Random BSOD--ntoskrnl.exe

Page 2 of 2 FirstFirst 12

  1. Posts : 12
    Windows 7 64 bit
    Thread Starter
       #11

    Hello

    Thank you for your help before I had a chance to run verifier the system crashed (see dump below).
    Will run verifier now and report back.

    ==================================================
    Dump File : 041412-14055-01.dmp
    Crash Time : 14/04/2012 8:47:57 AM
    Bug Check String : MEMORY_MANAGEMENT
    Bug Check Code : 0x0000001a
    Parameter 1 : 00000000`00041289
    Parameter 2 : 000007fe`fd3a5001
    Parameter 3 : 00000000`00000594
    Parameter 4 : 020007fe`fd3a5005
    Caused By Driver : ntoskrnl.exe
    Caused By Address : ntoskrnl.exe+7cc80
    File Description : NT Kernel & System
    Product Name : Microsoft® Windows® Operating System
    Company : Microsoft Corporation
    File Version : 6.1.7601.17790 (win7sp1_gdr.120305-1505)
    Processor : x64
    Crash Address : ntoskrnl.exe+7cc80
    Stack Address 1 :
    Stack Address 2 :
    Stack Address 3 :
    Computer Name :
    Full Path : C:\Windows\Minidump\041412-14055-01.dmp
    Processors Count : 8
    Major Version : 15
    Minor Version : 7601
    Dump File Size : 275,152
    ==================================================
      My Computer


  2. Posts : 12
    Windows 7 64 bit
    Thread Starter
       #12

    Started verifier rebooted computer and got the following message:

    Files that help describe the problem:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_even_6e218faf7db0beccb4ba7cba4 58895de6e582ac8_cab_0c20e5eb\WERAB4B.tmp.appcompat.txt
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_even_6e218faf7db0beccb4ba7cba4 58895de6e582ac8_cab_0c20e5eb\WERAD9D.tmp.WERInternalMetadata.xml
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_even_6e218faf7db0beccb4ba7cba4 58895de6e582ac8_cab_0c20e5eb\WERCFFE.tmp.mdmp

    Read our privacy statement online:
    http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
    C:\Windows\system32\en-US\erofflps.txt
      My Computer


