Death Upon Boot

haydenshnell · 27 Dec 2010

I recently installed a mod to a game I was playing on my Windows 7 64 bit OS. I began to play the game for some time, and my computer ran for a full two days with no issue. Then suddenly, it crashed without so much as a warning or BSOD. It simply shut down.

I restart the computer and during bootup when the Windows logo is animating it crashed again. A third restart resulted in the recovery option upon boot. I selected it and let it scan. It found nothing. So I tried a System Restore. Right after I click the box to initiate the restore at the selected point, it crashes.

I have fully powered down my computer, disconnected main power, network cables, etc.. Let it sit for an hour thinking it might be heat related, but the same boot crashes occur. My last BSOD caused by my old outdated sound card two months ago prompted me to do a memtest on all of my ram, so I am pretty certain that is not the issue. I am using a new sound card that is compatible with Windows 7, so I am certain that is not the issue.

I am leaning towards the problem being caused by my graphics card, a virus, registry corruption, or motherboard failure. I am uncertain as to what steps I should take to resolve this issue, since it seems to be uncommon from the searches I have done. I have a second computer that I can use for hardware testing if that is something you suggest. Or if I have to back up files for a format, which is what I am trying to avoid at this point.

Any help would be greatly appreciated.

profdlp · 27 Dec 2010

Have you tried Safe Mode ?

haydenshnell · 27 Dec 2010

Every single method of boot crashes upon the Windows animated logo screen right as the windows symbol forms from the 4 moving spheres.

Just tried again since you asked, and strangely enough, it did not let me choose safemode, only repair boot or normal boot, I chose Normal Boot and held F8. This for some reason let me get past the animated Windows Logo and boot up successfully. I am running a full Virus Scan now and hoping I do not crash suddenly again.

Here is what I salved from Event Viewer:

--Error Message--
- System

- Provider

[ Name] EventLog

- EventID 6008

[ Qualifiers] 32768

Level 2

Task 0

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2010-12-28T05:00:54.000000000Z

EventRecordID 153760

Channel System

Computer Name

Security

- EventData

7:35:30 PM
?12/?27/?2010

402
DA070C0001001B00130023001E00CA02DA070C0002001C00010023001E00CA02600900003C00000001000000600900000000 0000B00400000100000000000000

--------------------------------------------------------------------------------

Binary data:

In Words

0000: 000C07DA 001B0001 00230013 02CA001E
0008: 000C07DA 001C0002 00230001 02CA001E
0010: 00000960 0000003C 00000001 00000960
0018: 00000000 000004B0 00000001 00000000

In Bytes

0000: DA 07 0C 00 01 00 1B 00 Ú.......
0008: 13 00 23 00 1E 00 CA 02 ..#...Ê.
0010: DA 07 0C 00 02 00 1C 00 Ú.......
0018: 01 00 23 00 1E 00 CA 02 ..#...Ê.
0020: 60 09 00 00 3C 00 00 00 `...<...
0028: 01 00 00 00 60 09 00 00 ....`...
0030: 00 00 00 00 B0 04 00 00 ....°...
0038: 01 00 00 00 00 00 00 00 ........

--Warning Message--
- System

- Provider

[ Name] Microsoft-Windows-Wininit
[ Guid] {206F6DEA-D3C5-4D10-BC72-989F03C8B84B}

EventID 11

Version 0

Level 3

Task 0

Opcode 0

Keywords 0x4000000000000000

- TimeCreated

[ SystemTime] 2010-12-28T01:29:18.327900000Z

EventRecordID 153688

Correlation

- Execution

[ ProcessID] 504
[ ThreadID] 552

Channel System

Computer Name

- Security

[ UserID] ID

- EventData

StringCount 1
String avgrssta.dll

--Critical Message--
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2010-12-28T01:29:00.699200000Z

EventRecordID 153655

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Name

- Security

[ UserID] ID

- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

The Event and Critical Messages are the exact same for each crash. As I finish typing this, the computer just crashed again while performing a virus scan. Hope this information can be useful for solving this.

profdlp · 28 Dec 2010

See if this helps:

https://www.sevenforums.com/crashes-d...luescreen.html

That person thought it was an audio driver problem. Of course, if you can't even boot to Safe Mode it's going to take a little doing to try fixing it.

haydenshnell · 28 Dec 2010

I already dealt with my video driver issues months ago by buying a brand new sound card made with compatibility for Windows 7. And most of the time the computer crashes, there is no sound output to the card. It is either sitting idle, running a program like virus scanners, or simple in the process of booting. I even have my boot up music disabled because I hate hearing it. Sound card being the issue just doesn't make much sense honestly.

