Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Continual BSODs & Freezes. No obvious cause.


  • Please log in to reply
19 replies to this topic

#1 Jedzi

Jedzi

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 18 November 2015 - 04:12 AM

 

I'm having a nightmare with my laptop, a 5 1/2 year old Toshiba running Windows 7.

Two weeks ago, for no obvious reason it started to crash every ten minutes or so. I've tried various things but with no joy.  In the end yesterday I decided to re-install Windows ... which hasn't stopped the crashes (although I've now lost my wireless adapter, but I'll solve that one later).
 

It either:

  • BSODs

  • Just restarts

  • Freezes with a weird pattern on the screen (screen shot attached)

 

A few other details:

  • It has never fallen over while I'm in Safe Mode

  • Nothing new has been installed or changed that I'm aware of.

  • The laptop lasts between 1 minute and up to about 10 minutes before falling over.

  • So far as I know the video driver is up to date.

  • A Malwarebytes scan was clear

  • Chkdsk was clear

I haven't been able to run Perfmon from a command line, I get the message "The system cannot find the path specified."  I've attached the other log file, as per the posting instructions.

The system specs are:
OS: Windows 7 64 bit
OEM or Retail: Retail
Laptop age: 5 1/2 years
6 months since Windows 7 was last reinstalled
C
PU: Intel® Pentium® Processor T4400  Clock speed : 2.20 GHz
Video Card: Mobile Intel® GMA 4500M  (It's shown as the 'Graphics adaptor' in the specs, apologies, but I'm not sure if it's the same thing)
Toshiba 
Satellite L500-1WG
Laptop

Attached Files



BC AdBot (Login to Remove)

 


#2 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:34 PM

Posted 21 November 2015 - 03:48 PM

Hi Jedzi & Welcome to the forums ^_^,

Sorry for the delayed response. There are not many people in BSOD Analysis :(

Anyways, I have analysed your dump files and below has been provided an analysis of the latest dump file for informative purposes :-
 
**************************Wed Nov 18 04:11:44.808 2015 (UTC + 5:30)**************************
Loading Dump File [C:\SysnativeBSODApps\111715-19531-01.dmp]

Windows 7 Kernel Version 7600 MP (2 procs) Free x64

Missing Windows 7 Service Pack 1

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255

System Uptime: 0 days 0:01:07.806

Probably caused by : win32k.sys ( win32k!CreateXlateObject+17b )

BugCheck 50, {fffff20180001c40, 1, fffff960000e835b, 7}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]

Arguments: 
Arg1: fffff20180001c40, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff960000e835b, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000007, (reserved)
BUGCHECK_STR:  0x50

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  explorer.exe

FAILURE_BUCKET_ID:  X64_0x50_VRF_win32k!CreateXlateObject+17b

  BIOS Version                  V1.90

  BIOS Release Date             12/17/2009

  Manufacturer                  TOSHIBA

  Product Name                  Satellite L500

  Baseboard Product             KSWAA

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Now, as per the other analysis on other dump files, there is a chance that there has been a hardware failure. There are lots of errors related to the Memory being the culprit.
The reason why the system doesn't fail in Safe Mode in your case might be because of the fact that Windows loads up the very basic drivers and uses minimal resources in order to boot. The lower resource utilization might not be stressing your hardware enough in order to generate an erroneous behavior.

I also see Driver Verifier running in the last 2 dump files. Did you turn this on? In any case, please disable it till I ask for it. Enter the below command in an administrator command (Works from Safe Mode as well) -
verifier.exe /reset 

When you start the laptop, do you hear the exhaust fan working? I mean do you feel it rotating or do you feel air coming out of the exhaust vent?

Also, perform the below hardware diagnostics -
http://carrona.org/hwdiag.html

I would suggest you to start with the FurMark diagnostic test first. While performing the test (Furmark & Prime95), please make sure that you monitor the temperature using the below free utility -
http://www.alcpu.com/coretemp

Also, perform the Intel Burn Test using the below guide -
http://www.xtremesystems.org/forums/showthread.php?197835-IntelBurnTest-The-new-stress-testing-program


Let me know how it goes ^_^

-Pranav

Edited by blueelvis, 21 November 2015 - 03:49 PM.

Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#3 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 23 November 2015 - 04:53 AM


Thanks very much for your suggestions.  I've run through all of them:

1.  I ran Memtest a couple of days ago.  It did 8 passes with no errors.

2.  When I try & run Furmark as I get the following error: "Furmark requires an OpenGl 2.0 compliant graphics controller.  Startup failed.  NVidia Geforce 6 and higher (with the latest Forceware drivers) or ATI Radeo X1000 and higher (with the latest Catalyst drivers) are good choice."

3.  I think I've turned Verifier off, at least I've followed your instructions although I did get a message saying that "No settings have been changed".

4.  I can definitely hear & feel the fan working. I can hear it getting louder the more the laptop's working, for example when I'm using Prime95 and the temperature gets up to 74 deg C I can hear it getting louder again. 

6.  As I've already run 8 passes of Memtest, I ran Prime 95 taking the Small FFTs option.

7.  The first time I started running Prime95 it ran fine for half an hour, then the system went to sleep as I'd forgotten to change the power setting.  I resumed Windows and the test restarted.  After about 10 minutes Worker #2 got an error, which I think was "rounding was 0.5 less than 0.4".  I immediately tried to get a screenshot and then open Windows Explorer but it BSOD'd.  I rebooted.  It BSOD'd again as soon as it had booted-up.  I started in safe mode, then rebooted and re-ran Prime95.  All in all I had 3 BSODs, each had a different BCC code.

8.  I then ran Prime 95 for 9 1/2 hours with no problem.  Both the machine and the temperature were stable.  The previous error didn't recurr.
 

9.  The Intel Burn Test completed successfully, 10 passes in 1751 seconds.

 

Hopefully some of this helps.

Jedzi



#4 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:34 PM

Posted 24 November 2015 - 03:18 PM

Hi Jedzi ^_^,

It is strange that the system passed all the tests and yet it crashed when you resumed the system. I talked with usasma (Thanks!) about this and we think that we should wait a bit. Let the system crash a bit more and upload the dump files.

Also, till the time, kindly test your system using the below tests (Thanks usasma) -

CPU Stress Tests:
Only need to run 1 or 2 of the tests under most circumstances. I haven't used any of the tests myself, so I listed all that I was able to find.
- Intel Processor Diagnostic Tool (works in Windows)
x64 - http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=19792&keyword=%22cpu+stress+test%22&DownloadType=Utilities%2c+Tools+and+Examples&lang=eng
x86 - http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=19791&keyword=%22cpu+stress+test%22&DownloadType=Utilities%2c+Tools+and+Examples&lang=eng
Burn Test - http://downloads.guru3d.com/IntelBurnTest-v2.3-download-2047.html
- AMD OverDrive is the recommended solution from AMD - BUT I've seen issues with this program causing BSOD's. Use at your own risk!!! http://sites.amd.com/us/game/downloads/amd-overdrive/pages/overview.aspx
- Other Stress Tests:
- http://7byte.com/index.php?page=hotcpu
- http://www.7byte.com/index.php?page=burnin64
- http://www.overclock.net/general-processor-discussions/657486-cpu-stress-test.html
- http://www.fossiltoys.com/cpuload.html
- http://www.pcworld.com/downloads/file/fid,7146-order,1-page,1-c,alldownloads/description.html
- http://www.overclock.net/general-processor-discussions/657486-cpu-stress-test.html
- http://majorgeeks.com/CPU_Stability_Test_d215.html
- http://www.xtremesystems.org/forums/showthread.php?t=201670
- the test(s) suggested at this link are bootable: http://www.techsupportforum.com/forums/f15/headless-cpu-stress-testing-393435.html#post2232929


Let us know how the system behaves ^_^

-Pranav

Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#5 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 26 November 2015 - 03:49 AM

Yesterday morning I started trying to run some of these tests.  However the laptop was worse than ever.  I had 12 BSODs in an hour.  Basically it BSOD'd, I'd reboot it and as soon as soon as I tried to do anything basic (eg use Windows Explorer) it would BSOD again.  Eventually it stabilised, for no obvious reason, and I managed to get the dumps out, pls see attached. 

 

Also: 

  • I ran the Major Geeks Stability Test for 5 1/2 hours with no problems.

  • I've already run the Intel Burn Test (Linpack).  It successfully completed 10 passes in 1751 seconds.

  • I saw the Video Card Stability Test on Major Geeks .  I'm slightly suspicious that about the video / graphics driver side of things, so I ran it.  Although I got pretty jerky movement on the globes, it ran OK.  However if I open another window (eg Windows Explorer or Core Temp) it then fails immediately with this message: "Stability Test Failed.  Perhaps the video card switched into low-accelerated mode.  If you overclocked your video card, you need to lower your GPU and Mem frequency.  After reboot please launch a test again"

 

Thanks,

 

Jedzi

Attached Files



#6 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 26 November 2015 - 06:39 AM

Following yesterday's massive instability, for no obvious reason it now seems stable, something that keeps happening.  Once it was fine for 3 days, then the problems started again.  In the last few hours I have:

  -  Downloaded the Display Driver from Toshiba and reinstalled it.
  -  Upgraded to Windows SP1
  -  Tried to run Furmark again.  Last time it wouldn't run as it said I didn't have Open GL2.0, this time it opened & ran straight away.  I've run the test for about 35 minutes.  While the movement is a bit slow & jerky, about one movement every 2 seconds, there are no errors.

Jedzi



#7 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:34 PM

Posted 27 November 2015 - 05:03 PM

Hi Jedzi,

My exams are coming and I have very limited time so there would be some delay before I reply to your post. It will take me some more time.

Thanks!

Regards,
Pranav

Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#8 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 27 November 2015 - 05:30 PM

No worries.  It's been stable since my last post .... fingers crossed ....

 

Jedzi



#9 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 10 December 2015 - 04:53 AM


... so my laptop became stable for no obvious reason, hurray!  I took the opportunity to revert to a backup image of Windows 7 and all was well for a couple of weeks.  Now the BSODs have come back with a vengance; the machine is effectively unusable again. Ahhhhhh

Before I re-imaged it I ran a number of couple of other tests in a vain attempt to try and pin the problem down:

  • I ran the Major Geeks Stability Test for 5 1/2 hours with no problems.
  • I saw the Video Card Stability Test on Major Geeks .  I'm slightly suspicious that about the video / graphics driver side of things, so I ran it.  Although I got pretty jerky movement on the globes, it ran OK.  However if I open another window (eg Windows Explorer or Core Temp) it then fails immediately with this message: "Stability Test Failed.  Perhaps the video card switched into low-accelerated mode.  If you overclocked your video card, you need to lower your GPU and Mem frequency.  After reboot please launch a test again"

I've attached the dumps from the most recent crashes, ie since it became stable again.  3 of them mention ntoskrnl.exe.  I don't know if that's coincidence or if my RAM is dodgy.  Although, if it is I don't understand how it could have passed a couple of memory tests.

Jedzi

 

Attached Files



#10 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:34 PM

Posted 11 December 2015 - 02:45 AM

Hi Jedzi ^_^,

My exams are over and I am back. Could you please re-run the Sysnative BSOD App and upload the ZIP file generated by it?
The text file uploaded by you is not very useful :(


-Pranav

Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#11 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 11 December 2015 - 05:25 AM

Hi there, 

 

Hope the exams went well.  

 

I've re-run the Sysnative BSOD App & attached the output.

 

Regards,

Jedzi
 

Attached Files


Edited by Jedzi, 11 December 2015 - 05:26 AM.


#12 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:34 PM

Posted 12 December 2015 - 01:20 PM

Hi Jedzi ^_^,


Oh yes, the exams went well ^_^.
Thanks for attaching the ZIP file. There are some interesting things in them which I will discuss with you shortly.

Let's talk about your latest crash dump file according to the ZIP file.
Below is the stack for the latest dump file -
0: kd> knL
 # Child-SP          RetAddr           Call Site
00 fffff880`08020358 fffff800`02cbc1e9 nt!KeBugCheckEx
01 fffff880`08020360 fffff800`02cbae60 nt!KiBugCheckDispatch+0x69
02 fffff880`080204a0 fffff800`02c93236 nt!KiPageFault+0x260
03 fffff880`08020638 fffff800`02c91e0e nt!MiTryLockProtoPoolPageAtDpc+0x42
04 fffff880`08020640 fffff800`02ceaf21 nt!MiCopyDataPageToImagePage+0x29e
05 fffff880`08020780 fffff800`02cdb5bc nt!MiResolveMappedFileFault+0x971
06 fffff880`080208e0 fffff800`02cd9e23 nt!MiResolveProtoPteFault+0x47c
07 fffff880`08020970 fffff800`02cc9a89 nt!MiDispatchFault+0x1c3
08 fffff880`08020a80 fffff800`02cbad6e nt!MmAccessFault+0x359
09 fffff880`08020be0 00000000`62171027 nt!KiPageFault+0x16e
0a 00000000`0556f450 00000000`00000000 0x62171027
Do you see the last line? The last line contains the address 0x62171027 . This is weird because the address belongs to User Mode. So, when the page fault occurred in the User Mode, the kernel tried bringing the page back to memory, Windows detected corruption and crashed the system to protect your data. The function MiTryLockProtoPoolPageAtDpc is not documented sadly and I cannot say what it does.


Now, let's see one of the other dump files. One of the dump files has the error - UNEXPECTED_KERNEL_MODE_TRAP (7f)
Below is an excerpt from the analysis -
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000406f8
Arg4: fffff80002c8ec10
In your case, the dump file says that there was a double fault. This means that an exception (Problem) occurred when handling another exception. This is not allowed since the system does not know how to handle that. So, the system crashed.

You asked that how come the Memory tests are passing. The answer to this question is that the software checks only parts of the hardware and cannot check the memory modules 100%.
The saying goes like this - "If the Memory test detect an error, RAM is bad. If they don't, that does not mean that the RAM sticks are good."


At this point of time, I would suggest you to take the laptop to the service center and get it checked. There are dump files which are depicting errors while reading and writing to RAM so there is a high chance that RAM is the problem. In case you are replacing the RAM sticks yourself, please make sure that you buy them from a shop which accepts returns (Just in case). You also need to make sure that the RAM sticks would be compatible with the system. That's some work so if you don't want to do all of this, I would suggest you to take it to the service center.


Let me know how it goes ^_^

Regards,
Pranav

Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#13 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 12 December 2015 - 05:08 PM

Thanks - that's hugely useful.  

 

I've done some hunting online and it doesn't look too complicated to replace the RAM on this laptop so I'm going to give it a go.  I've run a scan from crucial.com and ordered the memory.

 

I'll let you know how I get on, but for the moment massive thanks for taking the time to look through the dumps and respond, it's much appreciated.

 

Jedzi 



#14 Jedzi

Jedzi
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 15 December 2015 - 08:15 AM

So ... I got the new RAM and fitted it really easily.  I logged on & checked and it was showing 4GB of RAM, exactly as before and all seemed fine.  I opened-up Excel and did the thing that was making it fall over during the last spate of BSODs.  All was good.  "Finally it's sorted", or so I thought ...

 

I decided to defrag the disk because of all of the crashes ... and it BSOD'd twice, after a few minutes of running.  I then tried to do something else, it got to a certain point and it crashed yet again.

 

Pretty frustrating as I thought it was finally sorted with the new RAM.

 

I've attached the latest dump files.

Jedzi

Attached Files



#15 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:34 PM

Posted 15 December 2015 - 12:37 PM

Hi Jedzi,


Sorry to hear that the new RAM did not fix the problem. Kindly follow the below instructions -

  1. Till the time we are troubleshooting, kindly remove MagicISO and IMGBurn. Once you have removed them, please do a manual system wide search for "pcouffin.sys" and rename it to "pcouffinbak.sys". Once you have done this, please reboot the system. This driver dates back to 2006 and most likely not compatible.
  2. Please remove the Avast Antivirus using this **TOOL** since the reports say that there are problems with this software.
  3. Kindly perform the Hard Disk Diagnostics over here - http://www.carrona.org/hddiag.html

 

I really feel bad that the new RAM did not work :( . I hope you can send it back and get a refund. Let me know how the above goes.

 

Regards,

Pranav


Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users