  3. Posts : 12
    Windows 7 64 bit
    Thread Starter
       #13

    forgot to post copy of the report

    Version=1
    EventType=APPCRASH
    EventTime=129788823779678751
    ReportType=2
    Consent=1
    UploadTime=129788823985599113
    ReportIdentifier=9e7cab35-8632-11e1-b164-782bcb90178a
    IntegratorReportIdentifier=9e7cab34-8632-11e1-b164-782bcb90178a
    Response.BucketId=62335131
    Response.BucketTable=4
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=svchost.exe_eventlog
    Sig[1].Name=Application Version
    Sig[1].Value=6.1.7600.16385
    Sig[2].Name=Application Timestamp
    Sig[2].Value=4a5bc3c1
    Sig[3].Name=Fault Module Name
    Sig[3].Value=wevtsvc.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=6.1.7601.17514
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=4ce7ca02
    Sig[6].Name=Exception Code
    Sig[6].Value=c0000005
    Sig[7].Name=Exception Offset
    Sig[7].Value=0000000000025797
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.768.3
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=4105
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=5e7a
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=5e7a4c883bf74a1956e3649787dbe144
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=32e6
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=32e6ea9061be0a3b2feb422f28116bcc
    UI[2]=C:\Windows\System32\svchost.exe
    UI[3]=Windows Event Log has stopped working
    UI[4]=Windows can check online for a solution to the problem.
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Windows Event Log stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=C:\Windows\System32\svchost.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\system32\kernel32.dll
    LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\system32\msvcrt.dll
    LoadedModule[5]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[6]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[7]=C:\Windows\system32\ole32.dll
    LoadedModule[8]=C:\Windows\system32\GDI32.dll
    LoadedModule[9]=C:\Windows\system32\USER32.dll
    LoadedModule[10]=C:\Windows\system32\LPK.dll
    LoadedModule[11]=C:\Windows\system32\USP10.dll
    LoadedModule[12]=C:\Windows\system32\IMM32.DLL
    LoadedModule[13]=C:\Windows\system32\MSCTF.dll
    LoadedModule[14]=C:\Windows\System32\CRYPTBASE.dll
    LoadedModule[15]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[16]=c:\windows\system32\wevtsvc.dll
    LoadedModule[17]=C:\Windows\System32\RpcRtRemote.dll
    LoadedModule[18]=C:\Windows\System32\secur32.dll
    LoadedModule[19]=C:\Windows\System32\SSPICLI.DLL
    LoadedModule[20]=C:\Windows\System32\credssp.dll
    LoadedModule[21]=C:\Windows\system32\WS2_32.dll
    LoadedModule[22]=C:\Windows\system32\NSI.dll
    LoadedModule[23]=C:\Windows\system32\mswsock.dll
    LoadedModule[24]=C:\Windows\System32\wshtcpip.dll
    LoadedModule[25]=C:\Windows\System32\wship6.dll
    LoadedModule[26]=C:\Windows\System32\GPAPI.dll
    LoadedModule[27]=c:\windows\system32\audiosrv.dll
    LoadedModule[28]=c:\windows\system32\POWRPROF.dll
    LoadedModule[29]=C:\Windows\system32\SETUPAPI.dll
    LoadedModule[30]=C:\Windows\system32\CFGMGR32.dll
    LoadedModule[31]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[32]=C:\Windows\system32\DEVOBJ.dll
    LoadedModule[33]=c:\windows\system32\MMDevAPI.DLL
    LoadedModule[34]=c:\windows\system32\PROPSYS.dll
    LoadedModule[35]=c:\windows\system32\AVRT.dll
    LoadedModule[36]=C:\Windows\system32\CLBCatQ.DLL
    LoadedModule[37]=C:\Windows\System32\WINSTA.dll
    LoadedModule[38]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[39]=C:\Windows\System32\CRYPTSP.dll
    LoadedModule[40]=C:\Windows\system32\rsaenh.dll
    LoadedModule[41]=C:\Windows\System32\audioses.dll
    LoadedModule[42]=c:\windows\system32\lmhsvc.dll
    LoadedModule[43]=c:\windows\system32\IPHLPAPI.DLL
    LoadedModule[44]=c:\windows\system32\WINNSI.DLL
    LoadedModule[45]=c:\windows\system32\nrpsrv.DLL
    LoadedModule[46]=c:\windows\system32\dhcpcore.dll
    LoadedModule[47]=c:\windows\system32\DNSAPI.dll
    LoadedModule[48]=C:\Windows\System32\firewallapi.dll
    LoadedModule[49]=C:\Windows\System32\VERSION.dll
    LoadedModule[50]=C:\Windows\System32\dhcpcore6.dll
    LoadedModule[51]=C:\Windows\System32\dhcpcsvc6.DLL
    LoadedModule[52]=C:\Windows\System32\dhcpcsvc.DLL
    LoadedModule[53]=C:\Windows\system32\NLAapi.dll
    LoadedModule[54]=C:\Windows\system32\napinsp.dll
    LoadedModule[55]=C:\Windows\system32\pnrpnsp.dll
    LoadedModule[56]=C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
    LoadedModule[57]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[58]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[59]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[60]=C:\Windows\System32\winrnr.dll
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    State[1].Key=DataRequest
    State[1].Value=iData=1/nDumpFile=//Upload//iCab//d5ebc2ae97c8488081c8a3fc1136eba9.cab/nDumpServer=watson.microsoft.com/nResponseServer=watson.microsoft.com/nResponseURL=//dw//StageFour64.asp?iBucket=62335131&szCab=d5ebc2ae97c8488081c8a3fc1136eba9.cab&EventType=AppCrash64&Buc ketHash=d5689aa4a60480c5787913a8ba0ad130&MID=F3B9E0E5-1680-4537-9F85-B0859A23534F/nBucket=62335131/nBucketTable=4/nResponse=1/n
    FriendlyEventName=Stopped working
    ConsentKey=APPCRASH
    AppName=Windows Event Log
    AppPath=C:\Windows\System32\svchost.exe
      My Computer


