Memory Dumps/BSOD- Software crashing

[Viper69]

I don't know where to begin. First, I haven't added any new hardware or software prior to the problems happening. Here's what I observed, and what I have done so far below

1. FF v 8.0.1 started crashing for no reason, both regularly, and in FF's safe mode w/all add-ons disabled. All I was doing was reading text. No downloading, no music listening, no web videos etc. Just reading text

2. KAV v. 11.0.2.556 (a,b) will suddenly turn off, OR generate a "previous application launch failure error"

3. Lately, I get the BSOD, physical memory dumps

4. Superantispyware (latest free version)- gets an "unexpected error" and is forced to quit.


What I have done:

1. KAV has detected no viruses or malware
2. Spybot detects nothing
3. Malwarebytes detects nothing
4. Superanti-spyware detected 400 adware.cookies(tracking cookies) before it crashes, and I can't get it to delete them because when it crashes, I have to restart

5. My computer has 1 drive, it's partitioned into 2 parts.
C drive (OS) is 48.8gigs in size, 39% free, 9% total fragmentation, 19% file fragmentation

D partition is 231 gigs in size, 10% free space, 4% total frag. 9% file frag

Any ideas where to begin?? I don't think the problem is fragmentation as I have been this high before without a problem.

I have to keep this computer running, before I build a new one.

Thank in advance.

 

[redduc900]

It's hard to say without knowing what the errors were in the BSODs. Boot to Memtest86+ installed to a thumb drive and check your RAM for stability. And if the CPU or videocard are overclocked, reset their clocks to default values.

 

[Viper69]

It's hard to say without knowing what the errors were in the BSODs. Boot to Memtest86+ installed to a thumb drive and check your RAM for stability. And if the CPU or videocard are overclocked, reset their clocks to default values.

I agree, I had forgotten to write them down. I originally got this board and RAM from a friend years ago. I know one of the RAM sticks is OC'd just a tad, because for whatever reason it's unstable at normal stock voltages.

It's been years since I did any OC'ing. How would I know if my video card is OC'd ?

In booting from a thumbdrive, if I understand you correctly, how do I make sure the computer boots from the thumb drive. It's in the BIOS somewhere I'm sure.

 

[redduc900]

Well the 9800Pro 128MB has a default core clock of 380MHz, and an effective memory clock of 680MHz, both of which you can verify w/ GPU-Z. As far as booting to a thumb drive, first you'll need to make the drive bootable, install Memtest86+ using the 'Auto-installer for USB Key (Win9x/2K/XP/7)' file, then change the boot order in the BIOS so that the thumb drive is 1st in the boot order. If you don't have a thumb drive or the BIOS can't boot to a thumb drive, and you have a floppy drive, then download the 'Pre-Compiled package for Floppy (DOS - Win)' file instead.

 

[Viper69]

I recall having to use a floppy last time I tested the RAM modules.

If the errors aren't w/the vid card or RAM sticks, I'll just have to wait until BSOD it sounds?

 

[redduc900]

Or post the contents of the last logged critical error from the Event Viewer logs.

 

[Viper69]

Here are a few of them. The AVP errors refer to Kaspersky AV errors that I mentioned in the original post. The Firefox refer to it randomly crashing.

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 4/5/2012
Time: 12:20:37 AM
User: N/A
Computer: MA
Description:
Fault bucket -1379407089.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 2d 31 33 37 39 34 30 37 -1379407
0010: 30 38 39 0d 0a 089..


Number 2.

