Solved BSOD on "Starting Windows" and "Shutting Down..."

[winzzzzz]

hello there, I have some questions, why do I get bluescreen errors, when I start my computer or when I shut my computer down? things that I found on the blue screen is "prl_boot.sys" for sometimes. my computer never got Bluescreen on normal use..

Here's the zip:
SF_19-12-2012.zip

Any answer would be highly appreciated! thank youhttp://www.sevenforums.com/attachment.php?attachmentid=246242&stc=1&d=1355901891

 

[bagavan]

Run this

http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Uninstall Parallels Tools 7.0

From the drivers list Intel Raid StorPort Driver is the oldest driver which dates 2005.

iirsp iirsp Kernel 12/14/2005 5:47:54 AM

update it from here

http://downloadcenter.intel.com/Default.aspx

also your IBM ServeRAID Controller Driver

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff8b0f9e5ab15, 0, fffff88001c6e826, 5}

*** WARNING: Unable to verify timestamp for prl_boot.sys
*** ERROR: Module load completed but symbols could not be loaded for prl_boot.sys

Could not read faulting driver name
Probably caused by : prl_boot.sys ( prl_boot+2826 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8b0f9e5ab15, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88001c6e826, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800048fc100
GetUlongFromAddress: unable to read from fffff800048fc1c0
 fffff8b0f9e5ab15 Paged pool

FAULTING_IP: 
prl_boot+2826
fffff880`01c6e826 833cb000        cmp     dword ptr [rax+rsi*4],0

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  smss.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88006b55a30 -- (.trap 0xfffff88006b55a30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a010f95209 rbx=0000000000000000 rcx=0000000000001200
rdx=0000000168be5cc1 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001c6e826 rsp=fffff88006b55bc0 rbp=00000000002617e2
 r8=fffff88001c76288  r9=00000000dca12a29 r10=0000000000002a29
r11=fffff8a0018617e2 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
prl_boot+0x2826:
fffff880`01c6e826 833cb000        cmp     dword ptr [rax+rsi*4],0 ds:fffff8a0`10f95209=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800046738af to fffff800046ccfc0

STACK_TEXT:  
fffff880`06b558c8 fffff800`046738af : 00000000`00000050 fffff8b0`f9e5ab15 00000000`00000000 fffff880`06b55a30 : nt!KeBugCheckEx
fffff880`06b558d0 fffff800`046cb0ee : 00000000`00000000 fffff8b0`f9e5ab15 fffff800`0464e000 fffff880`01c76201 : nt! ?? ::FNODOBFM::`string'+0x437c1
fffff880`06b55a30 fffff880`01c6e826 : fffff880`01c76201 00000000`00000000 00000000`00000000 fffff800`046c8810 : nt!KiPageFault+0x16e
fffff880`06b55bc0 fffff880`01c76201 : 00000000`00000000 00000000`00000000 fffff800`046c8810 00000000`00000010 : prl_boot+0x2826
fffff880`06b55bc8 00000000`00000000 : 00000000`00000000 fffff800`046c8810 00000000`00000010 00000000`002617e2 : prl_boot+0xa201


STACK_COMMAND:  kb

FOLLOWUP_IP: 
prl_boot+2826
fffff880`01c6e826 833cb000        cmp     dword ptr [rax+rsi*4],0

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  prl_boot+2826

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: prl_boot

IMAGE_NAME:  prl_boot.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  503d0ac1

FAILURE_BUCKET_ID:  X64_0x50_prl_boot+2826

BUCKET_ID:  X64_0x50_prl_boot+2826

Followup: MachineOwner
---------

 

[winzzzzz]

thank you for the reply, bagavan. I am not sure whether this will fix now. btw, I found that prl_boot.sys belongs to Parallels (Mac) would you tell me how do I remove it? I am not using it any longer..

 

[bagavan]

Follow this

Uninstall or change a program

 

[winzzzzz]

wahah, thanks for the reply. otherwise, so sorry, I can't find the Parallels there..

 

[winzzzzz]

hmm, after enabling the driver verifier, I restarted my computer. then, it turned into a looped BSOD, and the way to solve it is to use "Use Known Good Configuration (Advanced)"

 

[bagavan]

since you got a BSOD upload the new dumps using SF diag tool

 

[winzzzzz]

sure.. here it is:
View attachment 246357

 

[bagavan]

parallel tool is still responsible for the BSOD.

 

[winzzzzz]

...

I've seen no parallel in my computer.. I mean in "Programs and Features"..

 

[winzzzzz]

Marked as solved. I've deleted these Parallels files from C:\Windows\System32\drivers\
I deleted the files named prl_* files (forgot the extensions) and now it seems working fine.

Thank you, bagavan for helping me.