The Evil Bsod's Have Returned

Discussion in 'Software' started by Marti82, Sep 27, 2016.

  1. Marti82

    Marti82 Corporal

    Been a while where it's been relatively quiet with these bastards, but they have returned to haunt me again.

    Can anyone give me a bit of help on what is / could be going on?
    Many thank yous in advance :)

    (Hope attached files work)
     

    Attached Files:

  2. satrow

    satrow Major Geek Extraordinaire

    Some memory corruption going on, looks like a bad driver or two. Some really old drivers are loaded, uninstall the software and related drivers:
    Belarc Advisor (using BANTExt.sys from Thu May 28 1998).
    ADC Analyzer/SwiftForth/Disspy/SpeedFan? (giveio.sys Thu Apr 4 1996).

    ASRock App Charger (or similar motherboard utility) has been known to cause BSODs. (AsrAppCharger.sys Tue May 10 2011).

    Daemon Tools, another with a history of causing BSODs (sptd.sys Removal tool/method at: http://www.duplexsecure.com/en/downloads or in their FAQ).

    Code:
    Debug session time: Tue Sep 27 19:17:49.452 2016 (UTC + 1:00)
    Loading Dump File [C:\Users\Me\SysnativeBSODApps\Mini092716-02.dmp]
    Windows XP Kernel Versio [B] 2600[/B] (Service Pack 3) MP (2 procs) Free x86 compatible
    Built by: 2600.xpsp_sp3_qfe.130704-0421
    System Uptime: 0 days 5:51:30.014
    Probably caused by : memory_corruption ( nt!MiRemoveWsle+18 )
    BugCheck 1A, {41785, c0e00000, 5c2c0, 0}
    BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001A]MEMORY_MANAGEMENT (1a)[/url]
    Bugcheck code 0000001A
    Arguments:
    Arg1: 00041785, The working set list is corrupt.
    Arg2: c0e00000
    Arg3: 0005c2c0
    Arg4: 00000000
    BUGCHECK_STR:  0x1a_41785
    PROCESS_NAME:  Nox.exe
    FAILURE_BUCKET_ID:  0x1a_41785_nt!MiRemoveWsle+18
    BiosVersion = P1.20
    BiosReleaseDate = 11/30/2012
    SystemManufacturer = To Be Filled By O.E.M.
    BaseBoardManufacturer = ASRock
    SystemProductName = To Be Filled By O.E.M.
    BaseBoardProduct = 960GM-VGS3 FX
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Debug session time: Tue Sep 27 13:25:54.655 2016 (UTC + 1:00)
    Loading Dump File [C:\Users\Me\SysnativeBSODApps\Mini092716-01.dmp]
    Windows XP Kernel Versio [B] 2600[/B] (Service Pack 3) MP (2 procs) Free x86 compatible
    Built by: 2600.xpsp_sp3_qfe.130704-0421
    System Uptime: 6 days 19:43:45.110
    Probably caused by : memory_corruption ( nt!MmZeroPageThread+250 )
    BugCheck 4E, {8f, a3e4e, 2384e, 0}
    BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000004E]PFN_LIST_CORRUPT (4e)[/url]
    Bugcheck code 0000004E
    Arguments:
    Arg1: 0000008f, The free or zeroed page listhead is corrupt
    Arg2: 000a3e4e, new page
    Arg3: 0002384e, old page
    Arg4: 00000000, 0
    BUGCHECK_STR:  0x4E_8f
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID:  0x4E_8f_nt!MmZeroPageThread+250
    BiosVersion = P1.20
    BiosReleaseDate = 11/30/2012
    SystemManufacturer = To Be Filled By O.E.M.
    BaseBoardManufacturer = ASRock
    SystemProductName = To Be Filled By O.E.M.
    BaseBoardProduct = 960GM-VGS3 FX
    
    3rd party driver by date:
    Code:
    **************************Tue Sep 27 19:17:49.452 2016 (UTC + 1:00)**************************
    giveio.sys  Thu Apr  4 03:33:25 1996 (316334F5)
    BANTExt.sys  Thu May 28 03:43:29 1998 (356CCF51)
    moufiltr.sys  Mon Mar  9 03:15:13 2009 (49B489C1)
    walvhid.sys  Thu Aug 20 11:38:23 2009 (4A8D279F)
    PxHelp20.sys  Tue Oct 20 18:57:50 2009 (4ADDFA1E)
    AsrAppCharger.sys  Tue May 10 09:28:18 2011 (4DC8F722)
    cfosspeed.sys  Mon Jul  4 14:18:18 2011 (4E11BD9A)
    l1c51x86.sys  Fri Mar  2 09:51:42 2012 (4F50982E)
    FNETURPX.SYS  Thu May 31 04:00:39 2012 (4FC6DED7)
    RtkHDAud.sys  Tue Sep 11 14:58:47 2012 (504F4397)
    speedfan.sys  Sat Dec 29 20:59:33 2012 (50DF59B5)
    nvhda32.sys  Mon Feb 25 05:26:47 2013 (512AF617)
    TMEBC32.sys  Mon Jul  1 14:03:01 2013 (51D17E05)
    nv4_disp.dll  Wed Jul 10 12:41:18 2013 (51DD485E)
    nv4_mini.sys  Wed Jul 10 12:44:34 2013 (51DD4922)
    tmnciesc.sys  Tue Apr  8 05:09:33 2014 (5343767D)
    tmtdi.sys  Tue Jul  8 11:15:20 2014 (53BBC4B8)
    tmeext.sys  Thu Oct  2 04:15:22 2014 (542CC34A)
    sptd.sys  Thu Dec 11 14:51:42 2014 (5489AF7E)
    tmcomm.sys  Thu Nov 26 07:21:48 2015 (5656B30C)
    tmevtmgr.sys  Thu Nov 26 07:21:48 2015 (5656B30C)
    tmactmon.sys  Thu Nov 26 07:21:55 2015 (5656B313)
    XQHDD2R0.r0  Sat Jul  2 11:03:51 2016 (57779187)
    XQHDDR0.r0  Sat Jul  2 11:03:51 2016 (57779187)
    XQHDrv.sys  Sat Jul  2 11:04:26 2016 (577791AA)
    XQHR0.r0  Sat Jul  2 11:04:45 2016 (577791BD)
    
     
    Marti82 likes this.
  3. Marti82

    Marti82 Corporal

    Thought I had gotten rid of DeamonTools.. doesn't work properly for / with me for some reason.
    Hm..... I'll start digging, I guess.

    Will get back soon, but not too soon, I hope ;)
    Thank you, Satrow :)

    ETA: With the link you provided to get rid of that demon called Deamon Tools, do I just follow the download and follow directions? I have no idea what kind of program it is, lol.
     
  4. satrow

    satrow Major Geek Extraordinaire

  5. Marti82

    Marti82 Corporal

    I accidentally seem to have done a double installation of the tool provided. It now asks if I want to uninstall it, is that safe to do?

    Meanwhile, I also got a hold of another program, called Revo Uninstaller. Found an obsolete driver, but cannot find any trace of Daemon Tools with it.
     
  6. satrow

    satrow Major Geek Extraordinaire

    Yes, uninstalling it should be safe.

    What's the driver called and is it loaded (Driverview)?
     
  7. Marti82

    Marti82 Corporal

    Okido, I'll do that then :)

    The obsolete driver was for an media player plug in, was called Now Playing for Media Player. Didn't do squat so I got rid of it after installing, or so I thought. It's gone now though :p
     
  8. Marti82

    Marti82 Corporal

    Well, that went South quickly.. System restore done so I can use the Search function again - it went missing / broken after I did the uninstall of that program in the link o.o

    I'll get back to it tomorrow. I do love pulling all nighters, but not when I have to work in the mornin' :p
     
  9. satrow

    satrow Major Geek Extraordinaire

    Marti82 likes this.
  10. Marti82

    Marti82 Corporal

    No idea what happened, but Search was missing something. Works again now though, thank heavens for System restore.

    I've added 2 new minidumps, it gave me one during the night (I keep my PC running nearly non-stop due to it's habit of not booting when being put in Sleep mode and running my ISP at night lol), and one just 5 minutes ago.

    As for the rest: I'm a bit afraid to use the tool provided in the link. Left me a bit discouraged. I will, however, try to see if I can find any tidbits left of Daemon Tools (just realized I've been spelling it wrong xD )

    Will be back soon (I hope).
     

    Attached Files:

  11. Marti82

    Marti82 Corporal

    Cannot edit anymore, but the Search companion thing is broken again xD
    Going to try the one you gave me above.
     
  12. Eldon

    Eldon Major Geek Extraordinaire

    I see you're running Windows XP SP3. Do you have the original disk?
     
  13. satrow

    satrow Major Geek Extraordinaire

    Both 0x4E 8F's, just like one of the others. Not much difference in the loaded 3rd party drivers either.

    I have to add that the most recent additions (VBOX?) might be implicated, as could almost any minor update done recently.

    Aside from repeating my thoughts/suggestions from before, I'll make a few comments based on the OS (XP) and my searches for this same bugcheck: XP is (still) nightmarish to debug, most BSOD analysts just avoid them, this specific bugcheck type is relatively uncommon, appears to be closely aligned to XP and the extant topics seem to be mostly from 2007-2012. I didn't find one that was 'solved' by anything approaching logic/debugging, probably less than 10% were 'solved' anyway (one out of ~fifteen?).

    TBH, I'd step back at this point and consider wiping/reinstalling XP without any dross (or .NET etc.), keep the installs to those strictly necessary and also setup separate hardware profiles for online/offline working, as many of the modern software versions are moving away from XP (and Vista) support, leaving it more susceptible to malware etc.



    Code:
    Built by: 2600.xpsp_sp3_qfe.130704-0421
    Debug session time: Wed Sep 28 15:38:07.882 2016 (UTC + 1:00)
    System Uptime: 0 days 12:17:05.723
    BugCheck 4E, {8f, 4cb58, d2518, 0}
    Probably caused by : memory_corruption ( nt!MmZeroPageThread+250 )
    BUGCHECK_STR:  0x4E_8f
    PROCESS_NAME:  System
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Built by: 2600.xpsp_sp3_qfe.130704-0421
    Debug session time: Wed Sep 28 03:20:59.476 2016 (UTC + 1:00)
    System Uptime: 0 days 3:16:25.341
    BugCheck 4E, {8f, 59eb2, 9c1a2, 0}
    Probably caused by : memory_corruption ( nt!MmZeroPageThread+250 )
    BUGCHECK_STR:  0x4E_8f
    PROCESS_NAME:  System



    Code:
    **************************Wed Sep 28 15:38:07.882 2016 (UTC + 1:00)**************************
    giveio.sys  Thu Apr  4 03:33:25 1996 (316334F5)
    BANTExt.sys  Thu May 28 03:43:29 1998 (356CCF51)
    moufiltr.sys  Mon Mar  9 03:15:13 2009 (49B489C1)
    walvhid.sys  Thu Aug 20 11:38:23 2009 (4A8D279F)
    PxHelp20.sys  Tue Oct 20 18:57:50 2009 (4ADDFA1E)
    AsrAppCharger.sys  Tue May 10 09:28:18 2011 (4DC8F722)
    cfosspeed.sys  Mon Jul  4 14:18:18 2011 (4E11BD9A)
    l1c51x86.sys  Fri Mar  2 09:51:42 2012 (4F50982E)
    FNETURPX.SYS  Thu May 31 04:00:39 2012 (4FC6DED7)
    RtkHDAud.sys  Tue Sep 11 14:58:47 2012 (504F4397)
    speedfan.sys  Sat Dec 29 20:59:33 2012 (50DF59B5)
    nvhda32.sys  Mon Feb 25 05:26:47 2013 (512AF617)
    TMEBC32.sys  Mon Jul  1 14:03:01 2013 (51D17E05)
    nv4_disp.dll  Wed Jul 10 12:41:18 2013 (51DD485E)
    nv4_mini.sys  Wed Jul 10 12:44:34 2013 (51DD4922)
    tmnciesc.sys  Tue Apr  8 05:09:33 2014 (5343767D)
    tmtdi.sys  Tue Jul  8 11:15:20 2014 (53BBC4B8)
    tmeext.sys  Thu Oct  2 04:15:22 2014 (542CC34A)
    sptd.sys  Thu Dec 11 14:51:42 2014 (5489AF7E)
    tmcomm.sys  Thu Nov 26 07:21:48 2015 (5656B30C)
    tmevtmgr.sys  Thu Nov 26 07:21:48 2015 (5656B30C)
    tmactmon.sys  Thu Nov 26 07:21:55 2015 (5656B313)
    XQHDrv.sys  Sat Jul  2 11:04:26 2016 (577791AA)
    
    http://www.carrona.org/drivers/driver.php?id=giveio.sys
    http://www.carrona.org/drivers/driver.php?id=BANTExt.sys
    http://www.carrona.org/drivers/driver.php?id=moufiltr.sys
    http://www.carrona.org/drivers/driver.php?id=walvhid.sys
    http://www.carrona.org/drivers/driver.php?id=PxHelp20.sys
    http://www.carrona.org/drivers/driver.php?id=AsrAppCharger.sys
    http://www.carrona.org/drivers/driver.php?id=cfosspeed.sys
    l1c51x86.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=FNETURPX.SYS
    http://www.carrona.org/drivers/driver.php?id=RtkHDAud.sys
    http://www.carrona.org/drivers/driver.php?id=speedfan.sys
    http://www.carrona.org/drivers/driver.php?id=nvhda32.sys
    TMEBC32.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=nv4_disp.dll
    http://www.carrona.org/drivers/driver.php?id=nv4_mini.sys
    http://www.carrona.org/drivers/driver.php?id=tmnciesc.sys
    http://www.carrona.org/drivers/driver.php?id=tmtdi.sys
    tmeext.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=sptd.sys
    http://www.carrona.org/drivers/driver.php?id=tmcomm.sys
    http://www.carrona.org/drivers/driver.php?id=tmevtmgr.sys
    http://www.carrona.org/drivers/driver.php?id=tmactmon.sys
    XQHDrv.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
     
  14. Marti82

    Marti82 Corporal

    I do, yes. Why?

    @satrow: I have a 3rd HD sitting on my desk. If all is right, it should have W7 Pro on it (got it via my work, although we aren't sure it's fully functioning xD ). So, in short: I either ignore it and let it be; re-install XP; or create a nightmare trying to debug?
    Either way, I am kind of screwed at the moment.. with XP getting obsolete now anyway for sure, but I have a lot of games that are at their max with XP o.o
     
  15. Eldon

    Eldon Major Geek Extraordinaire

    I would repair Windows XP.
    You'll keep your programs and personal files.
    However, all Windows updates will have to be re-installed. Also, software that installed files in the Windows folder, will have to be re-installed.
    As an example... I only had to re-install the Lexmark and Nero software.
     
  16. satrow

    satrow Major Geek Extraordinaire

    Repairing XP won't work, the problem drivers are 3rd party, they won't be touched by a Repair install.
     
  17. Marti82

    Marti82 Corporal

    I tried a repair before, but only made things even worse, forcing me to do a clean install and lose a lot of data and stuff.. didn't even allow me to back up anything (was bugging with that before the failed repair).

    Might be best to see if my 3rd HD with Win7 works?
     
  18. satrow

    satrow Major Geek Extraordinaire

    If the 3rd disk is from another machine and it had a different chipset, it's not likely to work as the drivers that will be set to auto-load will be incorrect, maybe causing a BSOD.

    If you can start it in Safe Mode first (keep tapping F5 and F8 while the BIOS screen is still showing) and then uninstall the main drivers, you'll stand a better chance of a successful normal boot afterwards.

    Even then, it's still likely to require further driver updating/changing before it's stable.

    You won't be able to validate the OS either.
     
  19. Marti82

    Marti82 Corporal

    It's been running calmly for a few days. Until I am able to test this "new" HD I think I'll keep my fingers crossed and run this a bit more. Will have to upgrade my GFX card soon anyway, might be a good time for a major Windows-overhaul then as well?

    When I was searching for the Daemon Tools files, I found absolutely nothing.
    BelArc is gone, picked out a few more (forgot which.. horrible memory). Search-thing is still busted, but I can work around it - if patient enough. Tried to get the programs you suggested but neither works (need older version, which I cannot find).
     
  20. satrow

    satrow Major Geek Extraordinaire

    Sorry I missed the last reply until now, how's the PC running now, Martina?
     
  21. Marti82

    Marti82 Corporal

    Well, it's still running. More or less all I can say for it for the time being.
    Trying to sort out what file it is missing, as I cannot even use system tools anymore (sucks not being able to defrag the bugger). Throws a BsoD every couple days / week, but it's still alive. Trying to scramble some spare parts to get a back-up computer running to test-run the other HDD I have sitting here. Bit scared to test it with my own build.. bad experience when I tested my partner's HDD with mine, took me an hour to get it to boot from the correct HDD again (kept using the wrong one lol).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds