Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD ntoskrnl.exe+75129


  • Please log in to reply
6 replies to this topic

#1 hristian999

hristian999

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:11 PM

Posted 17 September 2013 - 02:32 PM

Hello everyone. I am experiencing BSODs due to ntoskrnl.exe+75129. I experienced BSODs before, but they were much more frequent and they were due to  ntoskrnl.exe+751a9. However before it was a hardware failure ( I think) and I am almost shure it was because of my Athlon 255, since BSODs were much less frequent when I underclocked it to 2Ghz down from 3Ghz, and then stopped after I changed it for Phenom II 960T. Before doing that, I tested the RAM, HDD, reinstalled entirely my Windows 7. Nothing helped but underclocking my CPU and eventually changing it. However after a mouth with my new CPU, which I tested with almost all possible tests and pushed it to the limit without giving erros, I started to experience these ntoskrnl.exe+75129. Now it BSODs rarerly ( once per two days or so). I tried to find out how to examine them more in depth, but I didn`t understood how to search for the real reason standing behind these BSODs.

 

Here is Speccy report - http://speccy.piriform.com/results/0HrFteiaCDoCK3OS4CwVjzL

 

Here are the minidumps (Old& New) + Minitoolbox report - https://app.box.com/s/ntsqxuw1ia74vgt1ugu4


Edited by hristian999, 17 September 2013 - 03:20 PM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,384 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:11 AM

Posted 17 September 2013 - 05:23 PM

What Is NTOSKRNL?

 

Ntoskrnl BSODS...IMO...are the scene of the crime, the point at which Windows realizes that something has gone wrong...it is not likely to be the cause of the problem, just the point at where the problem is recognized as existing.

 

You have an inordinate number of Chrome processes running, IMO.

 

TuneUp Utilities 2013\TuneUpUtilities

 

I suggest that you remove/uninstall this from your system.  Bleeping Computer does no support the use of "regsitry cleaners/optimizers" .

 

Microsoft support policy for the use of registry cleaning utilities - http://support.microsoft.com/kb/2563254

 

Registry cleaner - Wikipedia, the free encyclopedia - http://en.wikipedia.org/wiki/Registry_cleaner

 

Registry Cleaner FAQ, PC Support - http://pcsupport.about.com/od/registry-cleaner/a/registry-cleaner-faq.htm

 

After removal of the above...I suggest that you run the chkdsk /r command...then see if your problems continue.

 

Then...do the following:

 

Please download MiniToolBox  , save it to your desktop and run it.

 

Checkmark the following checkboxes:

  List last 10 Event Viewer log

  List Installed Programs

  List Users, Partitions and Memory size.

 

Click Go and paste the content into your next post.

 

Louis


Edited by hamluis, 17 September 2013 - 06:39 PM.


#3 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:11 PM

Posted 17 September 2013 - 06:35 PM

Here is the report - MiniToolBox by Farbar  Version: 13-07-2013

Ran by Hristo (administrator) on 18-09-2013 at 02:34:39
Running from "C:\Users\Hristo\Desktop\Programs"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (09/17/2013 09:13:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 04:06:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 10:25:39 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 10:22:38 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 10:21:19 AM) (Source: KMPService.exe) (User: )
Description: Socket Error # 11001
Host not found.
 
Error: (09/17/2013 10:21:17 AM) (Source: Application Error) (User: )
Description: Faulting application name: atieclxx.exe, version: 6.14.11.1143, time stamp: 0x5154efc9
Faulting module name: atieclxx.exe, version: 6.14.11.1143, time stamp: 0x5154efc9
Exception code: 0xc0000005
Fault offset: 0x000000000002ea19
Faulting process id: 0x50c
Faulting application start time: 0xatieclxx.exe0
Faulting application path: atieclxx.exe1
Faulting module path: atieclxx.exe2
Report Id: atieclxx.exe3
 
Error: (09/16/2013 08:05:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/16/2013 08:04:09 PM) (Source: KMPService.exe) (User: )
Description: Socket Error # 11001
Host not found.
 
