Hello there,
Having read previous threads from others I have followed your guidelines and would appreciate any help in fixing the bsod,
I have attached the diagnostic file and would like to thank you in advance for any help you can give me
McAfee
We have seen McAfee cause BSOD's on several systems and recommend uninstalling it with the McAfee Removal Tool and replace with Microsoft Security Essentials. How to uninstall McAfee products using the consumer Removal Tool (MCPR)Code:fffff880`07e43000 fffff880`07e8d000 mfeavfk01.sy
Microsoft Security Essentials and Malwarebytes are recommended from a strict BSOD perspective. They do not cause blue screens on the system as other AV products do.
Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free
Information
Do not start the free trial of MalwareBytes, unselect that option when prompted.
Update and make full scans with both separately.
Remove Comodo, it tends to contribute to crashes.
Code:Start Menu\Programs\Comodo\COMODO Firewall Public:Start Menu\Programs\Comodo\COMODO Firewall PublicRevo Uninstaller
Download and install Revo Uninstaller free from here: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems
Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries).
Start up
Keep less stuff at the start-up. Only anti-virus, this helps avoid driver conflicts and improves time to log in to windows.
Troubleshoot a Problem by Performing a Clean Startup in Windows 7 or Vista
How to Change, Add, or Remove Startup Programs in Windows 7
Disk Check
For errors on your Hard drive(s): How to Run Disk Check in Windows 7
SFC /scannow to check windows for corruption:
How to Repair Windows 7 System Files with System File Checker
1. Click Start
2. In the search box, type Command Prompt
3. In the list that appears, right-click on cmd.exe and choose Run as administrator
4. In the command window that opens, typesfc /scannowand hit enter.
BSOD BUGCHECK SUMMARY
Code:******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D1, {124, 2, 0, fffff88001885577} Probably caused by : tcpip.sys ( tcpip!TcpPeriodicTimeoutHandler+c7 ) Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: 0000000000000124, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, value 0 = read operation, 1 = write operation Arg4: fffff88001885577, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000390b100 GetUlongFromAddress: unable to read from fffff8000390b1c0 0000000000000124 Nonpaged pool CURRENT_IRQL: 2 FAULTING_IP: tcpip!TcpPeriodicTimeoutHandler+c7 fffff880`01885577 2b8724010000 sub eax,dword ptr [rdi+124h] CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0xD1 PROCESS_NAME: System TAG_NOT_DEFINED_c000000f: FFFFF88002F22FB0 TRAP_FRAME: fffff88002f1b360 -- (.trap 0xfffff88002f1b360) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000216c53 rbx=0000000000000000 rcx=000000051997910e rdx=000000010b629ff5 rsi=0000000000000000 rdi=0000000000000000 rip=fffff88001885577 rsp=fffff88002f1b4f0 rbp=0000000000216c53 r8=0000000000000000 r9=0000000b42cd7598 r10=0000000000da7a64 r11=0000000b42ceac7b r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 ov up ei pl nz na po cy tcpip!TcpPeriodicTimeoutHandler+0xc7: fffff880`01885577 2b8724010000 sub eax,dword ptr [rdi+124h] ds:00000000`00000124=???????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff800036d31a9 to fffff800036d3c00 STACK_COMMAND: kb FOLLOWUP_IP: tcpip!TcpPeriodicTimeoutHandler+c7 fffff880`01885577 2b8724010000 sub eax,dword ptr [rdi+124h] SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: tcpip!TcpPeriodicTimeoutHandler+c7 FOLLOWUP_NAME: MachineOwner MODULE_NAME: tcpip IMAGE_NAME: tcpip.sys DEBUG_FLR_IMAGE_TIMESTAMP: 5189c381 FAILURE_BUCKET_ID: X64_0xD1_tcpip!TcpPeriodicTimeoutHandler+c7 BUCKET_ID: X64_0xD1_tcpip!TcpPeriodicTimeoutHandler+c7 Followup: MachineOwner ---------
Last edited by koolkat77; 18 Jul 2013 at 06:11.
It would appear that has fixed it.
Thank you very much indeed
Good to hear. Mark the thread as solved after 1 week of observation.
Tip
Mark this thread as solved link at the top of your thread or down on the left corner.
Hello, after a week of uninterrupted useage, the bsod re appeared, I haven't installed anything or changed anything, please help, can the bsod be a one off random event????
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
Windows Product ID: 00426-OEM-8992662-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {796400E9-3F73-4538-A03C-E08657C02344}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{796400E9-3F73-4538-A03C-E08657C02344}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1771348992-4100851417-3460725685</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 8930</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.21</Version><SMBIOSVersion major="2" minor="4"/><Date>20110303000000.000000+000</Date></BIOS><HWID>50BC3107018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600006-02-2057-7600.0000-2742011
Installation ID: 011842442781675475118234130514105466297386945290321803
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: HYRR2
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 25/07/2013 11:22:27
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:8:2013 18:23
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: NgAAAAIAAgABAAEAAQACAAAAAwABAAEA6GFIqQsUFT96fxqG6ByitXf21pvg6fLCot7svEbK
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ACRSYS ACRPRDCT
FACP ACRSYS ACRPRDCT
HPET ACRSYS ACRPRDCT
BOOT ACRSYS ACRPRDCT
MCFG ACRSYS ACRPRDCT
DMAR
ASF! ACRSYS ACRPRDCT
SLIC ACRSYS ACRPRDCT
SSDT PmRef CpuPm
Code:iagnostic Report (1.9.0027.0): ----------------------------------------- Windows Validation Data--> Validation Code: 0 Cached Online Validation Code: 0x0 Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2 Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g= Windows Product ID: 00426-OEM-8992662-00006 Windows Product ID Type: 2 Windows License Type: OEM SLP Windows OS version: 6.1.7601.2.00010100.1.0.001 ID: {796400E9-3F73-4538-A03C-E08657C02344}(1) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: N/A, hr = 0x80070002 Signed By: N/A, hr = 0x80070002 Product Name: Windows 7 Ultimate Architecture: 0x00000009 Build lab: 7601.win7sp1_gdr.130318-1533 TTS Error: Validation Diagnostic: Resolution Status: N/A Vista WgaER Data--> ThreatID(s): N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 Windows XP Notifications Data--> Cached Result: N/A, hr = 0x80070002 File Exists: No Version: N/A, hr = 0x80070002 WgaTray.exe Signed By: N/A, hr = 0x80070002 WgaLogon.dll Signed By: N/A, hr = 0x80070002 OGA Notifications Data--> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data--> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3 Browser Data--> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) Default Browser: C:\Program Files\Internet Explorer\iexplore.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data--> Other data--> Office Details: <GenuineResults><MachineData><UGUID>{796400E9-3F73-4538-A03C-E08657C02344}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-1771348992-4100851417-3460725685</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>Aspire 8930</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.21</Version><SMBIOSVersion major="2" minor="4"/><Date>20110303000000.000000+000</Date></BIOS><HWID>50BC3107018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> Spsys.log Content: 0x80070002 Licensing Data--> Software licensing service version: 6.1.7601.17514 Name: Windows(R) 7, Ultimate edition Description: Windows Operating System - Windows(R) 7, OEM_SLP channel Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8 Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f Extended PID: 00426-00178-926-600006-02-2057-7600.0000-2742011 Installation ID: 011842442781675475118234130514105466297386945290321803 Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338 Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339 Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341 Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340 Partial Product Key: HYRR2 License Status: Licensed Remaining Windows rearm count: 4 Trusted time: 25/07/2013 11:22:27 Windows Activation Technologies--> HrOffline: 0x00000000 HrOnline: 0x00000000 HealthStatus: 0x0000000000000000 Event Time Stamp: 7:8:2013 18:23 ActiveX: Registered, Version: 7.1.7600.16395 Admin Service: Registered, Version: 7.1.7600.16395 HealthStatus Bitmask Output: HWID Data--> HWID Hash Current: NgAAAAIAAgABAAEAAQACAAAAAwABAAEA6GFIqQsUFT96fxqG6ByitXf21pvg6fLCot7svEbK OEM Activation 1.0 Data--> N/A OEM Activation 2.0 Data--> BIOS valid for OA 2.0: yes Windows marker version: 0x20001 OEMID and OEMTableID Consistent: yes BIOS Information: ACPI Table Name OEMID Value OEMTableID Value APIC ACRSYS ACRPRDCT FACP ACRSYS ACRPRDCT HPET ACRSYS ACRPRDCT BOOT ACRSYS ACRPRDCT MCFG ACRSYS ACRPRDCT DMAR ASF! ACRSYS ACRPRDCT SLIC ACRSYS ACRPRDCT SSDT PmRef CpuPm
missed step 7 here it is again, thanks in advance for any help
Thank you Noel.
@ OP
There are no dump files in the attachment.
First, we want to make sure the computer is saving your dump files. Go to Control Panel -> System -> Advanced System Settings -> Startup and Recovery [Settings] Make sure that "Write Debugging Information" is set to Small Memory Dump (256kb) if it is not already.
Next, make sure that the folder C:\Windows\Minidump exists. If not, create it (allow permission if asked). Make sure any dumps you want to analyze, whether yours or others', are in this folder. You can ZIP/RAR the files and send them to someone else to analyze as well.
Quote
