Different BSOD everytime.

B

Bludworth

New Member
I've been having this problem for a few days now. All of a sudden one day the computer froze. I have been using the computer before that will no problems for about 2 weeks. I don't remember what i was doing. So i restarted and not 10 minutes later it blue screened. I restarted it again and 20 minutes later it bsod'd again.

Since then it has been a pretty common occurrence for it to blue screen or freeze. For some reason there is only 1 blue screen in my mini dump file when yesterday there were 4.

I don't have a virus ive run kaspersky in safemode and malware bytes. I keep getting different blue screens not 1 of them was the same. Once it was netio.sys, once it was notskrnl.sys i think. Once it was tcpip.sys, win32.sys and one other.

I am uploading my dxdiag and my one minidmp. Any help would be appreciated. I've done plenty of research and only found 1 other post that even seemed similar but it had no answer.( http://www.vistax64.com/drivers/179...y-time-during-full-screen-video-playback.html ). I have checked nearly all my drivers. Also like i said it was working fine for 2 weeks. I didn't make any changes and haven't done anything different that i know of to cause the crashes.
 

Attachments

  • DxDiag.txt
    38 KB · Views: 148
  • Mini073109-01.zip
    19 KB · Views: 6

My Computer

System One

Enter Safe mode. Well Im not sure if this works. Open Device Manager and update the drivers if it continues message me. i can cure the BSOD
 

My Computer

System One

My system is down, so I can't run the BSOD analysis.
Please read the instructions here for running the analysis on your own: Diagnosing Bsod's (originally posted 02Oct08) - Vox

The files that you mention (netio.sys, tcpip.sys, ntoskrnl.exe, and win32k.sys) are significant - as is the use of Kaspersky. What version of Kaspersky are you using?

The first 2 files above relate to your networking (and Kaspersky is an internet aware application). The last 2 files are core Windows files, and we'd expect to see many more problems if they were the problem.

If you have Kaspersky Internet Security installed, the first steps are:
- Download a free antivirus to use while we rule out Kaspersky. I like the free Avast available here: Download FREE antivirus software - avast! Home Edition
- Uninstall Kaspersky from Control Panel...Programs...Uninstall a program.
- IMMEDIATELY install the free antivirus, reboot, and then update it to provide you with protection.
- Then run the Kaspersky removal tool (free from here: Service messages )

Then sit back and use it normally to see if the BSOD's still occur. If they do, then we'll have to start troubleshooting the networking components of your system.

FWIW - I don't recommend the use of Internet Security applications from any vendor. The problems that occur when they malfunction are many - and most can't even be seen in normal memory dumps (the networking stuff gives us a clue to it tho').
-
 

My Computer

System One

Here is your dump analysis.. (usama woud't mind me i hope ;))

