BSOD randomly and random freezing.

zackasmacka · 28 Jun 2013

Hello guys, i have been getting quite some problems with my computer's stability. i have managed to update all of my drivers they are all up to date. and updated Motherboard's BIOS and my ssd's firmware and more. so everything is pretty much up to date.
the pc is running stable now but yesterday when shutting down my pc i got an BSOD right before the programs closed to shut down.
i managed to get the dump file and used a blue screen viewer to see it and the cause were:

Ntfs.sys Ntfs.sys+8c8fd fffff880`0142f000 fffff880`015d1000 0x001a2000 0x5167f5fc 4/12/2013 7:54:36 AM Microsoft® Windows® Operating System NT File System Driver 6.1.7600.16385 (win7_rtm.090713-1255) Microsoft Corporation C:\Windows\system32\drivers\Ntfs.sys

ntoskrnl.exe ntoskrnl.exe+104a0c fffff800`02e52000 fffff800`03438000 0x005e6000 0x5147d9c6 3/18/2013 11:21:42 PM Microsoft® Windows® Operating System NT Kernel & System 6.1.7601.18113 (win7sp1_gdr.130318-1533) Microsoft Corporation C:\Windows\system32\ntoskrnl.exe

Alright, i used the SF diagnostic tool to gather up my information.
i had many many more BSOD before this but not so much anymore and my pc was not set to dump those
so i have changed the settings and now it's dumping the files so i only have 1 right now.

koolkat77 · 28 Jun 2013

Overclocking
If you are overclocking any hardware, STOP. Reset any changed values back to default.

Code:

Start Menu\Programs\ASUS	Public:Start Menu\Programs\ASUS	Public
Start Menu\Programs\ASUS\AI Suite II	Public:Start Menu\Programs\ASUS\AI Suite II	Public

Warning

This is overclocking software and can lead to system instability and BSOD's. Please reset all components to their stock speeds and then remove the software.

Is the firmware for your SSD up-to-date?

Check for one and see if the stability returns.

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\USER\Downloads\SF Informations\SF_28-06-2013\062813-7316-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`02e52000 PsLoadedModuleList = 0xfffff800`03095670
Debug session time: Fri Jun 28 08:10:32.499 2013 (UTC + 6:00)
System Uptime: 0 days 2:27:06.327
Loading Kernel Symbols
...............................................................
................................................................
......................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 1e0d9d, 3, 3a8d2c}

Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000001e0d9d, page frame number
Arg3: 0000000000000003, current page state
Arg4: 00000000003a8d2c, 0

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_99

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002f56a0c to fffff80002ec7c00

STACK_TEXT:  
fffff880`02e5ee18 fffff800`02f56a0c : 00000000`0000004e 00000000`00000099 00000000`001e0d9d 00000000`00000003 : nt!KeBugCheckEx
fffff880`02e5ee20 fffff800`02e73ed0 : 00000000`00000000 fffff680`0030f110 04f00001`dfe1c025 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`02e5ee60 fffff800`02e977a3 : fffffa80`10a7b060 fffff700`000072f6 0000007f`fffffff8 fffff8a0`01a9cf50 : nt! ?? ::FNODOBFM::`string'+0x32418
fffff880`02e5eef0 fffff800`02e98872 : fffffa80`10a7b060 fffffa80`00000000 fffff880`00005a01 fffff800`00000000 : nt!MiDeleteAddressesInWorkingSet+0x307
fffff880`02e5f7a0 fffff800`0319dcba : fffff8a0`0e37da70 fffff880`02e5fae0 00000000`00000000 fffffa80`109f7b50 : nt!MmCleanProcessAddressSpace+0x96
fffff880`02e5f7f0 fffff800`03183dbd : 00000000`00000000 00000000`00000001 00000000`7efd8000 fffffa80`107d8650 : nt!PspExitThread+0x56a
fffff880`02e5f8f0 fffff800`02eba71a : fffffa80`109f7b50 fffff800`02eba651 00000000`00000000 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`02e5f920 fffff800`02ebaa60 : 00000000`00000246 fffff880`02e5f9a0 fffff800`03183d30 00000000`00000001 : nt!KiDeliverApc+0x2ca
fffff880`02e5f9a0 fffff800`02ec6f37 : fffffa80`109f7b50 fffff880`02e5fb01 ffffffff`feced300 00000000`c0000024 : nt!KiInitiateUserApc+0x70
fffff880`02e5fae0 00000000`73992e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`0057ed28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73992e09


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`02f56a0c cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner
---------

Memtest86+
Run Memtest86+ for at least 8-10 passes. It may take up to 20 passes to find problems. Make sure to run it once after the system has been on for a few hours and is warm, and then also run it again when the system has been off for a few hours and is cold. How to Test and Diagnose RAM Issues with Memtest86+

Note

Pay close attention to part 3 of the tutorial in order to rule the faulty RAM stick out.

Tip

Do this test overnight.

SFC /scannow to check windows for corruption:

How to Repair Windows 7 System Files with System File Checker
1. Click Start

2. In the search box, type Command Prompt
3. In the list that appears, right-click on cmd.exe and choose Run as administrator
4. In the command window that opens, type

sfc /scannow

and hit enter.

Start up
Keep less stuff at the start-up. Only anti-virus, this helps avoid driver conflicts and improves time to log in to windows.
Troubleshoot a Problem by Performing a Clean Startup in Windows 7 or Vista
How to Change, Add, or Remove Startup Programs in Windows 7

zackasmacka · 28 Jun 2013

Hello koolkat, thanks for the reply.
Yes, my CPU is OverClocked and i ran the memtest86+
2 days ago and got no error.
i did the Windows system file checker, after the system file checker i don't know what's suppose to happen.
when my pc finished checking the files it just reboots and i got no results or anything?.

and Yes and SSD's firmware is up to date.
i did update it about 3-2 days ago and my system is very much more stable then before. i did not get any freezing in 2 days so i hope it stays like that.
only the BSOD's are a prob now.
i use the default Asus AI system that's updated and comes with the motherboad to auto overclock my system
to a stable clock. but it seems here like it's not that stable.
i will do the memtest86+ again and the Window's system file checker.

what's suppose to happen after i scan my pc for system checker, because sometimes when my pc gets bsod or freeze it automatically scans my system but after it's done i don't get any results from the scan?.

Arc · 28 Jun 2013

How many passes of memtest did you run?

zackasmacka · 28 Jun 2013

I don't actually remember but it went to 100% i think it was close to 20 passes.
no errors or anything.

zackasmacka · 28 Jun 2013

I'll have to re-run the test soon. so i'm sure i don't have any errors in my memories.

Arc · 28 Jun 2013

zackasmacka said:

I'll have to re-run the test soon. so i'm sure i don't have any errors in my memories.

Let us be sure too. Post a camera snap of the computer's screen after completing 8 passes of memtest.

Update JMicron JMB36X Controller from ftp://driver.jmicron.com.tw/SATA_Controller/Windows/

Uninstall Marvell 91xx SATA 6G Controller in Control Panel > Programs and Features. Then follow Drivers - Clean Left over Files after Uninstalling to clean up any leftover.

Code:

Event[5142]:
  Log Name: System
  Source: Service Control Manager
  Date: 2013-06-28T06:54:31.752
  Event ID: 7026
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: ChrisM-PC
  Description: 
The following boot-start or system-start driver(s) failed to load: 
CSN5PDTS82
CSN5PDTS82x64
VDiskBus

Do you have Colasoft Capture and Virtual disc installed? You need to uninstall those.

MSE is crashing here.

Code:

Event[4614]:
  Log Name: System
  Source: Microsoft Antimalware
  Date: 2013-06-27T18:35:32.000
  Event ID: 5008
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: ChrisM-PC
  Description: 
Microsoft Antimalware engine has been terminated due to an unexpected error.
     Failure Type: Crash
     Exception code: 0xc0000005
     Resource: file:C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\a2a69a7499d7944e5c7019349fe4aae2\PresentationCore.ni.dll

But why? Because, the elements of the earlier antivirus in present in the system, actively.

Code:

avgtp    avgtp    \??\c:\windows\system32\drivers\avgtpx64.sys    Kernel Driver    Yes    System    Running    OK    Normal    No    Yes

Apparently I can suggest you only one thing right here: Clean Reinstall - Factory OEM Windows 7

zackasmacka · 28 Jun 2013

Thanks for the reply, Arc.

I have uninstalled the Marvell 91xx SATA 6G Controller.
i used the program you provided and the updated version of the program as well.
i'm off to do the 8 passes of memtest and i'll take a snap of the computer screen at 8 passes.
i'm going to install the JMicron controller after i restart my pc.
i'll back back with the snap of memtest soon.

zackasmacka · 28 Jun 2013

Ok so here's the Memtes i think it's at pass 8.
i ran it 2 times at till pass 8 and got no errors.
and i think i don't know exactly what a pass is in memtest.

Arc · 28 Jun 2013

14 passes on 16 GBs. How long it took?

BTW, the problem, apparently is in your system. See my earlier post, the last part.

Apparently I can suggest you only one thing right here: Clean Reinstall - Factory OEM Windows 7

Set the storage controllers to AHCI mode. Keep away from Marvell controllers and AVG. Dont use any software to control hardware. From the motherboard's CD, install the drivers only, not the utilities. Dont use any virtual disc emaluator.

We may hope that it will be a fine one.