BSOD & Restart problems please help thanks

[Coops]

Hi guys been reading on here a bit and trying to gather info on my pc problem. Built the system myself and i am experiencing the above problems and am considering taking the machine to a local repairer as i am stuck. Getting the BSOD a couple of times a day and sometimes just restarting without BSOD. Thanks in anticipation of your assistance and i have tried to put down as much info as i can and have run the sf diagnostic file but its 86meg (how can i give you access to it as i can't upload it to hear as its too big) and also another minidump file. I have looked in the msinfo32 at problem devices and 2 come up no idea what they are though but it says the drivers are not there. Here is what is in the file.

pcouffin device ROOT\PCOUFFIN\0000 drivers not installed? no idea what it is

USB Controller PCI\VEN_1033&DEV_0194&SUBSYS_50071458&REV_03\4&87DAECB&0&0028 drivers not installed

Also after looking in system event logs kernel 41 keeps appearing under critical, but on reading a few sites this seems common on win 7 and gigabyte mboards?

Here are some of the minidump codes i could not zip up as they got overwritten i made a note of them but don't know if it will assist on decoding the problem
040210-24648-01
040110-22245-01
040810-16582-01
041710-19110-01

Thanks guys for your help

 

[zigzag3143]

Hi guys been reading on here a bit and trying to gather info on my pc problem. Built the system myself and i am experiencing the above problems and am considering taking the machine to a local repairer as i am stuck. Getting the BSOD a couple of times a day and sometimes just restarting without BSOD. Thanks in anticipation of your assistance and i have tried to put down as much info as i can and have run the sf diagnostic file but its 86meg (how can i give you access to it as i can't upload it to hear as its too big) and also another minidump file. I have looked in the msinfo32 at problem devices and 2 come up no idea what they are though but it says the drivers are not there. Here is what is in the file.

pcouffin device ROOT\PCOUFFIN\0000 drivers not installed? no idea what it is

USB Controller PCI\VEN_1033&DEV_0194&SUBSYS_50071458&REV_03\4&87DAECB&0&0028 drivers not installed

Also after looking in system event logs kernel 41 keeps appearing under critical, but on reading a few sites this seems common on win 7 and gigabyte mboards?

Here are some of the minidump codes i could not zip up as they got overwritten i made a note of them but don't know if it will assist on decoding the problem
040210-24648-01
040110-22245-01
040810-16582-01
041710-19110-01

Thanks guys for your help

Sorry but the dump file is corrupt. It is far too small. Try uploading it again

Ken

 

[Coops]

If i click on it before zipping it is only 8kbit, so not much in their i presume. In relation to the SF zipped file which is too large to attach any suggestions on how i can allow people to access/read that. Thnks

 

[Coops]

Here is the file download link at megaupload can someone acknowledge they have got it ok.

MEGAUPLOAD - The leading online storage and file delivery service

 

[Jonathan_King]

Pretty straightforward, Kaspersky is causing the problem. Uninstall it completely using Programs and Features, then run this removal tool: http://support.kaspersky.com/downloads/utils/kavremover10.zip

Then download and install Microsoft Security Essentials.

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\Seven Forums\Dumps\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a0e000 PsLoadedModuleList = 0xfffff800`02c4be50
Debug session time: Thu Apr 22 08:35:58.565 2010 (GMT-4)
System Uptime: 0 days 1:34:18.032
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff88003b1894a, fffff88007a6da30, 0}

*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
Probably caused by : kl1.sys ( kl1+4994a )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88003b1894a, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88007a6da30, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
kl1+4994a
fffff880`03b1894a 48397b38        cmp     qword ptr [rbx+38h],rdi

CONTEXT:  fffff88007a6da30 -- (.cxr 0xfffff88007a6da30)
rax=000000000000000c rbx=ffff7e8005b098e0 rcx=ffff7e8005b098ec
rdx=fffffa8004d4df50 rsi=fffffa8004d4df20 rdi=fffffa8005001680
rip=fffff88003b1894a rsp=fffff88007a6e400 rbp=fffffa8005159ea0
 r8=fffffa8005159fb8  r9=0000000000000000 r10=fffff88003b14000
r11=fffffa8004d4df30 r12=fffffa8004d462a0 r13=0000000000000000
r14=fffffa8004d46150 r15=0000000000000004
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
kl1+0x4994a:
fffff880`03b1894a 48397b38        cmp     qword ptr [rbx+38h],rdi ds:002b:ffff7e80`05b09918=????????????????
Resetting default scope

