Windows 7 BSOD at random times, BlueScreenView said it was ntoskrnl.exe and win32k.sys that caused it.

[Nick Malatos]

Please help as soon as possible, thanks!

 

[GeneralHiningII]

Learn how to install Windows 7 Service Pack 1 (SP1) You do not have SP1 installed.

Please check Windows Update - you have no updates installed, generally you should have 130 to 140 updates.

That's what I can do for you so far, will be back once my laptop has been charged.

 

[usasma]

SP1 isn't installed, please do the following:

Installing Windows 7 Service Pack 1
1. Visit the PC manufacturer's website and update ALL drivers. DO NOT use Windows Update or the "Update drivers" function of Device Manager.
2. Check Device Manager for any unknown/disabled devices - if there are unknown/disabled devices, fix them with the latest drivers from the device manufacturer's website (not the PC Manufacturer)
3. Visit Windows Update and get all updates (may take repeated visits)
4. Visit Windows Update and get Service Pack 1 (usually under Important Updates). Read these notes for installing SP1: Steps to follow before you install Windows 7 SP1 and Windows Server 2008 R2 SP1 from the Microsoft Download Center
5. Visit Windows Update and get any other available updates. May take repeated visits, but keep it up until you get several "Windows is updated" results.
If you're having difficulties with installing a Service Pack, please use the SURTool from this link: What is the System Update Readiness Tool?
Also, check out this troubleshooting link from Microsoft: Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2

I have had limited success in installing updates/Service Packs when using a "clean boot". I suspect that I'm just bypassing the problem - and that it can come back to bite me in the butt later on.

I'm unable to open the MSINFO32.nfo file - please try it again.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

xnacc.sys Mon Jul 13 20:01:05 2009 (4A5BCAC1)
XNA Common Controller Driver [XBox]
Link Removed

amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
AMD storage controller driver - usually from the Windows 7 DVD
Link Removed

pgusbwdm.sys Fri Aug 13 11:23:08 2010 (4C65635C)
USB audio device from Ploytec GmbH - USB Audio and more
pgusbwdm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

MxEFUF64.sys Thu Oct 20 12:24:05 2011 (4EA04B25)
Matrox Graphics Extio Function Upper Filter Driver[br](discussion about this driver here: DriverPack Graphics B-"super-generic" Matrox Extio PCI-PCI bridge installs on ATI/nV HW (Page 1) - DriverPack Graphics - DriverPacks.net Forum )
Link Removed

AppleCharger.sys Tue Nov 1 22:46:00 2011 (4EB0AEE8)
GIGABYTE On/Off Charge driver. See here for details - Link Removed [br]May cause BSOD on Win7 systems - uninstall to test
Link Removed

FYI - xnacc.sys is a driver for an XBox controller. It only appears in some of the memory dumps, so it's not a strong a suspect as the other drivers (but is still a possibility). We have seen problems with wireless XBox controllers in the past, but it's usually associated with a different driver (xusb21.sys dating from 2009). I'd suggest just keeping an eye on this one for now (don't do anything with it just yet).

Analysis:
The following is for informational purposes only.

