Blue screen of death Windows 7

writhziden said:

Strange regarding the administrators... Good work with F-Secure. Hopefully that will make sure there are no conflicts with the security software.

That looks good for now. See how the system responds for a while and report back in a few days. Best of luck! :)

Hi, I write back because I just got BSoD again =/, after almost three days of PC running smoothly, no problems at all, now I just came back from BSoD with this error:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 2058

Additional information about the problem:
BCCode: 3b
BCP1: 00000000C0000005
BCP2: FFFFF800031B43BE
BCP3: FFFFF880074ECDA0
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Sorry to bother you again =/ you think there's something else I can do to fix this problem?

I cannot tell if it is the same problem or a new one from the information provided... Please provide us with the recent crash reports. Given that you had Advanced System Care installed, I also wonder if it would not be best to do a Repair Install to clean up any conflicts it might have caused with Windows.

writhziden said:

I cannot tell if it is the same problem or a new one from the information provided... Please provide us with the recent crash reports. Given that you had Advanced System Care installed, I also wonder if it would not be best to do a Repair Install to clean up any conflicts it might have caused with Windows.

Ok, I attached the results, I was getting BSoD's even before I installed Advanced system care5, but if you think I need a repair windows, I will do it.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\SkidRow\Windows_NT6_BSOD_jcgriff2\041312-27190-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`0300a000 PsLoadedModuleList = 0xfffff800`0324e650
Debug session time: Fri Apr 13 19:43:32.157 2012 (UTC - 6:00)
System Uptime: 0 days 16:25:27.578
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff800031b43be, fffff880074ecda0, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+2de )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800031b43be, Address of the instruction which caused the bugcheck
Arg3: fffff880074ecda0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExAllocatePoolWithTag+2de
fffff800`031b43be 4d03fc          add     r15,r12

CONTEXT:  fffff880074ecda0 -- (.cxr 0xfffff880074ecda0)
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000004
rdx=0000000000000001 rsi=0000000000000025 rdi=0000000000000001
rip=fffff800031b43be rsp=fffff880074ed780 rbp=0000000000001000
 r8=0000000000000001  r9=fffff8000300a000 r10=0000000000000001
r11=0000000000000001 r12=fffffa800395c140 r13=0000000000000000
r14=0000000000000002 r15=0000000000000380
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!ExAllocatePoolWithTag+0x2de:
fffff800`031b43be 4d03fc          add     r15,r12
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  Atlantica.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800031b43be

STACK_TEXT:  
fffff880`074ed780 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x2de


FOLLOWUP_IP: 
nt!ExAllocatePoolWithTag+2de
fffff800`031b43be 4d03fc          add     r15,r12

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExAllocatePoolWithTag+2de

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ec79dd2

STACK_COMMAND:  .cxr 0xfffff880074ecda0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+2de

BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+2de

Followup: MachineOwner
---------

These crashes are generally caused by graphics card drivers misbehaving. Bug Check 0x3B: SYSTEM_SERVICE_EXCEPTION

There are other causes, as well, but we should start there.


As to your Advanced System Care 5, I am not sure a repair install is necessary, but it also couldn't hurt and would probably help any conflicts that the software might have caused. If you decide to do the repair install, backup any important data first, just in case.


Re-install or install the latest drivers for your display card. Your current drivers may be corrupt and/or outdated. Use the following method to re-install the drivers.

1. Download the latest drivers for your display card(s)
2. Click Start Menu
3. Click Control Panel
4. Click Uninstall a program
5. For NVIDIA:
   • Uninstall the NVIDIA Graphics Driver (this should uninstall all NVIDIA software and drivers)
   • Restart your computer
   • Make sure NVIDIA 3D Vision Driver, NVIDIA 3D Vision Video Player, NVIDIA HD Audio Driver, and NVIDIA PhysX System Software are not still listed under Uninstall a program through Control Panel
   • If any remain of the above, uninstall one at a time
   • If asked to restart after uninstalling any of the above, do so, and continue uninstalling any remaining NVIDIA items until all are removed
6. Restart your computer after uninstalling drivers for all display cards
7. Install the latest driver for the display cards once Windows starts

writhziden said:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\SkidRow\Windows_NT6_BSOD_jcgriff2\041312-27190-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`0300a000 PsLoadedModuleList = 0xfffff800`0324e650
Debug session time: Fri Apr 13 19:43:32.157 2012 (UTC - 6:00)
System Uptime: 0 days 16:25:27.578
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff800031b43be, fffff880074ecda0, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+2de )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800031b43be, Address of the instruction which caused the bugcheck
Arg3: fffff880074ecda0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExAllocatePoolWithTag+2de
fffff800`031b43be 4d03fc          add     r15,r12

CONTEXT:  fffff880074ecda0 -- (.cxr 0xfffff880074ecda0)
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000004
rdx=0000000000000001 rsi=0000000000000025 rdi=0000000000000001
rip=fffff800031b43be rsp=fffff880074ed780 rbp=0000000000001000
 r8=0000000000000001  r9=fffff8000300a000 r10=0000000000000001
r11=0000000000000001 r12=fffffa800395c140 r13=0000000000000000
r14=0000000000000002 r15=0000000000000380
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!ExAllocatePoolWithTag+0x2de:
fffff800`031b43be 4d03fc          add     r15,r12
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  Atlantica.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800031b43be

STACK_TEXT:  
fffff880`074ed780 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x2de


FOLLOWUP_IP: 
nt!ExAllocatePoolWithTag+2de
fffff800`031b43be 4d03fc          add     r15,r12

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExAllocatePoolWithTag+2de

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ec79dd2

STACK_COMMAND:  .cxr 0xfffff880074ecda0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+2de

BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+2de

Followup: MachineOwner
---------

These crashes are generally caused by graphics card drivers misbehaving. Bug Check 0x3B: SYSTEM_SERVICE_EXCEPTION

There are other causes, as well, but we should start there.


As to your Advanced System Care 5, I am not sure a repair install is necessary, but it also couldn't hurt and would probably help any conflicts that the software might have caused. If you decide to do the repair install, backup any important data first, just in case.


Re-install or install the latest drivers for your display card. Your current drivers may be corrupt and/or outdated. Use the following method to re-install the drivers.

1. Download the latest drivers for your display card(s)
2. Click Start Menu
3. Click Control Panel
4. Click Uninstall a program
5. For NVIDIA:
   
   • Uninstall the NVIDIA Graphics Driver (this should uninstall all NVIDIA software and drivers)
   • Restart your computer
   • Make sure NVIDIA 3D Vision Driver, NVIDIA 3D Vision Video Player, NVIDIA HD Audio Driver, and NVIDIA PhysX System Software are not still listed under Uninstall a program through Control Panel
   • If any remain of the above, uninstall one at a time
   • If asked to restart after uninstalling any of the above, do so, and continue uninstalling any remaining NVIDIA items until all are removed
   
   
6. Restart your computer after uninstalling drivers for all display cards
7. Install the latest driver for the display cards once Windows starts

Hi, it's me bothering again =/, once again, PC worked smoothly for 3 days, and today I got again the blue screen of death, I'll attach the new files of the report. I hope this has a solution =(, thanks for all your help and sorry to keep bothering you.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 2058

Additional information about the problem:
BCCode: 3b
BCP1: 00000000C0000005
BCP2: FFFFF8000339D6C4
BCP3: FFFFF88009AB7030
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Alright, let's check for application/services conflicts with the system. Troubleshoot Application Conflicts by Performing a Clean Startup

writhziden said:

Alright, let's check for application/services conflicts with the system. Troubleshoot Application Conflicts by Performing a Clean Startup

Hi, I did that except for the antivirus and video drivers, and I still got the blue screen death =s, I'm losing hope, since I can't pass a couple of days with clean startup (no antivirus and no video control panel), to know if that is the exact problem...I have got 3 BSoD's in these last two days =/.

I see SlimDrivers on your system from the latest crash report. Automatic driver update software often finds updated drivers for different hardware than is actually on the system being updated. While you did not have this on your system when the crashes began, I would still recommend avoiding such software. If you need help finding driver updates, please start a thread in Drivers - Windows 7 Forums instead of relying on software that does not necessarily know what hardware is in your system.


I would recommend some hardware checks going forward:

• If you are overclocking any hardware, please stop.
  
  
• Monitor temperatures during the following tests.
  
  Use the following programs to monitor the temperatures.
  • Real Temp is a good CPU temperature monitor.
  • Speccy - System Information - Free Download will monitor all hardware temperatures.
  • HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools can be inaccurate for CPU temperatures, but is a good program for GPU temperature monitoring.
  
