Results 1 to 8 of 8
  1. #1
    Joined
    Jul 2011
    Posts
    4

    ntkrnlmp.exe causing blue screen...can't figure out

    Been having some BSOD issues lately. Before I did any trouble shooting, I ran memtest, which resulted in several errors. So I dug some old RAM I knew was working, out of storage, and swapped out. It ran fine for about a day, and BSOD'ed again. It's done it 3-4 times in 2 days now. Which is actually less often than before. I haven't tested the "new" RAM, but like I said, I know it was good when I stored it.
    I set out on a google quest. I found windbg, and did all that fun stuff, which is how I found out that the culprit is ntkrnlmp.exe....however, I have absolutely no clue what that means, and for the life of me can find anything about it anywhere. I found one thread on here where a guy had a similar problem, with the same file, but his debug info was different.
    At any rate, here's my debug info, I hope somebody here can make sense of this, cause I sure cant, lol.

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Users\Phoenix\Desktop\073011-22916-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16792.amd64fre.win7_gdr.110408-1633
    Machine Name:
    Kernel base = 0xfffff800`02a62000 PsLoadedModuleList = 0xfffff800`02c9fe50
    Debug session time: Sat Jul 30 00:04:13.367 2011 (UTC - 4:00)
    System Uptime: 0 days 6:56:46.943
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...................
    Loading User Symbols
    Loading unloaded module list
    ........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 7F, {8, 80050031, 406f8, fffff80002adccff}

    Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )

    Followup: MachineOwner
    ---------

    3: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault). The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
    use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
    use .trap on that value
    Else
    .trap on the appropriate frame will show where the trap was taken
    (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 0000000080050031
    Arg3: 00000000000406f8
    Arg4: fffff80002adccff

    Debugging Details:
    ------------------


    BUGCHECK_STR: 0x7f_8

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    PROCESS_NAME: avp.exe

    CURRENT_IRQL: 0

    LAST_CONTROL_TRANSFER: from fffff80002ad1c69 to fffff80002ad2700

    STACK_TEXT:
    fffff880`035d9ce8 fffff800`02ad1c69 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
    fffff880`035d9cf0 fffff800`02ad0132 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`035d9e30 fffff800`02adccff : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
    00000000`08c795c4 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SepMandatoryIntegrityCheck+0x20f


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!KiDoubleFaultAbort+b2
    fffff800`02ad0132 90 nop

    SYMBOL_STACK_INDEX: 2

    SYMBOL_NAME: nt!KiDoubleFaultAbort+b2

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 4d9fdd34

    FAILURE_BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2

    BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2

    Followup: MachineOwner
    ---------

    Any input is appreciated, thank you.

    Also, I'm aware of forum etiquette, and after my family goes home this weekend, I will look around and see if there is something I can assist someone with. I just thought while I'm busy with family, it would be a good time to wait for a response

  2. #2
    Joined
    Nov 2001
    Posts
    8,366

    Re: ntkrnlmp.exe causing blue screen...can't figure out

    Buried in there is
    PROCESS_NAME: avp.exe
    which I believe is kaspersky antivirus.
    Have you tried disabling that ?
    #1 Asus P5E-VM HDMI (htpc backup)
    2x 2gb Corsair Q6600 7900gt
    Wd 250gb sata, NEC dvd burner
    Antec Neo 480,Avermedia a180 HDTV,Cooler Master Mystique case
    LG L246WP-BN 24" widescreen monitor,Vista Home Premium
    #2 HTPC Athlon64 AM2 5000+ BE x2, CORSAIR TWIN2X2048-6400
    ABIT AN-M2, TV Wonder 650 PRO, HauppaugeWinTV-HVR-1600
    ASUS EN8600GT SILENT, LG BluRay/HD dvd combo
    250gb Wd sata II,Xgene HTPC case +Scythe and SilentX fans
    Panasonic AX100 projector + 106" Graywolf screen, Vista Home
    Premium
    #3 Asus Eee 4g

  3. #3
    Joined
    Jul 2011
    Posts
    4

    Re: ntkrnlmp.exe causing blue screen...can't figure out

    Well, no I haven't. Considering it's my only antivirus. The only thing I could do would be to disable it and let my computer set idle. However, while my computer is idle, it will sit there for days without a BSOD.
    I've never heard of an antivirus causing blue screens though. Update problems, and firewall problems, sure, but not blue screens...however, I'm no expert. If you think it's worth a shot, I'll try it.

  4. #4
    Joined
    Nov 2003
    Location
    Corruptfornia
    Posts
    3,780

    Re: ntkrnlmp.exe causing blue screen...can't figure out

    I found this over at the KAS forum which explains about
    the avp.exe. Can you go into msconfig, click startup and
    uncheck the box for Kaspersky at startup and see what
    happens ?

    http://support.kaspersky.com/kav6mp2/all?qid=208259934

  5. #5
    Joined
    Nov 2001
    Posts
    8,366

    Re: ntkrnlmp.exe causing blue screen...can't figure out

    You could disable kaspersky and run microsoft freebie av just to see if the bsod disappears.
    Last edited by CMB; 07-30-2011 at 07:40 PM.
    #1 Asus P5E-VM HDMI (htpc backup)
    2x 2gb Corsair Q6600 7900gt
    Wd 250gb sata, NEC dvd burner
    Antec Neo 480,Avermedia a180 HDTV,Cooler Master Mystique case
    LG L246WP-BN 24" widescreen monitor,Vista Home Premium
    #2 HTPC Athlon64 AM2 5000+ BE x2, CORSAIR TWIN2X2048-6400
    ABIT AN-M2, TV Wonder 650 PRO, HauppaugeWinTV-HVR-1600
    ASUS EN8600GT SILENT, LG BluRay/HD dvd combo
    250gb Wd sata II,Xgene HTPC case +Scythe and SilentX fans
    Panasonic AX100 projector + 106" Graywolf screen, Vista Home
    Premium
    #3 Asus Eee 4g

  6. #6
    Joined
    Jul 2011
    Posts
    4

    Re: ntkrnlmp.exe causing blue screen...can't figure out

    Ok, I'm in the middle of running memtest on all my RAM. I ran it for about 5 hours on all 4 (1gb) sticks at once, and got like 880 errors. So I am currently going through and testing each stick separately. Which brings me to another question. Can a RAM slot go bad?
    The first stick i tested was good in slots 1, and 2. I checked it in 3, and got errors. I let it run through 3 full passes each time.
    Also, given the fact that windbg listed ntkrnlmp.exe as my problem, could it be RAM?
    For the record, I am still going to try disabling Kaspersky once I'm done Mem testing.
    I'm just so confused right now.

  7. #7
    Joined
    Mar 2002
    Location
    Tampa, FL
    Age
    49
    Posts
    2,428

    Lightbulb Re: ntkrnlmp.exe causing blue screen...can't figure out

    Yes, it's possible for a slot to go bad on the MB. If you have sticks that you know are good and they keep getting memtest errors in slot 3, then slot 3 is bad.
    SkaarjMasterDuo:WinXPSP3, Core2Duo E8600(Gigabyte GA-EP45-UD3P),Noctua NH-C12P,4GB Corsair XMS2 TWIN2X4096-8500C5 RAM,Nvidia EVGA GTX-280 1GB,SB Audigy2 6.1,Klipsch 5.1 sats,Dayton sub,Pioneer VSX-819H-K rec,,Enermax 850W PSU,Lian-Li PC-71B full tower,Pioneer DVR-216D,BenQ DW1655,Asus E818A3T,2-1TB WD HDs.....
    Dragonslayer (at Mom's house now): WinXPSP3, P4 3.2GHz(Asus P4P800-Deluxe),Thermalright SLK-947U,3GB Corsair XMS PC3200 RAM,ATI Radeon 9800Pro 256MB,VGA Silencer,SB Audigy2 5.1,Seasonic 500W PSU,Silverstone FT01-B mid tower,LG DVD burner,Asus E616P3..
    Dragon1: Win98SE, AthlonXP 1900+(Soyo SY-K7V Dragon+),Thermalright AX-7, 512MB Crucial 2.5 DDR PC2100 SDRAM MSI GeF4Ti4400,SB AudigyGamer,Enermax 431W PSU,full tower,Kenwood 72X,Lite-On 52x24x52x, Toshiba 4.8X.....

  8. #8
    Joined
    Jul 2011
    Posts
    4

    Re: ntkrnlmp.exe causing blue screen...can't figure out

    Just got done running memtest.

    Using a stick I knew was good, I tested each slot. Found out Slots 3 and 4 are bad. Then using Slot 1 (which was good...along with slot 2) I tested all my RAM, one at a time. Only 1 stick was bad. I am currently running 2 of the good sticks in slots 1 and 2. So far so good, but it's only been an hour or so, and I haven't really done anything other than web surfing. I'm gonna try to do some gaming here in a bit and see if it holds up.

    For the record, while testing RAM/ RAM slots, I let memtest make 2 full passes each time, just to be sure.
    I'll keep this thread updated as I find stuff out.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •