locked
Windows 7 BSOD event log RRS feed

  • Question

  • Here is a link to my bug check error log. Please see if you can figure out what keeps shutting off our computer. Thanks

    https://onedrive.live.com/redir?resid=8426936ACB3E9125!113&authkey=!AFBfLTaRCDBuVQw&ithint=file%2c.zip

    Wednesday, April 23, 2014 7:07 PM

Answers

  • Thanks a lot, John!

    All of the attached DMP files are of the PAGE_FAULT_IN_NONPAGED_AREA (50) bug check.

    This indicates that invalid system memory has been referenced.

    Bug check 0x50 usually occurs after the installation of faulty hardware or in the event of failure of installed hardware (usually related to defective RAM, be it main memory, L2 RAM cache, or video RAM).

    Another common cause is the installation of a faulty system service.

    Antivirus software can also trigger this error, as can a corrupted NTFS volume.

    6: kd> k
    Child-SP          RetAddr           Call Site
    fffff880`0325d868 fffff800`031105b3 nt!KeBugCheckEx
    fffff880`0325d870 fffff800`03091cee nt! ?? ::FNODOBFM::`string'+0x43801
    fffff880`0325d9d0 fffff880`06975878 nt!KiPageFault+0x16e
    fffff880`0325db60 fffffa80`0ac3a000 igdpmd64+0x15a878
    fffff880`0325db68 fffffa80`0f54f010 0xfffffa80`0ac3a000
    fffff880`0325db70 fffffa80`0ac3a000 0xfffffa80`0f54f010
    fffff880`0325db78 fffffa80`0f54f010 0xfffffa80`0ac3a000
    fffff880`0325db80 fffffa80`0ac3a000 0xfffffa80`0f54f010
    fffff880`0325db88 fffff880`0d230700 0xfffffa80`0ac3a000
    fffff880`0325db90 fffffa80`07008298 0xfffff880`0d230700
    fffff880`0325db98 00000000`00000000 0xfffffa80`07008298
    

    ^^ igdpmd64.sys (Intel Graphics driver) calls into a pagefault.

    ------------------

    1. Ensure you have the latest video card drivers. If you are already on the latest video card drivers, uninstall and install a version or a few versions behind the latest to ensure it's not a latest driver only issue. If you have already experimented with the latest video card driver and many previous versions, please give the beta driver for your card a try.

    2. Remove and replace Norton with Microsoft Security Essentials for temporary troubleshooting purposes as it's likely causing conflicts:

    Norton removal - https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us;jsessionid=841A6D40BA6872C47697C6C6B19C8E11.4?entsrc=redirect_pubweb&pvid=f-home

    MSE -  http://windows.microsoft.com/en-us/windows/security-essentials-download

    3. SSPORT.sys is listed and loaded which is the Samsung Printer driver. The device drivers are dated from 2005 which is far too old to function properly with the OS. With this said, if no updates to the driver/software are available, please uninstall the printer software + disconnect the printer.

    Regards,

    Patrick

    “Be kind whenever possible. It is always possible.” - Dalai Lama

    • Marked as answer by Karen Hu Monday, May 5, 2014 8:17 AM
    Thursday, April 24, 2014 6:24 PM

All replies

  • Hi,

    In order to assist you, we will need the .DMP files to analyze what exactly occurred at the time of the crash, etc.

    If you don't know where .DMP files are located, here's how to get to them:

    1. Navigate to the %systemroot%\Minidump folder.

    2. Copy any and all DMP files in the Minidump folder to your Desktop and then zip up these files.

    3. Upload the zip containing the .DMP files to Onedrive or a hosting site of your choice and paste in your reply. Prefered sites: Onedrive, Mediafire, Dropbox, etc. Nothing with wait-timers.

    4 (optional): The type of .DMP files located in the Minidump folder are known as Small Memory Dumps. In %systemroot% there will be what is known as a Kernel-Dump (if your system is set to generate). It is labeled MEMORY.DMP. The difference between Small Memory Dumps and Kernel-Dumps in the simplest definition is a Kernel-Dump contains much more information at the time of the crash, therefore allowing further debugging of your issue. If your upload speed permits it, and you aren't going against any strict bandwidth and/or usage caps, etc, the Kernel-Dump is the best choice. Do note that Kernel-Dumps are much larger in size due to containing much more info, which is why I mentioned upload speed, etc.

    If you are going to use Onedrive but don't know how to upload to it, please visit the following:

    Upload photos and files to Onedrive.

    Please note that any "cleaner" programs such as TuneUp Utilities, CCleaner, etc, by default will delete .DMP files upon use.

    If your computer is not generating .DMP files, please do the following:

    1. Start > type %systemroot% which should show the Windows folder, click on it. Once inside that folder, ensure there is a Minidump folder created. If not, CTRL-SHIFT-N to make a New Folder and name it Minidump.

    2. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Performance > Settings > Advanced > Ensure there's a check-mark for 'Automatically manage paging file size for all drives'.

    3. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the system log'.

    Ensure Small Memory Dump is selected and ensure the path is %systemroot%\Minidump.

    4. Double check that the WERS is ENABLED:

    Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.

    If you cannot get into normal mode to do any of this, please do this via Safe Mode.

    Regards,

    Patrick

    “Be kind whenever possible. It is always possible.” - Dalai Lama

    Wednesday, April 23, 2014 7:17 PM
  • Here is a new link to the .dmp files requested. Let me know if you have any issues retrieving them. https://onedrive.live.com/redir?resid=8426936ACB3E9125!114&authkey=!ADdBuZKkMb2Erl0&ithint=file%2c.zip

    Thanks,

    John

    Thursday, April 24, 2014 2:45 PM
  • Thanks a lot, John!

    All of the attached DMP files are of the PAGE_FAULT_IN_NONPAGED_AREA (50) bug check.

    This indicates that invalid system memory has been referenced.

    Bug check 0x50 usually occurs after the installation of faulty hardware or in the event of failure of installed hardware (usually related to defective RAM, be it main memory, L2 RAM cache, or video RAM).

    Another common cause is the installation of a faulty system service.

    Antivirus software can also trigger this error, as can a corrupted NTFS volume.

    6: kd> k
    Child-SP          RetAddr           Call Site
    fffff880`0325d868 fffff800`031105b3 nt!KeBugCheckEx
    fffff880`0325d870 fffff800`03091cee nt! ?? ::FNODOBFM::`string'+0x43801
    fffff880`0325d9d0 fffff880`06975878 nt!KiPageFault+0x16e
    fffff880`0325db60 fffffa80`0ac3a000 igdpmd64+0x15a878
    fffff880`0325db68 fffffa80`0f54f010 0xfffffa80`0ac3a000
    fffff880`0325db70 fffffa80`0ac3a000 0xfffffa80`0f54f010
    fffff880`0325db78 fffffa80`0f54f010 0xfffffa80`0ac3a000
    fffff880`0325db80 fffffa80`0ac3a000 0xfffffa80`0f54f010
    fffff880`0325db88 fffff880`0d230700 0xfffffa80`0ac3a000
    fffff880`0325db90 fffffa80`07008298 0xfffff880`0d230700
    fffff880`0325db98 00000000`00000000 0xfffffa80`07008298
    

    ^^ igdpmd64.sys (Intel Graphics driver) calls into a pagefault.

    ------------------

    1. Ensure you have the latest video card drivers. If you are already on the latest video card drivers, uninstall and install a version or a few versions behind the latest to ensure it's not a latest driver only issue. If you have already experimented with the latest video card driver and many previous versions, please give the beta driver for your card a try.

    2. Remove and replace Norton with Microsoft Security Essentials for temporary troubleshooting purposes as it's likely causing conflicts:

    Norton removal - https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us;jsessionid=841A6D40BA6872C47697C6C6B19C8E11.4?entsrc=redirect_pubweb&pvid=f-home

    MSE -  http://windows.microsoft.com/en-us/windows/security-essentials-download

    3. SSPORT.sys is listed and loaded which is the Samsung Printer driver. The device drivers are dated from 2005 which is far too old to function properly with the OS. With this said, if no updates to the driver/software are available, please uninstall the printer software + disconnect the printer.

    Regards,

    Patrick

    “Be kind whenever possible. It is always possible.” - Dalai Lama

    • Marked as answer by Karen Hu Monday, May 5, 2014 8:17 AM
    Thursday, April 24, 2014 6:24 PM