random bluescreens ntoskrnl.exe

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #11

    Antivirus software:
    Code:
    avgnt.exe	c:\program files (x86)\avira\antivir desktop\avgnt.exe	2480	8	200	1380	2/24/2012 5:31 AM	10.0.13.18	275.16 KB (281,768 bytes)	4/20/2011 10:24 AM
    avguard.exe	c:\program files (x86)\avira\antivir desktop\avguard.exe	2040	8	200	1380	2/24/2012 5:30 AM	10.0.1.59	263.16 KB (269,480 bytes)	4/20/2011 10:24 AM
    avshadow.exe	c:\program files (x86)\avira\antivir desktop\avshadow.exe	2124	8	200	1380	2/24/2012 5:30 AM	1.0.0.6	254.66 KB (260,776 bytes)	4/20/2011 10:24 AM
    sched.exe	c:\program files (x86)\avira\antivir desktop\sched.exe	1772	8	200	1380	2/24/2012 5:30 AM	10.0.0.21	133.16 KB (136,360 bytes)	4/20/2011 10:24 AM
    Code:
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [D:\Kingston\BSODDmpFiles\squat251\new minidump\022512-17565-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
    Machine Name:
    Kernel base = 0xfffff800`03256000 PsLoadedModuleList = 0xfffff800`0349be90
    Debug session time: Sat Feb 25 20:54:51.342 2012 (UTC - 7:00)
    System Uptime: 0 days 2:18:52.997
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .............................
    Loading User Symbols
    Loading unloaded module list
    .......
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 1A, {411, fffff6fc500671f0, 82b0000112d15882, fffff68000032269}
    
    Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+6061 )
    
    Followup: MachineOwner
    ---------
    
    2: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    MEMORY_MANAGEMENT (1a)
        # Any other values for parameter 1 must be individually examined.
    Arguments:
    Arg1: 0000000000000411, The subtype of the bugcheck.
    Arg2: fffff6fc500671f0
    Arg3: 82b0000112d15882
    Arg4: fffff68000032269
    
    Debugging Details:
    ------------------
    
    
    BUGCHECK_STR:  0x1a_411
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
    
    PROCESS_NAME:  svchost.exe
    
    CURRENT_IRQL:  2
    
    TRAP_FRAME:  fffff88008b0c860 -- (.trap 0xfffff88008b0c860)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa80080a6060 rbx=0000000000000000 rcx=fffff8a00ce3e6a0
    rdx=0000000000000003 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff800034015f7 rsp=fffff88008b0c9f0 rbp=0000000000001000
     r8=0000000000000001  r9=fffff80003256000 r10=fffffa800519c3c8
    r11=0000000000000003 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na po cy
    nt!ExAllocatePoolWithTag+0x517:
    fffff800`034015f7 4c8b4908        mov     r9,qword ptr [rcx+8] ds:fffff8a0`0ce3e6a8=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff800032b32dd to fffff800032d6640
    
    STACK_TEXT:  
    fffff880`08b0c508 fffff800`032b32dd : 00000000`0000001a 00000000`00000411 fffff6fc`500671f0 82b00001`12d15882 : nt!KeBugCheckEx
    fffff880`08b0c510 fffff800`03307a71 : 82b00001`12d15882 fffff6fc`500671f0 0000007f`fffffff8 fffff800`033022a0 : nt! ?? ::FNODOBFM::`string'+0x6061
    fffff880`08b0c560 fffff800`032f425f : 00000000`00000000 00000000`00000000 00000000`00000000 fffff800`0345abc0 : nt!MiResolveTransitionFault+0x381
    fffff880`08b0c5f0 fffff800`032e443b : fffff8a0`021d0b50 00000000`00000000 00000000`00000000 fffff800`03480340 : nt!MiDispatchFault+0x95f
    fffff880`08b0c700 fffff800`032d476e : 00000000`00000000 fffff8a0`0ce3e6a8 fffffa80`08663300 fffffa80`0519c940 : nt!MmAccessFault+0xe1b
    fffff880`08b0c860 fffff800`034015f7 : fffff8a0`0cdcd580 00000000`00000003 fffff8a0`00000000 fffff800`03401fbd : nt!KiPageFault+0x16e
    fffff880`08b0c9f0 fffff800`035d058c : 00000000`00000003 00000000`00000001 fffff880`08b0cca0 fffff880`00000000 : nt!ExAllocatePoolWithTag+0x517
    fffff880`08b0cae0 fffff800`0359b86b : 00000000`00000000 00000000`00000120 00000000`00000001 00000000`01544e01 : nt!SeQueryInformationToken+0x49c
    fffff880`08b0cb70 fffff800`032d58d3 : fffffa80`080a6060 00000000`003321c0 00000000`00000000 fffffa80`08ecf2b0 : nt!NtCompareTokens+0x13b
    fffff880`08b0cc20 00000000`76d81c0a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`00cdeea8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76d81c0a
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    nt! ?? ::FNODOBFM::`string'+6061
    fffff800`032b32dd cc              int     3
    
