BSOD Win7 x64 : Caused By Driver : ntoskrnl.exe - Win 7 - Windows & Software
Marsh Posté le 03-07-2012 à 21:24:44
Quelques informations supplémentaires que j'ai récupéré en farfouinant... 
 
 
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64 
Copyright (c) Microsoft Corporation. All rights reserved. 
 
 
Loading Dump File [C:\Windows\MEMORY.DMP] 
Kernel Summary Dump File: Only kernel address space is available 
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols 
Executable search path is:  
Windows 7 Kernel Version 7600 MP (8 procs) Free x64 
Product: WinNt, suite: TerminalServer SingleUserTS 
Built by: 7600.17017.amd64fre.win7_gdr.120503-2030 
Machine Name: 
Kernel base = 0xfffff800`0304e000 PsLoadedModuleList = 0xfffff800`0328ae70 
Debug session time: Tue Jul  3 08:28:08.863 2012 (UTC + 2:00) 
System Uptime: 0 days 0:03:19.800 
Loading Kernel Symbols 
............................................................... 
................................................................ 
................ 
Loading User Symbols 
PEB is paged out (Peb.Ldr = 000007ff`fffdc018).  Type ".hh dbgerr001" for details 
Loading unloaded module list 
.... 
******************************************************************************* 
*                                                                             * 
*                        Bugcheck Analysis                                    * 
*                                                                             * 
******************************************************************************* 
 
Use !analyze -v to get detailed debugging information. 
 
BugCheck 50, {fffff8a01e864854, 0, fffff880012a2a35, 2} 
 
Probably caused by : Ntfs.sys ( Ntfs!NtfsRemoveScb+bd ) 
 
Followup: MachineOwner 
--------- 
 
4: kd> !analyze –v 
******************************************************************************* 
*                                                                             * 
*                        Bugcheck Analysis                                    * 
*                                                                             * 
******************************************************************************* 
 
Use !analyze -v to get detailed debugging information. 
 
BugCheck 50, {fffff8a01e864854, 0, fffff880012a2a35, 2} 
 
Probably caused by : Ntfs.sys ( Ntfs!NtfsRemoveScb+bd ) 
 
Followup: MachineOwner 
--------- 
 
4: kd> !analyze -v 
******************************************************************************* 
*                                                                             * 
*                        Bugcheck Analysis                                    * 
*                                                                             * 
******************************************************************************* 
 
PAGE_FAULT_IN_NONPAGED_AREA (50) 
Invalid system memory was referenced.  This cannot be protected by try-except, 
it must be protected by a Probe.  Typically the address is just plain bad or it 
is pointing at freed memory. 
Arguments: 
Arg1: fffff8a01e864854, memory referenced. 
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation. 
Arg3: fffff880012a2a35, If non-zero, the instruction address which referenced the bad memory 
 address. 
Arg4: 0000000000000002, (reserved) 
 
Debugging Details: 
------------------ 
 
 
READ_ADDRESS:  fffff8a01e864854 Paged pool 
 
FAULTING_IP:  
Ntfs!NtfsRemoveScb+bd 
fffff880`012a2a35 f7400400010200  test    dword ptr [rax+4],20100h 
 
MM_INTERNAL_CODE:  2 
 
IMAGE_NAME:  Ntfs.sys 
 
DEBUG_FLR_IMAGE_TIMESTAMP:  4d79996d 
 
MODULE_NAME: Ntfs 
 
FAULTING_MODULE: fffff88001210000 Ntfs 
 
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT 
 
BUGCHECK_STR:  0x50 
 
PROCESS_NAME:  MsMpEng.exe 
 
CURRENT_IRQL:  0 
 
TRAP_FRAME:  fffff88006e6e890 -- (.trap 0xfffff88006e6e890) 
NOTE: The trap frame does not contain all registers. 
Some register values may be zeroed or incorrect. 
rax=fffff8a01e864850 rbx=0000000000000000 rcx=fffffa8009025780 
rdx=fffff8a00e864980 rsi=0000000000000000 rdi=0000000000000000 
rip=fffff880012a2a35 rsp=fffff88006e6ea20 rbp=fffffa80073dec00 
 r8=0000000000000000  r9=0000000000000000 r10=fffffa8009025780 
r11=fffff88006e6eaf0 r12=0000000000000000 r13=0000000000000000 
r14=0000000000000000 r15=0000000000000000 
iopl=0         nv up ei pl nz na po nc 
Ntfs!NtfsRemoveScb+0xbd: 
fffff880`012a2a35 f7400400010200  test    dword ptr [rax+4],20100h ds:008c:4854=???????? 
Resetting default scope 
 
