Random Bsods

Discussion in 'Software' started by ag.meow, Jul 9, 2013.

  1. ag.meow

    ag.meow Private E-2

    The first bsod happened a few months ago. about 1 month passed and another one appeared then one day it just bsods randomly and when i boot again after 1 or 2 minutes it'll just bsod. it's been going on for a few days now. sometimes i can use the laptop normally for about 5 mins to 1 hour then a bsod will appear. I don't really know the problem here. Please help. Thanks in advance :cry :confused oh btw. i have windows 7 ultimate and i don't have the disk unfortunately.

    additional information
    i saw these messages in the bsods
    page fault in nonpaged area
    memory management
    irql_not_less_or_equal

    that's an incomplete list. i don't remember the others.
     
  2. falconattack

    falconattack Command Sergeant Major

    Hi my friend , welcome to MG's :major

    You can look at the bottom of the laptop the sticker with model number of your laptop , during start up you can push F8 , F2 or Del to enter in Advanced Boot Options selecting Disable automatic restart on system failure to inform about the exact error message , these errors is indicated either overheating problem or memory problem i think :wave
     

    Attached Files:

  3. ag.meow

    ag.meow Private E-2

    thanks for the quick reply. I am currently using my laptop in safe mode with networking. My laptop is an Acer Aspire V3 471g 52454g50 makk. I'll boot with automatic restart disabled now.
     
  4. ag.meow

    ag.meow Private E-2

    Uhhhm i'm really not sure what to put here. I tried what you said. i selected disable automatic restart then it boot up normally then before it boots completely a bsod appears did it twice and got the same error Memory_Management
    i took a note: Stop: 0x0000001A(followed by a bunch of numbers)

    so yeah. what should i do now?
     
  5. falconattack

    falconattack Command Sergeant Major

    You can go to Start - Run msconfig - ok removing any tick from the boxes from Startup menu - ok - apply , restarting your machine is important , afterwards informing us if the bsod is occurred again , also we need all the number and letters from the bsod :wave

    http://forums.majorgeeks.com/showthread.php?t=86880
     
  6. ag.meow

    ag.meow Private E-2

    I tried that but still no luck. got this bsod memory_management
    stop: 0x0000001A (0x0000000000041790,0xfffffa8000834c90,0x000000000000ffff,0x0000000000000000)
     
  7. falconattack

    falconattack Command Sergeant Major

  8. satrow

    satrow Major Geek Extraordinaire

    I suggest MemTest86+ and at least 7 runs, best done overnight or while at work, college, etc.

    0x1A is frequently a bad driver or memory (RAM), cleaning/reseating the RAM may help if it's the latter, if not, upload the crash dumps (C:\Windows\Minidump, select all files and copy them to your Desktop, right click them and select > Send to > Compressed folder then attach the resulting zip file here) and we'll try to analyse them.
     
  9. brownizs

    brownizs MajorGeek

    Download and Who Crashed from the download repository here at majorgeeks.com. It will tell you what is causing the BSOD, better than trying to go through the logs, or guess on here. 99% of the time it is a driver, and usually will be either the NIC or the video driver. Other times it will be bad RAM.
     
  10. satrow

    satrow Major Geek Extraordinaire

    @browniz: if it were that simple, this guy and his team would be out of work.
     
  11. brownizs

    brownizs MajorGeek

    His team is out of a job. Matter of fact, Microsoft just got rid of a bunch of others in different units this past week. The writing is on the wall, showing how close MS is, to not being around much longer.
     
  12. ag.meow

    ag.meow Private E-2

    i was gonna try the memtest thing but i can't download the file. i am using my phone and we have a slow connection. the phone don't have enough memory space too. so i am gonna try to download it from my friend's pc. i'll try uploading the dump files for now. just a sec.
     
  13. ag.meow

    ag.meow Private E-2

    View attachment Minidump.zip

    Those are the minidumps. I tried who crash and the most common report is this
    On Tue 7/9/2013 3:48:39 PM GMT your computer crashed
    crash dump file: C:\Windows\Minidump\070913-31465-01.dmp
    This was probably caused by the following module: ntoskrnl.exe (nt+0x75C00)
    Bugcheck code: 0x1A (0x41790, 0xFFFFFA80007C1EB0, 0xFFFF, 0x0)
    Error: MEMORY_MANAGEMENT
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    Bug check description: This indicates that a severe memory management error occurred.
    This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
    The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.
     
