Need help with 2 BSOD crashes that happened today

Stephen Miles

Reputable
Feb 15, 2015
13
0
4,510
Hi, I have had two BSOD crashes today and was wondering if anyone who knows dump flies could help me ID the problem. The only irregularity I've noticed with my system is that recently is that my HDD has been making that whirring spinup + clicking sound you normally hear during startup every few minutes while its on. This could just be normal and I've never noticed it before though.

Thanks for the help!

Specs:
Windows 7 Home Premium x64
Intel Core i7-2600K 3.4GHz
AMD Radeon HD6870 1GB
8GB 1333MHz DDR3 Memory

Dump Files:
Crash#1
==================================================
Dump File : 021515-43649-01.dmp
Crash Time : 2/15/2015 5:31:57 PM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : fffff800`014c40f2
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000008
Parameter 4 : fffff800`014c40f2
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+74ec0
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.18717 (win7sp1_gdr.150113-1808)
Processor : x64
Crash Address : ntoskrnl.exe+74ec0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\021515-43649-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 7601
Dump File Size : 275,824
Dump File Time : 2/15/2015 6:32:20 PM
==================================================

Crash#2
==================================================
Dump File : 021515-46722-01.dmp
Crash Time : 2/15/2015 6:51:10 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : fffff680`00062f70
Parameter 2 : 00000000`00000000
Parameter 3 : 00000000`00000000
Parameter 4 : fffff800`0346f54b
Caused By Driver : atikmdag.sys
Caused By Address : atikmdag.sys+7f8cc
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+74ec0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\021515-46722-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 7601
Dump File Size : 275,824
Dump File Time : 2/15/2015 6:56:02 PM
==================================================

 
Solution
for the second bugcheck I would run a malwarebytes scan and run cmd.exe as an admin
then run the command
sfc.exe /scannow

you might even want to check for rootkits
Get tdsskiller see if you've got a rootkit http://media.kaspersky.com/utilities/VirusUtilities/EN/...
DisplayFusion was running (but you have some old drivers that may of messed it up)



-------------------
Note: the first bugcheck just indicates a memory corruption problem, but there were other issues I noted below:
I would make the various update below and see if the problem still occurs. It took 20 mins before this bugcheck.
you might consider running memtest86 on its own boot after you have updated the BIOS (if you can find a update)
This will confirm that your basic...
second bugcheck was from your video card driver. Generally, you would go to
http://www.amd.com/en-us and download a current driver, but your system is kind of old so I would also make sure to blow the dust out of the CPU, GPU and power supply fans.

-The first bugcheck does not contain info to know what the problem is without looking at the actual memory .dmp file.

Since you mentioned the sound your hard drive is making, it could be having issues reading drivers from the disk without getting read errors. I would run crystaldiskinfo.exe and see what it reads from the SMART data on the drive. Or you can actually test the driver using a hard drive test. You could also run event viewer and look at the administrative events for errors from the disk subsystem to see if it is in the process of failing.

Spinning drive fail at a rate of about 15% chance a year until it dies. (most will fail within 5 years, windows 8.x will prolong the life but windows 7 will not unless you do the maintenance yourself)
 
That's really interesting, it turns out I actually ordered a gtx980 a few days ago since my current card is getting up there in years, I plan on installing it next Wednesday. Do you think it would be alright to wait until then to mess with my graphics card drivers? I'll also be cleaning everything out when that happens.

I ran crystaldisk, here's a screencap:
C8cjF5U.png


In the event log, I don't see any errors from the disk subsystem, only errors relating to the crashes. For those, it says that there was an error with the ds1410d.sys when the crashes happened (it couldn't find the file). There have also been 267 errors with the Bonjour service in the last week, I don't know if that's relevant though.

You mentioned that it would be useful to look at the actual memory .dmp file, how do I go about doing that? I thought what I posted was the actual dump files.

Thanks so much for your time!
 
ds1410d.sys is from Alias Maya software. it might be in a hidden directory or the software might have been removed
I think it is some sort of licencing driver.

I think there are a lot of bugchecks associated with apple Bonjour service, you might want to remove it or update it.
(do make sure you have updated your network drivers and see if the problems go away before you remove the service)


you can locate the memory .dmp file. generally it is in c:\windows\minidump
then you would copy it up to a cloud server like microsoft onedrive, google docs, mediafire,... and give it public access so it can be looked at with a windows debugger. The file is pretty big and will contain info about your motherboard and what drivers are being loaded into memory. After you copy the file up to a cloud server you would then post a link to the server.
 
for the second bugcheck I would run a malwarebytes scan and run cmd.exe as an admin
then run the command
sfc.exe /scannow

you might even want to check for rootkits
Get tdsskiller see if you've got a rootkit http://media.kaspersky.com/utilities/VirusUtilities/EN/...
DisplayFusion was running (but you have some old drivers that may of messed it up)



-------------------
Note: the first bugcheck just indicates a memory corruption problem, but there were other issues I noted below:
I would make the various update below and see if the problem still occurs. It took 20 mins before this bugcheck.
you might consider running memtest86 on its own boot after you have updated the BIOS (if you can find a update)
This will confirm that your basic hardware is ok.

-if you can find a BIOS update for your motherboard I would update it to go along with any USB 3.0 driver updates.

-looks like you are using some sort of current USB audio drivers.
\SystemRoot\system32\DRIVERS\iFiHDUSBAudio_x64.sys Fri May 16 00:34:15 2014
\SystemRoot\system32\DRIVERS\iFiHDUSBAudioks_x64.sys Fri May 16 00:34:43 2014

I would expect that you will have some problems because of the age of you USB support drivers.
You will want to: update the BIOS if you can, then install the Intel Chipset drivers directly from intel:
https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=20775

then you have intel usb 3.0 support driver from 2011. You will want to update these to give your USB audio drivers a good chance at working. Since you have a intel board I would just run this and try to update the drivers directly from intel:
https://downloadcenter.intel.com/default.aspx



update: Intel(R) 82579V Gigabit Network Connection driver
\SystemRoot\system32\DRIVERS\e1c62x64.sys Wed Nov 30 15:09:31 2011
you might find it here:
https://downloadcenter.intel.com/default.aspx
or look on your motherboard vendor's website
(intel motherboard: Product DH77KC
Version AAG39641-400
BIOS Version KCH7710H.86A.0069.2012.0224.1825
BIOS Release Date 02/24/2012
Product DH77KC
Version AAG39641-400

Processor Version Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Processor Voltage 58h -
External Clock 100MHz
Max Speed 3800MHz
Current Speed 3400MHz


 
Solution
Wow, this is really thorough, I really appreciate the help. I'll try to get to some of this tonight, but I've got a midterm to prepare for so I'll probably just run malwarebytes and scan for rootkits tonight. I'll get back when I've made significant progress with everything, or if something unexpected comes up. That will be at the latest this Thursday.
 
UPDATE: it seems like the problem was likely with my graphics card. I have been running my system off of integrated graphics without any trouble for the past week, I just got the new graphics card yesterday. When I tried to install it, though, my got stuck at the motherboard splash screen, not proceeding to boot and unable to go to BIOS settings. I assume that this means there is an incompatibility with BIOS since I'm still on the original version, so I am going to flash it sometime in the next few days to see if that will work.
 
when you power down you system and add a new graphics card, you must power back up and go into BIOS and reset it to defaults or update it and reconfigure. This will force the BIOS to scan the hardware again and build a new database of hardware /interrupts and DMA channels. This database gets sent to windows to configure hardware.




 
Final update: I know it's been awhile, I had to postpone working on this problem till I got a bit of a reprieve from school. After going through with a bios update (which was a bit of a pain since my first attempt got interrupted), I was able to boot with the new graphics card without any trouble. Finally it seems like my system is stable, Thanks so much for all the help john :)