I just built my own system for the first time last week and all seemed to be running well until I started getting a BSOD at random intervals,

Its either a

Kernal_Data_In_Page_Error

Stop 0x0000007A (0xC05d38C0, 0xC000000E, 0XBA718384, 0x179E0860)

*** Atapi.sys addresss BA718384 Base at BA70B000 Date stamp 41107B4D

or

Kernel_Stack_In_Page_Error

Stop 0x00000077 (0x0000000E, 0xc000000E, 0x00000000, 0x0132F000)


All my hardware is brand new with the exception of my 2 Hard drives which the computer has no problem recognizing, I used them on my dell system before swapping them over and both worked flawlessly, I have run chkdsk on both and it is not reading any bad sectors.

I have reinstalled windows twice and problem is presisting. From what I have read Im led to believe that its a hardware problem with either my new ram or my mobo. but with both being only 2 weeks old i don't see how that could be.

Any suggestions or help would be much appriceated.

See if you can get some full dump logs as seen here:

http://www.d-a-l.com/help/showthread.php?t=50190

My thanks to those who responded, this is my first attempt at debugging a problem like this, so please bare with me while I ask some noob questions


After reading some posts on these forums I have no changed the write debugging infomation setting to : kernel memory dump
Will I have to wait for the next blue screen before this will yield any information ? and would that be better to post than the application and system info I have itemized below?

how do I know if my blue screen shows a memory dump?


I have now also downloaded byt the debugging tolls from microsoft and debugwiz, how or where do I find the path to
my .dmp file?

Im not sure which of these errors are relivant and which are useless so I posted all that were in the file.
there is only one that I think references my BSOD even tho I have experienced several, not sure why that would be. it is the final error posting before I list the applications errors.


again any assistance whatosoever is much appriceated

-Frost



System

Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1000
Date: 10/13/2007
Time: 3:18:08 PM
User: N/A
Computer: LIEUTENA-162720
Description:
Your computer has lost the lease to its IP address 192.168.100.10 on the Network Card with network address 001BFCE486F1.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 10/13/2007
Time: 3:17:41 PM
User: N/A
Computer: LIEUTENA-162720
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 10/13/2007
Time: 3:17:41 PM
User: N/A
Computer: LIEUTENA-162720
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------


Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 10/13/2007
Time: 3:17:36 PM
User: N/A
Computer: LIEUTENA-162720
Description:
The IP address lease 99.243.125.132 for the Network Card with network address 001BFCE486F1 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------


Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1000
Date: 10/11/2007
Time: 2:22:30 AM
User: N/A
Computer: LIEUTENA-162720
Description:
Your computer has lost the lease to its IP address 192.xxx.xxx.xx on the Network Card with network address 001BFCE486F1.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 10/11/2007
Time: 2:22:03 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 10/11/2007
Time: 2:22:03 AM
User: N/A
Computer: LIEUTENA-162720
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------------------------------------


Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 10/11/2007
Time: 258 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The IP address lease 99.xxx.xxx.xxx for the Network Card with network address 001BFCE486F1 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------

also several warnings like this
Event Type: Warning
Event Source: Ftdisk
Event Category: Disk
Event ID: 57
Date: 10/9/2007
Time: 6:01:32 PM
User: N/A
Computer: LIEUTENA-162720
Description:
The system failed to flush data to the transaction log. Corruption may occur.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 be 00 ......¾.
0008: 02 00 00 00 39 00 04 80 ....9..€
0010: 00 00 00 00 0e 00 00 c0 .......À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1000
Date: 10/9/2007
Time: 9:19:32 AM
User: N/A
Computer: LIEUTENA-162720
Description:
Your computer has lost the lease to its IP address xxx.xxx.xxx.xx on the Network Card with network address 001BFCE486F1.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 10/9/2007
Time: 9:19:05 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------------------------------------


Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 10/9/2007
Time: 9:19:05 AM
User: N/A
Computer: LIEUTENA-162720
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1000
Date: 10/9/2007
Time: 3:33:10 AM
User: N/A
Computer: LIEUTENA-162720
Description:
Your computer has lost the lease to its IP address xxx.xxx.xxx.xx on the Network Card with network address 001BFCE486F1.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 10/9/2007
Time: 3:28:11 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

------------------------------------------------------------------------------------------------------------------
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 10/9/2007
Time: 3:28:11 AM
User: N/A
Computer: LIEUTENA-162720
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 10/9/2007
Time: 3:28:06 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The IP address lease xx.xxx.xxx.xxx for the Network Card with network address 001BFCE486F1 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



------------------------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Date: 10/6/2007
Time: 4:34:46 PM
User: N/A
Computer: LIEUTENA-162720
Description:
The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1f 00 00 00 ....

------------------------------------------------------------------------------------------------------------------


Application log
----------------


Event Type: Error
Event Source: Windows Search Service
Event Category: Gatherer
Event ID: 3024
Date: 10/6/2007
Time: 5:40:19 PM
User: N/A
Computer: LIEUTENA-162720
Description:
The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again.

Context: Windows Application, SystemIndex Catalog


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Event Type: Error
Event Source: ASP.NET 1.0.3705.6018
Event Category: (1)
Event ID: 1031
Date: 9/29/2007
Time: 9:25:30 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The description for Event ID ( 1031 ) in Source ( ASP.NET 1.0.3705.6018 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154.

From a quick glance all of the above are benign errors.

Internet time and issues with your internet connection etc.

When a BSOD crash occurs you will see on the blue screen the message:

Beginning Memory Dump ...

The dumps can be found by going to search and typing .dmp

Your original errors can be looked at here but the dumps should give us more direct ideas regarding your particular situation.

http://www.aumha.org/a/stop.htm


0x00000077: KERNEL_STACK_INPAGE_ERROR
(Click to consult the online MSDN article.)
A page of kernel data requested from the pagefile could not be found or read into memory. This message also can indicate disk hardware failure, disk data corruption, or possible virus infection.
General discussion. {KB 228753} Win NT, Win 2000, Win XP
General discussion. {KB 315266} Win XP
Windows NT 4.0 Setup Troubleshooting Guide {KB 126690} NT 4 (Recommendations for the current error message are buried down inside this article, which isn’t necessarily limited to NT 4.)


-----------------

0x0000007A: KERNEL_DATA_INPAGE_ERROR
(Click to consult the online MSDN article.)
A page of kernel data was not found in the pagefile and could not be read into memory. This might be due to incompatible disk or controller drivers, firmware, or hardware.
Windows NT 4.0 Setup Troubleshooting Guide {KB 126690} NT 4 (Recommendations for the current error message are buried down inside this article, which isn’t necessarily limited to NT 4.)
Connecting a Hard Disk Drive in Slave Only Mode Leads to System Halt During Resume From Standby {KB 330100} Win XP SP1 (Windows installed on a slave drive.)
BIOS Manufacturers Should Not Clear the IDE Decode Enable Bit in _STM ACPI Method {KB 913379} Win 2000, Win XP, Server 2003, Vista

I thought I would start a new post since I didn't really know what questions to ask on my last one. Just to recap I just built my own system for the first time last week and all seemed to be running well until I started getting a BSOD at random intervals, This is my first attempt at debugging a problem like this, so my experience is quite limited, so it would be great if any pointers or directions were written in crayon for me :P

I have now downloaded by the debugging tools from microsoft and debugwiz, how or where do I find the path to
my .dmp file? I have treid a basic windows search using .dmp but it has yeilded not results. Im not sure what my next step is now.


This is the BSOD I recieved tonight

Kernal_Data_In_Page_Error

Stop 0x0000007A (0xC05d38C0, 0xC000000E, 0XBA718384, 0x179E0860)

*** Atapi.sys addresss BA718384 Base at BA70B000 Date stamp 41107B4D

Beginning Dump of Physical Memory



This is from the system log file in the event viewer, it was the last error listed after my reboot. There was no error listed under the application Tab.

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 34
Date: 10/19/2007
Time: 12:19:19 AM
User: N/A
Computer: LIEUTENA-162720
Description:
The time service has detected that the system time needs to be changed by +75590 seconds. The time service will not change the system time by more than +54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|99.243.125.132:123->207.46.130.100:123) is working properly.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



My previous two BSOD's are listed below

Kernal_Data_In_Page_Error

Stop 0x0000007A (0xC05d38C0, 0xC000000E, 0XBA718384, 0x179E0860)

*** Atapi.sys addresss BA718384 Base at BA70B000 Date stamp 41107B4D

and

Kernel_Stack_In_Page_Error

Stop 0x00000077 (0x0000000E, 0xc000000E, 0x00000000, 0x0132F000)


All my hardware is brand new with the exception of my 2 Hard drives which the computer has no problem recognizing, I used them on my dell system before swapping them over and both worked flawlessly, I have run chkdsk on both and it is not reading any bad sectors on either of them.

I have reinstalled windows twice and problem is presisting. From what I have read Im led to believe that its a hardware problem with either my new ram or my mobo. but with both being only 2 weeks old i don't see how that could be.

Again Any suggestions or help would be much appriceated.

Please stick to one thread as we are already trying to help.

Thanks.


Please try to get a full dump log.

If no .dmp look for minidump

Also did you follow all the links from the Aumha site?

The fact that all your dumps are the same is good in the sense that there is probably one piece of hardware malfunctioning in and of itself or in regards to system compatibility.

Are you sure your RAM is compatible with the motherboard?

==============

Also if you are not getting dump logs:

1) Let the Memory dump run all the way to 100%

2) Reset the option of dump form to Kernel Memory Dump.

jephree

my apologies for the second thread post, thank you for taking the time to respond, I really appriceate it!

Some questions for you

I did a search for .dmp, found only one dmp file "user.dmp" inside the dr watson folder. it registers as an unknown file type and I am unable to read it with any program, I tried with notepad but there was no relivant data that i could post here. what am I doing wrong?


how do I let the memory dump run to 100%? and what infomation will that provide me with?


I did check out the links from the Aumha site, however i didn't see anything that that specifically referenced my problem, the perameteres they were referencing didn't match the ones coming up in my BSOD. when I purchased the ram I was told it was compatible with the motherboard, as I bought them both at the same time. As I said above its probably the ram or the mobo, I don't know which, is there any way I could run a test on each or cause the bsod to happen myself ? rather than waiting for it at random intervals?

many thanks again

I also changed the "write debugging information" under startup and recovery to kernel memory dump, where can I find this file on my system?