Newly Constructed PC, BSOD Problem

First of all, I want to extend a massive thanks to everyone here who helps out, I REALLY appreciate it.

I just built a brand new PC, and am receiving the BSOD. Now I am new to all of this, so I am not too well versed in how to check the event log and what not. It has gone to the blue screen twice now, each after about two hours running time. I can not figure out what is causing it. The first time, I was simply checking out the new PC, on IE. The second time, after about two hours, I was running Microsoft Security Essentials, and doing nothing else. It had finished, and the PC had reset, and I can only come to the conclusion that it was the Blue Screen. CPU temps are between 36C and 42C for an i7 960, and cpu fan speeds are normal, between 2058 and 2120 RPMs. I am currently awaiting another blue screen, so I can read what happened, and write it down. In the meantime, and pointers on how to check the even log? I know how to get it open, but not what to look for. Once I discover the issue, I don't think I will know how to fix it.

Once I am able to obtain further details on the crash I will provide them.

Edit: Okay I hope I did this correctly

Attachment 70374

Attach your minidump file

https://www.sevenforums.com/crash-loc...tml#post351429

Snazzle1088 said:

First of all, I want to extend a massive thanks to everyone here who helps out, I REALLY appreciate it.

I just built a brand new PC, and am receiving the BSOD. Now I am new to all of this, so I am not too well versed in how to check the event log and what not. It has gone to the blue screen twice now, each after about two hours running time. I can not figure out what is causing it. The first time, I was simply checking out the new PC, on IE. The second time, after about two hours, I was running Microsoft Security Essentials, and doing nothing else. It had finished, and the PC had reset, and I can only come to the conclusion that it was the Blue Screen. CPU temps are between 36C and 42C for an i7 960, and cpu fan speeds are normal, between 2058 and 2120 RPMs. I am currently awaiting another blue screen, so I can read what happened, and write it down. In the meantime, and pointers on how to check the even log? I know how to get it open, but not what to look for. Once I discover the issue, I don't think I will know how to fix it.

Once I am able to obtain further details on the crash I will provide them.

Edit: Okay I hope I did this correctly

Attachment 70374

Hello !! Welcome to SF !!

The issue is quiet straight forward. It's your Memory that has casued the problem. Follow the below steps.

If you have an Antivirus / Firewall try uninstalling it and see whether it makes any difference. Update your BIOS Firmware.

Run the Memory Diagnostic & HD Diagnostic

Start > CMD > Right Click and Run as Administrator > SFC /SCANNOW

Here a old driver from 2005 which is well known for problem

ASACPI.sys is well known for problem. It belongs to Asus utility. Remove the Asus utilities completly. Download it from here Here MB_WIN7_ATK.ZIP and install

or

Go to C:\Windows\System32\drivers and rename ASACPI.sys to ASACPI.old and reboot the System.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {5003, fffff70001080000, 6e2, 4}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+3687c )
Followup: MachineOwner
---------
2: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;
GetPointerFromAddress: unable to read from fffff80002cfc000
THREAD fffffa8008f01b60  Cid 01a8.0184  Teb: 000007fffffda000 Win32Thread: fffff900c1ab5010 RUNNING on processor 2
Not impersonating
GetUlongFromAddress: unable to read from fffff80002c3ab74
Owning Process            fffffa8008eebb30       Image:         svchost.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      5719         
Context Switch Count      2294                 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x00000000778a8f00
Stack Init fffff88007412db0 Current fffff880074127d0
Base fffff88007413000 Limit fffff8800740a000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`07412348 fffff800`02b3aa26 : 00000000`0000001a 00000000`00005003 fffff700`01080000 00000000`000006e2 : nt!KeBugCheckEx
fffff880`07412350 fffff800`02ade623 : ffffffff`ffffff00 fffff880`074123e0 00000000`00000000 fffff8a0`00000000 : nt! ?? ::FNODOBFM::`string'+0x3687c
fffff880`07412460 fffff800`02ac26ee : 00000000`00000000 00000000`00fc2fff 00000000`00000000 fffff680`00000000 : nt!MmAccessFault+0x343
fffff880`074125c0 fffff800`02d6fcf9 : fffffa80`08eebb30 00000000`00fc2fff fffffa80`00000002 fffff8a0`0000c538 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`074125c0)
fffff880`07412750 fffff800`02ddf50f : 00000000`00fc0000 fffffa80`08eebb30 fffff880`07412970 fffffa80`00000001 : nt!MiSecureVirtualMemory+0xe9
fffff880`074127c0 fffff800`02d6f8b0 : fffff8a0`00000004 fffffa80`08eebb30 fffff880`07412970 00000000`00000000 : nt!MiMapViewOfSection+0x23f
fffff880`074128b0 fffff800`02d6f545 : 00000000`00fc0000 00000000`00003000 fffff880`07412a08 00000000`00000000 : nt!AlpcpCreateView+0x1d0
fffff880`07412970 fffff800`02dc483f : fffff8a0`0b4d8030 00000000`00000000 fffff880`07412a68 00000000`0000001e : nt!AlpcpReceiveView+0xf5
fffff880`07412a00 fffff800`02dc5b52 : 00000000`00bcf978 00000000`00000001 00000000`00000000 00000000`00000001 : nt!AlpcpExposeAttributes+0x17f
fffff880`07412a60 fffff800`02dc6f76 : fffffa80`08f1f260 fffff880`00000000 00000000`00000000 fffffa80`08f1f260 : nt!AlpcpReceiveMessage+0x3ef
fffff880`07412b00 fffff800`02ac3853 : fffffa80`08f01b60 fffff880`07412ca0 00000000`00bcf928 fffffa80`08b4a4b0 : nt!NtAlpcSendWaitReceivePort+0x1e6
fffff880`07412bb0 00000000`778e070a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`07412c20)
00000000`00bcf908 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778e070a
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff70001080000
Arg3: 00000000000006e2
Arg4: 0000000000000004
Debugging Details:
------------------
 
