Solved BSOD, repeatedly crashing when I'm not around to see, HELP!

[focusbob]

Hi Forum,

My PC (windows 7, 64-bit) is crashing regularly, always when I am not around (and therefore it is just idling). I wake up to:

Here's what windows prints out:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: 1e
BCP1: 0000000000000000
BCP2: 0000000000000000
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\071513-43680-01.dmp
C:\Users\Jim\AppData\Local\Temp\WER-59919-0.sysdata.xml


Here is the zip from my SF diagnostic tool run:
http://www.sevenforums.com/attachment.php?attachmentid=276535&stc=1&d=1373896096


Help would be much appreciated!
Thanks.

 

[Arc]

Post it following the Blue Screen of Death (BSOD) Posting Instructions. The zip you uploaded seems to be empty.

 

[focusbob]

Thanks for the heads up... I did follow the instructions (as far as I know), but the SF tool produced a blank folder which I proceeded to zip and post without checking. I uploaded a new one that should be correct...

http://www.sevenforums.com/attachment.php?attachmentid=276556&stc=1&d=1373909559

 

[koolkat77]

Start Menu\Programs\AVG	Public:Start Menu\Programs\AVG	Public

Uninstall your current antivirus it is known to contribute to BSOD's. Replace with Microsoft Security Essentials & the Free version of Malwarebytes, update and make full scans separately:

Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase

Microsoft Security Essentials - Microsoft Windows

Malwarebytes Free​

• :info: Do not start the trial version of MalwareBytes
  
  

You may also take a look at:

Good & Free System Security Combination​

Remove Sandboxie from your system:

SandboxieControl	"c:\program files\sandboxie\sbiectrl.exe"	JJPrisciandaro\Jim	HKU\S-1-5-21-3559470300-1531568060-3244442941-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

   Note

Download and install Revo Uninstaller free from here:

Download Revo Uninstaller Freeware​

Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries).

Make scans with -

TDSSKiller Rootkit Removal Utility Free Download | Kaspersky Lab US
Online Virus Scanner Eset​

Use the System File Checker tool and Run Disk Check:

Repair Windows 7 System Files with System File Checker

Run Disk Check in Windows 7 for Bad Sectors & Errors​

Reduce items at start up:

Performing a Clean Startup in Windows 7

Add, or Remove Startup Programs in Windows 7
​

Your Antivirus software is basically whats just needed there.

Test and Diagnose RAM Issues with Memtest86+:

RAM - Test with Memtest86+​

:info: Pay close attention to part 3 of the tutorial "If you have errors"

Then update your Intel 82567V-2 Gigabit Network Connection Ethernet driver.

Driver Reference Table - e1y62x64.sys

fffff800`00b9ca58  fffff880`04c01701*** WARNING: Unable to verify timestamp for e1y62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1y62x64.sys
 e1y62x64+0x1701
----------------------------------------------------------------------------
fffff880`04c00000 fffff880`04c49000   e1y62x64   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\e1y62x64.sys
[COLOR=Navy]    Image name: e1y62x64.sys
    Timestamp:        Sat Jun 13 06:46:42 2009[/COLOR] (4A32FDFA)
    CheckSum:         00049736
    ImageSize:        00049000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Let us know the results with further BSOD reports if you have them.

 

[focusbob]

Randomly occurring BSODs, please help!

I am getting BSODs let's say once per week, randomly. I learn of them when I get the "windows has recovered from an unexpected error" type of message upon reboot. I've attached my output. Thanks in advance. System is 7 64bit.

http://www.sevenforums.com/attachment.php?attachmentid=276624&stc=1&d=1373942013

 

[ICIT2LOL]

Bob have you tried any scans mate if not try these after trying these
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

http://www.sevenforums.com/tutorials/433-disk-check.html


http://www.superantispyware.com/

http://www.malwarebytes.org/products/malwarebytes_free/ untick thetrial version box

http://www.bleepingcomputer.com/download/adwcleaner/ download frombleeping computer

 

[Arc]

I am getting BSODs let's say once per week, randomly. I learn of them when I get the "windows has recovered from an unexpected error" type of message upon reboot. I've attached my output. Thanks in advance. System is 7 64bit.

http://www.sevenforums.com/attachment.php?attachmentid=276624&stc=1&d=1373942013

Take the suggestions already given by koolkat77 for the HPE 380t.

For the ASUS P6T DELUXE V2 machine, install Service pack 1 and all other windows updates. (The SP1 update is pending for the HP machine too.) Otherwise the system will remain vulnerable to threats.

