Windows 7 Win 7: MEMORY_MANAGEMENT blue screens

It happened again this morning...
It looks like the old memory management problem was fixed but now we got a new problem.
there are 3 things that I get in the event viewer about it:

8:54.43
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>2</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000002</Keywords>

<TimeCreated SystemTime="2010-03-16T21:54:43.566812400Z" />

<EventRecordID>25793</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>user-PC</Computer>

<Security UserID="S-1-5-18" />

</System>


- <EventData>
<Data Name="BugcheckCode">80</Data>

<Data Name="BugcheckParameter1">0xfffff6fc510059c0</Data>

<Data Name="BugcheckParameter2">0x0</Data>

<Data Name="BugcheckParameter3">0xfffff80002acc918</Data>

<Data Name="BugcheckParameter4">0x2</Data>

<Data Name="SleepInProgress">false</Data>

<Data Name="PowerButtonTimestamp">0</Data>

</EventData>


</Event>

8:54.50
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System>
<Provider Name="atikmdag" />

<EventID Qualifiers="49152">52236</EventID>

<Level>2</Level>

<Task>51</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-16T21:54:50.384024400Z" />

<EventRecordID>25798</EventRecordID>

<Channel>System</Channel>

<Computer>user-PC</Computer>

<Security />

</System>


- <EventData>
<Data />

<Binary>0000000001000000330000000CCC00C0000000000000000000000000000000000000000000000000</Binary>

</EventData>


</Event>


8:54.50
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System>
<Provider Name="atikmdag" />

<EventID Qualifiers="49152">43029</EventID>

<Level>2</Level>

<Task>42</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-16T21:54:50.384024400Z" />

<EventRecordID>25799</EventRecordID>

<Channel>System</Channel>

<Computer>user-PC</Computer>

<Security />

</System>


- <EventData>
<Data />

<Binary>00000000010000002A00000015A800C0000000000000000000000000000000000000000000000000</Binary>

</EventData>


</Event>

and then
8:54.52


<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />

<EventID Qualifiers="16384">1001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-16T21:54:52.000000000Z" />

<EventRecordID>25800</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>user-PC</Computer>

<Security />

</System>


- <EventData>
<Data Name="param1">0x00000050 (0xfffff6fc510059c0, 0x0000000000000000, 0xfffff80002acc918, 0x0000000000000002)</Data>

<Data Name="param2">C:\Windows\Minidump\031710-14882-01.dmp</Data>

<Data Name="param3">031710-14882-01</Data>

</EventData>


</Event>

Or the attached below:




 

Attachments

  • 031710-14882-01.zip
    19.8 KB · Views: 328
It looks like a problem with your ATi video driver now.
Do you have the latest drivers?
What is your video card?
Ati releases updated drivers every month about this time.
If your card is a recent card the newest drivers may fix this issue.
 
Aright. I just updated it!!!! It's a ATI Radeon HD 4870.
I just updated a few as well as the BIOS. I can't do the SATA RAID driver because apparientlky my computer does not meet the minimum requirements. which is kind of odd to be honest. Let's see if this comp crashes now :)


It looks like a problem with your ATi video driver now.
Do you have the latest drivers?
What is your video card?
Ati releases updated drivers every month about this time.
If your card is a recent card the newest drivers may fix this issue.
 
It happened again this morning...
It looks like the old memory management problem was fixed but now we got a new problem.
there are 3 things that I get in the event viewer about it:

the attached below:




[/COLOR]
this is not a memory management error, this is about driver integrity ?

the normal suggestion would be unninstall the last thing you installed ?

what was the answer to my question "are you booting with a CD\DVD in your drive" ?
 
this is not a memory management error, this is about driver integrity ?

the normal suggestion would be unninstall the last thing you installed ?

what was the answer to my question "are you booting with a CD\DVD in your drive" ?

ah, the driver integrity? The last thing i had installed before that was the Realtek NIC driver or the motherboard Chipset. But i had turned the computer on and off a few times before that so... *shrugs* not sure.

I may have installed plugins to the browser. can't quite recall though.

And there is no CD/DVD in the drive.
 
ah, the driver integrity? The last thing i had installed before that was the Realtek NIC driver or the motherboard Chipset. But i had turned the computer on and off a few times before that so... *shrugs* not sure.

I may have installed plugins to the browser. can't quite recall though.

And there is no CD/DVD in the drive.

I'm still trying to work with the clues from windows debugger so far it states that you had a bugcheck 0x50 which is normally a driver file error, Most likely there is a problem with that file and it needs to be updated or replaced ?

the second clue from debugger is
Could not read faulting driver name Probably caused by : CI.dll
which is where the file integrity comes in again ?
Ed Bott said:
Code Integrity (CI) protects Windows Vista by verifying that system binaries haven’t been tampered with by malicious code and by ensuring that there are no unsigned drivers running in kernel mode on the system. CI starts as Windows starts up. The boot loader checks the integrity of the kernel, the Hardware Abstraction Layer (HAL), and the boot-start drivers. After these binaries have been verified, the system starts and the memory manager calls CI to verify any binaries that are loaded into the kernel’s memory space. The binaries are verified by looking up their signatures in the system catalogs. Aside from the kernel memory space, CI verifies binaries loaded into a protected process and system installed dynamic libraries that implement core cryptographic functions.

ok it's vista but I beleive it does the same job the same way in win 7 :)

I suggest for now lets try a scannow on your system files

you do this by opening an elevated cmd prompt then type sfc /scannow (observe the space) and press return , let us know the results ?

also type sigverif into the search bar from the start orb and run the windows tool, then click advanced and open the log produced, save it and zip then upload and attach it here please ?
 
Hi!

I had to disable UAC in order to do that sfc /scannow due to system error 5 occurring when I tried to become an administrator but I finally got it running.
heh, you may be dissapointed to hear that:

"Windows Resource Protection did not find any integrity violations."

Attached is the result of the sigverif. I did a sigverif check before i got the .txt file.


Here's another note to add btw. When i checked the eventviewer and saw the errors surrounding the critical error kernel failure in the past, a few times i had noticed that it was Provider Name="atikmdag" as fjgold had mentioned earlier (though i didnt realise the importance). Maybe the ATI driver card thing was the thing that was not signed or had CI errors - however before you instructed me to check sigverif and windows resource protection, i had just installed the latest ATI driver.
Also, there was an error surrounding nero too but i doubt that it's relevant.

Thanks for your continued support :)

EDIT: btw, after installing the new ATI driver. Windows 7 suddenly decided that on the next reboot that it wasn't a genuine copy anymore. but then after i checked online, it decided that i was actually verified. Just a thing to note it may not be important. thanks again.
 

Attachments

  • SIGVERIF.zip
    2.8 KB · Views: 337
Last edited:
Hi!

I had to disable UAC in order to do that sfc /scannow due to system error 5 occurring when I tried to become an administrator but I finally got it running.
heh, you may be dissapointed to hear that:

"Windows Resource Protection did not find any integrity violations."

Attached is the result of the sigverif. I did a sigverif check before i got the .txt file.


Here's another note to add btw. When i checked the eventviewer and saw the errors surrounding the critical error kernel failure in the past, a few times i had noticed that it was Provider Name="atikmdag" as fjgold had mentioned earlier (though i didnt realise the importance). Maybe the ATI driver card thing was the thing that was not signed or had CI errors - however before you instructed me to check sigverif and windows resource protection, i had just installed the latest ATI driver.
Also, there was an error surrounding nero too but i doubt that it's relevant.

Thanks for your continued support :)

EDIT: btw, after installing the new ATI driver. Windows 7 suddenly decided that on the next reboot that it wasn't a genuine copy anymore. but then after i checked online, it decided that i was actually verified. Just a thing to note it may not be important. thanks again.

well that proves you are using approved drivers and no corrupted files which is good news , and yes that was a good call by fjgold , let's hope it's solved the problem :)
 
Hi my brother started the computer this morning and got the error again. The Minidump didn’t work this time so im posting all the events.

Error at 10:13:39
The general message is that Crash dump initialization failed. - 46
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="volmgr" />
<EventID Qualifiers="49156">46</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreatedSystemTime="2010-03-17T23:13:39.630810800Z" />
<EventRecordID>26695</EventRecordID>
<Channel>System</Channel>
<Computer>user-PC</Computer>
<Security/>
</System>
- <EventData>
<Data>\Device\HarddiskVolume2</Data>
<Binary>0000000001000000000000002E0004C0041000000D0000C000000000000000000000000000000000</Binary>
</EventData>
</Event>

Critical Error 10:13.40 – 41
The system has rebooted without cleanly shutting down first. This error could be caused of the system stopped responding, crashed, or lost power unexpectedly.
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreatedSystemTime="2010-03-17T23:13:40.364012100Z" />
<EventRecordID>26697</EventRecordID>
<Correlation/>
<ExecutionProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>user-PC</Computer>
<SecurityUserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

Error 10:13.58 – 2004

The simple message here was:
Microsoft Antimalware has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
Signature Attempted: Current
Error Code: 0x80070002
Error description: The system cannot find the file specified
Signature Version: 0.0.0.0;0.0.0.0
Engine Version: 0.0.0.0
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="Microsoft Antimalware" />
<EventID Qualifiers="0">2004</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreatedSystemTime="2010-03-17T23:13:58.000000000Z" />
<EventRecordID>26698</EventRecordID>
<Channel>System</Channel>
<Computer>user-PC</Computer>
<Security/>
</System>
- <EventData>
<Data>%%861</Data>
<Data>2.1.6519.0</Data>
<Data>1</Data>
<Data>%%824</Data>
<Data>0x80070002</Data>
<Data>The system cannot find the file specified.</Data>
<Data/>
<Data/>
<Data>0.0.0.0;0.0.0.0</Data>
<Data>0.0.0.0</Data>
</EventData>
</Event>



After that there are information Event ID: 26 regarding the processors.
After a bit of information logs though is this relevant bit where I started the startup repair thing and restored the computer to an earlier point.
So at 10:14.07 called event ID: 1001. The general message is “Startup repair successfully completed repairs”
At 10:14:07 called EventID : 1137. The general message is “ Unspecified changes to system configuration might have caused the problem”
Here’s the specific thing here.
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="Microsoft-Windows-StartupRepair" Guid="{C914F0DF-835A-4A22-8C70-732C9A80C634}" />
<EventID>1137</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreatedSystemTime="2010-03-17T23:14:07.648460000Z" />
<EventRecordID>26758</EventRecordID>
<Correlation/>
<ExecutionProcessID="2264" ThreadID="2268" />
<Channel>System</Channel>
<Computer>user-PC</Computer>
<SecurityUserID="S-1-5-18" />
</System>
- <UserData>
- <RootCause xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2005/08/windows/Reliability/Postboot/Events">
<Info/>
</RootCause>
</UserData>
</Event>

At 10:14:07 CALLED EventID: 1208, the general message is “Restored system to an earlier restore point”.
Now the things that I downloaded and installed before shutting down the computer were the windows updates and these are all the things from the 17th (yesterday) of March and I’ll include an update of today.
Definition Update for Microsoft Security Essentials – KB972696 (Definition 1.79.99.0) Recommended 3/18/2010.
Definition Update for Microsoft Security Essentials – KB972696 (Definition 1.79.77.0) Successful Recommended 3/17/2010
ATI Technologies Inc. 0 Display – ATI Radeon HD 4870 Failed Optional 3/17/2010 – Note: This download failed because I had already manually installed the same ATI driver earlier that day. The update recommended the same update (on 2/2/2010) on the driver that I already had!
Microsoft driver update for Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20) Successful Optional 3/17/2010
Office Live Add-in 1.4 Successful Optional 3/17/2010
ACER Corporation – Display – Acer AL1716 Successful Optional 3/17/2010
Windows Malicious Software Removal Tool x 64 – March 2010 (KB890830) Successful Important 3/17/2010
Definition Update for Microsoft Security Essentials – KB972696 (Definition 1.79.51.0) Successful Recommended 3/17/2010.

Next I looked at the sigverif thing again and I found one more entry in the signature thing.
If you compare this sigverif to the old one it says there are 197 signed signatures versus 198 signed signatures.
The only difference is that there is one under:
[c:\windows\system32\spool\drivers\color]
al1716.icm 12/6/2006 2:6.0 Signed acer17.cat Microsoft Windows Hardware Compatibility Publisher

I’m think maybe the system restore got rid of whatever that new installation by the Windows Update… But how is it that Windows Update can make a download that isn’t signed and makes the computer crash? The thing is I have restored the system so it means I won’t be able to find that unsigned signature … or maybe it’s something else? Maybe the Microsoft Anti-Malware has got the problem itself?

^*%%%*%*&
EXTRA: Just before I was about to post this, I looked at the Event Viewer Again and now I’ve found 3 new errors while running the computer. There were 3 new errors in the system requirements (though they all say the same thing so I’ll just post one of them). Hopefully this helps.
3/18/2010, 10:24:56 EventID: 2001. General summary:
Microsoft Antimalware has encountered an error trying to update signatures
New Signature Version:
Previous Signature Version: 1.79.51.0
Update Source: Microsoft Update Server
Update Stage: Install
Source Path: http://www.microsoft.com
Signature Type: AntiVirus
Update Type: Full
User: NT AUTHORITY\SYSTEM
Current Engine Version:
Previous Engine Version: 1.1.5605.0
Error Code: 0x80240016
Error Description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="Microsoft Antimalware" />
<EventID Qualifiers="0">2001</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreatedSystemTime="2010-03-17T23:24:56.000000000Z" />
<EventRecordID>26785</EventRecordID>
<Channel>System</Channel>
<Computer>user-PC</Computer>
<Security/>
</System>
- <EventData>
<Data>%%861</Data>
<Data>2.1.6519.0</Data>
<Data/>
<Data>1.79.51.0</Data>
<Data>7</Data>
<Data>%%859</Data>
<Data/>
<Data>NT AUTHORITY</Data>
<Data>SYSTEM</Data>
<Data>S-1-5-18</Data>
<Data>1</Data>
<Data>%%800</Data>
<Data>1</Data>
<Data>%%803</Data>
<Data/>
<Data>1.1.5605.0</Data>
<Data>0x80240016</Data>
<Data>An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.</Data>
<Data>3</Data>
<Data>%%854</Data>
<Data>http://www.microsoft.com</Data>
</EventData>
</Event>

All three errors are the same. Though this may be the microsoft messages for my skype add-on for internet explorer or that adobe flash isn’t designed for 64 bit internet explorer. I don’t know.

Also, I just checked the Setup part of the Eventmanager and found an error at 3/17/2010 7:15:30 PM and the source is WUSA eventide: 3.
The general entry says: Windows update could not be installed because of error 2359302 “” (Command line “” C:\Windows\system32\WUSA.exe” “C:\Users\user]Appdata\Loval\Temp\\{0a5b9c6c-c0a8-48da-9dc4-3cc2034ea4c6}.msu” \quiet \norestart”)
And more specifically
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<ProviderName="Microsoft-Windows-WUSA" Guid="{09608C12-C1DA-4104-A6FE-B959CF57560A}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreatedSystemTime="2010-03-17T08:15:30.190415300Z" />
<EventRecordID>141</EventRecordID>
<Correlation/>
<ExecutionProcessID="2924" ThreadID="3924" />
<Channel>Setup</Channel>
<Computer>user-PC</Computer>
<SecurityUserID="S-1-5-21-3825278226-857297229-531636188-1000" />
</System>
- <EventData>
<DataName="UpdateTitle" />
<Data Name="ErrorCode">2359302</Data>
<DataName="ErrorString" />
<Data Name="CommandLine">"C:\Windows\system32\WUSA.exe" "C:\Users\user\AppData\Local\Temp\\{0a5b9c6c-c0a8-48da-9dc4-3cc2034ea4c6}.msu" /quiet /norestart</Data>
</EventData>
</Event>


Anyways, I hope amongst all this data. There’s something useful in here that is helpful. But I suspect the windows update or malware thing is causing this problem. Thanks again.

Scraps.

Potential Solution
I found a microsoft support site ( http://support.microsoft.com/kb/910336 ) in regards to the error 0x80070002 . do you think i should follow it? The error code is found in that general message which states: "Microsoft Antimalware has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. "
Thank you again.
 

Attachments

  • SIGVERIF (2).zip
    2.9 KB · Views: 310
Last edited:
I found a microsoft support site ( You receive a \\"0x80070002\\" or \\"0x80070003\\" error code after you download an update from Windows Update, from Microsoft Update, or from Windows Server Update Services ) in regards to the error 0x80070002 . do you think i should follow it? The error code is found in that general message which states: \\"Microsoft Antimalware has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. \\"
Thank you again.

essentially this fix is ditching your update history then asking Microsoft updates to re-download and re-apply the ones that may have failed ?

you could try it ..........

