Often BSOD and Crashes

Hi,

It seems CCleaner is deleting the dump files; please disable the program for the time being.

Code:

Event[202]:
  Log Name: Application
  Source: Windows Error Reporting
  Date: 2011-01-26T18:55:59.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Jimi-PC
  Description: 
Fault bucket 0xA_VRF_SYMEVENT!SYMEvent_IrpHandlerInstall+1499, type 0
Event Name: BlueScreen
Response: http://wer.microsoft.com/responses/resredir.aspx?sid=10&Bucket=0xA_VRF_SYMEVENT!SYMEvent_IrpHandlerInstall+1499&ID=dab34d3e-ec11-4ae8-88de-a66514929604
Cab Id: 0

Problem signature:
P1: 
P2: 
P3: 
P4: 
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
C:\Windows\Minidump\012611-28423-01.dmp
C:\Users\Jimi\AppData\Local\Temp\WER-180633-0.sysdata.xml
C:\Users\Jimi\AppData\Local\Temp\WERF257.tmp.WERInternalMetadata.xml

These files may be available here:
C:\Users\Jimi\AppData\Local\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_152b0f6b

Analysis symbol: 0xA_VRF_SYMEVENT!SYMEvent_IrpHandlerInstall+1499
Rechecking for solution: 0
Report Id: 012611-28423-01
Report Status: 0



Event[839]:
  Log Name: Application
  Source: Windows Error Reporting
  Date: 2011-01-23T08:22:10.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Jimi-PC
  Description: 
Fault bucket 0x8E_VRF_SYMDS+4f95, type 0
Event Name: BlueScreen
Response: http://wer.microsoft.com/responses/resredir.aspx?sid=10&Bucket=0x8E_VRF_SYMDS+4f95&ID=accc76a5-0ac2-4d7c-9ae3-b8243707cd62
Cab Id: 0

Problem signature:
P1: 
P2: 
P3: 
P4: 
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
C:\Windows\Minidump\012011-23384-01.dmp
C:\Users\Jimi\AppData\Local\Temp\WER-89762-0.sysdata.xml
C:\Users\Jimi\AppData\Local\Temp\WERB089.tmp.WERInternalMetadata.xml

These files may be available here:
C:\Users\Jimi\AppData\Local\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_17bd1332

Analysis symbol: 0x8E_VRF_SYMDS+4f95
Rechecking for solution: 0
Report Id: 012011-23384-01
Report Status: 0

I see Norton blamed, so if that is still installed, remove it according to these directions: Norton Product Support | Installation and Uninstall

Replace it with MSE: http://www.microsoft.com/security_essentials

Also, SPTD was directly blamed:

Code:

Event[560]:
  Log Name: Application
  Source: Windows Error Reporting
  Date: 2011-01-25T05:47:37.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Jimi-PC
  Description: 
Fault bucket 0xD1_VRF_sptd+18a29, type 0
Event Name: BlueScreen
Response: http://wer.microsoft.com/responses/resredir.aspx?sid=10&Bucket=0xD1_VRF_sptd+18a29&ID=30d267a4-75f6-4f42-b6d0-7bc33fbed2bc
Cab Id: 0

Problem signature:
P1: 
P2: 
P3: 
P4: 
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
C:\Windows\Minidump\012511-19921-01.dmp
C:\Users\Jimi\AppData\Local\Temp\WER-12614880-0.sysdata.xml
C:\Users\Jimi\AppData\Local\Temp\WERA528.tmp.WERInternalMetadata.xml

These files may be available here:
C:\Users\Jimi\AppData\Local\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_1408a2e3

Analysis symbol: 0xD1_VRF_sptd+18a29
Rechecking for solution: 0
Report Id: 012511-19921-01
Report Status: 0

Uninstall Daemon Tools, and then remove SPTD with this tool: http://www.duplexsecure.com/download...t-v174-x86.exe

Hopefully those 2 things will do the trick. If not, post back with a new report.

At the time of those crashes, SPTD was still installed. I see you have removed Daemon Tools, but the actual SPTD driver is still there. Use this tool to remove it completely: http://www.duplexsecure.com/download...t-v174-x86.exe

...Summary of the dumps:

Code:

Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Debug session time: Wed Jan 26 22:14:32.841 2011 (UTC - 5:00)
System Uptime: 0 days 0:00:26.090
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : volmgr.sys ( volmgr!VmpReadWriteCompletionRoutine+19 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xD1_VRF_volmgr!VmpReadWriteCompletionRoutine+19
SystemProductName = To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Debug session time: Wed Jan 26 22:12:33.677 2011 (UTC - 5:00)
System Uptime: 0 days 0:00:17.175
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+2cf )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xA
PROCESS_NAME:  services.exe
FAILURE_BUCKET_ID:  0xA_VRF_nt!KiTrap0E+2cf
SystemProductName = To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  

SPTD removed, and my windows 7 works perfectly, thanks jonathan.

and i have found what makes my windows often BSOD.
It is because the RAM fault, so i gonna RMA it to the distributor, anyway thanks

You're welcome. :)

Let us know how the RMA goes; hopefully we can mark this thread as solved.