BSOD stop 0x0000001e

Page 1 of 2 12 LastLast

  1. Posts : 43
    Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
       #1

    BSOD stop 0x0000001e


    Got 2 BSOD today with one being stop 0x0000001e and the other IRQL LESS OR EQUAL... not sure why all gpu and cpu ocs are off and are on default and my system is less than a year old with all good quality parts.
    Thanks
      My Computer

  2.    #2

    Looking at your dump files I see numerous errors, however there is a particular function that has caught my eye.

    Code:
    BugCheck 1000007E, {ffffffffc0000005, fffff80003506622, fffff880033e06d8, fffff880033dff30}
    
    Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
    This function, because it's undocumented there isn't too much about it.
    I will take an educated guess and say it looks like a thread is trying to take ownership of a mutex object but is having to wait for some reason.

    We can see an access violation which means the CPU has tried to access memory that is simply not available, whether it's due to a null pointer or the address trying to access has already been freed.

    Code:
    4: kd> ln fffff80003506622
    (fffff800`03506610)   nt!KxWaitForLockOwnerShip+0x12   |  (fffff800`03506660)   nt!KxWaitForLockChainValid
    There's the access violation that occurred at nt!KxWaitForLockOwnerShip

    Code:
    4: kd> u nt!KxWaitForLockOwnerShip+12
    nt!KxWaitForLockOwnerShip+0x12:
    fffff800`03506622 48890a          mov     qword ptr [rdx],rcx
    fffff800`03506625 33db            xor     ebx,ebx
    fffff800`03506627 660f1f0400      nop     word ptr [rax+rax]
    fffff800`0350662c ffc3            inc     ebx
    fffff800`0350662e 851d946d2000    test    dword ptr [nt!HvlLongSpinCountMask (fffff800`0370d3c8)],ebx
    fffff800`03506634 0f847fb3faff    je      nt! ?? ::FNODOBFM::`string'+0x5da0 (fffff800`034b19b9)
    fffff800`0350663a f390            pause
    fffff800`0350663c 488b4f08        mov     rcx,qword ptr [rdi+8]
    We can see the pause function, probably waiting to acquire the mutex object.

    Code:
    Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for atikmdag.sys
    *** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
     atikmdag+0x7dfb1
    Looking at the raw stack I can see that your display driver is causing issues.

    Code:
    7: kd> lmvm atikmdag
    start             end                 module name
    fffff880`1102d000 fffff880`11fd6000   atikmdag T (no symbols)           
        Loaded symbol image file: atikmdag.sys
        Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
        Image name: atikmdag.sys
        Timestamp:        Fri May 23 02:46:07 2014 (537EA85F)
        CheckSum:         00F417E6
        ImageSize:        00FA9000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    You are at the latest version, try rolling back to an earlier version.

    I find these instructions useful.

    How-To Install AMD Catalyst? Drivers For A Windows® Based System

    Looking at your unloaded modules I see this.

    Code:
    Unloaded modules:
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081e9000 fffff880`081fa000   WinUsb.sys
    fffff880`081f2000 fffff880`081fe000   ggsemc.sys
    fffff880`081e9000 fffff880`081f2000   ggflt.sys
    fffff880`081f2000 fffff880`081fe000   ggsemc.sys
    fffff880`081e9000 fffff880`081f2000   ggflt.sys
    fffff880`081f2000 fffff880`081fe000   ggsemc.sys
    fffff880`081e9000 fffff880`081f2000   ggflt.sys
    fffff880`081f2000 fffff880`081fe000   ggsemc.sys
    fffff880`081e9000 fffff880`081f2000   ggflt.sys
    fffff880`081f2000 fffff880`081fe000   ggsemc.sys
    fffff880`081e9000 fffff880`081f2000   ggflt.sys
    fffff880`081f2000 fffff880`081fe000   ggsemc.sys
    fffff880`081e9000 fffff880`081f2000   ggflt.sys
    fffff880`07376000 fffff880`073e7000   spsys.sys
    fffff880`08000000 fffff880`08036000   WUDFRd.sys
    fffff880`015d7000 fffff880`015e5000   crashdmp.sys
    fffff880`015e5000 fffff880`015ef000   dump_storpor
    fffff880`0121b000 fffff880`01233000   dump_amd_sat
    fffff880`01000000 fffff880`01013000   dump_dumpfve
    fffff880`05612000 fffff880`0561c000   amdkmafd.sys
    fffff880`01475000 fffff880`0147f000   amdkmafd.sys
    fffff880`04416000 fffff880`04420000   ndisrd.sys
    fffff880`01013000 fffff880`0103d000   cdrom.sys
    A lot of USB modules unloading...

    Doing a bit of research I have found that the driver has these properties.

    Company:
    Sony Ericsson Mobile Communications
    Description:
    SEMC USB Flash Driver Filter
    I recommend you remove this driver and the device associated with it.

    Post back the results.
    Last edited by Thedoctor44; 30 May 2014 at 13:40.
      My Computer


  3. Posts : 43
    Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
    Thread Starter
       #3

    Just got some new blue screen, ive tried looking for sony flash driver but I cant seem to find it in deivce manager and ive even downloaded driver sweeper but still cant find it, i used the program to flash/root my phone but i dont really need it anymore... Ive just had 4 more blue screen since posting this when playing bf4- thanks for your quick reply :)
      My Computer

  4.    #4

    Avast is causing issues.
    I suggest you remove it using the Avast removal tool.

    Code:
    Unable to load image \SystemRoot\system32\drivers\aswSP.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for aswSP.sys
    *** ERROR: Module load completed but symbols could not be loaded for aswSP.sys
     aswSP+0x1df95
    Replace it with MSE and Malwarebytes.

       Tip

    Make sure you don't enable the free trial of malwarebytes pro


      My Computer


  5. Posts : 43
    Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
    Thread Starter
       #5

    Thanks so much for your help after a day i havent had a single bsod, after listening to your advice
      My Computer

  6.    #6

    That's good news :)

    Any more issues let me know.
      My Computer


  7. Posts : 43
    Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
    Thread Starter
       #7

    just had some more bsods today lol, any help is appreciated

    edit: im not sure it could be origin downloading but im not sure, just had 2 more bsod since this post
      My Computer

  8.    #8

    Here's my analysis.

    Code:
    BugCheck 1000007E, {ffffffffc0000005, fffff800034f4622, fffff880033e06d8, fffff880033dff30}
    
    Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
    An access violation has occurred which indicates the CPU tried to access memory which it couldn't address.
    The 2nd parameter is the address at which the exception occurred at.
    The 3rd parameter contains the exception record address.

    Code:
    EXCEPTION_RECORD:  fffff880033e06d8 -- (.exr 0xfffff880033e06d8)
    ExceptionAddress: fffff800034f4622 (nt!KxWaitForLockOwnerShip+0x0000000000000012)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000000
       Parameter[1]: ffffffffffffffff
    Attempt to read from address ffffffffffffffff
    The exception occurred because the CPU attempted to read from this address which is clearly invalid.
    I believe the KxWaitForLockOwnerShip function is waiting for a locked process to be unlocked so that it can be accessed but I'm not completely sure on that.

    Code:
    4: kd> u fffff800034f4622
    nt!KxWaitForLockOwnerShip+0x12:
    fffff800`034f4622 48890a          mov     qword ptr [rdx],rcx <-- a move instruction from the RCX register to the RDX register has been initiated
    fffff800`034f4625 33db            xor     ebx,ebx
    fffff800`034f4627 660f1f0400      nop     word ptr [rax+rax]
    fffff800`034f462c ffc3            inc     ebx
    fffff800`034f462e 851d946d2000    test    dword ptr [nt!HvlLongSpinCountMask (fffff800`036fb3c8)],ebx
    fffff800`034f4634 0f847fb3faff    je      nt! ?? ::FNODOBFM::`string'+0x5da0 (fffff800`0349f9b9)
    fffff800`034f463a f390            pause
    fffff800`034f463c 488b4f08        mov     rcx,qword ptr [rdi+8]
    With that said lets take a look at the registers

    Code:
    4: kd> r
    rax=0000000000000000 rbx=fffff8000367afe0 rcx=fffff880033e09c0
    rdx=2020000000000000 rsi=fffff880009b3180 rdi=fffff880033e09c0
    rip=fffff800034f4622 rsp=fffff880033e0910 rbp=00000000425be7d8
     r8=fffff880033e09c0  r9=0000000000000001 r10=0000000000000002
    r11=fffffa800c2b0d18 r12=00000000425be7d8 r13=0000058000000000
    r14=0000000000000001 r15=2aaaaaaaaaaaaaab
    iopl=0         nv up ei ng nz na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
    nt!KxWaitForLockOwnerShip+0x12:
    fffff800`034f4622 48890a          mov     qword ptr [rdx],rcx ds:002b:20200000`00000000=????????????????
    The RDX register is invalid...

    The Callstack doesn't reveal too much.

    Lets dump the raw stack and see if we can find anything.

    Avast is causing issues, with that said you appear to have bitdefender installed so they can conflict with each other.
    Try removing Avast and see if that fixes the issue, if not remove Bitdefender and replace it with Microsoft Security Essentials.

    Code:
    Unable to load image \SystemRoot\system32\drivers\aswMonFlt.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for aswMonFlt.sys
    *** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
     aswMonFlt+0x1cac6
    Code:
    Bitdefender Wallet	"c:\program files\bitdefender\bitdefender\pwdmanui.exe" --hidden --nowizard	NT AUTHORITY\SYSTEM	HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    It's probably conflicting with Bitdefender.
    Make sure you completely remove Avast, try using the removal tool.

    www.avast.com/en-gb/uninstall-utility
      My Computer


  9. Posts : 43
    Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
    Thread Starter
       #9

    im blue screening in safe mode im trying to remove avast in safe mode but i keep soing before i get to start the removal mtool
      My Computer

  10.    #10

    Upload the dump files.

    It shouldn't BSOD in safe mode form just AVs.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:02.
Find Us