Hi, I'm getting the BSOD problem with my destop. It happened once a few weeks ago and then it stopped, but over the past few days it started occuring again. So far it has happened when I'm watching movies and whrn the pc is just left switched on. See attached for the .zip file from the DM Log collector. Any help would be greatly appreciated.
Hi kieron22,
Welcome to the 7forums.
Please read BSOD Posting Instructions & How to upload files
Please check {windows partition}\windows\minidump and check if there are any recent dump files saved.
Your uploaded dump files are a few years old.
Please make sure your pc is configured for small dump files How to configure minidump | Windows 7 tutorial
Last edited by axe0; 30 Sep 2015 at 08:00.
Yep welcome kieron22 mate the dumps you have sent through as axe has asked - usually you configure the dumps and then post them as it looks like you have done - contained a dump that is pointing the finger at your USB ports and is most likely a driver but unfortunately you have not sent any system specs so we cannot go looking for that driver.
Please do this System Info - See Your System Specs
Plus where did you get that copy of Windows because the build is wrong it should be 7601 SP1 not 7600.
Service Pack 1 (SP1) is essential to have the system work properly and you may have one of the old original copies that needed SP1 to be added ( I did on a couple of occasions before they realized the system had bugs that need fixing ) and sadly many counterfeiters sell on pirated copies to unsuspecting buyers too
Now the USB dump (the ntosknl.exe is a very common dump too and it usually takes some tracking down because it can be anything from hard to soft ware).Code:Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntoskrnl.exe *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe Windows 7 Kernel Version 7600 MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Code:***** Kernel symbols are WRONG. Please fix symbols to do analysis. *** WARNING: Unable to verify timestamp for USBPORT.SYS *** ERROR: Module load completed but symbols could not be loaded for USBPORT.SYS
Code:ADDITIONAL_DEBUG_TEXT: You can run '.symfix; .reload' to try to fix the symbol path and load symbols. MODULE_NAME: usbhub FAULTING_MODULE: fffff8000364a000 nt DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bcc2d CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0xFE CURRENT_IRQL: 0 ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre LAST_CONTROL_TRANSFER: from fffff880052da7fa to fffff800036ba740 STACK_TEXT: fffff880`009e2718 fffff880`052da7fa : 00000000`000000fe 00000000`00000008 00000000`00000006 00000000`00000006 : nt+0x70740 fffff880`009e2720 00000000`000000fe : 00000000`00000008 00000000`00000006 00000000`00000006 fffffa80`06190b20 : usbhub+0x17fa fffff880`009e2728 00000000`00000008 : 00000000`00000006 00000000`00000006 fffffa80`06190b20 fffffa80`056e4000 : 0xfe fffff880`009e2730 00000000`00000006 : 00000000`00000006 fffffa80`06190b20 fffffa80`056e4000 fffff880`009e2760 : 0x8 fffff880`009e2738 00000000`00000006 : fffffa80`06190b20 fffffa80`056e4000 fffff880`009e2760 fffffa80`039db788 : 0x6 fffff880`009e2740 fffffa80`06190b20 : fffffa80`056e4000 fffff880`009e2760 fffffa80`039db788 ffffffff`dc3a58a0 : 0x6 fffff880`009e2748 fffffa80`056e4000 : fffff880`009e2760 fffffa80`039db788 ffffffff`dc3a58a0 00000000`00000000 : 0xfffffa80`06190b20 fffff880`009e2750 fffff880`009e2760 : fffffa80`039db788 ffffffff`dc3a58a0 00000000`00000000 00000000`23c7af16 : 0xfffffa80`056e4000 fffff880`009e2758 fffffa80`039db788 : ffffffff`dc3a58a0 00000000`00000000 00000000`23c7af16 00000000`23c5a760 : 0xfffff880`009e2760 fffff880`009e2760 ffffffff`dc3a58a0 : 00000000`00000000 00000000`23c7af16 00000000`23c5a760 fffffa80`06190cf8 : 0xfffffa80`039db788 fffff880`009e2768 00000000`00000000 : 00000000`23c7af16 00000000`23c5a760 fffffa80`06190cf8 fffffa80`061914a8 : 0xffffffff`dc3a58a0 STACK_COMMAND: kb FOLLOWUP_IP: usbhub+17fa fffff880`052da7fa ?? ??? SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: usbhub+17fa FOLLOWUP_NAME: MachineOwner IMAGE_NAME: usbhub.sys BUCKET_ID: WRONG_SYMBOLS FAILURE_BUCKET_ID: WRONG_SYMBOLS ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:wrong_symbols FAILURE_ID_HASH: {70b057e8-2462-896f-28e7-ac72d4d365f8} Followup: MachineOwner
But in any case specs please as we cannot work not knowing what we are working with.
First off thank you guys for the feedback.
1) I have added the pc specs, sorry about not having it at first things were going a bit crazy with the desktop
2) I checked the instructions on how to configure the dump and everything on my PC was set just like in the instructions.
3) In terms of the OS, someone built the system for me and did everything, however I do have the Windows 7 CD from another computer that I bought, should I just reinstall with that CD?
4) I checked in the Minidump folder and I found a few files, one of them as recent as yesterday (see attached)
5) The latest event is that this morning I went to turn on the PC and it failed and Startup repair was launched and it did some repairs, I haven't had any BSOD's so far. And I have also been getting some pop up notifications about different exe. that are corrupt:
The first one that came up is DropboxUpdate.exe - Corrupt File : The file or directory C:/$Secure is corrupt and unreadable. Please run the Chkdsk utility
Second one is AcroMissingCompWClass: AcroRd32.exe - Corrupt File : The file or directory C:/$Secure is corrupt and unreadable. Please run the Chkdsk utility
Thanks again for the help.
Attachment 372633
2 drivers have been flagged.
The Nvidia Video driver
Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from here
Please check here for driver updates for the Realtek PCI-E Gigabit Ethernet NIC
Code:*** WARNING: Unable to verify timestamp for nvlddmkm.sys *** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys *** WARNING: Unable to verify timestamp for Rt64win7.sys *** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys 0: kd> lmvm nvlddmkm start end module name fffff880`11ef6000 fffff880`12b50d00 nvlddmkm T (no symbols) Loaded symbol image file: nvlddmkm.sys Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys Image name: nvlddmkm.sys Timestamp: Sat Jan 08 03:07:22 2011 (4D27C6DA) CheckSum: 00C5F2DA ImageSize: 00C5AD00 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 0: kd> lmvm Rt64win7 start end module name fffff880`06c91000 fffff880`06d16000 Rt64win7 T (no symbols) Loaded symbol image file: Rt64win7.sys Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys Image name: Rt64win7.sys Timestamp: Fri Jun 10 08:33:15 2011 (4DF1BAAB) CheckSum: 0008B67F ImageSize: 00085000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
I did everything you told me, Installed a new driver for the Realtek and for the GPU and after that I got the BSOD again. It made a new dump file (attached)Attachment 372636
Keiron mate in your latest dump (29/9/2015) the build is wrong see the code
Not surprisingly this is up too and it can be anything hard or soft wareCode:Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntoskrnl.exe *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe Windows 7 Kernel Version 7600 MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7600.16617.amd64fre.win7_gdr.100618-1621 Machine Name: Kernel base = 0xfffff800`03850000 PsLoadedModuleList = 0xfffff800`03a8de50 Debug session time: Wed Sep 30 08:11:54.707 2015 (UTC + 10:00) System Uptime: 0 days 0:30:03.159
So where did you get your copy from as it does not have Service Pack 1 - SP1 and could be counterfeit.Code:ADDITIONAL_DEBUG_TEXT: You can run '.symfix; .reload' to try to fix the symbol path and load symbols. MODULE_NAME: nt FAULTING_MODULE: fffff80003850000 nt DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9 READ_ADDRESS: unable to get nt!MmSpecialPoolStart unable to get nt!MmSpecialPoolEnd unable to get nt!MmPagedPoolEnd unable to get nt!MmNonPagedPoolStart unable to get nt!MmSizeOfNonPagedPoolInBytes 0000000000000008 CURRENT_IRQL: 0 FAULTING_IP: hal+233e fffff800`0380933e 488b5a08 mov rbx,qword ptr [rdx+8] CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0xA ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre LAST_CONTROL_TRANSFER: from fffff800038bfca9 to fffff800038c0740 STACK_TEXT: fffff800`04d5b748 fffff800`038bfca9 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt+0x70740 fffff800`04d5b750 00000000`0000000a : 00000000`00000008 00000000`00000002 00000000`00000000 fffff800`0380933e : nt+0x6fca9 fffff800`04d5b758 00000000`00000008 : 00000000`00000002 00000000`00000000 fffff800`0380933e fffff800`038c51fa : 0xa fffff800`04d5b760 00000000`00000002 : 00000000`00000000 fffff800`0380933e fffff800`038c51fa 00000000`00000000 : 0x8 fffff800`04d5b768 00000000`00000000 : fffff800`0380933e fffff800`038c51fa 00000000`00000000 00000000`00000000 : 0x2 STACK_COMMAND: kb FOLLOWUP_IP: nt+70740 fffff800`038c0740 48894c2408 mov qword ptr [rsp+8],rcx SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: nt+70740 FOLLOWUP_NAME: MachineOwner IMAGE_NAME: ntoskrnl.exe BUCKET_ID: WRONG_SYMBOLS FAILURE_BUCKET_ID: WRONG_SYMBOLS ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:wrong_symbols FAILURE_ID_HASH: {70b057e8-2462-896f-28e7-ac72d4d365f8} Followup: MachineOwner
If I reinstall windows using a genuine copy that I got with another computer will that help? I just bought the parts and paid someone to build it.
Quote