Win32.sys BSOD

Really can't go on any longer like this so, I'm seeking help.

This was probably caused by the following module: win32k.sys (win32k+0x98FB0)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF8053A933, 0xFFFFFFFFAE9E09E8, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\win32k.sys

This error occurs during any use of the Adobe Flash browser plug-in.

For example:

Streaming video from various host servers or Using Flash based games.

The BSOD time fluctuates between 2mins and 4 hours but, with continued use of any Flash based streaming connection, the error occurs.

I have no trouble with bit torrent protocols, such as sopcast streaming media application.

The things i have tried to do are; update my drivers for the graphics card, uncheck the "accelerator" mode in the Flash option

I have thoroughly cleaned, and keep clean, my system.

Alas, i am losing my grip on reality, my head is popping and i feel like going to live up a mountain...

My system:

ASUS M3A78 Pro
AMD Dual Core 64x2 6000+
3G DDR2
Nvidia GForce 9600 GT
WD 2TB HDD
Windows 32 XP Pro SP3
Firefox 13.0.1
Flash 11.3 r300

Help?

 

Uninstall all the ASUS 'utilities'.

Find some of the minidumps (C:\Windows\Minidump) and copy them to your Desktop, zip and attach them please.

 

Cheers mate.

I only installed the drivers for the Motherboard. I don't use any of the 'utilities'.

Just the chipset drivers and the AMD cool and quiet driver. I don't use the on board LAN or Sound Card so neither of them are installed either.

I have attached a file; MiniDump.rar

EDIT: ah ok, MiniDump.zip

 

Uninstall the Sygate/Symantec firewall(s) fully, it looks like security files from circa 2004 aren't doing you any favours here.

I also see signs of older USB and wireless drivers that look like they'll need updating.

Try PrivateFirewall.

Code:

[font=lucida console]BugCheck 1000008E, {c0000005, 8053a8c3, af1a49e8, 0}
BugCheck 10000050, {aaadb110, 1, 806e694f, 0}
BugCheck 100000D1, {ffffffdf, 2, 1, b306d5f8}
BugCheck 1000008E, {c0000005, 8053aa44, af1c09e8, 0}
BugCheck 100000D1, {aab73050, 2, 0, b306d5bd}
BugCheck 1000008E, {c0000005, 8053a8c3, af7b19e8, 0}
BugCheck 1000008E, {c0000005, 8053aa44, af4879e8, 0}
BugCheck 1000000A, {9dc0c40c, 2, 0, 805226a0}
BugCheck 1000008E, {c0000005, 8053aa44, af6279e8, 0}
BugCheck 1000008E, {c0000005, 8053a8c3, aeec59e8, 0}
BugCheck 10000050, {f82075b0, 1, bf836e98, 0}
BugCheck 1000008E, {c0000005, 8052669a, af895a28, 0}
BugCheck 100000D1, {aab96050, 2, 0, b306d5bd}
BugCheck 10000050, {c2b7fffc, 0, 8053aab4, 0}
BugCheck 1000008E, {c0000005, 8053aab4, af0419e8, 0}
BugCheck 1000008E, {c0000005, 8053a933, af93c508, 0}
BugCheck 10000050, {ff8c554e, 8, ff8c554e, 0}
BugCheck 100000EA, {8a1db5a0, 8a8e5cd0, b84e3cbc, 1}
BugCheck 10000050, {ee9ce5b0, 1, bf898f4b, 2}
BugCheck 1000008E, {c0000005, 8053a933, ad44c9e8, 0}
BugCheck 10000050, {9a286c14, 1, bf8c4660, 0}
BugCheck 1000008E, {c0000005, 8053aab4, af01f9e8, 0}
BugCheck 1000008E, {c0000005, 8053aab4, af06f9e8, 0}
BugCheck 1000008E, {c0000005, 8053aab4, aef479e8, 0}
BugCheck 1000008E, {c0000005, 8053a933, af6df9e8, 0}
BugCheck 10000050, {c2ae7df4, 0, 8053aab4, 0}
BugCheck 1000008E, {c0000005, 8053aab4, aeced9e8, 0}
BugCheck 1000008E, {c0000005, 8053a933, af05c9e8, 0}
BugCheck 1000008E, {c0000005, 8053aab4, af5439e8, 0}
BugCheck 1000008E, {c0000005, 8053a933, ae3109e8, 0}
BugCheck 1000008E, {c0000005, 8053aab4, af1499e8, 0}
BugCheck 1000008E, {c0000005, 8053a933, af83c9e8, 0}
BugCheck 1000008E, {c0000005, 8053a933, ae9e09e8, 0}[/font]

*** 3rd PARTY DRIVER LIST ***

Code:

