BSOD (of course) mostly on startup

[dlhoward]

Hey all,
I'm hoping for some help. I'm using a Dell Inspiron 545s slimline. It's been working fine for about 18 months but just started having BSODs today. These mostly happen right away on startup. In fact, I was worried that I couldn't gather the data you needed. But things have been stable for 15 minutes so hopefully I can get this out.

Nothing has changed recently that I know of - this is my son's comp and all he does is play Flash games (and Heroes of Might and Magic).

I think I've attached the info necessary. The PerfMon report is in the Zip file with the jcgriff information. Any thoughts about problems with the machine?

Thanks in advance!!
David

 

[Lemur]

Welcome to SF.

It can be a driver problem.

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.

Please upgrade your video driver:
Driver c:\windows\system32\drivers\igdkmd64.sys (8.14.10.1930, 5.89 MB (6,180,832 bytes), 9/23/2009 7:23 PM)

Upgrade your network controller:
Driver c:\windows\system32\drivers\rt64win7.sys (7.12.1218.2009, 307.03 KB (314,400 bytes), 12/19/2009 9:11 AM)

I also suggest running malwarebytes, a free program.

 

[Jonathan_King]

In addition to Lemur's advice:

The crashes seem to be somewhat related to network; AtBroker.exe was running in front in five of the crashes, and other network-related processes were shown too.

I suspect the cause may lie here:

PROCESS_NAME:  TmProxy.exe
TmPreFlt.sys    Wed Oct 20 06:46:37 2010 (4CBEC88D)
tmtdi.sys       Wed Jan 06 22:41:25 2010 (4B4557E5)
TmXPFlt.sys     Wed Oct 20 06:46:42 2010 (4CBEC892)
VSApiNt.sys     Wed Oct 20 06:41:23 2010 (4CBEC753)

Try removing Trend Micro with this tool: http://solutionfile.trendmicro.com/solutionfile/TIS/TISTOOL/SupportTool_64-bit.exe

Replace it with MSE: http://www.microsoft.com/security_essentials

Finally, install these updated Realtek Ethernet drivers: Realtek

...Summary of the dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 18:31:05.959 2010 (UTC - 5:00)
System Uptime: 0 days 0:01:05.847
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  taskhost.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!KiSystemServiceHandler+7c
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 18:23:54.515 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:40.404
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  AtBroker.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!KiSystemServiceHandler+7c
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 18:22:16.802 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:46.690
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  AtBroker.exe
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 18:16:06.372 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:41.887
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  AtBroker.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 18:14:47.171 2010 (UTC - 5:00)
System Uptime: 0 days 0:03:11.059
Probably caused by : ntkrnlmp.exe ( nt!ObpDeleteNameCheck+2a )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  dllhost.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!ObpDeleteNameCheck+2a
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 17:50:23.972 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:56.612
Probably caused by : ntkrnlmp.exe ( nt!KiTryUnwaitThread+28 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  wmpnscfg.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!KiTryUnwaitThread+28
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 17:48:48.169 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:40.809
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 17:47:20.967 2010 (UTC - 5:00)
System Uptime: 0 days 0:03:48.855
Probably caused by : win32k.sys ( win32k!GdiUnmapGDIW32PIDLockedBitmaps+44 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  mscorsvw.exe
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_win32k!GdiUnmapGDIW32PIDLockedBitmaps+44
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:36:52.696 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:44.584
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  AtBroker.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!KiSystemServiceHandler+7c
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:35:25.831 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:56.472
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
BUGCHECK_STR:  0x7f_8
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  AtBroker.exe
FAILURE_BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b2
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:33:54.814 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:48.703
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  taskhost.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:32:09.752 2010 (UTC - 5:00)
System Uptime: 0 days 0:01:01.641
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:30:32.181 2010 (UTC - 5:00)
System Uptime: 0 days 0:01:56.069
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:27:54.825 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:56.714
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  taskhost.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 08:19:12.782 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:44.671
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  WerFault.exe
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Thu Dec  9 20:07:20.770 2010 (UTC - 5:00)
System Uptime: 0 days 0:01:23.658
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  TmProxy.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

 

[dlhoward]

Lemur & Jonathan_King,
Thanks for the suggestions. It's been difficult, since most of the times I start up the machine it goes to a BSOD immediately, but I've gotten in enough times to do as you suggested.

1) I replaced the network driver with the one that Jonathan_King recommended.
2) I updated the video driver by going to Intel® Driver Update Utility for graphics drivers - Check for the latest driver.
3) I uninstalled TrendMicro. I have not yet installed MS Security Essentials - I figured it was better to get things running right before adding more stuff.
4) I didn't run malwarebytes yet...

Anyway, it now seems to be stable more frequently, but I've still had two crashes in the last hour. I re-ran the reports and have attached the results - any more great ideas?

And I just have to say that this forum (and obviously Lemur and Jonathan_King as individuals so far) is a great thing!

Thanks in advance again,
David

 

[Lemur]

Jonathan and I are glad to help. Please run malwarebytes and we'll look at your latest upload.

 

[Lemur]

Double check on your video driver:
Driver c:\windows\system32\drivers\igdkmd64.sys (8.14.10.1930, 5.89 MB (6,180,832 bytes), 9/23/2009 7:23 PM).

Although I just checked and I can't find anything newer. Ugh... It's weird they have newer drivers for XP than Win 7. Now that's strange.

I suggest running drive verifier
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html#post875702

 

[dlhoward]

OK, I got through a malwarebytes scan. It located only one problem: root.TDSS.kit or something like that. I had malwarebytes remove that file and now cannot boot the computer at all. After the BIOS flashes by, I see:

Boot from CD :
No boot device available, Press ENTER key to retry
SATA-0: Installed
SATA-1: Installed
SATA-4: None
SATA-5: None

I think at this point I'm reduced to restoring the machine (if I can find the restore disc).

Thanks for all the help folks!!
David

 

[Jonathan_King]

I suggest a custom install: http://www.sevenforums.com/tutorials/20146-custom-install-windows-7-a.html

That should preserve your data.