BSOD or RESTART randomly, new memory,hard drive, and OS

[francoisdupie]

hey all, firstly my specs:

i5 2.57Ghz. 8 GB ram. 500GB seagate HDD. GTS 360M Nvidia Graphics. Windows 7 Ultimate x64 (Its the W860CU laptop from Mecer)

Okay so heres my problem, i got the laptop for 2-3 years now, NEVER had a problem. It came out with windows pro 32-bit. I upgraded to Ultimate 32-bit more than a year ago now, still had no problems.

Reently i started getting APPCRASH. tried to sort it,never found a solution(but i think it was application related).Then i started getting restarts, so i went through several forums on different websites, followed alot of them but never got a solution. I was able to disable the auto restart when something goes wrong under the system failures option in advanced system settings in control panel. then i got a few BSOD but was never able to get the info from there,it was too quick. After that the BSOD went away but normal restart came back, but the option for auto restart STILL stays unchecked. So then i started the event viewer, got alot of bad dll file's and random stuff. So then someone suggested i should go for windows 7 x64-bit, so i did, Made a COMPLETE CLEAN install, installed all (NEW DOWNLOADED) drivers, downloaded ALL updated including service pack 1. Guess what, i got x3 restarts in that whole process!!! Okay so then i read i should get a new RAM piece and test it on each slot leaving out the old ones, made no difference, then someone said it can only be the hard drive then. So today i went to the local PC shop, i told the guy my whole scenario and he ran BurnInTest on my pc, hoping to pinpoint the problem. He checked the event viewer and found Kernel Power problems. BurnInTest showd that ALL my hardware are A-Okay! He then said its deffinetly memory related due to the "kernel" error. so i went forth, bought 2x4GB Ram (upgrading from 2x2GB), and bought a new hard drive, 500GB (upgrading from 320GB). So i got home, threw in the new hard ware, cleaned the mother board, graphics card, slots, coolers, fans etc, with air in a can tool. Installed a new copy of windows 7 ultimate 64-bit, installed all new drivers, downloaded all new updates (AGAIN), installed them, installed the service pack. so it ran like a dream, i was thinking to myself, wow, double the ram, new HDD, fresh copy of windows (which i liked the idee of new, because i previously used 32-bit). The thought of wowness was just starting to sink in and then boom, SYSTEM RESTART!!!!!!! PLEASE GUYS! IM REALLY IN NEED HERE NOW. i then downloaded a few benchmark tools, so that i can push the pc to its potential to try to figure out where the problem is. I read that i should upload the minidump file here for u guys to have a look but i cant find it anywhere?? here is the info im able to copy and paste from event viewer, thanks in advance guys!!!:

EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2012/05/01 02:32:49 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Franna-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-05-01T12:32:49.158015300Z" />
<EventRecordID>1132</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Franna-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>


ps. ive already disabled all sound in devce manager but no luck.
Heres the latest one
- System
- Provider
[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated
[ SystemTime] 2012-05-03T18:36:43.440413900Z

EventRecordID 4137

Correlation

- Execution
[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Franna-PC

- Security
[ UserID] S-1-5-18

- EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

 

[JMH]

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

If you are overclocking STOP.

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.

To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

 

[francoisdupie]

Hi IMH. Thanks for responding. Like I said in the original post, there is no 'minidump' file or folder on my pc, I made sure its enabled and that my hidden files and folders are set to show. I searched it as well in the windows search, nothing at all containing 'dump' or 'minidump' at all. I also downloaded a 'windows blue screen' application that's suppose to show the last bsod, but yet it doesn't find any dump files on my pc to display.

 

[JMH]

For dumps to be produced. . .
▪ Page file must be on OS drive
▪ Page file base allocation size must be > than installed physical RAM
▪ Windows Error Reporting (WER) system service should be set to MANUAL
▪ Set page file to system managed, OS drive

Set System Crash/ Recovery Settings to "Kernel Memory Dump" - this will produce. . .
--> a Full Kernel Memory Dump - c:\windows\memory.dmp
--> a Mini Kernel dump c:\windows\minidump

The Full Kernel is overwritten each BSOD; a new mini kernel dump is created w/ different name for each BSOD

To check your system's "Recoveros" (Recovery) and Page File settings via Windows Management Instrumentation (WMI), run the following -

HTML output - WMI - "Recoveros" and Page File Settings (HTML)
Text file output - WMI - "Recoveros" and Page File Settings (TEXT)

Thanks to jgriff2 @sysnative.com

 

[francoisdupie]

Okay ill check back with you tonight, did not know about that. I read on another thread to set my page file to 3072MB even if I run 8GB. I'm at work now. Thanks man.

 

[JMH]

Wrong gender...
Good luck!

 

[francoisdupie]

sorry about the gender JMH . okay so i set everything up like u suggested, then restarted to make sure everything stays as i set it. then got no bsod or restart for 15 min so decided to run flight simulator (i use this because it seems to speed up the bsod or restart, but isnt the cause because it still happens without running). okay so then 15 min into the game i got this :

Problem signature:
Problem Event Name: BEX
Application Name: fsx.exe
Application Version: 10.0.61637.0
Application Timestamp: 46fadb14
Fault Module Name: unknown
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Offset: 00000000
Exception Code: c0000005
Exception Data: 00000008
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 7177
Additional information about the problem:
LCID: 7177
Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

so i ran it again and got a restart after about 3min into the game, stil found no minidump file whatsoever anywhere, although the system is set up as u asked it to be. event viewer says this about the restart:

-System
-Provider[ Name] Microsoft-Windows-Kernel-Power[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID41Version2Level1Task63Opcode0Keywords0x8000000000000002-TimeCreated[ SystemTime] 2012-05-04T21:18:43.142415200Z
EventRecordID4542Correlation-Execution[ ProcessID] 4[ ThreadID] 8
ChannelSystemComputerFranna-PC-Security[ UserID] S-1-5-18

-EventData
BugcheckCode0BugcheckParameter10x0BugcheckParameter20x0BugcheckParameter30x0BugcheckParameter40x0SleepInProgressfalsePowerButtonTimestamp0

 

[Trinty]

As JMH said we need DMP files to know your problem.

Did you all exactly what JMH said :

To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

?

If your computer automatic restart after BSOD or you dont got BSOD only restart you will dont have DMP files.

In this problem, that can be memory.... If you have new memory, and it isnt good , or its "broken" you can have problem (Early, I had same problem, and problem was my memory. But first I want to view your DMP file if it is possible).

Trinty.

 

[francoisdupie]

hi trinty, yes im sure its all set as stated, i got another restart just now, still no minidump. and event viewer again:

-System
-Provider[ Name] Microsoft-Windows-Kernel-Power[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID41Version2Level1Task63Opcode0Keywords0x8000000000000002-TimeCreated[ SystemTime] 2012-05-04T22:03:29.814814700Z
EventRecordID4868Correlation-Execution[ ProcessID] 4[ ThreadID] 8
ChannelSystemComputerFranna-PC-Security[ UserID] S-1-5-18

-EventData
BugcheckCode0BugcheckParameter10x0BugcheckParameter20x0BugcheckParameter30x0BugcheckParameter40x0SleepInProgressfalsePowerButtonTimestamp0

Trinty, i said in my original post that the guy from the local pc shop said it was memory related due to "kernel" in event viewer, thats why i bought new ram and hard drive, before i bought it, i got a 2gb ram stick to test my slots and all were the same. its when he said its memory related that i went forth to but 2x new 4bg ram sticks. i also used burninTest to check the complete pc, but all seems fine, and tests to all hardware were passed.

 

[zigzag3143]

Okay ill check back with you tonight, did not know about that. I read on another thread to set my page file to 3072MB even if I run 8GB. I'm at work now. Thanks man.

If you cant find the DMP file or folder please check C:\winows and the DMP will be called MEMORY.DMP. It is huge (the size of your ram) and that brings me to your pagefile

If you have 8 gigs of ram you have to have a page bigger than that to have the DMPS WRITTEN. Not 3072Mb ??? 3072 is for suystems with 3 gigs of ram.

Did the new ram come in the same package??? If not it may not be matched.

Also please run a malwarebytes scan just to be sure.

Please download the free version of Malwarebytes.
Update it immediately.
Do a full system scan
Let us know the results at the end.

http://www.malwarebytes.org/products

 

[francoisdupie]

hi zigzag, i checked windows folder, no memory file. the page file is now set to auto managed so its more than my 8 GB. i checked. and yes the ram came in same package, all the info on them are also identical. checked it now to make sure. i ran windows memory test, all shows it perfect. here are the quickscan and full scan results of malwarebytes like u wanted me to scan:

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.05.05.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Francois :: FRANNA-PC [administrator]
2012/05/05 08:50:45 AM
mbam-log-2012-05-05 (08-50-45).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 217264
Time elapsed: 2 minute(s), 44 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.05.05.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Francois :: FRANNA-PC [administrator]
2012/05/05 08:54:29 AM
mbam-log-2012-05-05 (08-54-29).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 355018
Time elapsed: 36 minute(s), 41 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)

im willing to use teamviewer if that will help anyone to sort out the dumpfile location? and check whatever needs to be checked? i really dont know where the dump flie can bo OR why windows doesnt create it OR why i cant see whats up with the memory (if it is infact memory).

 

[zigzag3143]

hi zigzag, i checked windows folder, no memory file. the page file is now set to auto managed so its more than my 8 GB. i checked. and yes the ram came in same package, all the info on them are also identical. checked it now to make sure. i ran windows memory test, all shows it perfect. here are the quickscan and full scan results of malwarebytes like u wanted me to scan:

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.05.05.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Francois :: FRANNA-PC [administrator]
2012/05/05 08:50:45 AM
mbam-log-2012-05-05 (08-50-45).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 217264
Time elapsed: 2 minute(s), 44 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.05.05.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Francois :: FRANNA-PC [administrator]
2012/05/05 08:54:29 AM
mbam-log-2012-05-05 (08-54-29).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 355018
Time elapsed: 36 minute(s), 41 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)

im willing to use teamviewer if that will help anyone to sort out the dumpfile location? and check whatever needs to be checked? i really dont know where the dump flie can bo OR why windows doesnt create it OR why i cant see whats up with the memory (if it is infact memory).

Good news on Malwarebytes.

 

[francoisdupie]

so what do you think?

 

[JMH]

Getting any more BSOD's?

 

[francoisdupie]

Hey JMH, yes, I ran than malwarebytes like suggested by zigzag, the results ontop show there's nothing, still can't find minidump or memory file

 

[JMH]

As a troubleshooting measure run SFC, Option 2.{ first link}
You MAY need to run it three times...
Reboot at the end.

Read this Tutorial carefully.

Let us know the results at the end please.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7

 

[francoisdupie]

okay i did the scans three times, first time got errors and windows repaired it, second and third there were no errors... attached is the log file with the results. im not sure why there were errors, i mean its a fresh windows install :huh:

 

[francoisdupie]

FINALLY, GOT THE MINIDUMP FILE! thanks JMH i think the SFC helped. okay so im uploading the dump file, i saw something about the memory management or something....

 

[JMH]

That IS exactly what I was hoping for...
Back in a few ticks!

 

[zigzag3143]

FINALLY, GOT THE MINIDUMP FILE! thanks JMH i think the SFC helped. okay so im uploading the dump file, i saw something about the memory management or something....

The SFC did repair a large amount of files but I don't think that is out of the woods yet.

This sole DMP file points to the cause of the crash being Related to aswSP.sys avast! Network Shield Support.

Avast can be a contributing cause of BSOD'S . Please remove and replace with Microsoft Security Essentials AT LEAST TO TEST


http://files.avast.com/files/eng/aswclear5.exe

Microsoft Security Essentials - Free Antivirus for Windows