Help with Bluescreen please.

Tropicaluser · Apr 26, 2010

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: FFFFFA80498B2F4E
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF80002A877C4

Having this problem. I tried to search how to fix it and I keep getting the ''uninstall drivers because 1 is missing ect ect'' Found one that had an exclamation mark in the other devices -->unknown device.

I uninstall it restart to try and install it but its unknown and I have no idea what it is.
Thinking it may be something about audio perhaps? since my audio isn't working atm after trying to fix the problem for the 12th time since yesterday so idk.

Also I ran Avast, adware scans and even made a system restore which now thinking about it won't do anything.

So I don't have an idea what to do anymore can someone help please?

zigzag3143 · Apr 26, 2010

Tropicaluser said:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: FFFFFA80498B2F4E
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF80002A877C4

Having this problem. I tried to search how to fix it and I keep getting the ''uninstall drivers because 1 is missing ect ect'' Found one that had an exclamation mark in the other devices -->unknown device.

I uninstall it restart to try and install it but its unknown and I have no idea what it is.
Thinking it may be something about audio perhaps? since my audio isn't working atm after trying to fix the problem for the 12th time since yesterday so idk.

Also I ran Avast, adware scans and even made a system restore which now thinking about it won't do anything.

So I don't have an idea what to do anymore can someone help please?

Sorry but the uploaded dmp files are corrupt. You need to upload them again

Ken

Tropicaluser · Apr 26, 2010

Ok here they are again do I need to do somthing to them? I just upload them again from my documents idk what else I could do other than try and upload them directly from the original folder from C: ?

Tropicaluser · Apr 26, 2010

Ok here they are from the original folder.

whs · Apr 26, 2010

Bug Check 0xA: IRQL_NOT_LESS_OR_EQUAL

Jonathan_King · Apr 26, 2010

Your problem is that you are running both AVG and Avast. Uninstall them both, and run their respective uninstallers.

http://www.sevenforums.com/tutorials/78961-av-uninstallers.html

Then download and install Microsoft Security Essentials.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\042510-28906-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a53000 PsLoadedModuleList = 0xfffff800`02c90e50
Debug session time: Sun Apr 25 23:44:45.687 2010 (GMT-4)
System Uptime: 0 days 0:00:51.686
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {fffff80062c531d8, 2, 0, fffff80002bf78ed}

Unable to load image \??\C:\Windows\system32\drivers\aswMonFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
[COLOR=Red]Probably caused by : aswMonFlt.sys ( aswMonFlt+13ef )[/COLOR]

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: fffff80062c531d8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80002bf78ed, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExAllocatePoolWithTag+51d
fffff800`02bf78ed 4c8b4908        mov     r9,qword ptr [rcx+8]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  [COLOR=Red]avgfws9.exe[/COLOR]

TRAP_FRAME:  fffff880099e1c90 -- (.trap 0xfffff880099e1c90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff80062c531d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002bf78ed rsp=fffff880099e1e20 rbp=fffff80002c52880
 r8=0000000000000000  r9=0000000000000000 r10=fffff80002c52888
r11=000000000000042b r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!ExAllocatePoolWithTag+0x51d:
fffff800`02bf78ed 4c8b4908        mov     r9,qword ptr [rcx+8] ds:744e:fffff800`62c531d8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ac4469 to fffff80002ac4f00

STACK_TEXT:  
fffff880`099e1b48 fffff800`02ac4469 : 00000000`0000000a fffff800`62c531d8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`099e1b50 fffff800`02ac30e0 : 00000000`00000000 fffff800`02c531d0 fffff880`099e1d40 fffff880`00e6c32e : nt!KiBugCheckDispatch+0x69
fffff880`099e1c90 fffff800`02bf78ed : 00000000`00000000 fffffa80`09c809c0 fffff880`099e1e00 00000000`00000030 : nt!KiPageFault+0x260
fffff880`099e1e20 fffff880`0685a3ef : 00000000`00000000 00000000`00000000 00000000`6e4d7641 00000000`00000000 : nt!ExAllocatePoolWithTag+0x51d
fffff880`099e1f10 00000000`00000000 : 00000000`00000000 00000000`6e4d7641 00000000`00000000 00000000`00000001 : aswMonFlt+0x13ef


STACK_COMMAND:  kb

FOLLOWUP_IP: 
aswMonFlt+13ef
fffff880`0685a3ef ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  aswMonFlt+13ef

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswMonFlt

IMAGE_NAME:  aswMonFlt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4bc5eddd

FAILURE_BUCKET_ID:  X64_0xC5_2_aswMonFlt+13ef

BUCKET_ID:  X64_0xC5_2_aswMonFlt+13ef

Followup: MachineOwner
---------

6: kd> lmn
start             end                 module name
fffff800`00b99000 fffff800`00ba3000   kdcom    kdcom.dll   
fffff800`02a0a000 fffff800`02a53000   hal      hal.dll     
fffff800`02a53000 fffff800`03030000   nt       ntkrnlmp.exe
fffff880`00c00000 fffff880`00c0e000   vga      vga.sys     
fffff880`00c17000 fffff880`00c5b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll
fffff880`00c5b000 fffff880`00c6f000   PSHED    PSHED.dll   
fffff880`00c6f000 fffff880`00ccd000   CLFS     CLFS.SYS    
fffff880`00ccd000 fffff880`00d8d000   CI       CI.dll      
fffff880`00d8d000 fffff880`00da1000   fileinfo fileinfo.sys
fffff880`00da1000 fffff880`00db6000   Lbd      Lbd.sys     
fffff880`00dc9000 fffff880`00df3000   cdrom    cdrom.sys   
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS 
fffff880`00e10000 fffff880`00e2a000   mountmgr mountmgr.sys
fffff880`00e2a000 fffff880`00e33000   atapi    atapi.sys   
fffff880`00e33000 fffff880`00e5d000   ataport  ataport.SYS 
fffff880`00e5d000 fffff880`00e68000   amdxata  amdxata.sys 
fffff880`00e68000 fffff880`00eb4000   fltmgr   fltmgr.sys  
fffff880`00ebc000 fffff880`00f60000   Wdf01000 Wdf01000.sys
fffff880`00f60000 fffff880`00f6f000   WDFLDR   WDFLDR.SYS  
fffff880`00f6f000 fffff880`00fa2000   pci      pci.sys     
fffff880`00fa2000 fffff880`00ffe000   volmgrx  volmgrx.sys 
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys    
fffff880`01057000 fffff880`01061000   msisadrv msisadrv.sys
fffff880`01061000 fffff880`0106e000   vdrvroot vdrvroot.sys
fffff880`0106e000 fffff880`01075000   pciide   pciide.sys  
fffff880`01075000 fffff880`0119b000   sptd     sptd.sys    
fffff880`0119b000 fffff880`011a4000   WMILIB   WMILIB.SYS  
fffff880`011a4000 fffff880`011d3000   SCSIPORT SCSIPORT.SYS
fffff880`011d3000 fffff880`011e8000   partmgr  partmgr.sys 
fffff880`011e8000 fffff880`011fd000   volmgr   volmgr.sys  
fffff880`01200000 fffff880`01230000   CLASSPNP CLASSPNP.SYS
fffff880`01230000 fffff880`01237000   Beep     Beep.SYS    
fffff880`01239000 fffff880`013dc000   Ntfs     Ntfs.sys    
fffff880`013f3000 fffff880`013fc000   Null     Null.SYS    
fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys  
fffff880`0143a000 fffff880`01450000   disk     disk.sys    
[COLOR=Red]fffff880`01450000 fffff880`0145c0c0   avgrkx64 avgrkx64.sys[/COLOR]
fffff880`0145d000 fffff880`014bb000   msrpc    msrpc.sys   
fffff880`014bb000 fffff880`014d5000   ksecdd   ksecdd.sys  
fffff880`014d5000 fffff880`01548000   cng      cng.sys     
fffff880`01548000 fffff880`01559000   pcw      pcw.sys     
fffff880`01559000 fffff880`01563000   Fs_Rec   Fs_Rec.sys  
fffff880`01563000 fffff880`015af000   volsnap  volsnap.sys 
fffff880`015af000 fffff880`015e9000   rdyboost rdyboost.sys
fffff880`015e9000 fffff880`015f3000   AVGIDSwa AVGIDSwa.sys
fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys
fffff880`0164b000 fffff880`0173d000   ndis     ndis.sys    
fffff880`0173d000 fffff880`0179d000   NETIO    NETIO.SYS   
fffff880`0179d000 fffff880`017c8000   ksecpkg  ksecpkg.sys 
fffff880`017c8000 fffff880`017d8000   vmstorfl vmstorfl.sys
fffff880`017d8000 fffff880`017e0000   spldr    spldr.sys   
fffff880`017e0000 fffff880`017f2000   mup      mup.sys     
fffff880`017f2000 fffff880`017fb000   hwpolicy hwpolicy.sys
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys   
fffff880`02c0e000 fffff880`02c33000   VIDEOPRT VIDEOPRT.SYS
fffff880`02c33000 fffff880`02c43000   watchdog watchdog.sys
fffff880`02c43000 fffff880`02c4c000   RDPCDD   RDPCDD.sys  
fffff880`02c4c000 fffff880`02c55000   rdpencdd rdpencdd.sys
fffff880`02c55000 fffff880`02c5e000   rdprefmp rdprefmp.sys
fffff880`02c5e000 fffff880`02c69000   Msfs     Msfs.SYS    
fffff880`02c69000 fffff880`02c7a000   Npfs     Npfs.SYS    
[COLOR=Red]fffff880`02c7a000 fffff880`02c85000   avgfwd6a avgfwd6a.sys[/COLOR]
fffff880`02c85000 fffff880`02ca3000   tdx      tdx.sys     
fffff880`02ca3000 fffff880`02cb0000   TDI      TDI.SYS     
fffff880`02cb0000 fffff880`02cc0000   aswTdi   aswTdi.SYS  
fffff880`02cc0000 fffff880`02d10000   avgtdia  avgtdia.sys 
fffff880`02d10000 fffff880`02d55000   netbt    netbt.sys   
fffff880`02d55000 fffff880`02ddf000   afd      afd.sys     
fffff880`02ddf000 fffff880`02de9000   aswRdr   aswRdr.SYS  
fffff880`02de9000 fffff880`02df2000   wfplwf   wfplwf.sys  
fffff880`03c01000 fffff880`03c27000   pacer    pacer.sys   
fffff880`03c27000 fffff880`03c36000   netbios  netbios.sys 
fffff880`03c36000 fffff880`03c51000   wanarp   wanarp.sys  
fffff880`03c51000 fffff880`03c65000   termdd   termdd.sys  
fffff880`03c65000 fffff880`03cb6000   rdbss    rdbss.sys   
fffff880`03cb6000 fffff880`03cc2000   nsiproxy nsiproxy.sys
fffff880`03cc2000 fffff880`03ccd000   mssmbios mssmbios.sys
fffff880`03ccd000 fffff880`03cdc000   discache discache.sys
fffff880`03cdc000 fffff880`03d5f000   csc      csc.sys     
fffff880`03d5f000 fffff880`03d7d000   dfsc     dfsc.sys    
fffff880`03d7d000 fffff880`03d8e000   blbdrive blbdrive.sys
[COLOR=Red]fffff880`03d8e000 fffff880`03d95080   avgmfx64 avgmfx64.sys
fffff880`03d96000 fffff880`03ddd000   avgldx64 avgldx64.sys[/COLOR]
fffff880`03ddd000 fffff880`03e00000   aswSP    aswSP.SYS   
fffff880`03e00000 fffff880`03e16000   AgileVpn AgileVpn.sys
fffff880`03e17000 fffff880`03e3d000   tunnel   tunnel.sys  
fffff880`03e3d000 fffff880`03e53000   intelppm intelppm.sys
fffff880`03e53000 fffff880`03f47000   dxgkrnl  dxgkrnl.sys 
fffff880`03f47000 fffff880`03f79000   Rt64win7 Rt64win7.sys
fffff880`03f79000 fffff880`03fb7000   1394ohci 1394ohci.sys
fffff880`03fb7000 fffff880`03ffc000   a1eer9zt a1eer9zt.SYS
fffff880`04800000 fffff880`04810000   CompositeBus CompositeBus.sys
fffff880`04818000 fffff880`0531fb00   nvlddmkm nvlddmkm.sys
fffff880`05320000 fffff880`05366000   dxgmms1  dxgmms1.sys 
fffff880`05366000 fffff880`05373000   usbuhci  usbuhci.sys 
fffff880`05373000 fffff880`053c9000   USBPORT  USBPORT.SYS 
fffff880`053c9000 fffff880`053da000   usbehci  usbehci.sys 
fffff880`053da000 fffff880`053fe000   HDAudBus HDAudBus.sys
fffff880`05600000 fffff880`0565a000   usbhub   usbhub.sys  
fffff880`0565a000 fffff880`0566f000   NDProxy  NDProxy.SYS 
fffff880`0566f000 fffff880`05690000   WudfPf   WudfPf.sys  
fffff880`05690000 fffff880`056a8000   rspndr   rspndr.sys  
fffff880`056b0000 fffff880`056d4000   rasl2tp  rasl2tp.sys 
fffff880`056d4000 fffff880`056e0000   ndistapi ndistapi.sys
fffff880`056e0000 fffff880`0570f000   ndiswan  ndiswan.sys 
fffff880`0570f000 fffff880`0572a000   raspppoe raspppoe.sys
fffff880`0572a000 fffff880`0574b000   raspptp  raspptp.sys 
fffff880`0574b000 fffff880`05765000   rassstp  rassstp.sys 
fffff880`05765000 fffff880`05770000   rdpbus   rdpbus.sys  
fffff880`05770000 fffff880`0577f000   kbdclass kbdclass.sys
fffff880`0577f000 fffff880`0578e000   mouclass mouclass.sys
fffff880`0578e000 fffff880`0578f480   swenum   swenum.sys  
fffff880`05790000 fffff880`057d3000   ks       ks.sys      
fffff880`057d3000 fffff880`057e5000   umbus    umbus.sys   
[COLOR=Red]fffff880`057e5000 fffff880`057f1000   AVGIDSFilter AVGIDSFilter.sys[/COLOR]
fffff880`06800000 fffff880`0680e000   crashdmp crashdmp.sys
fffff880`0680e000 fffff880`0681a000   dump_dumpata dump_dumpata.sys
fffff880`0681a000 fffff880`06823000   dump_atapi dump_atapi.sys
fffff880`06823000 fffff880`06836000   dump_dumpfve dump_dumpfve.sys
fffff880`06836000 fffff880`06859000   luafv    luafv.sys   
[COLOR=Red]fffff880`06859000 fffff880`06874000   aswMonFlt aswMonFlt.sys
fffff880`06874000 fffff880`0687d000   aswFsBlk aswFsBlk.SYS[/COLOR]
fffff880`0687d000 fffff880`06892000   lltdio   lltdio.sys  
fffff880`06896000 fffff880`068f2000   HdAudio  HdAudio.sys 
fffff880`068f2000 fffff880`0692f000   portcls  portcls.sys 
fffff880`0692f000 fffff880`06951000   drmk     drmk.sys    
fffff880`06951000 fffff880`06956200   ksthunk  ksthunk.sys 
fffff880`06957000 fffff880`06963000   Dxapi    Dxapi.sys   
fffff880`06963000 fffff880`06980000   usbccgp  usbccgp.sys 
fffff880`06980000 fffff880`06981f00   USBD     USBD.SYS    
fffff880`06982000 fffff880`06990000   hidusb   hidusb.sys  
fffff880`06990000 fffff880`069a9000   HIDCLASS HIDCLASS.SYS
fffff880`069a9000 fffff880`069b1080   HIDPARSE HIDPARSE.SYS
fffff880`069b2000 fffff880`069c0000   kbdhid   kbdhid.sys  
fffff880`069c0000 fffff880`069cd000   mouhid   mouhid.sys  
fffff880`069cd000 fffff880`069db000   monitor  monitor.sys 
fffff880`069db000 fffff880`069f8000   cdfs     cdfs.sys    
[COLOR=Red]fffff880`08812000 fffff880`0883f000   AVGIDSDriver AVGIDSDriver.sys[/COLOR]
fffff880`0883f000 fffff880`08907000   HTTP     HTTP.sys    
fffff880`08907000 fffff880`08925000   bowser   bowser.sys  
fffff880`08925000 fffff880`0893d000   mpsdrv   mpsdrv.sys  
fffff880`0893d000 fffff880`08969000   mrxsmb   mrxsmb.sys  
fffff880`08969000 fffff880`089b6000   mrxsmb10 mrxsmb10.sys
fffff880`089b6000 fffff880`089d9000   mrxsmb20 mrxsmb20.sys
fffff880`08c00000 fffff880`08c69000   srv2     srv2.sys    
fffff880`08cde000 fffff880`08d84000   peauth   peauth.sys  
fffff880`08d84000 fffff880`08d8f000   secdrv   secdrv.SYS  
fffff880`08d8f000 fffff880`08dbc000   srvnet   srvnet.sys  
fffff880`08dbc000 fffff880`08dce000   tcpipreg tcpipreg.sys
fffff880`09208000 fffff880`092a0000   srv      srv.sys     
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys  
fffff960`004d0000 fffff960`004da000   TSDDD    TSDDD.dll   
fffff960`006a0000 fffff960`006c7000   cdd      cdd.dll     

