A brand new pc with Intel Ivy Bridge processor crashes

1Delu · 06 Jun 2012

I bought a new Acer Aspire V3 laptop last week, with the new intel processor. Using it only for 3 days, it started to crash (blue screen). Can you help me please?
I have attached the BSOD dump and the system health report.

Here is the spec of my pc:
x64 bit - windows OS - came pre-installed on system (OEM )
- What is the age of system (hardware)? just a week
- What is the age of OS installation (have you re-installed the OS?) NO, it come pre-installed, and I didn't reinstall it.

Dave76 · 07 Jun 2012

What Anti-Virus are you using?
I see Avast and Comodo anti-virus drivers, this will cause conflicts.
Delete one of them and run the 'Un-installer' from their website. I recommend keeping Avast.
If you are using the Comodo firewall, un-install it and enable the Windows firewall, for testing purposes.

What programs have you installed?
Do you have any issues when the external HDD is not connected?

The crash

Code:

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.
Usual causes:  Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus,  Device driver, NTFS corruption, BIOS
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032cb100
GetUlongFromAddress: unable to read from fffff800032cb1c0
 00000000692cfe9c Nonpaged pool
PROCESS_NAME:  MediaMonkeyVHe
FAILURE_BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+45ea5
.

Driver issues:

Code:

mcdbus.sys   Tue Feb 24 18:34:07 2009 - out of date - MagicISO SCSI Host Controller driver

Un-install MagicISO and install the latest version

Event log system:
Several of these.

Code:

Event[107]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2012-06-07T06:13:41.072
  Event ID: 89
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DesalegnMega
  Description: 
ACPI thermal zone ACPI\ThermalZone\THRM has been enumerated.             
_PSV = 371K             
_TC1 = 2             
_TC2 = 10             
_TSP = 10000ms             
_AC0 = 0K             
_AC1 = 0K             
_AC2 = 0K             
_AC3 = 0K             
_AC4 = 0K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 375K             
_HOT = 0K             
_PSL - see event data.

From event log Apps:

Code:

Event[12]:
  Log Name: Application
  Source: Microsoft-Windows-WMI
  Date: 2012-06-07T06:14:55.000
  Event ID: 10
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Have you been checking your temperatures?
Use Real Temp , to check the CPU temps when at idle, under load and/or testing.
Let us know the minimum and maximum temps you get.

Code:

Event[1619]:
  Log Name: System
  Source: cdrom
  Date: 2012-06-03T21:47:53.914
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
The driver detected a controller error on \Device\CdRom1.

Code:

Event[1697]:
  Log Name: System
  Source: Service Control Manager
  Date: 2012-06-03T21:45:09.899
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
The COMODO Internet Security Helper Service service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.


Event[391]:
  Log Name: Application
  Source: Microsoft-Windows-CAPI2
  Date: 2012-06-03T23:47:08.073
  Event ID: 513
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary COMODO Internet Security Eradication Driver.

System Error:
The system cannot find the file specified.

Event[395]:
  Log Name: Application
  Source: MsiInstaller
  Date: 2012-06-03T23:46:45.000
  Event ID: 1035
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: S-1-5-21-1104585097-1401026839-1668597795-1001
  User Name: DesalegnMega\Desalegn
  Computer: DesalegnMega
  Description: 
Windows Installer reconfigured the product. Product Name: COMODO Firewall. Product Version: 5.10.31649.2253. Product Language: 1033. Manufacturer: COMODO Security Solutions Inc.. Reconfiguration success or error status: 1602.

Un-install COMODO Internet Security.

Code:

Event[2032]:
  Log Name: System
  Source: Disk
  Date: 2012-06-03T14:01:42.108
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
The driver detected a controller error on \Device\Harddisk1\DR1.

This is your external HDD, disconnect and see if the errors stop.

Event log apps:

Code:

Event[59]:
  Log Name: Application
  Source: Windows Error Reporting
  Date: 2012-06-05T22:01:31.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
Fault bucket 2961017252, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: MiniLyrics.exe
P2: 7.4.0.10
P3: 4fa3681a
P4: ntdll.dll
P5: 6.1.7601.17725
P6: 4ec49b8f
P7: c0000008
P8: 000827b8
P9: 
P10: 

Attached files:
C:\Users\Desalegn\AppData\Local\Temp\WER7BA5.tmp.WERInternalMetadata.xml

These files may be available here:
C:\Users\Desalegn\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_MiniLyrics.exe_a1e4299ba9cbe054105046e9745d67b92848106a_18f5ff74

Analysis symbol: 
Rechecking for solution: 0
Report Id: 29b0b27f-af49-11e1-9d4e-e840f25ca750
Report Status: 0

Event[60]:
  Log Name: Application
  Source: Application Error
  Date: 2012-06-05T22:00:57.000
  Event ID: 1000
  Task: Application Crashing Events
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
Faulting application name: MiniLyrics.exe, version: 7.4.0.10, time stamp: 0x4fa3681a
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000008
Fault offset: 0x000827b8
Faulting process id: 0xdfc
Faulting application start time: 0x01cd4355dfb54753
Faulting application path: C:\Program Files (x86)\Minilyrics\MiniLyrics.exe
Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report Id: 29b0b27f-af49-11e1-9d4e-e840f25ca750

Un-install MiniLyrics, for testing purposes.

Code:

Event[116]:
  Log Name: Application
  Source: Windows Error Reporting
  Date: 2012-06-05T05:04:35.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DesalegnMega
  Description: 
Fault bucket 2327476691, type 5
Event Name: RADAR_PRE_LEAK_WOW64
Response: Not available
Cab Id: 0

Problem signature:
P1: WebCam.exe
P2: 1.5.0.2108
P3: 6.1.7601.2.1.0
P4: 
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
C:\Users\Desalegn\AppData\Local\Temp\RDRFFB2.tmp\empty.txt

These files may be available here:

Analysis symbol: 
Rechecking for solution: 0
Report Id: 2517eb80-aebb-11e1-aa9b-e840f25ca750
Report Status: 0

Go to the Acer site and update all of the drivers, there are a lot of device and program errors.

1Delu · 07 Jun 2012

Thank you for the fast analysis and reply. I am going to check each of the recommendations and report back. I think your recommendation about the external HDD is quite plausible. I am removing some of the old drivers (magicIso) too .

OldMX · 07 Jun 2012

The laptop is one week old, restore to factory defaults, if problem persist, return it and exchange for another working one.

1Delu · 07 Jun 2012

@oldmx: Yah, I was thinking to restore it. But, reinstalling a dozen of applications is a kind of boring task. thank you for the suggestion any way.

Dave76 · 07 Jun 2012

OldMX said:

The laptop is one week old, restore to factory defaults, if problem persist, return it and exchange for another working one.

That is always an option and should be done 'if problem persists'.

If the crash is caused by additional hardware (external HDD) or an added/installed program then the new machine may have the same issues.

If this was my laptop I would explore those possibilities before starting the RMA process and subsequently being without my laptop for several days, only to have the issues re-occur.