Solved BSOD Windows 7 - ntoskrnl.exe+7cc40

[garthrs]

I went back into BIOS and looked all over. I saw a VDDNB Over Volage: [AUTO]

The options on that are -/+ to change values

Standard = By CPU
Min = Standard - 0.3000V
Max = By CPU
Increment = 0.003125V

My only options are to set the over voltage up by the increments or down to auto.

I'm sorry, but i know very little about NB and CPU.

 

[writhziden]

Your processor usually runs at a default of VDDNB: 1.1 V (see Voltage Help with AMD and Asus Mobo - Guru3D.com Forums). Try bumping the voltage to VDDNB: 1.2 V.

 

[garthrs]

I don't want to fry anything so let me see if I understand this...
You want me to increase the increment to .1V?
Since it defaults at 1.1V, I'd need to overvoltage it by .1V?

I did a little reading and I think I understand it...

The NB handles some of the areas where I've been having my most frequent errors... (RAM controller and PCIE). Will increasing the voltage increase its ability to handle these functions?

 

[writhziden]

That is the general idea. Most motherboards are designed to handle 4 GB of RAM with the auto settings. When a user has more than 4 GB, it can sometimes require extra support through the NB voltage to allow the RAM to work as it is supposed to.

 

[garthrs]

Ok... I went to make your changes (Crashed and went into bios since i was there...)

I think I discovered the default setting for my CPU and NB

CPU 1.075
NB 0.8

When I started to increase the increment, that is where they started. Do you still think 1.2V is still a good idea for the NB?

Edit: Added latest dump files.

 

[writhziden]

Your NB voltage should be within 0.5 Volts of DRAM voltage. DRAM is set to 1.50 V, so it is not surprising you are crashing if the NB is 0.8 V. Definitely bump the NB Voltage, but first try it at the 1.1 V setting and bump the CPU Voltage to 1.125 V. See if it provides more stability. CPU Voltage should be higher than or equal to NB Voltage.

Safer would be to adjust the VDDNB Voltage to 1.1 V and leave the CPU Voltage on Auto.

 

[garthrs]

I'll give a shot.

Thanks alot for all the help.

 

[writhziden]

No problem. Keep us posted on how the RAM settings go. Best of luck.

 

[garthrs]

No improvement.

Attached the latest dump files...

I see so many other people with my problem and there is always a simple "remove this driver"... What I wouldn't give to have those problems.

What can I try now? I'm out of ideas.

Thanks again for the help.

 

[writhziden]

I do still see

AODDriver2	fffff880`07210000	fffff880`07241000	Wed Jun 15 02:38:35 2011 (4df86f8b)	00012df4		AODDriver2.sys

I think it is odd that AMD does not give the option to just install the drivers and not the software for your card. Do the following: Find all instances of AODDriver2.sys on your system. Do a search through the command prompt. First, create a system restore point in case these directions have undesired side effects.

Start Menu -> All Programs -> Accessories -> Right Click Command Prompt -> Run as administrator ->

cd ..
cd ..
dir /a /s AODDriver2.sys​

The last step is a set of commands entered into the command prompt, and after each you hit enter. Go to the directories that have AODDriver2.sys and rename all AODDriver2.sys files to AODDriver2.sys.bak and see if your crashes stop.

 

[garthrs]

Still getting the same errors...

Followed your instructions, only one file and it was in the ATI Technologies folder.

I tried scanning hard drives again, creating a new user profile (Read that on backspacetab.com), memory tested good through 8 passes of Memtest86+ last night...

I have an ibuypower oem disk and i can't extract the \i386\ntoskrnl.ex_ file... so Basically i have to hope it isn't the file that is corrupt.

Attached are the dumps.

I really appreciate your patience with me and my issue.

 

[writhziden]

[list=1]
[*]
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\garthrs\022312-20716-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e67000 PsLoadedModuleList = 0xfffff800`030ac670
Debug session time: Thu Feb 23 16:48:16.458 2012 (UTC - 7:00)
System Uptime: 0 days 0:20:34.019
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, 0, fffff8800783c898, fffff8800783c0f0}

Probably caused by : ntkrnlmp.exe ( nt!PfTCreateTraceDump+2e3 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: fffff8800783c898, Exception Record Address
Arg4: fffff8800783c0f0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
+16
00000000`00000000 ??              ???

EXCEPTION_RECORD:  fffff8800783c898 -- (.exr 0xfffff8800783c898)
ExceptionAddress: 0000000000000000
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000008
   Parameter[1]: 0000000000000000
Attempt to execute non-executable address 0000000000000000

CONTEXT:  fffff8800783c0f0 -- (.cxr 0xfffff8800783c0f0)
rax=fffff8a00d490ff8 rbx=fffff8a00232afd8 rcx=fffff8a00d490ff8
rdx=fffffffff4e99fe0 rsi=fffff8a00d490ff8 rdi=0000000000000000
rip=0000000000000000 rsp=fffff8800783cad8 rbp=0000000000000001
 r8=0000000000000000  r9=0000000000000000 r10=0000000000003cb4
r11=fffff8a00d490ff8 r12=fffff8a00d490020 r13=00000000000000fc
r14=fffff8a00232a000 r15=00000000000000fc
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
00000000`00000000 ??              ???
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000008

EXCEPTION_PARAMETER2:  0000000000000000

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80003116100
 0000000000000000 

FOLLOWUP_IP: 
nt!PfTCreateTraceDump+2e3
fffff800`03300f63 41016c2404      add     dword ptr [r12+4],ebp

FAILED_INSTRUCTION_ADDRESS: 
+2e3
00000000`00000000 ??              ???

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff80003300f63 to 0000000000000000

STACK_TEXT:  
fffff880`0783cad8 fffff800`03300f63 : fffff8a0`0232afc8 00000000`00000001 fffff8a0`0d490fe8 fffff800`00000000 : 0x0
fffff880`0783cae0 fffff800`033500b0 : fffff880`0783cc10 fffff8a0`0232a018 fffff8a0`0d490000 fffff8a0`0d478000 : nt!PfTCreateTraceDump+0x2e3
fffff880`0783cbe0 fffff800`03355ca3 : fffffa80`07b9b001 00000000`00000080 fffffa80`069ab9e0 fffff800`0306bda8 : nt!PfTGenerateTrace+0x10
fffff880`0783cc10 fffff800`0317efee : ffffffff`ff676980 fffffa80`07b9b060 fffffa80`0875b060 fffff800`02edb757 : nt!PfTLoggingWorker+0x113
fffff880`0783cd40 fffff800`02ed55e6 : fffff800`03059e80 fffffa80`07b9b060 fffff800`03067cc0 fffff880`01265cb0 : nt!PspSystemThreadStartup+0x5a
fffff880`0783cd80 00000000`00000000 : fffff880`0783d000 fffff880`07837000 fffff880`0783c790 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!PfTCreateTraceDump+2e3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff8800783c0f0 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_NULL_IP_nt!PfTCreateTraceDump+2e3

BUCKET_ID:  X64_0x7E_NULL_IP_nt!PfTCreateTraceDump+2e3

Followup: MachineOwner
---------
[*]
Loading Dump File [D:\Kingston\BSODDmpFiles\garthrs\022312-21496-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e61000 PsLoadedModuleList = 0xfffff800`030a6670
Debug session time: Thu Feb 23 14:47:01.614 2012 (UTC - 7:00)
System Uptime: 0 days 0:27:23.785
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff80000000000, 0, fffff800032faffc, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!PfTCreateTraceDump+37c )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff80000000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800032faffc, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003110100
 fffff80000000000 

FAULTING_IP: 
nt!PfTCreateTraceDump+37c
fffff800`032faffc 4c3b36          cmp     r14,qword ptr [rsi]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88006c3a940 -- (.trap 0xfffff88006c3a940)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a00fbdd598 rbx=0000000000000000 rcx=000000000000ffff
rdx=0000000000000083 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800032faffc rsp=fffff88006c3aad8 rbp=0000000000000001
 r8=0000000000000010  r9=fffff8a0024e7000 r10=0000000000005083
r11=fffff88006c3ab00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!PfTCreateTraceDump+0x37c:
fffff800`032faffc 4c3b36          cmp     r14,qword ptr [rsi] ds:0002:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e899fc to fffff80002eddc40

STACK_TEXT:  
fffff880`06c3a7d8 fffff800`02e899fc : 00000000`00000050 fffff800`00000000 00000000`00000000 fffff880`06c3a940 : nt!KeBugCheckEx
fffff880`06c3a7e0 fffff800`02edbd6e : 00000000`00000000 fffff800`00000000 ffffffff`f290ff00 fffff8a0`024c15c8 : nt! ?? ::FNODOBFM::`string'+0x4611f
fffff880`06c3a940 fffff800`032faffc : fffff800`032fafdd fffff8a0`024c15b8 00000000`00000001 fffff8a0`0fbdd578 : nt!KiPageFault+0x16e
fffff880`06c3aad8 fffffa80`08743b01 : fffff800`0334a0b0 fffff880`06c3ac10 fffff8a0`024ba018 fffff8a0`0fbbe000 : nt!PfTCreateTraceDump+0x37c
fffff880`06c3abd8 fffff800`0334a0b0 : fffff880`06c3ac10 fffff8a0`024ba018 fffff8a0`0fbbe000 fffff8a0`0fb88000 : 0xfffffa80`08743b01
fffff880`06c3abe0 fffff800`0334fca3 : fffffa80`08743b01 00000000`00000080 fffffa80`069ab9e0 fffff800`03065da8 : nt!PfTGenerateTrace+0x10
fffff880`06c3ac10 fffff800`03178fee : ffffffff`ff676980 fffffa80`08743b60 fffffa80`08ce75c0 fffff800`02ed5757 : nt!PfTLoggingWorker+0x113
fffff880`06c3ad40 fffff800`02ecf5e6 : fffff800`03053e80 fffffa80`08743b60 fffff800`03061cc0 fffff880`01026cb0 : nt!PspSystemThreadStartup+0x5a
fffff880`06c3ad80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!PfTCreateTraceDump+37c
fffff800`032faffc 4c3b36          cmp     r14,qword ptr [rsi]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!PfTCreateTraceDump+37c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

FAILURE_BUCKET_ID:  X64_0x50_nt!PfTCreateTraceDump+37c

BUCKET_ID:  X64_0x50_nt!PfTCreateTraceDump+37c

Followup: MachineOwner
---------


[/list]

1. Possible causes are Memory problems... BIOS... Corrupted hard disk file system... Corrupted System Files... Lack of Windows updates... Drivers...
2. Possible causes are Memory problems... Graphics card memory problems... BIOS... Corrupted hard disk file system... Corrupted System Files... Missing Windows Updates... Drivers...

Thanks to Dave76 for help understanding possible causes.



We will start with the common problems first (see bold possible causes). Do the following steps and test after each step to see if stability increases (the hardware tests you can run concurrently as they will not increase stability). Post back your results after each step, and if you get a blue screen crash, upload the files again and await further instructions after we are able to analyze the crash.

• If you are overclocking any hardware, please stop.
  
  
  
• Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html. You should also do an HD Diagnostic using the hard disk manufacturer's diagnostic tools. Finding the manufacturer and the diagnostic tools provided by that manufacturer can be accomplished using the link provided for HD Diagnostic.
  
  
  
• Run http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html up to three times to fix all errors. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations.
  
  
  
• Use FurMark: VGA Stress Test, Graphics Card and GPU Stability Test, Burn-in Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net to test the graphics card GPU. Then use the |MG| Video Memory Stress Test 1.7.116 Download to test your graphics card memory. Monitor the temperatures during this. If the GPU gets above 90 C, stop the test and report back. You can use Real Temp 3.70 to monitor the CPU temps, as well.
  
  UseSpeccy - System Information - Free Download the free version downloaded from Piriform to monitor all hardware temps.

 

[garthrs]

1. I am not overclocked, all equipment is factory standard.

OS Drive Chkdsk:
Checking file system on C:
The type of the file system is NTFS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
156928 file records processed. File verification completed.
471 large file records processed. 0 bad file records processed. 0 EA records processed. 92 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)...
211238 index entries processed. Index verification completed.
0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)...
156928 file SDs/SIDs processed. Cleaning up 133 unused index entries from index $SII of file 0x9.
Cleaning up 133 unused index entries from index $SDH of file 0x9.
Cleaning up 133 unused security descriptors.
Security descriptor verification completed.
27156 data files processed. CHKDSK is verifying Usn Journal...
34509968 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
156912 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
97231125 free clusters processed. Free space verification is complete.
Windows has checked the file system and found no problems.
488282111 KB total disk space.
99012832 KB in 121664 files.
71756 KB in 27157 indexes.
0 KB in bad sectors.
273023 KB in use by the system.
65536 KB occupied by the log file.
388924500 KB available on disk.
4096 bytes in each allocation unit.
122070527 total allocation units on disk.
97231125 allocation units available on disk.
Internal Info:
00 65 02 00 60 45 02 00 68 01 04 00 00 00 00 00 .e..`E..h.......
0e 02 00 00 5c 00 00 00 00 00 00 00 00 00 00 00 ....\...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.

Secondary Drive:
Chkdsk was executed in read/write mode.
Checking file system on D:
Volume label is SATA160.
CHKDSK is verifying files (stage 1 of 5)...
17408 file records processed. File verification completed.
0 large file records processed. 0 bad file records processed. 0 EA records processed. 0 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)...
18748 index entries processed. Index verification completed.
　
CHKDSK is verifying security descriptors (stage 3 of 5)...
17408 file SDs/SIDs processed. Cleaning up 28 unused index entries from index $SII of file 0x9.
Cleaning up 28 unused index entries from index $SDH of file 0x9.
Cleaning up 28 unused security descriptors.
Security descriptor verification completed.
671 data files processed. CHKDSK is verifying Usn Journal...
1284504 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
17392 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
11502423 free clusters processed. Free space verification is complete.
Windows has checked the file system and found no problems.
156280288 KB total disk space.
110178468 KB in 6672 files.
2640 KB in 672 indexes.
89488 KB in use by the system.
65536 KB occupied by the log file.
46009692 KB available on disk.
4096 bytes in each allocation unit.
39070072 total allocation units on disk.
11502423 allocation units available on disk.

3. SFC /SCANNOW returned no errors three times in a row.

4. Furmarking now.

SMART Data from WD Diagnosis tool Passed both drives.

Furmark and Video Memory passed with zero erros.

Most recent crash file attached.

 

[garthrs]

Just re-installed windows... Repair install. Maybe the ntoskrnl.exe is corrupt. Here's to hoping.

 

[writhziden]

It is not likely ntoskrnl.exe was corrupt. That process is usually blamed when Windows is unable to find the true culprit.

A repair install still may resolve the problem if there were other corrupted files/registry errors/driver problems. It is a good step to take.

 

[garthrs]

Can you think of any more checks i can do? The system is rock solid during furmark and video ram testing.

 

[writhziden]

Only thing left to try is backup all important data and http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html.

I remember you did this before, but you have not done so with the new graphics card. Also, what causes the crashes? Is there anything that is known to cause them, or are they random?

The only hardware you have not yet replaced are hard disk drives and PSU. The drives look good from the reports given, so I would consider testing another PSU in your system. Try to get one that has as good or a better rating than your current unit.

 

[garthrs]

I can almost guarentee a crash when I render a video.

I use Sony Vegas HD Movie Studio Platinum V. 11. That will almost always give me a blue screen.

I Play Dungeon Defenders on Steam. That will also almost always give me a blue screen.

Just over half the time, I get a Blue screen on Minecraft.

I get these crashes in game either when I am using FRAPS to record it or not.

Unless I am rendering a video, standard Microsoft Office use does not crash my PC. I can view videos on you tube, or from hard drive without concern.

I run a small you tube channel, so not being able to put out more than a few videos a week kind of sucks for me.

Usually I can get a video rendered if I just keep trying, last one took 30+ attempts.

 

[writhziden]

That does sound rather frustrating. I still recommend trying the clean install. It is possible the new card is having issues due to the card having been on the system before. I'd be somewhat surprised this is still the case after a repair install, but it still may be possible.

The other possibility is the PSU may not be able to handle the intensive processes you use the video card for. I do not know if that would be due to a faulty PSU, or 750 W not being enough (although 750 W I would think would be plenty).

As I said, try the clean install first, then if problems continue, consider testing with a borrowed or new PSU.

 

[garthrs]

Here is a weird factoid...

I seem to remember having about 70-ish Windows updates on the last install (SP 1)

This one is at 102 for windows alone... Why the huge gap? I thought standard sp1 was about 70 updates.