Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need help finding cause of recurring BSODs


  • Please log in to reply
4 replies to this topic

#1 LynnBR

LynnBR

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:28 AM

Posted 23 January 2017 - 06:35 PM

Win7 Pro SP1, 64 bit system has been crashing approximately once a week. Errors indicate memory problem, but have run Dell diagnostics, Windows memory diagnostic, and Memtest 86+ (overnight); none show any memory problems (nor any other hardware issues).

 

Win7Pro SP1 is original OS installed on this system, OEM.

computer is approximately 3.5 years old

OS was reinstalled on new hard drive fall 2015, after initial HDD failed under warranty.

 

CPU: Intel Core i5 3470 @ 3.20 GHz

Graphics card: Intel HD Graphics (Dell)

MoBo: Dell 042P49

PSU: Dell 250W

 

Dell OptiPlex 3010 desktop

 

I noticed that Perfmon showed no AV installed - ESET Endpoint Antivirus 5.0.2260.1 with up to date def files is installed.

 

I will begin with next steps while awaiting reply.

 

Thank you!!

Attached Files



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:28 AM

Posted 24 January 2017 - 07:40 AM

You'll find that many BSOD's mention memory - but they aren't necessarily related to physical RAM.
Most, in fact, are related to Virtual Memory - which can be almost anywhere - even on the hard drive (in the pagefile).

But some do involve the physical memory - so checking it is a good thing.

 

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

There aren't any firm indications of what's to blame in the memory dumps.

I'd suggest running Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

The purpose of Driver Verifier is to cause BSOD's, so save your work frequently while running it.

 

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Tue Jan 10 09:46:45.864 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\011017-23228-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.23572.amd64fre.win7sp1_ldr.161011-0600
System Uptime:1 days 1:11:51.693
Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+12552 )
BugCheck 1A, {41201, fffff680000df000, 7ff6fffff6fffff3, fffffa800701e480}
BugCheck Info: MEMORY_MANAGEMENT (1a)
Arguments:
Arg1: 0000000000041201, The subtype of the bugcheck.
Arg2: fffff680000df000
Arg3: 7ff6fffff6fffff3
Arg4: fffffa800701e480
BUGCHECK_STR:  0x1a_41201
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: X64_0x1a_41201_nt!_??_::FNODOBFM::_string_+12552
CPUID:        "Intel® Core™ i5-3470 CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3192
  BIOS Version                  A09
  BIOS Release Date             01/31/2013
  Manufacturer                  Dell Inc.
  Product Name                  OptiPlex 3010
  Baseboard Product             042P49
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jan  3 09:39:56.189 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\010317-21403-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.23572.amd64fre.win7sp1_ldr.161011-0600
System Uptime:0 days 0:59:21.509
Probably caused by :memory_corruption ( nt!MiCaptureProtectionFromProto+1c )
BugCheck 50, {ffffffff00000000, 0, fffff800030c619c, 5}
BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
Arguments:
Arg1: ffffffff00000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800030c619c, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: X64_0x50_nt!MiCaptureProtectionFromProto+1c
CPUID:        "Intel® Core™ i5-3470 CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3192
  BIOS Version                  A09
  BIOS Release Date             01/31/2013
  Manufacturer                  Dell Inc.
  Product Name                  OptiPlex 3010
  Baseboard Product             042P49
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec  1 15:15:02.671 2016 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\120116-22620-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.23569.amd64fre.win7sp1_ldr.161007-0600
System Uptime:2 days 6:37:52.450
Probably caused by :memory_corruption ( nt!MiDeleteVirtualAddresses+49d )
BugCheck 50, {fffffd79ffe4ffd0, 0, fffff800030b00d5, 7}
BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
Arguments:
Arg1: fffffd79ffe4ffd0, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800030b00d5, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000007, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: X64_0x50_nt!MiDeleteVirtualAddresses+49d
CPUID:        "Intel® Core™ i5-3470 CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3192
  BIOS Version                  A09
  BIOS Release Date             01/31/2013
  Manufacturer                  Dell Inc.
  Product Name                  OptiPlex 3010
  Baseboard Product             042P49
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Nov  2 17:36:23.581 2016 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\110216-24429-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.23564.amd64fre.win7sp1_ldr.160930-0600
System Uptime:2 days 9:26:35.732
Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4aaf )
BugCheck 1A, {41284, 58c8001, 0, fffff70001080000}
BugCheck Info: MEMORY_MANAGEMENT (1a)
Arguments:
Arg1: 0000000000041284, A PTE or the working set list is corrupt.
Arg2: 00000000058c8001
Arg3: 0000000000000000
Arg4: fffff70001080000
BUGCHECK_STR:  0x1a_41284
PROCESS_NAME:  dllhost.exe
FAILURE_BUCKET_ID: X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4aaf
CPUID:        "Intel® Core™ i5-3470 CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3192
  BIOS Version                  A09
  BIOS Release Date             01/31/2013
  Manufacturer                  Dell Inc.
  Product Name                  OptiPlex 3010
  Baseboard Product             042P49
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Oct 28 13:04:09.508 2016 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\102816-25116-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: 7601.23564.amd64fre.win7sp1_ldr.160930-0600
System Uptime:1 days 4:52:09.772
Probably caused by :memory_corruption ( nt!MiDeleteVirtualAddresses+49d )
BugCheck 50, {fffffd79fe7cffd0, 0, fffff800030b8ec5, 7}
BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
Arguments:
Arg1: fffffd79fe7cffd0, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800030b8ec5, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000007, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: X64_0x50_nt!MiDeleteVirtualAddresses+49d
CPUID:        "Intel® Core™ i5-3470 CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3192
  BIOS Version                  A09
  BIOS Release Date             01/31/2013
  Manufacturer                  Dell Inc.
  Product Name                  OptiPlex 3010
  Baseboard Product             042P49
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Tue Jan 10 09:46:45.864 2017 (UTC - 5:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
PaniniUSB.sys               Mon Aug  2 16:38:34 2010 (4C572CCA)
CHDRT64.sys                 Wed May  4 03:34:21 2011 (4DC1017D)
Rt64win7.sys                Fri Jun 10 02:33:15 2011 (4DF1BAAB)
GEARAspiWDM.sys             Thu May  3 15:56:17 2012 (4FA2E2E1)
IntcDAud.sys                Tue Jun 19 10:40:51 2012 (4FE08F73)
HECIx64.sys                 Mon Jul  2 18:14:58 2012 (4FF21D62)
igdkmd64.sys                Fri Feb 22 16:49:20 2013 (5127E7E0)
DDDriver64Dcsa.sys          Wed May 28 15:58:54 2014 (53863FFE)
DellProf.sys                Wed May 13 10:17:19 2015 (55535CEF)
epfwwfpr.sys                Wed Jul  8 05:04:56 2015 (559CE7B8)
ehdrv.sys                   Wed Jul  8 05:09:04 2015 (559CE8B0)
em015_64.dat                Thu Aug  6 05:05:59 2015 (55C32377)
eamonm.sys                  Tue Sep  8 00:50:28 2015 (55EE6914)
em006_64.dat                Mon Oct 17 05:50:25 2016 (58049EE1)
em018_64.dat                Tue Dec 13 07:44:43 2016 (584FED3B)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jan  3 09:39:56.189 2017 (UTC - 5:00)**************************
em006_64.dat                Fri Oct  7 08:39:14 2016 (57F79772)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec  1 15:15:02.671 2016 (UTC - 5:00)**************************
em018_64.dat                Mon Nov 14 04:31:56 2016 (5829848C)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Nov  2 17:36:23.581 2016 (UTC - 5:00)**************************
em006_64.dat                Tue Sep 27 08:43:31 2016 (57EA6973)
em018_64.dat                Mon Oct 10 06:31:04 2016 (57FB6DE8)

http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
PaniniUSB.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=CHDRT64.sys
http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=DDDriver64Dcsa.sys
http://www.carrona.org/drivers/driver.php?id=DellProf.sys
http://www.carrona.org/drivers/driver.php?id=epfwwfpr.sys
http://www.carrona.org/drivers/driver.php?id=ehdrv.sys
http://www.carrona.org/drivers/driver.php?id=em015_64.dat
http://www.carrona.org/drivers/driver.php?id=eamonm.sys
http://www.carrona.org/drivers/driver.php?id=em006_64.dat
http://www.carrona.org/drivers/driver.php?id=em018_64.dat
http://www.carrona.org/drivers/driver.php?id=em006_64.dat
http://www.carrona.org/drivers/driver.php?id=em018_64.dat
http://www.carrona.org/drivers/driver.php?id=em006_64.dat
http://www.carrona.org/drivers/driver.php?id=em018_64.dat
 


Edited by usasma, 24 January 2017 - 07:40 AM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 LynnBR

LynnBR
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:28 AM

Posted 24 January 2017 - 10:51 AM

Thanks John! I do have Driver Verifier running, will leave it through tomorrow afternoon. I will manually check for updates when I can get on that system.

 

That Panini driver is for a check scanner obtained through our bank, FWIW. No IoT Panini press connected to this system. Just thinking about it is making me hungry, though.

 

Will get back to you in a day or two when I have something to add.



#4 LynnBR

LynnBR
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:28 AM

Posted 30 January 2017 - 10:59 AM

John,

The computer ran for several days with Driver Verifier running before it crashed. I have not yet looked at the error, user rebooted without sending me a pic of the BSOD. Not that I couldn't retrieve the crash info from her system, but if all she wants to do is complain without spending 30 seconds assisting in problem resolution, I sadly feel just a little less inclined to drop everything for her. That, and the decision was made to replace this computer instead of spending any more time troubleshooting right now. I will look at your recommendations and play with it at a later date, when I have some time.

 

Thanks for your assistance. You can close this thread.



#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:28 AM

Posted 01 February 2017 - 08:18 AM

I've worked in a PC repair shop for the last 10 years.  I feel your pain!

Thanks for letting us know


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users