  
  • Use FurMark: VGA Stress Test, Graphics Card and GPU Stability Test, Burn-in Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net to test the graphics card GPU. Let it run until the GPU temperatures even out or until the GPU temperatures reach a dangerous level (you can find the max temperature for your card on either the nVidia or AMD sites; if you are not sure, ask us). The goal is to get a steady temperature, find out if the GPU is overheating, or to see if there are any artifacts present in the test itself: look for strange pixelated patterns on the screen or colors that do not look like they belong. Then use the |MG| Video Memory Stress Test 1.7.116 Download to test your graphics card memory. Let the memory test run for at least seven passes; the more the better.
    
    
  • Run Hardware - Stress Test With Prime95 to determine any hardware problems. Run all three tests for a few hours each. If you get errors, stop the test and post back here.
    
    
  • Follow the steps for doing a CPU stress test using IntelBurnTest
  
  
• Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete (run them an hour before bed each of the next two nights and check before going to sleep that they are still running).
  
  For Part 3: If You Have Errors: If you swap any memory components, follow these steps for ESD safety:
  
  1. Shut down and turn off your computer.
  2. Unplug all power supplies to the computer (AC Power then battery for laptops, AC power for desktops)
  3. Hold down the power button for 30 seconds to close the circuit and ensure all power drains from components.
  4. Make sure you are grounded by using proper grounding techniques, i.e. work on an anti-static workbench, anti-static desk, or an anti-static pad. Hold something metallic while touching it to the anti-static surface, or use an anti-static wristband to attach to the anti-static material while working.
  
  Once these steps have been followed, it is safe to remove and replace components within your computer.

writhziden said:

I see SlimDrivers on your system from the latest crash report. Automatic driver update software often finds updated drivers for different hardware than is actually on the system being updated. While you did not have this on your system when the crashes began, I would still recommend avoiding such software. If you need help finding driver updates, please start a thread in Drivers - Windows 7 Forums instead of relying on software that does not necessarily know what hardware is in your system.


I would recommend some hardware checks going forward:

• If you are overclocking any hardware, please stop.
• Monitor temperatures during the following tests.
  Use the following programs to monitor the temperatures.
  • Real Temp is a good CPU temperature monitor.
  • Speccy - System Information - Free Download will monitor all hardware temperatures.
  • HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools can be inaccurate for CPU temperatures, but is a good program for GPU temperature monitoring.
  
  
  
  

  • Use FurMark: VGA Stress Test, Graphics Card and GPU Stability Test, Burn-in Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net to test the graphics card GPU. Let it run until the GPU temperatures even out or until the GPU temperatures reach a dangerous level (you can find the max temperature for your card on either the nVidia or AMD sites; if you are not sure, ask us). The goal is to get a steady temperature, find out if the GPU is overheating, or to see if there are any artifacts present in the test itself: look for strange pixelated patterns on the screen or colors that do not look like they belong. Then use the |MG| Video Memory Stress Test 1.7.116 Download to test your graphics card memory. Let the memory test run for at least seven passes; the more the better.
  • Run Hardware - Stress Test With Prime95 to determine any hardware problems. Run all three tests for a few hours each. If you get errors, stop the test and post back here.
  • Follow the steps for doing a CPU stress test using IntelBurnTest
• Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete (run them an hour before bed each of the next two nights and check before going to sleep that they are still running).
  
  For Part 3: If You Have Errors: If you swap any memory components, follow these steps for ESD safety:
  
  1. Shut down and turn off your computer.
  2. Unplug all power supplies to the computer (AC Power then battery for laptops, AC power for desktops)
  3. Hold down the power button for 30 seconds to close the circuit and ensure all power drains from components.
  4. Make sure you are grounded by using proper grounding techniques, i.e. work on an anti-static workbench, anti-static desk, or an anti-static pad. Hold something metallic while touching it to the anti-static surface, or use an anti-static wristband to attach to the anti-static material while working.
  
  Once these steps have been followed, it is safe to remove and replace components within your computer.

Ok, before I run all these tests, is it better if I have all programs closed and not using the PC? Or I can use the PC while running the tests?

It is preferred that you do not use the PC. However, you can use the PC, but make sure you monitor the temperatures to make sure hardware does not overheat. Your system may also be a bit sluggish during some of the tests. For FurMark, the test is fairly easy and should go quickly, so please try not to run other programs during that test. You should be monitoring FurMark, anyway, to make sure no artifacts appear.

Also, keep in mind that if your system crashes during a test and you are doing other tasks, it will be difficult to determine whether the test caused the crash (and therefore the hardware being tested), or if the other tasks caused it.