Solved Random BSOD error 0x0000004e ntoskrnl.exe+7f1c0

[tom564]

Is Windows 7 . . . x64 bit - the original installed OS on the system? windows 7 - an OEM or full retail version? OEM - What is the age of system (hardware)? 6 months - What is the age of OS installation 6 months

For a long time now i have been experiencing stop errors related to ntoskrnl.exe
they are not frequent and occur once every few days.

I would greatly appreciate any help regarding this issue and will be happy to provide any additional information
thanks,
tom

 

[writhziden]

Device Concerns:

NVIDIA High Definition Audio	HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0001	This device is disabled.
NVIDIA High Definition Audio	HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0101	This device is disabled.
VirtualBox Host-Only Ethernet Adapter	ROOT\NET\0000	This device is disabled.
ASUS Bluetooth	USB\VID_0B05&PID_179C\6&DF2EE03&0&7	This device is disabled.
NVIDIA High Definition Audio	HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0201	This device is disabled.
NVIDIA High Definition Audio	HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0301	This device is disabled.
Realtek 8185 Extensible 802.11b/g Wireless Device	PCI\VEN_10EC&DEV_8185&SUBSYS_822510EC&REV_20\5&D93DF5B&0&0800E6	This device is disabled.

Were you aware of the above? If so, please explain your reasoning so we may understand your troubleshooting steps.​

Software Concerns:

You need to update to Kaspersky Internet Security 2012. 2011 may cause instability due to the age of the software.


You have a number of programs running. I would recommend that you http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html leaving only your security software enabled with startup and have services run on startup.

Start Menu\Programs\ASUS\AI Suite II	Public:Start Menu\Programs\ASUS\AI Suite II	Public
Start Menu\Programs\ASUS\Disk Unlocker	Public:Start Menu\Programs\ASUS\Disk Unlocker	Public
Start Menu\Programs\Driver Detective	Public:Start Menu\Programs\Driver Detective	Public

• Recommend removing your ASUS utilities through Start Menu -> Control Panel -> Uninstall a program. They can provide software interfaces with the hardware for overclocking, and even when the overclock is not enabled, that interface can cause instability. They are also not needed for the system to function properly and may reduce system resources.
  
  
• We do not recommend automated driver update software. It often finds drivers for devices similar to but not exactly the same as the hardware actually on the system. This can lead to conflicts and blue screen crashes. If you need help finding driver updates for a certain device, please start a thread in Drivers - Windows 7 Forums instead of using software. Driver updates are not always necessary and some updates can actually decrease system stability rather than increase it, so it is usually better not to update unless a device or its driver is causing problems with the system. If it ain't broke, don't fix it.

Analysis:

It is difficult to find patterns with only one .dmp file. Yours points to memory problems or driver conflicts.

• If you are overclocking any hardware, please stop.
  
  
• Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete (run them an hour before bed each of the next two nights and check before going to sleep that they are still running).
  
     Warning

  Before you proceed with the following, answer these two questions: Are you still under warranty? Does your warranty allow you to open up the machine to check hardware? If you are unsure of the answers to these questions, contact your system manufacturer. :warn:WARNING: The steps that follow can void your warranty!!!
  
  For Part 3: If You Have Errors: If you swap any memory components, follow these steps for ESD safety:
  1. Shut down and turn off your computer.
  2. Unplug all power supplies to the computer (AC Power then battery for laptops, AC power for desktops)
  3. Hold down the power button for 30 seconds to close the circuit and ensure all power drains from components.
  4. Make sure you are grounded by using proper grounding techniques, i.e. work on an anti-static workbench, anti-static desk, or an anti-static pad. Hold something metallic while touching it to the anti-static surface, or use an anti-static wristband to attach to the anti-static material while working. If you do not have an anti-static workbench, desk, or pad, you can use your computer tower/case by finding a metal hold in it, such as a drive bay.
  Once these steps have been followed, it is safe to remove and replace components within your computer.
  
  
• An underlying driver may be incompatible\conflicting with your system. Run Driver Verifier to find any issues. To run Driver Verifier, do the following:
  
  a. Backup your system and user files
  b. Create a system restore point
  c. If you do not have a Windows 7 DVD, Create a system repair disc
  d. In Windows 7:

  • Click the Start Menu
  • Type verifier in Search programs and files (do not hit enter)
  • Right click verifier and click Run as administrator
  • Put a tick in Create custom settings (for code developers) and click next
  • Put a tick in Select individual settings from a full list and click next
  • Set up the individual settings as in the image and click next
    View attachment 218940
  • Put a tick in Select driver names from a list
  • Put a tick next to all non-Microsoft drivers.
  • Click Finish.
  • Restart your computer.

  
  If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using http://www.sevenforums.com/tutorials/700-system-restore.html OPTION TWO.
  
  If you are unable to start Windows with all drivers being verified or if the blue screen crashes fail to create .dmp files, run them in groups of 5 or 10 until you find a group that causes blue screen crashes and stores the blue screen .dmp files.​
  The idea with Verifier is to cause the system to crash, so do the things you normally do that cause crashes. After you have a few crashes, upload the crash reports for us to take a look and try to find patterns.
  
  When you are ready to disable Verifier: Start Menu -> All Programs -> Accessories -> Right click Command Prompt -> Run as administrator -> Type the following command and then Enter:
  verifier /reset​
  -> Restart your computer.

USB Wireless Network Adapter:

It appears you have a USB Wireless Network Adapter. The drivers for it are old and pre-Windows 7. I would advise replacing it with a wireless PCI card that is Windows 7 ready. USB ports do not provide the power necessary for USB wireless network devices to run stable. Couple that with an old driver, and you have a recipe for crashes.​

 

[tom564]

Device Concerns:

NVIDIA High Definition Audio    HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0001    This device is disabled. NVIDIA High Definition Audio    HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0101    This device is disabled. VirtualBox Host-Only Ethernet Adapter    ROOT\NET\0000    This device is disabled. ASUS Bluetooth    USB\VID_0B05&PID_179C\6&DF2EE03&0&7    This device is disabled. NVIDIA High Definition Audio    HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0201    This device is disabled. NVIDIA High Definition Audio    HDAUDIO\FUNC_01&VEN_10DE&DEV_0016&SUBSYS_10DE0101&REV_1001\5&37CB11FF&0&0301    This device is disabled. Realtek 8185 Extensible 802.11b/g Wireless Device    PCI\VEN_10EC&DEV_8185&SUBSYS_

Thank you for the reply, i have uninstalled all of the nividia audio drivers however i do sometimes use the realtek pci card ,does having disabled devices cause problems?

Software Concerns:
oops, i completely overlooked the old version of kaspersky, upgraded now.
I have removed the asus utilities and the driver updater.

Analysis:
i have ran memtest+ and it came up with no errors, but i will use the windows memory diagnostics I will run verifier when windows mem diagnostics has finished .

thanks
tom

 

[tom564]

I have attached another BSOD dump file from when i started up my PC after running the memory diagnostics (did not complete as accidentally pressed esc,but was froze on pass 1 21% for about 20 minutes does that indicate a problem? )

 

[writhziden]

The latest crash still points to memory or drivers. How many passes did you run Memtest86+ for?

Windows Memory Diagnostic 21%:

I am currently running the extended tests to see if I get similar behavior. I do note that it says

Although the test may appear inactive at times, it is still running. Please wait until testing is complete...

I will let you know if I see the same hang when it finishes. Please refresh your thread as this post will likely be edited at that time.


Mine also hangs at 21%; this appears to be normal behavior and part of the Status info I posted in red above (it shows up in yellow on the blue screen in the actual diagnostics).​

 

[tom564]

I have ran driver verifier and it resulted in several more dump files, i will probably run memory diagnostics overnight. i have attached the latest dump in which i have found a diffrent bsod but with the same ntoskrnl.exe+7f1c0 address but caused by driver TPLINKUDSMBus.sys+2fc0
thanks
tom
it appears tplinkudsmbus might be something to do with my router although i am sure this is not the only cause as the router is much younger than the problem

 

[writhziden]

If you remove the USB wireless device, does Verifier still cause the same crash?

I am having trouble finding information the TPLINKUDSMBus.sys driver.

This files belongs to product Windows (R) Codename Longhorn DDK driver and were developed by company Windows (R) Codename Longhorn DDK provider. This files have description Master Bus of USB Software Bus By TCP.

The above quote was taken from tplinkudsmbus.sys - What is the tplinkudsmbus.sys ?.​

 

[tom564]

i do not currently have any wireless devices pluged in other than a mouse, and i am unable to find the TPLINKUDSMBus.sys in the drivers folder but blue screen viewer is telling me the driver is over 3 months old therefor it can not be my router, should i unplug the mouse?(the mouse is a micosoft sidewinder x8)
thanks
tom

 

[tom564]

I am currently running verifier with all non Microsoft drivers and 2 drivers like TPLINKUDSMBus.sys and it seems stable, how would i remove these drivers as they do not show up in c:/windows/system32/drivers (i assume they are not important due to the lack of detail about them)
thanks
tom

 

[writhziden]

They should show up in the Drivers directory...

    103008   08/03/2012      16:28:20  "C:\Windows\System32\drivers\TPLINKUDSMBus.sys"
    173664   08/03/2012      15:23:02  "C:\Windows\System32\drivers\TPLINKUDSTcpBus.sys"

    103008   08/03/2012      16:28:20  "C:\Windows\SysWOW64\drivers\TPLINKUDSMBus.sys"
    173664   08/03/2012      15:23:02  "C:\Windows\SysWOW64\drivers\TPLINKUDSTcpBus.sys"

They are also in your SysWOW64\drivers directory.


Rename both sets to

TPLINKUDSMBus.sys.bak

and

TPLINKUDSTcpBus.sys.bak

 

[tom564]

"C:\Windows\System32\drivers\TPLINKUDSMBus.sys"
"C:\Windows\System32\drivers\TPLINKUDSTcpBus.sys"

thank you for the reply, but i am still unable to find TPLINKUDSTcpBus.sys and TPLINKUDSTcpBus.sys in the C:\Windows\System32\drivers\ the only thing i can attempt is looking for the files outside of windows, would the files not being there cause a bsod say if a process was calling them?. However i was able to find them both in the other directory

I reran memtest + overnight for 8 passes and it detected no problems however after 2 passes of windows memory diagnostics it said a hardware error but provided no further information.

thanks
tom

 

[writhziden]

Memory Diagnostics:

Good news on Memtest86+. That's not good news with Memory diagnostics, though. Check its logs: http://www.sevenforums.com/tutorials/95368-memory-diagnostics-tool-read-event-viewer-log.html​

TPLINK:

For the driver files: open an http://www.sevenforums.com/tutorials/783-elevated-command-prompt.html and type

cd %windir%\system32\drivers
rename TPLINKUDSMBus.sys TPLINKUDSMBus.sys.bak
rename TPLINKUDSTcpBus.sys TPLINKUDSTcpBus.sys.bak

I think they exist in that directory but are hidden/system files.​

 

[tom564]

thanks for replying , but i still can not rename the file from an elevated command prompt.
and over the last couple days i have been trying to replicate the error i received with memory diagnostics however every time i run it it comes up clean, is 5 passes enough.
I am about to boot a Linux distro off a live cd this should let me see all of the system files
thanks
tom

ok, i looked for TPLINKUDSMBus.sys
TPLINKUDSTcpBus.sys and both do not exist in the system32\drivers directory

 

[writhziden]

How is the system currently behaving?

Please follow the http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html so we can check the status of the TPLINK drivers.

 

[tom564]

the system appears to be running stable however the problem was never frequent so i will not know if the problem is solved,i have attached the latest files
thanks
tom

 

[writhziden]

Your crashes seemed pretty frequent on the 30th, but that was probably due to Verifier being enabled. Looks like the offending drivers have been removed.

Good work!

Let us know if you need further help or if you find the problem is solved. If you find the problem solved, please mark the thread solved at that time.

 

[tom564]

Thank you for the help, the problem has seemed to been resolved.

 

[writhziden]

Excellent news!! I am very happy it is solved!!!