Go to Start and type in sysdm.cpl and press Enter
Click on the Advanced tab
Click on the Startup and Recovery Settings button
Ensure that Automatically restart is unchecked
Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box
Ensure that the Small Dump Directory is listed as %systemroot%\Minidump << where your .dmp files can be
found later.
Click OK twice to exit the dialogs, then reboot for the changes to take effect.
Go to Start and type in sysdm.cpl and press Enter
Click on the Advanced tab
Click on the Startup and Recovery Settings button
Ensure that Automatically restart is unchecked
Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box
Ensure that the Small Dump Directory is listed as %systemroot%\Minidump << where your .dmp files can be
found later.
Click OK twice to exit the dialogs, then reboot for the changes to take effect.
I'd really like to see the contents of C:\Windows\minidumpDownload Memtest86+ from this location here. Burn the ISO to a CD and boot the computer from the CD from a cold boot after leaving it off for an hour or more.
Ideally let it run for at least 7 passes / 6-8 hours. If errors appear before that you can stop that particular test. Any time Memtest86+ reports errors, it can be either bad RAM or a bad Mobo slot. Perform the test RAM sticks individually as well as all possible combinations. When you find a good one then test it in all slots. Post back with the results.
See this Guide to using Memtest 86+
Don't forget, if you haven't already, run a HDD Diagnostic, usually the top tier vendors have something that you can use offline. Like SeaTools for DOS, not sure what western Digital has now.Randy
I had A UBCD 4 Windows and retrieved 3 dumps I'll attach them. It only showed 4 gigs or ram in specs then I realized it was probably a 32 bit setup. I ran the MS Stand Alone sweeper and it didn't turn up anything. I ran startup repair 3 times it didn't find anything. The MS memory test is going now. I'll do the Mem Test as soon as I can.
Thanks alot
Joe
fffff880`04012968 fffff880`01cb0700 [U][B]Unable to load image tdrpm273.sys[/B][/U], Win32 error 0n2
*** WARNING: [U][B]Unable to verify timestamp for tdrpm273.sys[/B][/U]
*** ERROR: Module load completed but symbols could not be loaded for [U][B]tdrpm273.sys[/B][/U]
[U][B] tdrpm273[/B][/U]+0x43700
BugCheck 18, {0, fffffa8009155dd0, 4, ffffffffffffffff}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+19da3 )
REFERENCE_BY_POINTER (18)
Arguments:
Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
Arg2: fffffa8009155dd0, Object whose reference count is being lowered
Arg3: 0000000000000004, Reserved
Arg4: ffffffffffffffff, Reserved
The reference count of an object is illegal for the current state of the object.
Each time a driver uses a pointer to an object the driver calls a kernel routine
to increment the reference count of the object. When the driver is done with the
pointer the driver calls another kernel routine to decrement the reference count.
Drivers must match calls to the increment and decrement routines. This bugcheck
can occur because an object's reference count goes to zero while there are still
open handles to the object, in which case the fourth parameter indicates the number
of opened handles. It may also occur when the objects reference count drops below zero
whether or not there are open handles to the object, and in that case the fourth parameter
contains the actual value of the pointer references count.
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x18
PROCESS_NAME: services.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff8000393efb5 to fffff800038e21c0
STACK_TEXT:
fffff880`04012908 fffff800`0393efb5 : 00000000`00000018 00000000`00000000 fffffa80`09155dd0 00000000`00000004 : nt!KeBugCheckEx
fffff880`04012910 fffff800`03910d43 : fffffa80`0626b380 00000000`00000000 00000000`00000000 fffff880`01cb0700 : nt! ?? ::FNODOBFM::`string'+0x19da3
fffff880`04012950 fffff800`03908fff : fffffa80`0873a620 fffff880`04012a80 fffffa80`0911bec8 00000000`0000002b : nt!MiWaitForInPageComplete+0x507
fffff880`04012a30 fffff800`038ef85a : 00000000`00000000 00000000`00000000 ffffffff`ffffffff fffff800`00000000 : nt!MiIssueHardFault+0x28b
fffff880`04012ac0 fffff800`038e02ee : 00000000`00000000 000007fe`fc7d700c 00000000`77302501 000007fe`fc7a0000 : nt!MmAccessFault+0x146a
fffff880`04012c20 00000000`771fdd9c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`0012e9d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x771fdd9c
nt! ?? ::FNODOBFM::`string'+19da3
fffff800`0393efb5 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+19da3
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4fa390f3
FAILURE_BUCKET_ID: X64_0x18_nt!_??_::FNODOBFM::_string_+19da3
BUCKET_ID: X64_0x18_nt!_??_::FNODOBFM::_string_+19da3
fffff880`01072000 fffff880`010b0000 1394ohci 1394ohci.sys Sat Nov 20 04:44:56 2010 (4CE7A6A8)
fffff880`00f7a000 fffff880`00fd1000 ACPI ACPI.sys Sat Nov 20 03:19:16 2010 (4CE79294)
fffff880`0132a000 fffff880`01335000 amdxata amdxata.sys Fri Mar 19 11:18:18 2010 (4BA3A3CA)
[U][B]fffff880`01df2000 fffff880`01dfc000 avgidsha avgidsha.sys Wed Apr 18 21:19:15 2012 (4F8F7623)
fffff880`01c61000 fffff880`01c6d000 avgrkx64 avgrkx64.sys Mon Jan 30 21:11:41 2012 (4F275BED)[/B][/U]
fffff880`02db9000 fffff880`02dc0000 beep beep.sys Mon Jul 13 19:00:13 2009 (4A5BCA8D)
fffff880`013e3000 fffff880`013f4000 blbdrive blbdrive.sys Mon Jul 13 18:35:59 2009 (4A5BC4DF)
fffff880`010b0000 fffff880`010da000 cdrom cdrom.sys Sat Nov 20 03:19:20 2010 (4CE79298)
fffff880`00d05000 fffff880`00dc5000 CI CI.dll Sat Nov 20 07:12:36 2010 (4CE7C944)
fffff880`00c00000 fffff880`00c30000 CLASSPNP CLASSPNP.SYS Sat Nov 20 03:19:23 2010 (4CE7929B)
fffff880`00ca7000 fffff880`00d05000 CLFS CLFS.SYS Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01072000 cng cng.sys Fri Jun 01 22:25:51 2012 (4FC987BF)
fffff880`010da000 fffff880`010ea000 CompositeBus CompositeBus.sys Sat Nov 20 04:33:17 2010 (4CE7A3ED)
fffff880`0340e000 fffff880`0341c000 crashdmp crashdmp.sys Mon Jul 13 19:01:01 2009 (4A5BCABD)
fffff880`01800000 fffff880`01816000 disk disk.sys Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`0341c000 fffff880`0342f000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 18:21:51 2009 (4A5BC18F)
fffff880`02c7d000 fffff880`02d9b000 dump_iaStorV dump_iaStorV.sys Thu Jun 10 19:46:19 2010 (4C11875B)
fffff880`0342f000 fffff880`0343b000 Dxapi Dxapi.sys Mon Jul 13 18:38:28 2009 (4A5BC574)
fffff960`004b0000 fffff960`004ce000 dxg dxg.sys Mon Jul 13 18:38:28 2009 (4A5BC574)
fffff880`013c3000 fffff880`013d7000 fileinfo fileinfo.sys Mon Jul 13 18:34:25 2009 (4A5BC481)
fffff880`01145000 fffff880`01191000 fltmgr fltmgr.sys Sat Nov 20 03:19:24 2010 (4CE7929C)
fffff960`00800000 fffff960`00809000 framebuf framebuf.dll Mon Jul 13 18:38:47 2009 (4A5BC587)
fffff880`015d8000 fffff880`015e2000 Fs_Rec Fs_Rec.sys Wed Feb 29 21:41:06 2012 (4F4EEFD2)
fffff880`01bb5000 fffff880`01bef000 fvevol fvevol.sys Sat Nov 20 03:24:06 2010 (4CE793B6)
fffff880`01a26000 fffff880`01a70000 fwpkclnt fwpkclnt.sys Sat Nov 20 03:21:37 2010 (4CE79321)
fffff800`0381a000 fffff800`03863000 hal hal.dll Sat Nov 20 07:00:25 2010 (4CE7C669)
fffff880`02c4a000 fffff880`02c6e000 HDAudBus HDAudBus.sys Sat Nov 20 04:43:42 2010 (4CE7A65E)
fffff880`035de000 fffff880`035f7000 HIDCLASS HIDCLASS.SYS Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`035f7000 fffff880`035ff080 HIDPARSE HIDPARSE.SYS Mon Jul 13 19:06:17 2009 (4A5BCBF9)
fffff880`035d0000 fffff880`035de000 hidusb hidusb.sys Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`01c55000 fffff880`01c61000 hotcore3 hotcore3.sys Wed Jun 23 17:54:01 2010 (4C229089)
fffff880`01c4c000 fffff880`01c55000 hwpolicy hwpolicy.sys Sat Nov 20 03:18:54 2010 (4CE7927E)
fffff880`01680000 fffff880`0169e000 i8042prt i8042prt.sys Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`0120c000 fffff880`0132a000 iaStorV iaStorV.sys Thu Jun 10 19:46:19 2010 (4C11875B)
fffff880`02c6e000 fffff880`02c7d000 kbdclass kbdclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`03400000 fffff880`0340e000 kbdhid kbdhid.sys Sat Nov 20 04:33:25 2010 (4CE7A3F5)
fffff800`00ba1000 fffff800`00bab000 kdcom kdcom.dll Sat Feb 05 10:52:49 2011 (4D4D8061)
fffff880`034e7000 fffff880`0352a000 ks ks.sys Sat Nov 20 04:33:23 2010 (4CE7A3F3)
fffff880`015ac000 fffff880`015c7000 ksecdd ksecdd.sys Fri Jun 01 21:50:23 2012 (4FC97F6F)
fffff880`01600000 fffff880`0162a000 ksecpkg ksecpkg.sys Fri Jun 01 22:27:11 2012 (4FC9880F)
fffff880`00c44000 fffff880`00c93000 mcupdate mcupdate.dll Sat Nov 20 07:03:51 2010 (4CE7C737)
fffff880`015e2000 fffff880`015f1000 mouclass mouclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`00fe4000 fffff880`00ffe000 mountmgr mountmgr.sys Sat Nov 20 03:19:21 2010 (4CE79299)
fffff880`02c10000 fffff880`02c1b000 Msfs Msfs.SYS Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`00fda000 fffff880`00fe4000 msisadrv msisadrv.sys Mon Jul 13 18:19:26 2009 (4A5BC0FE)
fffff880`01191000 fffff880`011ef000 msrpc msrpc.sys Sat Nov 20 03:21:56 2010 (4CE79334)
fffff880`01816000 fffff880`01821000 mssmbios mssmbios.sys Mon Jul 13 18:31:10 2009 (4A5BC3BE)
fffff880`01c3a000 fffff880`01c4c000 mup mup.sys Mon Jul 13 18:23:45 2009 (4A5BC201)
fffff880`016a4000 fffff880`01797000 ndis ndis.sys Sat Nov 20 03:23:30 2010 (4CE79392)
fffff880`01797000 fffff880`017f7000 NETIO NETIO.SYS Sat Nov 20 03:23:13 2010 (4CE79381)
fffff880`02c1b000 fffff880`02c2c000 Npfs Npfs.SYS Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff800`03863000 fffff800`03e4b000 nt ntkrnlmp.exe Fri May 04 03:18:59 2012 (4FA390F3)
fffff880`01409000 fffff880`015ac000 Ntfs Ntfs.sys Thu Mar 10 21:39:39 2011 (4D79997B)
fffff880`02db0000 fffff880`02db9000 Null Null.SYS Mon Jul 13 18:19:37 2009 (4A5BC109)
fffff880`00dc5000 fffff880`00ded000 nvraid nvraid.sys Fri Mar 19 15:59:20 2010 (4BA3E5A8)
fffff880`01335000 fffff880`01360000 nvstor nvstor.sys Fri Mar 19 15:45:11 2010 (4BA3E257)
fffff880`00e40000 fffff880`00e55000 partmgr partmgr.sys Sat Mar 17 00:06:09 2012 (4F641BC1)
fffff880`00e00000 fffff880`00e33000 pci pci.sys Sat Nov 20 03:19:11 2010 (4CE7928F)
fffff880`015c7000 fffff880`015d8000 pcw pcw.sys Mon Jul 13 18:19:27 2009 (4A5BC0FF)
fffff880`00c93000 fffff880`00ca7000 PSHED PSHED.dll Mon Jul 13 20:32:23 2009 (4A5BE027)
fffff880`013d7000 fffff880`013e2d00 PxHlpa64 PxHlpa64.sys Wed Mar 12 20:58:17 2008 (47D88A39)
fffff880`015f1000 fffff880`015fc000 rdpbus rdpbus.sys Mon Jul 13 19:17:46 2009 (4A5BCEAA)
fffff880`01c00000 fffff880`01c3a000 rdyboost rdyboost.sys Sat Nov 20 03:43:10 2010 (4CE7982E)
fffff880`01dac000 fffff880`01df2000 snapman snapman.sys Tue Aug 10 05:15:05 2010 (4C6126A9)
fffff880`01360000 fffff880`013c3000 storport storport.sys Thu Mar 10 22:30:23 2011 (4D79A55F)
fffff880`02dfe000 fffff880`02dff480 swenum swenum.sys Mon Jul 13 19:00:18 2009 (4A5BCA92)
fffff880`01823000 fffff880`01a26000 tcpip tcpip.sys Fri Mar 30 03:34:26 2012 (4F757012)
fffff880`01c6d000 fffff880`01da4000 tdrpm273 tdrpm273.sys Tue Aug 10 04:54:18 2010 (4C6121CA)
fffff880`00c30000 fffff880`00c44000 termdd termdd.sys Sat Nov 20 05:03:40 2010 (4CE7AB0C)
fffff880`01a70000 fffff880`01b59000 timntr timntr.sys Tue Sep 29 08:36:57 2009 (4AC20D79)
fffff960`00670000 fffff960`0067a000 TSDDD TSDDD.dll Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`0352a000 fffff880`0353c000 umbus umbus.sys Sat Nov 20 04:44:37 2010 (4CE7A695)
fffff880`035b3000 fffff880`035d0000 usbccgp usbccgp.sys Thu Mar 24 22:29:14 2011 (4D8C0C0A)
fffff880`035b1000 fffff880`035b2f00 USBD USBD.SYS Thu Mar 24 22:28:59 2011 (4D8C0BFB)
fffff880`02c39000 fffff880`02c4a000 usbehci usbehci.sys Thu Mar 24 22:29:04 2011 (4D8C0C00)
fffff880`0353c000 fffff880`03596000 usbhub usbhub.sys Thu Mar 24 22:29:25 2011 (4D8C0C15)
fffff880`0162a000 fffff880`01680000 USBPORT USBPORT.SYS Thu Mar 24 22:29:12 2011 (4D8C0C08)
fffff880`03596000 fffff880`035b1000 USBSTOR USBSTOR.SYS Thu Mar 10 22:37:16 2011 (4D79A6FC)
fffff880`02c2c000 fffff880`02c39000 usbuhci usbuhci.sys Thu Mar 24 22:29:03 2011 (4D8C0BFF)
fffff880`00e33000 fffff880`00e40000 vdrvroot vdrvroot.sys Mon Jul 13 19:01:31 2009 (4A5BCADB)
fffff880`02dc0000 fffff880`02dce000 vga vga.sys Mon Jul 13 18:38:47 2009 (4A5BC587)
fffff880`02dce000 fffff880`02df3000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 18:38:51 2009 (4A5BC58B)
fffff880`010f5000 fffff880`01131000 vmbus vmbus.sys Sat Nov 20 03:57:29 2010 (4CE79B89)
fffff880`02df3000 fffff880`02dfe000 VMkbd VMkbd.sys Sat Mar 26 00:31:22 2011 (4D8D7A2A)
fffff880`01b59000 fffff880`01b69000 vmstorfl vmstorfl.sys Sat Nov 20 03:57:30 2010 (4CE79B8A)
fffff880`00e55000 fffff880`00e6a000 volmgr volmgr.sys Sat Nov 20 03:19:28 2010 (4CE792A0)
fffff880`00e6a000 fffff880`00ec6000 volmgrx volmgrx.sys Sat Nov 20 03:20:43 2010 (4CE792EB)
fffff880`01b69000 fffff880`01bb5000 volsnap volsnap.sys Sat Nov 20 03:20:08 2010 (4CE792C8)
fffff880`02c00000 fffff880`02c10000 watchdog watchdog.sys Mon Jul 13 18:37:35 2009 (4A5BC53F)
fffff880`00ec7000 fffff880`00f6b000 Wdf01000 Wdf01000.sys Mon Jul 13 18:22:07 2009 (4A5BC19F)
fffff880`00f6b000 fffff880`00f7a000 WDFLDR WDFLDR.SYS Mon Jul 13 18:19:54 2009 (4A5BC11A)
fffff960`00000000 fffff960`00315000 win32k win32k.sys Wed Jul 18 13:14:37 2012 (5006FD0D)
fffff880`01131000 fffff880`01145000 winhv winhv.sys Sat Nov 20 03:20:02 2010 (4CE792C2)
fffff880`00fd1000 fffff880`00fda000 WMILIB WMILIB.SYS Mon Jul 13 18:19:51 2009 (4A5BC117)
With respect to re-seating your RAM sticks... That's not a bad idea although you'll likely be doing some of that during the course of running MemTest86+I wonder if that could have caused some corruption problems that snowballed. I took a quick look at MemTest does that have to be tested one stick at a time? I'll see what I can find to test the HD with the OS on it it's a Hitachi 750 gig HDS721075 KLA330 in device manager.
Would it be a good idea to open it up again and pull and reseat ram sticks?
And see what it discovers. If you have difficulty doing this from within the OS you should be able to perform the same task from within the Windows 7 Recovery Environment by booting from the install media or a Windows 7 Repair Disk. If you don't have a repair disk we have both 32 and 64 bit versions available for our members in our Downloads sections here Link Removed due to 404 ErrorLaunch an elevated command prompt (StartOrb->All Programs->Accessories->Command Prompt, right click it and choose Run As Administrator) and type
chkdsk C: /R
hit enter and answer Yes “Y” when prompted and reboot.
Let it run all five stages. When complete check the log file in Event Viewer for results (Click the StartOrb and type event viewer and hit enter, expand Windows Logs and highlight / select Application, click Action on the menu bar and select Find and type chkdsk and hit enter.
Link Removed due to 404 ErrorA: If you are experiencing problems with your drive or would just like to test the drive’s integrity, download and run the HGST Link Removed - Invalid URL.
If possible, we recommend that you backup any important data before running the test. Run the quick test first. If you are experiencing problems, but receive the result 0x00 try running the Advanced Test option. When you have completed the test, please Link Removed - Invalid URL with the results and our agents will be able to assist you on resolving the problem.
A very accurate definition. That's almost exactly what it's like most of the time, except for the very few instances where the answer just jumps out at you and points directly to an offending driver. Otherwise it's often a process of elimination and only slightly educated guessing.Sometimes it's like looking for a needle in big haystack finding the actual cause of a problem.