Hello DAL,
I have been getting a couple BSoD lately. I had a problem with this computer awhile back with restarting issues when I tried to play a game and, though the effort was valiant by the DAL staff, the specific problem was never pin pointed. This machine has been working pretty good since then, most likely because I quit trying to play the game, but now I have been getting random BSoD. I can't remember how to retrieve the memory dumps that the computer is saving, and I also can't remember how to get the system information file you guys like to see. The two most common BSoD messages I get are:
There have been other BSoD messages that my wife has seen when she used the computer, however, she just restarted the machine without writing it down. Please let me know what I need to do to help you folks help me out here.
Go to start | search (type in) .dmp
Note the location of your .dmp files.
Then:
1) Download and install the Debugging Tools from Microsoft
2) Download and install this debugwiz
3) Open the Wiz & Browse to, or paste in the path to, your .dmp file.
4) After the Wiz creates a Text document attach it back to this thread.
Also: look in your Event viewer: rt. click My Computer then click Manage then Event Viewer.
Or: Administrative Tools/Event Viewer or Start/Run/eventvwr
Open the system as well as the application tabs & look for X errors. Click error line for details.
Post back the source & event id & Description especially of errors that seem to coincide with this issue.
Also check the Information lines that might coincide with this issue.
I checked out the event viewer and didn't come up with much. I had a system error the same day as a crash but about 8 hours beforehand. The error source was DCOM and the event was 10010. I also had an application warning about the same time as a crash with a source of userenv and an event of 1517. I ran the debug wiz on the minidump file and am attaching the output log. This dump file is from 6-23-06, however, I had another crash just a little while ago (6-28-06) which did not generate a minidump file or any warnings or errors in the event viewer. This latest crash took me to a screen that had "Beginning dump of physical memory" at the bottom and ran a counter from 1 to around 100. I noticed that when I searched for .dmp files, there were a bunch of them in a Minidump folder but there was a MEMORY.dmp which is much larger than the other .dmp files, about 100 Mb compared to around 70 Kb. Let me know if I need to do anything to help figure this out. Good luck.
Attach that Memory Dump. It was a full dump rather than a mini dump. You can set these settings but I don't know why they would have changed otherwise. For the future the settings are in:
Right click My Computer then click Properties then Advanced > Startup and Recovery/ Settings > Write Debugging Information
The dump you posted on the surface is a USB driver behaving badly. I am about out of here for tonight but will look at it further. Plus post the other full dump if you can. Will be back tomorrow evening.
I checked out my Startup/Recovery settings and under Write debugging information I have "Kernel memory dump" and then the dump file is "%SystemRoot%\MEMORY.DMP" with the Overwrite any existing file box checked. I'm wasn't sure which file you wanted me to upload, but I am attaching the debug file for MEMORY.DMP which I don't think worked correctly. As for the actual MEMORY.DMP file, it is really large and is a .dmp file so I can't attach it.
Okay, I did everything in your last post. I haven't had a crash yet today, but I haven't done much on the computer either. As for a USB driver fault, I have no idea. Of course, I have USB ports and I have accesories plugged in, but they all seem to work fine. I have my printer, my cable modem and an external hard drive all plugged in via USB. I went into the minidump folder this evening and there were a few .dmp files in there so I went ahead and debugged them. I am attaching the debug files of the last dumps with the date of the dump in the filename. I really have no idea which dumps coincide with crashes but maybe you can tell something by looking at them. I tried opening them up but I guess I don't know enough to tell if it is a reaccuring problem or different problems or what. The only thing I got out of looking at them was that my symbols are incorrect, but I have no clue what that means.
That last dump with atapi.sys as well as Norton Go Back...
Are you running any active applications from Norton other than AV? Is Go Back running in any way? Is it in any way involved with your USB external drive?
What does it mean that Norton AV is at the end of the stack before the crash? Norton AV somehow caused the crash? Sorry, I don't know much about what you are talking about here. I will try running the Trend Micro scan right now and I'll post the results in a little bit. Norton programs that are running on my computer (that I know of anyway) are AV, GoBack, and Internet Security. At least all three are down in my system tray at this moment. I don't think Go Back is involved with my external drive, unless it automatically monitors that drive for restoration purposes.
Junior Member