[font=lucida console]
ASACPI.sys           Fri Aug 13 03:52:52 2004 (411C2D04)
AegisP.sys           Tue May 17 21:22:56 2005 (428A52A0)
BUFADPT.SYS          Fri Aug 29 08:29:37 2008 (48B7A561)
MAudioDelta.sys      Sat Feb 19 00:26:37 2011 (4D5F0E3D)
Teefer.sys           Wed Aug 11 00:51:28 2004 (41195F80)
U2KG54L.sys          Thu Aug 24 06:44:14 2006 (44ED3CAE)
ZDPSp50.sys          Mon Oct 25 19:40:57 2004 (417D48B9)
npf.sys              Tue Oct 20 18:57:28 2009 (4ADDFA08)
nv4_disp.dll         Tue May 15 08:34:03 2012 (4FB206EB)
nv4_mini.sys         Tue May 15 08:40:41 2012 (4FB20879)
wacmoumonitor.sys    Tue Sep 07 23:38:59 2010 (4C86BF03)
wacommousefilter.sys Fri Feb 16 18:12:29 2007 (45D5F40D)
wacomvhid.sys        Tue Sep 22 00:29:18 2009 (4AB80C4E)
wg3n.sys             Wed May 19 18:26:17 2004 (40AB98B9)
wg4n.sys             Wed May 19 18:26:18 2004 (40AB98BA)
wg5n.sys             Wed May 19 18:26:20 2004 (40AB98BC)
wg6n.sys             Wed May 19 18:26:21 2004 (40AB98BD)
wpsdrvnt.sys         Wed Aug 11 00:53:13 2004 (41195FE9)[/font]

 

Sounds plausible although I am quite reluctant to uninstall the firewall.

It seems odd that this error only occurs during use of the Adobe Flash plug-in though.

Having said that, I am out of ideas so, I'll uninstall the Firewall and try the one that you recommended.

I thought I updated the Driver for the Buffalo WLI-U2-KG54L with this:

ZyDAS ZD1211B IEEE 802.11 b+g (17 June 2011)

Any recommendations with this?

 

That doesn't seem to be the problem mate (the firewall)

10 minutes into testing the new software, the BSOD occurred again.

This was probably caused by the following module: pwipf6.sys (pwipf6+0xDBD5)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF8053A933, 0xFFFFFFFFAEC0F9A8, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\pwipf6.sys
product: Privacyware Filter Driver
company: Privacyware/PWI, Inc.

The dump seems to identify the new Firewall as being the problem now?

 

Run DriverView (get the x64 version, set View to hide Windows drivers) and check the bottom 5 drivers listed earlier + Teefer.sys are not still loading.

If they are, I suspect at least one of them is, then you'll need a way to uninstall them (Symantec tool here) or track them down in Device manager and disable or uninstall them from there (may trigger a BSOD anyway). Failing that, you could try rebooting to Safe Mode and renaming them to stop them loading.

 

Umm, don't download the x64 version of DriverView, you're running x86 XP, my mistake, get the normal version.

 

Sorry mate, couldn't stay awake >.<

There doesn't seem to be any sign of;

Teefer.sys
wg3n.sys
wg4n.sys
wg5n.sys
wg6n.sys
wpsdrvnt.sys

Please see the attached txt file for the output from DriverView.

I ran Ccleaner after I unistalled the firewall to clean any reminisce of the app from the registry and there also seems to be no sign of Sygate folders/files on the C drive.

 

Ok, can you upload the latest dump (zipped) please, it's easier to study 1 dump than trying to sum up 33 , the code from it certainly looked like it was the same pattern and probable cause as most of the others.

 

The dump folder is empty? I am guessing that Ccleaner did that?

OK, I am going to try and crash the system.

If it is any use, I dumped the "WhoCrashed" report below.

This was probably caused by the following module: pwipf6.sys (pwipf6+0xDBD5)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF8053A933, 0xFFFFFFFFAEC0F9A8, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\pwipf6.sys
product: Privacyware Filter Driver
company: Privacyware/PWI, Inc.

 

That data's not enough to prove anything, if you compare it to the dumps earlier, you'll see it's very much in the same ballpark, therefore all are likely to have the same cause.

If CCleaner removed just one dump, is the folder now empty?

Download Autoruns and run it, hit Esc., set Verfiy to on in the View menu and refresh. Once it's completed, save it as the default type, zip and attach it please.

When you get a new dump, upload it please, try to get any networking drivers updated, uninstall any resident software that may be related to networking too.

 

Just crashed. Thank goodness (well not thank goodness but, you know what i mean), I was hoping that it would happen quite quickly.

I've attached the dump file (.zip)

In the mean time, I will run Autorun and then post the .txt file.

Cheers!

EDIT: ah yeah, the Dump folder was empty.

 

Here is the .ARN file from AutoRun.

I couldn't find "set Verfiy to on in the View menu". There seems to be no "View" menu/tab.

The .ZIP file contained in this post is of the "Everything" window tab from the app.


