BleepingComputer.com: Win 7 Freezes & Blue Screen

Hey Team,

Sorry if I have posted this incorrectly. Starting to pull my hair out over the constant freezes and blue screens in Win 7. Can you look at the below and provide some advice? Have followed your post about debug and info is below.

Thanks,

Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16481.x86fre.win7_gdr.091207-1941
Machine Name:
Kernel base = 0x82c17000 PsLoadedModuleList = 0x82d5f810
Debug session time: Sun Feb 21 14:34:03.456 2010 (GMT+11)
System Uptime: 0 days 0:23:54.769
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols

Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {f4832a, 2, 0, 8e6e2d56}

Probably caused by : usbehci.sys ( usbehci!EHCI_GetEndpointStatus+8 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00f4832a, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8e6e2d56, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00f4832a

CURRENT_IRQL: 2

FAULTING_IP:
usbehci!EHCI_GetEndpointStatus+8
8e6e2d56 8b4128 mov eax,dword ptr [ecx+28h]

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xD1

PROCESS_NAME: System

TRAP_FRAME: 82d3d930 -- (.trap 0xffffffff82d3d930)
ErrCode = 00000000
eax=86655b30 ebx=86631c6c ecx=00f48302 edx=00000000 esi=866310e0 edi=876a5c40
eip=8e6e2d56 esp=82d3d9a4 ebp=82d3d9a4 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
usbehci!EHCI_GetEndpointStatus+0x8:
8e6e2d56 8b4128 mov eax,dword ptr [ecx+28h] ds:0023:00f4832a=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 8e6e2d56 to 82c5d85b

STACK_TEXT:
82d3d930 8e6e2d56 badb0d00 00000000 00000002 nt!KiTrap0E+0x2cf
82d3d9a4 8e69530d 86631fe0 876a5de0 876a5c40 usbehci!EHCI_GetEndpointStatus+0x8
82d3d9c4 8e694ab8 866310e0 876a5c02 876b0170 USBPORT!MPf_GetEndpointStatus+0x94
82d3d9e4 8e69d9c0 86631028 86631028 00000000 USBPORT!USBPORT_Core_QueueTransferUrb+0xb8
82d3d9f8 8e6973fa 86631028 85784e28 876b0170 USBPORT!USBPORT_BulkOrInterruptTransfer+0x70
82d3da48 8e6981f2 8672f028 00000000 85784e28 USBPORT!USBPORT_ProcessURB+0x752
82d3da70 8e6927c5 8672f028 85784e28 87d8f1f8 USBPORT!USBPORT_PdoInternalDeviceControlIrp+0xfb
82d3da98 82c534ac 8672f028 8672f2cc 85784e28 USBPORT!USBPORT_Dispatch+0x18a
82d3dab0 96047c8f 85784e28 876700e8 00000000 nt!IofCallDriver+0x63
82d3dac4 96047e5a 867780e0 87670030 85784e28 usbhub!UsbhFdoUrbPdoFilter+0x68
82d3dae8 96047b92 87670030 85784f28 87670030 usbhub!UsbhPdoInternalDeviceControl+0xf6
82d3dafc 82c534ac 87670030 85784e28 876b0170 usbhub!UsbhGenDispatch+0x4a
82d3db14 9618e048 876b01d4 96195000 858412e4 nt!IofCallDriver+0x63
82d3db34 9619057a 876b0030 85784e28 8746242c USBSTOR!USBSTOR_IssueBulkOrInterruptRequest+0xcc
82d3db68 9618f4af 8746242c 85784e28 85784f2b USBSTOR!USBSTOR_CswTransfer+0x78
82d3db8c 82c7fc13 876b0030 85784e28 00000000 USBSTOR!USBSTOR_DataCompletion+0x1c3
82d3dbd0 8e693868 82c57374 854bb008 00000000 nt!IopfCompleteRequest+0x128
82d3dc00 8e694178 856b82e0 85784e28 876b0170 USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x6e0
82d3dc2c 8e6979af 86631028 866310f0 86631a98 USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x33b
82d3dc54 8e691d18 86631028 86631a98 86631002 USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xbc
82d3dc78 82c7f4b5 86631aa4 86631002 00000000 USBPORT!USBPORT_Xdpc_Worker+0x173
82d3dcd4 82c7f318 82d40d20 82d4a280 00000000 nt!KiExecuteAllDpcs+0xf9
82d3dd20 82c7f138 00000000 0000000e 00000000 nt!KiRetireDpcList+0xd5
82d3dd24 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x38


STACK_COMMAND: kb

FOLLOWUP_IP:
usbehci!EHCI_GetEndpointStatus+8
8e6e2d56 8b4128 mov eax,dword ptr [ecx+28h]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: usbehci!EHCI_GetEndpointStatus+8

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: usbehci

IMAGE_NAME: usbehci.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc872

FAILURE_BUCKET_ID: 0xD1_usbehci!EHCI_GetEndpointStatus+8

BUCKET_ID: 0xD1_usbehci!EHCI_GetEndpointStatus+8

Followup: MachineOwner
---------

0: kd> lmvm usbehci
start end module name
8e6da000 8e6e9000 usbehci (pdb symbols) c:\symbols\usbehci.pdb\FA5DDE3E50994A4582DFF51C7883E36A1\usbehci.pdb
Loaded symbol image file: usbehci.sys
Image path: \SystemRoot\system32\DRIVERS\usbehci.sys
Image name: usbehci.sys
Timestamp: Tue Jul 14 09:51:14 2009 (4A5BC872)
CheckSum: 000178B0
ImageSize: 0000F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

With one dump log it's impossible to say anything.

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Thanks for that, here's what BlueScreenView had to say:

==================================================
Dump File : 022110-20875-01.dmp
Crash Time : 2/21/2010 10:15:19 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0xfc1c807f
Parameter 2 : 0x00000000
Parameter 3 : 0x979b6482
Parameter 4 : 0x00000002
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+2142f0
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\022110-20875-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

So, should I assume, that BSOD happened just once?

Yeah that's all I got after the last bsod.

Unfortunately I can't recreate the problem so easily, a lot of the time it's the computer freezing with sound skipping and needing a hard reboot. As you would know it's hard to diagnose those freezes because it just gives the events of 'inproper shutdown' etc.

Originally thought it was a RAM issue but ran memtest with no faults. Starting to think it might be the video card.

Sorry for being a pain.

If I thought, you're a pain, I wouldn't reply in your topic...LOL

While we're waiting for more BSODs to happen, let's gather some more info.
Are you doing anything in particular, when freezes happen?
How old is this computer?
Desktop, or laptop?
Did it come with Win 7 installed?

Please, post some computer info:
- processor type, amount of RAM (hold Windows logo key, hit Pause/Break key)
- hard drive size/free space (open "My Computer", right click on hard drive letter, click "Properties")
- security programs in use (antivirus, firewall)

Haha fair point

Nothing in particular when it freezes, sometimes it will be when watching media on WMP other times I could be installing software or simply browsing. Last night it froze (not BSOD) when installing Microsoft Office. I think bsods mainly happen when watching media but can't be sure.

3 - 4 weeks old (frustration city)
Desktop
Win 7 installed but have re-installed in case of bad first install

Intel E8400 core 2 duo
4gb RAM (2x Kingston DDR3 2gb)
500gb (w/ 200gb partition) plus 120gb internal hdd (ripped out of previous computer)
So all up about 350-400gb free space. Nothing big stored on internal hdds and in process of reinstalling windows again due to seperate issue with Office not being recognised.
Running Microsoft firewall and security essentials (disabled AVG because of what I read in other forums)

I've emailed the manufacturer because of it being recently purchased. I'm just hoping to avoid having to take it in and be without my home desktop for an extended period of time.

Since it's a new computer, we surely don't want to do anything to void warranty, so we have to take it easy.

Quote

Please, download and run AVG Remover: http://www.avg.com/us-en/download-tools

Thanks Broni, did a clean re-install of Windows last night. Had two freezes but no bsods, will try and recreate bsod and post bluescreenview/debug.

OK....

I would try updating your USB/Chipset Drivers. What motherboard do you have?

Thanks Cryptodan,

Mobo: Gigabyte GA-EP45T-EXTREME with F4 bios.
Chip: Intel P45/P43

According to the Intel auto detect on their website my chipset drivers are all up to date.

I appear to be all up to date with USB drivers using the device manager update (unless I've missed something which is very possible).

Coincidentally, had another blue screen yesterday:

==================================================
Dump File : 022310-13046-01.dmp
Crash Time : 2/23/2010 9:43:12 PM
Bug Check String : PFN_LIST_CORRUPT
Bug Check Code : 0x0000004e
Parameter 1 : 0x00000099
Parameter 2 : 0x000a00dc
Parameter 3 : 0x00000002
Parameter 4 : 0x00040c3b
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+dcd10
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\022310-13046-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

Freezes are still happening quite constantly.

Checking the event viewer I'm getting eventIDs such as 100, 101, 350, 351 around the time of the freezes if that helps.

Ta

Your motherboard is not supported by Windows 7, there are no drivers available for it.

I don't know if this is your exact board, but take a look at the links here.

32/64 Windows 7 drivers do appear depending on what you select at the bottom of the page.

Hey All,

Freezes and BSODs are still occurring unfortunately. It actually even froze just then as I was attempting to type this. The original seller of the system isn't coming to the party either. Before I go lose my nut at them I thought I'd better try here again. I'll dump the Blue Screen View data below.

I'm guessing that cryptodan's statement is incorrect as Cybr pointed to the drivers?

I'll pop the memory dumps below but I don't really know what I can do about reporting the freezes. Perhaps the event log would help?

Thanks,

==================================================
Dump File : 030310-30825-01.dmp
Crash Time : 3/3/2010 6:03:18 PM
Bug Check String : PFN_LIST_CORRUPT
Bug Check Code : 0x0000004e
Parameter 1 : 0x00000099
Parameter 2 : 0x000c0006
Parameter 3 : 0x00000002
Parameter 4 : 0x000c0d05
Caused By Driver : halmacpi.dll
Caused By Address : halmacpi.dll+5ba9
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\030310-30825-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030210-25703-01.dmp
Crash Time : 3/2/2010 6:00:04 PM
Bug Check String : PFN_LIST_CORRUPT
Bug Check Code : 0x0000004e
Parameter 1 : 0x00000099
Parameter 2 : 0x000100fb
Parameter 3 : 0x00000002
Parameter 4 : 0x000a4efa
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+dccfc
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.20618 (win7_ldr.100114-1818)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\030210-25703-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030110-30671-01.dmp
Crash Time : 3/1/2010 10:11:42 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0xcbaddb35
Parameter 2 : 0x00000000
Parameter 3 : 0x82e82846
Parameter 4 : 0x00000002
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+859e3
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.20618 (win7_ldr.100114-1818)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\030110-30671-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 022410-19656-01.dmp
Crash Time : 2/24/2010 7:54:23 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x00000028
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x82a4d0e9
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+467eb
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.20618 (win7_ldr.100114-1818)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\022410-19656-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 022310-13046-01.dmp
Crash Time : 2/23/2010 9:43:12 PM
Bug Check String : PFN_LIST_CORRUPT
Bug Check Code : 0x0000004e
Parameter 1 : 0x00000099
Parameter 2 : 0x000a00dc
Parameter 3 : 0x00000002
Parameter 4 : 0x00040c3b
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+dcd10
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.20618 (win7_ldr.100114-1818)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\minidump\022310-13046-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================