• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 786
  • Last Modified:

Windows 7 Blue Screen of Death minidump analysis request

Greetings wise wizards of EE:

I'm helping a friend with a Dell XPS Windows 7 desktop, who has recently encountered the dreaded blue screen of death. The BSOD is random, but is becoming increasingly persistent. I guided him over the phone to send me the latest Minidump files generated by the BSOD via e-mail, which I attach to this inquiry.

I actually had posted this inquiry last month, and I received some helpful replies in regards to the video card causing the BSOD. I was advised to update the video card drivers, which I did when I visited my friend's home, shortly after receiving an answer to my inquiry. However, BSOD screens continue to appear. For that reason I am attaching the earliest Minidump file (named Windows 7 Minidump file # 1), to the most recent (named Windows 7 Minidump file # 5).

I now request an analysis of the attached Minidump files, so I can tackle the solution directly. Though I am grateful for all replies, I request a specific analysis of this attached minidump files, rather than general security or maintenance advice, or any links to BSOD tools I can use my own. I am seeking a skilled, experienced, wizardly analysis of the attached minidumps, which I why I seek your help.

Many thanks in advance,

3 Solutions
Predrag JovicNetwork EngineerCommented:
The BSOD is random, but is becoming increasingly persistent.

In this case, when BSOD is increasing, first thing for me is to check RAM. Reason is because if RAM is bad - random BSOD is happening, so first thing it to eliminate RAM error from picture.
I usually use memtest86+ to check RAM.
You can also find memtest86+ on any linux instalation, but to work on newer chipset you need last version of memtest.
install speedfan, to monitor the temperatures of cpu, disk, and video card : http://www.almico.com/speedfan.php

however, the latest dump says :  IMAGE_NAME:  memory_corruption

so it would be a good idea to test the ram with memtest86+ from www.memtest.org
personally - i use the ubcd for this ; if you don't have it yet, download it and make the CD or usb stick
Hardware diagnostic CD    UBCD

go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD and make the cd   <<==on a WORKING PC, and boot the problem PC from it
Here 2 links, one to the general site, and a direct link to the download

since the downloaded file is an ISO file, eg ubcd527.iso - so you need to use an ISO burning tool
if you don't have that software, install cdburnerXP : http://cdburnerxp.se/

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section -  long or advanced diag !  (runs at least for30 minutes)

http://www.ultimatebootcd.com/                        ultimate boot cd
http://www.ultimatebootcd.com/download.html             download page

**you can make a bootable cd - or bootable usb stick
☠ MASQ ☠Commented:
There's no real pattern to these, they are all fatal system errors variously linked to drivers and memory referencing faults.

Were any of the crashes witnessed so we know what was being attempted at the time?

Because of the types of error it would be worth checking if the memory clock speed is correct & if overclocked reset this, my gut feeling is this is a memory problem, either faulting or timing, so pulling out modules and/or switching them around might help with diagnosis and/or run a memory testing utility.

FWIW a quick summary of the dump files in the order they are posted in your question:

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.

IMAGE_NAME:  atikmdag.sys

    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
Arg1: 00000000001904fb
Arg2: fffff8800ef41588
Arg3: fffff8800ef40de0
Arg4: fffff8000343bb14

PROCESS_NAME:  wlmail.exe
IMAGE_NAME:  Ntfs.sys

Arg1: fffff8800351ac20
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: fffff880050255f7

IMAGE_NAME:  ndis.sys

An exception happened while executing a system service routine.
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000030, Address of the instruction which caused the bugcheck
Arg3: fffff8800c9ddee0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

PROCESS_NAME:  lpuninstall.ex
IMAGE_NAME:  ntkrnlmp.exe

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.

IMAGE_NAME:  memory_corruption

Open in new window

zovothAuthor Commented:
Greetings Nobus, MASQ and Predrag Jovick:

Many thanks for your rapid replies, as well as your helpful analysis of the Minidump files I sent, that generated the dreaded Blue Screen of Death. I've informed my friend that the issue appears to be memory related, so he is going to power down the unit and switch the positions of memory modules (and possibly replace them) and see if the issue persists. I believe his system is still under warranty, so he also has the option to send it back to the manufacturer for repair.

Analyzing (and interpreting into non-technobabble English) the Minidumps is of great help to me, and I thank you for your concise summations of the issue. This one sounds a little slippery, with some trial and error required, but now my friend has a course in which to travel.

May the wind be at your back and take care,

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now