BSOD + random freezing - Windows 7 Ultimate (mostly ntoskrnl.exe)

[pwnshot]

BSOD + random freezing - Windows 7 Ultimate (ntoskrnl.exe)

I have been experiencing quite a few BSOD's and freezes over the past week or so, at first I passed it off as a once off until it became more frequent (both BSOD and freezes)
I'm not sure if it would have anything to do with it but it started a few days after I started hosting a terraria server for myself and one friend; i recently (about 3 days ago) stopped hosting terraria, and began hosting starmade

just today I clean installed windows 7 and updated all of my drivers through "Computer>Manage>Device Manager" and still got another 6-7 BSOD's (some of which weren't in the minidump folder)
I might add that the blue screens tend to occur more while i am playing games (terraria/starmade) and the freezes occur during start-up, shortly after start-up, but rarely more than 10-15 mins after start-up.
my computer would also get into a routine where it would begin starting up (i would hear the fan turn on) but the screen would remain blank and it would automatically shut-down, and restart on its own. i would usually try to break this by turning off at the power point and waiting a short while, it would sometimes work, sometimes not

i don't know much at all, but by looking at the .dmp files most of them appear to be caused by ntoskrnl.exe

i have attached .dmp files from before and after the clean install

Any help or feedback would be greatly appreciated

 

[Arc]

Post it following the Blue Screen of Death (BSOD) Posting Instructions.

 

[BrainYtje]

I have the same problem buddy But different symptoms

 

[pwnshot]

I attached SF_09-10-2013.rar
thanks again

 

[Arc]

Hi pwnshot.

Install Service pack 1 and all other windows updates. Otherwise the system will remain vulnerable to threats.

[COLOR=Red]Windows 7 Kernel Version 7600 MP[/COLOR] (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255

Learn how to install Windows 7 Service Pack 1 (SP1)
Service Pack Center - Microsoft Windows

Uninstall Virtual Clone Drive.

Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Update realtek network driver from Realtek. Download the Win7 and WinServer 2008 R2 Auto Installation Program dated 2013/9/24 and install it.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Let us know the results.

** For anybody reading this thread: BSOD issues may appear as identical issue, but mostly they are all different. A suggestion that is applicable in one situation that should not be essentially applicable in another situation.
If you are having a BSOD issue, start your new thread, and pay proper attention the Blue Screen of Death (BSOD) Posting Instructions.
_____________________________________________________________________________________

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80001cb0261, fffff8800267a990, 0}

Probably caused by : ntkrnlmp.exe ( nt!EtwpEventWriteFull+451 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80001cb0261, Address of the instruction which caused the bugcheck
Arg3: fffff8800267a990, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!EtwpEventWriteFull+451
fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]

CONTEXT:  fffff8800267a990 -- (.cxr 0xfffff8800267a990)
rax=fffffa8005ac9040 rbx=00000000ffffffff rcx=0000000000000010
rdx=fffff8800267b478 rsi=fffffa8004847060 rdi=0000000000000000
rip=fffff80001cb0261 rsp=fffff8800267b370 rbp=fffff8800267b3b0
 r8=fffff80001cd30fd  r9=0000000000000000 r10=0000000000000001
r11=fffff80001c63000 r12=0000000000000001 r13=0000000000000000
r14=00000000000000b0 r15=0000000000000008
iopl=0         nv up ei ng nz ac po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010296
nt!EtwpEventWriteFull+0x451:
fffff800`01cb0261 498b01          mov     rax,qword ptr [r9] ds:002b:00000000`00000000=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80001cb0261

STACK_TEXT:  
fffff880`0267b370 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!EtwpEventWriteFull+0x451


FOLLOWUP_IP: 
nt!EtwpEventWriteFull+451
fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!EtwpEventWriteFull+451

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

STACK_COMMAND:  .cxr 0xfffff8800267a990 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451

BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451

Followup: MachineOwner
---------

 

[pwnshot]

Hi pwnshot.

Install Service pack 1 and all other windows updates. Otherwise the system will remain vulnerable to threats.

[COLOR=Red]Windows 7 Kernel Version 7600 MP[/COLOR] (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255

Learn how to install Windows 7 Service Pack 1 (SP1)
Service Pack Center - Microsoft Windows

Uninstall Virtual Clone Drive.

Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Update realtek network driver from Realtek. Download the Win7 and WinServer 2008 R2 Auto Installation Program dated 2013/9/24 and install it.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Let us know the results.

** For anybody reading this thread: BSOD issues may appear as identical issue, but mostly they are all different. A suggestion that is applicable in one situation that should not be essentially applicable in another situation.
If you are having a BSOD issue, start your new thread, and pay proper attention the Blue Screen of Death (BSOD) Posting Instructions.
_____________________________________________________________________________________

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80001cb0261, fffff8800267a990, 0}

Probably caused by : ntkrnlmp.exe ( nt!EtwpEventWriteFull+451 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80001cb0261, Address of the instruction which caused the bugcheck
Arg3: fffff8800267a990, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!EtwpEventWriteFull+451
fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]

CONTEXT:  fffff8800267a990 -- (.cxr 0xfffff8800267a990)
rax=fffffa8005ac9040 rbx=00000000ffffffff rcx=0000000000000010
rdx=fffff8800267b478 rsi=fffffa8004847060 rdi=0000000000000000
rip=fffff80001cb0261 rsp=fffff8800267b370 rbp=fffff8800267b3b0
 r8=fffff80001cd30fd  r9=0000000000000000 r10=0000000000000001
r11=fffff80001c63000 r12=0000000000000001 r13=0000000000000000
r14=00000000000000b0 r15=0000000000000008
iopl=0         nv up ei ng nz ac po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010296
nt!EtwpEventWriteFull+0x451:
fffff800`01cb0261 498b01          mov     rax,qword ptr [r9] ds:002b:00000000`00000000=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80001cb0261

STACK_TEXT:  
fffff880`0267b370 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!EtwpEventWriteFull+0x451


FOLLOWUP_IP: 
nt!EtwpEventWriteFull+451
fffff800`01cb0261 498b01          mov     rax,qword ptr [r9]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!EtwpEventWriteFull+451

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

STACK_COMMAND:  .cxr 0xfffff8800267a990 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451

BUCKET_ID:  X64_0x3B_nt!EtwpEventWriteFull+451

Followup: MachineOwner
---------

Have scanned with TDSSKiller and Windows Defender Offline, no results.

Successfully installed service pack and all the other updates

I also ran two disk checks yesterday and since then I haven't had any problems, but I also haven't been hosting anything on the computer or doing anything that would hog too much memory (I was when the errors were more frequent)

Still yet to update the realtek network driver and I will run memtest either tonight or tomorrow night as I have plans tonight

Will update again once I've done everything else