Blue Screen


  1. Posts : 38
    win7 Home Premium 64 bit
       #1

    Blue Screen


    I am using Win 7 since release in Oct 09 and had no issues at all. Since last 3 days I am experiencing system shut off after displaying BLUE Screen. I am constantly adding new applications and uninstalled recently added application i.e. fbackup 4 a back up utility feeling that this could have been the cause. This has not helped, the next in the line could be Adobe Flash CS4, and since it is critical to my work I am hesitant. It may be pertinent to mention that I migrated to Win 7 from XP via clean install.

    I would appreciate any insight. Minidump file attached.

    Thanks for any help.


    System Configuration

    OS Window 7 Home Premium 64bit
    Intel Core Quad Q8200
    Installed Ram : 8 GB
    Display adaptor : ATI Radeon HD 2600 PRO 1 GB
    Optriarc DVD drive RW AD7240S
    Stroage : WDC 640 GB. WDC 160 GB, WDC 80 GB
      My Computer


  2. Posts : 86
    Windows 7
       #2

    The dump shows the offending driver to be CBUFS.SYS (Commodo Backup). MAke sure you have the most current version of the program. If so and you are still getting BSOD then uninstall the program and use a different backup program.

    Code:
     
     Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
     
    Loading Dump File [C:\Users\nickle\AppData\Local\Temp\Rar$DI00.384\121409-41683-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Machine Name:
    Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
    Debug session time: Mon Dec 14 13:28:14.448 2009 (GMT-5)
    System Uptime: 0 days 0:02:42.368
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    Use !analyze -v to get detailed debugging information.
    BugCheck 3B, {c0000005, fffff880010ba7fa, fffff88009a119b0, 0}
    Probably caused by : CBUFS.sys ( CBUFS+1f7fa )
    Followup: MachineOwner
    ---------
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff880010ba7fa, Address of the exception record for the exception that caused the bugcheck
    Arg3: fffff88009a119b0, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    Debugging Details:
    ------------------
     
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    FAULTING_IP: 
    CBUFS+1f7fa
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    CONTEXT:  fffff88009a119b0 -- (.cxr 0xfffff88009a119b0)
    rax=0000000000000000 rbx=fffffa800851c1b0 rcx=ffffffffffffffff
    rdx=000000000000005c rsi=fffffa8009114c80 rdi=0000000000000002
    rip=fffff880010ba7fa rsp=fffff88009a12390 rbp=0000000000000002
     r8=ffffffffffffffff  r9=0000000000000000 r10=ffffffffffffffff
    r11=fffff8a004ca5dd0 r12=fffffa8006c0ab80 r13=fffffa8006c0afb0
    r14=fffffa800aabe710 r15=fffff8a003ff6cb0
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    CBUFS+0x1f7fa:
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    Resetting default scope
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  EXCEL.EXE
    CURRENT_IRQL:  0
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff880010ba7fa
    STACK_TEXT:  
    fffff880`09a12390 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CBUFS+0x1f7fa
     
    FOLLOWUP_IP: 
    CBUFS+1f7fa
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    SYMBOL_STACK_INDEX:  0
    SYMBOL_NAME:  CBUFS+1f7fa
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: CBUFS
    IMAGE_NAME:  CBUFS.sys
    DEBUG_FLR_IMAGE_TIMESTAMP:  4aeaa1df
    STACK_COMMAND:  .cxr 0xfffff88009a119b0 ; kb
    FAILURE_BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
    BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
    Followup: MachineOwner
    ---------
      My Computer


  3. Posts : 11,840
    64-bit Windows 8.1 Pro
       #3

    You need to setup and maintain a system imaging policy and keep it up to date, especially since you are doing a lot of experimental installs... forewarned is forearmed..
      My Computer


  4. Posts : 38
    win7 Home Premium 64 bit
    Thread Starter
       #4

    nickle

    Thanks, I have since uninstalled the Commodo backup. I use Revo Uninstaller, it seems this tool is not good enough.

    Do I have any other choice besides system restore ?


    Tews

    I appreciate what you are saying. can you suggest how to go about setting system imaging policy. Please bear in mind that I am no geek just a intensive user.

    ---------------------------------------------------

    The dump shows the offending driver to be CBUFS.SYS (Commodo Backup). MAke sure you have the most current version of the program. If so and you are still getting BSOD then uninstall the program and use a different backup program.

