BSOD due to ntkrnlpa.exe?

[Nale]

Hi Everyone,

I am new to the forum and am trying to help somone (remotely). Installed W7, 32bit (fresh install) 3 days ago... every time when in sleep mode we get infamous "Windows has recovered from an unexpected shutdown" error. Anyways, all drivers are updated directly from Lenovo's website and there are no external devices attached. Here is the copy & paste of dump file generated by Windbg (I have 4 identical dump files). Any help is appriciated.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\121209-14211-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82c08000 PsLoadedModuleList = 0x82d50810
Debug session time: Sat Dec 12 20:34:02.499 2009 (GMT-8)
System Uptime: 0 days 1:15:16.871
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
...............................................................
................................................................
...............................................................
Loading User Symbols
Loading unloaded module list
.....

 

[darkassain]

you need to set up your deguging cache from what it looks like
start looking here in this section the tutorials given by H2SO4 ...
Crash and lockup debug 'How To' - Windows 7 Forums

from what it looks like it might be a kernel driver (of course this only speculation)...

 

[Geo64]

When Windows system files are involved in stop errors, we need to look at what caused the system file to go wrong. Please follow this to post the crash dump:

http://www.sevenforums.com/crash-lockup-debug-how/34900-1-novice-how-ask-help-bsod-problem.html

 

[usasma]

FYI - Open WinDbg, go to File...Symbol File Path
Delete anything in the box.
Then copy the stuff in the Code box below and paste it into the box.

SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Then click on OK to exit the dialog.
Then close WinDbg and answer Yes when it asks you if you want to "Save information for workspace"

 

[Nale]

Hi,

thank you for the quick responeses. I dont have the laptop with me right now but as soon as I get a hold of it, I will perform additional steps.

Thank you.