BSOD Windows 7

[kieron22]

Hi, I'm getting the BSOD problem with my destop. It happened once a few weeks ago and then it stopped, but over the past few days it started occuring again. So far it has happened when I'm watching movies and whrn the pc is just left switched on. See attached for the .zip file from the DM Log collector. Any help would be greatly appreciated.

 

[axe0]

Hi kieron22,

Welcome to the 7forums.

Please read BSOD Posting Instructions & How to upload files

Please check {windows partition}\windows\minidump and check if there are any recent dump files saved.
Your uploaded dump files are a few years old.
Please make sure your pc is configured for small dump files How to configure minidump | Windows 7 tutorial

 

[ICIT2LOL]

Yep welcome kieron22 mate the dumps you have sent through as axe has asked - usually you configure the dumps and then post them as it looks like you have done - contained a dump that is pointing the finger at your USB ports and is most likely a driver but unfortunately you have not sent any system specs so we cannot go looking for that driver.

Please do this http://www.sevenforums.com/tutorials/180324-system-info-see-your-system-specs.html

Plus where did you get that copy of Windows because the build is wrong it should be 7601 SP1 not 7600.
Service Pack 1 (SP1) is essential to have the system work properly and you may have one of the old original copies that needed SP1 to be added ( I did on a couple of occasions before they realized the system had bugs that need fixing ) and sadly many counterfeiters sell on pirated copies to unsuspecting buyers too

Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: [COLOR=red]Unable to verify timestamp for ntoskrnl.exe[/COLOR]
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
[COLOR=red]Windows 7 Kernel Version 7600 MP[/COLOR] (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: [COLOR=red]7600.16617.[/COLOR]amd64fre.win7_gdr.100618-1621

Now the USB dump (the ntosknl.exe is a very common dump too and it usually takes some tracking down because it can be anything from hard to soft ware).

***** Kernel symbols are WRONG. Please fix symbols to do analysis.
[COLOR=red]*** WARNING: Unable to verify timestamp for USBPORT.SYS
*** ERROR: Module load completed but symbols could not be loaded for USBPORT.SYS[/COLOR][COLOR=black]

[/COLOR]

ADDITIONAL_DEBUG_TEXT:  
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
MODULE_NAME: [COLOR=red]usbhub[/COLOR]
FAULTING_MODULE: fffff8000364a000 nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcc2d
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  [COLOR=red]WIN7_DRIVER_FAULT[/COLOR]
BUGCHECK_STR:  0xFE
CURRENT_IRQL:  0
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
LAST_CONTROL_TRANSFER:  from fffff880052da7fa to fffff800036ba740
STACK_TEXT:  
fffff880`009e2718 fffff880`052da7fa : 00000000`000000fe 00000000`00000008 00000000`00000006 00000000`00000006 : nt+0x70740
fffff880`009e2720 00000000`000000fe : 00000000`00000008 00000000`00000006 00000000`00000006 fffffa80`06190b20 : usbhub+0x17fa
fffff880`009e2728 00000000`00000008 : 00000000`00000006 00000000`00000006 fffffa80`06190b20 fffffa80`056e4000 : 0xfe
fffff880`009e2730 00000000`00000006 : 00000000`00000006 fffffa80`06190b20 fffffa80`056e4000 fffff880`009e2760 : 0x8
fffff880`009e2738 00000000`00000006 : fffffa80`06190b20 fffffa80`056e4000 fffff880`009e2760 fffffa80`039db788 : 0x6
fffff880`009e2740 fffffa80`06190b20 : fffffa80`056e4000 fffff880`009e2760 fffffa80`039db788 ffffffff`dc3a58a0 : 0x6
fffff880`009e2748 fffffa80`056e4000 : fffff880`009e2760 fffffa80`039db788 ffffffff`dc3a58a0 00000000`00000000 : 0xfffffa80`06190b20
fffff880`009e2750 fffff880`009e2760 : fffffa80`039db788 ffffffff`dc3a58a0 00000000`00000000 00000000`23c7af16 : 0xfffffa80`056e4000
fffff880`009e2758 fffffa80`039db788 : ffffffff`dc3a58a0 00000000`00000000 00000000`23c7af16 00000000`23c5a760 : 0xfffff880`009e2760
fffff880`009e2760 ffffffff`dc3a58a0 : 00000000`00000000 00000000`23c7af16 00000000`23c5a760 fffffa80`06190cf8 : 0xfffffa80`039db788
fffff880`009e2768 00000000`00000000 : 00000000`23c7af16 00000000`23c5a760 fffffa80`06190cf8 fffffa80`061914a8 : 0xffffffff`dc3a58a0