BUGCHECK_STR:  0x1a_5003
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
CURRENT_IRQL:  0
TRAP_FRAME:  fffff880074125c0 -- (.trap 0xfffff880074125c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000fc0000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8008eebb30 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d6fcf9 rsp=fffff88007412750 rbp=fffffa8008eebd48
 r8=0000000000000002  r9=00000000ffffffff r10=0400000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MiSecureVirtualMemory+0xe9:
fffff800`02d6fcf9 0fb600          movzx   eax,byte ptr [rax] ds:eec0:00000000`00fc0000=??
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff80002b3aa26 to fffff80002ac4600
STACK_TEXT:  
fffff880`07412348 fffff800`02b3aa26 : 00000000`0000001a 00000000`00005003 fffff700`01080000 00000000`000006e2 : nt!KeBugCheckEx
fffff880`07412350 fffff800`02ade623 : ffffffff`ffffff00 fffff880`074123e0 00000000`00000000 fffff8a0`00000000 : nt! ?? ::FNODOBFM::`string'+0x3687c
fffff880`07412460 fffff800`02ac26ee : 00000000`00000000 00000000`00fc2fff 00000000`00000000 fffff680`00000000 : nt!MmAccessFault+0x343
fffff880`074125c0 fffff800`02d6fcf9 : fffffa80`08eebb30 00000000`00fc2fff fffffa80`00000002 fffff8a0`0000c538 : nt!KiPageFault+0x16e
fffff880`07412750 fffff800`02ddf50f : 00000000`00fc0000 fffffa80`08eebb30 fffff880`07412970 fffffa80`00000001 : nt!MiSecureVirtualMemory+0xe9
fffff880`074127c0 fffff800`02d6f8b0 : fffff8a0`00000004 fffffa80`08eebb30 fffff880`07412970 00000000`00000000 : nt!MiMapViewOfSection+0x23f
fffff880`074128b0 fffff800`02d6f545 : 00000000`00fc0000 00000000`00003000 fffff880`07412a08 00000000`00000000 : nt!AlpcpCreateView+0x1d0
fffff880`07412970 fffff800`02dc483f : fffff8a0`0b4d8030 00000000`00000000 fffff880`07412a68 00000000`0000001e : nt!AlpcpReceiveView+0xf5
fffff880`07412a00 fffff800`02dc5b52 : 00000000`00bcf978 00000000`00000001 00000000`00000000 00000000`00000001 : nt!AlpcpExposeAttributes+0x17f
fffff880`07412a60 fffff800`02dc6f76 : fffffa80`08f1f260 fffff880`00000000 00000000`00000000 fffffa80`08f1f260 : nt!AlpcpReceiveMessage+0x3ef
fffff880`07412b00 fffff800`02ac3853 : fffffa80`08f01b60 fffff880`07412ca0 00000000`00bcf928 fffffa80`08b4a4b0 : nt!NtAlpcSendWaitReceivePort+0x1e6
fffff880`07412bb0 00000000`778e070a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00bcf908 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778e070a
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+3687c
fffff800`02b3aa26 cc              int     3
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+3687c
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb
FAILURE_BUCKET_ID:  X64_0x1a_5003_nt!_??_::FNODOBFM::_string_+3687c
BUCKET_ID:  X64_0x1a_5003_nt!_??_::FNODOBFM::_string_+3687c

Hope this helps,
Captain

Those dmps didn't give too much info. You had bugchecks 1E and A:

A:

Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

BSOD Index

1E:

Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

BSOD Index

I suggest removing Norton, updating your BIOS, and running a memory test.

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder. Boot from the CD, and run at least 5 passes.

Uninstall Norton from Programs and Features, and run its removal tool: ftp://ftp.symantec.com/public/englis...moval_Tool.exe

Then download and install Microsoft Security Essentials.

Search for your motherboard here for a BIOS update: ASUSTeK Computer Inc.-Support-

I'd say the most important thing is a memory test though.

Yes, that's correct. Rememer, any time Memtest suggests memory errors, it can also mean a bad motherboard slot. If all the sticks show errors, try testing them in another slot.

Okay, memory test run: 0 Errors
Norton Completely removed and Microsoft Security Essentials installed (actually, I already had it)
BIOS Updates to the latest version

Computer has been running for about fifteen minutes, waiting to see what happens. Any other pointers?

Edit: How do I remove the ASUS Express Gate? I can't figure that out.

It looks like the Asus Express Gate is a feature built into your motherboard. You cannot uninstall it.