Diagnose Random Crash

[Dynatnt1]

Just curious if anyone has any insight into diagnosing random crashes on Windows 7. My computer will just be sitting there and all of a sudden reboot. No program launch or anything on my part, seems to be something either automated or windows internal that activates and causes a crash. Not sure how to resolve this. Any suggestions?

Thanks

 

[zigzag3143]

Just curious if anyone has any insight into diagnosing random crashes on Windows 7. My computer will just be sitting there and all of a sudden reboot. No program launch or anything on my part, seems to be something either automated or windows internal that activates and causes a crash. Not sure how to resolve this. Any suggestions?

Thanks

Could be a bunch of different reasons. For us to be able to help you we need you to put your system specs into userCP. could you also tell us if you: are 32 bit or 64, did a clean install or upgrade, have sleep and/or hibernate on.

Thanks

Ken

 

[Kari]

Hello Dynatnt and welcome to the SevenForums.

Crash and reboot are two different things. If you have chosen automatic updates, Windows sometimes have to reboot after installing an update.

Does it really crash? Blue screen with a lot of text? Or does it suddenly log you out and do a reboot?

Please tell a bit more. It would help us if you took some time and filled your system specs by clicking "My System Specs" on lower left corner of your post and filled the form.

Kari

 

[Dynatnt1]

Thanks for the replies. I updated my system specs. I did an upgrade install from Vista 64. I do have sleep enabled with no hibernation.
Kari,
It is definitely a crash. BSOD if I am present, if not, I come back to a message saying Windows has restarted from a serious error. I check the log but have no idea what I am looking for.
Just curious if anyone has ideas what to check for.

 

[Kari]

Can you upload the dmp-file?

 

[Dynatnt1]

Remind me where that is again....I forget.

 

[Dynatnt1]

Nevermind, I found where they are located. Here is a zip file of my last 5 crashes. Hope this helps.

Thanks

View attachment 23333

 

[Kari]

Thanks. Your dump from last saturday tells something about unable to load ntoskernel. I hope Ken finds back here, he understands it lot better than I.

I'll be back when I find something.

Kari

 

[zigzag3143]

Nevermind, I found where they are located. Here is a zip file of my last 5 crashes. Hope this helps.

Thanks
View attachment 23333

Dynati
We have a resident wizard who just loves doing BSOD dump files. I have Pm'ed him this thread and I have subscribed to this thread so I will get email whenever its posted to.

Thanks. Your dump from last saturday tells something about unable to load ntoskernel. I hope Ken finds back here, he understands it lot better than I.

I'll be back when I find something.

Kari

Kari

The file does say its unable load load noskernal nut just before that it says something about a video driver on a xeon processor. So I assume its a mac and running win 7 in bootcamp. I dont know what the vid driver its using is.

I think John will be able to de-bug this but im not sure because the hal is different.

Dynati

Where were the dump files located?

Hope we can figure this out for you

Ken

 

[usasma]

All of the errors are in ntfs.sys (a Windows File system driver).
I'd suggest running chkdsk /r from an elevated (run as administrator) Command Prompt.
It'll tell you it can't run and will ask to run at the next reboot. Tell it yes and reboot to let it run.
I'd also suggest running a hard drive diagnostic on the hard drive - just to ensure that there are no issues with it.

As there are issues with the SiWinAcc.sys driver (a SiS storage controller driver) in some of the stack traces, I'd have to first suspect scheduled system backups as generating this error. Do you have scheduled operations with your backup software when this is happening? Maybe a conflict between Norton Ghost and Acronis TrueImage tasks?

Beyond that, there are numerous older drivers on the system, so I'd suggest updating them to the latest Windows 7 versions that are available. Here's a list of them:

SI3132.sys   Wed Oct 03 14:39:29 2007  [B]Silicon Image SATA controller driver[/B]
PxHlpa64.sys Mon Dec 10 18:49:01 2007  [B]Sonic CD/DVD burning software driver[/B]
symsnap.sys  Wed Dec 12 14:38:11 2007  [B]StorageCraft Volume Snap-Shot driver [U](known issues with Windows)[/U][/B] - probably associated with Norton Ghost
timntr.sys   Wed Aug 29 08:38:23 2007  [B]Acronis TrueImage software driver[/B]
SiRemFil.sys Wed Jun 20 15:42:10 2007  [B]Silicon Image SATA-Link controller driver[/B]
MacHALDriver.sys Wed Oct 31 19:04:16 2007  [B]Mac BootCamp HAL driver[/B]
tifsfilt.sys Wed Aug 29 08:37:29 2007  [B]Acronis TrueImage software driver[/B]
aaplmonf.sys Thu Dec 20 13:28:25 2007  [B]Apple BootCamp Display driver[/B] 
RTKVHD64.sys Wed Nov 14 04:11:50 2007  [B]RealTek HD Audio driver[/B]
v2imount.sys Wed Dec 12 14:08:40 2007  [B]Norton Ghost software driver[/B]
SiWinAcc.sys Thu Jun 14 20:02:02 2007  [B]Silicon Image SATA Accelerator driver[/B]

Here's a summary of the BSOD's:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Thu Aug  6 19:52:03.419 2009 (GMT-4)
System Uptime: 0 days 7:53:23.119
BugCheck 24, {1904fb, fffff88008c7ffb8, fffff88008c7f810, fffff800034ebb46}
Probably caused by : Ntfs.sys ( Ntfs! ?? ::FNODOBFM::`string'+2cc9 )
PROCESS_NAME:  svchost.exe
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Tue Aug 11 08:40:55.089 2009 (GMT-4)
System Uptime: 0 days 10:31:36.902
BugCheck 24, {1904fb, fffff88006b0ff68, fffff88006b0f7c0, fffff800034e2b46}
*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for SiWinAcc.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsDefineNtfsMcbRange+303 )
PROCESS_NAME:  svchost.exe
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Wed Aug 12 00:25:45.330 2009 (GMT-4)
System Uptime: 0 days 2:41:40.141
BugCheck 24, {1904fb, fffff88009079fb8, fffff88009079810, fffff800034e5b46}
Probably caused by : Ntfs.sys ( Ntfs! ?? ::FNODOBFM::`string'+2cc9 )
PROCESS_NAME:  svchost.exe
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Fri Aug 14 21:58:53.718 2009 (GMT-4)
System Uptime: 1 days 23:05:38.530
BugCheck 24, {1904fb, fffff88002583e68, fffff880025836c0, fffff800034d5b46}
*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for SiWinAcc.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsDefineNtfsMcbRange+303 )
PROCESS_NAME:  svchost.exe
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Sat Aug 15 14:16:11.261 2009 (GMT-4)
System Uptime: 0 days 16:06:05.072
BugCheck 24, {1904fb, fffff88007f23fb8, fffff88007f23810, fffff800034dbb46}
Probably caused by : Ntfs.sys ( Ntfs! ?? ::FNODOBFM::`string'+2cc9 )
PROCESS_NAME:  svchost.exe
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

In short, I'd suspect (in this order):
- Norton issues due to problems with the Ghost software (ininstall it)
- Conflicts between Ghost and TrueImage (the above uninstall should remedy this)
- Disk Corruption (chkdsk /r should fix this)
- Issues with the physical hard drive (a manufacturer's diagnostic should identify this)
- Compatibility issues between your SiS chipset/storage drivers and Windows 7
- other driver/compatibility issues.

 

[Dynatnt1]

Awesome. Thanks so much for the analysis. I will try these things and get back to the forum with my update...
Thanks for your time everyone...Much appreciated.

 

[Dynatnt1]

Well, cant seem figure this out. I keep getting crashed daily. I have uploaded my latest dump file. If anyone can read it and give me some insight, that would be appreciated.

Thanks,
Toby

View attachment 28758