New
#51
this one was weird, didn't give a reason as to why it was shutting down....no driver listed or anything like that.
this one was weird, didn't give a reason as to why it was shutting down....no driver listed or anything like that.
Code:BugCheck 1E, {ffffffffc000001d, fffff8800f1df4e0, 0, 0} *** WARNING: Unable to verify timestamp for vsdatant.sys *** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys Probably caused by : vsdatant.sys ( vsdatant+15364 )The illegal instruction is located here:Code:4: kd> !error ffffffffc000001d Error code: (NTSTATUS) 0xc000001d (3221225501) - {EXCEPTION} Illegal Instruction An attempt was made to execute an illegal instruction.
So, I'm just going to pull these registers apart, and explain their purpose:Code:fffff880`0f1df4e0 08041e or byte ptr [rsi+rbx],al
rsi = is a index register, and is used for string and memory array copying.
rbx = base pointer for memory access.
al = I/O port access and interrupt calls.
The IOPL has been set to Ring 0, and this determines which code can access the I/O ports, I'm assuming that a driver accessed a I/O Port at the wrong Ring Level.Code:.cxr 0xfffff8800f1dfc60 rax=fffff8800f1e0648 rbx=0000000000002e40 rcx=fffff8800f1e0d38 rdx=fffff8800f1e0e50 rsi=fffffa8010ae7d50 rdi=fffff8800f1e0d38 rip=fffff88004727364 rsp=fffff8800f1e0640 rbp=fffff8800f1e0e00 r8=fffff8800f1e0704 r9=0000000000000000 r10=fffff8800471f3a0 r11=0000000000000002 r12=fffffa8012478100 r13=000000000f616a5f r14=fffffa8014afcac0 r15=fffff8800f1e0e50 iopl=0 nv up ei pl nz ac pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010212 vsdatant+0x15364: fffff880`04727364 ?? ???
The driver is related to Zone Alarm TrueVector Device Driver, I would suggest finding a updated version of the program, or removing the program completely with Zone Alarm Removal Tool.Code:4: kd> lmvm vsdatant start end module name fffff880`04712000 fffff880`047a6000 vsdatant T (no symbols) Loaded symbol image file: vsdatant.sys Image path: \SystemRoot\system32\DRIVERS\vsdatant.sys Image name: vsdatant.sys Timestamp: Wed Oct 23 00:54:34 2013 (5267103A) CheckSum: 00078467 ImageSize: 00094000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
todays...can you guys suggest a good firewall/anti virus?
Windows Firewall, and Microsoft Security Essentials with Malwarebytes (+SuperAntiSpyware).
There's also no new dump files within the folder, did you have another crash?
The system seems to have crashed, because a APC was sent at IRQL Level 2.Code:BugCheck A, {fffffaa0129924d0, 2, 0, fffff80003273688} Probably caused by : ntkrnlmp.exe ( nt!KiDeliverApc+258 )
Code:7: kd> knL # Child-SP RetAddr Call Site 00 fffff880`0a523648 fffff800`03280169 nt!KeBugCheckEx 01 fffff880`0a523650 fffff800`0327ede0 nt!KiBugCheckDispatch+0x69 02 fffff880`0a523790 fffff800`03273688 nt!KiPageFault+0x260 03 fffff880`0a523920 fffff800`03273a40 nt!KiDeliverApc+0x258 04 fffff880`0a5239a0 fffff800`0327fef7 nt!KiInitiateUserApc+0x70 05 fffff880`0a523ae0 00000000`776112fa nt!KiSystemServiceExit+0x9c 06 00000000`0163f6b8 00000000`00000000 0x776112faCode:7: kd> !irql Debugger saved IRQL for processor 0x7 -- 2 (DISPATCH_LEVEL)The other bugchecks' stack revealed calls related to USB, what is connected to your USB ports? Updated chipset drivers from the motherboard/model support page?Code:nt!KiDeliverApc+258 fffff800`03273688 488b4130 mov rax,qword ptr [rcx+30h]
I have a usb hub connected with a joystick and a headset connected through it. To the pc I have a printer, mouse, keyboard and external hard drive.
Try just using the keyboard and mouse with everything else disconnected.
There doesn't appear to be any new dump files either for some reason. When have the latest BSODs been happening?
Attachment 295836
Please check this directory:
Code:C:\Windows\Minidump
there looks like there are reports in this one
I zipped the folder before the program had finished...here is the very last one