Code: 
CURRENT_IRQL:  2
FAULTING_IP: 
nt!RtlLookupFunctionEntry+13e
fffff800`0208eb6e 413b1c8b        cmp     ebx,dword ptr [r11+rcx*4]
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD3
PROCESS_NAME:  firefox.exe
TRAP_FRAME:  fffffa6005c17e30 -- (.trap 0xfffffa6005c17e30)
.trap 0xfffffa6005c17e30
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000007c40098c50 rbx=0000000000000000 rcx=fffffa80043fb780
rdx=ff00f8801318a6d8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002070c79 rsp=fffffa6005c17fc0 rbp=fffffa80043fb780
 r8=02000000000b0d88  r9=0000000000000004 r10=0000000000000000
r11=0000007ffffffff8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MiPfnShareCountIsZero+0x89:
fffff800`02070c79 488b02          mov     rax,qword ptr [rdx] ds:ff00f880`1318a6d8=????????????????
.trap
Resetting default scope
EXCEPTION_RECORD:  fffffa6005c17d88 -- (.exr 0xfffffa6005c17d88)
.exr 0xfffffa6005c17d88
ExceptionAddress: fffff80002070c79 (nt!MiPfnShareCountIsZero+0x0000000000000089)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
LAST_CONTROL_TRANSFER:  from fffff800020631ee to fffff80002063450
STACK_TEXT:  
fffffa60`05c16c48 fffff800`020631ee : 00000000`0000000a fffff960`0037713c 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffa60`05c16c50 fffff800`020620cb : 00000000`00000000 00000000`00000000 fffffa60`05c16f10 00000000`001f3bd4 : nt!KiBugCheckDispatch+0x6e
fffffa60`05c16d90 fffff800`0208eb6e : fffff800`022f6f73 fffffa60`05c17d88 00000000`00000000 fffff800`02009000 : nt!KiPageFault+0x20b
fffffa60`05c16f20 fffff800`0208ef31 : fffffa60`05c17d88 00000000`00000000 fffff900`00000000 fffff960`002d3bd4 : nt!RtlLookupFunctionEntry+0x13e
fffffa60`05c16f60 fffff800`0209c706 : fffffa60`05c17d88 fffffa60`05c17760 fffffa60`00000000 00000000`00000000 : nt!RtlDispatchException+0xd1
fffffa60`05c17650 fffff800`020632a9 : fffffa60`05c17d88 fffffa80`043fb780 fffffa60`05c17e30 fffff680`00000000 : nt!KiDispatchException+0xc2
fffffa60`05c17c50 fffff800`02061e8d : fffffa60`05c18118 00000000`000000f4 00000000`00000001 00000000`00000801 : nt!KiExceptionDispatch+0xa9
fffffa60`05c17e30 fffff800`02070c79 : 00000000`001cdee7 fffffa80`05437bc0 fffffa80`0569cb50 fffffa80`0569cb50 : nt!KiGeneralProtectionFault+0xcd
fffffa60`05c17fc0 fffff800`0204c3a2 : fffff900`c5ad2000 fffffa80`043fb780 00000000`00000000 fffffa80`0a48e840 : nt!MiPfnShareCountIsZero+0x89
fffffa60`05c18040 fffff800`022f7cae : fffff900`c5ad2000 00000000`000003fe fffffa80`0a0a7140 fffffa60`01f52c00 : nt!MiRemoveMappedPtes+0x4c2
fffffa60`05c18180 fffff800`022f6f73 : fffff880`0f6346f0 00000000`00000011 00000000`00000001 fffffa60`05c18290 : nt!MiRemoveFromSystemSpace+0x16e
fffffa60`05c181e0 fffff960`002d3bd4 : fffff900`00001145 fffff960`0019cf95 00000000`00000000 00000000`00000000 : nt!MmUnmapViewInSystemSpace+0x6b
fffffa60`05c18210 fffff960`0019d5c8 : 00000000`00001584 fffff900`c5800010 00000000`00000011 00000000`00000001 : win32k!vFreeKernelSection+0x34
fffffa60`05c18250 fffff960`00181651 : fffff900`c5800010 fffffa60`00000000 fffff900`c009a010 00000000`00000000 : win32k!SURFACE::bDeleteSurface+0x344
fffffa60`05c18330 fffff960`001a3130 : 00000000`43051584 fffff900`c0857dd0 00000000`00001584 00000000`7efdb000 : win32k!bDeleteSurface+0x31
fffffa60`05c18360 fffff800`02062ef3 : fffffa80`0a48e840 fffffa60`05c18410 00000000`035c01a0 fffff900`00000000 : win32k!NtGdiDeleteObjectApp+0x94
fffffa60`05c18390 00000000`75393d09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0021d7b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75393d09
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
win32k!vFreeKernelSection+34
fffff960`002d3bd4 85c0            test    eax,eax
SYMBOL_STACK_INDEX:  c
SYMBOL_NAME:  win32k!vFreeKernelSection+34
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: win32k
IMAGE_NAME:  win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  49edb61d
FAILURE_BUCKET_ID:  X64_0xD3_win32k!vFreeKernelSection+34
BUCKET_ID:  X64_0xD3_win32k!vFreeKernelSection+34
Followup: MachineOwner
---------
rax=fffffa6005c16d50 rbx=00000000001f3bd4 rcx=000000000000000a
rdx=fffff9600037713c rsi=fffff960000e0000 rdi=fffffa6005c17050
rip=fffff80002063450 rsp=fffffa6005c16c48 rbp=fffffa6005c16e10
 r8=0000000000000002  r9=0000000000000000 r10=fffff8000208eb6e
r11=fffff6fb7dbed000 r12=fffffa6005c16fb8 r13=fffff80002009000
r14=fffff80002009000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:

It seems the firefox is related with this bsod. Can u remember what were u doing with firefox while this bsod (like streming etc)

win32k.sys will normally occur if your ram or pagefile having problem.