If that doesn't work my feelings at this time are that we have come a long way with two bios updates and attempted and failed to properly apply your chipset drivers as the raid driver component failed, this has left us with some damage to the Operating system and I'm not convinced trying to debug it is going to be an easy task :confused:

how much if any essential information and data would you loose with a fresh install ?

If this is an option we should check you definitely have the latest version for your bios then perform a fresh format and install and slowly add your software maintaining restore points and debug any errors as they happen before you install anything more ;)
 
heh, if having to install all the updates again is enough to prevent blue screens. Then I'm cool with that heh. Hmm, maybe i can disable windows updates altogether - they seem quite useless so far..

If I have to get a fresh install, i have access to USB's to back up all my data. Actually, I've already backed up most of it in anticipation of this problem occuring. But I'm ready to format and install windows again if need be. Though I hear windows 7 cd's tend to be one use only so does that mean i have to buy windows 7 again? :|

Anyways thanks again, and I'll keep you updated.

Scraps.



essentially this fix is ditching your update history then asking Microsoft updates to re-download and re-apply the ones that may have failed ?

you could try it ..........

If that doesn't work my feelings at this time are that we have come a long way with two bios updates and attempted and failed to properly apply your chipset drivers as the raid driver component failed, this has left us with some damage to the Operating system and I'm not convinced trying to debug it is going to be an easy task :confused:

how much if any essential information and data would you loose with a fresh install ?

If this is an option we should check you definitely have the latest version for your bios then perform a fresh format and install and slowly add your software maintaining restore points and debug any errors as they happen before you install anything more ;)
 
Hi all, the thing crashed again. The error message is below as well as the attachment of the minidump. But what's it matter now right? I'm ready to format and reinstall everything. Are there any instructions in order to format it or any sites that tell me how to format and reinstall windows 7? I just need your blessing before I go ahead with this thing.haha. makes me as shaky as updating that BIOS a week back.

ANd The BIOS is up to date - it's dated on 2/11/2010 and is the latest version (F6) on that gigabyte site.

Thank you again and again. Heh, this has been a long journey and a really new experience to fix this thing haha.

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />

<EventID Qualifiers="16384">1001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-18T22:27:21.000000000Z" />

<EventRecordID>27714</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>USER-PC</Computer>

<Security />

</System>


- <EventData>
<Data Name="param1">0x000000f4 (0x0000000000000003, 0xfffffa80036d7b30, 0xfffffa80036d7e10, 0xfffff80002dd3240)</Data>

<Data Name="param2">C:\Windows\Minidump\031910-17596-01.dmp</Data>

<Data Name="param3">031910-17596-01</Data>

</EventData>


</Event>






heh, if having to install all the updates again is enough to prevent blue screens. Then I'm cool with that heh. Hmm, maybe i can disable windows updates altogether - they seem quite useless so far..

If I have to get a fresh install, i have access to USB's to back up all my data. Actually, I've already backed up most of it in anticipation of this problem occuring. But I'm ready to format and install windows again if need be. Though I hear windows 7 cd's tend to be one use only so does that mean i have to buy windows 7 again? :|

Anyways thanks again, and I'll keep you updated.

Scraps.
 

Attachments

  • 031910-17596-01.zip
    21.4 KB · Views: 275
Hi all, the thing crashed again. The error message is below as well as the attachment of the minidump. But what's it matter now right? I'm ready to format and reinstall everything. Are there any instructions in order to format it or any sites that tell me how to format and reinstall windows 7? I just need your blessing before I go ahead with this thing.haha. makes me as shaky as updating that BIOS a week back.

ANd The BIOS is up to date - it's dated on 2/11/2010 and is the latest version (F6) on that gigabyte site.

windows debugger came up with
BugCheck F4, {3, fffffa80036d7b30, fffffa80036d7e10, fffff80002dd3240} , CRITICAL_OBJECT_TERMINATION, Probably caused by : wininit.exe
Microsoft suggest
This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.
which isn't particularly useful :frown:

I would suspect your antivirus first as interfering with a system process but hard to say .......................
-----------------------------------------------------------------------

now that your bios is fully up to date and your backed up a fresh system install is easy enough, and with windows 7 the full process from running the DVD and formatting the partition\drive then install should get you to desktop in less than 30 mins :)

you then need to reinstall all your specific drivers by visiting your motherboard manufacturers website, hopefully now you have had a practice run this will just be a matter of repeating what you have already as necessary, I would say though primarily chipset , gfx card, Network Card and Link Removed due to 404 Error , then anything not installed should be your priority ;)

right clicking my computer\properties then device manager is the first place to check to see if anything is not installed ?

from that point install your programs that are part of your personal environment and make restore points along the way so you can "wind back" if you get a problem :)

to create a restore point ....................
  1. click and open the Start Menu.
  2. Right click on the Computer button and click on Properties.
  3. Click on the System Protection link.
  4. Click on the Create button.
  5. Follow the prompts name them so you can remember what you last installed.

If at any point you get a bluescreen then let us know and we will have a defined sequence and environment which hopefully will be easier to debug :)

I suggest take your time and leave the P.C. running for as long as possible and don't be scared to stress the system with a game :razz:

see you on the other side :D
 
Hi, just a quick update to let you know what's going on. I've reinstalled windows 7, i think I've formatted both the system disk and the primary disk before installing windows 7. Im pretty sure i formatted both of them as all the drivers i installed earlier were gone.

I've installed the chipset, realtek network card NIC, graphics card, and MSE. though the MSE is currently taking ages to update.

the only issue im getting atm is that windows 7 doesn't want to 'activate' . doesn't seem to beleive my number's real anymore or something *sigh* I'll just check the web.

Just keeping you guys up to date.
 
Scraps, call MS to activate. Explain your situation.

Once activated and everything is setup to your liking and most importantly working with no more errors, create a restore image.
Use either Clonezilla or Partimage.
 
the only issue im getting atm is that windows 7 doesn't want to 'activate' . doesn't seem to beleive my number's real anymore or something *sigh* I'll just check the web.

Just keeping you guys up to date.

this is normal and don't worry just call the activation number and you are asked to enter the codes on your activation screen then they give you another code to activate, it's all automated and easy enough just take your time and get the numbers right ;)

good job and don't forget to make sure you have your restore points set :)
 
Hi.

I started the computer again this morning and it crashed again with the memory management screen.

Here's the Event Viewer covering the crash:
EVENT ID: 1001, 23/03/2010 at 8:56:29AM.
<Event xmlns="Link Removed due to 404 Error">
- <System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />

<EventID Qualifiers="16384">1001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-22T21:56:29.000000000Z" />

<EventRecordID>1481</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>Scraps-PC</Computer>

<Security />

</System>


- <EventData>
<Data Name="param1">0x0000001a (0x0000000000041287, 0x0000000000000058, 0x0000000000000000, 0x0000000000000000)</Data>

<Data Name="param2">C:\Windows\Minidump\032310-25303-01.dmp</Data>

<Data Name="param3">032310-25303-01</Data>

</EventData>


</Event>

The general message was: The computer has rebooted from a bugcheck. the bugcheck was: 0x0000001a (0x0000000000041287, 0x0000000000000058, 0x0000000000000000, 0x0000000000000000). A dump was saved in: C:\Windows\Minidump\032310-25303-01.dmp. Report Id: 032310-25303-

*%%&$^%
Now during yesterday (there were no crashes though), the event manager reports there were errors. this is what happened.

Error Event ID: 2001, time: 2:34:47AM at 22/03/2010.

<Event xmlns="Link Removed due to 404 Error">
- <System>
<Provider Name="Microsoft Antimalware" />

<EventID Qualifiers="0">2001</EventID>

<Level>2</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-21T15:34:47.000000000Z" />

<EventRecordID>1005</EventRecordID>

<Channel>System</Channel>

<Computer>Scraps-PC</Computer>

<Security />

</System>


- <EventData>
<Data>%%861</Data>

<Data>2.1.6519.0</Data>

<Data />

<Data>0.0.0.0</Data>

<Data>7</Data>

<Data>%%859</Data>

<Data />

<Data>NT AUTHORITY</Data>

<Data>SYSTEM</Data>

<Data>S-1-5-18</Data>

<Data>1</Data>

<Data>%%800</Data>

<Data>1</Data>

<Data>%%803</Data>

<Data />

<Data>0.0.0.0</Data>

<Data>0x80240022</Data>

<Data>The program can't check for definition updates.</Data>

<Data>2</Data>

<Data>%%853</Data>

<Data>http://www.microsoft.com</Data>

</EventData>


</Event>
General message: Microsoft antimalware has encountered an error trying to update signatures. New Signature Version:
Previous Signature Version: 0.0.0.0
Update Source: Microsoft Update Server
Update Stage: Download
Source Path: Microsoft Corporation
Signature Type: Antivirus
Update Type: Full
User: NT AUTHORITY\SYSTEM
Current Engine Version:
Previous Engine Version: 0.0.0.0.
Error Code: 0x80240022

The source is Microsoft Antimalware

EVENT ID: 2001, 22/03/2010 at 2:34:47AM
<Event xmlns="Link Removed due to 404 Error">
- <System>
<Provider Name="Microsoft Antimalware" />

<EventID Qualifiers="0">2001</EventID>

<Level>2</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-21T15:34:47.000000000Z" />

<EventRecordID>1004</EventRecordID>

<Channel>System</Channel>

<Computer>Scraps-PC</Computer>

<Security />

</System>


- <EventData>
<Data>%%861</Data>

<Data>2.1.6519.0</Data>

<Data />

<Data>0.0.0.0</Data>

<Data>7</Data>

<Data>%%859</Data>

<Data />

<Data>NT AUTHORITY</Data>

<Data>SYSTEM</Data>

<Data>S-1-5-18</Data>

<Data>1</Data>

<Data>%%800</Data>

<Data>1</Data>

<Data>%%803</Data>

<Data />

<Data>0.0.0.0</Data>

<Data>0x80240022</Data>

<Data>The program can't check for definition updates.</Data>

<Data>2</Data>

<Data>%%853</Data>

<Data>http://www.microsoft.com</Data>

</EventData>


</Event>

The general message is the same as above.


^&%^&%^&$
Earlier that day at 2:03:56AM. there are two errors with 2001 event ID.

<Event xmlns="Link Removed due to 404 Error">
- <System>
<Provider Name="Microsoft Antimalware" />

<EventID Qualifiers="0">2001</EventID>

<Level>2</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2010-03-21T15:03:56.000000000Z" />

<EventRecordID>985</EventRecordID>

<Channel>System</Channel>

<Computer>Scraps-PC</Computer>

<Security />

</System>


- <EventData>
<Data>%%861</Data>

<Data>2.1.6519.0</Data>

<Data />

<Data>0.0.0.0</Data>

<Data>7</Data>

<Data>%%859</Data>

<Data />

<Data>NT AUTHORITY</Data>

<Data>SYSTEM</Data>

<Data>S-1-5-18</Data>

<Data>1</Data>

<Data>%%800</Data>

<Data>1</Data>

<Data>%%803</Data>

<Data />

<Data>0.0.0.0</Data>

<Data>0x80240022</Data>

<Data>The program can't check for definition updates.</Data>

<Data>2</Data>

<Data>%%853</Data>

<Data>http://www.microsoft.com</Data>

</EventData>


</Event>

General Message:
Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 0.0.0.0.
Update Source: Microsoft Update Server
Update Stage: Download
Source Path: Microsoft Corporation
Signature Type: AntiVirus
Update Type: Full
User: NT AUTHORITY\SYSTEM
Current Engine Version:
Previous Engine Version: 0.0.0.0.
Error Code: 0x80240022

ANd source is Microsoft Antimalware

At these times I think I was asleep and letting the Microsoft Update system download all the updates. Though if i knew where i could find the restore points (i created a restore point for every new installation and a name for what i installed), then i could pinpoint it more precisely. EDIT: It could have also been the MSE downloading updates.

I've attached the minidump.

It seems like we've gone full circle again and started from the very beginning.

Thanks for your continuing support.

By the way, I'm starting postgraduate college next week (though I'm not leaving home) and I'm hoping to have everything resolved before then otherwise progress trying to fix this thing might be very slow as I have assessments and a workload pretty much straight up. Hopefully some ultimatum can be reached by the end of this week :). But if not, then I'll keep trying to get this thing updated but it will be slow. Maybe i should just get a new computer setup??

EDIT: just quickly, i remember the hardware guy (when he assembled my computer) say that one of the RAM sticks he was using was slightly different. does that matter by any chance?
 

Attachments

  • 032310-25303-01.zip
    20.5 KB · Views: 332
  • SIGVERIF.zip
    2.8 KB · Views: 314
Last edited:
Back
Top