, 0}
PROCESS_NAME: WINWORD.EXE
Probably caused by : win32k.sys
Still believe this may be best, or re-install Office (either way is good )
Quote:
Originally Posted by kimsland View Post
  #14  
Old 04-08-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
OK, I will do the full malware/spyware clean and see if that helps.

Thanks again.

Hi,

attached:

malware log
superantispyware log
hijack this log
Attached Files
File Type: txt mbam-log-2009-04-08 (13-12-48).txt (7.1 KB, 3 views)
File Type: log hijackthis.log (10.3 KB, 3 views)
File Type: log SUPERAntiSpyware Scan Log - 04-08-2009 - 13-44-11.log (4.1 KB, 3 views)

Last edited by kimsland; 04-08-2009 at 01:37 AM.. Reason: merged 2 posts. instead of replying to yourself please use v v EDIT v v
  #15  
Old 04-08-2009
Ex-TechSpotter
 
Member since: Dec 2007, 18,354 posts
lol

Well at least we confirmed that you are riddled with Malware among other illegal things! (on Server 2003 I might add !)

Anyway Kaspersky Anti-Virus 2009 hasn't really protected you along the way either

Please do the following exactly: (if you happen to trust what I say is correct of course )

Uninstall Kaspersky Anti-Virus 2009
Restart
Install Avira free AntiVirus
Startup SuperAntispyware again => Update it => run another full scan => save the log
Startup Malwarebytes again=> Update it => run another full scan => save the log
Restart
Run HijackThis => scan only => save the log

Go to: Virus & Malware removal forum
Create a New Thread
Submit the logs

--------------

By the way, I'll just quote something from the UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions guide:
Quote:
Originally Posted by Julio View Post
[COLOR="Blue"]Uninstall File Sharing/P2P Programs[/COLOR]

During the cleaning process all File Sharing Programs should be uninstalled
This is to avoid any possible reinfection of any malwares through file sharing

We reserve the right to withdraw our support:
  • If such programs are found in your logs
  • Should you not agree to their removal.
As they are normally set to bypass your Firewall and Anti-Virus software
Filesharing/P2P Programs serves as a constant threat to your computer
So probably make sure any P2P programs are uninstalled before running the scans
  #16  
Old 04-15-2009
Newcomer, in training
 
Member since: Apr 2009, 11 posts
further

Hi,

OK,

Will follow your instructions and see where it gets me.

Thanks.