[DecDenAngie]

My 14 month old computer (Dell) keeps shutting down and giving me a box stating "windows has recovered from an unexpected shutdown" which I see lots of folks have had this issue. When the computer decides it has to shut down I get a blue screen that only stays for a second or 2 and I haven't been able to read all that it says. Dell did lots of diagnostic tests and they want me to wipe the harddrive. They sold me an external harddrive and I've tried twice to back up to this external harddrive and both times it has shut the computer down and given me the box stating "windows has recovered from an unexpected shutdown". The computer is backed up w/ Carbonite, but if you've ever had to restore your entire computer it takes days. I really don't want to wipe the hd if there is another solution.

[Advertisements]

Lets try a couple of steps and see what shows up.

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Thanks to Broni for the instructions and program






Please download and run Hardware Monitor
Installation (setup version only)
HWMonitor is a hardware monitoring program that reads PC systems main health sensors : voltages, temperatures, fans speed.
The program handles the most common sensor chips, like ITE® IT87 series, most Winbond® ICs, and others. In addition, it can read modern CPUs on-die core thermal sensors, as well has hard drives temperature via S.M.A.R.T, and video card GPU temperature.

[rshaffer61]

Lets try a couple of steps and see what shows up.

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Thanks to Broni for the instructions and program






Please download and run Hardware Monitor
Installation (setup version only)
HWMonitor is a hardware monitoring program that reads PC systems main health sensors : voltages, temperatures, fans speed.
The program handles the most common sensor chips, like ITE® IT87 series, most Winbond® ICs, and others. In addition, it can read modern CPUs on-die core thermal sensors, as well has hard drives temperature via S.M.A.R.T, and video card GPU temperature.

[DecDenAngie]

Here it is...
==================================================
Dump File : 013113-12901-01.dmp
Crash Time : 1/31/2013 5:09:21 PM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff800`031b20f1
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+7efc0
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.17944 (win7sp1_gdr.120830-0333)
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\013113-12901-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 013113-12480-01.dmp
Crash Time : 1/31/2013 2:44:14 PM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`01193756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\013113-12480-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 013113-13743-01.dmp
Crash Time : 1/31/2013 1:41:51 PM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`0102a756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\013113-13743-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 013113-13946-01.dmp
Crash Time : 1/31/2013 1:36:17 PM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`00c2a756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\013113-13946-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 013113-11715-01.dmp
Crash Time : 1/31/2013 11:10:52 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`013d2756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\013113-11715-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 013013-10093-01.dmp
Crash Time : 1/30/2013 11:02:19 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`013c2756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\013013-10093-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 012913-11793-01.dmp
Crash Time : 1/29/2013 11:01:14 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`01035756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012913-11793-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 012813-18610-01.dmp
Crash Time : 1/28/2013 11:01:28 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`0102a756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012813-18610-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 012713-11544-01.dmp
Crash Time : 1/27/2013 11:01:19 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`01243756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012713-11544-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 012713-15958-01.dmp
Crash Time : 1/27/2013 3:03:05 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`0a0b6a94
Caused By Driver : TmPreFlt.sys
Caused By Address : TmPreFlt.sys+2a94
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012713-15958-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

==================================================
Dump File : 012613-26301-01.dmp
Crash Time : 1/26/2013 11:01:47 AM
Bug Check String : UNEXPECTED_KERNEL_MODE_TRAP
Bug Check Code : 0x0000007f
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`80050031
Parameter 3 : 00000000`000406f8
Parameter 4 : fffff880`01196756
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+2a756
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7efc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012613-26301-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 275,152
==================================================

[DecDenAngie]

The Hardware Monitor made the computer shut down, so I was afraid to try it again.

[rshaffer61]

I'm thinking you may have a driver issue, memory issue or a heat issue. Below is the explanation of your bug check code which indicates a possible memory corruption.

0x0000007F: UNEXPECTED_KERNEL_MODE_TRAP
One of three types of problems occurred in kernel-mode: (1) Hardware failures. (2) Software problems. (3) A bound trap (i.e., a condition that the kernel is not allowed to have or intercept). Hardware failures are the most common cause (many dozen KB articles exist for this error referencing specific hardware failures) and, of these, memory hardware failures are the most common.

A If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...


1. Download - Pre-Compiled Bootable ISO (.zip). If you prefer to use the USB version then use this link USB KEY
2. Unzip downloaded /memtest86+-4.20.iso.zip file.
3. Inside, you'll find /memtest86+-4.20.iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:



8. Locate memtest86+-4.20.iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:



10. Once the CD is created, boot from it, and memtest will automatically start to run. You may have to change the boot sequence in your BIOS to make it work right.

To change Boot Sequence in your BIOS

Reboot the system and at the first post screen (where it is counting up memory) start tapping the DEL button
This will enter you into the Bios\Cmos area.
Find the Advanced area and click Enter
Look for Boot Sequence or Boot Options and highlight that click Enter
Now highlight the first drive and follow the directions on the bottom of the screen on how to modify it and change it to CDrom.
Change the second drive to the C or Main Drive
Once that is done then click F10 to Save and Exit
You will prompted to enter Y to verify Save and Exit. Click Y and the system will now reboot with the new settings.


The running program will look something like this depending on the size and number of ram modules installed:




It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.



The following image is the test results area:



The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.

[DecDenAngie]

This is probably way over my head. I was able to do all the downloads and put the memtest on the CD. When i do the reboot it takes me to the Windows Boot Manager and I have the advanced option F8, but under that the only option that has anything to do w/ boot just starts the computer as normal. It said in the description it would create a file of some sort. I tried to use the PrtScn, but it came up blank. Hate to be such a dummy, but can you give me a better way to get to the Boot Options? Thanks for your help!

[rshaffer61]

You need to go into the bios and set the bott sequence so that the cdrom is the first boot device.

[DecDenAngie]

You need to go into the bios and set the bott sequence so that the cdrom is the first boot device.

I have no idea how to do this other than the instructions provided previously. When I tap the DEL button it takes me to the Window Boot Manager. If that is where I am supposed to be I don't understand how to get to the Bios/Cmos area.

[rshaffer61]

Enter the System Setup on the Computer

Restart your computer.
At the first text on the screen or when the Dell™ logo appears, tap <F2> until the message Entering Setup appears.

[DecDenAngie]

OK, the F2 was the ticket. I ran 5 passes and no errors. I look a picture of the test screen, is there anything else I can tell you from that diagnostic test? What should I look at next?

[rshaffer61]

If there were no red lines in the results then the issue is not the memory.
Next we check the disk integrity by doing the following.
Tutorial for running chkdsk in Vista\Win 7 located HERE.

[DecDenAngie]

I'll report back as soon as it finishes - thank you!!

[DecDenAngie]

If there were no red lines in the results then the issue is not the memory.
Next we check the disk integrity by doing the following.
Tutorial for running chkdsk in Vista\Win 7 located HERE

Done. When I left to run some errands, it was all clear so far and was running 5/5 w/ no errors at that point. I just got back and the computer was on the home or wallpaper screen w/ no message box. Should I try to check and see some sort of a report? What would you suggest I try next?

Edited by DecDenAngie, 01 February 2013 - 04:47 PM.

[rshaffer61]

no report to check for but except looking at the vent viewer.

[DecDenAngie]

From looking I assume you mean event viewer? Can you tell me what to look for?