Cannot shutdown window - blue screen error message

G

Guest

After updating norton anti-virus via live update, updates for symantec
product as well, I cannot restart or shutdown.
-I get the blue screen with serious error message.
-I cannot restore to another restor point
-Nortons Internet worm protection has failed and will not launch.
-Error messages sent to microsft automatically.
Everything else seems to be working ok, I have internet access and programs
appear to be running normal.

The error message is:

0X0000000A (0X000000B0, 0X00000002, 0,00000000 0X8052D4DA)

Norton SystemWorks 2006, Version 9, Build 103.

Also, when starting windows I receive Norton error message that internet
worm blocking cannot be launched.
 
G

Guest

types it into google and it says it is a registry problem, if that help,
seeing as you have net access try downlaoding a registry progamme, but be
worned playing with your resitry can have dire effects so make a backup of
everything including your current registry, then google you error code, and
hopefull that should solve it
 
R

Ron Martell

nic said:
After updating norton anti-virus via live update, updates for symantec
product as well, I cannot restart or shutdown.
-I get the blue screen with serious error message.
-I cannot restore to another restor point
-Nortons Internet worm protection has failed and will not launch.
-Error messages sent to microsft automatically.
Everything else seems to be working ok, I have internet access and programs
appear to be running normal.

The error message is:

0X0000000A (0X000000B0, 0X00000002, 0,00000000 0X8052D4DA)

Norton SystemWorks 2006, Version 9, Build 103.

Also, when starting windows I receive Norton error message that internet
worm blocking cannot be launched.

The name of your error is IRQL_NOT_LESS_OR_EQUAL
The error originated with whichever device driver, application program
or windows component that is using memory address 0X8052D4DA.

If this is being caused by a device driver (the most likely culprit)
then the following procedure will allow you to identify the specific
driver involved:

********
Identifying the cause of STOP errors using PSTAT & Excel

Many times when a STOP error occurs the information provided does not
specifically identify the application, device driver, or other
component file where the error occurred. However the 4 parameters
associated with the STOP (bugcheck) code will very often include one
that is the address where the error occurred. You first need to look
up the detailed information about the specific STOP code in order to
determine if the address is included and if so which of the 4
parameters has the address.

You can identify the meaning of each of the parameters for your
specific STOP code at:
http://msdn2.microsoft.com/en-us/library/ms789516.aspx

The second step in the procedure is to identify the addresses that
each active process is being loaded at. The PSTAT utility will
provide this information. On some systems the PSTAT utility may
already be present. Check this by opening a Command Prompt window
(Start - Run - CMD) and entering the following command:

PSTAT /?

If PSTAT is not on your computer you can download it free from
Microsoft. The download is called "Windows XP Service Pack 2 Support
Tools" and it is available from
http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en
With PSTAT installed on your computer the next step is to open a
Command Prompt window again (Start - Run - CMD) and generate a report
with PSTAT. Because you need to copy part of the information from
this report (and only part) it is best to create the report as a text
file. In the Command Prompt window enter the following command:

PSTAT > C:\JUNK\PSTAT.TXT

You may change C:\JUNK\ to whatever drive and folder that you want to
save the report into.

Now open the saved file in Notepad. Start - Run - NOTEPAD
C:\JUNK\PSTAT.TXT

Scroll down the file, about 80% of the way to the end of the file and
you will find a head line:

ModuleName Load Addr Code Data Paged LinkDate

It is the information from this line to the end of the file that we
want to copy from this file and save as a separate file. Select the
block of text and copy it to the clipboard. Open a new notepad window
and paste the clipboard contents into it. Save this file under a
different name. I use PSTAT2.TXT and put it into the same C:\JUNK
folder.

Now launch Microsoft Excel and use File - Open to bring the PSTAT2.TXT
file into Excel. Excel will automatically parse the file into
columns. Once this is done use DATA - SORT to sort the entire
spreadsheet based on the value in Column B (Load Addr).

It is now a simple task to read down the addresses until you find the
highest value that is less than the address where the error occurred.
That module (name in column A) is the prime suspect for the cause of
your error.

*******

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
G

Guest

Notepad cannot find the file.

--
nic vee


Ron Martell said:
The name of your error is IRQL_NOT_LESS_OR_EQUAL
The error originated with whichever device driver, application program
or windows component that is using memory address 0X8052D4DA.

If this is being caused by a device driver (the most likely culprit)
then the following procedure will allow you to identify the specific
driver involved:

********
Identifying the cause of STOP errors using PSTAT & Excel

Many times when a STOP error occurs the information provided does not
specifically identify the application, device driver, or other
component file where the error occurred. However the 4 parameters
associated with the STOP (bugcheck) code will very often include one
that is the address where the error occurred. You first need to look
up the detailed information about the specific STOP code in order to
determine if the address is included and if so which of the 4
parameters has the address.

You can identify the meaning of each of the parameters for your
specific STOP code at:
http://msdn2.microsoft.com/en-us/library/ms789516.aspx

The second step in the procedure is to identify the addresses that
each active process is being loaded at. The PSTAT utility will
provide this information. On some systems the PSTAT utility may
already be present. Check this by opening a Command Prompt window
(Start - Run - CMD) and entering the following command:

PSTAT /?

