Jason Boyce Glasgow 28th July 2017 BSOD

Z

zoyce

Member
Joined
Jul 28, 2017
Posts
10
Hi, I've followed the steps from sysnative to get help with my sick PC & now I'm here.

Zip file attached, I'll try my best to answer the requested questions -
· OS - Windows 7 64 bit
· Original installed OS on system -XP (installed using a full retail disc I had from previous PC)
· OS - full retail version windows 7
· Age of system (hardware) just over 5 years
· Age of OS installation - just over 3 years (I THINK I had to re-install the OS at some point)


· CPU - AMD FX 8120 eight-core
· Video Card - NVIDIA GeForce GT 620
· MotherBoard -Gigabyte GA-970A-DS3
· Novatech desktop tower - delivery email says BB81208E (?)
· Power - Powerstation 750w?


Many thanks in advance for any help you can give..

Regards

Jason

 

Attachments

softwaremaniac - yes, many BSODs on & off... two this evening.
jcgriff2 - seems my machine wasn't configured to save the dmp files, hopefully I've sorted that now. Will go back to the start & generate another zip once I've had a few more blue screens.

Thanks

JB
 
If you have any Kernel Memory dumps, then please upload those too, although, you will need to use a file-sharing site such as DropBox.

Code: 
%systemroot%\MEMORY.DMP
 
Forgot to add, I have no key or disc for my current windows 7, the shop that fixed it a couple years back didn't give me these when they put a new copy on the machine. They closed down not long after. So - dodgy but that's where I'm at.
 
Hello Jason,

I've looked at the recent BSOD crash dumps and the one clue I have found so far is that the graphics driver is misbehaving. This was found in the SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e) BSOD.


Code: 
fffff880`03508088  fffff880`13119564*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0x10b564

nvlddmkm.sys Mon May 1 20:58:03 2017

I would recommend uninstalling the driver and any NVidia graphics software completely using DDU and then just reinstalling the latest driver. When you do this be sure the "clean install" box is checked and only install the Graphics driver and the PhysX driver.
 
I really can't believe its the nVidia, the last recent dumps show

Code: 
081117-100605-01.dmp

BugCheck 50, {fffff6fc74008688, 0, fffff800034d91a1, 2}


Could not read faulting driver name
Probably caused by : [COLOR=#ff0000]memory_corruption[/COLOR] ( nt!MiDispatchFault+d1 )

and next
Code: 
081117-157342-01.dmp

BugCheck 1000007E, {ffffffffc0000005, fffff800035f69cc, fffff880035087f8, fffff88003508060}

*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : [COLOR=#ff0000]Pool_Corruption[/COLOR] ( nt!ExDeferredFreePool+100 )

Followup:     Pool_corruption
---------

finaly

Code: 
MEMORY.DMP

BugCheck 50, {fffff6fc74008688, 0, fffff800034d91a1, 2}

Probably caused by : memory_corruption ( nt!MiDispatchFault+d1 )

Followup:     MachineOwner
---------

STACK_TEXT:  
fffff880`08504f38 fffff800`035381f2 : 00000000`00000050 fffff6fc`74008688 00000000`00000000 fffff880`085050a0 : nt!KeBugCheckEx
fffff880`08504f40 fffff800`034b9aae : 00000000`00000000 fffff6fc`74008688 fffff700`01080000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x3a456
fffff880`085050a0 fffff800`034d91a1 : 00000000`00363d8d 000007fe`f8420038 fffff683`ff7c2100 fffffa80`0d5e03f8 : nt!KiPageFault+0x16e
fffff880`08505230 fffff800`034c8c09 : fffff800`0344c000 000007fe`fabe0038 fffffa80`0d716060 fffffa80`00000000 : nt!MiDispatchFault+0xd1
fffff880`08505340 fffff800`034b9aae : 00000000`00000000 000007fe`fabe0038 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x359
fffff880`085054a0 fffff800`034b2600 : fffff800`03762fdb fffff880`08505b60 00001f80`000001a0 00000000`00000198 : nt!KiPageFault+0x16e
fffff880`08505638 fffff800`03762fdb : fffff880`08505b60 00001f80`000001a0 00000000`00000198 00000000`00000000 : nt[COLOR=#ff0000]!memcpy[/COLOR]+0x250
fffff880`08505640 fffff800`03762df3 : fffffa80`0d5e0060 000007fe`fabe0000 fffffa80`0d816b10 00000000`001ad790 : nt![COLOR=#ff0000]MmCopyVirtualMemory[/COLOR]+0x17b
fffff880`085059f0 fffff800`034bac13 : fffffa80`0d716060 00000000`001ad348 fffff880`08505a88 00000000`0021c3d0 : nt![COLOR=#ff0000]NtReadVirtualMemory[/COLOR]+0xff
fffff880`08505a70 00000000`77b1c12a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`001ad328 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b1c12a

