Solved BSOD 5-10 minutes after booting

[Tchilleh]

Sinds a couple of months I've been getting Blue screens daily (some exceptions), ALWAYS after the first 5-10 minutes from booting. Dump files aren't always created.
I've been collecting them only sinds 20/06/13. I did a format I think about a week before that because it wouldn't even boot into windows anymore. The day after the clean install, BSOD.

24/06/13 Re-installed Nvidia drivers 320.18. No more BSOD until 04/07/13, BSOD after first 5 - 10 mins of booting, Win7 restarts, immediate BSOD again.
I start in safe mode with internet, BSOD (first time). I start in safe mode, everything seems to work. I start Win7 normally, everything works again.

This is usually the way it goes, I get a BSOD, reboot, everything works fine, except USUALLY it's only ONE BSOD and everything works perfectly ever after, until the next day...

BSODS used to say irql_not_less_or_equal 2. Not these last ones though, they didn't seem to give any explanation. I've Googled this several times and they always say it might be video drivers or anti virus.
I've reinstalled both sinds latest format. I'm currently using Free AVG. Before that I was using Free Avast, but I had to change to AVG because Avast all of a sudden refused to update and even launch, even after reinstalling.

My Win7 is always up to date, so are my drivers. (Motherboard, video, sound card )

Again: when I get my BSOD of the day everything works just fine after, I can play demanding games all day without any issues. Thats why I think it must be a software issue.

I'm hoping for a quick solution here because as you can probably imagine, I'm getting real tired of this.

 

[x BlueRobot]

Welcome to the forums Tchilleh,

[COLOR="Red"]BugCheck 1000007E[/COLOR], {[COLOR="SeaGreen"]ffffffffc0000005[/COLOR], [COLOR="Blue"]fffff80002c129bc[/COLOR], fffff88003da2808, fffff88003da2060}

Probably caused by :[COLOR="Red"] Pool_Corruption[/COLOR] ( nt!ExDeferredFreePool+100 )

Usual causes:  Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control

0: kd>0: kd> [COLOR="SeaGreen"]!pool fffff800`02c129bc[/COLOR]
Pool page fffff80002c129bc region is Nonpaged pool
GetUlongFromAddress: unable to read from fffff80002c83a38
fffff80002c12000 is not a valid small pool allocation, checking large pool...
unable to get pool big page table - either wrong symbols or pool tagging is disabled
fffff80002c12000 is freed (or corrupt) pool
Bad previous allocation size @fffff80002c12000, last size was 0

***
*** An error (or corruption) in the pool was detected;
*** Attempting to diagnose the problem.
***
*** Use !poolval fffff80002c12000 for more details.


Pool page [ fffff80002c12000 ] is __inVALID.

Analyzing linked list...
[ fffff80002c12000 ]: invalid previous size [ 0x48 ] should be [ 0x0 ]
[ fffff80002c12000 --> fffff80002c12400 (size = 0x400 bytes)]: Corrupt region


Scanning for single bit errors...

None found

There seems to be some definite pool corruption here, I believe a driver has most likely overwritten another pool allocation.

CONTEXT:  fffff88003da2060 -- ([COLOR="seagreen"].cxr 0xfffff88003da2060[/COLOR])
rax=fffff8a000d89ce0 rbx=000000000000003f rcx=fffffa8006994290
[COLOR="Red"]rdx=01fffff880019034[/COLOR] rsi=fffff8a00244d000 rdi=fffff8a002284090
rip=fffff80002c129bc rsp=fffff88003da2a40 rbp=0000000000000001
 r8=01fffff880019034  r9=fffff8a0023da181 r10=0000000000000000
r11=0000000000000000 r12=fffffa8006994140 r13=0000000000000000
r14=0000000000000016 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
[COLOR="Blue"]nt!ExDeferredFreePool+0x100:
fffff800`02c129bc 4c8b02[/COLOR]          mov     r8,qword ptr [COLOR="Red"][rdx] [/COLOR]ds:002b:01fffff8`80019034=????????????????

