BSOD only started recently after changing DVD Drive Model - am lost...

[badler]

Hi, I am getting a BSOD once per day on average and have read up online, updated all my drivers, changed webcams etc.

I believe it started happening a week after I got my DVD drive replaced. My PC is 5 months old and was running smoothly with no issues up until my dvd drive failed. None of the errors I am receiving state anything wrong with the DVD player so I am not convinced it is related to it but am not sure if the new dvd drive has cuased another issue.

Once crash dump related to the logitech driver and I realised my web cam was not certified on Windows 7 bit so I got a new webcam but the BSOD keeps occurring.

I ran a driver update program and all my drivers are upto date but I still get the BSOD.

Am not lost as to what could be causing it and would really appreciate any help.

many thanks, Brendon.

 

[Arc]

Disable Driver Verifier.

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

It may not be needed anymore at once. If it is needed later, we will instruct you accordingly.

The display driver is failing there.

fffff880`08137e08  fffff880`04a65ec0Unable to load image \SystemRoot\system32\DRIVERS\[URL="http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys"]nvlddmkm.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys"]nvlddmkm.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys"]nvlddmkm.sys[/URL]
 nvlddmkm+0x1d8ec0

It is just a few days ago only that I uninstalled the 320.18 WHQL, as it is problematic there; and a lot of other users reported it as problematic. I would suggest you to do the same. Install the 314.22 WHQL only.

• Uninstall All nvidia items in Control Panel > Programs and features
  • 3D Vision Control Driver
  • 3D Vision Driver
  • Graphics Driver
  • HD Audio Driver
  • PhysX
  • nvidia Update
  (Are you using nvidia chipset drivers? If so, dont uninstall anything other than those are listed).
• Now follow Drivers - Clean Left over Files after Uninstalling
• Boot normally now. Go to Drivers - Download NVIDIA Drivers, Download 314.22 WHQL. While installing, Select Custom (Advanced) install. In the next page, follow this settings:
  
  

Another most expected thing is, Trend Micro Internet Security.

fffff880`08137e28  fffff880`03e2786fUnable to load image \SystemRoot\system32\DRIVERS\[URL="http://www.carrona.org/drivers/driver.php?id=tmevtmgr.sys"]tmevtmgr.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for[URL="http://www.carrona.org/drivers/driver.php?id=tmevtmgr.sys"] tmevtmgr.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=tmevtmgr.sys"]tmevtmgr.sys[/URL]
 tmevtmgr+0xa86f

Description here: Driver Reference Table - tmevtmgr.sys

I strongly recommend you to Uninstall TrendMicro, using their uninstaller tool. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Let us know the results.

P.S. As you vave taken care of the Logitech Webcam, keeping silent on it.

 

[badler]

thanks will give this a try, appreciate your help. How from the info I zipped up were you able to determine this? Am keen to learn more.....

 

[Arc]

thanks will give this a try, appreciate your help. How from the info I zipped up were you able to determine this? Am keen to learn more.....

At first take care of the issue. You will have time to learn Learning is a function of time.

 

[badler]

HI, I follwed this (except for Trend Micro) and still getting a BSOD. Can you review the attached updated zip file and let me know next steps please. Have been using trend for months on the PC without any issues so am keen to try and keep it if I can. Also, Logitech MK320 keyboard now behaving weirdly, sometimes you type and nothing happens on the screen then it catches up and shows everything you typed, like there is a delay. Its not all the time. Many thanks.

 

[Arc]

Care to take the suggestion in total? Then let us know?

You cannot expect desired results with the BSOD causer present in the system.

 

[badler]

Hi, I followed everything and got another BSOD today, updated dump files attached, can you please help to work out what is causing it? thanks

 

[Arc]

It is a stop 0x51.

According to Carrona.org, STOP 0x00000051: REGISTRY_ERRORhttp://www.carrona.org/bsodindx.html#top
Usual causes: Hardware failure, File system corruption, Security issues

The file system corruption is comparatively easier to recover. A repair install is enough to do it. But we need to take care of the other two probable causes.

Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

Stress test the Graphics Card using Furmark.
Video Card - Stress Test with Furmark

Stress test the CPU.
Hardware - Stress Test With Prime95

Let us know the results. If those are all OK, we will decide our next step.
_________________________________________________________
BSOD ANALYSIS:

.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 51, {1, fffff8a000024010, 145b000, 374}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+9dba )

Followup: MachineOwner
---------

 

[badler]

Hi,

All suggested tests ran successfully. no errors. Have had a few more BSOD since my last post, updated diagnostics attached. What would you suggest as next steps?

Thanks,

Brendon.

 

[x BlueRobot]

Welcome to the forums badler,

[COLOR=Red]BugCheck 1A[/COLOR], {[COLOR=Blue]41790[/COLOR], [COLOR=SeaGreen]fffffa8001a7b220[/COLOR], ffff, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+35084 )

Usual causes:  Device driver, memory, kernel

It seems that a page table page has become corrupt, this is a data structure used store mappings between physical and virtual memory addresses.

1: kd> [COLOR=SeaGreen]dt nt!_MMPFN fffffa8001a7b220[/COLOR]
   +0x000 u1               : <unnamed-tag>
   +0x008 u2               : <unnamed-tag>
   +0x010 PteAddress       : 0xfffff6fb`40000018 _MMPTE <-- PTE which points to the particular PFN
   +0x010 VolatilePteAddress : 0xfffff6fb`40000018 Void
   +0x010 Lock             : 0n1073741848
   +0x010 PteLong          : 0xfffff6fb`40000018
   +0x018 u3               : <unnamed-tag>
   +0x01c [COLOR=Red]UsedPageTableEntries : 0xffff[/COLOR]
   +0x01e VaType           : 0 ''
   +0x01f ViewCount        : 0 ''
   +0x020 OriginalPte      : _MMPTE
   +0x020 AweReferenceCount : 0n128
   +0x028 u4               : <unnamed-tag>

The reference count for the UsedPageTableEntries field seems to be have dropped below zero, this results in a fatal error (BSOD).

Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours:

• http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

   Information

Additional Help - http://www.sevenforums.com/crash-lo...-driver-verifier-identify-issues-drivers.html

You may need to enable the Special Pool option too.

 

[badler]

Hi, I enabled as you suggested and have had a BSOD today, new updated log files attached, any next suggested changes?

 

[x BlueRobot]

BSOD Analysis:

[COLOR=Red]BugCheck A[/COLOR], {58, [COLOR=Blue]2[/COLOR], [COLOR=SeaGreen]1[/COLOR], fffff800030930d8}

Probably caused by : ksthunk.sys ( ksthunk!CKernelFilterDevice::DeferIrpCompletion+12 )

Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

0: kd> [COLOR=SeaGreen]k[/COLOR]
Child-SP          RetAddr           Call Site
fffff880`054db218 fffff800`030841a9 nt!KeBugCheckEx
fffff880`054db220 fffff800`03082e20 nt!KiBugCheckDispatch+0x69
fffff880`054db360 fffff800`030930d8 [COLOR=Red]nt!KiPageFault[/COLOR]+0x260
fffff880`054db4f0 fffff800`03089578 [COLOR=Red]nt!KiTryUnwaitThread[/COLOR]+0x28
fffff880`054db550 fffff880`0400062e [COLOR=Red]nt!KeSetEvent[/COLOR]+0x446 
fffff880`054db5c0 fffff800`035306e6 ksthunk!CKernelFilterDevice::DeferIrpCompletion+0x12
fffff880`054db5f0 fffff800`030885c1 nt!IovpLocalCompletionRoutine+0x166
fffff880`054db650 fffff800`035282af nt!IopfCompleteRequest+0x341
fffff880`054db740 fffff880`0400094c nt!IovCompleteRequest+0x19f
fffff880`054db810 fffff800`0352ed26 ksthunk!CKernelFilterDevice::DispatchIrp+0x244
fffff880`054db870 fffff800`033a2f37 nt!IovCallDriver+0x566
fffff880`054db8d0 fffff800`033a3796 nt!IopXxxControlFile+0x607
fffff880`054dba00 fffff800`03083e93 nt!NtDeviceIoControlFile+0x56
fffff880`054dba70 00000000`76ff138a nt!KiSystemServiceCopyEnd+0x13
00000000`0088df18 00000000`00000000 0x76ff138a

There's not much I could gather from the crash, apart a little information about what call routine it crashed on, I'm guessing that a thread was placed in a wait state to allow a device driver to complete some I/O operations. The thread is meant to be notified, when the I/O routines have finished with an Event Object. The nt!KeSetEvent is called to set the event object to signaled, which enables the thread to leave the wait thread and continue. I'm guessing that the thread never left the wait state, hence the nt!KiTryUnwaitThread.

