Solved BSOD yet again, Please Help!

[Jacodrian]

Hi there,

My new PC has been getting BSODs at random times before - being idle, browsing and even in safe mode. After numerous tries of trying to fix that, I went on to reinstall Windows 7; formatted the hard disk for a clean install. Once up and running, it all seemed fine until I tried to update my mouse and keyboard combo software and in the zip file is the recent dump files. Instead of going thru the hassle of trying to fix this again, I've decided to post here for help, so here it is. Please let me know if more information is needed to troubleshoot this issue, thanks in advance!!!

System Spec:
-Windows 7 64bit Home Premium w/ SP1 (full retail version)
-my PC is just about a month old
-current age of OS installation is 3 days

 

[Jacodrian]

yeah... after seeing other posts, it looks like mine is a little bare w/ my pc information so here's more, sorry.

CPU: Intel Core i5 2500K Quad Core
Video Card: Powercolor Radeon HD 6850 775MHZ 1GB 4.0GHZ GDDR5
RAM: Corsair XMS3 CMX4GX3M2A1600C9 4GB DDR3
Motherboard: MSI P67A-G45 (B3) P67 ATX LGA1155 DDR3

I can also provide a GetSystemInfo file that was collected before the reinstallation of Win7. Pls let me know so I can post that, thanks again!

 

[Jacodrian]

Anyone? Anything?

 

[usasma]

When I go looking for posts to work on, I look for those with 0 replies.
On rare occasions (like this), I go hunting for those posts with 1 or 2 replies to see if they need help.

From the perfmon report we find this:

Warning
Symptom:

The VolumeDirty flag is set on the diskCause:A logical disk has the dirty bit set.Details:This disk has been marked as dirty, it may be experiencing errors or might have not been shut down correctlyResolution:1. Run chkdsk on the drive and document any errors identified.
2. If chkdsk determines that there are errors on the drive run chkdsk /f to repair the errors.Related:Disk Diagnosis

Please run CHKDSK on the C: drive according to these instructions:

CHKDSK /R /F:
Run CHKDSK /R /F from an elevated (Run as adminstrator) Command Prompt. Please do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Win7) (winlogon for XP).
Copy/paste the results into your next post.

If unable to locate the log file, just rerun the perfmon report and see if the DIRTY BIT is still set. If it is, you'll have to format your hard drive in order to fix that condition.

More to follow after reading the dump files.....

 

[usasma]

Just a hunch here, but I wonder if this is a bad stick of RAM. Please run these free hardware diagnostics to see if there's any damage to the system:

H/W Diagnostics:
Please start by running these bootable hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link) - this is different from the CHKDSK from above, so please run it also.

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Free Online AntiMalware Resources (read the details at the link)

Another hunch would be your Kaspersky Internet Security being corrupted. The "test" for this is to uninstall it and install another (free) antivirus TEMPORARILY to see if that fixes the problem. Here's a link to a page listing some free antivirus': http://www.carrona.org/freeav.html

Beyond that, the only other evidence is that you have 2 different BSOD errors - which could be the start of a pattern that indicates a hardware problem. But I'd have to see 2 or 3 more memory dumps in order to start to reach that conclusion.

BSOD BUGCHECK SUMMARY

[FONT=lucida console]
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\070611-22276-01.dmp]
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Debug session time: Wed Jul  6 03:33:40.590 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:30.480
Probably caused by : win32k.sys ( win32k!xxxDestroyThreadInfo+892 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  wininit.exe
FAILURE_BUCKET_ID:  X64_0x3B_win32k!xxxDestroyThreadInfo+892
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff960`001488ea fffff880`02f1ce40 00000000`00000000
BiosVersion = V1.11
BiosReleaseDate = 04/14/2011
CPUID:        "Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz"
MaxSpeed:     3300
CurrentSpeed: 3292
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\070611-21247-01.dmp]
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Debug session time: Wed Jul  6 03:31:28.054 2011 (UTC - 4:00)
System Uptime: 0 days 0:03:51.897
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+36024 )
BUGCHECK_STR:  0x1a_41790
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  kldw.exe
FAILURE_BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+36024
Bugcheck code 0000001A
Arguments 00000000`00041790 fffffa80`036591f0 00000000`0000ffff 00000000`00000000
BiosVersion = V1.11
BiosReleaseDate = 04/14/2011
CPUID:        "Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz"
MaxSpeed:     3300
CurrentSpeed: 3292
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
  [/FONT]

