Bsod stop: 0x000000f4

ghanson59 · 03 Jan 2011

Win Pro 7 x64
HP 8540w (Core i7 M620, nVidia Quadro FX 880M, 8 GB RAM, 320 GB HD w/66 GB Free)

BSOD today (2nd time in the last 3 days) with the following:

"STOP: 0X000000F4 (0X0000000000000003, 0XFFFFFA800A02EA00, 0XFFFFFA800A02ECE0, 0XFFFFF8000357F5D0)

Physical memory dump FAILED with status 0XC0000010."

I have attached the error information. Please help point me in the right direction. HP Tech Support hasn't been able to help.

ghanson59 · 04 Jan 2011

Help?

**cluberti** · 04 Jan 2011

A bugcheck 0xF4 means either winlogon.exe, csrss.exe, or lsass.exe crashed (since all 3 are critical, windows bugchecks if any is unavailable). The problem with this sort of failure is that these binaries are also responsible for the security subsystem and as such if one of them fails, you may be unable to access the hard disk and write out a dump file (given the c0000010 error - STATUS_INVALID_DEVICE_REQUEST, I'd guess that is what is happening here). You have your advanced settings under startup and recovery set to NOT notify the admin or write to the event log, so there's no data at all in the event log that we could at least use to try and guess as to what's happening. Without at least that and/or a dump file, all we can say for sure at this point is to update your drivers to the latest and greatest for all your devices, make sure your system is fully patched, that you're running up-to-date antivirus and antimalware software (again, a strong preference here is MSE for this over most other security suites), and that your hard disk passes a chkdsk /f without error and that your system is properly defragmented and your prefetch cache is cleared and rebuilt after creating a system restore point. Note that you may have to set the explorer view to show hidden and system files and to show file extensions for known files to see the \Windows\Prefetch\ folder and delete ONLY .pf files in this folder... ONLY; clear the recycle bin and reboot for changes to take effect.

After that, we have to hope a crash is caught if it occurs again.

DeanP · 04 Jan 2011

Uninstall your current anti-virus software and replace it with MS Security Essentials. It is free, easy to use and less-annoying. (link is below).

When does the BSOD occur? (i.e: boot up, logon screen, etc...)
Try and see if Windows is configured CORRECTLY to create dump files when BSOD occurs..

1. Go to start
2. Right click on computer and click properties.
3. On the left panel, click on advanced system settings.
4. On the Startup and Recovery Box, click settings.
Make sure the settings looks like this:
Attachment 129165

Currently, looking at your drivers list for old drivers. Old drivers cause BSOD.

Also, make sure the minidump folder exists for minidump files. Go to C:\Windows\Minidump. If there is no minidump folder, create one, name it "Minidump" without the quotes.

Link to MS Security Essentials:
http://www.microsoft.com/security_essentials/

CarlTR6 · 04 Jan 2011

Adding to what cluberti posted, and he is a pro, I see you are running Windows Defender. Defender does not do very well on some Win 7 systems. Dean suggested that you install Microsoft Security Essentials and I agree. MSE supersedes Defender, offer better protection and runs very well with Win &. MSE will turn Defender off; you don't have to uninstall Defender. It also appears the you are running Kaspersky. You do not want to run to AV programs. That can easily cause conflicts. Unitl you get your system stable, I suggest your uninstall Kasperky using this removal tool: Tool. Only run MSE until you get your system stable. Then you can choose between MSE and Kaspersky. Don't run both.

It also looks like you are running Zone Alarm and Windows Firewall. You do not want to run two firewalls. I suggest that you uninstall Zone Alarm using this removal tool: http://download.zonealarm.com/bin/fr...cpes_clean.exe. Zone Alarm is a well known and notorious cause of BSOD's on some Win 7 systems. There is a hotfix for ZA: Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F". However, until you get your system stable, stick with MSE and Windows Firewall.

Out of date drivers can and cause conflicts, memory corruption and Bsod's. You have the following outdated drivers loaded on your system. Update these drivers through the links provided.

ax88772.sys 6/9/2009 - ASIX AX88772/AX88772A USB2.0 to Fast Ethernet Adapter - ASIX Electronics Corp. Download - ASIX Electronics Corporation. Update this driver.

HpqKbFiltr.sys 4/29/2009 - HpqKbFilter Driver - HP Quick Launch Buttons HpqKbFiltr Keyboard Filter driver. HP® - Holiday Deals on Laptops, Desktops, Printers, Servers and more.

rimmpx64.sys 6/25/2009 - Ricoh Memory Card Reader driver. OEM - none at Home | Ricoh Global. Try updating this driver through HP. If you cannot update it, uninstall the card reader. It is obsolete.

rimspx64.sys 6/25/2009 - Ricoh Memory Card Reader driver. OEM - none at Home | Ricoh Global. See above.

Follow cluberti's suggestions. Uninstall Kaspersky and Zone Alarm. Install MSE. Only run one AV and one firewall. Update the above drivers. Reboot and let's see how your system does. Please update us.

DeanP · 04 Jan 2011

you don't have to uninstall Defender

I don't think you can uninstall Windows Defender - it is a Windows feature.

ghanson59 · 04 Jan 2011

Thank you very much for the replies and the help.

This is indeed curious because I do have the system set to write an event to the system log. I had the debugging information written to a kernel dump but will change that to small memory dump.

I only have Zone Alarm installed on the system (along with the hotfix supplied to me by ZA Tech Support). Windows reports that the Windows Firewall is not running. Here is the screenshot:

I disabled automatic restart on a system failure so as to allow me to capture a photo of the error codes.

The crashes usually occur after the system has been up for several hours and I'm running a real-time stock trading platform, ACT by Sage, Outlook, Firefox, TrueCrypt, and SQL Server. When it's going to crash I'll hear 4 or 5 system beeps then the system locks up and a couple of seconds later it goes BSOD. So far these errors have caused the system to fail to write the dump file.

I will follow your directions and report back with the results.

Thanks again for your expertise and assistance.

Greg

**cluberti** · 05 Jan 2011

The system beeps - BIOS beeps? Is there a pattern to the beeps?

CarlTR6 · 05 Jan 2011

DeanP said:

you don't have to uninstall Defender

I don't think you can uninstall Windows Defender - it is a Windows feature.

You are correct.

ghanson59 · 05 Jan 2011

The beeps sound similar to system beeps (although a bit more "tinny") and come at 0.5 second intervals. They come in one set of four beeps then I know we're off to BSODland.