BSOD

[Ash119]

randomly getting BSOD when playing games or closing a program, some help would be appreciated.

Crash dumps...

 

[cluberti]

The bulk of these are problems with the kernel attempting to read from memory addresses that are invalid - and by that, I mean corrupted PTEs, page faults when running in nonpaged pool, etc. This would indicate you might have bad RAM, so checking your RAM at this point is a very wise idea.

 

[ttran]

randomly getting BSOD when playing games or closing a program, some help would be appreciated.

Crash dumps...

Hi and Welcome to SF!

Cluberti is right, memory corruption was mentioned in the DMP so please check your RAM. Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

In addition to RAM, I suspect your graphic card as well because dxgmms1.sys was blamed in the DMP with stop code 7E, which can be graphic card issue. I would suggest you to re-install the graphic card driver first. When upgrading your graphic driver you MUST remove all traces of the current driver. In order to do that we recommend using Guru3D - Driver Sweeper

When it is removed then download and install the fresh copy.

When re-install graphic card driver, update directx as well:
Download details: DirectX End-User Runtime

BUGCHECK SUMMARY:

BugCheck 1A, {411, fffff680000356e8, a7c85884, fffff680000156e9}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+6051 )

Followup: MachineOwner
---------

BugCheck A, {28, 2, 0, fffff80002b03518}

Probably caused by : memory_corruption ( nt!MiFindNodeOrParent+0 )

Followup: MachineOwner
---------
BugCheck 1000007E, {ffffffffc0000005, fffff88004431d0c, fffff88002130868, fffff880021300d0}

Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_SEGMENT::MarkResourcesForEviction+94 )

Followup: MachineOwner
---------

Run system file check please:
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

as well as Malware check:
Malwarebytes

Regard,

Tuan

 

[Ash119]

thanks for the quick reply.

memtest - 5passes 0 error

malware check - Trojan.agent

reinstalled gfx drivers.

 

[Ash119]

New blue screen dump

 

[ttran]

I still suspect the graphic card. However, let's turn on driver verifier to know exactly what is causing all of these
Beyond that, please run Verifier with these settings:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.

So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).

Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
NOTE: You can use Low Resource Simulation if you'd like. From my limited experimentation it makes the BSOD's come faster.
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.

Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out. If it doesn't crash for you, then let it run for at least 36 hours of continuous operation (an estimate on my part).

Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.

If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.

If that doesn't work, post back and we'll have to see about fixing the registry entry off-line:

Delete these registry keys (works in XP, Vista, Win7):
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\VerifyDrivers
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\VerifyDriverLevel

More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users

BugCheck A, {fffff900c21a600a, c, 1, fffff80002ad8ec1}

Probably caused by : hardware ( win32k!AllocateObject+dd )

Followup: MachineOwner
---------

 

[Jonathan_King]

Do you have another graphics card you can use? See if a friend has one, or rob one from another computer.

 

[Ash119]

no can do

 

[Ash119]

verifier blue screen

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000094, Exception code that caused the bugcheck
Arg2: fffff80002db4e43, Address of the instruction which caused the bugcheck
Arg3: fffff88005cda770, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000094 - {EXCEPTION} Integer division by zero.

FAULTING_IP:
nt!CmpKcbCacheLookup+8d3
fffff800`02db4e43 f7b718060000 div eax,dword ptr [rdi+618h]

CONTEXT: fffff88005cda770 -- (.cxr 0xfffff88005cda770)
rax=00000000197728e6 rbx=0000000000000000 rcx=00000000197728e6
rdx=0000000000000000 rsi=0000000000000011 rdi=fffff8a00039c010
rip=fffff80002db4e43 rsp=fffff88005cdb140 rbp=fffff8a0005f82f3
r8=0000000000000000 r9=000000000000fffe r10=0000000000000000
r11=fffff88005cdb2d8 r12=fffff8a0015474a8 r13=0000000000000001
r14=fffff8a000131130 r15=fffff8a000131130
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!CmpKcbCacheLookup+0x8d3:
fffff800`02db4e43 f7b718060000 div eax,dword ptr [rdi+618h] ds:002b:fffff8a0`0039c628=00000000
Resetting default scope

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: SearchIndexer.

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80002db3d08 to fffff80002db4e43

STACK_TEXT:
fffff880`05cdb140 fffff800`02db3d08 : fffff880`05cdb2d8 fffff880`00000005 fffff880`05cdb6c8 fffff880`05cdb6e0 : nt!CmpKcbCacheLookup+0x8d3
fffff880`05cdb230 fffff800`02db1f61 : fffff8a0`01be5510 fffff880`05cdb6e0 fffff880`05cdb718 fffff880`05cdb700 : nt!CmpBuildHashStackAndLookupCache+0x328
fffff880`05cdb610 fffff800`02dd1e84 : fffff800`02db1cc0 00000000`00000000 fffffa80`06064b10 00000000`00000001 : nt!CmpParseKey+0x2a1
fffff880`05cdb8e0 fffff800`02dd6e4d : fffffa80`06064b10 fffff880`05cdba40 00000000`00000040 fffffa80`03d19a50 : nt!ObpLookupObjectName+0x585
fffff880`05cdb9e0 fffff800`02db5dcc : 00000000`02046000 00000000`00000000 fffff8a0`01be5501 fffff880`05cdbaa8 : nt!ObOpenObjectByName+0x1cd
fffff880`05cdba90 fffff800`02db7f0f : 00000000`0137df10 00000000`0002001f 00000000`0137df98 00000000`00000000 : nt!CmOpenKey+0x28a
fffff880`05cdbbe0 fffff800`02ad7993 : fffffa80`0720e490 fffff880`05cdbca0 00000000`ff420cd0 fffffa80`072a2240 : nt!NtOpenKeyEx+0xf
fffff880`05cdbc20 00000000`77b10caa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0137dea8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b10caa


FOLLOWUP_IP:
nt!CmpKcbCacheLookup+8d3
fffff800`02db4e43 f7b718060000 div eax,dword ptr [rdi+618h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!CmpKcbCacheLookup+8d3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9

STACK_COMMAND: .cxr 0xfffff88005cda770 ; kb

FAILURE_BUCKET_ID: X64_0x3B_VRF_nt!CmpKcbCacheLookup+8d3

BUCKET_ID: X64_0x3B_VRF_nt!CmpKcbCacheLookup+8d3

Followup: MachineOwner
---------

 

[Jonathan_King]

Update your SATA drivers: ASUSTeK Computer Inc.-Support-

Time to test hardware. First comes RAM.

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 6 passes.

Next hard drive: HD Diagnostic

Let us know the results, and we may do some more tests.

If the BSODs persist, please use these directions to post them: http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sun Aug 15 13:33:20.201 2010 (UTC - 4:00)
System Uptime: 0 days 0:02:13.027
BugCheck 3B, {c0000094, fffff80002db4e43, fffff88005cda770, 0}
Probably caused by : ntkrnlmp.exe ( nt!CmpKcbCacheLookup+8d3 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0x3B
PROCESS_NAME:  SearchIndexer.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
[/font]

 

[Ash119]

i sent my gfx card back and they found a problem with it so they sent me a new 1... but im still getting blue screens :/

dumps...

 

[Jonathan_King]

I suspect your outdated nForce drivers. Try installing these ones: NVIDIA DRIVERS 15.49 WHQL

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Aug 28 19:52:27.439 2010 (UTC - 4:00)
System Uptime: 0 days 9:25:25.249
BugCheck A, {28, 2, 0, fffff80002b0e518}
Probably caused by : memory_corruption ( nt!MiFindNodeOrParent+0 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Aug 28 10:10:14.439 2010 (UTC - 4:00)
System Uptime: 0 days 0:10:56.249
BugCheck 1, {7708033a, 0, ffff, fffff88006441ca0}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )
BUGCHECK_STR:  0x1
PROCESS_NAME:  audiodg.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Aug 28 09:58:31.801 2010 (UTC - 4:00)
System Uptime: 0 days 2:51:28.237
BugCheck 19, {20, fffff8a0084d9b00, fffff8a0084d9b10, 501020c}
Probably caused by : Ntfs.sys ( Ntfs!NtfsRemoveHashEntry+e2 )
BUGCHECK_STR:  0x19_20
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
[/font]

 

[Ash119]

didnt fix it

pc was on idle when it went blue

dumps

 

[Jonathan_King]

Hmm...that archive appears to be corrupted.

Please follow these directions again: http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[Ash119]

hope this works

 

[Jonathan_King]

Strange, those chipset drivers didn't seem to be updated.

Try installing these again, this time right-click>Run as Administrator.

NVIDIA DRIVERS 15.49 WHQL

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Aug 30 12:08:09.631 2010 (UTC - 4:00)
System Uptime: 0 days 4:17:24.067
BugCheck 3B, {c0000005, fffff80002aff0a2, fffff8800884a120, 0}
Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  svchost.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
 
[/font]

 

[Ash119]

bluescreen after the reinstall

 

[ttran]

Hi,

Please perform a system file check:
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html


Also, please enable Driver Verifier again:
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

BUGCHECK SUMMARY:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\TUANTR~1\AppData\Local\Temp\Rar$DI00.031\083010-14976-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*e:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a02000 PsLoadedModuleList = 0xfffff800`02c3fe50
Debug session time: Tue Aug 31 03:41:16.837 2010 (UTC + 7:00)
System Uptime: 0 days 0:07:19.273
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {28, 2, 0, fffff80002ab4518}

Probably caused by : memory_corruption ( nt!MiFindNodeOrParent+0 )

Followup: MachineOwner
---------

Regard,

Tuan