Ask a new question

BSOD with error Bugcheck 1a once a day, please help!

Also, at the time this began happening, some of my software went haywire and had to be reinstalled (norton 360, microsoft outlook, firefox was crashing often but I thought that may have been to their recent update), minidump file shows ntkrnlmp.exe error, memtest86 shows thousands of errors after running 4 hours!!!, I am running Windows 7 on an emachines model ET1331G...I get memory error popups with the title bar in chinese while in safemode (when using google chrome...not sure if related) but so far no crashes after a day...what do you suspect? what else do you need to know?  Listed below is crash dump info:


Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\091111-23197-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c52000 PsLoadedModuleList = 0xfffff800`02e97670
Debug session time: Sun Sep 11 11:08:19.005 2011 (UTC - 5:00)
System Uptime: 0 days 17:06:44.766
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {5005, fffff70001080000, 8c8, 8c9}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+20fc0 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005005, The subtype of the bugcheck.
Arg2: fffff70001080000
Arg3: 00000000000008c8
Arg4: 00000000000008c9

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_5005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  SearchProtocol

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002c7df62 to fffff80002ccec40

STACK_TEXT:  
fffff880`0805b818 fffff800`02c7df62 : 00000000`0000001a 00000000`00005005 fffff700`01080000 00000000`000008c8 : nt!KeBugCheckEx
fffff880`0805b820 fffff800`02cede4d : 00000000`00000823 00000000`00000000 fffff700`01080000 fffffa80`09eddb80 : nt! ?? ::FNODOBFM::`string'+0x20fc0
fffff880`0805b890 fffff800`02ced53f : 02300001`2d724025 00000001`2d724121 00000000`00000000 fffff880`0805bb98 : nt!MiCompleteProtoPteFault+0x2cd
fffff880`0805b920 fffff800`02cec053 : 00000000`001540c3 00000000`736a0a5e fffff680`0039b500 fffffa80`0a8c3ac8 : nt!MiResolveProtoPteFault+0x1cf
fffff880`0805b9b0 fffff800`02cdbf19 : 00000000`00000000 00000000`736a0a5e 00000000`00000000 fffffa80`00000000 : nt!MiDispatchFault+0x1c3
fffff880`0805bac0 fffff800`02cccd6e : 00000000`00000008 00000000`736a0a5e 00000000`00000001 00000000`00000000 : nt!MmAccessFault+0x359
fffff880`0805bc20 00000000`736a0a5e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`02affb9c 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x736a0a5e


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+20fc0
fffff800`02c7df62 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+20fc0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

FAILURE_BUCKET_ID:  X64_0x1a_5005_nt!_??_::FNODOBFM::_string_+20fc0

BUCKET_ID:  X64_0x1a_5005_nt!_??_::FNODOBFM::_string_+20fc0

Followup: MachineOwner
---------

1: kd> lmvm nt
start             end                 module name
fffff800`02c52000 fffff800`0323b000   nt         (pdb symbols)          c:\symbols\ntkrnlmp.pdb\47F5C3BF9E0A493C9F63BB8F6413358B2\ntkrnlmp.pdb
    Loaded symbol image file: ntkrnlmp.exe
    Mapped memory image file: c:\symbols\ntoskrnl.exe\4E02AAA35e9000\ntoskrnl.exe
    Image path: ntkrnlmp.exe
    Image name: ntkrnlmp.exe
    Timestamp:        Wed Jun 22 21:53:23 2011 (4E02AAA3)
    CheckSum:         0055C228
    ImageSize:        005E9000
    File version:     6.1.7601.17640
    Product version:  6.1.7601.17640
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ntkrnlmp.exe
    OriginalFilename: ntkrnlmp.exe
    ProductVersion:   6.1.7601.17640
    FileVersion:      6.1.7601.17640 (win7sp1_gdr.110622-1506)
    FileDescription:  NT Kernel & System
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Hi,

 

 

Bugcheck 1a is "MEMORY_MANAGEMENT".  This indicates memory corruption has occurred; this can be attributable to hardware failure (faulty RAM, for example), or a bad/buggy driver.  

Check if RAM sticks are working fine. Scan your computer's memory for errors.

