BSOD when opening folder in MS word. locale id 2057 Product 768_1

netty · 30 May 2012

PLease help - whenever I try to open a folder or document in MS word my PC does a dump! AGHH! I can however access my folders and documents if I use the windows explorer icon to get into my libraries that way then its ok. The message I get after the blue screen is this:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 2057
Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF880056A8CC0
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Can anyone figure this out?
Many Thanks

usasma · 30 May 2012

Please provide this info to help us diagnose your problem: https://www.sevenforums.com/crashes-d...tructions.html

netty · 30 May 2012

Im having a nightmare trying to follow the BSOD posting instructions, I have managed to zip the file you need but can seem to attach it to my post, when I click on browse the BSOD reappeared. I tried dragging it over from windows explorer but then I can only attach one file at a time and the folder that was created and zipped contains loads of files. How do I attach the zipped FOLDER?

Thank you so much in advance!

usasma · 30 May 2012

The .zip folder is treated just like a single file - so you can upload it individually.

We need the perfmon /report - it will contain information on these problem devices:

Link-Layer Topology Discovery Responder ROOT\LEGACY_RSPNDR\0000 This device is disabled.

UMBus Enumerator UMB\UMB\1&841921D&0&WPDBUSENUMROOT This device is disabled.

Intel(R) 5 Series/3400 Series Chipset Family SMBus Controller - 3B30 PCI\VEN_8086&DEV_3B30&SUBSYS_04271025&REV_06\3&11583659&0&FB This device is disabled.

KSecPkg ROOT\LEGACY_KSECPKG\0000 This device is disabled.

Microsoft PS/2 Mouse ACPI\PNP0F03\4&DC382E&0 This device is not present, is not working properly, or does not have all its drivers installed.

Why are these devices disabled? Most of them are necessary for your system to function.
If you are using a USB mouse you can ignore the last error.

Do you have any idea what this program is? It has suspicious entries.

KINGDOMHALL "c:\windows\system32\spool\drivers\x64\3\e_iatifie.exe" /fu "c:\windows\temp\e_s229d.tmp" /ef "hkcu" ENGLEDEW-PC\Englede HKU\S-1-5-21-972694946-1365466521-2815051249-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

The memory dumps blame a Windows security driver (ksecdd.sys). I'd strongly suggest that you perform a couple of free antivirus scans in case your current protection has been compromised. Here's a list of some free one's: Free Online AntiMalware Resources

The following info is just FYI, I've already addressed the issues that I saw in the above paragraphs

- Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
- Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
- How I do it: http://www.carrona.org/howidoit.html

3RD PARTY DRIVERS PRESENT IN THE DUMP FILES

Code:


iaStor.sys                  Wed Mar 03 21:51:31 2010 (4B8F2033)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
MpFilter.sys                Fri Mar 09 06:05:26 2012 (4F59E3F6)
SbFw.sys                    Tue Apr 05 14:12:59 2011 (4D9B5BAB)
SBFWIM.sys                  Tue Feb 08 06:37:58 2011 (4D512B16)
RapportKE64.sys             Sun Mar 11 07:47:07 2012 (4F5C90BB)
mwlPSDVDisk.sys             Tue Jun 02 06:15:29 2009 (4A24FBC1)
mwlPSDNServ.sys             Tue Jun 02 06:07:39 2009 (4A24F9EB)
RapportEI64.sys             Sun Mar 11 07:47:30 2012 (4F5C90D2)
mwlPSDFilter.sys            Tue Jun 02 06:07:30 2009 (4A24F9E2)
RapportCerberus64_34302.sys Mon Dec 05 04:55:26 2011 (4EDC950E)
RapportPG64.sys             Sun Mar 11 07:47:15 2012 (4F5C90C3)
sbtis.sys                   Tue Apr 05 14:12:37 2011 (4D9B5B95)
igdkmd64.sys                Tue Jan 10 17:28:09 2012 (4F0CBB79)
GEARAspiWDM.sys             Mon May 18 08:17:04 2009 (4A1151C0)
Rt64win7.sys                Thu Mar 04 08:42:52 2010 (4B8FB8DC)
rtl819xp.sys                Mon Feb 01 07:30:51 2010 (4B66C97B)
RTKVHD64.sys                Thu Dec 03 08:42:57 2009 (4B17C061)
IntcDAud.sys                Tue Aug 23 09:12:57 2011 (4E53A759)
sbapifs.sys                 Mon Nov 28 21:18:16 2011 (4ED440E8)
SBREdrv.sys                 Wed Oct 26 12:41:21 2011 (4EA83831)

Code:


Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\053012-28407-01.dmp]
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Debug session time: Wed May 30 07:01:20.018 2012 (UTC - 4:00)
System Uptime: 0 days 0:46:09.532
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ksecdd.sys ( ksecdd!KsecProcessSecurityContext+293 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_ksecdd!KsecProcessSecurityContext+293
Bugcheck code 0000001E
Arguments ffffffff`c0000005 fffff880`056a8cc0 00000000`00000000 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\052912-46129-01.dmp]
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Debug session time: Tue May 29 08:51:54.336 2012 (UTC - 4:00)
System Uptime: 0 days 0:01:38.476
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ksecdd.sys ( ksecdd!KsecProcessSecurityContext+293 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_ksecdd!KsecProcessSecurityContext+293
Bugcheck code 0000001E
Arguments ffffffff`c0000005 fffff880`028b7cc0 00000000`00000000 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\052912-35817-01.dmp]
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Debug session time: Tue May 29 08:37:34.548 2012 (UTC - 4:00)
System Uptime: 0 days 0:01:31.062
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ksecdd.sys ( ksecdd!KsecProcessSecurityContext+293 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_ksecdd!KsecProcessSecurityContext+293
Bugcheck code 0000001E
Arguments ffffffff`c0000005 fffff880`037a3cc0 00000000`00000000 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\052912-27518-01.dmp]
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Debug session time: Tue May 29 10:10:45.758 2012 (UTC - 4:00)
System Uptime: 0 days 0:01:37.898
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ksecdd.sys ( ksecdd!KsecProcessSecurityContext+293 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_ksecdd!KsecProcessSecurityContext+293
Bugcheck code 0000001E
Arguments ffffffff`c0000005 fffff880`0674fcc0 00000000`00000000 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\052912-18564-01.dmp]
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Debug session time: Tue May 29 09:36:59.827 2012 (UTC - 4:00)
System Uptime: 0 days 0:44:38.966
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ksecdd.sys ( ksecdd!KsecProcessSecurityContext+293 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_ksecdd!KsecProcessSecurityContext+293
Bugcheck code 0000001E
Arguments ffffffff`c0000005 fffff880`06ae8cc0 00000000`00000000 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

BSOD when opening folder in MS word. locale id 2057 Product 768_1

BSOD when opening folder in MS word. locale id 2057 Product 768_1

Having trouble following instructions