Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Windows 7 Blue Screen of Death minidump analysis request

Posted on 2014-10-13
Medium Priority
Last Modified: 2016-11-23
Greetings wise wizards of EE:

I'm helping a friend with a Dell XPS Windows 7 desktop, who has recently encountered the dreaded blue screen of death. The BSOD is random, but is becoming increasingly persistent. I guided him over the phone to send me the latest Minidump files generated by the BSOD via e-mail, which I attach to this inquiry.

I actually had posted this inquiry last month, and I received some helpful replies in regards to the video card causing the BSOD. I was advised to update the video card drivers, which I did when I visited my friend's home, shortly after receiving an answer to my inquiry. However, BSOD screens continue to appear. For that reason I am attaching the earliest Minidump file (named Windows 7 Minidump file # 1), to the most recent (named Windows 7 Minidump file # 5).

I now request an analysis of the attached Minidump files, so I can tackle the solution directly. Though I am grateful for all replies, I request a specific analysis of this attached minidump files, rather than general security or maintenance advice, or any links to BSOD tools I can use my own. I am seeking a skilled, experienced, wizardly analysis of the attached minidumps, which I why I seek your help.

Many thanks in advance,

Question by:zovoth
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 31

Assisted Solution

Predrag earned 200 total points
ID: 40379248
The BSOD is random, but is becoming increasingly persistent.

In this case, when BSOD is increasing, first thing for me is to check RAM. Reason is because if RAM is bad - random BSOD is happening, so first thing it to eliminate RAM error from picture.
I usually use memtest86+ to check RAM.
You can also find memtest86+ on any linux instalation, but to work on newer chipset you need last version of memtest.
LVL 93

Accepted Solution

nobus earned 1200 total points
ID: 40379251
install speedfan, to monitor the temperatures of cpu, disk, and video card :

however, the latest dump says :  IMAGE_NAME:  memory_corruption

so it would be a good idea to test the ram with memtest86+ from
personally - i use the ubcd for this ; if you don't have it yet, download it and make the CD or usb stick
Hardware diagnostic CD    UBCD

go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD and make the cd   <<==on a WORKING PC, and boot the problem PC from it
Here 2 links, one to the general site, and a direct link to the download

since the downloaded file is an ISO file, eg ubcd527.iso - so you need to use an ISO burning tool
if you don't have that software, install cdburnerXP :

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section -  long or advanced diag !  (runs at least for30 minutes)                        ultimate boot cd             download page

**you can make a bootable cd - or bootable usb stick
LVL 63

Assisted Solution

by:☠ MASQ ☠
☠ MASQ ☠ earned 600 total points
ID: 40381491
There's no real pattern to these, they are all fatal system errors variously linked to drivers and memory referencing faults.

Were any of the crashes witnessed so we know what was being attempted at the time?

Because of the types of error it would be worth checking if the memory clock speed is correct & if overclocked reset this, my gut feeling is this is a memory problem, either faulting or timing, so pulling out modules and/or switching them around might help with diagnosis and/or run a memory testing utility.

FWIW a quick summary of the dump files in the order they are posted in your question:

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.

IMAGE_NAME:  atikmdag.sys

    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
Arg1: 00000000001904fb
Arg2: fffff8800ef41588
Arg3: fffff8800ef40de0
Arg4: fffff8000343bb14

PROCESS_NAME:  wlmail.exe
IMAGE_NAME:  Ntfs.sys

Arg1: fffff8800351ac20
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: fffff880050255f7

IMAGE_NAME:  ndis.sys

An exception happened while executing a system service routine.
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000030, Address of the instruction which caused the bugcheck
Arg3: fffff8800c9ddee0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

PROCESS_NAME:  lpuninstall.ex
IMAGE_NAME:  ntkrnlmp.exe

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.

IMAGE_NAME:  memory_corruption

Open in new window


Author Closing Comment

ID: 40382445
Greetings Nobus, MASQ and Predrag Jovick:

Many thanks for your rapid replies, as well as your helpful analysis of the Minidump files I sent, that generated the dreaded Blue Screen of Death. I've informed my friend that the issue appears to be memory related, so he is going to power down the unit and switch the positions of memory modules (and possibly replace them) and see if the issue persists. I believe his system is still under warranty, so he also has the option to send it back to the manufacturer for repair.

Analyzing (and interpreting into non-technobabble English) the Minidumps is of great help to me, and I thank you for your concise summations of the issue. This one sounds a little slippery, with some trial and error required, but now my friend has a course in which to travel.

May the wind be at your back and take care,


Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question