Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Multiple various BSOD's occurring randomly


  • Please log in to reply
19 replies to this topic

#1 mck620

mck620

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 01 December 2011 - 01:02 AM

I have a Gateway desktop running Vista 32bit which has been experiencing random BSOD's. The errors occur randomly, no specific type of use or programs seem to trigger them, and can happen 5 minutes after boot or after several hours. The PC had been factory software reset in August for similar issues, they stopped, then started again recently. All possible driver and BIOS updates have been applied, and I have run extensive hardware diagnostics but there have been no failures. I have also disabled all startup items and non-microsoft services. As far as I have observed the PC has crashed in all modes except Safe without networking. Any help or suggestions would be greatly appreciated, this has become very frustrating.

BSOD Info:


==================================================
Dump File : Mini112811-01.dmp
Crash Time : 11/28/2011 12:03:08 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x8b2400ac
Parameter 2 : 0x00000000
Parameter 3 : 0x8a2959bb
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+98379
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18484 (vistasp2_gdr.110617-0336)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+98379
Stack Address 1 : ntkrnlpa.exe+4ddd4
Stack Address 2 : Ntfs.sys+889bb
Stack Address 3 : ntkrnlpa.exe+44976
Computer Name :
Full Path : C:\Windows\Minidump\Mini112811-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 148,248
==================================================

==================================================
Dump File : Mini112311-01.dmp
Crash Time : 11/23/2011 1:50:58 PM
Bug Check String : DRIVER_CORRUPTED_EXPOOL
Bug Check Code : 0x000000c5
Parameter 1 : 0x00000000
Parameter 2 : 0x00000002
Parameter 3 : 0x00000001
Parameter 4 : 0x81f3182a
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+4dfd9
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18484 (vistasp2_gdr.110617-0336)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+4dfd9
Stack Address 1 : ntkrnlpa.exe+ee82b
Stack Address 2 : ntkrnlpa.exe+ed858
Stack Address 3 : ntkrnlpa.exe+20b68d
Computer Name :
Full Path : C:\Windows\Minidump\Mini112311-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 147,408
==================================================

==================================================
Dump File : Mini112011-01.dmp
Crash Time : 11/20/2011 10:05:46 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x96d18fef
Parameter 3 : 0x816c5bac
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+c8fef
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Processor : 32-bit
Crash Address : win32k.sys+c8fef
Stack Address 1 : win32k.sys+c9120
Stack Address 2 : win32k.sys+c8603
Stack Address 3 : win32k.sys+a407f
Computer Name :
Full Path : C:\Windows\Minidump\Mini112011-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 147,632
==================================================

==================================================
Dump File : Mini110411-01.dmp
Crash Time : 11/4/2011 7:14:53 AM
Bug Check String : BAD_POOL_CALLER
Bug Check Code : 0x000000c2
Parameter 1 : 0x00000099
Parameter 2 : 0x8533905c
Parameter 3 : 0x00000000
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+cdb3f
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18484 (vistasp2_gdr.110617-0336)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+cdb3f
Stack Address 1 : ntkrnlpa.exe+2eb5a7
Stack Address 2 : ntkrnlpa.exe+d6f21
Stack Address 3 : ntkrnlpa.exe+ed53a
Computer Name :
Full Path : C:\Windows\Minidump\Mini110411-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 146,848
==================================================

BC AdBot (Login to Remove)

 


#2 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 01 December 2011 - 01:52 AM

As far as I have observed the PC has crashed in all modes except Safe without networking.

That tends to point the finger at a networking component. Let's get some information to work with ...


:step1: Please follow the instructions: BSOD Posting Instructions: Windows 7 - Vista

... with one exception in the following line:

"4. Zip up the entire output folder + PERFMON and attach the zip file to your next post."

The BC forums will allow a total attachment size of only 512 kb (and what you need to attach will exceed this limit). Please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file. I will have a look at the contained information and see if I can shed some light on your BSOD issue.

See the suggestions in the following links for recommendations on file sharing websites:
  • http://lifehacker.com/388284/best-online-file-sharing-services
  • http://www.hongkiat.com/blog/15-great-free-online-file-sharing-alternatives/
  • http://www.smashingapps.com/2008/08/28/5-best-free-file-hosting-services-to-store-your-files.html

:step2: Please Publish a Snapshot using Speccy, and post a link to it in this thread.
  • It is a convenient and accurate way of providing us with details of your computer specifications.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#3 mck620

mck620
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 01 December 2011 - 03:43 PM

Zip File

Speccy


OS - Vista
x86 (32-bit)
· What was original installed OS on system? Always same version
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? OEM
· Age of system (hardware) - approx 4.5 yrs
· Age of OS installation - have you re-installed the OS? Factory OS recovery performed in August 2011


· System Manufacturer : Gateway
· Exact model number GT5644e

Thanks in advance for any help you can provide

#4 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 01 December 2011 - 04:58 PM

Thanks: I've got that.

