BSOD + random freezing - Windows 7 Ultimate (mostly ntoskrnl.exe)


  1. Posts : 3
    Windows 7 Ultimate x64
       #1

    BSOD + random freezing - Windows 7 Ultimate (ntoskrnl.exe)


    I have been experiencing quite a few BSOD's and freezes over the past week or so, at first I passed it off as a once off until it became more frequent (both BSOD and freezes)
    I'm not sure if it would have anything to do with it but it started a few days after I started hosting a terraria server for myself and one friend; i recently (about 3 days ago) stopped hosting terraria, and began hosting starmade

    just today I clean installed windows 7 and updated all of my drivers through "Computer>Manage>Device Manager" and still got another 6-7 BSOD's (some of which weren't in the minidump folder)
    I might add that the blue screens tend to occur more while i am playing games (terraria/starmade) and the freezes occur during start-up, shortly after start-up, but rarely more than 10-15 mins after start-up.
    my computer would also get into a routine where it would begin starting up (i would hear the fan turn on) but the screen would remain blank and it would automatically shut-down, and restart on its own. i would usually try to break this by turning off at the power point and waiting a short while, it would sometimes work, sometimes not

    i don't know much at all, but by looking at the .dmp files most of them appear to be caused by ntoskrnl.exe

    i have attached .dmp files from before and after the clean install

    Any help or feedback would be greatly appreciated
    Last edited by pwnshot; 08 Oct 2013 at 19:51. Reason: Attaching a file
      My Computer


  2. Arc
    Posts : 35,373
    Microsoft Windows 10 Pro Insider Preview 64-bit
       #2
      My Computer


  3. Posts : 27
    Windows 7 Ultimate x64
       #3

    I have the same problem buddy :) But different symptoms
      My Computer


  4. Posts : 3
    Windows 7 Ultimate x64
    Thread Starter
       #4

    I attached SF_09-10-2013.rar
    thanks again
      My Computer


  5. Arc
    Posts : 35,373
    Microsoft Windows 10 Pro Insider Preview 64-bit
       #5

    Hi pwnshot.

    Install Service pack 1 and all other windows updates. Otherwise the system will remain vulnerable to threats.
    Code:
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Learn how to install Windows 7 Service Pack 1 (SP1)
    Service Pack Center - Microsoft Windows

    Uninstall Virtual Clone Drive.

    Scan the system for possible virus infection with the following programs.


    Update realtek network driver from Realtek. Download the Win7 and WinServer 2008 R2 Auto Installation Program dated 2013/9/24 and install it.

    Test your RAM modules for possible errors.
    How to Test and Diagnose RAM Issues with Memtest86+
    Run memtest for at least 8 passes, preferably overnight.

    If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

    Let us know the results.

    ** For anybody reading this thread: BSOD issues may appear as identical issue, but mostly they are all different. A suggestion that is applicable in one situation that should not be essentially applicable in another situation.
    If you are having a BSOD issue, start your new thread, and pay proper attention the Blue Screen of Death (BSOD) Posting Instructions.
    _____________________________________________________________________________________
    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 3B, {c0000005, fffff80001cb0261, fffff8800267a990, 0}
    
    Probably caused by : ntkrnlmp.exe ( nt!EtwpEventWriteFull+451 )
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff80001cb0261, Address of the instruction which caused the bugcheck
    Arg3: fffff8800267a990, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    nt!EtwpEventWriteFull+451
    fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]
    
    CONTEXT:  fffff8800267a990 -- (.cxr 0xfffff8800267a990)
    rax=fffffa8005ac9040 rbx=00000000ffffffff rcx=0000000000000010
    rdx=fffff8800267b478 rsi=fffffa8004847060 rdi=0000000000000000
    rip=fffff80001cb0261 rsp=fffff8800267b370 rbp=fffff8800267b3b0
     r8=fffff80001cd30fd  r9=0000000000000000 r10=0000000000000001
    r11=fffff80001c63000 r12=0000000000000001 r13=0000000000000000
    r14=00000000000000b0 r15=0000000000000008
    iopl=0         nv up ei ng nz ac po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010296
    nt!EtwpEventWriteFull+0x451:
    fffff800`01cb0261 498b01          mov     rax,qword ptr [r9] ds:002b:00000000`00000000=????????????????
    Resetting default scope
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  chrome.exe
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80001cb0261
    
    STACK_TEXT:  
    fffff880`0267b370 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!EtwpEventWriteFull+0x451
    
    
    FOLLOWUP_IP: 
    nt!EtwpEventWriteFull+451
    fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]
    
    SYMBOL_STACK_INDEX:  0
    
    SYMBOL_NAME:  nt!EtwpEventWriteFull+451
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME:  ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600
    
    STACK_COMMAND:  .cxr 0xfffff8800267a990 ; kb
    
    FAILURE_BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451
    
    BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451
    
    Followup: MachineOwner
    ---------
      My Computer


  6. Posts : 3
    Windows 7 Ultimate x64
    Thread Starter
       #6

    Arc said:
    Hi pwnshot.

    Install Service pack 1 and all other windows updates. Otherwise the system will remain vulnerable to threats.
    Code:
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Learn how to install Windows 7 Service Pack 1 (SP1)
    Service Pack Center - Microsoft Windows

    Uninstall Virtual Clone Drive.

    Scan the system for possible virus infection with the following programs.


    Update realtek network driver from Realtek. Download the Win7 and WinServer 2008 R2 Auto Installation Program dated 2013/9/24 and install it.

    Test your RAM modules for possible errors.
    How to Test and Diagnose RAM Issues with Memtest86+
    Run memtest for at least 8 passes, preferably overnight.

    If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

    Let us know the results.

    ** For anybody reading this thread: BSOD issues may appear as identical issue, but mostly they are all different. A suggestion that is applicable in one situation that should not be essentially applicable in another situation.
    If you are having a BSOD issue, start your new thread, and pay proper attention the Blue Screen of Death (BSOD) Posting Instructions.
    _____________________________________________________________________________________
    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 3B, {c0000005, fffff80001cb0261, fffff8800267a990, 0}
    
    Probably caused by : ntkrnlmp.exe ( nt!EtwpEventWriteFull+451 )
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff80001cb0261, Address of the instruction which caused the bugcheck
    Arg3: fffff8800267a990, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    nt!EtwpEventWriteFull+451
    fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]
    
    CONTEXT:  fffff8800267a990 -- (.cxr 0xfffff8800267a990)
    rax=fffffa8005ac9040 rbx=00000000ffffffff rcx=0000000000000010
    rdx=fffff8800267b478 rsi=fffffa8004847060 rdi=0000000000000000
    rip=fffff80001cb0261 rsp=fffff8800267b370 rbp=fffff8800267b3b0
     r8=fffff80001cd30fd  r9=0000000000000000 r10=0000000000000001
    r11=fffff80001c63000 r12=0000000000000001 r13=0000000000000000
    r14=00000000000000b0 r15=0000000000000008
    iopl=0         nv up ei ng nz ac po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010296
    nt!EtwpEventWriteFull+0x451:
    fffff800`01cb0261 498b01          mov     rax,qword ptr [r9] ds:002b:00000000`00000000=????????????????
    Resetting default scope
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  chrome.exe
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80001cb0261
    
    STACK_TEXT:  
    fffff880`0267b370 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!EtwpEventWriteFull+0x451
    
    
    FOLLOWUP_IP: 
    nt!EtwpEventWriteFull+451
    fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]
    
    SYMBOL_STACK_INDEX:  0
    
    SYMBOL_NAME:  nt!EtwpEventWriteFull+451
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME:  ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600
    
    STACK_COMMAND:  .cxr 0xfffff8800267a990 ; kb
    
    FAILURE_BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451
    
    BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451
    
    Followup: MachineOwner
    ---------
    Have scanned with TDSSKiller and Windows Defender Offline, no results.

    Successfully installed service pack and all the other updates

    I also ran two disk checks yesterday and since then I haven't had any problems, but I also haven't been hosting anything on the computer or doing anything that would hog too much memory (I was when the errors were more frequent)

    Still yet to update the realtek network driver and I will run memtest either tonight or tomorrow night as I have plans tonight

    Will update again once I've done everything else
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:43.
Find Us