Solved Random BSODs - 0x1E

[michal13225]

Hello there,

Yesterday I witnessed a few BSODs with an error code 0x1E. I have no idea what is the problem with my OS/PC so I need your help guys.

 

[Boozad]

Your single dump shows the following:

1: Creative OS Services driver has been flagged, as has Creative Hardware Abstract Layer driver. Do you have a Creative soundcard? The timestamp indicates the drivers are older than Windows 7.

fffff800`00b9a9e8  fffff880`08ea885cUnable to load image \SystemRoot\system32\drivers\ctoss2k.sys, Win32 error 0n2
[COLOR=Red][B]*** WARNING: Unable to verify timestamp for ctoss2k.sys
*** ERROR: Module load completed but symbols could not be loaded for ctoss2k.sys[/B][/COLOR]
 ctoss2k+0x685c

0: kd> lmvm ctoss2k
start             end                 module name
fffff880`08ea2000 fffff880`08edd000   ctoss2k  T (no symbols)           
    Loaded symbol image file: ctoss2k.sys
    Image path: \SystemRoot\system32\drivers\ctoss2k.sys
    Image name: ctoss2k.sys
    Timestamp:        [COLOR=Red][B]Mon Apr 09 14:08:14 2007[/B][/COLOR] (461A3ABE)
    CheckSum:         000361E6
    ImageSize:        0003B000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

fffff800`00b9a6a8  fffff880`0acbfb74Unable to load image \SystemRoot\system32\drivers\ha10kx2k.sys, Win32 error 0n2
[COLOR=Red][B]*** WARNING: Unable to verify timestamp for ha10kx2k.sys
*** ERROR: Module load completed but symbols could not be loaded for ha10kx2k.sys[/B][/COLOR]
 ha10kx2k+0xbfb74

0: kd> lmvm ha10kx2k
start             end                 module name
fffff880`0ac00000 fffff880`0adb9000   ha10kx2k T (no symbols)           
    Loaded symbol image file: ha10kx2k.sys
    Image path: \SystemRoot\system32\drivers\ha10kx2k.sys
    Image name: ha10kx2k.sys
    Timestamp:        [COLOR=Red][B]Mon Apr 09 14:08:15 2007[/B][/COLOR] (461A3ABF)
    CheckSum:         00154A9A
    ImageSize:        001B9000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

:ar: Search for a suitable driver for your device here.


2: Kaspersky is causing issues.

fffff800`00b99798  fffff880`0838360dUnable to load image \SystemRoot\system32\DRIVERS\klim6.sys, Win32 error 0n2
[COLOR=Red][B]*** WARNING: Unable to verify timestamp for klim6.sys
*** ERROR: Module load completed but symbols could not be loaded for klim6.sys[/B][/COLOR]
 klim6+0x360d

:ar: Uninstall Kaspersky and install MS Security Essentials and MalwareBytes.

   Note

Make sure you uncheck the 'Enable Free Trial' box when installing MalwareBytes.

3: Your MS Virtual Machine Network Services driver has been flagged. Again it's ancient and needs updating.

fffff800`00b99548  fffff880`08fd4153Unable to load image \SystemRoot\system32\DRIVERS\VMNetSrv.sys, Win32 error 0n2
[B][COLOR=Red]*** WARNING: Unable to verify timestamp for VMNetSrv.sys
*** ERROR: Module load completed but symbols could not be loaded for VMNetSrv.sys[/COLOR][/B]
 VMNetSrv+0x4153

0: kd> lmvm VMNetSrv
start             end                 module name
fffff880`08fd0000 fffff880`08fe5000   VMNetSrv T (no symbols)           
    Loaded symbol image file: VMNetSrv.sys
    Image path: \SystemRoot\system32\DRIVERS\VMNetSrv.sys
    Image name: VMNetSrv.sys
    Timestamp:        [COLOR=Red][B]Wed Jan 24 12:05:46 2007[/B][/COLOR] (45B74B9A)
    CheckSum:         0001712B
    ImageSize:        00015000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

:ar: Check for an updated version here.


4: Uninstall Daemon Tools and Alcohol 120%, both proven causes of BSODs.

1. Uninstall Daemon Tools and Alcohol 120%.
2. Download the SPTD standalone installer and perform the following steps.
3. Double click the executable to open it.
4. Click the button shown below.

If the button it is grayed out as shown in the image, there is no more SPTD installation on your system and you can just close the window.

 

[michal13225]

Okay, thanks a lot. I removed Creative drivers and MS VirtualPC and will test stability now. I won't remove KIS since the BSOD occured during full system scan. I will remove DTools and Alcohol 120% as well. If the problem will occure again, I will post another SF log

 

[Boozad]

I won't remove KIS since the BSOD occured during full system scan.

Kaspersky has caused countless BSODs on numerous systems, as have most AV suites. MSE is the only AV suite we know of that is yet to cause a single BSOD, this is why we recommend it at least for testing purposes. I can only advise, the actions you take are your decision.

 

[michal13225]

I will start another full system scan in a minute to see if the bsod will again occure.

 

[michal13225]

Ok, after uninstalling the Alcohol 120% like software, SPTD drivers, all sort of virtual environment applications (VMWare Player, Virtualbox and Microsoft Virtual PC) and replacing Creative Sound drivers with kX drivers (yes, I do have a Creative Sound Card, Audigy SB0230 to be exact) and after few hours of testing WITH full system scan launched in KIS 2014 I can tell you, it is fixed. Thank you kindly Boozad. You really helped me here

 

[Boozad]

You're welcome, glad to have you sorted out. Feel free to come back to us with any future problems.