已答覆 win 7 crash with dump file

  • Friday, August 03, 2012 3:46 AM
     
     

    Computer just randomly freeze, sometimes several times a day and I have to cold reboot it.

    There are 4 memory dump files I uploaded dump here:

    Aug 2 shows error: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001a

    windbg display as:

    BugCheck 1A, {8886, fffffa8000477a50, fffffa800199e900, 504}
    Probably caused by : memory_corruption ( nt!MiUnlinkPageFromLockedList+19c )

    Jun 23's windbg display as:

    BugCheck 7F, {8, 80050031, 6f8, fffff80002ac7601}
    Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )

    But I cannot make anything out of it.

    Also I tested memory and it's fine. Also run each one of 2 memory sticks (2GB each) I have and still experience freeze. I don't know if it's memory issue or how to troubleshoot it.

    I also monitor the temperature of CPU and GPU. Nothing out of ordinary.

    Sometimes machine reboot without even dump.

    Help pls.


    • Edited by yxd0018 Friday, August 03, 2012 6:53 AM
    •  

All Replies

  • Saturday, August 04, 2012 9:56 AM
    Moderator
     
     Proposed

    Before we can even begin to investigate the underlying cause these driver (two of which have known issues and are from 2005) need to be updated.

    SSPORT.sys    8/11/2005 7:07:32 PM      
    iMON_x64.sys    12/16/2005 1:20:30 AM     
    nvm62x64.sys    10/17/2008 5:01:06 PM                           
    UltraMonUtility.sys    11/13/2008 9:10:30 PM                             
    RimSerial_AMD64.sys    11/24/2008 1:01:01 PM       

     How To Find Drivers:
    - search Google for the name of the driver
    - compare the Google results with what's installed on your system to figure out which device/program it belongs to
    - visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
    - if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program

    The most common drivers are listed on this page: Driver Reference

    http://www.carrona.org/dvrref.php

    http://sysnative.com/drivers/

    - - Driver manufacturer links are on this page: http://www.carrona.org/drvrdown.htm                 


    MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag

  • Saturday, August 04, 2012 1:38 PM
     
     Proposed

    check your memory

    memtest.org and select the CD or USB as desired

    run it overnight to be sure the RAM and CPU are ok


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Friday, August 10, 2012 12:10 PM
     
     

    updated BIOS for win 7. Delete or update driver.

    run memtest overnight and nothing was found.

    PC still freeze.

  • Friday, August 10, 2012 1:20 PM
     
     

    are you overclocked? if so reset it to defaults


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Friday, August 10, 2012 2:02 PM
     
     

    1. damn, the PC just freeze again. The events are:

    8/10/2012 9:48:47 AM

    The DgiVecp service failed to start due to the following error:
    The system cannot find the device specified.

    8/10/2012 9:48:45 AM

    The previous system shutdown at 9:45:37 AM on ‎8/‎10/‎2012 was unexpected.

    8/10/2012 9:48:19 AM

    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

    The last event before 9:45 is info level

    8/10/2012 9:34:49 AM

    The Application Experience service entered the running state.

    No, I didn't overclock.

    I uploaded hardware monitor screenshot here.

    Memtest is fine overnight.

    2. after I update driver, I get blue screen, which might be separate from freezing issue. The dump is 080912-45942-1.dmp at the share folder as well.

    3. I use windug to open dmp file. I look at the detailed info but couldn't figure out where the problem might be. But how do you find the issue? Could you paste some section which pinpoint the potential issue so that I can troubleshoot myself in the future?



    • Edited by yxd0018 Friday, August 10, 2012 2:11 PM
    •  
  • Friday, August 10, 2012 4:03 PM
     
     

    next I need complete hardware specs

    CPU, MB, RAM including timing if available, PSU make/model and storage


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Friday, August 10, 2012 7:50 PM
    Moderator
     
     
    Newest DMP still has the SSport.sys driver from 2005,  It is a known problem.

    MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag

  • Friday, August 10, 2012 8:03 PM
     
     

    That file is often a target for malware


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Friday, August 10, 2012 10:12 PM
     
     

    I use driverview and see ssport.sys is 2009 version. pls look at ssport.png

    How to capture the whole HW spec? Will HW monitor pro dump file ok? You can find HWMonitorPro.txt at the same location above. Also I include belarc's info as well from file belarc.png.

  • Friday, August 10, 2012 10:16 PM
     
     

    cpu-z report is too fluffy to paste, so upload it to skydrive.live.com and then post the link


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, August 11, 2012 3:25 AM
     
     
    I uploaded cpu-z report to google drive
  • Saturday, August 11, 2012 1:05 PM
     
     

    use skydrive, I cannot download from the google link


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, August 11, 2012 7:59 PM
     
     
    skyedrive version is here
  • Saturday, August 11, 2012 8:27 PM
     
     

    next zip up the /windows/minidump folder and post it on skydrive too


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, August 11, 2012 9:42 PM
     
     
    minidump is here. But most freeze didn't even generate minidump.
  • Saturday, August 11, 2012 10:07 PM
     
     

    sadly nothing useful in the crash dumps

    are you using the latest BIOS for your MB?

    looks likely a driver problem, but nothing concrete shows

    might be easier from here to backup and install windows clean and hope it clears up


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, August 11, 2012 10:16 PM
     
     

    I get latest P5N32-E SLI BIOS 1903 from ASUS site. There is no win 7 BIOS, so I picked vista 64 version.

    I just reinstalled win 7 x64 from scratch maybe 2 months ago as consistent crashes corrupted boot sector.

    Maybe I should wait for a little bit to get win 8 on i7 machine.

    • Edited by yxd0018 Saturday, August 11, 2012 10:24 PM
    •  
  • Saturday, August 11, 2012 10:24 PM
     
     

    do you have another hard disk you can use?


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, August 11, 2012 10:28 PM
     
     
    yes.
  • Saturday, August 11, 2012 10:39 PM
     
     Proposed

    try a clean install on that and see if its stable


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, August 11, 2012 10:40 PM
     
     

    you can use windows 7 for 60 days with no cd key


    Windows MVP 2011-12, XP, Vista, 7 and 8.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Friday, August 31, 2012 3:42 PM
     
     

    My other IDE HDD perfromed even worse on its own with new win 7 installation. Master boot sector was corrupted during freeze. Before further part replacement test, I tried to uninstall the Acronis True Image Home 2011, after coming across an article talking about incompatibility between win 7 and Acronis before Build 6868.

    Previously I have several freezes during an hour usage, since I removed Acronis a week ago, it only had 1 freeze. I think the root cause still exists, but at least my pc is workable now.


    • Edited by yxd0018 Friday, August 31, 2012 3:43 PM
    •  
  • Friday, August 31, 2012 7:49 PM
    Moderator
     
     
    Please provide us with your Event Viewer administrative logs by following these steps:


    Click Start Menu
    Type eventvwr into Search programs and files (do not hit enter)
    Right click eventvwr.exe and click Run as administrator
    Expand Custom Views
    Click Administrative Events
    Right click Administrative Events
    Save all Events in Custom View As...
    Save them in a folder where you will remember which folder and save as Errors.evtx
    Go to where you saved Errors.evtx
    Right click Errors.evtx -> send to -> compressed (zipped) folder
    Upload the .zip file here (if you can) to skydrive or a file sharing service

    MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag

  • Friday, August 31, 2012 10:26 PM
     
     
    Here is the event log
    • Edited by yxd0018 Friday, August 31, 2012 10:27 PM
    •  
  • Friday, August 31, 2012 11:43 PM
    Moderator
     
     

    Here are the issues in event viewer

    1-license activation failed

    2-because of the license failure all the language packs also failed.

    3-netdiskext64.dll is failing and perhaps the reason there are dozens of HD block errors

    https://etjavw.bay.livefilestore.com/y1mwHLOvSaxkF1chnWW1OWKgt6uEoQDdmBhiyFNlYO3sYjbLc0wn4FdM_Lq3AszpprdOtJ5iq0UnRIy7PSc138zWgb3MwTk4Bl1VFAEdX0vtvHxa3Ejm0U-jw/hd.jpg?psid=1

    4-many audit events failed.  I am thinking malware for this

    Please download the free version of Malwarebytes.
    Update it immediately.
    Do a full system scan
    Let us know the results at the end.

    http://www.malwarebytes.org/products


    MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag

  • Friday, August 31, 2012 11:48 PM
     
     

    if you have another hard disk, install 7 and do not use your key

    install MSE from the windows update optional choices

    then connect your old disk as a slave or secondary

    scan it from the fresh install and clean any malware


    Windows MVP 2011-12, XP, Vista, 7 and 8. More people have climbed Everest than having 2 MVP's on the wall.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews

  • Saturday, September 01, 2012 3:15 AM
     
     

    fresh installed win 7 event

    malwarebytes log after scanning original C: drive from freshly installed on a different HDD is here

    What's MSE?

    Another finding during unboxing the PC is I found the fan around HDD was not working. I changed the power connector and when it start spinning the temperature of main HDD dropped from 70c to 43c-50c. I checked that the WD 500 green HDD can sustain 70c degree so don't think it's the reason.
    • Edited by yxd0018 Saturday, September 01, 2012 3:24 AM
    •  
  • Saturday, September 01, 2012 3:33 AM
     
     Answered

    first the HD should not be anywhere up at 70C, better is for a fan over the disk to cool it to under 40C

    MSE is Microsoft Security Essentials, see my IT site for the malicious software removal tool too


    Windows MVP 2011-12, XP, Vista, 7 and 8. More people have climbed Everest than having 2 MVP's on the wall.

    Hardcore Games, Legendary is the only Way to Play

    Developer | Windows IT | Chess | Economics | Vegan Advocate | PC Reviews