2 BSODs in one Night but Different error

[paulmh5]

Hello

I hope someone can help me.

Out of the blue (pardon the pun) I have started getting BSODs for a range of different things but all seem to be for different reasons.

I had one on Monday morning although I cant remember the details of the message (I'd just woke up) it was something along the lines of "Your system has been shutdown to prevent changes to system critical files."

I have had two this evening.

One for Nvlddmkm.sys and another for IRQL_GT_ZERO_AT_SYETM_SERVICE.

I've done a bit of googleing and there doesn't seem to be a clear answer to tie them both together. I haven't updated any drivers in the last few days however they are up to date to the best of my knowledge. I've run sfc /scannow which comes back with no violations.

Can anyone suggest a next step please?
I have attached the 3 dump files.

Thanks in advance

Paul

 

[Capt.Jack Sparrow]

Hello and Welcome !

Seems like nvlddmkm.sys is causing the System to crash. Follow this article and see if you can do a nVidia Driver Cleanup nVidia Driver Cleanup Guide !! « Captain Debugger

Follow these steps in the article STOP 0x116: VIDEO_TDR_ERROR troubleshooting

Remove the Duplex Driver
sptd.sys Mon Oct 12 02:25:14 2009 follow this article DuplexSecure - FAQ

Remove Asus Utilities :
ASACPI.sys Mon Mar 28 08:00:36 2005

Go to C:\Windows\Drivers and rename ASACPI.sys to ASACPI.old and reboot the System.

Bugcheck:

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 00000000774100ba, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff88009a4fc60, 0

Debugging Details:
------------------


PROCESS_NAME:  mdm.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+1a7952f0099dfdc
00000000`774100ba ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800036c6ca9 to fffff800036c7740

STACK_TEXT:  
fffff880`09a4fa98 fffff800`036c6ca9 : 00000000`0000004a 00000000`774100ba 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09a4faa0 fffff800`036c6be0 : fffffa80`0b4e4060 00000000`7efa7000 00000000`00000020 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`09a4fbe0 00000000`774100ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`01ece708 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x774100ba


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`036c6be0 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_mdm.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_mdm.exe_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------

Hope this helps,
Captain

 

[paulmh5]

Thanks for that, looks like good info. As me and my PC have fallen out I'll try those steps tomorrow and let you know how it goes.
Do all the BSODs come down to the nvidia component; I was a bit thrown by 2 of the 3 BSODs not really mentioning a particular system component.

 

[paulmh5]

I have had another 2 blue screens after trying the above.
Now I'm getting IRQL_NOT_LESS_OR_EQUAL

Can anyone have a look at the next 2 dump files to see if they can find a common cause? I'm a bit confused with the whole thing as I've not installed anything new just CoD:BO and HAWX2 games which I cant see would do this kind of damage.

Thanks

 

[zigzag3143]

Hello

I hope someone can help me.

Out of the blue (pardon the pun) I have started getting BSODs for a range of different things but all seem to be for different reasons.

I had one on Monday morning although I cant remember the details of the message (I'd just woke up) it was something along the lines of "Your system has been shutdown to prevent changes to system critical files."

I have had two this evening.

One for Nvlddmkm.sys and another for IRQL_GT_ZERO_AT_SYETM_SERVICE.

I've done a bit of googleing and there doesn't seem to be a clear answer to tie them both together. I haven't updated any drivers in the last few days however they are up to date to the best of my knowledge. I've run sfc /scannow which comes back with no violations.

Can anyone suggest a next step please?
I have attached the 3 dump files.

Thanks in advance

Paul

Paul hi and welcome


Ok where to start


1-ASACPI.SYS a major cause of BSOD's in the 2005 rev.

ASACPI.sys Sun Mar 27 22:30:36 2005

The 2005 version of this driver is a known BSOD cause.
Please visit this link: ASUSTeK Computer Inc.-Support- download_item_mkt
Scroll down to the Utilities category, then scroll down to the "ATK0110 driver for WindowsXP/Vista/Windows 7 32&64-bit " (it's about the 8th item down).
Download and install it.
Go to C:\Windows\System32\drivers to check and make sure that the ASACPI.sys file is date stamped from 2009 or 2010 (NOT 2005).

2-SPTD.SYS the second biggest cause used by daemon tools and alcohol120

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads
[/quote]
You can use MagicDisc as an alternative.

Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview


3-Video driver. needs to be re-installed using the below

When upgrading your graphic driver you MUST remove all traces of the current driver. In order to do that we recommend using Guru3D - Driver Sweeper

When it is removed then download and install the fresh copy.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\111610-59997-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03611000 PsLoadedModuleList = 0xfffff800`0384ee50
Debug session time: Tue Nov 16 15:38:22.151 2010 (GMT-5)
System Uptime: 0 days 0:18:20.195
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff88004c1c73a, fffff8800a8ef7a0, 0}

Probably caused by : nvlddmkm.sys ( nvlddmkm+20173a )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88004c1c73a, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800a8ef7a0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

 

[zigzag3143]

YOU REALLY NEED TO REMOVE THOSE FILES. Unless you like BSOD's