Intermittent 0x000007 On Boot

btimsah · 12 Jun 2013

This problem has seriously been driving me batty. Basically if I'm in Windows, everything is 100% fine. But if I have to reboot, I run into an intermittent x7 bluescreen stop error. The weird thing is, if I just keep "starting Windows normally", it usually then loads fine.

I've updated the firmware on my SSD drive.
I've ran memtest86 with no problems.

After months of off and on troubleshooting I ended up formatting completely and noticed something - if I uninstall .net framework 4 the blue screen seems to stop. I've rebooted like 5 times with no problems. But the problem is, I still need that for ATI's catalyst control center to load and probably other things.

So I suppose my question is - have any of you had a similar issue with .net framework and is there a way I could install it but not have it run on start up? Thanks for any help.

CPU - AMD FX-8350
RAM - DDR3 1866 (RUNS AT 1333)
SSD - 512GB CRUCIAL M4
MOBO - GIGABYTE 970A-UD3
GRAPHICS - RADEON 7850
LG WRITER
WINDOWS 7 64-BIT HOME PREMIUM
CORSAIR GAMING KEYBOARD
CORSAIR GAMING MOUSE

EDIT - added the dump file stuff in zip.

koolkat77 · 12 Jun 2013

Hi and welcome to seven forums btimsah.

Code:

AppleCharger.sys            Wed Nov  2 08:46:00 2011

GIGABYTE On/Off Charge driver. See here for details - GIGABYTE ON/OFF Charge May cause BSOD on Win7/8 systems

Please uninstall all GigaByte software with Revo Uninstaller.

Tip

Revo Uninstaller
Download and install Revo Uninstaller free from here: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems
Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries).

Check for updates on these drivers:

EtronXHCI.sys Tue Jul 26 03:30:56 2011 (4E2DE090)
Etron USB 3.0 Extensible Host Controller Driver Driver Reference Table - EtronXHCI.sys

EtronHub3.sys Tue Jul 26 03:30:59 2011 (4E2DE093)
Etron USB 3.0 Extensible Hub Driver Driver Reference Table - EtronHub3.sys

Code:

Loading User Symbols
*** WARNING: Unable to verify timestamp for EtronXHCI.sys
*** ERROR: Module load completed but symbols could not be loaded for EtronXHCI.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff880041f0db1, fffff88003162518, fffff88003161d70}

Probably caused by : EtronXHCI.sys ( EtronXHCI+9db1 )

Followup: MachineOwner
---------

6: kd> !analyze -v; !sysinfo cpuspeed; !sysinfo SMBIOS; lmtsmn; q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff880041f0db1, The address that the exception occurred at
Arg3: fffff88003162518, Exception Record Address
Arg4: fffff88003161d70, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
EtronXHCI+9db1
fffff880`041f0db1 8b8174400000    mov     eax,dword ptr [rcx+4074h]

EXCEPTION_RECORD:  fffff88003162518 -- (.exr 0xfffff88003162518)
.exr 0xfffff88003162518
ExceptionAddress: fffff880041f0db1 (EtronXHCI+0x0000000000009db1)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000004074
Attempt to read from address 0000000000004074

CONTEXT:  fffff88003161d70 -- (.cxr 0xfffff88003161d70)
.cxr 0xfffff88003161d70
rax=0000000000000001 rbx=fffffa800851e000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000002 rdi=fffffa8008083f00
rip=fffff880041f0db1 rsp=fffff88003162750 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000000002 r10=0000000000000002
r11=0000000000000000 r12=fffffa8008083a60 r13=0000000000000000
r14=fffff8a0001528e0 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
EtronXHCI+0x9db1:
fffff880`041f0db1 8b8174400000    mov     eax,dword ptr [rcx+4074h] ds:002b:00000000`00004074=????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000004074

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ebf0e0
GetUlongFromAddress: unable to read from fffff80002ebf198
 0000000000004074 Nonpaged pool

FOLLOWUP_IP: 
EtronXHCI+9db1
fffff880`041f0db1 8b8174400000    mov     eax,dword ptr [rcx+4074h]

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffffa800851e000 to fffff880041f0db1

STACK_TEXT:  
fffff880`03162750 fffffa80`0851e000 : 00000000`00000002 fffffa80`08083a60 fffffa80`08083bb0 fffffa80`08083bb0 : EtronXHCI+0x9db1
fffff880`03162758 00000000`00000002 : fffffa80`08083a60 fffffa80`08083bb0 fffffa80`08083bb0 fffffa80`08083e78 : 0xfffffa80`0851e000
fffff880`03162760 fffffa80`08083a60 : fffffa80`08083bb0 fffffa80`08083bb0 fffffa80`08083e78 fffffa80`08083a60 : 0x2
fffff880`03162768 fffffa80`08083bb0 : fffffa80`08083bb0 fffffa80`08083e78 fffffa80`08083a60 fffff880`041e8db6 : 0xfffffa80`08083a60
fffff880`03162770 fffffa80`08083bb0 : fffffa80`08083e78 fffffa80`08083a60 fffff880`041e8db6 fffffa80`00001b6f : 0xfffffa80`08083bb0
fffff880`03162778 fffffa80`08083e78 : fffffa80`08083a60 fffff880`041e8db6 fffffa80`00001b6f 00000000`00007023 : 0xfffffa80`08083bb0
fffff880`03162780 fffffa80`08083a60 : fffff880`041e8db6 fffffa80`00001b6f 00000000`00007023 00000000`0c033001 : 0xfffffa80`08083e78
fffff880`03162788 fffff880`041e8db6 : fffffa80`00001b6f 00000000`00007023 00000000`0c033001 00000000`00000000 : 0xfffffa80`08083a60
fffff880`03162790 fffffa80`00001b6f : 00000000`00007023 00000000`0c033001 00000000`00000000 fffff880`02ef9180 : EtronXHCI+0x1db6
fffff880`03162798 00000000`00007023 : 00000000`0c033001 00000000`00000000 fffff880`02ef9180 00000000`00000000 : 0xfffffa80`00001b6f
fffff880`031627a0 00000000`0c033001 : 00000000`00000000 fffff880`02ef9180 00000000`00000000 00000000`00000000 : 0x7023
fffff880`031627a8 00000000`00000000 : fffff880`02ef9180 00000000`00000000 00000000`00000000 00000000`00000000 : 0xc033001


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  EtronXHCI+9db1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: EtronXHCI

IMAGE_NAME:  EtronXHCI.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4e2de090

STACK_COMMAND:  .cxr 0xfffff88003161d70 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_EtronXHCI+9db1

BUCKET_ID:  X64_0x7E_EtronXHCI+9db1

Followup: MachineOwner
---------

Microsoft Security Essentials and Malwarebytes are recommended from a strict BSOD perspective. They do not cause blue screens on the system as other AV products do.

Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free

Information

Do not start the free trial of MalwareBytes, unselect that option when prompted.
Update and make full scans with both separately.

Hard Drive/Storage

Post disk summary using CrystalDiskInfo software: CrystalDiskInfo Standard Edition

For how to upload a screenshot or file, read here

For errors on your Hard drive(s): How to Run Disk Check in Windows 7

System Temperature

Ensure that there are no heat issues, For monitoring heat of the system use Speccy or HWMonitor

Virus check

Scan your system with the following:

Kaspersky TDSSKiller - How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)

ESET online scanner - One-time virus scanner free with ESET online scanner

Run the scanners listed here: How to Scan Suspicious Files using Online Scanners

Please run these tests and report back the results

1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure
6. Install all updates including Service Pack 1 - Learn how to install Windows 7 Service Pack 1 (SP1)

BSOD BUGCHECK SUMMARY

Code:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Thu Jun 13 00:49:25.473 2013 (UTC + 6:00)
System Uptime: 0 days 0:00:09.127
BugCheck 1000007E, {ffffffffc0000005, fffff880041f0db1, fffff88003162518, fffff88003161d70}
*** WARNING: Unable to verify timestamp for EtronXHCI.sys
*** ERROR: Module load completed but symbols could not be loaded for EtronXHCI.sys
Probably caused by : EtronXHCI.sys ( EtronXHCI+9db1 )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Thu Jun 13 00:05:49.254 2013 (UTC + 6:00)
System Uptime: 0 days 0:00:08.909
BugCheck 1000007E, {ffffffffc0000005, fffff880043e2db1, fffff88003169518, fffff88003168d70}
*** WARNING: Unable to verify timestamp for EtronXHCI.sys
*** ERROR: Module load completed but symbols could not be loaded for EtronXHCI.sys
Probably caused by : EtronXHCI.sys ( EtronXHCI+9db1 )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Wed Jun 12 10:35:10.253 2013 (UTC + 6:00)
System Uptime: 0 days 0:00:09.923
BugCheck 1000007E, {ffffffffc0000005, fffff880053f3db1, fffff8800335b518, fffff8800335ad70}
*** WARNING: Unable to verify timestamp for EtronXHCI.sys
*** ERROR: Module load completed but symbols could not be loaded for EtronXHCI.sys
Probably caused by : EtronXHCI.sys ( EtronXHCI+9db1 )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

btimsah · 12 Jun 2013

Thanks for the info.

I was able to uninstall the power on/off charge crap.

Installed the latest 3.0 hub drivers directly from Gigabyte's website.

Completely uninstalled both .net framework and ati catalyst software and drivers.

Then re-installed ATI Catalyst, and .net framework.

I was able to re-boot 4 times in a row without a blue screen.

I did notice my USB 3.0 external drive, when connected to comp would slow down the boot..

And sometimes my keyboard would not work in certain USB ports..

I wonder if that is evidence of anything?

koolkat77 · 13 Jun 2013

Thanks for the update.

Re Usb:
This tutorial USB Selective Suspend - Turn On or Off may help you:

To Disable Selective Suspend:

1. open the control panel
2. go to power options (you may have to set view to small icons)
3. click change plan settings
4. in the window that opens:
5. click change plan settings
6. click change advanced power settings, expand usb and ensure usb selective suspend is disabled.

Also perform steps mentioned here: USB Driver - General Fix for Problems

Observe for further bsods and let us know.

btimsah · 13 Jun 2013

Hey KoolKat, thanks again.

I was able to change the USB suspend settings.

Still no BSOD.

If it comes back, I'll troubleshoot it from that point.

koolkat77 · 13 Jun 2013

Thanks for the update! :)