Random BSOD, ntoskrnl I think


  1. Posts : 5
    Windows 7 home premium 62bit
       #1

    Random BSOD, ntoskrnl I think


    Hello,

    Since quite a while I have have been having BSODs and I have no idea how to fix it.
    I've never had any troubles with BSODs before, until a couple of weeks ago.
    As I can recall it started after cleaning up my pc but I'm not entirely sure if that's the problem.

    I run windows 7 home premium 64 bit on my pc,it's a full retail version.

    I have searched a lot of forums with no succes so I hope you guys can help me out.
      My Computer


  2. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #2

    Hello there!

    Seems like there are multiple issues might be going on. First I would recommend you to remove AVG completely and run a removal to clean up left over files. You could install Microsoft Security Essentials instead.
    You have a pretty old driver dated 2005. We have to remove it or updated.


    Code:
     
    ASACPI.sys          Mon Mar 28 08:00:36 2005 (42476C4C)  http://sysnative.com/drivers/driver.php?id=ASACPI.sys
    Download it from here

    SYSTEM UP-TIME
    Code:
    System Uptime: 0 days 7:50:10.418
    System Uptime: 0 days 2:43:03.266
    System Uptime: 0 days 11:27:24.895
    System Uptime: 0 days 0:05:42.111
    System Uptime: 0 days 0:56:10.718
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

    BSOD BUGCHECK SUMMARY
    Code:
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Sat Jun 23 02:34:56.623 2012 (GMT+5)
    System Uptime: 0 days 7:50:10.418
    BugCheck 3B, {c0000005, fffff800034a1afb, fffff880074b9610, 0}
    Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  SearchIndexer.
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 02:23:03.471 2012 (GMT+6)
    System Uptime: 0 days 2:43:03.266
    BugCheck 3B, {c0000005, fffff8000348a0c5, fffff88008c239f0, 0}
    Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  FlashPlayerPlu
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Mon Jun 25 23:38:42.099 2012 (GMT+5)
    System Uptime: 0 days 11:27:24.895
    BugCheck 3B, {c0000005, fffff800035ad617, fffff88006c18df0, 0}
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+537 )
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  avgcsrva.exe
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 19:37:35.316 2012 (GMT+5)
    System Uptime: 0 days 0:05:42.111
    BugCheck 1E, {ffffffffc0000005, fffff800034dc0c5, 0, ffffffffffffffff}
    Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
    BUGCHECK_STR:  0x1E
    PROCESS_NAME:  avgdiagex.exe
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Tue Jun 26 20:34:33.923 2012 (GMT+5)
    System Uptime: 0 days 0:56:10.718
    BugCheck 3B, {c0000005, fffff800035be617, fffff88008457ec0, 0}
    Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+537 )
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  svchost.exe
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    [/FONT]
      My Computer


  3. Posts : 5
    Windows 7 home premium 62bit
    Thread Starter
       #3

    Hey,
    thanks a lot for looking into my problem.
    I removed avg completly as you suggested, but the link you gave me does not work.
    Do you have another link or site? Otherwise i'll just search the internet for one.

    Grz
      My Computer


  4. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #4

    Oops sorry. yes you can download it from Asus site.
      My Computer


  5. Posts : 5
    Windows 7 home premium 62bit
    Thread Starter
       #5

    Hey,
    thanks for the helping but unfortunately I had another BSOD today.
    I included the minidump file, it would be great if you could look into it.
      My Computer


  6. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #6

    Hello there!

    Seems like it might be the Duplex Drivers i.e. sptd.sys that might be causing the system to crash. Follow this guide to remove it completely DuplexSecure - FAQ

    Code:
     