LAST_CONTROL_TRANSFER:  from fffff8000313c452 to fffff800030be040 
 
STACK_TEXT:   
fffff880`06e6e728 fffff800`0313c452 : 00000000`00000050 fffff8a0`1e864854 00000000`00000000 fffff880`06e6e890 : nt!KeBugCheckEx 
fffff880`06e6e730 fffff800`030bc12e : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`01220e8b : nt! ?? ::FNODOBFM::`string'+0x40940 
fffff880`06e6e890 fffff880`012a2a35 : fffff8a0`0e864850 00000000`00000000 00000000`00000001 fffff880`012baf56 : nt!KiPageFault+0x16e 
fffff880`06e6ea20 fffff880`01218a50 : fffff8a0`0e864880 fffff8a0`0e864980 fffffa80`073dec00 fffff880`012af4cf : Ntfs!NtfsRemoveScb+0xbd 
fffff880`06e6ea60 fffff880`012a03ec : fffff8a0`0e864850 fffffa80`073dec60 fffff880`06e6eb98 fffffa80`09025780 : Ntfs!NtfsPrepareFcbForRemoval+0x50 
fffff880`06e6ea90 fffff880`012b7196 : fffffa80`09025780 fffff880`06745470 fffffa80`09025780 fffffa80`09025700 : Ntfs!NtfsTeardownStructures+0xdc 
fffff880`06e6eb10 fffff880`0122198d : fffffa80`09025780 fffffa80`073dec60 fffff880`06745470 fffffa80`08d43000 : Ntfs!NtfsCommonCreate+0x21ff 
fffff880`06e6ecf0 fffff800`030b5ec7 : fffff880`067453e0 00700075`003c003e 00650074`00610064 0070006d`006f0043 : Ntfs!NtfsCommonCreateCallout+0x1d 
fffff880`06e6ed20 fffff800`030b5e81 : 00000000`00000000 fffffa80`08d43060 fffff880`06e6f000 fffff800`030cd88a : nt!KxSwitchKernelStackCallout+0x27 
fffff880`067452b0 fffff800`030cd88a : fffffa80`073dec00 fffffa80`08d43060 00000000`00000000 fffff880`012af08d : nt!KiSwitchKernelStackContinue 
fffff880`067452d0 fffff880`012218af : fffff880`01221970 fffff880`067453e0 fffff880`06745400 fffff880`012c040d : nt!KeExpandKernelStackAndCalloutEx+0x29a 
fffff880`067453b0 fffff880`012bbaa0 : 00000000`00000000 00000000`00000000 fffff880`06745600 fffffa80`073dec60 : Ntfs!NtfsCommonCreateOnNewStack+0x4f 
fffff880`06745410 fffff880`0103d23f : fffffa80`07791030 fffffa80`073dec60 fffffa80`09a21100 fffffa80`076a3b60 : Ntfs!NtfsFsdCreate+0x1b0 
fffff880`067455c0 fffff880`0105c2b9 : fffffa80`073dec60 fffffa80`06719800 fffffa80`073dec00 fffffa80`076a3b60 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f 
fffff880`06745650 fffff800`033bb947 : 00000000`00000005 fffff800`033bb3a0 fffffa80`09c7e010 00000000`00000000 : fltmgr!FltpCreate+0x2a9 
fffff880`06745700 fffff800`033b2294 : fffffa80`07673940 00000000`00000000 fffffa80`09ca3740 00000000`00000701 : nt!IopParseDevice+0x5a7 
fffff880`06745890 fffff800`033b6f8d : fffffa80`09ca3740 fffff880`067459f0 00000000`00000040 fffffa80`067039f0 : nt!ObpLookupObjectName+0x585 
fffff880`06745990 fffff800`033bda57 : fffff880`030f9180 00000000`00000001 fffffa80`0a134301 fffff880`06745a58 : nt!ObOpenObjectByName+0x1cd 
fffff880`06745a40 fffff800`033d6204 : 00000000`00baf7b0 fffff8a0`00000080 00000000`02b62290 00000000`00baf810 : nt!IopCreateFile+0x2b7 
fffff880`06745ae0 fffff800`030bd293 : ffffffff`ffffffff fffffa80`089df280 00000000`00baf758 fffff880`00000004 : nt!NtOpenFile+0x58 
fffff880`06745b70 00000000`7782f9ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 
00000000`00baf778 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7782f9ea 
 
 
STACK_COMMAND:  kb 
 
FOLLOWUP_IP:  
Ntfs!NtfsRemoveScb+bd 
fffff880`012a2a35 f7400400010200  test    dword ptr [rax+4],20100h 
 
SYMBOL_STACK_INDEX:  3 
 
SYMBOL_NAME:  Ntfs!NtfsRemoveScb+bd 
 
FOLLOWUP_NAME:  MachineOwner 
 
FAILURE_BUCKET_ID:  X64_0x50_Ntfs!NtfsRemoveScb+bd 
 
BUCKET_ID:  X64_0x50_Ntfs!NtfsRemoveScb+bd 
 
Followup: MachineOwner 
--------- 
Marsh Posté le 04-07-2012 à 09:51:14
Mets à jour ton 7 en SP1 si ce n'est pas déjà fait. 
 
Test tes barrettes de RAM. Si négatif insère-les une à la fois et regarde si le problème persiste. 
 
Ensuite même chose pour les disques durs.
Marsh Posté le 04-07-2012 à 14:09:13
Salut nebulios 
 
Mon Win7 est bien en Sp1 et à jour de toutes les KB. 
 
Je vais tester le retrait d'une barette pour voir si cela à un impact positif et switcher si non... 
Les disques pourraient également avoir un impact ?   
  
 
Pour un PC tout neuf je rage...   
  
 
Merci pour ce premier élément, j'espèrais qu'un crack me dise "c'est tel pilote qui merde" mais bon je vais me résigner à faire ces tests matériels.
Marsh Posté le 03-07-2012 à 19:10:14
Bonjour à tous,
 
 
 
 
 
 
 
 
 
 

Voilà, je rage de ne pas m'en sortir avec mon PC qui n'arrête pas de me claquer des BSOD !
Après réinstallation complète de l'OS, rien à faire, cela revient fatalement...
Quelques informations si vous pouvez m'aider...
Merci beaucoup à la communauté qui pourra me sortir de là !
Windows 7 X64 officiel et mis à jour
Antivirus Security Essential
BIOS mis à jour...
==================================================
Dump File : 070312-13681-01.dmp
Crash Time : 03/07/2012 08:28:54
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : fffff8a0`1e864854
Parameter 2 : 00000000`00000000
Parameter 3 : fffff880`012a2a35
Parameter 4 : 00000000`00000002
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+70040
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.17017 (win7_gdr.120503-2030)
Processor : x64
Crash Address : ntoskrnl.exe+70040
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\070312-13681-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 7600
Dump File Size : 286 864
==================================================
==================================================
Dump File : 062312-9063-01.dmp
Crash Time : 23/06/2012 12:00:05
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : fffff8a0`124752d1
Parameter 2 : 00000000`00000000
Parameter 3 : fffff800`02f19521
Parameter 4 : 00000000`00000002
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+5fbc
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\062312-9063-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 7600
Dump File Size : 284 432
==================================================
RAMMon v1.0 Build: 1005 built with SysInfo v1.0 Build: 1027
PassMark (R) Software
www.passmark.com
Memmory summary for MAISON-PC:
Number of Memory Devices: 2 Total Physical Memory: 8173 MB (8192 MB)
Total Available Physical Memory: 6825 MB
Memory Load: 16%
Item | Module #1 | Module #2 |
-------------------------------------------------------------------------------|-----------------------|-----------------------|-
Ram Type | DDR3 | DDR3 |
Standard Name | DDR3-1333 | DDR3-1333 |
Module Name | PC3-10600 | PC3-10600 |
Memory Capacity (MB) | 4096 | 4096 |
Bus Clockspeed (Mhz) | 666.67 | 666.67 |
Jedec Manufacture Name | G Skill Intl | G Skill Intl |
Search Amazon.com | Search! | Search! |
SPD Revision | 1.0 | 1.0 |
Registered | No | No |
ECC | No | No |
DIMM Slot # | 1 | 3 |
Manufactured | Year 0 | Year 0 |
Module Part # | F3-10666CL9-4GBRL | F3-10666CL9-4GBRL |
Module Revision | 0x0 | 0x0 |
Module Serial # | 0x0 | 0x0 |
Module Manufacturing Location | 0 | 0 |
# of Row Addressing Bits | 15 | 15 |
# of Column Addressing Bits | 10 | 10 |
# of Banks | 8 | 8 |
# of Ranks | 2 | 2 |
Device Width in Bits | 8 | 8 |
Bus Width in Bits | 64 | 64 |
Module Voltage | 1.5V | 1.5V |
CAS Latencies Supported | 6 7 8 9 | 6 7 8 9 |
Timings @ Max Frequency | 9-9-9-24 | 9-9-9-24 |
Minimum Clock Cycle Time, tCK (ns) | 1.500 | 1.500 |
Minimum CAS Latency Time, tAA (ns) | 13.125 | 13.125 |
Minimum RAS to CAS Delay, tRCD (ns) | 13.125 | 13.125 |
Minimum Row Precharge Time, tRP (ns) | 13.125 | 13.125 |
Minimum Active to Precharge Time, tRAS (ns) | 36.000 | 36.000 |
Minimum Row Active to Row Active Delay, tRRD (ns) | 6.000 | 6.000 |
Minimum Auto-Refresh to Active/Auto-Refresh Time, tRC (ns) | 49.125 | 49.125 |
Minimum Auto-Refresh to Active/Auto-Refresh Command Period, tRFC (ns) | 160.000 | 160.000 |
| | |
DDR3 Specific SPD Attributes | | |
Write Recovery Time, tWR (ns) | 15.000 | 15.000 |
Internal Write to Read Command Delay, tWTR (ns) | 7.500 | 7.500 |
Internal Read to Precharge Command Delay, tRTP (ns) | 7.500 | 7.500 |
Minimum Four Activate Window Delay, tFAW (ns) | 30.000 | 30.000 |
RZQ / 6 Supported | Yes | Yes |
RZQ / 7 Supported | Yes | Yes |
DLL-Off Mode Supported | Yes | Yes |
Maximum Operating Temperature (C) | 95 | 95 |
Refresh Rate at Extended Operating Temperature Range | 1X | 1X |
Auto-self Refresh Supported | Yes | Yes |
On-die Thermal Sensor Readout Supported | No | No |
Partial Array Self Refresh Supported | No | No |
Thermal Sensor Present | No | No |
Non-standard SDRAM Type | Standard Monolithic | Standard Monolithic |
Module Type | UDIMM | UDIMM |
Module Height (mm) | 30 | 30 |
Module Thickness (front), (mm) | 2 | 2 |
Module Thickness (back), (mm) | 2 | 2 |
Module Width (mm) | 133.5 | 133.5 |
Reference Raw Card Used | Raw Card B Rev. 0 | Raw Card B Rev. 0 |
DRAM Manufacture ID | 1229 | 1229 |
# of DRAM Rows | 0 | 0 |
# of Registers | 0 | 0 |
Register Manufacturer | | |
Register Type | | |
Register Revision | 0 | 0 |
====================================================================================================
Et des screen de CPUz...