Recurring Blue Screen

[taney]

Hi! I keep getting this error and I've reformatted already. It's only been happening in the last few months. It was fine before all these windows updates.


Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 0000000000000000
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF80002A827B6
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\050810-19016-01.dmp
d:\system\temp\WER-19234-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt



The specs are:
board: asus p5k-vm
cpu: q6600
memory: 4gb g.skill ddr2-1000
video: ati radeon 5770 1gb ddr5
hd.1: ocz agility 120gb ssd
hd.2: wd black edition 750gb
sound: creative labs x-fi


I have included my msinfo32 file and my minidump folder:
Index of /bluescreen-logs



THANK YOU!

 

[Jonathan_King]

Welcome to SF!

Two of them appear to be caused by your VPN Client. I suggest uninstalling it, and see what happens.

The other two them look like they were caused by a Windows service being force ended. If you didn't manually end them in Task Manager, check for viruses using Malwarebytes.

Please post any new dmp files you might get. See this tutorial: http://www.sevenforums.com/tutorials/83172-how-upload-dmp-files-sf-analysis.html

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 0, fffff80002abe7b6}

Unable to load image \SystemRoot\system32\DRIVERS\vfilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for vfilter.sys
Probably caused by : vfilter.sys ( vfilter+29a6 )

Followup: MachineOwner

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\AppData\Local\Temp\050410-19546-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a08000 PsLoadedModuleList = 0xfffff800`02c45e50
Debug session time: Tue May  4 08:07:18.584 2010 (GMT-4)
System Uptime: 2 days 10:51:04.316
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa8004a70730, fffffa8004a70a10, fffff80002d84540}

Probably caused by : csrss.exe

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8004a70730, Terminating object
Arg3: fffffa8004a70a10, Process image file name
Arg4: fffff80002d84540, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa8004a70730

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_RECORD:  fffff88002119b78 -- (.exr 0xfffff88002119b78)
ExceptionAddress: 0000000077ac59ad
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 0000000000840ce8
Attempt to write to address 0000000000840ce8

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  0000000000840ce8

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cb00e0
 0000000000840ce8 

FOLLOWUP_IP: 
+0
00000000`77ac59ad ??              ???

FAULTING_IP: 
+0
00000000`77ac59ad ??              ???

FAILED_INSTRUCTION_ADDRESS: 
+0
00000000`77ac59ad ??              ???

BUGCHECK_STR:  0xF4_C0000005

STACK_TEXT:  
fffff880`021190f8 fffff800`02e04c72 : 00000000`000000f4 00000000`00000003 fffffa80`04a70730 fffffa80`04a70a10 : nt!KeBugCheckEx
fffff880`02119100 fffff800`02db20a3 : ffffffff`ffffffff fffffa80`065e0b60 fffffa80`04a70730 fffffa80`04a70730 : nt!PspCatchCriticalBreak+0x92
fffff880`02119140 fffff800`02d3669c : ffffffff`ffffffff 00000000`00000001 fffffa80`04a70730 fffff6fb`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17936
fffff880`02119190 fffff800`02a77853 : fffffa80`04a70730 fffff800`c0000005 ffffe6a0`5534479a fffffa80`065e0b60 : nt!NtTerminateProcess+0x20c
fffff880`02119210 fffff800`02a73df0 : fffff800`02ab2cac fffff880`02119b78 fffff880`021198e0 fffff880`02119c20 : nt!KiSystemServiceCopyEnd+0x13
fffff880`021193a8 fffff800`02ab2cac : fffff880`02119b78 fffff880`021198e0 fffff880`02119c20 00000000`00841f70 : nt!KiServiceLinkage
fffff880`021193b0 fffff800`02a77c42 : fffff880`02119b78 00000000`000131b0 fffff880`02119c20 00000000`00841a48 : nt!KiDispatchException+0x53b
fffff880`02119a40 fffff800`02a767ba : 00000000`00000001 00000000`000131b0 00000000`77bcf701 00000000`77ae548f : nt!KiExceptionDispatch+0xc2
fffff880`02119c20 00000000`77ac59ad : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`00840cf0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77ac59ad


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_C0000005_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_C0000005_IMAGE_csrss.exe

Followup: MachineOwner
---------

 

[taney]

THANK YOU! (=

That definitely gives a lot of insight. You're right! I never had issues before I installed the VPN client. Do you know any other VPN clients that would work on win7 x64?


Thanks again,

Taney

 

[Jonathan_King]

I honestly have no idea. You can post in the Networking section of this forum if you like, and I'm sure someone can help you: Network & Sharing - Windows 7 Forums