 

Method 1:

 

Follow the steps mentioned in the link below:

Diagnosing memory problems on your computer

 

 

Method 2:

 

Also follow the troubleshooting steps from the article and check if it helps.

 

Resolving stop (blue screen) errors in Windows 7
http://windows.microsoft.com/en-us/windows7/Resolving-stop-blue-screen-errors-in-Windows-7

John Rubdy
Forum Moderator | Microsoft Community

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

All my drivers are up to date, should I reinstall them all or can I rule out particular ones?

So far Method 1 didn't find any errors (enhanced search, default cache setting, 7 passes).

I will work through the steps of the 2nd method as I have time.  The computer is still under warranty but their solution is to reinstall Windows 7 to prove there is a hardware issue before they'll even touch it. I can't open the case unless I void the warranty, so I'm continuing to back up all my files (and make sure I haven't forgotten any) in preparation for a reinstall, but trying to do as much debugging as I can in case it is a software issue.  Thanks for looking at my dump file and giving me advice.

Sam

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 Hi,
 
I would also suggest you to follow these methods and check if it helps:
 
Method 1:
 
Open a Command Prompt to run the following command to fix corrupted system files.
  a) Click the Start button and type "Command Prompt" in the search box.
  b) Right click Command Prompt to run as Administrator.
  c) Type: sfc /scannow to scan the whole disk.
How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7
http://support.microsoft.com/kb/929833

Method 2:
 
To check if the issue is caused by any third party software. You can try putting your computer in clean boot and check if it helps.
How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7
http://support.microsoft.com/kb/929135 
   
Note: After you have finished installing, follow step 7 in the article to boot to normal startup.
John Rubdy
Forum Moderator | Microsoft Community

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

To see how to use BlueScreenView and MyEventViewer to troubleshoot Bluescreens see the
methods indicated in this thread - top 3 answers (+1 other).

http://answers.microsoft.com/en-us/windows/forum/windows_7-system/sometimes-i-get-a-blue-screen-when-using-ie-8/c675b7b8-795f-474d-a1c4-6b77b3fcd990

We can analyze the minidumps if you make them available from the SkyDrive or other file
sharing sites.

Zip or upload the contents of C:\Windows\minidump

Use SkyDrive to upload collected files.
http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

-------------------------------------------------------------

BCCode: 1a  0x0000001a

Remove ALL power and reseat all cards, memory, and cables (both ends when possible) -
actually remove and replace - do not just snug. Make sure the vents are clear and that the
fans are working. Even though the temp is OK do not assume heat can't affect the video,
sound or other system functions it those get to hot. Try adding a small fan blowing into
the vents as a test. (Those are mostly for a PC not a laptop.)

Have you added any hardware lately? Have you updated any driver just before these started?
(Check Control Panel - Windows Updates to see if any drivers were updated there about the
time this started) Main likely culprits are Video driver, other major drivers, memory, and
antivirus/antispyware/security products could be at fault as well as drive issues.

Use the troubleshooter below and refer to the next message for drivers and memory when
you get to those sections and then return back to the troubleshooter as needed.

BCCode: 1a  0x0000001a  <-- read this link
http://www.faultwire.com/solutions-fatal_error/MEMORY-MANAGEMENT-0x0000001A-*1041.html?order=votes

-------------------------------------------------------------------------

Look in the Event Viewer to see if anything is reported about those.
http://www.computerperformance.co.uk/vista/vista_event_viewer.htm

MyEventViewer - Free - a simple alternative to the standard event viewer of
Windows. TIP - Options - Advanced Filter allows you to see a time frame instead
of the whole file.
http://www.nirsoft.net/utils/my_event_viewer.html


Here are some methods to possibly fix the blue screen issue. If you could give the Blue Screen
info that would help. Such as the BCC and the other 4 entries on the lower left. And any other
error information such as STOP codes and info such as IRQL_NOT_LESS_OR_EQUAL or PAGE_FAULT_IN_NONPAGED_AREA and similar messages.

