Thread: Solved BSOD crashing programs
View Single Post
27 Oct 2012  

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium 64Bit

Welcome to seven forums, and in addition to David aka Maguscreeds good points.

I've taken a quick look at your dmp's, they come with various bug checks and stuff but let me just share my experience with recent OP's here at first, that is when I tell them to uninstall that one program they tell me they do not want to and I end up saying them I cannot help them. One of your dump clearly indicates which driver/program is causing the blue screens for you and I'm afraid that if I ask you to uninstall it you may be reluctant like all other OP's as it's something "you paid/subscribed for"

It's Norton.
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck FC, {fffff8a00e943c00, c10000017b6df963, fffff88007661f80, 2}

*** WARNING: Unable to verify timestamp for SYMDS64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMDS64.SYS
Probably caused by : SYMDS64.SYS ( SYMDS64+193c9 )

Followup: MachineOwner

1: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An attempt was made to execute non-executable memory.  The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arg1: fffff8a00e943c00, Virtual address for the attempted execute.
Arg2: c10000017b6df963, PTE contents.
Arg3: fffff88007661f80, (reserved)
Arg4: 0000000000000002, (reserved)

Debugging Details:

OVERLAPPED_MODULE: Address regions for 'ENG64' and 'ENG64.SYS' overlap




PROCESS_NAME:  ccsvchst.exe


TRAP_FRAME:  fffff88007661f80 -- (.trap 0xfffff88007661f80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000052 rbx=0000000000000000 rcx=0000000000000004
rdx=fffff8a00e943c40 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8a00e943c00 rsp=fffff88007662110 rbp=fffff8a00e943c00
 r8=0000000000000900  r9=00000000000003c9 r10=0000000000000005
r11=fffff8a00e943c40 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
fffff8a0`0e943c00 78b5            js      fffff8a0`0e943bb7              [br=1]
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003027bb4 to fffff8000307ffc0

fffff880`07661e18 fffff800`03027bb4 : 00000000`000000fc fffff8a0`0e943c00 c1000001`7b6df963 fffff880`07661f80 : nt!KeBugCheckEx
fffff880`07661e20 fffff800`0307e0ee : 00000000`00000008 fffff8a0`0e943c00 00000000`00000000 fffff8a0`040db9d8 : nt! ?? ::FNODOBFM::`string'+0x44dbc
fffff880`07661f80 fffff8a0`0e943c00 : fffff8a0`040db9d8 fffff8a0`040db9d8 fffff8a0`0e943c00 fffff880`014d03c9 : nt!KiPageFault+0x16e
fffff880`07662110 fffff8a0`040db9d8 : fffff8a0`040db9d8 fffff8a0`0e943c00 fffff880`014d03c9 fffff8a0`00000005 : 0xfffff8a0`0e943c00
fffff880`07662118 fffff8a0`040db9d8 : fffff8a0`0e943c00 fffff880`014d03c9 fffff8a0`00000005 fffff8a0`10d52670 : 0xfffff8a0`040db9d8
fffff880`07662120 fffff8a0`0e943c00 : fffff880`014d03c9 fffff8a0`00000005 fffff8a0`10d52670 00000000`00000906 : 0xfffff8a0`040db9d8
fffff880`07662128 fffff880`014d03c9 : fffff8a0`00000005 fffff8a0`10d52670 00000000`00000906 00000000`00000000 : 0xfffff8a0`0e943c00
fffff880`07662130 fffff8a0`00000005 : fffff8a0`10d52670 00000000`00000906 00000000`00000000 fffff880`076621f0 : SYMDS64+0x193c9
fffff880`07662138 fffff8a0`10d52670 : 00000000`00000906 00000000`00000000 fffff880`076621f0 fffff880`00000000 : 0xfffff8a0`00000005
fffff880`07662140 00000000`00000906 : 00000000`00000000 fffff880`076621f0 fffff880`00000000 fffff8a0`00000000 : 0xfffff8a0`10d52670
fffff880`07662148 00000000`00000000 : fffff880`076621f0 fffff880`00000000 fffff8a0`00000000 fffff8a0`00000000 : 0x906


fffff880`014d03c9 ??              ???



FOLLOWUP_NAME:  MachineOwner





BUCKET_ID:  X64_0xFC_SYMDS64+193c9

Followup: MachineOwner

1: kd> lmvm SYMDS64
start             end                 module name
fffff880`014b7000 fffff880`01528000   SYMDS64  T (no symbols)           
    Loaded symbol image file: SYMDS64.SYS
    Image path: \SystemRoot\system32\drivers\NISx64\1309000.009\SYMDS64.SYS
    Image name: SYMDS64.SYS
    Timestamp:        Tue May 17 04:15:03 2011 (4DD1A1E7)
    CheckSum:         0007D541
    ImageSize:        00071000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
SYMDS64.SYS Symantec/ Norton NIS/ N360 driver = Driver Reference Table
ENG64.SYS Norton Anti-Virus = Driver Reference Table
Start Menu\Programs\Norton Internet Security	Public:Start Menu\Programs\Norton Internet Security	Public
Your blue screen problems might be solved if you completely remove Norton, but I do not expect you to. You might come back to me saying what I've heard from the other OP's. This problem may be even solved by "buying" the latest version of Norton, but I wouldn't recommend that as it's your choice after all.

I also see that you have Malware Bytes and Microsoft Security Essentials already installed on your computer. Those are by far the best and are suggested by many members on our forum. And oh btw, keep only one antivirus on your computer as keeping both MSE and Norton will be causing conflicts.

These GigaBYTE utilities are also somewhat buggy to the windows 7 OS. I would suggest you to uninstall them using the Advanced Mode of Revo Uninstaller - Free. They cause problems during gaming as well.
Start Menu\Programs\GIGABYTE	Public:Start Menu\Programs\GIGABYTE	Public
Start Menu\Programs\GIGABYTE\AutoGreen	Public:Start Menu\Programs\GIGABYTE\AutoGreen	Public
Start Menu\Programs\GIGABYTE\ET6	Public:Start Menu\Programs\GIGABYTE\ET6	Public
After uninstalling the programs listed above do the following:
Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:Run Disk Check on your hard disk for file system errors and bad sectors on it:Hope this helps return stability of your computer.

Good luck
My System SpecsSystem Spec