Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Several BSODs a day since Dec, random


12 Feb 2012   #1

Windows 7 Home Premium 32-bit
 
 
Several BSODs a day since Dec, random

Hi all

Hope somebody can look at this. I have a Dell Studio 1737, about 2 years old, just started doing BSODs in late December 2011. Can do one or a few a day, seems to be fairly random.

I thought it might have been a dodgy patch from MS around that time that disagrees with the hardware, so took out the Windows updates from Dec back to Oct 11 to see if the problem went away, which it hasn't. (Probably need to get the updates back now.)

I've attached some of the dump files, System Health Report, etc, but the dump files were set to kernel and not small memory dump (128kb) that's the other option. I've set it to small memory dump now, do I have to wait until the next BSOD and run the collection program again?

I notice in the system health report lots of drivers aren't working -- I purchased this laptop with OEM Vista about 6 months before 7 came out, and got a free official 7 upgrade, which I applied -- quite a lot of stuff may not have come across, including things like the biometric fingerprint reader, which I've never bothered rectifying.

The machine got a TDL4 virus about a year or more ago also that was cleaned off with ComboFix. (This was before the major free and paid AV people had solutions for TDL4.)

I've run Avast over this system and no viruses come up. Not using Windows Defender.

I've run Dell's hardware system check program and everything tests OK.

I tend to run it day and night, just turn off the external monitor, as I was doing video rendering work and disabled Sleep mode, plus the wireless network etc used to struggle coming out of Sleep sometimes, so disabled Sleep, with just a spindown on the HDD and screen power.

Other details:

32-bit
Dell OEM Windows 7 (now SP1) as a painful 'approved, official' upgrade from OEM Vista 18 or more months ago
- the original installed OS on the system? Vista
- an OEM or full retail version? OEM
- What is the age of system (hardware)? around 2 years
- What is the age of OS installation (have you re-installed the OS?) Just the MS upgrade from Vista as above.


I want this system to last til the end of the year til Windows 8 is released plus I'll get 64 bit with 8Gb RAM on a hypervisor! Maybe.

Thanks
Sean

My System SpecsSystem Spec
.

12 Feb 2012   #2

Win 8 Release candidate 8400
 
 

Virtually all of these were Related to NETw5v32.sys Intel® Wireless WiFi Link Driver.. I would re-install the newest version available.


You also have some driver that need updating from as far back as 2006.


Code:
PdiPorts.sys    11/16/2006 7:31:13 PM    0x95018000    0x9501a300        0x00002300    0x455d02d1                        
rimsptsk.sys    7/29/2007 8:42:56 PM    0x931d3000    0x931e7000        0x00014000    0x46ad4220                        
rixdptsk.sys    7/29/2007 9:54:01 PM    0x9501f000    0x95071000        0x00052000    0x46ad52c9                        
rimmptsk.sys    2/15/2008 4:01:16 AM    0x94819000    0x9482a000        0x00011000    0x47b554dc                        
btwl2cap.sys    7/23/2008 10:17:41 PM    0xbffc8000    0xbffd2000        0x0000a000    0x4887f455                        
ATSwpWDF.sys    10/2/2008 12:42:14 PM    0x94111000    0x94185180        0x00074180    0x48e507f6                        
dne2000.sys    11/10/2008 7:59:21 PM    0x95174000    0x95192e80        0x0001ee80    0x4918d8e9                        
btwavdt.sys    11/11/2008 1:40:55 PM    0xbff55000    0xbffc8000        0x00073000    0x4919d1b7                        
btwaudio.sys    11/11/2008 1:41:58 PM    0xbfe00000    0xbfe81000        0x00081000    0x4919d1f6                        
btwrchid.sys    11/11/2008 1:42:29 PM    0xbffd2000    0xbffd4d80        0x00002d80    0x4919d215                        
OA001Ufd.sys    3/6/2009 2:30:08 AM    0x940c1000    0x940e1a00        0x00020a00    0x49b0d100                        
stwrt.sys    3/6/2009 11:57:01 AM    0x99c6a000    0x99ccf000        0x00065000    0x49b155dd                        
OA001Vid.sys    3/8/2009 7:57:13 PM    0x9407c000    0x940c0620        0x00044620    0x49b46969                        
netw5v32.sys    3/26/2009 11:10:37 AM    0x9482c000    0x94c3f000    netw5v32.sys+6bd54    0x00413000    0x49cba8fd                        
Apfiltr.sys    4/2/2009 12:37:22 PM    0x95100000    0x95135000        0x00035000    0x49d4f7d2                        
k57nd60x.sys    4/26/2009 6:23:19 AM    0x94d90000    0x94dcc000        0x0003c000    0x49f44427                        
spldr.sys    5/11/2009 11:13:47 AM    0x8b9c6000    0x8b9ce000        0x00008000    0x4a084ebb                        
GEARAspiWDM.sys    5/18/2009 7:16:53 AM    0x95142000    0x95147280        0x00005280    0x4a1151b5                        
IntcHdmi.sys    5/26/2009 6:12:34 AM    0x99d17000    0x99d3a000        0x00023000    0x4a1bcea2                        
AVerBDA716x.sys    6/5/2009 3:14:05 AM    0x94c3f000    0x94d58080        0x00119080    0x4a28d3cd                        
CtClsFlt.sys    6/15/2009 12:05:16 AM    0x940e2000    0x94105260        0x00023260    0x4a35d68c
How To Find Drivers:
Quote:
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.
- - The most common drivers are listed on this page: Driver Reference Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads
My System SpecsSystem Spec
12 Feb 2012   #3

Windows 7 Home Premium 32-bit
 
 

Thanks zigzag -- I thought MS had an agreement with OEMs to update drivers automatically via Update!!?? Or whenever I click 'update driver' in Device Manager it always comes back and says it has the latest one...

I ran a trial copy of one of those 'we will update drivers for you' programs when this problem began, it identified a couple, but I didn't proceed and didn't know whether to really believe it -- didn't want to introduce still more potential problems based on its advice. Is there a single program you can recommend though to run around and locate drivers?

I kind of thought if the driver worked in 2006 and hasn't been a problem until Dec 2011, it's not likely to be a driver problem?
My System SpecsSystem Spec
.


12 Feb 2012   #4

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by SeanR01 View Post
Thanks zigzag -- I thought MS had an agreement with OEMs to update drivers automatically via Update!!?? Or whenever I click 'update driver' in Device Manager it always comes back and says it has the latest one...

(I ran a trial copy of one of those 'update drivers for you' programs when this problem began, it identified a couple, but I didn't proceed and didn't know whether to really believe it -- didn't want to introduce still more potential problems based on its advice.)
Nope and that is why MS and most of us recommend a clean install over upgrade.

We also dont recommend those driver sweeper type apps because you are relying on a 3rd parties database of what is current.

If any of these are the newes (and I hope not) you wil probably need to re-install them in compatibility mode
(compat mode=right click the installer>property>compatibility>choose OS)
My System SpecsSystem Spec
06 Apr 2012   #5

Windows 7 Home Premium 32-bit
 
 

OK, I upgraded the wireless network driver several weeks ago, and had a few weeks of no problems. As of today, the laptop has started rebooting again spontaneously at random intervals. (It tried to do a Flash update and some Flash screens now don't seem to work properly, even after a manual reinstall.) After a reboot, even if I'm running next to no user apps, it will reboot again after a while at random intervals.

Also, I note that when IE9 is running it always spawns at least 1 extra iexplore.exe process, sometimes several, beyond the tabs I have open -- normal behaviour or enemy action? Avast finds no viruses on the system. Should I run some of these lethal rootkit/bootkit detection and removal programs?

Can anyone check the dumps here for me again and let me know if there's an obvious problem again? I appreciate the time spent on support, getting frustrated at Win 7 as an operating environment to be honest -- too much time spent on maintenance, and it's kind of large and clunky and slow.

Thanks
My System SpecsSystem Spec
06 Apr 2012   #6

Windows 7 Home Premium 64 Bit
 
 

