BSOD every few days after update KB982018

TheZman · May 27, 2011

Hey there. This is my first time asking for help with my laptop, but I've run out of ideas for what to do here. I can't restore my computer to a date before this update was installed as it doesn't show up in the restore menu, and I'm starting to get worried that it could cause serious harm to my computer.

The update that I had installed (on may 11th) was KB982018 for Windows 7 for x64-based systems. This update was included in a batch which failed to update unless I installed each file individually.

Since installation my computer crashes every two to three days, even after an entire week shut down.

The crashes are all labled as "Bugcheck"

May 13th,

0x00000076 (0x0000000000000000, 0xfffffa8006d60b30, 0x0000000000000001, 0x0000000000000000)

May 15th,

0x0000007e (0xffffffffc0000005, 0xfffff88007d4fbe8, 0xfffff8800d43f938, 0xfffff8800d43f1a0)

May 27th (after being shut down from the 16th to the 22nd,)

0x00000076 (0x0000000000000000, 0xfffffa80066b5060, 0x0000000000000002, 0x0000000000000000)

It may be because the file is for x64-based systems and I'm running Windows home Premium.

Anyways, my info;

My OS is Windows 7 Home Premium (32 bit, I believe)

This is the original installed OS for my Toshiba laptop.

The OS came pre-installed on the system.

The hardware and OS are about a year old, as I haven't had the need to reinstall yet.

If there's anything else that I need to do, please let me know.

SledgeDG · May 27, 2011

Hi TheZman and welcome to SF
To find out if you have a 64Bit installation go to Start, right click on Computer and go to properties
View attachment 156692
Have you tried to uninstall the update...it might not even be important to your system...check here if you need it
An update that improves the compatibility of Windows 7 and Windows Server 2008 R2 with Advanced Format Disks is available

If not, uninstall/use an earlier restore point might be the fast solution
I'll check your files and post back if I find out more

Crosscheck with here (esp. Point 6, 7 and option Two) if there really are no hidden restore points on your laptop
http://www.sevenforums.com/tutorials/700-system-restore.html
-DG
Edit: The crash at 15/05 was blamed on

Code:

stdriver64.sys Sun Dec 12 22:30:59 2010 (4D059373)

your Soundtap driver you could try to update it here Record Streaming Audio - Streaming Audio Capture Software
The crashes at 05/13 and 05/27 were a 76

Code:

STOP 0x00000076: PROCESS_HAS_LOCKED_PAGES

usually caused by a device driver that neglected to clean up after an I/O operation but it's just 2 crashes in 2 week interval so I wouldn't read too much into it for now.
So if uninstalling the update is not a option, I would suggest enabling the driver verifier to provoke some crashes with a little more info towards the guilty driver
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

post back with all new crashes you might get after that

Others than that you should update to SP1 but in the current situation it might be better to postpone that until your actual problem has been solved.
Another potential cause for BSODs is Daemon Tools. you should deinstall it for now following these instructions DuplexSecure - FAQ
and switch to a safer substitute like Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview
or SlySoft Virtual CloneDrive

TheZman · May 27, 2011

When I try to restore my computer it only shows up to the most recent changes in the system, even when "show earlier restore points" is checked. Like an idiot, I hadn't thought to create a backup.

EDIT: Alright, I uninstalled the update. Fingers crossed.

SledgeDG · May 27, 2011

Good

for the next time, if you can't find restore points and you're sure you didn't disable them you could try
Shadow explorer ShadowExplorer.com - Downloads

TheZman · May 27, 2011

So the two crashes at 5/13-27 and 5/15 were from completely separate problems? Wow, that's rotten luck.

Anyways, I'll update the soundtap driver and wait for a week before installing any major updates to my computer to see if uninstalling the update helped. It was only a "recommended" update which apparently helped with some performance issues, and I can live with having something slightly slower if it means not crashing every few days.

SledgeDG · May 27, 2011

Correct! That update was for ppl that use 4kb block size on their harddrives instead of the usual 512Bytes
That's why I said you might not even need it

Code:

Model	TOSHIBA MK3265GSX ATA Device
Bytes/Sector	512

See...you don't suffer any performance issues (at least nothing that this update could fix)

Stick with critical/security updates like Service Pack 1. Wait a week, make sure your restore points work and tackle this
Learn how to install Windows 7 Service Pack 1 (SP1)

TheZman · May 28, 2011

So does that mean I should uninstall all of the other updates marked for x64 based systems?

EDIT: Nevermind, I misread.

SledgeDG · May 29, 2011

Do you actually have a 32Bit installation or a 64Bit one? I put in my first answer how to check that. From your file structure I would say you're on 64Bit. But if not, don't try to install 64 Bit updates

TheZman · May 29, 2011

No, you were correct. It's 64-bit. I assumed earlier that just because it's home premium that it's 32 bit, but I was wrong.

TheZman · May 30, 2011

I've had another BSOD, but this one has been treated differently by my system, which before didn't acknowledge that windows "Shut down unexpectedly," this time it Did.

Here's the details;

Source
Windows

Summary
Shut down unexpectedly

Date
‎5/‎30/‎2011 2:48 AM

Status
Solution available

Problem signature
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 1033

Extra information about the problem
BCCode: 76
BCP1: 0000000000000000
BCP2: FFFFFA8004521060
BCP3: 0000000000000002
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1
Bucket ID: X64_0x76_audiodg.exe
Server information: 72d9c5b3-4020-441e-9cfd-b61be398014c

Despite it saying solutions are available, it said the opposite when I searched for them. I've attached the updated crash dump files and report

SledgeDG · May 30, 2011

The crash was blamed on audiodg.exe the Windows interface where 3rd party audio extensions hook in (DSPs etc.)
Which means something Audio-related was responsible for the crash. Did you happen to install anything audio-related before the crash (after the soundtap update)? Ask yourself What was I doing (or better what audio related programs were running) and look for culprits there.
Update all your Audio drivers ( conexant drivers (like cAudioFilterAgent/caudiofilteragent64.exe and SmartAudio/saiicpl.exe) via Toshiba) etc.
and monitor what audio related programs crash your rig.
Report back if anything new comes up.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\Desktop\TheZman\053011-33867-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16792.amd64fre.win7_gdr.110408-1633
Machine Name:
Kernel base = 0xfffff800`02c17000 PsLoadedModuleList = 0xfffff800`02e54e50
Debug session time: Mon May 30 02:43:51.781 2011 (GMT-4)
System Uptime: 2 days 9:30:50.482
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 76, {0, fffffa8004521060, 2, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+17d46 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PROCESS_HAS_LOCKED_PAGES (76)
Caused by a driver not cleaning up correctly after an I/O.
Arguments:
Arg1: 0000000000000000, Locked memory pages found in process being terminated.
Arg2: fffffa8004521060, Process address.
Arg3: 0000000000000002, Humber of locked pages.
Arg4: 0000000000000000, Pointer to driver stacks (if enabled) or 0 if not.
	Issue a !search over all of physical memory for the current process pointer.
	This will yield at least one MDL which points to it.  Then do another !search
	for each MDL found, this will yield the IRP(s) that point to it, revealing
	which driver is leaking the pages.
	Otherwise, set HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
	Management\TrackLockedPages to a DWORD 1 value and reboot.  Then the system
	will save stack traces so the guilty driver can be easily identified.
	When you enable this flag, if the driver commits the error again you will
	see a different bugcheck - DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS (0xCB) -
	which can identify the offending driver(s).

Debugging Details:
------------------


[COLOR="Red"]PROCESS_NAME:  audiodg.exe[/COLOR]

DEFAULT_BUCKET_ID:  DRIVER_FAULT_0x76

CUSTOMER_CRASH_COUNT:  1

BUGCHECK_STR:  0x76

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002f28bf5 to fffff80002c87700

STACK_TEXT:  
fffff880`0a23ea38 fffff800`02f28bf5 : 00000000`00000076 00000000`00000000 fffffa80`04521060 00000000`00000002 : nt!KeBugCheckEx
fffff880`0a23ea40 fffff800`02f44c8b : fffffa80`04521060 00000000`00000008 fffffa80`00000000 fffffa80`00000000 : nt! ?? ::NNGAKEGL::`string'+0x17d46
fffff880`0a23ea80 fffff800`02c8c8b4 : 00000000`00000000 fffffa80`04521060 fffffa80`04521030 fffff800`030154d5 : nt!PspProcessDelete+0x177
fffff880`0a23eae0 fffff800`02d8d3b9 : fffffa80`04521060 fffffa80`044ed000 fffffa80`044ede98 fffffa80`044ede90 : nt!ObfDereferenceObject+0xd4
fffff880`0a23eb40 fffff800`030d8cee : fffffa80`00000005 fffffa80`03814000 fffffa80`04521060 fffffa80`044ede98 : nt!MmFreeAccessPfnBuffer+0x29
fffff880`0a23eb70 fffff800`030fa310 : fffffa80`069e9701 00000000`00000080 fffffa80`033c99e0 fffff800`02e15568 : nt!PfpFlushBuffers+0x23e
fffff880`0a23ec10 fffff800`02f2abc6 : ffffffff`ff676980 fffffa80`069e9780 00000000`00000080 fffffa80`033c99e0 : nt!PfTLoggingWorker+0xe0
fffff880`0a23ed40 fffff800`02c65bc6 : fffff880`009e8180 fffffa80`069e9780 fffffa80`067e6b60 fffff880`01233534 : nt!PspSystemThreadStartup+0x5a
fffff880`0a23ed80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::NNGAKEGL::`string'+17d46
fffff800`02f28bf5 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::NNGAKEGL::`string'+17d46

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4d9fdd34

FAILURE_BUCKET_ID:  X64_0x76_audiodg.exe_nt!_??_::NNGAKEGL::_string_+17d46

BUCKET_ID:  X64_0x76_audiodg.exe_nt!_??_::NNGAKEGL::_string_+17d46

Followup: MachineOwner

TheZman · May 30, 2011

You see, the thing is I didn't even have soundtap until you told me to update it. I figured maybe the driver was installed by another NHC program so I Installed it in the hopes that it may fix any errors. I really don't care about the program and I'll never use it. If I uninstall it will I have to manually remove the driver?

Also, the only thing I was running which effected sound at the time was Firefox. At least the only thing I was aware I was running. I'll update firefox and the drivers you suggested. Do I use regedit or something else?

EDIT: According to firefox's website, I'm up to date. Would the program necessarily have to be running at the time the crash happened, or could it have been shut down sometime before?

SledgeDG · May 30, 2011

Let's say the drivers were running (some drivers are loaded before you even start anything.I couldn't say if you need soundtap or not, I just saw in the crash report that that specific driver was running and in the end was responsible for that crash. If you don't need it, uninstall it. I don't know how comfortable you are, meddling with the registry. So I would suggest REVO uninstaller or Ccleaner to clear out any debris. I don't think it has anything to do with Firefox...Audiodg.exe is more for DSP plugins for special effects so to speak, Echo, reverb, Flanger, Phaser or even Karaoke stuff.
The best would be, go through your startup list in msconfig, uncheck what doesn't need to start with the system and install all the unused programs with aforementioned REVO

TheZman · Jun 9, 2011

Well, it's been over a week and not a single crash since I uninstalled soundtap. Thanks a lot for all of your help!

SledgeDG · Jun 10, 2011

That's GREAT news!! you're very welcome. (knock on wood

Thanks for the feedback

-DG

BSOD every few days after update KB982018

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer