random BSOD after freeze

[triper]

hello everybody,

a week ago when i got win 7 ultimate, my machine crashed for no reason. First it froze for about 30 sec and then BSOD. It restarts, everything seems like its normal but then again -freeze/BSOD. Its completely random. I saw similar problems and tried "solutions" that were offered but nothing worked.
I've enabled dump files but, for some reason, i can't find them. Anyway, i did found smth in event viewer.

BODY{font:x-small 'Verdana';margin-right:1.5em} .c{cursor:hand} .b{color:red;font-family:'Courier New';font-weight:bold;text-decoration:none} .e{margin-left:1em;text-indent:-1em;margin-right:1em} .k{margin-left:1em;text-indent:-1em;margin-right:1em} .t{color:#990000} .xt{color:#990099} .ns{color:red} .dt{color:green} .m{color:blue} .tx{font-weight:bold} .db{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;border-left:1px solid #CCCCCC;font:small Courier} .di{font:small Courier} .d{color:blue} .pi{color:blue} .cb{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;font:small Courier;color:#888888} .ci{font:small Courier;color:#888888} PRE{margin:0px;display:inline} - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>2</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000002</Keywords>

<TimeCreated SystemTime="2010-04-30T19:44:19.296875000Z" />

<EventRecordID>7246</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>LANPARTY</Computer>

<Security UserID="S-1-5-18" />

</System>


- <EventData>
<Data Name="BugcheckCode">0</Data>

<Data Name="BugcheckParameter1">0x0</Data>

<Data Name="BugcheckParameter2">0x0</Data>

<Data Name="BugcheckParameter3">0x0</Data>

<Data Name="BugcheckParameter4">0x0</Data>

<Data Name="SleepInProgress">false</Data>

<Data Name="PowerButtonTimestamp">0</Data>

</EventData>


</Event>




BODY{font:x-small 'Verdana';margin-right:1.5em} .c{cursor:hand} .b{color:red;font-family:'Courier New';font-weight:bold;text-decoration:none} .e{margin-left:1em;text-indent:-1em;margin-right:1em} .k{margin-left:1em;text-indent:-1em;margin-right:1em} .t{color:#990000} .xt{color:#990099} .ns{color:red} .dt{color:green} .m{color:blue} .tx{font-weight:bold} .db{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;border-left:1px solid #CCCCCC;font:small Courier} .di{font:small Courier} .d{color:blue} .pi{color:blue} .cb{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;font:small Courier;color:#888888} .ci{font:small Courier;color:#888888} PRE{margin:0px;display:inline} - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>2</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000002</Keywords>

<TimeCreated SystemTime="2010-05-02T10:21:16.125000000Z" />

<EventRecordID>8291</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>LANPARTY</Computer>

<Security UserID="S-1-5-18" />

</System>


- <EventData>
<Data Name="BugcheckCode">0</Data>

<Data Name="BugcheckParameter1">0x0</Data>

<Data Name="BugcheckParameter2">0x0</Data>

<Data Name="BugcheckParameter3">0x0</Data>

<Data Name="BugcheckParameter4">0x0</Data>

<Data Name="SleepInProgress">false</Data>

<Data Name="PowerButtonTimestamp">0</Data>

</EventData>


</Event>

 

[zigzag3143]

hello everybody,

a week ago when i got win 7 ultimate, my machine crashed for no reason. First it froze for about 30 sec and then BSOD. It restarts, everything seems like its normal but then again -freeze/BSOD. Its completely random. I saw similar problems and tried "solutions" that were offered but nothing worked.
I've enabled dump files but, for some reason, i can't find them. Anyway, i did found smth in event viewer.

BODY{font:x-small 'Verdana';margin-right:1.5em} .c{cursor:hand} .b{color:red;font-family:'Courier New';font-weight:bold;text-decoration:none} .e{margin-left:1em;text-indent:-1em;margin-right:1em} .k{margin-left:1em;text-indent:-1em;margin-right:1em} .t{color:#990000} .xt{color:#990099} .ns{color:red} .dt{color:green} .m{color:blue} .tx{font-weight:bold} .db{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;border-left:1px solid #CCCCCC;font:small Courier} .di{font:small Courier} .d{color:blue} .pi{color:blue} .cb{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;font:small Courier;color:#888888} .ci{font:small Courier;color:#888888} PRE{margin:0px;display:inline} - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>2</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000002</Keywords>

<TimeCreated SystemTime="2010-04-30T19:44:19.296875000Z" />

<EventRecordID>7246</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>LANPARTY</Computer>

