BSOD and restarts

Chivanmaister · Nov 23, 2010

I have a prob with comp: BSOD apears and shows win32k.sys or cdd.dll file stop working. Also resets after memory dump.
Error is
***STOP 0x0000001e (0xffffffffc0000005, 0xfffff8000cedeaa6, 0x0000000000000000, 0xffffffffffffffff)
This happends whenever im in game (WoW, CoD4, strange not in CS) or surfing with Google Chrome. MemTest shows no problems, worked 8h non-stop. Whats the problem then??
PS: temp is in limits.

CarlTR6 · Nov 23, 2010

Hi Chivan; welcome to the forum. Sorry to learn you are having problems. Please read this thread, follow the instructions and post back. We will be glad to help you.

http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

Chivanmaister · Nov 23, 2010

View attachment 116927
Here are files that You need. Tnx for fast reply!
PS: Config and system are in profle

CarlTR6 · Nov 23, 2010

Thank you very much for the files. Unfortunately, your dump file was not included. Read this tutorial and upload just the dump. Make sure you do not have any cleaning program, such as Ccleaner, deleting dump files. Uncheck the dump files in the cleaning options.

Error code 1E, KMODE_EXCEPTION_NOT_HANDLED. Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS.

Since I am not working from a dump file, this may take a little longer. Start your trouble shooting by uninstalling Eset. Eset is a known cause of BSOD's on some Win 7 systems as are many third party security suites. Use this removal tool: Tool. You can try Eset again after your system is stable; but I do not recommend doing so. Download and install Microsoft Security Essentials and make sure Windows Firewall is turned on.

Outdated drivers can and do cause conflicts, memory corruption and BSOD's. I see a couple of outdated drivers loaded on your system. The one in bold font is an XP driver. It is not going to work with Win 7 without problems.

AtiPcie.sys 5/5/2009 - AMD PCI Express (3GIO), ATI PCIE Driver for ATI PCIE chipset, http://www.ati.com/

snpstd3.sys 3/27/2007 - USB PC Camera. Unistall this camera; it is obsolete. Upgrade to a camera certified compatible with Win 7. Navigate to C:\Windows\System32\Drivers and rename this driver from .sys to .old or delete it.

This is about all I can see without the actual dump file.

Chivanmaister · Nov 23, 2010

Where is dump file? I'm kinda noob for Win7 (1st time using it)
Still cant fine dump file, is it hidden? I forgot about camera, ill turn it off and upgrade chipset (thought it might be chipset)

CarlTR6 · Nov 23, 2010

No problem; please read this: http://www.sevenforums.com/tutorials/83172-dump-files-upload-seven-forums.html

Chivanmaister · Nov 24, 2010

It's me again

with another BSOD. Can't find memory.dmp nor minidump files and don't have prog for erasing them. Is there any prog for collecting dumps? This time was win32k.sys and stop 0x0000003b error that cause BSOD. :cry:

CarlTR6 · Nov 24, 2010

Do a search of C: for *.dmp in Windows Explorer.

Chivanmaister · Nov 24, 2010

Did, nothing found.
I'm pissed off coz this errors, i'll try to reinstall Win7 and see what will pop-up.

CarlTR6 · Nov 24, 2010

Let us know. Follow the last part of the first post in this tutorial and make sure your system is set for mini dumps. http://www.sevenforums.com/tutorials/83172-dump-files-upload-seven-forums.html

Chivanmaister · Nov 25, 2010

OK, reinstalled win7 x64 to x86 (32-bit), played Crysis and got BSOD (what else can i got?). I think its win32k.sys and some stop error again (switched fast, didnt have time to look) but manage to make dump file. Here is all that u need: View attachment 117564 and View attachment 117586

CarlTR6 · Nov 25, 2010

Your dump shows that Norton was involved in this crash. Please uninstall Norton using this removal tool: Tool. Norton is a known cause of BSOD's on some Win 7 systems. Download and install Microsoft Security Essentials in its place. Make sure Windows Firewall is turned on.

Reboot and see how your system does without Norton. Post back and let us know. If you get another BSOD, upload the dump and we will go from there.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82e15000 PsLoadedModuleList = 0x82f5d810
Debug session time: Thu Nov 25 10:46:23.001 2010 (GMT-5)
System Uptime: 0 days 1:04:18.578
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 93771fd3, 8f8f3b14, 8f8f36f0}

Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+5 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 93771fd3, The address that the exception occurred at
Arg3: 8f8f3b14, Exception Record Address
Arg4: 8f8f36f0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+5
93771fd3 83791400        cmp     dword ptr [ecx+14h],0

EXCEPTION_RECORD:  8f8f3b14 -- (.exr 0xffffffff8f8f3b14)
ExceptionAddress: 93771fd3 (dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+0x00000005)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00000014
Attempt to read from address 00000014

CONTEXT:  8f8f36f0 -- (.cxr 0xffffffff8f8f36f0)
eax=0011ab40 ebx=8870e4d0 ecx=00000000 edx=00000000 esi=85c68c68 edi=88821968
eip=93771fd3 esp=8f8f3bdc ebp=8f8f3bdc iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+0x5:
93771fd3 83791400        cmp     dword ptr [ecx+14h],0 ds:0023:00000014=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  00000014

READ_ADDRESS: GetPointerFromAddress: unable to read from 82f7d718
Unable to read MiSystemVaType memory at 82f5d160
 00000014 

FOLLOWUP_IP: 
dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+5
93771fd3 83791400        cmp     dword ptr [ecx+14h],0

BUGCHECK_STR:  0x7E

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 937838b3 to 93771fd3

STACK_TEXT:  
8f8f3bdc 937838b3 0011ab40 8f8f3cec 88821968 dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+0x5
8f8f3d18 9378422f 88821968 85c68c68 8f8f3d3c dxgmms1!VidSchiSubmitRenderCommand+0x135
8f8f3d28 937844cc 88821968 82e513f1 8870e4d0 dxgmms1!VidSchiSubmitQueueCommand+0x61
8f8f3d3c 93784573 8870e4d0 00000000 887db410 dxgmms1!VidSchiRun_PriorityTable+0x24
8f8f3d50 830236d3 8870e4d0 a139655c 00000000 dxgmms1!VidSchiWorkerThread+0x7f
8f8f3d90 82ed50f9 937844f4 8870e4d0 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME:  dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc265

STACK_COMMAND:  .cxr 0xffffffff8f8f36f0 ; kb

FAILURE_BUCKET_ID:  0x7E_dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+5

