Windows 7: Random BSOD errors on year-old laptop, usually 0x0000003B

jdenn81 · 08 Nov 2013

I've had my Samsung laptop since summer 2012, and I get random BSOD shutdowns. This has happened since I got the computer, basically. I bought it in the US and now live in Hungary and depend on it for my job, so I have not been able to send it away while under warranty.

Anyway, sometimes I get the error more than once a day. Sometimes I don't get it for a week or two. As I said, it seems completely random. More recently, if I close the laptop and put it in my bag, it will have restarted on my walk home. As the thread title says it is most often 0x0000003B, though once is a while it is something like "0x000000D5" (I have to admit I'm not 100% here).

It's frustrating problem, and I'd just resigned myself to it. I only found this forum this evening and performed the SF Diagnostic (attached). I hope this gives you enough information.

Arc · 08 Nov 2013

Hello jdenn81.

It is a multifold issue, but the main issue is network related. It is caused by Kaspersky, mainly. Kaspersky uses some Zone Alarm services like True Vector. And Trye Vector hijacks TCP connections; which results in ntework blockage, and causes BSOD.

Code:

fffff880`0b094770  fffff880`04bc5430Unable to load image \SystemRoot\system32\DRIVERS\vsdatant.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
 vsdatant+0x83430

Description here: Driver Reference Table - vsdatant.sys

It is caused by this element in your system : c:\program files (x86)\checkpoint\zonealarm\vsmon.exe

Alongwith this one, Kaspersky itself is failing, too.

Code:

fffff880`0b095538  fffff880`03640000Unable to load image \SystemRoot\system32\DRIVERS\kltdi.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for kltdi.sys
*** ERROR: Module load completed but symbols could not be loaded for kltdi.sys
 kltdi
fffff880`0b095540  fffff880`0364c4e0 kltdi+0xc4e0
fffff880`0b095548  fffff880`03640000 kltdi
fffff880`0b095550  fffff880`0364c4b0 kltdi+0xc4b0
fffff880`0b095558  fffff880`03640000 kltdi
fffff880`0b095560  fffff880`0364c498 kltdi+0xc498
fffff880`0b095568  fffff880`03640000 kltdi
fffff880`0b095570  fffff880`0364c36c kltdi+0xc36c
fffff880`0b095578  fffff880`03640000 kltdi
fffff880`0b095580  fffff880`0364c24c kltdi+0xc24c

Description here: Driver Reference Table - kltdi.sys

I would suggest you to Uninstall McAfee Using McAfee Removal Tool. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one; for a safety reason, as the AV is failing.

Also, your ProSET Wireless driver is outdated, too.

Code:

fffff880`06e2a000 fffff880`07960000   NETwNs64   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\NETwNs64.sys
    Image name: NETwNs64.sys
    Timestamp:        Fri Dec 02 12:20:55 2011 (4ED8754F)
    CheckSum:         00AE9BA3
    ImageSize:        00B36000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Download and install Intel® PROSet/Wireless Software and Drivers for Windows 7 which works for your Intel® Centrino® Advanced-N 6230.

The display driver is too old, too.

Code:

fffff880`05232000 fffff880`05dea1e0   igdkmd64   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys
    Image name: igdkmd64.sys
    Timestamp:        Wed Jul 27 04:52:40 2011 (4E2F4C40)
    CheckSum:         00BC69EF
    ImageSize:        00BB81E0
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Download and install Intel® Graphics Drivers for Intel® Core™, Pentium® and Celeron® Processors which is compatible for your Intel® Core™ i5 Mobile Processor .

Are you using Diskeeper?

Code:

fffff800`00b9c638  fffff880`010a1247Unable to load image \SystemRoot\system32\DRIVERS\excsd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for excsd.sys
*** ERROR: Module load completed but symbols could not be loaded for excsd.sys
 excsd+0x7247

It says:

Code:

excfs    ExpressCache File System Filter Driver    c:\windows\system32\drivers\excfs.sys
excsd    ExpressCache Storage Filter Driver    c:\windows\system32\drivers\excsd.sys
exfat    exFAT File System Driver    c:\windows\system32\drivers\exfat.sys

You need to uninstall the program that is causing these files.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

Click on the Start button
Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
Select the “Startup” tab.
Deselect all items other than the antivirus.
Apply > OK
Accept then restart.

Now let us know the results. It may need to take even more actions depending on the situation.

jdenn81 · 09 Nov 2013

Thank you for the help.

I've made all the suggested changes. Because of the nature of the BSOD problem, I have to assume it works unless the problem happens again. If it does, I'll be back and post a new diagnostic report (if you need it).

If I don't reply again, then I guess we can assume the problem's been fixed.

Arc · 09 Nov 2013

What was the program associated with excfs.sys and excsd.sys?

jdenn81 · 09 Nov 2013

It was called ExpressCache. I'm not sure what it was or what it did. Must have come installed when I bought the computer -- the date matched up in the Control Panel. I uninstalled it.

Arc · 09 Nov 2013

That is the problem with Pre-installed laptops. It comes with a lot of unnecessary programs which are often troublesome.

It is always good to install windows at per your own need, which will maximize performance and minimize issue. If you are interested, go through the article: Clean Reinstall - Factory OEM Windows 7