frequent BSOD caused by ntoskrnl.exe and many others on windows 7

arei33 · 28 Feb 2012

hi there!!! i'm finally done running memtest after more than 12hrs....there was no error after 7 passes.... i have now enabled the driver verifier and my netbook crashed once already and i have restarted it...what do i do now?? is the driver verifier still running?? when do i have to unable it?? and what should i do next??

ePeen · 28 Feb 2012

arei33 said:

hi there!!! i'm finally done running memtest after more than 12hrs....there was no error after 7 passes.... i have now enabled the driver verifier and my netbook crashed once already and i have restarted it...what do i do now?? is the driver verifier still running?? when do i have to unable it?? and what should i do next??

Hi,

If your system crashed after enabling Driver Verifier, disable it as shown in the guide I have posted earlier. If you cannot get into Windows, boot into Safe Mode and disable it there.

Once you've disabled it, you'll want to attach the dump file Driver Verifier has generated. It'll be the most recent dump file, so go ahead and attach it :)

arei33 · 28 Feb 2012

ok...i have disabled the driver verifier.... and here's the dmp file that it has generated...

arei33 · 04 Mar 2012

hi there!!! still haven't found a solution yet??

writhziden · 05 Mar 2012

Code:

Loading Dump File [D:\Kingston\BSODDmpFiles\arei33\dmp-file\022812-22885-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`01c0f000 PsLoadedModuleList = 0xfffff800`01e54670
Debug session time: Tue Feb 28 08:17:15.588 2012 (UTC - 7:00)
System Uptime: 0 days 0:04:03.603
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41287, 8e1, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+46485 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041287, The subtype of the bugcheck.
Arg2: 00000000000008e1
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41287

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880021636f0 -- (.trap 0xfffff880021636f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=00000000000008e1
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80001c91583 rsp=fffff88002163880 rbp=0000000000000002
 r8=00000000000008e1  r9=fffffffffffffffd r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!KeFlushMultipleRangeTb+0x43:
fffff800`01c91583 8b01            mov     eax,dword ptr [rcx] ds:1e80:00000000`000008e1=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80001c1ed7e to fffff80001c8bc40

STACK_TEXT:  
fffff880`02163588 fffff800`01c1ed7e : 00000000`0000001a 00000000`00041287 00000000`000008e1 00000000`00000000 : nt!KeBugCheckEx
fffff880`02163590 fffff800`01c89d6e : 00000000`00000000 00000000`000008e1 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x46485
fffff880`021636f0 fffff800`01c91583 : 00000000`00000000 00000000`00000001 00000000`00000000 97500000`4b504c46 : nt!KiPageFault+0x16e
fffff880`02163880 fffff800`01c76425 : 00000000`00000002 1ba00000`13a01025 fffff880`02163ba0 00000000`000009ba : nt!KeFlushMultipleRangeTb+0x43
fffff880`02163950 fffff800`01d07ac5 : fffffa80`02564ec8 fffff800`00000001 00000000`00000001 fffff880`02163bb0 : nt!MiAgeWorkingSet+0x37b
fffff880`02163b00 fffff800`01c76826 : 00000000`000000f5 00000000`00000000 fffffa80`00000000 00000000`00000006 : nt! ?? ::FNODOBFM::`string'+0x4d786
fffff880`02163b80 fffff800`01c76cd3 : 00000000`00000008 fffff880`02163c10 00000000`00000001 fffffa80`00000000 : nt!MmWorkingSetManager+0x6e
fffff880`02163bd0 fffff800`01f26fee : fffffa80`0158a6e0 00000000`00000080 fffffa80`0156f5f0 00000000`00000001 : nt!KeBalanceSetManager+0x1c3
fffff880`02163d40 fffff800`01c7d5e6 : fffff800`01e01e80 fffffa80`0158a6e0 fffff800`01e0fcc0 0508abba`0f410000 : nt!PspSystemThreadStartup+0x5a
fffff880`02163d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+46485
fffff800`01c1ed7e cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+46485

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

FAILURE_BUCKET_ID:  X64_0x1a_41287_VRF_nt!_??_::FNODOBFM::_string_+46485

BUCKET_ID:  X64_0x1a_41287_VRF_nt!_??_::FNODOBFM::_string_+46485

Followup: MachineOwner
---------

Points to memory issues.

Download and install CPU-Z and Upload screenshots of the CPU, Mainboard, Memory, and SPD tabs. In the SPD tab, upload an image of each slot.

Also, go into your BIOS and post all Voltages (CPU, RAM, NB, IMC, etc.) and all RAM settings (timings, frequency, etc.)

Thanks to Dave76 for help learning RAM Stability

Also, are you still having problems with your hard drive being filled up with space for no apparent reason? This usually indicates malware/viruses. Scan for viruses with a full scan using the free version (do not start the trial) of Malwarebytes : Free anti-malware, anti-virus and spyware removal download and see the Good and Free system security combination. for better security steps and scanning tools.

Also, please follow the https://www.sevenforums.com/crashes-d...tructions.html to provide us with more details regarding your crashes and use System Info - See Your System Specs as a guide to fill out your system specs so we know more about your system and can provide more helpful troubleshooting steps.

arei33 · 05 Mar 2012

hi there thanks for the reply.... here's the cpu-z screenshots first...i still need to figure out how to do the bios thing....

arei33 · 05 Mar 2012

i still got a problem which i don't know if related to my bsod problem... it's when i'm watching a video in youtube and try to switch to full screen...i sometimes get this:

arei33 · 05 Mar 2012

here's the reports i've got from following the posting instructions for bsods... and i've already filled out my system specs.

arei33 · 05 Mar 2012

oh what to do?? i accidentally pressed start the trial of malwarebytes...how can i get it back to free version?? now i'm running full scan using the trial version...

writhziden · 05 Mar 2012

arei33 said:

oh what to do?? i accidentally pressed start the trial of malwarebytes...how can i get it back to free version?? now i'm running full scan using the trial version...

You will probably have to uninstall it when finished. Let us know if it finds any viruses/malware and wait for us to respond before uninstalling it.

Check your hardware since your crashes are indicating hardware related crashes.

Monitor temperatures during the following tests.

Use the following programs to monitor the temperatures.
- Real Temp is a good CPU temperature monitor.
- Speccy - System Information - Free Download will monitor all hardware temperatures.
- HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools can be inaccurate for CPU temperatures, but is a good program for GPU temperature monitoring.
- Use FurMark: VGA Stress Test, Graphics Card and GPU Stability Test, Burn-in Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net to test the graphics card GPU. Then use the |MG| Video Memory Stress Test 1.7.116 Download to test your graphics card memory. Let the memory test run for at least seven passes; the more the better.
- Run Hardware - Stress Test With Prime95 to determine any hardware problems. Run all three tests for a few hours each. If you get errors, stop the test and post back here.