BSOD on restarting W7 64 bit and surfing in IE

[mrki69tua]

Hi,
I've bought notebook HP Probook 4540s with Linux in it, then after all I've formated HDD and installed Windows 7 32 bit which I've have original CD and then I've had problems with BSOD (all drivers where installed by program called HP support assistant). Then I've made RAM test from windows, HDD test, malware test, drivers and everything was ok on that, but from time to time numerous BSOD appeared. Then I've installed Windows 7 Ultimate 64 bit and the same thing come back again, after that I've tried all sorts of things from removing complitly Avast Free, doing bunch of things for last 10 days from those forum threads (to be honest I even don't know what I did from all those frustrations) and nothing. Now my frustration comes to the peak and I will put *.zip file made by your's SF Diagnostic Tool. So I'm begging for help.
Also I have an old original Windows XP CD which I will install if it will solve my problems?
Notebook specs:
Intel Pentium CPU 2020M @ 2.4 GHz
Mainboard HP 17F6 (Maybe drivers of mainboard are problem?!)
RAM 6 GB (4096 MB ADATA; 2048 MB Hynix/Hyundai)
HDD Hitachi HTS ATA Device 750 GB
CD-ROM HP SN-208DB ATA Device
Audio IDT HD Audio Codec
Intel Display Audio
and other peripherals like bluetooth mouse, touchpad, hd webcam etc.
The most times BSOD happened is when I was surfing the net and when I click on Start menu and restart. In last two das 8 times BSOD appeared and everytime it was different bug check string but almost everytime fltmgr.sys was the crash adress. I thought that It had something to do with audio or video drivers? Or is it one of the RAM slots or cards (altho it passed several tests without any error).
P.S. sorry for my bad english.

View attachment 290448

Thanks in advance! :shock:

P.S. 2, I'm ready to install even my old W XP and do step by step if necesary, if it would help.

 

[Arc]

Checked today's dumps only. 6 different crash dumps, 6 different bugcheck codes, 6 different probable causes.

Anyway .... uninstall whatever antivirus you are using (360 antivirus or something?) Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Do a deeper virus check, too. Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Let us know the results.
_________________________________________________________________________________________________

BugCheck 24, {1904fb, fffff880046f4e48, fffff880046f46a0, fffff80002df7123}

Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+43 )

Followup: MachineOwner
----------------------------------------------------------------------------------------
BugCheck 18, {fffffa8005530360, fffffa800b427c40, 1, 15}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+48d8a )

Followup: MachineOwner
------------------------------------------------------------------------------------------
BugCheck 1000007E, {ffffffffc0000005, fffff88001139039, fffff88002fc5018, fffff88002fc4870}

*** WARNING: Unable to verify timestamp for 360FsFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=360FsFlt.sys"]360FsFlt.sys[/URL]
Probably caused by : [URL="http://www.carrona.org/drivers/driver.php?id=360FsFlt.sys"]360FsFlt.sys[/URL] ( 360FsFlt+6813 )

Followup: MachineOwner
--------------------------------------------------------------------------------------------
BugCheck C9, {6, 103, fffff9800a3aee10, 0}

Unable to load image \SystemRoot\System32\Drivers\IvtUrbBtFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://systemexplorer.net/file-database/file/ivturbbtflt-sys"]IvtUrbBtFlt.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://systemexplorer.net/file-database/file/ivturbbtflt-sys"]IvtUrbBtFlt.sys[/URL]
Probably caused by : ntkrnlmp.exe ( nt!IovCompleteRequest+c2 )

Followup: MachineOwner
---------------------------------------------------------------------------------------------
BugCheck 1E, {ffffffffc0000005, fffff80002ac5f80, 0, ffffffffffffffff}

Probably caused by : memory_corruption ( nt!MiLocateAddress+40 )

Followup: MachineOwner
-----------------------------------------------------------------------------------------------
BugCheck 34, {50853, fffff88007df35f8, fffff88007df2e50, fffff80002bc5123}

Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+43 )

Followup: MachineOwner
---------

Motherboard?
​

 

[mrki69tua]

Thank you for quick reply. I've made several memory tests with Windows memory diagnostick and from BIOS memory test and it didn't showed any errors but tomorow I will make test you've showed me. The thing is that probably I should made test with one memory stick than with other but my notebook has guaranty so I won't open it.
Also I've done Malwarebytes Anti-Malware test and everything was ok.
Also I've removed completely Avast Free, but then installed this chinese 360 Internet security and after that every windows restart occured with BSOD.
Then after all I've tried to stress test with S&M and when it came to memory test it stoped for unknown reason!