Problem Devices:
Code:
MpKsl53550a5b	ROOT\LEGACY_MPKSL53550A5B\0000	This device is not present, is not working properly, or does not have all its drivers installed.
Cisco Systems VPN Adapter	ROOT\NET\0001	This device is disabled.
MpKsl5b48c0a1	ROOT\LEGACY_MPKSL5B48C0A1\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl5cb11c5c	ROOT\LEGACY_MPKSL5CB11C5C\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl6c02fb69	ROOT\LEGACY_MPKSL6C02FB69\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl75b73de5	ROOT\LEGACY_MPKSL75B73DE5\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl7e31dd7b	ROOT\LEGACY_MPKSL7E31DD7B\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl027fa0ed	ROOT\LEGACY_MPKSL027FA0ED\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl971f9700	ROOT\LEGACY_MPKSL971F9700\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsla4aa000d	ROOT\LEGACY_MPKSLA4AA000D\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKslb48012e8	ROOT\LEGACY_MPKSLB48012E8\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl485096a8	ROOT\LEGACY_MPKSL485096A8\0000	This device is not present, is not working properly, or does not have all its drivers installed.
MpKsl4e085f06	ROOT\LEGACY_MPKSL4E085F06\0000	This device is not present, is not working properly, or does not have all its drivers installed.
I can find none of these devices through a Google search. If you know what they are, let us know. Otherwise, I suspect malware/viruses.


Security Software:
Code:
avastsvc.exe	c:\program files\alwil software\avast5\avastsvc.exe	1636	8	200	1380	6/04/2012 6:46 PM	7.0.1426.0	43.72 KB (44,768 bytes)	24/03/2012 6:32 AM
avastui.exe	c:\program files\alwil software\avast5\avastui.exe	2276	8	200	1380	6/04/2012 6:47 PM	7.0.1426.0	4.05 MB (4,241,512 bytes)	24/03/2012 6:32 AM
mbamservice.exe	c:\program files\malwarebytes' anti-malware\mbamservice.exe	5792	8	200	1380	6/04/2012 6:49 PM	Not Available	Not Available	Not Available
msmpeng.exe	c:\program files\microsoft security client\antimalware\msmpeng.exe	904	8	200	1380	6/04/2012 6:46 PM	3.0.8402.0	11.46 KB (11,736 bytes)	27/04/2011 2:39 PM
msseces.exe	c:\program files\microsoft security client\msseces.exe	4792	8	200	1380	6/04/2012 6:47 PM	2.1.1116.0	974.53 KB (997,920 bytes)	15/06/2011 2:16 PM
You have a lot of security software; possibly too much. Do you have avast!, Microsoft Security Essentials, and Malwarebytes running at one time? Your version of avast! is also two versions behind, which is equally concerning... I think we should try to get your security software sorted out before proceeding with other steps.
My System SpecsSystem Spec
07 Apr 2012   #7

Windows 7 Home Premium 32-bit
 
 

Correction - just ran Avast at boot time and it found a single Java virus - CVE-2012-0507-C (Expl), now removed. Still have an extra iexplore process tho.

I'm surprised a couple of MS Security Essentials processes appear to be running, it is meant to be disabled on this system. Malwarebytes was a recent thing I started running a few weeks ago, but I only ran it once. I can get Avast up to date (again, I thought it was - it reports V 7.0.1426 - and reports engine and definitions already up to date -- I think the original install folder is still just numbered 5 for some reason...) and try to get rid of the MSE and MWB processes. Or just give in to MS and use MSE...

Quote   Quote: Originally Posted by writhziden View Post
Problem Devices:
I can find none of these devices through a Google search. If you know what they are, let us know. Otherwise, I suspect malware/viruses.
I think these are legacy problems from the attempt to update from Vista to Win 7 as ordained by MS and Dell as per the OP -- there seem to be a few problems that were never resolved.

Quote:
You have a lot of security software; possibly too much. Do you have avast!, Microsoft Security Essentials, and Malwarebytes running at one time? Your version of avast! is also two versions behind, which is equally concerning... I think we should try to get your security software sorted out before proceeding with other steps.
None of those processes come up in the standard task manager Process List -- I ran MWB once to see if it could find anything the last time the system kept rebooting, and I thought I'd disabled MSE -- all that seems to be showing in the active processes list is the MSE GUI interface that puts an icon in the system tray that's always red, as it tells me I've sucessfully disabled it so it doesn't conflict with Avast. Maybe I should just switch to MSE and get rid of Avast, I've heard reports MSE is competent and not a resources hog.
My System SpecsSystem Spec
07 Apr 2012   #8

Windows 7 Home Premium 32-bit
 
 

I would be more interested to see what driver caused the most recent BSODs in the dump file -- I don't know how to drive the crash dump analyser at this stage... or is it in another file in the Griffin set?
My System SpecsSystem Spec
07 Apr 2012   #9

Windows 7 Home Premium 64 Bit
 
 

Code:
Loading Dump File [D:\Kingston\BSODDmpFiles\SeanR01\040612-47439-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17727.x86fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0x8303f000 PsLoadedModuleList = 0x831884d0
Debug session time: Fri Apr  6 02:44:56.017 2012 (UTC - 6:00)
System Uptime: 0 days 2:07:41.734
Loading Kernel Symbols
...............................................................
................................................................
.............................................................
Loading User Symbols
Loading unloaded module list
......
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: bef0c418, The pool entry we were looking for within the page.
Arg3: bef0c820, The next pool entry.
Arg4: 0a81063d, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 831a8848
Unable to read MiSystemVaType memory at 83187e20
 bef0c418 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 9a8017ea to 8315fc6b

STACK_TEXT:  
8d5d996c 9a8017ea bef0c420 66537641 861b82c0 nt!ExFreePoolWithTag+0x1b1
WARNING: Stack unwind information not available. Following frames may be wrong.
8d5d9994 837abaeb 00120189 8d5d99b4 8d5d99e0 aswFsBlk+0x17ea
8d5d9a00 837ae9f0 8d5d9a44 86458610 00000000 fltmgr!FltpPerformPreCallbacks+0x34d
8d5d9a18 837c21fe 8d5d9a44 837c5f3c 00000000 fltmgr!FltpPassThroughInternal+0x40
8d5d9a2c 837c28b7 8d5d9a44 86458610 85f10ba8 fltmgr!FltpCreateInternal+0x24
8d5d9a70 830765be 894db280 86a0bae0 85f10c04 fltmgr!FltpCreate+0x2c9
8d5d9a88 832853e7 a5e0db48 8d5d9c30 00000000 nt!IofCallDriver+0x63
8d5d9b60 83264bee 881ffc88 85790c58 86411458 nt!IopParseDevice+0xed7
8d5d9bdc 83275000 00000000 8d5d9c30 00000040 nt!ObpLookupObjectName+0x4fa
8d5d9c38 8326bade 0aa9baa4 85790c58 00000001 nt!ObOpenObjectByName+0x165
8d5d9cb4 8328f356 0aa9bb00 80100180 0aa9baa4 nt!IopCreateFile+0x673
8d5d9d00 8307d28a 0aa9bb00 80100180 0aa9baa4 nt!NtCreateFile+0x34
8d5d9d00 76e07094 0aa9bb00 80100180 0aa9baa4 nt!KiFastCallEntry+0x12a
0aa9bb08 00000000 00000000 00000000 00000000 0x76e07094


STACK_COMMAND:  kb

FOLLOWUP_IP: 
aswFsBlk+17ea
9a8017ea ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  aswFsBlk+17ea

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswFsBlk

IMAGE_NAME:  aswFsBlk.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4f56a558

FAILURE_BUCKET_ID:  0x19_20_aswFsBlk+17ea

BUCKET_ID:  0x19_20_aswFsBlk+17ea

Followup: MachineOwner
---------
The driver blamed is aswFsBlk.SYS, which is part of avast! You should completely uninstall avast! and then install the latest version. Make sure all remnants of MSE are off the system, and if you use Malwarebytes, use only the standalone version and not the free trial. When you uninstall avast!, use avast! Uninstall Utility | Download aswClear for avast! Removal to uninstall it.
My System SpecsSystem Spec
07 Apr 2012   #10

Windows 7 Home Premium 32-bit
 
 

Thanks for this, writhziden. Luckily the reboot problem seems to have 'gone away by itself' today -- maybe that one Java virus was a problem? -- but if it comes back I will do all that -- remove and reinstall Avast, or else perhaps just use MSE instead. The thing is that Avast has upgraded itself over time using the normal incremental processes and 'should' be alright, but you never know. I upgraded Vista to 7 using the 'approved' upgrade DVD and that was far from perfect...
My System SpecsSystem Spec
Reply

 Several BSODs a day since Dec, random




Thread Tools



Similar help and support threads for2: Several BSODs a day since Dec, random
Thread Forum
Random BSODs Caused by Random Files with Differing Stop Codes BSOD Help and Support
Solved Random BSODs during random tasks. Latest error: 0x1000007e BSOD Help and Support
Random BSODs appearing at random BSOD Help and Support
Random BSODs; Firefox 4 random crashes BSOD Help and Support
Getting random BSODs BSOD Help and Support
Random BSODS at Random Times - Please Help BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:48 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33