Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: BSOD after updating all security programs

31 Mar 2015   #11

W7 Pro x64 SP1 | W10 Pro IP x64 | W8.1 Pro x64 VM | Linux Mint VM

Bear with me, I'm at work at the moment. I'll take a look at these when I get home later.
My System SpecsSystem Spec
31 Mar 2015   #12

Windows 7 Home Premium 64-bit

Thanks for letting me know- also thanks for all the help you've provided thus far! Highly appreciated!

Currently the PC is off until I can get more info out of these last 2 crashes. My main suspects are the power supply or the motherboard at this point. I do have a known working PSU I can replace the current one with for troubleshooting thankfully...
My System SpecsSystem Spec
31 Mar 2015   #13

W7 Pro x64 SP1 | W10 Pro IP x64 | W8.1 Pro x64 VM | Linux Mint VM

Quote   Quote: Originally Posted by RaidenRaccoon View Post
Only things running in the system tray were Malwarebytes, Hamachi, Team Viewer and Intel Rapid Storage Technology.
Are you running a RAID setup?

Also can you disable/uninstall Hamachi for testing purposes.

A driver has overrun a stack-based buffer.

fffff800`042f9888 fffff880`04517a9e : 00000000`000000f7 ff0202fa`ff0202f7 0000f880`0451b23c ffff077f`fbae4dc3 : nt!KeBugCheckEx
fffff800`042f9890 fffff880`044f1aa5 : 00000000`00000032 fffffa80`06a5ee34 00000000`00000032 fffffa80`072b6c02 : netbt!_report_gsfailure+0x26
fffff800`042f98d0 fffff880`0408b325 : fffffa80`0729ea20 00000000`00000002 fffff800`042f9bd8 fffffa80`0729ea20 : netbt!TdiRcvNameSrvHandler+0x374
fffff800`042f9970 fffff880`01a84825 : fffffa80`072b6b80 00000000`00000000 fffffa80`072b6b80 fffff800`042f9bd0 : tdx!TdxEventReceiveMessagesTransportAddress+0x315
fffff800`042f9b60 fffff880`01a7f152 : 00000000`00000000 fffffa80`072b6b80 fffffa80`00000000 fffff800`042f9da0 : tcpip!UdpDeliverDatagrams+0x155
fffff800`042f9cf0 fffff880`01a5af97 : fffffa80`045eaab0 00000000`00000000 5e143a00`89008900 00000000`00000000 : tcpip!UdpReceiveDatagrams+0x132
fffff800`042f9d90 fffff880`01a5aaaa : 00000000`00000000 fffff880`01b6d9a0 fffff800`042f9f50 fffffa80`348dcd3e : tcpip!IppDeliverListToProtocol+0xf7
fffff800`042f9e50 fffff880`01a5a0a9 : fffff880`01b6d9a0 fffffa80`06aa0160 00000000`00000011 fffff800`042f9f40 : tcpip!IppProcessDeliverList+0x5a
fffff800`042f9ef0 fffff880`01a57d4f : 00000000`ff01a8c0 fffff880`01b6d9a0 fffff880`01b6d9a0 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x23a
fffff800`042f9fd0 fffff880`01a57322 : fffffa80`06acbc70 00000000`00000000 fffffa80`06ad9001 00000000`00000001 : tcpip!IpFlcReceivePackets+0x64f
fffff800`042fa1d0 fffff880`01a5674a : fffffa80`06ad9010 fffff800`042fa300 fffffa80`06ad9010 fffff800`02d20000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff800`042fa2b0 fffff800`02c927b8 : fffffa80`06aa0030 00000000`00004800 fffff800`02e10cc0 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff800`042fa300 fffff880`01a56e42 : fffff880`01a56670 fffff800`02e02e80 fffff800`02e29c02 fffff800`02c89e00 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff800`042fa3e0 fffff880`019420eb : fffffa80`06ad88d0 00000000`00000000 fffffa80`067d71a0 fffff800`02c213db : tcpip!FlReceiveNetBufferListChain+0xb2
fffff800`042fa450 fffff880`0190bad6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff800`042fa4c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
My System SpecsSystem Spec

31 Mar 2015   #14

Windows 7 Home Premium 64-bit

Well, I had attempted a RAID 1 setup. Both hardware and software via the Intel RST (was a driver/program for the motherboard). Both the hardware and software never gave me the option for RAID 1 amongst my 2 drives (only difference between them is one is Western Digital and the other is not- supposing that's why)

As for Hamachi, I will disable it and see if the computer crashes again. (though I have it on all my computers, same OS- never caused problems)
My System SpecsSystem Spec
31 Mar 2015   #15

W7 Pro x64 SP1 | W10 Pro IP x64 | W8.1 Pro x64 VM | Linux Mint VM

If you didn't successfully set up a RAID configuration then uninstall Intel Rapid Storage.
My System SpecsSystem Spec
31 Mar 2015   #16

Windows 7 Home Premium 64-bit

Uninstalled Intel RST and disabled Hamachi and it's services from start up/running. Rebooted and letting the PC idle to see if another BSOD occurs. (Only Team Viewer and Malwarebytes are running in the system tray)

If it crashes again, I can assume neither of those were the issue and I will replace the power supply with my known good one (current PSU came with the case (Apevia case, Apevia PSU) and I bought the PC used- both might be factors in the crashes)

