BSOD while paused watching movie on Internet Explorer STOP: 0x0000007E

[pxfragonard]

Hi. I was watching a movie online (IE11) and paused it to get a cup of tea. When I came back I saw my first BSOD. I've read the posting instructions and will upload all I was able to get. I'd really appreciate any help in understanding what happened.

I recently bought a new monitor and have been puzzled by the fact that my Catalyst Control Center misidentifies it as a VGA monitor. I don't know if that's related.

 

[Golden]

fffff880`035a0c30  fffff880`035a10e0
fffff880`035a0c38  fffff880`035a1088
fffff880`035a0c40  fffff880`035a10a8
fffff880`035a0c48  fffff880`030f970eUnable to load image \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [B][COLOR="red"]RapportPG64.sys[/COLOR][/B]
*** ERROR: Module load completed but symbols could not be loaded for RapportPG64.sys
 RapportPG64+0x5570e
fffff880`035a0d48  00000000`0000001d
fffff880`035a0d50  fffff8a0`025f4800
fffff880`035a0d58  fffffa80`054d5190
fffff880`035a0d60  00000000`0000001d
fffff880`035a0d68  fffff880`042db1a7Unable to load image \??\C:\Windows\system32\drivers\mbamchameleon.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mbamchameleon.sys
*** ERROR: Module load completed but symbols could not be loaded for mbamchameleon.sys
 mbamchameleon+0x71a7
fffff880`035a0d70  00000000`00000000
fffff880`035a0d78  00000000`0000001d
fffff880`035a0d80  00000000`00000000
fffff880`035a0d88  fffff880`035a1500
fffff880`035a0d90  00000000`00000000
fffff880`035a0d98  fffff880`042db03f mbamchameleon+0x703f
fffff880`035a0da0  00000000`00000001
fffff880`035a0da8  00000000`0000001d
fffff880`035a0db0  fffff8a0`025f4800
fffff880`035a0db8  fffff880`035a0fa0
fffff880`035a0dc0  00000000`0000001d
fffff880`035a0dc8  fffff880`042d9f5d mbamchameleon+0x5f5d
fffff880`035a0dd0  00000000`00000000
fffff880`035a0dd8  00000000`0000001d
fffff880`035a0de0  fffff8a0`23cd5840
fffff880`035a0de8  fffff800`035f430d nt!ExFreePoolWithTag+0x22d
fffff880`035a0df0  00000000`0000001c
fffff880`035a0df8  fffff880`044537b9Unable to load image \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\[B][COLOR="red"]RapportCerberus64_80083.sys[/COLOR][/B], Win32 error 0n2
*** WARNING: Unable to verify timestamp for RapportCerberus64_80083.sys
*** ERROR: Module load completed but symbols could not be loaded for RapportCerberus64_80083.sys
 RapportCerberus64_80083+0x537b9
fffff880`035a0e00  00000000`00000008

Update or uninstall Rapport software...its causing huge problems, especially with Malwarebytes.

fffff880`035a0688  ffff000a`0d316665
fffff880`035a0690  fffff880`035a06c0
fffff880`035a0698  fffff880`05b0d8b7Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [B][COLOR="red"]atikmdag.sys[/COLOR][/B]
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
 atikmdag+0x358b7
fffff880`035a06a0  00000000`00000000
fffff880`035a06a8  fffff880`035a09d8
.
.
.
fffff880`05ad8000 fffff880`06561000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        [B][COLOR="Red"]Fri Sep 28 11:44:57 2012[/COLOR][/B] (50650821)
    CheckSum:         00A3EAAC
    ImageSize:        00A89000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update the video driver to the latest stable release.

 

[pxfragonard]

Thanks very much, Golden. Will do that!

UPDATE: Hard to update the driver. Inside the program it said it was inaccessible... but I found help at the manufacturer's page. Unfortunately I unloaded a gaming software and other stuff. I can remove that later.

