BSOD Scannow shows unable to correct corrupt files

28 Jun 2012

BSOD error 2057, often with BAD_POOL_CALLER or dxgmm.sys errors. Checked RAM by removing each stick in turn. Reinstalled video drivers. sfc /scannow shows corrupt files unable to repair despite several runs. Zip file shows CBS log
Zip files attached
Dell Vostro W7 x86 OEM pre installed on 2 yr old system
Although health report shows no anti virus, Kaspersky internet security is installed and running

usasma · 28 Jun 2012

To repair SFC.EXE /SCANNOW errors - repair tcpmon.ini
How? I really don't know - it's most likely through Windows Update
It won't hurt the system to leave the error for now (unless you can't print).
We can come back to this after we fix the BSOD's

So let's see about the BSODs.......

You have OCCT installed - have you run it against your video card yet? If so, what were the results?

The BSOD's hint at (but don't definitely blame) Kaspersky.
Please do the following:

Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the antivirus software from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of the antivirus software using one of these free tools: Antivirus Uninstallers
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's
NOTE: NEVER run more than 1 anti-virus, firewall, Internet Security/Security Center application at the same time.

You have a driver (afc.sys) that dates from 2005 - and it's likely to not be compatible with Win7.
It is an Arcsoft ASPI Shell program - and it likely belongs to an older CD/DVD program that you've installed on your system. Uninstall it immediately.

If the above steps don't stop the BSOD's, please zip up and upload any new memory dumps with your next post - and we'll see what we can figure out from there.

The following info is just FYI, I've already addressed the issues that I saw in the above paragraphs

- Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
- Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
- How I do it: http://www.carrona.org/howidoit.html

3RD PARTY DRIVERS PRESENT IN THE DUMP FILES

Code:


Afc.sys                     Wed Feb 23 01:58:55 2005 (421C29AF)
DKDFM.sys                   Thu Apr 05 05:31:44 2012 (4F7D6680)
DKRtWrt.sys                 Tue May 22 16:49:21 2012 (4FBBFBD1)
DKTLFSMF.sys                Thu Jun 07 23:47:57 2012 (4FD175ED)
DKTLFSMF.sys                Thu May 17 17:31:20 2012 (4FB56E28)
IntcHdmi.sys                Tue May 26 07:12:34 2009 (4A1BCEA2)
PxHelp20.sys                Tue Jun 23 19:16:17 2009 (4A416241)
RTKVHDA.sys                 Fri May 22 14:03:37 2009 (4A16E8F9)
RapportCerberus32_34302.sys Mon Dec 05 04:54:44 2011 (4EDC94E4)
RapportEI.sys               Fri Jun 08 14:40:33 2012 (4FD24721)
Rt86win7.sys                Mon Sep 20 03:38:12 2010 (4C970F64)
amdxata.sys                 Fri Mar 19 12:19:01 2010 (4BA3A3F5)
dc3d.sys                    Wed May 18 04:07:15 2011 (4DD37E33)
dump_iaStor.sys             Thu Jun 04 21:42:33 2009 (4A287809)
iaStor.sys                  Thu Jun 04 21:42:33 2009 (4A287809)
igdkmd32.sys                Fri Jul 03 12:33:51 2009 (4A4E32EF)
igdkmd32.sys                Fri Jun 03 16:28:22 2011 (4DE943E6)
kl1.sys                     Fri Mar 04 04:17:22 2011 (4D70AE22)
kl2.sys                     Fri Mar 04 04:17:16 2011 (4D70AE1C)
klif.sys                    Wed Apr 20 06:36:47 2011 (4DAEB73F)
klim6.sys                   Thu Mar 10 09:35:57 2011 (4D78E1CD)
klmouflt.sys                Mon Nov 02 11:26:08 2009 (4AEF0820)
npf.sys                     Fri Jun 25 12:47:37 2010 (4C24DDA9)
point32.sys                 Tue Dec 14 06:09:17 2010 (4D07505D)
rapportiaso.sys             Mon May 14 13:49:58 2012 (4FB145C6)

Code:


Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062512-15475-01.dmp]
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Debug session time: Mon Jun 25 09:27:52.092 2012 (UTC - 4:00)
System Uptime: 0 days 6:02:42.919
BugCheck 1000008E, {c0000005, 975756bc, baea7ae8, 0}
Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::CloseOneAllocation+116 )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x8E
PROCESS_NAME:  firefox.exe
FAILURE_BUCKET_ID:  0x8E_dxgmms1!VIDMM_GLOBAL::CloseOneAllocation+116
Bugcheck code 1000008E
Arguments c0000005 975756bc baea7ae8 00000000
BiosVersion = 1.2.0
BiosReleaseDate = 06/26/2009
SystemManufacturer = Dell Inc.
SystemProductName = Vostro 220 Series 
CPUID:        "Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz"
MaxSpeed:     3000
CurrentSpeed: 2992
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062612-19874-01.dmp]
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Debug session time: Tue Jun 26 09:27:23.400 2012 (UTC - 4:00)
System Uptime: 0 days 6:01:55.226
BugCheck 19, {20, 86c03d00, 86c03d28, 8050001}
Probably caused by : ntkrpamp.exe ( nt!ExFreePoolWithTag+1b1 )
BUGCHECK_STR:  0x19_20
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  avp.exe
FAILURE_BUCKET_ID:  0x19_20_nt!ExFreePoolWithTag+1b1
Bugcheck code 00000019
Arguments 00000020 86c03d00 86c03d28 08050001
BiosVersion = 1.2.0
BiosReleaseDate = 06/26/2009
SystemManufacturer = Dell Inc.
SystemProductName = Vostro 220 Series 
CPUID:        "Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz"
MaxSpeed:     3000
CurrentSpeed: 2992
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062712-16520-01.dmp]
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Debug session time: Wed Jun 27 06:29:57.046 2012 (UTC - 4:00)
System Uptime: 0 days 2:03:18.872
BugCheck C2, {7, 109b, 0, 89a3b4c8}
Probably caused by : ntkrpamp.exe ( nt!ExFreePoolWithTag+1b1 )
BUGCHECK_STR:  0xc2_7
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  avp.exe
FAILURE_BUCKET_ID:  0xc2_7_nt!ExFreePoolWithTag+1b1
Bugcheck code 000000C2
Arguments 00000007 0000109b 00000000 89a3b4c8
BiosVersion = 1.2.0
BiosReleaseDate = 06/26/2009
SystemManufacturer = Dell Inc.
SystemProductName = Vostro 220 Series 
CPUID:        "Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz"
MaxSpeed:     3000
CurrentSpeed: 2992
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062712-16660-01.dmp]
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Debug session time: Wed Jun 27 11:16:13.808 2012 (UTC - 4:00)
System Uptime: 0 days 2:02:04.525
BugCheck C2, {7, 109b, 0, 863f6e68}
Probably caused by : ntkrpamp.exe ( nt!ExFreePoolWithTag+1b1 )
BUGCHECK_STR:  0xc2_7
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  avp.exe
FAILURE_BUCKET_ID:  0xc2_7_nt!ExFreePoolWithTag+1b1
Bugcheck code 000000C2
Arguments 00000007 0000109b 00000000 863f6e68
BiosVersion = 1.2.0
BiosReleaseDate = 06/26/2009
SystemManufacturer = Dell Inc.
SystemProductName = Vostro 220 Series 
CPUID:        "Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz"
MaxSpeed:     3000
CurrentSpeed: 2992
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062712-19921-01.dmp]
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Debug session time: Wed Jun 27 08:43:28.424 2012 (UTC - 4:00)
System Uptime: 0 days 2:03:10.125
BugCheck C2, {7, 109b, 0, b2d060f0}
*** WARNING: Unable to verify timestamp for kl1.sys
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
*** WARNING: Unable to verify timestamp for klim6.sys
*** ERROR: Module load completed but symbols could not be loaded for klim6.sys
*** WARNING: Unable to verify timestamp for Rt86win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt86win7.sys
Probably caused by : kl1.sys ( kl1+6899a )
BUGCHECK_STR:  0xc2_7
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xc2_7_kl1+6899a
Bugcheck code 000000C2
Arguments 00000007 0000109b 00000000 b2d060f0
BiosVersion = 1.2.0
BiosReleaseDate = 06/26/2009
SystemManufacturer = Dell Inc.
SystemProductName = Vostro 220 Series 
CPUID:        "Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz"
MaxSpeed:     3000
CurrentSpeed: 2992
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

29 Jun 2012

Many thanks for that, much appreciated

Funnily enough I had already been advised by some web forums to check Kaspersky and had consulted their support and was advised all ok. Have stuck with it for several years as supplied by my Bank (for free) and always reckoned it was up to them to choose

However, KIS uninstalled and removal tool used. Avast free installed and full scan produces clear result. Malwarebytes free also shows clear

Driver afc.sys deleted

No BSOD since

Although ATI graphics card was used initially, have been using onboard graphics for some time without difficulty. OCCT shows no problems although I note that PSU results show -12v rail showing at -8.58v. Is this ok?

+3v 3.34
+5v 5.11
+12v 12.16
-12v -8.58

Now KIS has been uninstalled do you suggest a firewall? Currently using hardware router

Many thanks for your help

usasma · 30 Jun 2012

I am uncertain about PSU ratings. I'd suggest posting in the Hardware & Devices forum for more expert advice.

I'm a huge fan of the Windows Firewall as it has served me well since Vista debuted.
Just check to make sure it's enabled. That and your router should protect you from most threats.

Good luck!

30 Jun 2012

Many thanks, much appreciated