Physical dump memory, comp crash, format install windows not working

Boostedpenguin · #1 06-19-2005, 04:24 PM

Well Today When i go to start up my computer i get a blue screen saying physical memory dump at the start up, and it crashs after a second or two of showing the blue screen. I switch ram and it does the same thing. So i pop in my windows cd and try to format and reinstall. AT around 90% of copying the files to the harddrive it says it cannot copy soandso file, and keeps sayin that to each file after then proceeds to a blue screen..

I thought it might be the harddrive so i switch to another and tried to reinstall windows and still the same thing... I also tried to do this with another windows cd and still the same thing...

Whats going on here? Is the bios corrupted? What do i do..

YellowC4S · #2 06-19-2005, 04:32 PM

Start ruling things out. Is there another computer you could try the disk on? If it works then, you have eliminated the disk as a possible problem. Keep eliminating things it could be and that will lead you to what is causing the problem. Hope this helps.

kol_indian · #3 06-19-2005, 05:16 PM

There could be multiple rerasons the obivious ones are
corupt media(try the media in another system if possible)
RAM problem(try Memorytest86 available in free downloads in this site)

if these dont solve the problem then come and post again.
welcome to techspot

cpc2004 · #4 06-28-2005, 12:42 PM

Quote:

Originally Posted by Boostedpenguin

Well Today When i go to start up my computer i get a blue screen saying physical memory dump at the start up, and it crashs after a second or two of showing the blue screen. I switch ram and it does the same thing. So i pop in my windows cd and try to format and reinstall. AT around 90% of copying the files to the harddrive it says it cannot copy soandso file, and keeps sayin that to each file after then proceeds to a blue screen..

I thought it might be the harddrive so i switch to another and tried to reinstall windows and still the same thing... I also tried to do this with another windows cd and still the same thing...

Whats going on here? Is the bios corrupted? What do i do..

When Windows crashes with blue screen, it writes a system event 1001 and a minidump to the folder \windows\minidump. Check system event 1001 and it has the content of the blue screen

Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001. Copy the content and paste it back here

Your symptom is probably related to faulty ram. If you Zip 5 to 6 minidumps and attach the zip files here, I will study the dump and find out the culprit.

william_at_mi6 · #5 07-07-2005, 03:41 AM

I copy the content from the evenview:

The computer has rebooted from a bugcheck. The bugcheck was: 0x10000050 (0xff59334d, 0x00000000, 0x804d749a, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini070705-03.dmp.

And I wonder how to browse the dmp file in the MiniDump folder.

Thanks.

if convenient, send the result to william_zhang_ppt@hotmail.com

cpc2004 · #6 07-07-2005, 06:31 AM

The culprit is either Symantec Norton AV or TdiUpdate.

The timestamps of the SYMEVNET and NavEx15 are at different level. Maybe you screw up the Norton AV. Re-install Norton AV may resolve your problem.

NavEx15 NavEx15.Sys Wed Mar 16 04:51:30 2005 (42374AD2)
SYMEVENT SYMEVENT.SYS Wed Oct 20 05:18:08 2004 (41758490)
SAVRT SAVRT.SYS Wed Jan 26 13:38:55 2005 (41F72CEF)

********************************************************************** *********
* *
* Bugcheck Analysis *
* *
********************************************************************** *********

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fef83025, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 804d749a, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------
Could not read faulting driver name

READ_ADDRESS: fef83025

FAULTING_IP:
nt!strncpy+24
804d749a 8a06 mov al,[esi]

MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from f1e858bf to 804d749a

STACK_TEXT:
f1eac1f8 f1e858bf f1eac22c f1eac274 f1e855d4 nt!strncpy+0x24
WARNING: Stack unwind information not available. Following frames may be wrong.
f1eac240 804dad01 00000008 00000000 00000000 TdiUpdate+0x8bf
f1eac240 804d985f 00000008 00000000 00000000 nt!KiSystemService+0xc4
f1eac2e4 f2a17d8b 00000008 00000000 00000000 nt!ZwQueryDirectoryFile+0x11
f1eac320 f29f610b e2124378 00000000 00000000 SAVRT+0x3dd8b
e2465d7e 00000000 00000000 00000000 00000000 SAVRT+0x1c10b

FOLLOWUP_IP:
TdiUpdate+8bf
f1e858bf ?? ???

SYMBOL_STACK_INDEX: 1
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: TdiUpdate+8bf
MODULE_NAME: TdiUpdate
IMAGE_NAME: TdiUpdate.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 415bb126
STACK_COMMAND: kb
FAILURE_BUCKET_ID: 0x50_TdiUpdate+8bf
BUCKET_ID: 0x50_TdiUpdate+8bf

william_at_mi6 · #7 07-07-2005, 06:41 AM

But i dont use Norton anymore, and i didnt uninstall it, what shall i do then?

cpc2004 · #8 07-07-2005, 08:10 AM

The stack trace has the footprint savrt which belongs to Norton AV. De-install Norton AV, if you don't use Norton AV.

j_ganesh · #9 07-20-2005, 12:55 PM

Quote:

Originally Posted by cpc2004

When Windows crashes with blue screen, it writes a system event 1001 and a minidump to the folder \windows\minidump. Check system event 1001 and it has the content of the blue screen

Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001. Copy the content and paste it back here

Your symptom is probably related to faulty ram. If you Zip 5 to 6 minidumps and attach the zip files here, I will study the dump and find out the culprit.

Hi i have attached the memory dumps of my Toshiba laptops, and i get frequently some IE error also.

please help me

cpc2004 · #10 07-21-2005, 10:51 AM

I cannot unzip your zip file as it is corrupted. Would you attach a new zip file here.

j_ganesh · #11 07-22-2005, 01:08 PM

Hi have attached the file again!

cpc2004 · #12 07-23-2005, 12:29 AM

Finding
1) A minidump failed at Norton AV and your Norton AV is 3 years behind. Upgrade Norton AV to lateset version
2) Two minidumps failed with bugcheck 4E and it is the symptom of faulty CPU or RAM.

Mini072005-03.dmp 4E (00000099, 00000000, 00000000, 00000000) nt!MiEliminateWorkingSetEntry+0x264 -> nt!KeBugCheckEx+0x1b
Mini071905-06.dmp 4E (00000099, 0000aab3, 00000000, 00000000) nt!MiDecrementShareCount+0x53 -> nt!KeBugCheckEx+0x1b
Mini072205-02.dmp 8E (c0000005, 1002d040, 85e89148, 00000000) NAVEX15+5e9e1
Mini072205-03.dmp 50 (e009309f, 00000000, ee2ba994, 00000000) NAVAP+15994
NAVENG NAVENG.sys Wed Mar 16 04:35:44 2005 (42374720)
NAVEX15 NAVEX15.sys Wed Mar 16 04:51:30 2005 (42374AD2)
NAVAP NAVAP.sys Thu Jun 20 08:57:11 2002 (3D112867)
SYMEVENT SYMEVENT.SYS Tue Jul 16 12:04:17 2002 (3D339B41)

ScottBrown · #13 07-28-2005, 04:15 AM

I have had the same 3ghz HP 512mb ram, XP, 55gb hd laptop for 2.5 years and always used the same programs on it and never loaded new hardware. No problems with it...

Now all the sudden I am getting the bsod way too often. I reseated the ram and hd. Did the memory checks, no problems found. No viruses, or spyware found.

I went as far as reformatting my hd and reinstalling xp, then updating it.
And that's it. No other programs loaded. Guess what, still getting odd bsod. I get a bsod at the oddest times. Surfing regular msn websites, etc. And sometimes when doing nothing at all.

When I send out the error report to Microsoft, sometimes I get the reply that it's probably a bad driver and to check any new software or hardware that I've added. Only thing I've added was window updates.

If someone would please take some time to review my dmp files for me and post an answer here. It would be very grateful.

Thanks in advance for helping me and everyone else who might read your reply post.

cpc2004 · #14 07-28-2005, 10:07 AM

Hi ScottBrown,

One of your minidump crashed with Bugcheck code and nt status code c000001d. This is the symptom of the faulty mother board.

BugCheck 1000008E, {c000001d, 7, f80dfcf0, 0}

ScottBrown · #15 07-28-2005, 01:01 PM

cpc2004, thanks for the quick debug and reply post.

cpc2004 · #16 07-29-2005, 10:15 PM

Quote:

Originally Posted by j_ganesh

Hi have attached the file again!

Do you have any update of the problem? Your feedback will help us to resolve similar problem.

Apollo74 · #17 08-01-2005, 01:26 PM

I have a similar problem:
i can't start the laptop, neither in safe mode
error message:
STOP: c0000218 (error in file register)
The register can't load the following part (file):
\Systemroot\System32\Config\SOFTWARE
or the logbook file, or the replacing file of the part.
Is is damaged, not present, or not writable

Beginning start physical memorydump.
Dump Fysical memory is complete
Contact your system administrator

can somebody help me plz?

cpc2004 · #18 08-02-2005, 11:36 PM

Hi J Genesh,

Do you have any update of your problem? Your feedback will help us to resolve similar problem.

william_at_mi6 · #19 08-09-2005, 05:13 AM

I have a blue screen again this morning. And it restarts and error saying "Stuck Key". And I use the last known configuration and the machine went right.

I put the dmp file in the attachment. please check!!!!

cpc2004 · #20 08-09-2005, 11:56 AM

Hi William,
Your latest dump also crashes at TdiUodate.sys

BugCheck 10000050, {fee0491d, 0, 804da486, 0}
Probably caused by : TdiUpdate.sys ( TdiUpdate+8bf )

TdiUpdate maybe a virus. Refer the following url
http://www.bleepingcomputer.com/star...sys-10919.html