BSOD ntoskrnl.exe+75c00 randomly... maybe when Powershell.exe starts

[pippolino]

Hello
I am getting almost every time I boot W7 the BSOD described in the thread title... I suspect it's related to an automatic task which starts to backup my laptop in the network using TSM, but I think it's unrelated to TSM, it could be more related to a bug of the powershell process (but again, this is just my guess, no clue on this). I post the SF Diagnostic tool output, thanks in advance for any help/hint!!

 

[koolkat77]

Is the firmware for your SSD up-to-date?

Check for one and see if the stability returns.

Description    Disk drive
Model    SAMSUNG 470 Series SSD
[COLOR=Red]Size    59,62 GB [/COLOR](64.017.354.240 bytes)

and ....

Drive    C:
[COLOR=Red]Size    59,62 GB [/COLOR](64.021.155.840 bytes)
Free Space    [COLOR=Blue][B]9,48 GB[/B][/COLOR] (10.174.795.776 bytes)

There's very little free space there. Keep that in mind.

• Norton tends to cause BSOD-s and seen it create several issues for users. Recommend uninstalling it with the Norton Removal Tool and replace with Microsoft Security Essentials. See if this stops the BSOD-s.Download and run the Norton Removal Tool to remove the Norton Product

• Replace with Microsoft Security Essentials and Malwarebytes which are recommended from a strict BSOD perspective. Run a full scan with both (separately) once downloaded, installed and updated. Microsoft Security Essentials, Free antivirus for windows

Malwarebytes Anti-Malware Free​

Good and Free system security combination

   Information

DO NOT start the free trial of MalwareBytes. Unselect the option when prompted.

​

• Post a screen shot using Crystal Disk Info: CrystalDiskInfo Standard Edition
  How to Upload and Post a Screenshot and File in Seven Forums

• Make a hard drive test from the hard drive manufacturers website: Hard Drive Diagnostic Procedure

• Run disk check for errors on your Hard Drive(s) http://www.sevenforums.com/tutorials/433-disk-check.html

• Use the System File Checker tool (SFC.exe) to determine which file is causing the issue, and then replace the file. Use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7 . The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

• Keep less stuff at the start-up. Only anti-virus, this helps avoid driver conflicts and improves time to log in to windows.

http://www.sevenforums.com/tutorials/1401-startup-programs-change.html

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html​

If you continue to receive BSOD's - run RAM test first then go for Driver verifier.

• Run Memtest86+ for at least 8-10 passes. It may take up to 20 passes to find problems. Make sure to run it once after the system has been on for a few hours and is warm, and then also run it again when the system has been off for a few hours and is cold. http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

   Note

Pay close attention to part 3 of the tutorial in order to rule the faulty RAM stick out.

   Tip

Do this test overnight, before going to bed.

• Let's run driver verifier and see if it catches any misbehaving drivers :
  Driver Verifier Enable/Disable

SUMMARY OF THE DMP'S:

[FONT="Lucida Console"]Debug session time: Thu Apr 18 12:19:35.834 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\041813-25927-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 0:10:49.052
Probably caused by : ntkrnlmp.exe ( nt!wcsncat_s+31615 )
BugCheck E4, {2, fffffa8006ce3850, fffffa8006ce3870, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000E4]WORKER_INVALID (e4)[/url]
Bugcheck code 000000e4
Arguments: 
Arg1: 0000000000000002, Free of queued I/O worker item
Arg2: fffffa8006ce3850, Address of worker item
Arg3: fffffa8006ce3870, Address of I/O worker routine
Arg4: 0000000000000000, 0
BUGCHECK_STR:  0xE4
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
MaxSpeed:     2500
CurrentSpeed: 2491
BiosVersion = 83ET67WW (1.37 )
BiosReleaseDate = 11/28/2011
SystemManufacturer = LENOVO
SystemProductName = 4180AJ3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Tue Apr 16 16:56:50.109 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\041613-27846-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 0:10:42.326
Probably caused by : ntkrnlmp.exe ( nt!wcsncat_s+31615 )
BugCheck E4, {2, fffffa800c364af0, fffffa800c364b10, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000E4]WORKER_INVALID (e4)[/url]
Bugcheck code 000000e4
Arguments: 
Arg1: 0000000000000002, Free of queued I/O worker item
Arg2: fffffa800c364af0, Address of worker item
Arg3: fffffa800c364b10, Address of I/O worker routine
Arg4: 0000000000000000, 0
BUGCHECK_STR:  0xE4
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
MaxSpeed:     2500
CurrentSpeed: 2491
BiosVersion = 83ET67WW (1.37 )
BiosReleaseDate = 11/28/2011
SystemManufacturer = LENOVO
SystemProductName = 4180AJ3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat Apr 13 12:47:04.846 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\041313-26832-01.dmp]
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
System Uptime: 0 days 1:07:11.204
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4d38c )
BugCheck E4, {2, fffffa800f067bb0, fffffa800f067bd0, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000E4]WORKER_INVALID (e4)[/url]
Bugcheck code 000000e4
Arguments: 
Arg1: 0000000000000002, Free of queued I/O worker item
Arg2: fffffa800f067bb0, Address of worker item
Arg3: fffffa800f067bd0, Address of I/O worker routine
Arg4: 0000000000000000, 0
BUGCHECK_STR:  0xE4
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE4_nt!_??_::FNODOBFM::_string_+4d38c
MaxSpeed:     2500
CurrentSpeed: 2492
BiosVersion = 83ET67WW (1.37 )
BiosReleaseDate = 11/28/2011
SystemManufacturer = LENOVO
SystemProductName = 4180AJ3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Thu Apr 11 22:10:45.833 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\041113-63008-01.dmp]
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
System Uptime: 0 days 9:55:41.051
Probably caused by : ntkrnlmp.exe ( nt!RtlDeleteNoSplay+93 )
BugCheck 24, {1904fb, fffff8800e0f1178, fffff8800e0f09d0, fffff800038b67e3}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000024]NTFS_FILE_SYSTEM (24)[/url]
Bugcheck code 00000024
Arguments: 
Arg1: 00000000001904fb
Arg2: fffff8800e0f1178
Arg3: fffff8800e0f09d0
Arg4: fffff800038b67e3
PROCESS_NAME:  firefox.exe
BUGCHECK_STR:  0x24
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
FAILURE_BUCKET_ID:  X64_0x24_nt!RtlDeleteNoSplay+93
MaxSpeed:     2500
CurrentSpeed: 2491
BiosVersion = 83ET67WW (1.37 )
BiosReleaseDate = 11/28/2011
SystemManufacturer = LENOVO
SystemProductName = 4180AJ3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Thu Apr 11 12:14:03.417 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\041113-33446-01.dmp]
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
System Uptime: 1 days 20:00:55.260
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4d38c )
BugCheck E4, {2, fffffa80067ca230, fffffa80067ca250, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000E4]WORKER_INVALID (e4)[/url]
Bugcheck code 000000e4
Arguments: 
Arg1: 0000000000000002, Free of queued I/O worker item
Arg2: fffffa80067ca230, Address of worker item
Arg3: fffffa80067ca250, Address of I/O worker routine
Arg4: 0000000000000000, 0
BUGCHECK_STR:  0xE4
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE4_nt!_??_::FNODOBFM::_string_+4d38c
MaxSpeed:     2500
CurrentSpeed: 2491
BiosVersion = 83ET67WW (1.37 )
BiosReleaseDate = 11/28/2011
SystemManufacturer = LENOVO
SystemProductName = 4180AJ3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Tue Apr  9 16:12:06.735 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\040913-27128-01.dmp]
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
System Uptime: 0 days 0:10:47.952
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4d38c )
BugCheck E4, {2, fffffa80102c6af0, fffffa80102c6b10, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000E4]WORKER_INVALID (e4)[/url]
Bugcheck code 000000e4
Arguments: 
Arg1: 0000000000000002, Free of queued I/O worker item
Arg2: fffffa80102c6af0, Address of worker item
Arg3: fffffa80102c6b10, Address of I/O worker routine
Arg4: 0000000000000000, 0
BUGCHECK_STR:  0xE4
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE4_nt!_??_::FNODOBFM::_string_+4d38c
MaxSpeed:     2500
CurrentSpeed: 2491
BiosVersion = 83ET67WW (1.37 )
BiosReleaseDate = 11/28/2011
SystemManufacturer = LENOVO
SystemProductName = 4180AJ3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``[/FONT]