0: kd> [COLOR="SeaGreen"].formats 01fffff880019034; .formats fffffa8006994290[/COLOR]
Evaluate expression:
  Hex:     01fffff8`80019034
  Decimal: 144115155863703604
  Octal:   0007777777420000310064
  Binary:  [COLOR="Red"]00000001[/COLOR] 11111111 11111111 11111000 10000000 00000001 10010000 00110100
  Chars:   .......4
  Time:    Thu Sep  6 23:46:26.370 2057 (UTC + 1:00)
  Float:   low -1.43566e-040 high 9.40395e-038
  Double:  4.77829e-299
Evaluate expression:
  Hex:     fffffa80`06994290
  Decimal: -6047203245424
  Octal:   1777777650000646241220
  Binary:  11111111 11111111 11111010 10000000 00000110 10011001 01000010 10010000
  Chars:   ......B.
  Time:    ***** Invalid FILETIME
  Float:   low 5.765e-035 high -1.#QNAN
  Double:  -1.#QNAN

In my opinion, it also looks like a device driver has overwritten the beginning address of the rdx register too. The data seems to have been passed from the r8 register.

-------------------------------------------------------

Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours:

• http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

   Information

Additional Help - http://www.sevenforums.com/crash-lo...-driver-verifier-identify-issues-drivers.html

Remove:

Start Menu\Programs\AVG

AVG is known to cause BSODs with Windows 7, please remove this program completely using the AVG Removal Tool, and then install these free alternatives listed below.

Install and perform full scans with:

• Malwarebytes : Free anti-malware download
• Microsoft Security Essentials | Protect against viruses, spyware, and other malware

   Information

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system

You can also view this thread for a complete free and lightweight security protection combination:

• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

 

[Tchilleh]

Ok, so I did everything you proposed.

I uninstalled AVG with that advanced uninstaller.
I installed Microsoft essentials and malwarebytes.
I had to reboot several times but had no problems there.
I enabled verifier following the instruction in linked post.

Today, I boot my pc and it just freezes this time, also within the first 5 minutes. No BSOD but I did have to reboot because it was completely unresponsive. I guess this is a step up?

I do remember that past tuesday 02/07, I also had my pc freeze up like this.

So as a short summary: on 24/06 I reinstall Nvidia drivers because of the daily BSODS. Everything works fine until 02/07, it "just" freezes. Everything works fine after that until 04/07, BSODs again. Then 05/07 (today), "just" a freeze.

Since the reinstall the 24th, the only things I changed were: Install Empire: Total war on Steam on the 1st (with Steam first time setup for directx and stuff) and update Firefox to version 22 ont the 3rd.

I also ran the diagnostic tool again today. See attachement.

 

[x BlueRobot]

[COLOR="SeaGreen"]Event[7952]:[/COLOR]
  Log Name: System
  Source: [COLOR="Red"]Disk[/COLOR]
  Date: [COLOR="red"]2013-06-19[/COLOR] T20:27:07.385
  Event ID: 11
  Task: N/A
  Level: Fout
  Opcode: N/A
  Keyword: Klassiek
  User: N/A
  User Name: N/A
  Computer: Tchilleh-PC
  Description: 
[COLOR="red"]Het stuurprogramma heeft een controllerfout gevonden in \Device\Harddisk2\DR4.[/COLOR]

[COLOR="SeaGreen"]Event[10021]:[/COLOR]
  Log Name: System
  Source: [COLOR="Red"]Disk[/COLOR]
  Date: [COLOR="red"]2013-06-24 [/COLOR]T18:59:27.376
  Event ID: 11
  Task: N/A
  Level: Fout
  Opcode: N/A
  Keyword: Klassiek
  User: N/A
  User Name: N/A
  Computer: Tchilleh-PC
  Description: 
[COLOR="red"]Het stuurprogramma heeft een controllerfout gevonden in \Device\Harddisk2\DR2[/COLOR].

I noticed a few of these errors within your Event Log, it seems that the driver has detected an error for the controller for a certain hard-drive, I would suggest beginning to run some hard-drive diagnostics:

Run some hard-drive diagnostics and follow these steps:

• Hard Drive Diagnostic Procedure

Find your hard-drive manufacturer and run their tests.

Additional Tests:

• SeaTools for DOS | Seagate
• CrystalDiskInfo - Software - Crystal Dew World

Post a screenshot of Crystal Disk Info summary:

• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

If you have an SSD, make sure the following are up to date:

• SSD firmware
• BIOS Version
• Chipset Drivers
• Hard disk controller drivers/SATA drivers
• If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Check for any file system errors and bad sectors using Option #2 of:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Use this command with Disk Check:

chkdsk C: /f /r

I would recommend creating a backup of your data or creating a system image.

 

[Tchilleh]

So, today I start my pc and wait out the freeze or bluescreen by making figures with my mouse on the desktop while drinking coffee. After +/- 10 minutes I think "yeah! no BSOD today", I open Firefox to start my daily internet routine aaand I get a BSOD. It reboots, I see that Microsoft Sec Essentials realtime protection didn't start so I manually enable it. And after a minute or two I get a BSOD again. Reboot, I hit F8 to start in safemode. After it finishes laoding the drivers to get into safemode I get another BSOD. Reboot, I get asked to run Windows boot recovery, I do that, reboot and Windows works again.

So then I run Western Digital Data Lifeguard Diagnostics (because I have Western D. drives), I run both SMART and extended test and both of them pass.

I run Crystaldiskinfo. (screenshots in attachement)

Then I run cmd in admin and run chkdsk c: /f /r , reboot, it runs and it says there are no errors, everything is fine.

I also ran the diagnostic tool again today. See attachement.

 

[x BlueRobot]

[COLOR="Red"]BugCheck A[/COLOR], {fffffba000eecdf8, 2, 0, fffff80001efb1cb}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+433d3 )

Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

There's seems to be a few Windows drivers related to the hard-disk which are being blamed, and the dump file seems to be partially corrupted.

Scan for any missing, modified or corrupted protected Windows files with:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

 

[Britton30]

It may help if you uninstall the nVIDIA driver then install the previous one, doing a clean install.

 

[x BlueRobot]

Here's from additional suggestions from another BSOD Team member (Arc):

1. Ataport is must vulnerable to rootkits, so the check may be needed.
2. Use the HDD2 (320 GB WD) to any other port than port 3.
3. Change the sata cables.

Scan for any malware:

• http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html
• Anti-rootkit utility TDSSKiller

 

[Tchilleh]

First of all, thank you for all the feedback!

I just ran the SFC /scannow in windows and it said that everything is ok.

I'm going to try the rest of the suggestions tomorrow. Actually later today, its' 1:30 AM. Time to go sleep.

 

[Tchilleh]

Ok so, I start my pc, login and get BSOD within +/- 5 mins. (as usual) It reboots and after the BIOS I just get a black screen, it won't load into Windows. I press reset and it works fine after.

I ran TDSSkiller in Windows with standard options ( no loaded modules ) and it finds no rootkits.
I make a bootable CD with Windows offline defender, run it and it automatically runs a quick scan, finds nothing, I run a full scan and it also finds nothing. I boot into windows and everything still works.

I see there are new Nvidia drivers out, version 320.49. I currently have 320.18 installed. I've also downloaded the older 314.22 and I'm going to give them a try like Britton30 mentioned. I can't remember if I changed to 320.18 because I was having problems already or if it just was because they were new. I THINK the latter.

Also, I don't really understand what you said, x BlueRobot, about the ATA port??

Edit:

I've just Installed the 314.22 Drivers. Just to be sure I'm doing this right, here is how:

I uninstalled the Physx driver first and then the Graphical. It asked for reboot, I reboot. Then when back in windows I see that windows automatically installs something for the graphics card ( it disappeared fast, I think it said WDDM 1.1 or something?) and asks for another reboot. I do that and install the drivers without the 3D drivers and auto update, so just the Graphical and the Physx drivers. It doesn't ask for a reboot so I don't and now I'm typing this post.

I also noticed I forgot to run the Sevenforum Diagnostic tools for todays BSOD and logs, so here it is:

 

[x BlueRobot]

Windows won't have been installing it's own VGA driver, when you removed the driver and then rebooted. The SATA ports will be the ports where the SATA cables are connected to, I would download the motherboard manual, whereby you can check the SATA port numbers.

Motherboard Manual - GIGABYTE - Motherboard - Socket 775 - GA-EP45-UD3R (rev. 1.0)

I wasn't sure what your motherboard revision number was, so I think I attached the Rev 1.0 link, you should be able to find the correct motherboard revision number on your motherboard, it will be Rev x.x.

I'm checking the dump files now, and will post a new post.

EDIT: Unfortunately, the dump file was dated from yesterday and is the same file, I would check this directory for any dump files and then manually upload them in a zipped folder or .rar folder:

C:\Windows\Minidump or %systemroot%\Minidump

 

[Tchilleh]

There aren't any dump files dating 07/07. I guess they failed to create.

I started my pc today and got another BSOD, it said ntfs.sys. It did create a dump file.

I then read your post and shut down my pc to open it up. My motherboard is Rev 1.1. I also noticed that both my HDDs are connected to SATA 0 and 1 and my DVD to SATA 5. SATA 3 was empty so I thought it best not to change it?

When I started my pc a good 50 minutes later I didn't get a BSOD, everything works fine.

What I also checked were my BIOS settings, I don't know a whole lot about this so usually don't touch it. Then I set them to optimal default settings. Most settings stayed the same except one, 'SATA IDE ctrl mode' changed from AHCI to IDE. And all I changed was to disable the floppy and the onboard soundcard. ( I don't have a floppy connected and use a creative sound card)

There are some settings related to the harddrives that I don't know what they mean. Could it be that they are the cause and need to be changed? The settings I mean are:

SATA RAID/AHCI set to disabled
SATA port 0-3 Native set to disabled
SATA / IDE device set to enabled
SATA IDE ctrl mode set to IDE ( AHCI before the default settings)

 

[x BlueRobot]

SATA/IDE Ctrl Mode will be what the ports are operating, ACHI gives better performance, but what mode did you install Windows on? I'm guessing it may have been IDE if that's the default setting. This setting is only one which could cause a BSOD.

SATA Port 0-3 Native, by having this setting set to disabled, it will place the hard-drives in IDE mode, which is usually used to provide support for older operating systems. Since your controller is in IDE mode, it makes sense for the hard-drives to operate as IDE.

SATA/IDE Device enables the SATA ports for your hard-drive.

SATA RAID/AHCI, sets which mode the hard-drive will operate as.

Read More - http://www.maximumpc.com/article/features/ultimate_bios_guide_every_bios_setting_revealed?page=0,1

 

[Tchilleh]

Windows 7 got installed on ACHI then because I didn't touch the bios in a year or so.

I also noticed that my motherboard has two SATA2 slots as well (empty) and I checked the WDC site and apparantly my HDDs support that.

So it might be best then that I just format and install windows 7 with my HDDs connected to both the SATA2 slots and my DVD drive to one of the six other SATA slots? (Does it matter which one?)

And then I should put the BIOS settings like this?

SATA RAID/AHCI Mode to AHCI
SATA Port0-3 Native Mode to Enabled
Onboard SATA/IDE Device to Enabled
Onboard SATA/IDE Ctrl Mode to ACHI

 

[Britton30]

The HDD you install w7 to should be the only one attached during the install. It should also be on the SATA_0 or SATA1 port whichever your board has. The first one at any rate so it will end up as disk 0 when done.

 

[x BlueRobot]

Remember to install Windows in ACHI mode.

 

[Tchilleh]

Remember to install Windows in ACHI mode.

What exactly do you mean with this? Doesn't Windows 7 recognize ACHI on its own or do I have to make such a F6 driver?

 

[x BlueRobot]

Boot into the BIOS, and ensure it is enabled before you install Windows 7, just as a precaution and so we confirm it's in ACHI mode.

 

[Britton30]

Remember to install Windows in ACHI mode.

What exactly do you mean with this? Doesn't Windows 7 recognize ACHI on its own or do I have to make such a F6 driver?

As BlueRobot said, you'll have to change the SATA mode in BIOS to AHCI. There are no F6 drivers for w7, that was for XP.

 

[Tchilleh]

Hey guys, I'm glad to say I got good news! Alhtough I'm not going to scream victory just yet. I think I'll wait a couple of days before marking this thread as solved.

I reinstalled Windows 7 yesterday in AHCI with BIOS settings set up correctly this time and installed it with only one HDD in the SATA2 0 slot. I also ran the install offline, normally I just left the internet connection on.

I also installed the SATA and AHCI drivers from the Gigabyte website, I also didn't do that the past couple of installs.

I installed Microsoft Security Essentials and Malwarebytes again instead of AVG or AVAST, is this really enough protection?

Everything worked and still works fine. After I was done with the install I turned off my pc yesterday for about four hours to check if I wuold get a BSOD, I didn't. Todays boot also went perfect.

So I guess the issue was with the BIOS settings and Win7 ACHI / SATA drivers then?

Thank you guys for all the help!


One last question. I have these optional updates, should I install them?