Question Need help with system crashes

jamesdsimone · May 24, 2024

I have got repeated system crashes with random reboots. I have the associated error files but I have no idea how to interpret them. Any help would be appreciated. I have the dmp file but don't know how to open it or upload it. I have the sysdata.xml file as well.

BCCode: a
BCP1: 0000000000000000
BCP2: 0000000000000002
BCP3: 0000000000000001
BCP4: FFFFF800030A7DBF
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

lantis3 · May 24, 2024

See if this util helps

Blue screen of death (STOP error) information in dump files.

Displays information about blue screen crashes occured on your system. (MiniDump Reader)

www.nirsoft.net

jamesdsimone · May 24, 2024

lantis3 said:
See if this util helps

Blue screen of death (STOP error) information in dump files.

Displays information about blue screen crashes occured on your system. (MiniDump Reader)

www.nirsoft.net

Thanks I have had 4 BSOD 3 were ntoskrnl.exe and one by iaStorS.sys. There is a whole bunch of hexadecimal numbers but and other drivers listed but I have no idea what that means.

lantis3 · May 24, 2024

Seems Intel Rapid Store driver issue.

Uninstall it if you don't need it. (if you don't have raid setup)

jamesdsimone · May 24, 2024

lantis3 said:
Seems Intel Rapid Store driver issue.

Uninstall it if you don't need it. (if you don't have raid setup)

No I don't need it. Thanks for the help. Just uninstalled it.

jamesdsimone · May 26, 2024

Unfortunately, the problem has continued. I deleted the rapid store and cleaned the resgistry. The dmp file just shows ntoskrnl.exe. The hexidecimal addresses are different in each dmp file but otherwise the same. I have just basic drivers loaded MB/graphics/LAN/audio/USB.

lantis3 · May 26, 2024

Use DISM /Online /Cleanup-Image /RestoreHealth and sfc /scannow commands to repair corrupted system files
Use the CHKDSK command to check for disk errors
https://softwarekeep.com/help-center/what-is-ntoskrnl-exe-how-to-fix-it-ntoskrnl-ex
Do a memory test

MemTest86 - Download now!

Download your free copy of MemTest86 here for USB.

www.memtest86.com

jamesdsimone · May 27, 2024

lantis3 said:
Use DISM /Online /Cleanup-Image /RestoreHealth and sfc /scannow commands to repair corrupted system files

Use the CHKDSK command to check for disk errors
https://softwarekeep.com/help-center/what-is-ntoskrnl-exe-how-to-fix-it-ntoskrnl-ex

Do a memory test

MemTest86 - Download now!

Download your free copy of MemTest86 here for USB.

www.memtest86.com

HP has a memory test in BIOS. I already ran that and it reported no problems. I'll try the other suggestions.

C1 · May 27, 2024

Interestingly this just came up on MSN:

Ultimate Guide to Fix Almost ANY Windows Corruption (Without Reinstalling)

jamesdsimone · May 27, 2024

Are there any tools I can run from Linux to diagnose and or repair?

C1 · May 27, 2024

There is a program called "WhoCrashed" that might be able to point you in the direction about what is going on with your system.

The download for it is here:
WhoCrashed

Good luck

PS: Dont personally know about Linux tools for diagnosing Windows.However, one thing I suppose that you could do is to just download "Puppy Linux" and run it to check out the hardware. Puppy Linux should just simply install & run (no mess no fuss) plus even has some games to keep you occupied while testing the system hardware.

Puppy Linux

jamesdsimone · May 28, 2024

C1 said:
There is a program called "WhoCrashed" that might be able to point you in the direction about what is going on with your system.

The download for it is here:
WhoCrashed

Good luck

PS: Dont personally know about Linux tools for diagnosing Windows.However, one thing I suppose that you could do is to just download "Puppy Linux" and run it to check out the hardware. Puppy Linux should just simply install & run (no mess no fuss) plus even has some games to keep you occupied while testing the system hardware.

Puppy Linux

I have Linux Mint already installed on another hard drive in the system. I booted to it and it ran ok with basic tasks all afternoon. I didn't stress the CPU at all though. So I think all the hardware is ok. I would just skip Windows but I can't get Handbrake to run properly in the Linux install which is the primary task I've been using this computer for. I'll see if I can get the computer to boot to windows and see if that tools helps.

C1 · May 28, 2024

Since you have access to a Linux program, a thing you could try, if you have the install disk for your Windows, you could try replacing the current NTOSKRNL with a fresh one from the install disk. Just rename the original and leave it in place.

