BSOD Seem to happen only when Shutting down or logging off - ntkrnlmp

[Magoo]

Windows 7 x64 Fully updated. System has passed 8 hours of memtest with no errors. Have run CHKDSK /F on all the drives. When I hit shutdown or log off about once every 3-5 days I get this BSOD ntkrnlmp.exe

Thanks for your guys help!

Magoo

 

[zigzag3143]

Windows 7 x64 Fully updated. System has passed 8 hours of memtest with no errors. Have run CHKDSK /F on all the drives. When I hit shutdown or log off about once every 3-5 days I get this BSOD ntkrnlmp.exe

Thanks for your guys help!

Magoo

Memory mangement probably cuased by a driver. I suspect this one. Related to SSPORT.sys 32bit Port Contention Driver from Samsung Electronics. I would remove or update to test.

 

[Magoo]

Thanks, I'm unsure how to uninstall since I don't have anything Samsung installed and not sure what hardware would have installed it? Only thing I can think of is can't remember the brand USB to Serial port adapter. Also I used to have a Samsung Laser Printer, but stopped using it over a year ago and uninstalled the driver software from the Control Panel

EDIT: Stopped it with Autoruns and also renamed it to .BAK

 

[zigzag3143]

Thanks, I'm unsure how to uninstall since I don't have anything Samsung installed and not sure what hardware would have installed it? Only thing I can think of is can't remember the brand USB to Serial port adapter. Also I used to have a Samsung Laser Printer, but stopped using it over a year ago and uninstalled the driver software from the Control Panel

EDIT: Stopped it with Autoruns and also renamed it to .BAK

If nothing is using it you can simply rename it to *.bak so it cant load.

 

[Magoo]

Already done, I will report back if I get another BSOD, Thanks for your help!

 

[Magoo]

Just got a scsiport.sys BSOD, Did not create a .dmp file, Not sure why?

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          2/24/2012 6:54:11 AM
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (2)
User:          SYSTEM
Computer:      Antares
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>41</EventID>
    <Version>2</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2012-02-24T12:54:11.350010300Z" />
    <EventRecordID>429315</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Antares</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">0</Data>
    <Data Name="BugcheckParameter1">0x0</Data>
    <Data Name="BugcheckParameter2">0x0</Data>
    <Data Name="BugcheckParameter3">0x0</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">true</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
  </EventData>
</Event>

 

[zigzag3143]

Just got a scsiport.sys BSOD, Did not create a .dmp file, Not sure why?

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          2/24/2012 6:54:11 AM
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (2)
User:          SYSTEM
Computer:      Antares
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>41</EventID>
    <Version>2</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2012-02-24T12:54:11.350010300Z" />
    <EventRecordID>429315</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>Antares</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">0</Data>
    <Data Name="BugcheckParameter1">0x0</Data>
    <Data Name="BugcheckParameter2">0x0</Data>
    <Data Name="BugcheckParameter3">0x0</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">true</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
  </EventData>
</Event>

If there is no dmp upload the event viewer log. What makes you think it is scsiport.sys?

Please provide us with your Event Viewer administrative logs by following these steps:


Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file here.

 

[Magoo]

Mentioned the SCSIport.sys because that's what it was saying on the Blue Screen when it happened.

 

[zigzag3143]

Mentioned the SCSIport.sys because that's what it was saying on the Blue Screen when it happened.

Nope

First

Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035 Of the 2736 errors this is the most frequent


Second
From 2/6

The driver detected a controller error on \Device\Harddisk7\DR7.


Third

The description for Event ID 9 from source iaStor cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

\Device\Ide\iaStor0


Fourth
The driver detected a controller error on \Device\Harddisk9\DR13.


Fifth
The driver detected a controller error on \Device\Harddisk9\DR13.


Sixth
The driver detected a controller error on \Device\Harddisk7\DR18.


Many many more

Seems you do have a lot of HD errors.

I would suggest chkdsk on them all

If the Hd's pass then I would start looking at the controllers

 

[Magoo]

All those HDD errors are when I either plug in or unplug a external USB HDD or Flash Drive. DR7 is a external USB drive that is hooked up 24/7 that Acronis write an image to every day. The higher number ones are USB stick's, Just for fun did another chkdsk on all the internal drives and all are fine. Every time I use a usb flash drive , I get one of those errors. Thanks for your help!

 

[zigzag3143]

All those HDD errors are when I either plug in or unplug a external USB HDD or Flash Drive. DR7 is a external USB drive that is hooked up 24/7 that Acronis write an image to every day. The higher number ones are USB stick's, Just for fun did another chkdsk on all the internal drives and all are fine. Every time I use a usb flash drive , I get one of those errors. Thanks for your help!

Check this tutorial out

http://www.sevenforums.com/tutorials/165554-usb-driver-general-fix-problems.html?ltr=U

 

[writhziden]

In addition to the excellent tutorial my friend zigzag3143 has recommended, I would also recommend these two tutorials:

http://www.sevenforums.com/tutorials/10169-safely-remove-hardware-eject-device.html​

and

http://www.sevenforums.com/tutorials/10392-write-caching-enable-disable.html​

for safer removal of your external drives.

 

[Magoo]

Thanks guys!

 

[Magoo]

Seems the problem happens the minute I insert any USB HDD or Flash Drive into the front USB ports, I get that controller error in the Event Viewer, Inserting the same USB Stick into an empty rear port and no errors in Event Viewer. Any Idea's on this? Case Problem?

Already have done the USB Driver tutorial and Write Caching is Disabled (default)

 

[writhziden]

It sounds like something is not connected properly or you do not have the most up to date chipset or USB drivers for the motherboard. Could also be that the drivers you do have are corrupted. If you know you have the most up to date chipset and USB drivers and connections are good, then use the steps in Use Hard Reset to Resolve Hardware and Software Issues (which works for all computers, not just HP Pavilions) to reset your USB ports. Sometimes USB ports enter a power state to protect the computer from a power surge and need to be reset this way to function properly again.


Did the above steps help the controller error get resolved?