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  avp.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88003b1894a

STACK_TEXT:  
fffff880`07a6e400 00000000`00000000 : fffff880`03ad1223 00000000`00000000 fffff880`03b1b99f fffffa80`04d46150 : kl1+0x4994a


FOLLOWUP_IP: 
kl1+4994a
fffff880`03b1894a 48397b38        cmp     qword ptr [rbx+38h],rdi

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  kl1+4994a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: kl1

IMAGE_NAME:  kl1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a9d0591

STACK_COMMAND:  .cxr 0xfffff88007a6da30 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_kl1+4994a

BUCKET_ID:  X64_0x3B_kl1+4994a

Followup: MachineOwner
---------

Hope this helps,
~JK

 

[Coops]

Thanks Jonathan for the reply i am quite surprised its Kaspersky as on xp i had no probs at all with it and tbh like using a lot of the features on it. You mention downloading microsoft essentials is there anything better to use as i do a lot of banking/purchasing and like the virtual keyboard feature in kasp. Also in relation to the jpegs you attached at the bottom of your reply do you want me to change my settings to those as i am unsure why you put them up. Once again thanks for your help and i hope it sorts it.

 

[Jonathan_King]

Other users have different opinions, but I personally believe MSE is the best. Combined with the Windows firewall, that's all you need.

There's a story behind the thumbnail. When I downloaded your file, I didn't notice you had minidumps, and instead debugged the memory.dmp file. I figured you had your system set to create a full dump instead of a minidump. So, I asked you to change it, and included a pic of how to do so.

I later realized you had included minidumps, so I edited that last comment out of my post. I forgot about the pic though.

 

[Coops]

I have just done what you recommended regarding kasp and installed microsoft security and have just left the minidump set up as it was, should i have done that as i am not sure about the last bit of your post. I will see how the pc system runs now and if i encounter the same problem do i just add to this existing post or create another thread. Once again thanks for your assistance mate.

 

[Jonathan_King]

No problem, Coops.

I'd say just post again in this thread. Not a big deal, either way.

What I meant in my previous post is that I saw that you had already set your system to create a minidump, so I deleted the part where I asked you to. I forgot to delete the picture that went along with my comment, though.

 

[Coops]

Just restarted again mate been ok for a few hours but removing Kaspersky doesn't seem to have cured it. No BSOD though.
Just went to edit this post and did it again twice in 15 mins. Just ran win mem test on restart came back ok. But every problem i have had if i check the system event logs it says critical kernel power event id 41 task (63) every time it has happened. Can you enlighten me on this. Thanks again and the lesson is don't build your own PC ever again, lol.

 

[Capt.Jack Sparrow]

Just restarted again mate been ok for a few hours but removing Kaspersky doesn't seem to have cured it. No BSOD though.
Just went to edit this post and did it again twice in 15 mins. Just ran win mem test on restart came back ok. But every problem i have had if i check the system event logs it says critical kernel power event id 41 task (63) every time it has happened. Can you enlighten me on this. Thanks again and the lesson is don't build your own PC ever again, lol.

Post the latest Minidump !!

- Captain

 

[Coops]

Attached is the latest zipped up minidump file. Thanks

 

[Jonathan_King]

Looks like bad RAM. Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder. Boot from the CD, and run at least 5 passes.

In addition, you may want to update your video card drivers.

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\042310-16848-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a17000 PsLoadedModuleList = 0xfffff800`02c54e50
Debug session time: Fri Apr 23 15:01:40.842 2010 (GMT-4)
System Uptime: 0 days 3:32:08.309
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
..........
Unable to load image atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff88003e66051, fffff8800495d9f8, fffff8800495d260}

Probably caused by : atikmdag.sys ( atikmdag+24c051 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88003e66051, The address that the exception occurred at
Arg3: fffff8800495d9f8, Exception Record Address
Arg4: fffff8800495d260, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
atikmdag+24c051
fffff880`03e66051 390a            cmp     dword ptr [rdx],ecx

EXCEPTION_RECORD:  fffff8800495d9f8 -- (.exr 0xfffff8800495d9f8)
ExceptionAddress: fffff88003e66051 (atikmdag+0x000000000024c051)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff8800495d260 -- (.cxr 0xfffff8800495d260)
rax=000000000000159f rbx=000000000000159f rcx=00000000d1ff159f
rdx=00802484c7fff6d0 rsi=fffff880040e1120 rdi=000000000000d1ff
rip=fffff88003e66051 rsp=fffff8800495dc30 rbp=0000000000000000
 r8=000000000000005e  r9=fffff8800495dc70 r10=0000240c01962e53
r11=0000000000017710 r12=0000240c0196620d r13=fffff880040e3280
r14=0000000000000020 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
atikmdag+0x24c051:
fffff880`03e66051 390a            cmp     dword ptr [rdx],ecx ds:002b:00802484`c7fff6d0=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cbf0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
atikmdag+24c051
fffff880`03e66051 390a            cmp     dword ptr [rdx],ecx

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from 0000000000000004 to fffff88003e66051

STACK_TEXT:  
fffff880`0495dc30 00000000`00000004 : cccccccc`00000000 00000000`00000000 00000000`00000000 fffff800`02c01e80 : atikmdag+0x24c051
fffff880`0495dc38 cccccccc`00000000 : 00000000`00000000 00000000`00000000 fffff800`02c01e80 00000001`1e2da60c : 0x4
fffff880`0495dc40 00000000`00000000 : 00000000`00000000 fffff800`02c01e80 00000001`1e2da60c 0000000e`0000023e : 0xcccccccc`00000000


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  atikmdag+24c051

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atikmdag

IMAGE_NAME:  atikmdag.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4b0ca832

STACK_COMMAND:  .cxr 0xfffff8800495d260 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_atikmdag+24c051

BUCKET_ID:  X64_0x7E_atikmdag+24c051

Followup: MachineOwner
---------

 

[Capt.Jack Sparrow]

Hello !!

On addition to Jonathan's steps there is a service expecption with Bugcheck 0xc0000005 which could an issue with your Virus proctection. I would recommend to uninstall it completely also use removal tool to clean up the left over files.

Hope this helps,
Captain

 

[Coops]

Not to sure which mem test to down load after looking on the site could you post the link please. Also downloaded and installed the iso prog but not showing on desktop and can't find from search even though its saying its installed, any thoughts. Captain i have removed my original Kaspersky IS 2010 as recommended by Jonathon in earlier posts and installed Microsoft security essentials instead. Thanks again and i am not over great on the pc as you can probably gather. Thanks again for all your assistance.

 

[Capt.Jack Sparrow]

Not to sure which mem test to down load after looking on the site could you post the link please. Also downloaded and installed the iso prog but not showing on desktop and can't find from search even though its saying its installed, any thoughts. Captain i have removed my original Kaspersky IS 2010 as recommended by Jonathon in earlier posts and installed Microsoft security essentials instead. Thanks again and i am not over great on the pc as you can probably gather. Thanks again for all your assistance.

Did you use the Removal Tool that Jonathan mentioned ??

 

[Coops]

After i uninstalled Kasp from programmes i tried to run the tool but if came back saying no Kasp files found so couldn't really do anything with it as it looked like everything had been removed.

 

[Capt.Jack Sparrow]

Run the MemTest86+ here is the Link Memtest86+ - Advanced Memory Diagnostic Tool Download - Pre-Compiled Bootable ISO (.zip) and use the software Jonathan mention to burn to a disk further instrctions are there on the webiste

- Captain

 

[Coops]

Run memtest for 5 passes and no errors occured (took just over 4 hours is that correct), also ECC was disabled (bios default setting) is that correct or irrelevant. Any further suggestions on what may be causing it guys. Also found this about Kaspersky Product Updates and Documentation: Kaspersky Internet Security. So was wondering if i downloaded this and used my authorisation code would it be ok to put back on. Thanks. Just been on Gigabytes site and was looking at drivers at the bottom of the page this link appears is it worth running as i am unsure. http://www.driveragent.com/giga/instructions?&browser=Microsoft%20Internet%20Explorer

 

[Coops]

After reading another thread on here just ran sfc /scannow and it came back 100% ok. I am not sure what it is but you may interpret its significance better than me. Thanks. Is it at the stage of take to a local repair shop yet?