Blue Screen

C

cimage

New member
Member
Local time
6:56 PM
Messages
38
I am using Win 7 since release in Oct 09 and had no issues at all. Since last 3 days I am experiencing system shut off after displaying BLUE Screen. I am constantly adding new applications and uninstalled recently added application i.e. fbackup 4 a back up utility feeling that this could have been the cause. This has not helped, the next in the line could be Adobe Flash CS4, and since it is critical to my work I am hesitant. It may be pertinent to mention that I migrated to Win 7 from XP via clean install.

I would appreciate any insight. Minidump file attached.

Thanks for any help.


System Configuration

OS Window 7 Home Premium 64bit
Intel Core Quad Q8200
Installed Ram : 8 GB
Display adaptor : ATI Radeon HD 2600 PRO 1 GB
Optriarc DVD drive RW AD7240S
Stroage : WDC 640 GB. WDC 160 GB, WDC 80 GB
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
custom
OS
win7 Home Premium 64 bit
CPU
core2quad q8200
Motherboard
Gigabyte EP45-UD3P
Memory
8GB
Graphics Card(s)
ZOTAC ZT-60403-10L GeForce GT 630 2GB 128-bit DDR3 PCI
Hard Drives
Hard Disk 4 numbers
The dump shows the offending driver to be CBUFS.SYS (Commodo Backup). MAke sure you have the most current version of the program. If so and you are still getting BSOD then uninstall the program and use a different backup program.

Code: 
 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\nickle\AppData\Local\Temp\Rar$DI00.384\121409-41683-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
Debug session time: Mon Dec 14 13:28:14.448 2009 (GMT-5)
System Uptime: 0 days 0:02:42.368
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff880010ba7fa, fffff88009a119b0, 0}
Probably caused by : CBUFS.sys ( CBUFS+1f7fa )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880010ba7fa, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88009a119b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP: 
CBUFS+1f7fa
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
CONTEXT:  fffff88009a119b0 -- (.cxr 0xfffff88009a119b0)
rax=0000000000000000 rbx=fffffa800851c1b0 rcx=ffffffffffffffff
rdx=000000000000005c rsi=fffffa8009114c80 rdi=0000000000000002
rip=fffff880010ba7fa rsp=fffff88009a12390 rbp=0000000000000002
 r8=ffffffffffffffff  r9=0000000000000000 r10=ffffffffffffffff
r11=fffff8a004ca5dd0 r12=fffffa8006c0ab80 r13=fffffa8006c0afb0
r14=fffffa800aabe710 r15=fffff8a003ff6cb0
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
CBUFS+0x1f7fa:
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
Resetting default scope
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  EXCEL.EXE
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff880010ba7fa
STACK_TEXT:  
fffff880`09a12390 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CBUFS+0x1f7fa
 
FOLLOWUP_IP: 
CBUFS+1f7fa
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  CBUFS+1f7fa
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: CBUFS
IMAGE_NAME:  CBUFS.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4aeaa1df
STACK_COMMAND:  .cxr 0xfffff88009a119b0 ; kb
FAILURE_BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
Followup: MachineOwner
---------
 

My Computer

OS
Windows 7
You need to setup and maintain a system imaging policy and keep it up to date, especially since you are doing a lot of experimental installs... forewarned is forearmed..
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
LENOVO K450 @3.0GHZ
OS
64-bit Windows 8.1 Pro
CPU
Core(TM) i5 CPU 4330 Haswell @ 3.20GHz
Motherboard
LENOVO
Memory
12.00 GB
Graphics Card(s)
Intel(R) HD Graphics
Sound Card
Intel HD integtrated
Monitor(s) Displays
HP 25' ISP Monitor
Screen Resolution
1900/1020
Hard Drives
(1) ST1000DM003-1CH162 (2) Generic STORAGE DEVICE USB Device (3) Generic STORAGE DEVICE USB Device
Internet Speed
100mb down/10mb up
nickle

Thanks, I have since uninstalled the Commodo backup. I use Revo Uninstaller, it seems this tool is not good enough.

Do I have any other choice besides system restore ?


Tews

I appreciate what you are saying. can you suggest how to go about setting system imaging policy. Please bear in mind that I am no geek just a intensive user.

---------------------------------------------------

The dump shows the offending driver to be CBUFS.SYS (Commodo Backup). MAke sure you have the most current version of the program. If so and you are still getting BSOD then uninstall the program and use a different backup program.

