Had a few BSOD can you guys check this for me please

[steve-pressman]

Hi guys had a few BSOD's recently Have posted the screen shots instead of the dumps If you need the dumps I can always post them later for you.

Would be grateful if you can have a look and advise please.

I get them mostly when using Windows Live Movie Maker Beta and when saving to disk.


Steve

 

[CarlTR6]

Steve, we really need to see the actual dump files.

http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

I can give you this until we get the actual dumps. I think you have a hardware or hardware related problem (driver). Look at the usual causes for each of the codes.

Error code 3B - BSOD Index

Error Code 24 - BSOD Index

Error code C4 - BSOD Index

Error code 7E - BSOD Index

I do not know what antivirus or firewall you are running. Also, are you running any CD visualization program?

 

[steve-pressman]

Sorry Carl, I thought without the dumps you might have an Idea Ok I have added them to this post.

Using Kaspersky 2011 Internet Security Suite Version 11.0.0.232(a.b) , MSE Beta Security Essentials Version: 2.0.375.0 and MalwareBytes Version 1.46 and no CD visualization programs.

See my system Specs for related Info.


Hope you have an answer for me soon as I know how good you are with this stuff

Steve

 

[CarlTR6]

Right now I am not at home and I don't have my tools and references loaded on Mae Lyne's netbook. I hope one of the other team members will look at your dumps. If not, I will do so in the morning when I go home to shower.

I can get you started. Uninstall Kaspersky completely. Go to their website and use their uninstall tool. Make sure Windows Firewall is turned on. Kaspersky is known to cause BSOD's on some Win 7 systems. After you uninstall Kaspersky, reboot and see how your system runs. Upload any new BSOD's.

This the best I can do until I look at the dumps.

 

[steve-pressman]

Anybody had a look yet for me ? Had no more problems since.


Steve

 

[Capt.Jack Sparrow]

Hello Steve,

As Carl suggested uninstall Kaspersky Internet Security 2011 (avp.exe) completely since i see you also have Microsoft Security Essentials use the Removal Tool to clean the left over files.

Update the Following Drivers :

asusgsb.sys  Thu Sep 27 18:44:50 2007
Rt64win7.sys Thu Aug 20 21:35:06 2009
supersafer64.sys Fri Dec 26 14:49:49 2008

Bugcheck:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80003024920, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff880111397c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP: 
nt!RtlRealSuccessor+30
fffff800`03024920 488b4908        mov     rcx,qword ptr [rcx+8]

CONTEXT:  fffff880111397c0 -- (.cxr 0xfffff880111397c0)
rax=f7fff8a002e30970 rbx=00000000000361ec rcx=f7fff8a002e30970
rdx=fffff88004963a78 rsi=00000000c0000017 rdi=00000000024df6c8
rip=fffff80003024920 rsp=fffff8801113a198 rbp=fffff8801113a29c
 r8=0000000000000000  r9=0000000000000000 r10=fffff88004963a78
r11=0000000000000006 r12=fffff8801113a360 r13=0000000000000001
r14=00000000024df6d0 r15=0000000000000018
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!RtlRealSuccessor+0x30:
fffff800`03024920 488b4908        mov     rcx,qword ptr [rcx+8] ds:002b:f7fff8a0`02e30978=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

[COLOR=Red][B]PROCESS_NAME:  avp.exe[/B][/COLOR]

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80003024920

STACK_TEXT:  
fffff880`1113a198 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlRealSuccessor+0x30


FOLLOWUP_IP: 
nt!RtlRealSuccessor+30
fffff800`03024920 488b4908        mov     rcx,qword ptr [rcx+8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!RtlRealSuccessor+30

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff880111397c0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!RtlRealSuccessor+30

BUCKET_ID:  X64_0x3B_nt!RtlRealSuccessor+30

Followup: MachineOwner

Hope this helps,
Captain

 

[CarlTR6]

Steve, Captain Jack is spot on. I am now home and I looked at the dump. While I suspect those drivers are the cause, I can't guarantee that; but since troubleshooting is process of elimination, you need to fix all known causes of crashes step by step. Generally speaking, Win 7 does not like older third party drivers, especially those written for XP. They can and do cause conflicts, memory corruption and crashes.

If you need help with those drivers, please let us know.

 

[steve-pressman]

Thax guys for looking for me. I could use some help locating the drivers though I would be most grateful


Steve

 

[CarlTR6]

asusgsb.sys - ASUS Virtual Video Capture Device Driver ASUSTeK Computer Inc.-Support-

Rt64win7.sys - Realtek Ethernet driver Realtek

supersafer64.sys - Unistall this software completely; it is obsolete. If there is a Win 7 compatible version, you can install that.

I hope this helps you.

 

[steve-pressman]

Many Thanks Carl have updated accordingly Hopefully all will be ok now.


Steve

 

[CarlTR6]

Glad to hear it! I, too, hope all will be well. Did you find an update for Rt64win7.sys? I am working another BSOD and the OP says he cannot find an update for it.

 

[steve-pressman]

Glad to hear it! I, too, hope all will be well. Did you find an update for Rt64win7.sys? I am working another BSOD and the OP says he cannot find an update for it.

I found an update only at my motherboards updates site if that helps.

It is here if it helps you

http://dl.dropbox.com/u/11052937/motherboard_driver_lan_realtek_8111_w7.exe

Steve

 

[CarlTR6]

Yes, that helps greatly. Thanks, Steve.

 

[steve-pressman]

Your most welcome


Steve

 

[steve-pressman]

Had a couple more BSOD's

Hi guys had a couple more BDOD's can you have a look please for me.

Thanks


Steve

 

[CarlTR6]

Steve, both of today's dumps are error code 24 and indicate memory corruption.

Error code 24, NTFS_FILE_SYSTEM - usual causes are Disk corruption, insufficient physical memory, Device driver, Indexing, Resident antivirus, backup, defrag programs, Disk/Drive failing/failure.

I still see Kaspersky installed on your system. You are going to have to uninstall it using the removal tool: Info > Tool. Kaspersky is a know cause of BSOD's on some Win 7 systems. Once you get your system running smoothly, you can try Kaspersky again; but I do not recommend doing so. Make sure Windows Firewall is turned on.

I see you have updated some drivers; but I still see some outdated drivers. Outdated drivers can cause memory corruption, especially drivers dated 2008 and earlier.

adfs.SYS Mon Nov 03 11:48:14 2008

gdrv.sys Thu Mar 12 23:22:29 2009

GVTDrv64.sys Tue Sep 05 03:10:02 2006

pssdk42.sys Tue Jun 23 08:11:57 2009

PxHlpa64.sys Tue Jun 23 19:16:35 2009

Update these drivers, especially the two in red font. If you need help with this, please ask.

After you uninstall Kaspersky and update your drivers, reboot. Run your system. If you get another BSOD, then let's do some hardware testing.

Run CHKDSK /R /F from an elevated (Run as adminstrator) Command Prompt. Please do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Windows 7) (winlogon for XP).

Copy/paste the results into your next post.

Next, test your RAM. This test will take while. Follow the instructions in Jonathan Kings tutorial: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html. Any errors will show up in red. Please post your results.

 

[steve-pressman]

Thx Carl, can you assist me in finding the drivers please


Steve

 

[Tews]

Here ya go ...

adfs.SYS Mon Nov 03 11:48:14 2008 ... Adobe File System Driver ... Adobe

gdrv.sys Thu Mar 12 23:22:29 2009 ... GIGABYTE Tools ...Windows Update - Uncertain if this is a Windows file as it's not present in all my installations

GVTDrv64.sys Tue Sep 05 03:10:02 2006 ... Gigabyte EasyTune6 driver http://www.gigabyte.us/Support/Motherboard/Utility_List.aspx

pssdk42.sys Tue Jun 23 08:11:57 2009 ... I was unable to find out anything on this file...

PxHlpa64.sys Tue Jun 23 19:16:35 2009 ... Sonic CD/DVD driver (used by many different CD/DVD programs) .... Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished... http://www.carrona.org/pxhelp20.html

 

[CarlTR6]

Thank you, Tews; I appreciate it.

@Steve: You can try to update that Adobe driver or uninstall your Adobe software and install the latest version. That should take care of the driver and you will have the latest version(s) of the software.

pssdk42.sys - Packet Sniffer SDK, microOLAP Technologies LTD. "a part of the application because users wanted to be able to distinguish local and Internet traffic, which is not possible without a network driver" - SoftPerfect Research Forum :: NetWorx :: Why pssdk42.sys?. From what I can find, this driver acts as network filter driver and is designed for Vista, not Win 7. I recommend uninstalling this software or running it in the compatibility mode. It may well be interfering with Win 7. http://www.sevenforums.com/tutorials/316-compatibility-mode.html

Don't neglect to uninstall Kasperky, at least while you are troubleshooting. You want to eliminate every potential cause of crashes during troubleshooting. And Kaspersky is definitely a known cause.