Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Having BSODs ntoskrnl.exe


  • Please log in to reply
12 replies to this topic

#1 hristian999

hristian999

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 18 September 2013 - 07:36 AM

I originally posted in the Windows 7 forum, but I was redirected to this one. Here is the original topic with more detailed description of my problem  - http://www.bleepingcomputer.com/forums/t/508138/bsod-ntoskrnlexe75129/ . I had some hardware related frequent BSODs before, however they stopped after changing my Athlon 255 with Phenom 960t. Now, after one month without BSODs with my new CPU, I am experiencing some BSODs once per day after the first boot of my system.

 

Here is the .rar with the minidumps the old ones (ntoskernel.exe +751a9) and the new ones (ntoskernel.exe + 75129). - https://app.box.com/s/ntsqxuw1ia74vgt1ugu4

 

Speccy Report - http://speccy.piriform.com/results/QEAVtPvYm0knDZX1rOvYLp6

 

 

Here is the Bugcheck analysis of the latest dump.

 

 

 
Microsoft ® Windows Debugger Version 6.2.9200.20512 AMD64
Copyright © Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [C:\Users\Hristo\Desktop\DMP\091813-16863-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18205.amd64fre.win7sp1_gdr.130708-1532
Machine Name:
Kernel base = 0xfffff800`02c1e000 PsLoadedModuleList = 0xfffff800`02e616d0
Debug session time: Wed Sep 18 14:27:43.833 2013 (UTC + 3:00)
System Uptime: 0 days 0:04:46.003
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
Use !analyze -v to get detailed debugging information.
 
BugCheck 1000007E, {ffffffffc0000005, fffff80002c8bb02, fffff880031c46f8, fffff880031c3f50}
 
Probably caused by : cdrom.sys ( cdrom!RequestProcessSerializedIoctl+cdb )
 
Followup: MachineOwner
---------
 
2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002c8bb02, The address that the exception occurred at
Arg3: fffff880031c46f8, Exception Record Address
Arg4: fffff880031c3f50, Context Record Address
 
Debugging Details:
------------------
 
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
 
FAULTING_IP: 
nt!RtlpInterlockedPushEntrySList+22
fffff800`02c8bb02 4d8903          mov     qword ptr [r11],r8
 
EXCEPTION_RECORD:  fffff880031c46f8 -- (.exr 0xfffff880031c46f8)
ExceptionAddress: fffff80002c8bb02 (nt!RtlpInterlockedPushEntrySList+0x0000000000000022)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
 
CONTEXT:  fffff880031c3f50 -- (.cxr 0xfffff880031c3f50)
rax=0000000002e20001 rbx=fffffa8007f08a50 rcx=fff7fa8008251011
rdx=fffffa8006c4ad91 rsi=fffffa8007f088d0 rdi=fff7fa8008251010
rip=fffff80002c8bb02 rsp=fffff880031c4930 rbp=0000000000000000
 r8=fffffa8006c4ad90  r9=fffff88000e62be0 r10=fffffa8007f08a50
r11=fff7fa8008251010 r12=fffffa80082510ec r13=fffffa80079e4980
r14=fffffa8008251001 r15=fffffa8007d67a40
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!RtlpInterlockedPushEntrySList+0x22:
fffff800`02c8bb02 4d8903          mov     qword ptr [r11],r8 ds:002b:fff7fa80`08251010=????????????????
Resetting default scope
 
CUSTOMER_CRASH_COUNT:  1
 
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
 
PROCESS_NAME:  System
 
CURRENT_IRQL:  0
 
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
 
EXCEPTION_PARAMETER1:  0000000000000000
 
EXCEPTION_PARAMETER2:  ffffffffffffffff
 
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ecb100
GetUlongFromAddress: unable to read from fffff80002ecb1c0
 ffffffffffffffff 
 
FOLLOWUP_IP: 
cdrom!RequestProcessSerializedIoctl+cdb
fffff880`00cd7503 4c8d9c24c0000000 lea     r11,[rsp+0C0h]
 