Did you download autoruns.exe and have it in the Documents folder, along with BSOD_Windows7_Vista_v2.64_jcgriff2_.exe? You need to have both files in the same place.

When you run the file collecting application, it will also run autoruns.exe (you don't need to run it manually) and collect the report. I don't see any report from autoruns.

Thu 12/01/2011 15:09:33.86 Skipping autoruns, file not found


AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 mck620

mck620
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 01 December 2011 - 10:18 PM

Ran it again, not sure what happened the first time.

Zip file

#6 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 02 December 2011 - 01:01 AM

Thanks: I have your new upload which now includes the output from autoruns.exe.

While I am having a look at the information I would like you to run tests on both system memory and the hard drive.

Test the memory (RAM).

Memory needs to be tested outside of Windows, so memtest86+ is run from a bootable CD.

:step1: To make a bootable CD with memtest86+:
  • Extract the downloaded zip file:
    • In Windows XP, right-click on the zip file and choose Extract all.
      The contents of the zip file (the .ISO image file) will be extracted to a folder in the same location as your zip file.
  • Burn the .ISO image to CD: If you do not already have a suitable burning program for writing .ISO images to disc ...
    • Download and install ImgBurn.
    • Ensure that you UN-check the box agreeing to install the Ask toolbar during the installation.
    • Place a new (blank) CD disc in the drive tray.
    • Choose Write image file to disc.
    • Under Source, click on the Browse button: Navigate to and select the .ISO file that you wish to burn.
    • Place a check-mark in the box beside Verify.
  • Click Posted Image
  • When the CD has been burned and verified as successful, it will be bootable.

:step2: Boot from the newly created CD.
  • You may need to configure BIOS or the Boot Menu to boot first from the CD.
  • memtest86+ will begin running automatically: You need do nothing else at this time.
  • Allow memtest86+ to run un-interrupted.
See the screenshots in this informative link: Diagnose with Memtest86+

There MUST be NO errors what-so-ever:
  • If you see an error, stop the test.
  • Then proceed to test each stick of RAM separately to sort the good from the bad.
A minimum test for some confidence in the result, should be 7 full passes (each "pass" is a series of different types of tests), with NO errors.
  • Allow memtest86+ to run for 24 hours for maximum confidence in the test result.
memtest86+ will continue running until you stop it:
  • Press the <ESCAPE> key to re-boot the computer, removing the memtest86+ CD.
Please run for at least 24 hours (if possible) if no errors are reported before that time, and let us know the result, along with how long you ran the test.
================

Test the hard drive with the manufacturer's diagnostic utility.
  • Hitachi HDT725040VLA
Download the Drive Fitness Test, CD image from Hitachi's Downloads page.
  • http://www.hitachigst.com/support/downloads/#DFT
If you do not already have a suitable burning program for writing .ISO images to disc ...
  • Download and install ImgBurn.
    Ensure that you UN-check the box agreeing to install the Ask toolbar during the installation.
  • Place a new (blank) CD disc in the drive tray.
  • Choose Write image file to disc.
    • Under Source, click on the Browse button: Navigate to and select the .ISO file that you wish to burn.
    • Place a check-mark in the box beside Verify.
  • Click Posted Image

    When the CD has been burned and verified as successful, it will be bootable.
Run the Quick/Short test and then the Extended/Long test.

Please post the results.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#7 mck620

mck620
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 02 December 2011 - 01:19 PM

Hello again. Sorry I probably should have included a list of tests I had run already in my last post. I had already run Memtest86+ for 20 passes with no errors. I have also run PC Doctor general hardware diagnostics and DFT, both showed no hardware failures. Sorry for not providing this information in advance.

#8 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 02 December 2011 - 02:56 PM

I had already run Memtest86+ for 20 passes with no errors. I have also run PC Doctor general hardware diagnostics and DFT, both showed no hardware failures.

Very good.

Please run DRIVER VERIFIER - Windows 7 & Vista.

If your system BSOD’s under the Driver Verifier, retrieve the dump file from c:\windows\minidump, zip it up & attach to your next post.


Leave the machine running for 36 hours: Whether you are using it or not, doesn't matter. Please also read the instructions about viewing the status, and about turning off Driver Verifier when finished with it.

Edit: I have seen no evidence of an antivirus program being installed and running on the system. Is that correct?

Edited by AustrAlien, 02 December 2011 - 03:12 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#9 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 03 December 2011 - 06:57 AM

You are using a USB connected keyboard and mouse.

I see it being reported in your event logs that the driver for PS/2 keyboard and mouse is not being loaded.

Do you have or can you borrow a PS/2 keyboard and mouse? With the computer and all power OFF, connect the PS/2 keyboard and mouse (you can leave the USB keyboard and mouse connected). Start the computer. Do the PS/2 connected keyboard and mouse work or not when Windows is running?
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#10 mck620

mck620
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 04 December 2011 - 09:25 AM

I apologize for the delayed response. Driver verifier did not result in a BSOD. There was antivirus software installed (Kaspersky) but I removed it after running a full scan so that it would not interfere during diagnostics. Yes I am using usb keyboard and mouse. I have done as you suggested and hooked up a PS/2 keyboard and mouse and they are functioning normally.

Another thing I have noticed is when leaving the PC on for long periods of time, when it goes into sleep mode and I attempt to wake it back up it will sometimes not output video and a hard restart is necessary. This seems to be intermittant.

#11 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 05 December 2011 - 04:21 AM

... I have noticed ... when leaving the PC on for long periods of time, when it goes into sleep mode and I attempt to wake it back up it will sometimes not output video and a hard restart is necessary. This seems to be intermittant.

That sounds like an interesting bit of info to know: Thank you. I will keep that in mind while wading through your event logs trying to understand what was happening at the time they were recorded. That will most likely explain some of the start-ups without any sign of a previous shut-down happening.

I admit to NOT being a fan of the use of any sleep or hibernation facility that might be provided by a Windows system ... unless perhaps there is a good reason for using it on laptop. It is far too often the source of problems that could reasonably be avoided in the first place.

You have a desktop PC: There is no valid reason that I am aware of for using either sleep or hibernation. Please disable/turn off/stop using sleep and hibernation modes. (If you need assistance with confirming that these are disabled, let me know: I don't have a VISTA system to work on, but I do have a Windows 7 installation that will be similar.) I don't currently have any specific reason for suggesting that you do this ... but I will be sure to be looking for one in your event logs! Let me know if you notice any difference in the occurrence (or lack thereof) of BSOD events.

Summary of minidumps:
10 dumps: 20th August - 28th November

==================================================
Dump File : Mini112811-01.dmp
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
==================================================
Dump File : Mini112311-01.dmp
Bug Check String : DRIVER_CORRUPTED_EXPOOL
Bug Check Code : 0x000000c5
==================================================
Dump File : Mini112011-01.dmp
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
==================================================
Dump File : Mini110411-01.dmp
Bug Check String : BAD_POOL_CALLER
Bug Check Code : 0x000000c2
==================================================
Dump File : Mini082711-02.dmp
Bug Check String : NTFS_FILE_SYSTEM
Bug Check Code : 0x00000024
==================================================
Dump File : Mini082711-01.dmp
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
==================================================
Dump File : Mini082211-02.dmp
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
==================================================
Dump File : Mini082111-01.dmp
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
==================================================
Dump File : Mini082011-02.dmp
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
==================================================
Dump File : Mini082011-01.dmp
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
==================================================


AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#12 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 06 December 2011 - 05:12 PM


I had already run Memtest86+ for 20 passes with no errors. I have also run PC Doctor general hardware diagnostics and DFT, both showed no hardware failures.

Very good.

Not good enough, apparently. Opinion is firming up that we are looking for a hardware problem, most likely memory. More thorough testing of the memory (RAM) in an attempt to isolate and pinpoint the problem is warranted at this stage.

Evidence for drawing the above conclusion:

:step1: Comment by jcgriff2: "Looks like this will likely be hardware related. BSODs began <24 hrs of Vista reinstall. Also - notice one of the dumps = -0- bytes = another indicator of h/w failure."


:step2: Event[9690]:

Log Name: Application
Source: Windows Error Reporting
Date: 2011-08-27T07:18:50.000
Fault bucket PAGE_NOT_ZERO, type 0
Event Name: BlueScreen
Response: http://wer.microsoft.com/responses/resredir.aspx?sid=16220&Bucket=PAGE_NOT_ZERO&ID=390d8f0b-a84c-41b9-9ab3-
C:\WINDOWS\Minidump\Mini082711-01.dmp
"*** Memory manager detected 1 instance(s) of page corruption, target is likely to have memory corruption."

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02009414

Please follow the instructions that I posted earlier under Test the memory (RAM).
  • Test each stick of RAM individually (one stick at a time) in the #1 slot (slot closest to the CPU) for 24 hours, unless an error is reported sooner than that.
  • In the event that no error is found in any of the RAM sticks, then it will be necessary to test each of the other slots in the motherboard ... in the same manner.
    I realise that you have 4 sticks of RAM, and 4 mobo slots: This could be a long and tedious job!

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#13 mck620

mck620
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 08 December 2011 - 05:05 PM

Proceeding with your suggestion. Might be a little while till I respond with the results though based how soon (if any) errors occur. Thanks.

#14 AustrAlien

AustrAlien

    Inquisitor


  • BC Advisor
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:02:18 AM

Posted 08 December 2011 - 05:16 PM

Understood.

Please keep in touch and let us know the results of your testing.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#15 mck620

mck620
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:18 AM

Posted 15 December 2011 - 03:06 PM

So just an update on my progress. I have tested all 4 sticks in the first slot for 24hrs each and have produced no errors. I am currently in the process of testing each slot individually, by later today I will be on slot 3 of the 4. Will post with results when complete.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users