The current process
PROCESS fffffa800d5e0060
    SessionId: 1  Cid: 0fbc    Peb: 7fffffdb000  ParentCid: 0d04
    DirBase: 122dbc000  ObjectTable: fffff8a015da6e10  HandleCount: 975.
    Image:[COLOR=#ff0000] PotPlayerMini64.exe[/COLOR]
    VadRoot fffffa801030cdc0 Vads 475 Clone 0 Private 30329. Modified 38197. Locked 3205.
    DeviceMap fffff8a0025bc9b0
    Token                             fffff8a003faa060
    ElapsedTime                       00:06:25.726
    UserTime                          00:02:18.185
    KernelTime                        00:00:40.747
    QuotaPoolUsage[PagedPool]         591256
    QuotaPoolUsage[NonPagedPool]      60240
    Working Set Sizes (now,min,max)  (23064, 50, 345) (92256KB, 200KB, 1380KB)
    PeakWorkingSetSize                24556
    VirtualSize                       2540 Mb
    PeakVirtualSize                   2552 Mb
    PageFaultCount                    2577726
    MemoryPriority                    BACKGROUND
    BasePriority                      10
    CommitCharge                      48554

Within Reg uninstall, AVG was found too, probably a rest i don't know
and beside uTorrent some mystery strings ^^


Top Services


Code: 
Pid ImageName              Commit   SharedCommit        Debt

  828 mbamservice.ex      505900 Kb           0 Kb        0 Kb
  39c MsMpEng.exe         359340 Kb           0 Kb        0 Kb
  fbc [COLOR=#ff0000]PotPlayerMini6 [/COLOR]     194216 Kb           0 Kb        0 Kb
  8d8 svchost.exe         193304 Kb           0 Kb        0 Kb

may be memory or it happened during swapping into memory from disk.
 
Thanks philc43, I've done that, though the latest reply from MichaelB seems to unearth some serious issues (not that I know what any of it means!)

Cheers

Jason
 
Hi Michael

Wondering if it's time to move on and just buy a new machine...
Should I uninstall PotPlayerMini6?
Advice on anything else I can do from here appreciated.

Thanks for the reply

Jason
 
I tried sfc /scannow after reinstalling NVIDIA
Are the CBS.log files any use? Here they are anyway:
 

Attachments

zoyce said:
Hi Michael

Wondering if it's time to move on and just buy a new machine...
Should I uninstall PotPlayerMini6?
Advice on anything else I can do from here appreciated.

Thanks for the reply

Jason
Click to expand...

Hi,

did a quick search on that player and it seems to be a Trojan too, the reason for mem_coruption probably.
uninstall, scan your machine with mbam and let adwcleaner having a look for unwanted Pup and other entries.
Downloads - AdwCleaner - ToolsLib
 
MichaelB said:
zoyce said:
Hi Michael

Wondering if it's time to move on and just buy a new machine...
Should I uninstall PotPlayerMini6?
Advice on anything else I can do from here appreciated.

Thanks for the reply

Jason
Click to expand...

Hi,

did a quick search on that player and it seems to be a Trojan too, the reason for mem_coruption probably.
uninstall, scan your machine with mbam and let adwcleaner having a look for unwanted Pup and other entries.
Downloads - AdwCleaner - ToolsLib
Click to expand...

I can't seem to find any information which supports that conclusion, VirusTotal appears to mark the file as clean?

VirusTotal
 
right, seems clear.
The version i got was wrapped, the difference :banghead:
 
Greetings, haven't posted here in a while as the replies dried out.
I'm getting more BSODs than ever, probably into three figures now, sometimes 4 or 5 in one evening, around a dozen different stop messages.
*NOTE - motherboard & PS have been replaced - reckon I was ripped off - 15th September, PC wouldn't boot up, took it in to shop next day, guy says it's motherboard so I agree for him to replace it. An hour later he says power supply's 'blown up'. Again, I agreed to a replacement unit. Never mind*

dmp files - 12 Oct 17 - SysnativeFileCollectionApp.zip - Google Drive
If this link's no good, please let me know how to get it up on here.

· Original installed OS on system - XP (installed using a full retail disc I had from previous PC)
Then 7 (dodgy upgrade after some problems I can't remember the nature of from aforementioned con-man for £15 - no serial provided)
Currently Windows 10 64 bit (Activate Windows keeps coming up bottom right, could this have anything to do with BSOD problems?)

· Age of system (hardware) 5 years except motherboard & PS - both 1 month old
· Age of OS installation - Windows 10; 8-10 weeks ago

· CPU - AMD FX 8120 eight-core
· Video Card - NVIDIA GeForce GT 620
· MotherBoard - (replaced since last thread) - Gigabyte GA-78LMT
· Power Supply - (replaced since last thread) - Aerocool Integrator 700w
· Novatech desktop tower - delivery email says BB81208E


Any takers much appreciated

Cheers

Jason
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top