Random Crashes windows 7 final

[Korre]

Hello
I have windows 7 (64-bit) ultimate final version and when i was trying to fix the "error" that made my windows use only 3gb instead of 4gb, i updated my bios firmware (even if i didnt need to til i found out i only needed to enable remapping memory on bios), i noticed some randoms freezes or sometimes some BSOD. Im running some hard drives test at the moment.
I tried to open or even upload the dump files here but i get an error access denied you need to be adminstrator(im trying to translate from swedish)

I try to inform you as much as i can but first i need help to gain access to the dump files so i can upload them.
I get the feeling that i messed up with the bios update( i tried resetting to default withouth success) and otherwise i blame windows 7 because it worked perfectly on win xp

Thanks in advance i hope i read the rules correctly and posted in the right forum

 

[zigzag3143]

Hello
I have windows 7 (64-bit) ultimate final version and when i was trying to fix the "error" that made my windows use only 3gb instead of 4gb, i updated my bios firmware (even if i didnt need to til i found out i only needed to enable remapping memory on bios), i noticed some randoms freezes or sometimes some BSOD. Im running some hard drives test at the moment.
I tried to open or even upload the dump files here but i get an error access denied you need to be adminstrator(im trying to translate from swedish)

I try to inform you as much as i can but first i need help to gain access to the dump files so i can upload them.
I get the feeling that i messed up with the bios update( i tried resetting to default withouth success) and otherwise i blame windows 7 because it worked perfectly on win xp

Thanks in advance i hope i read the rules correctly and posted in the right forum

You might have to drag the dmp files to your desktop first. if they give you grief you can try getting at them from a safe boot (F8)

Ken J+

 

[Capt.Jack Sparrow]

Hello
I have windows 7 (64-bit) ultimate final version and when i was trying to fix the "error" that made my windows use only 3gb instead of 4gb, i updated my bios firmware (even if i didnt need to til i found out i only needed to enable remapping memory on bios), i noticed some randoms freezes or sometimes some BSOD. Im running some hard drives test at the moment.
I tried to open or even upload the dump files here but i get an error access denied you need to be adminstrator(im trying to translate from swedish)

I try to inform you as much as i can but first i need help to gain access to the dump files so i can upload them.
I get the feeling that i messed up with the bios update( i tried resetting to default withouth success) and otherwise i blame windows 7 because it worked perfectly on win xp

Thanks in advance i hope i read the rules correctly and posted in the right forum

Hi Korre Welcome to SF,

Well you have reach the right place

To upload those Dump like you might need to take Ownership of those dump file
This tutorial should help you http://www.sevenforums.com/tutorials/1911-take-ownership-shortcut.html

edit: I guess the BSOD specialist is here ..

 

[Korre]

Hey everybody...thanks for the quick reply !!
Im in safemode now...that shortcut registry didnt work on me :S.
Anyways here is the file...i renamed it to .txt and winrar it .
Thanks again boys (or girls)

 

[Korre]

Anyone got some time for me too? , i want to know what the fault is so i can consider my options. Thanks again

 

[zigzag3143]

Anyone got some time for me too? , i want to know what the fault is so i can consider my options. Thanks again

Hi and welcome

this crash was probably caused by your creative sound drivers. they are after all from XP days. Updating them would help


Ken J

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\121909-28485-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*[URL="http://msdl.microsoft.com/download/symbols"]Symbol information[/URL]
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c55000 PsLoadedModuleList = 0xfffff800`02e92e50
Debug session time: Sat Dec 19 09:19:35.101 2009 (GMT-5)
System Uptime: 0 days 3:59:27.880
Loading Kernel Symbols
...............................................................
................................................................
....................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff3000fc08db2, 2, 1, fffff88003f4d1cb}

*** WARNING: Unable to verify timestamp for ctaud2k.sys
*** ERROR: Module load completed but symbols could not be loaded for ctaud2k.sys
Probably caused by : portcls.sys ( portcls!PcWmiLogEvent+4f )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff3000fc08db2, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88003f4d1cb, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002efd0e0
 fffff3000fc08db2 

CURRENT_IRQL:  2

FAULTING_IP: 
portcls!PcWmiLogEvent+4f
fffff880`03f4d1cb 664489642452    mov     word ptr [rsp+52h],r12w

