Several crashes - no BSOD

[pokeefe0001]

Twice in the past few days - since installing SP1 - I've found my PC rebooted. No BSOD even though I have automatic restart disabled. I have hibernation enabled and don't recall seeing a successful hibernation since since installing SP1 so I suspect a problem with hibernation ... but manually requesting a "sleep" shutdown works with no problem.

I've run BSOD_Windows7_Vista_v3.02_jcgriff2_.exe but I'm not sure it is meaningful in this situation.

Any suggestions how I debug this?

Pat

Correction to the above: There has been at least one successful hibernation - probably not the cause of the reboot.

 

[usasma]

Although you haven't seen any BSOD's, please provide the info from here: http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[pokeefe0001]

A question before I zip the stuff up. The debug directory has 8 .dmp files - none for this problem. In fact, none from this year. Is there any reason I should not delete them before zipping the directory? And is there any reason I should not delete them from the C:\Windows\Minidump directory?

Sorry to ask a bonehead question.

Pat

 

[usasma]

Leave them there. As a part of my initial analysis, I check the dates to see if they're a part of the current problem.
I probably won't use them, but it never hurts to have them "just in case".

 

[pokeefe0001]

I've attached a zipped copy of my Windows7_BSOD_jcgriff2 folder. I added the output of perfmon before zipping it. Since creating the zip file but before uploading it my PC died 3 times. No BSOD - just a sudden black screen followed by a reboot.

• 1st time - reboot was successful
• 2nd time - Reboot hung. Another reboot following power off/on was successful.
• 3rd time - Windows hung with the "Windows starting" message. Reboot following power off/on was successful but Windows never started (not even "starting" message.) Got "Startup Repair". I chose not to go to a previous restore point until you say that's a good idea. The repair was not successful, but the following reboot and startup worked.

I'm worried about getting reboots rather than halting with BSOD. Is there something other than the "Automatically restart" failure option that I need to set? I've got automatic restart turned off.

BTW, the only restore point I have now is from the SP1 installation even though that was the 3rd or 4th update in as many days that performed restore point creation. I'm beginning to get even more worried.

 

[usasma]

Lot's of issues recently with kmj2d.exe - most likely a Kyodai Mahjongg game. Please uninstall it from your system.

Older versions of Acronis True Image have been known to have issues with Win7. Please uninstall the program (and it's add-ons) until we're done troubleshooting.

M-Audio USB devices have had issues in the past. Please uninstall the software/drivers for this device and then remove the device from your system while we're troubleshooting.

Zone Alarm has been known to cause BSOD's. Please do the following:

Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the Zone Alarm from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of Zone Alarm using this free tool (direct download link): http://download.zonealarm.com/bin/free/support/cpes_clean.exe
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's

More to follow this afternoon when I have time to review the event viewer logfiles (I'm late for work now).

Follow the directions here to set your system to produce minidumps: http://www.carrona.org/setmini.html

 

[pokeefe0001]

So far I've

• Verified and corrected the Windows Recovery settings. I changed the dump option from Kernal to Minidump. Everything else was set correctly.
• Uninstalled Kyodai Mahjongg game (which crashes on termination just about every time I run it, but I doubt it corrupts Windows)
• Uninstalled Acronis True Image

Sometime following that I had another reboot. No BSOD. No minidump.
I guess it's on to the next steps.

I haven't removed ZoneAlarm yet. You mentioned a free anitviral product - Avast - but I know nothing about it. I'm looking into it. On the carrona web page there is also a link to Sphinx firewall. I know nothing about it, either. Do you recommend it, too? I don't want to remove ZA until I have the replacements ready to go.

I have not removed the M-Audio hardware and software yet. At this point there is little reason to turn on the PC without it. I'll look into going back to my on-board sound support for output and just do without MIDI input for a while, I guess. You mentioned the M-Audio USB support; I doubt it matters, but USB isn't involved here.

BTW, I see in the Sound & Audio forum that somebody recommends disabling the on-board support in BIOS. I disabled it through Device Manager but not in BIOS. (I have no idea how to do it in BIOS.) Could this cause problems? I've used the PC configured this way for months without it causing any obvious trouble.

