Frequent various BSODs - memory or driver problem?

[maxeenie]

Hi all,

I'm having BSODs with various error messages on a daily basis. I usually just run Chrome when it happens.

Could someone check if this is a driver issue or something else? I ran memory scans with no issue found, but I've read that using memory modules from different manufacturers can be an issue. Or is it the antivirus (Avira) that triggers it? I'm lost, please help!

 

[VistaKing]

Hi Maxeenie

Your first recent bsod :

Point to a memory issue . Please run a memory test using the following

:ar: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

Your second recent bsod :

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME: [COLOR="Red"] BitTorrent.exe[/COLOR]

TRAP_FRAME:  fffff88007d3f7e0 -- (.trap 0xfffff88007d3f7e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa800829d7d8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ab930f rsp=fffff88007d3f970 rbp=0000000000000000
 r8=fffffa80074f4100  r9=000000000000007f r10=0000158f30fb760f
r11=000000000000ccb8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po cy
nt!RtlInsertEntryHashTable+0x73:
fffff800`02ab930f 488b4810        mov     rcx,qword ptr [rax+10h] ds:00000000`00000010=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ad81a9 to fffff80002ad8c00

STACK_TEXT:  
fffff880`07d3f698 fffff800`02ad81a9 : 00000000`0000000a 00000000`00000010 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`07d3f6a0 fffff800`02ad6e20 : 00000000`c0000001 00000000`00000000 00000000`00000000 fffff880`07d3fe28 : nt!KiBugCheckDispatch+0x69
fffff880`07d3f7e0 fffff800`02ab930f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
fffff880`07d3f970 fffff880`01407bc5 : fffff880`07d3fe28 fffffa80`06ced610 fffffa80`06ced610 fffff800`02b03a90 : nt!RtlInsertEntryHashTable+0x73
fffff880`07d3f9c0 fffff880`01407d13 : fffff880`017478f0 00000000`00000002 fffffa80`06ced610 00000000`00000000 : NETIO!KfdAleInsertFlowContextTable+0xb5
fffff880`07d3fa10 fffff880`016443f2 : 00000000`00000000 fffff800`00000000 00000000`00000000 fffff880`00000008 : NETIO!KfdAleInitializeFlowTable+0x13
fffff880`07d3fa40 fffff880`016439dc : 00000000`00000000 fffff880`07d41090 fffff880`07d40dd8 fffff880`07d42000 : tcpip!WfpAlepAuthorizeSend+0x7e2
fffff880`07d40150 fffff880`01646e66 : 00000000`00000000 00000000`00000000 00000000`00000011 00000000`00000000 : tcpip!WfpAleAuthorizeSend+0x31c
fffff880`07d40420 fffff880`0167e2ce : 00000000`00000000 fffff880`07d40858 fffff880`07d40850 fffff800`02b9b733 : tcpip!WfpAleConnectAcceptIndicate+0x106
fffff880`07d40510 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!ProcessALEForTransportPacket+0x5fe


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!KfdAleInsertFlowContextTable+b5
fffff880`01407bc5 84c0            test    al,al

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  NETIO!KfdAleInsertFlowContextTable+b5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  [COLOR="Red"]NETIO.SYS[/COLOR]

DEBUG_FLR_IMAGE_TIMESTAMP:  5034f6a0

FAILURE_BUCKET_ID:  X64_0xA_NETIO!KfdAleInsertFlowContextTable+b5

BUCKET_ID:  X64_0xA_NETIO!KfdAleInsertFlowContextTable+b5

Update your NIC driver and Wifi driver

 

[Arc]

Adding some little point here with what vistaking said.... the crash occurred during BitTorrent usage. NETIO.sys is the system's native network I/O subsystem. It may fail due to some various reasons, but in your case it is blocked by Zone Alarm TrueVector Device Driver. From the same crash dump:

fffff880`07d3faa8  fffff880`03ebd2a9Unable to load image \SystemRoot\system32\DRIVERS\[URL="http://www.carrona.org/drivers/driver.php?id=vsdatant.sys"]vsdatant.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=vsdatant.sys"]vsdatant.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=vsdatant.sys"]vsdatant.sys[/URL]
 vsdatant+0x122a9

Description here: Driver Reference Table - vsdatant.sys

I would suggest you to uninstall ZoneAlarm using Zone Alarm Clean Tool --> View attachment 264384
Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Download, install and update those, and then run full system scans with both of them, one by one.

   Warning

Please follow Golden's post before you start a scan with Malwarebytes:

http://www.sevenforums.com/security...uses-massive-false-positives.html#post2366915

Also, there are some probability of some malware for which you need some special scans.

fffff880`031776c8  fffff880`00c161a0 ataport!WPP_MAIN_CB
fffff880`031776e8  fffff880`00c0bb6e ataport!IdeDispatchChannelRequest+0x10a

Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

At the same time, your network driver, Realtek PCIe GBE Family Controller driver seems to be very old.

fffff880`02a00000 fffff880`02a85000   Rt64win7   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
[COLOR=Red]    Image name: Rt64win7.sys
    Timestamp:        Fri Jun 10 12:03:15 2011[/COLOR] (4DF1BAAB)
    CheckSum:         0008B67F
    ImageSize:        00085000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update it from Realtek , take the 6th one in the list: Win7 and WinServer 2008 R2 Auto Installation Program.

Let us know the results.

 

[VistaKing]

@ maxeenie

Also update your USB 3.0 driver HERE and click on the + sign next to USB and click on Global to start the download

 

[maxeenie]

Thanks to all of you! I'll do these asap.