Windows seven - BSOD stop 0x000000f4

[mcgyver83]

After a normale use of my pc I shoutdown it.
After I start it but,after win logo i saw mouse pointer for 1 second and immediatly a bsod STOP 0x000000F4
I didn't make configuration change or software install.

I cant find minidump in c:\windows\minidump but a Memory.dmp 255MB file in c:\windows.

I try to boot with seven dvd and repari configuration but,after win installation selection I have the message: "This version of Recovery options system wasn't

compatible..." but is the same dvd that I used for install; maybe the windows update make some mistake?

But the most important thing is how can I restore my system without reInstall?

I can give disk access via windows xp in the same disk (previous windows version)

 

[Capt.Jack Sparrow]

Hi, Welcome to SF,

Try these steps


Collect Minidump Files
=================
1. Click "Start", input "SYSDM.CPL" (without quotation marks) in the “Search” bar and press “Enter”.
2. Switch to the "Advanced" tab and click the "Settings" button under "Startup and Recovery".
3. Under "Write debugging information" section, make sure the "Small memory dump (128KB)" option is selected.
4. Make sure "%SystemRoot%\Minidump" is in the "Small dump directory" open box and click “OK”.

If the Blue Screen appears again, please refer to the following steps to collect memory dump files:

1. Click “Start”, type “%SystemRoot%\Minidump" (without quotation marks) in “Search” bar and press “Enter”.
2. Go to your Desktop, right-click on it and create a new folder named "Dump".
3. Copy all the memory dump files (looks like [Mini092008-01.dmp]) in Minidump to this folder.
4. Right-click on the Dump folder, click "Send To", and click "Compressed (zipped) Folder".
5. Please send the ZIP file to us.

System Information
========================
1. Click “Start”, type in “msinfo32” (without quotation marks) in the Search bar and then press Enter.
2. Choose “Save” from the File menu and save it as an NFO file.
3. Find the file, right-click on this file, click "Send To", and click "Compressed (zipped) Folder".
4. Send the compressed file to us.

Hope ths helps,
Captain

 

[mcgyver83]

Hi, due my previous post I can't access to win seven installation.
I can only access to disk from win xp in e second partition.
With windbg i found that wininit.exe is the process that make the problem.I read about virus or malaware that uses wininit.exe to infect. Can I extract e wininit.exe fresh copy form seven dvd

here there is the windbg screen:


CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa80038f5b30, Terminating object
Arg3: fffffa80038f5e10, Process image file name
Arg4: fffff8000517b240, Explanatory message (ascii)

Debugging Details:
------------------

PEB is paged out (Peb.Ldr = 000007ff`fffdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 000007ff`fffdf018). Type ".hh dbgerr001" for details

PROCESS_OBJECT: fffffa80038f5b30

IMAGE_NAME: wininit.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: wininit

FAULTING_MODULE: 0000000000000000

PROCESS_NAME: wininit.exe

EXCEPTION_CODE: (Win32) 0x36b1 (14001) - Impossibile avviare l'applicazione specificata. La configurazione dell'applicazione non corretta. Una nuova installazione dell'applicazione potrebbe risolvere il problema.

BUGCHECK_STR: 0xF4_36B1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

CURRENT_IRQL: 0

STACK_TEXT:
fffff880`036b3ac8 fffff800`051fe142 : 00000000`000000f4 00000000`00000003 fffffa80`038f5b30 fffffa80`038f5e10 : nt!KeBugCheckEx
fffff880`036b3ad0 fffff800`051aa269 : 00000000`00000001 fffffa80`038deb60 fffffa80`038f5b30 00000000`002eb240 : nt!PspCatchCriticalBreak+0x92
fffff880`036b3b10 fffff800`0512ec74 : 00000000`00000001 00000000`00000001 fffffa80`038f5b30 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x17a06
fffff880`036b3b60 fffff800`04e72153 : fffffa80`038deb60 fffff880`000036b1 fffffa80`038deb60 fffffa80`0392bb30 : nt!NtTerminateProcess+0xf4
fffff880`036b3be0 00000000`77aa017a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0016fb88 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77aa017a


STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: X64_0xF4_36B1_IMAGE_wininit.exe

BUCKET_ID: X64_0xF4_36B1_IMAGE_wininit.exe

Followup: MachineOwner

 

[Capt.Jack Sparrow]

Could you post the Dump file so we can take a look of the driver list

 

[mcgyver83]

But i have already write that the only *.dmp file that i found in my win seven partition (modified or made in this day 2010-01-26) is 255megabyte...i can't post it.
can i post other information tha can help to find solution?

 

[usasma]

Try this:

If you find it, zip it up and upload it to a free file hosting service (not RapidShare as the analysts usually can't download from it) - then post the link to it.
Then, follow the directions here to set your system for Minidumps (much smaller than the MEMORY.DMP file): Set MiniDump

 

[mcgyver83]

Ok, I try to zip it and upload to some file hosting.
For the minidump section i have already set my win 7 to use minidump and the other settings that are write in the page you linked to me but I don't know why in this moment my win7 never make a minidump.. :-(

 

[computersplus]

the error you are getting is usually caused by faulty hardware

 

[mcgyver83]

I run 4 passes of memtest but no problem, now I'm doing chkdsk on all partition loading pc with win xp on an another partition of disk.

So how can I test my system to detect hardware problem?

 

[zigzag3143]

After a normale use of my pc I shoutdown it.
After I start it but,after win logo i saw mouse pointer for 1 second and immediatly a bsod STOP 0x000000F4
I didn't make configuration change or software install.

I cant find minidump in c:\windows\minidump but a Memory.dmp 255MB file in c:\windows.

I try to boot with seven dvd and repari configuration but,after win installation selection I have the message: "This version of Recovery options system wasn't

compatible..." but is the same dvd that I used for install; maybe the windows update make some mistake?

But the most important thing is how can I restore my system without reInstall?

I can give disk access via windows xp in the same disk (previous windows version)

some questions

do you have a backup we can restore from?

do you have an original win 7 dvd?

we can get yoou up and running. It may require a clean reinstall. do you have anything you cant live without?


Ken J+

 

[mcgyver83]

I have an original win7 dvd and a backup of personal file but I don't want to reconfigure the entire system...
Obviously I can't stay without pc for long time so if I can't restore my system I only have to format and reinstall....

I have uploaded my memory.dmp file (250MB uncompresset,36MB compressed) to http://www.megaupload.com/?d=H9BF0R2P or http://www.filefront.com/15448391/MEMORY.rar
Thaks to all!

 

[usasma]

Well, the dump file doesn't give us many clues.

It blames wininit.exe - which is a core Windows file.
I'd first suggest scanning the computer for malware - to include the Windows 7 partition. See the quote below for some suggested tests.

Then, please upload this information:

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.

If you're having difficulties with the format, please open an elevated (Run as administrator) Command Prompt and type "msinfo32 /nfo C:\Users\Public\Desktop\TEST.NFO" (without the quotes) and press Enter. Then navigate to the C:\Users\Public\Desktop directory to retrieve the TEST.NFO file. If you have difficulties with making this work, please post back.

Please update this very old driver: ctgame.sys Tue Apr 06 20:42:49 2004
It belongs to your Creative Game Port Enumerator. If you cannot find Win7 drivers for this card, please uninstall all Creative software, then remove the card from the system.

If this doesn't fix the BSOD's, then I'd suggest these tests:

H/W Diagnostics:
Please start by running these bootable hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Malware (read the details at the link)

Additional tests for certain specific circumstances:
Try this free video stress test: FurMark: Graphics Card Stability and Stress Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net
Try this free stress test: Free Software - GIMPS

Summary of the BSOD:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Tue Jan 26 03:45:06.051 2010 (GMT-5)
System Uptime: 0 days 0:00:17.409
BugCheck F4, {3, fffffa80038f5b30, fffffa80038f5e10, fffff8000517b240}
Probably caused by : wininit.exe
PROCESS_NAME:  wininit.exe
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

 

[mcgyver83]

Hi, I could not wait so I have already made a full reinstall of Windows.
I'm sorry because I'm interesting in computer problema but now my system was new

Thanks a lot for the help!

 

[usasma]

Not a problem, thanks for letting us know!