Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD Bugcheck 1E

15 Dec 2012   #1

Windows 7 Home Premium 64bit
 
 
BSOD Bugcheck 1E

Hi,

My laptop keeps giving me a BSOD after keeping the machine on for a short period of time. I ran Memtest, which did not find any problems. I reimaged the computer, but it came back as I was running Windows Update. I would hugely appreciate some help. Thanks in advance!

Here is the .dmp file from the error:


Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Users\Akar\Desktop\121512-34289-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.17118.amd64fre.win7_gdr.120830-0334
Machine Name:
Kernel base = 0xfffff800`02863000 PsLoadedModuleList = 0xfffff800`02a9fe70
Debug session time: Sat Dec 15 17:13:10.054 2012 (UTC - 5:00)
System Uptime: 0 days 0:04:37.974
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff800028b367b, 0, fffa0000}

Probably caused by : ntkrnlmp.exe ( nt!RtlImageNtHeaderEx+3f )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800028b367b, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 00000000fffa0000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!RtlImageNtHeaderEx+3f
fffff800`028b367b 66390a cmp word ptr [rdx],cx

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 00000000fffa0000

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002b0a0e0
00000000fffa0000

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR: 0x1E_c0000005

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: mscorsvw.exe

CURRENT_IRQL: 0

EXCEPTION_RECORD: fffff880091d3808 -- (.exr 0xfffff880091d3808)
ExceptionAddress: fffff800028b367b (nt!RtlImageNtHeaderEx+0x000000000000003f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 00000000fffa0000
Attempt to read from address 00000000fffa0000

TRAP_FRAME: fffff880091d38b0 -- (.trap 0xfffff880091d38b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000005a4d
rdx=00000000fffa0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800028b367b rsp=fffff880091d3a48 rbp=fffff880091d3b80
r8=0000000000000000 r9=fffff880091d3a88 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!RtlImageNtHeaderEx+0x3f:
fffff800`028b367b 66390a cmp word ptr [rdx],cx ds:0001:00000000`fffa0000=????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff8000290d3b9 to fffff800028d35c0

STACK_TEXT:
fffff880`091d3038 fffff800`0290d3b9 : 00000000`0000001e ffffffff`c0000005 fffff800`028b367b 00000000`00000000 : nt!KeBugCheckEx
fffff880`091d3040 fffff800`028d2c02 : fffff880`091d3808 fffffa80`08bad010 fffff880`091d38b0 00000000`00000000 : nt!KiDispatchException+0x1b9
fffff880`091d36d0 fffff800`028d177a : 00000000`00000000 fffffa80`08bad010 00000000`00860000 fffffa80`073c0540 : nt!KiExceptionDispatch+0xc2
fffff880`091d38b0 fffff800`028b367b : fffff800`028b3706 00000000`00000010 00000000`00000082 fffff880`091d3a78 : nt!KiPageFault+0x23a
fffff880`091d3a48 fffff800`028b3706 : 00000000`00000010 00000000`00000082 fffff880`091d3a78 ffffffff`80000cc4 : nt!RtlImageNtHeaderEx+0x3f
fffff880`091d3a50 fffffa80`073b9b07 : fffff880`091d3b80 00000000`00000000 fffffa80`073bd250 fffffa80`073c0750 : nt!RtlImageNtHeader+0x1e
fffff880`091d3a80 fffff880`091d3b80 : 00000000`00000000 fffffa80`073bd250 fffffa80`073c0750 00000000`00000000 : 0xfffffa80`073b9b07
fffff880`091d3a88 00000000`00000000 : fffffa80`073bd250 fffffa80`073c0750 00000000`00000000 00000000`00000000 : 0xfffff880`091d3b80


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!RtlImageNtHeaderEx+3f
fffff800`028b367b 66390a cmp word ptr [rdx],cx

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: nt!RtlImageNtHeaderEx+3f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 503f857d

FAILURE_BUCKET_ID: X64_0x1E_c0000005_nt!RtlImageNtHeaderEx+3f

BUCKET_ID: X64_0x1E_c0000005_nt!RtlImageNtHeaderEx+3f

Followup: MachineOwner
---------

My System SpecsSystem Spec
.

16 Dec 2012   #2

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium 64Bit
 
 

My System SpecsSystem Spec
18 Dec 2012   #3

Windows 7 Home Premium 64bit
 
 

Sorry about that. Here is the file.
My System SpecsSystem Spec
.


18 Dec 2012   #4

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x86 Service Pack 1 - Linux Mint Mate 14 x64
 
 

Code:
BugCheck 7A, {fffff6fc500039c0, ffffffffc000000e, 5eb30880, fffff8a000738000}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+3420e )
Code:
Usual causes:  Memory, Paging file corruption, File system, Hard drive, Cabling, Virus infection, Improperly seated cards, BIOS, Bad motherboard, Missing Service Pack
Run some hard-drive diagnostics and follow these steps:Find your hard-drive manufacturer and run their tests.

Additional Tests:Post a screenshot of Crystal Disk Info summary: Make sure you have the latest firmware for SSD, and ensure all the SATA and Power cables are connected to the drive.

Check for any file system errors and bad sectors using Option #2 of:Use this command with Disk Check:

Code:
chkdsk C: /f /r
Install Service Pack 1:

Code:
Microsoft Windows 7 Home Premium
 6.1.7600 Build 7600
Remove:

Code:
Start Menu\Programs\Spybot - Search & Destroy
Install and perform full scans with: Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation

Additional Scan:
My System SpecsSystem Spec
Reply

 BSOD Bugcheck 1E




Thread Tools



Similar help and support threads for2: BSOD Bugcheck 1E
Thread Forum
Unknown Bugcheck : Bugcheck c00002e3 - System is randomly Shutting OFF BSOD Help and Support
[BSOD] Bugcheck 101; what is it? BSOD Help and Support
BSOD on BugCheck. Win 7 64 BSOD Help and Support
BSOD Bugcheck 0x116 Win7 x64 DV6 2090eo random BSOD's BSOD Help and Support
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000 BSOD Help and Support
Solved BSOD - BugCheck 3B BSOD Help and Support
BSOD BugCheck 124 - Help please BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:34 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33