If PSTAT is not on your computer you can download it free from
Microsoft. The download is called "Windows XP Service Pack 2 Support
Tools" and it is available from
http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en
With PSTAT installed on your computer the next step is to open a
Command Prompt window again (Start - Run - CMD) and generate a report
with PSTAT. Because you need to copy part of the information from
this report (and only part) it is best to create the report as a text
file. In the Command Prompt window enter the following command:

PSTAT > C:\JUNK\PSTAT.TXT

You may change C:\JUNK\ to whatever drive and folder that you want to
save the report into.

Now open the saved file in Notepad. Start - Run - NOTEPAD
C:\JUNK\PSTAT.TXT

Scroll down the file, about 80% of the way to the end of the file and
you will find a head line:

ModuleName Load Addr Code Data Paged LinkDate

It is the information from this line to the end of the file that we
want to copy from this file and save as a separate file. Select the
block of text and copy it to the clipboard. Open a new notepad window
and paste the clipboard contents into it. Save this file under a
different name. I use PSTAT2.TXT and put it into the same C:\JUNK
folder.

Now launch Microsoft Excel and use File - Open to bring the PSTAT2.TXT
file into Excel. Excel will automatically parse the file into
columns. Once this is done use DATA - SORT to sort the entire
spreadsheet based on the value in Column B (Load Addr).

It is now a simple task to read down the addresses until you find the
highest value that is less than the address where the error occurred.
That module (name in column A) is the prime suspect for the cause of
your error.

*******

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
G

Guest

Notepad cannot find the file.
When I type notepadc without space note notepad c with space, I receive
message that I do not have permission to open the file or it does not exist.
 
G

Guest

Hi,
I have completed as per your instructions but am now at the point of a
technicality issue which I am not familiar with.
Having said that, I read down and assuming I am looking for highest value
that is less than the address but what is the address? Would it be 0X8052D4DA?
 
R

Ron Martell

nic said:
Hi,
I have completed as per your instructions but am now at the point of a
technicality issue which I am not familiar with.
Having said that, I read down and assuming I am looking for highest value
that is less than the address but what is the address? Would it be 0X8052D4DA?


Yes.

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
G

Guest

Hi,

I have attempted a restore via safe and normal mode without success.
I managed to restore to a point the other day but then immediately updated
norton again and now cannot restore to any point.
Is there another way to restore please?
Thank you.
 
G

Guest

Hi Ron,
The culprit may be ntoskrnl.exe, as the code nearest to the error is 804D7000.
Does that help anyone identify the problem?
If so, what next please.
Thanking you in anticipation.
 
R

Ron Martell

nic said:
Hi Ron,
The culprit may be ntoskrnl.exe, as the code nearest to the error is 804D7000.
Does that help anyone identify the problem?
If so, what next please.
Thanking you in anticipation.


See this article in the Microsoft Knowledge Base:
http://support.microsoft.com/kb/929338

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
G

Guest

Hi Ron,
Followed all instructions but still no luck.
Cannot shutdown, restart or go back to a restore point.
 
R

Ron Martell

nic said:
Hi Ron,
Followed all instructions but still no luck.
Cannot shutdown, restart or go back to a restore point.

At this point I am pretty much out of ideas as to how to proceed. A
couple of suggestions.

1. There is always a possibility that some sort of malware
(virus/trojan/spyware/etc) has gotten onto your computer. Try a free
online scan at one of the following sites:
Bit Defender http://www.bitdefender.com/scan8/ie.html
Trend Micro http://housecall.trendmicro.com
Kaspersky Online Scanner http://www.kaspersky.com/virusscanner
Panda ActiveScan http://www.pandasoftware.com/activescan
WindowSecurity.com TrojanScan http://windowssecurity.com/trojanscan
Webroot http://www.webroot.com/

2. There is no real way to repair System Restore except by turning it
off, rebooting the computer and turning it back on again. That wipes
out all of the existing restore points.

3. Open a Command Prompt window and enter the following command:

SFC /SCANNOW

That will require a reboot and will replace any system files that may
have been damaged or corrupted.

4. A "last resort" fix would be to try a Repair Install of Windows XP
as per http://michaelstevenstech.com/XPrepairinstall.html


Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
G

Guest

Hi Ron,
I will turn off system restore and try your recommendation.
A quick point though.
I spoke to Symantec via the telephone for assistance on this matter for
almost 2 hours.
Then i spoke to Microsoft Support on the telephone for around 20mins.
Both Microsoft and Symantec asked me whether I was using Vista, I am not, I
am on XP Pro.
Furtheremore, I am now having problems with Microsoft Outlook and have not
been able to send/receive emails for almost 2 days.
Microsoft detected an error and I sent the error report, plus followed the
link to get more information on ly to be taken to a Microsft website
explaining that my version of outlook is 2002 and that I should upgrade to
the latest software due to limited support being offered for older verions of
Office.
HOW RUDE! I am being blackmailed into buying a newer version of Office when
a) I cannot afford it at the moment and b) I don't need it JUST YET.
I have ALWAYS "done the right thing" by Microsoft never buying a pirated
version of ANY KIND OF SOFTWARE and this is the thanks I get.
I guess it doesn't pay to be loyal and honest.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top