New
#1
ntkrnlmp.exe BSOD random
I just put together a new computer roughly a month ago and it has been running fine since mid June. Starting on 6/28, I've been getting some random BSODs. I figured out the first two on my own, one was ATI rollover drivers still on my system. I completely cleaned them out on my own, no software, right down to the registry and those stopped. Second, I had to retire AVG. Residence Shield gave me 3 BSODs. Shame too, never had before on my old Q9550. Finally, 2 hours after solving the AVG issue, I was just about to pass out and then I hear my video card fan slow down from 50 to 28 (which is what it does when I restart) I think to myself, you've got to be kidding me. I debug and I got the infamous ntkrnlmp.exe culprit. Looking over the report, the code 0x1a_41201 has me worried it's a memory issue. Here is the report:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\070712-33618-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`02c01000 PsLoadedModuleList = 0xfffff800`02e45670
Debug session time: Sat Jul 7 05:40:08.392 2012 (UTC - 7:00)
System Uptime: 0 days 2:29:04.188
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41201, fffff68000010600, f1, fffffa800d9c9ab0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+13c82 )
Followup: MachineOwner
---------
6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041201, The subtype of the bugcheck.
Arg2: fffff68000010600
Arg3: 00000000000000f1
Arg4: fffffa800d9c9ab0
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_41201
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: TrustedInstall
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002cdbcfe to fffff80002c801c0
STACK_TEXT:
fffff880`07b227e8 fffff800`02cdbcfe : 00000000`0000001a 00000000`00041201 fffff680`00010600 00000000`000000f1 : nt!KeBugCheckEx
fffff880`07b227f0 fffff800`02c99c74 : 00000000`00000080 fffff680`000108e8 00000000`020b7000 00000000`00000080 : nt! ?? ::FNODOBFM::`string'+0x13c82
fffff880`07b22830 fffff800`02f73794 : ffffffff`00000000 fffffa80`00000000 fffffa80`0ddaeb30 00000000`00000004 : nt!MiCommitExistingVad+0x2c4
fffff880`07b228d0 fffff800`02c7f453 : ffffffff`ffffffff 00000000`00efcaf0 00000000`00000000 00000000`00efcb88 : nt!NtAllocateVirtualMemory+0x3f4
fffff880`07b22a70 00000000`7701149a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00efca98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7701149a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+13c82
fffff800`02cdbcfe cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+13c82
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4fa390f3
FAILURE_BUCKET_ID: X64_0x1a_41201_nt!_??_::FNODOBFM::_string_+13c82
BUCKET_ID: X64_0x1a_41201_nt!_??_::FNODOBFM::_string_+13c82
Followup: MachineOwner
---------
6: kd> lmvm nt
start end module name
fffff800`02c01000 fffff800`031e9000 nt (pdb symbols) c:\symbols\ntkrnlmp.pdb\ABD176D2C7AE41B88BBF2837A09A462C2\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Mapped memory image file: c:\symbols\ntoskrnl.exe\4FA390F35e8000\ntoskrnl.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Timestamp: Fri May 04 01:18:59 2012 (4FA390F3)
CheckSum: 00555F80
ImageSize: 005E8000
File version: 6.1.7601.17835
Product version: 6.1.7601.17835
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 6.1.7601.17835
FileVersion: 6.1.7601.17835 (win7sp1_gdr.120503-2030)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.
My specs are as follows:
Windows 7 64 bit Ultimate Retail
Intel Ivy Bridge 3770 stock speed (3 weeks)
16 GB Corsair Vengeance RAM manually altered to 1600MHZ, BIOS only read it as 1333MHZ (3 Weeks)
ASUS Z77 Sabertooth Mobo (3 Weeks)
640GB WD Caviar Green HD (4 Years)
1TB WD Caviar Black HD (3 Weeks)
Sapphire ATI Radeon 5870 2GB EYEFINITY Dual monitors, one HDMI, one VGA (2 Years)
Kingwin 1000W PSU Bronze Certified Modular
Any help would be appreciated, thanks
Quote