I also managed to install a different version of Trusteer from "previous versions" in the backup. There are four of them now in a folder. I have no idea which one is stable. I will keep checking the administrative events to see if things are improving I suppose, unless there's a better way to check that that you can think of.

 

[pxfragonard]

Here is Internet Explorer's report on the event in a text file. Also noticed my Windows Explorer seems to be in green ink. I don't remember that. It used to be black. Shudder.

 

[pxfragonard]

After things got better with only two recurring errors, things are going downhill fast. I've attached a new diagnosis. It seems my index is corrupted. I wasn't even able to get a chdsk file printed via Brink's method because "part of the path is missing." I think Norton misidentified an attempt by the computer to install something vital as a virus, etcetera and no there are errors everywhere. I'm thinking of trying the System Repair. Is that advisable?

 

[Golden]

There aren't any .dmp files - are you actually getting any BSOD's?

Before trying a System Repair, try fix any corrupt system files:

1. Click Start

2. In the search box, type cmd
3. In the list that appears, right-click on cmd.exe and choose Run as administrator
4. In the command window that opens, type sfc /scannow and hit enter.

 

[pxfragonard]

Yup. I had a BSOD. Just one. I did run scannow and it said the file system showed no violations. But startup is really slow. Thanks for your input. I guess I'll wait to see if another BSOD occurs before posting here and maybe I should post other problems in a different forum.
So if the scannow shows no problem, you figure I should hold off on running a system repair?

 

[Golden]

Yes, hold off for now. I'd like to get to the bottom of the BSOD, but its not in your ZIP file.....check for it in C:\Windows\Minidump

Slow starup could be a few things...leave that for now, lets focus on the BSOD first.

 

[pxfragonard]

Hi Golden. No, it's not in the recent upload but the filed 122314-24195-01.dmp is in the two zipped files I uploaded at the top of this post in pxfragonard.zip and debug-DAN-HP-Tue_12_23_2014_214836_01.zip.

The C:\Windows\minidump now shows a lock on it and appears to be empty.

 

[pxfragonard]

Here they are again.

 

[Golden]

OK. That is the original .dmp file I looked at, but if you are getting new BSOD's, then there should be new .dmp files being added to C:\Windows\Minidump.

Please do the following:

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Driver Verifier will cause your computer to run very sluggishly - this is normal. What it is trying to do is force your system to BSOD and isolate the offending driver/s. When it does, reboot, disable driver verifier, reboot as normal and upload the new dmp file/s here.

I recommend creating a system restore point before turning on driver verifier:
http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

If your system fails to boot to desktop once driver verifier is enabled, turn it off by booting into Safe Mode:
http://www.sevenforums.com/tutorials/69585-safe-mode.html

 

[pxfragonard]

That makes a lot of sense. Cause it to crash and find out why. And that's a great tutorial you sent me to. I don't know these tools but I'm picking it up bit by bit.

But before I begin, do I click "Add currently not loaded driver(s) to the list"? Secondly, Some responders in the thread beneath the tutorial said not to tick any "unknown" drivers and any .sys drivers besides the Microsoft Corporation but it didn't say that in the original tutorial. Just wondering if that's right. And lastly, should I enable minidump or kernel dump or does it matter? Lastly, should I enable or disable automatic restart? The first BSOD left me no option to restart except cutting off the power, which I try to avoid. Sorry to ask so many questions but I like to know what I'm getting into. Cheers.

 

[Golden]

No, just make sure the non-Microsoft drivers are selected (if something is marked as "unknown" then it should also be selected since its also not a Microsoft Driver).

Just enable minidump....that is sufficient for us.

You can leave automatic restart as disabled.

 

[pxfragonard]

OK. I couldn't get it to crash so I ended up running it 24 hours. I don't have the knowledge to analyze the results but I'll read them and see if I can pick something up. I'm enclosing the results I got using the SF tool. Thanks for your help.