BSOD while backing up to USB 3.0 external HDD

[REDcorsair]

Yesterday I was getting BSOD's while attempting to backup my Documents folders to my external hard drive. This would happen approximately 1-5 minutes into starting a manual folder copy. I was trying this after MS Auto backups were failing...something to do with Shadow Volume this or that. My event viewer errors prior to the critical errors include:

12 minutes before BSOD: (WMI)
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected

2 mins. before that: (Wininit)
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

1 sec. before that: (Kernel-PnP)
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_CANON&PROD_MP460STORAGE&REV_0103#8&76AD4A2&0&D04359&0#.

Beginning of errors?: (VSS)
Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{bf7c929f-19b4-11e2-868c-bc5ff446839c}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again.
Operation:
Removing auto-release shadow copies
Loading provider
Context:
Execution Context: System Provider

When I attempted to use MS auto backup (custom settings), I got this result:
The backup was not successful. The error is: Windows Backup failed while trying to read from the shadow copy on one of the volumes being backed up. Please check in the event logs for any relevant errors. (0x81000037).

Another error:
The driver detected a controller error on \Device\Harddisk2\DR2.

Any help is appreciated! Thanks!

 

[Kaktussoft]

As a quick test.... use usb2 port instead. Use another external disk instead. Same problem?

Delete all restore points (of all disks). Configure it correct on any disk you want. Give it at least 10GB of space.
Try to create a manual restore point

http://www.sevenforums.com/tutorials/336-system-protection-restore-points-delete.html option one
http://www.sevenforums.com/tutorials/335-system-protection-change-disk-space-usage.html
http://www.sevenforums.com/tutorials/330-system-protection-turn-off.html

http://www.sevenforums.com/tutorials/697-system-restore-point-create.html option two
post results

 

[REDcorsair]

Forgot to mention that I was able to complete manual backup in safe mode, but it took forever... No USB 3.0 drivers in safe mode? Then I ran a test to see if I could cause the BSOD again but was unable to do so. I'll try the auto backup again soon.

 

[Kaktussoft]

Forgot to mention that I was able to complete manual backup in safe mode, but it took forever... No USB 3.0 drivers in safe mode? Then I ran a test to see if I could cause the BSOD again but was unable to do so. I'll try the auto backup again soon.

I'm not sure if safe mode loads usb3.0 drivers. Why not connect external (temporary to usb2.0 port) and test backup? Try to backup in normal mode (disable virusscanner)

Do #2

 

[Arc]

Event[34434]:
  Log Name: System
  Source: Service Control Manager
  Date: 2013-02-24T21:11:48.231
  Event ID: 7026
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Corsair
  Description: 
[COLOR=Red]The following boot-start or system-start driver(s) failed to load:[/COLOR] 
[URL="http://www.carrona.org/drivers/driver.php?id=CFRMD.sys"]CFRMD[/URL]

In existance of comodo internet security and its file system monitoring drivers, it is all possible.

The BSOD you got is a stop 0x50.

Event[34220]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2013-02-24T20:31:27.000
  Event ID: 1001
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Corsair
  Description: 
[COLOR=Red]The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000050[/COLOR] (0xffffffffffffffd0, 0x0000000000000001, 0xfffff800032e446c, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: .

So there is enough reason to blame comodo ...... but there are some other factors present, too. Se we need to check the dumps before we suggest anything material.

But your uploaded zip does not contain any crash dump. Why?

Event[34219]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2013-02-24T20:31:27.000
  Event ID: 1005
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Corsair
  Description: 
[COLOR=Red]Unable to produce a minidump file from the full dump file[/COLOR].

Follow it: http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html
Go to Option Two, Point 2. Download the .reg file and merge it in registry by double clicking it.

Now wait for another BSOD. When it occurred, search the .dmp files manually in the default path: C:\Windows\Minidump or %SystemRoot%\Minidump. See if the crash dump is recorded or not (hopefully it will be recorded).Post it following the Blue Screen of Death (BSOD) Posting Instructions.

Also there is some controller error to the external HDD, Seagate FA GoFlex Desk USB Device.

Event[34588]:
  Log Name: System
  Source: Disk
  Date: 2013-02-28T23:56:50.923
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Corsair
  Description: 
[COLOR=Red]The driver detected a controller error on \Device\Harddisk2\DR2[/COLOR].

If we have the crash dumps, we can check the timestamps of the AHCI drivers like Intel(R) 7 Series/C216 Chipset Family SATA AHCI Controller, Asmedia 106x SATA Controller, and the SCSI things (are those really needed for you?) ASRock 3TB+ Unlocker and ASRock RAM Disk.

So configure the minidump recording and supply the data to us.

 

[REDcorsair]

Thanks Arc. Sorry, but I only have the full kernel memory dump, but no minidump. It's about 350MB compressed so I couldn't upload it here, but this is a link to the files on Dropbox:
https://www.dropbox.com/sh/mabw9rwuwnx3v4k/rYXwYxbXtl
Should I setup the minidump option instead of the full dump? Would that be more useful?
Also, are you recommending that I use a different AV than Comodo?

 

[Kaktussoft]

Why not simply disable COMODO and test? Or even better uninstall it. Post results

 

[Arc]

Thanks Arc. Sorry, but I only have the full kernel memory dump, but no minidump. It's about 350MB compressed so I couldn't upload it here, but this is a link to the files on Dropbox:
https://www.dropbox.com/sh/mabw9rwuwnx3v4k/rYXwYxbXtl
Should I setup the minidump option instead of the full dump? Would that be more useful?
Also, are you recommending that I use a different AV than Comodo?

Do two things.

First Uninstall Comodo. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Next, set the crash dump to minidump and observe the situation. If it crashes again, post it following the Blue Screen of Death (BSOD) Posting Instructions.

Try to replicate the BSOD after setting the minidump. Try to back it up to the external HDD .... let it crash. It will help to determine the actual reason behind the crashes, and the controller error we discussed earlier.

** Sorry to say, at my part of the globe bandwidth is very poor. It will take ages for me to download 350 MBs. A minidump does not contain total information, but it contains enough information to debug the common bugchecks like 0x50. So please adjust a bit

Best of luck.

 

[REDcorsair]

Thanks Kaktussoft and Arc. I switched to minidump, uninstalled a program I installed close to getting the errors and tried to replicate the error but, something I did or something the system did seems to have fixed the issue. I haven't had any more BSOD's. After being able to backup the files in safe mode I just haven't had the problem. I tried a new backup and also a smaller one to a USB stick, but everything seems to be working fine now. I'll be posting again in the future about some other issues I've been experiencing. Thanks for your help!