Bsod advice please

[brianzion]

HI ALL

i was unplugging a usb dvd-t tv tuner then re-plugging in and i received a blue screen crash just need advice on today's crash please i cant run a perfmon /report it does not work on this machine (has not worked for a year its always says time out i did a thread on it but never got it working) but i have zipped up the mini dump as attachment

windows 7 home premium x 64
machine 18 months old
oem installed 1 year

here is the nirsoft blue screen view report if it helps

060111-59935-01.dmp 01/06/2011 05:32:01 UNEXPECTED_KERNEL_MODE_TRAP 0x0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 fffff800`03dc90f1 ntoskrnl.exe ntoskrnl.exe+7fd00 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17592 (win7sp1_gdr.110408-1631) x64 ntoskrnl.exe+7fd00 C:\Windows\Minidump\060111-59935-01.dmp 4 15 7601 275,944

 

[zigzag3143]

HI ALL

i was unplugging a usb dvd-t tv tuner then re-plugging in and i received a blue screen crash just need advice on today's crash please i cant run a perfmon /report it does not work on this machine (has not worked for a year its always says time out i did a thread on it but never got it working) but i have zipped up the mini dump as attachment

windows 7 home premium x 64
machine 18 months old
oem installed 1 year

here is the nirsoft blue screen view report if it helps

060111-59935-01.dmp 01/06/2011 05:32:01 UNEXPECTED_KERNEL_MODE_TRAP 0x0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 fffff800`03dc90f1 ntoskrnl.exe ntoskrnl.exe+7fd00 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17592 (win7sp1_gdr.110408-1631) x64 ntoskrnl.exe+7fd00 C:\Windows\Minidump\060111-59935-01.dmp 4 15 7601 275,944

The most recent was Related to Team MediaPortal TV Server. Note: Located in \%Program Files%\Team MediaPortal\MediaPortal TV Server\

I would remove it to test.

Also These drivers need updating.

whfltr2k.sys    1/26/2007 4:04:37 AM        fffff880`07f04000    fffff880`07f06580    0x00002580    0x45b9b615                        
EC168x64.sys    9/3/2007 12:39:57 AM        fffff880`03a5c000    fffff880`03a7c400    0x00020400    0x46db901d                        
RimSerial_AMD64.sys    11/24/2008 1:01:01 PM        fffff880`055f7000    fffff880`055fec00    0x00007c00    0x492addcd

How To Find Drivers:

- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\060111-59935-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Machine Name:
Kernel base = 0xfffff800`03c1e000 PsLoadedModuleList = 0xfffff800`03e63650
Debug session time: Wed Jun  1 01:30:03.235 2011 (GMT-4)
System Uptime: 0 days 0:17:50.562
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 406f8, fffff80003dc90f1}

Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000406f8
Arg4: fffff80003dc90f1

Debugging Details:
------------------


BUGCHECK_STR:  0x7f_8

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  TvService.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80003c9d2a9 to fffff80003c9dd00

STACK_TEXT:  
fffff880`031dbce8 fffff800`03c9d2a9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
fffff880`031dbcf0 fffff800`03c9b772 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`031dbe30 fffff800`03dc90f1 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`0ac72f90 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x11


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiDoubleFaultAbort+b2
fffff800`03c9b772 90              nop

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiDoubleFaultAbort+b2

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4d9fdd5b

FAILURE_BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b2

BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b2

Followup: MachineOwner
---------

 

[brianzion]

thanks zigzag i installed the portal tv program yesterday to try it out i am running windows media center for the tv tuner as default so i will un-install portal now with revo im not going to use it its not as good as windows. i will check the drivers and post back with results thanks again

 

[brianzion]

i un-installed the Team MediaPortal after i had a blue screen (POOL HEADER it said and windows restarted without me being able to read anymore) just before un-installing it. it happened when i was closing windows media center before the un-install using revo. the memory dump file is over a gig in size in windows c. can i delete it from windows c folder after i keep a copy? can i just delete it and windows make another? or do i create it?

 

[brianzion]

the three drivers to update are a wheel mouse the dvb-t tuner and a blackberry rim im looking for them now. the machine is up and running ok.
*UPDATE* i have removed the blackberry programs i dont use them.

 

[zigzag3143]

i un-installed the Team MediaPortal after i had a blue screen (POOL HEADER it said and windows restarted without me being able to read anymore) just before un-installing it. it happened when i was closing windows media center before the un-install using revo. the memory dump file is over a gig in size in windows c. can i delete it from windows c folder after i keep a copy? can i just delete it and windows make another? or do i create it?

you can delete it and configure your cpanel so the smaller one is generated.



To ensure minidumps are enabled:

Go to Start, in the Search Box type: sysdm.cpl, press Enter.
Under the Advanced tab, click on the Startup and Recovery Settings... button.
Ensure that Automatically restart is unchecked.
Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
OK your way out.
Reboot if changes have been made.

 

[brianzion]

thanks zigzag everything has run fine today after i got rid of the other tuner program. the settings look ok for the dumps.

 

[brianzion]

ah i noticed i have ticked *overwrite any existing file* shall i un-tick this ?

 

[brianzion]

i found this site which is full of info sourcedaddy.com Memory Dump Files - Windows 7 Tutorial

How to Manually Initiate a Stop Error and Create a Dump File

To initiate a crash dump manually, follow these steps:

Click Start and type Regedit. On the Start menu, right-click Regedit and click Run As Administrator. Respond to the User Account Control (UAC) prompt that appears.
In the Registry Editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet \Services\i8042prt\Parameters.
On the Edit menu, click New, DWORD (32-bit) Value, and then add the following registry value:
Value Name: CrashOnCtrlScroll
Value: 1
Close the Registry Editor and then restart the computer.
Log on to Windows. While holding down the right Ctrl key, press the Scroll Lock key twice to initiate a Stop error.
You cannot manually initiate a Stop error on a virtual machine that has virtual machine extensions installed.

 

[zigzag3143]

Good researching. Let us know how it turns out and no you dont want to overwrite.

 

[brianzion]

thanks zigzag for your advice all is well with the machine