BUCKET_ID:  0x7E_dxgmms1!VIDMM_DMA_POOL::BeginCPUAccess+5

Followup: MachineOwner
---------

2: kd> lmtsmn
start    end        module name
92767000 92793000   1394ohci 1394ohci.sys Mon Jul 13 19:51:59 2009 (4A5BC89F)
8b995000 8b9dd000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
91364000 913be000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
927d9000 927eb000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
926c5000 926d6000   amdppm   amdppm.sys   Mon Jul 13 19:11:03 2009 (4A5BBF07)
8bb73000 8bb7c000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
8bb47000 8bb50000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
8bb50000 8bb73000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
93020000 9369b000   atikmdag atikmdag.sys Tue Sep 28 21:37:54 2010 (4CA29872)
926df000 9271c000   atikmpag atikmpag.sys Tue Sep 28 21:14:29 2010 (4CA292F5)
91252000 91259000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
ba23b000 ba2e7000   BHDrvx86 BHDrvx86.sys Wed Oct 27 21:19:23 2010 (4CC8CF9B)
919e1000 919ef000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8b821000 8b829000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
9dec4000 9dedd000   bowser   bowser.sys   Mon Jul 13 19:14:21 2009 (4A5BBFCD)
91962000 919e1000   ccHPx86  ccHPx86.sys  Fri Aug 21 18:52:38 2009 (4A8F2536)
97f40000 97f5e000   cdd      cdd.dll      Mon Jul 13 21:04:18 2009 (4A5BD992)
9122c000 9124b000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8b86b000 8b916000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8ba00000 8ba25000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8b829000 8b86b000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8bd75000 8bdd2000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
9300d000 9301a000   CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
82934000 82941000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
918e6000 9194a000   csc      csc.sys      Mon Jul 13 19:15:08 2009 (4A5BBFFC)
9194a000 91962000   dfsc     dfsc.sys     Mon Jul 13 19:14:16 2009 (4A5BBFC8)
918da000 918e6000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8bfcd000 8bfde000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
939a4000 939bd000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
8294c000 82955000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
82941000 8294c000   dump_ataport dump_ataport.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
82955000 82966000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
82905000 8290f000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
9369b000 93752000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 20:48:33 2009 (4AC54DE1)
93752000 9378b000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:25:25 2009 (4A5BC265)
8bbb0000 8bbc1000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8bb7c000 8bbb0000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8bde0000 8bde9000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8bf9b000 8bfcd000   fvevol   fvevol.sys   Fri Sep 25 22:24:21 2009 (4ABD7B55)
8c179000 8c1aa000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
83225000 8325c000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
9378b000 937aa000   HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
8291a000 8292d000   HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
8292d000 82933480   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
8290f000 8291a000   hidusb   hidusb.sys   Mon Jul 13 19:51:04 2009 (4A5BC868)
9de3f000 9dec4000   HTTP     HTTP.sys     Mon Jul 13 19:12:53 2009 (4A5BBF75)
8bf93000 8bf9b000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
937e7000 937ff000   i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
a3171000 a31cc000   IDSvix86 IDSvix86.sys Fri Sep 10 17:53:26 2010 (4C8AA8D6)
91804000 91823000   Ironx86  Ironx86.SYS  Wed Aug 26 20:40:32 2009 (4A95D600)
8baf0000 8bb0b000   jraid    jraid.sys    Wed Jan 27 03:58:03 2010 (4B60001B)
93000000 9300d000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
80b97000 80b9f000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
938a3000 938d7000   ks       ks.sys       Wed Mar 03 22:57:52 2010 (4B8F2FC0)
8bd62000 8bd75000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8bf08000 8bf2d000   ksecpkg  ksecpkg.sys  Thu Dec 10 23:04:22 2009 (4B21C4C6)
82997000 829a7000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
8297c000 82997000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
8b805000 8b810000   mcupdate mcupdate.dll Mon Jul 13 19:13:13 2009 (4A5BBF89)
82971000 8297c000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
93894000 938a1000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
82966000 82971000   mouhid   mouhid.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8bb31000 8bb47000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
9dedd000 9deef000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
9deef000 9df12000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:32:02 2010 (4B88CA72)
9df12000 9df4d000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
9df4d000 9df68000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
912ab000 912b6000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8b9e6000 8b9ee000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8bd37000 8bd62000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
91878000 91882000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8bf83000 8bf93000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
a315d000 a3170600   NAVENG   NAVENG.SYS   Wed Sep 15 06:21:19 2010 (4C909E1F)
a300f000 a315c200   NAVEX15  NAVEX15.SYS  Wed Sep 15 06:29:29 2010 (4C90A009)
8be13000 8beca000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
92618000 92623000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
93822000 93844000   ndiswan  ndiswan.sys  Mon Jul 13 19:54:34 2009 (4A5BC93A)
93938000 93949000   NDProxy  NDProxy.SYS  Mon Jul 13 19:54:27 2009 (4A5BC933)
8bde9000 8bdf7000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
913be000 913f0000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
8beca000 8bf08000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
912b6000 912c4000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
9186e000 91878000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82e15000 83225000   nt       ntkrpamp.exe Fri Jun 18 23:55:24 2010 (4C1C3FAC)
8bc08000 8bd37000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
9124b000 91252000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
938e5000 938f3600   nusb3hub nusb3hub.sys Fri Nov 20 05:15:14 2009 (4B066C32)
937aa000 937cba00   nusb3xhc nusb3xhc.sys Fri Nov 20 05:15:18 2009 (4B066C36)
91200000 9121f000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8ba6f000 8ba80000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8ba3a000 8ba64000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
8badb000 8bae2000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
8bae2000 8baf0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8bdd2000 8bde0000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
9df68000 9dfff000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
93975000 939a4000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
8b810000 8b821000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
92600000 92618000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
93844000 9385c000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
9385c000 93873000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
93873000 9388a000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
9182d000 9186e000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
9388a000 93894000   rdpbus   rdpbus.sys   Mon Jul 13 20:02:40 2009 (4A5BCB20)
91293000 9129b000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
9129b000 912a3000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
912a3000 912ab000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8c000000 8c02d000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
829a7000 829ba000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
92793000 927d9000   Rt86win7 Rt86win7.sys Mon Mar 22 05:56:53 2010 (4BA73EE5)
93949000 93974300   RtHDMIV  RtHDMIV.sys  Tue Jan 26 22:04:40 2010 (4B5FAD48)
82619000 82904200   RTKVHDA  RTKVHDA.sys  Tue Apr 06 06:13:49 2010 (4BBB095D)
8bb0b000 8bb31000   SCSIPORT SCSIPORT.SYS Mon Jul 13 19:45:55 2009 (4A5BC733)
9de00000 9de0a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8c1f2000 8c1fa000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
a2177000 a21ce000   SRTSP    SRTSP.SYS    Fri Aug 21 02:51:28 2009 (4A8E43F0)
91823000 9182c080   SRTSPX   SRTSPX.SYS   Fri Aug 21 02:51:37 2009 (4A8E43F9)
a2126000 a2177000   srv      srv.sys      Thu Aug 26 23:31:26 2010 (4C77318E)
a20d7000 a2126000   srv2     srv2.sys     Thu Aug 26 23:30:45 2010 (4C773165)
a20a9000 a20ca000   srvnet   srvnet.sys   Thu Aug 26 23:30:39 2010 (4C77315F)
938a1000 938a2380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8bf2d000 8bf83000   SYMDS    SYMDS.SYS    Mon Aug 17 19:34:39 2009 (4A89E90F)
8bbc1000 8bbed000   SYMEFA   SYMEFA.SYS   Thu Aug 27 22:26:28 2009 (4A974054)
9133f000 91364000   SYMEVENT SYMEVENT.SYS Thu Aug 13 18:22:41 2009 (4A849231)
912e6000 9133f000   SYMTDIV  SYMTDIV.SYS  Sat Aug 15 01:07:37 2009 (4A864299)
8c030000 8c179000   tcpip    tcpip.sys    Sun Jun 13 23:36:59 2010 (4C15A3DB)
a20ca000 a20d7000   tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
912db000 912e6000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
912c4000 912db000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
8bbed000 8bbfd000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
97f10000 97f19000   TSDDD    TSDDD.dll    Mon Jul 13 20:01:40 2009 (4A5BCAE4)
926a4000 926c5000   tunnel   tunnel.sys   Mon Jul 13 19:54:03 2009 (4A5BC91B)
938d7000 938e5000   umbus    umbus.sys    Mon Jul 13 19:51:38 2009 (4A5BC88A)
937cc000 937cd700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
937d8000 937e7000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
938f4000 93938000   usbhub   usbhub.sys   Mon Jul 13 19:52:06 2009 (4A5BC8A6)
937ce000 937d8000   usbohci  usbohci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
9271c000 92767000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
8ba64000 8ba6f000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
91259000 91265000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
91265000 91286000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8c1aa000 8c1b2380   vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8ba80000 8ba90000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8ba90000 8badb000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8c1b3000 8c1f2000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
8ba25000 8ba38000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
91286000 91293000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8b916000 8b987000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8b987000 8b995000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
913f0000 913f7000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
97cb0000 97efb000   win32k   win32k.sys   Tue Aug 31 22:34:29 2010 (4C7DBBB5)
926d6000 926df000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:19:16 2009 (4A5BC0F4)
8b9dd000 8b9e6000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)

