Windows 7: Win7 64bit BSOD

superstat · 15 Feb 2010

Hi,

Getting BSOD randomly, no pattern seems to be occuring. Could someone please have a look at the dmp?

Its attached. Any help would be greatly appreciated. If its any help I got two units of the same spec and one is running perfectly and the problem machine has this BSOD problem.

Thank you very much in advance

AJ

Jonathan_King · 15 Feb 2010

Welcome!

What anti-virus are you using? If you are using AVG, remove it, and install Microsoft Security Essentials instead.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\021510-21637-01\021510-21637-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a4a000 PsLoadedModuleList = 0xfffff800`02c87e50
Debug session time: Mon Feb 15 02:52:38.094 2010 (GMT-5)
System Uptime: 0 days 0:10:04.219
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {5003, fffff780c0000000, 439b, 696400128736}

Unable to load image \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AVGIDSFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSFilter.sys
Probably caused by : AVGIDSFilter.sys ( AVGIDSFilter+1406 )

Followup: MachineOwner
---------

superstat · 15 Feb 2010

Hi Jonathan,

I am using AVG yes. Do we suspect this to be the problem or do we know its the problem? I shall remove immediately.

Thank you very much indeed.

O and thanks for the welcome.

AJ

Jonathan_King · 15 Feb 2010

Quote: Originally Posted by superstat

Hi Jonathan,

I am using AVG yes. Do we suspect this to be the problem or do we know its the problem? I shall remove immediately.

Thank you very much indeed.

O and thanks for the welcome.

AJ

The rogue file appears to belong to AVG. I recommend completely removing AVG with an uninstaller, like Revo Uninstaller.

myzr7 · 15 Feb 2010

Bug check does say AVG is probable cause.Must be a corrupt version somehow if you have the same running on your other pc with no problems. Makes me wonder if maybe you have some malware on board. Might be worth a few scans with malwarebytes

Code:

 
 
 
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {5003, fffff780c0000000, 439b, 696400128736}
Unable to load image \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AVGIDSFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSFilter.sys
Probably caused by : AVGIDSFilter.sys ( AVGIDSFilter+1406 )
Followup: MachineOwner
---------
6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff780c0000000
Arg3: 000000000000439b
Arg4: 0000696400128736
Debugging Details:
------------------
 
BUGCHECK_STR:  0x1a_5003
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  avgcsrva.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff80002b2bc41 to fffff80002abbf00
STACK_TEXT:  
fffff880`07fb5248 fffff800`02b2bc41 : 00000000`0000001a 00000000`00005003 fffff780`c0000000 00000000`0000439b : nt!KeBugCheckEx
fffff880`07fb5250 fffff800`02ad8f56 : fffff6fc`c00f7bd8 00000000`00000001 fffff880`00000001 ffffffff`ffff0001 : nt! ?? ::FNODOBFM::`string'+0x2a22f
fffff880`07fb53c0 fffff800`02ae7f81 : fffff980`1ef7b000 00000000`008bb000 fffff880`00000004 fffff880`07fb55a8 : nt!MmCheckCachedPageStates+0x4d6
fffff880`07fb5570 fffff800`02ae7bf4 : fffffa80`084287c0 00000000`070bdf20 fffff880`07fb56b0 00000000`000034bc : nt!CcMapAndCopyInToCache+0x301
fffff880`07fb5660 fffff880`014edfb8 : 00000000`008c34bc fffffa80`0a394c00 fffff880`07fb5750 fffffa80`00008000 : nt!CcCopyWrite+0x194
fffff880`07fb56f0 fffff880`012be132 : fffffa80`0a394c80 fffff880`012c1732 fffffa80`00008000 00000000`00008001 : Ntfs!NtfsCopyWriteA+0x208
fffff880`07fb58e0 fffff880`012c1c2a : fffff880`07fb59b0 fffffa80`0a63b0d8 00000000`070bdf00 00000000`00008000 : fltmgr!FltpPerformFastIoCall+0xf2
fffff880`07fb5940 fffff880`012df7fe : 00000000`00008000 00000000`00000000 fffffa80`0a394c80 fffff880`07fb5b40 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`07fb5980 fffff880`02e01406 : fffff880`02e011c0 00000000`00000000 00000000`00000000 fffffa80`0a394cf4 : fltmgr!FltpFastIoWrite+0x1ce
fffff880`07fb5a20 fffff880`02e011c0 : 00000000`00000000 00000000`00000000 fffffa80`0a394cf4 fffff880`00000000 : AVGIDSFilter+0x1406
fffff880`07fb5a28 00000000`00000000 : 00000000`00000000 fffffa80`0a394cf4 fffff880`00000000 00000000`070bdf20 : AVGIDSFilter+0x11c0
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
AVGIDSFilter+1406
fffff880`02e01406 ??              ???
SYMBOL_STACK_INDEX:  9
SYMBOL_NAME:  AVGIDSFilter+1406
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: AVGIDSFilter
IMAGE_NAME:  AVGIDSFilter.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4acfa5a7
FAILURE_BUCKET_ID:  X64_0x1a_5003_AVGIDSFilter+1406
BUCKET_ID:  X64_0x1a_5003_AVGIDSFilter+1406
Followup: MachineOwner
---------
6: kd> lmvm AVGIDSFilter
start             end                 module name
fffff880`02e00000 fffff880`02e0c000   AVGIDSFilter T (no symbols)           
    Loaded symbol image file: AVGIDSFilter.sys
    Image path: \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys
    Image name: AVGIDSFilter.sys
    Timestamp:        Fri Oct 09 16:05:43 2009 (4ACFA5A7)
    CheckSum:         0000C5A9
    ImageSize:        0000C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

superstat · 17 Feb 2010

Thank you very much.

I have done this now and will see what happens.

I have also attached all of the minidumps from the computer. 7 in 7 days. Could someone please have a look at these to see if it is AVG everytime. Thank you very much for all your help.

Superstat

Jonathan_King · 17 Feb 2010

Those dmps point to bad RAM.

Download a copy of Memtest86 and burn the ISO to a CD using ImgBurn. Boot from the CD, and run at least 5 passes.

superstat · 20 Feb 2010

Hey guys,

Just thought I would keep you updated.

Ran memory tests and also ran Dell memory tests and complete computer tests. Nothing.

Although it did pick up an error with a USB flash drive that has been in the machine since day one. I installed something from it and never removed it. I have now removed this and am running the computer to see if these errors continue. Thank you for your help. I'll keep you updated.

AJ

Windows 7: Win7 64bit BSOD

Win7 64bit BSOD problems?