As examples :

BCCode: 116
BCP1: 87BC9510
BCP2: 8C013D80
BCP3: 00000000
BCP4: 00000002

or in this format :

Stop: 0x00000000 (oxoooooooo oxoooooooo oxooooooooo oxoooooooo)
tcpip.sys - Address 0x00000000 base at 0x000000000 DateStamp 0x000000000


This is an excellent tool for posting Blue Screen Error Information

BlueScreenView scans all your minidump files created during 'blue screen of
death' crashes, and displays the information about all crashes in one table -
Free
http://www.nirsoft.net/utils/blue_screen_view.html

Many BlueScreens are caused by old or corrupted drivers, especially video drivers however
there are other causes.

You can do these in Safe Mode if needed or from Command Prompt from Vista DVD or
Recovery Options if your system has that installed by the maker.

How to Boot to the System Recovery Options in Windows 7
http://www.sevenforums.com/tutorials/668-system-recovery-options.html

You can try a System Restore back to a point before the problem started if there is one.

How to Do a System Restore in Windows 7
http://www.sevenforums.com/tutorials/700-system-restore.html

-------------------------------------------------------------------------

Start - type this in Search Box ->  COMMAND   find at top and RIGHT CLICK  -  RUN AS ADMIN

Enter this at the prompt - sfc /scannow

How to Repair Windows 7 System Files with System File Checker
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log (and Windows 7)
http://support.microsoft.com/kb/928228

The log might give you the answer if there was a corrupted driver. (Does not tell all the possible
driver issues).

Also run CheckDisk so we can rule out corruption as much as possible.

How to Run Check Disk at Startup in Windows 7
http://www.sevenforums.com/tutorials/433-disk-check.html

-------------------------------------------------------------------------

Often updating drivers will help, usually Video, Sound, Network Card  (NIC), WiFi, 3rd party
keyboard and mouse, as well as other major device drivers.

Manually look at manufacturer's sites for drivers - and Device Maker's sites.
http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm

How to Install a Device Driver in Vista Device Manager (also Windows 7) 
http://www.vistax64.com/tutorials/193584-device-manager-install-driver.html

Stop Windows 7 from Automatically Installing Device Drivers
http://helpdeskgeek.com/windows-7/stop-windows-7-from-automatically-installing-device-drivers/


How To Disable Automatic Driver Installation In Windows 7 / Vista
http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/

Disable Windows Update Device Driver Search Prompt In Windows 7 / Vista (for Professional,
Ultimate, and Enterprise)
http://www.addictivetips.com/windows-tips/disable-windows-update-device-driver-search-prompt/

-------------------------------------------------------------------------

How to fix BlueScreen (STOP) errors that cause Windows Vista to shut down or restart
unexpectedly
http://support.microsoft.com/kb/958233

Troubleshooting Vista Blue Screen, STOP Errors (and Windows 7)
http://www.chicagotech.net/vista/vistabluescreen.htm

Understanding and Decoding BSOD (blue screen of death) Messages
http://www.taranfx.com/blog/?p=692

Windows - Troubleshooting Blue Screen Errors
http://kb.wisc.edu/page.php?id=7033

-------------------------------------------------------------------------

In some cases this might be required.

StartUp Repair from Recovery Options or Windows 7 disk

How to Run a Startup Repair in Windows 7
http://www.sevenforums.com/tutorials/681-startup-repair.html

How to Boot to the System Recovery Options in Windows 7
http://www.sevenforums.com/tutorials/668-system-recovery-options.html

How to Create a Windows 7 System Repair Disc
http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

How to Do a Repair Install to Fix Windows 7
http://www.sevenforums.com/tutorials/3413-repair-install.html

Hope this helps.

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

References to Vista also apply to Windows 7.

This is my generic how to for proper driver updates :

This utility makes it easy to see which versions are loaded :

DriverView - Free - utility displays the list of all device drivers currently loaded on your system.
For each driver in the list, additional useful information is displayed: load address of the driver,
description, version, product name, company that created the driver, and more.
http://www.nirsoft.net/utils/driverview.html

For Drivers check System Maker as fallbacks and Device Maker's which are the most current.
Control Panel - Device Manager - Display Adapter - write down the make and complete model
of your video adapter - double click - Driver's tab - write down the version info. Now click UPdate
Driver (this may not do anything as MS is far behind certifying drivers) - then Right Click -
Uninstall - REBOOT this will refresh the driver stack.

Repeat that for Network - Network Card (NIC), Wifi, Sound, Mouse and Keyboard if 3rd party
with their own software and drivers and any other major device drivers you have.

