Solved BSOD - whocrashed points to cdd.dll and kernel

[YoYo155]

Ok I installed intel's ssd tool and everything there appears up to date.

I ran memtest86+ for 2 more passes today with no errors. I will run it overnight to get the complete 7 passes as recommended in the article you reference above.

In meantime, here are a few more minidump files attached as a zip archive.

Can I ask how it is you figured out what was the offending driver before? Is there a tutorial you might link me to with more information about reading windbg, whocrashed, and other dump/crash tools? Thanks again for all the help!

You can disable Driver Verifier now | http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html


All of your dumps, but a a small few, are reporting memory issues and hold little information
as to what the cause really is.

So I went through your drivers and ASACPI stood-out!
Mainly due to the fact that it was from 2005, but also do the nature of ACPI manipulating drivers
to sometimes cause issues. If you crave some good tutorials I recommend x BlueRobot's blog
BSODTutorials - .


When you're done with the RAM tests.

Please update the driver for your 550 Ti as it was deemed to be the culprit in a number of dumps.

fffff880`04846000 fffff880`052ed000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        [COLOR=Red][B]Fri Jan 18 15:22:15 2013[/B][/COLOR] (50F94C87)
    CheckSum:         00A92B69
    ImageSize:        00AA7000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Nvidia, Uninstall Graphics Drivers
Then follow with a pass of Driver Sweeper | http://www.sevenforums.com/tutorials/83814-drivers-clean-left-over-files-after-uninstalling.html

Download 314.22
When installing select Custom Settings and uncheck:

• 3D Vision (all of them).
• HD Audio.
• Nvidia Updates.

Do check Preform a clean installation.

Download Speccy and upload a screenshot.
​

 

[jamestcoop]

Ok I disabled driver verifier. I removed all Nvidia files and used the cleaner tool as referenced above. I reinstalled only the Nvidia graphics driver (unchecking everything else) using clean installation.

My speccy screenshot is saved here (http://speccy.piriform.com/results/pf1UxncGOt6SmY8e5CaZafF)

It still is giving me bsod errors. It crashed about 5 minutes ago again. Here is what whocrashed reported (nothing really new):

On Sun 8/11/2013 12:50:17 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\081013-7659-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75C00)
Bugcheck code: 0x1A (0x5003, 0xFFFFF70001080000, 0xAA6, 0xA6700001544)
Error: MEMORY_MANAGEMENT
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sun 8/11/2013 12:50:17 AM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x1A (0x5003, 0xFFFFF70001080000, 0xAA6, 0xA6700001544)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

 

[YoYo155]

Preform a complete system scan:

• Download Malwarebytes Anti-Malware
• Download the FREE version!
  
• Make sure to uncheck to top check-box "activating a trial version of the PRO edition of malwarebyts".

 

[jamestcoop]

I ran memtest86+ for 9 full passes with 0 errors with all 4 sticks in (in all 4 slots). I ran it with 3 sticks removed and 1 stick in each of the 4 slots: stick 1 in slot 1, stick 2 in slot 2, stick 3 in slot 3, and stick 4 in slot 4 with all other slots empty. I ran each of these configurations between 8-12 passes with 0 errors reported.

I downloaded and ran anti-malware and it identified 4 items in the nirsoft toolkit I downloaded to read my crash dump files. I went ahead and deleted the whole nirsoft suite of tools and now malwarebytes shows 0 threats.

This is still mysterious to me. I have been reading BlueRobot's blog but it's a little over my head although pieces are starting to come together the more research I do.

 

[jamestcoop]

So frustrating. Still no resolution in sight for this problem.

The computer will bsod while in suspend mode so when I come back and move the mouse it won't come back to life so I end up having to restart and even then it won't boot up.

This morning I unplugged it completely from the wall for 10-15 minutes, plugged it back in and turned it on and it sat at the pre-POST black screen that says "Loading Asus Express Gate..." for probably 15 minutes before I figured nothing was happening so I hit the reset button again and it did load this time (hence me being able to post this message).

I am no closer to a solution than I was 2 weeks ago.

Is there anything else you suggest looking into? Any and all help is still appreciated. I don't have the big bucks to really take it to someone to get fixed...please, help! :/

 

[YoYo155]

What make & model of PSU do you own and how old is it?
Is any part of you system overclocked in some way?

Can you consider performing a clean install?

 

[jamestcoop]

Case Gears (CG) ECO-ELEMENT 650W High Efficiency PSU. It's probably going on 4 years old at this point.

Nothing has been overclocked by me. Everything should have the factory settings.

