BSOD on new pc, need help please

[1way]

Hi just build a new pc 2 days ago and after installing windows update, I keep getting BSOD without apparent reason. My system is installed on the SSD. Please help me as it is very frustrating when a new pc doesn't work!

These are the messages I get when I restart windows (sometimes need to restart several times to get a successful boot)

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: 24
BCP1: 00000000001904FB
BCP2: FFFFF88003193738
BCP3: FFFFF88003192FA0
BCP4: FFFFF8800131044A
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\103010-21996-01.dmp
C:\Windows\Temp\WER-23696-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
===============================================
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: 1a
BCP1: 0000000000041790
BCP2: FFFFFA8002053F50
BCP3: 000000000000FFFF
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\103110-17518-01.dmp
C:\Users\Wayne\AppData\Local\Temp\WER-19219-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

===============================================

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: 1a
BCP1: 0000000000041790
BCP2: FFFFFA80007E1B90
BCP3: 000000000000FFFF
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\103110-12433-01.dmp
C:\Users\Wayne\AppData\Local\Temp\WER-15022-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt


My parts are:
Samsung SpinPoint F3 HD103SJ 32MB 1TB 3.5 inch S-ATA hard disk drive Scythe Mugen II Rev. B CPU coolers
Intel Core i5 760 2.8GHz Socket 1156 Box CPUs
Corsair XMS3 DDR3 PC12800/1600MHz CL9 2x2GB
Samsung SH-S223C DVD burners
Sapphire Radeon HD5670 HDMI DisplayPort 512MB
Antec Three Hundred Midi tower chassis
Asus P7P55D-E LX Motherboards
Microsoft Windows 7 Home Premium Eng (64-bit OEM)
Corsair CMPSU-400CX 400W Power supply units
OCZ Vertex 2 E Series SATA II 2.5" SSD 60GB

 

[Jonathan_King]

Welcome to SevenForums!

Since the machine is new, I'm going to assume you have a NETGEAR WNDA3100 v2. Install these drivers for it: Answer

If you have the older v1, install these ones instead: Answer

Did you install the drivers from the installation CD? If so, that may be the problem.

Uninstall Avira, and replace it with Microsoft Security Essentials. Many errors are reported by Windows about it.

http://www.microsoft.com/security_essentials

If the BSODs persist, enable driver verifier: http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 15:59:35.635 2010 (UTC - 4:00)
System Uptime: 0 days 0:01:46.039
BugCheck 1A, {41790, fffffa8002053f50, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+339c8 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  WerFault.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 07:48:28.775 2010 (UTC - 4:00)
System Uptime: 0 days 0:01:03.180
BugCheck 24, {1904fb, fffff88003193738, fffff88003192fa0, fffff8800131044a}
Probably caused by : Ntfs.sys ( Ntfs!EfsCleanup+1a )
PROCESS_NAME:  System
BUGCHECK_STR:  0x24
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 07:44:40.730 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:55.134
BugCheck 1A, {41790, fffffa80014717a0, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  drvinst.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 07:41:28.187 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:50.218
BugCheck 1A, {41790, fffffa8000e417a0, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  dllhost.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 07:39:33.737 2010 (UTC - 4:00)
System Uptime: 0 days 0:13:03.627
BugCheck 1A, {41790, fffffa8001ab3dd0, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+339c8 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  chrome.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 07:25:27.697 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:53.102
BugCheck 1A, {41790, fffffa8001465650, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  WerFault.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sat Oct 30 07:23:34.430 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:35.460
BugCheck 1000007E, {ffffffffc0000094, fffff80002bc8548, fffff880031bd9f8, fffff880031bd260}
Probably caused by : ntkrnlmp.exe ( nt!CmpDereferenceKeyControlBlock+5c )
BUGCHECK_STR:  0x7E
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/font]

 

[1way]

Thank you very much Jonathan for the fast reply.

My WNDA3100 is v1 and I got its driver from the net, so maybe it was a wrong one.

I have followed your instructions to install a new driver and uninstalled Avira, Hopefully that will solve the problem.

Will see how it goes and report back.

 

[Jonathan_King]

That sounds like a plan, I hope it works!

 

[1way]

I can feel the system is more stable now, but after I install another windows update today, it crashes again.

Is there something else needs to be taken care of?

 

[Jonathan_King]

Hmm...I see drivers from Avira loaded in RAM, in both dumps.

If you haven't uninstalled it yet, please do so. Otherwise, try this tool to clean up the remnants: http://dlpro.antivir.com/package/removaltool/win32/en/removaltool-win32-en.exe

Looks like your Jumpstart drivers may be helping, but I can't get any driver links without a MSINFO32 file. One is usually included in the jcgriff2 report, but for some reason, it didn't.

For now, just try to remove Avast again, and if the BSODs persist, create a new jcgriff2 report, and upload the results.

Just an FYI, that program collects the minidumps, so you don't need to upload them separately. Doesn't hurt anything, but you can save yourself a minute or two.

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Nov  1 03:12:15.293 2010 (UTC - 4:00)
System Uptime: 0 days 0:05:58.323
BugCheck 1A, {41790, fffffa800147c120, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  aspnet_regiis.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sun Oct 31 16:43:11.675 2010 (UTC - 4:00)
System Uptime: 0 days 0:05:26.080
BugCheck 1A, {41790, fffffa80014c5020, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  WerFault.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/font]

 

[1way]

Hi Jonathan, my pc only/still crashes once today - it's the first start up in the morning, still locale 3081 and BCCode 1a.

I did run the AVAST remover you provided yesterday so hopefully there's nothing remained.

Please see attached jcgriff2 report, many thanks.

 

[Jonathan_King]

I'm not sure why I mentioned Avast in my last post, I meant Avira. I still see those drivers loaded in RAM.

Just out of curiosity, where did you get the directions to run the jcgriff2 tool? Here on SevenForums, we use version 3.03. The output folder is named Windows_NT6_BSOD_jcgriff2. That's what you ran in your original post.

In your latest post, you ran a version only found on John Griffith's personal site: BSOD Kernel Dump & System File Collection - jcgriff2.com

Nothing wrong with what you did, I'm just curious. There aren't any links to that page here on SF!

The jcgriff2 log file from your first post:

Sun 31/10/2010     9:37:22.66 
 
v3.01 compiled EXE

And from the second:

Tue 02/11/2010    22:07:33.94 
 
v2.9 compiled EXE

According to MSINFO32, Avira is still found in the start menu. Does it appear in Programs and Features? If so, uninstall it.

Your Jumpstart drivers are old, and should be updated or removed. Do you know what it is, or what is using it? Do you have a phone or other wireless device attached?

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Nov  1 16:44:49.589 2010 (UTC - 4:00)
System Uptime: 0 days 0:02:17.619
BugCheck 1A, {41790, fffffa800144ca20, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME:  svchost.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/font]

 

[1way]

Avira was in my start menu, but not in Programs and Features.
I went to Avira's website to find the following tool to tidy up the registry:
Avira RegistryCleaner - Download

I'm not sure what jumpstart is, but seems it's a product of Atheros, and they are shown as the driver provider of WNDA3100, which I had updated as per the earlier post - do I need to find a newer driver for it?

I didn't notice I used a different jcgriff2 tool, as I just get it from one of many bookmarks I saved when I tried to figure out what's wrong with my pc.

 

[Jonathan_King]

Try using Revo Uninstaller to remove Avira: Revo Uninstaller Pro - Uninstall Software, Remove Programs easily

 

[1way]

Forgot to say, my only wireless devices are the logitech wireless desktop mk700 (keyboard + mouse) and they work right out of box so I didn't install any driver as I remember.

We have a VoIP phone at home, not sure if that's related?

 

[Jonathan_King]

Try installing these drivers: Answer

You're right, that Jumpstart driver does seem related to Atheros.

 

[1way]

My WNDA3100 is v1, not v2 (without the small button), is it alright to install the v2 driver?

Answer <-mine looks like this
Answer

 

[Jonathan_King]

You're right, you should install the v1 drivers. It probably won't hurt anything to install the v2 drivers, although there's a chance that the installation will fail, or they just won't work.

 

[1way]

Hi Jonathan, I think I have Avira totally uninstalled eventually, but my computer still crashes and give me the same type of warning message.

Are you able to find something from jcgriff2 report?

 

[reventon]

Hi,

Avira related drivers are still being loaded:

[FONT=lucida console]
[B][COLOR=Blue]avipbb.sys[/COLOR] [/B]  Mon Feb 22 23:08:50 2010 (4B8257B2)
[COLOR=Blue][B]avgntflt.sys[/B][/COLOR] Fri Feb 12 04:12:02 2010 (4B741E42)
[/FONT]

Or in other cases, trying to be loaded:

[FONT=lucida console]
  [B]Date:[/B] 2010-11-04 Time: 10:39:47.808
 [B] Event ID:[/B] 7000
  [B]Level:[/B] Error
  [B]Description: [/B]
The Avira AntiVir Scheduler service failed to start due to the following error: 
The system cannot find the file specified.
[/FONT]

If Avira's removal tool and Revo haven't worked, then we will have to try another way

Save this program to the desktop: http://live.sysinternals.com/autoruns.exe

Right-click on it -> Select Run as Administrator.

Once loaded, go to the User menu at the top and select NT AUTHORITY\SYSTEM

Let it re-load then go to the Driver Tab and untick the boxes beside avgntflt and avipbb (and anything else that looks like it is from Avira)

Then re-boot.

Hopefully that will sort it.

You also have two out of date drivers you need to take care of

[FONT=lucida console]
[B]jswpslwfx.sys[/B] Thu May 15 22:28:50 [COLOR=Red][B]2008[/B] [/COLOR](482C1062) - Netgear Jumpstart driver

[B]PCASp50a64.sys[/B] Wed Nov 29 15:45:19 [COLOR=Red][B]2006 [/B][/COLOR](456CF43F) - PCAUSA RawEther
[/FONT]

Both above out of date drivers are part of networking systems - hence I am doubly suspicious of them.

The first one is related to this mysterious "Jumpstart" tool, related to your wireless adapter anyway.

You can find info on the second driver here - PCAUSA - Rawether for Windows

It is most likely part of some software that requires the ability to send raw ethernet packets, not entirely sure exactly what is using it in this case, possibly part of Jumpstart?

Uninstall the "value-added" programs relating to your Netgear Wireless adapter (the ones found in Start Menu\Programs\NETGEAR WNDA3100 Adapter) which should get rid of both out of date drivers.

Regards,
Reventon

BUGCHECK SUMMARY

[FONT=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Wed Nov  3 09:20:37.620 2010 (GMT+13)
System Uptime: 0 days 0:12:40.651
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+339c8 )
BUGCHECK_STR:  0x1a_41790
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  chrome.exe
Bugcheck code 0000001A
Arguments 00000000`00041790 fffffa80`00805a10 00000000`0000ffff 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Tue Nov  2 09:44:49.589 2010 (GMT+13)
System Uptime: 0 days 0:02:17.619
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )
BUGCHECK_STR:  0x1a_41790
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
Bugcheck code 0000001A
Arguments 00000000`00041790 fffffa80`0144ca20 00000000`0000ffff 00000000`00000000
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``[/FONT]

 

[1way]

Hi reventon

I tried your autorun program but when I reboot, system just goes to BSOD directly, and I can only restore it to a backup point. So I reboot again into the safe mode and enter regedit and find and delete every avira related entries...

There is not really any value-added software installed for the netgear wireless adapter, it's just a network monitor type of software and when I uninstalled it, it would remove the driver as well so I won't be able to connect to internet. Besides, removing the software doesn't remove PCASp50a64.sys as well. I checked a website Pcasp50a64.sys driver | What is Pcasp50a64.sys file? and it suggests not to remove PCASp50a64.sys.

The system still crashes these days and I don't understand why it happens at all. Do I need to change to another wireless adapter or is there anything else I can do to fix this problem?

 

[reventon]

Ok, this time around two out of the three BSODs are blaming win32k.sys - this is usually seen in graphics related crashes.

Run this stress test - http://www.sevenforums.com/tutorials/100356-video-card-stress-test-furmark.html

Also run these tests:

http://www.sevenforums.com/tutorials/100352-cpu-stress-test-prime95.html (run the Blend test as well as the Small FFT test)

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

The other BSOD blamed ntfs.sys - the file system driver.

Noticed any problems with your SSD?

 

[1way]

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.htmlFurmark - Ran for a few minutes and exited when the temperature leveled out at 53 degree, no artifacts seen.

Memtest86 - Ran 6 passes with no error

I ran the cpu test for about 20 minutes then I stopped (temperature raised from 30 something to 50 something) but I don't really think there's anything wrong with the cpu.

Can't really tell if there's any problem with SSD, so ran chkdsk and looks ok.

I think there's something wrong with the driver(s), as I ran the driver verifier and it went to blue screen when restarted. I had to restore the system to a restore point otherwise I can't even get in safe mode.

Seems the windows update plays up as well, every time I tried to install an update, the system just reboot immediately without any warning or anything...

 

[1way]

My computer was very unstable yesterday, it restarted itself every few minutes so I could only reinstall windows 7 (a clean install on formatted ssd).

This time I make sure all the drivers are installed before I ran windows update, and I use microsoft security essentials as for my antivirus program.

It looked ok yesterday but this morning when I turn on my computer the bsod comes back again!

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: 24
BCP1: 00000000001904FB
BCP2: FFFFF88007161618
BCP3: FFFFF88007160E80
BCP4: FFFFF80002AFC7AB
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\111710-16192-01.dmp
C:\Users\Wayne\AppData\Local\Temp\WER-19016-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

It looks like the one in my first post, so I'm afraid the history just repeats itself... Are you guys able to pin point the problem for me this time? Thanks in advance!!