locked
Solution to Randomly Triggered BSOD? (Win7 64bit -- Minidump Inside) RRS feed

  • Question

  • Hey guys, I'm running Windows 7 Home 64bit on a custom build that I made a few months ago and I have been having a reoccurring problem where after a non-specific amount of run time, my computer will lock up from anywhere to one-infinite minutes. During the time that the computer locks up I am able to move the mouse and interact with some windows (none of the explorer.exe related applications), but for the most part I lose access to everything on my computer. If I control+alt+delete the screen will turn black indefinitely. This is where it may or may not respond. If it ends up responding it says something along the lines of "Cannot access user information" where it returns me to whatever applications are open. During this time it is clear that explorer.exe has crashed, but I cannot reboot it because it gives me the same error message if I try to control+alt+delete again. Shortly after responding I will receive a BSOD.

    It should be noted that this error is not triggered by anything specific (that I can pinpoint). It just happened today and I hadn't done anything but browse the web. It has happened to me while I have been playing games, and even while idling. 

    As per the thread that directed me to these forums when searching for a solution, I navigated to my minidump folder and enabled the small dump directory before waiting for the BSOD to happen again. It just happened and I have attached the minidump file associated with the crash.

    Any assistance would be wonderful and thanks in advance to anyone that takes the time to look into my issues.

    Here is the attached minidump file, which I have uploaded to skydrive:
    https://skydrive.live.com/redir.aspx?cid=bb8e9bf3fd62343c&resid=BB8E9BF3FD62343C!105&parid=BB8E9BF3FD62343C!103






    • Edited by B_pill Tuesday, April 10, 2012 5:49 AM
    Tuesday, April 10, 2012 5:04 AM

Answers

  • Hello,

    Start by that:

    • Update all possible drivers
    • Uninstall all unused programs
    • Run chkdsk /r /f and sfc /scannow
    • Perform a clean boot: http://support.microsoft.com/kb/929135
    • Disable all used security softwares
    • Run memtest86+ and check if all is okay with your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support for assistance

    You can also contact Microsoft CSS for assistance.


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    • Marked as answer by Juke Chou Sunday, May 6, 2012 9:33 AM
    Wednesday, April 11, 2012 2:18 PM
  • Bill

    John is correct that the above turned out to be a virus (I am in that thread) but the crux of the matter is that there, a critical process was terminated, and there, His malware was suspect. 

    I would strongly suggest that you remove and replace your Avast and replace it with Microsoft Security Essentials AT LEAST TO TEST.

    I would also download malwarebytes free and run it in safe mode just to be sure.

    Avast  can be a  contributing cause of BSOD'S . Please remove and replace  with Microsoft Security Essentials AT LEAST TO TESThttp://files.avast.com/files/eng/aswclear5.exehttp://www.microsoft.com/security_essentials/

    Please download the free version of Malwarebytes. Update it immediately. Do a full system scan Let us know the results at the end. http://www.malwarebytes.org/products


    • Edited by ZigZag3143x Thursday, April 12, 2012 1:02 AM
    • Marked as answer by Juke Chou Sunday, May 6, 2012 9:34 AM
    Thursday, April 12, 2012 1:01 AM

All replies

  • There are two important info in yout dump file (http://msdn.microsoft.com/en-us/library/windows/hardware/ff560372(v=vs.85).aspx)

    CRITICAL_OBJECT_TERMINATION

    0x000000f4

    I do not see conflict with another driver: ntoskrnl.exe+7cc40

    Try the following:

    1. Start Windows in clean boot http://support.microsoft.com/kb/331796/en-us

    2. Disable your antivirus program

    3. Are there any traces in Event logs?

    4. There are standard procedures http://windows.microsoft.com/en-US/windows7/Resolving-stop-blue-screen-errors-in-Windows-7

    5. There are special blogs focused on this error http://mikemstech.blogspot.com/2011/12/troubleshooting-0xf4.html

    6. If nothing helps, reinstall Windows and install drivers in proper order starting with chipser driver.

    Regards

    Milos

    Tuesday, April 10, 2012 8:32 AM
  • Adding a few specific comments to those of Milos.

    I see 3 old drivers loaded that need to be updated:

    netr28x.sys Ralink RT2860 series Wireless LAN Card (you may have a different manufacturer) http://www.ralinktech.com/en/04_support/support.php?sn=500

    RtNdPt60.sys Netgear GA511 Driver file (Realtek chipset) http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=7&PFid=10&Level=3&Conn=2

    HECIx64.sys Intel Management Engine Interface http://downloadcenter.intel.com/Default.aspx

    In addition, there are 2 programs that should be uninstalled for testing purposes, VirtualCloneCD (VClone.sys) and
        
    CDRTools/ElbyCDIO/DVD Region Killer/VirtualCloneDrive (elby CloneDVD™ 2)/AnyDVD (ElbyCDIO.sys).

    If you need a virtual drive during the testing period, I think MagicISO is less likely to cause problems: http://www.magiciso.com/tutorials/miso-magicdisc-overview.htm

    Tuesday, April 10, 2012 11:45 AM
  • Hello,

    Start by that:

    • Update all possible drivers
    • Uninstall all unused programs
    • Run chkdsk /r /f and sfc /scannow
    • Perform a clean boot: http://support.microsoft.com/kb/929135
    • Disable all used security softwares
    • Run memtest86+ and check if all is okay with your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support for assistance

    You can also contact Microsoft CSS for assistance.


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    • Marked as answer by Juke Chou Sunday, May 6, 2012 9:33 AM
    Wednesday, April 11, 2012 2:18 PM
  • Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Users\John\Desktop\Dump\120711-21512-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*C:\localsymbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Personal Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506 Machine Name: Kernel base = 0xfffff800`03019000 PsLoadedModuleList = 0xfffff800`0325e670 Debug session time: Wed Dec 7 15:59:06.786 2011 (UTC - 5:00) System Uptime: 0 days 2:11:51.004 Loading Kernel Symbols ............................................................... ................................................................ ................................. Loading User Symbols Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck F4, {3, fffffa8007f95b30, fffffa8007f95e10, fffff800033998b0} Probably caused by : csrss.exe Followup: MachineOwner ---------

    B_pill, above is the brief summary of your dump.  A search on csrss.exe found this thread that looks a lot like yours.  It turned out to be a virus.  Good luck and enjoy, John.
    Wednesday, April 11, 2012 5:32 PM
  • Bill

    John is correct that the above turned out to be a virus (I am in that thread) but the crux of the matter is that there, a critical process was terminated, and there, His malware was suspect. 

    I would strongly suggest that you remove and replace your Avast and replace it with Microsoft Security Essentials AT LEAST TO TEST.

    I would also download malwarebytes free and run it in safe mode just to be sure.

    Avast  can be a  contributing cause of BSOD'S . Please remove and replace  with Microsoft Security Essentials AT LEAST TO TESThttp://files.avast.com/files/eng/aswclear5.exehttp://www.microsoft.com/security_essentials/

    Please download the free version of Malwarebytes. Update it immediately. Do a full system scan Let us know the results at the end. http://www.malwarebytes.org/products


    • Edited by ZigZag3143x Thursday, April 12, 2012 1:02 AM
    • Marked as answer by Juke Chou Sunday, May 6, 2012 9:34 AM
    Thursday, April 12, 2012 1:01 AM