BSOD random?

[mdenner]

I had a BSOD problem with my machine a few months ago and it seemed to be revolving around a USB3 driver issue. The drivers were always up to date and I tried several things with no solution. I thought I tried everything to fix it and then a friend of mine made a wierd suggestion of using less memory using msconfig. I put the memory down to 4Gig (I have 16 Gig) and I actually forgot that I had did that until recently. I changed it back to 16 Gig and now the BSOD is back.

The first time it happened I noticed there was an explation point like usual in the device manager. I checked again and there was a few updates for the computer hardware (including the USB3) I installed the updates. I have gotten the BSOD a few times and checked but it does not appear to be the USB3 driver anymore. I am not sure what is causing it.

I dont know if the memory change I did actually helped or if it was just coincidence.

Any help would be greatly appreciated I try to save my work often but it is really frustrating when working on a CAD project and I forget.

I also noticed it happened to me a few times where I go to shutdown the computer. I click shut down and shut off my monitors. After a few minutes of still hearing the fans run i turn the monitors on and see the login screen. When i login I usually see the windows BSOD notification and just re-shut down.

and advice would be greatly appreciated.

Thanks

MD

 

[koolkat77]

Various Network errors which is usually caused by stubborn antivirus.

fffff800`07e21368  fffff880`1233d08eUnable to load image \SystemRoot\system32\DRIVERS\netr28ux.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for netr28ux.sys
*** ERROR: Module load completed but symbols could not be loaded for netr28ux.sys
 netr28ux+0x7008e

Update the drivers after internet security removal: Driver Reference Table

fffff800`07e21508  fffff880`0497b530 tcpip!endpointLruContext+0x4b0
fffff800`07e21510  fffff880`046012b0 NETIO!WfpSysTimerCallback
fffff800`07e21518  fffff880`0497b4e8 tcpip!endpointLruContext+0x468
fffff800`07e21520  fffff880`0497c5f0 tcpip!LruContextLoose+0x4b0
fffff800`07e21528  fffff880`046012b0 NETIO!WfpSysTimerCallback
fffff800`07e21530  fffff880`0497c5a8 tcpip!LruContextLoose+0x468
fffff800`07e21538  fffff880`04987930 tcpip!gTupleState+0x4b0
fffff800`07e21540  fffff880`046012b0 NETIO!WfpSysTimerCallback
fffff800`07e21548  fffff880`049878e8 tcpip!gTupleState+0x468
fffff800`07e21550  fffffa80`0c7b8df0
fffff800`07e21558  fffff880`046012b0 NETIO!WfpSysTimerCallback
fffff800`07e21560  fffffa80`0c7b8da8
fffff800`07e21568  fffff880`076fc720 afd!AfdTimerWheel
fffff800`07e21570  fffff880`076e0010 afd!AfdTimerWheelHandler
fffff800`07e21578  00000000`00000000
fffff800`07e21580  fffff800`034e16a0 nt!LazyWriter
fffff800`07e21588  fffff800`033290d8 nt!CcScanDpc
fffff800`07e21590  00000000`00000000
fffff800`07e21598  fffff880`04a1c9c0 rdbss!s_RxTimerDpc
fffff800`07e215a0  fffff880`04a015a4 rdbss!RxTimerDispatch
fffff800`07e215a8  00000000`00000000
fffff800`07e215b0  fffff880`192d6750 luafv!ScavengerDpc
fffff800`07e215b8  fffff880`192d082c luafv!ScavengerTimerRoutine
fffff800`07e215c0  00000000`00000000
fffff800`07e215c8  fffff880`192d6750 luafv!ScavengerDpc
fffff800`07e215d0  fffff880`192d082c luafv!ScavengerTimerRoutine
fffff800`07e215d8  00000000`00000000
fffff800`07e215e0  fffff800`034e16a0 nt!LazyWriter
fffff800`07e215e8  fffff800`033290d8 nt!CcScanDpc
fffff800`07e215f0  00000000`00000000
fffff800`07e215f8  fffffa80`13019358
fffff800`07e21600  fffff880`076e0e30 afd!AfdCheckLookasideLists
fffff800`07e21608  fffffa80`13019010
fffff800`07e21610  fffff800`03481800 nt!EtwpAdjustBuffersDpc
fffff800`07e21618  fffff800`032d81c0 nt!EtwpAdjustBuffersDpcRoutine
fffff800`07e21620  fffff800`0347f0b0 nt!EtwpBufferAdjustmentActive
fffff800`07e21628  fffff880`16159208 USBPORT!USBPORTSVC_LogEntry+0x2c
fffff800`07e21630  fffff880`042c81c0 storport!RaidpAdapterTimerDpcRoutine