    SYMBOL_STACK_INDEX:  1
    
    SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+6061
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME:  ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a
    
    FAILURE_BUCKET_ID:  X64_0x1a_411_VRF_nt!_??_::FNODOBFM::_string_+6061
    
    BUCKET_ID:  X64_0x1a_411_VRF_nt!_??_::FNODOBFM::_string_+6061
    
    Followup: MachineOwner
    ---------
    Caused by Verifier, as anticipated. Typically, when Verifier blames Windows processes, you either have corrupted Windows files or a hardware problem. This particular crash report points to memory.
    • Memtest86+ does not always find memory errors the first time it is run. Sometimes it needs to be run a few times for seven passes each to catch memory errors. Also, what memory do you have in the system? Can you download and install CPU-Z and upload screenshots of the CPU, Mainboard, Memory, and SPD tabs? In the SPD tab, upload an image of each slot.

      The screenshots can help determine if there is a conflict with your memory or an incompatibility.


    • Run SFC /SCANNOW Command - System File Checker up to three times to fix all errors. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations.


    • I also notice Avira installed on your system which is known to cause crashes on some systems. Please remove Avira through Start Menu -> Control Panel -> Uninstall a program and then run the Avira RegistryCleaner - Download to remove remnants. Replace with Microsoft Security Essentials - Free Antivirus for Windows to run with Windows firewall, at least to test to see if the system is then more stable.

      You may also check out the Good and Free system security combination.
    Last edited by writhziden; 26 Feb 2012 at 09:37. Reason: System file check step added
      My Computer


  2. Posts : 48
    Windows Seven Ultimate x64
    Thread Starter
       #12

    there we go, memory i know that slot 2 and 4 are supposed to increase the speed or something but yeah dunno why its still doing it, my bios settings are stock. as for avira, i think I'll leave it on, i have bad experience with MSE
      My Computer


  3. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #13

    It is your choice whether you want to keep Avira, but remember the warning that it can cause crashes on some systems. What kinds of problems did you have with MSE?

    Please upload the Mainboard, Memory, and CPU tab screenshots, as well. It will help to see what your memory settings are.

    Also, run Memtest86+ again tonight.

    Post back your results from the system file check.

    Thanks.
      My Computer


  4. Posts : 48
    Windows Seven Ultimate x64
    Thread Starter
       #14

    after installing mse (same pc) i had constant freezing and stuttering, after removing it it all went away. the file system scan showed no errors. ill edit this post in a few for the pictures of the tabs (breakfast time)


    apparently the only antivirus "guaranteed" not to cause errors is that one, it also forces updates and keeps track of things i dont necessarily want kept track of. on the whole, i dont approve of mse, I'm sure some people love it, i however do not. if it were so great it would be included in windows 7, but because it tracks us and we need to agree to separate terms, it is not. sorry for the mini rant, but you wanted the reasons i choose not to use mse, and those are the brunt of them.


    I'll keep track of this thread from my laptop, and run memtest for 7 passes or what ever.


    edit: thinking about it hell, i have nothing but time on my hands, especially since i cant use it for games now anyway ill run memtest till something happens, gotta be an error in like 12 passes right?
    Last edited by squat251; 26 Feb 2012 at 11:28.
      My Computer


  5. Posts : 48
    Windows Seven Ultimate x64
    Thread Starter
       #15

    okay, so 9 passes 0 errors. atleast as far as memtest is concerned my ram is perfect.

    is there a similar test i can run for the hard drive? perhaps there is an error there?

    should i just run a clean re-install?
      My Computer


  6. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #16

    Disk Check is the Windows method for checking the hard disk. You can also find manufacturer diagnostic tools. HD Diagnostic can be used to find the manufacturer and the appropriate diagnostic tools for your hard drive.

    Memory settings all look good, by the way. Memtest86+ also does not always find errors. Sometimes if crashes are frequent enough, you can test the memory just by running Windows with one module at a time and see if the system is stable with each module and each slot. If you find a good module in a good slot, you can test the other slots with the good module to determine if you have a bad slot. Remember to use safe ESD steps. Avoid Static Damage to Your PC | PCWorld
    Last edited by writhziden; 26 Feb 2012 at 22:28. Reason: Brute force memory testing.
      My Computer


  7. Posts : 48
    Windows Seven Ultimate x64
    Thread Starter
       #17

    disc check returned no errors
      My Computer


  8. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #18

    squat251 said:
    disc check returned no errors
    Alright, that is good news.

    Are you comfortable testing your memory modules as I laid out in my previous post?
      My Computer


  9. Posts : 48
    Windows Seven Ultimate x64
    Thread Starter
       #19

    sure ill do that a little later tonight. thats going to be 3 days of testing atleast.
      My Computer


  10. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #20

    Any news on the module testing?
      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:19.
Find Us