Also, I am not sure about the Drivers for the USB WiFi key (Buffalo WLI-U2-KG54L)

According to the Buffalo site, I have the latest Drivers installed? I am just going to check that again now in fact.

 

Code:

Driver Name       : npf.sys
Address           : 0xAF32E000
End Address       : 0xAF33D000
Size              : 0x0000f000
Load Count        : 1
Index             : 107
File Type         : System Driver
Description       : npf.sys (NT5/6 x86) Kernel Driver
Version           : 4.1.0.1753
Company           : CACE Technologies, Inc.
Product Name      : WinPcap
Modified Date     : 21/10/2009 03:19:44
Created Date      : 21/10/2009 03:19:44
Filename          : C:\WINDOWS\system32\drivers\npf.sys
File Attributes   : A
Service Name      : NPF
Service Display Name: NetGroup Packet Filter Driver

Do you have Wireshark installed? This version of WinPcap is quite outdated.

 

No mate, no application called WireShark has been installed. That driver (WinPcap/npf.sys) comes as part of the install with Streaming Star - Flv Recorder.

 

Right, looks like you have 2 programs (possibly 2 sets of drivers too) loading at startup for wireless LAN, in C:\Documents and Settings\All Users\Start Menu\Programs\Startup:
ZDWLan Utility.lnk IEEE 802.11 Wireless LAN Utility MFC Application c:\program files\zydas technology corporation\zydas_802.11g_utility\zdwlan.exe
ClientManager3.lnk Client Manager3 TrayManager BUFFALO INC. c:\program files\buffalo\client manager3\cm3_tray.exe

I would find the latest driver for your wireless card and download it - but don't install it until you have uninstalled all the previous packages and drivers and rebooted a couple of times.

If Windows finds and installs the wireless adapter after the uninstalls, it might work fine. If not, install the latest driver - but set the 3rd party software to allow Windows to control the wireless connection - this will be a cleaner connection, ruling out much of the 3rd party interference.

The above garbage looks like the Buffalo driver might be corrupt anyway.

 

OK, i'll remove everything and start from zero with the WiFi and Client manager, rebooting a couple of times in between uninstall and reinstall. I will keep an eye out for if windows finds and tries to install the drivers automatically.

I have the updated drivers for the Buffalo USB Key. I will see if I can set the Client manager to allow windows connection manager to control the connection too.

I will report back.

Cheers mate!

 

OK, I have uninstalled the Client Manager 3, that is bundled on the CD Rom with the original drivers.

I have uninstalled the Buffalo Driver (control panel/uninstall driver) and the ZyDAS ZD1211B IEEE 802.11 b+g Driver (control panel / add/remove software), then rebooted the system.

Windows found another version of the Buffalo driver on restart, so I uninstalled the same driver again (as above) and restarted the system.

On the following restart; "new hardware found / the Buffalo USB Key". I navigated to the downloaded/updated/latest driver from the Buffalo site.

Windows connection manager is connecting to the internet, without installing the bundled "Client Manger 3" application.

I am going to try to crash the system again, as per before.

I have attached new copies of "DriveView" and "AutoRun" logs (.txt / .zip)

-------------

You mentioned something about USB drivers being out of date before?

 

still the same mate. Here's the dump...

 

Try updating WinPcap http://www.winpcap.org/install/default.htm

 

Cheers mate. I've removed the application (Streaming Star - Flv Recorder / WinPcap/npf.sys) all together now as I only ever used it once for something.

 

Some background info on troubleshooting 0x8E BSOD's:

Vista and Windows 7 can run Driver Verifier which sometimes pinpoints the real driver at fault, XP can't, so we really need to wait and see if the removal of the winpcap drivers wiil fix it, or gives a different BSOD.

 

I think that might have been it gentlemen! woooohoooo! Well hey, I'm not going to jinx things by getting carried away, you know?

In the past, the system has lasted upto, i dunno, maybe 4~8 hours before crashing but, I have been playing an online Flash based game, while streaming a video from Youtube (which i think is actually HTML 5 as opposed to FLV but still) and nothing has happened as of yet.

It seems obvious now, as the system only crashed during playback of Flash streams, and WinPcap is a Flash streaming capturing driver (or at least that is what I presumed it was as it came bundled with Streaming Star - Flv Recorder).

It is no longer on the system and low and behold, the BSOD seems to be fixed.

I guess my original plan to go and live up a mountain can now be put off until the last mind bending instalment of "thou ye olde 5 minute job" on the P.C. come to fruition : )

I will post again in the near future (but hopefully not too near, if you know what i mean) as to the condition of the system.

Cheers guys for taking the time out to respond, eh!

 

i have just returned from a holiday. i was streaming a video from sky sports dot com and pooof... BSOD : (

This was probably caused by the following module: win32k.sys (win32k+0x98E60)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF8053A933, 0xFFFFFFFFAEFB39E8, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\win32k.sys