Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: random bluescreens ntoskrnl.exe

26 Feb 2012   #11
writhziden

Windows 7 Home Premium 64 Bit
 
 

Antivirus software:
Code:
avgnt.exe	c:\program files (x86)\avira\antivir desktop\avgnt.exe	2480	8	200	1380	2/24/2012 5:31 AM	10.0.13.18	275.16 KB (281,768 bytes)	4/20/2011 10:24 AM
avguard.exe	c:\program files (x86)\avira\antivir desktop\avguard.exe	2040	8	200	1380	2/24/2012 5:30 AM	10.0.1.59	263.16 KB (269,480 bytes)	4/20/2011 10:24 AM
avshadow.exe	c:\program files (x86)\avira\antivir desktop\avshadow.exe	2124	8	200	1380	2/24/2012 5:30 AM	1.0.0.6	254.66 KB (260,776 bytes)	4/20/2011 10:24 AM
sched.exe	c:\program files (x86)\avira\antivir desktop\sched.exe	1772	8	200	1380	2/24/2012 5:30 AM	10.0.0.21	133.16 KB (136,360 bytes)	4/20/2011 10:24 AM
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\squat251\new minidump\022512-17565-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`03256000 PsLoadedModuleList = 0xfffff800`0349be90
Debug session time: Sat Feb 25 20:54:51.342 2012 (UTC - 7:00)
System Uptime: 0 days 2:18:52.997
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {411, fffff6fc500671f0, 82b0000112d15882, fffff68000032269}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+6061 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000000411, The subtype of the bugcheck.
Arg2: fffff6fc500671f0
Arg3: 82b0000112d15882
Arg4: fffff68000032269

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_411

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  2

TRAP_FRAME:  fffff88008b0c860 -- (.trap 0xfffff88008b0c860)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa80080a6060 rbx=0000000000000000 rcx=fffff8a00ce3e6a0
rdx=0000000000000003 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800034015f7 rsp=fffff88008b0c9f0 rbp=0000000000001000
 r8=0000000000000001  r9=fffff80003256000 r10=fffffa800519c3c8
r11=0000000000000003 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po cy
nt!ExAllocatePoolWithTag+0x517:
fffff800`034015f7 4c8b4908        mov     r9,qword ptr [rcx+8] ds:fffff8a0`0ce3e6a8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800032b32dd to fffff800032d6640

STACK_TEXT:  
fffff880`08b0c508 fffff800`032b32dd : 00000000`0000001a 00000000`00000411 fffff6fc`500671f0 82b00001`12d15882 : nt!KeBugCheckEx
fffff880`08b0c510 fffff800`03307a71 : 82b00001`12d15882 fffff6fc`500671f0 0000007f`fffffff8 fffff800`033022a0 : nt! ?? ::FNODOBFM::`string'+0x6061
fffff880`08b0c560 fffff800`032f425f : 00000000`00000000 00000000`00000000 00000000`00000000 fffff800`0345abc0 : nt!MiResolveTransitionFault+0x381
fffff880`08b0c5f0 fffff800`032e443b : fffff8a0`021d0b50 00000000`00000000 00000000`00000000 fffff800`03480340 : nt!MiDispatchFault+0x95f
fffff880`08b0c700 fffff800`032d476e : 00000000`00000000 fffff8a0`0ce3e6a8 fffffa80`08663300 fffffa80`0519c940 : nt!MmAccessFault+0xe1b
fffff880`08b0c860 fffff800`034015f7 : fffff8a0`0cdcd580 00000000`00000003 fffff8a0`00000000 fffff800`03401fbd : nt!KiPageFault+0x16e
fffff880`08b0c9f0 fffff800`035d058c : 00000000`00000003 00000000`00000001 fffff880`08b0cca0 fffff880`00000000 : nt!ExAllocatePoolWithTag+0x517
fffff880`08b0cae0 fffff800`0359b86b : 00000000`00000000 00000000`00000120 00000000`00000001 00000000`01544e01 : nt!SeQueryInformationToken+0x49c
fffff880`08b0cb70 fffff800`032d58d3 : fffffa80`080a6060 00000000`003321c0 00000000`00000000 fffffa80`08ecf2b0 : nt!NtCompareTokens+0x13b
fffff880`08b0cc20 00000000`76d81c0a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00cdeea8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76d81c0a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+6061
fffff800`032b32dd cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+6061

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

FAILURE_BUCKET_ID:  X64_0x1a_411_VRF_nt!_??_::FNODOBFM::_string_+6061

BUCKET_ID:  X64_0x1a_411_VRF_nt!_??_::FNODOBFM::_string_+6061

Followup: MachineOwner
---------
Caused by Verifier, as anticipated. Typically, when Verifier blames Windows processes, you either have corrupted Windows files or a hardware problem. This particular crash report points to memory.
  • Memtest86+ does not always find memory errors the first time it is run. Sometimes it needs to be run a few times for seven passes each to catch memory errors. Also, what memory do you have in the system? Can you download and install CPU-Z and upload screenshots of the CPU, Mainboard, Memory, and SPD tabs? In the SPD tab, upload an image of each slot.

    The screenshots can help determine if there is a conflict with your memory or an incompatibility.


  • Run SFC /SCANNOW Command - System File Checker up to three times to fix all errors. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations.


  • I also notice Avira installed on your system which is known to cause crashes on some systems. Please remove Avira through Start Menu -> Control Panel -> Uninstall a program and then run the Avira RegistryCleaner - Download to remove remnants. Replace with Microsoft Security Essentials - Free Antivirus for Windows to run with Windows firewall, at least to test to see if the system is then more stable.

