Analysis of BSOD screen?

Status
Not open for further replies.
You have a lot of spysweepers... go ahead and stop the ones you want and see how your system stablizies
 
Hi Tmagic,

Thats what I did--everything in that .jpg without a checkmark next to it is fully disabled---Everything is stopped except for the one and only virus scanner I have ever run----tried to resend and can't--you'll need to look at attachment in my last post
Am off to work, back approx 1145PM PST, will advise developments when I get home
 
Hi Tmagic,

Just got home from work and have another blue screen, its 1230AM Sat PST.

I had the Stanford Folding At Home program running in the background; am now going to run without it overnight and see what happens. All other stuff is still disabled per my last post.

I am attaching screen shots of my system summary done by PC Wizard---had done so several posts ago, but this way you have them right here and can see all the data re what I have for my chipset and video card.

I do have an ATI graphics card with an nVidia chipset motherboard.

I did line by line updates of every item in Device Manager at New years when it was first suggested that the BSOD's pointed to a driver problem. I will do an ATI reinstall tomorrow ( am too tired to concentrate on that right now).

After you review the data in the attached screenshots, I also will redo any other drivers you advise me to.

Here is the data from the latest BSOD---its VERY similar to that generated by the one before.

0x0000008E ( 0xC00000005, 0x1F800B5D, 0xF65A0A38, 0x00000000 )

Debug log is also attached.

Will await your further instructions
 
If this were my problem I would disable/uninstall anything I don't *need* - as opposed to *want*, and, for those needed would, as far as possible, use the Microsoft apps. They may not be as sophisticated as some of the commercials but are very unlikely to conflict with the system.

For example, why do you use a start-up manager when you have msconfig, or a commercial backup programme when there is one already aboard? Also, go to system32, find verifier.exe, double click and choose the option which allows you to see which drivers are unverified; list them and Google each individually to decide whether you really*need* those programmes. If not, then uninstall. But *don't* run verifier until you've done the necessary reading.

Be ruthless about it. You may not find what the fault is, but you will know what it isn't, which is progress, of a sort.

I would also try experimentally disabling any non-essential hardware, if any, and rolling back drivers which even *might* be suspect.

But don't do it all at once or you'll be no wiser.<BG>
 
Hi Hatrick,

I've been disabling things out of startup per your earlier advice.

Last night after coming home to a blue screen, I stopped running the Stanford Folding At Home protein folding research program which I have had running in the background 24/7. Its too early to call yet, but based on everything I've disabled and the order I did things in, if the BSODs stop and stay stopped, then the Stanford thing is most likely the culprit. Only time will tell, and I will continue to advise of any and all developments.

The system made it through the night with no Event Viewer errors or BSOD---per your advice I am now holding off doing more till I see whether things have stabilized.
I have that startup mgr just because I like the interface/convenience ; the backup program because of its options that aren't available w/ the MS program.

Thank you so much for your continuing time, support and advice! Your input is most informative and helpful. Its 11Am Sat now, will probably be away from system till about 10PM, and will advise developments at that time.

What does <BG> mean?
 
Hi Hatrick and Tmagic,

Its now 11 PM Sat PST .

I just got home from work and am happy to report that since rebooting from the last BSOD at 1230AM Sat and then not running the Stanford University Folding At Home project , the system has not done a BSOD and there are no error messages in Event Viewer.

Other than not running the Folding at Home program since rebooting from the last BSOD, I have made no other changes to the system since disabling things per earlier posts

I will post again tomorrow AM re developments overnight and look forward to further comments you feel relevant based on this report.

Thank you both so much again for sticking with me through this odyssey!
 
Hi Hatrick and Tmagic,

Just received the following comment from another forum in regards to the attached debug log from my last BSOD

"Again the dump indicates hardware. The processes at crashing are Windows processes which also leads one away from driver issues.

The hardware most suspect to my eye would be your graphics card.

Do you happen to have another that you could try?

I also notice that your card claims to only support DirectX 8.1 whereas you have installed the default SP2 DirectX 9.0c. I am not sure if this is a critical conflict or just a curiosity.

You might also try turning off Hardware Acceleration on your card. "


I don't have another card to try, but have turned off Hardware Acceleration per the above comments.

Will post again Sun AM w/ latest developments
 
Hi Hatrick and Tmagic,

Its 240 PM Sun. PST and no BSOD or Event Viewer error messages since my last post.

Will be back from work about 1030PM and advise developments-----hopefully things continue w/ no problems!

Best, Peter
 
So far so good Peter...

I used to run Stanfords Folding at Home graphical interface, and when it was running I couldn't play any games without having them reduce to the taskbar immediately when started. On a completely different system F@H Graphical interface did the same thing
 
Hi Tmagic and Hatrick,

Its 1030PM Sun. PST

I just came home from work, there was no BSOD.

I sat down at the computer and as my first action clicked on my Firefox Preloader icon in the system tray.

That action triggered a BSOD w/ the following data:

0x0000007F ( 0x0000000D, 0x00000000, 0x00000000, 0x00000000 )

No other information about the crash was shown on the BSOD.

