Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Four Crashes in One Day

30 Dec 2009   #1
soup

Windows 7
 
 
Four Crashes in One Day

Hi,
I had problems but after updating drivers the BSOD had gone for the last 8 days. Yesterday, I had 4 crashes close together yet hadn't installed any hardware or software. Machine was only at the login screen on the 2nd crash.
4 Dumps attached, can anybody help please?
thanks,
soup


My System SpecsSystem Spec
.
30 Dec 2009   #2
zigzag3143

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by soup View Post
Hi,
I had problems but after updating drivers the BSOD had gone for the last 8 days. Yesterday, I had 4 crashes close together yet hadn't installed any hardware or software. Machine was only at the login screen on the 2nd crash.
4 Dumps attached, can anybody help please?
thanks,
soup

Hi soup and welcome

well the four dmps vary in the probable cause. They all are IRQL_not less type so I have to believe it is either a memory problem, or heat

I would

download memtestx86 and runn it for 5 passes
run a system file check\type cmd in search>right click and run as admin>
sfc /scannow

Code:
122909-12000-01.dmp    12/29/2009 11:55:30 AM    IRQL_NOT_LESS_OR_EQUAL    0x0000000a    0x02932b44    0x0000001f    0x00000000    0x828a811e    ndis.sys    ndis.sys+56e98                    
122909-12046-01.dmp    12/29/2009 1:32:12 PM    IRQL_NOT_LESS_OR_EQUAL    0x0000000a    0x0296cb44    0x0000001f    0x00000000    0x828e211e    ntkrnlpa.exe    ntkrnlpa.exe+467eb                    
122909-12828-01.dmp    12/29/2009 7:02:15 AM    IRQL_NOT_LESS_OR_EQUAL    0x0000000a    0x0296ab44    0x0000001f    0x00000000    0x828e011e    ntkrnlpa.exe    ntkrnlpa.exe+467eb                    
122909-14109-01.dmp    12/29/2009 6:29:21 AM    IRQL_NOT_LESS_OR_EQUAL    0x0000000a    0x0296eb44    0x0000001f    0x00000000    0x828e411e    storport.sys    storport.sys+1f7c
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\4 Dumps\122909-12046-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82846000 PsLoadedModuleList = 0x8298e810
Debug session time: Tue Dec 29 08:30:53.356 2009 (GMT-5)
System Uptime: 0 days 1:35:36.606
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {296cb44, 1f, 0, 828e211e}

Probably caused by : ntkrpamp.exe ( nt!EtwpReserveTraceBuffer+82 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0296cb44, memory referenced
Arg2: 0000001f, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 828e211e, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 829ae718
Unable to read MiSystemVaType memory at 8298e160
 0296cb44 

CURRENT_IRQL:  1f

FAULTING_IP: 
nt!EtwpReserveTraceBuffer+82
828e211e f00fb117        lock cmpxchg dword ptr [edi],edx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  8296cabc -- (.trap 0xffffffff8296cabc)
ErrCode = 00000000
eax=85c20007 ebx=8533ed80 ecx=85c20007 edx=85c20006 esi=84ffa208 edi=84ffa208
eip=828e211e esp=8296cb30 ebp=8296cb5c iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!EtwpReserveTraceBuffer+0x82:
828e211e f00fb117        lock cmpxchg dword ptr [edi],edx ds:0023:84ffa208=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 828e211e to 8288c7eb

STACK_TEXT:  
8296cabc 828e211e badb0d00 85c20006 00000000 nt!KiTrap0E+0x2cf
8296cb5c 828fdad5 8296cb90 8296cb98 00609a02 nt!EtwpReserveTraceBuffer+0x82
8296cba0 828fecdc 8296cbf0 00000000 00000000 nt!EtwpLogKernelEvent+0x1dd
8296cbcc 82956f6a 8296cbf0 00000001 20000002 nt!EtwpTraceKernelEvent+0x47
8296cc0c 828b65f3 8282a082 8296cc28 00000000 nt!PerfProfileInterrupt+0xa0
8296cc40 8281a58d 00001008 ff88c674 ffffffff nt!KeProfileInterruptWithSource+0x23
8296cd20 828ae00d 00000000 0000000e 00000000 hal!HalpGetPmTimerPerfCounterValue+0x29
8296cd24 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xd


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!EtwpReserveTraceBuffer+82
828e211e f00fb117        lock cmpxchg dword ptr [edi],edx

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!EtwpReserveTraceBuffer+82

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc007

FAILURE_BUCKET_ID:  0xA_nt!EtwpReserveTraceBuffer+82

BUCKET_ID:  0xA_nt!EtwpReserveTraceBuffer+82

Followup: MachineOwner
---------
My System SpecsSystem Spec
30 Dec 2009   #3
soup

Windows 7
 
 

Hi Zigzag,
I've run memtest86 for 8 passes with zero errors and a system file check showed no problems.
Thanks for being interested, any other suggestions?
soup
My System SpecsSystem Spec
.

31 Dec 2009   #4
soup

Windows 7
 
 

Hi,
Can anybody advise please?
Thanks,
soup
My System SpecsSystem Spec
31 Dec 2009   #5
zigzag3143

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by soup View Post
Hi,
Can anybody advise please?
Thanks,
soup

Soup

There is someething we can try which will trigger the BSOD and have a record of it. Its called driver verifier. I need to get john to help you with it as he has more experience with it

Ken J
My System SpecsSystem Spec
31 Dec 2009   #6
usasma
Microsoft MVP

 
 

Try this:
Quote:
Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.

So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).

Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.

Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.

Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.

If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.

More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users
My System SpecsSystem Spec
Reply

 Four Crashes in One Day




Thread Tools




Similar help and support threads
Thread Forum
3 crashes in one night and numerous crashes other days
This BSOD has been going on for some time and I finally found this forum. I'm suspecting it is RAM, but I want to be sure before doing the 'shotgun' approach. I'm hoping someone can help me and I have the downloaded the SF Diagnostic tool and I've uploaded the ZIP folder to this thread. ...
BSOD Help and Support
Browser crashes, windows crashes, memory test won't complete, BSOD
Thanks for listening, as my user name reflects I am now into stuff I'm ignorant about. History. Had this computer a little over a year, I7 with 16gb of memory, windows 7 ultimate. etc About a month ago, started seeing BSOD's. The BSOD would normally reflect "Memory Management" as the...
BSOD Help and Support
Crashes while playing Witcher 2 and other explorer.exe crashes.
HI there i have noticed recently that i have been getting odd explorer.exe restarts whenever i go to Control Panel-System & Security-Windows Update. After clicking windows update explorer will say it needs to restart and go ahead and restart itself. The problem is that it is completely random when...
BSOD Help and Support
Explorer.exe Crashes, attempts restart, crashes again. Details Inside
Hello everyone. This morning I turned my computer on to find that Explorer.exe had crashed. I attempted restarting explorer.exe but every time it attempted to restart it would just crash. Details: Problem signature: Problem Event Name: APPCRASH Application Name: explorer.exe ...
BSOD Help and Support
HELP!!!! Hotel Giant Crashes:Game Crashes to when creating new game
OK When Ever I go start hotel giant but it Won't Let Me Create a new game whenever i tried to do it it says HT has Stopped Working so please help!!!!!!!!!!!!!!! this is not fair first it said that hotel giant that it stopped working please help me this not fair :mad:
BSOD Help and Support
IE 9 crashes
I have just downloaded the latest version of IE9 yesterday from beautyoftheweb.com .. But it isn't as what I expected it to be.. :confused: It constanly crashes at whatever website I go.. facebook, mashable etc.. Occasionally after the crash, it will state that " Windows Data Execution...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:12.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App