Unloaded modules:
fffff880`013dc000 fffff880`013ea000   crashdmp.sys
fffff880`015f3000 fffff880`015ff000   dump_ataport
fffff880`013ea000 fffff880`013f3000   dump_atapi.s
fffff880`00db6000 fffff880`00dc9000   dump_dumpfve

For anyone else reading this, the zip files he attached above are actually dmp files. Just rename the extension.

zigzag3143 · Apr 26, 2010

Tropicaluser said:
Ok here they are again do I need to do somthing to them? I just upload them again from my documents idk what else I could do other than try and upload them directly from the original folder from C: ?

Still no good. see picture

Tropicaluser · Apr 26, 2010

Jonathan_King said:

Your problem is that you are running both AVG and Avast. Uninstall them both, and run their respective uninstallers.

http://www.sevenforums.com/tutorials/78961-av-uninstallers.html

Then download and install Microsoft Security Essentials.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\042510-28906-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a53000 PsLoadedModuleList = 0xfffff800`02c90e50
Debug session time: Sun Apr 25 23:44:45.687 2010 (GMT-4)
System Uptime: 0 days 0:00:51.686
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {fffff80062c531d8, 2, 0, fffff80002bf78ed}

Unable to load image \??\C:\Windows\system32\drivers\aswMonFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
[COLOR=Red]Probably caused by : aswMonFlt.sys ( aswMonFlt+13ef )[/COLOR]

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: fffff80062c531d8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80002bf78ed, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExAllocatePoolWithTag+51d
fffff800`02bf78ed 4c8b4908        mov     r9,qword ptr [rcx+8]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  [COLOR=Red]avgfws9.exe[/COLOR]

TRAP_FRAME:  fffff880099e1c90 -- (.trap 0xfffff880099e1c90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff80062c531d0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002bf78ed rsp=fffff880099e1e20 rbp=fffff80002c52880
 r8=0000000000000000  r9=0000000000000000 r10=fffff80002c52888
r11=000000000000042b r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!ExAllocatePoolWithTag+0x51d:
fffff800`02bf78ed 4c8b4908        mov     r9,qword ptr [rcx+8] ds:744e:fffff800`62c531d8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ac4469 to fffff80002ac4f00

STACK_TEXT:  
fffff880`099e1b48 fffff800`02ac4469 : 00000000`0000000a fffff800`62c531d8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`099e1b50 fffff800`02ac30e0 : 00000000`00000000 fffff800`02c531d0 fffff880`099e1d40 fffff880`00e6c32e : nt!KiBugCheckDispatch+0x69
fffff880`099e1c90 fffff800`02bf78ed : 00000000`00000000 fffffa80`09c809c0 fffff880`099e1e00 00000000`00000030 : nt!KiPageFault+0x260
fffff880`099e1e20 fffff880`0685a3ef : 00000000`00000000 00000000`00000000 00000000`6e4d7641 00000000`00000000 : nt!ExAllocatePoolWithTag+0x51d
fffff880`099e1f10 00000000`00000000 : 00000000`00000000 00000000`6e4d7641 00000000`00000000 00000000`00000001 : aswMonFlt+0x13ef


STACK_COMMAND:  kb

FOLLOWUP_IP: 
aswMonFlt+13ef
fffff880`0685a3ef ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  aswMonFlt+13ef

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswMonFlt

IMAGE_NAME:  aswMonFlt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4bc5eddd

