BSOD assistance requested please - newish install, new user

[Roger Freeman]

Hello

I'm quite familiar with installing/using XP but I have recently upgraded to Win 7 32 bit Pro. I got a deal at the end of 2009 to buy an "upgrade" CD which I downloaded from MS - you can upgrade an existing XP installation.

I installed a clean XP OS (32 bit Pro) then upgraded to Win 7 32 bit Pro. It worked fine for about a week, during which time I installed no new hardware but did install Firefox, Thunderbird, Google Sketchup and a few software utilities.

So to sum up:
X86 32 bit Pro, downloaded from MS as an upgrade (MD5 matched OK)
H/W is perhaps 4 years old
OS is a fortnight old

The attached perfmon and jcgriff files are contained in the attached Windows_NT6_BSOD_jcgriff2.zip file

Symptoms - a spontaneous OS crash, BSOD and immediate reboot whilst doing nothing in particular - maybe moving the mouse, maybe reading an html page, maybe send/receiving emails.

I did have SP1 installed, and now I have uninstalled it but the BSODs keep happening. Presumably the rest of the info I need to supply is in the minidumps - hope so.

If you can point me in the right direction (h/w failure, devise driver failure, corrupt DLL?) I would be very grateful. I have spent many hours sorting out my computer recently and I am not getting very far.

Thanks in advance

RF

 

[usasma]

Please reinstall SP1 - it is remarkably stable and trouble-free.

MSINFO32 shows a bunch of STOP 0xB8 errors in PGPwded.sys - a component of PGP Desktop. Please uninstall it and see if that stops the BSOD's (this is also the cause cited in the memory dumps that are analyzed below).
Also, PGP Desktop seems to have a slew of vulnerabilities - so an independent virus scan is advisable ( free here: Free Online AntiMalware Scanners (read the details at the link) )

I have also seen issues with the Samsung Kies program - please uninstall it until we're finished troubleshooting.

OLDER DRIVERS PRESENT IN THE DUMP FILES
- Please update these drivers from the device manufacturer's website - or uninstall/remove them from your system. Reference links included below.
- DO NOT use Windows Update or the Update Drivers function of Device Manager.
- Please feel free to post back about any drivers that you are having difficulty locating.
- Windows Update exceptions may be noted below for Windows drivers:

[font=lucida console]
amdxata.sys       Tue May 19 13:57:35 2009 (4A12F30F)
PGPfsfd.sys       Thu Oct 14 18:09:50 2010 (4CB77FAE)
Pgpwdefs.sys      Thu Oct 14 18:19:22 2010 (4CB781EA)
PGPwded.sys       Thu Oct 14 18:17:23 2010 (4CB78173)
point32.sys       Tue Dec 14 06:09:17 2010 (4D07505D)
MpFilter.sys      Tue Sep 14 17:23:59 2010 (4C8FE7EF)
dc3d.sys          Tue Dec 14 06:09:21 2010 (4D075061)
nvlddmkm.sys      Fri Jul 09 17:15:14 2010 (4C379162)
nvBridge.kmd      Fri Jul 09 17:10:11 2010 (4C379033)
Rt86win7.sys      Thu Feb 26 04:04:22 2009 (49A65B16)
PGPdisk.SYS       Thu Oct 14 18:20:28 2010 (4CB7822C)
PGPsdk.sys        Thu Oct 14 18:19:25 2010 (4CB781ED)
FsUsbExDisk.SYS   Thu Oct 08 22:36:21 2009 (4ACEA1A5)
MpKsl4d90ef9b.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
NisDrvWFP.sys     Tue Sep 14 17:24:12 2010 (4C8FE7FC)
vmbus.sys         Sat Nov 20 04:14:58 2010 (4CE79192)
winhv.sys         Sat Nov 20 03:38:15 2010 (4CE788F7)
amdxata.sys       Fri Mar 19 12:19:01 2010 (4BA3A3F5)
MpNWMon.sys       Tue Sep 14 17:23:50 2010 (4C8FE7E6)
MpKsl6718c8ba.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
MpKsl0588d3c4.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
MpKsl34f090ff.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
[/font]

http://www.carrona.org/dvrref.html#amdxata.sys
http://www.carrona.org/dvrref.html#point32.sys
http://www.carrona.org/dvrref.html#MpFilter.sys
http://www.carrona.org/dvrref.html#dc3d.sys
http://www.carrona.org/dvrref.html#nvlddmkm.sys
http://www.carrona.org/dvrref.html#nvBridge.kmd
http://www.carrona.org/dvrref.html#Rt86win7.sys
http://www.carrona.org/dvrref.html#FsUsbExDisk.SYS
http://www.carrona.org/dvrref.html#NisDrvWFP.sys
http://www.carrona.org/dvrref.html#vmbus.sys
http://www.carrona.org/dvrref.html#winhv.sys
http://www.carrona.org/dvrref.html#amdxata.sys
http://www.carrona.org/dvrref.html#MpNWMon.sys

BSOD BUGCHECK SUMMARY

[font=lucida console]
Built by: 7600.16695.x86fre.win7_gdr.101026-1503
Debug session time: Mon Mar  7 17:28:31.531 2011 (UTC - 5:00)
System Uptime: 0 days 2:58:12.437
*** WARNING: Unable to verify timestamp for PGPwded.sys
*** ERROR: Module load completed but symbols could not be loaded for PGPwded.sys
Probably caused by : PGPwded.sys ( PGPwded+7da2 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xB8
PROCESS_NAME:  dwm.exe
FAILURE_BUCKET_ID:  0xB8_PGPwded+7da2
Bugcheck code 100000B8
Arguments 8611ab48 8684bd48 8e336fd0 00000000
BiosVersion = P1.60
BiosReleaseDate = 01/05/2007
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Sun Mar  6 17:54:57.759 2011 (UTC - 5:00)
System Uptime: 0 days 1:30:22.666
*** WARNING: Unable to verify timestamp for PGPwded.sys
*** ERROR: Module load completed but symbols could not be loaded for PGPwded.sys
Probably caused by : PGPwded.sys ( PGPwded+7da2 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xB8
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  0xB8_PGPwded+7da2
Bugcheck code 100000B8
Arguments 867ebc40 82966340 998b7fd0 00000000
BiosVersion = P1.60
BiosReleaseDate = 01/05/2007
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Sun Mar  6 16:23:24.490 2011 (UTC - 5:00)
System Uptime: 0 days 3:33:32.380
*** WARNING: Unable to verify timestamp for PGPwded.sys
*** ERROR: Module load completed but symbols could not be loaded for PGPwded.sys
Probably caused by : PGPwded.sys ( PGPwded+7da2 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xB8
PROCESS_NAME:  sidebar.exe
FAILURE_BUCKET_ID:  0xB8_PGPwded+7da2
Bugcheck code 100000B8
Arguments 86584540 8292d340 9c07bfd0 00000000
BiosVersion = P1.60
BiosReleaseDate = 01/05/2007
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Sun Mar  6 11:27:32.829 2011 (UTC - 5:00)
System Uptime: 0 days 1:47:11.735
*** WARNING: Unable to verify timestamp for PGPwded.sys
*** ERROR: Module load completed but symbols could not be loaded for PGPwded.sys
Probably caused by : PGPwded.sys ( PGPwded+7da2 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  firefox.exe
FAILURE_BUCKET_ID:  0xA_CODE_AV_BAD_IP_PGPwded+7da2
Bugcheck code 0000000A
Arguments 82ac6b4f 00000002 00000000 82ac6b4f
BiosVersion = P1.60
BiosReleaseDate = 01/05/2007
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
  [/font]

 

[Roger Freeman]

Blimey - that's what I call a thorough (and rapid) response. Thanks very much indeed - I have uninstalled PGP and Kies is being uninstalled as I type. I'll start sorting out the drivers as instructed via the URL:s you supplied - all understood.

I've had a couple of BSODs since posting - the stop codes I saw were [0Ah, 36h, 02h, 00h and 8286DBE2h] the first time and then [0Ah, 36h, 02h, 00h and 82867BE2h] the second time.

I'll let you know how I get on with the driver updates ...thanks once again

 

[Roger Freeman]

The machine's now been running for about 15h without crashing: I have just reinstalled SP1 and sorted out the drivers as per the list (most were already absent on account of uninstalling PGP and Kies - the remainder happen to be ones that get dealt with via WU). I've updated the remainder (mouse, gfx) and all seems healthy i.e. stable.

Many thanks once again for your help - an invaluable forum which I will read and (try to) learn.

best regards

RF