TechSpot

Seldszar · #1 08-22-2005

I get this blue screen and when I checked on my event manager I get this:
(system tab)
Source: DCOM
event: 10016

(application tab)
Source: EventSystem
event: 4609

I have a amd 3500+
A8N-E motherboard
X800Xl MSI
4x256mb DDR400 GEIL

What could resolve this problem ?

thx

cpc2004 · #2 08-23-2005

When Windows crashes with blue screen, it writes a system event 1001 or 1003 and a minidump to the folder \windows\minidump. Check system event 1001 and 1003 and it has the summary of the blue screen.

Event ID: 1001
Source: Save Dump
Description:
The computer has rebooted from a bugcheck.The bugcheck was : 0xc000000a (0xe1270188, 0x00000002, 0x00000000, 0x804032100).
Microsoft Windows..... A dump was saved in: .......

Event Source: System Error
Event Category: (102)
Event ID: 1003
Description:
Error code 1000007f, parameter1 0000000d, parameter2 00000000, parameter3 00000000, parameter4 00000000

Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001/1003. Copy the content and paste it back here

Zip 5 to 6 minidumps a zip file and attach the it at any webspace. Techspot has a upper limit of 100K per attachment. I will study the dump and find out the culprit.

Seldszar · #3 08-23-2005

(Application tab)
Le système d'événements de COM+ a détecté un code de renvoi erroné lors de son traitement interne. Le HRESULT est C0000005 à partir de la ligne 44 de d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Contactez les services du Support Technique Microsoft pour signaler cette erreur.

Pour plus d'informations, consultez le centre Aide et support à l'adresse
(system tab)
Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{BC866CF2-5486-41F7-B46B-9AA49CF3EBB1}
au SID AUTORITE NT\SERVICE LOCAL de l'utilisateur (S-1-5-19). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Pour plus d'informations, consultez le centre Aide et support à l'adresse

dump file: http://membres.lycos.fr/seldszar/Minidump.zip

cpc2004 · #4 08-23-2005

I don't know how to download your zip file because the web it is not English. This forum supports attachment, you can attach the zip files and each attachment cannot exceed 100KB.

Seldszar · #5 08-23-2005

sorry here are the minidump. Hope it is in english =/
5 in 2 zip.

Seldszar · #6 08-23-2005

I will try to translate the error in english of my first reply.

(application tab)
The system event of COM+ has detected a bad return code while its internal processing. HRESULT is C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Contact Microsoft tech support to report the error.

(system tab)
Default autorisation parameters of the computer don't allow local autorisation activation for COM server application with CLSID {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1} at SID AUTORITEE NT/LOCAL SERVICE of the user (S-1-5-19). This security autorisation can be changed with the administration tool components services.

edit: with 3 new dump ...

RandyJay419 · #7 08-28-2005

I hope this isn't inappropriate, but I'm having a similar issue to what Seldszar has/had. The whole Blue Screen - Windows STOP was a new experience for me.

I did review some of the errors in Event Viewer, and looked at what some of the bugcheck codes translate into, but it really didn't help me toward a soluion.

I also have several minidump files, and I was hoping that you might be able to review mine also, and possible advise me on a solution. Any insight you can provide would be wonderful!!

Thanks,
RandyJay419

Quote:

Originally Posted by cpc2004

When Windows crashes with blue screen, it writes a system event 1001 or 1003 and a minidump to the folder \windows\minidump. Check system event 1001 and 1003 and it has the summary of the blue screen.

Event ID: 1001
Source: Save Dump
Description:
The computer has rebooted from a bugcheck.The bugcheck was : 0xc000000a (0xe1270188, 0x00000002, 0x00000000, 0x804032100).
Microsoft Windows..... A dump was saved in: .......

Event Source: System Error
Event Category: (102)
Event ID: 1003
Description:
Error code 1000007f, parameter1 0000000d, parameter2 00000000, parameter3 00000000, parameter4 00000000

Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001/1003. Copy the content and paste it back here

Zip 5 to 6 minidumps a zip file and attach the it at any webspace. Techspot has a upper limit of 100K per attachment. I will study the dump and find out the culprit.

cpc2004 · #8 08-28-2005

Quote:

Originally Posted by Seldszar

I will try to translate the error in english of my first reply.

