Several BSODs a day since Dec, random

Page 1 of 2 12 LastLast

  1. Posts : 6
    Windows 7 Home Premium 32-bit
       #1

    Several BSODs a day since Dec, random


    Hi all

    Hope somebody can look at this. I have a Dell Studio 1737, about 2 years old, just started doing BSODs in late December 2011. Can do one or a few a day, seems to be fairly random.

    I thought it might have been a dodgy patch from MS around that time that disagrees with the hardware, so took out the Windows updates from Dec back to Oct 11 to see if the problem went away, which it hasn't. (Probably need to get the updates back now.)

    I've attached some of the dump files, System Health Report, etc, but the dump files were set to kernel and not small memory dump (128kb) that's the other option. I've set it to small memory dump now, do I have to wait until the next BSOD and run the collection program again?

    I notice in the system health report lots of drivers aren't working -- I purchased this laptop with OEM Vista about 6 months before 7 came out, and got a free official 7 upgrade, which I applied -- quite a lot of stuff may not have come across, including things like the biometric fingerprint reader, which I've never bothered rectifying.

    The machine got a TDL4 virus about a year or more ago also that was cleaned off with ComboFix. (This was before the major free and paid AV people had solutions for TDL4.)

    I've run Avast over this system and no viruses come up. Not using Windows Defender.

    I've run Dell's hardware system check program and everything tests OK.

    I tend to run it day and night, just turn off the external monitor, as I was doing video rendering work and disabled Sleep mode, plus the wireless network etc used to struggle coming out of Sleep sometimes, so disabled Sleep, with just a spindown on the HDD and screen power.

    Other details:

    32-bit
    Dell OEM Windows 7 (now SP1) as a painful 'approved, official' upgrade from OEM Vista 18 or more months ago
    - the original installed OS on the system? Vista
    - an OEM or full retail version? OEM
    - What is the age of system (hardware)? around 2 years
    - What is the age of OS installation (have you re-installed the OS?) Just the MS upgrade from Vista as above.


    I want this system to last til the end of the year til Windows 8 is released plus I'll get 64 bit with 8Gb RAM on a hypervisor! Maybe.

    Thanks
    Sean
      My Computer


  2. Posts : 28,845
    Win 8 Release candidate 8400
       #2

    Virtually all of these were Related to NETw5v32.sys Intel® Wireless WiFi Link Driver.. I would re-install the newest version available.


    You also have some driver that need updating from as far back as 2006.


    Code:
    PdiPorts.sys    11/16/2006 7:31:13 PM    0x95018000    0x9501a300        0x00002300    0x455d02d1                        
    rimsptsk.sys    7/29/2007 8:42:56 PM    0x931d3000    0x931e7000        0x00014000    0x46ad4220                        
    rixdptsk.sys    7/29/2007 9:54:01 PM    0x9501f000    0x95071000        0x00052000    0x46ad52c9                        
    rimmptsk.sys    2/15/2008 4:01:16 AM    0x94819000    0x9482a000        0x00011000    0x47b554dc                        
    btwl2cap.sys    7/23/2008 10:17:41 PM    0xbffc8000    0xbffd2000        0x0000a000    0x4887f455                        
    ATSwpWDF.sys    10/2/2008 12:42:14 PM    0x94111000    0x94185180        0x00074180    0x48e507f6                        
    dne2000.sys    11/10/2008 7:59:21 PM    0x95174000    0x95192e80        0x0001ee80    0x4918d8e9                        
    btwavdt.sys    11/11/2008 1:40:55 PM    0xbff55000    0xbffc8000        0x00073000    0x4919d1b7                        
    btwaudio.sys    11/11/2008 1:41:58 PM    0xbfe00000    0xbfe81000        0x00081000    0x4919d1f6                        
    btwrchid.sys    11/11/2008 1:42:29 PM    0xbffd2000    0xbffd4d80        0x00002d80    0x4919d215                        
    OA001Ufd.sys    3/6/2009 2:30:08 AM    0x940c1000    0x940e1a00        0x00020a00    0x49b0d100                        
    stwrt.sys    3/6/2009 11:57:01 AM    0x99c6a000    0x99ccf000        0x00065000    0x49b155dd                        
    OA001Vid.sys    3/8/2009 7:57:13 PM    0x9407c000    0x940c0620        0x00044620    0x49b46969                        
    netw5v32.sys    3/26/2009 11:10:37 AM    0x9482c000    0x94c3f000    netw5v32.sys+6bd54    0x00413000    0x49cba8fd                        
    Apfiltr.sys    4/2/2009 12:37:22 PM    0x95100000    0x95135000        0x00035000    0x49d4f7d2                        
    k57nd60x.sys    4/26/2009 6:23:19 AM    0x94d90000    0x94dcc000        0x0003c000    0x49f44427                        
    spldr.sys    5/11/2009 11:13:47 AM    0x8b9c6000    0x8b9ce000        0x00008000    0x4a084ebb                        
    GEARAspiWDM.sys    5/18/2009 7:16:53 AM    0x95142000    0x95147280        0x00005280    0x4a1151b5                        
    IntcHdmi.sys    5/26/2009 6:12:34 AM    0x99d17000    0x99d3a000        0x00023000    0x4a1bcea2                        
    AVerBDA716x.sys    6/5/2009 3:14:05 AM    0x94c3f000    0x94d58080        0x00119080    0x4a28d3cd                        
    CtClsFlt.sys    6/15/2009 12:05:16 AM    0x940e2000    0x94105260        0x00023260    0x4a35d68c
    How To Find Drivers:
    - search Google for the name of the driver
    - compare the Google results with what's installed on your system to figure out which device/program it belongs to
    - visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
    - if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.
    - - The most common drivers are listed on this page: Driver Reference Driver Reference
    - - Driver manufacturer links are on this page: Drivers and Downloads
      My Computer


