BSOD randomly multiple times a day

Page 3 of 3 FirstFirst 123

  1. jcgriff2
    Posts : 845
    Windows 7 - Vista
       New #21

    Krumlov said:
    So I ran Driver Verifier. I was one of those cases where it crashes before any information is given. I am using "System Restore" right now.

    What was I trying to learn by running Driver Verifier, and was it a bad thing that I had to system restore?

    I will continue looking for that driver update.

    (Also, here is the minidump error file that I got, it was a "c4" error this time.)

    Hi -

    The bugcheck 0xc4 is a very good outcome when running the driver verifier. It is perfectly normal to have to use system restore to bring the system back up after the driver verifier flags a driver.

    0xc4 = the driver verifier detected a violation - i.e., it flagged a problematic driver - none other than vsdatant.sys = Zone Alarm

    Bugcheck = 0xc4 (0x121, 0x2, 0x880`02c904b0, 0x0)

    0xc4 = DRIVER_VERIFIER_DETECTED_VIOLATION
    0x121 = Waiting at DISPATCH_LEVEL, without a timeout (a potential LOCK situation)
    0x2 = IRQL
    0x880`02c904b0 = Object holding LOCK (exclusive access of an object)
    0x0 = Timeout parm

    The memory address in red is the address of the object holding the LOCK - it fits right in between the beginning and ending memory addresses for vsdatant.sys -
    Code:
        BEGINNING         ENDING
         fffff880`02c904b0
fffff880`02c2a000 fffff880`02cba000   vsdatant vsdatant.sys Sat Oct 17 04:35:33 2009 (4AD981D5)
    The specific frame in the stack of the current thread showing vsdatant -
    Code:
    0: kd> !for_each_frame !for_each_local dt @#Local
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx

    Another issue sufaced in the dump - Address regions for 'netbt' and 'sptd.sys' overlap. Looking at the information compiled below, the unloaded Daemon/Alcohol driver sptd.sys and the Microsoft MBT transport driver netbt.sys do infact overlap -
    Code:
        BEGINNING         ENDING
fffff880`01162000 fffff880`011a7000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01090000 fffff880`011c4000   sptd.sys UNLOADED
    I would have to give the probable blame to sptd.sys here; however, there is another wildcard that I found in the dump - you also have KIS installed.

    My suggestion to you is to rid your system of Zone Alarm, KIS and Daemon/Alcohol 120 and see if BSODs persist.

    Use the respective removal tools for Z/A & KIS -

    Zone Alarm --> Self-Service Support

    KIS --> Kaspersky Americas Support and Services United States

    Reset the Windows Firewall. Install the anti-virus of your choice. I prefer ESET NOD32 --> Free Antivirus Download from ESET

    Good Luck to you.

    Happy Holidays!

    jcgriff2

    .

    Code:
     
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\PalmDesert7\__jcgriff2__\121709-21668-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
 
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`03018000 PsLoadedModuleList = 0xfffff800`03255e50
Debug session time: Thu Dec 17 14:23:59.123 2009 (GMT-5)
System Uptime: 0 days 0:00:12.168
Loading Kernel Symbols
...............................................................
.....
Loading User Symbols
Loading unloaded module list
.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C4, {121, 2, fffff88002c904b0, 0}
Unable to load image \SystemRoot\system32\DRIVERS\vsdatant.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+19865 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000121, Waiting at DISPATCH_LEVEL, without a timeout.
Arg2: 0000000000000002, IRQL value.
Arg3: fffff88002c904b0, Object to wait on.
Arg4: 0000000000000000, Timeout parameter.
Debugging Details:
------------------
 