<Security UserID="S-1-5-18" />

</System>


- <EventData>
<Data Name="BugcheckCode">0</Data>

<Data Name="BugcheckParameter1">0x0</Data>

<Data Name="BugcheckParameter2">0x0</Data>

<Data Name="BugcheckParameter3">0x0</Data>

<Data Name="BugcheckParameter4">0x0</Data>

<Data Name="SleepInProgress">false</Data>

<Data Name="PowerButtonTimestamp">0</Data>

</EventData>


</Event>




BODY{font:x-small 'Verdana';margin-right:1.5em} .c{cursor:hand} .b{color:red;font-family:'Courier New';font-weight:bold;text-decoration:none} .e{margin-left:1em;text-indent:-1em;margin-right:1em} .k{margin-left:1em;text-indent:-1em;margin-right:1em} .t{color:#990000} .xt{color:#990099} .ns{color:red} .dt{color:green} .m{color:blue} .tx{font-weight:bold} .db{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;border-left:1px solid #CCCCCC;font:small Courier} .di{font:small Courier} .d{color:blue} .pi{color:blue} .cb{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;font:small Courier;color:#888888} .ci{font:small Courier;color:#888888} PRE{margin:0px;display:inline} - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>2</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000002</Keywords>

<TimeCreated SystemTime="2010-05-02T10:21:16.125000000Z" />

<EventRecordID>8291</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>LANPARTY</Computer>

<Security UserID="S-1-5-18" />

</System>


- <EventData>
<Data Name="BugcheckCode">0</Data>

<Data Name="BugcheckParameter1">0x0</Data>

<Data Name="BugcheckParameter2">0x0</Data>

<Data Name="BugcheckParameter3">0x0</Data>

<Data Name="BugcheckParameter4">0x0</Data>

<Data Name="SleepInProgress">false</Data>

<Data Name="PowerButtonTimestamp">0</Data>

</EventData>


</Event>

We actually need the dmp file. use these to find and upload it to us. http://www.sevenforums.com/crash-lockup-debug-how/34900-1-novice-how-ask-help-bsod-problem.html

thanks

Ken

 

[triper]

ok,here it is. It's 43mb large but its all i have right now. It might be a new HDD 1TB i bought few weeks ago but give me a feedback on this. here's the link

http://rapidshare.com/files/383988616/MEMORY.rar.html

tnx

 

[triper]

hello everybody,

a week ago when i got win 7 ultimate, my machine crashed for no reason. First it froze for about 30 sec and then BSOD. It restarts, everything seems like its normal but then again -freeze/BSOD. Its completely random. I saw similar problems and tried "solutions" that were offered but nothing worked.
I've enabled dump files but, for some reason, i can't find them. Anyway, i did found smth in event viewer.


We actually need the dmp file. use these to find and upload it to us. http://www.sevenforums.com/crash-lockup-debug-how/34900-1-novice-how-ask-help-bsod-problem.html

thanks

Ken

i have uploaded the dmp file in the previous post. :huh:

 

[triper]

Here's my latest dump file. pls check it and tell me what to do, i'm kinda desperate here. thanks

 

[zigzag3143]

Here's my latest dump file. pls check it and tell me what to do, i'm kinda desperate here. thanks

This bugcheck (7A) is Usual causes: Memory, Paging file corruption, File system, Hard drive, Cabling, Virus infection, Improperly seated cards, BIOS, Bad motherboard, Missing Service Pack.


I would download memtestx86 and run it for 5 passes to test the memory.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\051210-31609-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 UP Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02851000 PsLoadedModuleList = 0xfffff800`02a8ee50
Debug session time: Wed May 12 10:16:44.509 2010 (GMT-4)
System Uptime: 0 days 0:17:36.322
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {fffff6fc400098f8, ffffffffc000000e, 258a1860, fffff8800131f7e0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+34c4e )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc400098f8, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc000000e, error status (normally i/o status code)
Arg3: 00000000258a1860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff8800131f7e0, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c000000e

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88003366310 -- (.trap 0xfffff88003366310)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff9800776b800 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000039 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002bc88f1 rsp=fffff880033664a0 rbp=0000000000000000
 r8=0000000000000012  r9=0000000000000000 r10=00000000fffffff9
r11=0000000000e6b800 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po cy
nt!CcMapData+0x111:
fffff800`02bc88f1 0fb600          movzx   eax,byte ptr [rax] ds:9598:fffff980`0776b800=??
Resetting default scope

EXCEPTION_RECORD:  fffff88003366268 -- (.exr 0xfffff88003366268)
ExceptionAddress: fffff80002bc88f1 (nt!CcMapData+0x0000000000000111)
   ExceptionCode: c0000006 (In-page I/O error)
  ExceptionFlags: 00000000
NumberParameters: 3
   Parameter[0]: 0000000000000000
   Parameter[1]: fffff9800776b800
   Parameter[2]: 00000000c000000e
Inpage operation failed at fffff9800776b800, due to I/O error 00000000c000000e

LAST_CONTROL_TRANSFER:  from fffff800029360a8 to fffff800028c1600

STACK_TEXT:  
fffff880`03364e38 fffff800`029360a8 : 00000000`0000007a fffff6fc`400098f8 ffffffff`c000000e 00000000`258a1860 : nt!KeBugCheckEx
fffff880`03364e40 fffff800`028b342b : fffffa80`03bc8d10 fffff880`03364fb0 fffff800`02a4e440 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x34c4e
fffff880`03364f20 fffff800`028dc4a4 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff880`03365080 : nt!MiIssueHardFault+0x28b
fffff880`03364ff0 fffff800`028bf6ee : 00000000`00000008 fffff880`0127aebc 00000000`00000000 fffff880`03366560 : nt!MmAccessFault+0x11c4
fffff880`03365150 fffff880`0131f7e0 : fffff800`028efbdc 00000000`00000010 00000000`00010286 fffff880`03365318 : nt!KiPageFault+0x16e
fffff880`033652e8 fffff800`028efbdc : 00000000`00000010 00000000`00010286 fffff880`03365318 00000000`00000018 : Ntfs! ?? ::NNGAKEGL::`string'+0x7550
fffff880`033652f0 fffff880`01243775 : fffff880`0127aff4 fffff880`03366920 fffff880`03366268 fffff880`03366920 : nt!_C_specific_handler+0x8c
fffff880`03365360 fffff800`028e72ed : fffff880`0127ae50 00000000`00000000 fffff880`0122a000 00000000`00000000 : Ntfs!_GSHandlerCheck_SEH+0x75
fffff880`03365390 fffff800`028ee950 : fffff880`0127ae50 fffff880`03365408 fffff880`03366268 fffff880`0122a000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`033653c0 fffff800`028fb8df : fffff880`03366268 fffff880`03365ad0 fffff880`00000000 fffffa80`00cafb60 : nt!RtlDispatchException+0x410
fffff880`03365aa0 fffff800`028c0c42 : fffff880`03366268 00000000`0000000e fffff880`03366310 fffff880`03366668 : nt!KiDispatchException+0x16f
fffff880`03366130 fffff800`028bf7ba : 00000000`00000000 00000000`0000000e fffff8a0`80019200 00000000`00000014 : nt!KiExceptionDispatch+0xc2
fffff880`03366310 fffff800`02bc88f1 : 00000000`04e40000 00000000`04e6b800 fffff880`03366568 fffff880`03366560 : nt!KiPageFault+0x23a
fffff880`033664a0 fffff880`012e7522 : fffff880`00014800 fffffa80`00c7c890 00000000`00000000 fffff8a0`0000000e : nt!CcMapData+0x111
fffff880`03366560 fffff880`012dd4dc : fffff880`02d46570 fffffa80`01a37180 fffff8a0`00126b48 fffffa80`00c38b01 : Ntfs!NtfsReadMftRecord+0xb2
fffff880`03366610 fffff880`012b3fe0 : fffff880`03366780 00000000`00000000 fffff880`02d467c0 fffff6fb`7e200048 : Ntfs!NtfsLookupInFileRecord+0x6c
fffff880`033666a0 fffff880`012cdc0a : fffff880`02d46570 fffff8a0`00126b40 fffff8a0`001b7bc0 fffff880`0336699c : Ntfs!NtfsDeleteFile+0x114
fffff880`03366920 fffff880`0123baa9 : 00000000`00000001 fffff800`02b66a86 fffff880`02d464d0 fffffa80`00cafb60 : Ntfs!NtfsCommonCleanup+0x15da
fffff880`03366d30 fffff800`028b9487 : fffff880`02d464d0 00000000`00000000 00000000`00000000 fffff800`0289fb06 : Ntfs!NtfsCommonCleanupCallout+0x19
fffff880`03366d60 fffff800`028b9441 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KySwitchKernelStackCallout+0x27
fffff880`02d463a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+34c4e
fffff800`029360a8 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+34c4e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

FAILURE_BUCKET_ID:  X64_0x7a_c000000e_nt!_??_::FNODOBFM::_string_+34c4e

BUCKET_ID:  X64_0x7a_c000000e_nt!_??_::FNODOBFM::_string_+34c4e

Followup: MachineOwner
---------

 

[triper]

alright, i did memtest again and no errors were found. Just now, pc crashed two times in few minutes. now i'm in the safe mode after few unsuccessful win7 boot up's. can you give me a few hints how to locate a problem, or at least, a list of solutions for potential problems. i know this is ridiculous to ask, but i really don't know what to do anymore. oh yes, my dmp files weren't written....again, even though they are enabled.

 

[triper]

maybe this will help