Random BSOD's - Mem Management, ntfs.sys, etc

dear zig zag, i'm looking forward for your reply.

sincerely,
fadli

Hi -

Remove Daemon Tools/Alcohol 120 and any other virtual devices -

Code:

spku.sys        Sun Oct 11 16:55:14 2009 (4AD24632))
spzm.sys        Sun Oct 11 16:55:14 2009 (4AD24632)
spci.sys        Sun Oct 11 16:55:14 2009 (4AD24632)
spvm.sys        Sun Oct 11 16:55:14 2009 (4AD24632)

Same drivers as - http://sysnative.com/0x1/DriverReference.html#spku.sys

Microsoft Anti-malware driver showing in 1 BSOD.

Scan your system - http://www.microsoft.com/security/sc...s/default.aspx

If you have MSE installed, update virus definitions and run scan.

Regards. . .

jcgriff2


`

BSOD SUMMARY

Code:

Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\110811-24289-01.dmp]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Nov  7 21:43:08.934 2011 (GMT-5)
System Uptime: 0 days 0:08:25.354
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : MpFilter.sys ( MpFilter+f692 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  SearchProtocol
FAILURE_BUCKET_ID:  X64_0x3B_MpFilter+f692
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff800`0427c905 fffff880`099d9720 00000000`00000000
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\110811-27534-01.dmp]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Nov  7 21:32:10.435 2011 (GMT-5)
System Uptime: 0 days 0:03:40.856
Probably caused by : ntkrnlmp.exe ( nt!CmpGetNameControlBlock+12e )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x1E
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0x1E_nt!CmpGetNameControlBlock+12e
Bugcheck code 0000001E
Arguments ffffffff`c0000005 fffff800`04597d99 00000000`00000000 ffffffff`ffffffff
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\110811-29858-01.dmp]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Nov  7 21:22:31.082 2011 (GMT-5)
System Uptime: 0 days 0:04:06.549
Probably caused by : win32k.sys ( win32k!HMAssignmentUnlock+10 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  ApMsgFwd.exe
FAILURE_BUCKET_ID:  X64_0x3B_win32k!HMAssignmentUnlock+10
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff960`000f63d4 fffff880`08d50040 00000000`00000000
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\110811-31231-01.dmp]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Nov  7 21:18:01.265 2011 (GMT-5)
System Uptime: 0 days 2:59:24.732
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4a83 )
BUGCHECK_STR:  0x1a_41284
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  SearchProtocol
FAILURE_BUCKET_ID:  X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4a83
Bugcheck code 0000001A
Arguments 00000000`00041284 fffff683`ff79c001 00000000`00000645 fffff700`01080000
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  

by jcgriff2     
             
         J. C. Griffith, Microsoft MVP   
             
           https://mvp.support.microsoft.com/profile/Griffith   


           www.sysnative.com
             
           www.jcgriff2.com 


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨


  

Hi thank god there is a reply..

okay i should do what you recommend, but i didn't quite understand about

"Same drivers as - http://sysnative.com/0x1/DriverReference.html#spku.sys"

i'm sorry but what did you mean by that?

fadlifari said:

...okay i should do what you recommend, but i didn't quite understand about

"Same drivers as - http://sysnative.com/0x1/DriverReference.html#spku.sys"

i'm sorry but what did you mean by that?

Hi -

Apologies for the confusion.

Not all drivers in the code box are listed in the Driver Reference Table - only spku.sys -

Code:

spku.sys        Sun Oct 11 16:55:14 2009 (4AD24632))
spzm.sys        Sun Oct 11 16:55:14 2009 (4AD24632)
spci.sys        Sun Oct 11 16:55:14 2009 (4AD24632)
spvm.sys        Sun Oct 11 16:55:14 2009 (4AD24632)

Given similar names and identical timestamps, they likely belong to the same virtual device.

Uninstall of Daemon, Alcohol, etc... should get rid of them all.

Regards. . .

jcgriff2

`

thanks for the explanation, i'm sorry but looks like i'm still having bsod recently, i have attached the dump files. i have a question, i'm very frustated by this bsod, it's just that i just bought the 4GB RAM recently, it's been 2 weeks, but why? is the ram broken or something? for now i just using my 2GB RAM could you help me? i'm so desperate, to have my warranty i have to go a long way

Hi -

Was the 4GB stick in during these recent BSODs?

Is the system crashing w/ the 2 GB stick?

Run memtest86+ on the 4GB stick http://www.techsupportforum.com/2863029-post5.html

I still see drivers for a virtual device. Please uninstall it until BSODs subside.

Regards. . .

jcgriff2


`

BSOD SUMMARY

Code:

Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\111311-23025-01.dmp]
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Sun Nov 13 06:30:10.849 2011 (GMT-5)
System Uptime: 0 days 0:09:04.317
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4a83 )
BUGCHECK_STR:  0x1a_41284
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  SearchProtocol
FAILURE_BUCKET_ID:  X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4a83
Bugcheck code 0000001A
Arguments 00000000`00041284 fffff683`ff7eb001 00000000`00000027 fffff700`01080000
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\111311-26442-01.dmp]
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Sun Nov 13 06:20:38.234 2011 (GMT-5)
System Uptime: 0 days 0:06:43.701
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4a83 )
BUGCHECK_STR:  0x1a_41284
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  SearchProtocol
FAILURE_BUCKET_ID:  X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4a83
Bugcheck code 0000001A
Arguments 00000000`00041284 fffff683`ff79b001 00000000`00000471 fffff700`01080000
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\111211-35739-01.dmp]
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Sat Nov 12 03:01:51.327 2011 (GMT-5)
System Uptime: 0 days 1:44:23.794
Probably caused by : ntkrnlmp.exe ( nt!CmpGetNameControlBlock+12e )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!CmpGetNameControlBlock+12e
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff800`04597a89 fffff880`084ada80 00000000`00000000
BiosVersion = V1.19          
BiosReleaseDate = 07/14/2010
SystemManufacturer = Acer           
SystemProductName = Aspire 4741                    
MaxSpeed:     2400
CurrentSpeed: 2394
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  

by jcgriff2     
             
         J. C. Griffith, Microsoft MVP   
             
           https://mvp.support.microsoft.com/profile/Griffith   


           www.sysnative.com
             
           www.jcgriff2.com 


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨


  

yes when the 4GB RAM sticks, the system turn to bsod for random times. but not with the 2GB stick, why is that?

could you give me the details about the virtual drivers? because i have already uninstall daemon tools and everything, could you give me some details?

hello frede

yes, there is 2 slots of ram on my motherboard of laptop, but when i try 2GB piece, it works fine with all slots, but when using 4 GB the bsod starts appearing recently. i wanna ask, which would you prefer, 2GB a piece for 2 slots, or 4GB a piece for 1 slot?

thanks for the reply