Memory Dump on opening Internet Explorer

[[email protected]]

Using Dell Vostro 200 with 3 GB mem, running WinXP Pro, SP3.
Yesterday, my system had about 8 blue screen memory dumps and I
couldn't figure out why. I got 2 different errors (at two different
times): one was DRIVER_CORRUPTED_MMPOOL and the other was
DRIVER_IRQL_NOT_LESS_OR_EQUAL. I did the following: Restored to a
previous restore point, disk cleanup and degrag, complete virus scan,
complete malware scan...nothing changed. I finally realized that the
crash only happened when I opened Internet Explorer. I was using
Ver.
6 at the time, so I tried upgrading to 7. Still happens. I then
started using Firefox exclusively and NO PROBLEM! If I try to use
IE,
I still get the crash. Firefox is fine, but I won't be able to get
automatic updates. I would like to solve the problem. Any
suggestions? Thanks!

[Gerry]

Posting snippets from error messages is not really helpful. You need to
post complete Error Reports.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.

Induce the error to get a report.

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



wrote:
> Using Dell Vostro 200 with 3 GB mem, running WinXP Pro, SP3.
> Yesterday, my system had about 8 blue screen memory dumps and I
> couldn't figure out why. I got 2 different errors (at two different
> times): one was DRIVER_CORRUPTED_MMPOOL and the other was
> DRIVER_IRQL_NOT_LESS_OR_EQUAL. I did the following: Restored to a
> previous restore point, disk cleanup and degrag, complete virus scan,
> complete malware scan...nothing changed. I finally realized that the
> crash only happened when I opened Internet Explorer. I was using
> Ver.
> 6 at the time, so I tried upgrading to 7. Still happens. I then
> started using Firefox exclusively and NO PROBLEM! If I try to use
> IE,
> I still get the crash. Firefox is fine, but I won't be able to get
> automatic updates. I would like to solve the problem. Any
> suggestions? Thanks!

[[email protected]]

Thanks...here are the error codes I received.
System:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/2/2009
Time: 10:51:06 AM
User: N/A
Computer: EPOCH-USER13
Description:
Error code 00000019, parameter1 00000020, parameter2 89677088,
parameter3 89677088, parameter4 1a007500.


Application:
Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4356
Date: 2/2/2009
Time: 10:54:13 AM
User: N/A
Computer: EPOCH-USER13
Description:
The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:
{6295DF2D-35EE-11D1-8707-00C04FD93327}. CoGetObject returned HRESULT
8000401A.



Application:
Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4356
Date: 2/2/2009
Time: 11:04:45 AM
User: N/A
Computer: EPOCH-USER13
Description:
The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:
{6295DF2D-35EE-11D1-8707-00C04FD93327}. CoGetObject returned HRESULT
8000401A.

System:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/2/2009
Time: 11:09:01 AM
User: N/A
Computer: EPOCH-USER13
Description:
Error code 100000d0, parameter1 42004300, parameter2 00000002,
parameter3 00000001, parameter4 80548ed8.




Application:
Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4356
Date: 2/2/2009
Time: 11:04:45 AM
User: N/A
Computer: EPOCH-USER13
Description:
The COM+ Event System failed to create an instance of the subscriber
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:
{6295DF2D-35EE-11D1-8707-00C04FD93327}. CoGetObject returned HRESULT
8000401A.

[Gerry]

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793223.aspx

A pool header issue is a problem with Windows memory allocation. Device
driver issues are probably the most common, but this can have diverse
causes including bad sectors or other disk write issues, and problems
with some routers. (By theory, RAM problems would be suspect for memory
pool issues, but I haven't been able to confirm this as a cause.)
Source: http://aumha.org/a/stop.htm

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware, Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not checked.

Your second Stop Error report is not one I have encountered and is not
the D1 error you mentioned in your first post.

Background information on Stop Error message
http://msdn.microsoft.com/en-us/library/ms796128.aspx

What software did you install, if any, shortly before the first problem
arose. Games software perhaps. This commonly causes problems?

