Windows 7: BSOD after editing hosts file and running warcraft 3?

Hetch · 02 Sep 2010

Hello, this is my second BSOD so far. i had one analysed months back, and this is my second. this is what i got after restarting my laptop:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 18441

Additional information about the problem:
BCCode: 50
BCP1: D1494000
BCP2: 00000000
BCP3: 83468243
BCP4: 00000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\090210-55863-01.dmp
C:\Users\Valued Acer Customer\AppData\Local\Temp\WER-112741-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
i used the SF Diag Tool V3 that i downloaded from the forums since my last BSOD. not sure what to include so i got everything i could with the tool. however, there was an error accessing my event logs. there are the event files in the attachments though.

Please help me out.

any help is much appreciated!

usasma · 03 Sep 2010

Unfortunately, the Windows Debugging Tools aren't able to access symbols for your operating system files (in particular NTOSKRNL.EXE / NTKRNLMP.EXE / NTKRNLPA.EXE / NTKRPAMP.EXE) from the Microsoft Symbol Server - so that makes debugging them difficult if not impossible.

Please do the following (this will not affect the analysis of the current files - but it may help later files that are acquired):
- activate/validate the Windows installation at Genuine Microsoft Software
- run sfc.exe /scannow to replace any problem files
- open a support incident with Microsoft to see if they can fix the missing symbols issue ( Windows 7 Solution Center )
- If that doesn't fix it, then wipe the hard drive and reinstall Windows
- don't use "leaked"/torrent builds

So, let's start with what we do know:

First -
Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the Norton from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of Norton using this free tool: KB Article Not Found
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's

Next -
There is a driver named safedrv.sys involved in the crash also.
Please remove the program and test for further BSOD's
If you can't remove the program, then go to C:\Windows\System32\drivers and rename safedrv.sys to safedrv.BAK

Then test for further BSOD's.

BSOD BUGCHECK SUMMARY

Code:


*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrnlmp.exe - 
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Debug session time: Thu Sep  2 05:52:55.576 2010 (UTC - 4:00)
System Uptime: 3 days 22:08:16.090
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrnlmp.exe - 
*** WARNING: Unable to verify timestamp for safedrv.sys
*** ERROR: Module load completed but symbols could not be loaded for safedrv.sys
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
BUGCHECK_STR:  0x50
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Tue Jul 20 00:20:06.002 2010 (UTC - 4:00)
System Uptime: 0 days 0:23:50.141
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
BugCheck 9F, {4, 258, 857cda70, 83573b24}
*** WARNING: Unable to verify timestamp for GEARAspiWDM.sys
*** ERROR: Module load completed but symbols could not be loaded for GEARAspiWDM.sys
Probably caused by : GEARAspiWDM.sys ( GEARAspiWDM+2d25 )
BUGCHECK_STR:  0x9F
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Tue Jun 29 11:08:28.096 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:18.610
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
BUGCHECK_STR:  0x6B
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Hetch · 08 Sep 2010

my antivirus is Symantec Endpoint Protection. it came free installed as a package into my laptop. i bought this laptop from an IT fair in my school for school purposes, so there was a configuration to install essential programs specifically for my coursework.

btw, how do you test for BSOD's? just wait and see if anymore BSOD's pop up?

-EDIT-
i did a validation of my OS and it's genuine. and i also updated my Symantec anti-virus. does that help?

Jonathan_King · 08 Sep 2010

Hopefully the update will help. If not, the next step is to remove it completely.

The true test for BSODs is just waiting for them, but if you want to try to expedite them, you can enable driver verifier: Driver Verifier - Enable and Disable

Unless you are in a hurry, such as you need to make sure your computer is stable before you leave for school, I would advice just using your computer normally.

Windows 7: BSOD after editing hosts file and running warcraft 3?

BSOD after editing hosts file and running warcraft 3? problems?