I have had Firefox Preloader installed for about a month.
The issue of spontaneous rebooting, and then BSOD generation after turning off automatic restart via the "advanced" tab has been going on for at least 6 months. Accordingly, I don't think the program itself was the cause of the BSOD

This is the first time I recall having ever clicked on a system tray icon, or for that matter any icon anywhere in the computer at any time, and generated a BSOD.

The generated dump data is attached.

Please advise your thoughts and instructions on how to procede.
 
Hi TMagic and Hatrick

After my last post, I did some searching and found the following info:

STOP: 0x0000007F (0x0000000D,0x00000000,0x00000000,0x0000000)

Stop 0x0000007F or UNEXPECTED_KERNEL_MODE_TRAP

The Stop 0x7F message indicates that one of three types of problems occurred in kernel-mode:

* A condition that the kernel is not allowed to have or intercept (also known as a bound trap).
* Software problems.
* Hardware failures.

Interpreting the Message

This Stop message has four parameters:

1. Processor exception code.
2. This value is 0x00000000 (zero).
3. This value is 0x00000000 (zero).
4. This value is 0x00000000 (zero).
The first parameter is the most important and can have several different values, indicating different causes of this error. You can find all conditions that cause a Stop 0x7F in any x86 microprocessor reference manual because they are specific to the x86 platform. Here are some of the most common exception codes:

* 0x00000000, or a divide by zero error, occurs when a divide (DIV) instruction is run and the divisor is 0. Memory corruption, other hardware failures, or software problems can cause this message.
* 0x00000004, or Overflow, occurs when the processor carries out a call to an interrupt handler when the overflow (OF) flag is set.
* 0x00000005, or Bounds Check Fault, indicates that the processor, while carrying out a BOUND instruction, found that the operand exceeded the specified limits. BOUND instructions are used to ensure that a signed array index is within a certain range.
* 0x00000006, or Invalid Opcode, is generated when the processor attempts to run an invalid instruction. This typically occurs when the instruction pointer is corrupted due to a hardware memory problem and is pointing to a wrong location.
* 0x00000008, or Double Fault, indicates an exception while trying to call the handler for a prior exception. Normally, two exceptions can be handled serially, but there are certain exceptions (almost always caused by hardware problems) that cause the processor to signal a double fault.

Less common codes include:

* 0x00000001: A system-debugger call.
* 0x00000003: A debugger breakpoint.
* 0x0000000A: A corrupted Task State Segment.
* 0x0000000B: An access to a memory segment that was not present.
* 0x0000000C:An access to memory beyond the limits of a stack.
* 0x0000000D: An exception not covered by some other exception; a protection fault that pertains to access violations for applications.




Based on the info in the last 2 lines above ( * 0x0000000D: An exception not covered by some other exception; a protection fault that pertains to access violations for applications ), could this possibly be a one time freak event?

My specific reason for asking this question is that since installing Firefox Preloader (about a month ago per my last post) as a startup tray item, I have made no adjustments to the program settings and have clicked on that icon 30-40 times a day with absolutely no trouble till it generated the BSOD.

I am most interested in your thoughts on this matter and want to also restate that I have made no changes of any sort to anything in the system hardware or software since my last action around midnight Friday ( that was stopping the running of the Stanford Folding At Home program ). I did update ( per the auto-prompt from the program re an available definition update ) my anti-virus, but that was AFTER rebooting from the BSOD.

Will, per my last post, wait to hear from you before doing anything
 
Hi TMagic and Hatrick,

Based on the information about ( 0x0000000D: An exception not covered by some other exception; a protection fault that pertains to access violations for applications. ) in my last post, I wonder if the following scenario could possibly have contributed to/outright caused the latest BSOD?

I rebooted twice from the BSOD and both times, although disabled from the startup group, an alert from SpySweeper popped up saying that the program "...had encountered a problem in the previous session and had to close."

I immediately checked the programs settings in its main screen, found that "start on Windows startup" was checked, and unchecked it.

I then rebooted again, and that pop-up message was gone.

Wait to hear from you
 
I agree. The process of reinstalling XP and restoring all the apps is tedious and time consuming, but probably less so than continually tweaking, without a favourable result.

May I suggest that you get some drive imaging software as well. It's a godsend in circumstances like these.

Best wishes.
 
Hi Hatrick and Tmagic,

Its 845am Mon PST and the system has run clean overnight w/ no BSOD or error messages in Event Viewer. When I clicked on the Firefox Preloader icon, also no problems.

I am horrified at the thought of having to format and reinstall--absolutely not the news I wanted to hear considering the time involvement.

I understand and agree with the logic, but before I bite that bullet I'm going to wait for a couple of days to pass and see if I get BSOD'd again --- it seems like things have been slowly improving over the last several days as I've implemented all the suggestions, and whether I format/reinstall now or in a few days isn't going to make a difference as re the work involved. I'm just not quite ready to give up........

Thank you all again for your time and help. I will post again tomorrow AM if no problems before, or if theres another BSOD event before then
 
Hi TMagic, Hatrick and PowerCycle,

Per my last post I was going to wait till Tues AM, but.........