STACK_COMMAND:  kb
FOLLOWUP_IP: 
usbhub+17fa
fffff880`052da7fa ??              ???
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  usbhub+17fa
FOLLOWUP_NAME:  MachineOwner
IMAGE_NAME:  [COLOR=red]usbhub.sys[/COLOR]
BUCKET_ID:  WRONG_SYMBOLS
FAILURE_BUCKET_ID:  WRONG_SYMBOLS
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  [COLOR=red]km:wrong_symbols[/COLOR]
FAILURE_ID_HASH:  {70b057e8-2462-896f-28e7-ac72d4d365f8}
Followup: MachineOwner

But in any case specs please as we cannot work not knowing what we are working with.

 

[kieron22]

First off thank you guys for the feedback.

1) I have added the pc specs, sorry about not having it at first things were going a bit crazy with the desktop
2) I checked the instructions on how to configure the dump and everything on my PC was set just like in the instructions.
3) In terms of the OS, someone built the system for me and did everything, however I do have the Windows 7 CD from another computer that I bought, should I just reinstall with that CD?
4) I checked in the Minidump folder and I found a few files, one of them as recent as yesterday (see attached)
5) The latest event is that this morning I went to turn on the PC and it failed and Startup repair was launched and it did some repairs, I haven't had any BSOD's so far. And I have also been getting some pop up notifications about different exe. that are corrupt:

The first one that came up is DropboxUpdate.exe - Corrupt File : The file or directory C:/$Secure is corrupt and unreadable. Please run the Chkdsk utility

Second one is AcroMissingCompWClass: AcroRd32.exe - Corrupt File : The file or directory C:/$Secure is corrupt and unreadable. Please run the Chkdsk utility

Thanks again for the help.

View attachment 372633

 

[axe0]

2 drivers have been flagged.
The Nvidia Video driver
Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from here

Please check here for driver updates for the Realtek PCI-E Gigabit Ethernet NIC

*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys

*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys

0: kd> lmvm nvlddmkm
start             end                 module name
fffff880`11ef6000 fffff880`12b50d00   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: [U]nvlddmkm.sys[/U]
    Timestamp:        [COLOR="Red"][U]Sat Jan 08 03:07:22 2011[/U][/COLOR] (4D27C6DA)
    CheckSum:         00C5F2DA
    ImageSize:        00C5AD00
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

0: kd> lmvm Rt64win7
start             end                 module name
fffff880`06c91000 fffff880`06d16000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: [U]Rt64win7.sys[/U]
    Timestamp:        [COLOR="red"][U]Fri Jun 10 08:33:15 2011[/U][/COLOR] (4DF1BAAB)
    CheckSum:         0008B67F
    ImageSize:        00085000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[kieron22]

I did everything you told me, Installed a new driver for the Realtek and for the GPU and after that I got the BSOD again. It made a new dump file (attached)View attachment 372636

 

[Ztruker]

As derekimo pointed out here, those are old dumps from 2012.

 

[kieron22]

As derekimo pointed out here, those are old dumps from 2012.

even the last dump that I posted? which is dated today?

 

[ICIT2LOL]

Keiron mate in your latest dump (29/9/2015) the build is wrong see the code

Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: [COLOR=red]7600.16617.amd64fre.win7_gdr.100618-1621[/COLOR]
Machine Name:
Kernel base = 0xfffff800`03850000 PsLoadedModuleList = 0xfffff800`03a8de50
Debug session time: Wed Sep 30 08:11:54.707 2015 (UTC + 10:00)
System Uptime: 0 days 0:30:03.159

Not surprisingly this is up too and it can be anything hard or soft ware

ADDITIONAL_DEBUG_TEXT:  
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: fffff80003850000 nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 0000000000000008 
CURRENT_IRQL:  0
FAULTING_IP: 
hal+233e
fffff800`0380933e 488b5a08        mov     rbx,qword ptr [rdx+8]
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xA
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
LAST_CONTROL_TRANSFER:  from fffff800038bfca9 to fffff800038c0740
STACK_TEXT:  
fffff800`04d5b748 fffff800`038bfca9 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt+0x70740
fffff800`04d5b750 00000000`0000000a : 00000000`00000008 00000000`00000002 00000000`00000000 fffff800`0380933e : nt+0x6fca9
fffff800`04d5b758 00000000`00000008 : 00000000`00000002 00000000`00000000 fffff800`0380933e fffff800`038c51fa : 0xa
fffff800`04d5b760 00000000`00000002 : 00000000`00000000 fffff800`0380933e fffff800`038c51fa 00000000`00000000 : 0x8
fffff800`04d5b768 00000000`00000000 : fffff800`0380933e fffff800`038c51fa 00000000`00000000 00000000`00000000 : 0x2

STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt+70740
fffff800`038c0740 48894c2408      mov     qword ptr [rsp+8],rcx
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt+70740
FOLLOWUP_NAME:  MachineOwner
IMAGE_NAME:  [COLOR=red]ntoskrnl.exe[/COLOR]
BUCKET_ID:  WRONG_SYMBOLS
FAILURE_BUCKET_ID:  WRONG_SYMBOLS
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING: [COLOR=red] km:wrong_symbols[/COLOR]
FAILURE_ID_HASH:  {70b057e8-2462-896f-28e7-ac72d4d365f8}
Followup: MachineOwner

So where did you get your copy from as it does not have Service Pack 1 - SP1 and could be counterfeit.

 

[kieron22]

If I reinstall windows using a genuine copy that I got with another computer will that help? I just bought the parts and paid someone to build it.

 

[ICIT2LOL]

No sorry mate that copy if it is an OEM is tied forever to the original board. If it is a retail copy then it can be used again provided it is only used on one machine at a time and then once you have used it for more than say four machines they might just come back at you and ask what is going on.

Now one option is of course to phone Microsoft and explain the original board has gone bad and can you use the OEM copy for the new board. They are usually fairly accommodating but don't try this more than once eh? You will of course need to know the activation code usually on the machine sticker or find it using this first http://www.sevenforums.com/tutorials/153626-product-key-number-windows-7-find-see.html use option 2. If you do contact Microsoft because of that discrepancy in the build they might even say it is not a genuine copy and then we are stuck with getting a new copy which is easier said than done because of finding an OEM - DON'T use EBay mate in any case.

One last option is this http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html - you can use any Windows 7 DVD (say a friends disk) as they have all versions on the disk and you need to use the ei.cfg removal tool to unlock the version you have a valid code for.

I am offline now for a while but post back and let me know what is happening.

 

[CNA]

I f your Copy is retail one you can do a clean install , but if it is an OEM , you can't .

 

[ICIT2LOL]

I f your Copy is retail one you can do a clean install , but if it is an OEM , you can't .

Yep CNA I did say that already and while you are right I thought a little explanation was in order to make the point of the difference. Plus you can see there is also an option in that tutorial I posted.
between retail and OEM and the uses that a retail copy can be put to.

What I didn't want was the OP to do is go buy another copy that is not genuine as I think the original one probably was and unbeknown to the OP.

 

[kieron22]

Thank you all soo much again. A BSOD hasn't occurred since yesterday so I'll monitor it, if I does occur I have a retail copy of windows 8 as well so I might upgrade to that since the Windows 7 that I have is an OEM one.

 

[ICIT2LOL]

Ok Keiron but personally I tried 8 and it really is not my cup of tea and nor is 10 for that matter.

You could try phoning Microsoft like I said and yes they can be quite accommodating mate if you explain the old MB died on you.

 

[kieron22]

I know its the same for me too, windows 7 is just nice and simple but seeing that it might not be a genuine copy I think I'll have to replace it. It's still acting up btw so I'm getting ready to do it over.

 

[ICIT2LOL]

Kieron mate just try this once more just to be sure the copy is not genuine I am only assuming it is because of that reference to the 7600 build. Now when I first installed 7 a long time ago it did come as 7600 but it wasn't long before they fixed the problems with the SP1 and the new copies came as 7601.

So have a loo it costs nothing to do.

Genuine Windows - Windows Help

 

[kieron22]

Thanks for all the help but the check came up as not validated,

 

[ICIT2LOL]

Ok mate thought it worth a try now it is a matter of finding a copy or being able to purchase a key then you could use the tutorial I mentioned in a previous post using a friends DVD.

Now it always seems to me that every time this happens that the version is almost invariably the Ultimate version that is involved and I am guessing that the unscrupulous play on people desire to have the best do so by selling the "Ultimate" version.
In my opinion the Home version just about covers the lot the Pro and Ultimate are just not really needed for general work.

 

[kieron22]

hmm thats interesting... I just did the install of windows 8, will try it out and see if any problems occur and I'll let you know whats happening, thanks again.