 

[Arc]

Again, you are suggested to tkae ALL the steps as per post #2. Not only a selected few at choice.

Otherwise the troubleshooting will go to nowhere.

 

[mrki69tua]

Ok, those things I've mentioned in 3rd post I've done before posting here but ASAP I will do everything you wrote step by step.

 

[mrki69tua]

Archie thank you for your time. For now I've made every step you wrote, no virus and malware, only windows uploaded two times I restarted PC (one time longer and one time shorter), and after that two tests with Memtest 86+ booth passed. Now I've stoped it and will make 7-9 tests more when I get to home because I'm going to work for two days and will return with results.

 

[Arc]

No problem.
Take your time. And, if it BSODs, upload the dumps. A continuous checking is needed for your issue.

 

[mrki69tua]

Ok. And by the way just to inform you while I was updating, If I'm correct Microsoft security essentials, I've opened IE and read news then BSOD appeared. I will inform you about details when I complete memory test, but it will be for cca. 2 day because I'm on job right now.

 

[mrki69tua]

Passed in total 9 Memtest 86+ with today testing 7 in a row just for over 9 hours without any error, CPU temp. was always between 48-50 degrese celsius. This is the dump file when BSOD appeared as described in post above.

P.S. I will try to work on notebook as much as I can so I will write if anything (un)usual comes out, and in the other file is screen capture of every BSOD's from which we can see that last two are pretty much the same, only caused by different driver.

 

[mrki69tua]

Meanwhile I was loosing connection on WiFi, then HP network check offered me a help, after a scanning it updated Realtek PCIe GBE family controller (which was alread installed, no ! in device manager, only the VGA was installed instead Intel Graphic but I updated the drivers when I've noticed it) and for now everything is OK.

 

[Arc]

Is there any reason that you enabled driver verifier?

And, when a verifier enabled crash dump is blaming the memory, and memory is good as per the test, then the issue is a real serious one.

We cannot check/test the motherboard for errors, so we cannot blame it; but I cannot see any other issue there, so suspecting the board only.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002fa2125, fffff880072510f0, 0}

[COLOR=Red]Probably caused by : memory_corruption[/COLOR] ( nt!MiUnmapViewOfSection+385 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

[COLOR=Red]SYSTEM_SERVICE_EXCEPTION (3b)[/COLOR]
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000[COLOR=SeaGreen]c0000005, Exception code that caused the bugcheck[/COLOR]
Arg2: fffff80002fa2125, Address of the instruction which caused the bugcheck
Arg3: fffff880072510f0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) [COLOR=SeaGreen]0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.[/COLOR]

FAULTING_IP: 
nt!MiUnmapViewOfSection+385
fffff800`02fa2125 488b08          mov     rcx,qword ptr [rax]

CONTEXT:  fffff880072510f0 -- (.cxr 0xfffff880072510f0)
rax=000000000000ffff rbx=fffffa8009b5c0c0 rcx=00000000010a8000
rdx=0000000000000000 rsi=fffffa800aae7b30 rdi=fffffa8007a52590
rip=fffff80002fa2125 rsp=fffff88007251ad0 rbp=000000000000f000
 r8=00000000010a8000  r9=000000000000f000 r10=fffff80002fa22f4
r11=0000000000319af4 r12=000007fef0900000 r13=0000000000000000
r14=000007fef090efff r15=000007fef0900000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!MiUnmapViewOfSection+0x385:
fffff800`02fa2125 488b08          mov     rcx,qword ptr [rax] ds:002b:00000000`0000ffff=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

[COLOR=Red][B]DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP[/B][/COLOR]

BUGCHECK_STR:  0x3B

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002fa2353 to fffff80002fa2125

STACK_TEXT:  
fffff880`07251ad0 fffff800`02fa2353 : fffff880`00000000 000007fe`f0900000 fffffa80`00000001 00000000`0000ffff : nt!MiUnmapViewOfSection+0x385
fffff880`07251b90 fffff800`02c86e13 : fffffa80`07a52590 fffff880`07251c60 fffffa80`0aae7b30 fffffa80`0aeaf270 : nt!NtUnmapViewOfSection+0x5f
fffff880`07251be0 00000000`7749155a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0299f398 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7749155a


FOLLOWUP_IP: 
nt!MiUnmapViewOfSection+385
fffff800`02fa2125 488b08          mov     rcx,qword ptr [rax]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiUnmapViewOfSection+385

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  51fb06cd

STACK_COMMAND:  .cxr 0xfffff880072510f0 ; kb

[COLOR=Red]IMAGE_NAME:  memory_corruption[/COLOR]

FAILURE_BUCKET_ID:  X64_0x3B_VRF_nt!MiUnmapViewOfSection+385

BUCKET_ID:  X64_0x3B_VRF_nt!MiUnmapViewOfSection+385

Followup: MachineOwner
---------

 

[mrki69tua]

I enabled driver verifier while I was trying to resolve one of the BSOD, I've read some article about the same problems. I thought so that it could be motherboard, so do you sugest me to return notebook to the service and say to them that probably motherboard isn't working good? Or to return it blindly and wait for their solution (which here in Croatia usually is that I will get back notebook untouched LOL)?

 

[mrki69tua]

Archie, once again thank you for your time and cooperation, I will send the notebook to the service.

 

[Arc]

Driver verifier is very effective, but not appropriate in your issue.

Though I must to say that it narrowed down the issue really easily.

If you send the computer for servicing, ask them to make it sure that your motherboard is not causing any problem at all. If it is within warranty, ask for a warranty replacement.

 

[mrki69tua]

And today my laptop came from service and that they changed motherboard so I will install everything but i believe that problem is solved! Thanks Archie.

 

[Arc]

And today my laptop came from service and that they changed motherboard so I will install everything but i believe that problem is solved! Thanks Archie.

Good news, mate

Now observe it over some days. Let us know how it is running.

 

[mrki69tua]

Bad news, today when I was instaling USB 3.0 driver another BSOD appeared so my doubt is that they didn't changed the motherboard at all and that won't even surprise me in Croatia.
caused by: iusb3hub.sys

 

[Arc]

Well, try to install the latest version of the Intel USB3 driver once again. See what happens.

 

[mrki69tua]

After that it installed normaly and I've installed bluetooth and wireless drivers, and after that connected mouse by bluetooth and just when installation finished I've moved mouse 3 cm and BSOD appeared. After it restarted and windows started and I've moved mouse and another BSOD appeared. Dump files are attached and bug check (0000003b) and caused by (ntoskrnl.exe+75bc0) are the same. Now I want to know if they changed the motherboard as they wrote, cause If they arent I will take steps above this shop. And also notebook is tearing me down, you are the last hope LOL.

 

[Arc]

I am not being able to determine what may be the real reason behind the BSODs. The last one was indicating to USB3, and this one .....

fffff880`02686058  fffff880`0103c74d [COLOR=Red]ataport[/COLOR]!IdeProcessPortNotification+0x30d

ataport.sys is the system native IDE ATA/ATAPI Controller driver (works alongwith atapi.sys). It may malfunction if the port/SATA cable/board is faulty, or a virus infection called rootkit.

Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Let us know the results.

If they havent replaced th motherboard, then that is not possible to determine. I just casn say that your BIOS version is as same as the first post ....

BiosVendor = Hewlett-Packard
BiosVersion = 68IRR Ver. F.42
BiosReleaseDate = 07/16/2013