random bsod

gregrocker · 25 Aug 2011

Boot free Partition Wizard bootable CD, rightclick on D to Explore for files.

If there is no partition remaining or files are missing from within one, run the Partition Recovery Wizard from the Wizards tab on the HD. It will scan and find any missing partitions which have not been secure erased. You can then select the correct missing partition and it will reinstate it if possible.

If this fails which is rare next run Recuva data recovery: Recuva - Features

There is no way the missing partition could be caused by running Startup Repair, but it could be caused by infection which may still exist on HD. For this reason, I would first install, update and run a full scan using Malwarebytes, in Safe Mode if necessary.

If for some reason it doesn't run download and burn to CD or write to flash stick Microsoft Standalone System Sweeper, boot it, allow it to update via wired connection then scan the HD.

If infection isn't responsible, then you can continue troubleshooting your BSOD where you left off. Set a Restore Point recoverable via DVD/Repair console before each step.

dbaic · 25 Aug 2011

thanks, i got partition back, now back to bsod, here is the latest dump file

gregrocker · 25 Aug 2011

Back up your files now, wait for Captain Jack to continue with BSOD troubleshooting as I'm an Installer called in to consult by him and not a BSOD specialist.

Have you completed the steps he gave in the beginning yet?

dbaic · 25 Aug 2011

yes i did everything

**Capt.Jack Sparrow** · 25 Aug 2011

Thanks for helping out Greg!

Seems like the crash is pointing to HIDCLASS.SYS which is related to your USB driver related files. Do you have any USB devices connected to your machine? If so reinstall the drivers. Try to disconnect the device and see if it crash. It includes external HDD, USB drive, USB Mouse, USB Keyboard, Gaming Pad etc.

Also refer your Motherboard Manual and RAM manually and check the RAM timings in the BIOS make sure it's set correctly.

Code:

DRIVER_VERIFIER_IOMANAGER_VIOLATION (c9)
The IO manager has caught a misbehaving driver.
Arguments:
Arg1: 000000000000023b, The caller has changed the status field of an IRP it does not understand.
Arg2: fffff88004e1c710, The address in the driver's code where the error was detected.
Arg3: fffff9800fa10dc0, IRP address.
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0xc9_23b

DRIVER_VERIFIER_IO_VIOLATION_TYPE:  23b

FAULTING_IP: 
HIDCLASS!HidpMajorHandler+0
fffff880`04e1c710 48895c2410      mov     qword ptr [rsp+10h],rbx

FOLLOWUP_IP: 
HIDCLASS!HidpMajorHandler+0
fffff880`04e1c710 48895c2410      mov     qword ptr [rsp+10h],rbx

IRP_ADDRESS:  fffff9800fa10dc0

DEVICE_OBJECT: fffffa80071e6b80

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  System

CURRENT_IRQL:  2

LOCK_ADDRESS:  fffff80002e8b440 -- (!locks fffff80002e8b440)

Resource @ nt!PiEngineLock (0xfffff80002e8b440)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
    Lock address  : 0xfffff80002e8b440
    Thread Count  : 0
    Thread address: 0x0000000000000000
    Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff800031163dc to fffff80002c8f640

STACK_TEXT:  
fffff880`031fd0f8 fffff800`031163dc : 00000000`000000c9 00000000`0000023b fffff880`04e1c710 fffff980`0fa10dc0 : nt!KeBugCheckEx
fffff880`031fd100 fffff800`0312047a : fffff800`031149f0 fffff880`04e1c710 fffff980`0fa10dc0 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`031fd140 fffff800`03121483 : 00000000`0000023b 00000000`c0000010 fffff980`0fa10dc0 00000000`ffffffff : nt!ViErrorFinishReport+0xda
fffff880`031fd190 fffff800`03121b42 : fffff980`0fa10f20 fffff880`04e1c710 00000000`00000000 00000000`000001f1 : nt!VfErrorReport1+0x63
fffff880`031fd230 fffff800`03116071 : fffffa80`05c47788 00000000`00000001 00000000`00000000 fffff980`0fa10f20 : nt!ViGenericVerifyIrpStackUpward+0x62
fffff880`031fd260 fffff800`03122b2d : fffffa80`07144680 fffffa80`05c475d0 fffff980`0fa10dc0 fffff980`0fa10dc0 : nt!VfMajorVerifyIrpStackUpward+0x91
fffff880`031fd2a0 fffff800`0313450d : fffff980`0fa10f20 fffff880`031fd480 00000000`c0000010 fffff980`0fa10f20 : nt!IovpCompleteRequest2+0xad
fffff880`031fd310 fffff800`02c92a91 : fffff980`0fa10f23 fffff800`00000000 00000000`000000ff fffff880`00000005 : nt!IovpLocalCompletionRoutine+0x9d
fffff880`031fd370 fffff800`0312c19f : fffff980`0fa10dc0 fffff880`04e26400 fffffa80`071e6c00 00000000`00000000 : nt!IopfCompleteRequest+0x3b1
fffff880`031fd450 fffff800`02c751ea : fffff880`00000013 fffff880`031fd578 fffff980`0fa10f20 fffffa80`071e6cd0 : nt!IovCompleteRequest+0x19f
fffff880`031fd520 fffff880`04e1ca0f : 00000000`00000000 fffffa80`071e6cd0 00000000`00000001 00000000`00000017 : nt!IopInvalidDeviceRequest+0x16
fffff880`031fd550 fffff880`04e1c7fb : 00000000`00000000 fffffa80`071e6cd0 fffff980`0fa10dc0 fffff880`031fd600 : HIDCLASS!HidpIrpMajorDefault+0x8b
fffff880`031fd590 fffff800`03132c16 : fffff980`00000002 fffff980`0fa10dc0 00000000`00000002 fffff800`0312e37e : HIDCLASS!HidpMajorHandler+0xeb
fffff880`031fd600 fffff800`03131c42 : fffff980`0fa10f68 00000000`00000002 fffffa80`071e6a70 fffffa80`067e6e00 : nt!IovCallDriver+0x566
fffff880`031fd660 fffff800`03132c16 : fffff980`0fa10dc0 00000000`00000002 fffffa80`071e6920 00000000`00000000 : nt!ViFilterDispatchGeneric+0x62
fffff880`031fd690 fffff800`03131d58 : fffff980`0fa10dc0 fffffa80`071e6920 00000000`00000000 fffffa80`06eb6810 : nt!IovCallDriver+0x566
fffff880`031fd6f0 fffff800`03131e42 : fffffa80`071eda60 fffffa80`03758010 fffffa80`071eda60 00000000`00000017 : nt!VfIrpSendSynchronousIrp+0xe8
fffff880`031fd760 fffff800`0311efaf : fffffa80`071ee010 00000000`000007ff fffff800`02dc55b8 fffff800`03022ca9 : nt!VfWmiTestStartedPdoStack+0x72
fffff880`031fd800 fffff800`02d38c92 : fffffa80`071ee010 00000000`00000000 00000000`00000000 00000000`00000000 : nt!VfMajorTestStartedPdoStack+0x5f
fffff880`031fd830 fffff800`0307726c : fffffa80`071ee010 fffffa80`03758010 00000000`00000001 00000000`00000000 : nt!PpvUtilTestStartedPdoStack+0x12
fffff880`031fd860 fffff800`03078e64 : fffffa80`071ee010 fffffa80`071ee010 fffffa80`03758010 00000000`00000001 : nt!PipProcessStartPhase3+0x55c
fffff880`031fd950 fffff800`03079428 : fffff800`02e88dc0 00000000`00000000 00000000`00000010 fffff800`03079390 : nt!PipProcessDevNodeTree+0x264
fffff880`031fdbc0 fffff800`02d88b97 : 00000001`00000003 00000000`00000000 00000000`00000001 00000000`00000000 : nt!PiProcessReenumeration+0x98
fffff880`031fdc10 fffff800`02c99a21 : fffff800`02d88870 fffffa80`03727001 00000000`00000000 fffffa80`00000657 : nt!PnpDeviceActionWorker+0x327
fffff880`031fdcb0 fffff800`02f2ccce : 00000000`00000000 fffffa80`03727040 00000000`00000080 fffffa80`03709040 : nt!ExpWorkerThread+0x111
fffff880`031fdd40 fffff800`02c80fe6 : fffff880`009e5180 fffffa80`03727040 fffff880`009eff40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031fdd80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  .bugcheck ; kb

SYMBOL_NAME:  HIDCLASS!HidpMajorHandler+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: HIDCLASS

IMAGE_NAME:  HIDCLASS.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7a665

FAILURE_BUCKET_ID:  X64_0xc9_23b_VRF_HIDCLASS!HidpMajorHandler+0

BUCKET_ID:  X64_0xc9_23b_VRF_HIDCLASS!HidpMajorHandler+0

Followup: MachineOwner
---------