BSOD Seem to happen only when Shutting down or logging off - ntkrnlmp

Windows 7 x64 Fully updated. System has passed 8 hours of memtest with no errors. Have run CHKDSK /F on all the drives. When I hit shutdown or log off about once every 3-5 days I get this BSOD ntkrnlmp.exe

Thanks for your guys help!

Magoo

Magoo said:

Windows 7 x64 Fully updated. System has passed 8 hours of memtest with no errors. Have run CHKDSK /F on all the drives. When I hit shutdown or log off about once every 3-5 days I get this BSOD ntkrnlmp.exe

Thanks for your guys help!

Magoo

Memory mangement probably cuased by a driver. I suspect this one. Related to SSPORT.sys 32bit Port Contention Driver from Samsung Electronics. I would remove or update to test.

Magoo said:

Thanks, I'm unsure how to uninstall since I don't have anything Samsung installed and not sure what hardware would have installed it? Only thing I can think of is can't remember the brand USB to Serial port adapter. Also I used to have a Samsung Laser Printer, but stopped using it over a year ago and uninstalled the driver software from the Control Panel

EDIT: Stopped it with Autoruns and also renamed it to .BAK

If nothing is using it you can simply rename it to *.bak so it cant load.

Already done, I will report back if I get another BSOD, Thanks for your help! :)

Just got a scsiport.sys BSOD, Did not create a .dmp file, Not sure why?

Code:

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          2/24/2012 6:54:11 AM
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (2)
User:          SYSTEM
Computer:      Antares
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>41</EventID>
    <Version>2</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2012-02-24T12:54:11.350010300Z" />
    <EventRecordID>429315</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Antares</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">0</Data>
    <Data Name="BugcheckParameter1">0x0</Data>
    <Data Name="BugcheckParameter2">0x0</Data>
    <Data Name="BugcheckParameter3">0x0</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">true</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
  </EventData>
</Event>

Magoo said:

Just got a scsiport.sys BSOD, Did not create a .dmp file, Not sure why?

Code:

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          2/24/2012 6:54:11 AM
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (2)
User:          SYSTEM
Computer:      Antares
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>41</EventID>
    <Version>2</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2012-02-24T12:54:11.350010300Z" />
    <EventRecordID>429315</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Antares</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">0</Data>
    <Data Name="BugcheckParameter1">0x0</Data>
    <Data Name="BugcheckParameter2">0x0</Data>
    <Data Name="BugcheckParameter3">0x0</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">true</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
  </EventData>
</Event>

If there is no dmp upload the event viewer log. What makes you think it is scsiport.sys?

Please provide us with your Event Viewer administrative logs by following these steps:


Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file here.

Mentioned the SCSIport.sys because that's what it was saying on the Blue Screen when it happened.

Magoo said:

Mentioned the SCSIport.sys because that's what it was saying on the Blue Screen when it happened.

Nope

First

Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035 Of the 2736 errors this is the most frequent


Second
From 2/6

The driver detected a controller error on \Device\Harddisk7\DR7.


Third

The description for Event ID 9 from source iaStor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

\Device\Ide\iaStor0


Fourth
The driver detected a controller error on \Device\Harddisk9\DR13.


Fifth
The driver detected a controller error on \Device\Harddisk9\DR13.


Sixth
The driver detected a controller error on \Device\Harddisk7\DR18.


Many many more

Seems you do have a lot of HD errors.

I would suggest chkdsk on them all

If the Hd's pass then I would start looking at the controllers

All those HDD errors are when I either plug in or unplug a external USB HDD or Flash Drive. DR7 is a external USB drive that is hooked up 24/7 that Acronis write an image to every day. The higher number ones are USB stick's, Just for fun did another chkdsk on all the internal drives and all are fine. Every time I use a usb flash drive , I get one of those errors. Thanks for your help! :)