BSOD too quick to see error code. Jcgriff files etc attached


  1. Posts : 1
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #1

    BSOD too quick to see error code. Jcgriff files etc attached


    Windows 7
    x64
    Not the original installed OS on the system - OEM reinstall disk from Dell
    I reinstalled this a week ago.

    age of system (hardware): 12 months, I bought refurbished 2 mo. ago
    Dell Studio 1569 notebook
    Also - new Intel SS Hard Drive 240 gigs. I installed this after old HD became unusable following consecutive BSOD. (Maybe I jumped the gun on this.)
    Ran memory test for several hours, both the native Win 7 test and mtest - no errors
    system under warranty
    almost no programs installed except dell and intel diagnostic programs. Office and Word too.
    Any help/advice would be hugely appreciated!!!
      My Computer


  2. Posts : 2,393
    Microsoft Windows 7 Ultimate: x64 (SP1)
       #2

    Hello Russell,

    BSOD Analyse

    Your dumps are pointed to a lot of processes of Windows. This is likely due to the fact that the Debugging Tool cannot find a driver to blame in the dump. Though, we can check if Windows files are corrupted or not. In fact, we can do it by a single command.
    It's the most common used one to check if the Windows files are corrupted. If it'll find errors, it'll restore them.

       Tip
    If you're having a custom customization layer on your Aero, it's likely to get restored to default.


    Press Start | search 'cmd' | Right-click it
    | open as Admin | type SFC /SCANNOW

    SFC /SCANNOW Command - System File Checker

    Event log

    Looks OK, though there is a lot of unexpected shut-downs obviously.

    Update these drivers

    Code:
    nfrd960      nfrd960                nfrd960                Kernel        Manual     Stopped    OK         FALSE       FALSE        0          36,864     0      6/6/2006 2:11:48 PM    C:\Windows\system32\drivers\nfrd960.sys          4,096
    IBM Raid Controller. Download

    Driver Reference Table - nfrd960.sys

    Memtest86+

    Looking at your bugcheck it's likely that a memory corruption event were there. Do a scan with Memtest86+. Memtest is a scanner that'll check your sticks for errors. To ensure that we'll know if it's the slots on the motherboard that's broken, or the sticks itself - we have a little procedure we'll recommend. Remove 1 stick, scan the other with Memtest in the current slot. After 7 passes, move the stick to another slot and scan, and so on and so forth until you've scanned all the sticks, and all the slots, one by one.

    Memtest86+ - Advanced Memory Diagnostic Tool

    BSODs Summary
    Code:
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 0000000000000003, Process
    Arg2: fffffa80087bbb30, Terminating object
    Arg3: fffffa80087bbe10, Process image file name
    Arg4: fffff80002dc7510, Explanatory message (ascii)
    -----------------------------------------------------------------------------------
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 0000000000000003, Process
    Arg2: fffffa80086f8b30, Terminating object
    Arg3: fffffa80086f8e10, Process image file name
    Arg4: fffff80002de5510, Explanatory message (ascii)
    I'm very unsure on these dumps, but try my suggestions either way.

    Best Regards,
    Frederik.
      My Computer


  3. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #3

    Russell,
    This isn't my real area of expertise
    I notice that you said that ran memtest86+ which is good.

    If you did not run at least 6 passes, then please repeat.

    I'm also getting ready to go to a local pub to watch the fussball game between Portugal and Spain.

    End result is there will be several hours before I can do you justice.

    I haven't even looked but frequently with asus boards one needs to update the bios and the chipset driver. You might want to visit the ASUS site and check for the latest bios and drivers for your board. Don't ever count on a refurbisher/repair shop having updated everything.

    I'll catch you after the game. My prediction Spain 3 to 1.
      My Computer


  4. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #4

    Well, my prediction was off as to the score but as to the winner.

    I'm not a dmp analyzer. I'll try to get one here to take a look at your dumps. They eill be ablt to cut right to the heart of the problem. I'm rather old fashioned when it comes to alayzing these problems. I've got a good track record, but no where near as speedy.

    Iff you will, as this says, cut and paste into PowerShell, a .CSV file will be generated which I then view with Excel.

    Script:
    # ************************************************************
    # List Scheduled Tasks as a .CSV file
    # List Startup Programs as a .CSV file
    # List Installed Programs as a .CSV file
    # Places the .CSV file in a ZIP file
    # Places WhatIsRunning.ZIP on your DESKTOP
    # **********************INSTRUCTIONS**************************
    # STEP 1 *****************************************************
    # RUN PowerShell as administrator
    # START ORB | type POWERSHELL | CTRL+SHIFT+ENTER key combo | ALT+Y keycombo
    # ************************************************************
    # STEP 2 *****************************************************
    # COPY, using CTRL+C, every line down thru both EXIT statements 
    # PASTE into Powershell == Right-Click at the PowerShell Prompt
    #  (Ctrl+V does not work)
    # Start copying with first line without a # at start of the line
    # Note: Actually, you can paste the entire file if you rather.
    #       Lines starting with a # are ignored by PowerShell
    # ************************************************************
    #functions

    function New-Zip {
        
    param([Parameter(Mandatory=$truePosition=0ValueFromPipeline=$true)]
        [
    String$Path, [Switch] $PassThru, [Switch] $Force )
        
    Process { if (Test-Path $path) {if (-not $Force) { return } }
        
    Set-Content $path ("PK" + [char]+ [char]+ ("$([char]0)" 18))
        
    $item Get-Item $path$item.IsReadOnly $false;if ($passThru) { $item } } }
    function 
    Copy-ToZip {param(
      [
    Parameter(Mandatory=$true,Position=0,ValueFromPipelineByPropertyName=$true)] [Alias('FullName')] 
      [
    String]$File, [Parameter(Mandatory=$true,Position=1)] [String]$ZipFile,[Switch]$HideProgress,[Switch]$Force )
      
    Begin {$ShellApplication = New-Object -ComObject Shell.Application
      
    if (-not (Test-Path $ZipFile)) {New-Zip $ZipFile};$Path Resolve-Path $ZipFile
      $ZipPackage 
    =$ShellApplication.Namespace("$Path")}
      
    Process {$RealFile Get-Item $File; if (-not $RealFile) { return }        
      if (-
    not $hideProgress) {$perc +=5; if ($perc -gt 100) { $perc 
        
    Write-Progress "Copying to $ZipFile$RealFile.FullName -PercentComplete $perc}
      
    $Flags 0; if ($force) {$flags 16 -bor 1024 -bor 64 -bor 512};Write-Verbose $realFile.Fullname
       $ZipPackage
    .CopyHere($realFile.Fullname$flags);Start-Sleep -Milliseconds 500}}
    #tasks
    $tempfile $env:temp '\scheduled.csv'
    If (test-path $tempfile) {del $tempfile}
    $zipfilename $env:userprofile '\desktop\WhatIsRunning.ZIP'
    IF (test-path $zipfilename) {del $zipfilename}
    New-
    zip $zipfilename
    $a 
    get-scheduledtask * | select statusnameEnabled,LastRunTime,LastTaskResult,NumberofMissedRuns,NextRunTime
    $a 
    where {$_.enabled -eq $true}  | export-csv -path $tempfile -useculture -notypeinformation -force:$true 
    copy
    -toZip $tempfile $zipfilename -hideprogress:$false -verbose:$false
    del $tempfile
    #startup programs
    $tempfile $env:temp '\startuppgms.csv'
    If (test-path $tempfile) {del $tempfile}
    $a Get-WmiObject -class "Win32_Startupcommand" select namecommanddescriptionlocationuserusersid
    $a 
    export-csv -path $tempfile -useculture -notypeinformation -force:$true 
    copy
    -toZip $tempfile $zipfilename -hideprogress:$false -verbose:$false
    del $tempfile
    # installed programs
    $tempfile $env:temp '\installedpgms.csv'
    If (test-path $tempfile) {del $tempfile}
    $array = @()
        
    $computername=$ENV:computername
        $UninstallKey
    ="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" 
        
    #Create an instance of the Registry Object and open the HKLM base key
        
    $reg=[microsoft.win32.registrykey]::OpenRemoteBaseKey('LocalMachine',$computername
        
    $regkey=$reg.OpenSubKey($UninstallKey
        
    $subkeys=$regkey.GetSubKeyNames() 
        foreach(
    $key in $subkeys){
            
    $thisKey=$UninstallKey+"\\"+$key 
            $thisSubKey
    =$reg.OpenSubKey($thisKey
            
    $obj = New-Object PSObject
            $obj 
    Add-Member -MemberType NoteProperty -Name "ComputerName" -Value $computername
            $obj 
    Add-Member -MemberType NoteProperty -Name "DisplayName" -Value $($thisSubKey.GetValue("DisplayName"))
            
    $obj Add-Member -MemberType NoteProperty -Name "DisplayVersion" -Value $($thisSubKey.GetValue("DisplayVersion"))
            
    $obj Add-Member -MemberType NoteProperty -Name "InstallLocation" -Value $($thisSubKey.GetValue("InstallLocation"))
            
    $obj Add-Member -MemberType NoteProperty -Name "InstallDate" -Value $($thisSubKey.GetValue("InstallDate"))
            
    $obj Add-Member -MemberType NoteProperty -Name "Publisher" -Value $($thisSubKey.GetValue("Publisher"))
            
    $array += $obj
        

    $a $array Where-Object $_.DisplayName } | select DisplayNameDisplayVersionPublisher,  InstallLocationInstallDateComputerName
    $a 
    export-csv -path $tempfile -useculture -notypeinformation -force:$true
    copy
    -toZip $tempfile $zipfilename -hideprogress:$false -verbose:$false
    del $tempfile

    EXIT
    EXIT

    # ***************** NOTE - POWERSHELL VERSION*****************
    # if you receive this error msg:
    #  Get-WinEvent: The system can not find the path specified
    # you need to update your PowerShell
    # you must be using Powershell 2.0 or later.
    #
    # To determine your Powershell version:
    #   Run PowerShell
    #   enter $host.version
    #   you should see at least:
    # Major  Minor  Build  Revision
    # -----  -----  -----  --------
    # 2      0      -1     -1
    #
    # If you do not see the above, update your Vista/Win 7.
    # ************************************************************
    # *************** NOTE - EXECUTION POLICY*********************
    # If you haven't set the execution policy, you may need to:
    #   Run PowerShell
    #   enter Set-ExecutionPolicy -executionpolicy remotesigned
    # ************************************************************ 
      My Computer


  5. Posts : 5,705
    Win7 x64 + x86
       #5

    In addition to the excellent advice above, I have to wonder about your hardware - there are numerous I/O errors cited in the memory dumps (0xc0000006 and 0xc000000E).

    Please try these free, bootable diagnostics: Initial Hardware Diagnostics
    Start with the hard drive diagnostics and then move to the malware tests (in case your current protection is corrupted).

    FYI - if you are infected, DON'T clean it!!! There are some infections that can stop your system from booting (such as the TDSS rootkit). Make sure you have a backup of your data, then post over in the Security forums for more expert assistance.

    Ensure firmware is updated on SSD, and that controller drivers (on the motherboard) are updated. Use Intel utilities to test the SSD.
      My Computer


  6. Posts : 5,705
    Win7 x64 + x86
       #6

    Sorry, I forgot to post the dump summaries (I ran the last 10 memory dumps). I/O errors highlighted in RED:

    BSOD BUGCHECK SUMMARY

    Code:
    
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062512-14336-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Mon Jun 25 21:06:31.598 2012 (UTC - 4:00)
    System Uptime: 0 days 0:01:26.065
    BugCheck F4, {3, fffffa80085a7b30, fffffa80085a7e10, fffff80002de0510}
    Probably caused by : wininit.exe
    PROCESS_NAME:  wininit.exe
    BUGCHECK_STR:  0xF4_IOERR
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_IOERR_IMAGE_wininit.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`085a7b30 fffffa80`085a7e10 fffff800`02de0510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062512-22370-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Mon Jun 25 15:30:12.889 2012 (UTC - 4:00)
    System Uptime: 0 days 0:05:17.982
    BugCheck F4, {3, fffffa80086aeb30, fffffa80086aee10, fffff80002dca510}
    Probably caused by : wininit.exe
    PROCESS_NAME:  wininit.exe
    BUGCHECK_STR:  0xF4_c0000005
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_wininit.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`086aeb30 fffffa80`086aee10 fffff800`02dca510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062512-22401-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Mon Jun 25 21:04:50.125 2012 (UTC - 4:00)
    System Uptime: 0 days 0:06:51.592
    BugCheck F4, {3, fffffa80085a5910, fffffa80085a5bf0, fffff80002d96510}
    Probably caused by : wininit.exe
    PROCESS_NAME:  wininit.exe
    BUGCHECK_STR:  0xF4_IOERR
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_IOERR_IMAGE_wininit.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`085a5910 fffffa80`085a5bf0 fffff800`02d96510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062512-22432-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Mon Jun 25 20:57:44.118 2012 (UTC - 4:00)
    System Uptime: 0 days 0:04:24.586
    BugCheck F4, {3, fffffa8008693980, fffffa8008693c60, fffff80002d99510}
    Probably caused by : csrss.exe
    PROCESS_NAME:  csrss.exe
    BUGCHECK_STR:  0xF4_c0000005
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_csrss.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`08693980 fffffa80`08693c60 fffff800`02d99510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-12370-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 14:37:00.602 2012 (UTC - 4:00)
    System Uptime: 0 days 3:25:26.069
    BugCheck F4, {3, fffffa8008700910, fffffa8008700bf0, fffff80002d80510}
    Probably caused by : wininit.exe
    PROCESS_NAME:  wininit.exe
    BUGCHECK_STR:  0xF4_c0000005
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_wininit.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`08700910 fffffa80`08700bf0 fffff800`02d80510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-12386-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 11:10:52.593 2012 (UTC - 4:00)
    System Uptime: 0 days 11:22:30.061
    BugCheck 7A, {fffff6fc400099c8, ffffffffc000000e, 1ab5da860, fffff88001339788}
    Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+3717a )
    DISK_HARDWARE_ERROR: There was error with disk hardware
    BUGCHECK_STR:  0x7a_c000000e
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID:  X64_0x7a_c000000e_nt!_??_::FNODOBFM::_string_+3717a
    Bugcheck code 0000007A
    Arguments fffff6fc`400099c8 ffffffff`c000000e 00000001`ab5da860 fffff880`01339788
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-20389-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 18:25:06.989 2012 (UTC - 4:00)
    System Uptime: 0 days 0:15:58.081
    BugCheck F4, {3, fffffa800867e910, fffffa800867ebf0, fffff80002de3510}
    Probably caused by : wininit.exe
    PROCESS_NAME:  wininit.exe
    BUGCHECK_STR:  0xF4_c0000005
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_wininit.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`0867e910 fffffa80`0867ebf0 fffff800`02de3510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-22448-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 14:55:40.980 2012 (UTC - 4:00)
    System Uptime: 0 days 0:10:40.072
    BugCheck F4, {3, fffffa800859db30, fffffa800859de10, fffff80002de2510}
    Probably caused by : wininit.exe
    PROCESS_NAME:  wininit.exe
    BUGCHECK_STR:  0xF4_c0000005
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_wininit.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`0859db30 fffffa80`0859de10 fffff800`02de2510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-3666-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 17:55:11.964 2012 (UTC - 4:00)
    System Uptime: 0 days 0:03:02.838
    BugCheck F4, {3, fffffa800777e970, fffffa800777ec50, fffff80001fdb510}
    Probably caused by : csrss.exe
    PROCESS_NAME:  csrss.exe
    BUGCHECK_STR:  0xF4_IOERR
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_IOERR_IMAGE_csrss.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`0777e970 fffffa80`0777ec50 fffff800`01fdb510
    BiosVersion = A09
    BiosReleaseDate = 03/31/2011
    SystemManufacturer = Dell Inc.
    SystemProductName = Studio 1569
    CPUID:        "Intel(R) Core(TM) i5 CPU       M 430  @ 2.27GHz"
    MaxSpeed:     2270
    CurrentSpeed: 2261
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-4243-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 17:51:42.175 2012 (UTC - 4:00)
    System Uptime: 0 days 0:06:31.642
    BugCheck F4, {3, fffffa80085a9b30, fffffa80085a9e10, fffff80002dd3510}
    Probably caused by : csrss.exe
    PROCESS_NAME:  csrss.exe
    BUGCHECK_STR:  0xF4_c0000005
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_csrss.exe
    Bugcheck code 000000F4
    Arguments 00000000`00000003 fffffa80`085a9b30 fffffa80`085a9e10 fffff800`02dd3510
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    
    
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

ฉ Designer Media Ltd
All times are GMT -5. The time now is 09:00.
Find Us