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 4/4/2012
Time: 11:34:16 PM
User: N/A
Computer: MA
Description:
Faulting application avp.exe, version 11.0.2.571, faulting module klavasyswatch.dll.72b32df08a8504d3941e435dbd930743, version 2.3.3.306, fault address 0x00069bfb.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 76 70 ure avp
0018: 2e 65 78 65 20 31 31 2e .exe 11.
0020: 30 2e 32 2e 35 37 31 20 0.2.571
0028: 69 6e 20 6b 6c 61 76 61 in klava
0030: 73 79 73 77 61 74 63 68 syswatch
0038: 2e 64 6c 6c 2e 37 32 62 .dll.72b
0040: 33 32 64 66 30 38 61 38 32df08a8
0048: 35 30 34 64 33 39 34 31 504d3941
0050: 65 34 33 35 64 62 64 39 e435dbd9
0058: 33 30 37 34 33 20 32 2e 30743 2.
0060: 33 2e 33 2e 33 30 36 20 3.3.306
0068: 61 74 20 6f 66 66 73 65 at offse
0070: 74 20 30 30 30 36 39 62 t 00069b
0078: 66 62 fb

Number 3.

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 4/4/2012
Time: 3:57:13 PM
User: N/A
Computer: MA
Description:
Fault bucket 1751757230.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 37 35 31 37 35 37 32 17517572
0010: 33 30 0d 0a 30..


Number 4.
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 4/4/2012
Time: 3:57:06 PM
User: N/A
Computer: MA
Description:
Hanging application thunderbird.exe, version 1.8.20100.22820, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 74 68 75 6e 64 65 thunde
0018: 72 62 69 72 64 2e 65 78 rbird.ex
0020: 65 20 31 2e 38 2e 32 30 e 1.8.20
0028: 31 30 30 2e 32 32 38 32 100.2282
0030: 30 20 69 6e 20 68 75 6e 0 in hun
0038: 67 61 70 70 20 30 2e 30 gapp 0.0
0040: 2e 30 2e 30 20 61 74 20 .0.0 at
0048: 6f 66 66 73 65 74 20 30 offset 0
0050: 30 30 30 30 30 30 30 0000000


Number 5.
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 4/4/2012
Time: 3:56:47 PM
User: N/A
Computer: MA
Description:
Hanging application firefox.exe, version 8.0.1.4341, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 66 69 72 65 66 6f firefo
0018: 78 2e 65 78 65 20 38 2e x.exe 8.
0020: 30 2e 31 2e 34 33 34 31 0.1.4341
0028: 20 69 6e 20 68 75 6e 67 in hung
0030: 61 70 70 20 30 2e 30 2e app 0.0.
0038: 30 2e 30 20 61 74 20 6f 0.0 at o
0040: 66 66 73 65 74 20 30 30 ffset 00
0048: 30 30 30 30 30 30 000000


Number 6
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 4/4/2012
Time: 2:54:48 PM
User: N/A
Computer: MA
Description:
Faulting application avp.exe, version 11.0.2.571, faulting module oas.ppl, version 11.0.2.556, fault address 0x00005e72.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 76 70 ure avp
0018: 2e 65 78 65 20 31 31 2e .exe 11.
0020: 30 2e 32 2e 35 37 31 20 0.2.571
0028: 69 6e 20 6f 61 73 2e 70 in oas.p
0030: 70 6c 20 31 31 2e 30 2e pl 11.0.
0038: 32 2e 35 35 36 20 61 74 2.556 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 30 30 35 65 37 32 00005e72

Num 7

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 4/3/2012
Time: 5:19:25 PM
User: N/A
Computer: MA
Description:
Faulting application avp.exe, version 11.0.2.571, faulting module avs.ppl, version 11.0.2.581, fault address 0x00018f51.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 61 76 70 ure avp
0018: 2e 65 78 65 20 31 31 2e .exe 11.
0020: 30 2e 32 2e 35 37 31 20 0.2.571
0028: 69 6e 20 61 76 73 2e 70 in avs.p
0030: 70 6c 20 31 31 2e 30 2e pl 11.0.
0038: 32 2e 35 38 31 20 61 74 2.581 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 30 31 38 66 35 31 00018f51

Num 8

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 4/1/2012
Time: 4:11:51 PM
User: N/A
Computer: MA
Description:
Faulting application plugin-container.exe, version 8.0.1.4341, faulting module NPSWF32.dll, version 10.3.183.5, fault address 0x002c193a.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 70 6c 75 ure plu
0018: 67 69 6e 2d 63 6f 6e 74 gin-cont
0020: 61 69 6e 65 72 2e 65 78 ainer.ex
0028: 65 20 38 2e 30 2e 31 2e e 8.0.1.
0030: 34 33 34 31 20 69 6e 20 4341 in
0038: 4e 50 53 57 46 33 32 2e NPSWF32.
0040: 64 6c 6c 20 31 30 2e 33 dll 10.3
0048: 2e 31 38 33 2e 35 20 61 .183.5 a
0050: 74 20 6f 66 66 73 65 74 t offset
0058: 20 30 30 32 63 31 39 33 002c193
0060: 61 a

 

[ace_extreme]

sounds like your memory is bad man, do you have a memtest 86+ disk?

another reason can be a exe virus that currupts programs, those are pretty wicked.
also ubuntu disk has a memory tester.

running any mem test in windows will defeat you knowing for sure if its a software or hardware issue.

if memory passes 3x then i we can go through ms debugger and find out what driver is causing it. you can analyze your dumps or you can send to me

 

[Viper69]

sounds like your memory is bad man, do you have a memtest 86+ disk?

another reason can be a exe virus that currupts programs, those are pretty wicked.
also ubuntu disk has a memory tester.

running any mem test in windows will defeat you knowing for sure if its a software or hardware issue.

if memory passes 3x then i we can go through ms debugger and find out what driver is causing it. you can analyze your dumps or you can send to me

Thanks, I just cleaned up the computer as best as possible. Updated things that should be updated, like flash, KAV and a couple of other things. I have had only one FF crash since then. I haven't had another BSOD, HOWEVER, that doesn't mean anything.

I'll run memtest when I get a chance.

 

[Viper69]

Thanks, I just cleaned up the computer as best as possible. Updated things that should be updated, like flash, KAV and a couple of other things. I have had only two FF crashes since then (that's 2 more than I have ever had in recent years though!!!). I haven't had another BSOD, HOWEVER, that doesn't mean anything.

I'll run memtest when I get a chance.

 

[G33K454URU5 R3X]

You could also post the memory dumps that were generated by the BSOD and I can take a look at them for you. However, given the randomness of the applications crashing, I'd agree that it sounds like a faulty piece of RAM.

 

[Viper69]

You could also post the memory dumps that were generated by the BSOD and I can take a look at them for you. However, given the randomness of the applications crashing, I'd agree that it sounds like a faulty piece of RAM.

XP is currently set for recording complete memory dumps, not small dumps. Is that OK? How does one locate the memory dumps?

In found this location Dump File but can't figure it out where they are: %SystemRoot%\MEMORY.DMP

I did a regular file search for memory.dmp, XP found nothing.

I did see this in the Event Viewer related to Java. Now in FF, Java 6 Deployment Tool Kit has been disabled. In Add/Remove software, there's no listing of Java. So I'm not sure what this is all about. This error didn't cause a BSOD however.

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11310
Date: 4/7/2012
Time: 2:45:08 PM
User: ABCD\EFG
Computer: ABCD
Description:
Product: Java(TM) 6 Update 12 -- Error 1310.Error writing to file: C:\WINDOWS\Installer\39dfb82.rbf. System error 5. Verify that you have access to that directory.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 32 36 41 32 34 41 45 {26A24AE
0008: 34 2d 30 33 39 44 2d 34 4-039D-4
0010: 43 41 34 2d 38 37 42 34 CA4-87B4
0018: 2d 32 46 38 33 32 31 36 -2F83216
0020: 30 31 32 46 46 7d 012FF}

 

[ace_extreme]

XP is currently set for recording complete memory dumps, not small dumps. Is that OK? How does one locate the memory dumps?

In found this location Dump File but can't figure it out where they are: %SystemRoot%\MEMORY.DMP

I did a regular file search for memory.dmp, XP found nothing.

I did see this in the Event Viewer related to Java. Now in FF, Java 6 Deployment Tool Kit has been disabled. In Add/Remove software, there's no listing of Java. So I'm not sure what this is all about. This error didn't cause a BSOD however.

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11310
Date: 4/7/2012
Time: 2:45:08 PM
User: ABCD\EFG
Computer: ABCD
Description:
Product: Java(TM) 6 Update 12 -- Error 1310.Error writing to file: C:\WINDOWS\Installer\39dfb82.rbf. System error 5. Verify that you have access to that directory.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 32 36 41 32 34 41 45 {26A24AE
0008: 34 2d 30 33 39 44 2d 34 4-039D-4
0010: 43 41 34 2d 38 37 42 34 CA4-87B4
0018: 2d 32 46 38 33 32 31 36 -2F83216
0020: 30 31 32 46 46 7d 012FF}

sounds like you did a "system restore/rollback" or a registry program deleted the entry.... just reinstall.


chose based on your o/s

JAVA 32bit
JAVA 64BIT

 

[Viper69]

sounds like you did a "system restore/rollback" or a registry program deleted the entry.... just reinstall.


chose based on your o/s

JAVA 32bit
JAVA 64BIT

I bet it was CC Cleaner, I didn't do a sys restore. Thanks.

How is this different than Java over at Java.com ?

 

[ace_extreme]

this is the cleanest version you can download. it has no toolbars or extra junk

 

[BeepBeep2]

Please download WhoCrashed @ http://www.resplendence.com/whocrashed

Run the program and tell us the results of the last 4 dumps in analyzes (you can copy/paste)

 

[G33K454URU5 R3X]

XP is currently set for recording complete memory dumps, not small dumps. Is that OK? How does one locate the memory dumps?

In found this location Dump File but can't figure it out where they are: %SystemRoot%\MEMORY.DMP

It is located in %windir%\minidump - the files in there should prove sufficient for analysis

 

[Viper69]

It is located in %windir%\minidump - the files in there should prove sufficient for analysis

There were not files. I think because instead of having "minidumps" selected, my OS was selected for Complete dumps. All my BSOD's occurred w/the setting for complete dumps.

I ran the software, after changing that setting, I didn't restart XP, not sure if I should have restarted my computer. I entered the path below, and no directory was found. I looked inside the C:\WINDOWS directory myself, I don't see a folder called minidump Maybe I need to restart?


"The software you told me to install reported

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.


No valid crash dumps have been found on your computer"

 

[Viper69]

I just had another FF crash. No BSOD, but still crashing out of FF. I'm not convinced it's due to FF however. Here's what the software WhoCrashed gave as a report

What should I do??

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.


On Wed 4/25/2012 10:04:30 PM GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini042512-01.dmp
This was probably caused by the following module: win32k.sys (win32k+0xAAD8F)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFFBF8AAD8F, 0xFFFFFFFFA4B3D724, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\win32k.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Multi-User Win32 Driver
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.

 

[Viper69]

Crashing/BSOD- Any ideas?

I was running FF 11.0, iTunes 10.0, playing a song.

I was about to post when BSOD appeared. I ran WhoCrashed, and the following report came up...Any ideas?


On Sun 4/29/2012 3:35:35 AM GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini042812-01.dmp
This was probably caused by the following module: Unknown (0xFFFFFFFF804CE7F2)
Bugcheck code: 0x10000050 (0xFFFFFFFFC0D29C3C, 0x1, 0xFFFFFFFF804CE7F2, 0x0)
Error: CUSTOM_ERROR
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: Unknown .
Google query: Unknown CUSTOM_ERROR




On Wed 4/25/2012 10:04:30 PM GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini042512-01.dmp
This was probably caused by the following module: win32k.sys (win32k+0xAAD8F)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFFBF8AAD8F, 0xFFFFFFFFA4B3D724, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\win32k.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Multi-User Win32 Driver
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.