BSOD - can't even login to windows


  1. Posts : 6
    Windows 7 Ultimate x64
       #1

    BSOD - can't even login to windows


    OS: Windows 7 Ultimate x64
    Original OS installed and is the full retail version

    PC Specs:
    Manufacturer: Myself
    Motherboard: Gigabyte P35-DS3L
    CPU: Intel Quad Core Q6600 @ 2.4ghz
    RAM: 4gb OcZ XTC Platinum DDR2 800 MHz
    GPU: ATI HD5870 1GB GDDR5 4.8mHZ
    HDD: Western Digital 1TB @ 7200rpm
    Sound Card: Onboard
    PSU: CoolerMaster 650W

    Age of OS: about 8 months ( reinstalled after getting a virus )

    Here is what happened:

    Yesterday(Sunday January 30th, 2011) at about 8:12pm EST my computer mouse and keyboard randomly froze up. At the time I wasn't doing anything special just watching a youtube video. So I restart my PC and I get a BSOD while logging saying irql_not_less_or_equal. So I obviously restart again and this continues to happen even in safe mode, however the BSOD varies from System_Service_Exception to irql_not_less_or_equal.

    I soon found that leaving my PC off for an extended amount of time gave me more time when logging in to safe mode or regular startup (it didn't matter which). So this obviously led me to believe my system was overheating. So I cleaned out my heatsink fan and downloaded SpeedFan and watched my temperatures only to find they hovered around 25-35C and my fans were anywhere from 600-800 RPM which I THINK is normal.

    I have tried system restores as far back as the 24th(as far as I can go) and still I BSOD everytime.

    *NOTE* Perfmon is in the zip named perfmon report*
    Last edited by karsten; 01 Feb 2011 at 00:40. Reason: New dumps
      My Computer


  2. Posts : 507
    Windows 7 Ultimate x64 SP1
       #2

    Hi,
    I think it was cause by sptd.sys , part of Alcohol/Daemon software.
    So I suggest you to uninstall it and remove its driver with SPTDinst. (choose Uninstall not install)
    DuplexSecure - Downloads
    For alternative Virtual CD software , you may use MagicIso.

    Perform system file checker:
    Right click cmd.exe → run as admin → sfc /scannow

    Update this driver:
    Code:
    Lachesis.sys Fri Aug 17 00:48:44 2007 → Razer Lachesis Mouse driver
    Code:
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02e4c000 PsLoadedModuleList = 0xfffff800`03089e50
    Debug session time: Sun Jan 30 17:41:38.873 2011 (GMT-8)
    System Uptime: 0 days 0:02:26.964
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ......................................
    Loading User Symbols
    Loading unloaded module list
    ......
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck A, {8, 2, 0, fffff80002e98d29}
    
    Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sptd.sys
    *** ERROR: Module load completed but symbols could not be loaded for sptd.sys
    Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
    
    Followup: MachineOwner
    ---------
    
    3: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 0000000000000008, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, bitfield :
        bit 0 : value 0 = read operation, 1 = write operation
        bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: fffff80002e98d29, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030f40e0
     0000000000000008 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    nt!KiInsertQueueApc+1e9
    fffff800`02e98d29 488b5108        mov     rdx,qword ptr [rcx+8]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xA
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff88002ffb5b0 -- (.trap 0xfffff88002ffb5b0)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
    rdx=fffffa80070cbd78 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff80002e98d29 rsp=fffff88002ffb740 rbp=fffff88002fd3180
     r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
    r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    nt!KiInsertQueueApc+0x1e9:
    fffff800`02e98d29 488b5108        mov     rdx,qword ptr [rcx+8] ds:0650:00000000`00000008=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002ebbca9 to fffff80002ebc740
    
    STACK_TEXT:  
    fffff880`02ffb468 fffff800`02ebbca9 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`02ffb470 fffff800`02eba920 : fffffa80`00000002 fffffa80`03884b60 fffffa80`078947a0 fffff880`00fb1e92 : nt!KiBugCheckDispatch+0x69
    fffff880`02ffb5b0 fffff800`02e98d29 : fffffa80`07894870 00000000`00000200 00000000`00000000 fffff800`02f700e4 : nt!KiPageFault+0x260
    fffff880`02ffb740 fffff800`02e9bfec : fffffa80`03884b60 00000000`00000002 00000000`00000000 fffffa80`070cbd78 : nt!KiInsertQueueApc+0x1e9
    fffff880`02ffb770 fffff800`02ebf55b : 00000000`00000000 00000000`a000000c 00000000`00000000 00000000`00000000 : nt!KeInsertQueueApc+0x80
    fffff880`02ffb7d0 fffff880`00faf41a : 00000000`00000200 00000000`00000001 fffffa80`070fc6f0 00000000`00000000 : nt!IopfCompleteRequest+0xbdb
    fffff880`02ffb8b0 fffff880`00faf242 : fffffa80`070fc6f0 fffff880`00fb1b3b fffffa80`078947a0 fffffa80`045187d0 : ataport!IdeCompleteScsiIrp+0x62
    fffff880`02ffb8e0 fffff880`00fa9e32 : 00000000`00000000 00000000`00000000 fffffa80`044f5500 fffffa80`045187d0 : ataport!IdeCommonCrbCompletion+0x5a
    fffff880`02ffb910 fffff880`00fb27ed : fffffa80`044f41a0 fffffa80`070fc6f0 00000000`00000000 fffffa80`070fc6f0 : ataport!IdeTranslateCompletedRequest+0x236
    fffff880`02ffba40 fffff880`00fb20ec : fffffa80`044f41a0 00000000`00000000 fffffa80`044f41a0 00000000`00000000 : ataport!IdeProcessCompletedRequests+0x4d5
    fffff880`02ffbb70 fffff880`0104f4ce : fffffa80`043ca000 fffff880`02ffbc58 fffffa80`044f4050 fffffa80`043ca750 : ataport!IdePortCompletionDpc+0x1a8
    fffff880`02ffbc30 fffffa80`043ca000 : fffff880`02ffbc58 fffffa80`044f4050 fffffa80`043ca750 fffff880`02fd3180 : sptd+0x424ce
    fffff880`02ffbc38 fffff880`02ffbc58 : fffffa80`044f4050 fffffa80`043ca750 fffff880`02fd3180 00000000`00000000 : 0xfffffa80`043ca000
    fffff880`02ffbc40 fffffa80`044f4050 : fffffa80`043ca750 fffff880`02fd3180 00000000`00000000 fffff880`02fd7f40 : 0xfffff880`02ffbc58
    fffff880`02ffbc48 fffffa80`043ca750 : fffff880`02fd3180 00000000`00000000 fffff880`02fd7f40 00000000`00000022 : 0xfffffa80`044f4050
    fffff880`02ffbc50 fffff880`02fd3180 : 00000000`00000000 fffff880`02fd7f40 00000000`00000022 00000000`00000000 : 0xfffffa80`043ca750
    fffff880`02ffbc58 00000000`00000000 : fffff880`02fd7f40 00000000`00000022 00000000`00000000 00000000`00000000 : 0xfffff880`02fd3180
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    ataport!IdeCompleteScsiIrp+62
    fffff880`00faf41a 8bc3            mov     eax,ebx
    
    SYMBOL_STACK_INDEX:  6
    
    SYMBOL_NAME:  ataport!IdeCompleteScsiIrp+62
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: ataport
    
    IMAGE_NAME:  ataport.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc118
    
    FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
    
    BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
    
    Followup: MachineOwner
    ---------
      My Computer


  3. Posts : 6
    Windows 7 Ultimate x64
    Thread Starter
       #3

    Thank you for your analysis. The only problem is I have about 1-20 minutes of access time to my pc before it crashes when in safe mode(usually closer to 1, lol). Is there anyway you can think of that I can use to prolong this?
    Last edited by karsten; 31 Jan 2011 at 23:42. Reason: timing
      My Computer


  4. Posts : 507
    Windows 7 Ultimate x64 SP1
       #4

    Your Windows crash in safe mode , it seems there is another culprit such as OS corruption or Hardware faliure.
    Try the suggestion above (remove sptd and perform system file checker).
    If the problem persist then you may try Repair Install.
    Repair Install
      My Computer


  5. Posts : 6
    Windows 7 Ultimate x64
    Thread Starter
       #5

    Alright, I will try that. One quick question how can I quickly find my Product ID/code for Windows 7(if I can't login into Windows normally). I have misplaced my cd with the ID on it.

    Also, searching though the dump code you provided I saw this.

    Code:
    MODULE_NAME: ataport
    
    IMAGE_NAME:  ataport.SYS
    and

    Code:
    Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sptd.sys
    *** ERROR: Module load completed but symbols could not be loaded for sptd.sys
    Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
    Does it have anything to do with anything?

    *EDIT*
    I think daemon tools was corrupted as it didn't show up in programs and features in safe mode. I went to its program files directory and uninstalled with the uninstaller. I then went to system32/drivers and deleted sptd.sys.

    Running sfc /scannow as we speak.

    *EDIT 2*
    Scan found nothing wrong. Attempting to start windows the normal way now.
    Last edited by karsten; 01 Feb 2011 at 00:07. Reason: Scan
      My Computer


  6. Posts : 6
    Windows 7 Ultimate x64
    Thread Starter
       #6

    Alright double posting because what I was instructed to do did now work and the previous post was too long.

    It BSODed soon after loading my desktop icons. I will be uploading the newest dump file in a few moments/whenever I can get on in safe mode.

    *EDIT*

    While waiting to get into safe mode I dled debugging tools on this laptop, I found this in the most recent dump files I had.

    Code:
    Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Any thoughts?

    *EDIT* All the new dumps also point to this. Seeing as I don't have my Windows 7 Product ID handy and I can't normally login into windows to get it. What can I do?
    Last edited by karsten; 01 Feb 2011 at 00:42. Reason: EDIT
      My Computer


  7. Posts : 507
    Windows 7 Ultimate x64 SP1
       #7

    ntoskrnl.exe is core of Windows, it is not the real cause.
    I suspecting your OS is corrupted , so try repair install.
    And for your Windows product ID and key , you may use this utility in safe mode.
    ProduKey - Recover lost product key (CD-Key) of Windows/MS-Office/SQL Server
      My Computer


  8. Posts : 6
    Windows 7 Ultimate x64
    Thread Starter
       #8

    I can't preform a Repair Install because it requires you to be logged into Windows regularly with an administrator account. Any thoughts? I really don't want to completely reinstall
      My Computer


  9. Posts : 6
    Windows 7 Ultimate x64
    Thread Starter
       #9

    This was resolved with a fresh install of Windows 7, thank you for your time.
      My Computer


  10. Posts : 507
    Windows 7 Ultimate x64 SP1
       #10

    You're welcome and thanks for reporting back.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:13.
Find Us