BSOD on condition 0x04c citing file avipbb.sys

[agmm]

I have been trying to isolate an apparently unbreakable freeze on the Ideapad z565 specified in my profile. The freeze happens after the text-mode display of the drivers list is reported, but before the desktop appears. I had reason to believe it could be connected to video drivers, and went into safe mode to remove them and reduce to basic vga mode.

But this time when I try to boot in full mode I hit the BSOD described in the accompanying report and screenshot.

I understand this appears to be part of Avira Antivirus, which is indeed what I've been using for a long time now. But attempting to uninstall it doesn't seem to solve anything.

Please help, this machine (which I'm maintaining for somebody else) really isn't usable in its current state.

(Strictly speaking it appears to work fine under Ubuntu, but its real user has lots of work under Windows.)

Thank you in advance for your help.

 

[axe0]

Please do the following

• Open an admin command prompt
• Copy & paste the code below in the command prompt
• Go to your desktop
• Right click CollectedFiles folder and choose sent to and select compressed (zipped) folder
• Upload the zip.

Code:

md "%USERPROFILE%\Desktop\CollectedFiles"&wmic /output:"%USERPROFILE%\Desktop\CollectedFiles\hotfix.txt" qfe list full /format:table&copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\CollectedFiles"&dxdiag /t %temp%\dxdiag.txt&copy %temp%\dxdiag.txt "%USERPROFILE%\Desktop\CollectedFiles\dxdiag.txt"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\CollectedFiles\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp"&findstr /v "Owner." "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp" > "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.txt"&del "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp"&driverquery /v > "%USERPROFILE%\Desktop\CollectedFiles\drivers.txt"&msinfo32 /nfo "%USERPROFILE%\Desktop\CollectedFiles\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\CollectedFiles\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\CollectedFiles\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\CollectedFiles\installed.txt"

 

[agmm]

Is this not what I already attached?

Thank you for replying so quickly.

I can of course take the commands you've supplied and obtain that report; but is this not what I've already done with the zip archive "lenovo-z565-Fri*.zip"? It was produced with the reporting program supplied in the instructions for this board.

If not, I will certainly provide the additional info.

Thank you very much!

 

[axe0]

The tool originally does collect everything required, but for some reason many have had trouble with the tool that it didn't collect all files. It often only gave empty zip files, or some files can be missing which is now the case. The commands are an alternative for when there are such issues.

The same, or similar, tool is being used on the sister forums. But since Windows 7 and 8/8.1 are slowly being retired, there is a replacement being developed that's currently in beta for Windows 10 only, it could work on other Windows versions but it isn't be developed and tested for them. The tool on this site is usually working as it should, but when it doesn't I provide an alternative.

 

[agmm]

I see. OK, I'll apply those commands ASAP and upload the resulting file.

BTW, would it be possible to update the "BSOD Posting Instructions" to recommend doing these instructions?

Thank you.

 

[axe0]

The tool from the posting instructions essentially executes those commands in a command prompt, and more commands, so the commands I posted are technically already in the posting instructions, which makes it more curious why the tool sometimes doesn't work properly.

 

[cwsink]

Bugcheck 0xC4 is a Driver Verifier bugcheck. Did you intentionally turn DV on? If not, can you get into safe mode and disable DV? I guess I'm not sure if a DV boot loop is the problem you're having or if you're trying to get a successful boot with DV enabled.

 

[axe0]

Have you been able to run the commands?

 

[agmm]

I have now. Was a bit finicky having to do it in safe mode -- not that much screen space to work with.
Anyway, the attached zip, made per your directions, hopefully has everything in it.

(And I was distracted by the discovery that the GRUB boot for choosing between Ubuntu and Windows 7
is no longer coming up. Very annoying since that's my back door into the system -- works nicely
I have to say. I started to look into fixing it and decided just for now to make do without, if I can.)

Thank you!

 

[agmm]

Bugcheck 0xC4 is a Driver Verifier bugcheck. Did you intentionally turn DV on? If not, can you get into safe mode and disable DV? I guess I'm not sure if a DV boot loop is the problem you're having or if you're trying to get a successful boot with DV enabled.

I did in fact try Driver Verifier on a suggestion I saw on-line ... don't recall whether it was this forum. I thought it was a single-pass check, I didn't realise it stays on.

The reason I tried it is a problem for another forum, as it's not a BSOD but a freeze during full boot, with the very odd feature that the leftmost part of the very top row of pixels on the screen does some quick flickering. This reminded me of systems I used many years ago that visualised part of the general RAM address space for their graphics buffer. The pixel activity now was reminiscent of when those systems had not yet had their graphics memory address initialised and were looking at any old random place in memory.

So I got suspicious of the video drivers and wanted them verified. I have in fact stripped them out and right now it's running on a bare VGA driver.

At present, in safe mode, this behaviour is not happening, and I'd like to see the diagnosis of the avipbb.sys problem before changing anything further -- that is, diagnosis beyond just the fact that it seems it and Driver Verifier tripped over each other, which on first blush sounds pretty fishy.

Thanks for the info!

 

[axe0]

Please follow How do I perform a manual uninstallation of Avira Antivirus? to temporary remove Avira manually. After removal, reinstall Avira and see if the issue comes back.

 

[agmm]

Please follow How do I perform a manual uninstallation of Avira Antivirus? to temporary remove Avira manually. After removal, reinstall Avira and see if the issue comes back.

Just a quick update to keep the board informed.

I think I have now reached the point where Avira is actually uninstalled. It needed several passes, searching for further directories by hand, dealing with the Avira Registry Cleaner's reports of being unable to delete some keys, and then trying it. I have recorded the Cleaner's reporting of its registry cleanup on the two later passes, and took copies with only the "not deleted" lines included -- otherwise the reports are each over 1000 lines.

I am hoping that I now have all components uninstalled, on the basis that the Cleaner is no longer reporting being unable to delete anything that it wants to. My uncertainty is because I've had to do searches by Explorer on names like "avira", "avgnt", etc and it's fully possible there are other variants that I don't remember.

I'm disturbed by the number of Avira folders that even Advanced Uninstaller Pro12 seemed to miss -- in most cases I've relied on it to be very thorough.

But as I say, I think I'm now to the fully uninstalled point and looking forward to doing a full install again. Not least because (hey,call me crazy) I'm not wild about having a running internet connection (such as, for instance, the one I'm using now) with no more than Windows Firewall to secure it.

 

[agmm]

Please follow How do I perform a manual uninstallation of Avira Antivirus? to temporary remove Avira manually. After removal, reinstall Avira and see if the issue comes back.

OK, new status:

After various machinations to get hold of an installer that matched my product activation, I got Avira installed and apparently working. A few successful reboots into full mode with no obvious hiccoughs.

And then, just when I thought this had probably been put to bed and it was time to turn to a secure, dependable driver for the video (which right now is in VGA mode):

I got another blue screen, condition 0x0c4. Either the file causing it wasn't mentioned or the screen resolution wasn't high enough to include it.


Shall I pack up another zip collection?

Sorry, I thought this was starting to work.
And thank you for your continued assistance.

 

[axe0]

Could you temporary remove Avira and use Microsoft Security Essentials as alternative. If removing Avira works, and you want to use Avira, I would suggest to contact their support team for this.