BSOD- need to replace faulty driver on kernel stack


  1. Posts : 13
    Windows 7 Home Premium 32bit
       #1

    BSOD- need to replace faulty driver on kernel stack


    Hello anyone who can help me.

    This week i started getting these and they are sporadic, sometimes happening frequently almost as soon as windows appears. I have used driver sweeper to clean all drivers and this helped for a while. I have now tried to use combofix but this causes the BSOD every time without fail. I have scanned with AVG and Microsoft Essentials and they come up clean, have scanned from both in safe mode and they identified and cleaned a few things but didnt stop the problem. Relevant files are attached, if anyone has some advice it would be much appreciated.
      My Computer


  2. Posts : 28,845
    Win 8 Release candidate 8400
       #2

    CoalMarx said:
    Hello anyone who can help me.

    This week i started getting these and they are sporadic, sometimes happening frequently almost as soon as windows appears. I have used driver sweeper to clean all drivers and this helped for a while. I have now tried to use combofix but this causes the BSOD every time without fail. I have scanned with AVG and Microsoft Essentials and they come up clean, have scanned from both in safe mode and they identified and cleaned a few things but didnt stop the problem. Relevant files are attached, if anyone has some advice it would be much appreciated.
    Driver verified your AVG is the cause. Remove and replave with Microsoft Security essentials

    AVG - PC TuneUp 2011 | Registry Cleaner, File Recovery, Internet Accelerator
    or
    AVG Removal Tool


    Virus, Spyware & Malware Protection | Microsoft Security Essentials

    Code:
    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\061611-24882-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
    *http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (3 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7601.17592.x86fre.win7sp1_gdr.110408-1631
    Machine Name:
    Kernel base = 0x82a15000 PsLoadedModuleList = 0x82b5e4d0
    Debug session time: Thu Jun 16 13:46:27.569 2011 (GMT-4)
    System Uptime: 0 days 0:01:05.036
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...............................
    Loading User Symbols
    Loading unloaded module list
    ....
    2: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
    A device driver attempting to corrupt the system has been caught.  This is
    because the driver was specified in the registry as being suspect (by the
    administrator) and the kernel has enabled substantial checking of this driver.
    If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
    be among the most commonly seen crashes.
    Arguments:
    Arg1: 00000000, caller is trying to allocate zero bytes
    Arg2: 00000000, current IRQL
    Arg3: 00000000, pool type
    Arg4: 00000000, number of bytes
    
    Debugging Details:
    ------------------
    
    Unable to load image \SystemRoot\system32\DRIVERS\avgtdix.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for avgtdix.sys
    *** ERROR: Module load completed but symbols could not be loaded for avgtdix.sys
    
    BUGCHECK_STR:  0xc4_0
    
    CURRENT_IRQL:  0
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
    
    PROCESS_NAME:  avgnsx.exe
    
    LAST_CONTROL_TRANSFER:  from 82d4bf1f to 82af3f2c
    
    STACK_TEXT:  
    b74d7a10 82d4bf1f 000000c4 00000000 00000000 nt!KeBugCheckEx+0x1e
    b74d7a30 82d5ba31 00000000 00000000 00000001 nt!VerifierBugCheckIfAppropriate+0x30
    b74d7a48 82d47b7b 00000080 00000000 b74d7a8c nt!ExAllocatePoolSanityChecks+0xb2
    b74d7a7c 82d4774f 00000080 00000000 f24b5357 nt!VeAllocatePoolWithTagPriority+0x68
    b74d7a98 8f2f65d0 00000000 00000000 f24b5357 nt!VerifierExAllocatePoolWithTag+0x1e
    b74d7ad4 8f242156 ac3d2f68 ad014f68 00000020 afd!WskTdiEHReceive+0xb3
    WARNING: Stack unwind information not available. Following frames may be wrong.
    b74d7b20 8f2422eb b9538f48 ad02cf30 00000000 avgtdix+0x5156
    b74d7b3c 8f242bec b9538fa0 00000001 00027851 avgtdix+0x52eb
    b74d7b68 8f23e0e9 ba32af68 8bf14e50 ba32af68 avgtdix+0x5bec
    b74d7bc4 8f240351 8bf14e50 ba32af68 a4375a78 avgtdix+0x10e9
    b74d7bdc 82d466c3 8bf14e50 ba32af68 9b6b8930 avgtdix+0x3351
    b74d7c00 82a4c54a 00000000 ba32af68 8bf14e50 nt!IovCallDriver+0x258
    b74d7c14 82c3f98f 9b6b8930 ba32af68 ba32afd8 nt!IofCallDriver+0x1b
    b74d7c34 82c42b61 8bf14e50 9b6b8930 00000000 nt!IopSynchronousServiceTail+0x1f8
    b74d7cd0 82c893fc 8bf14e50 ba32af68 00000000 nt!IopXxxControlFile+0x6aa
    b74d7d04 82a531ea 000002f4 000003a0 00000000 nt!NtDeviceIoControlFile+0x2a
    b74d7d04 772670b4 000002f4 000003a0 00000000 nt!KiFastCallEntry+0x12a
    0189f908 00000000 00000000 00000000 00000000 0x772670b4
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    avgtdix+5156
    8f242156 ??              ???
    
    SYMBOL_STACK_INDEX:  6
    
    SYMBOL_NAME:  avgtdix+5156
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: avgtdix
    
    IMAGE_NAME:  avgtdix.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4d9a3dd4
    
    FAILURE_BUCKET_ID:  0xc4_0_VRF_avgtdix+5156
    
    BUCKET_ID:  0xc4_0_VRF_avgtdix+5156
    
    Followup: MachineOwner
    ---------
    
    2: kd> lmvm avgtdix
    start    end        module name
    8f23d000 8f283e80   avgtdix  T (no symbols)           
        Loaded symbol image file: avgtdix.sys
        Image path: \SystemRoot\system32\DRIVERS\avgtdix.sys
        Image name: avgtdix.sys
        Timestamp:        Mon Apr 04 17:53:24 2011 (4D9A3DD4)
        CheckSum:         000491DD
        ImageSize:        00046E80
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
      My Computer


  3. Posts : 13
    Windows 7 Home Premium 32bit
    Thread Starter
       #3

    Thanks- that's strange because i have already uninstalled both AVG and MS essentials in an attempt to get combofix to work. I've now added MS essentials back on (but not AVG).

    So i will see how it goes. Hopefully there will be no more problems (and i will just not use combofix since it causes the crash).

    Thanks!
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:15.
Find Us