Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Random BSOD / After waking from Sleep! PLZ HELP!

05 Oct 2009   #11
iMarcintosh

Microsoft Windows 7 Ultimate (6.1.7600)
 
 

Okay, I took your advice and done that so that driver verification is ON. This made me lol: As soon as it finished saying "Welcome" BOOM: BSOD, I debugged and it was the synTP.sys file. From past experience, that is my touch pad driver. I uninstalled, rebooted, and again after the "Welcome" BOOM: This BSOD Occured, and this one is the
Quote:
atikmdag.sys
file. Since I can only boot into safe mode (or in Safe Mode w/ networking like I am in now) I cannot uninstall the ATI Catalyst Suite due to the "Windows Installer Service" Cannot be loaded in Safe Mode. Here is the BSOD I got:

Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\100509-31418-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82a17000 PsLoadedModuleList = 0x82b5f810
Debug session time: Mon Oct  5 17:41:58.528 2009 (GMT-4)
System Uptime: 0 days 0:01:05.666
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.....
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 000000f6, Referencing user handle as KernelMode.
Arg2: 0000048c, Handle value being referenced.
Arg3: ab2a2700, Address of the current process.
Arg4: 8f634c7a, Address inside the driver that is performing the incorrect reference.

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys

BUGCHECK_STR:  0xc4_f6

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  CCC.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 82d4bf03 to 82af3d10

STACK_TEXT:  
ae7497d4 82d4bf03 000000c4 000000f6 0000048c nt!KeBugCheckEx+0x1e
ae7497f4 82d50766 0000048c ab2a2700 a04f1cc8 nt!VerifierBugCheckIfAppropriate+0x30
ae749888 82c3b26c 0000048c ae749ba0 00000000 nt!VfCheckUserHandle+0x14f
ae7498bc 82c3b126 0000048c 000f001f 00000000 nt!ObReferenceObjectByHandleWithTag+0x13b
ae7498e0 82d59736 0000048c 000f001f 00000000 nt!ObReferenceObjectByHandle+0x21
ae749908 8f634c7a 0000048c 000f001f 00000000 nt!VerifierObReferenceObjectByHandle+0x21
WARNING: Stack unwind information not available. Following frames may be wrong.
ae749938 8f61e961 00000000 ae749ba0 8e49efc0 atikmdag+0x29c7a
ae749958 8f621b87 ae749ba0 8e49efc0 ae749ba0 atikmdag+0x13961
ae749974 8f61b381 ae749b90 00000020 ae749ba0 atikmdag+0x16b87
ae7499d8 8f61b8ac 00000000 ae749b0c 00000038 atikmdag+0x10381
ae749a04 8fac8435 8e49efc0 ae749a60 87035000 atikmdag+0x108ac
ae749a2c 8fac7e4a ae749a60 21dfffdb 03dedf50 dxgkrnl!DXGADAPTER::DdiEscape+0x46
ae749d28 82a5a42a 03dedf50 03dedf8c 77cd64f4 dxgkrnl!DxgkEscape+0x4c8
ae749d28 77cd64f4 03dedf50 03dedf8c 77cd64f4 nt!KiFastCallEntry+0x12a
03dedf8c 00000000 00000000 00000000 00000000 0x77cd64f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
atikmdag+29c7a
8f634c7a 3bc7            cmp     eax,edi

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  atikmdag+29c7a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atikmdag

IMAGE_NAME:  atikmdag.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a162550

FAILURE_BUCKET_ID:  0xc4_f6_VRF_atikmdag+29c7a

BUCKET_ID:  0xc4_f6_VRF_atikmdag+29c7a

Followup: MachineOwner
---------



My System SpecsSystem Spec
.
05 Oct 2009   #12
iMarcintosh

Microsoft Windows 7 Ultimate (6.1.7600)
 
 

I turned Verifier Off and am now going to uninstall the catalyst suite and just leave the ATI Drivers. I will post all of my notes and progress here. Again everyone, I want to extend a huge thanks for everyone helping me!
My System SpecsSystem Spec
05 Oct 2009   #13
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by iMarcintosh View Post
I turned Verifier Off and am now going to uninstall the catalyst suite and just leave the ATI Drivers. I will post all of my notes and progress here. Again everyone, I want to extend a huge thanks for everyone helping me!
Great job with the troubleshooting. I hope it leads to a problem resolution for you
My System SpecsSystem Spec
.

08 Oct 2009   #14
iMarcintosh

Microsoft Windows 7 Ultimate (6.1.7600)
 
 

Hey everybody, I'm sorry its been 2 days since I have posted, but here is what I have come up with. Driver verifier passes and gives me no BSOD as long as my TouchPad and Video Card Drivers are not present. Upon installing the Video Drivers from ATI, it BSOD's pretty quick when the ATI Installer begins scanning my graphics hardware. Same way when I run the ATI Driver Package FOR Windows 7 from Toshiba for my notebook. Model Content Page. (Link to my computers drivers) Now, this morning when I turned on my computer, before I had the chance to login (after hibernation), the computer did as it did in the video of it I posted on YouTube from when I was running the RC. (Yes, that IS my computer)

So at this point, I'm open to any suggestions at all on what to do. For refrence here is a copy of this mornings computer conniption fit.
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\100809-27300-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82a1d000 PsLoadedModuleList = 0x82b65810
Debug session time: Thu Oct  8 07:01:46.301 2009 (GMT-4)
System Uptime: 0 days 13:22:42.423
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
..........
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 8520d000, The pool entry we were looking for within the page.
Arg3: 8520d300, The next pool entry.
Arg4: 08600000, (reserved)

Debugging Details:
------------------

GetPointerFromAddress: unable to read from 82b85718
Unable to read MiSystemVaType memory at 82b65160

BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 82b85718
Unable to read MiSystemVaType memory at 82b65160
 8520d000 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 82c3e97a to 82b3c1b6

STACK_TEXT:  
8cb3fc4c 82c3e97a 8520d008 e56c6946 000000f8 nt!ExFreePoolWithTag+0x1b1
8cb3fc70 82c3e6f9 8520d038 8520d020 00000000 nt!ObpFreeObject+0x275
8cb3fc84 82a85f60 00000000 000c0000 00000000 nt!ObpRemoveObjectRoutine+0x5e
8cb3fc98 82a85ed0 8520d038 82c4e9f5 85b8b278 nt!ObfDereferenceObjectWithTag+0x88
8cb3fca0 82c4e9f5 85b8b278 85b8b2a0 82b87680 nt!ObfDereferenceObject+0xd
8cb3fccc 82a48f19 85b8b278 00000000 00000000 nt!MiSegmentDelete+0x191
8cb3fd28 82a48e31 84f0c020 00000000 00000000 nt!MiProcessDereferenceList+0xdb
8cb3fd50 82c2b66d 00000000 a8f8e878 00000000 nt!MiDereferenceSegmentThread+0xc5
8cb3fd90 82add0d9 82a48d6a 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExFreePoolWithTag+1b1
82b3c1b6 cc              int     3

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExFreePoolWithTag+1b1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc007

FAILURE_BUCKET_ID:  0x19_20_nt!ExFreePoolWithTag+1b1

BUCKET_ID:  0x19_20_nt!ExFreePoolWithTag+1b1

Followup: MachineOwner
---------
My System SpecsSystem Spec
08 Oct 2009   #15
H2SO4

Win7x64
 
 

Driver verifier (DV) is not one but around a dozen different mechanisms for trying to spot flaws in drivers and even trigger them on purpose. A potential result of running DV with all of its options enabled is to expose driver flaws that have nothing to do with the original BSOD problem that drove you to DV in the first place. In other words, if it wasn't for DV, that flaw in driverX.sys would stay quietly dormant on the vast majority of systems.

In your specific case, the original issue from the first page of your thread is a problem called "pool corruption". One or more drivers are overwriting "pool" memory regions which do not belong to them. Since you have the luxury of knowing the precise nature of the driver flaw you're seeking to isolate, you may want to deactivate all the other DV extras and use only the mechanism which looks for pool corruption.

"Special Pool" is a subcomponent of DV which focuses solely on pool corruption. This is how you'd activate only special pool, without the other DV bits:

VERIFIER /FLAGS 1 /ALL

Optionally, you can add a "/volatile" switch which will make the settings bite immediately, even without rebooting, but with /volatile the act of rebooting then reverts back to the previous state (deactivates volatile DV settings).

You might want to try testing that for a bit. The aim is to get a BSOD where DV "special pool" catches the original pool corruptor driver.
My System SpecsSystem Spec
08 Oct 2009   #16
iMarcintosh

Microsoft Windows 7 Ultimate (6.1.7600)
 
 

Okay, so my BAD_POOL_HEADER BSOD is because one of my Drivers (Suspect of mine is the ATI Drivers) is "flooding or overwriting" other regions of the memory pool. Now this is just a bit of my own figuring, but could this be caused by the BIOS or Memory in my computer? Because on the Model Content Page I posted in my last post, there were several Updates for my BIOS. I currently have the latest version (Insyde 1.9). My brother has the Exact same computer as mine, and when he is running Windows 7 he gets the same BSOD exactly with the same effect like that in my video. I will do the DV you suggested with those flags and let you know for sure what driver it is doing it, and what you all suggest I try or do. Again, Thanks so much for the help on this!
My System SpecsSystem Spec
09 Oct 2009   #17
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by iMarcintosh View Post
Now this is just a bit of my own figuring, but could this be caused by the BIOS or Memory in my computer?
Yes, unreliable hardware - and that includes the BIOS - can manifest itself as almost any type of crash imaginable, including pool corruption. However, there is nothing yet in these data to suggest that your hardware is definitely responsible. The flickering image corruption in your youtube video can also be caused by a bad driver interfering with the video buffer.

Quote   Quote: Originally Posted by iMarcintosh View Post
Because on the Model Content Page I posted in my last post, there were several Updates for my BIOS. I currently have the latest version (Insyde 1.9). My brother has the Exact same computer as mine, and when he is running Windows 7 he gets the same BSOD exactly with the same effect like that in my video.
Your brother's machine will probably share other attributes with yours, including your favourite anti-malware utilities, similar NICs you both purchased at the same time, preferred audio cards... that sort of thing. If the pool corruption on your machine(s) turns out to have software causes, it'll be a driver along those lines, irrespective of the fact that they're currently all up-to-date.

Quote   Quote: Originally Posted by iMarcintosh View Post
I will do the DV you suggested with those flags and let you know for sure what driver it is doing it, and what you all suggest I try or do. Again, Thanks so much for the help on this!
No probs

If special pool ends up fingering one of the OS drivers as supposedly responsible, you can be 99.9% sure that it's a hardware defect. Has the manufacturer certified the laptop for use with WIn7 at this point?
My System SpecsSystem Spec
Reply

 Random BSOD / After waking from Sleep! PLZ HELP!




Thread Tools




Similar help and support threads
Thread Forum
BSOD waking from sleep, and random - dump file attached
Can someone help with this minidump file? I tried to install the windbg.exe tool, but couldn't figure it out. I pieced together this computer within the last year, and I suspect something is up with the motherboard, but not sure: ASUS Z97 MB
BSOD Help and Support
Random BSOD waking from sleep mode
New computer for my dad. ASUS H81-ME mainboard Pentium G3220 3.0GHz 8GB 1600MHZ DDR3 Win 7 Home Premium 64bit Install went without a hitch but the computer crashes upon waking from sleep. Not always either, just sporadically. I have already replaced the new motherboard and memory for...
BSOD Help and Support
Random BSODs, but most often after waking up from Sleep.
Like the title says, I often get BSODs while randomly using my computer. It's never anything high stress, but it does happen more often when I put my computer to sleep and then turn it on. EDIT: I also managed to take a picture of the error, if that helps at all.
BSOD Help and Support
BSOD during random times, once on waking from sleep
My sister had 2 BSOD's before she gave it to me..i managed to take a pic of one.. here .. http://dl.dropbox.com/u/20062503/IMG_3539.JPG .. windows 7 home edition 64bit.. purchased about a year ago, still on initial install of 7 ..hope i did all the bsod stuff right..attached all the things...
BSOD Help and Support
random BSOD while waking pc up from sleep
Windows 7 x86 32 bit - Upgrade version Original OS - Windows XP Hardware - 1 year old Problem signature: Problem Event Name: BlueScreen OS Version: 6.1.7601.2.1.0.256.48 Locale ID: 1033 Additional information about the problem:
BSOD Help and Support
Random BSOD after waking up from sleep..
Hi,, Win7 x32 Pro... random BSOD after waking up from sleep.. Since the official method of reporting yields a large folder 30 MB I used the alternative...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:03.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App