Go Back   Tech Support Forum > Microsoft Support > BSOD, App Crashes And Hangs

[SOLVED] Blue Screen 0x000000D1

This is a discussion on [SOLVED] Blue Screen 0x000000D1 within the BSOD, App Crashes And Hangs forums, part of the Tech Support Forum category. h1 guys, I saw that there was one or two threads like this but they are a little bit different


Closed Thread
 
Thread Tools Search this Thread
Old 08-27-2009, 06:42 AM   #1
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



h1 guys,

I saw that there was one or two threads like this but they are a little bit different so I decided to post this one.

Here are my computer details:
OS:Windows Vista Ultimate SP2;
Processor:Intel Core 2 Quad CPU Q8200
RAM:4GB
System type:32-bit OS

My computer is brand new.I bought it on Sunday with some programs installed from the guy I bought it from and I installed Fifa 09,Skype and utorrent.On the very next day I began encountering this problem.First I couldn't see what was on the screen because it disappeared in a flash but I turned off automatic restarart.So I saw the blue screen with: DRIVER_IRQL_NOT_LESS_OR_EQUAL,0x000000D1,and the files weren't the same the two times I checked but the first time it was dxgkrnl.sys and the second tcpip.sys.

Here are the problem details from my last Shut down:

Problem signature
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.256.1
Locale ID: 1026

Files that help describe the problem
Mini082709-01.dmp
sysdata.xml
Version.txt

View a temporary copy of these files
Warning: If a virus or other security threat caused the problem, opening a copy of the files could harm your computer.

Extra information about the problem
BCCode: d1
BCP1: 00000000
BCP2: 00000002
BCP3: 00000001
BCP4: 82A6F591
OS Version: 6_0_6002
Service Pack: 2_0
Product: 256_1

So if anybody could help me with this I would be very thankful.

__________________
dilian_traikov is offline  
Old 08-27-2009, 08:41 AM   #2
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

Please follow these instructions. This will help to better assess the problem.

http://www.techsupportforum.com/1871981-post2.html

__________________
DT Roberts is offline  
Old 08-27-2009, 09:09 AM   #3
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



Here it is.
Attached Files
File Type: rar BlueScreen.rar (864.2 KB, 292 views)
__________________
dilian_traikov is offline  
Old 08-27-2009, 11:54 AM   #4
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

I found a bunch of goodies...

Code:
Event[9771]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2009-08-24T15:09:49.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x000000d1 (0x00000008, 0x00000002, 0x00000001, 0x82a7a51c). A dump was saved in: C:\Windows\MEMORY.DMP.

Event[9851]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2009-08-24T15:06:38.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DIDO-PC
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000008e (0xc0000005, 0x81c767ef, 0xf590e914, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP.
The only two bugchecks that I noticed are 0xc0000005 and 0xc00000D1.

Code:
Event[13033]:
  Log Name: System
  Source: Microsoft-Windows-Windows Defender
  Date: 2009-08-24T11:26:15.000
  Event ID: 3004
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer.  Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
 For more information please see the following:
Not Applicable
 	Scan ID: {21172058-38C6-4B70-BEE4-458B09246D0A}
 	User: dido-PC\dido
 	Name: Unknown
 	ID: 
 	Severity ID: 
 	Category ID: 
 	Path Found: clsid:HKLM\SOFTWARE\CLASSES\CLSID\{1E54D648-B804-468d-BC78-4AFFED8E262F};regkey:HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1E54D648-B804-468d-BC78-4AFFED8E262F}\CONTAINS\FILES\\C:\Windows\Downloaded Program Files\sysreqlab_nvd.dll;regkey:HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1E54D648-B804-468d-BC78-4AFFED8E262F};regkey:HKLM\SOFTWARE\CLASSES\TYPELIB\{65C2F0DD-70CE-4672-9EE2-8EB2123703FD}\1.0;regkey:HKLM\SOFTWARE\CLASSES\CLSID\{1E54D648-B804-468d-BC78-4AFFED8E262F};activex:HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1E54D648-B804-468d-BC78-4AFFED8E262F};typelibversion:HKLM\SOFTWARE\CLASSES\TYPELIB\{65C2F0DD-70CE-4672-9EE2-8EB2123703FD}\1.0;typelib:HKLM\SOFTWARE\CLASSES\TYPELIB\{65C2F0DD-70CE-4672-9EE2-8EB2123703FD};file:C:\Windows\Downloaded Program Files\sysreqlab_nvd.dll
 	Alert Type: Unclassified software
And just below that...
Code:
Event[24633]:
  Log Name: System
  Source: USER32
  Date: 2009-08-22T17:46:58.000
  Event ID: 1074
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic
  User: S-1-5-21-2609798900-2371662674-586177291-1000
  User Name: dido-PC\dido
  Computer: dido-PC
  Description: 
The process Explorer.EXE has initiated the restart of computer DIDO-PC on behalf of user dido-PC\dido for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shutdown Type: restart
 Comment: 

Event[24634]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:46:03.000
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The avast! Web Scanner service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Event[24635]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:46:02.000
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The avast! Mail Scanner service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Event[24636]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:46:02.000
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The avast! iAVS4 Control Service service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Event[24637]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:46:02.000
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The avast! Antivirus service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Event[24638]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:44:42.000
  Event ID: 7000
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The Windows Search service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion.

Event[24639]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:44:42.000
  Event ID: 7009
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.

Event[24640]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:44:42.000
  Event ID: 7000
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The Windows Search service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion.

Event[24641]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:44:42.000
  Event ID: 7009
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
Event[24642]:
  Log Name: System
  Source: Service Control Manager
  Date: 2009-08-22T17:44:42.000
  Event ID: 7036
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
The Windows Search service entered the stopped state.

Event[24643]:
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2009-08-22T17:44:42.000
  Event ID: 10005
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: dido-PC
  Description: 
DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Possible corrupt system drivers. Click Start>type "cmd">Right-click>Run as administrator. Type "sfc /scannow" (no quotes) and let it run. Let me know how that goes.
__________________
DT Roberts is offline  
Old 08-27-2009, 12:26 PM   #5
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



"Windows Resource Protection found corrupt files but was unable to fix some of them.Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. The sysyem file repair changes will take effect after next reboot."

I guess you were pretty right :) Just how do I fix the rest of the files?I opened C:\Windows\Logs\CBS\CBS.log but I get an alert box with "Access is denied".
__________________
dilian_traikov is offline  
Old 08-27-2009, 12:32 PM   #6
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

GREAT. Do you think that you could go get that log (C:\Windows\Logs\CBS\CBS.log), zip it up and post it here?

What other files do you speak of?
__________________
DT Roberts is offline  
Old 08-27-2009, 12:37 PM   #7
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



Wow that was a very quick reply :D I didn't have time to edit my last.Take a look at it and seriously thanks for replying so fast.

Edit: Well,it said in the cmd window that it couldn't fix some of the files.
__________________
dilian_traikov is offline  
Old 08-27-2009, 12:42 PM   #8
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

I'm going to need that log in order to know which files couldn't be fixed... Try this to take ownership of that log: http://www.vistax64.com/tutorials/67...ship-file.html

And no problem for the reply time, it's what I do
__________________
DT Roberts is offline  
Old 08-27-2009, 01:09 PM   #9
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



Well I tried everything but I can't manage to add it to an archive.So I just copied the text from the file to a new text document and saved it as CBS.log.Here is the archived file.
Attached Files
File Type: rar CBS.rar (501.9 KB, 35 views)
__________________
dilian_traikov is offline  
Old 08-27-2009, 01:19 PM   #10
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

Hm...I'm not sure why that happened. How is the system running? Same errors?
__________________
DT Roberts is offline  
Old 08-27-2009, 01:23 PM   #11
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



Well,it last restarted today in 13:39 when the file was tcpip.sys.So I hope that I don't encounter this problem again.If I do I will post a reply with the error.And thanks a lot for your help :)
__________________
dilian_traikov is offline  
Old 08-27-2009, 01:31 PM   #12
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

The fact that it hasn't restarted yet gives me a small amount of hope. Glad I could help :)
__________________
DT Roberts is offline  
Old 08-27-2009, 02:29 PM   #13
Team Manager, Microsoft Support
Microsoft MVP
BSOD Kernel Dump Expert
 
jcgriff2's Avatar

Microsoft Most Valuable Professional
 
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 30,690
OS: Windows 10, 8.1, 7 + Windbg :)



A clue to understanding the 100,000 lines in the cbs log - http://support.microsoft.com/kb/928228

Notice that the 2 bugchecks both have 0xc0000005 exceptions - eventhough they are different - 0x8e & 0xd1

NTSTATUS 0xc0000005 = memory access violation = something is interefering with a drivers access to an object causing a "access denied" error.

jcgriff2

p.s. As you found out, you must 1st copy the cbs log out of the \windows\logs\cbs directory because you don't have the necessary file permissions to create a [zip] file in that folde. That is normal for Vista.r

.
jcgriff2 is offline  
Old 08-27-2009, 02:39 PM   #14
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

Thanks for that article, JC. I'll look into it.
__________________
DT Roberts is offline  
Old 08-27-2009, 03:08 PM   #15
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



So how can we fix this 0xc0000005 error?
__________________
dilian_traikov is offline  
Old 08-27-2009, 03:33 PM   #16
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



Just as I thought I had got rid of the problem,here it is againd.The file shown on the blue screen was dxgkrnl.sys yet again.Here are the problem details:

Code:
Problem signature
Problem Event Name:	BlueScreen
OS Version:	6.0.6002.2.2.0.256.1
Locale ID:	1026

Files that help describe the problem (some files may no longer be available)
Mini082809-01.dmp
sysdata.xml
Version.txt

 View a temporary copy of these files
Warning: If a virus or other security threat caused the problem, opening a copy of the files could harm your computer.

Extra information about the problem
BCCode:	d1
BCP1:	0A0F3070
BCP2:	00000002
BCP3:	00000000
BCP4:	8F3234FE
OS Version:	6_0_6002
Service Pack:	2_0
Product:	256_1
Server information:	63cd460d-f96d-4004-b8ab-c4a6e8915d0b
__________________
dilian_traikov is offline  
Old 08-27-2009, 03:37 PM   #17
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

...You're joking, right...

Could you please upload that minidump? Once again: http://www.techsupportforum.com/1871981-post2.html
__________________
DT Roberts is offline  
Old 08-27-2009, 03:57 PM   #18
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



Here you go.I hope you can solve this problem,although you already have done more than enough.Thanks again and good night.
Attached Files
File Type: rar BlueScreen.rar (635.0 KB, 50 views)
__________________
dilian_traikov is offline  
Old 08-27-2009, 04:02 PM   #19
TSF Team Emeritus
Visiting Expert | Microsoft Support Team
 
DT Roberts's Avatar
 
Join Date: Jun 2009
Location: C:\Windows
Posts: 3,805
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14

My System

Send a message via MSN to DT Roberts Send a message via Skype™ to DT Roberts

There's no minidump in there...

EDIT: I see in the problem details that you posted that you're on SP2?

Code:
Problem signature
Problem Event Name:	BlueScreen
OS Version:	6.0.6002.2.2.0.256.1
Locale ID:	1026

Files that help describe the problem (some files may no longer be available)
Mini082809-01.dmp
sysdata.xml
Version.txt

 View a temporary copy of these files
Warning: If a virus or other security threat caused the problem, opening a copy of the files could harm your computer.

Extra information about the problem
BCCode:	d1
BCP1:	0A0F3070
BCP2:	00000002
BCP3:	00000000
BCP4:	8F3234FE 
OS Version:	6_0_6002
Service Pack:	2_0
Product:	256_1
Server information:	63cd460d-f96d-4004-b8ab-c4a6e8915d0b
I thought you removed it?
__________________
DT Roberts is offline  
Old 08-28-2009, 12:56 AM   #20
Registered Member
 
Join Date: Aug 2009
Posts: 38
OS: Windows 7 Ultimate 32-bit



I thought you had seen it in my first post.I told you that I was on "Windows Vista Ultimate SP2".

Edit:Whre can I find the minidump?Like C:\Windows\minidump?If you want me to send you that folder it's a negative.Again access is denied and I can't even open the files in it.
Edit2 :D:I installed Windows Debug Toolkit and was able to archive the folder.Here it is.
Attached Files
File Type: rar Minidump.rar (250.6 KB, 28 views)

__________________
dilian_traikov is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2


All times are GMT -7. The time now is 05:42 AM.


Copyright 2001 - 2014, Tech Support Forum

Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts