BSOD - What's the problem?

R

rgsilent

Disciple
So I got a new rig about a month back and this is the second time I've got the Blue Screen of Death on my Win7 64-bit. First time I couldn't take a pic of the screen as I had the auto shutdown turned on by default. So ignored it. I think it was two weeks back I got that screen.

Here's the pic:
14xidet.jpg


The specs are (I guess they might be relevant):
athlon II x4 635
gigabyte gm-880-ud2h
corsair 2gb 1333mhz ddr3
corsair vx450
samsung 1TB hdd (bought a year back but in use since only 4-5 months on the old comp as an external disk)
zotac gtx460 1gb
dvd rw samsung

I'm completely clueless as to what causes this and i've had quite a few of this on my old p4 rig over the years on xp but nothing major ever happened except at the end when the machine stopped working completely. So I'd like to know what's causing this.

Any help will be appreciated.

Thank you.
 
Checked the minidump and I had the same problem before. There is a very high probability that it was caused by AVG . Open AVG and check if any components are disabled or "not working" condition.

ntoskrnl.exe cause BSOD.
 
MODULE_NAME: nt

FAULTING_MODULE: fffff8000304c000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
fffffffffffffd20

CURRENT_IRQL: 0

FAULTING_IP:
nt+3fdba
fffff800`0308bdba 488b8120fdffff mov rax,qword ptr [rcx-2E0h]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from fffff800030bbca9 to fffff800030bc740

STACK_TEXT:
fffff880`0611f328 fffff800`030bbca9 : 00000000`0000000a ffffffff`fffffd20 00000000`00000002 00000000`00000000 : nt+0x70740
fffff880`0611f330 00000000`0000000a : ffffffff`fffffd20 00000000`00000002 00000000`00000000 fffff800`0308bdba : nt+0x6fca9
fffff880`0611f338 ffffffff`fffffd20 : 00000000`00000002 00000000`00000000 fffff800`0308bdba fffff800`03086958 : 0xa
fffff880`0611f340 00000000`00000002 : 00000000`00000000 fffff800`0308bdba fffff800`03086958 31000000`2a66a73d : 0xffffffff`fffffd20
fffff880`0611f348 00000000`00000000 : fffff800`0308bdba fffff800`03086958 31000000`2a66a73d 00000200`00000002 : 0x2
STACK_COMMAND: .bugcheck ; kb

FOLLOWUP_IP:
nt+3fdba
fffff800`0308bdba 488b8120fdffff mov rax,qword ptr [rcx-2E0h]

SYMBOL_NAME: nt+3fdba

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: ntoskrnl.exe

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------
MODULE_NAME: nt

FAULTING_MODULE: fffff80003063000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xBE

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80003153ae2 to fffff800030d3740

STACK_TEXT:
fffff880`031c6578 fffff800`03153ae2 : 00000000`000000be fffff880`01be1418 80000000`06168121 fffff880`031c66e0 : nt+0x70740
fffff880`031c6580 00000000`000000be : fffff880`01be1418 80000000`06168121 fffff880`031c66e0 00000000`0000000b : nt+0xf0ae2
fffff880`031c6588 fffff880`01be1418 : 80000000`06168121 fffff880`031c66e0 00000000`0000000b fffff800`03191b6a : 0xbe
fffff880`031c6590 80000000`06168121 : fffff880`031c66e0 00000000`0000000b fffff800`03191b6a fffff880`031c6600 : 0xfffff880`01be1418
fffff880`031c6598 fffff880`031c66e0 : 00000000`0000000b fffff800`03191b6a fffff880`031c6600 00000000`0001938b : 0x80000000`06168121
fffff880`031c65a0 00000000`0000000b : fffff800`03191b6a fffff880`031c6600 00000000`0001938b fffffa80`018e5040 : 0xfffff880`031c66e0
fffff880`031c65a8 fffff800`03191b6a : fffff880`031c6600 00000000`0001938b fffffa80`018e5040 fffffa80`03f0c010 : 0xb
fffff880`031c65b0 fffff880`031c6600 : 00000000`0001938b fffffa80`018e5040 fffffa80`03f0c010 00000000`00000000 : nt+0x12eb6a
fffff880`031c65b8 00000000`0001938b : fffffa80`018e5040 fffffa80`03f0c010 00000000`00000000 00000000`00000000 : 0xfffff880`031c6600
fffff880`031c65c0 fffffa80`018e5040 : fffffa80`03f0c010 00000000`00000000 00000000`00000000 00000000`00000000 : 0x1938b
fffff880`031c65c8 fffffa80`03f0c010 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`03f0c090 : 0xfffffa80`018e5040
fffff880`031c65d0 00000000`00000000 : 00000000`00000000 00000000`00000000 fffffa80`03f0c090 00000000`002b6702 : 0xfffffa80`03f0c010
STACK_COMMAND: kb

FOLLOWUP_IP:
nt+70740
fffff800`030d3740 48894c2408 mov qword ptr [rsp+8],rcx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt+70740

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: ntoskrnl.exe

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------
 
Metalspree said:
0x000000BE: is a driver attempted to write to read-only memory. Commonly occurs after installing a faulty device driver, system service, or firmware.

Follow this article

Using Driver Verifier to identify issues with Windows drivers for advanced users
Click to expand...
I opened verifier.exe and selected use standard settings. And then selected for all drivers. The comp restarted for settings to be applied. And I see BSOD now everytime I open win7. How do I solve this now?

Here is the minidump folder after the settings were applied (I could get it since I have XP on dual boot):
Minidump2.rar

EDIT: I went to advance options of win7 booting and selected Last known good configuration and booted it with that option. It booted successfully but Windows popped up at the start saying the copy isn't genuine (which it isn't but was made so).

What should I do? :S

--- Updated Post - Automerged ---

Okay so after the Last Known Config start worked I started the verifier exe again and checked it for ntoskrnl.exe. On reboot it gave me a BSOD so ntoskrnl.exe is at fault I assume. What should I do to solve it?

--- Updated Post - Automerged ---

I thought the antivirus (Avira free edition might be at fault) so I removed it and checked the verifier for ntoskrnl.exe and still got a BSOD so had to delete that setting in safemode.
 
I went to advance options of win7 booting and selected Last known good configuration and booted it with that option. It booted successfully but Windows popped up at the start saying the copy isn't genuine (which it isn't but was made so).
Click to expand...

How did you get hold of your Win 7 copy. Cause if you're getting "Windows isnt genuine" means your copy was deemed to be pirated.
 
Back
Top