Unloaded modules:
92624000 926a4000   BHDrvx86.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
91882000 918da000   IDSVix86.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a3175000 a3189000   NAVENG.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a3027000 a3175000   NAVEX15.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a203f000 a20a9000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9df68000 9df80000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfde000 8bfeb000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfeb000 8bff6000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bff6000 8bfff000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8be00000 8be11000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Chivanmaister · Nov 26, 2010

OK, that last thing helped a bit, comp still resets but without BSOD.View attachment 117848

CarlTR6 · Nov 27, 2010

Error code F7, DRIVER_OVERRAN_STACK_BUFFER. Usual causes: Device driver, Malware.

Error code 10E, VIDEO_MEMORY_MANAGEMENT_INTERNAL. Usual causes: Video driver, ?Video memory. This indicates that the video memory manager has encountered a condition that it is unable to recover from

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82e12000 PsLoadedModuleList = 0x82f5a810
Debug session time: Fri Nov 26 11:11:34.799 2010 (GMT-5)
System Uptime: 0 days 2:24:57.376
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
.......
0: kd> !Analyze
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F7, {ac2e12c5, 312e12c5, ced1ed3a, 0}

Probably caused by : ntkrpamp.exe ( nt!__report_gsfailure+24 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: ac2e12c5, Actual security check cookie from the stack
Arg2: 312e12c5, Expected security check cookie
Arg3: ced1ed3a, Complement of the expected security check cookie
Arg4: 00000000, zero

Debugging Details:
------------------


DEFAULT_BUCKET_ID:  GS_FALSE_POSITIVE_MISSING_GSFRAME

SECURITY_COOKIE:  Expected 312e12c5 found ac2e12c5

CUSTOMER_CRASH_COUNT:  1

BUGCHECK_STR:  0xF7

PROCESS_NAME:  WinRAR.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  ace7faf0 -- (.exr 0xfffffffface7faf0)
ExceptionAddress: 8580222b (fltmgr!FltpPerformPostCallbacks+0x00000151)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 00bf4184
Attempt to read from address 00bf4184

TRAP_FRAME:  ace7fb44 -- (.trap 0xfffffffface7fb44)
ErrCode = 00000000
eax=00bf417c ebx=881d19e0 ecx=00000000 edx=00000020 esi=881d1a38 edi=881d1980
eip=8580222b esp=ace7fbb8 ebp=ace7fc08 iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
fltmgr!FltpPerformPostCallbacks+0x151:
8580222b 8b4808          mov     ecx,dword ptr [eax+8] ds:0023:00bf4184=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82ee0999 to 82eeed10

STACK_TEXT:  
ace7f59c 82ee0999 000000f7 ac2e12c5 312e12c5 nt!KeBugCheckEx+0x1e
ace7f5bc 82e4bcbd 00000000 00000000 00000000 nt!__report_gsfailure+0x24
ace7f5e4 82e7a822 ace7faf0 ace7fcf8 ace7f6d0 nt!_except_handler4+0x49
ace7f608 82e7a7f4 ace7faf0 ace7fcf8 ace7f6d0 nt!ExecuteHandler2+0x26
ace7f6c0 82ecf352 ace7faf0 ace7f6d0 00010017 nt!ExecuteHandler+0x24
ace7fad4 82e56036 ace7faf0 00000000 ace7fb44 nt!KiDispatchException+0x17c
ace7fb3c 82e55fea ace7fc08 8580222b badb0d00 nt!CommonDispatchException+0x4a
ace7fbc0 85804fec 8a0e7990 ace7fac0 003febc4 nt!Kei386EoiHelper+0x192
ace7fc08 858051e6 001d1980 000e7990 ace7fca4 fltmgr!FltpPerformFastIoCall+0x22e
ace7fc20 8a817dcf 00e7fc44 000e7990 85817c6c fltmgr!FltpPassThroughFastIo+0xa8
WARNING: Frame IP not in any known module. Following frames may be wrong.
ace7fc64 83050477 8a0e7990 ace7fcac 003febc4 0x8a817dcf
ace7fd08 82e5544a 8bbe79b0 00000000 00000000 nt!NtWriteFile+0x342
ace7fd08 002764f4 8bbe79b0 00000000 00000000 nt!KiFastCallEntry+0x12a
772cf004 00000000 00000000 00000000 00000000 0x2764f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!__report_gsfailure+24
82ee0999 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!__report_gsfailure+24

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c3fac

FAILURE_BUCKET_ID:  0xF7_MISSING_GSFRAME_nt!__report_gsfailure+24

BUCKET_ID:  0xF7_MISSING_GSFRAME_nt!__report_gsfailure+24

Followup: MachineOwner
---------

Debug session time: Fri Nov 26 08:12:34.504 2010 (GMT-5)
System Uptime: 0 days 3:18:48.081
Loading Kernel Symbols
...............................................................
................................................................
..............
Loading User Symbols
Loading unloaded module list
......
1: kd> !Analyze
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10E, {1f, a91ee648, 0, 6d6afa}

Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+de )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

VIDEO_MEMORY_MANAGEMENT_INTERNAL (10e)
The video memory manager encountered a condition that it can't recover from. By crashing,
the video memory manager is attempting to get enough information into the minidump such that
somebody can pinpoint what lead to this condition.
Arguments:
Arg1: 0000001f, The subtype of the bugcheck:
Arg2: a91ee648
Arg3: 00000000
Arg4: 006d6afa

Debugging Details:
------------------


BUGCHECK_STR:  0x10e_1f

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 85c01276 to 82eedd10

STACK_TEXT:  
897d9a74 85c01276 0000010e 0000001f a91ee648 nt!KeBugCheckEx+0x1e
897d9a9c 8e587c6e 00000000 8b9d2c18 a50cd984 watchdog!WdLogEvent5+0xc6
897d9ab8 8e5899be 00000000 a7047298 00000c3a dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+0xde
897d9bb8 8e5a093e a98fa9f0 00000000 8a04bf60 dxgmms1!VIDMM_GLOBAL::PrepareDmaBuffer+0xa68
897d9d18 8e5a122f 825e5a78 8a145580 897d9d3c dxgmms1!VidSchiSubmitRenderCommand+0x1c0
897d9d28 8e5a14cc 825e5a78 82e4d3f1 9e973008 dxgmms1!VidSchiSubmitQueueCommand+0x61
897d9d3c 8e5a1573 9e973008 00000000 9e971710 dxgmms1!VidSchiRun_PriorityTable+0x24
897d9d50 8301f6d3 9e973008 b853b4fd 00000000 dxgmms1!VidSchiWorkerThread+0x7f
897d9d90 82ed10f9 8e5a14f4 9e973008 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+de
8e587c6e c74510c5f3ffff  mov     dword ptr [ebp+10h],0FFFFF3C5h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+de

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME:  dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc265

FAILURE_BUCKET_ID:  0x10e_1f_dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+de

BUCKET_ID:  0x10e_1f_dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForSubmission+de

Followup: MachineOwner
---------

Because of error code F7, I suggest you download and install Malwarebytes. Update and run scan. Let's make sure you do not have a nasty on your system.

Error 10E is a video error. Video problems can cause the reset you you mentioned. Test your video card with Furmark following the instructions in this tutorial. Be sure to monitor the temp during the test. [FONT=&quot]http://www.sevenforums.com/tutorials/100356-video-card-stress-test-furmark.html
Post back with your results.
[/FONT]

BSOD and restarts

New member

My Computer

Antique Senior Member

My Computer

New member

My Computer

Antique Senior Member

My Computer

New member

My Computer

Antique Senior Member

My Computer

New member

My Computer

Antique Senior Member

My Computer

New member

My Computer

Antique Senior Member

My Computer

New member

My Computer

Antique Senior Member

My Computer

New member

My Computer

Antique Senior Member

My Computer