HELP! random !BSOD

rigz · 20 Feb 2011

please help! i got a blue screen after it freeze when im extracting a file using a WinImage . .?ive got a back-up registry.but it does not help. .i also have CCleaner..and Avast Pro for malwares and registry error. .i uninstalled all my programs that i had installed..yet it doesnt evn help though ..but the error occurs when i plug a USB flash drive and now it appears..evn though im not doing now anything. .pls??any iDea??i got Windows 7 Ultimate build 7600 and RAM 1.00Gb ..
i got a random Blue Screen Msgs. .like "driver_IRQL_is not less or equal", "IRQL_not less or equal and a 0x0000001e..etc". .i searched all over the internet to find a cure but i dont find even one though. .My drivers are all updated..and im sure its not a malware..do i need to upload the minidump files?

zigzag3143 · 20 Feb 2011

rigz said:

please help! i got a blue screen after it freeze when im extracting a file using a WinImage . .?ive got a back-up registry.but it does not help. .i also have CCleaner..and Avast Pro for malwares and registry error. .i uninstalled all my programs that i had installed..yet it doesnt evn help though ..but the error occurs when i plug a USB flash drive and now it appears..evn though im not doing now anything. .pls??any iDea??i got Windows 7 Ultimate build 7600 and RAM 1.00Gb ..
i got a random Blue Screen Msgs. .like "driver_IRQL_is not less or equal", "IRQL_not less or equal and a 0x0000001e..etc". .i searched all over the internet to find a cure but i dont find even one though. .My drivers are all updated..and im sure its not a malware..do i need to upload the minidump files?

So far

Old, really old drivers, including your storage drivers (hence your problem), and others

Code:

nvlddmkm.sys    8/1/2008 18:02:31    0x48939607    fffff880`04804000    fffff880`05125380        0x00921380                    
dump_nvstor64.sys    8/18/2008 20:53:39    0x48aa27a3    fffff880`041a7000    fffff880`041d3000        0x0002c000                    
nvstor64.sys    8/18/2008 20:53:39    0x48aa27a3    fffff880`010b1000    fffff880`010dd000        0x0002c000                    
nvsmu.sys    8/25/2008 5:22:45    0x48b287f5    fffff880`03c00000    fffff880`03c0b000        0x0000b000                    
Rt64win7.sys    2/26/2009 4:04:13    0x49a65b0d    fffff880`03e00000    fffff880`03e32000        0x00032000                    
spldr.sys    5/11/2009 11:56:27    0x4a0858bb    fffff880`0169b000    fffff880`016a3000        0x00008000                    
amdxata.sys    5/19/2009 12:56:59    0x4a12f2eb    fffff880`010dd000    fffff880`010e8000        0x0000b000                    
nvstor.sys    5/20/2009 1:45:37    0x4a13a711    fffff880`00d8d000    fffff880`00db8000        0x0002b000

How To Find Drivers:

- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Your storport driver (below) has caused most of these crashes. If you can boot into safe mode run sfc /scannow

SFC /SCANNOW Command - System File Checker

Code:

Loading Dump File [C:\Users\K\Desktop\New folder\021911-22027-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`0360f000 PsLoadedModuleList = 0xfffff800`0384ce50
Debug session time: Sun Feb 20 02:55:49.119 2011 (GMT-5)
System Uptime: 0 days 0:00:33.602
Loading Kernel Symbols
...............................................................
................................................................
............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa82c20a1098, 2, 0, fffff80003bf0557}

Probably caused by : storport.sys ( storport!RaUnitStartIo+2e1 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa82c20a1098, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80003bf0557, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800038b70e0
 fffffa82c20a1098 

CURRENT_IRQL:  2

FAULTING_IP: 
hal!HalBuildScatterGatherList+12b
fffff800`03bf0557 498b09          mov     rcx,qword ptr [r9]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  fffff88002f1b930 -- (.trap 0xfffff88002f1b930)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000001a8 rbx=0000000000000000 rcx=fffffa8001b8a248
rdx=fffffa8001b8a0c8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003bf0557 rsp=fffff88002f1bac0 rbp=fffffa8001b8a0b8
 r8=0000000000000200  r9=fffffa82c20a1098 r10=fffffa8001b8a0b8
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe cy
hal!HalBuildScatterGatherList+0x12b:
fffff800`03bf0557 498b09          mov     rcx,qword ptr [r9] ds:c8b8:fffffa82`c20a1098=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003680469 to fffff80003680f00

STACK_TEXT:  
fffff880`02f1b7e8 fffff800`03680469 : 00000000`0000000a fffffa82`c20a1098 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02f1b7f0 fffff800`0367f0e0 : fffffa80`03b0c7b0 00000000`00000000 00000000`00000002 fffffa80`029ad430 : nt!KiBugCheckDispatch+0x69
fffff880`02f1b930 fffff800`03bf0557 : fffffa80`02256c83 fffff800`03683516 00000000`00000001 00000000`00000001 : nt!KiPageFault+0x260
fffff880`02f1bac0 fffff880`010513a1 : fffffa80`01b8a010 fffffa80`03687bc0 00000000`0000000f fffffa80`03687bc0 : hal!HalBuildScatterGatherList+0x12b
fffff880`02f1bb30 fffff880`01052d76 : fffffa80`00000001 fffff880`020d4390 fffffa80`018ac5f0 fffffa80`018911b0 : storport!RaUnitStartIo+0x2e1
fffff880`02f1bbb0 fffff880`010518d3 : fffff880`00000000 fffff880`000000ef 00000000`0029ead1 fffffa80`01891060 : storport! ?? ::FNODOBFM::`string'+0x19cb
fffff880`02f1bc90 fffff800`0368c5dc : fffff880`009e9180 00000000`00000000 fffffa80`01891128 fffff880`009f3f40 : storport!RaidpAdapterDpcRoutine+0x53
fffff880`02f1bcd0 fffff800`036896fa : fffff880`009e9180 fffff880`009f3f40 00000000`00000000 fffff880`01051880 : nt!KiRetireDpcList+0x1bc
fffff880`02f1bd80 00000000`00000000 : fffff880`02f1c000 fffff880`02f16000 fffff880`02f1bd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
storport!RaUnitStartIo+2e1
fffff880`010513a1 3d230000c0      cmp     eax,0C0000023h

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  storport!RaUnitStartIo+2e1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: storport

IMAGE_NAME:  storport.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcace

FAILURE_BUCKET_ID:  X64_0xA_storport!RaUnitStartIo+2e1

BUCKET_ID:  X64_0xA_storport!RaUnitStartIo+2e1

Followup: MachineOwner
---------

1: kd> lmvm storport
start             end                 module name
fffff880`0104f000 fffff880`010b1000   storport   (pdb symbols)          c:\symbols\storport.pdb\91B82B7B55B040FD840217391798B4C52\storport.pdb
    Loaded symbol image file: storport.sys
    Mapped memory image file: C:\Symbols\storport.sys\4A5BCACE62000\storport.sys
    Image path: \SystemRoot\system32\DRIVERS\storport.sys
    Image name: storport.sys
    Timestamp:        Mon Jul 13 20:01:18 2009 (4A5BCACE)
    CheckSum:         0003278F
    ImageSize:        00062000
    File version:     6.1.7600.16385
    Product version:  6.1.7600.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     storport.sys
    OriginalFilename: storport.sys
    ProductVersion:   6.1.7600.16385
    FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
    FileDescription:  Microsoft Storage Port Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

rigz · 21 Feb 2011

ive thought our technician already updated it ..because i experienced it already recently and i just let him fixed it and i thnk he just reinstalled the OS and that is why it is still occuring??i dont have a constant internet connection. .can i just download the drivers and save on my flash drive?? ..the drivers that you have enlisted above are they OS drivers??or what?i dnt have knowldge about this stuffs. . thanks anyway. sorry for posting it twice.im confused of my threads i posted..

rigz · 21 Feb 2011

do u think this can help for a while??
Part One
Go to in the NVIDIA folder>> C:NVIDIA
Find a file named "nvlddmkm.sy_" >> "C:NVIDIA DisplayDriver" Number of the driver version (eg 186.81) 'InternationalDisplaynvlddmkm.sy_
It may well be on the path differs depending on each computer.
copy the file to the root of C>> C:nvlddmkm.sy_
Part Two
Go to the system folder where the drivers are stored>> C: WindowsSystem32 Drivers
Once in this folder, locate the file defective "nvlddmkm.sys" and rename it "nvlddmkm.sys.old"
Part Three
Open the MS-DOS command prompt>> Windows key + R> type "cmd"
Once the command prompt open, type the following commands:
1) "cd" and type enter (you are the root of the drive => C:)
2) "expand.exe nvlddmkm.sy_ nvlddmkm.sys" and then press Enter
"This command allows you to unzip the file" nvlddmkm.sy_ "that you placed at the root of C: and create the new" nvlddmkm.sys ".
Go get it>> C:nvlddmkm.sys
And put it in the folder>> C:WindowsSystem32drivers
Simply restart your PC.

what should i do if im on the process of installing my drivers then BOOM! BSOD will appear??

rigz · 21 Feb 2011

SORRY for that post above. . ^
is that prohibited??

zigzag3143 · 21 Feb 2011

rigz said:

ive thought our technician already updated it ..because i experienced it already recently and i just let him fixed it and i thnk he just reinstalled the OS and that is why it is still occuring??i dont have a constant internet connection. .can i just download the drivers and save on my flash drive?? ..the drivers that you have enlisted above are they OS drivers??or what?i dnt have knowldge about this stuffs. . thanks anyway. sorry for posting it twice.im confused of my threads i posted..

1-yes you can download and store them on flash.
2-The drivers that begin with "n" are Nvidia (you mobo and GPU) they are storage drivers, graphics, etc

The other drivers are assorted.

Just use this to find them

How To Find Drivers:

- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

rigz · 21 Feb 2011

thanks..but how about..the storport.sys? the link (http://www.carrona.org/dvrref.html)says storport.sys must use windows update only???

rigz · 22 Feb 2011

sir. . if i uninstall my driver in safe mode..my system crash. . and i use driver sweeper to clean it..then i tried to install a new one..the system will crash also.. .
and i just system restore it to undo..and i tried the "whocrashed.exe"
and the summary was because of "ntoskrnl.sys and storport.sys"
but when the system crashed the "storport.sys" was the only thing will be shown in blue screen message. .
i asked support in windows 7 blog and they offered me "hot fix"..but it does not solve my problem ..still.
i want to get rid of "storport.sys" any more idea sir??

rigz · 22 Feb 2011

or was it not because of WinImage??does it have any causing errors like daemon tools and alcohol 120%???