Event ID: 4356 -This comment seems pertinent
Error code: 8000401A (Error code 0x8000401A) - This may be recorded when
the computer is started by there is no connection to the domain
controller (for example when starting a laptop at home).
Source: http://snipurl.com/b68s4 [www_eventid_net]

I would research the other comments in the above mentioned source.

You have this GUID mentioned in Event ID: 4356
GUID: {6295DF2D-35EE-11D1-8707-00C04FD93327}, error code: 8000401A
(Error code 0x8000401A) - This GUID/CLSID belongs to the Offline Files
"Synchronization Manager", or "MobSync.exe", which usually launches
during logon from the Run key under HKLM. This is not always an option,
but disabling Offline Files gets rid of the event.
Source: http://snipurl.com/b68s4 [www_eventid_net]

Is your computer entirely for home use or do you link to your place of
work or a server?

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

wrote:
> Thanks...here are the error codes I received.
> System:
> Event Type: Error
> Event Source: System Error
> Event Category: (102)
> Event ID: 1003
> Date: 2/2/2009
> Time: 10:51:06 AM
> User: N/A
> Computer: EPOCH-USER13
> Description:
> Error code 00000019, parameter1 00000020, parameter2 89677088,
> parameter3 89677088, parameter4 1a007500.
>
>
> Application:
> Event Type: Warning
> Event Source: EventSystem
> Event Category: (52)
> Event ID: 4356
> Date: 2/2/2009
> Time: 10:54:13 AM
> User: N/A
> Computer: EPOCH-USER13
> Description:
> The COM+ Event System failed to create an instance of the subscriber
> partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:
> {6295DF2D-35EE-11D1-8707-00C04FD93327}. CoGetObject returned HRESULT
> 8000401A.
>
>
>
> Application:
> Event Type: Warning
> Event Source: EventSystem
> Event Category: (52)
> Event ID: 4356
> Date: 2/2/2009
> Time: 11:04:45 AM
> User: N/A
> Computer: EPOCH-USER13
> Description:
> The COM+ Event System failed to create an instance of the subscriber
> partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:
> {6295DF2D-35EE-11D1-8707-00C04FD93327}. CoGetObject returned HRESULT
> 8000401A.
>
> System:
> Event Type: Error
> Event Source: System Error
> Event Category: (102)
> Event ID: 1003
> Date: 2/2/2009
> Time: 11:09:01 AM
> User: N/A
> Computer: EPOCH-USER13
> Description:
> Error code 100000d0, parameter1 42004300, parameter2 00000002,
> parameter3 00000001, parameter4 80548ed8.
>
>
>
>
> Application:
> Event Type: Warning
> Event Source: EventSystem
> Event Category: (52)
> Event ID: 4356
> Date: 2/2/2009
> Time: 11:04:45 AM
> User: N/A
> Computer: EPOCH-USER13
> Description:
> The COM+ Event System failed to create an instance of the subscriber
> partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:
> {6295DF2D-35EE-11D1-8707-00C04FD93327}. CoGetObject returned HRESULT
> 8000401A.

[[email protected]]

Thanks for your follow-up. I use this omputer at work only, and since
I've already left for the day, I will try your suggestons tomorrow. I
did, however, speak with Dell today, just to see what they would say
about this, and they seem to think that the Iexplore.exe file is
corrupted. Of course, they suggest reinstalling the OS, but I'm not
doing that without a fight! Will post again tomorrow.

[Gerry]

Who pays for computer repairs? You or your employer?


--



Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


wrote:
> Thanks for your follow-up. I use this omputer at work only, and since
> I've already left for the day, I will try your suggestons tomorrow. I
> did, however, speak with Dell today, just to see what they would say
> about this, and they seem to think that the Iexplore.exe file is
> corrupted. Of course, they suggest reinstalling the OS, but I'm not
> doing that without a fight! Will post again tomorrow.

[[email protected]]

Employer pays. Everything in the device manager is fine. Did not
install any software prior to problem starting. I ran sigverif.exe
and there are 25 files not signed. You mentioned to ignore any that
are no checked...there are no checkmarks anywhere in the results.
adgelp.ini
adpdf8.ppd
dllzjnie.dll
dllznie1.dll
dlxb2jdm.dll
dlxb2z.cdd
dlxb2z.cfg
dlxb2z.cnt
dlxb2z.hlp
dlxb2z.xrs
dlxb2zim.dll
dlxb2zir.xrs
dlxb2ziu.dll
dlxb2zp.ddd
dlzadcmn.dll
dlzarl32.dll
dlzc3013.dll
dlzddmif.dll
dlzdhb32.dll
dlzpmc3.dll
pclxl.dll
pclxl.gpd
unidrv.dll
unidrvui.dll
unires.dll
I have no idea what these files are. Guess I'll look them up one by
one.

A techy friend suggested I run sfc /scannow (system file checker)
However, it requires my orig. OS disk. That's not a problem, but my
orig. disk is SP2 and I already have SP3 installed. I'm guessing I
would have to uninstall SP3 before attempting that. Any thoughts?

He also suggested I run the Microsoft driver verifier (verifier.exe),
which required a restart. On restart I got another blue screen crash
and had to open to the latest good version, so I'm not trying that
again.

[[email protected]]

Looks like the first 22 are printer drivers (Adobe and Dell). Not
sure what the last 3 are, though they're listed as Microsoft windows
drivers.

[Gerry]

adgelp.ini = Adobe Acrobat
adpdf8.ppd = Adobe Acrobat
pclxl.dll = Microsoft Printer driver
pclxl.gpd = HP Laser driver
unidrv.dll = Microsoft Printer driver
unidrvui.dll = Microsoft driver
unires.dll = Microsoft Printer driver

All the other drivers are Dell Printer drivers.

System File Checker is a good tool but you have identified the problem
which made me stop recommending it's use. You can slipstream SP2 and SP3
but not everyone get the combined CD to work for them.

I would look at the solutions in http://snipurl.com/b68s4 , the dump
report or get it repaired by a computer professional.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


wrote:
> Employer pays. Everything in the device manager is fine. Did not
> install any software prior to problem starting. I ran sigverif.exe
> and there are 25 files not signed. You mentioned to ignore any that
> are no checked...there are no checkmarks anywhere in the results.
> adgelp.ini
> adpdf8.ppd
> dllzjnie.dll
> dllznie1.dll
> dlxb2jdm.dll
> dlxb2z.cdd
> dlxb2z.cfg
> dlxb2z.cnt
> dlxb2z.hlp
> dlxb2z.xrs
> dlxb2zim.dll
> dlxb2zir.xrs
> dlxb2ziu.dll
> dlxb2zp.ddd
> dlzadcmn.dll
> dlzarl32.dll
> dlzc3013.dll
> dlzddmif.dll
> dlzdhb32.dll
> dlzpmc3.dll
> pclxl.dll
> pclxl.gpd
> unidrv.dll
> unidrvui.dll
> unires.dll
> I have no idea what these files are. Guess I'll look them up one by
> one.
>
> A techy friend suggested I run sfc /scannow (system file checker)
> However, it requires my orig. OS disk. That's not a problem, but my
> orig. disk is SP2 and I already have SP3 installed. I'm guessing I
> would have to uninstall SP3 before attempting that. Any thoughts?
>
> He also suggested I run the Microsoft driver verifier (verifier.exe),
> which required a restart. On restart I got another blue screen crash
> and had to open to the latest good version, so I'm not trying that
> again.

[[email protected]]

On Feb 3, 3:24*pm, "Gerry" > wrote:
> adgelp.ini = Adobe Acrobat
> adpdf8.ppd = Adobe Acrobat
> pclxl.dll = Microsoft Printer driver
> pclxl.gpd = HP Laser driver
> unidrv.dll = Microsoft Printer driver
> unidrvui.dll = Microsoft driver
> unires.dll = Microsoft Printer driver
>
> All the other drivers are Dell Printer drivers.
>
> System File Checker is a good tool but you have identified the problem
> which made me stop recommending it's use. You can slipstream SP2 and SP3
> but not everyone get the combined CD to work for them.
>

Thanks once again for all your help. I'm not really sure what you
mean by slipstream SP2 and SP3.
Here's another (probably silly) question: If the problem really IS a
corrupt Iexplore.exe file, could I copy the file from another computer
running the same version and just replace my file?

[Gerry]

Who said it was anything to do with a corrupt iexplore.exe file?

See what you make of this. You may find it too difficult.
How to read the small memory dump files that Windows creates for
debugging
http://support.microsoft.com/kb/315263

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



wrote:
> On Feb 3, 3:24 pm, "Gerry" > wrote:
>> adgelp.ini = Adobe Acrobat
>> adpdf8.ppd = Adobe Acrobat
>> pclxl.dll = Microsoft Printer driver
>> pclxl.gpd = HP Laser driver
>> unidrv.dll = Microsoft Printer driver
>> unidrvui.dll = Microsoft driver
>> unires.dll = Microsoft Printer driver
>>
>> All the other drivers are Dell Printer drivers.
>>
>> System File Checker is a good tool but you have identified the
>> problem which made me stop recommending it's use. You can slipstream
>> SP2 and SP3 but not everyone get the combined CD to work for them.
>>
>
> Thanks once again for all your help. I'm not really sure what you
> mean by slipstream SP2 and SP3.
> Here's another (probably silly) question: If the problem really IS a
> corrupt Iexplore.exe file, could I copy the file from another computer
> running the same version and just replace my file?

[[email protected]]

I'll try...That should keep me busy today :)

DELL said it's a corrupt Iexplore.exe file and they wanted me to
reinstall my OS. So I'm just wondering why I can't just copy a good
Iexplore.exe file and paste it in.

[Gerry]

Was it the boy at Dell who collects the coffee from the vending machine
for his colleagues and answers the telephone when they take a comfort
break. This comment may be totally unjustified but unfortunately
telephone technical support is so often not up to the task it takes on.


--



Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


wrote:
> I'll try...That should keep me busy today :)
>
> DELL said it's a corrupt Iexplore.exe file and they wanted me to
> reinstall my OS. So I'm just wondering why I can't just copy a good
> Iexplore.exe file and paste it in.

[[email protected]]

Yep, he's the one! :)

[[email protected]]

On Feb 4, 8:56*am, "Gerry" > wrote:
> Who said it was anything to do with a corrupt iexplore.exe file?
>
> See what you make of this. You may find it too difficult.
> How to read the small memory dump files that Windows creates for
> debugginghttp://support.microsoft.com/kb/315263
>
> --
>
> Hope *this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
> wrote:
> > On Feb 3, 3:24 pm, "Gerry" > wrote:
> >> adgelp.ini = Adobe Acrobat
> >> adpdf8.ppd = Adobe Acrobat
> >> pclxl.dll = Microsoft Printer driver
> >> pclxl.gpd = HP Laser driver
> >> unidrv.dll = Microsoft Printer driver
> >> unidrvui.dll = Microsoft driver
> >> unires.dll = Microsoft Printer driver
>
> >> All the other drivers are Dell Printer drivers.
>
> >> System File Checker is a good tool but you have identified the
> >> problem which made me stop recommending it's use. You can slipstream
> >> SP2 and SP3 but not everyone get the combined CD to work for them.
>
> > Thanks once again for all your help. *I'm not really sure what you
> > mean by slipstream SP2 and SP3.
> > Here's another (probably silly) question: *If the problem really IS a
> > corrupt Iexplore.exe file, could I copy the file from another computer
> > running the same version and just replace my file?
Thought you might want to know...bottom line, Dell replaced the HD -
no more BSODs.