Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: recurring blue screens


10 Sep 2010   #1

Windows 7 Home 64bit
 
 
recurring blue screens

Hello,
I am running Windows 7 /64 bits on a brand new system Asus M4A89TD Pro/ USB3 with AMD64 (phenom II) configuration and experience from time to time a blue screen (once per day).
Contrarily to inital suspicions, I can state that this is not a RAM issue : firstly because I do not experience any problem on Ubuntu 10.04.1 /amd64 on the same hardware, and secondly because a full memtest loop during a whole night did not reveal any issue with the memory.
I had my first crash on windows when I tried to install PCTools antispyware (at the beginning of the installation process). I am also running ZoneAlarm Pro /64 bits and did not remove it yet. I am not convinced that ZA is the culprit because I experienced crash outside browsing activities.
I attach the whole config as recommended, taken before the last 3 crashes.
I also include below an output of "whocrashed" which shows that 90% of the time the bugcheck code is totally identical: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C45D28)
Help and advice will be appreciated.
Many thanks in advance.

Output of "whocrashed":
------------------------------
This program checks for drivers which have been crashing your computer.
Whenever a computer suddenly reboots without displaying any notice or blue screen of death, the first thing that is often though about is a hardware failure. In reality, on Windows most crashes are caused by malfunctioning device drivers and kernel modules. In case of a kernel error, most computers do not show a blue screen unless they are configured to do so. Instead these systems suddenly reboot without any notice.
This program does post-mortem crash dump analysis with the single click of a button.

To obtain technical support visit www.resplendence.com/support
To check if a newer version of this program is available, click here.
Just click the Analyze button for a comprehensible report ...

--------------------------------------------------------------------------------
Home Edition notice
--------------------------------------------------------------------------------
This version of WhoCrashed is free for use at home only. If you would like to use this software at work or in a commercial environment you should get the professional edition. The professional edition of WhoCrashed also allows analysis of crashdumps on remote drives and computers on the network and offers more detailed analysis.

--------------------------------------------------------------------------------
Analysis
--------------------------------------------------------------------------------
Crash dump directory: C:\Windows\Minidump
Crash dumps are enabled on your computer.

On Fri 10/09/2010 04:38:05 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C45D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\091010-16224-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Thu 09/09/2010 19:34:28 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C38D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090910-18969-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Thu 09/09/2010 05:04:39 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C55D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090910-15085-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Thu 09/09/2010 05:00:14 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002CA0EC8)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090910-17331-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Tue 07/09/2010 15:16:34 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C8CD28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090710-15319-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Tue 07/09/2010 12:08:00 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C44EC8)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090710-23992-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 06/09/2010 05:17:10 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C39D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090610-16114-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 06/09/2010 05:13:14 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C38D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090610-18564-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 06/09/2010 04:23:53 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C86D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090610-19078-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Sun 05/09/2010 08:29:22 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C89D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090510-16754-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Sun 05/09/2010 05:33:25 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C92D28)
Error: UNEXPECTED_KERNEL_MODE_TRAP
Dump file: C:\Windows\Minidump\090510-19375-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 16/08/2010 19:28:15 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x19 (0x22, 0xFFFFF8A00109A000, 0x1, 0x0)
Error: BAD_POOL_HEADER
Dump file: C:\Windows\Minidump\081610-25615-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.


--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------
12 crash dumps have been found and analyzed. Note that it's not always possible to state with certainty whether a reported driver is really responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.

My System SpecsSystem Spec
.

10 Sep 2010   #2

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

Uninstall Zone alarm or use the hot fixZone Alarm Uninstall Tool http://forums.zonealarm.com/showthread.php?t=70034 and hotfix
http://support.microsoft.com/kb/981180

Code:
 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp4_Windows_NT6_BSOD_jcgriff2[1].zip\Windows_NT6_BSOD_jcgriff2\090710-15319-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c54000 PsLoadedModuleList = 0xfffff800`02e91e50
Debug session time: Tue Sep  7 11:15:28.734 2010 (GMT-4)
System Uptime: 0 days 0:14:23.045
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff80002c8cd28}
Probably caused by : NETIO.SYS ( NETIO!CompareSecurityContexts+6a )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80002c8cd28
Debugging Details:
------------------
 
BUGCHECK_STR:  0x7f_8
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
CURRENT_IRQL:  2
LAST_CONTROL_TRANSFER:  from fffff80002cc3ca9 to fffff80002cc4740
STACK_TEXT:  
fffff880`009efd68 fffff800`02cc3ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff880`009efd70 fffff800`02cc2172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009efeb0 fffff800`02c8cd28 : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`02f16000 fffff800`02c8cf07 : fffffa80`07b9d7c8 00000000`00000001 00000426`00000000 00000426`00000000 : nt!SepTokenFromAccessInformation+0x20
fffff880`02f16030 fffff880`0159fc5a : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : nt!SeAccessCheckFromState+0x9f
fffff880`02f16720 fffff880`0159d94f : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : NETIO!CompareSecurityContexts+0x6a
fffff880`02f16790 fffff880`0159f9b5 : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : NETIO!MatchValues+0xef
fffff880`02f167e0 fffff880`0159f845 : fffffa80`09552160 fffffa80`09c3eb50 fffff880`02f16a08 fffff880`02f17140 : NETIO!FilterMatch+0x95
fffff880`02f16830 fffff880`015a0ccb : 00000000`00000000 00000000`00000000 fffff880`02f17140 fffff880`02f169f0 : NETIO!IndexListClassify+0x69
fffff880`02f168b0 fffff880`0163d417 : fffff880`02f16d88 fffff880`02f16d88 fffff880`02f17ac0 fffffa80`09b7baa0 : NETIO!KfdClassify+0xa4e
fffff880`02f16c20 fffff880`0163683e : fffff880`01745690 00000000`00000000 fffffa80`09712920 00000000`00000000 : tcpip!WfpAleClassify+0x57
fffff880`02f16c60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
NETIO!CompareSecurityContexts+6a
fffff880`0159fc5a 448b442470      mov     r8d,dword ptr [rsp+70h]
SYMBOL_STACK_INDEX:  5
SYMBOL_NAME:  NETIO!CompareSecurityContexts+6a
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME:  NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP:  4bbe946f
FAILURE_BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
Followup: MachineOwner
---------
I chekced a portion of your reports. Most seem to indicate Zone Alarm
What I see seems to differ from your ananlysis, probably not using the debugger.

If problems continue please repost with the mini dump reports.
My System SpecsSystem Spec
10 Sep 2010   #3

Windows 7 Home 64bit
 
 

OK, thank you for your hint. I will then uninstall ZA and see what the result is.
In the meantime, I got a crash of an ADSL router, so I am not communicating on my own system. If I can fix that one, I will be able to update this thread soon with my feedback. Thank you anyway for having been so quick.
One quick question though : is it normal that companies sell software like PCTools or ZA and claim to be compatible with Windows 7/64 when, considering the speed of your answer, they are apparently not ?
My System SpecsSystem Spec
.


10 Sep 2010   #4

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

Software is tested and finally approved, but then it takes the thousands of users to put it to the real test. The test of Windows and Zone Alarm has proven to have problems.
The extent of the problem is shown by the fact that MS has even come out with a hot fix, which is suppose rectify the situation.
At this point, I am only sure that your reports indicate that the problem is Zone Alarm, if you follow my directions and problems still occur, just repost. The Zone Alarm situation has indeed been at least part of the problem.

I suggest that you uninstall your current Anti Virus and use Microsoft Security Essentials, Malwarebyte and the Windows Fire Wall. Although not required for the BSOD problem, it would be a good combination for great protection and a replacement for Zone Alarm

Your report show netio as a cause, This in conjuction with the driver that was being used at the time of the crash vsdatant.sys, indicates Zone Alarm
My System SpecsSystem Spec
11 Sep 2010   #5

Windows 7 Home 64bit
 
 

no problem since I removed ZA...

I was getting desperate with blue screens having bought such an expensive equipment and certified softwares.
I sincerely thank you for your diagnosis which seems to be the right one.
My System SpecsSystem Spec
11 Sep 2010   #6

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium SP1, clean install, upgrade disc
 
 

These reports are not always so accurate. The ZA BC code is usually precise. I do not think that you will have any more problems, Good luck.
My System SpecsSystem Spec
Reply

 recurring blue screens




Thread Tools



Similar help and support threads for2: recurring blue screens
Thread Forum
Recurring random blue screens BSOD Help and Support
Solved Rogue Blue screens/Black screens BSOD Help and Support
Blue Screens started out of the blue. BSOD Help and Support
1.Recurring Blue Screens. 2. System hangs alot while browsing BSOD Help and Support
Recurring Blue Screen BSOD Help and Support
recurring blue screens, again BSOD Help and Support
Recurring Blue Screen BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:15 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33