OVERLAPPED_MODULE: Address regions for 'netbt' and 'sptd.sys' overlap
BUGCHECK_STR:  0xc4_121
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  System
CURRENT_IRQL:  2
LAST_CONTROL_TRANSFER:  from fffff800035133dc to fffff80003089f00
STACK_TEXT:  
fffff880`009a91d8 fffff800`035133dc : 00000000`000000c4 00000000`00000121 00000000`00000002 fffff880`02c904b0 : nt!KeBugCheckEx
fffff880`009a91e0 fffff800`03526654 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`00000001 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`009a9220 fffff880`02c43865 : fffff880`02c904b0 00000000`00000000 00000000`00000001 fffff880`02c6ec0e : nt!VerifierKeWaitForSingleObject+0x94
fffff880`009a92a0 fffff880`02c904b0 : 00000000`00000000 00000000`00000001 fffff880`02c6ec0e 00000000`00000000 : vsdatant+0x19865
fffff880`009a92a8 00000000`00000000 : 00000000`00000001 fffff880`02c6ec0e 00000000`00000000 fffffa80`03963878 : vsdatant+0x664b0
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
vsdatant+19865
fffff880`02c43865 ??              ???
SYMBOL_STACK_INDEX:  3
SYMBOL_NAME:  vsdatant+19865
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: vsdatant
IMAGE_NAME:  vsdatant.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4ad981d5
FAILURE_BUCKET_ID:  X64_0xc4_121_VRF_vsdatant+19865
BUCKET_ID:  X64_0xc4_121_VRF_vsdatant+19865
Followup: MachineOwner
---------
0: kd> lmvm vsdatant
start             end                 module name
fffff880`02c2a000 fffff880`02cba000   vsdatant T (no symbols)           
Loaded symbol image file: vsdatant.sys
Image path: \SystemRoot\system32\DRIVERS\vsdatant.sys
Image name: vsdatant.sys
Timestamp:        Sat Oct 17 04:35:33 2009 (4AD981D5)
CheckSum:         0006D11C
ImageSize:        00090000
Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> lmnt
start             end                 module name
fffff800`00bc7000 fffff800`00bd1000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`03018000 fffff800`035f5000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff800`035f5000 fffff800`0363e000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00ca4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00cb0000 fffff880`00cbd000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`00cbd000 fffff880`00cd1000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00cd1000 fffff880`00d2f000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d2f000 fffff880`00def000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00def000 fffff880`00dfe000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e00000 fffff880`00e4c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`00e4c000 fffff880`00e60000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00e60000 fffff880`00ebe000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`00ecc000 fffff880`00f23000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f23000 fffff880`00f2c000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f2c000 fffff880`00f36000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f36000 fffff880`00f43000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00f43000 fffff880`00f76000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f76000 fffff880`00f8b000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f8b000 fffff880`00fa5000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00fa5000 fffff880`00fcf000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00fcf000 fffff880`00fda000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`01000000 fffff880`01015000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01015000 fffff880`01071000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01071000 fffff880`01078000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`01078000 fffff880`01088000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01088000 fffff880`010b2000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`010b2000 fffff880`0110e000   klif     klif.sys     Tue Sep 22 06:31:19 2009 (4AB8A777)
fffff880`0110e000 fffff880`01133000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01133000 fffff880`01144000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01144000 fffff880`01162000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`01162000 fffff880`011a7000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`011c4000 fffff880`011f3000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`011f3000 fffff880`011fc000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0121a000 fffff880`01245000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0124f000 fffff880`013f2000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013f2000 fffff880`013ff000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01460000 fffff880`01469000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0146c000 fffff880`014df000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`014df000 fffff880`014f0000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`014f0000 fffff880`014fa000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`014fa000 fffff880`015ec000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`015ec000 fffff880`015f5000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`015f5000 fffff880`01600000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01800000 fffff880`01830000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01830000 fffff880`01838000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff880`01838000 fffff880`01846000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01846000 fffff880`01852000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01852000 fffff880`0185b000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0185b000 fffff880`0186e000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0186e000 fffff880`01877000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01877000 fffff880`0187e000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0187e000 fffff880`01887000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01887000 fffff880`018d1000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`018d1000 fffff880`018e1000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`018e1000 fffff880`0192d000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0192d000 fffff880`01935000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01935000 fffff880`0196f000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0196f000 fffff880`01981000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01981000 fffff880`0198a000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0198a000 fffff880`019c4000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`019c4000 fffff880`019da000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`019da000 fffff880`019e8000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019e8000 fffff880`019f8000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`02c2a000 fffff880`02cba000   vsdatant vsdatant.sys Sat Oct 17 04:35:33 2009 (4AD981D5)
fffff880`03e00000 fffff880`03e8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e9d000 fffff880`043c6000   kl1      kl1.sys      Fri Sep 25 09:59:13 2009 (4ABCCCB1)
