locked
Blue Screen Errors RRS feed

  • Question

  • Recently I have been having a series of blue screen errors.  A copy of the Windows event properties log is as follows:
    Log Name:      System

    Source:        Microsoft-Windows-Kernel-Power

    Date:          4/24/2011 9:57:18 PM

    Event ID:      41

    Task Category: (63)

    Level:         Critical

    Keywords:      (2)

    User:          SYSTEM

    Computer:      Windows7

    Description:

    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

        <EventID>41</EventID>

        <Version>2</Version>

        <Level>1</Level>

        <Task>63</Task>

        <Opcode>0</Opcode>

        <Keywords>0x8000000000000002</Keywords>

        <TimeCreated SystemTime="2011-04-25T01:57:18.276422500Z" />

        <EventRecordID>233350</EventRecordID>

        <Correlation />

        <Execution ProcessID="4" ThreadID="8" />

        <Channel>System</Channel>

        <Computer>Windows7</Computer>

        <Security UserID="S-1-5-18" />

      </System>

      <EventData>

        <Data Name="BugcheckCode">127</Data>

        <Data Name="BugcheckParameter1">0x8</Data>

        <Data Name="BugcheckParameter2">0x80050031</Data>

        <Data Name="BugcheckParameter3">0x406f8</Data>

        <Data Name="BugcheckParameter4">0xfffff80003292d91</Data>

        <Data Name="SleepInProgress">false</Data>

        <Data Name="PowerButtonTimestamp">0</Data>

      </EventData>

    </Event>

    My system is a Dell Studio 540, with an Intel Core 2 Quad CPU Q8300@2.50GHz processor, 6.0 GB RAM, ATI Radeon HD 4350 graphics card, Segate ST31000528AS 1 TB hard drive & Windows7 Home Premium 64-bit.  The system comes with a diagnostic tool to check the hardware.  I have run it several times and everything checks out OK.  Because of this Dell is saying it is not a hardware problem.  They are suggesting reinstalling the OS.  Maybe so but I want to check all other options before doing this.

    One thing is I just installed Internet Explorer 9 a few days prior to seeing this issue.  Could this be the culprit?  I can uninstall it which should roll it back ti IE8.  I know several others that have IE9 without this problem.  What do you think?


    I appreciate your help,

    sahalen

    Monday, April 25, 2011 3:10 AM

All replies

  • Hello,
    please use Microsoft Skydrive to upload dump files (%systemroot%\minidumps like c:\windows\minidumps) and post a link here.
    If you want to read dump files without my help, use Windbg and refer to this Microsoft article:
    You can also try to contact Microsoft CSS to solve that.

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    • Proposed as answer by Miya Yao Wednesday, April 27, 2011 7:31 AM
    • Marked as answer by Miya Yao Friday, April 29, 2011 9:33 AM
    • Unmarked as answer by sahalen Sunday, May 22, 2011 3:54 AM
    Monday, April 25, 2011 7:00 AM
  • Hello Mr. X,

    Thank-you for your response to my question.  Sorry for the delay in my response back to you.  I was unavailable until now.

     

    As per your instructions, I have uploaded the most recent minidump files to Microsoft Skydrive and the link is below.

    Thank-you very much for your help

    http://cid-c6d2ef3cbc2991af.office.live.com/self.aspx/.Public
    Sunday, May 22, 2011 3:44 AM
  • *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault).  The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
            use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
            use .trap on that value
    Else
            .trap on the appropriate frame will show where the trap was taken
            (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 0000000080050031
    Arg3: 00000000000406f8
    Arg4: fffff80003298af4
    Debugging Details:
    ------------------
    BUGCHECK_STR:  0x7f_8
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  System
    CURRENT_IRQL:  2
    LAST_CONTROL_TRANSFER:  from fffff8000328dca9 to fffff8000328e740
    STACK_TEXT:  
    fffff880`009ecce8 fffff800`0328dca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
    fffff880`009eccf0 fffff800`0328c172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`009ece30 fffff800`03298af4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
    fffff880`02d15fa0 fffff800`03293da7 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SepMandatoryIntegrityCheck+0x14
    fffff880`02d16020 fffff800`03256f5a : fffffa80`0960a080 00000000`00000001 00000000`00000000 fffffa80`06d9c7c8 : nt!SeAccessCheckWithHint+0x317
    fffff880`02d16100 fffff880`01406c5a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SeAccessCheckFromState+0x102
    fffff880`02d167f0 fffff880`0140494f : 00000000`c0000022 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!CompareSecurityContexts+0x6a
    fffff880`02d16860 fffff880`014069b5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!MatchValues+0xef
    fffff880`02d168b0 fffff880`01406845 : fffffa80`08f52410 fffffa80`07e5f8f0 fffff880`02d16ad8 fffff880`02d17210 : NETIO!FilterMatch+0x95
    fffff880`02d16900 fffff880`01407ccb : 00000000`00000000 00000000`00000000 fffff880`02d17210 fffff880`02d16ac0 : NETIO!IndexListClassify+0x69
    fffff880`02d16980 fffff880`03840417 : fffff880`02d16e58 fffff880`02d16e58 fffff880`02d17b90 fffffa80`05a61030 : NETIO!KfdClassify+0xa4e
    fffff880`02d16cf0 fffff880`0383983e : fffff880`03948690 00000000`00000000 fffffa80`0881e010 00000000`00000000 : tcpip!WfpAleClassify+0x57
    fffff880`02d16d30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e
    STACK_COMMAND:  kb
    FOLLOWUP_IP: 
    NETIO!CompareSecurityContexts+6a
    fffff880`01406c5a 448b442470      mov     r8d,dword ptr [rsp+70h]
    SYMBOL_STACK_INDEX:  6
    SYMBOL_NAME:  NETIO!CompareSecurityContexts+6a
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: NETIO
    IMAGE_NAME:  NETIO.SYS
    DEBUG_FLR_IMAGE_TIMESTAMP:  4bbe946f
    FAILURE_BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
    BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
    Followup: MachineOwner
    ---------
    -------------------------------------------------------------------------------
    There is something wrong with your processor. Please contact your manufacturer Technical Support.

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    Sunday, May 22, 2011 9:39 AM
  • *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    STACK_TEXT:  
    fffff880`009ecce8 fffff800`0328dca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
    fffff880`009eccf0 fffff800`0328c172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`009ece30 fffff800`03298af4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
    fffff880`02d15fa0 fffff800`03293da7 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SepMandatoryIntegrityCheck+0x14
    fffff880`02d16020 fffff800`03256f5a : fffffa80`0960a080 00000000`00000001 00000000`00000000 fffffa80`06d9c7c8 : nt!SeAccessCheckWithHint+0x317
    fffff880`02d16100 fffff880`01406c5a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SeAccessCheckFromState+0x102
    fffff880`02d167f0 fffff880`0140494f : 00000000`c0000022 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!CompareSecurityContexts+0x6a
    fffff880`02d16860 fffff880`014069b5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : NETIO!MatchValues+0xef
    fffff880`02d168b0 fffff880`01406845 : fffffa80`08f52410 fffffa80`07e5f8f0 fffff880`02d16ad8 fffff880`02d17210 : NETIO!FilterMatch+0x95
    fffff880`02d16900 fffff880`01407ccb : 00000000`00000000 00000000`00000000 fffff880`02d17210 fffff880`02d16ac0 : NETIO!IndexListClassify+0x69
    fffff880`02d16980 fffff880`03840417 : fffff880`02d16e58 fffff880`02d16e58 fffff880`02d17b90 fffffa80`05a61030 : NETIO!KfdClassify+0xa4e
    fffff880`02d16cf0 fffff880`0383983e : fffff880`03948690 00000000`00000000 fffffa80`0881e010 00000000`00000000 : tcpip!WfpAleClassify+0x57
    fffff880`02d16d30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e
    STACK_COMMAND:  kb
    FOLLOWUP_IP: 
    NETIO!CompareSecurityContexts+6a
    fffff880`01406c5a 448b442470      mov     r8d,dword ptr [rsp+70h]
    SYMBOL_STACK_INDEX:  6
    SYMBOL_NAME:  NETIO!CompareSecurityContexts+6a
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: NETIO
    IMAGE_NAME:  NETIO.SYS
    DEBUG_FLR_IMAGE_TIMESTAMP:  4bbe946f
    FAILURE_BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
    BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
    Followup: MachineOwner
    ---------
    -------------------------------------------------------------------------------
    There is something wrong with your processor. Please contact your manufacturer Technical Support.

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    "There is something wrong with your processor."

    How did you reach that conclusion?

    It looks more like a ZoneAlarm problem to me; use their uninstaller http://download.zonealarm.com/bin/free/support/cpes_clean.exe and turn on Windows firewall.


    • Proposed as answer by wortas Tuesday, May 24, 2011 8:57 AM
    Monday, May 23, 2011 3:33 PM