    0: kd> !thread
    GetPointerFromAddress: unable to read from fffff80003704000
    THREAD fffffa8008870410 Cid 03a8.0e04 Teb: 000007fffffaa000 Win32Thread: 0000000000000000 RUNNING on processor 0
    Not impersonating
    GetUlongFromAddress: unable to read from fffff80003643ba4
    Owning Process fffffa8006047270 Image: MsMpEng.exe
    Attached Process N/A Image: N/A
    fffff78000000000: Unable to get shared data
    Wait Start TickCount 331422 
    Context Switch Count 274874 
    ReadMemory error: Cannot get nt!KeMaximumIncrement value.
    UserTime 00:00:00.000
    KernelTime 00:00:00.000
    Win32 Start Address 0x0000000077bafbc0
    Stack Init fffff880093c9db0 Current fffff880093c8fc0
    Base fffff880093ca000 Limit fffff880093c4000 Call 0
    Priority 9 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
    Child-SP RetAddr : Args to Child : Call Site
    fffff880`093c86f8 fffff800`034d4769 : 00000000`0000003b 00000000`c0000005 fffff800`036019bc fffff880`093c8fc0 : nt!KeBugCheckEx
    fffff880`093c8700 fffff800`034d40bc : fffffa80`20206f49 fffffa80`05a9a800 fffffa80`05180c60 fffffa80`07a867c0 : nt!KiBugCheckDispatch+0x69
    fffff880`093c8840 fffff800`034ffe2d : fffff800`036ef7ec fffff800`03613814 fffff800`03456000 fffff880`093c9768 : nt!KiSystemServiceHandler+0x7c
    fffff880`093c8880 fffff800`034fec05 : fffff800`0361c638 fffff880`093c88f8 fffff880`093c9768 fffff800`03456000 : nt!RtlpExecuteHandlerForException+0xd
    fffff880`093c88b0 fffff800`0350fb81 : fffff880`093c9768 fffff880`093c8fc0 fffff880`00000000 fffff8a0`1c34da50 : nt!RtlDispatchException+0x415
    fffff880`093c8f90 fffff800`034d4842 : fffff880`093c9768 00000000`00000004 fffff880`093c9810 00000000`00000000 : nt!KiDispatchException+0x135
    fffff880`093c9630 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
    0: kd> dps fffff880093c4000 fffff880093ca000 
    fffffa80`06047270 00000000`00580003
    fffffa80`06047278 fffffa80`03fc9e50
    fffffa80`06047280 fffffa80`0838ed60
    fffffa80`06047288 fffffa80`06047288
    fffffa80`06047290 fffffa80`06047288
    fffff880`093c81a8 00000000`c0000005
    fffff880`093c81b0 fffff800`0361c638 nt!_imp_NtOpenSymbolicLinkObject+0x9130
    fffff880`093c81b8 fffff880`093c86f8
    fffff880`093c81c0 00000000`00000000
    fffff880`093c81c8 fffff800`03456000 nt!KiSelectNextThread <PERF> (nt+0x0)
    fffff880`093c81d0 00000000`00000000
    fffff880`093c81d8 fffff800`036019bc nt!ExDeferredFreePool+0x100
    fffff880`093c81e0 fffff880`093c8fc0
    fffff880`093c81e8 00000000`00000000
    fffff880`093c81f0 fffff880`093c88f8
    fffff880`093c81f8 fffff800`034d4453 nt!KiSystemServiceCopyEnd+0x13
    fffff880`093c8200 fffff800`036daf0c nt!BBTBuffer <PERF> (nt+0x284f0c)
    fffff880`093c8208 fffff800`034d4040 nt!KiSystemServiceHandler
    fffff880`093c8210 00000000`00000000
    fffff880`093c8218 fffff800`034d51c0 nt!KeBugCheckEx
    fffff880`093c93c8 fffff800`03600fbd nt!ExFreePoolWithTag+0x22d
    fffff880`093c93d0 fffff880`093c9b10
    fffff880`093c93d8 fffff880`01071af8Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sptd.sys
    *** ERROR: Module load completed but symbols could not be loaded for sptd.sys
    sptd+0x4aaf8
    fffff880`093c93e0 00000000`00000000
    fffff880`093c93e8 00000000`00000001
    fffff880`093c93f0 fffffa80`043ce010
    fffff880`093c93f8 00000000`00000000
    fffff880`093c9400 fffff8a0`118f2a10
    fffff880`093c9408 00000000`00000040
    fffff880`093c9410 fffffa80`043cede0
    fffff880`093c9418 00000000`000007ff
    fffff880`093c9420 00000000`00f80074
    fffff880`093c9428 fffff880`012be72b*** WARNING: Unable to verify timestamp for MpFilter.sys
    *** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
    MpFilter+0x1b72b
    fffff880`093c96f8 ????????`????????
    fffff880`093c9700 ????????`????????
    fffff880`093c9708 ????????`????????
    fffff880`093c9710 ????????`????????
    fffff880`093c9718 ????????`????????
    fffff880`093c9720 ????????`????????
    fffff880`093c9728 ????????`????????
    fffff880`093c9730 ????????`????????
    fffff880`093c9738 ????????`????????
    fffff880`093c9740 ????????`????????
    fffff880`093c9748 ????????`????????
    fffff880`093c9750 ????????`????????
    fffff880`093c9758 ????????`????????
    fffff880`093c9760 ????????`????????
    fffff880`093c9768 ????????`????????
    fffff880`093c9770 ????????`????????
    fffff880`093c9778 ????????`????????
    fffff880`093c9780 ????????`????????
    fffff880`093c9788 ????????`????????
    fffff880`093c9790 ????????`????????
    fffff880`093c9798 ????????`????????
    fffff880`093c97a0 
    fffff880`093c9fd0 ????????`????????
    fffff880`093c9fd8 ????????`????????
    fffff880`093c9fe0 ????????`????????
    fffff880`093c9fe8 ????????`????????
    fffff880`093c9ff0 ????????`????????
    fffff880`093c9ff8 ????????`????????
    fffff880`093ca000 ????????`????????
    BSOD BUGCHECK SUMMARY
    Code:
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Wed Jun 27 23:25:03.429 2012 (GMT+6)
    System Uptime: 0 days 1:26:10.224
    BugCheck 3B, {c0000005, fffff800036019bc, fffff880093c8fc0, 0}
    Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+100 )
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  MsMpEng.exe
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
      My Computer


