Blue Screen, Vista

[sc4s2cg]

Hi everyone,

I was wondering if the community could help me? I've been getting the blue screen of death for the past 2 weeks now, at least 3-4 times a week, even while I was unhibernating the laptop during class to take notes. I finally got fed up with it yesterday night when the blue screen came up while I was using Vista's back-up software to back my laptop up. I did a virus scan, spyware/adware scan, registry scan, and a scan-disc error check just a couple hours before.

The following error came up after the blue screen:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6000.2.0.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 1000007e
BCP1: C0000005
BCP2: 826935C4
BCP3: 83393BF8
BCP4: 833938F4
OS Version: 6_0_6000
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\WINDOWS\Minidump\Mini030208-01.dmp
C:\Users\Peti\AppData\Local\Temp\WER-55598-0.sysdata.xml
C:\Users\Peti\AppData\Local\Temp\WER24DE.tmp.version.txt

Read our privacy statement:
(link)

I would greatly appreciate any help at all,
sc

 

[kimsland]

Hi sc4s2cg :wave: Can I say, excellent first post :grinthumb

Regarding:
Files that help describe the problem:
C:\WINDOWS\Minidump\Mini030208-01.dmp

Can you please attach Mini030208-01.dmp to a new reply

 

[sc4s2cg]

Hehe, I try to impress the community with my first posts

Unfortunately, I can't post the file. It's 134 some odd kbs, and the limit here is 100. Does it contain any personal information that I wouldn't want to host on a free-hosting website? If not, I can just host it on "myfreefilehosting.com" and see if that would do it.

 

[kimsland]

Sadly I prefer you do not post it elsewhere

You could try to Zip it up and hopefully it will then be under the 100K limit
Mind you, it shouldn't be that big anyway.

I've had a look around, regarding BCCode: 1000007e
And it seems that this is a driver issue.
You may want to update all your drivers (not from MS) but from your computer's manufactures website.

 

[sc4s2cg]

Ah, zipping did the trick. It is now only 18 some kbs.

I wonder which driver was causing the issue..

 

[kimsland]

Inside the 1 MiniDump:

BugCheck 1000007E, {c0000005, 826935c4, 83393bf8, 833938f4}
Probably caused by : Ntfs.sys

Further analyze:

Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 826935c4, The address that the exception occurred at
Arg3: 83393bf8, Exception Record Address
Arg4: 833938f4, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
Ntfs!NtfsRemoveClose+d2
826935c4 f00fc108 lock xadd dword ptr [eax],ecx
EXCEPTION_RECORD: 83393bf8 -- (.exr 0xffffffff83393bf8)
ExceptionAddress: 826935c4 (Ntfs!NtfsRemoveClose+0x000000d2)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 000030bd
Attempt to write to address 000030bd
CONTEXT: 833938f4 -- (.cxr 0xffffffff833938f4)
eax=000030bd ebx=00000000 ecx=ffffffff edx=00000000 esi=a24d6b80 edi=826c530c
eip=826935c4 esp=83393cc0 ebp=83393cc8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
Ntfs!NtfsRemoveClose+0xd2:
826935c4 f00fc108 lock xadd dword ptr [eax],ecx ds:0023:000030bd=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81d315ac
Unable to read MiSystemVaType memory at 81d117e0
000030bd
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from 8270c256 to 826935c4
STACK_TEXT:
83393cc8 8270c256 00000000 00000000 83bb5123 Ntfs!NtfsRemoveClose+0xd2
83393d44 81c78fa0 00000000 00000000 84c84020 Ntfs!NtfsFspClose+0x40
83393d7c 81e254e0 00000000 83398680 00000000 nt!ExpWorkerThread+0xfd
83393dc0 81c9159e 81c78ea3 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FOLLOWUP_IP:
Ntfs!NtfsRemoveClose+d2
826935c4 f00fc108 lock xadd dword ptr [eax],ecx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: Ntfs!NtfsRemoveClose+d2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 47214597
STACK_COMMAND: .cxr 0xffffffff833938f4 ; kb
FAILURE_BUCKET_ID: 0x7E_Ntfs!NtfsRemoveClose+d2
BUCKET_ID: 0x7E_Ntfs!NtfsRemoveClose+d2

After updating all your drivers (and testing if it happens again)
Also please download and Run Memtest on your Ram

Report back, after doing those two things (if it faults again)

 

[sc4s2cg]

Would you recommend to update all drivers my laptop's manufacturer site (HP)?

Should I also update the BIOS?

 

[kimsland]

You can go here:- http://welcome.hp.com/country/us/en/support.html?pageDisplay=drivers (Using Internet Explorer)
And click on Start Detection button

Then install all your drivers

The BIOS I would Not do (as yet!)