BSOD While using ftp error 0x0000003b

[relaxedcrazyman]

Hello, I got a new laptop for chirstmas. since then i have had about 5 BSOD. 4 of them happened last week within and hour. The only thing that was running was ftp and it was running at fairly high speeds downloading multiple files.

It is a sony vaio VPCS132FX
Windows 7 Home Premium x64 OEM
Intel core i3 2.53ghz
4gb dd3 1066 ram


if i am missing anything please let me know and i will get on it right away.

 

[writhziden]

[list=1]
[*]
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\BSODDmpFiles\relaxedcrazyman\Windows_NT6_BSOD_jcgriff2\012812-17035-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16841.amd64fre.win7_gdr.110622-1503
Machine Name:
Kernel base = 0xfffff800`02e57000 PsLoadedModuleList = 0xfffff800`03094e70
Debug session time: Sat Jan 28 14:58:01.912 2012 (GMT-7)
System Uptime: 0 days 0:27:58.083
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff88003e025fa, fffff88007891a60, 0}

Probably caused by : afd.sys ( afd!AfdTLReleaseIndications+1a )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88003e025fa, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88007891a60, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
afd!AfdTLReleaseIndications+1a
fffff880`03e025fa 488b4108        mov     rax,qword ptr [rcx+8]

CONTEXT:  fffff88007891a60 -- (.cxr 0xfffff88007891a60)
rax=fffff88003e03870 rbx=00000000ffffffff rcx=0000000000000000
rdx=fffff88007892450 rsi=fffffa8004046c80 rdi=fffffa8003d8c350
rip=fffff88003e025fa rsp=fffff88007892430 rbp=fffff88007892ca0
 r8=0000000000000000  r9=0000000000000000 r10=763c9f1645a22fbd
r11=000000000028bbec r12=0000000000000000 r13=fffffa8003f371d0
r14=fffff88007892a88 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
afd!AfdTLReleaseIndications+0x1a:
fffff880`03e025fa 488b4108        mov     rax,qword ptr [rcx+8] ds:002b:00000000`00000008=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  fzsftp.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88003e025fa

STACK_TEXT:  
fffff880`07892430 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : afd!AfdTLReleaseIndications+0x1a


FOLLOWUP_IP: 
afd!AfdTLReleaseIndications+1a
fffff880`03e025fa 488b4108        mov     rax,qword ptr [rcx+8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  afd!AfdTLReleaseIndications+1a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: afd

IMAGE_NAME:  afd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4db4dfee

STACK_COMMAND:  .cxr 0xfffff88007891a60 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_afd!AfdTLReleaseIndications+1a

BUCKET_ID:  X64_0x3B_afd!AfdTLReleaseIndications+1a

Followup: MachineOwner
---------
[/list]

1. This was network related and may be due to your current or previous antivirus software. Other possible causes are Memory problems... Corrupted hard disk system files... Corrupted System Files... Graphics Driver...

Thanks to Dave76 for help understanding possible causes.



We will start with the common problems first (see bold possible causes). Do the following steps and test after each to see if stability increases. Post back your results after each step, and if you get a blue screen crash, upload the files again and await further instructions after we are able to analyze the crash.

• If you are overclocking any hardware, please stop.
  
  
  
• Update your network adapter driver for the adapter you use to connect to the internet. Use the following steps.
  To fully re-install a driver, use the following steps.
  
  1. Click Start Menu
  2. Right Click My Computer/Computer
  3. Click Manage
  4. Click Device Manager from the list on the left
  5. Find the device you are trying to uninstall by expanding the appropriate set of devices
  6. Right click the device
  7. Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
  8. Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
  9. Restart your computer
  10. Install the latest driver for the device once Windows starts.

  
  Alternatively:
  

  1. Login as an adminstrative user.
  2. Click Start Menu
  3. Click Control Panel
  4. Click Hardware and Sound
  5. Click Device Manager (the last link under Devices and Printers)
  6. Find the device you are trying to uninstall by expanding the appropriate set of devices
  7. Right click the device
  8. Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
  9. Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
  10. Restart your computer
  11. Install the latest driver for the device once Windows starts.
  
  
• What antivirus software has been installed on the machine (including what is on there now and what was on there previously)? How was any previous antivirus software removed?
  
  
  
• Update to Service Pack 1.
  
  Download Details - Microsoft Download Center - System Update Readiness Tool for Windows 7 (KB947821) [August 2011]
  
  Download Details - Microsoft Download Center - System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [August 2011]
  
  Steps to follow before you install Windows 7 Service Pack 1 from the Microsoft Download Center
  
  Service Pack 1 Download site
  ​
  Links to Service Pack 1 (SP1) and preparation for SP1 courtesy of JMH

 

[relaxedcrazyman]

I have all the current, up to date drivers and SP1 installed and I am still getting BSOD.

