MagicAndre1981

Welcome to msfn

I have a complete dump which I compress now and upload. Currently I have disabled the network monitor driver for my WLAN connection. The crashes only happened when I was browsing the WWW with this WLAN connection.

which KBs? the drivers are up to date and if chkimg detects errors, the file in the RAM differs from the file from the Symbol server. So the file is corrupted. Now I need to know what corrupts the driver in the RAM becasue the file on the HDD is fine.

I sometimes get freezes the last 2 weeks with my PC. When this happens the monitor picture gets corrupted. I first thought my GPU is damaged, but today I got it again and this time a dump was created. This is the output of WinDbg: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e) DEFAULT_BUCKET_ID: CODE_CORRUPTION PROCESS_NAME: System ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden. fffff880`0a621478 fffff800`03407164 nt!KeBugCheckEx fffff880`0a621480 fffff800`033c6ae5 nt!PspUnhandledExceptionInSystemThread+0x24 fffff880`0a6214c0 fffff800`030c8abc nt! ?? ::NNGAKEGL::`string'+0x227d fffff880`0a6214f0 fffff800`030c853d nt!_C_specific_handler+0x8c fffff880`0a621560 fffff800`030c7315 nt!RtlpExecuteHandlerForException+0xd fffff880`0a621590 fffff800`030d8391 nt!RtlDispatchException+0x415 fffff880`0a621c70 fffff800`0309c382 nt!KiDispatchException+0x135 fffff880`0a622310 fffff800`0309ac8a nt!KiExceptionDispatch+0xc2 fffff880`0a6224f0 fffff880`016df52b nt!KiGeneralProtectionFault+0x10a fffff880`0a622680 fffff880`016d6f14 ndis!NdisMCreateLog+0x286b fffff880`0a6226f0 fffff880`0164b095 ndis!NdisMPauseCo}plete+0x4364 fffff880`0a6227a0 fffff880`0164e3b3 ndis!NdisMQueueDpc+0x7f5 fffff880`0a622840 fffff880`0166848f ndis!NdisAllocateNetBufferAndNetBufferList+0x2233 fffff880`0a6228b0 fffff880`0164b728 ndis!riteLock+0x925f fffff880`0a622a20 fffff880`0164bcc9 ndis!NdisFOidRequestComplete+0x5a8 fffff880`0a622a90 fffff880`04334231 ndis!NdisFOidRequest+0xc9 fffff880`0a622b70 fffff880`016d0582 nm3!NetmonOidRequest+0x109 fffff880`0a622ba0 fffff880`0165043c ndis!NdisMSynchronizeWithInterruptEx+0x842 fffff880`0a622c70 fffff800`030a7011 ndis!NdisAllocateNetBuffer+0x177c fffff880`0a622cb0 fffff800`0333944e nt!ExpWorkerThread+0x111 fffff880`0a622d40 fffff800`0308e666 nt!PspSystemThreadStartup+0x5a fffff880`0a622d80 00000000`00000000 nt!KiStartSystemThread+0x16 CHKIMG_EXTENSION: !chkimg -lo 50 -db !ndis 3393 errors : !ndis (fffff88001649048-fffff88001717fe0) FOLLOWUP_NAME: memory_corruption MEMORY_CORRUPTOR: STRIDE FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_STRIDE so I ran the memory test of Windows 7 and memtest86+ each over 3 hours, but both don't detect any errors. sfc tells that the ndis.sys is fine on the HDD, chkdsk also doesn't detect any errors. The only thing I see is the Network Monitor driver in version 3.4.2350.0 which is the latest version. Are there any known issues with Network Monitor? What es can it be if memtest say RAM is fine? Hardware: AMD Phenom II X4 945 ASRock 880GXH/USB3 motherboard 8 GB Crucial DDR3 1333MHz RAM CL9 Radeon HD 5770 1TB Samsung F3 HDD

Always use the FixIts, they are the recommend way to solve such issues.

which motherboard do you use? Do you use the latest BIOS? If Windows thinks the shutdown is done, it may be a BIOS (ACPI) related issue.

try this: Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version http://support.microsoft.com/kb/970652

do the old approach to eliminate 3rd party tools as cause with a clean boot: support.microsoft.com/kb/929135 Does it make a difference?

so the new driver fixed it?

I can't see this from the trace. the trace shows 17s. Remove AVG and try again.

Hi David, the trace you gave me shows that Windows takes 17s to shutdown. It takes 5s to notify all programs that the shutdown occurs, 2.8s to stop all running programs, 4.5s to stop all running services (the services.exe which manages all services takes 4s to stop) and the rest is to stop the Windows kernel. I can see that the AVG service creates some higher CPU usage and dirver delays. So tryo to update AVG to the latest version or remove it and use a different tool. Also the EvtEng.EXE ( Intel Wireless Utility - version 13. 4. 0. 6) causes some 100% Disk IO.

can you share the xbootmgr trace file (zip the ETL and upload the zip to mediafire.com)?

have you used this tool? http://www.trusteer.com/product/trusteer-rapport

Correct. I run cleanmgr.exe from the task scheduler: http://support.microsoft.com/kb/253597/en to delete the files once per week.

run sfc /scannow in the command prompt to see damaged system files. Also run regedit.exe and look here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc What do you see there?

run chkdsk C: /r /f and sfc /scannow to detect and fix hard drive issue and defect Windows files.

You're welcome @hottroc also look about IRQ sharing. Maybe this also causes your issues

I thought about it the last week and I have no real idea. Ask cluberti again if he has a new idea, otherwise contact the support

this is correct, but it only uses 0.39% of the cpu during the complete run. Now the IE9, Tata Photon+, and the Windows Explorer together use 20% of the CPU. Can it be that you use(d) Daemon Tools because the sptd driver is running and causes some DPC/Interrupt usage.

MEI stands for Intel® Management Engine Interface which belongs to Intel VPro. For home using you can disable it. To see which other devices use IRQ 16 you can use the device manager in Windows (change the way Windows lists the device under view) or you can run msinfo32 to see the IRQs. I used the etl file to see it. Open the ETL with a double click, go to trace->"System configuration". There you also find a IRQ list. Now use the PNPtab to see what device you see under the IRQ list (under the IRQ list you only see the IDs).

why addons do you use? Use this guide to trace the memory usage of the IE: http://blog.dopus.com/2010/11/new-guide-how-to-find-components.html and look which DLL allocates so much RAM.

I have no idea, because I only use 1 card. But it is better to use 1 faster card (GTX570/580). Is the issue fixed by putting the card into the 2nd slot?

which motherboard do you have? If you have more than 1 PCIE x16 slots you can try to put the card into the other slot and test it again.

my ntuser.dat is 16MB under Windows 7 and I have no issue. The size is not important. Maybe on registry hive is damaged. Logon to an admin account that works, run regedit.exe and export the user hive from your old "broken" account into a .reg file, delete all unneded entries and import it into the new account. ok, interesting.

can you try to migrate the user setting/data to the new account?