[COLOR=Red]Windows 7 Kernel Version 7600 MP[/COLOR] (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.17273.amd64fre.win7_gdr.130318-1532

Learn how to install Windows 7 Service Pack 1 (SP1)
Service Pack Center - Microsoft Windows

And the ASUS one is highly overclocked.

CPUID:        "Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
MaxSpeed:     2670
[COLOR=Red]CurrentSpeed: 3818[/COLOR]

Overclocking is one of the most frequent causes of a stop 0x124, as frequent as the missing SP1. As you are getting BSODs, you should stop overclocking and run all the hardware components like CPU, GPU and RAM to their default settings. Also set the BIOS to default, too.
How To Clear CMOS (Reset BIOS)

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy.

Let us know the results. From the next post, please specify the info is about which computer.
_____________________________________________________________________
BSOD ANALYSIS:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 124, {0, fffffa800b8f18f8, 0, 0}

Probably caused by : GenuineIntel

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa800b8f18f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.

Debugging Details:
------------------


BUGCHECK_STR:  0x124_GenuineIntel

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`033776f0 fffff800`03108979 : fffffa80`0b8f18d0 fffffa80`09d8f680 fffff880`03377c38 00000000`00000018 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`03377c10 fffff800`02fea677 : fffffa80`0b8f18d0 fffff800`030635f8 fffffa80`09d8f680 00000002`00000005 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`03377c40 fffff800`02f52c85 : fffff800`030c5380 fffffa80`0b8cc828 fffffa80`0b8cc820 fffffa80`09d8f680 : nt!WheapProcessWorkQueueItem+0x57
fffff880`03377c80 fffff800`02ecbb21 : fffff880`011cae00 fffff800`02f52c60 fffffa80`09d8f680 4b404b40`42604260 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`03377cb0 fffff800`0315d47a : 845f845f`cb8bcb8b fffffa80`09d8f680 00000000`00000080 fffffa80`09d721f0 : nt!ExpWorkerThread+0x111
fffff880`03377d40 fffff800`02e9cda6 : fffff880`0316a180 fffffa80`09d8f680 fffff880`031750c0 1eb81eb8`0d370d37 : nt!PspSystemThreadStartup+0x5a
fffff880`03377d80 00000000`00000000 : fffff880`03378000 fffff880`03372000 fffff880`02eb1540 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: GenuineIntel

IMAGE_NAME:  GenuineIntel

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE_PRV

BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE_PRV

Followup: MachineOwner
---------

________________________________________________________________________________________
Here are two computers under analysis:

Computer 1:

• Motherboard: HP HPE 380t
• BIOS Date: 05/20/2010
• RAM : 12 GB RAM (6x2 GB ?)
• CPU : Intel(R) Core(TM) i7 CPU 930 @ 2.80GHz
• GPU : NVIDIA GeForce GT 320 ( 1 GB RAM)

Computer 2:

• Motherboard: ASUS P6T DELUXE V2
• BIOS Date: 05/19/2009
• RAM: 12 GB
• CPU: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz
• GPU: Name NVIDIA GeForce 9600 GT (1 GB)

 

[focusbob]

thanks guys, I'm working through koolkat77's suggestions, the full virus scan is going on 18 hours.... I'll get started on Arc's suggestions for my other computer when I get home to it again this evening. Thanks guys.

 

[ICIT2LOL]

All failing try some of these as well Best Free Rootkit Scanner and Remover

Did you run ADW by nay chance??

 

[focusbob]

OK, some updates/questions:

HPE 380t

DONE: Uninstalled AVG, installed Microsoft security essentials. Ran all virus/malware/rootkit scans suggested, all came back clean. Updated Windows and suggested drivers (this is still ongoing). Removed Sandboxie and a couple of other programs I was no longer using. Cleaned out startup items (but left: microsoft security client, allway sync, microsoft skydrive, netdrive, cloudstation (synology), and dropbox; my understanding is that starting at startup is essential to their functionality but please let me know if one or more of these is a known BSOD offender).

TO DO: Disc and memory scans.

ASUS P6T DELUXE V2

So far, I've only addressed (and as above, still ongoing) the Windows and driver updates. But other than this, the only requested action was lowering my overclock (which I completely understand the rationale behind). My question is, should I be doing some of the things recommended in the HPE 380t suggestions? For example, this computer has AVIRA, should I switch to microsoft security essentials? Should I run virus, malware, disc, memory, etc scans on it? Thin out programs that start at startup? A higher order question, for my curiosity, that will explain these questions somewhat: is there something in the reports I uploaded that indicates why my system(s) may have crashed? Or, does it just provide information about my systems that indicate to you areas that may have caused the crash (only because these areas are well known causes of crashes)?

Thanks, and I'll keep truckin' and updating.

 

[Arc]

Well done on HPE 380t Let us know how the remaining tests go

For the ASUS P6T DELUXE V2 one, Replacing AVIRA by MSE is not a part of troubleshooting, but if you feel like, you may do it. Here the important things are the SP1 update, Stop overclocks, checking the heat, and the hardware tests.

About your final question, the HPE 380t one crashed on software level, apparently, but the ASUS P6T DELUXE V2 one crashed on hardware level.

Hope both your computers will run stable after completing the suggested actions. If not, we will check the causes again. At a maximum, it may take a time, but nothing more

 

[ICIT2LOL]

Bob mate I have only the security in my machine sin the Start up so what security do you have as I am getting the message that you have more than one aboard the ship.

 

[focusbob]

ICit2lol: I'm not sure I'm following. Are you asking what security software I'm using? I just switched from AVG to MS security essentials. What message are you getting? Either way, I'm unfortunately not going to be all that helpful; more of a user than a giver of advanced support (due to my lack of knowledge in the area).

Arc:

HPE 380t

I finished the memory and disc scans: all clear! So now, we wait. No BSODs yet, but I haven't been putting it through its usual paces due to the testing. As always, no news will be good news

Another question about this machine in particular: As I'm sure your aware, I have 2 HDDs in RAID 1. For the past year, upon booting, the RAID management screen reports that one of the HDDs has had "smart event (0)". Then the machine enters a screen that says: "Hard disk failure is imminent. Please back up your hard disk and have it replaced". I know, I know, pretty straightforward... But, I have RAID 1 arrays on all of my machines and typically, I wait for one of the hard disks to actually fail before replacing it; this has worked well for me for at least a decade, and I find it to be most cost effective. However, I've been getting this error for almost a year now. Is it possible that the disc spit out a smart event a year ago, never since, but the message persists? If so, is there a way to clear that? Or, does it indicate ongoing smart events? I'm starting to believe that the computer does not understand the meaning of the word, "imminent." I'd still like to wait for the disc to die before replacing it, but given the alarming nature of the alert, I thought it would be a good idea to ask your opinion...

ASUS P6T DELUXE V2

Finished all the Windows updates, which given how long they took indicates to me I should stay on top of that better Thing is, I used to have Windows automatically install updates, but then it would restart itself when I was doing serious business and that had to stop... I am planning to roll back my overclock, I just want to write down all my BIOS settings in case I ever wish to return :devil2: It took a lot of tweaking to get there. Also, since the logs indicate this computer crashed for hardware reasons, should I be running memtest? Or do the logs indicate it was not likely an issue with memory? I'm guessing you didn't mention it because the overclock is such a glaring red flag...

 

[Arc]

Hello Focusbob Very nice follow-up

HPE 380t

I finished the memory and disc scans: all clear! So now, we wait. No BSODs yet, but I haven't been putting it through its usual paces due to the testing. As always, no news will be good news

Another question about this machine in particular: As I'm sure your aware, I have 2 HDDs in RAID 1. For the past year, upon booting, the RAID management screen reports that one of the HDDs has had "smart event (0)". Then the machine enters a screen that says: "Hard disk failure is imminent. Please back up your hard disk and have it replaced". I know, I know, pretty straightforward... But, I have RAID 1 arrays on all of my machines and typically, I wait for one of the hard disks to actually fail before replacing it; this has worked well for me for at least a decade, and I find it to be most cost effective. However, I've been getting this error for almost a year now. Is it possible that the disc spit out a smart event a year ago, never since, but the message persists? If so, is there a way to clear that? Or, does it indicate ongoing smart events? I'm starting to believe that the computer does not understand the meaning of the word, "imminent." I'd still like to wait for the disc to die before replacing it, but given the alarming nature of the alert, I thought it would be a good idea to ask your opinion...

I hope the machine is out of fear now. Usually koolkat77's suggestions work magically, as those contain a deep insight about the system and the debugging efficiency

S.M.A.R.T. (Self-Monitoring, Analysis and Reporting Technology) failures are the indicators of a failing HDD. But still, before abandoning those, better you take some more steps.