I uninstalled the stock anti-virus software through Add/Remove Programs and installed Microsoft Security Essentials.

Today I got a bunch more then just 3b. Here is the new information.

 

[writhziden]

[list=1]
[*]


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\BSODDmpFiles\relaxedcrazyman\Windows_NT6_BSOD_jcgriff2\021212-23290-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?fffff800`00b9c500?
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e68000 PsLoadedModuleList = 0xfffff800`030ad670
Debug session time: Sun Feb 12 17:54:32.663 2012 (GMT-7)
System Uptime: 0 days 0:40:03.740
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa80048f2060, fffff80000b9c518, fffffa800937a410}

*** WARNING: Unable to verify timestamp for NETw5s64.sys
*** ERROR: Module load completed but symbols could not be loaded for NETw5s64.sys
Probably caused by : NETw5s64.sys

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa80048f2060, Physical Device Object of the stack
Arg3: fffff80000b9c518, Functional Device Object of the stack
Arg4: fffffa800937a410, The blocked IRP

Debugging Details:
------------------


DRVPOWERSTATE_SUBCODE:  3

IRP_ADDRESS:  fffffa800937a410

DEVICE_OBJECT: fffffa80070d7050

DRIVER_OBJECT: fffffa8005052920

IMAGE_NAME:  NETw5s64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c04085e

MODULE_NAME: NETw5s64

FAULTING_MODULE: fffff8800588d000 NETw5s64

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002f52cd2 to fffff80002ee4c40

STACK_TEXT:  
fffff800`00b9c4c8 fffff800`02f52cd2 : 00000000`0000009f 00000000`00000003 fffffa80`048f2060 fffff800`00b9c518 : nt!KeBugCheckEx
fffff800`00b9c4d0 fffff800`02ef05fc : fffff800`00b9c600 fffff800`00b9c600 00000000`00000000 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x34a90
fffff800`00b9c570 fffff800`02ef0496 : fffffa80`09296168 fffffa80`09296168 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x6c
fffff800`00b9c5e0 fffff800`02ef037e : 00000005`98bdafe9 fffff800`00b9cc58 00000000`000259e4 fffff800`0305ef08 : nt!KiProcessExpiredTimerList+0xc6
fffff800`00b9cc30 fffff800`02ef0167 : 00000001`619dc1c4 00000001`000259e4 00000001`619dc188 00000000`000000e4 : nt!KiTimerExpiration+0x1be
fffff800`00b9ccd0 fffff800`02edc96a : fffff800`0305ae80 fffff800`03068cc0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff800`00b9cd80 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0x9F_IMAGE_NETw5s64.sys

BUCKET_ID:  X64_0x9F_IMAGE_NETw5s64.sys

Followup: MachineOwner
---------

[*]
Loading Dump File [F:\BSODDmpFiles\relaxedcrazyman\Windows_NT6_BSOD_jcgriff2\021212-27721-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e57000 PsLoadedModuleList = 0xfffff800`0309c670
Debug session time: Sun Feb 12 16:33:52.657 2012 (GMT-7)
System Uptime: 0 days 0:21:07.734
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 109b, 210008, fffffa80094f1610}

Unable to load image \SystemRoot\system32\DRIVERS\NETw5s64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NETw5s64.sys
*** ERROR: Module load completed but symbols could not be loaded for NETw5s64.sys
GetPointerFromAddress: unable to read from fffff80003106100
Probably caused by : NETw5s64.sys ( NETw5s64+1f9f15 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 000000000000109b, (reserved)
Arg3: 0000000000210008, Memory contents of the pool block
Arg4: fffffa80094f1610, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  fffffa80094f1610 

FREED_POOL_TAG:  W3Rx

BUGCHECK_STR:  0xc2_7_W3Rx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  fzsftp.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80003001be9 to fffff80002ed3c40