 

[Jacodrian]

Thank you so much!!! I'll do these tests when I get home later tonight and will update you on the situation. Thanks again and sorry if I annoyed your or anyone on my third post ^^

 

[usasma]

Nope, it didn't annoy anyone. I was just trying to let you know how things worked - so you wouldn't end up being forgotten.

In most cases it's OK to "bump" your post - but when you're dealing with areas that require specialized knowledge, that may not be the case. And, if there's a shortage of the specialists, they will take shortcuts when looking for posts to respond to - such as looking for topics with 0 replies

Good luck to you and please let us know how the tests come out.

 

[Jacodrian]

Hi there,

So here's the scoop so far. I brought the pc in back to the store since it was still under warranty and they did a thorough hardware tests for 2 full days. Found no errors and BSOD didn't occur. When I got it back, I got Kaspersky to update it's database but BSOD occurred in the middle. Restarted and now it shows it's virus database is corrupted. Tried numerous updates and ran back to previous working state, but still failed. Decided to remove it and went w/ Microsoft Security Essentials. Worked for a few days, until the pc started from a cold boot and BSOD showed up again. This time it's worse as each time I get the boot options to choose from Safe Mode, w/ network, w/ DOS, last known configuration, etc, I just get a black screen and eventually would turn into BSOD. The same one I've provided in the post w/ MEMORY_MANAGEMENT. Since I couldn't get anything to work, I formatted the hard drive and made a fresh Windows 7 install. Then I thought it's a hard drive issue so I went to Seagate's site and downloaded a tool to check my drive. BSOD w/ same error showed up in the middle of the Long Generic test. Which I think caused it by the pc going into Sleep mode during the test, but I'm not very certain of it. I will be doing the same Long Generic test from Seagate called "SeaTools for Windows" now and will check back after work. As well as the other tests you've mentioned on your posts. Thank you so much again.

Sorry for the long story but I just thought you might want to know what had happened so far. Also, if you want me to perform another Blue Screen of Death (BSOD) Posting Instructions again, please let me know. But, I was able to sneak in a chkdsk /r /f earlier today and here are the results:



Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
148480 file records processed. File verification completed.
230 large file records processed. 0 bad file records processed. 0 EA records processed. 44 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)...
193476 index entries processed. Index verification completed.
0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)...
148480 file SDs/SIDs processed. Cleaning up 250 unused index entries from index $SII of file 0x9.
Cleaning up 250 unused index entries from index $SDH of file 0x9.
Cleaning up 250 unused security descriptors.
Security descriptor verification completed.
22499 data files processed. CHKDSK is verifying Usn Journal...
37423696 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
148464 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
69318926 free clusters processed. Free space verification is complete.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

307199999 KB total disk space.
29583552 KB in 100755 files.
79564 KB in 22500 indexes.
0 KB in bad sectors.
261175 KB in use by the system.
65536 KB occupied by the log file.
277275708 KB available on disk.

4096 bytes in each allocation unit.
76799999 total allocation units on disk.
69318927 allocation units available on disk.

Internal Info:
00 44 02 00 83 e1 01 00 56 cb 03 00 00 00 00 00 .D......V.......
d8 00 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

 

[usasma]

Chkdsk found problems with the hard drive's file system and repaired it.
Let it run for a while and then run chkdsk /r /f again. Do this every day for the next week or so.

If you get further chkdsk errors, then it's time to:
- backup your stuff/data
- ensure that you have your recovery disks on hand
- wipe the hard drive with DBAN or KillDisk (both are free - google for them)
- install Windows while connected to the internet
- install all Windows Updates, then install Service Pack 1, then install all Windows Updates that show up
- check Device Manager for any missing drivers - post back here for advice on locating the latest version
- install a free antivirus (DO NOT install an Internet Security Application)
- DO NOT install any other programs/devices/etc until we're finished testing.
- Run the system and attempt to recreate the problem.
Once done testing feel free to install whatever programs you desire - but keep track of what you install (just in case it messes things up). DO NOT have more than one Antivirus or Firewall operating at the same time!

 

[Jacodrian]

Sounds good!!!

But I wanted to make something clear that the chkdsk report from my previous post was done after when Windows couldn't boot in any way. Hopefully that doesn't change the list you've provided me, thanks!

 

[usasma]

The timing of the chkdsk doesn't impact this.
What we're looking for here is a repeat of the bad chkdsk results
If that happens, then we've gotta start ruling out things. Here's a list of the most common problems that we deal with here:
- driver issues (mostly BSOD's)
- hardware problems
- compatibility issues
- software issues
- malware
- Windows issues

We fix most of these by following the procedure above. In most cases this'll tell us if it's hardware or not.
So, if you do everything above and the system still has problems - then it's most likely hardware
If you do everything above and the system doesn't have problems - then it's most likely a software issue

So we'll either start looking for hardware issues, or you'll be able to start adding programs to your system.
When adding programs, make a handwritten list of each and everything you do to the system. Keep this list up for a week or two - just in case one of your changes/additions is causing issues.

Good luck!

 

[Jacodrian]

How can someone tell there are errors from the chkdsk report? Can you please show/tell me which line I should be looking for so I know what to look for after each chkdsk? Thanks!

 

[MvdB]

The line that says if " it made (no) corrections to the filesystem" kind of sums it up.
If there were corrections made... Something was wrong.

 

[usasma]

There are other indicators, but this one is the most significant:

Windows has made corrections to the file system.

 

[Jacodrian]

Been almost a week and so far, no errors after each chkdsk. However, I came across 2 BSODs; 1 (BAD_POOL_HEADER) was forced by trying to update the memory controller in Device Manager by selecting option to find drivers via the Internet -- this happened 2 days ago, 2 (MEMORY_MANAGEMENT) was when trying to install a remote desktop program called showmypc and after it downloaded the file, it crashed -- this took place earlier tonight. Tried to obtain info in Event Viewer but it didn't log them for some reason. So I went and did another BSOD Posting Instructions so pls check the zip file. Also, before I started doing the chkdsk, I switched the ram module settings from dual channel to single. System was stable until what I've explained above.

 

[MvdB]

It is again an A1. It refers to MsMpEng.exe.

You are running MSE, which is fine, but I remember some problems I have seen before with a part of MSE: MsMpEng.exe, taking up ( and not freeing) resources, ultimately causing bsod's. The potential fix is easy. See this quote from Microsoft:

If its MsMpEng.exe ,then this issue may be caused as MsMpEng.exe service value is not set to Zero in the registry

To check for the exact issue, we need to add the MsMpEng.exe process in Microsoft Security Essential Excluded process list.
To do so, please perform the below steps:
1. Open Microsoft Security Essential program.
2. Click on Add button.
3. Select the path c:\program files\microsoft security essentials\MsMpEng.exe
4. Click ok.
5. Click on Save changes.
6. Close Microsoft Security Essential program.
7. Restart the computer.
After restarting the computer, please check the usage of MsMpEng.exe service in the Task manager window.

Hth..

 

[usasma]

You've got Memory Management and Bad Pool Header errors - both are related to memory.
While I don't suspect that you have a RAM problem, it would be prudent to run MemTest and Prime95 to help assure us that the RAM/memory channels are working properly. The reason I don't suspect the RAM is because of the patterns within the error reports - it seems to be memory access issues rather than physical memory problems (so continue on with MvdB's suggestions).

Here's the full list of free diagnostics/stress tests. Just scroll down to the memory test and to Prime 95:

I suggest starting all troubleshooting with the following diagnostic tests. They'll save you a lot of time and heartache if there is a hardware failure, and you'll have the disks on hand in case you need them in the future:

H/W Diagnostics:
Please start by running these bootable hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Free Online AntiMalware Resources (read the details at the link)

Then, if the above tests pass, I'd try these free stress tests:

FurMark download site: FurMark: VGA Stress Test, Graphics Card and GPU Stability Test, Burn-in Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net
FurMark Setup:
- If you have more than one GPU, select Multi-GPU during setup
- In the Run mode box, select "Stability Test" and "Log GPU Temperature"
Click "Go" to start the test
- Run the test until the GPU temperature maxes out - or until you start having problems (whichever comes first).
NOTE: Set the alarm to go off at 90ºC. Then watch the system from that point on. If the system doesn't display a temperature, watch it constantly and turn it off at the first sign of video problems. DO NOT leave it it unmonitored, it can DAMAGE your video card!!!
- Click "Quit" to exit

Prime95 download site: Free Software - GIMPS
Prime95 Setup:
- extract the contents of the zip file to a location of your choice
- double click on the executable file
- select "Just stress testing"
- select the "Blend" test. If you've already run MemTest overnight please run the "Small FFTs" test instead. (run all 3 if you find a problem and note how long it takes to error out with each)
- "Number of torture test threads to run" should equal the number of CPU's times 2 (if you're using hyperthreading).
The easiest way to figure this out is to go to Task Manager...Performance tab - and see the number of boxes under CPU Usage History
Then run the test for 6 to 24 hours - or until you get errors (whichever comes first).
This won't necessarily crash the system - but check the output in the test window for errors.
The Test selection box and the stress.txt file describes what components that the program stresses.
More details on the use of this test: Torture test your CPU with Prime95

More Video Stress Tests:
1. Thanks to VirGnarus for finding this test: https://simtk.org/home/memtest
2. Two other video stress tests (may be more stressful than FurMark):
Video Memory stress Test - МИРNVIDIA / Утилиты / VMT
Artifact Locator - http://nvworld.ru/utilities/alocator/
Sorry, but I don't read the language that this website is made in.
3. Another interesting test that came to my attention: Download - OCCT Website english
USE AT YOUR OWN RISK - the program doesn't have a whole bunch of safety features to protect you from yourself!

CPU Stress Tests:
- http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=19182&lang=eng
- 7Byte : Hot CPU Tester Pro
- 7Byte : BurnIn64
- CPU Stress test - Overclock.net - Overclocking.net
- Fossil Free Online CPU Load or Stress Test.
- CPU Stability Test description, System Resources Tune-Up. Downloads List By All Time Popularity | PCWorld | PCWorld
- CPU Stress test - Overclock.net - Overclocking.net
- |MG| CPU Stability Test 6.0 Download
- LinX - A simple Linpack interface

 

[Jacodrian]

I can't c:\program files\microsoft security essentials\MsMpEng.exe but I did find c:\program files\microsoft security client\antimalware\MsMpEng.exe. Also checked in folder program files (x86), no luck either. Should I re-install it or get another free anti-virus program?

 

[Jacodrian]

sorry, forgot to add that I added the process, c:\program files\microsoft security client\antimalware\MsMpEng.exe instead and don't see it in the Task Manager under Processes or Services tabs.

 

[Jacodrian]

Just an update, I was able to borrow a couple of ram modules from a friend w/ the same secs as me 1600mhz DDR3 4gb. Checked in bios and it's currently running at auto -- 1333mhz, dual channel this time. Ran prime95 test for almost 24hrs until my son accidentally turned off the system ><. Anyways, so far the system has been stable for a day but that's the system being idle, no unusual crashes/bsods **crosses fingers**. I will start doing Memtest later and leave it overnight. I'll update when it's done.