 

[usasma]

This shows issues with ZoneAlarm:

Event[16587]:
Log Name: System
Source: Service Control Manager
Date: 2011-02-14T11:26:29.204
Event ID: 7030
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Patrick-PC
Description:
The TrueVector Internet Monitor service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

2 of these errors suggest either a hard drive issue or a controller (mobo) issue:

Event[45]:
Log Name: System
Source: Disk
Date: 2011-03-06T12:02:37.751
Event ID: 11
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Patrick-PC
Description:
The driver detected a controller error on \Device\Harddisk3\DR3.

Many, many Windows Update errors like this:

Event[84]:
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 2011-03-06T11:06:26.874
Event ID: 4107
Task: N/A
Level: Error
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Patrick-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A certificate chain could not be built to a trusted root authority.
.

I wonder if the ZoneAlarm issues are contributing to the Windows Update problems.
For the hard drive issues, please do the following: HD Diagnostic (read the details at the link)

 

[usasma]

I haven't used a 3rd party firewall since using Sygate Personal Firewall with XP years ago. I just don't think that it's necessary. I include the Sphynx firewall control for those who still insist upon controlling the firewall settings (I tested this product in Vista and it worked well, but I don't use it myself).

I use the Microsoft Security Essentials (MSSE) on all my systems. I used to use Avast and Avira, but have found that MSSE protects me adequately.

I have found that the firewall component on many 3rd party apps will suffer from problems that aren't easy to diagnose - so I avoid recommending them because they're too hard to fix.

The M-Audio stuff is just a guess, and it's the lowest on my "possibles" list. I'm also not very good with sound devices - preferring to replace them rather than attempt to fix them.

Disabling devices in Device Manager allows the drivers to load when Windows boots up. Disabling the device in the BIOS prevents the device from being recognized in Windows - but the drivers may still load (depending on where they load from and in what order) if you haven't uninstalled them.

 

[pokeefe0001]

This shows issues with ZoneAlarm:

Event[16587]:
Log Name: System
Source: Service Control Manager
Date: 2011-02-14T11:26:29.204
Event ID: 7030
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Patrick-PC
Description:
The TrueVector Internet Monitor service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

That was during an upgrade to a new release of ZA. The developers should have been more careful in the way they had it restart itself, but there was no problem.

2 of these errors suggest either a hard drive issue or a controller (mobo) issue:

Event[45]:
Log Name: System
Source: Disk
Date: 2011-03-06T12:02:37.751
Event ID: 11
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Patrick-PC
Description:
The driver detected a controller error on \Device\Harddisk3\DR3.

That doesn't look so good.

Many, many Windows Update errors like this:

Event[84]:
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 2011-03-06T11:06:26.874
Event ID: 4107
Task: N/A
Level: Error
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Patrick-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A certificate chain could not be built to a trusted root authority.
.

I wonder if the ZoneAlarm issues are contributing to the Windows Update problems.

More likely this is due to the way I'm using (or trying to use) ZA. I don't want ANYTHING (including Windows itself) trying to connect to anything anywhere unless I ask it to so I block a lot of stuff. I'm miserably unsuccessful at that, but I may have been partially successful here. I did not ask for any updates on 2011-03-06.

For the hard drive issues, please do the following: HD Diagnostic (read the details at the link)

I'll check it out. Thanks.

 

[usasma]

I'd suggest removing ZoneAlarm (it does have BSOD issues on occasion) and let Windows do it's thing.
Once you get Windows stable, then add ZoneAlarm back with all of your restrictive settings. If it then causes BSOD's you'll be sure that it's your settings.

 

[pokeefe0001]

I'm now checking for a way to save my ZA firewall config.
Is there any doc on how to set up the Windows firewall so that it can "do it's thing"?

 

[usasma]

I don't know about that, but here's a link to their manual: User's manual : Windows 7 Firewall Control : Sphinx Software

 

[pokeefe0001]

No problem yesterday or so far today. That's with ZoneAlarm still installed. I think I'll wait to see if I have another crash before proceeding further. In the mean time, ...

I still don't understand why I do not get the BSoD. As near as I can see I had everything set up as you suggested except for requesting a kernel dump rather than minidump. Any suggestions?

BTW, I didn't provide my system info. Here it is.
- x86 (32-bit) or x64 ?
x64
- the original installed OS on the system?
No. Upgraded from Win7 Home to Win7 Pro
- an OEM or full retail version?
OEM from custom builder NCIX . No NCIX-related software was installed.
- What is the age of system (hardware)?
9 months
- What is the age of OS installation (have you re-installed the OS?)
8 months