BSOD Random points of time 1000007e

ChaplinLIVE · 24 Jun 2014

I've followed the before-you-post instructions, the file is below.

As the thread title says, I've had 4 random BSOD's in the past 2 weeks. I've tried googling but my googling isn't the best. So I hope that someone can find the issue here.

I also did a search of the forum before I posted and found this: Random BSOD just doing normal things, BCCODE 1000007e - which looks to be my issue but I am unsure so to double check, my file as requested is below.

koolkat77 · 24 Jun 2014

Welcome to the forum ChaplinLIVE,

Reduce items at start-up:

How to Change, Add, or Remove Startup Programs in Windows 7

Perform a clean boot:

How to Troubleshoot a Problem by Performing a Clean Startup in Windows 7 or Vista

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

How to Repair Windows 7 System Files with System File Checker

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\admin\Downloads\SAM-DESKTOP-24_06_2014_152713_24\062713-29156-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`0321c000 PsLoadedModuleList = 0xfffff800`0345f670
Debug session time: Thu Jun 27 22:58:31.376 2013 (UTC + 6:00)
System Uptime: 0 days 10:21:00.261
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
....................
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff88005f8deab, fffff8800cdb8678, fffff8800cdb7ed0}

Probably caused by : atikmdag.sys ( atikmdag+6f4eab )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88005f8deab, The address that the exception occurred at
Arg3: fffff8800cdb8678, Exception Record Address
Arg4: fffff8800cdb7ed0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
atikmdag+6f4eab
fffff880`05f8deab 488941c0        mov     qword ptr [rcx-40h],rax

EXCEPTION_RECORD:  fffff8800cdb8678 -- (.exr 0xfffff8800cdb8678)
ExceptionAddress: fffff88005f8deab (atikmdag+0x00000000006f4eab)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 0000000000000000
Attempt to write to address 0000000000000000

CONTEXT:  fffff8800cdb7ed0 -- (.cxr 0xfffff8800cdb7ed0)
rax=4000004000182000 rbx=0000000000000000 rcx=0000000000000040
rdx=fffff8800da00040 rsi=fffff88005b7f901 rdi=fffffa800786b000
rip=fffff88005f8deab rsp=fffff8800cdb88b0 rbp=fffff8800cdb88d0
 r8=0000000000000000  r9=0000000000004040 r10=fffff8800da00000
r11=0000000000000000 r12=fffffa8007860000 r13=fffffa80066df000
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00210282
atikmdag+0x6f4eab:
fffff880`05f8deab 488941c0        mov     qword ptr [rcx-40h],rax ds:002b:00000000`00000000=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  NULL_DEREFERENCE

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  0000000000000000

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034c9100
GetUlongFromAddress: unable to read from fffff800034c91c0
 0000000000000000 Nonpaged pool

FOLLOWUP_IP: 
atikmdag+6f4eab
fffff880`05f8deab 488941c0        mov     qword ptr [rcx-40h],rax

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffffa80066df000 to fffff88005f8deab

STACK_TEXT:  
fffff880`0cdb88b0 fffffa80`066df000 : fffffa80`07860000 fffff880`05b7f901 fffffa80`0786b000 fffff880`0cdb8900 : atikmdag+0x6f4eab
fffff880`0cdb88b8 fffffa80`07860000 : fffff880`05b7f901 fffffa80`0786b000 fffff880`0cdb8900 fffff880`058bf9d5 : 0xfffffa80`066df000
fffff880`0cdb88c0 fffff880`05b7f901 : fffffa80`0786b000 fffff880`0cdb8900 fffff880`058bf9d5 fffffa80`066df6b8 : 0xfffffa80`07860000
fffff880`0cdb88c8 fffffa80`0786b000 : fffff880`0cdb8900 fffff880`058bf9d5 fffffa80`066df6b8 000000f4`bfef3000 : atikmdag+0x2e6901
fffff880`0cdb88d0 fffff880`0cdb8900 : fffff880`058bf9d5 fffffa80`066df6b8 000000f4`bfef3000 fffffa80`066df6b8 : 0xfffffa80`0786b000
fffff880`0cdb88d8 fffff880`058bf9d5 : fffffa80`066df6b8 000000f4`bfef3000 fffffa80`066df6b8 fffffa80`07860000 : 0xfffff880`0cdb8900
fffff880`0cdb88e0 fffffa80`066df6b8 : 000000f4`bfef3000 fffffa80`066df6b8 fffffa80`07860000 fffff880`0cdb89d0 : atikmdag+0x269d5
fffff880`0cdb88e8 000000f4`bfef3000 : fffffa80`066df6b8 fffffa80`07860000 fffff880`0cdb89d0 fffff880`058c49a7 : 0xfffffa80`066df6b8
fffff880`0cdb88f0 fffffa80`066df6b8 : fffffa80`07860000 fffff880`0cdb89d0 fffff880`058c49a7 fffffa80`066df6b8 : 0x000000f4`bfef3000
fffff880`0cdb88f8 fffffa80`07860000 : fffff880`0cdb89d0 fffff880`058c49a7 fffffa80`066df6b8 00000000`00000015 : 0xfffffa80`066df6b8
fffff880`0cdb8900 fffff880`0cdb89d0 : fffff880`058c49a7 fffffa80`066df6b8 00000000`00000015 fffffa80`070ce680 : 0xfffffa80`07860000
fffff880`0cdb8908 fffff880`058c49a7 : fffffa80`066df6b8 00000000`00000015 fffffa80`070ce680 fffff880`058bad44 : 0xfffff880`0cdb89d0
fffff880`0cdb8910 fffffa80`066df6b8 : 00000000`00000015 fffffa80`070ce680 fffff880`058bad44 000000f4`bfef3000 : atikmdag+0x2b9a7
fffff880`0cdb8918 00000000`00000015 : fffffa80`070ce680 fffff880`058bad44 000000f4`bfef3000 00000000`00000010 : 0xfffffa80`066df6b8
fffff880`0cdb8920 fffffa80`070ce680 : fffff880`058bad44 000000f4`bfef3000 00000000`00000010 00000000`00000058 : 0x15
fffff880`0cdb8928 fffff880`058bad44 : 000000f4`bfef3000 00000000`00000010 00000000`00000058 00000000`f2400000 : 0xfffffa80`070ce680
fffff880`0cdb8930 000000f4`bfef3000 : 00000000`00000010 00000000`00000058 00000000`f2400000 00000000`00792000 : atikmdag+0x21d44
fffff880`0cdb8938 00000000`00000010 : 00000000`00000058 00000000`f2400000 00000000`00792000 000000f4`0f565000 : 0x000000f4`bfef3000
fffff880`0cdb8940 00000000`00000058 : 00000000`f2400000 00000000`00792000 000000f4`0f565000 00000000`ef565000 : 0x10
fffff880`0cdb8948 00000000`f2400000 : 00000000`00792000 000000f4`0f565000 00000000`ef565000 00000000`00000000 : 0x58
fffff880`0cdb8950 00000000`00792000 : 000000f4`0f565000 00000000`ef565000 00000000`00000000 000000ff`00000000 : 0xf2400000
fffff880`0cdb8958 000000f4`0f565000 : 00000000`ef565000 00000000`00000000 000000ff`00000000 00000000`00000003 : 0x792000
fffff880`0cdb8960 00000000`ef565000 : 00000000`00000000 000000ff`00000000 00000000`00000003 000000ff`02400000 : 0x000000f4`0f565000
fffff880`0cdb8968 00000000`00000000 : 000000ff`00000000 00000000`00000003 000000ff`02400000 000000ff`02400000 : 0xef565000


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  atikmdag+6f4eab

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atikmdag

IMAGE_NAME:  atikmdag.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  50d225df

STACK_COMMAND:  .cxr 0xfffff8800cdb7ed0 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_atikmdag+6f4eab

BUCKET_ID:  X64_0x7E_atikmdag+6f4eab

Followup: MachineOwner
---------

1: kd> lmvm atikmdag
start             end                 module name
fffff880`05899000 fffff880`063af000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        Thu Dec 20 02:38:55 2012 (50D225DF)
    CheckSum:         00AC6529
    ImageSize:        00B16000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Remove Norton for testing purpose. It contributes to BSOD's.

Recommended antivirus software for Windows 7 based on stability compared to others:-

Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Post a screenshot of your Hard Drive(s) using Crystal Disk Info software:

CrystalDiskInfo - Software - Crystal Dew World

Run a Hard Drive test:

How to Use SeaTools for DOS and Windows Disk Check Utility

Check for heating issues using Speccy or HWmonitor

Upload a screen shot:

Screenshots and Files - Upload and Post in Seven Forums

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable!:-

scmndisp.sys Wed Jan 17 13:48:03 2007 (45ADD4B3)
Netgear Neutral Wireless Solution
Driver Reference Table - scmndisp.sys

jswpslwfx.sys Thu May 15 16:28:50 2008 (482C1062)
D-Link USB Wireless Adapter Driver
Driver Reference Table - jswpslwfx.sys

AppleCharger.sys Mon Jan 10 15:57:29 2011 (4D2AD809)
GIGABYTE On/Off Charge driver. See here for details - GIGABYTE ON/OFF Charge [br] May cause BSOD on Win7/8 systems - uninstall to test (haven't seen recently (15Jan2013))
Driver Reference Table - AppleCharger.sys

Use Revo Uninstaller to uninstall stubborn software. Opt for Advance Mode while uninstalling which allows you to remove leftover registry:-

Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

To perform a clean install of a driver, follow this tutorial:

How to Clean Left Over Driver Files with Driver Sweeper

Code:

Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Debug session time: Tue Jun 24 19:54:49.304 2014 (UTC + 6:00)
System Uptime: 0 days 2:57:29.538
BugCheck 1000007E, {ffffffffc0000005, fffff8800f316dbb, fffff880077d7228, fffff880077d6a80}
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : atikmdag.sys ( atikmdag+c7dbb )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Debug session time: Fri Jun 20 01:53:49.886 2014 (UTC + 6:00)
System Uptime: 0 days 9:09:07.119
BugCheck 1000007E, {ffffffffc0000005, fffff8800f371dbb, fffff88002999228, fffff88002998a80}
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : atikmdag.sys ( atikmdag+c7dbb )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Thu Jun 27 22:58:31.376 2013 (UTC + 6:00)
System Uptime: 0 days 10:21:00.261
BugCheck 1000007E, {ffffffffc0000005, fffff88005f8deab, fffff8800cdb8678, fffff8800cdb7ed0}
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : atikmdag.sys ( atikmdag+6f4eab )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  csrss.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``