Thread: Solved Always 0x0000001e BSOD
View Single Post
26 Oct 2010  

Windows 7 Ultimate 32 bit

One thing you can do is, using restore points, to restore your computer to a point in time before you installed the survey software. See if that stops your BSOD's. You can always reinstall the software.

That said, I looked at your dump. It indicates memory corruption and I still see out of date drivers that can cause memory corruption crashes and are highly suspect. Please update these drivers or uninstall the obsolete software to which they belong.
adfs.SYS Thu Jun 26 16:52:37 2008 - Adobe File System Driver

atksgt.sys Sun May 17 09:36:34 2009 - part of a Copy Protection platform developed by Tages SA, TAGES, the AAA Copy Protection System

ElbyCDFL.sys Thu Dec 14 16:22:27 2006 - ElbyCDIO Filter Driver belongs to CloneCD by SlySoft, Inc ( or Elaborate Bytes or Elaborate Bytes AG ( This software is XP software and is obsolete. Completely uninstall it and upgrade to the latest version from Slysoft.

LHidFilt.Sys Wed Jun 17 12:49:39 2009 - Logitech SetPoint HID Filter Driver Downloads

lirsgt.sys Sun May 17 09:06:57 2009 - part of a Copy Protection platform developed by Tages SA TAGES, the AAA Copy Protection System

LMouFilt.Sys Wed Jun 17 12:49:43 2009 - Logitech SetPoint HID Filter Driver Downloads

SSPORT.sys Thu Aug 11 19:07:32 2005 - Samsung printer driver Samsung' This is an XP driver. Update it.

teamviewervpn.sys Thu Dec 13 04:22:09 2007 - TeamViewerVPN Network AdapterTeamViewer GmbH. This version of Team Viewer is obsolete. I suggest that you completely uninstall it, download and install the latest version.
Error code 7F, UNEXPECTED_KERNEL_MODE_TRAP. Usual causes: Memory corruption, Hardware (memory in particular), Installing a faulty or mismatched hardware (especially memory) or a failure after installing it, 3rd party firewall, Device drivers, SCSI/network/BIOS updates needed, Improperly seated cards, Incompatible storage devices, Overclocking, Virus scanner, Backup tool, Bad motherboard, Missing Service Pack.
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e1b000 PsLoadedModuleList = 0xfffff800`03058e50
Debug session time: Tue Oct 26 12:03:21.619 2010 (GMT-4)
System Uptime: 0 days 1:41:35.679
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 6f8, fffff80002ec5948}

Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )

Followup: MachineOwner

3: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
kb will then show the corrected stack.
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80002ec5948

Debugging Details:




PROCESS_NAME:  svchost.exe


EXCEPTION_RECORD:  fffff88008c476b8 -- (.exr 0xfffff88008c476b8)
ExceptionAddress: fffff80002eb89bf (nt!RtlDispatchException+0x000000000000033f)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000008c48d70
Attempt to read from address 0000000008c48d70

TRAP_FRAME:  fffff88008c46680 -- (.trap 0xfffff88008c46680)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000050 rbx=0000000000000000 rcx=fffff80002eb89a3
rdx=0000000008c48d70 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002eb89bf rsp=fffff88008c46810 rbp=0000000000000293
 r8=0000000000000006  r9=0000000000000837 r10=fffff88008c48c20
r11=fffff88008c46858 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe nc
fffff800`02eb89bf 488b02          mov     rax,qword ptr [rdx] ds:00000000`08c48d70=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e8aca9 to fffff80002e8b740

fffff880`031dbce8 fffff800`02e8aca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff880`031dbcf0 fffff800`02e89172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`031dbe30 fffff800`02ec5948 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`08c42b70 fffff800`02e8ad82 : fffff880`08c43338 00000000`00000001 fffff880`08c433e0 fffff800`02e1b000 : nt!KiDispatchException+0xc8
fffff880`08c43200 fffff800`02e898fa : 00000000`00000000 00000000`00000001 00300042`00370000 005f005f`005f005f : nt!KiExceptionDispatch+0xc2
fffff880`08c433e0 fffff800`02eb89bf : fffff800`02e8a993 fffff880`08c435b8 fffff880`08c44418 fffff800`02e1b000 : nt!KiPageFault+0x23a
fffff880`08c43570 fffff800`02ec59ef : fffff880`08c44418 fffff880`08c43c80 fffff880`00000000 fffff800`00000004 : nt!RtlDispatchException+0x33f
fffff880`08c43c50 fffff800`02e8ad82 : fffff880`08c44418 00000000`00000001 fffff880`08c444c0 fffff800`02e1b000 : nt!KiDispatchException+0x16f
fffff880`08c442e0 fffff800`02e898fa : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`08c444c0 fffff800`02eb89bf : fffff800`02e8a993 fffff880`08c44698 fffff880`08c454f8 fffff800`02e1b000 : nt!KiPageFault+0x23a
fffff880`08c44650 fffff800`02ec59ef : fffff880`08c454f8 fffff880`08c44d60 fffff880`00000000 fffff800`00000004 : nt!RtlDispatchException+0x33f
fffff880`08c44d30 fffff800`02e8ad82 : fffff880`08c454f8 00000000`00000001 fffff880`08c455a0 fffff800`02e1b000 : nt!KiDispatchException+0x16f
fffff880`08c453c0 fffff800`02e898fa : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`08c455a0 fffff800`02eb89bf : fffff800`02e8a993 fffff880`08c45778 fffff880`08c465d8 fffff800`02e1b000 : nt!KiPageFault+0x23a
fffff880`08c45730 fffff800`02ec59ef : fffff880`08c465d8 fffff880`08c45e40 fffff880`00000000 fffff800`00000004 : nt!RtlDispatchException+0x33f
fffff880`08c45e10 fffff800`02e8ad82 : fffff880`08c465d8 00000000`00000001 fffff880`08c46680 fffff800`02e1b000 : nt!KiDispatchException+0x16f
fffff880`08c464a0 fffff800`02e898fa : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`08c46680 fffff800`02eb89bf : fffff800`02e8a993 fffff880`08c46858 fffff880`08c476b8 fffff800`02e1b000 : nt!KiPageFault+0x23a
fffff880`08c46810 fffff800`02ec59ef : fffff880`08c476b8 fffff880`08c46f20 fffff880`00000000 fffff800`00000004 : nt!RtlDispatchException+0x33f
fffff880`08c46ef0 fffff800`02e8ad82 : fffff880`08c476b8 00000000`00000001 fffff880`08c47760 fffff800`02e1b000 : nt!KiDispatchException+0x16f
fffff880`08c47580 fffff800`02e898fa : 00000000`00000000 00000000`00000001 fffff880`08c47d00 fffffa80`06ca7af0 : nt!KiExceptionDispatch+0xc2
fffff880`08c47760 fffff800`02eb89bf : fffff800`02e8a993 fffff880`08c47938 fffff880`08c48798 fffff800`02e1b000 : nt!KiPageFault+0x23a
fffff880`08c478f0 fffff800`02ec59ef : fffff880`08c48798 fffff880`08c48000 fffff880`00000000 fffffa80`0a87f060 : nt!RtlDispatchException+0x33f
fffff880`08c47fd0 fffff800`02e8ad82 : fffff880`08c48798 0000000e`58a5efe9 fffff880`08c48840 fffffa80`08a145a0 : nt!KiDispatchException+0x16f
fffff880`08c48660 fffff800`02e8968a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`08c48840 fffff800`02e929cd : 7ffff800`02e962a1 00000000`00000001 00000000`00000000 fffff880`000000e1 : nt!KiGeneralProtectionFault+0x10a
fffff880`08c489d8 7ffff800`02e962a1 : 00000000`00000001 00000000`00000000 fffff880`000000e1 fffff800`02e9d456 : nt!KiCommitThreadWait+0x20d
fffff880`08c489e0 00000000`00000001 : 00000000`00000000 fffff880`000000e1 fffff800`02e9d456 00000000`00000001 : 0x7ffff800`02e962a1
fffff880`08c489e8 00000000`00000000 : fffff880`000000e1 fffff800`02e9d456 00000000`00000001 ffffffff`ff69168f : 0x1



IMAGE_NAME:  ntkrnlmp.exe

FOLLOWUP_NAME:  MachineOwner


fffff800`02e89172 90              nop


SYMBOL_NAME:  nt!KiDoubleFaultAbort+b2



Followup: MachineOwner
My System SpecsSystem Spec