Now go to System Maker's site (Dell, HP, Toshiba as examples) (as rollback) and then Device
Maker's site (Realtek, Intel, Nvidia, ATI as examples) and get their latest versions. (Look for
BIOS, Chipset and software updates at System Maker's site while there.)

Download - SAVE - go to where you put them - Right Click - RUN AD ADMIN - REBOOT after
each installation.

Always check in Device Manager - Drivers tab to be sure the version you are installing actually
shows up. This is because some drivers rollback before the latest is installed (sound drivers
particularly do this) so install a driver - reboot - check to be sure it is installed and repeat as
needed.

Repeat at Device Makers - BTW at Device Makers DO NOT RUN THEIR SCANNER - check
manually by model.

Manually look at manufacturer's sites for drivers - and Device Maker's sites.
http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm

Installing and updating drivers in 7 (updating drivers manually using the methods above is preferred
to ensure the latest drivers from System maker and Device makers are found)
http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html

If you update drivers manually then it is a good idea to disable Driver Installations in Windows
Updates, this leaves Windows Updates ON however it will not install drivers which will usually
be older and cause issues. If Updates suggests a new driver then HIDE it (Right Click on it)
and then go look for new ones manually if you wish.

Stop Windows 7 from Automatically Installing Device Drivers
http://helpdeskgeek.com/windows-7/stop-windows-7-from-automatically-installing-device-drivers/


How To Disable Automatic Driver Installation In Windows 7 / Vista
http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/

Disable Windows Update Device Driver Search Prompt In Windows 7 / Vista (for Professional,
Ultimate, and Enterprise)
http://www.addictivetips.com/windows-tips/disable-windows-update-device-driver-search-prompt/

==========================================

Memory tests do not catch all errors such as mismatched memory (possible even for sticks
that appear to be identical) and when faster memory is placed in system behind slower memory.
So it is best to also swap sticks in and out to check for those even if all memory tests fail to show
a problem.

To test RAM check here - let it run 4+ hours or so.  <-- best method
www.memtest.org

For the Windows Memory Diagnostic Tool.

Start - type in Search box ->  Memory - find Memory Diagnostics tool at top of list - Right Click -
RUN AS ADMIN follow the instructions

Windows Vista: How to Scan / Test your RAM or Memory with Windows Vista Memory Diagnostic
Tool
http://www.shivaranjan.com/2007/11/01/windows-vista-how-to-scan-test-your-ram-or-memory-with-windows-vista-memory-diagnostic-tool/

How to Run the Memory Diagnostics Tool in Windows 7
http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html

Test Your Computer’s Memory Using Windows Vista Memory Diagnostic Tool
http://www.howtogeek.com/howto/windows-vista/test-your-computers-memory-using-windows-vista-memory-diagnostic-tool/

Hope this helps.

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Already checked memtest and had several errors...as far as drivers go...so far I have found a newer Nvidia driver and did a clean install of that driver and found a BIOS update which I have flashed...it's only been a few hours but we'll see....I have a few other drivers to check but the emachines website doesn't have any other chipset drivers available

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

Even one memory error is too many so that is at least part of if not the whole issue.

Hope this helps.

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

yeah, so I've read....backing up to do restore of OS to prove its not a software issue to the warranty holders.  I think that's my best hope although I have found some new drivers to update when I get this fixed.  

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Problem solved...after much haggling with the warranty company (I don't recommend buying one, it was a gift to me)..I finally got them to send over a technician.  The technician was there to replace the HD (their diagnosis), but after giving him breakfast and a little smooth talking I got him to look at the memtest results and convinced him to tell his company to replace the RAM and MB.  He checked each RAM stick and one tested slower than the rest even though it didn't report an error.  He took that pair of RAM sticks out and my computer is now in excellent working order.  Lesson:  Warranty companies will try everything to get out of actually doing anything, but with enough undeniable logic and patient determination you can get them to at least open a case on your account.  When you finally get a tech over, treat him well!!!

Thanks all for your great input.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

Well at least you got it fixed. Sounds like you need a new warranty company, if any, and
a new technician.

Glad to have helped.

Hope this helps.

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info

Last updated October 24, 2022 Views 11,465 Applies to: