Computer Freezes and sometimes blue screens

[forged]

Hi, This is my first time posting and i would like to thank anyone in advance if they could shed some light on problem. Im not sure if its Hardware or Software related.

I bought a new PC a week ago and it was running fine to start off with and as i have installed some programs the problem has started to appear.

It will freeze ocasionaly
Sometimes i will get a blue screen
after the pc is restarted it will get "windows has recoverd from a series error"
in detail

BCCode : 100000d1 BCP1 : 00000000 BCP2 : 00000002 BCP3 : 00000000
BCP4 : BA359406 OSVer : 5_1_2600 SP : 2_0 Product : 256_1


Amd 939 Venice 3500+
Asus A8N-E Nforce 4 Ultra
430w PSU
2gig OCZ Performance 2.5L DDR (4x512mb)
200GB SATA Seagate HDD
300GB SATA Seagate HDD
Leadtek winfast 7800GTS VIVO
Creative Audigy Plantnuim EX
runnin...
XP PRO SP2 all curent updates
Norton Antivirus
Zone Alarm Pro
Registy Mechanic
Adaware

As far as i can tell the pc is clean, and the problems are to infreqwent 2 tell what's causing it.

I got the first blue screen when i installed 3dsmax6 subsquently updated to 7 works fine,
no blue screen so makes me think maybe the videocard driver?

number 2 thought is, too much "lag" in memory caused by bottleneck

number 3 powersupply is insufficent

or maybe it software related, i have no idea

Logfile of HijackThis v1.99.1
Scan saved at 7:11:20 PM, on 5/08/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\BearShare\BearShare.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinAce\WinAce.exe
C:\DOCUME~1\-\LOCALS~1\Temp\~AceTemp\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda...86/client/wuweb_site.cab?1122607703971
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner.cab
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: WinFast(R) Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Any help would be greatly appreciated
-pete

 

[ZYFER]

The most important message we need to know is what that Blue screen says...

 

[BadThad]

No offense, but you have a good deal of crap running at startup. Most obvious issue I see is "bearshare", the free version is loaded with malware. Why do you have it runnning at startup? Why use zonealarm? The windows built-in firewall works fine and can conflict with ZA if it's not disabled. Are you running a web server? I see apache loaded, if not, you need to kill these processes.

I'd KILL the following startup processes:


O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

Unnecessary Processes:

C:\WINDOWS\system32\CTsvcCDA.EXE

Do you use any anti-malware programs?

 

[walkure]

The reason Apache is running is due to his nVidia firewall (also see nsvcIP.exe). That program SUCKS, completely leaks memory, etc. Apache is used for the web-based firewall configuration.

 

[dclive]

Originally posted by: forged

Hi, This is my first time posting and i would like to thank anyone in advance if they could shed some light on problem. Im not sure if its Hardware or Software related.

I bought a new PC a week ago and it was running fine to start off with and as i have installed some programs the problem has started to appear.

It will freeze ocasionaly
Sometimes i will get a blue screen
after the pc is restarted it will get "windows has recoverd from a series error"
in detail

If you can do all Windows updates and all driver updates, confirm the problem still exists, and then send me the most recent few .dmp files found in c:\windows\minidumps, and run MPS Reports (see my .sig) and send me the requested info from my .sig (URL of this topic...) I can look at the memory dump and perhaps tell you what's going wrong.

Obviously, it's most likely a kernel-level driver you've installed. One possibility is zone alarm; if you wanted to test things you could quickly uninstall it (not just turn it off - that won't do it) and see if the issue went away.

I agree with others' posts - run MS Antispyware Beta (link for that too in my .sig) at all times.

 

[forged]

A big thanks to everyone for helping me out with this.
i really appreciate it.
ZYHRER, the blue screen flashs real qucik..... BAD_POOL_HEADER
BADTHAD, no offence takin, appreciate your ur help, its a new Pc and yeap thiers alot of crap runnin on the startup, ive takin ur advice and removed those proceses.
an yeap i use anti-malware, (thanks to the anandtech forum secuirty thread i made a few changes) at the present time iam running :
sygate firewall
crapcleaner
ad-aware
microsoft anitspyware
spyware blaster protected browsers
and antivir

walkure yea i agree nvidia firewall does suck, from what i have read they are suppose to bringin out new drivers, routers got a hardware firewall, so i have disabled the nvidia one

dclive yeap windows updates are upto date and so are my drivers for sound/video card not sure about the bios (havent ventured that ran into my pc)
zonealarm is out of here, replaced it with Sygate, and i have microsoft antispyware runnin. I will email u last few minidumps and the MPS Report

thanks again for responding to this post
-pete

 

[dclive]