FAILURE_BUCKET_ID:  X64_0xC5_2_aswMonFlt+13ef

BUCKET_ID:  X64_0xC5_2_aswMonFlt+13ef

Followup: MachineOwner
---------

6: kd> lmn
start             end                 module name
fffff800`00b99000 fffff800`00ba3000   kdcom    kdcom.dll   
fffff800`02a0a000 fffff800`02a53000   hal      hal.dll     
fffff800`02a53000 fffff800`03030000   nt       ntkrnlmp.exe
fffff880`00c00000 fffff880`00c0e000   vga      vga.sys     
fffff880`00c17000 fffff880`00c5b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll
fffff880`00c5b000 fffff880`00c6f000   PSHED    PSHED.dll   
fffff880`00c6f000 fffff880`00ccd000   CLFS     CLFS.SYS    
fffff880`00ccd000 fffff880`00d8d000   CI       CI.dll      
fffff880`00d8d000 fffff880`00da1000   fileinfo fileinfo.sys
fffff880`00da1000 fffff880`00db6000   Lbd      Lbd.sys     
fffff880`00dc9000 fffff880`00df3000   cdrom    cdrom.sys   
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS 
fffff880`00e10000 fffff880`00e2a000   mountmgr mountmgr.sys
fffff880`00e2a000 fffff880`00e33000   atapi    atapi.sys   
fffff880`00e33000 fffff880`00e5d000   ataport  ataport.SYS 
fffff880`00e5d000 fffff880`00e68000   amdxata  amdxata.sys 
fffff880`00e68000 fffff880`00eb4000   fltmgr   fltmgr.sys  
fffff880`00ebc000 fffff880`00f60000   Wdf01000 Wdf01000.sys
fffff880`00f60000 fffff880`00f6f000   WDFLDR   WDFLDR.SYS  
fffff880`00f6f000 fffff880`00fa2000   pci      pci.sys     
fffff880`00fa2000 fffff880`00ffe000   volmgrx  volmgrx.sys 
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys    
fffff880`01057000 fffff880`01061000   msisadrv msisadrv.sys
fffff880`01061000 fffff880`0106e000   vdrvroot vdrvroot.sys
fffff880`0106e000 fffff880`01075000   pciide   pciide.sys  
fffff880`01075000 fffff880`0119b000   sptd     sptd.sys    
fffff880`0119b000 fffff880`011a4000   WMILIB   WMILIB.SYS  
fffff880`011a4000 fffff880`011d3000   SCSIPORT SCSIPORT.SYS
fffff880`011d3000 fffff880`011e8000   partmgr  partmgr.sys 
fffff880`011e8000 fffff880`011fd000   volmgr   volmgr.sys  
fffff880`01200000 fffff880`01230000   CLASSPNP CLASSPNP.SYS
fffff880`01230000 fffff880`01237000   Beep     Beep.SYS    
fffff880`01239000 fffff880`013dc000   Ntfs     Ntfs.sys    
fffff880`013f3000 fffff880`013fc000   Null     Null.SYS    
fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys  
fffff880`0143a000 fffff880`01450000   disk     disk.sys    
[COLOR=Red]fffff880`01450000 fffff880`0145c0c0   avgrkx64 avgrkx64.sys[/COLOR]
fffff880`0145d000 fffff880`014bb000   msrpc    msrpc.sys   
fffff880`014bb000 fffff880`014d5000   ksecdd   ksecdd.sys  
fffff880`014d5000 fffff880`01548000   cng      cng.sys     
fffff880`01548000 fffff880`01559000   pcw      pcw.sys     
fffff880`01559000 fffff880`01563000   Fs_Rec   Fs_Rec.sys  
fffff880`01563000 fffff880`015af000   volsnap  volsnap.sys 
fffff880`015af000 fffff880`015e9000   rdyboost rdyboost.sys
fffff880`015e9000 fffff880`015f3000   AVGIDSwa AVGIDSwa.sys
fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys
fffff880`0164b000 fffff880`0173d000   ndis     ndis.sys    
fffff880`0173d000 fffff880`0179d000   NETIO    NETIO.SYS   
fffff880`0179d000 fffff880`017c8000   ksecpkg  ksecpkg.sys 
fffff880`017c8000 fffff880`017d8000   vmstorfl vmstorfl.sys
fffff880`017d8000 fffff880`017e0000   spldr    spldr.sys   
fffff880`017e0000 fffff880`017f2000   mup      mup.sys     
fffff880`017f2000 fffff880`017fb000   hwpolicy hwpolicy.sys
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys   
fffff880`02c0e000 fffff880`02c33000   VIDEOPRT VIDEOPRT.SYS
fffff880`02c33000 fffff880`02c43000   watchdog watchdog.sys
fffff880`02c43000 fffff880`02c4c000   RDPCDD   RDPCDD.sys  
fffff880`02c4c000 fffff880`02c55000   rdpencdd rdpencdd.sys
fffff880`02c55000 fffff880`02c5e000   rdprefmp rdprefmp.sys
fffff880`02c5e000 fffff880`02c69000   Msfs     Msfs.SYS    
fffff880`02c69000 fffff880`02c7a000   Npfs     Npfs.SYS    
[COLOR=Red]fffff880`02c7a000 fffff880`02c85000   avgfwd6a avgfwd6a.sys[/COLOR]
fffff880`02c85000 fffff880`02ca3000   tdx      tdx.sys     
fffff880`02ca3000 fffff880`02cb0000   TDI      TDI.SYS     
fffff880`02cb0000 fffff880`02cc0000   aswTdi   aswTdi.SYS  
fffff880`02cc0000 fffff880`02d10000   avgtdia  avgtdia.sys 
fffff880`02d10000 fffff880`02d55000   netbt    netbt.sys   
fffff880`02d55000 fffff880`02ddf000   afd      afd.sys     
fffff880`02ddf000 fffff880`02de9000   aswRdr   aswRdr.SYS  
fffff880`02de9000 fffff880`02df2000   wfplwf   wfplwf.sys  
fffff880`03c01000 fffff880`03c27000   pacer    pacer.sys   
fffff880`03c27000 fffff880`03c36000   netbios  netbios.sys 
fffff880`03c36000 fffff880`03c51000   wanarp   wanarp.sys  
fffff880`03c51000 fffff880`03c65000   termdd   termdd.sys  
fffff880`03c65000 fffff880`03cb6000   rdbss    rdbss.sys   
fffff880`03cb6000 fffff880`03cc2000   nsiproxy nsiproxy.sys
fffff880`03cc2000 fffff880`03ccd000   mssmbios mssmbios.sys
fffff880`03ccd000 fffff880`03cdc000   discache discache.sys
fffff880`03cdc000 fffff880`03d5f000   csc      csc.sys     
fffff880`03d5f000 fffff880`03d7d000   dfsc     dfsc.sys    
fffff880`03d7d000 fffff880`03d8e000   blbdrive blbdrive.sys
[COLOR=Red]fffff880`03d8e000 fffff880`03d95080   avgmfx64 avgmfx64.sys
fffff880`03d96000 fffff880`03ddd000   avgldx64 avgldx64.sys[/COLOR]
fffff880`03ddd000 fffff880`03e00000   aswSP    aswSP.SYS   
fffff880`03e00000 fffff880`03e16000   AgileVpn AgileVpn.sys
fffff880`03e17000 fffff880`03e3d000   tunnel   tunnel.sys  
fffff880`03e3d000 fffff880`03e53000   intelppm intelppm.sys
fffff880`03e53000 fffff880`03f47000   dxgkrnl  dxgkrnl.sys 
fffff880`03f47000 fffff880`03f79000   Rt64win7 Rt64win7.sys
fffff880`03f79000 fffff880`03fb7000   1394ohci 1394ohci.sys
fffff880`03fb7000 fffff880`03ffc000   a1eer9zt a1eer9zt.SYS
fffff880`04800000 fffff880`04810000   CompositeBus CompositeBus.sys
fffff880`04818000 fffff880`0531fb00   nvlddmkm nvlddmkm.sys
fffff880`05320000 fffff880`05366000   dxgmms1  dxgmms1.sys 
fffff880`05366000 fffff880`05373000   usbuhci  usbuhci.sys 
fffff880`05373000 fffff880`053c9000   USBPORT  USBPORT.SYS 
fffff880`053c9000 fffff880`053da000   usbehci  usbehci.sys 
fffff880`053da000 fffff880`053fe000   HDAudBus HDAudBus.sys
fffff880`05600000 fffff880`0565a000   usbhub   usbhub.sys  
fffff880`0565a000 fffff880`0566f000   NDProxy  NDProxy.SYS 
fffff880`0566f000 fffff880`05690000   WudfPf   WudfPf.sys  
fffff880`05690000 fffff880`056a8000   rspndr   rspndr.sys  
fffff880`056b0000 fffff880`056d4000   rasl2tp  rasl2tp.sys 
fffff880`056d4000 fffff880`056e0000   ndistapi ndistapi.sys
fffff880`056e0000 fffff880`0570f000   ndiswan  ndiswan.sys 
fffff880`0570f000 fffff880`0572a000   raspppoe raspppoe.sys
fffff880`0572a000 fffff880`0574b000   raspptp  raspptp.sys 
fffff880`0574b000 fffff880`05765000   rassstp  rassstp.sys 
fffff880`05765000 fffff880`05770000   rdpbus   rdpbus.sys  
fffff880`05770000 fffff880`0577f000   kbdclass kbdclass.sys
fffff880`0577f000 fffff880`0578e000   mouclass mouclass.sys
fffff880`0578e000 fffff880`0578f480   swenum   swenum.sys  
fffff880`05790000 fffff880`057d3000   ks       ks.sys      
fffff880`057d3000 fffff880`057e5000   umbus    umbus.sys   
[COLOR=Red]fffff880`057e5000 fffff880`057f1000   AVGIDSFilter AVGIDSFilter.sys[/COLOR]
fffff880`06800000 fffff880`0680e000   crashdmp crashdmp.sys
fffff880`0680e000 fffff880`0681a000   dump_dumpata dump_dumpata.sys
fffff880`0681a000 fffff880`06823000   dump_atapi dump_atapi.sys
fffff880`06823000 fffff880`06836000   dump_dumpfve dump_dumpfve.sys
fffff880`06836000 fffff880`06859000   luafv    luafv.sys   
[COLOR=Red]fffff880`06859000 fffff880`06874000   aswMonFlt aswMonFlt.sys
fffff880`06874000 fffff880`0687d000   aswFsBlk aswFsBlk.SYS[/COLOR]
fffff880`0687d000 fffff880`06892000   lltdio   lltdio.sys  
fffff880`06896000 fffff880`068f2000   HdAudio  HdAudio.sys 
fffff880`068f2000 fffff880`0692f000   portcls  portcls.sys 
fffff880`0692f000 fffff880`06951000   drmk     drmk.sys    
fffff880`06951000 fffff880`06956200   ksthunk  ksthunk.sys 
fffff880`06957000 fffff880`06963000   Dxapi    Dxapi.sys   
fffff880`06963000 fffff880`06980000   usbccgp  usbccgp.sys 
fffff880`06980000 fffff880`06981f00   USBD     USBD.SYS    
fffff880`06982000 fffff880`06990000   hidusb   hidusb.sys  
fffff880`06990000 fffff880`069a9000   HIDCLASS HIDCLASS.SYS
fffff880`069a9000 fffff880`069b1080   HIDPARSE HIDPARSE.SYS
fffff880`069b2000 fffff880`069c0000   kbdhid   kbdhid.sys  
fffff880`069c0000 fffff880`069cd000   mouhid   mouhid.sys  
fffff880`069cd000 fffff880`069db000   monitor  monitor.sys 
fffff880`069db000 fffff880`069f8000   cdfs     cdfs.sys    
[COLOR=Red]fffff880`08812000 fffff880`0883f000   AVGIDSDriver AVGIDSDriver.sys[/COLOR]
fffff880`0883f000 fffff880`08907000   HTTP     HTTP.sys    
fffff880`08907000 fffff880`08925000   bowser   bowser.sys  
fffff880`08925000 fffff880`0893d000   mpsdrv   mpsdrv.sys  
fffff880`0893d000 fffff880`08969000   mrxsmb   mrxsmb.sys  
fffff880`08969000 fffff880`089b6000   mrxsmb10 mrxsmb10.sys
fffff880`089b6000 fffff880`089d9000   mrxsmb20 mrxsmb20.sys
fffff880`08c00000 fffff880`08c69000   srv2     srv2.sys    
fffff880`08cde000 fffff880`08d84000   peauth   peauth.sys  
fffff880`08d84000 fffff880`08d8f000   secdrv   secdrv.SYS  
fffff880`08d8f000 fffff880`08dbc000   srvnet   srvnet.sys  
fffff880`08dbc000 fffff880`08dce000   tcpipreg tcpipreg.sys
fffff880`09208000 fffff880`092a0000   srv      srv.sys     
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys  
fffff960`004d0000 fffff960`004da000   TSDDD    TSDDD.dll   
fffff960`006a0000 fffff960`006c7000   cdd      cdd.dll     

Unloaded modules:
fffff880`013dc000 fffff880`013ea000   crashdmp.sys
fffff880`015f3000 fffff880`015ff000   dump_ataport
fffff880`013ea000 fffff880`013f3000   dump_atapi.s
fffff880`00db6000 fffff880`00dc9000   dump_dumpfve

For anyone else reading this, the zip files he attached above are actually dmp files. Just rename the extension.

Ok going to do that but isn't just uninstalling one of them for instance AVG just the same? I'm uninstalling 2 AV to install another one? whats the main problem here?

Jonathan_King · Apr 26, 2010

AVG is known to cause BSODs, and the dmp points to Avira as the culprit.

Together, who knows what problems you may have. If you want to find the culprit, you can do some playing around, but if you want to resolve the problem as soon as possible, uninstall them both, and install MSE instead.

Help with Bluescreen please.

Tropicaluser

New member

My Computer

zigzag3143

New member

My Computer

Tropicaluser

New member

My Computer

Tropicaluser

New member

My Computer

whs

New member

My Computer

Jonathan_King

New member

My Computer

zigzag3143

New member

My Computer

Tropicaluser

New member

My Computer

Jonathan_King

New member

My Computer

Similar threads