Solved Random BSOD's occurring during normal use

[boff90]

Hi all, I am new to this forum & need some help. Over the last few days I have been having random BSOD's occur, usually only once a day or once every other day, during normal use. The BSOD is not happening while running a particular program but they are annoying. I have already run CHKDSK which I thought had solved the problem but unfortunately it hasn't. BlueScreenView says that Sftfslh.sys is causing my BSOD's but I don't know what to do to fix the issue. Any help would be very much appreciated.View attachment 352140

 

[Arc]

BugCheck 3B, {c0000005, fffff88005d0e4e3, fffff88004e05640, 0}

[COLOR=Red]Probably caused by : Sftfslh.sys[/COLOR] ( Sftfslh+1a4e3 )

Followup: MachineOwner
---------

BugCheck C2, {7, 109b, 0, fffffa8007d43540}

*** WARNING: Unable to verify timestamp for Sftfslh.sys
*** ERROR: Module load completed but symbols could not be loaded for Sftfslh.sys
GetPointerFromAddress: unable to read from fffff80003aae100
GetUlongFromAddress: unable to read from fffff80003aae1c0
[COLOR=Red]Probably caused by : Sftfslh.sys[/COLOR] ( Sftfslh+1a4d8 )

Followup: MachineOwner
---------

Some important files in your upload are missing. Please execute both the options of the Blue Screen of Death (BSOD) Posting Instructions ... either one will grab all the files. They are very important in this case.

 

[boff90]

Is it all OK now? Thanks for responding.

 

[essenbe]

Hello, boff90. I will see if I can help you. You have several dump files all blaming Sftfslh.sys.

fffff880`0394f890  fffff880`082ce628Unable to load image \SystemRoot\system32\DRIVERS\Sftfslh.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Sftfslh.sys
*** ERROR: Module load completed but symbols could not be loaded for Sftfslh.sys
 Sftfslh+0xb2628

That is the Microsoft Application Virtualization (App-V) driver and comes from Windows update. Are you running any type virtualization programs, or programs with remote access to your computer? I did notice one place mentioned Xbox.

 

[Arc]

Thank you Steve.

 

[essenbe]

No problem, my friend.

 

[Arc]

Is it all OK now? Thanks for responding.

What is OK? Your edit?

No, it is as partial as it was. Do both the options, by running the tools as admin.

Dont edit the original post. Attach the data with your reply.

 

[boff90]

The only thing I have Xbox related is my Gamepad which is a Official Microsoft Xbox 360 controller made for PC. I'm not sure about the other types of programs you mentioned such as virtualization programs or remote access programs, is there a way to find out?

 

[boff90]

Hope I've got it right this time. View attachment 352141

 

[Arc]

You have a lot of startup programs (as a lot of installed programs; but that's your choice). Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept then restart.

If you have App V or Hyper V etc installed as essenbe pointed out, update the version of the program.

And you have lots of update related issue.

2015-03-09    16:30:59:972    1060    18f0    PT    [COLOR=Red]WARNING: Cached cookie has expired or new PID is available[/COLOR]
2015-03-09    16:33:31:281    1060    18f0    Handler    F[COLOR=Red]ATAL: UH: 0x80070490: EvaluateApplicability failed in CCbs::EvaluateApplicability[/COLOR]
2015-03-09    16:33:31:485    1060    18f0    Agent    [COLOR=Red]WARNING: Failed to evaluate Installed rule, updateId = {F9164872-3E27-4410-B4FC-038814549BB1}.105, hr = 80070490[/COLOR]
2015-03-09    16:33:44:434    1060    18f0    Handler    [COLOR=Red]FATAL: UH: 0x80070490: EvaluateApplicability failed in CCbs::EvaluateApplicability[/COLOR]

I dont know what the failures mean, but try http://www.sevenforums.com/tutorials/91738-windows-update-reset.html

If it worked, get all the essential windows updates.

If still errors, we have to consult an update expert.

 

[boff90]

My BSOD's are not occurring at Startup, they usually happen later in the day but thanks for letting me know how to adjust my startup, I will do that. Where do I find updates for App V, Hyper V? Do they come through on Windows Update or can I download them separately? I have also applied fixes to Windows Update, my PC is now up-to-date. Do I now have to wait & see if my BSOD continues?

 

[essenbe]

They come through Windows Update. Just wait until the next BSOD if what you did didn't resolve the problem, then upload the BSOD posting instructions.

 

[Arc]

My BSOD's are not occurring at Startup,

Thats not an arguments. And never it was said.

The startup items starts to run alongwith windows and they run in the background all the times. It is not only unnecessary, but also resource consuming and always a chance of conflicts.

Go clean them. That is the first step of all troubleshooting, because that is an example of bad computing.

 

[boff90]

So I had another BSOD late last night under BAD_POOL_HEADER, apparently caused by driver ntoskrnl.exe. Any ideas? (Minidump in attached file.) View attachment 352207

 

[Arc]

If you did not argue and have followed post #10, it would have been better for you.

BugCheck 19, {20, fffffa803e69e000, fffffa803e69e070, c070000}

GetPointerFromAddress: unable to read from fffff80003b09100
GetUlongFromAddress: unable to read from fffff80003b091c0
[COLOR=Red]Probably caused by : ExpressTray.ex[/COLOR]

Followup: MachineOwner
---------

What is expresstray.exe ? | System Explorer

From your msinfo32 file ....

View attachment 352211
​

When something is suggested, there remains some logic which are not no nullify instantly.

 

[essenbe]

Your dump file lists

Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, fffffa803e69e000, fffffa803e69e070, c070000}
GetPointerFromAddress: unable to read from fffff80003b09100
GetUlongFromAddress: unable to read from fffff80003b091c0
[COLOR=red]Probably caused by : ExpressTray.exe[/COLOR]
Followup: MachineOwner

]
I am not familiar with the program, but you need to update it or uninstall it. Also, you have way too many things running at startup. Windows needs no other programs to run at startup. I would start Windows Sidebar and your Anti Virus and nothing else. It makes startup slower, takes away from system resources and increases the chance for driver conflicts.

This is what is running at startup now

Caption                      Command                                                                                                                       User                          
GarminExpressTrayApp         "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"                                                                  NT AUTHORITY\SYSTEM           
Sidebar                      C:\Program Files\Windows Sidebar\sidebar.exe /autoRun                                                                         NT AUTHORITY\SYSTEM           
Sidebar                      %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun                                                                           NT AUTHORITY\LOCAL SERVICE    
Sidebar                      %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun                                                                           NT AUTHORITY\NETWORK SERVICE  
Webshots                     Webshots.lnk                                                                                                                  Austin-PC\Austin              
Sidebar                      C:\Program Files\Windows Sidebar\sidebar.exe /autoRun                                                                         Austin-PC\Austin              
GarminExpressTrayApp         "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"                                                                  Austin-PC\Austin              
Amazon Music                 "C:\Users\Austin\AppData\Local\Amazon Music\Amazon Music Helper.exe"                                                          Austin-PC\Austin              
GarminExpressTrayApp         "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"                                                                  .DEFAULT                      
Sidebar                      C:\Program Files\Windows Sidebar\sidebar.exe /autoRun                                                                         .DEFAULT                      
HD Writer                    C:\PROGRA~2\COMMON~1\PANASO~1\HDWRIT~1\HDWRIT~1.EXE                                                                           Public                        
Image Transfer Utility       C:\PROGRA~2\Canon\IMAGET~1\IMAGET~1.EXE                                                                                       Public                        
ImageBrowser EX Agent        C:\PROGRA~2\Canon\IMAGEB~1\MFMANA~1.EXE                                                                                       Public                        
Install LastPass IE RunOnce  C:\PROGRA~2\COMMON~1\LPUNIN~1.EXE -p -name=LastPass -ffuuid [EMAIL="[email protected]"][U][COLOR=#0066cc][email protected][/COLOR][/U][/EMAIL]                                              Public                        
PHOTOfunSTUDIO 9.5 PE        C:\PROGRA~2\COMMON~1\PANASO~1\PHOTOF~1\AUTOST~1.EXE -e "C:\Program Files\Panasonic\PHOTOfunSTUDIO 9.5 PE\PHOTOfunSTUDIO.exe"  Public                        
IAAnotif                     C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe                                                        Public                        
IgfxTray                     C:\Windows\system32\igfxtray.exe                                                                                              Public                        
HotKeysCmds                  C:\Windows\system32\hkcmd.exe                                                                                                 Public                        
Persistence                  C:\Windows\system32\igfxpers.exe                                                                                              Public                        
XboxStat                     "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun                                                      Public                        
iTunesHelper                 "C:\Program Files\iTunes\iTunesHelper.exe"                                                                                    Public                        
RTHDVCPL                     "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s                                                                          Public                        
NvBackend                    "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"                                                         Public                        
ShadowPlay                   C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart                                    Public

Click start
in the search box type msconfig
click on the msconfig that will show
Click the startup tab and uncheck everything except Windows sidebar and your anti virus.
Click Apply and OK and reboot.

 

[boff90]

Apologies Arc, I wasn't trying to make excuses, I just worry a lot when I get BSOD's. I appreciate I have too many items running at Startup & have now edited this through msconfig. I really appreciate your help Arc & Essenbe. I have updated the Garmin Express program which is where the expresstray.exe process comes from & I have disabled the expresstray.exe from Startup as well. Do I just have to wait & see now if my BSOD's continue?

Also if I disable all Startup items, won't that affect the programs that start when Windows opens such as Webshots, Realtek Audio etc? Would be helpful to know for future reference.

 

[Arc]

The realtek audio thing present in startup is just a program to adjust audio. It has no bearing/implication on the sound output.

All the programs are are installed in your computer. You can call them from Start > All Programs whenever needed. No need to let them run always in the background. Now you know that it is an unhealthy practice; and that is why I said it to be bad computing.

Let us know for any further BSOD.

 

[boff90]

Hi guys, just to let you know that my BSOD's have stopped & my PC is working a lot better now. The Garmin Express program was taking up a lot of memory running in the background. Thanks for all your help Arc & Essenbe, I really appreciate it. It was great to get the problem resolved quickly, thank you.

 

[Arc]

Well, that's a good news.

Report us for any further issue.