I did a clean reinstall before ever asking for help. It's in my very first post. I formatted the ssd and installed windows cleanly deleting everything. It was giving me problems both before and after performing this reinstall.

Does this mean it's a hardware problem or can driver/other software issues persist after a format and reinstall?

 

[YoYo155]

A driver issue can easily persists if you installed the same driver.

I'd remove the power hungry GPU and see how it goes, also if you have a spear know good PSU
this will be an appropriate time to test with it.

 

[jamestcoop]

I removed the gpu and put in the old/original graphics card that came with the machine. Plugged the plugs and flipped the switch and it won't boot up at all.

The internal lights come on and the disc drives make the noise they make when the computer is turned on but nothing is showing on the screen and no Windows sound comes over the speakers so I don't think it is simply not displaying I think it's not booting up still.

I'm not sure how to go about getting a spare power supply. I am going to try my local freegeek to get a loaner...I am nearly at the point where I need to take this to someone to have it worked on cause I am stumped.

 

[jamestcoop]

I reformatted the hard drive and reinstalled Windows 7. I ran all the updates including the service pack update and it did seem to run fine for a while until it suspended and then bsod'd again. When I came to the computer this morning it was on but only a black screen showing and it wouldn't come back until I did a button reset a few times, hit F8 to tell it to not load the resume but restart windows and now I am here. I had driver verifier on and have included the crash dump file.

WhoCrashed is reporting this:

On Tue 8/20/2013 2:44:53 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\081913-11419-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75C00)
Bugcheck code: 0xA (0x30, 0x2, 0x1, 0xFFFFF80002CD437B)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Tue 8/20/2013 2:44:53 AM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xA (0x30, 0x2, 0x1, 0xFFFFF80002CD437B)
Error: IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

 

[YoYo155]

I starting to believe its a faulty motherboard.
I'll ask for help with this one, I hope it will come soon enough.

 

[ICIT2LOL]

James all that dump stuff is way over my head but try these


http://www.superantispyware.com/

http://www.malwarebytes.org/products/malwarebytes_free/ (do again)

http://www.bleepingcomputer.com/download/adwcleaner/download from bleeping computer

then try the two rootkits from here Free Malware Removal Tools

Have you another machine to try that RAM in? and have you tried swapping the original stuff out for some basic RAM sticks?

Two more things you can do is
this http://www.sevenforums.com/tutorials/86648-psu-jump-start.html

and
http://www.sevenforums.com/vip/257690-psu-how-test.html#post2130086

Please DO NOT try to disassemble the device yourself.
One final thing correct volts DO NOT mean correct current think of it like a car battery that has the correct volts showing but no charge (current / amps) enough to swing it over and give you ignition as well.

 

[jamestcoop]

I am still looking for a solution. I opened msinfo32 and ran a search for "atk" of which there are 2 entries. The ACPI utility software and an error report showing this:

8/20/2013 12:01 AM Windows Error Reporting Fault bucket , type 0
Event Name: PnPDriverNotFound
Response: Not available
Cab Id: 0

Problem signature:
P1: x64
P2: ACPI\ATK0110
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Attached files:
C:\Windows\Temp\DMID93E.tmp.log.xml

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_7b90e53f6497da36d01d2c8167badd7549330a6_cab_0624d94d

Analysis symbol:
Rechecking for solution: 0
Report Id: 987df072-092b-11e3-8c48-f8ea401abb06
Report Status: 6

I should be running the updated version (ATK0110 driver for WindowsXP/Vista/Win7 32&64-bit from Drivers and Download (M4A77TD PRO) [Official Site - Main Page]). From this same site I downloaded and installed the latest version of "ASUS AMD Cool&Quiet utility V 2.18.01 for Windows XP/XP 64bit/Vista 32bit/Vista 64bit/7 32bit/7 64bit" as well.

It seems like the main problems are when the computer goes into sleep mode now it won't come back out and I have to manually reset which seems bad for the computer to have to do all the time. I am considering removing power saving options so it won't go to sleep mode but I don't want to have to shut down my computer every time I need to go do something else for a while...

 

[ICIT2LOL]

James I noticed you are downloading the AMD stuff that is for the power options?? Have you seen this? How to enable AMD Cool'n'Quiet Feature ? - YouTube I know it is an XP on a MSI board but might be of help.

I looked in here too don't know if you have or not Search Drivers and Downloads under all chipsets and processors.

Now it might not be of any consequence but maybe the NVidia drivers are messing with the AMD stuff??

 

[Arc]

Hello jamestcoop.

Can you post following the Blue Screen of Death (BSOD) Posting Instructions for one more time?

 

[jamestcoop]

Thank you all for the help! I know we can figure this out (hopefully without me spending hundreds on a new mobo/etc).

