Bluey coming up for safe site

ICIT2LOL · 14 Mar 2012

Am trying to download the Intel Driver update utility on my 7 tester and it starts to download then suddenly IE stops working and goes to a Blue screen as in pics.

Am not really savvy enough to know what this measn and I had no trouble except I had to install a new driver for the Ethernet on this machine (main).

So any pointers please?

PS Meant to say it "diagnoses" but doesn't give me any reasons either?

writhziden · 15 Mar 2012

Can you follow the https://www.sevenforums.com/crashes-d...tructions.html to provide us with the crash reports and loaded drivers? Thanks. :)

ICIT2LOL · 17 Mar 2012

Hum I hope I have done this right writiziden as I am not really conversant with zipping. This bluey happened this afternoon on my laptop and I am running an OEM 7 (Toshiba factory install) have 500GGB HDD 8GB RAM i5 M430 dual core - 64bit.

If I haven't submitted enough info please let me know what you need.
The blueys have been happening on three machines all with OEM 64bit 7 OS's.

Nope I can't get the zips to upload with 7 zip at least I'll have to try another app as the griff file is only 763KB and the perfmon 83KB and it keeps coming back as invalid files

writhziden · 17 Mar 2012

ICit2lol said:

Hum I hope I have done this right writiziden as I am not really conversant with zipping. This bluey happened this afternoon on my laptop and I am running an OEM 7 (Toshiba factory install) have 500GGB HDD 8GB RAM i5 M430 dual core - 64bit.

If I haven't submitted enough info please let me know what you need.
The blueys have been happening on three machines all with OEM 64bit 7 OS's.

Nope I can't get the zips to upload with 7 zip at least I'll have to try another app as the griff file is only 763KB and the perfmon 83KB and it keeps coming back as invalid files

Try creating a new folder, putting both the griff file and the perfmon file in it, right clicking that folder, and clicking send to -> Compressed (zipped) folder.

ICIT2LOL · 17 Mar 2012

Ok writhziden I'll do my best.

ICIT2LOL · 17 Mar 2012

Here goes mate but it didn't look very compressed to me

Hum it uploaded at least hope it came through ok!

writhziden · 17 Mar 2012

Problem Devices:

Code:

Chicony USB 2.0 Camera	USB\VID_04F2&PID_B128&MI_00\7&30F29233&0&0000	32
Bluetooth ACPI	ACPI\TOS6205\5&12227074&0	32

Security Software:

Code:

avp.exe	c:\program files (x86)\kaspersky lab\kaspersky internet security 2012\avp.exe	1796	8	200	1380	17/03/2012 5:12 PM	12.0.0.374	197.55 KB (202,296 bytes)	24/04/2011 11:15 PM
avp.exe	c:\program files (x86)\kaspersky lab\kaspersky internet security 2012\avp.exe	1944	8	200	1380	17/03/2012 5:13 PM	12.0.0.374	197.55 KB (202,296 bytes)	24/04/2011 11:15 PM
klwtblfs.exe	c:\program files (x86)\kaspersky lab\kaspersky internet security 2012\x64\klwtblfs.exe	4188	8	200	1380	17/03/2012 5:16 PM	12.0.0.374	168.39 KB (172,432 bytes)	24/04/2011 11:14 PM

Possible out of date drivers:

Code:

TVALZFL	fffff880`059ad000	fffff880`059b4000	Fri Jun 19 04:05:44 2009 (4a3b62f8)	00010921		TVALZFL.sys
tos_sps64	fffff880`01b34000	fffff880`01bae000	Tue Jun 23 23:31:09 2009 (4a41ba1d)	0007eb46		tos_sps64.sys

TVALZFL.sys
tos_sps64.sys

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\ICit2lol\New folder\Windows_NT6_BSOD_jcgriff2C\Windows_NT6_BSOD_jcgriff2\031712-15818-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`03211000 PsLoadedModuleList = 0xfffff800`03455650
Debug session time: Sat Mar 17 18:10:41.450 2012 (UTC - 6:00)
System Uptime: 0 days 0:34:30.652
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, fffffa800982a360, fffffa800982b320, 4fc7d0a}

Unable to load image \SystemRoot\system32\DRIVERS\kl1.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for kl1.sys
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
Probably caused by : kl1.sys ( kl1+121fc4 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffffa800982a360, The pool entry we were looking for within the page.
Arg3: fffffa800982b320, The next pool entry.
Arg4: 0000000004fc7d0a, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff800034bf100
 fffffa800982a360 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  avp.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800033bacae to fffff8000328dd40

STACK_TEXT:  
fffff880`0702c6e8 fffff800`033bacae : 00000000`00000019 00000000`00000020 fffffa80`0982a360 fffffa80`0982b320 : nt!KeBugCheckEx
fffff880`0702c6f0 fffff880`01d81fc4 : 00000000`00000200 00000000`00000001 fffffa80`4c444c4b fffffa80`07361680 : nt!ExDeferredFreePool+0x12da
fffff880`0702c7a0 00000000`00000200 : 00000000`00000001 fffffa80`4c444c4b fffffa80`07361680 00000000`00001000 : kl1+0x121fc4
fffff880`0702c7a8 00000000`00000001 : fffffa80`4c444c4b fffffa80`07361680 00000000`00001000 fffffa80`00000001 : 0x200
fffff880`0702c7b0 fffffa80`4c444c4b : fffffa80`07361680 00000000`00001000 fffffa80`00000001 00000000`00000000 : 0x1
fffff880`0702c7b8 fffffa80`07361680 : 00000000`00001000 fffffa80`00000001 00000000`00000000 00000000`00000001 : 0xfffffa80`4c444c4b
fffff880`0702c7c0 00000000`00001000 : fffffa80`00000001 00000000`00000000 00000000`00000001 00000000`00000000 : 0xfffffa80`07361680
fffff880`0702c7c8 fffffa80`00000001 : 00000000`00000000 00000000`00000001 00000000`00000000 fffff880`01d8f2c9 : 0x1000
fffff880`0702c7d0 00000000`00000000 : 00000000`00000001 00000000`00000000 fffff880`01d8f2c9 00000000`00000000 : 0xfffffa80`00000001


STACK_COMMAND:  kb

FOLLOWUP_IP: 
kl1+121fc4
fffff880`01d81fc4 ??              ???

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  kl1+121fc4

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: kl1

IMAGE_NAME:  kl1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d70aec3

FAILURE_BUCKET_ID:  X64_0x19_20_kl1+121fc4

BUCKET_ID:  X64_0x19_20_kl1+121fc4

Followup: MachineOwner
---------

This crash report is pointing to Kaspersky as the cause of the crash. First, try uninstalling Kaspersky using the removal for Kaspersky lab products and then install the latest version of the software. See if it resolves your crashes. It is possible your Kaspersky installation is corrupted.

Also, make sure your network drivers are up to date. The previous versions of Kaspersky caused crashes like these, but the 2012 version is supposed to be fixed and only has problems if network drivers are not up to date or corrupted. If your network adapter drivers are up to date, you may try re-installing the latest network and sound drivers (both share the same resources) in case they are corrupted.

To fully re-install a driver, use the following steps.

Click Start Menu
Right Click My Computer/Computer
Click Manage
Click Device Manager from the list on the left
Find the device you are trying to uninstall by expanding the appropriate set of devices
Right click the device
Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
Restart your computer
Install the latest driver for the device once Windows starts.

Alternatively:

Login as an adminstrative user.
Click Start Menu
Click Control Panel
Click Hardware and Sound
Click Device Manager (the last link under Devices and Printers)
Find the device you are trying to uninstall by expanding the appropriate set of devices
Right click the device
Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
Restart your computer
Install the latest driver for the device once Windows starts.

ICIT2LOL · 18 Mar 2012

Ok withziden have done some drivers and the Kaspersky I only installed that a few months ago when the version changed but if necessary I'll do another install - have done this MANY times for a while now so doing it isn't a great hassle at all.

Now I have been thinking too that the blueys have mentioned drivers and after thinking what I have been doing with those machines over the last few weeks / months.

I have two possibilities one is that I have been using new retractable wired mice in those machines and secondly I have used the Slim Drivers app to update drivers.

Now one of the machines is set up with Comodo Premium so trying to logically sort it out it does seem odd that the machines that I have used both the new wired mouse and the Slim Drivers app have had the problem because my main machine I use a Logitech wireless mouse and the app just once - out of pure curiosity (yes I know what happened to the cat) and it found one driver. But I have had no problems at all re blueys with this machine.

It will be interesting to see what happens with the laptop though because it has been a source of problems since day one and now I am using a brand new Logitech wireless mouse and deleting the Slim Drivers form the device too. Plus I shall do as you said re the Kaspersky.

Oh and thanks for taking the time with those reports they looked large and out of my league - it must have been quite a session.

writhziden · 18 Mar 2012

You're welcome. Let us know how the system responds to the changes after you have had a chance to use it normally for a while. :)

ICIT2LOL · 20 Mar 2012

Hum the laptop blued out again last night so am thinking now perhaps you're right writhziden re a driver problem as it was mentioned in the blue screen message.

Now I checked in Kaspersky and found that there were several vulnerabilities too and worryingly the wireless net device that is suppled by the national carrier I use for broadband.

I might just have to factory default this machine (Toshiba L550 Satellite) yet again as I do not have an installation disk - if so I would just wipe the whole thing and do a fresh install.

Or maybe treat myself to a new laptop as this one is sort of dated now and I can use it for experimenting on.

Thought maybe an HP or Compaq this time as both Toshiba's I have had have had problems of one sort of or another from day one.