Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › Blue screen problem More Help Needed (SOLVED)
New Posts  All Forums:Forum Nav:

Blue screen problem More Help Needed (SOLVED) - Page 9

post #81 of 138
6/1/12 at 5:21pm
Thread Starter 
what does this mean??? both my browsers keep crashing .
Explorer and Google chrome.

Problem signature:
Problem Event Name: APPCRASH
Application Name: iexplore.exe
Application Version: 9.0.8112.16421
Application Timestamp: 4d76255d
Fault Module Name: MSHTML.dll
Fault Module Version: 9.0.8112.16443
Fault Module Timestamp: 4f4c3300
Exception Code: c0000005
Exception Offset: 002ff4e1
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
Reply
Reply
post #82 of 138
6/1/12 at 5:54pm
What's the error you get with Chrome?
Reply
Reply
post #83 of 138
6/2/12 at 3:51am
Thread Starter 
ok this morning chrome crash, I was trying to watch a youtube video and the shockwave plugin crash 2 times then the computer blue screen mad.gif seem all these rma memory sticks g.skill send me have issues, this really sucks.

060212-18579-01.zip 27k .zip file
Reply
Reply
post #84 of 138
6/2/12 at 4:00am
1a bugcheck pointing to the usual ntrknlmp.exe with MEMORY_MANAGEMENT. However, the culprit process is avp.exe (Kaspersky Anti-Virus). I'd recommend fully uninstalling Kaspersky to be sure Kaspersky itself isn't causing all of this corrupted memory, it's very possible.

Here's the support article on how to fully and safely uninstall Kaspersky products.

Dump for reference:
Warning: Spoiler! (Click to show)
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\BSOD\Downloads\060212-18579-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0xfffff800`0220a000 PsLoadedModuleList = 0xfffff800`0244e670
Debug session time: Sat Jun  2 06:03:48.682 2012 (UTC - 4:00)
System Uptime: 0 days 0:11:29.400
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {411, fffff68000065f48, cc1000008908a886, fffff68000068719}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+6061 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000000411, The subtype of the bugcheck.
Arg2: fffff68000065f48
Arg3: cc1000008908a886
Arg4: fffff68000068719

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_411

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  avp.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff8000226521d to fffff800022891c0

STACK_TEXT:  
fffff880`02b24288 fffff800`0226521d : 00000000`0000001a 00000000`00000411 fffff680`00065f48 cc100000`8908a886 : nt!KeBugCheckEx
fffff880`02b24290 fffff800`02355004 : cc100000`8908a886 00000000`00000000 00000000`00000000 fffffa80`03305510 : nt! ?? ::FNODOBFM::`string'+0x6061
fffff880`02b242e0 fffff800`02216269 : fffffa80`04b317c8 fffffa80`00000000 00000000`000058ca fffffa80`00000100 : nt!MiBuildPageFileCluster+0x6f4
fffff880`02b24bc0 fffff800`02216b4b : fffffa80`0000585a 00000000`00000000 fffffa80`0000585a 00000000`00000000 : nt!MiGatherPagefilePages+0x269
fffff880`02b24ca0 fffff800`0251fe6a : fffffa80`03305510 185389c0`1bd0b70f 00000000`00000080 00000000`00000001 : nt!MiModifiedPageWriter+0x1bb
fffff880`02b24d00 fffff800`02279f06 : fffff800`023fbe80 fffffa80`03305510 fffff800`02409cc0 90909090`909090ff : nt!PspSystemThreadStartup+0x5a
fffff880`02b24d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+6061
fffff800`0226521d cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+6061

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4f76721c

FAILURE_BUCKET_ID:  X64_0x1a_411_nt!_??_::FNODOBFM::_string_+6061

BUCKET_ID:  X64_0x1a_411_nt!_??_::FNODOBFM::_string_+6061

Followup: MachineOwner
---------

0: kd> !thread
GetPointerFromAddress: unable to read from fffff800024b8000
THREAD fffffa8003305510  Cid 0004.0060  Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 0
Not impersonating
GetUlongFromAddress: unable to read from fffff800023f7ba4
Owning Process            fffffa80032ebb30       Image:         <Unknown>
Attached Process          fffffa80056b3b30       Image:         avp.exe
fffff78000000000: Unable to get shared data
Wait Start TickCount      44128        
Context Switch Count      180             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!MiModifiedPageWriter (0xfffff80002216990)
Stack Init fffff88002b24d70 Current fffff88002b24a40
Base fffff88002b25000 Limit fffff88002b1f000 Call 0
Priority 17 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`02b24288 fffff800`0226521d : 00000000`0000001a 00000000`00000411 fffff680`00065f48 cc100000`8908a886 : nt!KeBugCheckEx
fffff880`02b24290 fffff800`02355004 : cc100000`8908a886 00000000`00000000 00000000`00000000 fffffa80`03305510 : nt! ?? ::FNODOBFM::`string'+0x6061
fffff880`02b242e0 fffff800`02216269 : fffffa80`04b317c8 fffffa80`00000000 00000000`000058ca fffffa80`00000100 : nt!MiBuildPageFileCluster+0x6f4
fffff880`02b24bc0 fffff800`02216b4b : fffffa80`0000585a 00000000`00000000 fffffa80`0000585a 00000000`00000000 : nt!MiGatherPagefilePages+0x269
fffff880`02b24ca0 fffff800`0251fe6a : fffffa80`03305510 185389c0`1bd0b70f 00000000`00000080 00000000`00000001 : nt!MiModifiedPageWriter+0x1bb
fffff880`02b24d00 fffff800`02279f06 : fffff800`023fbe80 fffffa80`03305510 fffff800`02409cc0 90909090`909090ff : nt!PspSystemThreadStartup+0x5a
fffff880`02b24d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
Reply
Reply
post #85 of 138
6/2/12 at 4:10am
  • Schmuckley
  • No keyboard detected! Press F1 to continue..
Have you tried using the other 2 slots with your RAM? GT240s are not the most reliable card in the world.
Things to try:Wipe your videocard drivers and use 196.** drivers
switch RAM to 2 different slots (could be a bad slot)
Loosen your RAM timings a notch. switch from 1t to 2t
add 2 notches of DRAM voltage
Add a bit of IMC voltage
Add a bit of vcore
For the YouTube bsod..gotta be quick:
Start a youtube video ...Quickly right-click it and uncheck "enable hardware acceleration"
Are you monitoring your cpu temps at all? could be a bad heatsink mount..
AMD Machine
(14 items)
 
Dedicated Backup
(14 items)
  		 
CPUMotherboardGraphicsRAM
Sempron 145 powah! er..or..Thuban with 4 coars ;) Crosshair 4 GT 240 Samsung @ 7-8-8-20 
Hard DriveOptical DriveCoolingMonitor
OCZ Agility2 40GB Lite-On Rasa Waterblock + Bong Samsung 2 ms 
KeyboardPowerCaseMouse
dell Thermaltake Tr2-800 Elite 330 cheap 
Mouse PadAudio
Newegg box flap onboard 
View all
CPUMotherboardGraphicsRAM
2500K Gimped @ stock Gigabyte H61-DS2 XFX 5870 800/1250 The Samsung RAM (Awesomeness) 
Hard DriveCoolingOSMonitor
Crucial m4 64 Sunbeamtech Core-Contact 92 attached via zip-ties. Varies Samsung 2ms 
KeyboardPowerCaseMouse
varies Corsair GS800 eMachine cheap 
Mouse PadAudio
Newegg Box Panel onboard 
View all
  hide details  
Reply
AMD Machine
(14 items)
 
Dedicated Backup
(14 items)
  		 
CPUMotherboardGraphicsRAM
Sempron 145 powah! er..or..Thuban with 4 coars ;) Crosshair 4 GT 240 Samsung @ 7-8-8-20 
Hard DriveOptical DriveCoolingMonitor
OCZ Agility2 40GB Lite-On Rasa Waterblock + Bong Samsung 2 ms 
KeyboardPowerCaseMouse
dell Thermaltake Tr2-800 Elite 330 cheap 
Mouse PadAudio
Newegg box flap onboard 
View all
CPUMotherboardGraphicsRAM
2500K Gimped @ stock Gigabyte H61-DS2 XFX 5870 800/1250 The Samsung RAM (Awesomeness) 
Hard DriveCoolingOSMonitor
Crucial m4 64 Sunbeamtech Core-Contact 92 attached via zip-ties. Varies Samsung 2ms 
KeyboardPowerCaseMouse
varies Corsair GS800 eMachine cheap 
Mouse PadAudio
Newegg Box Panel onboard 
View all
  hide details  
Reply
post #86 of 138
6/2/12 at 7:19am
Thread Starter 
ok will do and I have not gotten back the 240 as yet frown.gif
Reply
Reply
post #87 of 138
6/3/12 at 3:09am
Thread Starter 
woke this morning and it had blue screen again over night frown.gif

060212-18579-02.zip 22k .zip file
Reply
Reply
post #88 of 138
6/3/12 at 3:37am
Latest attached dump is an *A bugcheck pointing to memory corruption as usual. Another thing I'd like for you to try since I just noticed you have it installed (gdrv.sys), is fully uninstalling the Gigabyte EasySaver utility (and any other Gigabyte utilities you have installed). These utilities may be causing issues, and I have dealt with them in previous BSOD cases. Just another thing to try out.

Also, as I mentioned earlier, did you run a memtest on the new RAM to be sure you don't get errors? Also, please hold off on making any changes to system voltages / BIOS changes until I warrant them please.

Dump for reference:
Warning: Spoiler! (Click to show)
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\BSOD\Downloads\060212-18579-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0xfffff800`02256000 PsLoadedModuleList = 0xfffff800`0249a670
Debug session time: Sat Jun  2 23:52:00.684 2012 (UTC - 4:00)
System Uptime: 0 days 2:28:14.402
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff680000a3c50, 0, 0, fffff800022beb6b}

Probably caused by : memory_corruption ( nt!MiAgeWorkingSet+1d1 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff680000a3c50, memory referenced
Arg2: 0000000000000000, IRQL
Arg3: 0000000000000000, bitfield :
        bit 0 : value 0 = read operation, 1 = write operation
        bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800022beb6b, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002504100
 fffff680000a3c50 

CURRENT_IRQL:  0

FAULTING_IP: 
nt!MiAgeWorkingSet+1d1
fffff800`022beb6b 488b19          mov     rbx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  2

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  chrome.exe

TRAP_FRAME:  fffff88002132780 -- (.trap 0xfffff88002132780)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000007ffffffff8 rbx=0000000000000000 rcx=fffff680000a3c50
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800022beb6b rsp=fffff88002132910 rbp=00000000000a3c56
 r8=0000000000000001  r9=fffffa80036d2ec8 r10=0000000000000005
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po cy
nt!MiAgeWorkingSet+0x1d1:
fffff800`022beb6b 488b19          mov     rbx,qword ptr [rcx] ds:fffff680`000a3c50=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800022d4769 to fffff800022d51c0

STACK_TEXT:  
fffff880`02132638 fffff800`022d4769 : 00000000`0000000a fffff680`000a3c50 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`02132640 fffff800`022d33e0 : 00000000`00000000 fffff680`000a3c50 00000000`00001000 00000980`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`02132780 fffff800`022beb6b : 00000003`00000000 c5900000`c2372867 00000000`00000000 00000000`00001459 : nt!KiPageFault+0x260
fffff880`02132910 fffff800`0234d4f5 : fffffa80`036d2ec8 fffff880`00000001 00000000`00000001 fffff880`02132b70 : nt!MiAgeWorkingSet+0x1d1
fffff880`02132ac0 fffff800`022bf116 : 00000000`000022c0 00000000`00000000 fffffa80`00000000 00000000`00000003 : nt! ?? ::FNODOBFM::`string'+0x4cd46
fffff880`02132b40 fffff800`022bf5cb : 00000000`00000008 fffff880`02132bd0 00000000`00000001 fffffa80`00000000 : nt!MmWorkingSetManager+0x6e
fffff880`02132b90 fffff800`0256be6a : fffffa80`033069d0 00000000`00000080 fffffa80`032eb040 00000000`00000001 : nt!KeBalanceSetManager+0x1c3
fffff880`02132d00 fffff800`022c5f06 : fffff800`02447e80 fffffa80`033069d0 fffff800`02455cc0 0fc33b48`000000b8 : nt!PspSystemThreadStartup+0x5a
fffff880`02132d40 00000000`00000000 : fffff880`02133000 fffff880`0212d000 fffff880`02132800 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiAgeWorkingSet+1d1
fffff800`022beb6b 488b19          mov     rbx,qword ptr [rcx]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiAgeWorkingSet+1d1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4f76721c

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiAgeWorkingSet+1d1

BUCKET_ID:  X64_0xA_nt!MiAgeWorkingSet+1d1

Followup: MachineOwner
---------
Reply
Reply
post #89 of 138
6/3/12 at 4:48pm
Thread Starter 
ok I have remove all gigabyte programs and yes I did run a memtest for 8 hours and it came up with 0 errors, also I installed a copy
of bitdefender it that ok? or should I remove and wait?
Reply
Reply
post #90 of 138
6/3/12 at 7:02pm
I would have actually recommended to be without any anti virus or anti malware programs, as it's easier for troubleshooting. However, unless I see BitDefender causing any specific issues in any new dumps (if there are), there shouldn't be an issue and you can leave it.
Reply
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Windows
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › Blue screen problem More Help Needed (SOLVED)