Problem Event Name: BlueScreen

slmat27 · 20 Mar 2010

I had BitDefender Total Security installed for my Windows 7, then it started acting very weird and blocked many files of the Windows files, and some files in System32 folder. When I restarted the PC, I got this famous BlueScreen and this message:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: f4
BCP1: 0000000000000003
BCP2: FFFFFA8005B6FB30
BCP3: FFFFFA8005B6FE10
BCP4: FFFFF80002D87240
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\032010-24897-01.dmp
C:\Users\Ahmed\AppData\Local\Temp\WER-51027-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

I started reading topics here with the same problem, but none of the solutions worked with me, or I didn't look that hard

So please I need help with this problem ASAP...

I uploaded the Minidump folder as you requested from all the prior users with same problem.

Thanks in advance & waiting for the solution...

zigzag3143 · 20 Mar 2010

slmat27 said:

I had BitDefender Total Security installed for my Windows 7, then it started acting very weird and blocked many files of the Windows files, and some files in System32 folder. When I restarted the PC, I got this famous BlueScreen and this message:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: f4
BCP1: 0000000000000003
BCP2: FFFFFA8005B6FB30
BCP3: FFFFFA8005B6FE10
BCP4: FFFFF80002D87240
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\032010-24897-01.dmp
C:\Users\Ahmed\AppData\Local\Temp\WER-51027-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

I started reading topics here with the same problem, but none of the solutions worked with me, or I didn't look that hard

So please I need help with this problem ASAP...

I uploaded the Minidump folder as you requested from all the prior users with same problem.

Thanks in advance & waiting for the solution...

This crash was probably caused by wininit.exe which is a critical win 7 file. I suspect it was damaged by Bitdefender.

Since wininit is a system file I would run a system file check to verify and repair your system files. to do that type cmd in search>right and run as admin
sfc /scannow (note the space between sfc and "/")

Let us know the results as you may have to run it more than once

Ken

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Minidump\032010-24897-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*F:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a0d000 PsLoadedModuleList = 0xfffff800`02c4ae50
Debug session time: Sat Mar 20 12:39:49.980 2010 (GMT-4)
System Uptime: 0 days 0:00:13.712
Loading Kernel Symbols
...............................................................
...........................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa8005b6fb30, fffffa8005b6fe10, fffff80002d87240}

Probably caused by : wininit.exe

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8005b6fb30, Terminating object
Arg3: fffffa8005b6fe10, Process image file name
Arg4: fffff80002d87240, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa8005b6fb30

IMAGE_NAME:  wininit.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: wininit

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  wininit.exe

EXCEPTION_CODE: (Win32) 0x1f (31) - A device attached to the system is not functioning.

BUGCHECK_STR:  0xF4_1F

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`05da3b08 fffff800`02e0a142 : 00000000`000000f4 00000000`00000003 fffffa80`05b6fb30 fffffa80`05b6fe10 : nt!KeBugCheckEx
fffff880`05da3b10 fffff800`02db6269 : 00000000`00000001 fffffa80`05b98b60 fffffa80`05b6fb30 fffffa80`05b6fb30 : nt!PspCatchCriticalBreak+0x92
fffff880`05da3b50 fffff800`02d3ac74 : 00000000`00000001 00000000`00000001 fffffa80`05b6fb30 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x17a06
fffff880`05da3ba0 fffff800`02a7e153 : fffffa80`05b98b60 fffff880`0000001f fffffa80`05b98b60 00000000`00000000 : nt!NtTerminateProcess+0xf4
fffff880`05da3c20 00000000`776a017a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`000ff7f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776a017a


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_1F_IMAGE_wininit.exe

BUCKET_ID:  X64_0xF4_1F_IMAGE_wininit.exe

Followup: MachineOwner
---------

slmat27 · 20 Mar 2010

Thanks for the help, the windows started normally after I did Restore. I uninstalled BitDefender and contacting them now to know how to fix the problem.

And regarding what you said:

zigzag3143 said:

Since wininit is a system file I would run a system file check to verify and repair your system files. to do that type cmd in search>right and run as admin
sfc /scannow (note the space between sfc and "/")

I got this message:

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

zigzag3143 · 20 Mar 2010