Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bluescreen after standby mode - dump file attached - ntkrnlmp.exe ( OS: W7 PRO 64)


  • Please log in to reply
15 replies to this topic

#1 swatpartner

swatpartner

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 07 March 2010 - 01:40 PM

Hi guys, I'm new to this forum and got a problem with my computer.

This is the sixth time I get a bluescreen after having my computer in standby mode. I got my first bluescreen of this kind a month ago and since then it have occured every time I have my computer in standby.
I have located the dump file and used the debugging tool to gain more info.

I also should mention that I have all latest drivers installed.

My system specs:

Windows 7 PRO 64-Bit
Intel Core i7 965 @ 3,2 Ghz (stock speed)
Noctua NH-U12P CPU Cooler (normal temps)
XFX Nvidia GTX 295
Asus Rampage II Extreme
Corsair Dominator DDR3 6 GB (3x2 GB) 1600 Mhz
Western Digital Velociraptor 300 GB
Western Digital Caviar Black 500 GB
Thermaltake Toughpower 1000W
Killer NIC M1 gaming network card

Dump file:


Microsoft ® Windows Debugger Version 6.12.0002.633 AMD64
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Armin\Desktop\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c4d000 PsLoadedModuleList = 0xfffff800`02e8ae50
Debug session time: Sun Mar 7 16:57:34.403 2010 (UTC + 1:00)
System Uptime: 0 days 3:29:27.731
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols

Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 76, {0, fffffa800527d640, 1, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+181e6 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PROCESS_HAS_LOCKED_PAGES (76)
Caused by a driver not cleaning up correctly after an I/O.
Arguments:
Arg1: 0000000000000000, Locked memory pages found in process being terminated.
Arg2: fffffa800527d640, Process address.
Arg3: 0000000000000001, Number of locked pages.
Arg4: 0000000000000000, Pointer to driver stacks (if enabled) or 0 if not.
Issue a !search over all of physical memory for the current process pointer.
This will yield at least one MDL which points to it. Then do another !search
for each MDL found, this will yield the IRP(s) that point to it, revealing
which driver is leaking the pages.
Otherwise, set HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
Management\TrackLockedPages to a DWORD 1 value and reboot. Then the system
will save stack traces so the guilty driver can be easily identified.
When you enable this flag, if the driver commits the error again you will
see a different bugcheck - DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS (0xCB) -
which can identify the offending driver(s).

Debugging Details:
------------------


PROCESS_NAME: WerFault.exe

DEFAULT_BUCKET_ID: DRIVER_FAULT_0x76

BUGCHECK_STR: 0x76

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80002ff69f5 to fffff80002cbef00

STACK_TEXT:
fffff880`0c4eca38 fffff800`02ff69f5 : 00000000`00000076 00000000`00000000 fffffa80`0527d640 00000000`00000001 : nt!KeBugCheckEx
fffff880`0c4eca40 fffff800`02f7b207 : fffffa80`0527d640 00000000`00000008 fffffa80`00000000 fffffa80`00000000 : nt! ?? ::NNGAKEGL::`string'+0x181e6
fffff880`0c4eca80 fffff800`02cc40b4 : 00000000`00000000 fffffa80`0527d640 fffffa80`0527d610 fffff800`0304b915 : nt!PspProcessDelete+0x177
fffff880`0c4ecae0 fffff800`02dc3439 : fffffa80`0527d640 fffffa80`054fd000 fffffa80`054fdd20 fffffa80`054fdd18 : nt!ObfDereferenceObject+0xd4
fffff880`0c4ecb40 fffff800`0310f1fe : fffffa80`000006b9 fffffa80`0518f000 fffffa80`0527d640 fffffa80`054fdd20 : nt!MmFreeAccessPfnBuffer+0x29
fffff880`0c4ecb70 fffff800`03130820 : fffffa80`0a062501 00000000`00000080 fffffa80`048e0b30 fffff800`02e4b568 : nt!PfpFlushBuffers+0x23e
fffff880`0c4ecc10 fffff800`02f62166 : ffffffff`ff676980 fffffa80`0a062580 fffff880`0c4ecdb0 fffffa80`0a062580 : nt!PfTLoggingWorker+0xe0
fffff880`0c4ecd40 fffff800`02c9d486 : fffff800`02e37e80 fffffa80`0a062580 fffff800`02e45c40 fffff880`01432a90 : nt!PspSystemThreadStartup+0x5a
fffff880`0c4ecd80 00000000`00000000 : fffff880`0c4ed000 fffff880`0c4e7000 fffff880`0c4ec750 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::NNGAKEGL::`string'+181e6
fffff800`02ff69f5 cc int 3

SYMBOL_STACK_INDEX: 1




SYMBOL_NAME: nt! ?? ::NNGAKEGL::`string'+181e6

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600

FAILURE_BUCKET_ID: X64_0x76_WerFault.exe_nt!_??_::NNGAKEGL::_string_+181e6

BUCKET_ID: X64_0x76_WerFault.exe_nt!_??_::NNGAKEGL::_string_+181e6

Followup: MachineOwner
---------

0: kd> lmvm nt
start end module name
fffff800`02c4d000 fffff800`0322a000 nt (pdb symbols) c:\symbols\ntkrnlmp.pdb\F8E2A8B5C9B74BF4A6E4A48F180099942\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Image path: ntkrnlmp.exe
Image name: ntkrnlmp.exe
Timestamp: Tue Jul 14 01:40:48 2009 (4A5BC600)
CheckSum: 0054B487
ImageSize: 005DD000
File version: 6.1.7600.16385
Product version: 6.1.7600.16385
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 6.1.7600.16385
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.


Also sometimes I get a error message saying "windows kernel has stopped working" if that could have any connection to this problem.


I'm really grateful if you guys could help me finding a solution :huh:

BC AdBot (Login to Remove)

 


#2 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:57 AM

Posted 07 March 2010 - 02:05 PM

Welcome to Bleeping Computer!

I'll see what I can do to help you with your problems. :huh:

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Is this a homemade computer, or did you simply upgrade the stock hardware? If it was bought as a whole, what is the manufacturer and model of the PC?

In sleep/hibernate problems, about 99% of the time, the cause is because of faulty or outdated drivers.

Have you been to your manufacturer's website to download and install the latest Windows 7 drivers for your hardware? A lot of the time, people will just check their Device Manager, and if nothing has the little yellow triangle, they'll say they have updated drivers. Or, they'll click "Update Driver" inside the Device Manager on the particular troublesome device, and when nothing shows up, they assume it is up to date. I know you said you have up to date drivers installed, but we have to make the distinction between downloading and installing them from the manufacturer(s) website and just checking the Device Manager. I hate to sound condescending, but I have to be sure we are both on the same page. How did you update your drivers?

Note: from what I've seen, NVIDIA graphics cards do not play nicely with Windows 7. This is just an observation I have made over the last couple months. I'm sure there are plenty of computers out there running NVIDIA cards that have no problems, but the majority of the graphics card/driver/operating system issues I've seen lately are NVIDIA and Windows 7.

Still, I'll see what I can do. :huh:
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#3 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:57 AM

Posted 07 March 2010 - 03:12 PM

How many applications do you have running in the back ground when you go into standby mode? If you have more applications then what your RAM can handle then this is what is causing this. When a computer hibernates all the open programs and processes get cached to RAM. When you exceed the amount of RAM it gets paged into the virtual ram which is located on your hard drive. This can cause a multitude of issues such like the one you are having. I would suggest closing down any and all applications that you do not use. If the error still comes up then the issue is due to faulty ram or misplaced ram. Remember in Dual and Triple Channel set up the ram goes in every other slot other wise you may have issues with Speed and what have you.

#4 swatpartner

swatpartner
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 07 March 2010 - 04:20 PM

Hi guys, Thanks for your replies, I really appreciate it :huh:

@keyboardNinja
I followed your steps and here is the info from BlueScreenView:

==================================================
Dump File : 030710-30186-01.dmp
Crash Time : 2010-03-07 16:58:53
Bug Check String : PROCESS_HAS_LOCKED_PAGES
Bug Check Code : 0x00000076
Parameter 1 : 00000000`00000000
Parameter 2 : fffffa80`0527d640
Parameter 3 : 00000000`00000001
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+71f00
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030710-30186-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030110-31824-01.dmp
Crash Time : 2010-03-01 13:44:04
Bug Check String : PROCESS_HAS_LOCKED_PAGES
Bug Check Code : 0x00000076
Parameter 1 : 00000000`00000000
Parameter 2 : fffffa80`04dbb8c0
Parameter 3 : 00000000`00000001
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+71f00
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030110-31824-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 022210-31902-01.dmp
Crash Time : 2010-02-22 15:27:20
Bug Check String : PROCESS_HAS_LOCKED_PAGES
Bug Check Code : 0x00000076
Parameter 1 : 00000000`00000000
Parameter 2 : fffffa80`07e18780
Parameter 3 : 00000000`00000001
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+71f00
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\022210-31902-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 022010-29842-01.dmp
Crash Time : 2010-02-20 18:22:12
Bug Check String : SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000007e
Parameter 1 : ffffffff`c0000005
Parameter 2 : fffff880`0166fa5c
Parameter 3 : fffff880`0bfb1758
Parameter 4 : fffff880`0bfb0fb0
Caused By Driver : ndis.sys
Caused By Address : ndis.sys+19be5
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\022010-29842-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

The computer was built by me, and I did use ESD protection while building it.
How do I check the device manager?
Since this problem happened a month ago, I don't know if it's because of the graphic drivers. My friend told me that it could have to do with my system harddrive, but I need to be sure what causes this problem before contacting the manufacturer for the specific component.

@cryptodan

Not many at all, got my anti virus, msn, and some other programs for the keyboard, headset, mouse etc. In idle it only use 1.8GB of 6GB installed. :huh:

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:57 AM

Posted 07 March 2010 - 04:50 PM

Not many at all, got my anti virus, msn, and some other programs for the keyboard, headset, mouse etc. In idle it only use 1.8GB of 6GB installed. :huh:



If the windows are open that also adds to the amount of ram used for hiberation. Its one reason I do not have any power save modes on for my computer.

#6 swatpartner

swatpartner
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 28 March 2010 - 09:25 AM

After almost 20 days of intensive testing I haven't solved this problem yet. I really tried to shut down as many programs as possible before going in stand by, but I still get the same BSOD or the computer powers up as I have restarted it, then i get a error message in the desktop that tries to get info or solve the problem but cant find a thing.

Any suggestion? :huh:

Edited by swatpartner, 28 March 2010 - 09:26 AM.


#7 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:57 AM

Posted 28 March 2010 - 09:45 AM

Follow this guide to uninstall your current graphics card drivers.

After a reboot, download and install this driver.

Now, do you still get the BSOD?

Which power save mode are you using? Please note the differences between sleep and hibernate.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#8 swatpartner

swatpartner
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 28 March 2010 - 11:32 AM

I'll follow your steps and post the results.

It's power saving mode (in swedish "strömsparläge").

#9 swatpartner

swatpartner
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 28 March 2010 - 12:09 PM

I'm still getting blue sreen after I power up. :huh:

It restarts, then when im in dekstop, a error message appears; "Windows has recovered from an unexpected shutdown
A problem led windows stopped working properly. You will be notified if a solution is available"

I think it's the praphic card which causes this problem, because I don't have "sleep mode" or "hibernate", just power saving mode. While uninstalling the graphic drivers, windows installs automatically after reboot drivers, and when that drivers are installed, the sleep mode appears, but when installing drivers from Nvidia, I can only find the power saving mode.

Edited by swatpartner, 28 March 2010 - 12:25 PM.


#10 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:57 AM

Posted 28 March 2010 - 12:40 PM

Hmm..."power saving mode"? Never heard it called that before....must be an NVIDIA thing.

Try uninstalling those NVIDIA drivers again, and just leave the generic ones Windows installs after the reboot. See if you still get the BSOD.

If so, try to update the driver using the Device Manager as shown in the article I linked to. Then check Windows Update to see if anything appears there.
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#11 swatpartner

swatpartner
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 29 March 2010 - 12:01 PM

I reinstalled the drivers and let the OS install them(it installed the 197.13 automatically) and I still get BSOD after powering up. Same when I tried to update through device manager. :huh:

In worst case, should I contact the store I bought the graphic card from, or Nvidia if this shows to be the card which cause this?

Edited by swatpartner, 29 March 2010 - 12:06 PM.


#12 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:57 AM

Posted 29 March 2010 - 12:52 PM

Okay, this time when you uninstall them, delete them as well. That way, Windows will not put back the ones that were there before (it will just have generic ones). I make no guarantees this will fix your problem, but it is at least something else to try.

If you contact anybody (it will probably come to this), contact NVIDIA. Keep in mind, customer service these days is not up to par... so don't have high expectations. :huh:
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web

#13 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:57 AM

Posted 29 March 2010 - 02:08 PM

Try this it will remove all traces of NVIDIA from your computer.

#14 swatpartner

swatpartner
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 29 March 2010 - 03:44 PM

I did remove all previous drivers and let windows install its own, but still BSOD. It seems to be that I will be stuck with this problem for a while. Oh well, thanks for helping, I really appreciate it. :huh:


@cryptodan

I've already tried it, I use it everytime I update drivers :huh:

Edited by swatpartner, 29 March 2010 - 04:13 PM.


#15 keyboardNinja

keyboardNinja

    Bleepin' Ninja


  • Members
  • 4,815 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh interwebz
  • Local time:02:57 AM

Posted 29 March 2010 - 04:24 PM

I guess your next option would be a new graphics card...or go whining to NVIDIA. I wouldn't expect much sympathy from them, though. Sorry.

Best of luck to you. :huh:
PICNIC - Problem In Chair, Not In Computer

Posted Image Posted Image

20 Things I Learned About Browsers and the Web




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users