New
#11
Ok I did the SFC /scannow command twice and there were some errors which were fixed. I checked the error log and almost every error was caused by Internet Explorer or Media player.
Ok I did the SFC /scannow command twice and there were some errors which were fixed. I checked the error log and almost every error was caused by Internet Explorer or Media player.
If you run sfc /scannow at this time, does it come back with no integrity violations?
I did SFC /scannow four times yesterday. The first time there were errors which were fixed. The last three times there were some errors which couldn't be fixed. Today I did the scan twice and the first time there were errors which were fixed and the second time there were errors which couldn't be fixed.
By the way, I contacted a another Support here at the forums about my BSOD logs so he could check 'em because he speaks Finnish so he understands them.
You will need to look at OPTION THREE of SFC /SCANNOW Command - System File Checker to determine which files need to be replaced manually and follow the tip there.
I did as instucted here
A process or thread crucial to system operation has unexpectedly exited or been terminated.
So I opened my PC and changed my SSD to SATA 1 from SATA 3 and 500gb hd to SATA 2 from SATA 1.
I also put my other 2gb RAM block back.
Did the steps in that link make the system stable?
No =( Got another BSOD when I tried to shutdown my PC. This time it's another BSOD. "Invalid kernel handle" 0x93
According to this INVALID_KERNEL_HANDLE
I have a faulty driver which is causing this error. Should I use some progam like Driver Genius to check for new drivers or what?
Caused by Avira. Remove Avira using Uninstall a program in Control Panel, clean up after with Avira registry cleaner, and replace with Microsoft Security Essentials - Free Antivirus for Windows to run with Windows firewall turned on.Code:Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Anzi\Windows_NT6_BSOD_jcgriff2\011812-15756-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506 Machine Name: Kernel base = 0xfffff800`0300f000 PsLoadedModuleList = 0xfffff800`03254670 Debug session time: Wed Jan 18 10:47:01.478 2012 (UTC - 7:00) System Uptime: 0 days 2:34:27.649 Loading Kernel Symbols ............................................................... ................................................................ ......................................... Loading User Symbols Loading unloaded module list ...................................... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 93, {554, fffff8a000001940, fffff8a0016ee550, 1} Unable to load image avgntflt.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for avgntflt.sys *** ERROR: Module load completed but symbols could not be loaded for avgntflt.sys Probably caused by : avgntflt.sys ( avgntflt+804b ) Followup: MachineOwner --------- 2: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* INVALID_KERNEL_HANDLE (93) This message occurs if kernel code (server, redirector, other driver, etc.) attempts to close a handle that is not a valid handle. Arguments: Arg1: 0000000000000554, The handle that NtClose was called with. Arg2: fffff8a000001940, Arg3: fffff8a0016ee550 Arg4: 0000000000000001 Debugging Details: ------------------ CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x93 PROCESS_NAME: avguard.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff800032e33b3 to fffff8000308bc40 STACK_TEXT: fffff880`097e83e8 fffff800`032e33b3 : 00000000`00000093 00000000`00000554 fffff8a0`00001940 fffff8a0`016ee550 : nt!KeBugCheckEx fffff880`097e83f0 fffff800`0336a8ca : 00000000`00000000 00000000`00000000 fffffa80`046129f0 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x21481 fffff880`097e84c0 fffff800`0308aed3 : ffffffff`80000554 fffffa80`05660060 fffff880`097e8808 00000000`00000008 : nt!NtSetInformationFile+0x188 fffff880`097e85e0 fffff800`03087470 : fffff800`03519792 00000000`00000000 fffff800`03148803 fffffa80`03967088 : nt!KiSystemServiceCopyEnd+0x13 fffff880`097e87e8 fffff800`03519792 : 00000000`00000000 fffff800`03148803 fffffa80`03967088 fffff880`00000009 : nt!KiServiceLinkage fffff880`097e87f0 fffff880`06fc104b : ffffffff`80000554 00000000`00000010 ffffffff`80000554 00000000`ffffffff : nt!VfZwSetInformationFile+0x62 fffff880`097e8830 ffffffff`80000554 : 00000000`00000010 ffffffff`80000554 00000000`ffffffff fffffa80`0000000e : avgntflt+0x804b fffff880`097e8838 00000000`00000010 : ffffffff`80000554 00000000`ffffffff fffffa80`0000000e fffff800`0352b293 : 0xffffffff`80000554 fffff880`097e8840 ffffffff`80000554 : 00000000`ffffffff fffffa80`0000000e fffff800`0352b293 00000000`00004098 : 0x10 fffff880`097e8848 00000000`ffffffff : fffffa80`0000000e fffff800`0352b293 00000000`00004098 00000000`00000001 : 0xffffffff`80000554 fffff880`097e8850 fffffa80`0000000e : fffff800`0352b293 00000000`00004098 00000000`00000001 00000000`00000000 : 0xffffffff fffff880`097e8858 fffff800`0352b293 : 00000000`00004098 00000000`00000001 00000000`00000000 00000000`00000001 : 0xfffffa80`0000000e fffff880`097e8860 fffff880`06fc077c : fffff980`29f60ff0 00000000`00000010 00000000`00004098 fffff980`2bc0aee0 : nt!VerifierKeLeaveCriticalRegion+0xc3 fffff880`097e88a0 fffff980`29f60ff0 : 00000000`00000010 00000000`00004098 fffff980`2bc0aee0 ffffffff`80000554 : avgntflt+0x777c fffff880`097e88a8 00000000`00000010 : 00000000`00004098 fffff980`2bc0aee0 ffffffff`80000554 00000000`00004098 : 0xfffff980`29f60ff0 fffff880`097e88b0 00000000`00004098 : fffff980`2bc0aee0 ffffffff`80000554 00000000`00004098 00000000`caba0094 : 0x10 fffff880`097e88b8 fffff980`2bc0aee0 : ffffffff`80000554 00000000`00004098 00000000`caba0094 fffff880`06fc123e : 0x4098 fffff880`097e88c0 ffffffff`80000554 : 00000000`00004098 00000000`caba0094 fffff880`06fc123e ffffffff`80000554 : 0xfffff980`2bc0aee0 fffff880`097e88c8 00000000`00004098 : 00000000`caba0094 fffff880`06fc123e ffffffff`80000554 00000000`00000000 : 0xffffffff`80000554 fffff880`097e88d0 00000000`caba0094 : fffff880`06fc123e ffffffff`80000554 00000000`00000000 fffff980`27864ff0 : 0x4098 fffff880`097e88d8 fffff880`06fc123e : ffffffff`80000554 00000000`00000000 fffff980`27864ff0 00000000`00000000 : 0xcaba0094 fffff880`097e88e0 ffffffff`80000554 : 00000000`00000000 fffff980`27864ff0 00000000`00000000 fffff980`2bc0af18 : avgntflt+0x823e fffff880`097e88e8 00000000`00000000 : fffff980`27864ff0 00000000`00000000 fffff980`2bc0af18 00000000`00000000 : 0xffffffff`80000554 STACK_COMMAND: kb FOLLOWUP_IP: avgntflt+804b fffff880`06fc104b ?? ??? SYMBOL_STACK_INDEX: 6 SYMBOL_NAME: avgntflt+804b FOLLOWUP_NAME: MachineOwner MODULE_NAME: avgntflt IMAGE_NAME: avgntflt.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4ddfb624 FAILURE_BUCKET_ID: X64_0x93_avgntflt+804b BUCKET_ID: X64_0x93_avgntflt+804b Followup: MachineOwner ---------
Ah you were slightly faster than me! I just debugged my both dumps. The first one is caused by csrss.exe and this newer one is caused by avira like you said and I've already uninstalled Avira and installed Security Essentials.
I googled that csrss.exe and seems like it's part of Microsofts kernel so dead end there. I really was hopin that the error would have been some program.
Could Avira be the reason for my first BSODS?