Solved BSOD when inserting external hard drive

Brandon138 · May 13, 2013

Hello Seven Forum,

I just inserted a 1 tb external hard drive and my computer went right to the BSOD.

I got the code:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 50
BCP1: FFFFFA800B85D000
BCP2: 0000000000000000
BCP3: FFFFF88009580A10
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\051313-33649-01.dmp
C:\Users\Brandon\AppData\Local\Temp\WER-65582-0.sysdata.xml

The hard drive is trusted and I have inserted into my PC about 100 times. Can you tell me what this code means?

cipley · May 13, 2013

STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
Usual causes: Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS

please refer to here so we can assist you further:
http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

Brandon138 · May 13, 2013

Here is the file I got from the SF_Diagnostic_Tool.exe:

View attachment 267866

not sure i did this right, let me know

cipley · May 13, 2013

- Update your AMD USB Filter Driver as it is causing the BSOD
:ar: http://support.amd.com/us/Pages/AMDSupportHub.aspx

Code:

    Loaded symbol image file: usbfilter.sys
    Image path: \SystemRoot\system32\DRIVERS\usbfilter.sys
    Image name: usbfilter.sys
    [B][COLOR="Red"]Timestamp:        Wed Dec 14 14:44:02 2011 (4EE853C2)[/COLOR][/B]

- Advised to remove you DAEMON Tools Lite. It is know as a BSOD cause in most cases.

Start Menu\Programs\DAEMON Tools Lite

After uninstalling, use SPTD Uninstaller Tool. Click Uninstall. if greyed out, the SPTD driver has been already uninstalled

- As for security applications, suggest to uninstall Norton. It is widely known to cause BSOD.

Start Menu\Programs\Norton 360
Start Menu\Programs\Norton

:ar: Antivirus Removal Tools
As replacement, we recommend to use Microsoft Security Essential from BSOD perspective, with complement of MalwareBytes
:ar: Microsoft Security Essentials | Protect against viruses, spyware, and other malware
:ar: Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Let us know the results
______________________________________
BSOD ANALYSIS

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffa800b85d000, 0, fffff88009580a10, 0}

Unable to load image \SystemRoot\system32\DRIVERS\usbfilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for usbfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for usbfilter.sys

Could not read faulting driver name
Probably caused by : USBSTOR.SYS ( USBSTOR!memcpy+80 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.

Brandon138 · May 13, 2013

Thank you for your help, I uninstalled Daemon tools like you said and used the sptd removal tool. I think that was the reason my explorer.exe was running so high recently, as I only installed Daemon tools lite a few days ago. As for the driver update, I'm a bit stuck. I went to the link you provided. I was not sure what my correct driver update should be so I downloaded the autodetect tool and ran it. It came up with my driver update but when I tried to install it, it said my computer does not support it. So I'm trying to manually find and install the right driver, but I have no idea how to tell what update is the appropriate one for my machine.

Any ideas on how I could find out?

cipley · May 13, 2013

Try to update from Device Manager
Start > type Device Manager on the search bar
it should be under "Universal Serial Bus Controller"
right click then select "Update Driver Software..."

Brandon138 · May 14, 2013

cipley said:
Try to update from Device Manager
Start > type Device Manager on the search bar
it should be under "Universal Serial Bus Controller"
right click then select "Update Driver Software..."

I did that and in every entry I asked it to update it told me that I had the latest software. The problem has up to this point not recurred, I have plugged and unplugged the hard drive that gave me the BSOD and have had no problem. I uninstalled Daemon Tools, and the SPTD drive. I feel that explorer.exe is running a little high at 38,000kbs, but other than that, I have had no problems.

Do you think I should do anything else at this point?

cipley · May 14, 2013

can you specify the model of your laptop?
I understand you have Toshiba Satellite S855D
try to look it here :ar: Official Toshiba Support | Toshiba
specify your model, then under Drivers and Updates, filter by USB

explorer.exe running at that amount of memory is pretty normal, unless it eats up CPU usage as well

koolkat77 · May 14, 2013

Security App

Code:

2: kd> !thread
Stack Init fffff880033a8c70 Current fffff880033a7f00
Base [COLOR="SeaGreen"]fffff880033a9000[/COLOR] Limit [COLOR="Teal"]fffff880033a3000[/COLOR] Call 0

2: kd> dps fffff880033a3000 fffff880033a9000
fffff880`033a8b08  fffff880`04591f3eUnable to load image \??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS
 SYMEVENT64x86+0x1cf3e

Crashes indicate Norton being a possible cause. Remove Norton and replace with Microsoft Security Essentials to see if it provides more stability. Uninstallers (removal tools) for common antivirus software

Microsoft Security Essentials and Malwarebytes, both recommended from a strict BSOD perspective.

Microsoft Security Essentials, Free antivirus for windows

Malwarebytes Anti-Malware Free

Information

DO NOT start the free trial of MalwareBytes. Deselect the option when prompted.

Tip

Make full scans with both separately.

Virus check
Scan your system with the following:

Kaspersky TDSSKiller - How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)

ESET online scanner - One-time virus scanner free with ESET online scanner

Daemon Tools/Alcohol %

Code:

sptd.sys                    Sun Aug 19 03:05:38 2012 (503003A2)

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Win7 systems (mostly due to the sptd.sys driver, although we have seen dtsoftbus01.sys blamed on several occasions). Please uninstall the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): DuplexSecure - FAQ

As an alternative, many people recommend the use of Total Mounter or Magic ISO

This tutorial http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html may help you:

To Disable Selective Suspend:

Code:

1. open the control panel
2. go to power options (you may have to set view to small icons)
3. click change plan settings
4. in the window that opens:
5. click change plan settings
6. click change advanced power settings, expand usb and ensure usb selective suspend is disabled.

Check for an update on the drivers listed below. If no updates are available I recommend removal of the software using Revo uninstaller free.

Code:

wanatw64.sys                Tue Apr 12 04:07:10 2005 (425AF50E)

Wan Miniport (ATW) America Online Driver Reference Table - wanatw64.sys

Code:

TVALZFL.sys                 Fri Jun 19 16:05:44 2009 (4A3B62F8)

TVALZ Filter Driver - Toshiba Driver Reference Table - TVALZFL.sys

Code:

FwLnk.sys                   Tue Jul  7 06:51:41 2009 (4A529C1D)

Toshiba Firmware Linkage service system driver (included in the Toshiba Value Added Package Driver Reference Table - FwLnk.sys

Tip

Revo Uninstaller
Download and install Revo Uninstaller free from here: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries).

Basic checks: Please run these tests and report back the results

1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure

Follow general fix for USB as well: http://www.sevenforums.com/tutorials/165554-usb-driver-general-fix-problems.html

BSOD BUGCHECK SUMMARY

Code:

[FONT="Lucida Console"]Debug session time: Mon May 13 14:26:35.084 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\051313-33649-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 12:37:06.395
*** WARNING: Unable to verify timestamp for usbfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for usbfilter.sys
Probably caused by : USBSTOR.SYS ( USBSTOR!memmove+80 )
BugCheck 50, {fffffa800b85d000, 0, fffff88009580a10, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Bugcheck code 00000050
Arguments: 
Arg1: fffffa800b85d000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88009580a10, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x50_USBSTOR!memmove+80
BiosVersion = 1.30
BiosReleaseDate = 06/18/2012
SystemManufacturer = TOSHIBA
SystemProductName = Satellite S855D
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``[/FONT]

Brandon138 · May 14, 2013

Wow thanks, I will do all these checks at some point today and report back, much appreciated sirs.

koolkat77 · Jun 1, 2013

How are things? Do you still get BSOD?

Brandon138 · Jun 2, 2013

koolkat77 said:
How are things? Do you still get BSOD?

Hi, I'm sorry I never reported back, I have been out of my country for a couple weeks and away from my computer.

All i did was uninstall Daemon Tools and Norton 360. I also ran the uninstaller tools for these to programs. I then installed Avast, malwarebytes, and superantispyware. I ran them all and everything came up clean. I restarted my computer several times and had no BSOD issues, I connected and disconnected the drive that was giving me the BSOD issue about a dozen times, and have not had any repeat issues. I also went to the AMD website and looked at all the driver updates and it appears my software is up to date.

So I believe this problem might have been related to Daemon tools/norton, or was a freak thing due to have too many external devices connected at once, as that has happened to me before on other PCs. So I believe my problem is solved. Again, forgive me for not reporting back sooner, I do not want you guys to think I do not appreciate your help, I'm very grateful. If anything changes I will report back but I believe things are okay now.

Brandon

koolkat77 · Jun 2, 2013

That's good to hear Brandon and no need to apologize! We're glad to help.

For now I guess you can mark the thread as solved..but be sure to post if you have them again

Tip

:tip: If your problem is solved please use the

Mark this thread as solved link at the top of your thread or down on the left corner.

Brandon138 · Jun 2, 2013

I certainly will, thank you again.

Solved BSOD when inserting external hard drive

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer