Bsod :-( - moved by Tom

[bhelser]

I recently was given a laptop from a famimly member. He went 'away' for 7-10.......The laptop was in bad bad shape when I got it. Instead of trying to fix I just went ahead and put Vista Ultimate on it. This has been about 2-3 months. Everything has been fine until a week or so ago.......The computer has been turning it self off the past week, and tonight I got the BSOD (when it was turning it self off I wasn't using it so I am assuming it was getting the BSOD then as well, but cannot confirm. Here is a HiJack this log:

Logfile of HijackThis v1.99.1
Scan saved at 7:22:21 PM, on 7/2/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

[Tom]

Doesn't show or sound like infection particularly bhelser, but not sure to recommend a hardware solution or software. Did you write down any of the error info when getting the BSOD?

[bhelser]

The BSOD only lasted maybe 1 or 2 seconds before it turned it restarted it self. I did see something about a driver, but the only driver I have is for my video card, and that was updated when the computer was reeformatted.....why would that be a problem now?

[Tom]

Actually your system will have quite a few drivers, and quite a bit of driver software as well. Onboard compnents still require supporting system devices like drivers and the supporting software as well. I'll move your request to the CTH Vista forum where it has more opportunity for reviews and responses.

[bhelser]

OK thanks

[AnnMarie]

Hi bhelser. Have a look in Event Viewer and see what Errors (not Information or Warnings) were recorded at the time and date that the problem occurred. Go to Start > Search and type:

eventvwr.msc

eventvwr.msc will appear at the top of the Menu. Doubleclick on it and look under Summary of Adminstrative Events. Look at Errors only and post back the Event Source, the Event ID and any other relevant information (doubleclick on the Event and post what you see under "Description")

[bhelser]

There are several of them, I have listed all the ones that have occurred today below.

2 in the past hour
Source: Server
event ID: 2505
Description: The server could not bind to the transport \Device\NetBT_Tcpip_{B10446C5-925E-4A96-8263-9D29A44C2F46} because another computer on the network has the same name. The server could not start.

4 in the past hour
Source: netbt
Event ID: 4321
Description: The name "HELSERMEYER :20" could not be registered on the interface with IP address 208.100.168.209. The computer with the IP address 169.254.10.104 did not allow the name to be claimed by this computer.
--There was also another on at the same exact time with this description:
The name "HELSERMEYER :0" could not be registered on the interface with IP address 208.100.168.209. The computer with the IP address 169.254.10.104 did not allow the name to be claimed by this computer.

1 in the past hour
Source: Servcing
Event ID: 4375
Description: Windows Servicing failed to complete the process of setting package KB935652 (Update) into Staging(Staging) state

30 in the past hour
Source: Servicing
Event ID: 4385
Description: Windows Servicing failed to complete the process of changing update 935652-30_RTM_LDR from package KB935652(Update) into Staging(Staging) state

I hope this is enough (correct) information.

Thanks

[AnnMarie]

Those events all seem to be network related.

Let's try this. Open a command prompt. Go to Start Search and type cmd.exe. You will see the file appear at the top of the Menu. Rightclick on it and choose "Run as administrator" and copy and paste the below command after the prompt.

%SystemRoot%\System32\wercon.exe

Problem Reports and Solutions will open. Click on View Problem History. Can you please copy what you see for the dates when the problem occurred (I'm afraid you will have to do this manually but no need to duplicate identical entries) and post it here.

[bhelser]

will this work, or do you need the details?


http://i31.photobucket.com/albums/c400/bhelser/NewBitmapImage-3.jpg

[AnnMarie]

Yes, that's good.

It's the three Windows errors that we need to look at. Doubleclick on each and click on "Copy to clipboard" in the bottom lefthand corner of the Window.

Paste each report in this thread please.

[bhelser]

Product
Windows

Problem
Shut down unexpectedly

Date
6/13/2007 6:50 AM

Status
Not Reported

Problem signature
Problem Event Name: BlueScreen
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033

Files that help describe the problem (some files may no longer be available)
Mini061307-01.dmp
sysdata.xml
Version.txt

Extra information about the problem
BCCode: d1
BCP1: 0000002C
BCP2: 00000002
BCP3: 00000000
BCP4: 87D7C230
OS Version: 6_0_6000
Service Pack: 0_0
Product: 256_1

Product
Windows

Problem
Shut down unexpectedly

Date
6/21/2007 6:02 PM

Status
Report Sent

Problem signature
Problem Event Name: BlueScreen
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033

Files that help describe the problem (some files may no longer be available)
Mini062107-01.dmp
sysdata.xml
Version.txt

Extra information about the problem
BCCode: a
BCP1: 8A5A0980
BCP2: 0000001B
BCP3: 00000000
BCP4: 81863725
OS Version: 6_0_6000
Service Pack: 0_0
Product: 256_1
Server information: a6509d0f-162b-4116-a03d-7e9ef4305f98


Product
Windows

Problem
Shut down unexpectedly

Date
7/2/2007 7:13 PM

Status
Not Reported

Problem signature
Problem Event Name: BlueScreen
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033

Files that help describe the problem (some files may no longer be available)
Mini070207-01.dmp
sysdata.xml
Version.txt

Extra information about the problem
BCCode: d1
BCP1: 008BC420
BCP2: 00000002
BCP3: 00000000
BCP4: 008BC420
OS Version: 6_0_6000
Service Pack: 0_0
Product: 256_1

[AnnMarie]

Good files are available that may help. Can you click on "files that help describe the problem" and copy and save the .dmp file and xml created in each case please. Zip them up and send them to me please. My email address is anniefriday@xtra.co.nz. Please title your email "Requested Files". I'll post back when I have had a look at them. No promises but I'll give it my best shot. :)

[bhelser]

Email sent!