The Intel RST driver you have installed is very old.

    Image name: iaStor.sys
    Timestamp:        Fri Jun 05 07:23:40 2009 (4A287AA4)

Those may cause some failures. So better you Get rid of intel rapid storage. First uninstall it from Control Panel > Programs and Features. Then Uninstall the driver from device manager.

1. Right click on "my computer" icon and click "manage" on the context menu.
2. It will open the "computer management" window.
3. Select "Device Manager" in the left pane, It will list all the existing devices up.
4. Expand "IDE ATA/ATAPI controllers" by clicking on the triangle in front of it.
5. Select one Intel device item under it, right click, uninstall.
6. Continue the process for all Intel items under "IDE ATA/ATAPI controllers"
7. Now restart the computer. At restart, windows will auto configure the appropriate native system driver.

At the same time, the JMicron JMB36X Controller is similarly old.

    Image name: jraid.sys
    Timestamp:        Fri Jul 17 21:01:50 2009 (4A609966)

Update it from ftp://driver.jmicron.com.tw/SATA_Controller/Windows/

And decide, if RAID is a must-to-use to you or not. If not, disable RAID in BIOS. Use the AHCI storage controller mode, and let the native controller msahci.sys play the role there. That is the safest way to deal with, that I can say.

Also use Seatool for dos: SeaTools | Seagate to test the HDDs. The long test of this tool has a mechanism to repair upto some certain level of corruption. And it works, though it takes a time.

• Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.
• You can use Win32 DiscImager to create a bootable USB and run Seatools for DOS. Follow this post to know how to make a bootable Seatools USB.

After doing all those, you will be completely able to decide where the problem actually is; and what should be the necessary course of actions. Let us know

ASUS P6T DELUXE V2

Finished all the Windows updates, which given how long they took indicates to me I should stay on top of that better Thing is, I used to have Windows automatically install updates, but then it would restart itself when I was doing serious business and that had to stop... I am planning to roll back my overclock, I just want to write down all my BIOS settings in case I ever wish to return :devil2: It took a lot of tweaking to get there. Also, since the logs indicate this computer crashed for hardware reasons, should I be running memtest? Or do the logs indicate it was not likely an issue with memory? I'm guessing you didn't mention it because the overclock is such a glaring red flag...

I actually missed that memtest part
It will be very good if you take that test too, but Installing Service Pack 1, Reverting the Overclock back to normal and checking the temperature, these three are the primary things to do. Based on the results, we should go for Hardware checking, viz. RAM, GPU and CPU.

So, carry on and let give us the updates. Best of luck. You are doing a nice job here.

 

[ICIT2LOL]

My mix up Bob you mentioned in post #10 Avira and instead of reasoning it out took it to be was on the same machine as the MSE or the other you removed.

 

[focusbob]

ASUS P6T DELUXE V2

Experienced a bump in the road: I saved my OC profile in the BIOS and reset the BIOS settings. Now, when I turn on the computer, the message "loading asus express gate" comes across the bottom of the screen briefly, then...nothing, black screen . Now that this is happening, I recall that I had disabled express gate in the BIOS in my previous profile (such that by resetting my BIOS I had perhaps reset some things I shouldn't have). I googled this a bit, and haven't found a satisfactory answer. I'd prefer not to remove the CMOS battery, if possible, to clear the BIOS (not clear on if this would work anyway, since clearing the BIOS returns me to settings that have express gate ON). Ideas? Thanks!

 

[Arc]

Boot into the BIOS and see there must be an option about ASUS Express Gate. Disable it.

Edit: Check the "Tools" tab for it.

 

[focusbob]

The problem is that I can't get into the BIOS... I believe express gate loads prior to the BIOS. But whether that is true or not, no buttons seem to be able to bring me to the bios (del, esc, all the function keys, etc.)...

 

[Arc]

When you start up the computer, Press "Del" during POST to enter BIOS Setup. Better, you continue tapping Del key from the power up and hold it till it enters into BIOS setup.

Then come to "tools" and disable Express Gate.

 

[focusbob]

Arc: POST is not displayed anymore, that's why I can't get into the BIOS. I tried repeatedly pressing del, among various other function keys (1 key per boot), but that is not doing anything. I get a quick flash on the screen regarding my video card (presumably the video card bios), then "loading asus express gate...", then black screen. That's it... I'm assuming reverting to the default BIOS settings has enabled some sort of quit boot feature... What a dumb set of default BIOS settings, Asus! Still stuck...