If the crashes still occur then, I'll fully suspect the motherboard
My System SpecsSystem Spec
31 Mar 2015   #17

W7 Pro x64 SP1 | W10 Pro IP x64 | W8.1 Pro x64 VM | Linux Mint VM

I don't believe this is a hardware fault.
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck F7, {ff0202faff0202f7, f8800451b23c, ffff077ffbae4dc3, 0}

Probably caused by : netbt.sys ( netbt!_report_gsfailure+26 )

Followup: MachineOwner

0: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
Arg1: ff0202faff0202f7, Actual security check cookie from the stack
Arg2: 0000f8800451b23c, Expected security check cookie
Arg3: ffff077ffbae4dc3, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:


SECURITY_COOKIE:  Expected 0000f8800451b23c found ff0202faff0202f7





ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre


LAST_CONTROL_TRANSFER:  from fffff88004517a9e to fffff80002c85ec0

0: kd> lmvm netbt
start             end                 module name
fffff880`044ed000 fffff880`04532000   netbt      (pdb symbols)          c:\symbols\netbt.pdb\3D581F5A08614A7CB02D71638469228D2\netbt.pdb
    Loaded symbol image file: netbt.sys
    Mapped memory image file: c:\symbols\netbt.sys\4CE7938645000\netbt.sys
    Image path: \SystemRoot\System32\DRIVERS\netbt.sys
    Image name: netbt.sys
    Timestamp:        Sat Nov 20 09:23:18 2010 (4CE79386)
    CheckSum:         00041134
    ImageSize:        00045000
    File version:     6.1.7601.17514
    Product version:  6.1.7601.17514
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     netbt.sys
    OriginalFilename: netbt.sys
    ProductVersion:   6.1.7601.17514
    FileVersion:      6.1.7601.17514 (win7sp1_rtm.101119-1850)
    FileDescription:  MBT Transport driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
My System SpecsSystem Spec
01 Apr 2015   #18

Windows 7 Home Premium 64-bit

Could it be possible that, being a server motherboard with 2 RJ45 ports, Windows Home Premium is having issues with that? I have an available 7 Professional COA I could use if necessary (I have installation media as well).

That's the only thing I can think of that is different from my other computers. None of them have a server MB with 2 LAN ports and are all running the same software this one is (except emsisoft- but they also run far more than this server PC in return)
My System SpecsSystem Spec
01 Apr 2015   #19

W7 Pro x64 SP1 | W10 Pro IP x64 | W8.1 Pro x64 VM | Linux Mint VM

It's not the Windows version that is the problem, don't go using up a license that you don't need to. There's a driver in violation but there's no info as to what it is.

BSOD after updating all security programs Diagnostic Test BSOD after updating all security programs

Driver Verifier will stress your drivers and cause BSODs if any fail. Follow this tutorial to enable/disable it. Driver Verifier - Enable and Disable

Enable Driver Verifier but only enable these options:
  • Standard settings and IRP logging step 3.
  • Don't enable Force Pending I/O Requests
warning   Warning
Make a System Restore point before enabling Driver Verifier.

Note   Note
Your system will act very sluggishly while DV is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

Post any resulting dump files.
My System SpecsSystem Spec
02 Apr 2015   #20

Windows 7 Home Premium 64-bit

Ran the verifier (select all but Microsoft drivers as per the tutorial instructed) and only marked the options you suggested.

The system did fine for 12 hours, but when I checked this afternoon (about and hour after the 24 hour mark) I was met with a BSOD.

EDIT: After posting this reply, I installed about 50 optional updates for 7 (2 were 'kernel' based), re initiated Hamachi and it's services and disabled verifier and then rebooted. Checked back on the PC and yet another BSOD stating: PAGE_FAULT_IN_NONPAGED_AREA. The PC is off atm, but I will grab the .dmp file from this crash in a bit.
My System SpecsSystem Spec

Thread Tools

Similar help and support threads
Thread Forum
MS Security Essentials not updating itself
I'm running Windows 7 64 bit on a Toshiba laptop. Have both MS SecurityEssentials and Malwarebytes Pro installed and have had no problems with either for years. Within this past week I was checking to see if a couple of MS updates had been installed and notices in my Update History section that...
System Security
Updating Infrequently Used Programs - How Important is this?
Hello guys, I have a question with regards to updating your PC. I update windows, plugins, and software on a weekly basis to keep my PC secure. When updating, I am always finding myself updating the most used programs, and skipping the programs I use very rarely. This has triggered the...
Security measures to take when installing or updating?
I've heard from several people that it is possible to get hacked within minutes of installing Windows, while retrieving updates (this actually happened to someone I know... he was actually "lucky" that the hacker posted a terminal window informing him with a message that read "gotcha"). The...
Installation & Setup
Updating drivers with programs
Who has never experienced a problem with your computer and had to format it, and by the time you start Windows saw that did not have any drivers installed, and worse, that did not have the installation CD's, I was one who has passed so many times, but nothing simpler than looking at the site of the...
Updating Various programs.
Had a cruddy run in with a fake antispyware program getting installed. Was able to remove it via Mbam. I did also find a registry entry via Hijack that was no good so I got rid of that too. Although now certain programs(WoW, iTunesstore) are not able to connect via their programs. I am able to go...
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:02.
Twitter Facebook