You will need to use the "Expand" command to extract the NTOSKRNL from the install disk, then use your Linux to rename the current OS kernal and copy in place the "new" OS kernal. Boot up & it should go. (In this way, you can always reverse course.)

(Think I had to do that once, but long time ago with XP.)

jamesdsimone · May 28, 2024

C1 said:
Since you have access to a Linux program, a thing you could try, if you have the install disk for your Windows, you could try replacing the current NTOSKRNL with a fresh one from the install disk. Just rename the original and leave it in place.

You will need to use the "Expand" command to extract the NTOSKRNL from the install disk, then use your Linux to rename the current OS kernal and copy in place the "new" OS kernal. Boot up & it should go. (In this way, you can always reverse course.)

(Think I had to do that once, but long time ago with XP.)

I assume I can use a working copy from another windows install?

C1 · May 28, 2024

Just make sure that it is the same creation date and size as reported in Explorer.

If anything goes wrong then by having kept & renamed the original, you will be able to recover/restore the system, unfortunately, back to where you were before.

(Ya, rarely, but when desperate, I'll snitch and replace equivalent system files (eg, due to missing or corruption) from another equivalent installed system.)

Another possibility is to base install your system on another HDD & snitch equivalent system files (same creation date & size). When done just discard the secondary installed program.

Weird - I know.

jamesdsimone · May 28, 2024

There are different iterations of the file. Should I use the on in /system32?

lantis3 · May 28, 2024

download windows 10 iso from Microsoft. Use 7zip to extract whole iso into a folder, run setup.exe to reinstall Windows 10.

memtest86 will run memory test more thoroughly then BIOS memory test, run it overnight.

mikeymikec · May 28, 2024

Disable automatic reboot on system failure.

Is it always the same BSOD (in your case IRQL_NOT_LESS_OR_EQUAL)?

C1 · May 28, 2024

In XP the operative ntoskrnl is located in C:\windows\system32 folder.and the file on the installation disk is located in D:/i386\ntoskrnl.ex_ (where D drive is your CD drive).

The version you posted for your OS comes up as Windows 7 Pro (64 bit) which I dont have much experience with, so you'll have to research that on your own regarding where the operative ntos kernal is supposed to be located.

The main thing though, is whatever you do, the replacement file(s) needs to be the same creation date & size.

How To Fix: Missing or Corrupt ntoskrnl.exe File

jamesdsimone · May 28, 2024

mikeymikec said:
Disable automatic reboot on system failure.

Doesn't seem to be an option in BIOS.

C1 · May 28, 2024

"Go to Control Panel and select System and Security > System > Advanced system settings. In the Startup and Recovery section, choose Settings. Uncheck the box next to Automatically restart."

Ya, one of the 1st things I always do with a new install.

mikeymikec · May 29, 2024

jamesdsimone said:
Doesn't seem to be an option in BIOS.

It's not a BIOS option but a Windows one. I think the route to it on Win10 is Settings > System > About > Advanced System Settings > Advanced > start-up and recovery settings.

- edit - nods at @C1

I disable this option on every system because the only reason for its existence is for MS to pretend that their OS never crashes.

jamesdsimone · May 29, 2024

mikeymikec said:
I disable this option on every system because the only reason for its existence is for MS to pretend that their OS never crashes.

Found and disabled it. Every time I got a BSOD Windows went to system repair. Sometimes I have to run it twice before it boots to desktop. I grabbed a copy of ntoskrnl.exe from \system32 from another machine and copied it over. I ran sfc \scannow after I copied the file which reported no problems. I probably should have run it first but oh well. The two copies of ntoskrnl.exe were different sizes maybe different versions? Anyway been running for almost 24 hours now with no BSOD.

C1 · May 29, 2024

Happy that things are working well.

Sounds like you may have had a corrupt ntoskrnl and that could be why the size is/was different (ie, something, perhaps malware) wrote to the ntoskrnl (which shouldnt happen/be allowed as it is a critical system file). (Could also have even been changed/replaced by a system update.)

We'll keep fingers crossed for you.

Good luck

Question Need help with system crashes

Senior member

Senior member

Senior member

Senior member

Senior member

Senior member

Senior member

Senior member

Platinum Member

Senior member

Platinum Member

Senior member

Platinum Member

Senior member

Platinum Member

Senior member

Senior member

Lifer

Platinum Member

Senior member

Platinum Member

Lifer

Senior member

Platinum Member