BSOD browsing via Chrome or starting safe mode ntoskrnl.exe+75c00

[naft]

Hi there,

Recently I've started getting BSODs frequently. It was working fine for a long time and I haven't upgraded my computer in more then 2 years now so the hardware is the same.

It seems the easiest way to force a BSOD on my computer is to start Chrome browser (for some reason) or to attempt to start the computer through Safe Mode. My PC can work fine for days without a BSOD and then randomly start getting crashes one after another for the entire day and then continue working fine again for another week or so...

I tried following instruction on how to analyze the BSODs and read dumps but I have no clue what it means. Using BlueScreenView I can see hal.dll and ntoskrnl.exe most frequently on top of the list (sometimes dtsoftbus01.sys). However I have no clue what it means... hopefully you guys can help.

I've uploaded my BSOD report as instructed. Thanks you!

 

[VistaKing]

naft welcome to SevenForums

dtsoftbus01.sys has to do with Daemon Tools .

Uninstall Daemon Tool

 

[naft]

I've uninstalled Daemon Tool but that's not the problem. I had only once crash related to dtsoftbus01.sys the rest are about hal.dll and ntoskrnl.exe.

 

[VistaKing]

Run chkdsk and SFC

Open up an Elevated Command Prompt. Click on rb: in

type CMD . Right click on CMD under Programs (1) choose

. On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

Type the command below

chkdsk /F /R

press [ENTER]

When you type chkdsk /F /R you will get this message

The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process.  Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

When you type " Y " and press [Enter] you get this message below

This volume will be checked the next time the system restarts.

C:\Windows\system32>

Close the command prompt window by typing exit and press [enter] Restart the PC manually .

When you're back inside Windows. Open up Powershell by clicking on rb: type Powershell inside

and press [ENTER] . Inside the Powershell paste the command below

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt

and Press [Enter] upload the CHKDSKResults.txt file

   Note

To paste inside the Powershell window press on the right click button on the mouse

Open up an Elevated Command Prompt. Click on rb: in

type CMD . Right click on CMD under Programs (1) choose

. On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

Type the command below

sfc /scannow press <ENTER>

If any corrupted files are found upload the CBS.log file

Location of log file : C:\Windows\Logs\CBS\CBS.log

 

[naft]

Thank you for the quick replies VistaKing!

I did what you asked, everything went smooth up until I ran sfc /scannow. Almost as soon as I ran "scf /scannow I got another BSOD.


I've uploaded the following:
1. CHKDSKResults.txt
2. CBS.log including the .cab files just in case
3. new SF_24-06-2013.zip - which I collected using SF_Diagnostic_Tool right after the BSOD caused by SFC

 

[VistaKing]

naft

Can you run the MGADiag tool below

Please download MGADiag and save it to your desktop.

:ar: Double click

icon on your desktop.

:ar: Click on the

button

:ar: Click on the

button

:ar: Paste the log inside the box . Highlight all of the text then code wrap by pressing on the # icon on the top .

 

[centaur78]

Hi Naft.

Based on dump files it looks more of a hardware error (Bugcheck 0x124) error... but with reference to a particular third party plugin with connects with the Windows system causing the error. However please do the below and also advice from VistaKing before we advice on the solution.

I can see you have installed Mcafee and MSE in the past ... for some reasons.. if these are uninstalled.. they were not done properly..... Both have remnants in the system and loaded during startup.... Please uninstall them properly and then Install MSE back again.

Secondly Please run Autoruns and then click on File> Save.. Save the file in .arn format and upload here. Will have a look and advise what to do next.

 

[naft]

naft

Can you run the MGADiag tool below

Please download MGADiag and save it to your desktop.

:ar: Double click

icon on your desktop.

:ar: Click on the

button

:ar: Click on the

button

:ar: Paste the log inside the box . Highlight all of the text then code wrap by pressing on the # icon on the top .

Here is the information you've asked for:
(Edit: In the info I pasted below, it lists Mozila as my default browser. However the only reason I switched to Mozila is to reply to you guys. Since, when using Chrome, I get the BSOD a lot quicker)

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-*****-*****-VR2K8
Windows Product Key Hash: UqfQnwsuBXAmg/wlMYw9tKDK6Xs=
Windows Product ID: 55041-148-5830507-86478
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {689458C2-ED57-4D33-B13F-1F30A0A90190}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{689458C2-ED57-4D33-B13F-1F30A0A90190}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-148-5830507-86478</PID><PIDType>6</PIDType><SID>S-1-5-21-3269904609-3481369363-510797883</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>P55M-UD4</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F11</Version><SMBIOSVersion major="2" minor="4"/><Date>20100719000000.000000+000</Date></BIOS><HWID>74223707018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-148-583050-03-1033-7601.0000-3582012
Installation ID: 002072130183317326704511994506353750269050890753596771
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: VR2K8
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 6/25/2013 8:06:42 AM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:22:2013 23:41
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MgAAAAEAAQABAAIAAQADAAAAAQABAAEAln1waFZR2F/MM85weFLCj2I9Ks8H7DLFdlY=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            GBT           GBTUACPI
  FACP            GBT           GBTUACPI
  HPET            GBT           GBTUACPI
  MCFG            GBT           GBTUACPI
  EUDS            GBT           
  TAMG            GBT           GBT   B0
  SSDT            INTEL        PPM RCM

 

[naft]

Hi Naft.

Based on dump files it looks more of a hardware error (Bugcheck 0x124) error... but with reference to a particular third party plugin with connects with the Windows system causing the error. However please do the below and also advice from VistaKing before we advice on the solution.

I can see you have installed Mcafee and MSE in the past ... for some reasons.. if these are uninstalled.. they were not done properly..... Both have remnants in the system and loaded during startup.... Please uninstall them properly and then Install MSE back again.

Secondly Please run Autoruns and then click on File> Save.. Save the file in .arn format and upload here. Will have a look and advise what to do next.

Hi Centaur, thank your for trying to help as well!

I do suspect a Hardware problem actually... I'm just trying to narrow it down to which component is causing it so I replace only that part instead of buying a new computer.

I do have MSE installed and running right now. I don't ever recall installing Mcafee nor does it show up in my uninstall list. Is there a tool that will help me delete permanently?

I also uploaded the AutoRuns file you've asked.


Thanks again to both of you!

 

[naft]

P.S. recently I get a BSOD almost every time my computer attempts to recover from "Sleep"

 

[naft]

Update:
Today I opened up my computer and unplugged all the components that I could. Then I dusted it and plugged it all back in. It seem to be more stable now... I didn't get a BSOD in few hours already which is good for a change.

I also manage to finish the SCF /scannow that VistaKing asked for before and it actually finished without a BSOD this time. I've uploaded the updated CBS.log for your review.

 

[naft]

Another update:

So I started getting the BSODs again, I also run Memtest over night and I had 7 Passes... so it seems the memory is fine...

I ran out of ideas, Please help...

 

[naft]

Anyone?

 

[centaur78]

naft

Please upload the latest SFdiag files again

 

[naft]

Please see my most recent SFDiag attached. Thank you!

 

[centaur78]

the zip is corrupted .... please upload again

 

[naft]

Sorry about that, here it is again.

P.s. recently I had my computer crash and just restart without showing the BSOD. just thought I mention it ...

 

[naft]

It seems like all the crushes occur when I try to browse the internet. Is there a way to tell from the dumps I posted if my network card drivers are faulty?

Thanks!

 

[naft]

any ideas?

 

[naft]

Another weird thing that I've noticed, if I hit the power switch off at the back of my computers (power supply) then turn it back on... my pc becomes more stable for the next 2 days or so... no BSOD