Originally posted by: forged
A big thanks to everyone for helping me out with this.
i really appreciate it.
ZYHRER, the blue screen flashs real qucik..... BAD_POOL_HEADER
BADTHAD, no offence takin, appreciate your ur help, its a new Pc and yeap thiers alot of crap runnin on the startup, ive takin ur advice and removed those proceses.
an yeap i use anti-malware, (thanks to the anandtech forum secuirty thread i made a few changes) at the present time iam running :
sygate firewall
crapcleaner
ad-aware
microsoft anitspyware
spyware blaster protected browsers
and antivir

walkure yea i agree nvidia firewall does suck, from what i have read they are suppose to bringin out new drivers, routers got a hardware firewall, so i have disabled the nvidia one

dclive yeap windows updates are upto date and so are my drivers for sound/video card not sure about the bios (havent ventured that ran into my pc)
zonealarm is out of here, replaced it with Sygate, and i have microsoft antispyware runnin. I will email u last few minidumps and the MPS Report

thanks again for responding to this post
-pete

I don't want the last few dumps. Ignore everything you have in \minidumps right now - I need to know if any dumps are made *after* you made these changes, did your Windows updates, removed the software you listed above (again, disabling it doesn't cut it - you need to REMOVE it. That means UNINSTALL it, not just disable!).

If there are any dumps made AFTER you've made these changes, run MPS Reports and send the resulting .cab file and the dumps my way.

 

[dclive]

Also, I suggest removing (ie uninstalling) all registery cleaners (they don't - they're not wise to use), and running just one antispyware tool (say, MS Antispyware) and one antivirus tool (pick one - Symantec and McAfee are two big ones.)

 

[forged]

dclive, i havnt had a blue screens since removing the nvidia firewall, my computer is still freezing up randomly,
i am using just one antivirus -antivir and microsoft spware is runnin solo ,
thanks again for your help mate, ive sent the .cab file your way
fingers crossed
-pete

 

[dclive]

Originally posted by: forged
dclive, i havnt had a blue screens since removing the nvidia firewall, my computer is still freezing up randomly,
i am using just one antivirus -antivir and microsoft spware is runnin solo ,
thanks again for your help mate, ive sent the .cab file your way
fingers crossed
-pete

Without a dump file there's not going to be much for me to look at. I can say that typically freezes are a hardware issue, unless it's a resource depletion issue, but that should only happen after quite a lot of uptime - if you see it after just a few hours, I doubt it's a memory leak or similar issue.

Does the freeze happen in safe mode?

Have you added any hardware lately?

When was the last time it didn't freeze?

 

[forged]

hey
i just got another blue screen
DRIVER_IRQL_NOT_LESS_OR_EQUAL
tecnical info
stop 0x000000D1
(0x00000000,0x00000002,0x00000000,0xBA333C406)
NVNRM.SYS
ADRESS BA33C406
BASE AT BA332000
DATESTAMP 41C24F04

This is the first one i have been able to read before the computer turns off.
i will email u the last two? dump files if that will help
i havnt ran the pc in safe, the freezes happen about every hour or so, with a blue screen after about 4hrs or so
i havnt installed any hardware lately this has been an on going problem with this computer, the more i use it the more it freezes
-pete

 

[dclive]

Originally posted by: forged
hey
i just got another blue screen
DRIVER_IRQL_NOT_LESS_OR_EQUAL
tecnical info
stop 0x000000D1
(0x00000000,0x00000002,0x00000000,0xBA333C406)
NVNRM.SYS
ADRESS BA33C406
BASE AT BA332000
DATESTAMP 41C24F04

This is the first one i have been able to read before the computer turns off.
i will email u the last two? dump files if that will help
i havnt ran the pc in safe, the freezes happen about every hour or so, with a blue screen after about 4hrs or so
i havnt installed any hardware lately this has been an on going problem with this computer, the more i use it the more it freezes
-pete

Again:

___________
I don't want the last few dumps. Ignore everything you have in \minidumps right now - I need to know if any dumps are made *after* you made these changes, did your Windows updates, removed the software you listed above (again, disabling it doesn't cut it - you need to REMOVE it. That means UNINSTALL it, not just disable!).

If there are any dumps made AFTER you've made these changes, run MPS Reports and send the resulting .cab file and the dumps my way.
___________


Please confirm you've done all of this, THEN we can start talking about sending me MPS Reports and dump files. Until that time, all of the stuff you send doesn't help me.

 

[forged]

sorry mate, i guess i wasnt clear, yes i have done everything listed on the thread made all the changes and still the problem persist's.
the msreprt i sent you was made after i made the changes,
along with one of the dump files couldnt tell out of the 4 which one was the last i guess when u extract it will have a time and date?
-pete

 

[dclive]

Originally posted by: forged
dclive, i havnt had a blue screens since removing the nvidia firewall, my computer is still freezing up randomly,
i am using just one antivirus -antivir and microsoft spware is runnin solo ,
thanks again for your help mate, ive sent the .cab file your way
fingers crossed
-pete

NVNRM.SYS is causing the issue. What is that? I threw away your MPS Reports because I thought it was old. Look on your system, find the NVNRM.SYS file, figure out what it goes to, and that's your culprit. Uninstall that or upgrade that and your problem should quickly go away. From 30 seconds of googling it appears to be nForce 4 Ethernet drivers.

A quick google of "nvnrm.sys" brings up lists of people complaining about bluescreens with that driver. Apparently it's crap. If you already have the latest driver from nvidia.com (you *DID* already do all your driver updates, right?) then you might consider buying a $5 NIC, disabling the nVidia NIC, and seeing if the issue goes away.