BSOD Error 0x000000D1

Hi Nato85,

Download and run the 'SF_Diagnostic_Tool.exe file' as suggested in the tutorial link for better 'BSOD analysis':Blue Screen of Death (BSOD) Posting Instructions

After download, click 'Grab all' to capture the Mini-Dump, Event Logs, Update Logs, Driver List and MGDiag reports. Apart from the 'Mini dump' the information in these files is vital for investigation.

Do reply with the information; would be glad to assist.

Hi Nato85,

Thank you for the reply.

The 'mini-dump' that you've shared reflects multiple system crashes:

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BugCheck D1, {b9cc58, 2, 0, fffff8800482d12c}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_AssertSig+4 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000b9cc58, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800482d12c, address which referenced memory

This driver 'USBPORT.SYS' points at 'USB 1.1 & 2.0 Port Driver'. Please unplug all 'USB Devices' > Open 'Device Manager' > Expand 'USB Controllers' > Right click and uninstall all listed 'USB Root Hubs' one by one > Scan for 'Hardware Changes' to restore 'USB Root Hubs'

Code:

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000ff97511a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffffa800d675050, address which referenced memory

'ntkrnlmp.exe' driver points at 'NT Kernel & System - Different versions/date stamps according to OS and system specifications'. Please try removing 'ESET NOD32 Antivirus' and 'CCleaner' for troubleshooting purpose. Also try updating 'Windows to install 'Microsoft Security Essentials'; recheck results.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 124, {0, fffffa800d25f028, be000000, 800400}

Probably caused by : hardware

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa800d25f028, Address of the WHEA_ERROR_RECORD structure.
Arg3: 00000000be000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000800400, Low order 32-bits of the MCi_STATUS value.

Please refer to the steps listed in this thread to know more about 0x124 error: Stop 0x124 - what it means and what to try. Please refer to the following tutorials to run diagnostics on 'Memory' & perform 'Chkdsk through command prompt':
RAM - Test with Memtest86+
Disk Check

Code:

Probably caused by : nvlddmkm.sys ( nvlddmkm+259e )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

INTERRUPT_EXCEPTION_NOT_HANDLED (3d)
Arguments:
Arg1: fffff88002ffce30
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: fffff8800481759e

'nvlddmkm.sys' refers to 'nVidia Video drivers'. Please try re-installing the drivers to see if that helps. Open 'Device Manager' > Expand 'Display Adpaters' > Right Click and uninstall 'nVidia drivers' > Restart the unit > Install the 'display drivers' using this link: Drivers | GeForce (For Windows 7 64 bit) > Also install 'Windows Updates' > Recheck results.

Hope this helps. Do reply with the findings.

Hi Nato85,

Apologies for the delay in response; was off-work.

You seem to be experiencing similar 'Blue screen errors' as before; looks like no conclusive results are observed. I tried to check the system logs to explore other possibilities; please check the observations.

An IP conflict is evident in 'errors' that have been showing up repeatedly at the time of system crashing down. Please share if you are also facing 'Internet related issues'. Please update the 'Network drivers' for the '82579 gigabit Ethernet Controller' from the following link: http://downloadcenter.intel.com/Deta...oller&lang=eng

Also share the type of 'Internet setup' that you are using. How may systems are in use? How are they connected to the 'router'? Or is this system connected directly to the 'modem'?

Code:

2013-03-07	07:23:41:806	 436	9b4	AU	WARNING: Failed to change download properties of call, error = 0x80070057

The error may imply an issue with the proxy server. Ensure that no 'proxy server' is specified in Internet Explorer. Open 'Internet Explorer' and click 'Tools' > 'Internet Options' > 'Connections Tab' > 'LAN Settings' > Make sure everything in the LAN Settings window is unchecked and click 'Ok'. Then click 'Ok' again to close the 'Internet Options' configuration window. Restart 'Internet Explorer' for the changes to take effect; and recheck results.

Code:

Event[951]:
  Log Name: Application
  Source: Application Error
  Date: 2013-03-07T07:48:36.000
  Event ID: 1005
  Task: Application Crashing Events
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Nato-PC
  Description: 
Windows cannot access the file  for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program Windows Modules Installer because of this error. Program: Windows Modules Installer
File: 

The error value is listed in the Additional Data section.
User Action
1. Open the file again. This situation might be a temporary problem that corrects itself when the program runs again.
2. If the file still cannot be accessed and
	- It is on the network, your network administrator should verify that there is not a problem with the network and that the server can be contacted.
	- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for further assistance.

Event[951]:
  Log Name: Application
  Source: Application Error
  Date: 2013-03-07T07:48:36.000
  Event ID: 1005
  Task: Application Crashing Events
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Nato-PC
  Description: 
Windows cannot access the file  for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program Windows Modules Installer because of this error.


Event[4235]:
  Log Name: System
  Source: NetBT
  Date: 2013-03-07T17:48:56.740
  Event ID: 4321
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Nato-PC
  Description: 
The name "NATO-PC        :0" could not be registered on the interface with IP address 192.168.1.2. The computer with the IP address 192.168.1.4 did not allow the name to be claimed by this computer.

Repeated issues with .Net framework have also been observed. Try setting the '.NET Runtime Optimization Service' service to Start Automatically'. And check for 'Windows Updates' again to see if the errors are fixed.

Code:

Event[1085]:
  Log Name: Application
  Source: .NET Runtime
  Date: 2013-03-07T08:12:15.000
  Event ID: 1023
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Nato-PC
  Description: 
Application: mscorsvw.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an internal error in the .NET Runtime at IP 000007FEF34140A7 (000007FEF3410000) with exit code 80131506.


Event[1086]:
  Log Name: Application
  Source: Application Error
  Date: 2013-03-07T08:12:15.000
  Event ID: 1000
  Task: Application Crashing Events
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Nato-PC
  Description: 
Faulting application name: mscorsvw.exe, version: 4.0.30319.1, time stamp: 0x4ba21f5d
Faulting module name: clr.dll, version: 4.0.30319.1, time stamp: 0x4ba21eeb
Exception code: 0xc0000005
Fault offset: 0x00000000000040a7
Faulting process id: 0x27c
Faulting application start time: 0x01ce1ab7a5119c99
Faulting application path: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
Faulting module path: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Report Id: e66f29c6-86aa-11e2-a473-50465d666eb7

Other issues with 'Windows Updates' are also recorded.

Code:

2013-03-07	07:22:45:272	 436	de0	DnldMgr	***********  DnldMgr: New download job [UpdateId = {FF6CD189-1C49-4438-AC4E-34D988330E5F}.100]  ***********
2013-03-07	07:22:45:272	 436	de0	DnldMgr	FATAL: DM:CAgentDownloadManager::DownloadUpdate: pDownloadJob->Init failed with 0x80246005.

Please follow steps in this 'Microsoft Article' to see if that helps: Windows Update error 80246005
You may also try the 'Microsoft Fixit': You cannot install some updates or programs

Please try performing 'Windows Updates' and check system performance. Also ensure that you perform these steps after removing the 'Anti-virus' from the system. Also create a 'System Restore' point before attempting these steps: System Restore Point - Create

Also share a fresh report of 'BSODs', systems logs, etc for further investigation if you continue experiencing any issues: Blue Screen of Death (BSOD) Posting Instructions; will take it forward.

Hope this helps. Do reply with the findings.

Hi Nato85,

Good that 're-installing Windows' fixed the issue; nothing that can beat a re-install to fix operating system corruption. Thank you for the confirmation.