I'd suggest to uninstall any "Internet Security" antivirus software from the computer with its relevant uninstall tool (search in google) and use Microsoft Security Essentials with the great combination of Malware bytes (for testing purpose preferred.)

Recommended antivirus program for Windows 7 based on stability compared to others:-

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

:warn: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

:ar: For information purpose only:

fffff800`00b9c5c8  fffffa80`17e51838
fffff800`00b9c5d0  fffff880`07a93aa0Unable to load image \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\IPSDefs\20121115.001\IDSvia64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for IDSvia64.sys
*** ERROR: Module load completed but symbols could not be loaded for IDSvia64.sys
 IDSvia64+0x8aa0
...
fffff800`00b9c538  fffff880`04a52260Unable to load image \SystemRoot\system32\Drivers\SEP\0C01029F\136B.105\x64\SYMNETS.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMNETS.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMNETS.SYS
 SYMNETS+0x52260
...
fffff800`00b9c528  fffff880`156a1dccUnable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0x201dcc

Update drivers for graphic card (latest nvidia drivers are a little buggy). Click on the Start rb: ► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to; NVIDIA and restart the computer. Delete remnants of its drivers/older drivers using Driver Fusion/Sweeper
_________________
Source for download:

• Download NVIDIA Forceware 306.23 WHQL Vista 64 - FileHippo.com

Unloaded modules:
fffff880`07a8b000 fffff880`07b0d000   IDSvia64.sys
fffff880`07e27000 fffff880`07f7e000   BHDrvx64.sys
fffff880`07a8b000 fffff880`07b0d000   IDSvia64.sys
fffff880`076b7000 fffff880`076d9000   ENG64.SYS
fffff880`074b4000 fffff880`076b7000   EX64.SYS
fffff880`046a3000 fffff880`046c0000   sbp2port.sys
fffff880`12ac7000 fffff880`12b38000   spsys.sys
fffff880`07a8b000 fffff880`07b0d000   IDSvia64.sys
fffff880`0c6ce000 fffff880`0c6d6000   variable64.s
fffff880`08c18000 fffff880`08ca4000   bthport.sys
fffff880`08c00000 fffff880`08c18000   BTHUSB.sys
fffff880`0c6fa000 fffff880`0c70a000   BthEnum.sys
fffff880`0c6ce000 fffff880`0c6fa000   rfcomm.sys
fffff880`0c70a000 fffff880`0c72a000   bthpan.sys
fffff880`08ca4000 fffff880`08cac000   cpuiox64.sys
fffff880`08ca4000 fffff880`08cac000   cpuiox64.sys
fffff880`08ca4000 fffff880`08cac000   variable64.s

Hope that helps.

 

[mdenner]

I was able to do everything that you mentioned (minus the video drivers) and it BSOD on me 2x back to back. Ive uploaded the new zip file and am hoping for some feedback and maybe this has some more info as for the BSOD? and possibly another solution.

I will do the video driver uninstall tomorrow and re-install the older drivers.

 

[koolkat77]

The last dump file is of 18th.

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.

*Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.
​

If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.

*If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.
​

*If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.
​

3. Test the next stick of RAM (stick #2) in the next motherboard slot.

*If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.
​

*If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.
​

4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

:info: Errors are sometimes found after 8 passes.
:tip: Do this test overnight, before going to bed.

 

[mdenner]

I did the memory test 9 times. I havent had time to uninstall the NVidia drivers or test the memory 1 by 1 in the slots. (cant get to this till next week; should be able to do the NVidia drivers tonight)

another BSOD so I uploaded the .zip hoping for more info for you

 

[koolkat77]

Sorry but the last dump is of 18-Nov-12.

 

[mdenner]

it BSOD again (dont want to waste your time looking through another file so i wont upload the .zip) shouldnt it always creat a dump file if it Blue Screens? is there something else I can do to try and record it?

 

[koolkat77]

Configure for small memory dump file from here: http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

 

[mdenner]

Here is the latest BSOD. Hopefully there is more info on this than before to help you.

Also would there be a reason my external USB drive always "clicks" right before it would BSOD on me? just curious

Thanks for the help

 

[koolkat77]

No new dumps.
You should test the RAM sticks individually.

Do you get BSOD-s in safe mode?

 

[mdenner]

I cant seem to get a failed mem test. however i called the memory manufacturer (GSkill) and after I did some things with their tech support they said send in the memory and they will send new ones. But i got another BSOD just now and this one was different. the memory dump actually completed. usually the computer shuts off before it completes. so i was curious on this bsod. thanks

 

[koolkat77]

History repeats itself.

fffff800`00b9c4f8  fffff880`0476b2b0 NETIO!WfpSysTimerCallback
fffff800`00b9c500  fffffa80`0c7d4da8
fffff800`00b9c508  fffff880`04a34930 tcpip!gTupleState+0x4b0
fffff800`00b9c510  fffff880`0476b2b0 NETIO!WfpSysTimerCallback
fffff800`00b9c518  fffff880`04a348e8 tcpip!gTupleState+0x468
fffff800`00b9c520  fffff880`04a295f0 tcpip!LruContextLoose+0x4b0
fffff800`00b9c528  fffff880`0476b2b0 NETIO!WfpSysTimerCallback
fffff800`00b9c530  fffff880`04a295a8 tcpip!LruContextLoose+0x468
fffff800`00b9c538  fffff880`04a28530 tcpip!endpointLruContext+0x4b0
fffff800`00b9c540  fffff880`0476b2b0 NETIO!WfpSysTimerCallback
fffff800`00b9c548  fffff880`04a284e8 tcpip!endpointLruContext+0x468
fffff800`00b9c550  fffff880`1533d720 afd!AfdTimerWheel
fffff800`00b9c558  fffff880`15321010 afd!AfdTimerWheelHandler
fffff800`00b9c570  fffff880`046ff160 ndis!ndisMWakeUpDpcX
fffff800`00b9c588  fffff880`046ff160 ndis!ndisMWakeUpDpcX
fffff800`00b9c5a0  fffff880`046ff160 ndis!ndisMWakeUpDpcX
fffff800`00b9c5b0  fffff800`03462fb0 nt!PpmCheckStartDpc
fffff800`00b9c5b8  fffff800`033b7430 nt!PpmCheckStart
fffff800`00b9c5c8  fffff800`03467800 nt!EtwpAdjustBuffersDpc
fffff800`00b9c5d0  fffff800`032be1c0 nt!EtwpAdjustBuffersDpcRoutine
fffff800`00b9c5d8  fffff800`034650b0 nt!EtwpBufferAdjustmentActive
fffff800`00b9c5e8  fffff880`042cc1c0 storport!RaidpAdapterTimerDpcRoutine

Stubborn antivirus can cause the above.

Start Menu\Programs\ESET	Public:Start Menu\Programs\ESET	Public
Start Menu\Programs\ESET\ESET Smart Security	Public:Start Menu\Programs\ESET\ESET Smart Security	Public

Please remove Eset with the removal tool for troubleshooting purpose.

• Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase

Enable/Disable USB selective suspense. See if this improves anything.

• http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html