STACK_TEXT:  
fffff880`0b2f5ef8 fffff800`03001be9 : 00000000`000000c2 00000000`00000007 00000000`0000109b 00000000`00210008 : nt!KeBugCheckEx
fffff880`0b2f5f00 fffff880`016e7382 : fffffa80`049aefb0 fffff880`0589efc2 00000000`00000200 fffffa80`094f1630 : nt!ExDeferredFreePool+0x1201
fffff880`0b2f5fb0 fffff880`05a82f15 : fffff880`05a82e50 fffffa80`07afd5c0 fffffa80`049aefe0 fffff880`0589efc2 : ndis!NdisFreeNetBufferList+0x112
fffff880`0b2f5fe0 fffff880`05a82e50 : fffffa80`07afd5c0 fffffa80`049aefe0 fffff880`0589efc2 00000000`00000000 : NETw5s64+0x1f9f15
fffff880`0b2f5fe8 fffffa80`07afd5c0 : fffffa80`049aefe0 fffff880`0589efc2 00000000`00000000 fffffa80`043184c0 : NETw5s64+0x1f9e50
fffff880`0b2f5ff0 fffffa80`049aefe0 : fffff880`0589efc2 00000000`00000000 fffffa80`043184c0 fffffa80`07afd5c0 : 0xfffffa80`07afd5c0
fffff880`0b2f5ff8 fffff880`0589efc2 : 00000000`00000000 fffffa80`043184c0 fffffa80`07afd5c0 fffff880`0589aebd : 0xfffffa80`049aefe0
fffff880`0b2f6000 00000000`00000000 : fffffa80`043184c0 fffffa80`07afd5c0 fffff880`0589aebd fffff880`0b2f6064 : NETw5s64+0x15fc2


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETw5s64+1f9f15
fffff880`05a82f15 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETw5s64+1f9f15

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETw5s64

IMAGE_NAME:  NETw5s64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c04085e

FAILURE_BUCKET_ID:  X64_0xc2_7_W3Rx_NETw5s64+1f9f15

BUCKET_ID:  X64_0xc2_7_W3Rx_NETw5s64+1f9f15

Followup: MachineOwner
---------


[/list]

1. This basically means your system sent a signal to a device driver to turn the device on or off, and the driver failed to respond or the device failed to enter the power state. This usually happens if a driver is not working as it should, needs to be updated, or is corrupted. In your case, the device in question is the network wireless adapter.
   
   If re-installing the driver and/or updating the driver does not resolve the problem, contact the manufacturer of the device or of the laptop for troubleshooting steps or to make the company aware of the problem so a new driver may be developed.
2. Again, pointing to your network wireless adapter. Re-install and/or update the driver to the newest version. If you already have the newest version, re-install in case the current driver is corrupted.

Also, what antivirus are you running? Have you had another antivirus on the system that was originally installed? How did you remove it? Antivirus/firewall software can cause network adapter drivers to behave erratically, so this information would be helpful.

 

[relaxedcrazyman]

It came with the stock laptop AntiVirus, i think it was norton.

I used Add/Remove to uninstall it, and installed Microsoft Security Essentials.

 

[writhziden]

You may not have completely removed Norton. The only surefire way to remove the program is to use the Norton Removal Tool. Otherwise, remnants can foul up the system. You can try using the tool now, but it may not work. You may have to uninstall MSE, re-install Norton, then use the removal tool, and then install MSE again.

 

[relaxedcrazyman]

what i dont get is that it only happens when i am running filezilla, downloading using SFTP and it is going at high download speeds for multiple files. If the speeds are not super high then it never has the issue. It only happens when the speeds really start to pick up, 1-2 MiB/s over 6+ files simultaneously.

 

[writhziden]

So I take it re-installing/updating the driver did not help?

 

[relaxedcrazyman]

it did not.

got another 2 bsod while downloading today.

 

[writhziden]

What about cleanly removing Norton? Any effect on downloading?

 

[relaxedcrazyman]

So i used the norton removal tool. it says it worked. will have to try and create the situation again.

got my fingers crossed for no more BSOD

 

[writhziden]

Best wishes removing Norton fixes it.


Did removing Norton provide more system stability?

 

[relaxedcrazyman]

it said that it removed it just fine. but i havent really been using ftp much as of late, so havent gotten BSOD since my last post.

 

[writhziden]

Alright, fair enough. Keep us updated how the system behaves next time you use ftp. Best of luck!

 

[relaxedcrazyman]

should be grabbing some stuff from ftp soon enough.

thanks again for your help.

 

[writhziden]

You're welcome.

 

[relaxedcrazyman]

So i was finally able to run memtest86+

I ran it for about 12 hours with no errors. Now this is a real head scratcher...

Could it just be an issue with filezilla?

 

[writhziden]

Have you tried a different browser or download/upload tool?

 

[relaxedcrazyman]

I have tried a bunch of different FTP programs, but with SFTP (needed) the speeds are around 10% of the speed with filezilla

 

[writhziden]

You haven't yet said whether you have gotten any crashes recently.

If you have, is the system more stable with SFTP?