Solved bsod happened while downing a video on YouTube with Internet Download

[oldyeller38]

New BSOD's; Critical:31 bsodsince 9/13/2015: (Ran a memory check all night which showed no problems with memory.)

This bsod happened whiledowning a video on YouTube with Internet Download Manager. I had 9 errors, from3:46:47-5:08:18 today,12/17/2015: kernel power 41; event ID=41; task=63"

A partial list of issues in eventviewer;

pcouffin device for amd 64bit system listed under usb controllers; loadperf; application; printservice; eventlog; CAPI2; ESENT; bugcheck; application-IEXPLORER.EXE;

Would updating to windows 10solve this?

 

[Golden]

Please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply

 

[oldyeller38]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-D9XBB-GJVF4-2BJ62
Windows Product Key Hash: ps501iULYFmpCbWHqZiMg8wPdOo=
Windows Product ID: 00359-OEM-8703631-50535
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {D88270B8-B395-402E-A93E-8CC38FADCE0F}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.151019-1254
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Edition 2003 - 100 Genuine
Microsoft Office PowerPoint Home and Student 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D88270B8-B395-402E-A93E-8CC38FADCE0F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-2BJ62</PKey><PID>00359-OEM-8703631-50535</PID><PIDType>3</PIDType><SID>S-1-5-21-3348477657-3162457018-4080165813</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>M68MT-S2P</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F1</Version><SMBIOSVersion major="2" minor="4"/><Date>20101224000000.000000+000</Date></BIOS><HWID>F9503C07018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>81E9EA746339500</Val><Hash>dnMmG17TjMwtN2Sf+9HpDbb6puQ=</Hash><Pid>73931-640-1520132-57285</Pid><PidType>14</PidType></Product><Product GUID="{91120000-0037-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office PowerPoint Home and Student 2007</Name><Ver>12</Ver><Val>A8D4F1A4FBDF716</Val><Hash>MzPmNx6fbyFZrsK7aEbCVptrjSo=</Hash><Pid>84898-907-4990677-68338</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="11" Result="100"/><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/><App Id="44" Version="11" Result="100"/><App Id="18" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-036-350535-02-1033-7600.0000-1302015
Installation ID: 005790791582133084604751630603606790895142943422531272
Processor Certificate URL: SpcService Web Service
Machine Certificate URL: RacService Web Service
Use License URL: UseLicenseService Web Service
Product Key Certificate URL: PkcService Web Service
Partial Product Key: 2BJ62
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 12/17/2015 9:20:26 PM
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:15:2015 06:00
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: MAAAAAIAAAABAAEAAQADAAAAAQABAAEAln3sJx7j6+OUmcTZEFk0Fs6a8h0w0gLQ
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC GBT NVDAACPI
FACP GBT NVDAACPI
HPET GBT NVDAACPI
MCFG GBT NVDAACPI
SSDT PTLTD POWERNOW
TAMG GBT GBT B0

 

[Golden]

Thanks, that's all OK. The .dmp isn't giving away any clues at this stage.

Please do the following:

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Driver Verifier will cause your computer to run very sluggishly - this is normal. What it is trying to do is force your system to BSOD and isolate the offending driver/s. When it does, reboot, disable driver verifier, reboot as normal and upload the new dmp file/s here.

I recommend creating a system restore point before turning on driver verifier:
http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

If your system fails to boot to desktop once driver verifier is enabled, turn it off by booting into Safe Mode:
http://www.sevenforums.com/tutorials/69585-safe-mode.html

 

[oldyeller38]

After starting verifier,computer booted to desktop. I proceeded to shut down & got a BSOD. On autostartup after rebooting the background picture was showing but no icons ondesktop, only in taskbar. Mouse worked, clicked on some of icon on taskbarnothing happened & keyboard wouldn't work-it's a usb hard wired board.

First try at rebooting intosafe mode didn't work as keyboard arrow keys didn't work. Computer rebooted automaticand got full desktop, rebooted & got into safe mode this time & turnedoff Verifier; now in normal desktop.

Latest dump file afterverifier,

 

[Golden]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff980084bfe18, 2, 0, fffff88001d17f67}

*** WARNING: Unable to verify timestamp for[B][COLOR="Red"] kltdi.sys[/COLOR][/B]
*** ERROR: Module load completed but symbols could not be loaded for kltdi.sys
Probably caused by : NETIO.SYS ( NETIO!NsiEnumerateObjectsAllParametersEx+6df )

Followup: MachineOwner
---------

4: kd> lmvm kltdi
start             end                 module name
fffff880`04854000 fffff880`04864000   kltdi    T (no symbols)           
    Loaded symbol image file: kltdi.sys
    Image path: \SystemRoot\system32\DRIVERS\kltdi.sys
    Image name: kltdi.sys
    Timestamp:        Wed Jun 10 21:58:21 2015 (55782D65)
    CheckSum:         00015661
    ImageSize:        00010000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Uninstall Kaspersky, and replace it with MSE to test the stability of the system.

 

[oldyeller38]

After uninstalling Kaspersky'sapp and downloading & installing latest ver. of MSE; I did the Verifierroutine again.
This time the complete desktop appeared. I preceded to create afolder on the desktop which resulted in another bsod.
After trying to get intosafe mode the keyboard arrows wouldn't work so did a hard shutdown & got tosafe mode,
then went to verifier & got back to normal os. After muchGoogling looking for a way to be able to capture the message
from the blue screen,I ran across an app called ' BlueScreenView' which displayed this screen fromthe mini dump file.
In the vast majority of bsod'sor crashes I've noticed the term'ntoskrnl.exe' in the event viewer. Every timeI'd click the
link to go to MicroSoft, it wasn't any help at all, like some genericanswer that was useless to me. I had never seen the
TotRec before, but knowit's an audio capture app that I've used for at least 15 years with no issues.

 

[Golden]

Additional information is required.

1. Download the DM Log Collector application to your desktop by clicking the link below

DM Log Collector.exe

2. Run it by double-clicking the icon on your desktop, and follow the prompts.
3. Locate the .ZIP file that is created on your desktop, and upload it here in your next reply.

 

[oldyeller38]

Here is latest log report.

 

[Golden]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C9, {224, fffff8800480cc28, fffff9801488ad30, 0}

Unable to load image \??\C:\Windows\system32\drivers\TotRec8.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for TotRec8.sys
*** ERROR: Module load completed but symbols could not be loaded for TotRec8.sys
Probably caused by : [B][COLOR="red"]TotRec8.sys[/COLOR][/B] ( TotRec8+cc28 )

Followup: MachineOwner
---------

0: kd> lmvm TotRec8
start             end                 module name
fffff880`04800000 fffff880`0482a000   TotRec8  T (no symbols)           
    Loaded symbol image file: TotRec8.sys
    Image path: \??\C:\Windows\system32\drivers\TotRec8.sys
    Image name: TotRec8.sys
    Timestamp:        Wed [B][COLOR="Red"]Apr 30[/COLOR][/B] 21:37:49 [B][COLOR="red"]2014[/COLOR][/B] (5360E795)
    CheckSum:         0001ED7F
    ImageSize:        0002A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Check to see if the software has been updated by the manufacturer, or whether updated drivers have been published.
Sound recording tools: Total Recorder - captures any audio from the Internet, records audio from CD, microphone, line-in, converts any sound formats to WAVE and MP3

Often software that has worked flawlessly in the past will cause crashes because the underlying Windows system files are more up-to-date. This is one of the reasons why drivers are always being updated.

 

[oldyeller38]

I don't know if this message got posted or not, so trying again.
My latest check of runningverifier results after downloading & installing latest version of TotalReorder still resulted in a bsod as soon as the screen came up after reboot. Settingup my camera on tripod to capture bsod screen showed a TotRecs.sys as theculprit. After checking properties this was an old driver from an upgrade of ayear ago.

Doing a total uninstall ofold & install of latest version solved the problem. After install of new versionof TotRecs and reboot I ran verifier again; with all 10 applications on mytaskbar running simultaneously, I tried getting another bsod which didn'thappen.

Thanks very much Golden forall your help & patience with a novice!

 

[Golden]