Blue screens

[qim]

I have had a number of blue screens. The first three restarted the computer so fast that I could not read what they said. Today, I had two, but these time they stayed on while dumping physical memory to disk.

The first was Page_Fault:in_Nonpaged_area; the second IRQL_Not_Less or Equal.

The first had also an event 1003, category 102. I am not sure about the second as I am writing from another computer.

The first two blue screens came when I was updating MS, which led me to suspect that there was a virus, but after various scans the system appears to be clean. The last three when I was surfing, the last when I was writing this message to you.

I have XP Home SP3, 1 Gb of RAM on a Toshiba Satellite laptop. I use Avast AV and Outpost Firewall, free versions.
Any help much appreciated.

qim

 

[Mark56]

If you can keep it going for long enough try to post the minidump files, follow these instructions.

First locate your minidump files, they are usually found by clicking on your C: drive, in windows explorer, then click on Windows to view the contents. If your operating system is installed under a different drive letter then look there. They should be stored under a file called minidump.The files will have a .dmp extension.

Zip up at least 6 of the most recent files into one zip folder and save on your desktop (if there are less then just zip up what you have).

Below the reply box click on Go Advanced. Then scroll down until you see a button, Manage Attachments. Click on that and a popup-window opens.

Click on the Browse button, find the zip folder you made earlier and doubleclick on it.

Now click on the Upload button in the popup. When done, click on the Close this window button.

Enter your message-text, then click on Submit Message.

Will it boot into safe mode without crashing?

Is that memory split between two sticks. If it is take one out and see if things improve and then swap them if it doesn't.

If you only have one Ram stick then follow this guide.

http://www.memtest.org/

You need to scroll down the page until you see the three blue screenshots. Just below is the list of downloads for Memtest86+ V4.20. Click on Download - Pre-Compiled Bootable ISO (.zip)and save to your desktop, When the download is complete right click the file and select Extract Here and burn the image to a CD. In windows 7 right click the extracted file, select Open With, then select Windows Disc Image Burning Tool then follow the prompts. For all other versions of windows (if you do not have an ISO burner) download this free software. http://www.isoimageburner.com/

Boot the PC into the Bios setup and set the CD/DVD drive to 1st in the boot sequence. Insert the disk in the drive then reboot and the disc will load into dos. Leave the test to run through at least 8 cycles.

The memtest will not be 100% accurate but should easily detect any major faults.

 

[qim]

Hello Mark

Thanks for your interest and help.

I am attaching the minidumps. The computer has not crashed since yesterday but I have not used it much.

I tried to do the memtest but cannot understand it as the download gives me a RecordNow programme and not the Test! Can you help?

Regards

qim

 

[Mark56]

Unfortunately the minidumps you have sent in are all shortcuts, not the .dmp files. Please follow my instructions again and like wise with Memtest. My instructions for Memtest tell you where to go on the page to download the .ISO file.

 

[qim]

I'm sorry. I am not used to zipping, but when I open the attachment that I sent you I get .dmp files. I will try to send the original files directly from the /windows/minidumps folder.

Regarding the memory I am working on it and will rvert later as I need to buy new CDs.

 

[qim]

And a few more...

Let me know if you can read them.

Thanks

qim

 

[qim]

Hello Mark

Just to let you know that I managed to start Memtest86 v4.20 and after 4 passes there are no Errors. I will let it go on until the end of the 8th pass.

Also, there are two memory sticks of 512 Mb, but I have no idea how to get to them in the laptop.

Looking forward to your advice.

qim

 

[qim]

Hello Mark

MemTest has just finished the 8th pass and there are no errors. I don't know if the following Memtest info is of any use:

Cached 1022M
RsvdMem 400 K
MemMap e820
Cache on
ECC off

Regards

qim

 

[Mark56]

The first attachment were shortcuts to files on your PC, so when you open them it goes to the correct file, not quite the same at this end.

Memory test sounds encouraging but let it run for as long as you can.

I'll start debugging the minidumps and let you know what I find.

 

[Mark56]

I examined 7 of the minidumps and all but one (from April) showed Avast Anti Virus.

Please uninstall Avast using this uninstall tool
http://www.avast.com/uninstall-utility

And replace it with this to keep you protected for the time being.
http://www.microsoft.com/en-gb/security_essentials/default.aspx

Please post any further BSOD's.

 

[qim]

Hello Mark

I had another blue screen with minidump BEFORE uninstalling Avast as you recommended. AFTER I got rid of Avast I had another sutdown without minidump.

I am starting to think that this may be due to overheating. Some of the sutdowns may have happened during updates, which may raise the temperature. I started using CoreTemp and the last shutdoen (without minidump) happened at 80 º, which does not seem to be critical but is high.
Is it possible to see from the last minidump if the theory of temperature during update (possibly of Avast) could cause the problem?

Thank you

qim

 

[Mark56]

Although Avast is still in the minidump the error is blamed on Sandboxie. Overheating would not be identified in a minidump only the fault that it might be causing.

A temp of 80ºC is to high for a CPU, that might just have something to do with all the problems. What temp is it on when the PC is idle and what does it go up to when doing something memory intensive like playing a game or watching a video. A shut down without a BSOD is exactly what happens when a CPU overheats (although there can be other causes).

You need to blow out the laptop with a can of compressed air, ideally you should remove the cover to make sure you get the fan and heatsink completely clean.

 

[qim]

Hi and thanks

I have now put the laptop on an oven grid to keep it off the table and the temp when it is not being used is around 60/65. The lowest temp is 37 and the highest 81 (i was watching videos).

I do not have, or know what it is, Sandboxie. Could it be that it got in and is causing the trouble?

I had the heatsink cleaned by Toshiba last year and am surprised it got clogged up so quickly again. But last year it used to shut down when temp got close to 100º.

qim

 

[Mark56]

Well if the cut out temp is as high as 100ºC then you should be ok at 80ºC. Max temps for CPU's can vary over quite a big range depending on the model. If you know what your CPU is you can look it up.

This is Sandboxie: http://www.sandboxie.com/

It should be in your programs list under Add/Remove from the Control Panel.

I've included a screenshot of the file shown in the debugger.

 

[vasudevgawde]

request

Mark can u hel me too
just chk out my mini dump files in my thread
pls thnx in advance
pls ...

 

[qim]

well...

I had never heard of sandbox and it is not in add/remove progs. However, doing a search there are several files connected to the Firewall (Agnitum) and Avast which I uninstalled before (see attachment)

I guess the problem is here, because in the recent past I have noticed errors in the Admin Tools regarding Timestamps.

Can you help me here to see if there is a connection? What should I do?

Thank you very much

qim

 

[Mark56]

Have a go with this clean up tool.

http://www.agnitum.com/support/kb/article.php?id=1000159