locked
Windows 7 Pro 64bit BSOD on start up RRS feed

  • Question

  • hi, recently my computer keep BSOD on start up (not every time) which it nvr happen before.

    i have a blue screen viewer checker and this is the error i get


    Dump File Crash Time Bug Check String Bug Check Code Parameter 1 Parameter 2 Parameter 3 Parameter 4 Caused By Driver Caused By Address File Description Product Name Company File Version Processor Crash Address Stack Address 1 Stack Address 2 Stack Address 3 Computer Name Full Path Processors Count Major Version Minor Version Dump File Size
    041914-23524-01.dmp 4/19/2014 12:10:13 PM CRITICAL_OBJECT_TERMINATION 0x000000f4 00000000`00000003 fffffa80`0adf8b30 fffffa80`0adf8e10 fffff800`037cb7b0 ntoskrnl.exe ntoskrnl.exe+75bc0 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.18247 (win7sp1_gdr.130828-1532) x64 ntoskrnl.exe+75bc0         C:\Windows\Minidump\041914-23524-01.dmp 4 15 7601 262,144

    Saturday, April 19, 2014 4:26 AM

Answers

  • Thanks very much!

    All of the attached DMP files are of the CRITICAL_OBJECT_TERMINATION (f4) bug check.

    This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.

    BugCheck F4, {3, fffffa800adf8b30, fffffa800adf8e10, fffff800037cb7b0}

    0: kd> !process fffffa800adf8b30 3
    GetPointerFromAddress: unable to read from fffff800036fe000
    PROCESS fffffa800adf8b30
        SessionId: none  Cid: 0330    Peb: 7fffffd6000  ParentCid: 02c4
        DirBase: 1d457b000  ObjectTable: fffff8a0010d2cd0  HandleCount: <Data Not Accessible>
        Image: wininit.exe
    

    0: kd> k
    Child-SP          RetAddr           Call Site
    fffff880`02be0978 fffff800`03854ab2 nt!KeBugCheckEx
    fffff880`02be0980 fffff800`037ffabb nt!PspCatchCriticalBreak+0x92
    fffff880`02be09c0 fffff800`0377f674 nt! ?? ::NNGAKEGL::`string'+0x17486
    fffff880`02be0a10 fffff880`04c107a9 nt!NtTerminateProcess+0xf4
    fffff880`02be0a90 00000000`00000000 aswSP+0x107a9
    

    ^^ avast's! Self Protection driver is terminating wininit.exe, which is a big no-no.

    --------------------

    Remove and replace avast! with Microsoft Security Essentials for temporary troubleshooting purposes as it's causing issues:

    avast! removal - http://www.avast.com/uninstall-utility

    MSE -  http://windows.microsoft.com/en-us/windows/security-essentials-download

    Regards,

    Patrick

    “Be kind whenever possible. It is always possible.” - Dalai Lama

    • Marked as answer by -Shin- Sunday, April 27, 2014 3:35 PM
    Saturday, April 26, 2014 4:55 AM

All replies

  • Hi,

    In order to assist you, we will need the .DMP files to analyze what exactly occurred at the time of the crash, etc.

    If you don't know where .DMP files are located, here's how to get to them:

    1. Navigate to the %systemroot%\Minidump folder.

    2. Copy any and all DMP files in the Minidump folder to your Desktop and then zip up these files.

    3. Upload the zip containing the .DMP files to Onedrive or a hosting site of your choice and paste in your reply. Prefered sites: Onedrive, Mediafire, Dropbox, etc. Nothing with wait-timers.

    4 (optional): The type of .DMP files located in the Minidump folder are known as Small Memory Dumps. In %systemroot% there will be what is known as a Kernel-Dump (if your system is set to generate). It is labeled MEMORY.DMP. The difference between Small Memory Dumps and Kernel-Dumps in the simplest definition is a Kernel-Dump contains much more information at the time of the crash, therefore allowing further debugging of your issue. If your upload speed permits it, and you aren't going against any strict bandwidth and/or usage caps, etc, the Kernel-Dump is the best choice. Do note that Kernel-Dumps are much larger in size due to containing much more info, which is why I mentioned upload speed, etc.