Code: 
 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\nickle\AppData\Local\Temp\Rar$DI00.384\121409-41683-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
Debug session time: Mon Dec 14 13:28:14.448 2009 (GMT-5)
System Uptime: 0 days 0:02:42.368
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff880010ba7fa, fffff88009a119b0, 0}
Probably caused by : CBUFS.sys ( CBUFS+1f7fa )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880010ba7fa, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88009a119b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP: 
CBUFS+1f7fa
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
CONTEXT:  fffff88009a119b0 -- (.cxr 0xfffff88009a119b0)
rax=0000000000000000 rbx=fffffa800851c1b0 rcx=ffffffffffffffff
rdx=000000000000005c rsi=fffffa8009114c80 rdi=0000000000000002
rip=fffff880010ba7fa rsp=fffff88009a12390 rbp=0000000000000002
 r8=ffffffffffffffff  r9=0000000000000000 r10=ffffffffffffffff
r11=fffff8a004ca5dd0 r12=fffffa8006c0ab80 r13=fffffa8006c0afb0
r14=fffffa800aabe710 r15=fffff8a003ff6cb0
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
CBUFS+0x1f7fa:
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
Resetting default scope
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  EXCEL.EXE
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff880010ba7fa
STACK_TEXT:  
fffff880`09a12390 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CBUFS+0x1f7fa
 
FOLLOWUP_IP: 
CBUFS+1f7fa
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  CBUFS+1f7fa
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: CBUFS
IMAGE_NAME:  CBUFS.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4aeaa1df
STACK_COMMAND:  .cxr 0xfffff88009a119b0 ; kb
FAILURE_BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
BUCKET_ID:  X64_0x3B_CBUFS+1f7fa
Followup: MachineOwner
---------
[/QUOTE]
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
custom
OS
win7 Home Premium 64 bit
CPU
core2quad q8200
Motherboard
Gigabyte EP45-UD3P
Memory
8GB
Graphics Card(s)
ZOTAC ZT-60403-10L GeForce GT 630 2GB 128-bit DDR3 PCI
Hard Drives
Hard Disk 4 numbers
cimage said:
I am using Win 7 since release in Oct 09 and had no issues at all. Since last 3 days I am experiencing system shut off after displaying BLUE Screen. I am constantly adding new applications and uninstalled recently added application i.e. fbackup 4 a back up utility feeling that this could have been the cause. This has not helped, the next in the line could be Adobe Flash CS4, and since it is critical to my work I am hesitant. It may be pertinent to mention that I migrated to Win 7 from XP via clean install.

I would appreciate any insight. Minidump file attached.

Thanks for any help.


System Configuration

OS Window 7 Home Premium 64bit
Intel Core Quad Q8200
Installed Ram : 8 GB
Display adaptor : ATI Radeon HD 2600 PRO 1 GB
Optriarc DVD drive RW AD7240S
Stroage : WDC 640 GB. WDC 160 GB, WDC 80 GB
Click to expand...

Hi and welcome

This crash was probably caused by cfusb.sys (part of comodo) I would

unistall comodo for there are better around
run a system file check
type cmd in search>right click and run as admin>sfc /scannow


Ken J+



Code: 
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\121409-41683-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
Debug session time: Mon Dec 14 13:28:14.448 2009 (GMT-5)
System Uptime: 0 days 0:02:42.368
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff880010ba7fa, fffff88009a119b0, 0}

Probably caused by : CBUFS.sys ( CBUFS+1f7fa )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880010ba7fa, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88009a119b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
CBUFS+1f7fa
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]

CONTEXT:  fffff88009a119b0 -- (.cxr 0xfffff88009a119b0)
rax=0000000000000000 rbx=fffffa800851c1b0 rcx=ffffffffffffffff
rdx=000000000000005c rsi=fffffa8009114c80 rdi=0000000000000002
rip=fffff880010ba7fa rsp=fffff88009a12390 rbp=0000000000000002
 r8=ffffffffffffffff  r9=0000000000000000 r10=ffffffffffffffff
r11=fffff8a004ca5dd0 r12=fffffa8006c0ab80 r13=fffffa8006c0afb0
r14=fffffa800aabe710 r15=fffff8a003ff6cb0
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
CBUFS+0x1f7fa:
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  EXCEL.EXE

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff880010ba7fa

STACK_TEXT:  
fffff880`09a12390 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CBUFS+0x1f7fa


FOLLOWUP_IP: 
CBUFS+1f7fa
fffff880`010ba7fa 66f2af          repne scas word ptr [rdi]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  CBUFS+1f7fa

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: CBUFS

IMAGE_NAME:  CBUFS.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4aeaa1df

STACK_COMMAND:  .cxr 0xfffff88009a119b0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_CBUFS+1f7fa

BUCKET_ID:  X64_0x3B_CBUFS+1f7fa

Followup: MachineOwner
---------
 

My Computer

Computer Manufacturer/Model Number
HP Pavillion dv-7 1005 Tx
OS
Win 8 Release candidate 8400
CPU
[email protected]
Memory
4 gigs
Graphics Card(s)
Nvidia 9600M
Sound Card
HD built-in
Monitor(s) Displays
17" Wxga
Screen Resolution
1440x900
Cooling
none
Internet Speed
45Mb down 5Mb up
cimage said:
nickle

Thanks, I have since uninstalled the Commodo backup. I use Revo Uninstaller, it seems this tool is not good enough.

Do I have any other choice besides system restore ?
Click to expand...

The purpose of uninstalling Commodo backup was to rid your system of the driver CBUFS.SYS which exists in the folder C:\Windows\SysWOW64\drivers. To that extent you can no longer receive a BSOD that names the driver as the culprit.

There is no way of telling if Commodo backup was completely uninstalled. If you still receive a BSOD attach the minidump as before to receive additional help.
 

My Computer

OS
Windows 7
Nickle

I guess I wasn't very clear. Though I uninstalled the Commodo backup, apparently Revo Uninstaller didn't cleanup everything. Now my question is can I manually delete the offending driver ?




nickle said:
cimage said:
nickle

Thanks, I have since uninstalled the Commodo backup. I use Revo Uninstaller, it seems this tool is not good enough.

Do I have any other choice besides system restore ?
Click to expand...

The purpose of uninstalling Commodo backup was to rid your system of the driver CBUFS.SYS which exists in the folder C:\Windows\SysWOW64\drivers. To that extent you can no longer receive a BSOD that names the driver as the culprit.

There is no way of telling if Commodo backup was completely uninstalled. If you still receive a BSOD attach the minidump as before to receive additional help.
Click to expand...
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
custom
OS
win7 Home Premium 64 bit
CPU
core2quad q8200
Motherboard
Gigabyte EP45-UD3P
Memory
8GB
Graphics Card(s)
ZOTAC ZT-60403-10L GeForce GT 630 2GB 128-bit DDR3 PCI
Hard Drives
Hard Disk 4 numbers
cimage said:
Nickle

I guess I wasn't very clear. Though I uninstalled the Commodo backup, apparently Revo Uninstaller didn't cleanup everything. Now my question is can I manually delete the offending driver ?
Click to expand...

If Commodo backup no longer appears in control panel/installed programs, it should be ok to rename CBUFS.SYS to CBUFS.BAK in case run into trouble you can change it back.
 

My Computer

OS
Windows 7
nickle said:
cimage said:
Nickle

I guess I wasn't very clear. Though I uninstalled the Commodo backup, apparently Revo Uninstaller didn't cleanup everything. Now my question is can I manually delete the offending driver ?
Click to expand...

If Commodo backup no longer appears in control panel/installed programs, it should be ok to rename CBUFS.SYS to CBUFS.BAK in case run into trouble you can change it back.
Click to expand...


Since I had uninstalled it doesn't list as installed program. As suggested I have renamed the file. Will watch and wait.

Can you suggest a uninstall utility. I was using Revo which obviously has failed.

Thanks a ton for your help.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
custom
OS
win7 Home Premium 64 bit
CPU
core2quad q8200
Motherboard
Gigabyte EP45-UD3P
Memory
8GB
Graphics Card(s)
ZOTAC ZT-60403-10L GeForce GT 630 2GB 128-bit DDR3 PCI
Hard Drives
Hard Disk 4 numbers
Fix

you can fix this problem with 2 soution
1. first, unistall comodo backup, after that remove registry key comodo in "Hkey_Local_Machine\Software\...", "Hkey_Local_User\Software\...
try, if not work, restart n try again. this work in my compi. if you choice this solutions you can't use comodo again

2. if you want to use comodo backup n don't want the fuc' blue screen you must update your comodo in http://download.comodo.com/cbu/down...Setup_xp_vista_server2003_server2008_win7.exe.

reference
1. Blue Screen whenever I create a new folder on any USB thumb drive

2. Windows 7 BSOD on mapped external drive

trust me, its work
:D
 

My Computer

OS
Windows 7
You must log in or register to reply here.

Similar threads

Driver/hdmi black screen/lag issues - all intertwined - pls read notes
Replies
5
Views
7K
souz72
S
Solved Blue screen shutdown - about 3 years since the last bsod help on here
2
Replies
27
Views
22K
michael diemer
M
Solved My stupid error -.- Blue Screen after change MSConfig 0xc000000e
Replies
13
Views
12K
SIW2
SIW2
Cannot install Win7 - Screen is stuck at "setup is starting"
Replies
1
Views
2K
SIW2
SIW2
Solved Not blue but BLACK screen of death!
Replies
2
Views
5K
Novice John
N
Back
Top