Minidump caused by ntoskrnl.exe

[karlmeyer]

I have been having issues with my computer with it minidumping with the blue screen of death. It seems to be happening after it awakens from hibernation. It doesn't happen right away, but shortly there after it wakes up and I begin working on it. Can anyone give any help with trying to interpret the minidump file. I have tried reloading windows 7 and updating all the drivers again for the video card and etc. I thought it actually worked, but then tonight again it started crashing. I have attached the minidump file as a zip file. I have not prior knowledge with dealing with this. It is my first computer that I built and almost wishing that I hadn't. Any help or insight would be greatly appreciated.
Thanks,
Karl

 

[ttran]

Hi karlmeyer
Can you update these old drivers:
http://www.saitek.com/uk/down/drivers.php

adfs     [COLOR=red]adfs.SYS[/COLOR]     Fri Jun 27 03:52:37 2008 (48640195)
fffff880`015df000 fffff880`015ea000   Sahdad64 [COLOR=red]Sahdad64.sys[/COLOR] Tue Oct 28 10:56:11 2008 (49068D5B)
fffff880`01452000 fffff880`0145b000   Saibad64 [COLOR=red]Saibad64.sys[/COLOR] Tue Oct 28 10:56:15 2008 (49068D5F)
fffff880`02c64000 fffff880`02c6e000   SaibVdAd64 [COLOR=red]SaibVdAd64.sys[/COLOR] Tue Oct 28 10:56:20 2008 (49068D64)

The first one is Adobe File System Driver and the last 3 are saitek products (Saitek Virtual Disk Driver, Saitek Volume Filter Driver and Saitek HDD Filter Driver)

Are you using activdriver software? I saw It was running when computer crash? would you be willing to remove it for testing purpose only? I don't know much about that program as It's hard to find it on google

bugcheck

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\TUANTR~1\AppData\Local\Temp\Rar$DI00.837\061910-13197-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*e:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a0b000 PsLoadedModuleList = 0xfffff800`02c48e50
Debug session time: Sun Jun 20 11:06:42.492 2010 (UTC + 7:00)
System Uptime: 0 days 15:09:38.663
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80002d92441, fffff880087d1170, 0}
Probably caused by : ntkrnlmp.exe ( nt!ObpCloseHandleTableEntry+51 )
Followup: MachineOwner
---------
6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002d92441, Address of the instruction which caused the bugcheck
Arg3: fffff880087d1170, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP: 
nt!ObpCloseHandleTableEntry+51
fffff800`02d92441 4883bba800000000 cmp     qword ptr [rbx+0A8h],0
CONTEXT:  fffff880087d1170 -- (.cxr 0xfffff880087d1170)
rax=00000000000000f8 rbx=0000000000000000 rcx=fffff8a001b21110
rdx=fffff8a001b49ab0 rsi=fffffa80097aab60 rdi=fffff8a001b49ab0
rip=fffff80002d92441 rsp=fffff880087d1b40 rbp=fffffa80097e0630
 r8=fffffa80097e0630  r9=00000000000002ac r10=00000000000002ac
r11=00000000003163c0 r12=fffffa80078f68e0 r13=fffffa80097e0630
r14=000000000030e600 r15=fffff8a001b21110
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
nt!ObpCloseHandleTableEntry+0x51:
fffff800`02d92441 4883bba800000000 cmp     qword ptr [rbx+0A8h],0 ds:002b:00000000`000000a8=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  [COLOR=red]ActivMgr.exe[/COLOR]
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff80002d923b4 to fffff80002d92441
STACK_TEXT:  
fffff880`087d1b40 fffff800`02d923b4 : 00000000`000002ac fffffa80`097e0630 fffff8a0`01b21110 00000000`000002ac : nt!ObpCloseHandleTableEntry+0x51
fffff880`087d1bd0 fffff800`02a7a853 : fffffa80`097aab60 fffff880`087d1ca0 00000000`7efdb000 fffffa80`07a14b60 : nt!ObpCloseHandle+0x94
fffff880`087d1c20 00000000`7724ffaa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0030dd58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7724ffaa
 
FOLLOWUP_IP: 
nt!ObpCloseHandleTableEntry+51
fffff800`02d92441 4883bba800000000 cmp     qword ptr [rbx+0A8h],0
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!ObpCloseHandleTableEntry+51
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb
STACK_COMMAND:  .cxr 0xfffff880087d1170 ; kb
FAILURE_BUCKET_ID:  X64_0x3B_nt!ObpCloseHandleTableEntry+51
BUCKET_ID:  X64_0x3B_nt!ObpCloseHandleTableEntry+51
Followup: MachineOwner
---------

Also, What third party anti-virus software are you using? They are notorious for BSODs causes (exception code 0xc0000005), so I would recommend you to uninstall them just for testing purpose only!!!

Let us know if you need help
Regard,
Tuan