[bhelser]

The dates may be off, as I just noticed my Date was set as July 2, 2007. This must have happened today, as my AVG just notified me, and hasn't done that before

[AnnMarie]

I ran a debugger and three files were singled out.

nvlddmkm.sys which is installed by your NVIDIA GeForce FX Go5200 card. bcmwl6.sys which is installed by your BCM 802.11g Network Adapter wireless driver and netbt.sys which is the Vista NetBIOS over TCP/IP driver.

If I were you, I would look for newer drivers for both your video adaptor and network adaptor and then see if this fixes the problem.

[bhelser]

Hi AnnMarie,

I am sorry for not getting back to you.....I didn't have internet for a few months. I tried to install the driver for the video card, but it said that it wasn't compatible :(

I could not find a driver for either of the other two. Any help with that would be greatly appreciated!

just an update, the BSOD/freezing/turning itself off has continued

Thanks,

[AnnMarie]

Ok, let's take them one at a time. What driver did you try to install for your graphics card. Show me the link please. Also what make and model laptop is this?

[bhelser]

Here is the link for the driver
http://www.nvidia.com/object/winvista_x86_96.85_2.html

The laptop is a Dell Inspiron 8600 with Vista Ultimate (32 bit)

[AnnMarie]

I checked on the Dell site and they do not offer any drivers that might help you.

Try installing the driver here (http://drivers.softpedia.com/get/GRAPHICS-BOARD/NVIDIA/NVIDIA-ForceWare-9685-Generic-Beta-Driver.shtml). It is a beta but others have had good experiences with it. Set a restore point first and let me know how you get on.

[bhelser]

OK I downloaded that driver and installed it.......so far so good. (although it has only been 5 minutes ;))

[AnnMarie]

lol..ok, give it a day or two and post back with an update.

[bhelser]

Should I just see if this fixes the issues, or do I need to worry about the other 2 drivers?

[bhelser]

I got home and it had crashed again while I was at work :(

[AnnMarie]

Darn. Have you downloaded and installed all Windows Updates? There have been several released recently that address Vista compatibility issues.

[bhelser]

yes, the latest came through on Thursday night...I think it was 3 or 4 of them.

[AnnMarie]

Can you post the errors in Event Viewer that occurred when you experienced the last crash please.

[bhelser]

This error happened twice in the last 10 minutes :-(

If this info is not what you need, let me know and I'll get whatever info you need. Thank you for being so patient with me

- System

- Provider


[ Name] EventLog


- EventID 6008


[ Qualifiers] 32768



Level 2


Task 0


Keywords 0x80000000000000

- TimeCreated


[ SystemTime] 2007-09-11T02:06:23.000Z



EventRecordID 24305


Channel System


Computer Helsermeyer


Security
- EventData


7:04:44 PM


9/10/2007










283










D707090001000A00130004002C007402D707090002000B0002 0004002C007402600900003C00000001000000600900000000 0000B00400000100000000000000
Binary data:

In Words
0000: 000907D7 000A0001 00040013 0274002C
0008: 000907D7 000B0002 00040002 0274002C
0010: 00000960 0000003C 00000001 00000960
0018: 00000000 000004B0 00000001 00000000

In Bytes
0000: D7 07 09 00 01 00 0A 00 ×.......
0008: 13 00 04 00 2C 00 74 02 ....,.t.
0010: D7 07 09 00 02 00 0B 00 ×.......
0018: 02 00 04 00 2C 00 74 02 ....,.t.
0020: 60 09 00 00 3C 00 00 00 `...<...
0028: 01 00 00 00 60 09 00 00 ....`...
0030: 00 00 00 00 B0 04 00 00 ....°...
0038: 01 00 00 00 00 00 00 00 ........

[AnnMarie]

That's just a warning that the previous shutdown was unexpected.

Looking back at the screenshot that you posted back in June, I can see that your problems seemed to start after the installation of three drivers. One on the 4th of May and two drivers on the 27th of May. What were these?

[bhelser]

May 4th would have been the Video Card driver....as for the other 2 I have no idea.......as far as my virgin vista brain knew that was the only driver I needed.

[AnnMarie]

Can you go to Problem Reports and Solutions in Control Panel and click on View Problem History please. Doubleclick on those two reports (May 27th) one at a time, click on Copy to Clipboard and post what you see back here.