  3. Posts : 6
    Windows 7 Home Premium 32-bit
    Thread Starter
       #3

    Thanks zigzag -- I thought MS had an agreement with OEMs to update drivers automatically via Update!!?? Or whenever I click 'update driver' in Device Manager it always comes back and says it has the latest one...

    I ran a trial copy of one of those 'we will update drivers for you' programs when this problem began, it identified a couple, but I didn't proceed and didn't know whether to really believe it -- didn't want to introduce still more potential problems based on its advice. Is there a single program you can recommend though to run around and locate drivers?

    I kind of thought if the driver worked in 2006 and hasn't been a problem until Dec 2011, it's not likely to be a driver problem?
      My Computer


  4. Posts : 28,845
    Win 8 Release candidate 8400
       #4

    SeanR01 said:
    Thanks zigzag -- I thought MS had an agreement with OEMs to update drivers automatically via Update!!?? Or whenever I click 'update driver' in Device Manager it always comes back and says it has the latest one...

    (I ran a trial copy of one of those 'update drivers for you' programs when this problem began, it identified a couple, but I didn't proceed and didn't know whether to really believe it -- didn't want to introduce still more potential problems based on its advice.)
    Nope and that is why MS and most of us recommend a clean install over upgrade.

    We also dont recommend those driver sweeper type apps because you are relying on a 3rd parties database of what is current.

    If any of these are the newes (and I hope not) you wil probably need to re-install them in compatibility mode
    (compat mode=right click the installer>property>compatibility>choose OS)
      My Computer


  5. Posts : 6
    Windows 7 Home Premium 32-bit
    Thread Starter
       #5

    OK, I upgraded the wireless network driver several weeks ago, and had a few weeks of no problems. As of today, the laptop has started rebooting again spontaneously at random intervals. (It tried to do a Flash update and some Flash screens now don't seem to work properly, even after a manual reinstall.) After a reboot, even if I'm running next to no user apps, it will reboot again after a while at random intervals.

    Also, I note that when IE9 is running it always spawns at least 1 extra iexplore.exe process, sometimes several, beyond the tabs I have open -- normal behaviour or enemy action? Avast finds no viruses on the system. Should I run some of these lethal rootkit/bootkit detection and removal programs?

    Can anyone check the dumps here for me again and let me know if there's an obvious problem again? I appreciate the time spent on support, getting frustrated at Win 7 as an operating environment to be honest -- too much time spent on maintenance, and it's kind of large and clunky and slow.

    Thanks
      My Computer


  6. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #6

    Problem Devices:
    Code:
    MpKsl53550a5b	ROOT\LEGACY_MPKSL53550A5B\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    Cisco Systems VPN Adapter	ROOT\NET\0001	This device is disabled.
    MpKsl5b48c0a1	ROOT\LEGACY_MPKSL5B48C0A1\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl5cb11c5c	ROOT\LEGACY_MPKSL5CB11C5C\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl6c02fb69	ROOT\LEGACY_MPKSL6C02FB69\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl75b73de5	ROOT\LEGACY_MPKSL75B73DE5\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl7e31dd7b	ROOT\LEGACY_MPKSL7E31DD7B\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl027fa0ed	ROOT\LEGACY_MPKSL027FA0ED\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl971f9700	ROOT\LEGACY_MPKSL971F9700\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsla4aa000d	ROOT\LEGACY_MPKSLA4AA000D\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKslb48012e8	ROOT\LEGACY_MPKSLB48012E8\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl485096a8	ROOT\LEGACY_MPKSL485096A8\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    MpKsl4e085f06	ROOT\LEGACY_MPKSL4E085F06\0000	This device is not present, is not working properly, or does not have all its drivers installed.
    I can find none of these devices through a Google search. If you know what they are, let us know. Otherwise, I suspect malware/viruses.


    Security Software:
    Code:
    avastsvc.exe	c:\program files\alwil software\avast5\avastsvc.exe	1636	8	200	1380	6/04/2012 6:46 PM	7.0.1426.0	43.72 KB (44,768 bytes)	24/03/2012 6:32 AM
    avastui.exe	c:\program files\alwil software\avast5\avastui.exe	2276	8	200	1380	6/04/2012 6:47 PM	7.0.1426.0	4.05 MB (4,241,512 bytes)	24/03/2012 6:32 AM
    mbamservice.exe	c:\program files\malwarebytes' anti-malware\mbamservice.exe	5792	8	200	1380	6/04/2012 6:49 PM	Not Available	Not Available	Not Available
    msmpeng.exe	c:\program files\microsoft security client\antimalware\msmpeng.exe	904	8	200	1380	6/04/2012 6:46 PM	3.0.8402.0	11.46 KB (11,736 bytes)	27/04/2011 2:39 PM
    msseces.exe	c:\program files\microsoft security client\msseces.exe	4792	8	200	1380	6/04/2012 6:47 PM	2.1.1116.0	974.53 KB (997,920 bytes)	15/06/2011 2:16 PM
    You have a lot of security software; possibly too much. Do you have avast!, Microsoft Security Essentials, and Malwarebytes running at one time? Your version of avast! is also two versions behind, which is equally concerning... I think we should try to get your security software sorted out before proceeding with other steps.
      My Computer


  7. Posts : 6
    Windows 7 Home Premium 32-bit
    Thread Starter
       #7

    Correction - just ran Avast at boot time and it found a single Java virus - CVE-2012-0507-C (Expl), now removed. Still have an extra iexplore process tho.

    I'm surprised a couple of MS Security Essentials processes appear to be running, it is meant to be disabled on this system. Malwarebytes was a recent thing I started running a few weeks ago, but I only ran it once. I can get Avast up to date (again, I thought it was - it reports V 7.0.1426 - and reports engine and definitions already up to date -- I think the original install folder is still just numbered 5 for some reason...) and try to get rid of the MSE and MWB processes. Or just give in to MS and use MSE...

    writhziden said:
    Problem Devices:
    I can find none of these devices through a Google search. If you know what they are, let us know. Otherwise, I suspect malware/viruses.
    I think these are legacy problems from the attempt to update from Vista to Win 7 as ordained by MS and Dell as per the OP -- there seem to be a few problems that were never resolved.

    You have a lot of security software; possibly too much. Do you have avast!, Microsoft Security Essentials, and Malwarebytes running at one time? Your version of avast! is also two versions behind, which is equally concerning... I think we should try to get your security software sorted out before proceeding with other steps.
    None of those processes come up in the standard task manager Process List -- I ran MWB once to see if it could find anything the last time the system kept rebooting, and I thought I'd disabled MSE -- all that seems to be showing in the active processes list is the MSE GUI interface that puts an icon in the system tray that's always red, as it tells me I've sucessfully disabled it so it doesn't conflict with Avast. Maybe I should just switch to MSE and get rid of Avast, I've heard reports MSE is competent and not a resources hog.
    Last edited by SeanR01; 07 Apr 2012 at 21:23.
      My Computer


  8. Posts : 6
    Windows 7 Home Premium 32-bit
    Thread Starter
       #8

    I would be more interested to see what driver caused the most recent BSODs in the dump file -- I don't know how to drive the crash dump analyser at this stage... or is it in another file in the Griffin set?
      My Computer


  9. Posts : 11,269
    Windows 7 Home Premium 64 Bit
       #9

    Code:
    Loading Dump File [D:\Kingston\BSODDmpFiles\SeanR01\040612-47439-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7601.17727.x86fre.win7sp1_gdr.111118-2330
    Machine Name:
    Kernel base = 0x8303f000 PsLoadedModuleList = 0x831884d0
    Debug session time: Fri Apr  6 02:44:56.017 2012 (UTC - 6:00)
    System Uptime: 0 days 2:07:41.734
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .............................................................
    Loading User Symbols
    Loading unloaded module list
    ......
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_HEADER (19)
    The pool is already corrupt at the time of the current request.
    This may or may not be due to the caller.
    The internal pool links must be walked to figure out a possible cause of
    the problem, and then special pool applied to the suspect tags or the driver
    verifier to a suspect driver.
    Arguments:
    Arg1: 00000020, a pool block header size is corrupt.
    Arg2: bef0c418, The pool entry we were looking for within the page.
    Arg3: bef0c820, The next pool entry.
    Arg4: 0a81063d, (reserved)
    
    Debugging Details:
    ------------------
    
    
    BUGCHECK_STR:  0x19_20
    
    POOL_ADDRESS: GetPointerFromAddress: unable to read from 831a8848
    Unable to read MiSystemVaType memory at 83187e20
     bef0c418 
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from 9a8017ea to 8315fc6b
    
    STACK_TEXT:  
    8d5d996c 9a8017ea bef0c420 66537641 861b82c0 nt!ExFreePoolWithTag+0x1b1
    WARNING: Stack unwind information not available. Following frames may be wrong.
    8d5d9994 837abaeb 00120189 8d5d99b4 8d5d99e0 aswFsBlk+0x17ea
    8d5d9a00 837ae9f0 8d5d9a44 86458610 00000000 fltmgr!FltpPerformPreCallbacks+0x34d
    8d5d9a18 837c21fe 8d5d9a44 837c5f3c 00000000 fltmgr!FltpPassThroughInternal+0x40
    8d5d9a2c 837c28b7 8d5d9a44 86458610 85f10ba8 fltmgr!FltpCreateInternal+0x24
    8d5d9a70 830765be 894db280 86a0bae0 85f10c04 fltmgr!FltpCreate+0x2c9
    8d5d9a88 832853e7 a5e0db48 8d5d9c30 00000000 nt!IofCallDriver+0x63
    8d5d9b60 83264bee 881ffc88 85790c58 86411458 nt!IopParseDevice+0xed7
    8d5d9bdc 83275000 00000000 8d5d9c30 00000040 nt!ObpLookupObjectName+0x4fa
    8d5d9c38 8326bade 0aa9baa4 85790c58 00000001 nt!ObOpenObjectByName+0x165
    8d5d9cb4 8328f356 0aa9bb00 80100180 0aa9baa4 nt!IopCreateFile+0x673
    8d5d9d00 8307d28a 0aa9bb00 80100180 0aa9baa4 nt!NtCreateFile+0x34
    8d5d9d00 76e07094 0aa9bb00 80100180 0aa9baa4 nt!KiFastCallEntry+0x12a
    0aa9bb08 00000000 00000000 00000000 00000000 0x76e07094
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    aswFsBlk+17ea
    9a8017ea ??              ???
    
    SYMBOL_STACK_INDEX:  1
    
    SYMBOL_NAME:  aswFsBlk+17ea
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: aswFsBlk
    
    IMAGE_NAME:  aswFsBlk.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4f56a558
    
    FAILURE_BUCKET_ID:  0x19_20_aswFsBlk+17ea
    
    BUCKET_ID:  0x19_20_aswFsBlk+17ea
    
    Followup: MachineOwner
    ---------
    The driver blamed is aswFsBlk.SYS, which is part of avast! You should completely uninstall avast! and then install the latest version. Make sure all remnants of MSE are off the system, and if you use Malwarebytes, use only the standalone version and not the free trial. When you uninstall avast!, use avast! Uninstall Utility | Download aswClear for avast! Removal to uninstall it.
      My Computer


  10. Posts : 6
    Windows 7 Home Premium 32-bit
    Thread Starter
       #10

    Thanks for this, writhziden. Luckily the reboot problem seems to have 'gone away by itself' today -- maybe that one Java virus was a problem? -- but if it comes back I will do all that -- remove and reinstall Avast, or else perhaps just use MSE instead. The thing is that Avast has upgraded itself over time using the normal incremental processes and 'should' be alright, but you never know. I upgraded Vista to 7 using the 'approved' upgrade DVD and that was far from perfect...
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:36.
Find Us