BSOD in Windows 7 Prof - BCCode: d1

[KarthikAthi]

Hi,

After the windows updates last week, I am having frequent BSOD crash with my Toshiba Laptop. I have win 7 professional edition. I could acknowledge that something is wrong with the drivers or something is wrong in the registry due to viruses. However, I am not able to troubleshoot it and I would appreciate is some one can help me in fixing this issue. Attached is the .dmp file and also the DM log


Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 16393

Additional information about the problem:
BCCode: d1
BCP1: FFFFFA800BA68000
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF88004660883
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Regards,
Karthik

 

[koolkat77]

 Clean boot

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

• How to Change, Add, or Remove Startup Programs in Windows 7

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

[FONT="Lucida Console"]READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80004b14100
GetUlongFromAddress: unable to read from fffff80004b141c0
 fffffa800c2aa000 Nonpaged pool

CURRENT_IRQL:  0

FAULTING_IP: 
PctWfpFilter64+2883
fffff880`03ef0883 f30f6f03        movdqu  xmm0,xmmword ptr [rbx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff88009907970 -- (.trap 0xfffff88009907970)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000012f466901 rbx=0000000000000000 rcx=fffff6fd40061548
rdx=0000000057920863 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88003ef0883 rsp=fffff88009907b00 rbp=0000000000004dcc
 r8=00000000ffffffff  r9=0000000000000000 r10=fffff88003f25d20
r11=fffff88009907be8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
PctWfpFilter64+0x2883:
fffff880`03ef0883 f30f6f03        movdqu  xmm0,xmmword ptr [rbx] ds:00000000`00000000=????????????????????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800048d5b69 to fffff800048d65c0

STACK_TEXT:  
fffff880`09907828 fffff800`048d5b69 : 00000000`0000000a fffffa80`0c2aa000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09907830 fffff800`048d47e0 : 00000001`00000010 fffffa80`0420a4c0 00000000`00000000 fffffa80`0c2a9ffb : nt!KiBugCheckDispatch+0x69
fffff880`09907970 fffff880`03ef0883 : fffff880`00000006 fffffa80`0c27b700 fffffa80`0a7e5080 fffffa80`04bd64d0 : nt!KiPageFault+0x260
fffff880`09907b00 fffff880`00000006 : fffffa80`0c27b700 fffffa80`0a7e5080 fffffa80`04bd64d0 00000000`00000000 : PctWfpFilter64+0x2883
fffff880`09907b08 fffffa80`0c27b700 : fffffa80`0a7e5080 fffffa80`04bd64d0 00000000`00000000 00000000`00000000 : 0xfffff880`00000006
fffff880`09907b10 fffffa80`0a7e5080 : fffffa80`04bd64d0 00000000`00000000 00000000`00000000 fffffa80`04c24b00 : 0xfffffa80`0c27b700
fffff880`09907b18 fffffa80`04bd64d0 : 00000000`00000000 00000000`00000000 fffffa80`04c24b00 fffff880`09907b38 : 0xfffffa80`0a7e5080
fffff880`09907b20 00000000`00000000 : 00000000`00000000 fffffa80`04c24b00 fffff880`09907b38 fffff880`09907b11 : 0xfffffa80`04bd64d0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
PctWfpFilter64+2883
fffff880`03ef0883 f30f6f03        movdqu  xmm0,xmmword ptr [rbx]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  PctWfpFilter64+2883

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: PctWfpFilter64

IMAGE_NAME:  PctWfpFilter64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  50906361

FAILURE_BUCKET_ID:  X64_0xD1_PctWfpFilter64+2883

BUCKET_ID:  X64_0xD1_PctWfpFilter64+2883

Followup: MachineOwner
---------

2: kd> lmvm PctWfpFilter64
start             end                 module name
fffff880`03eee000 fffff880`03f31000   PctWfpFilter64 T (no symbols)           
    Loaded symbol image file: PctWfpFilter64.sys
    Image path: \Device\Harddisk0\Partition2\windows\system32\drivers\PctWfpFilter64.sys
    Image name: PctWfpFilter64.sys
    Timestamp:        Wed Oct 31 05:31:45 2012 (50906361)
    CheckSum:         0004DB9F
    ImageSize:        00043000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
[/FONT]

Remove PC tools internet security and only keep MSE installed.

Driver Reference Table

Run Disk Check on your Hard Drive for file system errors and bad sectors on it.

 Hard Drive Diagnostics

• Double click and open my computer.
• Right click on desired drive and hit properties.
• Click on tools tab and Check now.

Read complete instructions on the tutorial: http://www.sevenforums.com/tutorials/433-disk-check.html

Other Tests:

 

• Upload a screenshot of your hard disk using Crystal Disk Info.
• Make a hard drive test from the hard drive manufacturers website.
• Test your Hard Drive with SeaTools.

Temp Monitoring

Check for heating issues using Speccy or HWMonitor.

• Speccy - System Information - Free Download
• HWMonitor CPUID - System & hardware benchmark, monitoring, reporting

Upload a screen shot with either of the tools: http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html