BSOD xp pro dell laptop

[numnutz]

what is the best way you guys are troubleshooting bsod's. I have one that pops up and shuts the pc down in like 3 seconds no time to read the error codes. Does not seem to happen in safe mode but happens rather quickly in regular mode. I shut everything down in msconfig but still happens. what is the best log file to read for more info? I did run ccleaner, cleaned up all temp files and malwarebytes no viruses even tho never saw a viruses....Thanks!!!
Eric

 

[repairit]

You can either boot to UBCD or slave the drive up to another machine to access the Minidump. That is usually my first step. Another is boot to UBCD and Remote Edit the Registry to turn off the automatic restart so that you can read the BSOD error.

 

[numnutz]

its not a memory issue passed memtest86

 

[tre]

Just boot into Safe Mode, bring up System Properties (right-click My Computer > Properties). Go to the Advanced tab, and click Settings under Startup and Recovery. Under System Failure, uncheck "Automatically restart".

Reboot the computer into normal mode. When it BSODs now, it won't restart, it'll let you read the message.

 

[numnutz]

yup thats what i'm doing now

 

[KompuKare]

Well some BSODs can be very tricky: Had one weeks ago which I wasn't able to resolve at all

However, first things first: go to Sys. Properties>Advanced>Startup & Recovery and disable Auto Restart. (If the machine's very bad, you can disable it by loading the registry hive from a bootable CD or whip the drive out and load the hive that way: the setting's under HKLM\SYSTEM\ControlSet001\Control\CrashControl).

For reading the mini-dumb (if any, sometimes Windows doesn't get a chance to write them) use BlueScreenViewer (it was a Technibble tool of the week a while back). Actually BlueScreenViewer can load the minidumb's from another location so you don't have to have the machine working to read them.

Then if they are consistent, you can google them. If all the STOP codes are all over the place (as was the case with the one I mentioned above) you have another problem...

 

[numnutz]

well the stop codes I am getting are 0x000000F4 (0x00000003, 0x89C97C08, 0x89C97D7C, 0x805D1206

 

[B Trevathan]

All you had to do is hit F8 when it reboots and select Disable Automatic Restart On System Failure.

Sounds like a driver problem, when you start in safe mode windows loads just basic drivers.

May also be your hard drive run chkdsk /r

 

[numnutz]

well uninstalled the last couple windows updates and disabled everything in start up (msconfig)still blue screens within seconds of booting up into windows.

 

[B Trevathan]

Sounds like a driver, maybe a service.

Does your system log in the Event Viewer show anything about the errors

Download BlueScreenView
For each crash displayed in the upper pane, you can view the details of the device drivers loaded during the crash in the lower pane.

 

[numnutz]

nice tool actually it mentions the following dlaudfam.sys, ntoskrnl.exe, spbbcdrv.sys, and symevent.sys

 

[numnutz]

oh well i'm a beaten man :-(
cant get it to work the laptop is a business laptop on a domain with a ton of proprietory software, its going to have to go back to them to reimage :-(

 

[B Trevathan]

Just so you know

Just so you know, looks to be a problem with Norton, I would find the key and either turn it off or uninstall it, but thats me, I don't really care that much for Norton.

spbbcdrv.sys
Part of Symantec Norton Internet Security suite

symevent.sys
Part of Symantec Norton Internet Security suite

dlaudfam.sys
Sonic Roxio drive letter assist system driver file. CD burner software.

ntoskrnl.exe
Is a critical process in the boot-up cycle of your computer. If this process appears in WinTasks then update your virus definitions immediately.

 

[numnutz]

I actually agree with you that is / was my feeling too however its a corp laptop that is pretty much locked down and I couldnt uninstall it and reinstall. Its the enterprise version of norton protection. so the guy from CT will have to mail it to his corp tech support in CA and wait for them to reimage oh well moving on I guess. thanks!!!