  4. Posts : 12
    Windows 7 64 bit
    Thread Starter
       #14

    Crashed while running verifier copy of dump

    Dump File : 041412-14242-01.dmp
    Crash Time : 14/04/2012 10:29:30 AM
    Bug Check String :
    Bug Check Code : 0x00000116
    Parameter 1 : fffffa80`07b96010
    Parameter 2 : fffff880`01207ae4
    Parameter 3 : 00000000`00000000
    Parameter 4 : 00000000`0000000d
    Caused By Driver : dxgkrnl.sys
    Caused By Address : dxgkrnl.sys+5d000
    File Description :
    Product Name :
    Company :
    File Version :
    Processor : x64
    Crash Address : ntoskrnl.exe+7cc80
    Stack Address 1 :
    Stack Address 2 :
    Stack Address 3 :
    Computer Name :
    Full Path : C:\Windows\Minidump\041412-14242-01.dmp
    Processors Count : 8
    Major Version : 15
    Minor Version : 7601
    Dump File Size : 304,848
      My Computer


  5. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #15

    We need the actual .dmp files. Please provide the full crash reports for these crashes.

    Also, have you done the steps for the DirectX re-install and display card drivers re-install?
      My Computer


  6. Posts : 12
    Windows 7 64 bit
    Thread Starter
       #16

    writhziden said:
    Also, have you done the steps for the DirectX re-install and display card drivers re-install?
    --Yes

    I attached a copy of the dmp
      My Computer


  7. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #17

    Code:
    Loading Dump File [D:\Kingston\BSODDmpFiles\alfred67\041412-14242-01\041412-14242-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
    Machine Name:
    Kernel base = 0xfffff800`03416000 PsLoadedModuleList = 0xfffff800`0365a650
    Debug session time: Sat Apr 14 08:28:46.584 2012 (UTC - 6:00)
    System Uptime: 0 days 0:48:53.427
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .................
    Loading User Symbols
    Loading unloaded module list
    .....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 116, {fffffa8007b96010, fffff88001207ae4, 0, d}
    
    Unable to load image \SystemRoot\system32\DRIVERS\atikmpag.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for atikmpag.sys
    *** ERROR: Module load completed but symbols could not be loaded for atikmpag.sys
    Probably caused by : atikmpag.sys ( atikmpag+7ae4 )
    
    Followup: MachineOwner
    ---------
    
    6: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    VIDEO_TDR_FAILURE (116)
    Attempt to reset the display driver and recover from timeout failed.
    Arguments:
    Arg1: fffffa8007b96010, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
    Arg2: fffff88001207ae4, The pointer into responsible device driver module (e.g. owner tag).
    Arg3: 0000000000000000, Optional error code (NTSTATUS) of the last failed operation.
    Arg4: 000000000000000d, Optional internal context dependent data.
    
    Debugging Details:
    ------------------
    
    
    FAULTING_IP: 
    atikmpag+7ae4
    fffff880`01207ae4 4883ec28        sub     rsp,28h
    
    DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
    
    CUSTOMER_CRASH_COUNT:  1
    
    BUGCHECK_STR:  0x116
    
    PROCESS_NAME:  System
    
    CURRENT_IRQL:  0
    
    STACK_TEXT:  
    fffff880`02bc3888 fffff880`04462000 : 00000000`00000116 fffffa80`07b96010 fffff880`01207ae4 00000000`00000000 : nt!KeBugCheckEx
    fffff880`02bc3890 fffff880`04461d87 : fffff880`01207ae4 fffffa80`07b96010 fffffa80`0acba010 fffffa80`0b1f7010 : dxgkrnl!TdrBugcheckOnTimeout+0xec
    fffff880`02bc38d0 fffff880`04508f07 : fffffa80`07b96010 00000000`00000000 fffffa80`0acba010 fffffa80`0b1f7010 : dxgkrnl!TdrIsRecoveryRequired+0x21f
    fffff880`02bc3900 fffff880`04532b75 : 00000000`ffffffff 00000000`0002ddf7 00000000`00000000 00000000`00000002 : dxgmms1!VidSchiReportHwHang+0x40b
    fffff880`02bc39e0 fffff880`045312bb : 00000000`00000102 00000000`00000001 00000000`0002ddf7 00000000`00000000 : dxgmms1!VidSchiCheckHwProgress+0x71
    fffff880`02bc3a10 fffff880`045042c6 : ffffffff`ff676980 fffffa80`0b1f7010 00000000`00000000 00000000`00000000 : dxgmms1!VidSchiWaitForSchedulerEvents+0x1fb
    fffff880`02bc3ab0 fffff880`04530e7a : 00000000`00000000 fffffa80`0c694920 00000000`00000080 fffffa80`0b1f7010 : dxgmms1!VidSchiScheduleCommandToRun+0x1da
    fffff880`02bc3bc0 fffff800`0372cfda : 00000000`fffffc32 fffffa80`0b1fa8c0 fffffa80`069ae9e0 fffffa80`0b1fa8c0 : dxgmms1!VidSchiWorkerThread+0xba
    fffff880`02bc3c00 fffff800`034839c6 : fffff800`03607e80 fffffa80`0b1fa8c0 fffff800`03615cc0 fffffa80`0b1d9ee0 : nt!PspSystemThreadStartup+0x5a
    fffff880`02bc3c40 00000000`00000000 : fffff880`02bc4000 fffff880`02bbe000 fffff880`02bc23c0 00000000`00000000 : nt!KxStartSystemThread+0x16
    
    
    STACK_COMMAND:  .bugcheck ; kb
    
    FOLLOWUP_IP: 
    atikmpag+7ae4
    fffff880`01207ae4 4883ec28        sub     rsp,28h
    
    SYMBOL_NAME:  atikmpag+7ae4
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: atikmpag
    
    IMAGE_NAME:  atikmpag.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4f597fca
    
    FAILURE_BUCKET_ID:  X64_0x116_VRF_IMAGE_atikmpag.sys
    
    BUCKET_ID:  X64_0x116_VRF_IMAGE_atikmpag.sys
    
    Followup: MachineOwner
    ---------
    The crash was Verifier enabled, which is good. In regards to the crash:
    • H2SO4 said:
      These are all stop 0x116 VIDEO_TDR_FAILURE conditions.

      It's not a true crash, in the sense that the bluescreen was initiated only because the combination of video driver and video hardware was being unresponsive, and not because of any synchronous processing exception.

      Since Vista, the "Timeout Detection and Recovery" (TDR) components of the OS video subsystem have been capable of doing some truly impressive things to try to recover from issues which would have caused earlier OSs like XP to crash. As a last resort, the TDR subsystem sends the video driver a "please restart yourself now!" command and waits a few seconds. If there's no response, the OS concludes that the video driver/hardware combo has truly collapsed in a heap, and it fires off that stop 0x116 BSOD.

      If playing with video driver versions hasn't helped, make sure the box is not overheating. Try removing a side panel and aiming a big mains fan straight at the motherboard and GPU. Run it like that for a few hours or days - long enough to ascertain whether cooler temperatures make a difference. If so, it might be as simple as dust buildup and subsequently inadequate cooling.
      The above quote was taken from https://www.sevenforums.com/crashes-d...tml#post280172, which is linked to in usasma's thread about this error. Closely follow the first three posts of usasma's thread outlining STOP 0x116: VIDEO_TDR_ERROR troubleshooting and proceed through each step. Let us know if you need further help.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:53.
Find Us