Unloaded modules:
fffff880`01090000 fffff880`011c4000   sptd.sys
Timestamp: unavailable (00000000)
Checksum:  00000000
0: kd> lmntsm
start             end                 module name
fffff880`00ecc000 fffff880`00f23000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03e00000 fffff880`03e8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`00fcf000 fffff880`00fda000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`011f3000 fffff880`011fc000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fa5000 fffff880`00fcf000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`01830000 fffff880`01838000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff880`01877000 fffff880`0187e000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01088000 fffff880`010b2000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d2f000 fffff880`00def000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01800000 fffff880`01830000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cd1000 fffff880`00d2f000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0146c000 fffff880`014df000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01838000 fffff880`01846000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`019c4000 fffff880`019da000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01852000 fffff880`0185b000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01846000 fffff880`01852000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0185b000 fffff880`0186e000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`00e4c000 fffff880`00e60000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00e00000 fffff880`00e4c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`014f0000 fffff880`014fa000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0198a000 fffff880`019c4000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01887000 fffff880`018d1000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`035f5000 fffff800`0363e000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`01981000 fffff880`0198a000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff800`00bc7000 fffff800`00bd1000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03e9d000 fffff880`043c6000   kl1      kl1.sys      Fri Sep 25 09:59:13 2009 (4ABCCCB1)
fffff880`010b2000 fffff880`0110e000   klif     klif.sys     Tue Sep 22 06:31:19 2009 (4AB8A777)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0121a000 fffff880`01245000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`00cb0000 fffff880`00cbd000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`00f8b000 fffff880`00fa5000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`015f5000 fffff880`01600000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f2c000 fffff880`00f36000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00e60000 fffff880`00ebe000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`0196f000 fffff880`01981000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014fa000 fffff880`015ec000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01162000 fffff880`011a7000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01133000 fffff880`01144000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff800`03018000 fffff800`035f5000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`0124f000 fffff880`013f2000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0186e000 fffff880`01877000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`00f76000 fffff880`00f8b000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f43000 fffff880`00f76000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01071000 fffff880`01078000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`01078000 fffff880`01088000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`014df000 fffff880`014f0000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`00cbd000 fffff880`00cd1000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0187e000 fffff880`01887000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01460000 fffff880`01469000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`015ec000 fffff880`015f5000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01935000 fffff880`0196f000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`011c4000 fffff880`011f3000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`0192d000 fffff880`01935000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`013f2000 fffff880`013ff000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01144000 fffff880`01162000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`00f36000 fffff880`00f43000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019da000 fffff880`019e8000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0110e000 fffff880`01133000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`018d1000 fffff880`018e1000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`01000000 fffff880`01015000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01015000 fffff880`01071000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`018e1000 fffff880`0192d000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c2a000 fffff880`02cba000   vsdatant vsdatant.sys Sat Oct 17 04:35:33 2009 (4AD981D5)
fffff880`019e8000 fffff880`019f8000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00c00000 fffff880`00ca4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00def000 fffff880`00dfe000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f23000 fffff880`00f2c000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
Unloaded modules:
fffff880`01090000 fffff880`011c4000   sptd.sys
Timestamp: unavailable (00000000)
Checksum:  00000000
0: kd> .bugcheck
Bugcheck code 000000C4
Arguments 00000000`00000121 00000000`00000002 fffff880`02c904b0 00000000`00000000
windbg> .hh 
0: kd> !for_each_frame !for_each_local dt @#Local
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
0: kd> !for_each_frame !for_each_local dt @#Local
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
0: kd> !for_each_frame !for_each_local dt @#Local
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx
0: kd> lmvm netbt
start             end                 module name
fffff880`01162000 fffff880`011a7000   netbt      (deferred)             
Mapped memory image file: C:\symbols\netbt.sys\4A5BC17845000\netbt.sys
Image path: \SystemRoot\System32\DRIVERS\netbt.sys
Image name: netbt.sys
Timestamp:        Mon Jul 13 19:21:28 2009 (4A5BC178)
CheckSum:         0004A6B3
ImageSize:        00045000
File version:     6.1.7600.16385
Product version:  6.1.7600.16385
File flags:       0 (Mask 3F)
File OS:          40004 NT Win32
File type:        3.7 Driver
File date:        00000000.00000000
Translations:     0409.04b0
CompanyName:      Microsoft Corporation
ProductName:      Microsoft® Windows® Operating System
InternalName:     netbt.sys
OriginalFilename: netbt.sys
ProductVersion:   6.1.7600.16385
FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription:  MBT Transport driver
LegalCopyright:   © Microsoft Corporation. All rights reserved.
 