Error: (09/16/2013 04:42:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/16/2013 02:48:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (09/17/2013 10:24:00 AM) (Source: BugCheck) (User: )
Description: 0x0000003b (0x00000000c0000005, 0xfffff80002ce4b46, 0xfffff88006b68000, 0x0000000000000000)C:\Windows\MEMORY.DMP091713-16879-01
 
Error: (09/17/2013 10:20:59 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0x8000002a36\SystemRoot\System32\Config\SOFTWARE
 
Error: (09/16/2013 08:29:40 PM) (Source: NetBT) (User: )
Description: The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.0.100.
The computer with the IP address 192.168.0.101 did not allow the name to be claimed by
this computer.
 
Error: (09/16/2013 08:03:48 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 7:53:49 PM on ?9/?16/?2013 was unexpected.
 
Error: (09/16/2013 04:39:52 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 
Error: (09/16/2013 02:47:03 PM) (Source: BugCheck) (User: )
Description: 0x0000003b (0x00000000c0000005, 0xfffff80002c6d4cc, 0xfffff88008a6dd60, 0x0000000000000000)C:\Windows\MEMORY.DMP091613-20794-01
 
Error: (09/16/2013 02:46:58 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 2:45:05 PM on ?9/?16/?2013 was unexpected.
 
Error: (09/14/2013 03:43:37 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422
 
Error: (09/14/2013 03:43:12 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422
 
Error: (09/10/2013 11:53:50 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80070422
 
 
Microsoft Office Sessions:
=========================
Error: (09/17/2013 09:13:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 04:06:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 10:25:39 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 10:22:38 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 10:21:19 AM) (Source: KMPService.exe)(User: )
Description: Socket Error # 11001
Host not found.
 
Error: (09/17/2013 10:21:17 AM) (Source: Application Error)(User: )
Description: atieclxx.exe6.14.11.11435154efc9atieclxx.exe6.14.11.11435154efc9c0000005000000000002ea1950c01ceb37677b7c619C:\Windows\system32\atieclxx.exeC:\Windows\system32\atieclxx.exebd907e6e-1f69-11e3-a6c5-20cf30286f33
 
Error: (09/16/2013 08:05:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/16/2013 08:04:09 PM) (Source: KMPService.exe)(User: )
Description: Socket Error # 11001
Host not found.
 
Error: (09/16/2013 04:42:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/16/2013 02:48:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
CodeIntegrity Errors:
===================================
  Date: 2013-09-17 10:20:59.734
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\atikmdag.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-17 10:20:59.625
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\atikmdag.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
=========================== Installed Programs ============================
 
µTorrent (Version: 3.3.1.30003)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.174)
Adobe Reader XI (11.0.04) (Version: 11.0.04)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0328.2218.38225)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
AMD OverDrive Beta (Version: 4.2.6.0659)
AMD VISION Engine Control Center (Version: 2013.0328.2218.38225)
ANNO 1404 (Version: 1.00.0000)
Anno 1404 (Version: 1.00.0000)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (Version: 2013.0328.2218.38225)
Catalyst Control Center InstallProxy (Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (Version: 2013.0328.2218.38225)
CCC Help Chinese Standard (Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (Version: 2013.0328.2217.38225)
CCC Help Czech (Version: 2013.0328.2217.38225)
CCC Help Danish (Version: 2013.0328.2217.38225)
CCC Help Dutch (Version: 2013.0328.2217.38225)
CCC Help English (Version: 2013.0328.2217.38225)
CCC Help Finnish (Version: 2013.0328.2217.38225)
CCC Help French (Version: 2013.0328.2217.38225)
CCC Help German (Version: 2013.0328.2217.38225)
CCC Help Greek (Version: 2013.0328.2217.38225)
CCC Help Hungarian (Version: 2013.0328.2217.38225)
CCC Help Italian (Version: 2013.0328.2217.38225)
CCC Help Japanese (Version: 2013.0328.2217.38225)
CCC Help Korean (Version: 2013.0328.2217.38225)
CCC Help Norwegian (Version: 2013.0328.2217.38225)
CCC Help Polish (Version: 2013.0328.2217.38225)
CCC Help Portuguese (Version: 2013.0328.2217.38225)
CCC Help Russian (Version: 2013.0328.2217.38225)
CCC Help Spanish (Version: 2013.0328.2217.38225)
CCC Help Swedish (Version: 2013.0328.2217.38225)
CCC Help Thai (Version: 2013.0328.2217.38225)
CCC Help Turkish (Version: 2013.0328.2217.38225)
ccc-utility64 (Version: 2013.0328.2218.38225)
Delta Chrome Toolbar
Delta toolbar   (Version: 1.8.24.6)
Dota 2
Dropbox (Version: 2.0.26)
EVEREST Ultimate Edition v5.50 (Version: 5.50)
Google Chrome (Version: 29.0.1547.66)
Google Drive (Version: 1.11.4865.2530)
Google Update Helper (Version: 1.3.21.153)
Hardware sensors monitor 4.5 (Version: 4.5.3.5)
iTunes (Version: 11.0.5.5)
Kits Configuration Installer (Version: 8.59.25584)
KMP Service
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Mozilla Firefox 23.0.1 (x86 bg) (Version: 23.0.1)
MSI Afterburner 2.3.1 (Version: 2.3.1)
Mumble 1.2.3 (Version: 1.2.3)
Nexus Mod Manager (Version: 0.45.6)
Picasa 3 (Version: 3.9)
PlanetSide 2
Razer Game Booster (Version: 3.7)
SDK Debuggers (Version: 8.59.29746)
Skype™ 6.6 (Version: 6.6.106)
Speccy (Version: 1.23)
Steam (Version: 1.0.0.0)
Stronghold 3 Gold
The KMPlayer (remove only) (Version: 3.7.0.109)
TSEV Skyrim LE (Version: 2.0.0.0)
TuneUp Utilities 2013 (Version: 13.0.3020.8)
TuneUp Utilities Language Pack (en-GB) (Version: 13.0.3020.8)
Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1)
Windows Software Development Kit (Version: 8.59.29750)
Windows Software Development Kit EULA (Version: 8.59.25584)
WinRAR 4.20 (64-битова версия) (Version: 4.20.0)
WPT Redistributables (Version: 8.59.29750)
WPTx64 (Version: 8.59.29722)
 
========================= Memory info: ===================================
 
Percentage of memory in use: 19%
Total physical RAM: 8190.18 MB
Available physical RAM: 6595.55 MB
Total Pagefile: 16378.54 MB
Available Pagefile: 14477.5 MB
Total Virtual: 4095.88 MB
Available Virtual: 3970.74 MB
 
========================= Partitions: =====================================
 
1 Drive c: () (Fixed) (Total:93.65 GB) (Free:57.41 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:372.01 GB) (Free:71.87 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\HRISTO-PC
 
Administrator            Deva                     Guest                    
Hristo                   
 
 
**** End of log ****


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,384 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:11 AM

Posted 17 September 2013 - 07:06 PM

I see that you did not remove Iobit programs from your system....that's your choice.  I only suggest that such programs do not add to system effiency or alleviate problems...but they do cause problems on otherwise healthy systems.  That includes Razer Game Booster.

 

Since you have uTorrent installed, I assume (perhaps incorrectly) that you have also used it for acquiring software which may possibly reflect malware.  That risk cannot be ignored in attempting any real analysis of what might be wrong with your system.

 

You seem to have a problem with your ATI video drivers...I would uninstall current ones and then reinstall them.

 

You also seem to have a problem with Pandora processes, although such is not reflected as an installed application.  You do reflect KMP Service, which belongs to Pandora, as an install.

 

Delta Toolbar is viewed as malware by some, see Delta .

 

I can't tell you that you are infected...but I can tell you that your system displays enough indications that this may be so...that, were this my system, I would open a new topic in BC's Am I Infected Forum .

 

Louis



#5 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:11 PM

Posted 18 September 2013 - 06:37 AM

I have removed TuneUP & Razer game booster and ran chkdsk /r command. I just made this reoprt before uninstalling it. However my problem is still there. I`ve noticed that it happens only shortly after the first boot for the day and then it doesn`t BSOD. I forgot to mention that sometimes when I boot my PC it shows this message - "A new CPU has benn incert, Press F1 for default settings and so on". I don`t know if this has something to do with the BSODs.  I will now make a news post in the "Am I infected forum".


Edited by hristian999, 18 September 2013 - 07:20 AM.


#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,384 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:11 AM

Posted 18 September 2013 - 10:23 AM

Thanks, the folks in AII will assist in determining the presence or lack thereof...regarding malware :).

 

Louis


Edited by hamluis, 18 September 2013 - 11:27 AM.
Typo - Hamluis.


#7 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:01:11 PM

Posted 18 September 2013 - 11:13 AM

Thanks, the folks in AII will assist in determining the presence or lack thereof...regarding malwaare :).

 

Louis

 Thanks for helping :)






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users