And sadly, I cannot retrieve a dump file at all since it continues to crash while booting.

**Edit: Decided to make sure my on board sound card was disabled through bios. After doing this, the boot-up allowed me to select safe mode. I was able to enter safe mode and managed to do some digging. Since you brought up sound cards I went ahead and looked at my build in sound card, and sure enough, the drivers for it were still installed and operating. I removed all of the other sound cards files and made sure only the new, working sound cards files were installed.

I booted up successfully and after 10-15 minutes of sitting idle while reading up on errors and typing this, my computer crashed unexpectedly again. Nothing was being run or operating at the time, it was sitting there idle. I do not have any screensaver, powersaver, etc.. running since I hate those services and manually power off the monitor or computer when I am done using it, so those options can be removed from the cause.

I even manually uninstalled the video game mod I installed when this all started and made sure the registry entries for it were removed as well. Any more advice to pinpoint this issue is appreciated. I might be able to grab a dump file at some point if I can keep it running long enough, but I doubt it.

profdlp · 29 Dec 2010

haydenshnell said:

I already dealt with my video driver issues months ago by buying a brand new sound card made with compatibility for Windows 7. And most of the time the computer crashes, there is no sound output to the card. It is either sitting idle, running a program like virus scanners, or simple in the process of booting. I even have my boot up music disabled because I hate hearing it. Sound card being the issue just doesn't make much sense honestly...

Not to ignore the rest of your post, but the important thing here was not that your computer was crashing while trying to make a sound, but that the point at which it was crashing was while it was loading drivers - including those for your sound card.

Without a dump report we could be guessing for quite a while. See if this can help you in getting one:

https://www.sevenforums.com/crashes-d...tructions.html

haydenshnell · 29 Dec 2010

Now that I know how to bypass the repair option and get to safe mode, here is the attached dump file as requested. I cannot do a system health report, keeps producing an error.

haydenshnell · 30 Dec 2010

I have sort of ruled out virus and possibly registry as being the root error here. I ran a full binary virus sweep while in safe mode, found nothing. I also had the registry cleaned up and removed all of the game mods I installed prior to this crash and it did not do any good.

So your theory about the sound card is likely, although I will not route out the video card causing the issue. It has shown some unusual signs lately that make me consider it as a possible cause of the crash.

zigzag3143 · 30 Dec 2010

haydenshnell said:

Now that I know how to bypass the repair option and get to safe mode, here is the attached dump file as requested. I cannot do a system health report, keeps producing an error.

The newest BSOD was from NOv 16, 2010. Is this the newest one?

It was caused by rdyboost. sys. I would disable it. the specific function btw is a memory exception caused by the BB security cookie check.

If this is the latest BSOD you should be ok after disabling it.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\111610-34023-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c65000 PsLoadedModuleList = 0xfffff800`02ea2e50
Debug session time: Tue Nov 16 19:29:19.216 2010 (GMT-5)
System Uptime: 0 days 0:01:08.057
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff8800194c7b4, fffff88002ec9798, fffff88002ec9000}

Probably caused by : rdyboost.sys ( rdyboost!_security_check_cookie+14 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8800194c7b4, The address that the exception occurred at
Arg3: fffff88002ec9798, Exception Record Address
Arg4: fffff88002ec9000, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
rdyboost!_security_check_cookie+14
fffff880`0194c7b4 c20000          ret     0

EXCEPTION_RECORD:  fffff88002ec9798 -- (.exr 0xfffff88002ec9798)
ExceptionAddress: fffff8800194c7b4 (rdyboost!_security_check_cookie+0x0000000000000014)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88002ec9000 -- (.cxr 0xfffff88002ec9000)
rax=0000000000000004 rbx=fffffa8005ccb118 rcx=f880019510180000
rdx=00000000000003ff rsi=fffffa8005ccb130 rdi=0000057ffa334ee8
rip=fffff8800194c7b4 rsp=fffff88002ec99d8 rbp=fffff88002ec9a00
 r8=fffffa8008cc4000  r9=fffff88002ec9b70 r10=0000000000000000
r11=0000000000000001 r12=0000000000000000 r13=fffff88002ec9b70
r14=fffffa8009163270 r15=fffffa8005ccb118
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
rdyboost!_security_check_cookie+0x14:
fffff880`0194c7b4 c20000          ret     0
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0d0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
rdyboost!_security_check_cookie+14
fffff880`0194c7b4 c20000          ret     0

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff88001931a9d to fffff8800194c7b4

STACK_TEXT:  
fffff880`02ec99d8 fffff880`01931a9d : fffffa80`05ccb118 fffffa80`05ccb130 00000000`00000001 00000000`00000020 : rdyboost!_security_check_cookie+0x14
fffff880`02ec99e0 fffff880`01930b2e : fffffa80`05ccb118 fffffa80`05ccb130 fffffa80`09163270 fffffa80`080bacf0 : rdyboost!B_TREE<_SMD_STORE_KEY,ST_STORE<SMD_TRAITS>::_ST_PAGE_ENTRY,4096,NP_CONTEXT>::BTreeSearchResultDeref+0x14d
fffff880`02ec9a50 fffff880`0193d7df : fffffa80`05ccb118 00000000`0401c507 fffff880`02ec9ba0 00000000`00000000 : rdyboost!B_TREE<_SMD_STORE_KEY,ST_STORE<SMD_TRAITS>::_ST_PAGE_ENTRY,4096,NP_CONTEXT>::BTreeSearchKey+0x2e
fffff880`02ec9aa0 fffff880`0193c9b7 : fffffa80`0000051f fffff880`000000c0 fffffa80`09163270 fffff880`02ec9b70 : rdyboost!ST_STORE<SMD_TRAITS>::StDmpSinglePageRetrieve+0x4f
fffff880`02ec9b40 fffff880`0193c5fc : 00000000`00000009 00000000`040df2e2 fffffa80`09163270 fffffa80`05ccb0b0 : rdyboost!ST_STORE<SMD_TRAITS>::StDmPageRetrieve+0x153
fffff880`02ec9c80 fffff880`0193b3fe : fffffa80`09163270 00000000`00000080 00000000`00000080 fffffa80`05ccbf88 : rdyboost!ST_STORE<SMD_TRAITS>::StWorkItemProcess+0x224
fffff880`02ec9ce0 fffff800`02f79c06 : 00000000`00000000 fffff880`00000000 fffffa80`05cc20a0 fffffa80`05205040 : rdyboost!SMKM_STORE<SMD_TRAITS>::SmStWorker+0x152
fffff880`02ec9d40 fffff800`02cb3c26 : fffff880`009e6180 fffffa80`05cc20a0 fffff880`009f0f40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`02ec9d80 00000000`00000000 : fffff880`02eca000 fffff880`02ec4000 fffff880`02ec9820 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  rdyboost!_security_check_cookie+14

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: rdyboost

IMAGE_NAME:  rdyboost.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc48a

STACK_COMMAND:  .cxr 0xfffff88002ec9000 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_rdyboost!_security_check_cookie+14

BUCKET_ID:  X64_0x7E_rdyboost!_security_check_cookie+14

Followup: MachineOwner
---------

Old drivers needing updating. Your video driver is over 3 years old.

Code:

c6501.sys    2/7/2007 5:18:04    0x45c9a75c    fffff880`06e70000    fffff880`06fc6000        0x00156000                    
nvmfdx64.sys    8/1/2008 13:38:28    0x48935824    fffff880`04272000    fffff880`043de180        0x0016c180                    
nvstor64.sys    8/18/2008 20:53:39    0x48aa27a3    fffff880`00dc2000    fffff880`00dee000        0x0002c000                    
dump_nvstor64.sys    8/18/2008 20:53:39    0x48aa27a3    fffff880`0586f000    fffff880`0589b000        0x0002c000

haydenshnell · 30 Dec 2010

No, that is not my newest crash. Newest Crash should have been for the date I posted that file on 12/29/2010. It seems my dump files are not updating? I am very confused.

By the way, I ran a memtest again, and passed. Half of the time I boot up to windows, it crashes outright at the logo, the other half it lets me through, and crashes shortly after I open a pc game.

Now I cannot boot into safe mode......I did notice the rdyboost.sys is still loaded, even in safe mode. I will remove that post haste if I can get into safe mode.