We can try recreating your pagefile.

follow these steps,
Press the Windows + Pause Break keys > in the left pane click on Advanced system settings > click on the Advanced tab > in the Performance section click the Settings... button > click on the Advanced tab . click on the Change... button.

Capture.PNG

uncheck if automatically manage pagefile for all the drives is checked,
highlight all the drives and click no page file and set
restart your computer
now your pagefile will be cleared, so we have to create it again.

Press the Windows + Pause Break keys > in the left pane click on Advanced system settings > click on the Advanced tab > in the Performance section click the Settings... button > click on the Advanced tab . click on the Change... button.

highlight c dive and click on system managed size(create for all drives if you want) and set
restart your computer.

Let us know the result :)
 

My Computer

System One

  • Manufacturer/Model
    Wipro
    Motherboard
    Intel dq35j0
    Memory
    8 Gb
    Graphics Card(s)
    inter express chipset
    Sound Card
    Realtek
    Monitor(s) Displays
    Wipro
    Screen Resolution
    1024*768
    Hard Drives
    500 gb
    Keyboard
    DELL
    Mouse
    Dell
    Internet Speed
    100 mbps(office lan)
Well its not Kaspersky because i installed that after the fact. I just did what delphin suggested and I'm going to do what antihiatus said in just a moment. I'll let you know what my results are either way. Thanks for all the help guys i appreciate it!
 

My Computer

System One

No problem, thanks for the post delphin!
Just FYI, I also look at the initial output, the !analyze -v output, and the output of lmtsm command (to find older drivers).

In this case, I can't look up the debugger's help file for STOP 0x000000D3 DRIVER_PORTION_MUST_BE_NONPAGED so I'm at a loss other than to say it's a driver that's supposed to have a portion in nonpaged memory - but that portion is actually in paged memory.

In this case, it's probable that you can stop the BSOD's of this type by eliminating your paging file (but that brings up a whole 'nother can o' worms!). Then there won't be any paged memory for the component to be in.

There are components of surface operations and GDI operations in the stack text - so I wonder if this may have a video component. What were you looking at when the BSOD occurred?

Can you boot into Safe Mode with Networking and surf the web without BSOD's? If so, that may give us some clues.

Finally, I'd suggest running Driver Verifier AFTER reading the following instructions:
Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.


So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista Startup Repair feature).


Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Automatically select unsigned drivers" and click "Next"
If no drivers show up, then select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.


Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.


Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.


If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.
Click to expand...
 

My Computer

System One

This may help, normally after i leave it running for a while, say the computer goes to sleep and when i get home i wake it up, shortly after it will either freeze or blue screen. Once i restart the computer on average it will run fine for hours. Most of the time it seems to blue screen or freeze has been while using the computer after it has sat for a few hours. With the firefox mini.dmp i was just browsing the web. I was on the site Ikariam - The free browser game. It's just a basic html web site as far as i know.

I have another BSOD im attaching. The most common problem seems to be freezing. since my last post ive frooze 3 times and blue screened once. Nothing has seemed to work yet.

Edited again: I just Blue screened again after a very fresh restart with nothing open yet, it was just sitting for about 4 mins, so im adding the second mini dmp.
 

Attachments

  • Mini080209-01.zip
    19 KB · Views: 5
  • Mini080209-02.zip
    19.4 KB · Views: 2
Last edited:

My Computer

System One

So here is a third mini dmp, I'm gonna run the driver thing on my next day off(Friday) in case i run into problems. Hopefully that will give me some deffinite answers.
 

Attachments

  • Mini080309-01.zip
    17.6 KB · Views: 2
Last edited:

My Computer

System One

You must log in or register to reply here.
Back
Top