BSOD occurring when accessing IE 6

[sheppardwk]

Just recently, IE 6 has caused the computer to show the BSOD. We have
followed all of the recommendations, uninstalling any new software; however,
no new hardware has been installed. It seems to occur after opening and then
closing several windows - my daughter has a file on the desktop with all of
her favorites. After finishing one site, she closes the browser down and then
goes to her favorites, and opens another browser. The BSOD oncly occurs
immediaely after attempting to access the internet, it does not occur

I have run the Malwarebytes and found no errors.

Tried the Dell Drive Utility - it found no problems.

There are no indications in Device Manager.

The event viewer indicates:

System Error Category (102) Event 1003

The error properties
Error code 100000c5, parameter1 00000004, parameter2 00000002, parameter3
00000001, parameter4 8054b1fa

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp

Service Control Manager Event 7000

The npkcrypt service failed to start due to the following error:
The system cannot find the path specified.

DCOM Event 10010
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
within the required timeout.

Under the Application tab:
Application error Event 1000
Faulting application iexplore.exe, version 6.0.2900.5512, faulting module
msidcrl40.dll, version 5.0.818.5, fault address 0x000cbe90

Application Hang Category (101) Event 1002
Hanging applicationiexplore.exe, hang module hungapp, version 0.0.0.0, hang
address 0x00000000.

These are the only errors in the event viewer.

Any thoughts or suggestions would be greatly appreciated.

 

[Gerry]

Are you or have you been using any of the products listed in this link?
http://global.nprotect.com/product/index.php

Background information on Stop Error report
http://msdn2.microsoft.com/en-us/library/ms796183.aspx

In the previous link note the suggestion about using Driver Verifier.

0x000000C5: DRIVER_CORRUPTED_EXPOOL
An attempt occurred to touch invalid memory at a process IRQL that is
too high. This is almost always caused by drivers that have corrupted
the system pool. If you've recently installed any new software, check to
see if it's properly installed; and check for updated drivers on the
manufacturer's web site.
Source: http://aumha.org/a/stop.htm

Posting incomplete error reports makes their interpretation more
difficult.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Singapore Computer Service]

Hello,

Try running IE with add-ons disabled

Start > Control Panel > Internet Options > Advanced (tab) > UNCHECK "Enable
third-party browser extensions" > OK

Run IE6 now.

If it works now, one of your add-ons is causing the problem. Start Internet
Explorer as normal, Tools, Manage Add-ons, Enable or Disable Add-ons.

Disable all the add-ons. Enable third-party browser extensions in Internet
Options.

Restart your browser and enable the add-ons one by one till the problem
appears and you get the culprit.

(if the menu bar does not appear, hit the Alt key on the keyboard)


__
http://www.bootstrike.com/ComputerService/
Singapore Computer Home Remote On-Site Repair Service

 

[sheppardwk]

We have not been using any products from global.

I used the Dell Driver Tool and it found no problems with any drivers.

Here are the errors:


System Error:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 7/5/2009
Time: 8:27:27 PM
User: N/A
Computer: DELL
Description:
Error code 100000c5, parameter1 00000004, parameter2 00000002, parameter3
00000001, parameter4 8054b1fa.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 63 100000c
0020: 35 20 20 50 61 72 61 6d 5 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 34 2c 20 000004,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 31 2c 20 38 30 35 34 01, 8054
0050: 62 31 66 61 b1fa


Service Control Manager
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/5/2009
Time: 8:26:56 PM
User: N/A
Computer: DELL
Description:
The npkcrypt service failed to start due to the following error:
The system cannot find the path specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Service Control Manager
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/5/2009
Time: 8:26:56 PM
User: N/A
Computer: DELL
Description:
The adfs service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

DCOM
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 7/5/2009
Time: 10:29:07 AM
User: DELL\Alyssa
Computer: DELL
Description:
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



Application Error
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 7/1/2009
Time: 5:13:32 PM
User: N/A
Computer: DELL
Description:
Faulting application iexplore.exe, version 6.0.2900.5512, faulting module
msidcrl40.dll, version 5.0.818.5, fault address 0x000cbe90.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 69 65 78 ure iex
0018: 70 6c 6f 72 65 2e 65 78 plore.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 35 35 31 32 20 00.5512
0030: 69 6e 20 6d 73 69 64 63 in msidc
0038: 72 6c 34 30 2e 64 6c 6c rl40.dll
0040: 20 35 2e 30 2e 38 31 38 5.0.818
0048: 2e 35 20 61 74 20 6f 66 .5 at of
0050: 66 73 65 74 20 30 30 30 fset 000
0058: 63 62 65 39 30 0d 0a cbe90..

Application Hang
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 6/27/2009
Time: 10:32:14 PM
User: N/A
Computer: DELL
Description:
Hanging application iexplore.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 36 re.exe 6
0020: 2e 30 2e 32 39 30 30 2e .0.2900.
0028: 35 35 31 32 20 69 6e 20 5512 in
0030: 68 75 6e 67 61 70 70 20 hungapp
0038: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0040: 61 74 20 6f 66 66 73 65 at offse
0048: 74 20 30 30 30 30 30 30 t 000000
0050: 30 30 00

 

[Gerry]

What is the situation regarding anti-virus and anti-spyware software
installed on the computer?

Can you locate the memory dump. It is a file with a dmp file extension?

The recommendation was to use Driver Verifier
http://msdn.microsoft.com/en-us/library/ms792872.aspx

Using Driver Verifier to identify issues with Windows drivers for
advanced users
http://support.microsoft.com/kb/244617

The three Events associated with the problem are:

The npkcrypt service failed to start due to the following error:
The system cannot find the path specified.

The adfs service failed to start due to the following error:
The system cannot find the file specified.

Error code 100000c5, parameter1 00000004, parameter2 00000002,
parameter3 00000001, parameter4 8054b1fa.

The others are unrelated.

Whatever is attempting to start these services is likely to be the cause
of the problem.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[nass]

Hi,

My reply to your Event viewer will be in-line with your Event Log see below.
But First do us a favour and perform these cleaning steps to make sure we are
not working against a beast!!!

Run a thorough scan by doing the following steps:

*Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Scan for malware from here:
SuperAntispyware - Free
Please download and update the definitions and run a COMPLETE SCAN not an
Express scan.
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

====== End of Cleaning steps ======

=== Event viewer Analysis ================

Q- Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 7/5/2009
Time: 8:27:27 PM
User: N/A
Computer: DELL
Description:
Error code 100000c5, parameter1 00000004, parameter2 00000002, parameter3
00000001, parameter4 8054b1fa.

* Solution:
That error usually indicates a bad driver or software that's not compatible
with XP. Did you installed Hardware/software recently on this machine?

Microsoft Online Crash Analysis
http://oca.microsoft.com/en/windiag.asp

###########################################################################

Q- Service Control Manager
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/5/2009
Time: 8:26:56 PM
User: N/A
Computer: DELL
Description:
The npkcrypt service failed to start due to the following error:
The system cannot find the path specified.

* Solution:
This can be because you installed an encryption software or you playing
Games on this machine and one of the Game App broken causing this error to
crop up in Event viewer.

Do you have one of the following:
GameGuard
Lineage II
Gunbound game
MAPLESTORY
nProtect KeyCrypt Driver software

Look in the Add/Remove Programs for Old games /Applications which you no
longer use or intend to use at present or in the future!

###############################################################

Q- Service Control Manager
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/5/2009
Time: 8:26:56 PM
User: N/A
Computer: DELL
Description:
The adfs service failed to start due to the following error:
The system cannot find the file specified.

* Solution:
Look in the Registry Editor for this Key and please let us know what Path
this Folder/entry point to?

[-]HKLM\SYSTEM\CurrentControlSet\Services = look in the right Pane/Window
for this "ADFS " ImagePath "C\ProgramFiles\Myprogram\ADFS" or something
similar it doesn't need to be exact as it is an example made by me!

For more info read here:
Configuring ADFS Servers for Troubleshooting
http://technet.microsoft.com/en-us/library/cc738766(WS.10).aspx

#######################################################################

Q- DCOM
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 7/5/2009
Time: 10:29:07 AM
User: DELL\Alyssa
Computer: DELL
Description:
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
within the required timeout.

*Solution:

Open your Run command and type in:
services.msc click [OK]
Locate tis service and make the start up for it Auto:
DCOM Server Process Launcher

Reboot your machine.

DCOM Windows XP Do You Need It?
http://www.updatexp.com/dcom-windows-xp.html

##############################################################################

Q - Application Error
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 7/1/2009
Time: 5:13:32 PM
User: N/A
Computer: DELL
Description:
Faulting application iexplore.exe, version 6.0.2900.5512, faulting module
msidcrl40.dll, version 5.0.818.5, fault address 0x000cbe90.

* Solution
msidcrl40.dll is a Microsoft Identity CRL

Do you have Messenger installed on this machine?
##################################################################

Q- Application Hang
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 6/27/2009
Time: 10:32:14 PM
User: N/A
Computer: DELL
Description:
Hanging application iexplore.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

* Solution:
This can be cured/solved by disabling this option:
[ ] Enable Third-Party browser extensions (Req Rest) UNCHECK this box.


Note: Why you are not updating to IE7 or IE8 and what SP? (Service Pack)
service you got on this machine?

HTH,
nass

 

[Peter Foldes]

0x000000C5: DRIVER_CORRUPTED_EXPOOL
An attempt occurred to touch invalid memory at a process IRQL that is too high. This
is almost always caused by drivers that have corrupted the system pool. If you’ve
recently installed any new software, check to see if it’s properly installed; and
check for updated drivers on the manufacturer’s web site.
Use the verifier tool to find which driver(s) is in question

Start\Run\verifier