BSOD on startup

imported_Acrobat · May 8, 2005

Basically my rig is as follows:

Asus A8N-SLI Deluxe
2x512MB Memory
6600GT
Windows XP Home SP2

When I set up this rig some six months ago, everything worked fine, but suddenly I started getting a BSOD on windows startup. The computer then reboots and settles back in the screen where you can choose safe mode etc. The BSOD is too fast to read what is written, and unticking the "restart on system crash" doesnt stop the computer from restarting. When in the safe mode selection screen, it wont allow me to start windows normally but windows does load if I choose safe mode or safe mode with networking. After doing that I use system restore and choose a restore point or two back, then eveything works well. However a couple of days later the same thing happens and I have to start again in safe mode and choose another restore point.

I tried formatting and reinstalling windows (that helped for a week or two), and I also updated my bios, mobo drivers and nvidia drivers

any help? any ideas?

I also noted that sometimes when this happens, my windows user profile also gets corrupted and windows logs me in with a default profile. To get back my old profile I have to choose a different restore point.

imported_Acrobat · May 8, 2005

By the way, once windows actually starts up, I have no problems what so ever, the system is very stable no matter what.

aGreenAgent · May 8, 2005

Interesting. Have you run memtest?

Also, post your full system specs (PSU, HD, etc.)

If it did it even after a format...then I'm not sure what to tell ya.

imported_Acrobat · May 8, 2005

Thanks, I didnt try memtest yet, I will give it a go.

My full specs are below:

A643500BX ATHLON64 3500+ BOX 939 PINS
Asus A8N-SLI DELUXE
KVR400X64C3AK2 / 1G Kingston 2x512MB Kit
Thermaltake Tsunami VA3400BNA ( 400WPSU)
VGA GeForce 6600GT 128MB DDRIII DVI/TV
SAMSUNG 3.5" 1.44MB FLOPPY DRIVE BLACK
Hard Disk Drive 160GB 7200 SATA HDU160.0GB HITACHI
MM DVDRW 16X +/- Samsung 8.5GB Black MM DVDRW TS-H552A BL

aGreenAgent · May 8, 2005

Also do a full chkdsk (chkdsk /r) on your HD. Short of memory or hard drive issues...I'm stumped.

imported_Acrobat · May 9, 2005

I ran memtest and everything was fine and I also ran chkdsk /r and all was fine too. However now I am remembering that sometimes (rarely) when the problem was occuring windows ran a chkdsk itself however it was a 3 stage test rather than a 5 stage test as I just carried out. I also remember seeing a "fips" error in the event viewer at that time. I`m not sure what fips is but I guess it could be a hard drive error after all. However this would be strange considering that chkdsk /r did not find any problems.

Is there any way I can try confirming wether my sata drive is the problem? Or does anyone have any other ideas?

montag451 · May 9, 2005

Download the diagnostic software from your hdd manufacturer's website.
Seagate tool can do just about every drive.
Maxtor tool can do just about every drive, as long as you have at least one maxtor drive in your system.

imported_Acrobat · May 9, 2005

Its a Hitachi SATA, i`ll try and run their tool. thanks

montag451 · May 9, 2005

No harm in trying the seagate tool as well.

Also, if you can dl a drive diagnostic kit:
http://www.google.com/search?q=hard+dri...sourceid=opera&num=0&ie=utf-8&oe=utf-8
and try one or two of them.
Let us know

imported_Acrobat · May 9, 2005

I tried the Hitachi tool both the quicktest and advanced test and got no errors. I also enabled SMART in my bios because it was disabled. Will try the seagate tool too.

In the meantime can someone explain to me what is fips?

montag451 · May 9, 2005

Can you post the SOURCE, EVENT ID, and any text that was with the fips error pls

imported_Acrobat · May 9, 2005

By filtering the event viewer I found these errors:

Event Type: Error
Event Source: Fips
Event Category: None
Event ID: 1
Date: 4/28/2005
Time: 6:38:04 PM
User: N/A
Computer: MARKCOMPUTER
Description:
The fips driver can't load. The driver failed the MAC self test.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 04 00 01 00 52 00 ......R.
0008: 00 00 00 00 01 00 10 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 21 02 00 c0 !..À

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 4/28/2005
Time: 6:38:17 PM
User: N/A
Computer: MARKCOMPUTER
Description:
The following boot-start or system-start driver(s) failed to load:
Fips

montag451 · May 9, 2005

The SCM error could be because you have an USB-connected keyboard but PS/2 keyboard support is still enabled in BIOS amongst other things.
I have never heard of the fips error before.

Can you post a Hijackthis log please

imported_Acrobat · May 9, 2005

Thanks loads for the help. You are correct about the keyboard! In the meantime this is my hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 6:51:43 PM, on 5/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Mark\Desktop\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v...86/client/wuweb_site.cab?1114349107491
O17 - HKLM\System\CCS\Services\Tcpip\..\{6DED10D7-C303-457C-A852-33C0A55C12EB}: NameServer = 80.71.96.8,80.71.96.7
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD33BB9C-0D5F-4453-87C5-E26A4B04B793}: NameServer = 80.71.96.8 80.71.96.7
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

imported_Acrobat · May 9, 2005

It just did it again and I also found these two other errors as soon as I rebooted:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 5/9/2005
Time: 7:11:34 PM
User: N/A
Computer: MARKCOMPUTER
Description:
The IPSEC Services service terminated with the following error:
The crypto system or checksum function is invalid because a required function is unavailable.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Fips
Event Category: None
Event ID: 1
Date: 5/9/2005
Time: 7:11:22 PM
User: N/A
Computer: MARKCOMPUTER
Description:
The description for Event ID ( 1 ) in Source ( Fips ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Data:
0000: 00 00 04 00 01 00 52 00 ......R.
0008: 00 00 00 00 01 00 10 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 21 02 00 c0 !..À

montag451 · May 9, 2005

I couldn't see anything nasty in your HJT log.
You might want to disable the startup items - all the acrobat stuff except for distiller.
Might also want to try the same with MSN messenger.

See if you get the same errors.

The only thing I came up with on the above errors isn't that much help. If the stopping startup items doesn't help, then you might want to disable drivers temporarily as a troubleshooting measure. I would start with some of the NVidia drivers:
http://www.microsoft.com/technet/suppor...Operating+System&LCID=1033&ProdVer=5.0

imported_Acrobat · May 10, 2005

Thank you, I will try it out when I get back home

imported_Acrobat · May 10, 2005

Originally posted by: montag451
I couldn't see anything nasty in your HJT log.
You might want to disable the startup items - all the acrobat stuff except for distiller.
Might also want to try the same with MSN messenger.

See if you get the same errors.

The only thing I came up with on the above errors isn't that much help. If the stopping startup items doesn't help, then you might want to disable drivers temporarily as a troubleshooting measure. I would start with some of the NVidia drivers:
http://www.microsoft.com/technet/suppor...Operating+System&LCID=1033&ProdVer=5.0

I didnt have time to test drivers one by one yet, however I did try using the sc query command at the command prompt. I got:

IPSEC Services error (above) Win32 exit code 0 (service running)
Fips error (above) Win32 exit code No 31 (service stopped)

anyone knows what this means?

imported_Acrobat · May 15, 2005

Just an update:

Problem solved, it was the dying Hitachi SATA drive (3months old!) I replaced it with a Samsung SATA 2 200Gb drive and things were working quite well except for another error (warning actually) Error 51: wndows paging to drive 0. After searching some forums I solved the error by disabling NCQ for that drive and since then its stable as a rock (fingers crossed

)

Thanks everyone for your help!

BSOD on startup

Member

Member

Senior member

Member

Senior member

Member

Diamond Member

Member

Diamond Member

Member

Diamond Member

Member

Diamond Member

Member

Member

Diamond Member

Member

Member

Member