Bluescreen coming out of standby

[mikecel79]

I recently put a new machine together for my parents and everything works great except I'm getting a bluescreen whenever it comes out of standby. Here's the specs:

Gigabyte GA-8IPE1000-G (rev 4) 865PE
Celeron D 320
512MB RAM
80GB drive

Everything is brand new. I ran memtest and after 5 passes I had no errors. I've run scandisk and the drive comes back with no errors. All drivers are the latest.

Any ideas?

 

[Smilin]

How did you setup? Using Windows setup or an image?

 

[mikecel79]

I used a clean install of Windows XP Pro.

 

[dclive]

Originally posted by: mikecel79
I used a clean install of Windows XP Pro.

See anything in the dump, Smilin?

I need the OP to run MPS Reports and send me the computername.cab file.

Do you have an S3 twister in there?
Does the same thing happen if you change video cards?
Did it always happen?
What makes you think it's the IDE HDD?
Does your Device Manager have any errors in it?
Are you using all built-in Windows XP (Microsoft) drivers, or did you supply third party drivers?

 

[mikecel79]

Originally posted by: dclive

Originally posted by: mikecel79
I used a clean install of Windows XP Pro.

See anything in the dump, Smilin?

I need the OP to run MPS Reports and send me the computername.cab file.

Do you have an S3 twister in there?

Nope.

Does the same thing happen if you change video cards?

Originally there was a Nvidia TNT2 card in there but I swapped it out for a Radeon 7000 AGP and it did the same thing.[/q

Did it always happen?

Has happened since day one.

What makes you think it's the IDE HDD?

When I sent the crash report to Microsoft it came back and it said it had a problem trying to read from the hard disk.

Does your Device Manager have any errors in it?

Nope everything is clean.

Are you using all built-in Windows XP (Microsoft) drivers, or did you supply third party drivers?

I am using all the drivers supplied by the manufacturer.
ATI for the video card, Intel for the chipset, and Gigabyte for the NIC and sound card. All others would be the default ones that come with XP. I forgot to add this also has SP2 installed.

 

[dclive]

Originally posted by: mikecel79
When I sent the crash report to Microsoft it came back and it said it had a problem trying to read from the hard disk.

(I'm familiar with Microsoft's ability to read memory dumps, but...)

Can you detail *exactly* what you did? If someone at MS looked at it and said it's your IDE disks, then it's your IDE disks. However, was that an official Microsoft reading, at $245 per incident, or was that an educated guess, or was that an automated reading from some utility, or what?

 

[mikecel79]

After the machine bluescreened I rebooted and it asked if I wanted to send the report to Microsoft. I clicked Send and it came back and brought me to a web page. The page said that there was trouble reading from the hard disk. However it was a generic read error and it did not have a fix for the issue at this time.

I did not open up a case with PSS.

I don't have access to the machine now since it's at my parent's hosue. Next time I'm over there I can run the MPS reports if you want.

 

[dclive]

I'd love to see the MPS Reports and the dump file(s).

 

[mikecel79]

Just sent the dump file and the MPS Reports file over to you.

 

[dclive]

Originally posted by: mikecel79
Just sent the dump file and the MPS Reports file over to you.

I see 2 chkdsk events in the event log, which is a bit odd. But I don't see a reason why that would automatically be the source of the crash.

I'm getting this:
EXCEPTION_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
BUGCHECK_STR: 0xF4_IOERR_C000000E

...out of it, which unfortunately doesn't mean much to me. Maybe Bill can jump in and look at the dump.

On the other hand, you've got lots of dumps, of several different types, so perhaps you could send me a few older dumps too.

You do have some odd files, or at least references to files:

c:\huadio.tmp < I'd delete that or move it elsewhere & rename it, if it's really there.

Anyway, per the debug info, the basic issue is that csrss.exe is being killed or terminated --- as far as why, well, that's the question.

Like I said, perhaps bill can give a little more info....

 

[mikecel79]

Originally posted by: dclive

Originally posted by: mikecel79
Just sent the dump file and the MPS Reports file over to you.

I see 2 chkdsk events in the event log, which is a bit odd. But I don't see a reason why that would automatically be the source of the crash.

Would these show up if I ran a chkdsk myself? I know I ran at least one chkdsk on the drive just to check it out.

I'm getting this:
EXCEPTION_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
BUGCHECK_STR: 0xF4_IOERR_C000000E

...out of it, which unfortunately doesn't mean much to me. Maybe Bill can jump in and look at the dump.

On the other hand, you've got lots of dumps, of several different types, so perhaps you could send me a few older dumps too.

I'll see if I can get them to email me the rest of the dump files.

You do have some odd files, or at least references to files:

c:\huadio.tmp < I'd delete that or move it elsewhere & rename it, if it's really there.

I asked them to check and I don't see anything there.

Anyway, per the debug info, the basic issue is that csrss.exe is being killed or terminated --- as far as why, well, that's the question.

Like I said, perhaps bill can give a little more info....

Thanks for the help so far.

 

[dclive]

Would these show up if I ran a chkdsk myself? I know I ran at least one chkdsk on the drive just to check it out.

I showed 2 runs of CHKDSK that fixed things.... a little odd.


You do have some odd files, or at least references to files:
c:\huadio.tmp < I'd delete that or move it elsewhere & rename it, if it's really there.
I asked them to check and I don't see anything there.

Unfortunately, just looking isn't a very good indication. You should boot in safe mode, no networking, and look then. Ideally, you'd look at it over the network too, in safe mode with networking, to see what was there. In other words, things can easily be hidden from view - it's not at all difficult to have a driver that "filters" all files starting with, oh.... NT*... from view in all applications.

 

[eplebnista]

Updates?