another BSOD after re-installing w7

**cluberti** · 16 Jan 2011

I would have to say that thundertjE's analysis is spot-on - the ATI driver running inside dwm.exe is causing the exception, and since it's a system service (transitioning from non-privileged code, aka user-mode, to privileged code, aka kernel-mode), it cannot cause an exception without causing the computer to bugcheck during this transition period:

Code:

// Exception record and thread that caused it:
2: kd> .cxr 0xfffff8800a550900
rax=0000000000000000 rbx=fffffa8006994f90 rcx=fffffa80055112d0
rdx=0000000000000000 rsi=0000000000000015 rdi=fffffa800672e340
rip=fffff88004b02817 rsp=fffff8800a5512d0 rbp=fffffa80055112d0
 r8=0000000000000015  r9=fffff88004ec4970 r10=fffffa80076d2950
r11=fffff8800a551420 r12=0000000000000000 r13=fffffa8005cf97f0
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
atikmdag+0x90817:
fffff880`04b02817 8b4820          mov     ecx,dword ptr [rax+20h] ds:002b:00000000`00000020=????????

2: kd> kn
  *** Stack trace for last set context - .thread/.cxr resets it
 # Child-SP          RetAddr           Call Site
00 fffff880`0a5512d0 00000000`00000000 atikmdag+0x90817

// The thread that caused the bugcheck, spawned due to the exception above:
2: kd> !thread
GetPointerFromAddress: unable to read from fffff80002cc6000
THREAD fffffa8005d4db60  Cid 0654.0264  Teb: 000007fffffd6000 Win32Thread: fffff900c235c010 RUNNING on processor 2
Not impersonating
GetUlongFromAddress: unable to read from fffff80002c04b74
Owning Process            fffffa8006b30060       Image:         dwm.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      264839       
Context Switch Count      66                 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x000007fef906b0e4
Stack Init fffff8800a551db0 Current fffff8800a551430
Base fffff8800a552000 Limit fffff8800a54b000 Call 0
Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`0a550038 fffff800`02a8dca9 : 00000000`0000003b 00000000`c0000005 fffff880`04b02817 fffff880`0a550900 : nt!KeBugCheckEx
fffff880`0a550040 fffff800`02a8d5fc : fffff880`0a551098 fffff880`0a550900 00000000`00000000 fffff880`05297dec : nt!KiBugCheckDispatch+0x69
fffff880`0a550180 fffff800`02ab440d : fffff960`0033b8d0 fffff960`00301498 fffff960`00050000 fffff880`0a551098 : nt!KiSystemServiceHandler+0x7c
fffff880`0a5501c0 fffff800`02abba90 : fffff800`02bde1a0 fffff880`0a550238 fffff880`0a551098 fffff800`02a1e000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0a5501f0 fffff800`02ac89ef : fffff880`0a551098 fffff880`0a550900 fffff880`00000000 fffffa80`0672e340 : nt!RtlDispatchException+0x410
fffff880`0a5508d0 fffff800`02a8dd82 : fffff880`0a551098 fffffa80`06994f90 fffff880`0a551140 00000000`00000015 : nt!KiDispatchException+0x16f
fffff880`0a550f60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2

// ATI driver:
2: kd> lmvm atikmdag
start             end                 module name
fffff880`04a72000 fffff880`05283000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        Thu Nov 25 21:46:44 2010 (4CEF1F94)
    CheckSum:         007CA105
    ImageSize:        00811000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Nighthawk4 · 17 Jan 2011

nope. not yet, anyway. though my screen does shake violently when fading in/out of windows (like in startup and shutdown). could there be a particular reason for this? it did also happen when i had 10.12 installed btw

oh, an expert :)
tnx for confirming cluberti :)

thundertjE · 17 Jan 2011

Nighthawk4 said:

nope. not yet, anyway. though my screen does shake violently when fading in/out of windows (like in startup and shutdown). could there be a particular reason for this? it did also happen when i had 10.12 installed btw

oh, an expert :)
tnx for confirming cluberti :)

Hello Nighthawk4, what do you mean by shaking violently? Which tool did you use for remove your previous drivers?

Nighthawk4 · 17 Jan 2011

i just went to control panel > remove program > ATI Catalyst Install Manager.

in the other thread someone said i needed to remove all traces with Disksweeper, but that made my pc unable to boot, so i don't think i should try that again

and what i mean by shaking violently; when windows fades from "welcome" to your desktop, the whole screen shakes 2cm to the left, then 2cm to the right every 0.2 seconds (or so), until the desktop has fully faded in.

thundertjE · 17 Jan 2011

Nighthawk4 said:

i just went to control panel > remove program > ATI Catalyst Install Manager.

in the other thread someone said i needed to remove all traces with Disksweeper, but that made my pc unable to boot, so i don't think i should try that again

and what i mean by shaking violently; when windows fades from "welcome" to your desktop, the whole screen shakes 2cm to the left, then 2cm to the right every 0.2 seconds (or so), until the desktop has fully faded in.

In my opinion, it seems to be a driver related problem and probably, during uninstalling, some traces of 10.12 drivers files just remained. I would advice you to make all the BSOD proceedure again by creating the dumps folder and perfmon /report again. Then, post it here and an analyst will analyze it again, checking if it blames the same file.

Edit: By the way, did you use Driver Sweeper on some proper way?

How to use ?

There are two methods to use Driver Sweeper.
Both methods achieve the same results. This method is always able to clean all files.

This method will delete remaining files upon reboot (if deleting failed). You can clean your drivers this way:

Use the official uninstaller(s) of the driver(s) you want to uninstall.
Reboot your PC in Safe Mode.
Run Driver Sweeper and select what to clean.
Analyse lists all the entries possible to remove, cleaning removes the entries selected.
More drivers can be selected for the same cleaning process.

Nighthawk4 · 17 Jan 2011

hmm no, i uninstalled my driver, then ran driversweeper which deleted the files on the next reboot. then my pc wouldn't start up anymore. i'll try this though.

Nighthawk4 · 17 Jan 2011

done that. didn't fix the problem. i attached a new info package

thundertjE · 17 Jan 2011

Nighthawk4 said:

done that. didn't fix the problem. i attached a new info package

It happened again with 10.11 drivers pal?

Nighthawk4 · 17 Jan 2011

no BSOD's, but the screen still shakes when i log on/off.

thundertjE · 17 Jan 2011

It seems that your graphics card is synchronizing the image with your display. But it shouldn't happen, to be honest, and as I understand, you never had it right? I still suspect it has to be with the drivers removal, but I actually can't be sure.