I downloaded and ran (in series) each of the programs from:
SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
and
http://www.malwarebytes.org/products/malwarebytes_free/(do again)
and
http://www.bleepingcomputer.com/download/adwcleaner/download from bleeping computer

With limited success. The first (superanti) noticed a few ad tracking cookies which were quarantined/removed without issue. The other 2 programs brought up nothing doing full scans (not quick scans).

Your link to Kaspersky confuses me (here Free Malware Removal Tools) as I can only see 1 rootkit (PMaxKiller arrowdownload [ZIP, 101 KB],[EXE, 117 KB] 1.0.1 Rootkit.Win32.PMax) but this says Win32 and I am running 64bit. Does that matter or should I just use the 32 version? Is there another rootkit on this site I am missing?

I am very wary of hacking the hardware to try the PSU jump start as you linked. The computer is on right now so obviously the PSU does turn on. What would doing the jump start prove other than that the PSU powers up?

The other PSU link (http://www.sevenforums.com/vip/257690-psu-how-test.html#post2130086) is in a VIP section which I don't have access to whether logged in or not so I don't know what is on this page, sorry.

I appear to have the current version of AMD Cool'n'Quiet installed and working. I rebooted to the bios settings and it is enabled.

Arc, I don't know if my previous dump files will help (here http://www.sevenforums.com/attachme...hed-points-cdd-dll-kernel-dumpfiles080613.zip and here http://www.sevenforums.com/attachme...points-cdd-dll-kernel-080713minidumpfiles.zip and here http://www.sevenforums.com/attachme...crashed-points-cdd-dll-kernel-jamestcoop4.zip and most recently here http://www.sevenforums.com/attachme...-points-cdd-dll-kernel-jamestcoop08202013.zip).

I've also attached a new as of right now SFDiagnostics zip file.

Thanks again everyone!

 

[jamestcoop]

James I noticed you are downloading the AMD stuff that is for the power options?? Have you seen this? How to enable AMD Cool'n'Quiet Feature ? - YouTube I know it is an XP on a MSI board but might be of help.

I looked in here too don't know if you have or not Search Drivers and Downloads under all chipsets and processors.

Now it might not be of any consequence but maybe the NVidia drivers are messing with the AMD stuff??

This has got me thinking. The motherboard is an ASUS M4A77TD Pro (here M4A77TD PRO - Motherboards - ASUS) and the original graphics card it came with is a Gigabyte GV-R435OC-512I (here GIGABYTE - Graphics Card - ATI - PCI Express Solution - Radeon HD 4000 series - GV-R435OC-512I). I installed (about 8 months ago) a new graphics card the Nvidia GTX GeForce 550 Ti (official site here GeForce GTX 550 Ti | GeForce).

Now I have since reformatted the SSD about 3 times and reinstalled Windows 7 so there shouldn't be any lingering AMD (old graphics card) driver or other software still on my system. Is that right or will drivers persist over a format and reinstall of the OS?

I didn't have any problems for 6-7 months using the new Nvidia graphics card until about a month ago now.

The system seems stable while in use but the main problems now are getting it to turn on at all or return from sleep mode...

 

[Arc]

Mate I am also framing the same idea that YoYo suggested, but as a last try ... do two things.

For an undetermined stop 0xA, let us concentrate on the virus scanner at first, and next the other drivers.

Uninstall Avast using Avast Uninstall Utility. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one (Just for safety reason; no expecting any virus to be caught).

And after that, enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

   Information

Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How Can we know that DV is enabled:
It will make the system bit of slow, laggy.

   Warning

Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point manually before enabling DV.

   Tip

• If you fail to get on the Desktop because of DV, Boot into Advanced Boot Options > Safe mode. Disable DV there. Now boot normally again, and try following the instruction of enabling DV again.
• If you cannot boot in Safe mode too, do a System Restore to a point you made earlier.

Let us know the results, with the subsequent crash dumps, if any.

 

[ICIT2LOL]

James look down the listings and you need the TDSS Killer that is the main rootkit .exe

 

[jamestcoop]

Ok ICit2lol I downloaded and ran TDSSKiller and it didn't find any issues.

My luck today has been pretty good; no blue screens. I am currently running an old graphics driver (version 311.06) which was updated by windows updates after my last format and reinstall of Win7.

When I previously attempted to update to the newer version of this driver here Drivers | GeForce (I tried both 314.22 and 320.49) I was getting regular blue screens.

I am wary to update to the newer drivers (326.80 is in Beta and was just released today).

I am going to give it a couple days on the older driver. I will let you all know if I still am having issues.