    If you are going to use Onedrive but don't know how to upload to it, please visit the following:

    Upload photos and files to Onedrive.

    Please note that any "cleaner" programs such as TuneUp Utilities, CCleaner, etc, by default will delete .DMP files upon use.

    If your computer is not generating .DMP files, please do the following:

    1. Start > type %systemroot% which should show the Windows folder, click on it. Once inside that folder, ensure there is a Minidump folder created. If not, CTRL-SHIFT-N to make a New Folder and name it Minidump.

    2. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Performance > Settings > Advanced > Ensure there's a check-mark for 'Automatically manage paging file size for all drives'.

    3. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the system log'.

    Ensure Small Memory Dump is selected and ensure the path is %systemroot%\Minidump.

    4. Double check that the WERS is ENABLED:

    Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.

    If you cannot get into normal mode to do any of this, please do this via Safe Mode.

    Regards,

    Patrick

    “Be kind whenever possible. It is always possible.” - Dalai Lama

    Saturday, April 19, 2014 5:32 PM
  • Hi,

    Any update? A dump file will be better for analyzing.

    If you can not enter Windwos, try to boot to safe mdoe or perform a startup repair, check if it can make any difference.

    If you can enter your PC, make sure your PC has the latest BIOS and keep all drivers are up-to-date.


    Yolanda Zhu
    TechNet Community Support

    Monday, April 21, 2014 7:08 AM
  • safe mode is also the same?

    have you tried clean boot?

    http://support.microsoft.com/kb/929135/en-us


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Monday, April 21, 2014 7:55 AM
  • here is the dump files!

    https://www.dropbox.com/s/bv2h164xfqva3sk/BSOD%20dump%20files.zip

    Saturday, April 26, 2014 4:46 AM
  • Thanks very much!

    All of the attached DMP files are of the CRITICAL_OBJECT_TERMINATION (f4) bug check.

    This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.

    BugCheck F4, {3, fffffa800adf8b30, fffffa800adf8e10, fffff800037cb7b0}

    0: kd> !process fffffa800adf8b30 3
    GetPointerFromAddress: unable to read from fffff800036fe000
    PROCESS fffffa800adf8b30
        SessionId: none  Cid: 0330    Peb: 7fffffd6000  ParentCid: 02c4
        DirBase: 1d457b000  ObjectTable: fffff8a0010d2cd0  HandleCount: <Data Not Accessible>
        Image: wininit.exe
    

    0: kd> k
    Child-SP          RetAddr           Call Site
    fffff880`02be0978 fffff800`03854ab2 nt!KeBugCheckEx
    fffff880`02be0980 fffff800`037ffabb nt!PspCatchCriticalBreak+0x92
    fffff880`02be09c0 fffff800`0377f674 nt! ?? ::NNGAKEGL::`string'+0x17486
    fffff880`02be0a10 fffff880`04c107a9 nt!NtTerminateProcess+0xf4
    fffff880`02be0a90 00000000`00000000 aswSP+0x107a9
    

    ^^ avast's! Self Protection driver is terminating wininit.exe, which is a big no-no.

    --------------------

    Remove and replace avast! with Microsoft Security Essentials for temporary troubleshooting purposes as it's causing issues:

    avast! removal - http://www.avast.com/uninstall-utility

    MSE -  http://windows.microsoft.com/en-us/windows/security-essentials-download

    Regards,

    Patrick

    “Be kind whenever possible. It is always possible.” - Dalai Lama

    • Marked as answer by -Shin- Sunday, April 27, 2014 3:35 PM
    Saturday, April 26, 2014 4:55 AM