(application tab)
The system event of COM+ has detected a bad return code while its internal processing. HRESULT is C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Contact Microsoft tech support to report the error.

(system tab)
Default autorisation parameters of the computer don't allow local autorisation activation for COM server application with CLSID {BC866CF2-5486-41F7-B46B-9AA49CF3EBB1} at SID AUTORITEE NT/LOCAL SERVICE of the user (S-1-5-19). This security autorisation can be changed with the administration tool components services.

edit: with 3 new dump ...

nVidia Firewall is the culprit. Refer the following webpage (problem owner bookerman)
http://www.techspot.com/vb/topic16994-pg7.html&pp=20

Seldszar · #9 08-28-2005

thx I cleaned (more like killed it) the firewall and it is ok now.

Flaws · #10 09-02-2005

I have the same problem, and i hope you can fix them.

here are my minidumps:

cpc2004 · #11 09-02-2005

Hi Randyjay419,

I've investigate your minidumps and it is faulty RAM.

Mini082805-02.dmp 50 (ef619000, 00000000, 82bb996a, 00000000) tcpip!IPTransmit+2284
Mini082205-02.dmp D1 (f8953000, 00000002, 00000000, 81d121e1) nt!KiTrap0E+2ad -> nt!KeBugCheckEx+19
Mini082205-03.dmp D1 (8292362b, 00000002, 00000000, efa2a324) TDI+3aa -> tcpip+1324
Mini082205-04.dmp D1 (83000000, 00000002, 00000000, 82956896) nt!KiTrap0E+2ad -> nt!KeBugCheckEx+19
Mini082705-01.dmp D1 (447f90d6, 00000002, 00000001, 82022078) nt!KiTrap0E+2ad -> nt!KeBugCheckEx+19
Mini082805-03.dmp D1 (83000000, 00000002, 00000000, 829cd48d) nt!KiTrap0E+2ad -> nt!KeBugCheckEx+1

cpc2004

cpc2004 · #12 09-03-2005

Quote:

Originally Posted by Flaws

I have the same problem, and i hope you can fix them.

here are my minidumps:

Hi Flaws,

I've processed your minidumps and the culprit is vnetusba.sys. It is device driver of 11M WLAN USB. Visit the the hardware vendor website to find out the solution.

BugCheck 100000D1, {8, 2, 0, f839ec00}
Unable to load image vnetusba.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for vnetusba.sys
*** ERROR: Module load completed but symbols could not be loaded for vnetusba.sys
Probably caused by : vnetusba.sys ( vnetusba+2adf )

STACK_TEXT:
f8a91b80 f8a58adf 8176b728 f8f223f8 00000000 NDIS!ndisMSendCompleteX+0x71
WARNING: Stack unwind information not available. Following frames may be wrong.
f8a91ba4 804f13e2 00000000 81f65e70 fa493000 vnetusba+0x2adf
f8a91bd4 f7909ee5 81f65e70 81bbd7d0 823da028 nt!IopfCompleteRequest+0xa2
f8a91c3c f790ab57 8188d220 00000000 823da7d8 USBPORT!USBPORT_CompleteTransfer+0x373
f8a91c6c f790b754 026e6f44 823da0e0 823da0e0 USBPORT!USBPORT_DoneTransfer+0x137
f8a91ca4 f790cf6a 823da028 80545aac 823da230 USBPORT!USBPORT_FlushDoneTransferList+0x16c
f8a91cd0 f791afb0 823da028 80545aac 823da028 USBPORT!USBPORT_DpcWorker+0x224
f8a91d0c f791b128 823da028 00000001 8055b0a0 USBPORT!USBPORT_IsrDpcWorker+0x37e
f8a91d28 80544e5f 823da64c 6b755044 00000000 USBPORT!USBPORT_IsrDpc+0x166
f8a91d50 80544d44 00000000 0000000e f4d0c1d0 nt!KiRetireDpcList+0x61
f8a91d54 00000000 0000000e f4d0c1d0 00715814 nt!KiIdleLoop+0x28

FOLLOWUP_IP:
vnetusba+2adf
f8a58adf ?? ???

SYMBOL_STACK_INDEX: 1
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: vnetusba+2adf
MODULE_NAME: vnetusba
IMAGE_NAME: vnetusba.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 3aa922a0
STACK_COMMAND: kb
FAILURE_BUCKET_ID: 0xD1_vnetusba+2adf
BUCKET_ID: 0xD1_vnetusba+2adf

Frake · #13 09-04-2005

a friend of mine is also experience this problem

Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 9/3/2005
Time: 11:25:46 PM
User: N/A
Computer: HAL
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0001ff9b, 0x00000002, 0x00000000, 0x8051fde8). A dump was saved in: C:\WINDOWS\Minidump\Mini090305-05.dmp.

----------------------------------------------------

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/3/2005
Time: 11:26:10 PM
User: N/A
Computer: HAL
Description:
Error code 0000000a, parameter1 0001ff9b, parameter2 00000002, parameter3 00000000, parameter4 8051fde8.

Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 30 0000000
0020: 61 20 20 50 61 72 61 6d a Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 31 66 66 39 62 2c 20 01ff9b,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 38 30 35 31 00, 8051
0050: 66 64 65 38 fde8
----------------------------------------------

Thanks,
Frake

cpc2004 · #14 09-04-2005

Hi Frake,

Your XP is at SP1 and the patch level is at 2002 which is 3 years behind. Usually I will not read minidump with OS patch level 3 years behind. Although I believe that it is faulty ram but I can't confirm as your version is three years behind. Maybe some experts can help you.

Upgrade your XP to SP2. Repost if your XP still crashes at XP SP2.

frans · #15 09-04-2005

System-tab:

Error code 0x100000d1 (0xf7f68e9e, 0x00000002, 0x00000000, 0xf1c09b03).

********

Application-tab:

The system event of COM+ has detected a bad return code while its internal processing. HRESULT is C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Contact Microsoft tech support to report the error.

Attached the minidump

cpc2004 · #16 09-04-2005

Hi Frans,

The prelimary analyse is faulty device driver nvmcp.sys. You have no description and I want something like under what condition that your XP crashes. Does it crash when you play games or etc? Usually we need 5 to 6 minidumps to determine the root cause. Attach more minidumps here and the detail description of your problem.

frans · #17 09-04-2005

Hey cpc2004,

Sorry for not explaining! You've right, the problem is only when I'm playing games. (at the moment, I always happens when I'm using the hit-button (ALTGr) more than once in a row in GTA) The screen goes black and the computer restarts. This happens everytime.

Here comes more minidumps. Thanks for your help.

cpc2004 · #18 09-04-2005

Probably your windows is infected with virus. Attach the hijackthis log.

frans · #19 09-05-2005

Okay! thank you again for your help.

Here it comes.

Logfile of HijackThis v1.99.1
Scan saved at 05:19:10, on 2005-09-05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe
C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe
C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe
C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\gearsec.exe
C:\Program\Norton AntiVirus\navapsvc.exe
C:\Program\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\Program\Delade filer\Symantec Shared\ccApp.exe
C:\Program\Delade filer\Real\Update_OB\realsched.exe
C:\Program\FlashFXP\flashfxp.exe
C:\Program\Internet Explorer\IEXPLORE.EXE
C:\Program\WinRAR\WinRAR.exe
C:\Documents and Settings\frans\Skrivbord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program\Norton AntiVirus\NavShExt.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Program\FlashFXP\IEFlash.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\Program\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program\Delade filer\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.2_08\bin\npjpi142_08.dll
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\j2re1.4.2_08\bin\npjpi142_08.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1120350720578
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ms...downloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game12.zylomgames.com/activex...amesplayer.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program\Delade filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program\Delade filer\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto Protect-tjänst (navapsvc) - Symantec Corporation - C:\Program\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\Program\DELADE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe

Sk0t7 · #20 09-06-2005

Please help

Similar Topics
Topic	Replies	Forum
Driver_irql_not_less_or_equal	3	Device Drivers
Driver_irql_not_less_or_equal	2	Software Apps
Driver_irql_not_less_or_equal	6	Windows OS
Driver_irql_not_less_or_equal	11	Processors and Motherboards
Driver_IRQL_NOT_LESS_OR_EQUAL	0	Device Drivers

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

TechSpot

driver_irql_not_less_or_equal plz help

Follow TechSpot

Subscribe to our Newsletter