Solved Various BSOD, Some Random most involve ntoskrnl.exe

[Gx557]

Hello Severn Forums!

I hope that someone here will be able to help me out. So I an Msi GT780DXR-446us laptop and once in awhile Ive been getting random bsods and Ive been trying to figure out why. Every time i would think i found and solved the issues a few weeks later i would get another bsod. Well just recently Ive gotten quite a few within a period of days so Ive decided to finally upload my files in hope that someone else can help me with my annoying issue. And i believe i used the seven forums tool properly if not please tell me and i will re upload the dump files.


Quick Specs:
Intel i7-2670qm 2.20ghz (not overclocked)
Nvidia gtx570m 3gb
16gbs of ram
dual 750gb hard drives not in raid.

 

[koolkat77]

Welcome

Your dumps come with various bug checks:

Analysis:

STOP 0x0000001A: MEMORY_MANAGEMENT 
Usual causes:  Device driver, memory, kernel
BugCheck 1A, {41284, fffff70440007001, 149287, fffff70001080000}
Probably caused by : win32k.sys ( win32k!SURFACE::Map+175 )
-------------
STOP 0x0000001A: MEMORY_MANAGEMENT 
Usual causes:  Device driver, memory, kernel
BugCheck 1A, {3452, 860000, fffff700010834d8, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+35133 )
-------------
STOP 0x00000024: NTFS_FILE_SYSTEM  
Usual causes:  Disk corruption, insufficient physical memory, Device driver, 
Indexing, Resident antivirus, backup, defrag programs, Disk/Drive failing/failure
BugCheck 24, {1904fb, fffff8800a8a0e38, fffff8800a8a0690, fffff80003408617}
Probably caused by : Ntfs.sys ( Ntfs! ?? ::FNODOBFM::`string'+29f9 )
-------------
STOP 0x000000BE: ATTEMPTED_WRITE_TO_READONLY_MEMORY
Usual causes:  Device driver, Memory
BugCheck BE, {fffff88001851190, 45e4121, fffff8800305f680, b}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+44c9e )
-------------
STOP 0x00000019: BAD_POOL_HEADER 
Usual causes:  Device driver
BugCheck 19, {3, fffffa800ccf0870, fffffaa00ccf0870, fffffaa00ccf0870}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a53 )
-------------
STOP 0x0000003B: SYSTEM_SERVICE_EXCEPTION  
Usual causes:  System service, Device driver, graphics driver, memory
BugCheck 3B, {80000003, fffff80003292e38, fffff880037f5920, 0}
Probably caused by : ntkrnlmp.exe ( nt!DebugPrompt+18 )
-------------
STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA  
Usual causes:  Defective hardware (particularly memory - but not just RAM), 
Faulty system service, Antivirus,  Device driver, NTFS corruption, BIOS.
BugCheck 50, {fffff882016634c4, 0, fffff8800162a3f5, 5}
Probably caused by : Ntfs.sys ( Ntfs!memmove+1e5 )

Problematic software:

Start Menu\Programs\Norton Security Suite	Public:Start Menu\Programs\Norton Security Suite	Public

Norton alone is known to cause BSoDs. Suggest you to uninstall it (at least to test)
Download and install MSE. It's free, light weight and doesn't trouble the system.
→ Norton Removal Tool
→ Microsoft Security Essentials - Free Antivirus for Windows

Run Disk Check on your hard disk for file system errors and bad sectors on it:
→ http://www.sevenforums.com/tutorials/433-disk-check.html

Hard drive test both short and long with:
→ SeaTools for Windows

Also the DOS version of:
→ SeaTools for DOS

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

→ http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
→ Guide to using Memtest86+ - Geeks to Go Forums

Run the system file checker that scans the integrity of all protected Windows 7 system files and
replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible
→ http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Re-install the latest drivers for your graphic card drivers
​

Do these and let us know the results
We'll do more troubleshooting

 

[Gx557]

Hey thanks for the quick reply. So i uninstalled Norton and installed MSE but during the install of of MSE I received another bluescreen. Im currently running a check disc on my C drive. I uploaded the new minidump to see if that has anymore info you need. when i complete the other steps ill will be back on.

 

[koolkat77]

The dump is blaming windows system files, which is not a true cause.

From analyzing the dump more, I found that iaStor refers to - Intel Rapid Storage is sort of creating a problem,
uninstall these for now (while we're troubleshooting. You may get the latest version of this tool after see your
computer is stable.

fffff880`0d6865e0  fffff880`03fa9ab0Unable to load image \SystemRoot\System32\Drivers\dump_iaStor.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dump_iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for dump_iaStor.sys
 dump_iaStor+0x12cab0

Take your time. I'll wait for the results

 

[Gx557]

I am still currently running a Disk Check but i just remembered something. When i originally purchased this laptop the hard drives came in Raid 0. The day after i took it out of raid and have both hard drives running as individual drives would this be causing an issue? Because the Bsods didn't start till much later after I had already took it out of raid. I hope that this additional info is helpful.

 

[koolkat77]

I am still currently running a Disk Check but i just remembered something. When i originally purchased this laptop the hard drives came in Raid 0. The day after i took it out of raid and have both hard drives running as individual drives would this be causing an issue? Because the Bsods didn't start till much later after I had already took it out of raid. I hope that this additional info is helpful.

Hmm thanks for the info.
Carry out rest of the tests and let us know the results.
We'll see what we can do from there

 

[Gx557]

So I uninstalled the Intel Rapid Storage Technology program, Ran a chkdsk on both hard drives which came up with no errors or bad sectors, ran numerous passes on my ram and that came up with no errors also, and did the SFC /scannow and that came up with no errors or corrupt files. But during the chkdsk of my 2nd hard drive I did receive a blue screen but after it rebooted the chkdsk ran through fine and smooth and so far no blue screen this morning.

 

[koolkat77]

Thanks for the update, the logs look good to me

Coming to the BSoD .dmp file.. It was caused by: Rt64win7 - Older "Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC" that needs to be updated.

Uninstall the older drivers first: Click on the Start rb: ≥ Control Panel ≥ Programs ≥ Uninstall a program

Source for newer drivers: Filehippo -

• Download Realtek High Definition Audio 2.70 Vista 64 - FileHippo.com

OR

Carrona.org

• Driver Reference Table

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa80623bc198, 2, 0, fffff800032404d7}

Unable to load image \SystemRoot\system32\DRIVERS\Rt64win7.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : [COLOR="Red"]Rt64win7.sys[/COLOR] ( Rt64win7+16b6e )

Followup: MachineOwner
---------

0: kd> lmvm Rt64win7
start             end                 module name
fffff880`0ff1d000 fffff880`0ffa2000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: [COLOR="Red"]Rt64win7.sys[/COLOR]
    Timestamp:        [COLOR="red"]Fri Jun 10 12:33:15 2011[/COLOR] (4DF1BAAB)
    CheckSum:         0008B67F
    ImageSize:        00085000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[Gx557]

Ok I just updated the driver. I just wanted to say thank you for helping me out thus far. So what should I do next?

 

[koolkat77]

No problem
Now you should just observe for more BSoDs, if they occur, update this thread by uploading the dumps like you did in your other posts. If there's no BSoD for a week or more than a week, you can mark the thread solved.

See you soon, good luck.

 

[Gx557]

Sadly im back again

With the latest new dump file I have also added some errors and warnings that appeared in event viewer. 3 different programs informed me that they have just stopped working. So im hoping that those text files will help. Once again thank you for helping me out with this annoying issue.

 

[koolkat77]

Enable Driver Verifier. Give me all the dumps you get in next 36 hours

• http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

 

[Gx557]

So these are the latest dumps files. 1 or 2 you may have already seen. If I receive any more i will upload them here.

 

[koolkat77]

Strangely caused by very old Realtek HiDefinition Audio drivers

[COLOR="red"]BugCheck A[/COLOR], {0, 2, 0, fffff80003290715}

Unable to load image \SystemRoot\system32\drivers\MBfilt64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for MBfilt64.sys
*** ERROR: Module load completed but symbols could not be loaded for MBfilt64.sys
Probably caused by : [COLOR="Red"]MBfilt64.sys[/COLOR] ( MBfilt64+1817 )

Followup: MachineOwner
---------

6: kd> lmvm MBfilt64
start             end                 module name
fffff880`079eb000 fffff880`079f9000   MBfilt64 T (no symbols)           
    Loaded symbol image file: MBfilt64.sys
    Image path: \SystemRoot\system32\drivers\MBfilt64.sys
    Image name: [COLOR="red"]MBfilt64.sys[/COLOR]
    Timestamp:        [COLOR="Red"]Fri Jul 31 09:40:32 2009[/COLOR] (4A7267B0)
    CheckSum:         0000FF02
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Click on the Start rb: ► Control Panel ► Programs ► Uninstall a program ► Uninstall the related stuff

Delete remnants of this driver using Driver Sweeper. Install latest ones from here,

• Driver Reference Table

 

[Gx557]

So i have one new dump file but i think it was caused by me as i still had drvier verifier running as i was installing the updated audio driver.

 

[koolkat77]

Install the latest driver and disable verifier

 

[Gx557]

Another new bsod. this happened after running my laptop most of the day.

 

[koolkat77]

STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
Usual causes:  Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus,  Device driver, NTFS corruption, BIOS
BugCheck 50, {fffff96000556010, 0, fffff9600017d010, 2}
Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!HMValidateHandleNoSecure+10 )

Did you take seatools for windows and sea tools for DOS?

Take memtest also.

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
• Guide to using Memtest86+ - Geeks to Go Forums

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.
Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.
If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.
If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.
If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.
3. Test the next stick of RAM (stick #2) in the next motherboard slot.
If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.
If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.
4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

 

[Gx557]

I have already run those tests previously like you insturcted but i will run them just to eliminate them as a problem and as a precaution. Also in that message you had posted it had stated other things that could be a cause such as drivers or bios. Maybe I still have a bad driver. Or "When i originally purchased this laptop the hard drives came in Raid 0. The day after i took it out of raid and have both hard drives running as individual drives would this be causing an issue?"

Could it be something with my bios? MSI Global ? Notebook - GT780
Msi has 2 bios updates they are only 4 days newer than the ones currently on my laptop but should I update it the bios that says for non raid users? would this help?

Once again thanks for help. I really hope this isnt bugging you but I really want to fix this issue. I use this for school to do photoshop and other graphics homework.

 

[Gx557]

I have run the Sea tools and chkdsk again both pointed to no errors. I will run memtest tonight and tomorrow to see if any errors are found. But I did receive a Blue screen yesterday but that happened during boot before I ran the hard drive tests. Most Bluescreens happen after the laptop hasnt been used in awhile but if I turn it off and on multiple times during the day I don't get any. But so far none today. So could it still be drivers?