Random BSOD

[dadio]

I used Win 7 HP upgrade to replace Vista Business. So I did a clean install, eventually deleted Windows.old, used CCleaner and defragged my OS partition.

Except for annoying BSODs (about 1-2 per day), it works fine. I would appreciate it if someone could look at the attached minidumps and point out what has to be done.

My PC system specs are Intel Core2 [email protected] Ghz, 4 GB RAM
After upgrading I had an additional 2 GB RAM installed

1) Mem86+ ran for 6 passes and showed no errors.
2) No overclocking or under-cooling, and no reason I know of to flash BIOS.

Thank you,
Daniel

 

[Capt.Jack Sparrow]

Hello Welcome to SF,

You dump file is pointing to HIDCLASS.SYS i.e. HIDClass Devices which are devices include keyboard, mouse, and joystick devices attached to PS/2, serial, and game ports so make sure you have the latest drivers installed. Also pointing to your Memory so run the diagnostic.

Run the Memory Diagnostic & HD Diagnostic

Also i would recommend to run System Integrity Checker
Start > Run > CMD >Right Click and Run as administrator > SFC/ SCANNOW

Drivers to be Updated

pelusblf.sys 0x48646922 6/27/2008 9:44:26 AM

Details

 [B][COLOR=red]PAGE_FAULT_IN_NONPAGED_AREA (50)[/COLOR][/B]
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffaa09d62b81b, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80001cedd3b, If non-zero, the instruction address which referenced the bad memory
 address.
Arg4: 0000000000000005, (reserved)

Analysis

 READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001f100e0
 fffffaa09d62b81b 
FAULTING_IP: 
nt!MiAgeWorkingSet+41b
fffff800`01cedd3b 410fb65f1b      movzx   ebx,byte ptr [r15+1Bh]
MM_INTERNAL_CODE:  5
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x50
PROCESS_NAME:  System
CURRENT_IRQL:  0
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!MiAgeWorkingSet+41b
fffff800`01cedd3b 410fb65f1b      movzx   ebx,byte ptr [r15+1Bh]
SYMBOL_STACK_INDEX:  3
SYMBOL_NAME:  nt!MiAgeWorkingSet+41b
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600
IMAGE_NAME:  memory_corruption
FAILURE_BUCKET_ID:  X64_0x50_nt!MiAgeWorkingSet+41b
BUCKET_ID:  X64_0x50_nt!MiAgeWorkingSet+41b

Hope this helps,
Captain

 

[zigzag3143]

I used Win 7 HP upgrade to replace Vista Business. So I did a clean install, eventually deleted Windows.old, used CCleaner and defragged my OS partition.

Except for annoying BSODs (about 1-2 per day), it works fine. I would appreciate it if someone could look at the attached minidumps and point out what has to be done.

My PC system specs are Intel Core2 [email protected] Ghz, 4 GB RAM
After upgrading I had an additional 2 GB RAM installed

1) Mem86+ ran for 6 passes and showed no errors.
2) No overclocking or under-cooling, and no reason I know of to flash BIOS.

Thank you,
Daniel

Daniel, this one was caused by SRTSP64.SYS part of your NORTON 2009. either remove it or uninstall it to see if it fixes the problem.

Since your already ran Memtest the only other thing I would do is run a system file check
type cmd in search>right click and run as admin>sfc /scannow

let us know the results

Ken

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\021810-23687-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`01c1e000 PsLoadedModuleList = 0xfffff800`01e5be50
Debug session time: Thu Feb 18 02:19:55.302 2010 (GMT-5)
System Uptime: 0 days 0:32:25.818
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 1097, 0, fffff8a010b96004}

Unable to load image SRTSP64.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP64.SYS
Unable to load image EX64.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for EX64.SYS
*** ERROR: Module load completed but symbols could not be loaded for EX64.SYS
Probably caused by : SRTSP64.SYS ( SRTSP64+4efe1 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001097, (reserved)
Arg3: 0000000000000000, Memory contents of the pool block
Arg4: fffff8a010b96004, Address of the block of pool being deallocated

Debugging Details:
------------------


BUGCHECK_STR:  0xc2_7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  TrustedInstall

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80001dc160e to fffff80001c8ff00

STACK_TEXT:  
fffff880`15bdad68 fffff800`01dc160e : 00000000`000000c2 00000000`00000007 00000000`00001097 00000000`00000000 : nt!KeBugCheckEx
fffff880`15bdad70 fffff880`15757fe1 : fffff8a0`0bc431a8 fffff880`15e7e313 ffffffff`ffffffff 00000000`00000000 : nt!ExFreePool+0xccb
fffff880`15bdae20 fffff8a0`0bc431a8 : fffff880`15e7e313 ffffffff`ffffffff 00000000`00000000 fffff8a0`0bc431a8 : SRTSP64+0x4efe1
fffff880`15bdae28 fffff880`15e7e313 : ffffffff`ffffffff 00000000`00000000 fffff8a0`0bc431a8 fffff880`15e7a38e : 0xfffff8a0`0bc431a8
fffff880`15bdae30 ffffffff`ffffffff : 00000000`00000000 fffff8a0`0bc431a8 fffff880`15e7a38e fffff8a0`10b96004 : EX64+0x7e313
fffff880`15bdae38 00000000`00000000 : fffff8a0`0bc431a8 fffff880`15e7a38e fffff8a0`10b96004 fffff8a0`0bc43190 : 0xffffffff`ffffffff


STACK_COMMAND:  kb

FOLLOWUP_IP: 
SRTSP64+4efe1
fffff880`15757fe1 ??              ???

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  SRTSP64+4efe1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: SRTSP64

IMAGE_NAME:  c
DEBUG_FLR_IMAGE_TIMESTAMP:  4b160164

FAILURE_BUCKET_ID:  X64_0xc2_7_SRTSP64+4efe1

BUCKET_ID:  X64_0xc2_7_SRTSP64+4efe1

Followup: MachineOwner
---------

 

[dadio]

Random BSOD results

Hi Captain and Ken,

Thanks for helping out.

Running sfc /scannow found and repaired corrupt files. I uploaded the relevant part of CBS.log

I also ran DriverEasy and used all the suggested updates, so drivers should be in better shape now.

Included in the upload are screen shots of HIDCLASS.SYS and PELUBLF.SYS, taken after updating with DriverEasy. I think HIDCLASS.SYS looks good, but the date on PELUBLF.SYS is still 2008. Right-clicking it in Win 7 doesn't offer updating. Perhaps this is not an issue after the DriverEasy update, which included mouse drivers.

I temporarily stopped Norton, but have let it restart when I restarted my PC. So far today there have been no BSODs. If this holds through evening, I'll mark this item SOLVED.

Daniel

 

[Dinesh]

That's the Golden RULE. While upgrading the OS, always uninstall your current anti virus or else its likely to get such BSODs.

 

[dadio]

More BSOD

It ain't over till it's over.

The pc just crashed for the second time today. I'm enclosing minidumps from 19 Feb and today. I was out of the country in between these dates, so that's why there's such a long gap. The crashes really occur on consecutive days of use.

Reading over the thread, I see that Ken fingered part of Norton 2009. Has Norton often caused trouble with Win 7?

I also forgot to mention that I ran Windows Memory Diagnostics as recommended. No problems were found.

BlueScreenView highlights ntoskrnl.exe, NDProxy.SYS and usbaudio.sys in the attached minidumps.

All analysis/pointers very appreciated.

Daniel

 

[dadio]

This is hopefully a wrap-up to this thread.

I decided to completely uninstall Norton AV and replaced it with WSE. There have been no BSODs for two days.

I hope this helps others.

Daniel