    You may also check out the Good and Free system security combination.



My System SpecsSystem Spec
.
26 Feb 2012   #12
squat251

Windows Seven Ultimate x64
 
 

there we go, memory i know that slot 2 and 4 are supposed to increase the speed or something but yeah dunno why its still doing it, my bios settings are stock. as for avira, i think I'll leave it on, i have bad experience with MSE
My System SpecsSystem Spec
26 Feb 2012   #13
writhziden

Windows 7 Home Premium 64 Bit
 
 

It is your choice whether you want to keep Avira, but remember the warning that it can cause crashes on some systems. What kinds of problems did you have with MSE?

Please upload the Mainboard, Memory, and CPU tab screenshots, as well. It will help to see what your memory settings are.

Also, run Memtest86+ again tonight.

Post back your results from the system file check.

Thanks.
My System SpecsSystem Spec
.

26 Feb 2012   #14
squat251

Windows Seven Ultimate x64
 
 

after installing mse (same pc) i had constant freezing and stuttering, after removing it it all went away. the file system scan showed no errors. ill edit this post in a few for the pictures of the tabs (breakfast time)


apparently the only antivirus "guaranteed" not to cause errors is that one, it also forces updates and keeps track of things i dont necessarily want kept track of. on the whole, i dont approve of mse, I'm sure some people love it, i however do not. if it were so great it would be included in windows 7, but because it tracks us and we need to agree to separate terms, it is not. sorry for the mini rant, but you wanted the reasons i choose not to use mse, and those are the brunt of them.


I'll keep track of this thread from my laptop, and run memtest for 7 passes or what ever.


edit: thinking about it hell, i have nothing but time on my hands, especially since i cant use it for games now anyway ill run memtest till something happens, gotta be an error in like 12 passes right?
My System SpecsSystem Spec
26 Feb 2012   #15
squat251

Windows Seven Ultimate x64
 
 

okay, so 9 passes 0 errors. atleast as far as memtest is concerned my ram is perfect.

is there a similar test i can run for the hard drive? perhaps there is an error there?

should i just run a clean re-install?
My System SpecsSystem Spec
26 Feb 2012   #16
writhziden

Windows 7 Home Premium 64 Bit
 
 

Disk Check is the Windows method for checking the hard disk. You can also find manufacturer diagnostic tools. HD Diagnostic can be used to find the manufacturer and the appropriate diagnostic tools for your hard drive.

Memory settings all look good, by the way. Memtest86+ also does not always find errors. Sometimes if crashes are frequent enough, you can test the memory just by running Windows with one module at a time and see if the system is stable with each module and each slot. If you find a good module in a good slot, you can test the other slots with the good module to determine if you have a bad slot. Remember to use safe ESD steps. Avoid Static Damage to Your PC | PCWorld
My System SpecsSystem Spec
27 Feb 2012   #17
squat251

Windows Seven Ultimate x64
 
 

disc check returned no errors
My System SpecsSystem Spec
27 Feb 2012   #18
writhziden

Windows 7 Home Premium 64 Bit
 
 

Quote   Quote: Originally Posted by squat251 View Post
disc check returned no errors
Alright, that is good news.

Are you comfortable testing your memory modules as I laid out in my previous post?
My System SpecsSystem Spec
27 Feb 2012   #19
squat251

Windows Seven Ultimate x64
 
 

sure ill do that a little later tonight. thats going to be 3 days of testing atleast.
My System SpecsSystem Spec
19 Mar 2012   #20
writhziden

Windows 7 Home Premium 64 Bit
 
 

Any news on the module testing?
My System SpecsSystem Spec
Reply

 random bluescreens ntoskrnl.exe




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Random Bluescreens, ntoskrnl.exe (0x1000007e,0x1000003b)
Hey there, I appear to randomly get some Bluescreens lately, I really dont know why this is happening. My System: AMD Fx 8350 8x 4.0GHz GTX 660 Ti OC Samsung 830er Series 250gb a Seagate Hard Drive with 500gb External 3 TB Western Digital Essentials
BSOD Help and Support
Random Bluescreens - ntoskrnl.exe (Computer is really loud while BSOD)
Hey guys, I randomly get BSOD while playing a game or just doing nothing but listening to music and watching youtube videos. My drivers are all up to date. I uploaded a file which i made with SF Diagnostic Tool. My computer specs are written on my profile too. It's getting annoying and I don't...
BSOD Help and Support
random freezing and random bluescreens with various error codes
I've contacted tech support at cyberpowerpc where I bought my computer, but after reading their tech support forums my faith in getting a quick response is kind of low, so I came here as many bluescreen search results lead here and I figure it's probably a good place to get more help. I've been...
BSOD Help and Support
ntoskrnl bluescreens
Windows 7 . . . - x86 x64 patched to date - the original installed OS on the system? - an OEM or full retail version? - OEM = came pre-installed on system as Vista upgrade - What is the age of system (hardware)? : 2 years - What is the age of OS installation ~ 1 year
BSOD Help and Support
BlueScreens caused by ntoskrnl.exe driver on Windows 7 Ultimate 64-bit
Hi, just registered on this site which seems awesome! I'm having difficulties with a couple of bluescreens lately, and 3 of them (got 4 total) have been said to be caused by the ntoskrnl.exe driver. And I just recently reinstalled my whole computer. Had Vista before. Motherboard: ASUS P5N-E...
BSOD Help and Support
Random Bluescreens
Hello, I am new to this forum but in a desperate cry for help I signed up hoping someone could figure this out. I recently built a new computer with brand new parts and had a fresh clean install of windows 7 . And every so often it will just randomly bluescreen for no reason... here is the even log...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:10.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App