BSOD and freezes W7 64 bit

[derrickburns]

I am getting BSOD and freezes on my custom built W7 64 system. Any help would be greatly appreciated!

Attached are 4 recent minidumps in a rar file.

Thanks in advance!

 

[zigzag3143]

I am getting BSOD and freezes on my custom built W7 64 system. Any help would be greatly appreciated!

Attached are 4 recent minidumps in a rar file.

Thanks in advance!

Hi and welcome

Well Im going to have to go out on a limb. You have memory corruption in at least to of the crashes. in teh other two it cuold alos be memory but it is not specified

I would downlaod and run memetestx86 for several hour at least

then run a system file check to verify and fix system files
type cmd in search>right click and run as admin>sfc /scannow
if you are overclocking STOP
if you have a rais update its driver

Ken J++


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\112709-31340-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*Symbol information
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c1d000 PsLoadedModuleList = 0xfffff800`02e5ae50
Debug session time: Fri Nov 27 20:52:01.963 2009 (GMT-5)
System Uptime: 2 days 6:59:50.539
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ffffffff8b49105c, 1, fffff88002578447, 5}


Could not read faulting driver name
Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ffffffff8b49105c, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff88002578447, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec50e0
ffffffff8b49105c

FAULTING_IP:
bowser!BowserSecurityCheck+c3
fffff880`02578447 008b5b10498b add byte ptr [rbx-74B6EFA5h],cl

MM_INTERNAL_CODE: 5

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: CODE_CORRUPTION

BUGCHECK_STR: 0x50

PROCESS_NAME: svchost.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffff880062eb680 -- (.trap 0xfffff880062eb680)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a0025c0001 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff8a0025c0060 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88002578447 rsp=fffff880062eb810 rbp=fffff880062ebca0
r8=fffff8a0025c006c r9=fffffa800477a268 r10=fffff8a0025c0060
r11=fffff880062eb880 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
bowser!BowserSecurityCheck+0xc3:
fffff880`02578447 008b5b10498b add byte ptr [rbx-74B6EFA5h],cl ds:00e4:ffffffff`8b49105b=??
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80002d0cb91 to fffff80002c8ef00

STACK_TEXT:
fffff880`062eb518 fffff800`02d0cb91 : 00000000`00000050 ffffffff`8b49105c 00000000`00000001 fffff880`062eb680 : nt!KeBugCheckEx
fffff880`062eb520 fffff800`02c8cfee : 00000000`00000001 00000000`00000001 fffff880`062eb800 00000000`001901ff : nt! ?? ::FNODOBFM::`string'+0x40f5b
fffff880`062eb680 fffff880`02578447 : fffff880`062ebca0 00000000`00000001 fffffa80`047c99e8 00000000`0b5bc2f0 : nt!KiPageFault+0x16e
fffff880`062eb810 fffff880`02584a60 : 00000000`00000000 fffffa80`001f01ff fffff8a0`0c72e280 fffffa80`001f01ff : bowser!BowserSecurityCheck+0xc3
fffff880`062eb890 fffff880`02576130 : fffffa80`04923690 00000000`00000000 00000000`00000001 00000000`00000003 : bowser!BowserCommonDeviceIoControlFile+0x9c8
fffff880`062eb9e0 fffff800`02fa73a7 : fffffa80`04d7c3d0 fffffa80`04d7c3d0 fffffa80`047c9a30 fffffa80`047c9840 : bowser!BowserFsdDispatch+0xa8
fffff880`062eba10 fffff800`02fa7c06 : 00000000`02d5fae8 00000000`000011c4 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
fffff880`062ebb40 fffff800`02c8e153 : fffffa80`04cc3780 00000000`02d5fac8 fffff880`062ebbc8 00000000`02d5fc10 : nt!NtDeviceIoControlFile+0x56
fffff880`062ebbb0 00000000`7773ff2a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02d5fb38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7773ff2a


STACK_COMMAND: kb

CHKIMG_EXTENSION: !chkimg -lo 50 -db !bowser
8 errors : !bowser (fffff88002578447-fffff8800257847f)
fffff88002578440 4c 8d 5c 24 70 8a c3 *00 8b 5b 10 49 8b 73 20 *30 L.\$p....[.I.s 0
fffff88002578450 8b e3 5f c3 cc cc cc *00 cc cc cc cc 48 89 5c *00 .._.........H.\.
fffff88002578460 08 48 89 6c 24 18 56 *00 41 54 48 83 ec 20 48 *00 .H.l$.V.ATH.. H.
fffff88002578470 f1 c7 44 24 48 03 00 *00 00 ff 15 91 0c 00 00 *00 ..D$H...........

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: STRIDE

FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID: X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------

 

[derrickburns]

Thank you very much. I have memtest 4.0 and will run it again. I had run it before with no problems with 3GB of memory, but did have problems with 4GB of memory. I cannot adjust memory voltages on my motherboard.

 

[zigzag3143]

Thank you very much. I have memtest 4.0 and will run it again. I had run it before with no problems with 3GB of memory, but did have problems with 4GB of memory. I cannot adjust memory voltages on my motherboard.

Derrick I forgot one thing. It could also be a heat problem making the memory puke. You can dl cpu-z, and gpu-z to keep an eye on the temps. It is the reason we suggest running memtest overnight\

Kenn

 

[win7clutz]

Looking at the your board manual you should be able to tweak ram voltage. Have you updated bios? It looks like ver. 0212 fix the problem you're having.

Luck-

 

[derrickburns]

I ran memtest86+ for 3.5 hours. No problems were found.

I do not overclock.

I checked the BIOS. I am running the latest version, 1002.

System has frozen sometimes shortly after a cold start, so heat is probably not the (only) problem.

Running sfc now.

 

[derrickburns]

Also, memory is running at 5-5-5-18, though it is rated at 4-4-4-12

 

[derrickburns]

sfc reports no integrity violations.

Thoughts?

 

[usasma]

Here's 2 older drivers on the system. The second one is known to cause BSOD's (in the 2005 version) in Win7. Please update either the AISuite or PCProbe programs from the Asus website to fix it.

ltmdm64.sys  Wed Mar 08 09:28:58 2006
ASACPI.sys   Sun Mar 27 22:30:36 2005

Because of the involvement (in the stack) of bowser.sys - and that there's user-mode involvement in the stack also - I'd suspect an internet/network aware program that's issuing bad requests.

In order to narrow it down, I'd suggest using Driver Verifier according to the following instructions:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.


So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista Startup Repair feature).


Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Automatically select unsigned drivers" and click "Next"
If no drivers show up, then select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.


Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.


Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.


If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.


More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users
​

 

[derrickburns]

I installed AISuite and then ran the driver verifier as instructed. The system quickly crashed after reboot and login. Attached are 6 minidumps. Thanks for your help!

 

[derrickburns]

I took a look at the minidumps created by the driver verifier. ALL pointed to the same culprit, PCTCore64.sys, which is a module from Spyware Doctor 7. I uninstalled Spyware Doctor 7 and my system appears to be stable. I am running now with driver verifier on. Before, with Spyware Doctor 7 installed and verifier running, my system would crash immediately.

Thanks so much for the help!! The path I was on was to blame it on the hardware, which would have cost me money and eventually gotten me back to the same place with Spyware Doctor causing my new hardware to crash.

 

[usasma]

Glad to hear that you've fixed it.
Please turn Driver Verifier off as it's no longer needed (and it will slow your system down).
Thanks for letting us know!

 

[derrickburns]

Done.

Thanks again.

 

[derrickburns]

I spoke too soon. My machine just froze. No BSOD. Just froze.

Any thoughts?

 

[derrickburns]

I installed the Asus Probe sw and uncovered that my MB was getting hot, so I installed another fan and that dropped the temperature from 47 degrees C to 38 degrees C. 45 degrees C is the default threshold for the Asus Probe.

I also noticed in the Event log that the VSS was running into problems due to hitting a user limit on space usage on my C drive. I increased that to 2GB from 400MB. The C partition is 40 GB.

Any other thoughts?

 

[usasma]

I'd suggest watching things to see if you've fixed the issues.
As you've only got 40 gB on the C: partition, I'd watch that closely.
Anything less then 6 gB of free space could cause issues with the system.

 

[derrickburns]

Another freeze. I was away from the computer. Nothing in the event log near the time of the crash. Asus Probe shows temperatures were within normal operating range.

I am moving all user data off of the system partition to free up space.

Thoughts?

 

[usasma]

Maybe leave Task Manager open to the Processes tab on your Desktop. Then follow these directions:
Task Manger
Also, you can monitor the system for excessive resource consumption. To do this, open up Task Manager by right clicking on the Task Bar.
Then select the Processes tab.
Then select the "Show processes from all users" button (in the lower left)
Then select the View menu item, then select "Select columns"
In the Select columns window, place checkmarks next to I/O Reads and I/O Other.
Click OK to accept the changes.
Resize the Task Manager window so you can see the most of the columns.
Wait for the system to freeze.
Look at the columns to see if there's anything that looks excessively high - if so, let us know the Image name of the process. FWIW - System Idle Process is supposed to have high CPU readings - anything else with high CPU readings is an issue.

 

[derrickburns]

Thanks again. I did as instructed. Waiting for a freeze now.

I also got rid of some software that I didn't need including the ASKToolbar (installed by Vuze) and its associated services.

 

[derrickburns]

Looking good so far! No freezes for 24 hours.