Its 940PM Mon. PST and I'm happy to report that the system has run utterly flawlessly since my rebooting from the last BSOD and taking the subsequent action re SpySweeper per my second post prior to this one ( 1/14 09:41 AM )

In Event Viewer, other than for " information" events mostly generated at a reboot, I have noticed nothing other than a single warning each for Events 8021 and 8022, and 1 error message for Event 8032. All of them mentioned "....failure to retrieve the backup browser list from the master browser on ...." the other computer on the network.

I have seen these messages before and can definitively state that none of them was generated anywhere near the time of occurrence of any of the BSODs ---- that was the first thing I went looking for after rebooting from all of the BSOD events.

I will post tomorrrow AM as to how the system ran overnight.

Would appreciate any/all of you letting me know you're still seeing my posts.

Thanks again to all for your time and input--its nice to know theres still people like you out there---members of , sadly, a seemingly increasingly scarce group of human beings willing to freely pass on to others the benefits of their knowledge and experience. Hopefully I will be able to reciprocate at some point in the future.
 
Congratulations. If it stays clean, give some thought to a disk imaging programme. You will wonder how you lived without it. As long as you can get into Windows, any errors, BDOD's, etc can be fixed with a few mouse clicks.

All the best.
 
Hi Hatrick,

Its now 8am Tue. PST and the system has run all night w/ no problem. Event Viewer showed nothing to be concerned over

I use Norton Ghost; what are your opinions of it as to being a good imaging program? Any alternative recommendations/suggestions?

Will post again tonight as to how things have gone for the day.

Wait to hear from you. Best, Peter
 
Hello Peter,

I use Drive Image, but they all work! Make an image now or, if you have to reinstall, then, and before every major, or suspect change. You'll never have two consecutive BSOD's.

I really ought to practice what I preach. <BG>
 
Yes Hattrick,
but creating an image from a "suspect" system is risky isn't it? Transferring the unstable OS, to another drive... Yikes!
 
Hi Hatrick and Tmagic,

My ghosts are made to D:\ My Documents which is a secondary IDE slave, and then at 430 AM daily, Smart Backup ( a wonderful utility which I recommend highly), backs that whole folder up to an external USB HD. ( G: )

All 3 HD's are 80gig 8MB cache Western Digital caviar 7200 rpm

I have 2 earlier ghosts on D: and G: now ( both of course flawed per the stuff this whole thread has been about), but have developed a little strategy to help cope with that. After making a ghost, I have always created a little Notepad file on the desktop called "changes since last ghost" and in it record every change I make in terms of things that should be kept track of so as to be able to differentiate between ghosts. I am attaching the current one so you can see what I'm talking about.

I have now had no issues since the last BSOD about 1030PM Sun. PST ( about 36 hrs ) and am waiting till at least 96 hrs have passed before making a new ghost. Meanwhile, as just mentioned, all significant changes are noted in the Notepad file, which then is transferred to the folder where the newest ghost will reside when its made.

Would like to know what you guys think of this strategy?

Wait to hear from you and will post again tonight with developments.

bBest, Peter
 
Peter,
your strategy seems solid. I have 5 separate hard drives in my system, and Norton 360 backs up my C drive changes daily... automatically to my external USB 3.5 100GB Seagate notebook drive. This is just for test purposes at this time. I will upgrade to Vista soon. I keep a copy of my documents, application install files and email on a 60GB internal drive. I wipe my C drive every 6 months or so... I can completely restore my system from an FDISK and Format in less than 1 hour. I have legitimate copies of all MS's operating systems from Windows 95C through Windows XP Pro, SP2
 
Tmagic650 said:
Yes Hattrick,
but creating an image from a "suspect" system is risky isn't it? Transferring the unstable OS, to another drive... Yikes!

Agreed, but an 'almost right' system is better than he had. It would allow him to go on tweaking the existing to perfection or damnation, while still having a half-way house to fall back on.
 
Hi Tmagic and Hatrick,

Thanks for getting back to me w/ your thoughts per my last post.
Tmagic, per your post of Yesterday 07:29 PM WOW!--what a honker kick-*** system! ------- especially if you're not a "Gamer", which I am not at all. There isn't a single game on my system.

Thank you in particular for validating my strategy!--when it comes time to try and re-activate at least some of the things I've deleted from startup, and experiment w/ Hardware Acceleration settings other than the "none" its at now, I will run my thoughts/plan of action by you for evaluation and comment before doing anything. For now I'm making no changes of any sort until 3 or 4 days more go by w/ no BSOD or relevant error messages in Event Viewer

I make ghosts either on a bi-weekly basis, or if I've made a significant change in my software configuration ( i.e. like a program addition/deletion/major update ).
I of course would immediately make a ghost also if I made a hardware change of any sort, but haven't made any changes in hardware since adding my Plextor 708A DVD burner over a year ago.

I just got in, its 530PM PST and the system is running fine--no BSOD generation, no error messages in Event Viewer.

I will post again w/ developments before going to bed tonight
 
Status
Not open for further replies.
Back