Blue Screen Error, Unexpected Shutdown

quantumAl · 29 Nov 2014

Hello,
I reformatted my Dell Inspiron 1545 and did a clean install of windows 7 home premium with the cd that came with the laptop. It's a clean install because I used dban to erase the hard drive. Now the laptop would crash and give me a blue screen error whenever I'm using it. Also ie 11 (if I get there before a crash) would some times freeze or worse cause a blue screen error. Please help. I've uploaded the file from the dm log collector. I'm doing this in safe mode.

I wasn't able to get the blue screen error code but I got this from running check for solution in control panel.
Problem: shut down unexpectedly
Files that help describe the problem:
112814-22838-01.dmp
sysdata.xml
WERInternalMetadata.xml

koolkat77 · 01 Dec 2014

Welcome to the forum.

The BSOD was caused by K9 parental web filter.

Please remove this software and see if the BSOD's stop.

Revo Uninstaller:

Use Revo Uninstaller to uninstall stubborn software.

Download and install the software
Opt for Advance Mode while uninstalling which allows you to remove leftover registry.
Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Driver Reference Table

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\admin\Downloads\AL-MARISSA-PC-Sat_11_29_2014_163815_54\112814-22838-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`02811000 PsLoadedModuleList = 0xfffff800`02a54890
Debug session time: Sat Nov 29 07:43:09.877 2014 (UTC + 6:00)
System Uptime: 0 days 4:53:20.594
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
....
*** WARNING: Unable to verify timestamp for bckd.sys
*** ERROR: Module load completed but symbols could not be loaded for bckd.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff8800389ad7b, fffff88003c4c898, fffff88003c4c0f0}

Probably caused by : bckd.sys ( bckd+1d7b )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8800389ad7b, The address that the exception occurred at
Arg3: fffff88003c4c898, Exception Record Address
Arg4: fffff88003c4c0f0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
bckd+1d7b
fffff880`0389ad7b 448a09          mov     r9b,byte ptr [rcx]

EXCEPTION_RECORD:  fffff88003c4c898 -- (.exr 0xfffff88003c4c898)
ExceptionAddress: fffff8800389ad7b (bckd+0x0000000000001d7b)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000000000
Attempt to read from address 0000000000000000

CONTEXT:  fffff88003c4c0f0 -- (.cxr 0xfffff88003c4c0f0)
rax=0000000000000000 rbx=fffff880038ac2a0 rcx=0000000000000000
rdx=fffff88003c4cb58 rsi=0000000000000000 rdi=0000000000001000
rip=fffff8800389ad7b rsp=fffff88003c4cad8 rbp=fffffa8001ca50a8
 r8=fffff88003c4cb60  r9=fffff800028c4000 r10=0000000000000000
r11=fffff88003c4ca20 r12=fffffa80064cc630 r13=fffffa8001ca70d8
r14=fffffa8001ca7260 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
bckd+0x1d7b:
fffff880`0389ad7b 448a09          mov     r9b,byte ptr [rcx] ds:002b:00000000`00000000=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  NULL_DEREFERENCE

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002abe100
GetUlongFromAddress: unable to read from fffff80002abe1c0
 0000000000000000 Nonpaged pool

FOLLOWUP_IP: 
bckd+1d7b
fffff880`0389ad7b 448a09          mov     r9b,byte ptr [rcx]

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff8800389c6db to fffff8800389ad7b

STACK_TEXT:  
fffff880`03c4cad8 fffff880`0389c6db : fffffa80`06247600 fffff880`038ad090 00000000`00001000 fffffa80`01ca70d8 : bckd+0x1d7b
fffff880`03c4cae0 fffffa80`06247600 : fffff880`038ad090 00000000`00001000 fffffa80`01ca70d8 fffff880`038b00e0 : bckd+0x36db
fffff880`03c4cae8 fffff880`038ad090 : 00000000`00001000 fffffa80`01ca70d8 fffff880`038b00e0 fffffa80`01ca7260 : 0xfffffa80`06247600
fffff880`03c4caf0 00000000`00001000 : fffffa80`01ca70d8 fffff880`038b00e0 fffffa80`01ca7260 fffffa80`01ca5080 : bckd+0x14090
fffff880`03c4caf8 fffffa80`01ca70d8 : fffff880`038b00e0 fffffa80`01ca7260 fffffa80`01ca5080 fffffa80`01ca7260 : 0x1000
fffff880`03c4cb00 fffff880`038b00e0 : fffffa80`01ca7260 fffffa80`01ca5080 fffffa80`01ca7260 fffffa80`01ca5000 : 0xfffffa80`01ca70d8
fffff880`03c4cb08 fffffa80`01ca7260 : fffffa80`01ca5080 fffffa80`01ca7260 fffffa80`01ca5000 00000000`00000001 : bckd+0x170e0
fffff880`03c4cb10 fffffa80`01ca5080 : fffffa80`01ca7260 fffffa80`01ca5000 00000000`00000001 00000000`00001000 : 0xfffffa80`01ca7260
fffff880`03c4cb18 fffffa80`01ca7260 : fffffa80`01ca5000 00000000`00000001 00000000`00001000 fffffa80`064cc630 : 0xfffffa80`01ca5080
fffff880`03c4cb20 fffffa80`01ca5000 : 00000000`00000001 00000000`00001000 fffffa80`064cc630 fffffa80`01ca50a8 : 0xfffffa80`01ca7260
fffff880`03c4cb28 00000000`00000001 : 00000000`00001000 fffffa80`064cc630 fffffa80`01ca50a8 fffff880`0389a17b : 0xfffffa80`01ca5000
fffff880`03c4cb30 00000000`00001000 : fffffa80`064cc630 fffffa80`01ca50a8 fffff880`0389a17b fffffa80`06498468 : 0x1
fffff880`03c4cb38 fffffa80`064cc630 : fffffa80`01ca50a8 fffff880`0389a17b fffffa80`06498468 fffffa80`01ca50b9 : 0x1000
fffff880`03c4cb40 fffffa80`01ca50a8 : fffff880`0389a17b fffffa80`06498468 fffffa80`01ca50b9 00000000`00000fef : 0xfffffa80`064cc630
fffff880`03c4cb48 fffff880`0389a17b : fffffa80`06498468 fffffa80`01ca50b9 00000000`00000fef fffff800`028c4090 : 0xfffffa80`01ca50a8
fffff880`03c4cb50 fffffa80`06498468 : fffffa80`01ca50b9 00000000`00000fef fffff800`028c4090 fffffa80`01ca5000 : bckd+0x117b
fffff880`03c4cb58 fffffa80`01ca50b9 : 00000000`00000fef fffff800`028c4090 fffffa80`01ca5000 fffffa80`064cc630 : 0xfffffa80`06498468
fffff880`03c4cb60 00000000`00000fef : fffff800`028c4090 fffffa80`01ca5000 fffffa80`064cc630 00000000`0000005c : 0xfffffa80`01ca50b9
fffff880`03c4cb68 fffff800`028c4090 : fffffa80`01ca5000 fffffa80`064cc630 00000000`0000005c 00000000`00000000 : 0xfef
fffff880`03c4cb70 fffffa80`01ca5000 : fffffa80`064cc630 00000000`0000005c 00000000`00000000 fffff880`038a6200 : nt! ?? ::FNODOBFM::`string'
fffff880`03c4cb78 fffffa80`064cc630 : 00000000`0000005c 00000000`00000000 fffff880`038a6200 fffffa80`06200001 : 0xfffffa80`01ca5000
fffff880`03c4cb80 00000000`0000005c : 00000000`00000000 fffff880`038a6200 fffffa80`06200001 fffffa80`064cc630 : 0xfffffa80`064cc630
fffff880`03c4cb88 00000000`00000000 : fffff880`038a6200 fffffa80`06200001 fffffa80`064cc630 fffff880`038a3d7a : 0x5c


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  bckd+1d7b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: bckd

IMAGE_NAME:  bckd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  52e29d52

STACK_COMMAND:  .cxr 0xfffff88003c4c0f0 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_bckd+1d7b

BUCKET_ID:  X64_0x7E_bckd+1d7b

Followup: MachineOwner
---------

1: kd> lmvm bckd
start             end                 module name
fffff880`03899000 fffff880`038ba000   bckd     T (no symbols)           
    Loaded symbol image file: bckd.sys
    Image path: \SystemRoot\system32\drivers\bckd.sys
    Image name: bckd.sys
    Timestamp:        Fri Jan 24 23:05:22 2014 (52E29D52)
    CheckSum:         00024AE8
    ImageSize:        00021000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4