Windows 7: dmp files need to be analyzed

Gunasekaran · 19 Jan 2012

Hi guys,

My system is crashing form last 2 days...
I could boot my system through safe mode.
But its failing, while i'm booting it on normal mode.
Its going fine, till i'm typing my username and password. After that its crashing with the blue dump screen.

I found the system is generated .dmp files on it.
Since i'm a unix admin, i'm not having much experience on windows.

Kindly help me to find the solution by analyzing the attached crash files.

Note: Remove .txt on the attachment files.

Thanks
Guna

Gunasekaran · 19 Jan 2012

Hi Dudes,

I'm unable to d right click on any of the document and folders.
When i do right click on any of the files, its hanging and explorer is become unstable.

i Could do right click on my Mycomputer and Local drives.
But not with folders and files.

Kindly help me to resolve the same.

Thanks
Guna

writhziden · 19 Jan 2012

Code:

Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Gunasekaran\011912-16614-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Mini Kernel Dump does not have process information
Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`0420c000 PsLoadedModuleList = 0xfffff800`04451670
Debug session time: Wed Jan 18 23:37:48.092 2012 (UTC - 7:00)
System Uptime: 0 days 0:01:14.466
Loading Kernel Symbols
..............................................................Unable to load image Unknown_Module_00000000`00000000, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Unknown_Module_00000000`00000000
Unable to add module at 00000000`00000000

Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa800602ab30, fffffa800602ae10, fffff8000458c8b0}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa800602ab30, Terminating object
Arg3: fffffa800602ae10, Process image file name
Arg4: fffff8000458c8b0, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa800602ab30

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xF4

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`02833800 00000000`00000000 : fffff900`c00f9600 fffffa80`00000000 fffff900`c00bc010 00000000`00000000 : 0xfffff960`00199655


STACK_COMMAND:  kb

SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  X64_0xF4_ANALYSIS_INCONCLUSIVE

BUCKET_ID:  X64_0xF4_ANALYSIS_INCONCLUSIVE

Followup: MachineOwner
---------

If you are overclocking anything, please stop.

Update the following drivers.

Code:
SBAlg	fffff880`010c0000	fffff880`010d2000	Wed Aug 13 06:47:37 2008 (48a2d7e9)	000115e4		SBAlg.sys
SBAlg12	fffff880`010ee000	fffff880`01100000	Wed Nov 26 04:00:08 2008 (492d2c38)	000153d2		SBAlg12.sys
SBAlg00	fffff880`010d2000	fffff880`010da000	Wed Nov 26 04:00:58 2008 (492d2c6a)	0000ad61		SBAlg00.sys
SBAlg01	fffff880`010da000	fffff880`010e2000	Wed Nov 26 04:01:20 2008 (492d2c80)	000086b4		SBAlg01.sys
SBAlg11	fffff880`010e2000	fffff880`010ee000	Wed Nov 26 04:50:08 2008 (492d37f0)	0000afa4		SBAlg11.sys
You may use the following sites as references for finding drivers. We recommend finding the manufacturer of the driver and downloading drivers directly from the manufacturer or software developer. If you have trouble finding a driver or driver manufacturer, let us know and we will do our best to assist you. If you need help, please provide the device name, manufacturer, and the driver .sys file that you are looking for.
Driver Reference is a good site to find the driver .sys files, their descriptions, and the site most likely to contain an update.

Driver Search Methods provides driver manufacturers and links to their homepages.

There are a few methods for updating drivers.
Installing and updating drivers in 7

Driver Install - Add Hardware Wizard

Driver Install - Device Manager

To fully re-install a driver, use the following steps.
Click Start Menu

Right Click My Computer/Computer

Click Manage

Click Device Manager from the list on the left

Find the device you are trying to uninstall by expanding the appropriate set of devices

Right click the device

Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)

Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK

Restart your computer

Install the latest driver for the device once Windows starts.

Alternatively:
Login as an adminstrative user.

Click Start Menu

Click Control Panel

Click Hardware and Sound

Click Device Manager (the last link under Devices and Printers)

Find the device you are trying to uninstall by expanding the appropriate set of devices

Right click the device

Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)

Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK

Restart your computer

Install the latest driver for the device once Windows starts.

A windows system process was terminated unexpectedly. Possible causes are hard disk errors... Viruses... Lack of Windows updates... Drivers...

Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log

Run SFC /SCANNOW Command - System File Checker up to three times to fix all errors. Post back if it continues to show errors after the third run or if the first run comes back with no integrity violations.

Check for viruses.
Download and install the free version of Malwarebytes : Free anti-malware, anti-virus and spyware removal download (do not start the trial) and make sure it is updated. Do not run a scan yet.
Download VIPRE Rescue - VIPRE Computer Recovery Solution from Sunbelt Software but do not unzip it yet
Download the Fakerean removal tool but do not run it yet.
Start your computer in Safe Mode
Unzip VIPRE Rescue and let it run.
Run a full scan with Malwarebytes.
Run the fakerean removal tool.

Install all Windows Updates.

Thanks to Dave76 for help understanding possible causes.

writhziden · 19 Jan 2012

Also, it was suggested to me by mgorman87 that I ask you to follow the https://www.sevenforums.com/crashes-d...tructions.html to provide us with better information. I was going to do this in a later step, but thinking it over, I decided to ask now so I do not forget.

Also, those drivers I mentioned updating are from McAfee Endpoint Encryption or McAfee SafeBoot. McAfee is known to cause blue screen crashes on some systems. I recommend removing it for testing purposes.

If you need an antivirus/security software, we recommend Microsoft Security Essentials - Free Antivirus for Windows. We do not recommend installing two security systems at one time as that can also cause conflicts.

mgorman87 also recommended that you run Hardware - Stress Test With Prime95 to determine hardware problems.

He also recommended that you run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete (run them an hour before bed each of the next two nights and check before going to sleep that they are still running).