  7. Posts : 5
    Windows 7 home premium 62bit
    Thread Starter
       #7

    Hey,
    thanks a lot but unfortunately i'm still getting bsods.
    I included the minidump, it would be great if you could look into it.

    Grz
      My Computer


  8. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #8

    Seems like the driver which I told was not removed. Please remove it.

    Code:
    sptd.sys     Mon Oct 12 02:25:14 2009 (4AD24632)
    BSOD BUGCHECK SUMMARY

    Code:
    
    Loading Dump File [C:\Documents and Settings\XPMUser\_jcgriff2_\dbug\__Kernel__\070412-40419-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Wed Jul  4 16:13:53.003 2012 (GMT+6)
    System Uptime: 0 days 2:40:58.798
    BugCheck 19, {3, fffffa8003ecde40, fffffa8003ecde40, 7ffffa8003ecde40}
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+cbb )
    BUGCHECK_STR:  0x19_3
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+cbb
    Bugcheck code 00000019
    Arguments 00000000`00000003 fffffa80`03ecde40 fffffa80`03ecde40 7ffffa80`03ecde40
    BiosVersion = 0409   
    BiosReleaseDate = 10/16/2009
    SystemManufacturer = System manufacturer
    SystemProductName = System Product Name
    MaxSpeed:     2330
    CurrentSpeed: 2331
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Loading Dump File [C:\Documents and Settings\XPMUser\_jcgriff2_\dbug\__Kernel__\070412-57080-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Wed Jul  4 17:22:46.655 2012 (GMT+6)
    System Uptime: 0 days 1:07:38.060
    BugCheck 1000007E, {ffffffffc0000005, fffff880059e91ab, fffff88004daba08, fffff88004dab260}
    Probably caused by : luafv.sys ( luafv!ProcessUsnData+7b )
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  System
    BUGCHECK_STR:  0x7E
    FAILURE_BUCKET_ID:  X64_0x7E_luafv!ProcessUsnData+7b
    Bugcheck code 1000007E
    Arguments ffffffff`c0000005 fffff880`059e91ab fffff880`04daba08 fffff880`04dab260
    BiosVersion = 0409   
    BiosReleaseDate = 10/16/2009
    SystemManufacturer = System manufacturer
    SystemProductName = System Product Name
    MaxSpeed:     2330
    CurrentSpeed: 2331
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    Loading Dump File [C:\Documents and Settings\XPMUser\_jcgriff2_\dbug\__Kernel__\070412-57517-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Wed Jul  4 04:11:47.864 2012 (GMT+6)
    System Uptime: 0 days 0:00:28.268
    BugCheck 24, {1904fb, fffff8800338c6f8, fffff8800338bf50, fffff880012d0fc8}
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by : Ntfs.sys ( Ntfs!NtfsRemoveHashEntry+c4 )
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  System
    BUGCHECK_STR:  0x24
    FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsRemoveHashEntry+c4
    Bugcheck code 00000024
    Arguments 00000000`001904fb fffff880`0338c6f8 fffff880`0338bf50 fffff880`012d0fc8
    BiosVersion = 0409   
    BiosReleaseDate = 10/16/2009
    SystemManufacturer = System manufacturer
    SystemProductName = System Product Name
    MaxSpeed:     2330
    CurrentSpeed: 2331
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    
    
      My Computer


  9. Posts : 5
    Windows 7 home premium 62bit
    Thread Starter
       #9

    Hey thanks a lot I haven't had aany bsod since the removal.
    Really I'm very greatful!!
      My Computer


  10. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #10

    buijze said:
    Hey thanks a lot I haven't had aany bsod since the removal.
    Really I'm very greatful!!
    Glad I could help! :)
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:10.
Find Us