BSOD ntkrnlmp.exe ??? HELP!

[lrstevens421]

Hello all, first time poster. I tried using the search method but didn't find any solutions to my problem. I was a long time Vista user with no BSOD issues, since buying the HP DV4-2040US (Win7 64) in October my machine has crashed almost two dozen times, no exaggeration. Each time WinDbg shows the same culprit, ntkrnlmp.exe. From what I understand this is a major OS component and could actually be pointing towards other issues. Here's my latest mini dump (I'm new to this):


Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\112809-18376-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*f:\localsymbols*Symbol information
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02e54000 PsLoadedModuleList = 0xfffff800`03091e50
Debug session time: Sat Nov 28 16:27:44.880 2009 (GMT-5)
System Uptime: 0 days 0:08:15.955
Loading Kernel Symbols
...............................................................
................................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002e388fe, 1, 90000000}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+460da )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002e388fe, The address that the exception occurred at
Arg3: 0000000000000001, Parameter 0 of the exception
Arg4: 0000000090000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
hal!HalpHardwareLockFlags <PERF> (hal+0x2d8fe)+0
fffff800`02e388fe 0100 add dword ptr [rax],eax

EXCEPTION_PARAMETER1: 0000000000000001

EXCEPTION_PARAMETER2: 0000000090000000

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800030fc0e0
0000000090000000

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x1E

PROCESS_NAME: System

CURRENT_IRQL: 0

TRAP_FRAME: fffff8800371bac0 -- (.trap 0xfffff8800371bac0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000090000000 rbx=0000000000000000 rcx=fffff80002e2fb50
rdx=fffffa8004aba2b8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e388fe rsp=fffff8800371bc58 rbp=0000000000000000
r8=0000000000000000 r9=000000001f0a8b3d r10=0000000000005107
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di ng nz na po nc
hal!HalpHardwareLockFlags <PERF> (hal+0x2d8fe):
fffff800`02e388fe 0100 add dword ptr [rax],eax ds:8002:00000000`90000000=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80002f05a17 to fffff80002ec5f00

STACK_TEXT:
fffff880`0371b238 fffff800`02f05a17 : 00000000`0000001e ffffffff`c0000005 fffff800`02e388fe 00000000`00000001 : nt!KeBugCheckEx
fffff880`0371b240 fffff800`02ec5542 : fffff880`0371ba18 00000000`00000000 fffff880`0371bac0 fffff880`009e8180 : nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`0371b8e0 fffff800`02ec40ba : 00000000`00000001 00000000`00000000 fffffa80`0445a100 fffffa80`0445a050 : nt!KiExceptionDispatch+0xc2
fffff880`0371bac0 fffff800`02e388fe : fffff800`02f115ac fffffa80`04aae670 fffff880`0436b7f2 00000000`00000010 : nt!KiPageFault+0x23a
fffff880`0371bc58 fffff800`02f115ac : fffffa80`04aae670 fffff880`0436b7f2 00000000`00000010 00000000`00000246 : hal!HalpHardwareLockFlags <PERF> (hal+0x2d8fe)
fffff880`0371bc60 fffffa80`04aae670 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDpcInterrupt+0x1c
00000000`00000246 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffa80`04aae670


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+460da
fffff800`02f05a17 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+460da

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600

FAILURE_BUCKET_ID: X64_0x1E_nt!_??_::FNODOBFM::_string_+460da

BUCKET_ID: X64_0x1E_nt!_??_::FNODOBFM::_string_+460da

Followup: MachineOwner
---------

I called HP, they want me to do a system restore (this seems to be the cure of everything) or send my PC in for service (I've only had this thing 6 weeks). I was hoping someone here could lend a helping hand. Sorry for the really long post. I'm really lost and completely frustrated with Windows 7.

 

[OpSysWiz]

Here's a start: 0xc0000005 - Microsoft Search

More: ntkrnlmp.exe - Microsoft Search

This could be a virus, download and run AdAware and SpyBot.

 

[lrstevens421]

Virus, really? I'll run spybot S&D and AVG. I'll report back if the software finds anything.

 

[lrstevens421]

No threats were found, Sbybot found some "doubleclick" spyware but virus scan came back clean. Any other ideas?

 

[OpSysWiz]

Well, when I read thru the potential issues, vid drivers occurred often. Correct and latest vid drivers installed? Need BIOS update to handle Win 7? Latest mobo drivers?

 

[lrstevens421]

When I called HP they had me update the Bios and I've downloaded all the latest drivers. This is mind boggling. Am I missing something in the minidump above, is there something in the "stack" that you can see as a possible culprit? Thanks again for the help.

 

[torrentg]

Hi. Please follow this link and also completely uninstall AVG. It is the worst app on the net causing bsod, by far.

http://www.sevenforums.com/crash-lockup-debug-how/34900-1-novice-how-ask-help-bsod-problem.html

 

[lrstevens421]

I followed those rules with the exception of the zip copy. I thought it would be easier if I just posted it instead.

BTW, I've now uninstalled AVG.

Mini dump now attached via zip.

 

[OpSysWiz]

Do you have the Win 7 install disk? You can you do a Repair from the Recovery Console on that disk. A Repair just reloads the Win 7 DLLs usually leaving your other installed apps alone, but it makes no guarantees.

 

[zigzag3143]

I followed those rules with the exception of the zip copy. I thought it would be easier if I just posted it instead.

BTW, I've now uninstalled AVG.

Mini dump now attached via zip.

Hi and welcome. waht we really need is the original DMP file not the text output. we cant munge the text file

Sorry

Kenn J+

 

[lrstevens421]

Oh...Got it. Thanks. Here are the multiple mini-dumps.

 

[torrentg]

Update these drivers or do a clean install:

RimSerial_AMD64 RimSerial_AMD64.sys Mon Nov 24 12:01:01 2008
000 000.fcl Fri Sep 26 09:11:22 2008
PxHlpa64 PxHlpa64.sys Wed Oct 17 14:25:02 2007
SiSRaid2 SiSRaid2.sys Wed Sep 24 14:28:20 2008
sisraid4 sisraid4.sys Wed Oct 01 17:56:04 2008
nfrd960 nfrd960.sys Tue Jun 06 17:11:48 2006
lsi_fc lsi_fc.sys Tue Dec 09 17:46:09 2008
iirsp iirsp.sys Tue Dec 13 16:47:54 2005
arc arc.sys Thu May 24 17:27:55 2007
adp94xx adp94xx.sys Fri Dec 05 18:54:42 2008
adpu320 adpu320.sys Tue Feb 27 19:04:15 2007
adpahci adpahci.sys Tue May 01 13:30:09 2007

 

[lrstevens421]

Wow, thanks. All of these for a new machine, SMH.

Ok, here's a real noob question. Do I find these drivers in Device Manager?

 

[torrentg]

Yes. Set it to view | show hidden devices.

Many may be in the non-plug and play section. Others look like RAID or SATA controller, etc....

 

[lrstevens421]

When I right-click each item there's no option to update the driver. For the RAID and SATA controllers Device Manager says they're up to date. Should I google each item for the newest drivers or is there an easier way?

Thanks again for the help.

 

[torrentg]

Yeah, you have to go hunting for them.

 

[lrstevens421]

Will do. Thanks.

 

[lrstevens421]

Thanks everyone for all the help. It appears my issue has been resolved and it may have virus related. I was having issues with AVG so I installed McAfee which discovered 17 potential threats. Two days now of solid PC running with no BSOD, that's a first! Not sure if uninstalling AVG or McAfee discovering the threats did the trick but Windows 7 seems stable now. Thanks again.