BSOD happening overnight.

Ever since I installed my first HDHomeRun Extend tuner (I now have two) to my Wi-Fi network, around a month or so ago, and started using Windows Media Center to record TV shows, I've been getting occasional overnight reboots, roughly 7-8 days apart, at around the same time in the early morning (2-3 AM). However, this morning's reboot occurred two days after the previous reboot. This is the error message I got this morning:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033
Additional information about the problem:
BCCode: d1
BCP1: 0000000000000000
BCP2: 0000000000000002
BCP3: 0000000000000001
BCP4: FFFFF8800131AD18
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1
Files that help describe the problem:
C:\Windows\Minidump\053115-28735-01.dmp
C:\Users\Jeannie\AppData\Local\Temp\WER-6631852-0.sysdata.xml
Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt


I've attached the zip file requested.

Attachment 360864

I did have MBAM Premium set to run a full scan every morning at around 2 AM but, when I checked MBAM's Scanning History Log, the last automatic full scan happened a 1:54::22 AM and all settings in Automated Scheduling have disappeared. My last manual Quick Scan happened around 5 PM yesterday.

I also have Carbonite.com scheduled to upload a backup every morning at 12:30 AM. Best I can tell, these uploads have been able to complete well before the BSODS and reboots.

Only once was WMC recording something when the BSOD occurred.

Help!

There are three things showing up in your single dump Lady F, I'll outline them below.

Firstly it's Intel Rapid Storage Technology showing (the RST driver and RST Filter driver), the dates are pretty old so if you do utilise IRST then it will probably be best to look for updated driver versions. If you don't use it then I'd recommend turning it off or uninstalling it, if you need/want to know how just let me know.

Code:

5: kd> lmvm iaStorF
start             end                 module name
fffff880`01c73000 fffff880`01c7c000   iaStorF  T (no symbols)           
    Loaded symbol image file: iaStorF.sys
    Image path: iaStorF.sys
    Image name: iaStorF.sys
    Timestamp:        Tue Aug 07 16:42:20 2012 (5021375C)
    CheckSum:         000106CE
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
5: kd> lmvm iaStorA
start             end                 module name
fffff880`012b9000 fffff880`0193f000   iaStorA  T (no symbols)           
    Loaded symbol image file: iaStorA.sys
    Image path: iaStorA.sys
    Image name: iaStorA.sys
    Timestamp:        Tue Aug 07 16:43:10 2012 (5021378E)
    CheckSum:         0008E07D
    ImageSize:        00686000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

The other thing that's showing is Avast. The usual recommendation here would be to replace it with MSE for testing purposes, maybe reinstall Avast if the BSODs stop and determine whether it was a side effect of the IRST drivers or was really part of the problem. Avast has been known to cause many a BSOD to be fair, as well as most other AV suites.

Code:

fffff880`1215bde8  fffff880`020c5ddcUnable to load image aswSnx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSnx.sys
*** ERROR: Module load completed but symbols could not be loaded for aswSnx.sys
 aswSnx+0x18ddc

Use Intel Rapid Storage Technology? Heck, I don't even know what it is! Please educate this old dummy.

This will explain it better than I can. You don't have a RAID setup do you? I don't use RAID so I have IRST disabled by default, I suppose I should uninstall it really. Check in your notification area to see if the icon is in there, you can open the program from there and disable it if you're not running RAID.

Attachment 360869

Ok, I have an idea what it is for. I don't use RAID or HDD caching so, apparently, I don't need it. However, I can't tell if it is on or not. Here is what I found:

Attachment 360871

Attachment 360872

Open msconfig and search for IRST and disable it from there. The icon in the Notification Area should change to the one I posted in post #4 then.

Attachment 360877

OK, I shut off IRST and rebooted. I guess we're at Hurry Up and Wait now to see if it fixed the problem or not since it happens so sporadically and can go as many as eight days between them. Thanks for the help and I will be back (said with East European accent) if it happens again.

Btw, you've been a busy boy this morning.

Keep us posted Jeannie, if and when it happens again just give us a shout. Hopefully that will have removed IRST as an issue, if so it may be worth looking at uninstalling it altogether.

I have been busy I guess, needed to catch up for lost time yesterday painting fences.

I would disable IRST first, reboot and then run the system for a while.
IRST could of also caused Avast problems. IRST causes lots of problems. Noel finds many problems caused by IRST also in the Update and Activation part of the forum.

Layback Bear said:

I would disable IRST first, reboot and then run the system for a while.
IRST could of also caused Avast problems. IRST causes lots of problems. Noel finds many problems caused by IRST also in the Update and Activation part of the forum.

Thanks. Per Boozad's instructions, I've already disabled IRST and rebooted so it's now hurry up and wait to see if the problem has been fixed.

Added note: As mentioned earlier, I had MBAM set to run full scans every morning around 2 AM but, for some reason or another, that setting got wiped out. Although I dislike trying more than one thing at a time when trying to troubleshoot a problem (if you try more than one thing at once, then you never really know which one it was that fixed the problem), methinks I will just leave it that way since I manually do daily quick scans and I can just manually run a full scan once a week when I normally run my other weekly full scans.