Blue Screen...help please!

I got the dreaded blue screen of death again & here is the event viewer error log:

Log Name: System
Source: EventLog
Date: 1/19/2011 11:56:45 AM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Pat-PC
Description:
The previous system shutdown at 11:54:36 AM on 1/19/2011 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-01-19T16:56:45.000Z" />
<EventRecordID>263491</EventRecordID>
<Channel>System</Channel>
<Computer>Pat-PC</Computer>
<Security />
</System>
<EventData>
<Data>11:54:36 AM</Data>
<Data>1/19/2011</Data>
<Data>
</Data>
<Data>
</Data>
<Data>93437</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DB070100030013000B0036002400FB01DB07010003001300100036002400FB01600900003C000000010000006009000000000000B00400000100000004000000</Binary>
</EventData>
</Event>


can anyone decifer this & tell me what could be the problem in plain english or laymen's terms, any help will be gratly appreciated.

 

I am clueless, forgive me...
where do I find the BSOD?

edit...
nevermind I just googled bsod...lol see I am an idiot.

anyway, is it possible to find the bsod code somewhere on my PC, as it flashed on screen just briefly before it shut itself down (rebooted).
thanks

 

thank you sir, I will do this & get back to you in a couple weeks, or whenever I get my next BSOD.
Thank you for your patience with my ignorance.

 

Well well, as predicted...I'm baaaack...

ok got the BSOD again & here is the error message on the blue screen (there was no file listed or related to the crash):

IRQL_NOT_LESS_OR_EQUAL

***STOP 0x0000000A (0X00000000, 0X00000002, 0X00000001, 0X82BCAEDE)

memory dump

........................................................................................................
this part popped up after reboot:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 00000002
BCP3: 00000001
BCP4: 82BCAEDE
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Files that help describe the problem:
C:\WINDOWS\Minidump\Mini020811-01.dmp
C:\Users\Pat\AppData\Local\Temp\WER-48968-0.sysdata.xml
C:\Users\Pat\AppData\Local\Temp\WER3ABE.tmp.version.txt

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

..................................................................................................

I hope this is the information needed to help me solve this issue. Please let me know & thanks again in advance.

 

there was nothing below the stop 0A error except for this:
"beginning dump of physical memory
physical memory dump complete.
Contact your administrator or technical support for further assistance."

 

Hi jasta2,

I'd like you to upload the minidump (C:\WINDOWS\Minidump\Mini020811-01.dmp) please; to do so, you'll need to copy it to your Desktop first then zip it (right-click it > send to > compressed folder) and attach it to your reply.

I'll try to debug it and see if there's an obvious reson for the crash.

If you have other recent dump files in that folder, you could copy, zip and attach those, too.

 

Thank you for all the help.

 

here are a bunch of them.

 

Well, there's a selection of BSOD types there, any of which could be caused by hardware, memory or driver problems, to list just a few.

I checked some of the dumps for Windows uptimes and saw times between 12+ hours and 3.5 days, is there anything that you can remember that triggers the BSOD's?

Have there been any other odd things happening with the PC since the BSOD's started?

Some of them list an Avast! file, the self-protection module, as being implicated; I'd uninstall your current Avast!, using the uninstall utility. The latest version of Avast! is here. Uninstall, reboot, install the new version.

I'd then run the PC hard to try to trigger more BSOD's; you may like to try some stress-testing app like OCCT to ensure that your CPU/RAM/motherboard is good.

Once you have more dumps or specific error messages from OCCT, report back

 

Ok, My latest bsod... I have noticed that when the bsod occurs is when I am watching a video on the internet in Internet Explorer, like when I am watching a news video on NBC.com or on youtube.

I have followed your instructions (uninstal/reinstall avast). The only time I get the BSOD is when watching a video on the net, no other programs were running at the time.

 

here is the minidump report...

 

hrm, the file did not attach to my last post...trying again.

 

event log...

 

Hello, sorry to hear about this, but from what i can tell(and i am no expert) the problem is caused by avastui.exe

Read This----->http://forum.avast.com/index.php?topic=54385.15

Are you using Avast! 5? I would upgrade to Avast! 6. ( avast 5 is a little buggy)

Uninstall Avast! and run the Avast cleanup utilitiy found here(ONLY IF YOU ARE RUNNING AVAST! 5)http://files.avast.com/files/eng/aswclear5.exe

 

Code:

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82905f9c, The address that the exception occurred at
Arg3: a28c2c40, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!MiGetNextNode+b
82905f9c 394804          cmp     dword ptr [eax+4],ecx

TRAP_FRAME:  a28c2c40 -- (.trap 0xffffffffa28c2c40)
ErrCode = 00000000
eax=00000000 ebx=894e6a50 ecx=85629748 edx=00000000 esi=89cdded0 edi=0573eab4
eip=82905f9c esp=a28c2cb4 ebp=a28c2d44 iopl=0         nv up ei pl nz ac pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010217
nt!MiGetNextNode+0xb:
82905f9c 394804          cmp     dword ptr [eax+4],ecx ds:0023:00000004=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x8E

PROCESS_NAME:  SearchProtocolH

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 82a51cf4 to 82905f9c

STACK_TEXT:  
a28c2cb0 82a51cf4 e0d7b7c7 00000834 0573ea90 nt!MiGetNextNode+0xb
a28c2d44 8289ac7a 00000834 02b20000 00000000 nt!NtQueryVirtualMemory+0x2f8
a28c2d44 77345ca4 00000834 02b20000 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0573ea90 00000000 00000000 00000000 00000000 0x77345ca4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiGetNextNode+b
82905f9c 394804          cmp     dword ptr [eax+4],ecx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiGetNextNode+b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4cb710d6

IMAGE_NAME:  [B]memory_corruption[/B]

FAILURE_BUCKET_ID:  0x8E_nt!MiGetNextNode+b

BUCKET_ID:  0x8E_nt!MiGetNextNode+b

Followup: MachineOwner
---------

I see memory corruption given here, this doesn't always mean physical RAM, it could be virtual memory, CPU cache or Video memory.

Given that the PC runs for many hours or days before giving a BSOD, I'm guessing that there's a problem with the virtual memory - I would set the VM to zero and set the PC to run chkdsk /r at the next reboot. The results of chkdsk will be in the Application logs under Wininit, source ID 1001, if you copy the contents of the General tab there and paste them into a post, we'll be able to see what chkdsk fixed (if anything).

After reboot, cleanup the drive (CCleaner - check the settings before you run it, don't remove anything you're not happy about), defrag and then set a new VM to a fixed 4092Mb min. and max. Changing the size of virtual memory.

 

Thank you Satrow, I will follow your instructions & post back.

 

ok here are the chkdsk results...


Checking file system on C:
The type of the file system is NTFS.
Volume label is HP.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up instance tags for file 0x268b6.
245952 file records processed. 598 large file records processed. 0 bad file records processed. 0 EA records processed. 44 reparse records processed. 303870 index entries processed. 0 unindexed files processed. 245952 security descriptors processed. Cleaning up 3830 unused index entries from index $SII of file 0x9.
Cleaning up 3830 unused index entries from index $SDH of file 0x9.
Cleaning up 3830 unused security descriptors.
28960 data files processed. CHKDSK is verifying Usn Journal...
35038144 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
245936 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
33593583 free clusters processed. Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

476118372 KB total disk space.
341278500 KB in 179897 files.
97264 KB in 28961 indexes.
0 KB in bad sectors.
368276 KB in use by the system.
65536 KB occupied by the log file.
134374332 KB available on disk.

4096 bytes in each allocation unit.
119029593 total allocation units on disk.
33593583 allocation units available on disk.

Internal Info:
c0 c0 03 00 e5 2f 03 00 e1 8c 05 00 00 00 00 00 ...../..........
4b 1e 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 K...,...........
42 00 00 00 52 73 19 77 58 87 3e 00 58 7f 3e 00 B...Rs.wX.>.X.>.

Windows has finished checking your disk.
Please wait while your computer restarts.

 

I also noticed these errors in the logs, happens everytime I reboot the pc.

 

ChkDsk log seems ok. Do you have any reason to be running SQL server? Have you deleted then reset the virtual memory?

 

yes I deleted & reset the VM.
as for the SQL server, I think I need that in order to use Sony Vegas (video editing program).

 

Well, setting a strong password, as suggested in the error message should clear up some of your Application errors

As for your BSOD, just hammer the PC until it throws another fit I could probably find a few drivers/programs that you could update but changing files 'just in case' might cause further issues. Go watch movies in as many IE windows as you can, see if it breaks before you do ^^.

 

for the life of me I can not find where to set this password for the SQL server, when that message window pops up, I click OK & the window disapears & doesn't take me anywhere to put in a password, I looked through the application files & can not find anywhere to add a password. I guess I am over looking something.:confused

tonight I will open a bunch of IE windows & watch a bunch of vids...

 

hrm, I think I am going to try & just remove the SQL Server, after a little reading, I don't think it is necessary for Sony Vegas to run properly (it is a media manager for Vegas)...I can always re-install if necessary.

 

Anything you can do to lighten the load on Windows helps when it comes to troubleshooting

 

Yea, many anti viruses are famous for causing a huge strain on your pc, to the point where Internet explorer take minutes to open. Definitely turn off unnecessary programs in the system tray to reduce stress on your machine. May not be much but everything help you know.

 

ok, just got another DSOD, this one says something about video... any idea what this is?
Do I need a new video card? I noticed that watching vids on the net the picture gets all pixelated & choppy.

 

Your BSOD:

If you have, or can borrow another video card, it wouldn't hurt to try it - if it's a known good card.

 

OK I finally resolved my problem here...
The problem was my antivirus (Avast) having a conflict with one of microsoft's updates. I uninstalled Avast before but did not know I had to use the Avast removal tool. found here: http://files.avast.com/files/eng/aswclear.exe

Follow these directions if you are going to be doing this:
Boot into Recovery using Vista DVD or HDD recovery partition. Run "Windows System Restore".

Upon reaching Desktop, run the Avast tool.

--------------------------------------------------------------------------
I did not try re-installing Avast, I am now using Avira Antivirus & haven't had a BSOD since.

--------------------------------------------------------------------------

I wanted to put this up here incase someone else ran into this same problem.



Thank you to everyone for there time & effort in trying to help me.