BSOD at random times, BlueScreenView said it was ntoskrnl.exe and win32k.sys that caused it.

Discussion in 'Windows 7 Blue Screen of Death (BSOD)' started by Nick Malatos, Nov 24, 2012.

  1. Nick Malatos

    Nick Malatos New Member

    Joined:
    Nov 13, 2012
    Messages:
    4
    Likes Received:
    0
    Please help as soon as possible, thanks!
     

    Attached Files:

  2. GeneralHiningII

    GeneralHiningII Honorable Member

    Joined:
    Sep 21, 2012
    Messages:
    745
    Likes Received:
    7
    Learn how to install Windows 7 Service Pack 1 (SP1) You do not have SP1 installed.

    Please check Windows Update - you have no updates installed, generally you should have 130 to 140 updates.

    That's what I can do for you so far, will be back once my laptop has been charged.
     
  3. usasma

    usasma Fantastic Member
    Microsoft Community Contributor

    Joined:
    Mar 22, 2010
    Messages:
    3,048
    Likes Received:
    83
    SP1 isn't installed, please do the following:
    I'm unable to open the MSINFO32.nfo file - please try it again.

    Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

    xnacc.sys Mon Jul 13 20:01:05 2009 (4A5BCAC1)
    XNA Common Controller Driver [XBox]
    http://www.carrona.org/drivers/driver.php?id=xnacc.sys

    amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
    AMD storage controller driver - usually from the Windows 7 DVD
    http://www.carrona.org/drivers/driver.php?id=amdxata.sys

    pgusbwdm.sys Fri Aug 13 11:23:08 2010 (4C65635C)
    USB audio device from Ploytec GmbH - USB Audio and more
    pgusbwdm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

    MxEFUF64.sys Thu Oct 20 12:24:05 2011 (4EA04B25)
    Matrox Graphics Extio Function Upper Filter Driver[br](discussion about this driver here: DriverPack Graphics B-"super-generic" Matrox Extio PCI-PCI bridge installs on ATI/nV HW (Page 1) - DriverPack Graphics - DriverPacks.net Forum )
    http://www.carrona.org/drivers/driver.php?id=MxEFUF64.sys

    AppleCharger.sys Tue Nov 1 22:46:00 2011 (4EB0AEE8)
    GIGABYTE On/Off Charge driver. See here for details - GIGABYTE ON/OFF Charge [br]May cause BSOD on Win7 systems - uninstall to test
    http://www.carrona.org/drivers/driver.php?id=AppleCharger.sys

    FYI - xnacc.sys is a driver for an XBox controller. It only appears in some of the memory dumps, so it's not a strong a suspect as the other drivers (but is still a possibility). We have seen problems with wireless XBox controllers in the past, but it's usually associated with a different driver (xusb21.sys dating from 2009). I'd suggest just keeping an eye on this one for now (don't do anything with it just yet).

    Analysis:
    The following is for informational purposes only.
    Code:
    [FONT=lucida console]**************************Sat Nov 24 22:05:38.829 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112412-35786-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]0 days 2:17:17.639[/B]
    BugCheck Code: [B]BugCheck 1E, {ffffffffc0000005, fffff80002c81886, 0, ffffffffffffffff}[/B]
    Probably caused by :[B]ntkrnlmp.exe ( nt!SwapContext_PatchXRstor+0 )[/B]
    BugCheck Info: [B]KMODE_EXCEPTION_NOT_HANDLED (1e)[/B]
    Arguments: 
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff80002c81886, The address that the exception occurred at
    Arg3: 0000000000000000, Parameter 0 of the exception
    Arg4: ffffffffffffffff, Parameter 1 of the exception
    BUGCHECK_STR:  0x1E_c0000005_R
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]avgrsa.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x1E_c0000005_R_nt!SwapContext_PatchXRstor+0[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Sat Nov 24 13:28:39.336 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112412-27612-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]1 days 13:27:43.309[/B]
    BugCheck Code: [B]BugCheck 19, {3, fffff900c1efde50, fffff900c1efde50, fffff90083efde50}[/B]
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by :[B]win32k.sys ( win32k+87a6e )[/B]
    BugCheck Info: [B]BAD_POOL_HEADER (19)[/B]
    Arguments: 
    Arg1: 0000000000000003, the pool freelist is corrupt.
    Arg2: fffff900c1efde50, the pool entry being checked.
    Arg3: fffff900c1efde50, the read back flink freelist value (should be the same as 2).
    Arg4: fffff90083efde50, the read back blink freelist value (should be the same as 2).
    BUGCHECK_STR:  0x19_3
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]Steam.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x19_3_win32k+87a6e[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri Nov 23 00:00:03.918 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112312-23306-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]0 days 9:24:18.729[/B]
    BugCheck Code: [B]BugCheck 1A, {41790, fffffa800493cdd0, ffff, 0}[/B]
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by :[B]dxgmms1.sys ( dxgmms1!VIDMM_PROCESS_HEAP::Allocate+3dd )[/B]
    BugCheck Info: [B]MEMORY_MANAGEMENT (1a)[/B]
    Arguments: 
    Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
        contains the address of the PFN for the corrupted page table page.
        On a 32 bit OS, parameter 2 contains a pointer to the number of used
        PTEs, and parameter 3 contains the number of used PTEs.
    Arg2: fffffa800493cdd0
    Arg3: 000000000000ffff
    Arg4: 0000000000000000
    BUGCHECK_STR:  0x1a_41790
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]hl2.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x1a_41790_dxgmms1!VIDMM_PROCESS_HEAP::Allocate+3dd[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Wed Nov 21 15:11:50.420 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-21403-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]0 days 0:57:29.230[/B]
    BugCheck Code: [B]BugCheck 4E, {99, 1c6f98, 2, 1189e9}[/B]
    Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
    BugCheck Info: [B]PFN_LIST_CORRUPT (4e)[/B]
    Arguments: 
    Arg1: 0000000000000099, A PTE or PFN is corrupt
    Arg2: 00000000001c6f98, page frame number
    Arg3: 0000000000000002, current page state
    Arg4: 00000000001189e9, 0
    BUGCHECK_STR:  0x4E_99
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]chrome.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Wed Nov 21 11:32:32.234 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-33758-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]0 days 0:38:03.044[/B]
    BugCheck Code: [B]BugCheck 19, {21, fffff900c47cb000, 9b80, 20009b80}[/B]
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by :[B]win32k.sys ( win32k+c6958 )[/B]
    BugCheck Info: [B]BAD_POOL_HEADER (19)[/B]
    Arguments: 
    Arg1: 0000000000000021, the data following the pool block being freed is corrupt.  Typically this means the consumer (call stack ) has overrun the block.
    Arg2: fffff900c47cb000, The pool pointer being freed.
    Arg3: 0000000000009b80, The number of bytes allocated for the pool block.
    Arg4: 0000000020009b80, The corrupted value found following the pool block.
    BUGCHECK_STR:  0x19_21
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]OneClick.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x19_21_win32k+c6958[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Wed Nov 21 04:17:06.190 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-52541-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]0 days 0:10:22.000[/B]
    BugCheck Code: [B]BugCheck 1A, {41790, fffffa800493cd70, ffff, 0}[/B]
    Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+32f06 )[/B]
    BugCheck Info: [B]MEMORY_MANAGEMENT (1a)[/B]
    Arguments: 
    Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
        contains the address of the PFN for the corrupted page table page.
        On a 32 bit OS, parameter 2 contains a pointer to the number of used
        PTEs, and parameter 3 contains the number of used PTEs.
    Arg2: fffffa800493cd70
    Arg3: 000000000000ffff
    Arg4: 0000000000000000
    BUGCHECK_STR:  0x1a_41790
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]mscorsvw.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+32f06[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Tue Nov 20 21:48:46.744 2012 (UTC - 5:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-55583-01.dmp]
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    [B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
    Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
    System Uptime:[B]0 days 1:41:43.554[/B]
    BugCheck Code: [B]BugCheck 1A, {5003, fffff70001080000, 13ae, 13b0cc00275c}[/B]
    Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+28d31 )[/B]
    BugCheck Info: [B]MEMORY_MANAGEMENT (1a)[/B]
    Arguments: 
    Arg1: 0000000000005003, The subtype of the bugcheck.
    Arg2: fffff70001080000
    Arg3: 00000000000013ae
    Arg4: 000013b0cc00275c
    BUGCHECK_STR:  0x1a_5003
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    PROCESS_NAME: [B]chrome.exe[/B]
    FAILURE_BUCKET_ID: [B]X64_0x1a_5003_nt!_??_::FNODOBFM::_string_+28d31[/B]
      BIOS Version                  F2
      BIOS Release Date             03/20/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  GA-78LMT-S2P
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    [/FONT]
    3rd Party Drivers:
    The following is for information purposes only.
    Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
    Code:
    [FONT=lucida console]**************************Sat Nov 24 22:05:38.829 2012 (UTC - 5:00)**************************
    amdxata.sys                   Fri Mar 19 12:18:18 2010 (4BA3A3CA)
    pgusbwdm.sys                  Fri Aug 13 11:23:08 2010 (4C65635C)
    MxEFUF64.sys                  Thu Oct 20 12:24:05 2011 (4EA04B25)
    [COLOR=RED][B]AppleCharger.sys              Tue Nov  1 22:46:00 2011 (4EB0AEE8)[/B][/COLOR]
    amdide64.sys                  Sun Dec 18 20:43:17 2011 (4EEE96B5)
    LPCFilter.sys                 Tue Mar  6 09:58:27 2012 (4F562613)
    RTKVHD64.sys                  Tue Apr 24 07:42:07 2012 (4F96918F)
    GEARAspiWDM.sys               Thu May  3 15:56:17 2012 (4FA2E2E1)
    TuneUpUtilitiesDriver64.sys   Fri May 25 06:28:19 2012 (4FBF5EC3)
    nvhda64v.sys                  Tue Jul  3 11:25:04 2012 (4FF30ED0)
    avgtpx64.sys                  Tue Aug 21 10:16:24 2012 (50339838)
    avgrkx64.sys                  Thu Sep 13 20:41:40 2012 (50527D44)
    LHidFilt.Sys                  Tue Sep 18 05:26:53 2012 (50583E5D)
    LMouFilt.Sys                  Tue Sep 18 05:26:58 2012 (50583E62)
    avgloga.sys                   Thu Sep 20 21:23:51 2012 (505BC1A7)
    avgtdia.sys                   Thu Sep 20 21:25:33 2012 (505BC20D)
    L1C62x64.sys                  Fri Sep 21 02:35:28 2012 (505C0AB0)
    avgldx64.sys                  Mon Oct  1 21:05:50 2012 (506A3DEE)
    avgmfx64.sys                  Thu Oct  4 21:08:44 2012 (506E331C)
    avgidsha.sys                  Sun Oct 14 21:22:54 2012 (507B656E)
    nvlddmkm.sys                  Fri Oct 19 18:17:04 2012 (5081D160)
    avgidsdrivera.sys             Mon Oct 22 06:47:11 2012 (5085242F)
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Sat Nov 24 13:28:39.336 2012 (UTC - 5:00)**************************
    [COLOR=RED][B]xnacc.sys                     Mon Jul 13 20:01:05 2009 (4A5BCAC1)[/B][/COLOR]
    [/FONT]
    http://www.carrona.org/drivers/driver.php?id=amdxata.sys
    pgusbwdm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=MxEFUF64.sys
    http://www.carrona.org/drivers/driver.php?id=AppleCharger.sys
    http://www.carrona.org/drivers/driver.php?id=amdide64.sys
    http://www.carrona.org/drivers/driver.php?id=LPCFilter.sys
    http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
    http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
    http://www.carrona.org/drivers/driver.php?id=TuneUpUtilitiesDriver64.sys
    http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
    http://www.carrona.org/drivers/driver.php?id=avgtpx64.sys
    http://www.carrona.org/drivers/driver.php?id=avgrkx64.sys
    http://www.carrona.org/drivers/driver.php?id=LHidFilt.Sys
    http://www.carrona.org/drivers/driver.php?id=LMouFilt.Sys
    http://www.carrona.org/drivers/driver.php?id=avgloga.sys
    http://www.carrona.org/drivers/driver.php?id=avgtdia.sys
    http://www.carrona.org/drivers/driver.php?id=L1C62x64.sys
    http://www.carrona.org/drivers/driver.php?id=avgldx64.sys
    http://www.carrona.org/drivers/driver.php?id=avgmfx64.sys
    http://www.carrona.org/drivers/driver.php?id=avgidsha.sys
    http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
    http://www.carrona.org/drivers/driver.php?id=avgidsdrivera.sys
    http://www.carrona.org/drivers/driver.php?id=xnacc.sys
     
    #3 usasma, Nov 25, 2012
    Last edited: Nov 25, 2012
  4. Nick Malatos

    Nick Malatos New Member

    Joined:
    Nov 13, 2012
    Messages:
    4
    Likes Received:
    0
    Whenever I attempt to update to SP1, I get this error Errorservicepack1.PNG

    Any way to fix this? I have updated AppleCharger.sys and the xnacc.sys can't be updated except through Windows Update, which says it's been updated.
     
  5. usasma

    usasma Fantastic Member
    Microsoft Community Contributor

    Joined:
    Mar 22, 2010
    Messages:
    3,048
    Likes Received:
    83
    Uninstall the AppleCharger app to see if it helps fix things. If it doesn't, then feel free to reinstall it.

    SP1 is most important. I'd suggest that you get Windows Update help from the experts here: Windows Update (it will require that you register there).
     

Share This Page

Loading...