    Code:
     
     Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
     
    Loading Dump File [C:\Users\nickle\AppData\Local\Temp\Rar$DI00.384\121409-41683-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Machine Name:
    Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
    Debug session time: Mon Dec 14 13:28:14.448 2009 (GMT-5)
    System Uptime: 0 days 0:02:42.368
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    Use !analyze -v to get detailed debugging information.
    BugCheck 3B, {c0000005, fffff880010ba7fa, fffff88009a119b0, 0}
    Probably caused by : CBUFS.sys ( CBUFS+1f7fa )
    Followup: MachineOwner
    ---------
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff880010ba7fa, Address of the exception record for the exception that caused the bugcheck
    Arg3: fffff88009a119b0, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    Debugging Details:
    ------------------
     
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    FAULTING_IP: 
    CBUFS+1f7fa
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    CONTEXT:  fffff88009a119b0 -- (.cxr 0xfffff88009a119b0)
    rax=0000000000000000 rbx=fffffa800851c1b0 rcx=ffffffffffffffff
    rdx=000000000000005c rsi=fffffa8009114c80 rdi=0000000000000002
    rip=fffff880010ba7fa rsp=fffff88009a12390 rbp=0000000000000002
     r8=ffffffffffffffff  r9=0000000000000000 r10=ffffffffffffffff
    r11=fffff8a004ca5dd0 r12=fffffa8006c0ab80 r13=fffffa8006c0afb0
    r14=fffffa800aabe710 r15=fffff8a003ff6cb0
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    CBUFS+0x1f7fa:
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    Resetting default scope
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    BUGCHECK_STR:  0x3B
    PROCESS_NAME:  EXCEL.EXE
    CURRENT_IRQL:  0
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff880010ba7fa
    STACK_TEXT:  
    fffff880`09a12390 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CBUFS+0x1f7fa
     
    FOLLOWUP_IP: 
    CBUFS+1f7fa
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    SYMBOL_STACK_INDEX:  0
    SYMBOL_NAME:  CBUFS+1f7fa
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: CBUFS
    IMAGE_NAME:  CBUFS.sys
    DEBUG_FLR_IMAGE_TIMESTAMP:  4aeaa1df
    STACK_COMMAND:  .cxr 0xfffff88009a119b0 ; kb
    FAILURE_BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
    BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
    Followup: MachineOwner
    ---------
    [/QUOTE]
      My Computer


  5. Posts : 28,845
    Win 8 Release candidate 8400
       #5

    cimage said:
    I am using Win 7 since release in Oct 09 and had no issues at all. Since last 3 days I am experiencing system shut off after displaying BLUE Screen. I am constantly adding new applications and uninstalled recently added application i.e. fbackup 4 a back up utility feeling that this could have been the cause. This has not helped, the next in the line could be Adobe Flash CS4, and since it is critical to my work I am hesitant. It may be pertinent to mention that I migrated to Win 7 from XP via clean install.

    I would appreciate any insight. Minidump file attached.

    Thanks for any help.


    System Configuration

    OS Window 7 Home Premium 64bit
    Intel Core Quad Q8200
    Installed Ram : 8 GB
    Display adaptor : ATI Radeon HD 2600 PRO 1 GB
    Optriarc DVD drive RW AD7240S
    Stroage : WDC 640 GB. WDC 160 GB, WDC 80 GB
    Hi and welcome

    This crash was probably caused by cfusb.sys (part of comodo) I would

    unistall comodo for there are better around
    run a system file check
    type cmd in search>right click and run as admin>sfc /scannow


    Ken J+




    Code:
    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\K\Desktop\121409-41683-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Machine Name:
    Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
    Debug session time: Mon Dec 14 13:28:14.448 2009 (GMT-5)
    System Uptime: 0 days 0:02:42.368
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 3B, {c0000005, fffff880010ba7fa, fffff88009a119b0, 0}
    
    Probably caused by : CBUFS.sys ( CBUFS+1f7fa )
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff880010ba7fa, Address of the exception record for the exception that caused the bugcheck
    Arg3: fffff88009a119b0, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    CBUFS+1f7fa
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    
    CONTEXT:  fffff88009a119b0 -- (.cxr 0xfffff88009a119b0)
    rax=0000000000000000 rbx=fffffa800851c1b0 rcx=ffffffffffffffff
    rdx=000000000000005c rsi=fffffa8009114c80 rdi=0000000000000002
    rip=fffff880010ba7fa rsp=fffff88009a12390 rbp=0000000000000002
     r8=ffffffffffffffff  r9=0000000000000000 r10=ffffffffffffffff
    r11=fffff8a004ca5dd0 r12=fffffa8006c0ab80 r13=fffffa8006c0afb0
    r14=fffffa800aabe710 r15=fffff8a003ff6cb0
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    CBUFS+0x1f7fa:
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    Resetting default scope
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  EXCEL.EXE
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff880010ba7fa
    
    STACK_TEXT:  
    fffff880`09a12390 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CBUFS+0x1f7fa
    
    
    FOLLOWUP_IP: 
    CBUFS+1f7fa
    fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
    
    SYMBOL_STACK_INDEX:  0
    
    SYMBOL_NAME:  CBUFS+1f7fa
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: CBUFS
    
    IMAGE_NAME:  CBUFS.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4aeaa1df
    
    STACK_COMMAND:  .cxr 0xfffff88009a119b0 ; kb
    
    FAILURE_BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
    
    BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
    
    Followup: MachineOwner
    ---------
      My Computer


  6. Posts : 86
    Windows 7
       #6

    cimage said:
    nickle

    Thanks, I have since uninstalled the Commodo backup. I use Revo Uninstaller, it seems this tool is not good enough.

    Do I have any other choice besides system restore ?

    The purpose of uninstalling Commodo backup was to rid your system of the driver CBUFS.SYS which exists in the folder C:\Windows\SysWOW64\drivers. To that extent you can no longer receive a BSOD that names the driver as the culprit.

    There is no way of telling if Commodo backup was completely uninstalled. If you still receive a BSOD attach the minidump as before to receive additional help.
      My Computer


  7. Posts : 38
    win7 Home Premium 64 bit
    Thread Starter
       #7

    Nickle

    I guess I wasn't very clear. Though I uninstalled the Commodo backup, apparently Revo Uninstaller didn't cleanup everything. Now my question is can I manually delete the offending driver ?




    nickle said:
    cimage said:
    nickle

    Thanks, I have since uninstalled the Commodo backup. I use Revo Uninstaller, it seems this tool is not good enough.

    Do I have any other choice besides system restore ?

    The purpose of uninstalling Commodo backup was to rid your system of the driver CBUFS.SYS which exists in the folder C:\Windows\SysWOW64\drivers. To that extent you can no longer receive a BSOD that names the driver as the culprit.

    There is no way of telling if Commodo backup was completely uninstalled. If you still receive a BSOD attach the minidump as before to receive additional help.
      My Computer


  8. Posts : 86
    Windows 7
       #8

    cimage said:
    Nickle

    I guess I wasn't very clear. Though I uninstalled the Commodo backup, apparently Revo Uninstaller didn't cleanup everything. Now my question is can I manually delete the offending driver ?
    If Commodo backup no longer appears in control panel/installed programs, it should be ok to rename CBUFS.SYS to CBUFS.BAK in case run into trouble you can change it back.
      My Computer


  9. Posts : 38
    win7 Home Premium 64 bit
    Thread Starter
       #9

    nickle said:
    cimage said:
    Nickle

    I guess I wasn't very clear. Though I uninstalled the Commodo backup, apparently Revo Uninstaller didn't cleanup everything. Now my question is can I manually delete the offending driver ?
    If Commodo backup no longer appears in control panel/installed programs, it should be ok to rename CBUFS.SYS to CBUFS.BAK in case run into trouble you can change it back.

    Since I had uninstalled it doesn't list as installed program. As suggested I have renamed the file. Will watch and wait.

    Can you suggest a uninstall utility. I was using Revo which obviously has failed.

    Thanks a ton for your help.
      My Computer


  10. Posts : 1
    Windows 7
       #10

    Fix


    you can fix this problem with 2 soution
    1. first, unistall comodo backup, after that remove registry key comodo in "Hkey_Local_Machine\Software\...", "Hkey_Local_User\Software\...
    try, if not work, restart n try again. this work in my compi. if you choice this solutions you can't use comodo again

    2. if you want to use comodo backup n don't want the fuc' blue screen you must update your comodo in http://download.comodo.com/cbu/downl...r2008_win7.exe.

    reference
    1. Blue Screen whenever I create a new folder on any USB thumb drive

    2. Windows 7 BSOD on mapped external drive

    trust me, its work
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:00.
Find Us