Windows 7 32 bit - BSOD

Azmar · 05 Jan 2011

Hello so I keep getting BSOD ONLY when I install a certain software. For example if I install Itunes 32bit, or some MFC.exe application, or SUPERanti Spyware...then after I install I get crazy amount of BSOD that leads towards bad memory usually. If I system restore everything works fine. I use verifier to know if I get a BSOD or not.

- x86 (32-bit)
- the original installed OS on the system? This is the original Windows 7 32bit home premium
- an OEM or full retail version? It is full retail
- What is the age of system (hardware)? 7 months or so.
- What is the age of OS installation I have reinstalled the OS several times due to BSODs. The age of this one is about 3 months.
What I have done to try and fix this:
-SFC/SCANNOW (said I had a few corrupted problems and fixed them)
-chkdsk /f
-replaced my old RAM with new RAM and still same problems so its not bad RAM
so that rules out memtest86
-I clean installed everything even the OS.
-I narrowed it down to when I install a program it causes a BSOD.
-I updated my BIOS

When I install a program like Itunes 32 bit for example I get different types of BSOD such as: ntoskrnl.exe , avgtdix.sys (this isn't causing any BSOD anymore), saskutil.sys (unistalled it was in one of my crashes), win32k.sys, ntkrnlpa.exe
I tried to replace the win32k.sys and went into the settings to change the permission but it still wont let me change the file to win32k.old to fix it.

A side note I am overclocking my ram it is 6.2V and im putting it at 6.5V because thats what the comp needs.

I think the problems may be that I have to update drivers? My nvidia driver is only 6 months old but I don't think that has to do with anything. Maybe I have some bad virtual memory pool... i dunno, I am just trying to brainstorm.

The dump files I sent were just some of the BSOD I got when I installed Itunes 32bit or the MFC application, or some other file. Right now my comp is at a restored point so its fine. But I would like to get those programs installed.

Anyways any help would be appreciated, thank you very much.

DeanP · 05 Jan 2011

I tried to replace the win32k.sys and went into the settings to change the permission but it still wont let me change the file to win32k.old to fix it.

DO NOT change win32k.sys to win32k.old. win32k.sys is part of Windows file.

Uninstall SuperAntiSpyware and your current anti virus software. Replace it with MalwareBytes and Microsoft Security Essentials.

MalwareBytes - Malwarebytes
Microsoft Security Essentials - http://www.microsoft.com/security_essentials/

Uninstall Daemon Tools/Alcohol 120%. They use a file, "sptd.sys" which is causing problems on Windows 7 Systems. Once you have uninstalled it, use this tool to delete sptd.sys: DuplexSecure - Downloads

