Windows 7: BSOD Error 0xF4 CRITICAL_OBJECT_TERMINATION 1 hour after cold boot

Sidio47 · 17 Jan 2012

Hello, and thanks in advance. I am working remotely with a computer owned by a family member of mine.

The computer is running:
- Windows 7 Professional 64-bit
- System was built by me in the past
- This version of windows comes free via the MSDN where I am a student (so full retail I think)
- The system was built in May, 2011
- The OS has been maintained since then on its SSD

Seemingly, almost like clockwork, the computer is slowly freezing up until a BSOD 0xF4 appears for 100 seconds. The computer attempts to reboot and ends up on a black screen with a blinking cursor when it should be booting Windows. If a cold startup (hold power button, turn off, wait 10 sec, turn on) is done, windows boots up and it will function fine for right about one hour.

From there, I'll let the ZIP file do the talking for me.

Much appreciated for any time and effort you all can give.

writhziden · 17 Jan 2012

Code:


Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Sidio47\Windows_NT6_BSOD_jcgriff2\011712-23665-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c1a000 PsLoadedModuleList = 0xfffff800`02e5f670
Debug session time: Tue Jan 17 15:33:41.818 2012 (UTC - 7:00)
System Uptime: 0 days 1:04:30.551
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa800e5fa910, fffffa800e5fabf0, fffff80002f9a8b0}

Probably caused by : wininit.exe

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa800e5fa910, Terminating object
Arg3: fffffa800e5fabf0, Process image file name
Arg4: fffff80002f9a8b0, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa800e5fa910

IMAGE_NAME:  wininit.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: wininit

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  wininit.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.

BUGCHECK_STR:  0xF4_IOERR

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`023d6b08 fffff800`030215e2 : 00000000`000000f4 00000000`00000003 fffffa80`0e5fa910 fffffa80`0e5fabf0 : nt!KeBugCheckEx
fffff880`023d6b10 fffff800`02fce99b : ffffffff`ffffffff fffffa80`0eab5b60 fffffa80`0e5fa910 fffffa80`0e5fa910 : nt!PspCatchCriticalBreak+0x92
fffff880`023d6b50 fffff800`02f4e448 : ffffffff`ffffffff 00000000`00000001 fffffa80`0e5fa910 0000007f`00000008 : nt! ?? ::NNGAKEGL::`string'+0x176d6
fffff880`023d6ba0 fffff800`02c95ed3 : fffffa80`0e5fa910 00000000`c0000006 fffffa80`0eab5b60 00000000`00000026 : nt!NtTerminateProcess+0xf4
fffff880`023d6c20 00000000`770215da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02aeff48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770215da


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_IOERR_IMAGE_wininit.exe

BUCKET_ID:  X64_0xF4_IOERR_IMAGE_wininit.exe

Followup: MachineOwner
---------

If you are overclocking anything, please stop.
A windows system process was terminated unexpectedly. Do the following steps.

Update all drivers that you are able to. If you need help finding a driver, let us know.

You may use the following sites as references for finding drivers. We recommend finding the manufacturer of the driver and downloading drivers directly from the manufacturer or software developer. If you have trouble finding a driver or driver manufacturer, let us know and we will do our best to assist you. If you need help, please provide the device name, manufacturer, and the driver .sys file that you are looking for.
Driver Reference is a good site to find the driver .sys files, their descriptions, and the site most likely to contain an update.

Driver Search Methods provides driver manufacturers and links to their homepages.

There are a few methods for updating drivers.
Installing and updating drivers in 7

Driver Install - Add Hardware Wizard

Driver Install - Device Manager

To fully re-install a driver, use the following steps.
Click Start Menu

Right Click My Computer/Computer

Click Manage

Click Device Manager from the list on the left

Find the device you are trying to uninstall by expanding the appropriate set of devices

Right click the device

Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)

Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK

Restart your computer

Install the latest driver for the device once Windows starts.

Alternatively:
Login as an adminstrative user.

Click Start Menu

Click Control Panel

Click Hardware and Sound

Click Device Manager (the last link under Devices and Printers)

Find the device you are trying to uninstall by expanding the appropriate set of devices

Right click the device

Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)

Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK

Restart your computer

Install the latest driver for the device once Windows starts.

Run Windows Update and install all updates.

Check for viruses.
Download and install the free version of Malwarebytes : Free anti-malware, anti-virus and spyware removal download (do not start the trial) and make sure it is updated. Do not run a scan yet.
Download VIPRE Rescue - VIPRE Computer Recovery Solution from Sunbelt Software but do not unzip it yet
Download the Fakerean removal tool but do not run it yet.
Start your computer in Safe Mode
Unzip VIPRE Rescue and let it run.
Run a full scan with Malwarebytes.
Run the fakerean removal tool.

Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log

Run SFC /SCANNOW Command - System File Checker up to three times to fix all errors. Post back if it continues to show errors after the third run or if the first run comes back with no integrity violations.

Thanks to Dave76 for help understanding possible causes.

Sidio47 · 18 Jan 2012

writhziden, thanks for the reply. I will post when I have the results.

writhziden · 08 Feb 2012

Have you had any more crashes? Did you follow all the steps?

Sidio47 · 08 Feb 2012

writhziden,

Many thanks for the followup! As I mentioned previously, I've been working with the machine remotely. I ran into difficulties continuing remotely, so the computer owner and I have agreed to postpone the diagnosis until later in February. They have another machine so it hasn't been critical. Nevertheless, I will get around to it :-) and I will be back with the reports!

Thanks again!

writhziden · 09 Feb 2012

You're welcome. Sounds like a good plan. Thanks for the update.

Sidio47 · 11 Feb 2012

I have been able to run the tests on the computer in question.
Keeping in mind that there is usually a time window of 1 hour before the computer locks up some of the tests were not able to finish. I did observe some interesting behavior which I'll explain below:

1.) All the drivers I could find were updated.
2.) Microsoft update was run.
3.) Malwarebytes, VIPRE Rescue and Fakerean were downloaded and Malewarebytes installed.
4.) In safe mode VIPRE Rescue was run. There are two drives: one 64 GB SSD with Windows 7 (C:\ Drive) and one RAID 5 array with four disks (E:\ Drive). VIPRE was able to get to the point that it was scanning the E:\ drive. It continued for at least 2 hours (longer than I've seen the computer go w/out a crash). Windows came up with an error though saying "The instruction at 0x000000007777FD94 referenced memory at 0x000000000009DFSC. The required data was not placed into memory because of an I/O error status of 0xc000000e. Click okay to terminate the program." In the command prompt, the scan had failed. I went to go to the start menu in safe mode and as soon as the start menu popped up it locked and gave a similar message for explorer.exe. After that, explorer closed and the system was non-responsive.
5.) Did the full scan of Malewarebytes. It found one file, a dynamic link library used by winamp to convert files to shn format. Just to be safe, I had the system successfully quarantine and delete the dll. The computer owner said that they could restore the dll if need be later.
6.) Ran Fakerean removal tool once.
7.) Ran disk check on the boot SSD (C:\) with no errors (finished in < 1 hour)
8.) Ran disk check on the RAID 5 array. It continued to the point that it said everything was clear and then it froze. I did a cold boot and the system acted as if the disk check was still scheduled (and, of course, it did not show up in the event viewer).
9.) Ran sfc /scannow once and received "Window Resource Protection did not find any integrity violations."

So, I have some thoughts but most evidence seem circumstantial. For now, I'll keep my mouth shut and see what you all think the best course of action is from here.

Also, I have some hardware components on hand to swap out pieces of the fritzy computer if need be. I'm getting ready to build a similar system though not all components are the same (mobo is different and I don't have a spare SSD but I do have spare spin up drives).

writhziden · 11 Feb 2012

It sounds like the RAID array is corrupted or a drive within the array is failing. I would recommend backing up the data or even better would be creating a system image, and resetting the array. Then restore the system image or do a clean install of Windows. We see a lot of RAID related problems on these forums. In fact, I have a site bookmarked for a reason regarding these: Why RAID is (usually) a Terrible Idea - Puget Custom Computers

Sidio47 · 12 Feb 2012

I have a system image that I created when I built the system. I put in the system recovery disk (that I also made) and rebooted. All extra cables are removed (except keyboard /mouse / Ethernet / monitor / power). When I reboot, I change the boot order to the DVD drive and it just sits with a black screen and a white blinking cursor. The drive works fine in windows. I then tried with an external USB DVD drive and the same thing happened. I take the same recovery disk and boot off it with my laptop and it shows up fine.

Sidio47 · 12 Feb 2012

Another line of thought:
Could I physically disconnect the RAID array (SATA cables and power); make sure bios is then set properly (to have no RAID devices); boot up the system on the SSD and wait the typical hour to see if the system indeed freezes up? If it did have something specifically to do with the RAID would this not take it out of the equation so to speak? Would I have any problems hooking the RAID up later and still having access to the data?

Could I not do the same thing with the SSD? Take it completely out of the computer; hook up just a regular spin up drive; restore the image to this new drive and see if the system freezes?

Windows 7: BSOD Error 0xF4 CRITICAL_OBJECT_TERMINATION 1 hour after cold boot

BSOD Error 0xF4 CRITICAL_OBJECT_TERMINATION 1 hour after cold boot problems?