 
 
 
__________________________________
 
by jcgriff2
 
J. C. Griffith [MVP]
 
www.jcgriff2.com
      My Computer
    Quote Quote

  3. Krumlov
    Posts : 28
    Windows 7 Home Premium x64
    Thread Starter
       New #22

    Okay, so yesterday was the worst day ever, here are the minidump files.

    Also I can't figure out what this problem is, I got rid of Alcohol 120.. and don't quite knw what else there is that could be the problem.
      My Computer
    Quote Quote

  4. usasma
    Posts : 5,705
    Win7 x64 + x86
       New #23

    Zone Alarm and Kaspersky still appear to be installed - please remove them as jcgriff2 requested.
    Zone Alarm was blamed as the culprit in the last Driver Verifier dump file - and Kaspersky likely had a hand in it also.

    The dump files don't give us any significant information. Should the BSOD's recur AFTER removing Zone Alarm and Kaspersky, please post back and we'll run Driver Verifier again.

    Summary of the BSOD's:
    Code:
    BugCheck 7F, {8, 80050031, 6f8, fffff8000307e85f}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030c285f}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff8000308085f}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030975eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030cd5eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff8000308085f}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff8000307d5eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030c55eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030dd5eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030785eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030c75eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030cf5eb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030c785f}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 7F, {8, 80050031, 6f8, fffff800030c085f}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
      My Computer
    Quote Quote

  6. FAE
    Posts : 21
    Windows 7 64bit
       New #24

    Get rid of Zonealarm


    Dear Krumlov,

    Get rid of ZoneAlarm. I've had random BSOD's 7f until i removed it. I am now using the Comodo Firewall in combination with the MS Security essentials and I haven't had any BSOD any more.

    See thread https://www.sevenforums.com/crashes-d...-me-crazy.html

    Best Regards & good luck.
      My Computer
    Quote Quote

  7. Krumlov
    Posts : 28
    Windows 7 Home Premium x64
    Thread Starter
       New #25

    Alright, I had been hoping that I wouldn't need to remove ZA because I paid for 600 days of protection... but hey, have to do what I have to do.

    I just got done removing it and putting up the ESET anti-virus that the gentleman up there suggested. Lets hope it gets the job done and that all the BSOD issues will be resolved.

    Thanks guys, I will post back if I have any more issues. :)
      My Computer
    Quote Quote

  8. Krumlov
    Posts : 28
    Windows 7 Home Premium x64
    Thread Starter
       New #26

    Absolutely NO BSOD's.. wow ZoneAlarm is sin.

    Thanks guys for all the help, please close this topic.
      My Computer
    Quote Quote

  10. jcgriff2
    Posts : 845
    Windows 7 - Vista
       New #27

    Hi -

    Thank you very much for posting back with the outcome. I hope you can get a ZA refund.

    Regards. . .

    jcgriff2

    .
      My Computer
    Quote Quote

 
Page 3 of 3 FirstFirst 123

  Related Discussions
I have had this problem for the last year. I get these blackscreens that lasts for a few seconds, sometimes 3-4, sometimes <1. They don't seem to be triggered by anything special, as it happens both when inside games and outside games. When the blackscreen is over i get this message "Display...
Hi all, I know this is very ambiguous, but one of my Windows 7 computers at work, a Dell Optiplex 390, has repeatedly experienced BSOD crashes over the past year. This occurs when it is being used for web browsing, and when it is left on and not being actively used. Examining the system log...
[BSOD] Multiple times and randomly
in BSOD Help and Support

I had run Verifier and it crashes. However, no dump files are recorded. Anyone can help with this?
Last week I started receiving BSODs, and after the first one it got to the point where my computer was not booting up and my hard drive was beeping very angrily at me. I was not sure what all the problems were, however I also knew that there was something seriously wrong with my hard drive, so I...
I am trying to get my wife's new computer up and running without any BSOD or program failures. Note that the system was not initially set up to capture the dmp files so all the earliest ones are missing. I presented the initial problems to the original seller who recommended sticking with MSE and...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 18:32.
Find Us