Several BSODs since 9/3/2013 - Memtest and Dell diagnostics both pass.

netman74501 · 24 Sep 2013

I have a Dell Inspiron 1764 with Windows 7 Home Premium Service Pack 1 (64-bit, 4GB RAM) that is experiencing apparently random BSODs occurring since 9/3/2013. I have reseated the RAM and performed four passes of memtest plus the built-in diagnostics from Dell for BSODs. Everything passes. All Windows Updates have been performed. Checkdisk has been performed also.

Avast! is mentioned in the mini-dump from 9/3/2013 which was bug check 0xc4 (at least according to BlueScreenView). Avast! had a program update and that has been performed since that specific BSOD occurred. I thought about removing Avast! altogether but, nothing seems to point to Avast! anymore (not in BlueScreenView or any other diagnostic tool I've tried) so I have not yet done so.

I have attached the output from SF Diagnostic Tool in hopes that someone can help me solve these errors. Thanks in advance!

koolkat77 · 25 Sep 2013

Welcome to the forum.

It seems that Avast! is causing problems for you. Please uninstall it and use MSE. Microsoft Security Essentials & the Free version of Malwarebytes, update and make full scans separately:

Note

Do not start the trial version of MalwareBytes

You may also take a look at:

Good & Free System Security Combination

------------------------
Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

Click on the
Type CMD on Search
Left click and Run as Administrator
Type SFC /scannow - read here

Run Disk Check on your Hard Drive for file system errors and bad sectors on it - read here
------------------------
Make scans with these tools -

------------------------
Reduce the start-up items, Antivirus software is basically whats required.

Drivers:

The drivers below aren't updated. Please update them to their latest version. If no updates are available then uninstall the driver and its software completely.

MRESP50a64.SYS Sat Nov 19 14:14:28 2005 (437EDEE4)
PCAUSA Rawether for Windows
Driver Reference Table - MRESP50a64.SYS

CtClsFlt.sys Mon Jun 15 11:06:41 2009 (4A35D6E1)
Creative Camera Class Upper Filter Driver
Driver Reference Table - CtClsFlt.sys

PxHlpa64.sys Wed Jun 24 05:16:35 2009 (4A416253)
Sonic CD/DVD driver (used by many different CD/DVD programs)
Driver Reference Table - PxHlpa64.sys

BCM42RLY.sys Wed Jul 8 06:34:55 2009 (4A53E9AF)
Broadcom iLine10(tm) PCI Network Adapter
Driver Reference Table - BCM42RLY.sys

bcmwl664.sys Wed Jul 8 06:45:04 2009 (4A53EC10)
Broadcom 802.11g Network Adapter - Dell Wireless 1390 WLAN Mini-Card
Driver Reference Table - bcmwl664.sys
------------------------
To perform a clean install of a driver, follow this tutorial:

How to Clean Left Over Driver Files with Driver Sweeper

------------------------

Information

Download

and install Revo Uninstaller.

Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries).

Let us know the results.

BSOD BUGCHECK SUMMARY

Code:

Debug session time: Sun Sep 22 06:09:21.524 2013 (UTC + 6:00)
Built by: 7601.18229.amd64fre.win7sp1_gdr.130801-1533
System Uptime: 0 days 0:34:33.616
*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a53 )
BugCheck 19, {3, fffffa8003add9e0, fffffa8003add9c0, fffffa8003add9c0}
BugCheck Info: BAD_POOL_HEADER (19)
Bugcheck code 00000019
Arguments: 
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffffa8003add9e0, the pool entry being checked.
Arg3: fffffa8003add9c0, the read back flink freelist value (should be the same as 2).
Arg4: fffffa8003add9c0, the read back blink freelist value (should be the same as 2).
BUGCHECK_STR:  0x19_3
PROCESS_NAME:  iexplore.exe
FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+a53
MaxSpeed:     2130
CurrentSpeed: 2128
BiosVersion = A13
BiosReleaseDate = 03/29/2011
SystemManufacturer = Dell Inc.
SystemProductName = Inspiron 1764
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Wed Sep 18 05:56:31.137 2013 (UTC + 6:00)
Built by: 7601.18229.amd64fre.win7sp1_gdr.130801-1533
System Uptime: 0 days 0:01:02.510
Probably caused by : ntkrnlmp.exe ( nt!KiTimerExpiration+d9 )
BugCheck A, {fffff800c3e29f88, 2, 0, fffff80002c924f9}
BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
Bugcheck code 0000000A
Arguments: 
Arg1: fffff800c3e29f88, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002c924f9, address which referenced memory
BUGCHECK_STR:  0xA
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_nt!KiTimerExpiration+d9
MaxSpeed:     2130
CurrentSpeed: 2128
BiosVersion = A13
BiosReleaseDate = 03/29/2011
SystemManufacturer = Dell Inc.
SystemProductName = Inspiron 1764
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat Sep  7 21:52:02.452 2013 (UTC + 6:00)
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 7601.18205.amd64fre.win7sp1_gdr.130708-1532
System Uptime: 0 days 0:38:21.545
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Probably caused by : ntoskrnl.exe ( nt+4ddf5 )
BugCheck 50, {fffff100108b1f61, 1, fffff80002ca6df5, 7}
BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
Bugcheck code 00000050
Arguments: 
Arg1: fffff100108b1f61, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff80002ca6df5, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000007, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
MaxSpeed:     2130
CurrentSpeed: 2128
BiosVersion = A13
BiosReleaseDate = 03/29/2011
SystemManufacturer = Dell Inc.
SystemProductName = Inspiron 1764
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Thu Sep  5 10:09:04.014 2013 (UTC + 6:00)
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 7601.18205.amd64fre.win7sp1_gdr.130708-1532
System Uptime: 0 days 2:27:24.107
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Probably caused by : ntoskrnl.exe ( nt+8759e )
BugCheck 3B, {c0000005, fffff80002cd459e, fffff880073629a0, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Bugcheck code 0000003B
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002cd459e, Address of the instruction which caused the bugcheck
Arg3: fffff880073629a0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
MaxSpeed:     2130
CurrentSpeed: 2128
BiosVersion = A13
BiosReleaseDate = 03/29/2011
SystemManufacturer = Dell Inc.
SystemProductName = Inspiron 1764
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Wed Sep  4 09:20:26.624 2013 (UTC + 6:00)
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 7601.18205.amd64fre.win7sp1_gdr.130708-1532
System Uptime: 0 days 2:32:50.091
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Probably caused by : ntoskrnl.exe ( nt+75b80 )
BugCheck C4, {91, 0, fffffa8003b69a20, 0}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Bugcheck code 000000c4
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments: 
Arg1: 0000000000000091, A driver switched stacks using a method that is not supported by
	the operating system. The only supported way to extend a kernel
	mode stack is by using KeExpandKernelStackAndCallout.
Arg2: 0000000000000000
Arg3: fffffa8003b69a20
Arg4: 0000000000000000
BUGCHECK_STR:  0xc4_91
MaxSpeed:     2130
CurrentSpeed: 2128
BiosVersion = A13
BiosReleaseDate = 03/29/2011
SystemManufacturer = Dell Inc.
SystemProductName = Inspiron 1764
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

netman74501 · 26 Sep 2013

I have uninstalled Avast! and installed MSE along with Malwarebytes. I performed a full scan with each and they both came up clean.

SFC says it did not find any integrity violations.

TDSSKiller is clean.

Startup items are already reduced.

I'm not sure what uses the driver MRESP50a64.sys but, I believe it to be the AT&T troubleshooting software so I have uninstalled it. I am also not sure what uses the driver PxHlpa64.sys and therefore do not know how to update it. All other drivers listed are already at their latest as far as I can tell.

Let's hope it is simply Avast! that is the culprit and by uninstalling it that the issue is resolved. I will let you know if I get another stop error within the next couple of weeks.

koolkat77 · 26 Sep 2013

OKay, thanks for the update
Good luck :)

netman74501 · 09 Oct 2013

Okay... So, now the computer has blue screened once and shutdown (not reboot) several times. Since posting, one of the blue screens (APC_INDEX_MISMATCH) happened when I tried to run driver verifier after I initially started this thread so I think we can ignore that one but, the latest blue screen (BAD_POOL_CALLER) is new. It happened on the third.

I have no idea why the computer has started shutting down instead of blue screening if something is wrong. The only thing being done on this computer is facebook and some word processing. Nothing intensive. To me, it sounds like it is overheating but, I have checked the fan and it is running and visually looks clean. It seems to have a healthy airflow too. One time, instead of shutting down, the screen simply froze. The computer had to be hard reset. Any ideas as to what this new problem could be?

I've attached new logs.

koolkat77 · 09 Oct 2013

No new dumps were collected.

First, we want to make sure the computer is saving your dump files. Go to Control Panel -> System -> Advanced System Settings -> Startup and Recovery [Settings] Make sure that "Write Debugging Information" is set to Small Memory Dump (256kb) if it is not already.

Create a Dump File when you get a BSOD

Next, make sure that the folder C:\Windows\Minidump exists. If not, create it (allow permission if asked). Make sure any dumps you want to analyze, whether yours or others', are in this folder. You can ZIP/RAR the files and send them to someone else to analyze as well.

Code:

The driver detected a controller error on \Device\Harddisk1\DR4.

Upload a screenshot using:

CrystalDiskInfo For how to upload a screenshot or file, read here

Test your Hard Drive(s) by running:

Hard Drive Diagnostic Procedure

Monitor hardware temperature with system monitoring software like Speccy or HWMonitor. Upload a screen shot of the Summary tab as well:

For how to upload a screenshot or file, read here

------------------------
Test and Diagnose RAM Issues with Memtest86+:

RAM - Test with Memtest86+

Tip

Pay close attention to Part 3 of the tutorial "If you have errors"
Test the RAM with Memtest86+ for at least 7-10 passes. It may take up to 22 passes to find problems. Make sure to run it once after the system has been on for a few hours and is warm, and then also run it again when the system has been off for a few hours and is cold.

netman74501 · 10 Oct 2013

I've attached a zip file containing screenshots of CrystalDiskInfo and Speccy and the single dump file I was referring to as being new. The computer is still set to save dumps, it just isn't blue screening when it freezes or shuts down for some reason. With the screen freezing and it simply shutting down, this sounds more like an overheating issue to me but, the computer really didn't feel that hot.

I already ran memtest86+ for several more passes after my initial post but, I will run it again. Total, it has already run for 8 passes.

The hard drive was tested when I ran the Dell Diagnostics (as well as several other things, including memory). It did a short test and a long test. If my memory serves me correctly, the long test was a surface test. Do I really need to run another test on the drive?

Also, I did a scandisk before posting, I just failed to mention it. That came back with some unused indexes being cleaned up but, was otherwise fine.

koolkat77 · 10 Oct 2013

Enable Driver Verifier to see if it catches any misbehaving driver:

netman74501 · 14 Oct 2013

Unfortunately Driver Verifier doesn't find anything. I ran memtest86+ for 36 hours this time. It still finds nothing.

I also downloaded and ran OCCT on the GPU (screenshot attached). I did this because I was suspecting the GPU to be a possible cause since the screen simply froze the one time. However, the computer didn't exhibit any problems while testing.

So, to recap:

I have ran Windows Update, Driver Verifier, SFC, checkdisk, memtest86+, OCCT, and everything in Dell Diagnostics (which ran a number of tests that included hard drive, CPU, CPU cache, battery, fans, sensors, etc.) I have also replaced Avast! with MSE and ran multiple virus and malware scans, utilizing both online virus scans and the anti-virus on the machine. I have also ran Malwarebytes. Lastly, as far as I can tell, all drivers are up-to-date.

That's a lot of stuff. Any other suggestions for finding the cause of the random blue screens or shutdowns?

essenbe · 15 Oct 2013

Netman, if you would would you fill out your system specs as completely as possible. At the bottom left of your last post click on my system soecs, there you will also see a link update system specs, click on that and fill out the info as completely as possible then be sure to scroll to the bottom of the page and click save. You can click on system specs on this post and see mine for an idea of what we would like.

This tutorial will tell you how to upload screenshots in Seven Forums Screenshots and Files - Upload and Post in Seven Forums

Please download Core temp to keep an eye on your CPU temp.
also download and install CPUz if you don't already have it. Pleas post screenshots of the main tab, memory and SPD tabs. Also, if you think you are having graphics problems, download Gpuz.

Is there anything specific you are usually doing when the computer freezes or blue screens? Is there any software that you use that will usually make it freeze?

Also download and run the Toshiba hard drive diagnstic tool from Tacktec. It will be Toshiba/fujitsu. The DOS version is best as the hard drive is not in use.