Windows 7: Random BSODs - Help appreciated

Linthorn · 01 Feb 2010

I have been having several reboots when I am not at my machine. No idea why since I wasn't doing anything at the time. I come to my machine, see that it has rebooted, check the Event Viewer and see the Bugcheck error. Can't find a rhyme or reason when scanning the Events.

Here are my last 4 minidumps (all the files in the folder). I'm running Windows 7 x64 on a Dell XPS 420 (stock, no tweaking). I put Win 7 on it from Vista32 by installing onto a new HD, clean install, new drivers if available (since I had Vista x86 before)

zigzag3143 · 01 Feb 2010

Quote: Originally Posted by Linthorn

I have been having several reboots when I am not at my machine. No idea why since I wasn't doing anything at the time. I come to my machine, see that it has rebooted, check the Event Viewer and see the Bugcheck error. Can't find a rhyme or reason when scanning the Events.

Here are my last 4 minidumps (all the files in the folder). I'm running Windows 7 x64 on a Dell XPS 420 (stock, no tweaking). I put Win 7 on it from Vista32 by installing onto a new HD, clean install, new drivers if available (since I had Vista x86 before)

Hi and welcome
These crashes were caused by you network driver e1e6032e.sys

I would download and install a fresh copy
I would also run a system file check
type cmd in search>right click and run as admin>sfc /scannow

good luck

Ken

Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

Code:

013010-23119-01.dmp    1/30/2010 4:24:32 AM    KMODE_EXCEPTION_NOT_HANDLED    0x0000001e    00000000`00000000    00000000`00000000    00000000`00000000    00000000`00000000    ntoskrnl.exe    ntoskrnl.exe+71ed0                    x64        C:\Users\K\Desktop\013010-23119-01.dmp    2    15    7600    
013010-18142-01.dmp    1/30/2010 7:33:28 PM    KMODE_EXCEPTION_NOT_HANDLED    0x0000001e    00000000`00000000    00000000`00000000    00000000`00000000    00000000`00000000    ntoskrnl.exe    ntoskrnl.exe+71ed0                    x64        C:\Users\K\Desktop\013010-18142-01.dmp    2    15    7600    
020110-20436-01.dmp    2/1/2010 10:07:24 AM    KMODE_EXCEPTION_NOT_HANDLED    0x0000001e    00000000`00000000    00000000`00000000    00000000`00000000    00000000`00000000    ntoskrnl.exe    ntoskrnl.exe+71ed0                    x64        C:\Users\K\Desktop\020110-20436-01.dmp    2    15    7600    
020110-17472-01.dmp    2/1/2010 10:46:28 AM    DRIVER_IRQL_NOT_LESS_OR_EQUAL    0x000000d1    fffffab7`cc1d97a8    00000000`00000002    00000000`00000000    fffff880`03f64ca8    e1e6032e.sys    e1e6032e.sys+6ca8                    x64        C:\Users\K\Desktop\020110-17472-01.dmp    2    15    7600

Linthorn · 01 Feb 2010

Quote:

Hi and welcome
These crashes were caused by you network driver e1e6032e.sys

I would download and install a fresh copy
I would also run a system file check
type cmd in search>right click and run as admin>sfc /scannow

I'm amazed you could tell this! OK, where would I get a fresh network driver? Is this a Microsoft driver or a network card driver?

zigzag3143 · 01 Feb 2010

Quote: Originally Posted by Linthorn

Quote:

Hi and welcome
These crashes were caused by you network driver e1e6032e.sys

I would download and install a fresh copy
I would also run a system file check
type cmd in search>right click and run as admin>sfc /scannow

I'm amazed you could tell this! OK, where would I get a fresh network driver? Is this a Microsoft driver or a network card driver?

Sorry I forgot to post the anaysis. check the highlitghted bits. for you netowrk adapter you can uninstall yours and let win 7 re-install, but just in case I would download one jst in case

Ken

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\020110-17472-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c0e000 PsLoadedModuleList = 0xfffff800`02e4be50
Debug session time: Mon Feb  1 10:44:44.707 2010 (GMT-5)
System Uptime: 0 days 0:37:44.299
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffffab7cc1d97a8, 2, 0, fffff88003f64ca8}

Unable to load image \SystemRoot\system32\DRIVERS\e1e6032e.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1e6032e.sys
*** ERROR: Module load completed but symbols could not be loaded for e1e6032e.sys
Probably caused by : e1e6032e.sys ( e1e6032e+6ca8 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffffab7cc1d97a8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88003f64ca8, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eb60e0
 fffffab7cc1d97a8 

CURRENT_IRQL:  2

FAULTING_IP: 
e1e6032e+6ca8
fffff880`03f64ca8 498b4210        mov     rax,qword ptr [r10+10h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff80000b9c8e0 -- (.trap 0xfffff80000b9c8e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000037c7c7c790 rbx=0000000000000000 rcx=fffffa800455d000
rdx=0000000000028063 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88003f64ca8 rsp=fffff80000b9ca70 rbp=fffffa80043ba000
 r8=0000000000000001  r9=0000000000000001 r10=fffffab7cc1d9798
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
e1e6032e+0x6ca8:
fffff880`03f64ca8 498b4210        mov     rax,qword ptr [r10+10h] ds:fffffab7`cc1d97a8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c7f469 to fffff80002c7ff00

STACK_TEXT:  
fffff800`00b9c798 fffff800`02c7f469 : 00000000`0000000a fffffab7`cc1d97a8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff800`00b9c7a0 fffff800`02c7e0e0 : 00000000`00000004 fffffa80`04279028 00000000`00000004 fffffa80`033066a8 : nt!KiBugCheckDispatch+0x69
fffff800`00b9c8e0 fffff880`03f64ca8 : 00000000`00000000 fffffa80`04251800 00000000`00000000 fffffa80`04251c00 : nt!KiPageFault+0x260
fffff800`00b9ca70 00000000`00000000 : fffffa80`04251800 00000000`00000000 fffffa80`04251c00 fffffa80`00000001 : e1e6032e+0x6ca8


STACK_COMMAND:  kb

FOLLOWUP_IP: 
e1e6032e+6ca8
fffff880`03f64ca8 498b4210        mov     rax,qword ptr [r10+10h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  e1e6032e+6ca8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: e1e6032e

IMAGE_NAME:  e1e6032e.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  49c923b3

FAILURE_BUCKET_ID:  X64_0xD1_e1e6032e+6ca8

BUCKET_ID:  X64_0xD1_e1e6032e+6ca8

Followup: MachineOwner
---------

Linthorn · 01 Feb 2010

sfc looks fine:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.

zigzag3143 · 01 Feb 2010

Quote: Originally Posted by Linthorn

sfc looks fine:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.

And the network driver? if you can go into device manager and find out if you dont know. You could also dxdiag ins search

Ken

Linthorn · 01 Feb 2010

Quote: Originally Posted by zigzag3143

Sorry I forgot to post the anaysis. check the highlitghted bits. for you netowrk adapter you can uninstall yours and let win 7 re-install, but just in case I would download one jst in case

I'll try that. Did you look at the other dmp files as well? I looked and they seemed different, but I can't tell.

Linthorn · 01 Feb 2010

Updated the driver. We'll see what happens overnight. Thanks!

zigzag3143 · 01 Feb 2010

Quote: Originally Posted by Linthorn

I have been having several reboots when I am not at my machine. No idea why since I wasn't doing anything at the time. I come to my machine, see that it has rebooted, check the Event Viewer and see the Bugcheck error. Can't find a rhyme or reason when scanning the Events.

Here are my last 4 minidumps (all the files in the folder). I'm running Windows 7 x64 on a Dell XPS 420 (stock, no tweaking). I put Win 7 on it from Vista32 by installing onto a new HD, clean install, new drivers if available (since I had Vista x86 before)

here are the other three for you. They are all the same just figured you should see it so you can be sure

KEn

Code:

Loading Dump File [C:\Users\K\Desktop\013010-18142-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c4a000 PsLoadedModuleList = 0xfffff800`02e87e50
Debug session time: Sat Jan 30 19:31:11.430 2010 (GMT-5)
System Uptime: 0 days 15:07:07.022
Loading Kernel Symbols
..............................
Unable to load image \SystemRoot\system32\DRIVERS\e1e6032e.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1e6032e.sys
*** ERROR: Module load completed but symbols could not be loaded for e1e6032e.sys
Probably caused by : e1e6032e.sys ( e1e6032e+6e51 )

Code:

Unable to load image \SystemRoot\system32\DRIVERS\e1e6032e.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1e6032e.sys
*** ERROR: Module load completed but symbols could not be loaded for e1e6032e.sys
Probably caused by : e1e6032e.sys ( e1e6032e+6ca8 )

Code:

Unable to load image \SystemRoot\system32\DRIVERS\e1e6032e.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1e6032e.sys
*** ERROR: Module load completed but symbols could not be loaded for e1e6032e.sys
Probably caused by : e1e6032e.sys ( e1e6032e+6ee1 )

Linthorn · 01 Feb 2010

Thanks. Nice to have it narrowed down.

Windows 7: Random BSODs - Help appreciated

Random BSODs - Help appreciated problems?