BUGCHECK_STR:  0x7E
 
LAST_CONTROL_TRANSFER:  from fffff88000e6b203 to fffff80002c8bb02
 
STACK_TEXT:  
fffff880`031c4930 fffff880`00e6b203 : fffffa80`08251020 00000000`00000000 fffffa80`07f088d0 fffffa80`08251001 : nt!RtlpInterlockedPushEntrySList+0x22
fffff880`031c4940 fffff880`00e6afe9 : fffffa80`08251020 00000000`00000001 00000000`00000001 fffff880`00e644bc : Wdf01000!FxRequestFromLookaside::SelfDestruct+0x8b
fffff880`031c4970 fffff880`00e6c405 : fffffa80`08251000 fffffa80`08251020 fffffa80`079e4980 fffffa80`082510ec : Wdf01000!FxObject::FinalRelease+0x35
fffff880`031c49d0 fffff880`00e6b34b : fffffa80`08251020 fffffa80`08251020 fffffa80`07fdc9d0 00000000`00000000 : Wdf01000!FxRequest::Release+0x65
fffff880`031c4a20 fffff880`00e6bec0 : 00000000`00000000 fffffa80`07fdc9d0 00000000`00000000 00000000`00000000 : Wdf01000!FxObject::DeleteEarlyDisposedObject+0x107
fffff880`031c4a80 fffff880`00e6b819 : 00000000`00000000 fffff880`00000001 fffffa80`07fdc9d0 fffffa80`08251020 : Wdf01000!FxRequest::CompleteInternal+0x680
fffff880`031c4b10 fffff880`00cd7503 : fffffa80`08251020 00000000`00000000 0000057f`f7daefd8 00000000`00000000 : Wdf01000!imp_WdfRequestCompleteWithInformation+0x189
fffff880`031c4b70 fffff880`00e6a13e : 00000000`00000000 00000000`00000000 fffffa80`07f75020 fffff800`02e392d8 : cdrom!RequestProcessSerializedIoctl+0xcdb
fffff880`031c4c50 fffff800`02f8baf3 : fffffa80`07fd1c70 00000000`00000000 fffffa80`06a53b50 fffffa80`06a53b50 : Wdf01000!FxWorkItem::WorkItemThunk+0x10a
fffff880`031c4c80 fffff800`02c9d261 : fffff800`02e39200 fffff800`02f8ba01 fffffa80`06a53b00 fffffa80`06a53b50 : nt!IopProcessWorkItem+0x23
fffff880`031c4cb0 fffff800`02f31bae : 00000000`00000000 fffffa80`06a53b50 00000000`00000080 fffffa80`06a0cb30 : nt!ExpWorkerThread+0x111
fffff880`031c4d40 fffff800`02c848c6 : fffff880`02f64180 fffffa80`06a53b50 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031c4d80 00000000`00000000 : fffff880`031c5000 fffff880`031bf000 fffff880`031c4730 00000000`00000000 : nt!KxStartSystemThread+0x16
 
 
SYMBOL_STACK_INDEX:  7
 
SYMBOL_NAME:  cdrom!RequestProcessSerializedIoctl+cdb
 
FOLLOWUP_NAME:  MachineOwner
 
MODULE_NAME: cdrom
 
IMAGE_NAME:  cdrom.sys
 
DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79298
 
STACK_COMMAND:  .cxr 0xfffff880031c3f50 ; kb
 
FAILURE_BUCKET_ID:  X64_0x7E_cdrom!RequestProcessSerializedIoctl+cdb
 
BUCKET_ID:  X64_0x7E_cdrom!RequestProcessSerializedIoctl+cdb
 
Followup: MachineOwner
---------
 

 



BC AdBot (Login to Remove)

 


#2 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:59 PM

Posted 18 September 2013 - 08:24 AM

Hi

 

While you are waiting for help from a Malware removal expert, please uninstall daemon tools as a test. At least one or more blue screens are caused by virtual CD drivers used by this program.

fffff880`031c4298  fffff880`0104de0aUnable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys

After uninstalling "Daemon tools" and any other virtual drive program, download and run SPTD removal tool from the below link.

 

http://www.duplexsecure.com/download/SPTDinst-v183-x64.exe

 

Run the tool and press the Uninstall button to remove SPTD properly.

 

sptd.jpg 

 

Also follow any instructions given by a malware helper.


Edited by Anshad Edavana, 18 September 2013 - 08:24 AM.


#3 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 18 September 2013 - 10:31 AM

Daemon tools and SPTD uninstalled.  Here is also a minitoolbox report with Devices, Programs, Partitions and Last 10 events.

 

MiniToolBox by Farbar  Version: 13-07-2013
Ran by Hristo (administrator) on 18-09-2013 at 18:29:02
Running from "C:\Users\Hristo\Desktop\Programs"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (09/18/2013 04:59:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 04:50:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: Hristo-PC)
Description: Unable to read the performance counter strings defined for the 009 language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (09/18/2013 04:50:11 PM) (Source: Microsoft-Windows-LoadPerf) (User: Hristo-PC)
Description: Unable to read the performance counter strings defined for the 009 language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (09/18/2013 04:50:09 PM) (Source: Microsoft-Windows-LoadPerf) (User: Hristo-PC)
Description: Unable to read the performance counter strings defined for the 009 language ID. The first DWORD in the Data section contains the Win32 error code.
 
Error: (09/18/2013 04:40:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 02:30:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 02:24:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 03:08:06 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 09:13:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 04:06:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (09/18/2013 04:59:08 PM) (Source: Service Control Manager) (User: )
Description: The Microsoft Network Inspection service failed to start due to the following error: 
%%1053
 
Error: (09/18/2013 04:59:08 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Microsoft Network Inspection service to connect.
 
Error: (09/18/2013 04:59:08 PM) (Source: Microsoft Antimalware) (User: )
Description: %%860 Real-Time Protection feature has encountered an error and failed.
 
Feature: %%886
 
Error Code: 0x8007041d
 
Error description: The service did not respond to the start or control request in a timely fashion. 
 
Reason: %%892
 
Error: (09/18/2013 02:28:34 PM) (Source: BugCheck) (User: )
Description: 0x0000007e (0xffffffffc0000005, 0xfffff80002c8bb02, 0xfffff880031c46f8, 0xfffff880031c3f50)C:\Windows\MEMORY.DMP091813-16863-01
 
Error: (09/18/2013 03:06:36 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 2:40:42 AM on ?9/?18/?2013 was unexpected.
 
Error: (09/17/2013 10:24:00 AM) (Source: BugCheck) (User: )
Description: 0x0000003b (0x00000000c0000005, 0xfffff80002ce4b46, 0xfffff88006b68000, 0x0000000000000000)C:\Windows\MEMORY.DMP091713-16879-01
 
Error: (09/17/2013 10:20:59 AM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0x8000002a36\SystemRoot\System32\Config\SOFTWARE
 
Error: (09/16/2013 08:29:40 PM) (Source: NetBT) (User: )
Description: The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.0.100.
The computer with the IP address 192.168.0.101 did not allow the name to be claimed by
this computer.
 
Error: (09/16/2013 08:03:48 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 7:53:49 PM on ?9/?16/?2013 was unexpected.
 
Error: (09/16/2013 04:39:52 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 
 
Microsoft Office Sessions:
=========================
Error: (09/18/2013 04:59:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 04:50:18 PM) (Source: Microsoft-Windows-LoadPerf)(User: Hristo-PC)
Description: 009120200000000000000AF000000
 
Error: (09/18/2013 04:50:11 PM) (Source: Microsoft-Windows-LoadPerf)(User: Hristo-PC)
Description: 009120200000000000000AF000000
 
Error: (09/18/2013 04:50:09 PM) (Source: Microsoft-Windows-LoadPerf)(User: Hristo-PC)
Description: 009120200000000000000AF000000
 
Error: (09/18/2013 04:40:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 02:30:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 02:24:58 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/18/2013 03:08:06 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 09:13:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (09/17/2013 04:06:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
CodeIntegrity Errors:
===================================
  Date: 2013-09-17 10:20:59.734
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\atikmdag.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
  Date: 2013-09-17 10:20:59.625
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\atikmdag.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 
=========================== Installed Programs ============================
 
µTorrent (Version: 3.3.1.30003)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.174)
Adobe Reader XI (11.0.04) (Version: 11.0.04)
AMD Accelerated Video Transcoding (Version: 13.20.100.30905)
AMD Catalyst Control Center (Version: 2013.0905.312.3832)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0905.312.3832)
AMD Media Foundation Decoders (Version: 1.0.80905.0331)
AMD OverDrive Beta (Version: 4.2.6.0659)
AMD Wireless Display v3.0 (Version: 1.0.0.14)
Anno 1404 (Version: 1.00.0000)
ANNO 1404 (Version: 1.00.0000)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Bonjour (Version: 3.0.0.10)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (Version: 2013.0905.312.3832)
Catalyst Control Center InstallProxy (Version: 2013.0905.312.3832)
Catalyst Control Center Localization All (Version: 2013.0905.312.3832)
CCC Help Chinese Standard (Version: 2013.0905.0311.3832)
CCC Help Chinese Traditional (Version: 2013.0905.0311.3832)
CCC Help Czech (Version: 2013.0905.0311.3832)
CCC Help Danish (Version: 2013.0905.0311.3832)
CCC Help Dutch (Version: 2013.0905.0311.3832)
CCC Help English (Version: 2013.0905.0311.3832)
CCC Help Finnish (Version: 2013.0905.0311.3832)
CCC Help French (Version: 2013.0905.0311.3832)
CCC Help German (Version: 2013.0905.0311.3832)
CCC Help Greek (Version: 2013.0905.0311.3832)
CCC Help Hungarian (Version: 2013.0905.0311.3832)
CCC Help Italian (Version: 2013.0905.0311.3832)
CCC Help Japanese (Version: 2013.0905.0311.3832)
CCC Help Korean (Version: 2013.0905.0311.3832)
CCC Help Norwegian (Version: 2013.0905.0311.3832)
CCC Help Polish (Version: 2013.0905.0311.3832)
CCC Help Portuguese (Version: 2013.0905.0311.3832)
CCC Help Russian (Version: 2013.0905.0311.3832)
CCC Help Spanish (Version: 2013.0905.0311.3832)
CCC Help Swedish (Version: 2013.0905.0311.3832)
CCC Help Thai (Version: 2013.0905.0311.3832)
CCC Help Turkish (Version: 2013.0905.0311.3832)
ccc-utility64 (Version: 2013.0905.312.3832)
Dota 2
Dropbox (Version: 2.0.26)
EVEREST Ultimate Edition v5.50 (Version: 5.50)
Google Chrome (Version: 29.0.1547.66)
Google Drive (Version: 1.11.4865.2530)
Google Update Helper (Version: 1.3.21.153)
Hardware sensors monitor 4.5 (Version: 4.5.3.5)
iTunes (Version: 11.0.5.5)
Kits Configuration Installer (Version: 8.59.25584)
KMP Service
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Mozilla Firefox 23.0.1 (x86 bg) (Version: 23.0.1)
MSI Afterburner 2.3.1 (Version: 2.3.1)
Mumble 1.2.3 (Version: 1.2.3)
Nexus Mod Manager (Version: 0.45.6)
Picasa 3 (Version: 3.9)
PlanetSide 2
SDK Debuggers (Version: 8.59.29746)
Skype™ 6.6 (Version: 6.6.106)
Speccy (Version: 1.23)
Steam (Version: 1.0.0.0)
The KMPlayer (remove only) (Version: 3.7.0.109)
TSEV Skyrim LE (Version: 2.0.0.0)
Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1)
Windows Software Development Kit (Version: 8.59.29750)
Windows Software Development Kit EULA (Version: 8.59.25584)
WinRAR 4.20 (64-битова версия) (Version: 4.20.0)
WPT Redistributables (Version: 8.59.29750)
WPTx64 (Version: 8.59.29722)
 
========================= Devices: ================================
 
 
========================= Memory info: ===================================
 
Percentage of memory in use: 26%
Total physical RAM: 8190.18 MB
Available physical RAM: 6039.83 MB
Total Pagefile: 16378.54 MB
Available Pagefile: 13658.86 MB
Total Virtual: 4095.88 MB
Available Virtual: 3969.79 MB
 
========================= Partitions: =====================================
 
1 Drive c: () (Fixed) (Total:93.65 GB) (Free:57.59 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:372.01 GB) (Free:73.86 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\HRISTO-PC
 
Administrator            Deva                     Guest                    
Hristo                   
 
 
**** End of log ****


#4 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:59 PM

Posted 18 September 2013 - 11:58 AM

Hi

 

Please uninstall MSI Afterburner 2.3.1 until the issue is solved. Although there is no direct relation with your issue, overclocking softwares may contribute to system crashes and thus recommended to keep uninstalled during troubleshooting.

 

How the system works now ?


Edited by Anshad Edavana, 18 September 2013 - 11:58 AM.


#5 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 18 September 2013 - 02:30 PM

Hi

 

Please uninstall MSI Afterburner 2.3.1 until the issue is solved. Although there is no direct relation with your issue, overclocking softwares may contribute to system crashes and thus recommended to keep uninstalled during troubleshooting.

 

How the system works now ?

I used it for FPS monitoring, however I uninstalled it now. Should I uninstall and AMD Overdrive, which I also used for monitoring ? I still can`t tell if the system is OK, since these BSODs happen really rare ( once per day at most). I will post again if another BSOD happens. 


Edited by hristian999, 18 September 2013 - 04:35 PM.


#6 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:59 PM

Posted 18 September 2013 - 10:56 PM

Hi

 

It is recommended to uninstall all overclocking softwares, AMD overdrive too. Keep us updated after a couple of days.



#7 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 25 September 2013 - 08:58 AM

Hello, after reinstalling ATI drivers completely I had 4 days without BSODs. Now they started again, but now with different drivers and ntoskernel.exe files. Here are the minidumps. - https://app.box.com/s/99r967ogc5l725o0ji4s


Edited by hristian999, 25 September 2013 - 09:14 AM.


#8 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 26 September 2013 - 03:42 AM

Got another one, this time it was again ntoskernel.exe but with different number again. Every BSOD is from some random driver or ntoskernel.exe+(different numbers). Help me please, this is going crazy, I`ve got 2 or 3 Bsods one after another all from diffrent drivers.



#9 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 26 September 2013 - 08:47 AM

I`ve just found out that it is a hardware problem, after running a few stability test, which crashed at the 4th minute. Thanks to anyone who tried to help me.



#10 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:59 PM

Posted 26 September 2013 - 10:53 PM

Hi

 

I was not able to reply in time due to lack of time. Do you identify the failing hardware party ?. If not, please run a memory diagnostic first as it is the most commonly failing hardware in a system.

 

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html



#11 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 27 September 2013 - 06:39 AM

Hi

 

I was not able to reply in time due to lack of time. Do you identify the failing hardware party ?. If not, please run a memory diagnostic first as it is the most commonly failing hardware in a system.

 

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

Hi
Thanks for the advice. I already tested hard drive and RAM, I had some problems before with BSODs, which were temporary resolved by reducing the CPU Freq. However they continued, so i though that my Athlon 255 was faulty and  bought a Phenom 960T. Then I`ve got 1 month without problems. Now, however it crashes on the 4th minute after running Everest stabilty test, set only to stress the CPU (without the RAM). I will now place my old Athlon 255 and if it crashes again like that I will proceed to buying new mobo. Any tips for diagnosing my mobo ( or CPU) are welcome.


Edited by hristian999, 27 September 2013 - 06:42 AM.


#12 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:59 PM

Posted 28 September 2013 - 08:36 AM

Hi

 

Unfortunately there is no foolproof way exist to test a motherboard or a CPU. In case of CPU, you can try Prime95 which is often helpful in finding failed cores. Please read the guide below.

 

http://www.sevenforums.com/tutorials/100352-hardware-stress-test-prime95.html

 

What you need to run is the Small FFT test for two hours with round of checking enabled.

 

87940d1280318100-hardware-stress-test-pr



#13 hristian999

hristian999
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:29 PM

Posted 01 October 2013 - 06:19 AM

Well I`ve tested with both processors with Prime 95, there were no faulty cores or BSODS. It crashes only when I start a stability test from everest with the Phenom 960T, however this processor was tested on other boards 1 month before I bougth it and there weren`t any problems, it`s also in warranty. The BSODs kind of stop with both processors for some time and then start like 2 or 3 one after another for a short period of time and then stop again.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users