  14. satrow

    satrow Major Geek Extraordinaire

    This feels like a bad driver, though it may be a memory (RAM?) problem, and there are some dumps that point towards a disk (file corruption?) issue.

    First, uninstall DaemonTools, like most virtual CD/DVD software, it's known to cause BSOD problems for some users.

    Then update the Tunngle, WinPcap, SpeedFan, the HUAWEI Mobile Connect drivers and the Realtek RTL8168D/8111D drivers.

    Run hard drive diagnostics, Seatools for DOS via a bootable USB? should work on most drives.

    Overnight, or while at work/college etc., run MemTest86+ (7+ passes).

    Diags lists and details here: http://carrona.org/diag.html (Memory testing details also here: http://www.sysnative.com/forums/hardware-tutorials/3909-test-ram-memtest86.html).

    If you still get crashes but the hardware diags come up clean, enable Driver Verifier (Read and follow this carefully: http://www.sysnative.com/forums/bso...river-verifier-blue-screen-death-related.html) for 24-48 hours, upload any resulting crash dumps then disable DV.

    Short analysis of the most recent crash:
    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    MEMORY_MANAGEMENT (1a)
        # Any other values for parameter 1 must be individually examined.
    Arguments:
    Arg1: 0000000000041790, The subtype of the bugcheck.
    Arg2: fffffa8000834c90
    Arg3: 000000000000ffff
    Arg4: 0000000000000000
    
    Debugging Details:
    ------------------
    
    
    BUGCHECK_STR:  0x1a_41790
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    PROCESS_NAME:  sftlist.exe
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from fffff800038fed40 to fffff8000388dc00
    
    STACK_TEXT:  
    fffff880`0cccb6e8 fffff800`038fed40 : 00000000`0000001a 00000000`00041790 fffffa80`00834c90 00000000`0000ffff : nt!KeBugCheckEx
    fffff880`0cccb6f0 fffff800`038c07d9 : fffffa80`00000000 00000000`02ed5fff fffffa80`00000000 fffff800`00000000 : nt! ?? ::FNODOBFM::`string'+0x35084
    fffff880`0cccb8b0 fffff800`03ba81c1 : fffffa80`09e6d760 00000000`00000000 fffffa80`09e64d30 fffffa80`09e64d30 : nt!MiRemoveMappedView+0xd9
    fffff880`0cccb9d0 fffff800`03ba85c3 : 00000000`00000000 00000000`02d10000 fffffa80`00000001 00000000`00000601 : nt!MiUnmapViewOfSection+0x1b1
    fffff880`0cccba90 fffff800`0388ce93 : fffffa80`09a61b50 fffff880`0cccbb60 fffffa80`09851b30 00000000`000002e8 : nt!NtUnmapViewOfSection+0x5f
    fffff880`0cccbae0 00000000`776d15ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`0112e428 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776d15ba
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    nt! ?? ::FNODOBFM::`string'+35084
    fffff800`038fed40 cc              int     3
    
    SYMBOL_STACK_INDEX:  1
    
    SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+35084
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: nt
    
    IMAGE_NAME:  ntkrnlmp.exe
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6
    
    FAILURE_BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+35084
    
    BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+35084
    
    Followup: MachineOwner
    3rd party drivers that need updating or uninstalling:

    tap0901t.sys Wed Sep 16 07:02:43 2009 (4AB07F83)
    Google Earth or Tunngle (P2P VPN software)
    http://www.carrona.org/drivers/driver.php?id=tap0901t.sys

    npf.sys Fri Jun 25 17:50:58 2010 (4C24DE72)
    NetGroup Packet Filter Driver, part of the WinPcap packet capture library
    http://www.carrona.org/drivers/driver.php?id=npf.sys

    speedfan.sys Fri Mar 18 16:08:46 2011 (4D83838E)
    SpeedFan
    http://www.carrona.org/drivers/driver.php?id=speedfan.sys

    ew_jubusenum.sys Fri Sep 9 04:51:01 2011 (4E698D25)
    HUAWEI Mobile Connect - Bus Enumerate Device
    http://www.carrona.org/drivers/driver.php?id=ew_jubusenum.sys

    Rt64win7.sys Wed Nov 23 15:00:40 2011 (4ECD0A98)
    Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
    http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys

    dtsoftbus01.sys Fri Jan 13 13:45:46 2012 (4F10358A)
    Daemon Tools driver Possible BSOD issues in Win7
    http://www.carrona.org/drivers/driver.php?id=dtsoftbus01.sys
     
  15. thisisu

    thisisu Malware Consultant

    I'd say a memory problem due to the high amount of 0x1A and 0x50 BSODs. When I've encountered those error codes, the majority of the time it was a memory issue.

    That's pretty cool that you can find out which drivers are out of data just from the minidumps, satrow :)
     
  16. satrow

    satrow Major Geek Extraordinaire

    You had me thinking there; I took another look at the dumps (50!) loaded in Bluescreenview, all but 9 of them had the same relative address of the crash - ntoskrnl.exe+75c00; if that does relate to a physical memory address, it would indeed mean bad RAM, according to my limited understanding.

    Given that the laptop is pretty recent, an Acer notebook with i5 2450M and a single 4GB stick currently fitted, I would be tempted to buy a matched pair of 4GBs for 8GB total as a replacement - unless it can be replaced under warranty, that is.

    BSV is also good for a quick check on drivers dates. I frequently load it for a quick check while I'm waiting for the output from the Sysnative BSOD Processing Apps.

    @ag.meow: MemTest86+ is the priority ;)
     
  17. brownizs

    brownizs MajorGeek

    Satrow, RAM went up just recently, so it may be best either to shop around for someplace that has some lower than what we are seeing right now at places like Crucial or newegg.com.
     
  18. ag.meow

    ag.meow Private E-2

    Thanks for the replies. I'll try your suggestions. I'll post the results later.
     
  19. ag.meow

    ag.meow Private E-2

    I am running memtest right now. I noticed some erors. here are some ss
    IMG_20130711_201359.jpg
    IMG_20130711_201411.jpg
    IMG_20130711_201420.jpg
    IMG_20130711_201426.jpg
     
  20. satrow

    satrow Major Geek Extraordinaire

    Stop the test - it's a fail.

    Try to remove and then reseat the memory, test again. If it still fails, remove the stick and fit it in the other memory slot, test again. If both tests come up with errors, it's new RAM time :(
     
  21. ag.meow

    ag.meow Private E-2

    So i need to open my laptop?
     
  22. satrow

    satrow Major Geek Extraordinaire

    Yes, it's often just a matter of opening up a small panel, undoing 1-3 screws to directly access the memory. Sometimes it's a much bigger task though ... a generic instructional video from Crucial here: http://www.youtube.com/watch?v=MbPaR1Ci-Ug and a video for a similar model to yours here (don't watch all of this one, the placement of the memory may be the same as yours though, about 40 seconds in): http://www.youtube.com/watch?v=yeMpofmHzoU
     
  23. falconattack

    falconattack Command Sergeant Major

  24. brownizs

    brownizs MajorGeek

    Yes you do. It does not do it itself. Just need a small Jewelers Phillips screwdriver, then carefully pry the access cover off, over the RAM. Depending on the model, there may be two covers or just one.

    If two, one is for the hard drive and wifi card, the other for the RAM.
     
  25. ag.meow

    ag.meow Private E-2

    Hey guys. Sorry for the late update. College started so i don't have much time.What happened is that I didn't open my laptop as it'll void the warranty. I've been using my laptop for browsing or photoshop and other stuff for about 3-5 hours a day for one week now. No blue screens. What do you guys think?
     
  26. satrow

    satrow Major Geek Extraordinaire

    Opening a notebook to access drives, RAM or WiFi cards for testing or replacement purposes will not void the warranty.
     
  27. brownizs

    brownizs MajorGeek

    It will not void the warranty. Manufacturers expect consumers to upgrade or change out stuff like RAM & Hard Drives. The warranty covers stuff like the motherboard, not changing out RAM, Hard drive or wireless card.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds