Random BSOD, error 0x0000007a

Point117 · 11 Sep 2013

I have been getting BSODs randomly lately.
Can anybody help?

Arc · 11 Sep 2013

Hi Point117.

Do some Disc checks.

Reseat the sata and power.
Run chkdsk /f/r, following the option two of the tutorial Disk Check
Seatool for dos: SeaTools | Seagate download
Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.
Also check the HDD using WD Data Lifeguard. 7 Free Hard Drive Testing Software Tools
Post a screenshot of the HDD using CrystalDiskInfo - Software - Crystal Dew World

If possible, plan to update your BIOS. Sorry that I am failing to gather the info about your motherboard or BIOS

You can do it easily by yourself.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

Scan the system for possible virus infection with the following programs.

Let us know the results.
_____________________________________________________________________
BSOD ANALYSIS:

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {c064c8e0, c000000e, 4f5e2860, c991c013}

GetPointerFromAddress: unable to read from e39aa834
Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: c064c8e0, lock type that was held (value 1,2,3, or PTE address)
Arg2: c000000e, error status (normally i/o status code)
Arg3: 4f5e2860, current process (virtual address for lock type 3, or PTE)
Arg4: c991c013, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c000000e

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  0

TRAP_FRAME:  c894facc -- (.trap 0xffffffffc894facc)
ErrCode = 00000010
eax=00000000 ebx=c5510ac8 ecx=c98584d9 edx=c5510b38 esi=c5510a70 edi=c36ee0d8
eip=c991c013 esp=c894fb40 ebp=c894fba0 iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
Ntfs!NtfsAbortTransaction:
c991c013 0000            add     byte ptr [eax],al          ds:0023:00000000=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from e38e4187 to e391fbfc

STACK_TEXT:  
c894f934 e38e4187 0000007a c064c8e0 c000000e nt!KeBugCheckEx+0x1e
c894f9a4 e38e7a69 c894f9f8 e39ab300 c894fa18 nt!MiWaitForInPageComplete+0x302
c894fa34 e38d1180 e39ab300 c991c013 c4afdd18 nt!MiIssueHardFault+0x3b3
c894fab4 e3881aa8 00000008 c991c013 00000000 nt!MmAccessFault+0x29fc
c894fab4 c991c013 00000008 c991c013 00000000 nt!KiTrap0E+0xdc
c894fb3c c9857214 c5510a70 c36ee0d8 00000000 Ntfs!NtfsAbortTransaction
c894fba0 c98bcdc5 c5510a70 c36d16d0 c000000e Ntfs!NtfsProcessException+0x278
c894fc0c e3877c1e c36ee020 c36d16d0 c36d16d0 Ntfs!NtfsFsdFlushBuffers+0x12a
c894fc24 c96e820c c3695c00 c36d16d0 00000000 nt!IofCallDriver+0x63
c894fc48 c96e83cb c894fc68 c3695c00 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
c894fc80 e3877c1e c3695c00 c36d16d0 c36d16d0 fltmgr!FltpDispatch+0xc5
c894fc98 e3a6bbe9 c36d16d0 c3611e00 00000000 nt!IofCallDriver+0x63
c894fcb8 e3a4a4bb c3695c00 c3611e00 00000000 nt!IopSynchronousServiceTail+0x1f8
c894fd24 e387e8c6 00000000 0820f660 0820f668 nt!NtFlushBuffersFile+0x1d7
c894fd24 770f70f4 00000000 0820f660 0820f668 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
0820f668 00000000 00000000 00000000 00000000 0x770f70f4


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
    c991c000-c991c014  21 bytes - Ntfs!DoAction+1dd2
    [ 91 c9 a8 ab 91 c9 7c ad:00 00 00 00 00 00 00 00 ]
    c991c018-c991c02e  23 bytes - Ntfs!NtfsAbortTransaction+5 (+0x18)
    [ 68 a8 37 87 c9 e8 ee f1:00 00 00 00 00 00 00 00 ]
    c991c030-c991c051  34 bytes - Ntfs!NtfsAbortTransaction+1d (+0x18)
    [ 74 09 6a 04 50 57 e8 98:00 00 00 00 00 00 00 00 ]
    c991c055-c991c05e  10 bytes - Ntfs!NtfsAbortTransaction+42 (+0x25)
    [ 8b 03 3b c6 74 08 50 e8:00 00 00 00 00 00 00 00 ]
    c991c061-c991c070  16 bytes - Ntfs!NtfsAbortTransaction+4e (+0x0c)
    [ 89 33 8b 4d 10 3b ce 74:00 00 00 00 00 00 00 00 ]
    c991c073-c991c0a0  46 bytes - Ntfs!NtfsAbortTransaction+60 (+0x12)
    [ 8b c1 2b c2 f6 42 06 01:00 00 00 00 00 00 00 00 ]
    c991c0a3-c991c0b8  22 bytes - Ntfs!NtfsAbortTransaction+90 (+0x30)
    [ 0f b7 08 89 4d d0 0f b7:00 00 00 00 00 00 00 00 ]
    c991c0bb-c991c0c1  7 bytes - Ntfs!NtfsAbortTransaction+a8 (+0x18)
    [ 8b 5d 0c 8d b3 98 02:00 00 00 00 00 00 00 ]
    c991c0c4-c991c0d0  13 bytes - Ntfs!NtfsAbortTransaction+b1 (+0x09)
    [ 6a 01 56 ff 15 54 f6 86:00 00 00 00 00 00 00 00 ]
    c991c0d3-c991c0e8  22 bytes - Ntfs!NtfsAbortTransaction+c0 (+0x0f)
    [ 0f b7 08 89 4d d0 0f b7:00 00 00 00 00 00 00 00 ]
    c991c0eb-c991c12a  64 bytes - Ntfs!NtfsAbortTransaction+d8 (+0x18)
    [ 74 10 8b 4f 14 49 0f b7:00 00 00 00 00 00 00 00 ]
    c991c12d-c991c132  6 bytes - Ntfs!NtfsAbortTransaction+11a (+0x42)
    [ 89 75 10 81 4f 04:00 00 00 00 00 00 ]
    c991c135 - Ntfs!NtfsAbortTransaction+122 (+0x08)
    [ 80:00 ]
    c991c137-c991c139  3 bytes - Ntfs!NtfsAbortTransaction+124 (+0x02)
    [ 8d 87 c4:00 00 00 ]
    c991c13d-c991c15b  31 bytes - Ntfs!NtfsAbortTransaction+12a (+0x06)
    [ 50 8d 85 5c ff ff ff 50:00 00 00 00 00 00 00 00 ]
    c991c15f-c991c167  9 bytes - Ntfs!NtfsAbortTransaction+14c (+0x22)
    [ 8b 75 98 89 75 a4 8d 87:00 00 00 00 00 00 00 00 ]
    c991c16b-c991c18e  36 bytes - Ntfs!NtfsAbortTransaction+158 (+0x0c)
    [ 50 ff 75 cc ff 75 d0 ff:00 00 00 00 00 00 00 00 ]
    c991c191-c991c197  7 bytes - Ntfs!NtfsAbortTransaction+17e (+0x26)
    [ 68 fc b8 8d c9 68 32:00 00 00 00 00 00 00 ]
    c991c19a-c991c1a3  10 bytes - Ntfs!NtfsAbortTransaction+187 (+0x09)
    [ c0 e8 77 3b f2 ff 68 6a:00 00 00 00 00 00 00 00 ]
    c991c1a5 - Ntfs!NtfsAbortTransaction+192 (+0x0b)
    [ 6a:00 ]
    c991c1a7 - Ntfs!NtfsAbortTransaction+194 (+0x02)
    [ 6a:00 ]
    c991c1a9-c991c1aa  2 bytes - Ntfs!NtfsAbortTransaction+196 (+0x02)
    [ 68 32:00 00 ]
    c991c1ad-c991c1b8  12 bytes - Ntfs!NtfsAbortTransaction+19a (+0x04)
    [ c0 57 e8 f9 c6 f3 ff cc:00 00 00 00 00 00 00 00 ]
    c991c1ba-c991c1bd  4 bytes - Ntfs!NtfsAbortTransaction+1a6 (+0x0d)
    [ 0f 84 11 01:00 00 00 00 ]
    c991c1c0-c991c1c2  3 bytes - Ntfs!NtfsAbortTransaction+1ac (+0x06)
    [ 83 65 e0:00 00 00 ]
    c991c1c4-c991c1c6  3 bytes - Ntfs!NtfsAbortTransaction+1b0 (+0x04)
    [ c6 45 e7:00 00 00 ]
    c991c1c8-c991c1cb  4 bytes - Ntfs!NtfsAbortTransaction+1b4 (+0x04)
    [ c7 45 fc 01:00 00 00 00 ]
    c991c1cf-c991c220  82 bytes - Ntfs!NtfsAbortTransaction+1bb (+0x07)
    [ 8d 45 e0 50 56 53 57 e8:00 00 00 00 00 00 00 00 ]
    c991c222-c991c238  23 bytes - Ntfs!NtfsAbortTransaction+20e (+0x53)
    [ ff 75 94 51 50 0f b7 46:00 00 00 00 00 00 00 00 ]
    c991c23b-c991c265  43 bytes - Ntfs!NtfsAbortTransaction+227 (+0x19)
    [ 89 45 c0 8b 46 18 89 45:00 00 00 00 00 00 00 00 ]
    c991c268-c991c2cd  102 bytes - Ntfs!NtfsAbortTransaction+254 (+0x2d)
    [ d3 e2 52 0f b7 4e 12 51:00 00 00 00 00 00 00 00 ]
    c991c2d1-c991c2d3  3 bytes - Ntfs!NtfsAbortTransaction+2bd (+0x69)
    [ 8d 87 c4:00 00 00 ]
    c991c2d7-c991c2f5  31 bytes - Ntfs!NtfsAbortTransaction+2c3 (+0x06)
    [ 50 8d 45 d8 50 8d 85 5c:00 00 00 00 00 00 00 00 ]
    c991c2f9-c991c313  27 bytes - Ntfs!NtfsAbortTransaction+2e5 (+0x22)
    [ 20 74 08 6a 01 57 e8 f8:00 00 00 00 00 00 00 00 ]
    c991c318-c991c319  2 bytes - Ntfs!NtfsAbortTransaction+304 (+0x1f)
    [ e8 32:00 00 ]
    c991c31d-c991c31e  2 bytes - Ntfs!NtfsAbortTransaction+309 (+0x05)
    [ e9 df:00 00 ]
    c991c322-c991c32f  14 bytes - Ntfs!NtfsAbortTransaction+30e (+0x05)
    [ 8b 5d 0c 8b 7d 08 90 90:00 00 00 00 00 00 00 00 ]
    c991c331-c991c341  17 bytes - Ntfs!NtfsAbortTransaction+318 (+0x0f)
    [ 74 10 8b 45 e0 ff 70 50:00 00 00 00 00 00 00 00 ]
    c991c343-c991c37e  60 bytes - Ntfs!NtfsAbortTransaction+32a (+0x12)
    [ c3 8b 5d 0c 8b 7d 08 90:00 00 00 00 00 00 00 00 ]
    c991c381-c991c396  22 bytes - Ntfs!NtfsAbortTransaction+363 (+0x3e)
    [ 6a 01 56 ff 15 58 f6 86:00 00 00 00 00 00 00 00 ]
    c991c399-c991c3a6  14 bytes - Ntfs!NtfsAbortTransaction+37b (+0x18)
    [ 33 c0 66 39 41 04 75 0f:00 00 00 00 00 00 00 00 ]
    c991c3a9-c991c3ba  18 bytes - Ntfs!NtfsAbortTransaction+38b (+0x10)
    [ 53 ff 15 d4 f0 86 c9 8b:00 00 00 00 00 00 00 00 ]
    c991c3bc-c991c3c7  12 bytes - Ntfs!NtfsAbortTransaction+39e (+0x13)
    [ 81 67 04 ff ff 7f ff c3:00 00 00 00 00 00 00 00 ]
    c991c3ca-c991c3df  22 bytes - Ntfs!NtfsAbortTransaction+3ae (+0x0e)
    [ 6a 01 56 ff 15 58 f6 86:00 00 00 00 00 00 00 00 ]
    c991c3e2-c991c3ef  14 bytes - Ntfs!NtfsAbortTransaction+3c6 (+0x18)
    [ 33 c0 66 39 41 04 75 0f:00 00 00 00 00 00 00 00 ]
    c991c3f2-c991c40d  28 bytes - Ntfs!NtfsAbortTransaction+3d6 (+0x10)
    [ 53 ff 15 d4 f0 86 c9 8b:00 00 00 00 00 00 00 00 ]
    c991c40f-c991c415  7 bytes - Ntfs!NtfsAbortTransaction+3f3 (+0x1d)
    [ 90 90 90 90 90 68 90:00 00 00 00 00 00 00 ]
    c991c419-c991c43a  34 bytes - Ntfs!RedoPass+5 (+0x0a)
    [ 68 d0 37 87 c9 e8 ed ed:00 00 00 00 00 00 00 00 ]
    c991c43c-c991c43e  3 bytes - Ntfs!RedoPass+28 (+0x23)
    [ c6 45 e3:00 00 00 ]
    c991c440-c991c449  10 bytes - Ntfs!RedoPass+2c (+0x04)
    [ 8b 75 18 8b 76 70 66 83:00 00 00 00 00 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3713 errors : !Ntfs (c991c000-c991cfff)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_4096

FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE_4096

BUCKET_ID:  MEMORY_CORRUPTION_LARGE_4096

Followup: memory_corruption
---------

Point117 · 11 Sep 2013

I found the problem.
It was some software running everytime the PC crashed.
Sorry to have bothered you

No need to Disk check or anything else
Yet I will test for a few days to see if any problems remain...