Solved BSOD - Random Occurance

[t4528js]

BSOD might happen twice in one day or might not happen for a week. I don't seem to be doing the same thing twice when it happens. Tried to run the perfmon /report but I keep getting a timeout error. Here is additional info:

BC Code: d1
BCP1: FFFFFA8008E6400A
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4:FFFFF88001088162
LOCAL ID: 1033

Any help would be appreciated.

 

[zigzag3143]

BSOD might happen twice in one day or might not happen for a week. I don't seem to be doing the same thing twice when it happens. Tried to run the perfmon /report but I keep getting a timeout error. Here is additional info:

BC Code: d1
BCP1: FFFFFA8008E6400A
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4:FFFFF88001088162
LOCAL ID: 1033

Any help would be appreciated.

No DMP files included in upload please try this method. You uploaded the app instead of the data.


We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.


To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

 

[t4528js]

BSOD Follow-up

Auto restart was checked in sysdm.cpl. I changed the settings to those you listed. Will post again after next BSOD. Thanks for the help.

 

[t4528js]

BSOD Dump files

I did find some dump files in the C:\Windows\Minidump. It won't let me zip them. It says file not found or no read permissions. I tried to set the permissions to allow me to work with the file but it's not working. I must be doing something wrong or the .dmp file is empty. The file is listed as 111611-24538-01.dmp 11/16/2011 7:36pm DMP File

 

[zigzag3143]

I did find some dump files in the C:\Windows\Minidump. It won't let me zip them. It says file not found or no read permissions. I tried to set the permissions to allow me to work with the file but it's not working. I must be doing something wrong or the .dmp file is empty. The file is listed as 111611-24538-01.dmp 11/16/2011 7:36pm DMP File

Need to drag them to your desktop and then zip them

 

[t4528js]

BSOD Dump Files Zip

I guess I know a lot less about computers than I thought. See if this worked. Sorry for all the trouble!

 

[t4528js]

BSOD...New Crash

Here is the latest crash data.

 

[zigzag3143]

I guess I know a lot less about computers than I thought. See if this worked. Sorry for all the trouble!

This one is Related to SbFw.sys Solo-1 Sunbelt Personal Firewall driver. I would remove and replace with Microsoft Security essentials and the built in firewall

 

[t4528js]

BSOD: Dump file reader

Thank you for your help. I did as you suggested. What program do I need to be able to read a .dmp file? I really, really, hate bothering you and others.

 

[jcgriff2]

Use Windbg - Crash Dumps - Analyse Bugcheck and Process - Vista Forums

Also Blue screen view

As Ken mentioned, you can't process the dumps while they are in \windows\minidump -- copy them out

Regards. . .

jcgriff2

`

 

[zigzag3143]

Thank you for your help. I did as you suggested. What program do I need to be able to read a .dmp file? I really, really, hate bothering you and others.

Not a bother. We enjoy helping in any way we can. WInDbg is the gold standard but there are a couple of easier apps to start with.

Bluescreen view (by nirsoft) and who crashed. They are less comprehensive and often less reliable

 

[t4528js]

Thanks again for the help. You guys are awesome and it's nice to know there is somewhere we can go for help.

John

 

[t4528js]

WInDbg & .NET

I tried to download the WInDbg program but it states that I'm using .NET Client instead of the full version and that some of the files of WInDbg will not load. Do I need to download the full version first or is there a work around?

 

[jcgriff2]

Install Windbg v6.11.1.404 (MSI file) --> Install 64-bit Native x64 version 6.11.1.404 [15.2 MB]

From MSDN - Debugging Tools for Windows 64-bit Version

.NET 4.0 not a prerequisite for v6.11

Regards. . .

jcgriff2

`

 

[t4528js]

Windbg Operation

OK..I got Windbg downloaded and I've been messing around trying to get my dump files in it. I got a couple in there (I think accidentally) but there is the following message:

Your debugger is not using the correct symbols.

In order for this command to work, your symbol path must point to .pdb files that have full type information.

Certain .pdb files (such as the public os symbols) do not contain the required information.

Contact the group that provided you with these symbols if you need this command to work.

Type referenced: nt !_KPRCB

Is there a manual I can read on how to get my dump files into the debugger and how to operate the program?

 

[jcgriff2]

Open Windbg, press CTRL+s keys, paste this in for symbol path -

[FONT=lucida console]SRV*c:\symbols*http://msdl.microsoft.com/download/symbols[/FONT]

Then File, Save Workspace

Re-run the dump file.

 

[t4528js]

Dump files into Windbg

I did as suggested but still seem to be having problems getting the .dmp files into windbg. This is what I get

 

[t4528js]

Dump files into Windbg pt2

I guess cut and paste doesn't work here so I'll attach screen shot.

 

[t4528js]

I think I figured it out. If I open Windbg then drag and drop one dump file, let it debug and get the cause of the BSOD it works fine, but then I need to close Windbg and open it again to do the next file. I can't keep dropping one file at a time for debugging without opening and closing Windbg first.

 

[jcgriff2]

Copy \windows\minidump to your Documents folder.

Or - run Windbg at elevated admin level -
RIGHT-click on Windbg, "Run as Administrator"

Regards. . .

jcgriff2