DELL 5010 Motherboard Change causing frequent BSOD

D

div1234522

Member
Joined
Aug 12, 2013
Posts
19
· OS - Windows 8
· OS - x64
· Original OS - DOS
· OS - Retail version
· H/W age - Motherboard replaced yesterday (so graphic card, heat sink are brand new), HDD - 2 months, rest 1 year
· OS age - 4 months

· CPU - Intel i5 M 480 @2.67Ghz 2.66Ghz
· Video Card - ATI Mobility Radeon HD 4650 (new one)
· MotherBoard - Umm, baseboard manufacturer - DELL inc. (original dell motherboard replacement)

· System Manufacturer - DELL Inc.
· DELL Inspiron N5010

Please help me, as soon as possible :)
 
Most of the dumps are naming MsMpEng.exe(Windows Defender) is this the only AV installed or do you have a 3rd party AV installed also?

This system would have shipped with Windows 7 on it, where did this copy of Win 8 come from? I.E. MS DVD, Internet D/L etc.

Did the BSOD problem happen on win 7?


From the latest dump file

Code: 
2013 Aug 12 11:55:33 AM     98-dbug   Sysnative  BSOD scripts
              …………………………………………………………………………………………………………………………………………………………………………………………………………………………

                         TOTAL DUMP FILES PROCESSED THIS RUN:  1
                         TOTAL DUMP FILES PROCESSED  TO DATE:  325

              …………………………………………………………………………………………………………………………………………………………………………………………………………………………





Debug session time: Fri Aug  9 11:38:15.663 2013 (UTC - 4:00)
Loading Dump File [C:\Users\Owner\Bsodapps\SysnativeBSODApps\080913-24429-01.dmp]
Built by: 9200.16628.amd64fre.win8_gdr.130531-1504
System Uptime: 0 days 2:29:28.349
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+344e2 )
BugCheck FC, {fffff88001955db0, 800000012cd1d963, fffff88008c06340, 2}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000FC]ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)[/url]
Bugcheck code 000000fC
Arguments: 
Arg1: fffff88001955db0, Virtual address for the attempted execute.
Arg2: 800000012cd1d963, PTE contents.
Arg3: fffff88008c06340, (reserved)
Arg4: 0000000000000002, (reserved)
BUGCHECK_STR:  0xFC
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  MsMpEng.exe
FAILURE_BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+344e2
MaxSpeed:     2670
CurrentSpeed: 2660
BiosVersion = A12
BiosReleaseDate = 01/25/2011
SystemManufacturer = Dell Inc.
SystemProductName = Inspiron N5010
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``




		***   3rd PARTY DRIVER LIST   *** 
		***   3rd PARTY DRIVER LIST   *** 




AMPPAL.sys             Wed Jul 18 03:48:59 2012 (50066A6B)
AtihdW86.sys           Thu Feb 14 17:11:12 2013 (511D6100)
HECIx64.sys            Thu Sep 17 15:54:16 2009 (4AB293E8)
Netwsw00.sys           Thu Sep 27 16:57:42 2012 (5064BDC6)
SynTP.sys              Wed Dec 23 15:10:23 2009 (4B32792F)
atikmdag.sys           Wed Jul  4 01:16:13 2012 (4FF3D19D)
atikmpag.sys           Wed Jul  4 01:10:55 2012 (4FF3D05F)
dump_storahci.sys      Fri Mar  1 21:15:44 2013 (513160D0)
idmwfp.sys             Fri Apr  5 08:46:57 2013 (515EC7C1)
intelppm.sys           Mon Nov  5 22:55:02 2012 (50988A16)
stwrt64.sys            Thu Jun 17 22:16:06 2010 (4C1AD6E6)
vmm.sys                Wed Dec 28 08:28:47 2011 (4EFB198F)






[url=http://www.carrona.org/drivers/driver.php?id=AMPPAL.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]AMPPAL.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=AtihdW86.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]AtihdW86.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=HECIx64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]HECIx64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=Netwsw00.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]Netwsw00.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=SynTP.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]SynTP.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=atikmdag.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]atikmdag.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=atikmpag.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]atikmpag.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=dump_storahci.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]dump_storahci.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=idmwfp.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]idmwfp.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=intelppm.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]intelppm.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=stwrt64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]stwrt64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=vmm.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]vmm.sys[/COLOR][/B][/url]


   --- E O J ---   2013 Aug 12 11:55:33 AM    _98-dbug   Copyright 2012 Sysnative Forums
   --- E O J ---   2013 Aug 12 11:55:33 AM    _98-dbug   Copyright 2012 Sysnative Forums
   --- E O J ---   2013 Aug 12 11:55:33 AM    _98-dbug   Copyright 2012 Sysnative Forums
 
Code: 
[COLOR=#ff0000]BugCheck FC[/COLOR], {[COLOR="#008000"]fffff88001955db0[/COLOR], 800000012cd1d963, fffff88008c06340, 2}

Probably caused by : ndis.sys ( ndis!ndisDummyIrpHandler+50 )

Code: 
Usual causes:  Device driver

A driver has referenced a non-executable memory address and then attempted to execute this page of memory.

Code: 
2: kd> [COLOR="#008000"]!pte fffff88001955db0[/COLOR]
                                           [COLOR="#FF0000"]VA fffff88001955db0[/COLOR]
PXE at FFFFF6FB7DBEDF88    PPE at FFFFF6FB7DBF1000    PDE at FFFFF6FB7E200060    PTE at FFFFF6FC4000CAA8
contains 00000000006E8863  contains 00000000006E7863  contains 000000000067E863  contains 800000012CD1D963
GetUlongFromAddress: unable to read from fffff80180be30e4
pfn 6e8       ---DA--KWEV  pfn 6e7       ---[COLOR="#FF0000"]DA[/COLOR]--KWEV  pfn 67e       ---DA--KWEV  pfn 12cd1d    -G-DA--KWEV

We can see from the PTE Status that the virtual address has been written to and accessed.

Code: 
2: kd> [COLOR="#008000"]!thread[/COLOR]
GetPointerFromAddress: unable to read from fffff80180be3000
THREAD fffffa8006057b00  Cid 0678.1478  Teb: 000007f70812a000 Win32Thread: fffff901006ce200 RUNNING on processor 2
IRP List:
   [COLOR="#FF0000"] Unable to read nt!_IRP @ fffffa800b989de0[/COLOR]
Not impersonating
GetUlongFromAddress: unable to read from fffff80180b02cf0
Owning Process            fffffa800b2cf940       Image:         MsMpEng.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      574890       
Context Switch Count      27872          IdealProcessor: 0             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x000007f91ee1da50
Stack Init fffff88008c06dd0 Current fffff88008c06ac0
Base fffff88008c07000 Limit fffff88008c01000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5

There seems to be a pending IRP for this thread too, but before we can continue, where did you purchase or gather Windows 8 from?
 
Yes the BSOD always happens during Windows Defender Quick Scan. I also tried the Driver Check method, but had to restore the system restore point as the laptop failed to start.

The laptop shipped with basic DOS, and i had installed Win 7 at that time. Installed a fresh copy of Windows 8 after it released. Windows 8 was working fine before the motherboard change for around 2-3 months atleast (Windows Defender was installed with it as well).

The BSOD never happened on Win7, or Win8 even before the motherboard replacement.

Windows Defender is the only AV since a long time, had only AVG before that.
 
The question being where on the internet? Often BSOD's related to the AV product are malware related and UN-official download sites are of course always suspect.
 
Wrench97 said:
The question being where on the internet? Often BSOD's related to the AV product are malware related and UN-official download sites are of course always suspect.
Click to expand...

It was a torrent download, untouched version of retail copy of Win 8. Windows Defender and Win 8 never gave me a problem before the replacement. Did many scans and the softwares were same before and now. Just a hardware change as mentioned.
 
That kind of tells you it's the board causing the issue then.
With a non-genuine copy of windows who knows what has been touched or not, part of Windows Defenders job is stop manipulation of system files that includes the activation/validation files, a simple defender update may have caused it to uncover previously unchecked modified files.
 
Wrench97 said:
That kind of tells you it's the board causing the issue then.
With a non-genuine copy of windows who knows what has been touched or not, part of Windows Defenders job is stop manipulation of system files that includes the activation/validation files, a simple defender update may have caused it to uncover previously unchecked modified files.
Click to expand...

Actually Windows Defender never updated since last month, as the laptop was gone for repair. I've got 5 motherboard replacements and all seem to have this (same?) BSOD error. I'm wondering if it could be the new graphic card, or any other hardware and its corresponding driver.
 
Wrench97 said:
I would try a known legitimate OS from a valid disk before doing anything else.
Click to expand...

You mean to say i have to change my OS from scratch, alongwith all the softwares. That beats the purpose of locating the source of BSOD, and not having to go through all that again. :omg:
 
Hi,

How did you activate the current Windows 8 install you have that you got from a torrent?

Regards,

Patrick
 
Downloading operating systems from torrent sites, usually come bundled with malware, can you post a screenshot like the one below?

Windows-8-is-not-activated.png

The picture is from Google Images.
 
It showed windows is activated there. I currently don't have the laptop with me, can post a screenshot tomorrow.

I never got any malware warning with avg or Windows defender.
 
Windows 8 seems to be activated, yet you weren't prompted for a product key to activate the operating system, and you downloaded the operating system from a torrent site. It doesn't sound genuine at all to me.

Please download and run - http://go.microsoft.com/fwlink/?linkid=52012

Save it to your desktop - you may need it a few times :)
Once you've got it, now Run it (either double-click it, or highlight the icon and hit the Enter key).
Accept the User Access Prompt to elevate privileges for the program.
You'll get a small window come up with a prominent 'Continue' button.
Read the guff - and the privacy statement! - and then click on the Continue button.
After a while (anything from a couple of seconds to a couple of minutes), the Continue button will turn into a Copy button (and there may be a 'Resolve' button as well)

Before doing anything else, click on the Copy button. This places a copy of the data onto the clipboard (where you cant't see it) and also tries to save the backup files it creates to a folder in the root of the C: drive.
Sometimes, the save will fail and you'll get an error message - IGNORE the error message, just close it and continue (it just means that for whatever reason, the program was unable to complete the save properly).
Click to expand...
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top