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  audiodg.exe

TRAP_FRAME:  fffff8800ae1f3d0 -- (.trap 0xfffff8800ae1f3d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff00000917a7d1 rbx=0000000000000000 rcx=fffff8800ae1f5b4
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88003f4d1cb rsp=fffff8800ae1f560 rbp=fffffa8009a46010
 r8=000000000000003c  r9=fffffa8004de9800 r10=0000000000000bd0
r11=fffff8800ae1f5d0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
portcls!PcWmiLogEvent+0x4f:
fffff880`03f4d1cb 664489642452    mov     word ptr [rsp+52h],r12w ss:0018:fffff880`0ae1f5b2=0000
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cc6469 to fffff80002cc6f00

STACK_TEXT:  
fffff880`0ae1f288 fffff800`02cc6469 : 00000000`0000000a fffff300`0fc08db2 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0ae1f290 fffff800`02cc50e0 : fffff880`0ae1f488 fffffa80`04b90e13 fffffa80`063b21a0 fffff880`03e6c2dc : nt!KiBugCheckDispatch+0x69
fffff880`0ae1f3d0 fffff880`03f4d1cb : fffffa80`063b18c0 fffffa80`06343200 00000000`00000000 fffff800`02d79084 : nt!KiPageFault+0x260
fffff880`0ae1f560 fffff880`03f50173 : fffffa80`04b90e10 fffffa80`063432b0 fffffa80`04c3a768 fffffa80`04b90e18 : portcls!PcWmiLogEvent+0x4f
fffff880`0ae1f640 fffff880`03f598c9 : 00000000`00000000 fffffa80`09a46010 fffff880`0ae1f748 fffff880`0ae1f740 : portcls!CIrpStream::GetMapping+0x17b
fffff880`0ae1f6d0 fffff880`03eacc00 : fffffa80`09a46010 fffffa80`09534e98 fffffa80`09534d10 fffffa80`04c3a700 : portcls!CPortPinWavePci::GetMapping+0x45
fffff880`0ae1f710 fffffa80`09a46010 : fffffa80`09534e98 fffffa80`09534d10 fffffa80`04c3a700 fffff880`0ae1f798 : ctaud2k+0x6c00
fffff880`0ae1f718 fffffa80`09534e98 : fffffa80`09534d10 fffffa80`04c3a700 fffff880`0ae1f798 fffff880`0ae1f790 : 0xfffffa80`09a46010
fffff880`0ae1f720 fffffa80`09534d10 : fffffa80`04c3a700 fffff880`0ae1f798 fffff880`0ae1f790 fffff880`0b32fcd0 : 0xfffffa80`09534e98
fffff880`0ae1f728 fffffa80`04c3a700 : fffff880`0ae1f798 fffff880`0ae1f790 fffff880`0b32fcd0 00000000`3b32acd0 : 0xfffffa80`09534d10
fffff880`0ae1f730 fffff880`0ae1f798 : fffff880`0ae1f790 fffff880`0b32fcd0 00000000`3b32acd0 00000000`00000000 : 0xfffffa80`04c3a700
fffff880`0ae1f738 fffff880`0ae1f790 : fffff880`0b32fcd0 00000000`3b32acd0 00000000`00000000 fffff880`03f65110 : 0xfffff880`0ae1f798
fffff880`0ae1f740 fffff880`0b32fcd0 : 00000000`3b32acd0 00000000`00000000 fffff880`03f65110 00000000`00000000 : 0xfffff880`0ae1f790
fffff880`0ae1f748 00000000`3b32acd0 : 00000000`00000000 fffff880`03f65110 00000000`00000000 fffffa80`09534d10 : 0xfffff880`0b32fcd0
fffff880`0ae1f750 00000000`00000000 : fffff880`03f65110 00000000`00000000 fffffa80`09534d10 fffffa80`06b6f501 : 0x3b32acd0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
portcls!PcWmiLogEvent+4f
fffff880`03f4d1cb 664489642452    mov     word ptr [rsp+52h],r12w

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  portcls!PcWmiLogEvent+4f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: portcls

IMAGE_NAME:  portcls.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcc03

FAILURE_BUCKET_ID:  X64_0xD1_portcls!PcWmiLogEvent+4f

BUCKET_ID:  X64_0xD1_portcls!PcWmiLogEvent+4f

Followup: MachineOwner
---------

 

[Korre]

Thank you very much everyone for the help...i still had some problems with computer freezing (without any blue screens) and i had one broken dll file..so i did one recovery system from day one to get my dll work again. So far i had no crashes, so once again thanks for the help

 

[Korre]

Hello again!! Im afraid i have to bug you guys a little more, i had 2 different types of crashes one was the blue screens (which we fixed when i upgraded my sound card) and the other type made the computer freeze so i couldnt move mouse or anything, which made me restart the computer. The question i have since it is not a blue screen then it wont make me any minidumps files, so how do i find out where the fault is?...i suspect that i maybe messed up the bios when i upgraded it.

Thanks again in advance
Korre

 

[zigzag3143]

Hello again!! Im afraid i have to bug you guys a little more, i had 2 different types of crashes one was the blue screens (which we fixed when i upgraded my sound card) and the other type made the computer freeze so i couldnt move mouse or anything, which made me restart the computer. The question i have since it is not a blue screen then it wont make me any minidumps files, so how do i find out where the fault is?...i suspect that i maybe messed up the bios when i upgraded it.

Thanks again in advance
Korre

Hi and welcome

Type event viewer in search. go to windows logs>application tab. You need to look for errors (they have red in the left hand column) that say app hang, app crash, etc

There is a lot of data there so you may want to wait until the next time the problem happens.

When you find the errors use the snipping tool (type snipping in search) to make a screen shot of them and upload it using the attachment icon (shaped like a paperclip in the reply form. see pics

Ken J+

 

[usasma]

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.

If you're having difficulties with the format, please open an elevated (Run as administrator) Command Prompt and type "msinfo32 /nfo C:\Users\Public\Desktop\TEST.NFO" (without the quotes) and press Enter. Then navigate to the C:\Users\Public\Desktop directory to retrieve the TEST.NFO file. If you have difficulties with making this work, please post back.

 

[Korre]

Hello
i did like u said Usasma, here is your file.
And to you zigzag i havent been so much at the computer lately so i have to wait til next crash appear

Thank you very much guys for your time

 

[usasma]

There are numerous BSOD's listed in the MSINFO32 file
Please do the following to upload them with your next post:

Upload Dump Files:
Please go to C:\Windows\Minidump and zip up the contents of the folder. Then upload/attach the .zip file with your next post.
Left click on the first minidump file.
Hold down the "Shift" key and left click on the last minidump file.
Right click on the blue highlighted area and select "Send to"
Select "Compressed (zipped) folder" and note where the folder is saved.
Upload that .zip file with your next post.

If you have issues with "Access Denied" errors, try copying the files to your desktop and zipping them up from there. If it still won't let you zip them up, post back for further advice.

If you don't have anything in that folder, please check in C:\Windows for a file named MEMORY.DMP. If you find it, zip it up and upload it to a free file hosting service - then post the link to it.
Then, follow the directions here to set your system for Minidumps (much smaller than the MEMORY.DMP file): Set MiniDump

 

[Korre]

I did a recovery from a earlier date on windows 7 because i had 1 broken .dll file. So i only have 3 dumpies left. I hope these is enough for you to help
Thanks

 

[zigzag3143]

I did a recovery from a earlier date on windows 7 because i had 1 broken .dll file. So i only have 3 dumpies left. I hope these is enough for you to help
Thanks

No problem

these appear to have been caused by memory corruption. I would download memtestx86 and run for at least 5 passes

Run a system file check

type cmd in search>right click and run as admin>sfc /scannow

Let us know the results


Ken J+

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\New folder\010710-60793-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c53000 PsLoadedModuleList = 0xfffff800`02e90e50
Debug session time: Thu Jan  7 17:35:32.073 2010 (GMT-5)
System Uptime: 0 days 0:00:52.977
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc000001d, fffff880043af796, fffff88002ff67b8, fffff88002ff6010}

[B]Probably caused by : memory_corruption[/B]

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

[B]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted[/B]
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff880043af796, The address that the exception occurred at
Arg3: fffff88002ff67b8, Exception Record Address
Arg4: fffff88002ff6010, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.

FAULTING_IP: 
kbdclass!KeyboardClassGetWaitWakeEnableState+172
fffff880`043af796 49              ???

EXCEPTION_RECORD:  fffff88002ff67b8 -- (.exr 0xfffff88002ff67b8)
ExceptionAddress: fffff880043af796 (kbdclass!KeyboardClassGetWaitWakeEnableState+0x0000000000000172)
   ExceptionCode: c000001d (Illegal instruction)
  ExceptionFlags: 00000000
NumberParameters: 0

CONTEXT:  fffff88002ff6010 -- (.cxr 0xfffff88002ff6010)
rax=0000000000000000 rbx=0000000000000000 rcx=f880043ad2b00000
rdx=0000000000000000 rsi=0000000000000040 rdi=fffffa80081d81b0
rip=fffff880043af796 rsp=fffff88002ff69f0 rbp=fffffa80081d81b0
 r8=0000000000000000  r9=fffff80002c83de0 r10=0000000000000101
r11=fffff88002ff6bb0 r12=fffffa800822a2a0 r13=0000000000000000
r14=0000000000000000 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
kbdclass!KeyboardClassGetWaitWakeEnableState+0x172:
fffff880`043af796 49              ???
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x7E

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.

LAST_CONTROL_TRANSFER:  from fffff880043aa0f9 to fffff880043af796

FAILED_INSTRUCTION_ADDRESS: 
kbdclass!KeyboardClassGetWaitWakeEnableState+172
fffff880`043af796 49              ???

STACK_TEXT:  
fffff880`02ff69f0 fffff880`043aa0f9 : 00000000`00000000 00000000`00000000 00000000`00000040 fffffa80`04901040 : kbdclass!KeyboardClassGetWaitWakeEnableState+0x172
fffff880`02ff6bc0 fffff880`043aa2e3 : fffffa80`0822a2a0 fffff800`02e685f8 fffffa80`081f01b0 00000000`00000000 : kbdclass!KeyboardStart+0x105
fffff880`02ff6c50 fffff800`02fbe527 : fffffa80`081d8060 fffffa80`04901040 fffffa80`08202c10 fffffa80`04901040 : kbdclass!KeyboardStartWorker+0x1f
fffff880`02ff6c80 fffff800`02cd2161 : fffff800`02f20000 fffff800`030e2f90 fffff800`02e685f8 00000000`00000000 : nt!IopProcessWorkItem+0x23
fffff880`02ff6cb0 fffff800`02f68166 : 00000000`00000000 fffffa80`04901040 00000000`00000080 fffffa80`048f0040 : nt!ExpWorkerThread+0x111
fffff880`02ff6d40 fffff800`02ca3486 : fffff880`009e7180 fffffa80`04901040 fffff880`009f1f40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`02ff6d80 00000000`00000000 : fffff880`02ff7000 fffff880`02ff1000 fffff880`02ff69f0 00000000`00000000 : nt!KxStartSystemThread+0x16


CHKIMG_EXTENSION: !chkimg -lo 50 -d !kbdclass
    fffff880043af797 - kbdclass!KeyboardClassGetWaitWakeEnableState+173
    [ 8b:8f ]
1 error : !kbdclass (fffff880043af797)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

STACK_COMMAND:  .cxr 0xfffff88002ff6010 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

 

[Korre]

Hello again i couldnt make this memtestx 86 work on win 7 so i found another program called memtest. I dotn know if it will do the same work.
And also when i do this run as admin --> sfc /scannow , i get a black window that quickly closes.
Im testings a first time with this memtest (link : MemTest for Windows Download Page )
​

 

[Korre]

Hello. I did scan a couple of times but with this program it scans over 100% til i stoped it on 117%. So i would like some help finding a working memtest program because this one is a bit odd. Btw i didnt get any errors on this one. I also did a scan on sfc /scannow and after the scan was completed i didnt get any message or report on the scan..the window just closed so i assumed it was finished.

I sometimes reply a few days late because i thought the crashes stopped but the seem coming back more or less , so i apologize for the late replies.

Thanks again