85d37000 85d7f000 ACPI ACPI.sys Tue Jul 14 06:11:11 2009 (4A5BBF0F)
8fa9b000 8faf5000 afd afd.sys Tue Jul 14 06:12:34 2009 (4A5BBF62)
85f25000 85f2e000 amdxata amdxata.sys Wed May 20 00:57:35 2009 (4A12F30F)
85ea8000 85eb1000 atapi atapi.sys Tue Jul 14 06:11:15 2009 (4A5BBF13)
85eb1000 85ed4000 ataport ataport.SYS Tue Jul 14 06:11:18 2009 (4A5BBF16)
863da000 863e3000 AVGIDSEH AVGIDSEH.Sys Tue Sep 14 05:46:35 2010 (4C8EA9CB)
86009000 86015000 avgmfx86 avgmfx86.sys Tue Sep 07 07:48:01 2010 (4C858BC1)
86411000 86415b80 avgrkx86 avgrkx86.sys Tue Sep 07 07:48:16 2010 (4C858BD0)
8fa21000 8fa68980 avgtdix avgtdix.sys Fri Nov 12 18:05:58 2010 (4CDD1F96)
8601c000 86023000 Beep Beep.SYS Tue Jul 14 06:45:00 2009 (4A5BC6FC)
85a89000 85a91000 BOOTVID BOOTVID.dll Tue Jul 14 08:04:34 2009 (4A5BD9A2)
8621a000 86239000 cdrom cdrom.sys Tue Jul 14 06:11:24 2009 (4A5BBF1C)
85ad3000 85b7e000 CI CI.dll Tue Jul 14 08:09:28 2009 (4A5BDAC8)
863b5000 863da000 CLASSPNP CLASSPNP.SYS Tue Jul 14 06:11:20 2009 (4A5BBF18)
85a91000 85ad3000 CLFS CLFS.SYS Tue Jul 14 06:11:10 2009 (4A5BBF0E)
86194000 861f1000 cng cng.sys Tue Jul 14 06:32:55 2009 (4A5BC427)
863e3000 863f0000 crashdmp crashdmp.sys Tue Jul 14 06:45:50 2009 (4A5BC72E)
86400000 86411000 disk disk.sys Tue Jul 14 06:11:28 2009 (4A5BBF20)
86200000 86209000 dump_atapi dump_atapi.sys Tue Jul 14 06:11:15 2009 (4A5BBF13)
863f0000 863fb000 dump_dumpata dump_dumpata.sys Tue Jul 14 06:11:16 2009 (4A5BBF14)
86209000 8621a000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 06:12:47 2009 (4A5BBF6F)
85f62000 85f73000 fileinfo fileinfo.sys Tue Jul 14 06:21:51 2009 (4A5BC18F)
85f2e000 85f62000 fltmgr fltmgr.sys Tue Jul 14 06:11:13 2009 (4A5BBF11)
86000000 86009000 Fs_Rec Fs_Rec.sys Tue Jul 14 06:11:14 2009 (4A5BBF12)
86383000 863b5000 fvevol fvevol.sys Sat Sep 26 09:24:21 2009 (4ABD7B55)
86563000 86594000 fwpkclnt fwpkclnt.sys Tue Jul 14 06:12:03 2009 (4A5BBF43)
82e15000 82e4c000 hal halmacpi.dll Tue Jul 14 06:11:03 2009 (4A5BBF07)
865f4000 865fc000 hwpolicy hwpolicy.sys Tue Jul 14 06:11:01 2009 (4A5BBF05)
80ba6000 80bae000 kdcom kdcom.dll Tue Jul 14 08:08:58 2009 (4A5BDAAA)
86181000 86194000 ksecdd ksecdd.sys Tue Jul 14 06:11:56 2009 (4A5BBF3C)
86331000 86356000 ksecpkg ksecpkg.sys Fri Dec 11 11:04:22 2009 (4B21C4C6)
85a00000 85a78000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 08:06:41 2009 (4A5BDA21)
85e92000 85ea8000 mountmgr mountmgr.sys Tue Jul 14 06:11:27 2009 (4A5BBF1F)
85fc5000 85fd0000 Msfs Msfs.SYS Tue Jul 14 06:11:26 2009 (4A5BBF1E)
85d7f000 85d87000 msisadrv msisadrv.sys Tue Jul 14 06:11:09 2009 (4A5BBF0D)
86156000 86181000 msrpc msrpc.sys Tue Jul 14 06:11:59 2009 (4A5BBF3F)
865e4000 865f4000 mup mup.sys Tue Jul 14 06:14:14 2009 (4A5BBFC6)
8623c000 862f3000 ndis ndis.sys Tue Jul 14 06:12:24 2009 (4A5BBF58)
8fb1b000 8fb29000 netbios netbios.sys Tue Jul 14 06:53:54 2009 (4A5BC912)
8fa69000 8fa9b000 netbt netbt.sys Tue Jul 14 06:12:18 2009 (4A5BBF52)
862f3000 86331000 NETIO NETIO.SYS Tue Jul 14 06:12:35 2009 (4A5BBF63)
85fd0000 85fde000 Npfs Npfs.SYS Tue Jul 14 06:11:31 2009 (4A5BBF23)
82e4c000 8325c000 nt ntkrpamp.exe Sat Jun 19 10:55:24 2010 (4C1C3FAC)
86027000 86156000 Ntfs Ntfs.sys Tue Jul 14 06:12:05 2009 (4A5BBF45)
86015000 8601c000 Null Null.SYS Tue Jul 14 06:11:12 2009 (4A5BBF10)
8fafc000 8fb1b000 pacer pacer.sys Tue Jul 14 06:53:58 2009 (4A5BC916)
85dbc000 85dcd000 partmgr partmgr.sys Tue Jul 14 06:11:35 2009 (4A5BBF27)
85d92000 85dbc000 pci pci.sys Tue Jul 14 06:11:16 2009 (4A5BBF14)
85e7d000 85e84000 pciide pciide.sys Tue Jul 14 06:11:19 2009 (4A5BBF17)
85e84000 85e92000 PCIIDEX PCIIDEX.SYS Tue Jul 14 06:11:15 2009 (4A5BBF13)
861f1000 861ff000 pcw pcw.sys Tue Jul 14 06:11:10 2009 (4A5BBF0E)
85a78000 85a89000 PSHED PSHED.dll Tue Jul 14 08:09:36 2009 (4A5BDAD0)
85fad000 85fb5000 RDPCDD RDPCDD.sys Tue Jul 14 07:01:40 2009 (4A5BCAE4)
85fb5000 85fbd000 rdpencdd rdpencdd.sys Tue Jul 14 07:01:39 2009 (4A5BCAE3)
85fbd000 85fc5000 rdprefmp rdprefmp.sys Tue Jul 14 07:01:41 2009 (4A5BCAE5)
86356000 86383000 rdyboost rdyboost.sys Tue Jul 14 06:22:02 2009 (4A5BC19A)
8fb4c000 8fb6e000 SASKUTIL SASKUTIL.SYS Tue May 11 00:15:22 2010 (4BE83F2A)
85d11000 85d37000 SCSIPORT SCSIPORT.SYS Tue Jul 14 06:45:55 2009 (4A5BC733)
865dc000 865e4000 spldr spldr.sys Mon May 11 23:13:47 2009 (4A084EBB)
85c15000 85d08000 sptd sptd.sys Mon Oct 12 03:54:02 2009 (4AD245EA)
85ede000 85f25000 storport storport.sys Tue Jul 14 06:45:58 2009 (4A5BC736)
8641a000 86563000 tcpip tcpip.sys Mon Jun 14 10:36:59 2010 (4C15A3DB)
85ff5000 86000000 TDI TDI.SYS Tue Jul 14 06:12:12 2009 (4A5BBF4C)
85fde000 85ff5000 tdx tdx.sys Tue Jul 14 06:12:10 2009 (4A5BBF4A)
8fb3c000 8fb4c000 termdd termdd.sys Tue Jul 14 07:01:35 2009 (4A5BCADF)
85d87000 85d92000 vdrvroot vdrvroot.sys Tue Jul 14 06:46:19 2009 (4A5BC74B)
85f73000 85f7f000 vga vga.sys Tue Jul 14 06:25:50 2009 (4A5BC27E)
85f7f000 85fa0000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 06:25:49 2009 (4A5BC27D)
86594000 8659c380 vmstorfl vmstorfl.sys Tue Jul 14 06:28:44 2009 (4A5BC32C)
85dcd000 85ddd000 volmgr volmgr.sys Tue Jul 14 06:11:25 2009 (4A5BBF1D)
85e32000 85e7d000 volmgrx volmgrx.sys Tue Jul 14 06:11:41 2009 (4A5BBF2D)
8659d000 865dc000 volsnap volsnap.sys Tue Jul 14 06:11:34 2009 (4A5BBF26)
8fb29000 8fb3c000 wanarp wanarp.sys Tue Jul 14 06:55:02 2009 (4A5BC956)
85fa0000 85fad000 watchdog watchdog.sys Tue Jul 14 06:24:10 2009 (4A5BC21A)
85b7e000 85bef000 Wdf01000 Wdf01000.sys Tue Jul 14 06:11:36 2009 (4A5BBF28)
85bef000 85bfd000 WDFLDR WDFLDR.SYS Tue Jul 14 06:11:25 2009 (4A5BBF1D)
8faf5000 8fafc000 wfplwf wfplwf.sys Tue Jul 14 06:53:51 2009 (4A5BC90F)
85d08000 85d11000 WMILIB WMILIB.SYS Tue Jul 14 06:11:22 2009 (4A5BBF1A)

Azmar · 01 Feb 2011

Hello, so the response I got back worked perfectly. I had no issues for a month no crashes and fabulous support very fast.

I just recently started getting BSOD again after a month and it doesn't make sense. I just recently installed iTunes, FRAPS, a few small programs. Sometimes I notice my comp crashes after i unplug my iTouch...

Anyways still same info so I am adding it to my thread, I uploaded the new BSOD that I just recently got. Like before im still pretty sure I don't have any RAM issues since I already replaced it, but i did get a hardware BSOD just recently (lost it from system restore, i thought this might fix it). I think the problem is towards iTunes and the FRAPS i had installed?

Also I do have Microsoft Security Essentials installed, same with malware antibyte, and that fix you told me to do for daemon tools.

Thanks for the help again, I appreciate it.

Tews · 01 Feb 2011

You still have unresolved memory issues that need to be addressed ... Memory management almost always means ram settings are mismatched... When you replaced your RAM, did you replace all of the modules, and were they matched??
You are still getting memory corruption faults as well, however this could be caused by old drivers ... Update the drivers that are listed below... SPTD.sys is still being loaded ... as mentioned before, this is a notorius cause of BSOD crashes, and until you uninstall Uninstall Daemon Tools/Alcohol 120%, we can not eliminate this as a possible cause of your problem..

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00000031, The subtype of the bugcheck.
Arg2: af789fd0
Arg3: 91fc4000
Arg4: cb78a193

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_31

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 8309af2c to 82eeed10

STACK_TEXT:  
c157465c 8309af2c 0000001a 00000031 af789fd0 nt!KeBugCheckEx+0x1e
c1574680 8309b078 91fc4000 00060000 c048fe20 nt!MiApplyCompressedFixups+0x70
c15746bc 8309ae72 af789fd0 00060000 00000001 nt!MiPerformFixups+0x6d
c15746e0 82ec2cfe af789fd0 c045d0f8 00000b13 nt!MiRelocateImagePfn+0x105
c1574744 8309afb9 8a879e28 c045d0f8 00000002 nt!MiValidateImagePages+0x337
c1574768 83090c52 8a879e28 c045d0f8 8a879e28 nt!MiSwitchBaseAddress+0x4a
c157478c 830356c8 cb5dd000 00000000 00000000 nt!MiRelocateImageAgain+0xe1
c15748a8 83042ed1 c15748fc 0000000d c1574950 nt!MmCreateSection+0x531
c157491c 83016cdc c15749ac 0000000d c1574950 nt!NtCreateSection+0x16e
c1574998 8301672a c1574a58 c8ab14b0 c1574a01 nt!PfpFileBuildReadSupport+0xe4
c1574a2c 8301810a 00574a58 c1574bb4 00000001 nt!PfpPrefetchFilesTrickle+0xdf
c1574ad0 83017dc7 c8ab0000 eb0196b1 c1574bc8 nt!PfpPrefetchRequestPerform+0x2a6
c1574b24 830319df c1574bb4 00000001 eb01967d nt!PfpPrefetchRequest+0x16e
c1574be8 8309d986 0155fc50 00000014 00000001 nt!PfSetSuperfetchInformation+0x182
c1574d20 82e5544a 0000004f 00000000 00000014 nt!NtSetSystemInformation+0xb00
c1574d20 76e764f4 0000004f 00000000 00000014 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0155fc68 00000000 00000000 00000000 00000000 0x76e764f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiApplyCompressedFixups+70
8309af2c cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiApplyCompressedFixups+70

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c3fac

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  0x1a_31_VRF_nt!MiApplyCompressedFixups+70

BUCKET_ID:  0x1a_31_VRF_nt!MiApplyCompressedFixups+70

Followup: MachineOwner
---------

These drivers are out of date and need to be updated...

Code:

Lycosa.sys   Fri Jan 18 17:43:15 2008 (47912B83) ... Razer Tarantula Keyboard Driver ... Razer Support

Azmar · 01 Feb 2011

I don't understand what you mean when you say "When you replaced your RAM, did you replace all of the modules, and were they matched??" I dunno how to replace modules or match them. All I did was buy the same RAM, and put them into the same slots before, they are in the right RAM slots i checked. Thats all i did.

Also about the "sptd.sys" I did what was told before, i installed the program and hit update and restarted computer that was it. Is there more to it?

I just updated my lycosa driver.

Tews · 01 Feb 2011

What I mean is, were the new ram modules purchased as a kit, not individual sticks... Memory management errors typically occur when the ram used have different settings. As far as sptd.sys goes, open c:/windows/system32/drivers and either manually delete sptd.sys, or, rename it to sptd.bak ... this will prevent it from loading when your system boots...

Azmar · 01 Feb 2011

I bought it as a kit, says low voltage ram 6.2V. My mobo isn't very compatible with it I need to overclock it to get it to work solid 6.4V. Well my comp auto overclocks it I didnt do anything to it, but i made sure it stays at it.

Anyways, firefox keeps crashing every 30sec possibly new symptom even after reboot?? Also i deleted the sptd.sys and i still got a BSOD.

So I uploaded my new BSOD after syptd.sys, the 2nd last one is before I deleted it from this morning.

Windows 7 32 bit - BSOD

Windows 7 32 bit - BSOD

BSOD is back