HP G62 BSOD daily

immakine · 18 Feb 2011

Hi,

I have a 2 months old HP G62 NOTEBOOK.

The problem is i get BSOD a couple of times per day. Sometimes this happens when i wake up the computer from hibernation and sometimes just randomly.

Windows 7
- x64
- original installation
- OEM
- The notebook has been bought new about 2 months ago
- Haven't reinstalled the OS

Computer specs:

HP G62 Notebook PC
AMD Athlon P320 Dual-Core
ATI Mobility Radeon HD 5470
Hard-driver: Hitachi HTS...

Dump files are in the attachement.

Hope there's a solution for this, ive updated the Windows and also HP's own updates.

Thanks for your help,
Regards,
Ilkka M

**Capt.Jack Sparrow** · 18 Feb 2011

immakine said:

Hi,

I have a 2 months old HP G62 NOTEBOOK.

The problem is i get BSOD a couple of times per day. Sometimes this happens when i wake up the computer from hibernation and sometimes just randomly.

Windows 7
- x64
- original installation
- OEM
- The notebook has been bought new about 2 months ago
- Haven't reinstalled the OS

Computer specs:

HP G62 Notebook PC
AMD Athlon P320 Dual-Core
ATI Mobility Radeon HD 5470
Hard-driver: Hitachi HTS...

Dump files are in the attachement.

Hope there's a solution for this, ive updated the Windows and also HP's own updates.

Thanks for your help,
Regards,
Ilkka M

Hello Ikka and Welcome to SF!

First thing I would suggest is to uninstall Sygate Personal Firewall, Outpost Security Suite you could use REVO Uninstaller Free edition to remove it. Because the svchost.exe crash with 0xc0000005 exception usually refers to Firewall or Anitvirus.

Then you could install Microsoft Security Essentials.

Bugcheck:

Code:

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88003debe39, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88006096d80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP: 
discache!DispLookupVolume+e5
fffff880`03debe39 488b4208        mov     rax,qword ptr [rdx+8]

CONTEXT:  fffff88006096d80 -- (.cxr 0xfffff88006096d80)
rax=fffff8a00643fe00 rbx=1fffff50008bf2c6 rcx=00000000000007b7
rdx=080808080805a008 rsi=0000000000000011 rdi=fffff880060977b0
rip=fffff88003debe39 rsp=fffff88006097750 rbp=fffff88006097870
 r8=1fffff50008bf2c6  r9=0000000000000800 r10=ffffffffffffffff
r11=0000000000000000 r12=fffffa80045f9630 r13=0000000000000000
r14=fffff880060979a0 r15=fffff8a00f6ca2f0
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
discache!DispLookupVolume+0xe5:
fffff880`03debe39 488b4208        mov     rax,qword ptr [rdx+8] ds:002b:08080808`0805a010=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88003debe39

STACK_TEXT:  
fffff880`06097750 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : discache!DispLookupVolume+0xe5


CHKIMG_EXTENSION: !chkimg -lo 50 -d !discache
    fffff88003debda3 - discache!DispLookupVolume+4f
    [ 41:40 ]
1 error : !discache (fffff88003debda3)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

STACK_COMMAND:  .cxr 0xfffff88006096d80 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

fimble · 18 Feb 2011

Hi immakine and Welcome. Further to the Captains excellent advice:

I found one of the next listed files in each of your last five dump files. I can find no info regarding them.

6aurw64a.vbt Fri Nov 05 18:12:30 2010

6a2zcuke.vbt Fri Nov 05 18:12:30 2010

yy27020m.vbt Fri Nov 05 18:12:30 2010

koc5io2o.vbt Fri Nov 05 18:12:30 2010

66yj8qo6.vbt Fri Nov 05 18:12:30 2010

As a priority I'd suggest you donload and run both TDSSKiller and Malwarebytes' Free in Safe Mode. Make sure you update Malwarebytes' database before running.

immakine · 21 Feb 2011

Hey,

Thanks for your fast replies. I did what you guys suggested and i found a trojan called WMA:Wimad from an .avi file. In addition to that, avast antivirus found a "sucpicious program" Win32:KillApp-W from C:\HP\Bin\EndProcess.exe.

The system seems stable now, so many thanks to both of you!

Ill post a reply if it still bluescreens. :)

-Ilkka

immakine · 28 Feb 2011

Hey guys,

The computer has been crashing regulary quite a few times. (just black screen and nothing happens)

Yesterday and today it bluescreened again, so new minidump is in the attachment :) The latest bluescreen happened when waking the computer from hibernation. (opening the lid)

Thanks for help.

-Ilkka

immakine · 01 Mar 2011

Hey,

Actually the hibernation doesn't propably have anything to do with this.

It seems that the CPU crashes everytime i lay it to the table or couch or something like that. So it might be a hardware issue and i think i will take it to warranty.

Anyways thanks for your great help.

-Ilkka

**Capt.Jack Sparrow** · 01 Mar 2011

Seems like Sygate Personal Firewall is still there in the Computer. Please uninstall it and post us the latest files.

immakine · 10 Mar 2011

Oh sorry didn't see that :)

Ok so i uninstalled it. And i installed PC Tools Firewall and after this i got a bluescreen.

I uninstalled it too, so there's no bluescreen (atleast not yet). I also chose to use avast antivirus instead of Microsoft Security Essentials.

So is the windows firewall supposed to be enough?

New files are on the attachment. As i said the latest bluescreen (9.3) occured after installing the PC Tools Firewall. So i guess after uninstalling it things should be alright now. :)