recurring blue screens


  1. Posts : 9
    Windows 7 Home 64bit
       #1

    recurring blue screens


    Hello,
    I am running Windows 7 /64 bits on a brand new system Asus M4A89TD Pro/ USB3 with AMD64 (phenom II) configuration and experience from time to time a blue screen (once per day).
    Contrarily to inital suspicions, I can state that this is not a RAM issue : firstly because I do not experience any problem on Ubuntu 10.04.1 /amd64 on the same hardware, and secondly because a full memtest loop during a whole night did not reveal any issue with the memory.
    I had my first crash on windows when I tried to install PCTools antispyware (at the beginning of the installation process). I am also running ZoneAlarm Pro /64 bits and did not remove it yet. I am not convinced that ZA is the culprit because I experienced crash outside browsing activities.
    I attach the whole config as recommended, taken before the last 3 crashes.
    I also include below an output of "whocrashed" which shows that 90% of the time the bugcheck code is totally identical: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C45D28)
    Help and advice will be appreciated.
    Many thanks in advance.

    Output of "whocrashed":
    ------------------------------
    This program checks for drivers which have been crashing your computer.
    Whenever a computer suddenly reboots without displaying any notice or blue screen of death, the first thing that is often though about is a hardware failure. In reality, on Windows most crashes are caused by malfunctioning device drivers and kernel modules. In case of a kernel error, most computers do not show a blue screen unless they are configured to do so. Instead these systems suddenly reboot without any notice.
    This program does post-mortem crash dump analysis with the single click of a button.

    To obtain technical support visit www.resplendence.com/support
    To check if a newer version of this program is available, click here.
    Just click the Analyze button for a comprehensible report ...

    --------------------------------------------------------------------------------
    Home Edition notice
    --------------------------------------------------------------------------------
    This version of WhoCrashed is free for use at home only. If you would like to use this software at work or in a commercial environment you should get the professional edition. The professional edition of WhoCrashed also allows analysis of crashdumps on remote drives and computers on the network and offers more detailed analysis.

    --------------------------------------------------------------------------------
    Analysis
    --------------------------------------------------------------------------------
    Crash dump directory: C:\Windows\Minidump
    Crash dumps are enabled on your computer.

    On Fri 10/09/2010 04:38:05 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C45D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\091010-16224-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Thu 09/09/2010 19:34:28 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C38D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090910-18969-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Thu 09/09/2010 05:04:39 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C55D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090910-15085-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Thu 09/09/2010 05:00:14 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002CA0EC8)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090910-17331-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Tue 07/09/2010 15:16:34 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C8CD28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090710-15319-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Tue 07/09/2010 12:08:00 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C44EC8)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090710-23992-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Mon 06/09/2010 05:17:10 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C39D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090610-16114-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Mon 06/09/2010 05:13:14 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C38D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090610-18564-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Mon 06/09/2010 04:23:53 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C86D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090610-19078-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Sun 05/09/2010 08:29:22 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C89D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090510-16754-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Sun 05/09/2010 05:33:25 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x7F (0x8, 0x80050031, 0x6F8, 0xFFFFF80002C92D28)
    Error: UNEXPECTED_KERNEL_MODE_TRAP
    Dump file: C:\Windows\Minidump\090510-19375-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

    On Mon 16/08/2010 19:28:15 your computer crashed
    This was likely caused by the following module: ntoskrnl.exe
    Bugcheck code: 0x19 (0x22, 0xFFFFF8A00109A000, 0x1, 0x0)
    Error: BAD_POOL_HEADER
    Dump file: C:\Windows\Minidump\081610-25615-01.dmp
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.


    --------------------------------------------------------------------------------
    Conclusion
    --------------------------------------------------------------------------------
    12 crash dumps have been found and analyzed. Note that it's not always possible to state with certainty whether a reported driver is really responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.
      My Computer


  2. Posts : 17,796
    Windows 10, Home Clean Install
       #2

    Uninstall Zone alarm or use the hot fixZone Alarm Uninstall Tool http://forums.zonealarm.com/showthread.php?t=70034 and hotfix
    http://support.microsoft.com/kb/981180

    Code:
     Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
     
    Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp4_Windows_NT6_BSOD_jcgriff2[1].zip\Windows_NT6_BSOD_jcgriff2\090710-15319-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (6 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c54000 PsLoadedModuleList = 0xfffff800`02e91e50
    Debug session time: Tue Sep  7 11:15:28.734 2010 (GMT-4)
    System Uptime: 0 days 0:14:23.045
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....................
    Loading User Symbols
    Loading unloaded module list
    .....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    Use !analyze -v to get detailed debugging information.
    BugCheck 7F, {8, 80050031, 6f8, fffff80002c8cd28}
    Probably caused by : NETIO.SYS ( NETIO!CompareSecurityContexts+6a )
    Followup: MachineOwner
    ---------
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault).  The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
            use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
            use .trap on that value
    Else
            .trap on the appropriate frame will show where the trap was taken
            (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 0000000080050031
    Arg3: 00000000000006f8
    Arg4: fffff80002c8cd28
    Debugging Details:
    ------------------
     
    BUGCHECK_STR:  0x7f_8
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    PROCESS_NAME:  System
    CURRENT_IRQL:  2
    LAST_CONTROL_TRANSFER:  from fffff80002cc3ca9 to fffff80002cc4740
    STACK_TEXT:  
    fffff880`009efd68 fffff800`02cc3ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
    fffff880`009efd70 fffff800`02cc2172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`009efeb0 fffff800`02c8cd28 : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : nt!KiDoubleFaultAbort+0xb2
    fffff880`02f16000 fffff800`02c8cf07 : fffffa80`07b9d7c8 00000000`00000001 00000426`00000000 00000426`00000000 : nt!SepTokenFromAccessInformation+0x20
    fffff880`02f16030 fffff880`0159fc5a : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : nt!SeAccessCheckFromState+0x9f
    fffff880`02f16720 fffff880`0159d94f : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : NETIO!CompareSecurityContexts+0x6a
    fffff880`02f16790 fffff880`0159f9b5 : 00000426`00000000 00000426`00000000 00000426`00000000 00000426`00000000 : NETIO!MatchValues+0xef
    fffff880`02f167e0 fffff880`0159f845 : fffffa80`09552160 fffffa80`09c3eb50 fffff880`02f16a08 fffff880`02f17140 : NETIO!FilterMatch+0x95
    fffff880`02f16830 fffff880`015a0ccb : 00000000`00000000 00000000`00000000 fffff880`02f17140 fffff880`02f169f0 : NETIO!IndexListClassify+0x69
    fffff880`02f168b0 fffff880`0163d417 : fffff880`02f16d88 fffff880`02f16d88 fffff880`02f17ac0 fffffa80`09b7baa0 : NETIO!KfdClassify+0xa4e
    fffff880`02f16c20 fffff880`0163683e : fffff880`01745690 00000000`00000000 fffffa80`09712920 00000000`00000000 : tcpip!WfpAleClassify+0x57
    fffff880`02f16c60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e
     
    STACK_COMMAND:  kb
    FOLLOWUP_IP: 
    NETIO!CompareSecurityContexts+6a
    fffff880`0159fc5a 448b442470      mov     r8d,dword ptr [rsp+70h]
    SYMBOL_STACK_INDEX:  5
    SYMBOL_NAME:  NETIO!CompareSecurityContexts+6a
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: NETIO
    IMAGE_NAME:  NETIO.SYS
    DEBUG_FLR_IMAGE_TIMESTAMP:  4bbe946f
    FAILURE_BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
    BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a
    Followup: MachineOwner
    ---------
    I chekced a portion of your reports. Most seem to indicate Zone Alarm
    What I see seems to differ from your ananlysis, probably not using the debugger.

    If problems continue please repost with the mini dump reports.
      My Computer


  3. Posts : 9
    Windows 7 Home 64bit
    Thread Starter
       #3

    OK, thank you for your hint. I will then uninstall ZA and see what the result is.
    In the meantime, I got a crash of an ADSL router, so I am not communicating on my own system. If I can fix that one, I will be able to update this thread soon with my feedback. Thank you anyway for having been so quick.
    One quick question though : is it normal that companies sell software like PCTools or ZA and claim to be compatible with Win7/64 when, considering the speed of your answer, they are apparently not ?
      My Computer


  4. Posts : 17,796
    Windows 10, Home Clean Install
       #4

    Software is tested and finally approved, but then it takes the thousands of users to put it to the real test. The test of Windows and Zone Alarm has proven to have problems.
    The extent of the problem is shown by the fact that MS has even come out with a hot fix, which is suppose rectify the situation.
    At this point, I am only sure that your reports indicate that the problem is Zone Alarm, if you follow my directions and problems still occur, just repost. The Zone Alarm situation has indeed been at least part of the problem.

    I suggest that you uninstall your current Anti Virus and use Microsoft Security Essentials, Malwarebyte and the Windows Fire Wall. Although not required for the BSOD problem, it would be a good combination for great protection and a replacement for Zone Alarm

    Your report show netio as a cause, This in conjuction with the driver that was being used at the time of the crash vsdatant.sys, indicates Zone Alarm
      My Computer


  5. Posts : 9
    Windows 7 Home 64bit
    Thread Starter
       #5

    no problem since I removed ZA...

    I was getting desperate with blue screens having bought such an expensive equipment and certified softwares.
    I sincerely thank you for your diagnosis which seems to be the right one.
      My Computer


  6. Posts : 17,796
    Windows 10, Home Clean Install
       #6

    These reports are not always so accurate. The ZA BC code is usually precise. I do not think that you will have any more problems, Good luck.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:51.
Find Us