Windows XP...Reboots randomly

stljason1 · #1 (**permalink**) 10-12-2005, 05:42 AM

Okay so all of a sudden my computer seems to like to not reboot, or not reboot on the first try, instead giving me a message when it finally does load windows that it has recovered from a serious error. Sometimes it will just randomly restart like this. I have been able to get a lot of letters and numbers on this issue, which I will now share with you. Its apparently a stop error? Anyways, attached are the screen I get when windows boots after this error, and also the log of the error in the event viewer.

Also, I managed to get this information on a blue screen:

Stop: 0x0000008E (0xC000001D, 0xBF80B23D, 0xB7A60AEC, 0x00000000)

Win32k.sys-Address BF80B23D base at BF800000.

Oh and I also ran a memory test, my memory is fine.

If anyone has any clue as to what any of this means, I would greatly appreciate any help on this matter. If I need to provide any more information, just let me know.

jephree · #2 (**permalink**) 10-12-2005, 05:59 AM

0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED

A kernel mode program generated an exception which the error handler didn’t catch.
These are nearly always hardware compatibility issues (which sometimes means a driver issue or a need for a BIOS upgrade).

Just to clarify this is a booting issue and not a crashing issue?

Has the computer been running check disk before booting? If not:

start > run > cmd
in the new window type chkdsk/f
when prompted to run on boot choose Y & reboot
this will check for & fix any disk errors.

Do you have a retail version XP CD or an OEM? If the latter who is the manufacturer?

For a more detail error report you can follow the following:

Go to start | search (type in) .dmp
Note the location of your latest .dmp file.

Then:

1) Download and install the
Debugging Tools from Microsoft
2) Download and install this
debugwiz
3) Open the Wiz & Browse to, or paste in the path to, your latest .dmp file.
4) After the Wiz creates a Text document attach it back to this thread.

stljason1 · #3 (**permalink**) 10-12-2005, 06:12 AM

I just recently did a checkdisk just as you described, it passed it with no problems.

I believe I have an OEM version of XP CD, although Im not sure exactly what you mean by OEM. The XP CD I have is a Recovery CD that says that is was provided by American Future Technology. Im sorry I dont currently have time to get that more detailed error report for you, but I will as soon as possible and post that here as well. Anything else you want me to try just let me know.

jephree · #4 (**permalink**) 10-12-2005, 06:20 AM

OEM (Original Equipment Manufacturer) would be American Future Technology in your case. XP was pre-installed by them. The importance of this is that although it is XP it is not a Microsoft Disk and therefore many standard fixes from the Microsoft disk are not available to you.

I will try to locate their (American Future Technology) web site.

Also:

Just to clarify: this is a booting issue and not a crashing issue?

Does the computer crash & then have problems rebooting or does it have problems booting from scratch?

stljason1 · #5 (**permalink**) 10-12-2005, 07:02 PM

Actually, it kind of seems like its both. Sometimes when booting up for the first time after a normal shutdown, it will have trouble loading windows, other times it will crash windows, and reboot automatically. So to answer your question, both? Anyways, I was also told by someone else to download registry mechanic and scan the registry for errors. I am about to try that then I will also get that more information by downloading those two tools you describe.

stljason1 · #6 (**permalink**) 10-12-2005, 07:19 PM

Alright I ran the registry mechanic and it did find a lot of errors, some of which I couldnt fix with the trial version. But it did fix a lot of stuff so im not sure if that did anything or not. Attached is the text document of the debugger.

Well, im still having problems. Sometimes windows will load fine and work, other times it will look like it loads fine, then I'll try to open Internet explorer and it will instantly crash. Just let me know what I need to do next.

Oh, and I also ran a log of Hijackthis, although I ran it during a time when my system seems to be relativley stable, or a "good boot" as Im beginning to call it.

Logfile of HijackThis v1.99.1
Scan saved at 2:09:16 PM, on 12/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.excite.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.excite.com
O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - blank (file missing)
O2 - BHO: C:\WINDOWS\system32\st3.dll - {1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5} - C:\WINDOWS\system32\st3.dll
O2 - BHO: TTB000000 - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\WINDOWS\COUPON~1.DLL
O2 - BHO: C:\WINDOWS\adsldpbe.dll - {7507739F-BC2E-4DC3-B233-816783C25DC9} - C:\WINDOWS\adsldpbe.dll
O2 - BHO: blank - {826B2228-BC09-49F2-B5F8-42CE26B1B712} - blank (file missing)
O2 - BHO: (no name) - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - (no file)
O2 - BHO: MSEvents Object - {B313D637-F405-4052-AC37-E2119AB3C8F8} - blank (file missing)
O3 - Toolbar: (no name) - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: CouponBar - {5BED3930-2E9E-76D8-BACC-80DF2188D455} - C:\WINDOWS\CouponBarIE.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunServices: [Windows Hosts File] WindowsHosts.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyPoker.net\partypokernet.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyPoker.net\partypokernet.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://akamaidownload.apple.com/530x...TunesSetup.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O20 - AppInit_DLLs: interceptor.dll
O20 - Winlogon Notify: geedc - C:\WINDOWS\system32\geedc.dll (file missing)
O20 - Winlogon Notify: gs - C:\WINDOWS\adsldpbd.dll (file missing)
O20 - Winlogon Notify: st3 - C:\WINDOWS\system32\st3.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Canon PIXMA iP6000D Memory Card Manager (PDUiP6000DMemCrdMgr) - CANON INC. - C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

jephree · #7 (**permalink**) 11-12-2005, 02:23 AM

Is that the only log you have? It is not related to your 0x0000008E crash.

The latter log was triggered by your audio driver.

After a "good boot" everything is fine till your next shutdown? In other words a crash is right after booting or during the boot? Does it always make windows before it crashes? Do you ever watch the RAM count in the BIOS POST? Do you ever get BIOS errors RE: hard drive not found etc.? How old is this computer?

If you want the HijackThis log read you need to post it in the HijackThis section:
http://www.d-a-l.com/help/spyware-adware-viruses-hijackthis-logs/
I see nothing at a glance but our professional readers only read logs in their section.

If you have more dumps post them here.

Registry cleaners generally only remove unnecessary entries.

Your symptoms appear to me to be hardware related. You checked your RAM; next I would suggest the hard drive. If you know the manufacturer you can get their diagnostic from their web site:

http://www.tacktech.com/display.cfm?ttid=287

You can run this scan for your computer specs: http://www.belarc.com/free_download.html

What is listed under: System Model? Main Circuit Board? Drives?

I can find nothing relating to a American Future Technology computer company.

stljason1 · #8 (**permalink**) 11-12-2005, 06:48 PM

Okay to bring you up to date, I tried to do a system restore, but I dont think it worked, as in the computer didnt boot correctly after the system restore. But suprisingly enough, everything seemed to work fine for quite awhile after that, at least until I started to reply here. Thats when I started getting an error while browsing IE. It was just your normal Illegal operation error, and it closes IE. The first couple times it did it it didnt shut down the computer, just shut down IE. Then it finally did shut down the computer, and I have the log from that error attached. One thing that Ive noticed seems to pop up besides the normal IE error, is also a Dr.Watson Postmortem Debugger error. When this error pops, it seems to be a sign that the computer is really messed, and is about to shut down. Now to answer your questions, no, I wouldnt say everything is fine until my next shutdown after a good boot. Everything is fine for awhile, as in IE dosent crash the computer to begin with. But eventually I will start getting the crashes again. Im not sure what you mean by watching the ram count in the BIOS post, and ive never got any hard drive not found errors. The computer is was purchased in may of 2003, so a little over 2 years old. I ran that program, and listed under what you requested is as follows:

System Model: americanfuture MS-6585 1.0
Main Circuit Board: Board: MSI MS-6585 1.0
Bus Clock: 133 megahertz
BIOS: American Megatrends Inc. Version 07.00T 07/03/02

Drives:
80.02 Gigabytes Usable Hard Drive Capacity
38.00 Gigabytes Hard Drive Free Space

ARTEC WSM-52X [CD-ROM drive]
IDE DVD-ROM 16X [CD-ROM drive]
3.5" format removeable media [Floppy drive]

WDC WD800JB-00CRA1 [Hard drive] (80.03 GB) -- drive 0, s/n WD-WCA8E7492182, rev 17.07W17, SMART Status: Healthy

The more I play around with stuff the more I think it might be spyware/virus related. I did have some sort of infection a few weeks ago but ive scanned my computer and nothing comes up. Which is why I think I will post that hijackthis log in the correct forum. Thanks for you help so far!

jephree · #9 (**permalink**) 12-12-2005, 02:17 AM

OK ... I see your HijackThis thread. When you are clean there come back to this thread & we will carry on!

That last dump mirrored your first post error.

That hard drive is a Western Digital. Belarc shows it as healthy but you might want to download & run the WD diagnostic:

http://support.wdc.com/download/downloadxml.asp

The dump could be the graphics driver; perhaps modem; perhaps RAM (I know you tested). Is the RAM all the same speed? Is the RAM or CPU overclocked?

Again: take care of your HijackThis matter first.

stljason1 · #10 (**permalink**) 14-12-2005, 04:03 PM

Okay well Im hopefully now clean with my hijack this stuff, so on with this problem I guess. I havent had much time to fool around yet since ive been clean, so I dont know if the problem is still occouring or not quite yet. I did upgrade my RAM from 512mb to 1 Gig awhile back, by putting in another 512 stick. And when I say while back I mean probably over 6 months ago. I made sure the speed matched my old one, which was PC3200. Nothing is overclocked on my system. I tested the RAM with the Windows memory diagnostic and it ran all the way through with no problems, is there something else that would test it more fully? Also, where on that webpage is the diagnostic I should run? There is a lot of stuff on there and im a little confused as to what exactly I should run.