[FONT=lucida console]**************************Sat Nov 24 22:05:38.829 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112412-35786-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]0 days 2:17:17.639[/B]
BugCheck Code: [B]BugCheck 1E, {ffffffffc0000005, fffff80002c81886, 0, ffffffffffffffff}[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!SwapContext_PatchXRstor+0 )[/B]
BugCheck Info: [B]KMODE_EXCEPTION_NOT_HANDLED (1e)[/B]
Arguments: 
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002c81886, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]avgrsa.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1E_c0000005_R_nt!SwapContext_PatchXRstor+0[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Nov 24 13:28:39.336 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112412-27612-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]1 days 13:27:43.309[/B]
BugCheck Code: [B]BugCheck 19, {3, fffff900c1efde50, fffff900c1efde50, fffff90083efde50}[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]win32k.sys ( win32k+87a6e )[/B]
BugCheck Info: [B]BAD_POOL_HEADER (19)[/B]
Arguments: 
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff900c1efde50, the pool entry being checked.
Arg3: fffff900c1efde50, the read back flink freelist value (should be the same as 2).
Arg4: fffff90083efde50, the read back blink freelist value (should be the same as 2).
BUGCHECK_STR:  0x19_3
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]Steam.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x19_3_win32k+87a6e[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Nov 23 00:00:03.918 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112312-23306-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]0 days 9:24:18.729[/B]
BugCheck Code: [B]BugCheck 1A, {41790, fffffa800493cdd0, ffff, 0}[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]dxgmms1.sys ( dxgmms1!VIDMM_PROCESS_HEAP::Allocate+3dd )[/B]
BugCheck Info: [B]MEMORY_MANAGEMENT (1a)[/B]
Arguments: 
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
    contains the address of the PFN for the corrupted page table page.
    On a 32 bit OS, parameter 2 contains a pointer to the number of used
    PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa800493cdd0
Arg3: 000000000000ffff
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41790
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]hl2.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_41790_dxgmms1!VIDMM_PROCESS_HEAP::Allocate+3dd[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Nov 21 15:11:50.420 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-21403-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]0 days 0:57:29.230[/B]
BugCheck Code: [B]BugCheck 4E, {99, 1c6f98, 2, 1189e9}[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck Info: [B]PFN_LIST_CORRUPT (4e)[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000001c6f98, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000001189e9, 0
BUGCHECK_STR:  0x4E_99
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]chrome.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Nov 21 11:32:32.234 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-33758-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]0 days 0:38:03.044[/B]
BugCheck Code: [B]BugCheck 19, {21, fffff900c47cb000, 9b80, 20009b80}[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]win32k.sys ( win32k+c6958 )[/B]
BugCheck Info: [B]BAD_POOL_HEADER (19)[/B]
Arguments: 
Arg1: 0000000000000021, the data following the pool block being freed is corrupt.  Typically this means the consumer (call stack ) has overrun the block.
Arg2: fffff900c47cb000, The pool pointer being freed.
Arg3: 0000000000009b80, The number of bytes allocated for the pool block.
Arg4: 0000000020009b80, The corrupted value found following the pool block.
BUGCHECK_STR:  0x19_21
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]OneClick.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x19_21_win32k+c6958[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Nov 21 04:17:06.190 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-52541-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]0 days 0:10:22.000[/B]
BugCheck Code: [B]BugCheck 1A, {41790, fffffa800493cd70, ffff, 0}[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+32f06 )[/B]
BugCheck Info: [B]MEMORY_MANAGEMENT (1a)[/B]
Arguments: 
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
    contains the address of the PFN for the corrupted page table page.
    On a 32 bit OS, parameter 2 contains a pointer to the number of used
    PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa800493cd70
Arg3: 000000000000ffff
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41790
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]mscorsvw.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+32f06[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov 20 21:48:46.744 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-55583-01.dmp]
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
[B]Missing Windows 7 Service Pack 1[/B]
Built by: [B]7600[/B].17118.amd64fre.win7_gdr.120830-0334
System Uptime:[B]0 days 1:41:43.554[/B]
BugCheck Code: [B]BugCheck 1A, {5003, fffff70001080000, 13ae, 13b0cc00275c}[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+28d31 )[/B]
BugCheck Info: [B]MEMORY_MANAGEMENT (1a)[/B]
Arguments: 
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff70001080000
Arg3: 00000000000013ae
Arg4: 000013b0cc00275c
BUGCHECK_STR:  0x1a_5003
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]chrome.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_5003_nt!_??_::FNODOBFM::_string_+28d31[/B]
  BIOS Version                  F2
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-78LMT-S2P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

[FONT=lucida console]**************************Sat Nov 24 22:05:38.829 2012 (UTC - 5:00)**************************
amdxata.sys                   Fri Mar 19 12:18:18 2010 (4BA3A3CA)
pgusbwdm.sys                  Fri Aug 13 11:23:08 2010 (4C65635C)
MxEFUF64.sys                  Thu Oct 20 12:24:05 2011 (4EA04B25)
[B]AppleCharger.sys              Tue Nov  1 22:46:00 2011 (4EB0AEE8)[/B]
amdide64.sys                  Sun Dec 18 20:43:17 2011 (4EEE96B5)
LPCFilter.sys                 Tue Mar  6 09:58:27 2012 (4F562613)
RTKVHD64.sys                  Tue Apr 24 07:42:07 2012 (4F96918F)
GEARAspiWDM.sys               Thu May  3 15:56:17 2012 (4FA2E2E1)
TuneUpUtilitiesDriver64.sys   Fri May 25 06:28:19 2012 (4FBF5EC3)
nvhda64v.sys                  Tue Jul  3 11:25:04 2012 (4FF30ED0)
avgtpx64.sys                  Tue Aug 21 10:16:24 2012 (50339838)
avgrkx64.sys                  Thu Sep 13 20:41:40 2012 (50527D44)
LHidFilt.Sys                  Tue Sep 18 05:26:53 2012 (50583E5D)
LMouFilt.Sys                  Tue Sep 18 05:26:58 2012 (50583E62)
avgloga.sys                   Thu Sep 20 21:23:51 2012 (505BC1A7)
avgtdia.sys                   Thu Sep 20 21:25:33 2012 (505BC20D)
L1C62x64.sys                  Fri Sep 21 02:35:28 2012 (505C0AB0)
avgldx64.sys                  Mon Oct  1 21:05:50 2012 (506A3DEE)
avgmfx64.sys                  Thu Oct  4 21:08:44 2012 (506E331C)
avgidsha.sys                  Sun Oct 14 21:22:54 2012 (507B656E)
nvlddmkm.sys                  Fri Oct 19 18:17:04 2012 (5081D160)
avgidsdrivera.sys             Mon Oct 22 06:47:11 2012 (5085242F)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Nov 24 13:28:39.336 2012 (UTC - 5:00)**************************
[B]xnacc.sys                     Mon Jul 13 20:01:05 2009 (4A5BCAC1)[/B]
[/FONT]

Link Removed
pgusbwdm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

 

[Nick Malatos]

Whenever I attempt to update to SP1, I get this error Link Removed

Any way to fix this? I have updated AppleCharger.sys and the xnacc.sys can't be updated except through Windows Update, which says it's been updated.

 

[usasma]

Uninstall the AppleCharger app to see if it helps fix things. If it doesn't, then feel free to reinstall it.

SP1 is most important. I'd suggest that you get Windows Update help from the experts here: Link Removed (it will require that you register there).