Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Random BSODs, 100% Utilization, and Driver Issues


08 Jun 2011   #1

Windows 7 Ultimate x64 Retail SP1
 
 
Random BSODs, 100% Utilization, and Driver Issues

Hello everyone. I've had a great experience with this site. The How-Tos and Tutorials have been more than helpful numerous times I've had to diagnose and fix system issues. However, this time, things seem to have got out of hand and are beyond my area of expertise. Instead of breaking something, I have decided it would be best to have more experienced users take a look. I have attached the appropriate information requested, along with the following (which includes memory timings, CPU-Z reports, etc..: Lots of system info via Imgur
Note I am NOT overclocked. Also included in the attachment is an excerpt from a string dump (produced with process explorer) of ntoskernel.exe that is riddled with errors.

Symptoms:
  • Seemingly Random BSODs (rare)
  • BSODs able to be reproduced: Format SD card using SDFormatter (near 100% chance)
  • Random intense CPU utilization and subsequent freezes and lock-ups

Notes:
  • Appears to be driver related.
  • The system never hangs and requires a restart, if I wait it will resolve. Lag spikes are typically 1-2s, a few seconds max.
  • Hamachi Driver reports an error but Hamachi seems to function fine.
  • If it means anything, I have two stuck core temp sensors (DTS) at 56C. I am working on diagnosing and repairing this in a separate thread elsewhere.
  • Process Explorer shows "TID 64, CPU 48.65, CSwitch Delta 458, Start Address 'ntoskrnl.exe!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x1e0'" as the thread which uses large amounts of resources.

Thanks in advance and I am more than willing to provide any more information if necessary.


My System SpecsSystem Spec
.

08 Jun 2011   #2

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

Welcome

Code:
 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_reports.zip\Windows_NT6_BSOD_jcgriff2\060311-18735-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02e1d000 PsLoadedModuleList = 0xfffff800`03062e90
Debug session time: Fri Jun  3 16:10:14.837 2011 (GMT-4)
System Uptime: 0 days 2:33:23.538
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 23, {110136, 0, 0, 0}
Probably caused by : fastfat.SYS ( fastfat!FatDecodeFileObject+6a )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
FAT_FILE_SYSTEM (23)
    If you see FatExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 0000000000110136
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
 
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x23
PROCESS_NAME:  SDFormatter.ex
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff88006aa8746 to fffff80002e9d640
STACK_TEXT:  
fffff880`06ce58c8 fffff880`06aa8746 : 00000000`00000023 00000000`00110136 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`06ce58d0 fffff880`06a97216 : fffff800`0300fe80 00000000`00000000 fffff800`03024c30 00000000`00000000 : fastfat!FatDecodeFileObject+0x6a
fffff880`06ce5910 fffff880`06a9711d : fffffa80`0619a420 fffffa80`06de7700 00000000`00000000 fffffa80`0390e200 : fastfat!FatCommonCleanup+0x92
fffff880`06ce59f0 fffff800`031a4f0f : 00000000`00000001 fffffa80`06de7700 fffffa80`06de7700 fffffa80`0390e2c0 : fastfat!FatFsdCleanup+0x59
fffff880`06ce5a30 fffff800`031946b4 : 00000000`00000000 fffffa80`03beb850 00000000`00000000 fffff800`02ea751c : nt!IopCloseFile+0x11f
fffff880`06ce5ac0 fffff800`03194471 : fffffa80`03beb850 fffffa80`00000001 fffff8a0`0310b450 00000000`00000000 : nt!ObpDecrementHandleCount+0xb4
fffff880`06ce5b40 fffff800`03194a34 : 00000000`00000118 fffffa80`03beb850 fffff8a0`0310b450 00000000`00000118 : nt!ObpCloseHandleTableEntry+0xb1
fffff880`06ce5bd0 fffff800`02e9c8d3 : fffffa80`03ba0060 fffff880`06ce5ca0 00000000`7efdb000 00000000`0018ec94 : nt!ObpCloseHandle+0x94
fffff880`06ce5c20 00000000`77b7140a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008e318 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b7140a
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
fastfat!FatDecodeFileObject+6a
fffff880`06aa8746 cc              int     3
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  fastfat!FatDecodeFileObject+6a
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: fastfat
IMAGE_NAME:  fastfat.SYS
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc1f0
FAILURE_BUCKET_ID:  X64_0x23_fastfat!FatDecodeFileObject+6a
BUCKET_ID:  X64_0x23_fastfat!FatDecodeFileObject+6a
Followup: MachineOwner
---------




A memory test is called for here.
http://www.geekstogo.com/forum/topic...ing-memtest86/
If you pass this test, it is probably a driver, fastfact.sys.
Right now I think memory is the most likely candidate.
My System SpecsSystem Spec
08 Jun 2011   #3

Windows 7 Ultimate x64 Retail SP1
 
 

A few questions.
I ran a MemTest much earlier in the year overnight and everything checked out. How long do you recommend I run it for this time? Any specific program options or should defaults be fine? Should I test a single module at a time or both? Would it be best to modify any BIOS settings such as loading Optimized Defaults or Fail Safe Defaults prior to the testing or is my current setup fine?
My System SpecsSystem Spec
.


08 Jun 2011   #4

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

Run it for at least 8 passes.
If fails take a good stick and test each slot for 8 passes
If passes, take a good stick and test each slot for 4 passes
Thats all you need to do.
My System SpecsSystem Spec
10 Jun 2011   #5

Windows 7 Ultimate x64 Retail SP1
 
 

While I'm sure it isn't 100% guaranteed, it looks like my memory is fine. 12 Passes Dual Channel Interleaved. 9 Pass single module #1. 5 Pass Single Module #2 (both were tested in first slot). Will provide screen shots but I don't think it matters all that much since it's passed. Let it run for a while since I had loads of other tasks to tend to today, anyway.
My System SpecsSystem Spec
10 Jun 2011   #6

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

If your RAM check out ok and you are sure that you did the test correctly:
Update the driver that was mentioned. If you still have problems, I feel that the BSOD is still memory related.
YOu have high usage:
Run a full anti virus scan
Download and run malwarebytes. Make a full scan and be sure that it is upadated.
When you have the high usage, bring up task manager (process) and see what is using the resources.
My System SpecsSystem Spec
10 Jun 2011   #7

Windows 7 Ultimate x64 Retail SP1
 
 

In response to the above I should be virus & malware free as I have Microsoft Security Essentials and perform regular scans. Before posting here I ran both Kaspersky AV 10 Rescue Disk (updated), MB Anti-Malware, Super Antispyware, and BitDefender Rescue Disk (updated) just to be sure.

I have brought up Process Explorer and as I stated in the original post, it is PID 4 System: "TID 64, CPU 48.65, CSwitch Delta 458, Start Address 'ntoskrnl.exe!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x1e0'" as the thread which uses large amounts of resources. Image attached.

As for the fastfat.sys driver, which site(s) do you recommend me to find the most current stable version for Windows 7 Ultimate x64 SP1? A quick search for it results in multitudes of sites with versions for multiple OS, some riddled with advertising and asking for registration, etc.

Thanks for your assistance, this issue has been frustrating me for quite some time and at least it appears we're making headway.

Memtest86+ v4.20 Results (Imgur)
My System SpecsSystem Spec
16 Jun 2011   #8

Windows 7 Ultimate x64 Retail SP1
 
 

Would the 32 bit version fastfat.sys work with a 64 bit computer? I have a 32 Bit Windows 7 Enterprise running SP1 I could copy from but not another SP1 64 bit. The download sites online don't seem to list versions and someone suggested running Reimage Windows Repair but it looked sketchy.

Any word on the process explorer report?
My System SpecsSystem Spec
16 Jun 2011   #9

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

[QUOTE=iXneonXi;1439432]In response to the above I should be virus & malware free as I have Microsoft Security Essentials and perform regular scans. Before posting here I ran both Kaspersky AV 10 Rescue Disk (updated), MB Anti-Malware, Super Antispyware, and BitDefender Rescue Disk (updated) just to be sure.

I have brought up Process Explorer and as I stated in the original post, it is PID 4 System: "TID 64, CPU 48.65, CSwitch Delta 458, Start Address 'ntoskrnl.exe!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x1e0'" as the thread which uses large amounts of resources. Image attached.

As for the fastfat.sys driver, which site(s) do you recommend me to find the most current stable version for Windows 7 Ultimate x64 SP1? A quick search for it results in multitudes of sites with versions for multiple OS, some riddled with advertising and asking for registration, etc.

Thanks for your assistance, this issue has been frustrating me for quite some time and at least it appears we're making headway.

Memtest86+ v4.20 Results (Imgur)[/QUOT

Lets start with the easy way first.
run 3 times if errors are found and are not repaired.
SFC /SCANNOW Command - System File Checker
Dont know of a site to get fastfat. Its a MS driver. Since the driver is part of the OS there may be other ways to get it. Try the above first.
My System SpecsSystem Spec
16 Jun 2011   #10

Windows 7 Ultimate x64 Retail SP1
 
 

Results:
Code:
C:\Users\Neon>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Users\Neon>
My System SpecsSystem Spec
Reply

 Random BSODs, 100% Utilization, and Driver Issues




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:06 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33