Computer Crashes Often

This is what I get when I try to get more info on the latest Kernel Power Error:

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 11/20/2012 7:17:16 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Verl-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-11-21T02:17:16.332429500Z" />
<EventRecordID>216965</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Verl-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode 26</Data>
<Data Name="BugcheckParameter1 0x41790</Data>
<Data Name="BugcheckParameter2 0xfffffa8000b20410</Data>
<Data Name="BugcheckParameter3 0xffff</Data>
<Data Name="BugcheckParameter4 0x0</Data>
<Data Name="SleepInProgress false</Data>
<Data Name="PowerButtonTimestamp 0</Data>
</EventData>
</Event>


Also I know where to find my minidump files. I just don't see an attachment button on this forum.

 

I can't seem to attach the minidump files. It tells me: "Upload Skipped (Error IO)". When I try the basic uploader it tells me I don't have permission to open the file. To contact the file owner or administrator for permission but my account is the administrator account on my computer.

 

Sorry for the late reply, could you upload them to something like Dropbox and send us the direct link so we can download them from there.

 

No need to worry for the late reply. This is a busy time of the year for most people. Finally though, something I understand: Dropbox. Here are two DMP files that my computer has said can help "describe" the problem:

http://dl.dropbox.com/u/74322190/112012-26286-01.dmp

http://dl.dropbox.com/u/74322190/112612-35568-01.dmp

 

Ok it seems you have a bad driver somewhere (the first bugcheck code, 0x1A can sometimes indicate a hardware problem as well), both minidumps give a driver fault as the problem and label Windows Media Player in the first and Opera in the second as the processes to cause the crash.

I would start by downloading & installing Driver Sweeper - http://www.techspot....er-sweeper.html

Then going to the graphics card website to download the latest graphics drivers, don't install them yet though, also go to your motherboard support page to download the chipset driver & network driver, alternatively you could download the latest network driver from the manufacturers site, as the motherboard support site may not be entirely up to date.

Use Driver Sweeper to uninstall your graphics card, network and chipset drivers and reboot if it asks you to.

Then install the drivers you downloaded from earlier.

EDIT 2: Scratch that, just double checked through the thread again, RAM has already been looked at.
I'd also run a memory test as well, if you download the Memtest86 ISO from here - http://www.memtest86.com/
Burn it to a CD then boot off that, you'll need to run it for about 3 hours as a minimum to be sure.

EDIT: Either way you've got a bit of trial and error, but at least it's narrowed down to a driver or hardware fault.

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\<USER>\Downloads\112012-26286-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`03006000 PsLoadedModuleList = 0xfffff800`0324a670
Debug session time: Tue Nov 20 21:15:39.819 2012 (UTC + 0:00)
System Uptime: 0 days 0:59:17.694
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*																			 *
*					 Bugcheck Analysis								 *
*																			 *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41790, fffffa8000b203e0, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+35054 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
*																			 *
*					 Bugcheck Analysis								 *
*																			 *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
contains the address of the PFN for the corrupted page table page.
On a 32 bit OS, parameter 2 contains a pointer to the number of used
PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa8000b203e0
Arg3: 000000000000ffff
Arg4: 0000000000000000
Debugging Details:
------------------

BUGCHECK_STR: 0x1a_41790
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: wmplayer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff800030f0b50 to fffff80003084fc0
STACK_TEXT:
fffff880`0a5f5818 fffff800`030f0b50 : 00000000`0000001a 00000000`00041790 fffffa80`00b203e0 00000000`0000ffff : nt!KeBugCheckEx
fffff880`0a5f5820 fffff800`0307181f : fffffa80`00000000 00000000`0bf5ffff 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x35054
fffff880`0a5f59e0 fffff800`03084253 : ffffffff`ffffffff 00000000`0015def0 00000000`0015dee8 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`0a5f5ae0 00000000`771614fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0015deb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x771614fa

STACK_COMMAND: kb
FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+35054
fffff800`030f0b50 cc			 int	 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+35054
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 503f82be
FAILURE_BUCKET_ID: X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+35054
BUCKET_ID: X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+35054
Followup: MachineOwner
---------

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\<USER>\Downloads\112612-35568-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`0301a000 PsLoadedModuleList = 0xfffff800`0325e670
Debug session time: Tue Nov 27 06:43:31.079 2012 (UTC + 0:00)
System Uptime: 3 days 11:01:26.781
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
.........................
*******************************************************************************
*																			 *
*					 Bugcheck Analysis								 *
*																			 *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff800030e105c, fffff88006461dc0, 0}
Probably caused by : memory_corruption ( nt!MiCaptureProtectionFromProto+1c )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
*																			 *
*					 Bugcheck Analysis								 *
*																			 *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800030e105c, Address of the instruction which caused the bugcheck
Arg3: fffff88006461dc0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!MiCaptureProtectionFromProto+1c
fffff800`030e105c 488b01		 mov	 rax,qword ptr [rcx]
CONTEXT: fffff88006461dc0 -- (.cxr 0xfffff88006461dc0)
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000000000
rdx=00000000ffffffff rsi=fffffa800abe03f8 rdi=fffffa800bdce3c0
rip=fffff800030e105c rsp=fffff880064627a0 rbp=0000000000000000
r8=0000000000000180 r9=0000000000000000 r10=ffffffffffffffff
r11=0000000000000830 r12=0000000000000011 r13=0000000000000001
r14=fffffa8000b203b0 r15=fffffa8009952520
iopl=0		 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b			 efl=00210286
nt!MiCaptureProtectionFromProto+0x1c:
fffff800`030e105c 488b01		 mov	 rax,qword ptr [rcx] ds:002b:00000000`00000000=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: opera.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff800030e105c
STACK_TEXT:
fffff880`064627a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiCaptureProtectionFromProto+0x1c

FOLLOWUP_IP:
nt!MiCaptureProtectionFromProto+1c
fffff800`030e105c 488b01		 mov	 rax,qword ptr [rcx]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiCaptureProtectionFromProto+1c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 503f82be
STACK_COMMAND: .cxr 0xfffff88006461dc0 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x3B_nt!MiCaptureProtectionFromProto+1c
BUCKET_ID: X64_0x3B_nt!MiCaptureProtectionFromProto+1c
Followup: MachineOwner
---------

 

I can't seem to find my motherboard in the device manager and I don't remember what the motherboard was. Is there some way to figure this out?

That does make sense as the two processes causing problems because I'm either watching TV shows on Windows Media Player or browsing the internet.

 

A free program called Speccy will amongst other things tell you which mother board you have. Download from the link below.

http://www.piriform.com/speccy/download

Be sure to choose the Free version once you get to the download page.