Windows 7: Random BSODs when playing games

Turbotube · 20 Aug 2010

I've had 9 BSODs in 3 weeks time with my one month old computer. All those BSODs have happened during gameplay of either Bad Company 2 or Warhammer Online. I haven't crashed in normal Windows usage. Basically the game and sound freeze for one second and then a black screen follows with some colorful vertical lines for one second and the computer reboots itself. Later I checked the latest BSOD with BlueScreenView and it said this: Bug Check String: MEMORY_MANAGEMENT, Bug Check Code: 0x0000001a, Caused By Driver: ntoskrnl.exe
I'm not sure, if all those BSODs are the same cause I enabled the writing to a log file just after the 8th BSOD.

I have the latest motherboard chipset drivers, sound drivers and ati catalyst display drivers.

You can see my system spec in my profile but I'm running a full retail version of Win 7 64-bit. I installed this OS when I got this computer one month ago.

And sorry, perfmon report is in finnish...

ttran · 20 Aug 2010

can you navigate to C:\window\minidump to check if there are more .dmp file. If so, please zip them up and post them all. There is only 1 dmp file in the one you just upload and it's hard to diagnostic.

make sure you don't use any program such as CCleaner, they might clean out the minidump folder.

Turbotube · 21 Aug 2010

Like I said in my first post I enabled minidump logging after the 8th BSOD so I only have one file there. I will post more when I get more BSODs but it might take a few days.

ttran · 21 Aug 2010

What games did you play during the time of crash? Are they online games?

If it is online games, I suspect that 3rd party firewall might be the cause eventhough stop code 1A doesn't tell us about that, and that's why I hope you can provide more dmp so that we can narrow down the cause.

In looking through your drivers, I see that you have AVG anti virus installed. AVG is known to cause BSOD, on some systems. I suggest that you uninstall it while trouble shooting using the uninstall tool > Info > Tool (32bit) - Tool (64 bit). If you have AVG Identity Protection installed, uninstall it also >Info > Tool. I recommend that you install MSE and make sure Windows Firewall is turned on.

The results from the DMP files do not give a definitive answer. While we investigate further here are a few things that you can do.

1-Run a system file check to verify and repair you system files. You do this by typing cmd in search, then right click and run as admin. SFC /SCANNOW

2-Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

3-Event viewer
Go into event viewer (type eventvwr in search). Go to the windows log>application tab.

You want to look for critical errors (they have red in the left column ).

When you find them you want to look for critical errors that say app hang, app crash, or anything that relates to the problem.

When you find them please note the event ID, and the source codes and tell us what they are.

4-Device manager
Please go to start>search>type device manager.
Are there any "unknown devices" with yellow triangles on them?
Is you driver there , listed, and working?

If y our driver is missing, or there is a yellow triangle on it, you will need to update it.

5-Driver verifier
please run Verifier with these settings:

Quote:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.

So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Windows 7 Startup Repair feature)

Here is the procedure:
Driver Verifier - Enable and Disable

Code:

BugCheck 1A, {41284, 2f1ee001, f020, fffff70001080000}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4a83 )

Followup: MachineOwner
---------
PROCESS_NAME:  war.exe

Regard,

Tuan

Turbotube · 21 Aug 2010

Yeah, Bad Company 2 and Warhammer Online are online games. I have to check that AVG thing later.

1. Done, no errors found.

2. No errors in Memtest86.

3. No critical errors in Windows->Application. The only critical errors were found in Windows->System tab: Source: Kernel-Power, Event ID: 41, Task: (63)

Code:

- System 

  - Provider 

   [ Name]  Microsoft-Windows-Kernel-Power 
   [ Guid]  {331C3B3A-2005-44C2-AC5E-77220C37D6B4} 
 
   EventID 41 
 
   Version 2 
 
   Level 1 
 
   Task 63 
 
   Opcode 0 
 
   Keywords 0x8000000000000002 
 
  - TimeCreated 

   [ SystemTime]  2010-08-20T22:12:32.540024500Z 
 
   EventRecordID 19076 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  4 
   [ ThreadID]  8 
 
   Channel System 
 
   Computer Luu-PC 
 
  - Security 

   [ UserID]  S-1-5-18 
 

- EventData 

  BugcheckCode 26 
  BugcheckParameter1 0x41284 
  BugcheckParameter2 0x2f1ee001 
  BugcheckParameter3 0xf020 
  BugcheckParameter4 0xfffff70001080000 
  SleepInProgress false 
  PowerButtonTimestamp 0

4. No unknown devices or yellow triangles in the device manager.

5. The computer crashed after rebooting and it gave me this:

Code:

Ongelman tunniste:
  Ongelmatapahtuman nimi:    BlueScreen
  Käyttöjärjestelmän versio:    6.1.7600.2.0.0.256.48
  Aluekohtaisten asetusten tunnus:    1035

Lisätietoja ongelmasta:
  BCCode:    c4
  BCP1:    00000000000000F6
  BCP2:    00000000000001C4
  BCP3:    FFFFFA80071BF470
  BCP4:    FFFFF880074947D9
  OS Version:    6_1_7600
  Service Pack:    0_0
  Product:    256_1

Ongelman kuvausta helpottavat tiedostot:
  C:\Windows\Minidump\082110-32183-01.dmp
  C:\Users\Luu\AppData\Local\Temp\WER-45677-0.sysdata.xml

Lue tietosuojatiedot verkossa:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x040b

Jos tietosuojatiedot verkossa eivät ole käytettävissä, voit lukea tietosuojatiedot myös offline-tilassa:
  C:\Windows\system32\fi-FI\erofflps.txt

And I uploaded another dump file from the crash after I enabled verifier.exe

ttran · 21 Aug 2010

Hi,

Thank you for the detail post. I really appreciate that when OP follow the suggestion in such impressive way
Here is the thing:
AVGIDSDriver.sys is blamed in the memory dump - and the memory dump is a DRIVER_VERIFIER_DETECTED_VIOLATION

The driver is the AVG IDS Application Activity Monitor Driver - and the solution here is to remove AVG and install another antivirus to test
I suggest that you uninstall it using the uninstall tool > Info > Tool (32bit) - Tool (64 bit). If you have AVG Identity Protection installed, uninstall it also >Info > Tool. I recommend that you install MSE and make sure Windows Firewall is turned on.

BUGCHECK SUMMARY:

Code:

BugCheck C4, {f6, 1c4, fffffa80071bf470, fffff880074947d9}

Unable to load image AVGIDSDriver.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AVGIDSDriver.sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSDriver.sys
Probably caused by : AVGIDSDriver.sys ( AVGIDSDriver+167d9 )

Followup: MachineOwner
---------
PROCESS_NAME:  DTLite.exe

The process running at the time of crash is DTLite.exe, very interesting. It is part of Deamon tool and this program (or Alcohol 120%) are notorious for causing BSODs. Please remove Deamoon completely for testing purpose.

If you need an alternative program to try, you can use Magic disc
Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

Regard,

Tuan

Turbotube · 22 Aug 2010

I uninstalled AVG and Daemon Tools, and I installed Avast Anti-virus and Comodo Firewall. Are they ok? The reason I'm not using Windows Firewall is that I don't really trust it. An old habit I guess.

ttran · 22 Aug 2010

I would suggest you not to use 3rd party firewall or AV at this time. It is your choice. In this case, if you leave your computer using MSE, I bet you probably won't see BSODs in very long time. But with Comodo and Avast...hum...I see quite lots of BSODs caused by them.

Good Luck,

Tuan

Turbotube · 22 Aug 2010

I got a BSOD again when playing Warhammer Online. (Bug Check String: MEMORY_MANAGEMENT, Bug Check Code: 0x0000001a, Caused By Driver: ntoskrnl.exe, Caused By Address: ntoskrnl.exe+70740)

Code:

Ongelman tunniste:
  Ongelmatapahtuman nimi:    BlueScreen
  Käyttöjärjestelmän versio:    6.1.7600.2.0.0.256.48
  Aluekohtaisten asetusten tunnus:    1035

Lisätietoja ongelmasta:
  BCCode:    1a
  BCP1:    0000000000000411
  BCP2:    FFFFF680003A0F08
  BCP3:    BCA0000053ADF886
  BCP4:    FFFFF6FC50059281
  OS Version:    6_1_7600
  Service Pack:    0_0
  Product:    256_1

Ongelman kuvausta helpottavat tiedostot:
  C:\Windows\Minidump\082210-22838-01.dmp
  C:\Users\Luu\AppData\Local\Temp\WER-51823-0.sysdata.xml

Lue tietosuojatiedot verkossa:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x040b

Jos tietosuojatiedot verkossa eivät ole käytettävissä, voit lukea tietosuojatiedot myös offline-tilassa:
  C:\Windows\system32\fi-FI\erofflps.txt

I uploaded dump files again. The newest one is this BSOD. I guess I have to try that MSE, if this was caused by Avast or Comodo... but the codes are the same than in my first post.

ttran · 23 Aug 2010

Please remove both Comodo and Avast:
Full Removal of Comodo Firewall Pro 3 with SafeSurf Toolbar (If Regular Uninstall Method Fails)
avast! Uninstall Utility

Then replaced by MSE and make sure window firewall is on:
http://www.microsoft.com/security_essentials

If after doing that and problem still pursue, we will go from there

BUGCHECK SUMMARY:

Code:

BugCheck 1A, {411, fffff680003a0f08, bca0000053adf886, fffff6fc50059281}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+6051 )

Followup: MachineOwner
---------
PROCESS_NAME:  war.exe

Windows 7: Random BSODs when playing games

Random BSODs when playing games problems?