---------------------------------------------------------------------------------------

How long has Driver Verifier been running for?

Scan for any missing, modified or corrupted protected Windows files with:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

 

[badler]

Hi,

I had blue screens continuously so I decided to format my C drive and load a fresh version of windows. Was good for a few days but another BSOD. Have enabled driver verifier since the crash. Can you review the attached and see if tells you anything? Am tempted to take my PC back or try a 32 bit version of windows 7 as the constant BSOD is very frustrating. thanks

 

[Arc]

Download and install Samsung Magician. Make it sure that your SAMSUNG SSD 830 is running with the up-to-date firmware version.

Also, try using the AHCI mode of storage controller in the BIOS.

EDIT: Also uninstall SyncBack Pro, at least as a test.

 

[x BlueRobot]

[COLOR="Red"]BugCheck 51[/COLOR], {1, fffff8a00014f010, 140a6000, 465}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+37285 )

Usual causes:  Hardware failure, File system corruption, Security issues

This bugcheck generally indicates that a issue has occurred with the registry, there seems to be most likely a few I/O errors with the registry.

0: kd> [COLOR="SeaGreen"]k[/COLOR]
Child-SP          RetAddr           Call Site
fffff880`0560c668 fffff800`031c3785 nt!KeBugCheckEx
fffff880`0560c670 fffff800`031dec13 nt! ?? ::NNGAKEGL::`string'+0x37285
fffff880`0560c6f0 fffff800`030f1326 nt! ?? ::NNGAKEGL::`string'+0x5656b
fffff880`0560c7e0 fffff800`032f841d [COLOR="Red"]nt!CmpInitHiveFromFile+0x246[/COLOR]
fffff880`0560c930 fffff800`03114ede [COLOR="Red"]nt!CmpLoadHiveThread+0x14d[/COLOR]
fffff880`0560cc00 fffff800`02e67906 nt!PspSystemThreadStartup+0x5a
fffff880`0560cc40 00000000`00000000 nt!KiStartSystemThread+0x16

In addition, to the others suggestions, what hard-drive diagnostics and other hardware troubleshooting have you completed?

 

[Arc]

Harry, we should concentrate on the SSD first, as it is the C drive itself.
Drive C:
Size 119.14 GB (127,928,365,056 bytes)

And ....
Model SAMSUNG SSD 830
Size 119.24 GB (128,034,708,480 bytes)

SSDs better not to put in hardware troubleshooting, other than the SMART monitoring programs like CrystalDiscInfo or SSDLife.

 

[badler]

Hi, I have run all hardware diagnostics suggested in the thread by Arc, including the video card, memory etc and they all show no errors. I am starting to wonder if the new DVD player which was installed has caused some issue as this only all started happening since the dvd drive was replaced, up until then with the same s/w and h/w I have never had a BSOD.

 

[badler]

Syncbackpro has been uninstalled, BIOS and windows updated to use AHCI mode of storage controller. Samsung SSD is running latest version of the BIOS according to Samsung Magician. Any other suggestions or just give it a while since if it BSOD again?

 

[Arc]

Do one more thing, to make it sure that there is no security issue. Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

And then wait and observe. If still it BSODs and gives Ntfs.sys as probable cause, the next steps would be to replace the SATA and power cables, using another SATA port on the motherboard.


But if still it goes in the same way, it would be better to decide that the problem is coming from the SSD itself.



BTW, is the power cables got any share between the SSD and the DVD drive? Check it and let us know.

 

[badler]

Hi,

I took the PC back (under warranty) and no hardware issues found. Checked and the drive is not sharing a power cable.

interesting that the PC blue screened when I took it into the store.

I have attached another dump file as now it is complaining about a realtek driver which I have ensured is the latest driver. I am still lost, have tried reloading windows 7 64 bit.

Would I be better off loading the 32 bit version - is this more stable?

Thanks,

Brendon.