New Computer Windows 7 error

I just got this computer last month it's an HP Pavilion p6t, I've noticed over this last week or so that my computer randomly shuts off (seems to be when it goes to sleep) but it doesn't reboot I have to start it back up myself. When it comes up I get
"windows has recovered from an unexpected shutdown"

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 0000000000000000
BCP2: 0000000000000002
BCP3: 0000000000000001
BCP4: FFFFF80002A97B4C
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\032212-16536-01.dmp
C:\Users\Whatsername\AppData\Local\Temp\WER-28173-0.sysdata.xml

What can I do? I haven't made the recovery disk set yet because I have no dvds, what does this error mean? Thanks again guys ^_^

 

I can restore it no problem, so do I go to the HP website for the drivers than? How should I put them onto disks? Also, what does the recovery do? Does it just save my data or what? My last computer had all the resource disks this is the first time I've ever had to do this so I'm kind of lost lol Thank you

 

Copy C:\Windows\Minidump\032212-16536-01.dmp to your Desktop, zip it (Send to > compressed folder) and attach the resulting zip file, I'll try to analyse it for further clues as to the cause.

 

Ok here you go

 

I haven't made the recovery disk set yet because I have no dvds,

Common sense says that you should purchase DVDs quick smart and get that recovery disk made. They're cheap enough and it is going to save you a day's work of trouble in the long run.

 

The blame falls squarely on the scmndisp.sys driver - Netgear wireless adapter? It's dated 2007, so I doubt if it's fully W7 compatible anyway - find an update for it here.

Did you see any other *.dmp files? I'd like to see another recent one, if you have any.

Code:

Debug session time: Thu Mar 22 14:27:15.672 2012 (UTC + 1:00)
System Uptime: 0 days 0:59:32.812
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 1, fffff80002a97b4c}

Unable to load image scmndisp.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for scmndisp.sys
*** ERROR: Module load completed but symbols could not be loaded for scmndisp.sys
Probably caused by : scmndisp.sys ( scmndisp+16d1 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002a97b4c, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cc2100
 0000000000000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeWaitForSingleObject+13c
fffff800`02a97b4c f00fba2e07      lock bts dword ptr [rsi],7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  fffff88009499e40 -- (.trap 0xfffff88009499e40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000037ea0 rbx=0000000000000000 rcx=0000000000000002
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002a97b4c rsp=fffff88009499fd0 rbp=0000000000000000
 r8=fffff78000000008  r9=0000000000000000 r10=0000000000000000
r11=fffff880009eb180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!KeWaitForSingleObject+0x13c:
fffff800`02a97b4c f00fba2e07      lock bts dword ptr [rsi],7 ds:00000000`00000000=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a902e9 to fffff80002a90d40

STACK_TEXT:  
fffff880`09499cf8 fffff800`02a902e9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`09499d00 fffff800`02a8ef60 : fffffa80`07ba6680 00000000`00000001 fffff880`09499ee0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`09499e40 fffff800`02a97b4c : 00000000`00000000 fffff880`0307919a 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
fffff880`09499fd0 fffff880`018f3992 : 00000000`00000000 fffffa80`00000000 fffffa80`0415fc00 fffff800`02a86e00 : nt!KeWaitForSingleObject+0x13c
fffff880`0949a070 fffff880`01cfa6d1 : 00000000`00000000 fffffa80`08fd9c30 00000000`00000000 00000000`00000000 : ndis!NdisWaitEvent+0x32
fffff880`0949a0b0 00000000`00000000 : fffffa80`08fd9c30 00000000`00000000 00000000`00000000 fffff880`018d83e0 : scmndisp+0x16d1


STACK_COMMAND:  kb

FOLLOWUP_IP: 
scmndisp+16d1
fffff880`01cfa6d1 ??              ???

SYMBOL_STACK_INDEX:  5

SYMBOL_NAME:  scmndisp+16d1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: scmndisp

IMAGE_NAME:  scmndisp.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  45add4b3

FAILURE_BUCKET_ID:  X64_0xA_scmndisp+16d1

BUCKET_ID:  X64_0xA_scmndisp+16d1

Followup: MachineOwner
---------

1: kd> lmvm scmndisp
start             end                 module name
fffff880`01cf9000 fffff880`01d03000   scmndisp T (no symbols)           
    Loaded symbol image file: scmndisp.sys
    Image path: scmndisp.sys
    Image name: scmndisp.sys
    Timestamp:        Wed Jan 17 07:48:03 2007 (45ADD4B3)
    CheckSum:         00008B81
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

Genius! That should resolve your issue I always found it funny when they release a Windows 7 computer with incompatible hardware, or a 64bit platform with incompatible hardware. This wouldn't be my first time seeing this issue.

(PS: I didn't go through the dump files, but I bumped into you before Satrow. I give you kudo's you got more experience than me I'm sure.)

 

It might solve the issue, it's rare that dumps are as obvious as this - appears to be ... and it doesn't appear to be hardware-related, incompatible or otherwise. I'm running W7x64SP1 here on a Vista graphics driver from '06, it's fine.

I'm wondering whether the cause of the problem isn't actually Comodo/AVG-related. Take a look at the dump yourself, check the loaded drivers, there's something else interesting there too.


@ Whatsername851039: as well as finding and installing a new wireless driver and uploading another dump if you have one, can you tell me if AVG/Comodo were already installed on the HP? If not, what security software did they replace?

 

NDProxy.SYS NDProxy.SYS+397ce60 fffff880`05b1d000 fffff90b`05b32000 0x0000008b00015000 0x4ce7a864 11/20/2010 4:52:20 AM
ntoskrnl.exe ntoskrnl.exe+7c2e9 fffff800`02a14000 fffff800`02ffc000 0x005e8000 0x4ec79dd2 11/19/2011 6:15:14 AM

That's what I got from his dump file. Both of these issues lead more and more to a drivers problem. ntnoskrnl.exe is most likely not the culprit because if that was really corrupted or damaged you would be having more serious problems than just BSOD's. So moving on to NDProxy.sys, this is located in the drivers folder and is a core system file. *Not sure on what exactly it does* but my recommendations would be to make sure your BIOS is up to date, your drivers for your video card, onboard audio, and your network card are all up to date. That 'should' clear your problem. If not, come back here and I'll show you how to set up 'Driver Verifier'.

PS: @satrow Which program do you use to read dump files?

-X

 

I use WinDbg for the analyses and BSV for driver checking, alongside http://www.carrona.org/ and http://sysnative.com/drivers/ with DuckDuckGo and Google for searches. But that's only a small part of working back to the cause of the crash; often the OP will have some useful historical info that helps pinpoint it. Other times I/we need to scrutinize the hardware - any hardware fault will trump any software fixes - best to check hardware early on.



@ Whatsername851039: sorry to use your thread as a training class just act on the following and report back please:

Oh yes - was it bought new or used?

 

Hey everyone I ended up talking to HP and they had me send it back and replacing the Motherboard. When I got it back it was still doing it so I called them back again and they had me uncheck some hibernation option.....not exactly happy with it but it's working ok right now. Thank you everyone for all your help and I also ordered the re installation disks from Hp as well.