BlueScreen Problem

[priya09]

Whenever I try to shutdown my laptop, it doesn't do so and instead it will restart and then I have to shut it down again. And then when I turn on my laptop the next day, I get the BlueScreen Error.

Thank you so much and any help is appreciated!

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 9f
BCP1: 0000000000000003
BCP2: FFFFFA80088821B0
BCP3: FFFFF80000B9C518
BCP4: FFFFFA80089D22E0
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\WINDOWS\Minidump\112312-20092-01.dmp
C:\Users\Priya\AppData\Local\Temp\WER-52260-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

 

[koolkat77]

Welcome to SevenForums.

The BSOD-s were caused by CD-ROM Class Filter Driver by Gear Software.
Also comes with iTunes.

You might want to uninstall this software and see if the problem persists.

[FONT="Lucida Console"]0: kd> !irp fffffa80089d22e0
Irp is active with 6 stacks 4 is current (= 0xfffffa80089d2488)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 00000000
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 00000000
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 00000000
>[ 16, 2]   0 e1 fffffa80077b8e10 00000000 fffff88005a7d780-fffffa80068f2460 Success Error Cancel pending
	       \Driver\cdrom	GEARAspiWDM
			Args: 00016600 00000001 00000004 00000006
 [ 16, 2]   0 e1 fffffa80068f2310 00000000 00000000-00000000    pending
	       \Driver\GEARAspiWDM
			Args: 00016600 00000001 00000004 00000006
 [  0, 0]   0  0 00000000 00000000 00000000-fffffa8006eafab0    

			Args: 00000000 00000000 00000000 00000000
0: kd> lmvm GEARAspiWDM
start             end                 module name
fffff880`05a7c000 fffff880`05a82c00   GEARAspiWDM T (no symbols)           
    Loaded symbol image file: GEARAspiWDM.sys
    Image path: \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    Image name: GEARAspiWDM.sys
    Timestamp:        Fri May 04 01:56:17 2012 (4FA2E2E1)
    CheckSum:         00008963
    ImageSize:        00006C00
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4[/FONT]

You need to update the graphic card drivers:

[FONT="Lucida Console"]0: kd> lmvm atikmdag
start             end                 module name
fffff880`04242000 fffff880`04878000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        Thu Nov 19 01:14:44 2009 (4B0447A4)
    CheckSum:         005EE68A
    ImageSize:        00636000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4[/FONT]

Click on the Start rb: ► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to; ATI. Reboot the system upon completion. Delete remnants of its drivers/older drivers using Driver Fusion/Sweeper.

• AMD Driver Autodetect

ESET can contribute in BSOD-s, please uninstall and use Microsoft Secuirty Essentials. (TO TEST).

Run this tool and delete anything it finds:

• Anti-rootkit utility TDSSKiller

----

• Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase
• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

:warn: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Free up the start-up, nothing except the antivirus is usually needed.

• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html
• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

See if enabling or disabling usb selective suspense helps the situation:

• http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html

Let us know the results.

 

[priya09]

So when the AMD Driver Autodetect tried to install things, after a couple of seconds, I got a blue screen that said windows is shutting down to prevent further damage and when i restarted, I still got the BSOD.

 

[priya09]

Also there was nothing found when running disk check or Anti-rootkit utility TDSSKiller

 

[koolkat77]

Did you uninstall the CD Gear stuff?

 

[priya09]

Also, when I ran the SFC, it told me that I had some corrupted files that it could not repair so I looked at the CBS log and these are the files under which it says "cannot be repaired"

POQ 61 ends.
2012-11-23 21:15:13, Info CSI 000002b3 [SR] Verify complete
2012-11-23 21:15:13, Info CSI 000002b4 [SR] Verifying 100 (0x0000000000000064) components
2012-11-23 21:15:13, Info CSI 000002b5 [SR] Beginning Verify and Repair transaction
2012-11-23 21:15:18, Info CSI 000002b6 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90FRA.DLL do not match actual file [l:24{12}]"MFC90FRA.DLL" :
Found: {l:20 b:2jmj7l5rSw0yVb/vlWAYkK/YBwk=} Expected: {l:20 b:ftwwGRr3DnXCeaBrKHqzSKySEIU=}
Found: {l:20 b:2jmj7l5rSw0yVb/vlWAYkK/YBwk=} Expected: {l:20 bl+CwJDMBv2j/m9m8qh+bKNYr3w=}
2012-11-23 21:15:18, Info CSI 000002b7 [SR] Cannot repair member file [l:24{12}]"MFC90FRA.DLL" of Microsoft.VC90.MFCLOC, Version = 9.0.30729.1, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:1fc8b3b9a1e18e3b}, Type = [l:10{5}]"win32", TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-11-23 21:15:21, Info CSI 000002b8 Repair results created:
POQ 62 starts:
0: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\c2be08eff1c9cd01c51c0000a004a804._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"
1: Move File: Source = [l:162{81}]"\SystemRoot\WinSxS\Temp\PendingRenames\c2be08eff1c9cd01c61c0000a004a804.$$.cdf-ms", Destination = [l:74{37}]"\SystemRoot\WinSxS\FileMaps\$$.cdf-ms"
2: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\c4c91beff1c9cd01c71c0000a004a804.$$_system32_21f9a9c4a2f8b514.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"
3: Move File: Source = [l:260{130}]"\SystemRoot\WinSxS\Temp\PendingRenames\252b1eeff1c9cd01c81c0000a004a804.$$_system32_windowspowershell_v1.0_3f102d555ee05d33.cdf-ms", Destination = [l:172{86}]"\SystemRoot\WinSxS\FileMaps\$$_system32_windowspowershell_v1.0_3f102d555ee05d33.cdf-ms"
4: Move File: Source = [l:302{151}]"\SystemRoot\WinSxS\Temp\PendingRenames\454f25eff1c9cd01c91c0000a004a804.$$_system32_windowspowershell_v1.0_modules_bitstransfer_935cce3b0456eb87.cdf-ms", Destination = [l:214{107}]"\SystemRoot\WinSxS\FileMaps\$$_system32_windowspowershell_v1.0_modules_bitstransfer_935cce3b0456eb87.cdf-ms"
5: Move File: Source = [l:224{112}]"\SystemRoot\WinSxS\Temp\PendingRenames\454f25eff1c9cd01ca1c0000a004a804.$$_microsoft.net_3296b36dbe4c7fa3.cdf-ms", Destination = [l:136{68}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_3296b36dbe4c7fa3.cdf-ms"
6: Move File: Source = [l:240{120}]"\SystemRoot\WinSxS\Temp\PendingRenames\a6b027eff1c9cd01cb1c0000a004a804.$$_microsoft.net_authman_27829e1b3df01691.cdf-ms", Destination = [l:152{76}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_authman_27829e1b3df01691.cdf-ms"
7: Move File: Source = [l:218{109}]"\SystemRoot\WinSxS\Temp\PendingRenames\0a2850eff1c9cd01cc1c0000a004a804.program_files_ffd0cbfc813cc4f1.cdf-ms", Destination = [l:130{65}]"\SystemRoot\WinSxS\FileMaps\pro
2012-11-23 21:15:21, Info CSI gram_files_ffd0cbfc813cc4f1.cdf-ms"
8: Move File: Source = [l:268{134}]"\SystemRoot\WinSxS\Temp\PendingRenames\6b8952eff1c9cd01cd1c0000a004a804.program_files_windows_portable_devices_8ef3f2c72e8bb2ba.cdf-ms", Destination = [l:180{90}]"\SystemRoot\WinSxS\FileMaps\program_files_windows_portable_devices_8ef3f2c72e8bb2ba.cdf-ms"
9: Move File: Source = [l:310{155}]"\SystemRoot\WinSxS\Temp\PendingRenames\cbea54eff1c9cd01ce1c0000a004a804.program_files_reference_assemblies_microsoft_framework_v3.0_44577d982216c291.cdf-ms", Destination = [l:222{111}]"\SystemRoot\WinSxS\FileMaps\program_files_reference_assemblies_microsoft_framework_v3.0_44577d982216c291.cdf-ms"
10: Move File: Source = [l:248{124}]"\SystemRoot\WinSxS\Temp\PendingRenames\cbea54eff1c9cd01cf1c0000a004a804.$$_microsoft.net_framework64_083d4e330e766c5d.cdf-ms", Destination = [l:160{80}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_framework64_083d4e330e766c5d.cdf-ms"
11: Move File: Source = [l:266{133}]"\SystemRoot\WinSxS\Temp\PendingRenames\ec0e5ceff1c9cd01d01c0000a004a804.$$_microsoft.net_framework64_v3.0_wpf_f80a7f17f38f3771.cdf-ms", Destination = [l:178{89}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_framework64_v3.0_wpf_f80a7f17f38f3771.cdf-ms"
12: Move File: Source = [l:288{144}]"\SystemRoot\WinSxS\Temp\PendingRenames\4c705eeff1c9cd01d11c0000a004a804.$$_microsoft.net_framework64_v3.0_wpf_xamlviewer_2a5223adddc9e767.cdf-ms", Destination = [l:200{100}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_framework64_v3.0_wpf_xamlviewer_2a5223adddc9e767.cdf-ms"
13: Move File: Source = [l:270{135}]"\SystemRoot\WinSxS\Temp\PendingRenames\acd160eff1c9cd01d21c0000a004a804.$$_microsoft.net_framework64_v2.0.50727_443de60f3f6e0828.cdf-ms", Destination = [l:182{91}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_framework64_v2.0.50727_443de60f3f6e0828.cdf-ms"
14: Move File: Source = [l:250{125}]"\SystemRoot\WinSxS\Temp\PendingRenames\6d9465eff1c9cd01d31c0000a004a804.programdata_microsoft_wwansvc_b22df3b43960e1d3.cdf-ms", Destination = [l:1
2012-11-23 21:15:21, Info CSI 62{81}]"\SystemRoot\WinSxS\FileMaps\programdata_microsoft_wwansvc_b22df3b43960e1d3.cdf-ms"
15: Move File: Source = [l:268{134}]"\SystemRoot\WinSxS\Temp\PendingRenames\cdf567eff1c9cd01d41c0000a004a804.programdata_microsoft_wwansvc_profiles_d39df26c249b675d.cdf-ms", Destination = [l:180{90}]"\SystemRoot\WinSxS\FileMaps\programdata_microsoft_wwansvc_profiles_d39df26c249b675d.cdf-ms"
16: Set File Information: File = [l:72{36}]"\??\C:\ProgramData\Microsoft\WwanSvc", Attributes = 00000082
17: Set File Information: File = [l:90{45}]"\??\C:\ProgramData\Microsoft\WwanSvc\Profiles", Attributes = 00000082
18: Move File: Source = [l:346{173}]"\SystemRoot\WinSxS\Temp\PendingRenames\6f9f78eff1c9cd01d51c0000a004a804.programdata_microsoft_device_stage_task_07deb856-fc6e-4fb9-8add-d8f2cf8722c9__0ce7c057892d5774.cdf-ms", Destination = [l:258{129}]"\SystemRoot\WinSxS\FileMaps\programdata_microsoft_device_stage_task_07deb856-fc6e-4fb9-8add-d8f2cf8722c9__0ce7c057892d5774.cdf-ms"
19: Move File: Source = [l:356{178}]"\SystemRoot\WinSxS\Temp\PendingRenames\6f9f78eff1c9cd01d61c0000a004a804.programdata_microsoft_device_stage_task_07deb856-fc6e-4fb9-8add-d8f2cf8722c9_en-us_66e939cf450318c4.cdf-ms", Destination = [l:268{134}]"\SystemRoot\WinSxS\FileMaps\programdata_microsoft_device_stage_task_07deb856-fc6e-4fb9-8add-d8f2cf8722c9_en-us_66e939cf450318c4.cdf-ms"
20: Move File: Source = [l:314{157}]"\SystemRoot\WinSxS\Temp\PendingRenames\13549ceff1c9cd01d71c0000a004a804.$$_system32_windowspowershell_v1.0_modules_bitstransfer_en-us_8f6d5322d8d680dd.cdf-ms", Destination = [l:226{113}]"\SystemRoot\WinSxS\FileMaps\$$_system32_windowspowershell_v1.0_modules_bitstransfer_en-us_8f6d5322d8d680dd.cdf-ms"
21: Move File: Source = [l:278{139}]"\SystemRoot\WinSxS\Temp\PendingRenames\94d9a5eff1c9cd01d81c0000a004a804.$$_microsoft.net_framework64_v3.0_wpf_en-us_19918c4577c30dab.cdf-ms", Destination = [l:190{95}]"\SystemRoot\WinSxS\FileMaps\$$_microsoft.net_framework64_v3.0_wpf_en-us_19918c4577c30dab.cdf-ms"
22: Move File
2012-11-23 21:15:21, Info CSI : Source = [l:282{141}]"\SystemRoot\WinSxS\Temp\PendingRenames\57a7bdeff1c9cd01d91c0000a004a804.$$_system32_logfiles_windows_portable_devices_dcf2285bde880198.cdf-ms", Destination = [l:194{97}]"\SystemRoot\WinSxS\FileMaps\$$_system32_logfiles_windows_portable_devices_dcf2285bde880198.cdf-ms"





POQ 121 ends.
2012-11-23 21:20:59, Info CSI 00000419 [SR] Verify complete
2012-11-23 21:20:59, Info CSI 0000041a [SR] Repairing 1 components
2012-11-23 21:20:59, Info CSI 0000041b [SR] Beginning Verify and Repair transaction
2012-11-23 21:20:59, Info CSI 0000041c Hashes for file member \SystemRoot\WinSxS\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.1_none_92995f253c01eddb\MFC90FRA.DLL do not match actual file [l:24{12}]"MFC90FRA.DLL" :
Found: {l:20 b:2jmj7l5rSw0yVb/vlWAYkK/YBwk=} Expected: {l:20 b:ftwwGRr3DnXCeaBrKHqzSKySEIU=}
Found: {l:20 b:2jmj7l5rSw0yVb/vlWAYkK/YBwk=} Expected: {l:20 bl+CwJDMBv2j/m9m8qh+bKNYr3w=}
2012-11-23 21:20:59, Info CSI 0000041d [SR] Cannot repair member file [l:24{12}]"MFC90FRA.DLL" of Microsoft.VC90.MFCLOC, Version = 9.0.30729.1, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:1fc8b3b9a1e18e3b}, Type = [l:10{5}]"win32", TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-11-23 21:20:59, Info CSI 0000041e Repair results created:

 

[priya09]

Yeah and I completely removed itunes and checked under the drivers folder to make sure that the GEAR driver was gone.

 

[koolkat77]

I'm asking a friend to take a look at the cbs log.
Are you able to update the graphics card driver yet?

 

[priya09]

Yeah I was finally able to run the installation without it crashing!

And then when I shut down, I did not get a BSOD so maybe it fixed it? But I'm not entirely sure because I only get the error randomly.

Thank you so much for helping me!

 

[koolkat77]

We shouldn't take it as solved yet.

Do some more tests:

Upload a screenshot of your hard disk using crystal disk info and Summary tab using Speccy:

• Speccy - System Information - Free Download
• CrystalDiskInfo - Software - Crystal Dew World
• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Test your hard drive: Hard Drive Diagnostic Procedure\

Let us know the results.

 

[priya09]

Disk Check showed that everything was fine and I'm attaching the results from the other two tests. I don't have a CD available on me so I can't do the hard drive diagnostic procedure...Sorry!

View attachment 242847

View attachment 242848

View attachment 242849

View attachment 242850

 

[koolkat77]

They look okay

Our friend is in a different time zone so probably you'll receive a reply for the CBS log later.

Till then, let us know if there are any BSOD-s or crashing issues.

 

[priya09]

Will do! Thank you so much!!!

 

[koolkat77]

You're welcome.

See you soon

 

[NoelDP]

Please attach the complete CBS.log file (zipped!) - the bits you're showing above may not be the whole story.
Please also download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Method 2)

Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file

Then zip the CheckSUR.log and attach it to a reply.

 

[priya09]

View attachment 242957

View attachment 242958

 

[priya09]

Oh and the BSOD isn't fixed...I got the error last night when I tried to shut it down and then it restarted instead

 

[koolkat77]

Upload the newest files.

 

[priya09]

View attachment 242992

 

[koolkat77]

Do you have something inserted in your DVD/CD rom?