Unexpected BSOD

[beethoven]

New BSOD

Hi there,

It seems that the new year it's not a good one for me. In the first day of the year a new BSOD raised up in front of my face while I was playing Need for Speed Shift (Tier 2). I don't know how to interpret it. I know you can to it much more better, so here I am asking your for help. Thank you in advance for the answer. Here it is the report file:

Version=1
EventType=BlueScreen
EventTime=129068283668249002
ReportType=4
Consent=1
UploadTime=129068283956431597
ReportIdentifier=c1ef3164-f6de-11de-9657-005056c00008
IntegratorReportIdentifier=010110-18829-01
Response.Str=http:////oca.microsoft.com//resredir.aspx?sid=10&Bucket=X64_0x1a_41790_nt!MiDeleteVirtualAddresses+41b1e&ID=3eeee6d1-5bfe-4c99-8644-6d1fdd7519ac
Response.AnalysisBucket=X64_0x1a_41790_nt!MiDeleteVirtualAddresses+41b1e
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7600.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1048
UI[2]=C:\Windows\system32\wer.dll
UI[3]=Windows has recovered from an unexpected shutdown
UI[4]=Windows can check online for a solution to the problem.
UI[5]=&Check for solution
UI[6]=&Check later
UI[7]=Cancel
UI[8]=Windows has recovered from an unexpected shutdown
UI[9]=A problem caused Windows to stop working correctly. Windows will notify you if a solution is available.
UI[10]=Close
Sec[0].Key=BCCode
Sec[0].Value=1a
Sec[1].Key=BCP1
Sec[1].Value=0000000000041790
Sec[2].Key=BCP2
Sec[2].Value=FFFFFA8003706A40
Sec[3].Key=BCP3
Sec[3].Value=000000000000FFFF
Sec[4].Key=BCP4
Sec[4].Value=0000000000000000
Sec[5].Key=OS Version
Sec[5].Value=6_1_7600
Sec[6].Key=Service Pack
Sec[6].Value=0_0
Sec[7].Key=Product
Sec[7].Value=256_1
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=CA
State[1].Value=1
State[2].Key=BLOB
State[2].Value=CHKSUM=1248DB05398572E976E4C4D5A84DFC43;BID=OCATAG;ID=3eeee6d1-5bfe-4c99-8644-6d1fdd7519ac;SID=10;SUB=1//1//2010 7:06:00 AM
File[0].CabName=010110-18829-01.dmp
File[0].Path=010110-18829-01.dmp
File[0].Flags=851970
File[0].Type=2
File[0].Original.Path=C:\Windows\Minidump\010110-18829-01.dmp
File[1].CabName=sysdata.xml
File[1].Path=WER-30248-0.sysdata.xml
File[1].Flags=851970
File[1].Type=5
File[1].Original.Path=C:\Users\Betino\AppData\Local\Temp\WER-30248-0.sysdata.xml
File[2].CabName=WERInternalMetadata.xml
File[2].Path=WER3255.tmp.WERInternalMetadata.xml
File[2].Flags=589827
File[2].Type=5
File[2].Original.Path=C:\Users\Betino\AppData\Local\Temp\WER3255.tmp.WERInternalMetadata.xml
File[3].CabName=Report.cab
File[3].Path=Report.cab
File[3].Flags=196608
File[3].Type=7
File[3].Original.Path=Report.cab
FriendlyEventName=Shut down unexpectedly
ConsentKey=BlueScreen
AppName=Windows
AppPath=C:\Windows\System32\WerFault.exe

I don't know why can't I upload any file. I have to upload the .dmp file, but it says "invalid file"' for every file I try to upload. I'll try again a bit later.

 

[usasma]

You have to zip up the files as the forums won't allow you to upload a .dmp file

Upload Dump Files:
Please go to C:\Windows\Minidump and zip up the contents of the folder. Then upload/attach the .zip file with your next post.
{Left click on the first minidump file.
Hold down the "Shift" key and left click on the last minidump file.
Right click on the blue highlighted area and select "Send to"
Select "Compressed (zipped) folder" and note where the folder is saved.
Upload that .zip file with your next post.

If you have issues with "Access Denied" errors, try copying the files to your desktop and zipping them up from there. If it still won't let you zip them up, post back for further advice.

If you don't have anything in that folder, please check in C:\Windows for a file named MEMORY.DMP. If you find it, zip it up and upload it to a free file hosting service - then post the link to it.
Then, follow the directions here to set your system for Minidumps (much smaller than the MEMORY.DMP file): Set MiniDump

 

[beethoven]

Ah, yes. I have forgotten. Sorry! I am uploading it now in .zip format. Thank you!

 

[reghakr]

I believe the file usama is looking for is the 010110-18829-01.dmp file

 

[beethoven]

Oh, yes. Sorry again. I chose a wrong file when I created the zip archive. Here is the right file.

 

[zigzag3143]

Hi there,

It seems that the new year it's not a good one for me. In the first day of the year a new BSOD raised up in front of my face while I was playing Need for Speed Shift (Tier 2). I don't know how to interpret it. I know you can to it much more better, so here I am asking your for help. Thank you in advance for the answer. Here it is the report file:

Version=1
EventType=BlueScreen
EventTime=129068283668249002
ReportType=4
Consent=1
UploadTime=129068283956431597
ReportIdentifier=c1ef3164-f6de-11de-9657-005056c00008
IntegratorReportIdentifier=010110-18829-01
Response.Str=http:////oca.microsoft.com//resredir.aspx?sid=10&Bucket=X64_0x1a_41790_nt!MiDeleteVirtualAddresses+41b1e&ID=3eeee6d1-5bfe-4c99-8644-6d1fdd7519ac
Response.AnalysisBucket=X64_0x1a_41790_nt!MiDeleteVirtualAddresses+41b1e
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7600.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1048
UI[2]=C:\Windows\system32\wer.dll
UI[3]=Windows has recovered from an unexpected shutdown
UI[4]=Windows can check online for a solution to the problem.
UI[5]=&Check for solution
UI[6]=&Check later
UI[7]=Cancel
UI[8]=Windows has recovered from an unexpected shutdown
UI[9]=A problem caused Windows to stop working correctly. Windows will notify you if a solution is available.
UI[10]=Close
Sec[0].Key=BCCode
Sec[0].Value=1a
Sec[1].Key=BCP1
Sec[1].Value=0000000000041790
Sec[2].Key=BCP2
Sec[2].Value=FFFFFA8003706A40
Sec[3].Key=BCP3
Sec[3].Value=000000000000FFFF
Sec[4].Key=BCP4
Sec[4].Value=0000000000000000
Sec[5].Key=OS Version
Sec[5].Value=6_1_7600
Sec[6].Key=Service Pack
Sec[6].Value=0_0
Sec[7].Key=Product
Sec[7].Value=256_1
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=CA
State[1].Value=1
State[2].Key=BLOB
State[2].Value=CHKSUM=1248DB05398572E976E4C4D5A84DFC43;BID=OCATAG;ID=3eeee6d1-5bfe-4c99-8644-6d1fdd7519ac;SID=10;SUB=1//1//2010 7:06:00 AM
File[0].CabName=010110-18829-01.dmp
File[0].Path=010110-18829-01.dmp
File[0].Flags=851970
File[0].Type=2
File[0].Original.Path=C:\Windows\Minidump\010110-18829-01.dmp
File[1].CabName=sysdata.xml
File[1].Path=WER-30248-0.sysdata.xml
File[1].Flags=851970
File[1].Type=5
File[1].Original.Path=C:\Users\Betino\AppData\Local\Temp\WER-30248-0.sysdata.xml
File[2].CabName=WERInternalMetadata.xml
File[2].Path=WER3255.tmp.WERInternalMetadata.xml
File[2].Flags=589827
File[2].Type=5
File[2].Original.Path=C:\Users\Betino\AppData\Local\Temp\WER3255.tmp.WERInternalMetadata.xml
File[3].CabName=Report.cab
File[3].Path=Report.cab
File[3].Flags=196608
File[3].Type=7
File[3].Original.Path=Report.cab
FriendlyEventName=Shut down unexpectedly
ConsentKey=BlueScreen
AppName=Windows
AppPath=C:\Windows\System32\WerFault.exe

I don't know why can't I upload any file. I have to upload the .dmp file, but it says "invalid file"' for every file I try to upload. I'll try again a bit later.

Hi and welcome

You just beed to zip the dmp and it will work

Ken

 

[usasma]

Start with this:

H/W Diagnostics:
Please start by running these hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Malware (read the details at the link)

Please update or remove these older drivers that were loaded at the time of the crash. Don't use Windows Update or the Update drivers function of Device Manager. Please use the following instructions to locate the most current drivers:

How To Find Updated Drivers:
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

Here's the older drivers:

Apfiltr.sys  Wed Oct 29 19:42:41 2008
mdmxsdk.sys  Mon Jun 19 17:27:26 2006
rimssn64.sys Tue Sep 02 04:50:00 2008
risdsn64.sys Mon Sep 22 05:54:03 2008
RTL8187.sys  Thu Jun 26 21:40:34 2008
SFEP.sys     Fri Aug 03 01:35:53 2007
xaudio64.sys Tue Nov 28 19:45:04 2006

Then, post back with any further BSOD's that occur after everything is updated.

Summary of the BSOD:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Fri Jan  1 09:04:31.388 2010 (GMT-5)
System Uptime: 0 days 22:32:32.183
BugCheck 1A, {41790, fffffa8003706a40, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+339d6 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  shift.exe

 

[beethoven]

Hi,

I have updated some drivers, those who I found in device manager (I mean the .sys files). And got a new BSOD while I killed the NFS Shift process since it was not responding, due to a alt-tab switch between processes.

Here is the report file:

Version=1
EventType=BlueScreen
EventTime=129070258789073216
ReportType=4
Consent=1
UploadTime=129070259014853762
ReportIdentifier=a8b00fe6-f8aa-11de-819f-005056c00008
IntegratorReportIdentifier=010310-18891-01
Response.type=4
Response.AnalysisBucket=X64_0x3B_nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+26
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7600.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1048
UI[2]=C:\Windows\system32\wer.dll
UI[3]=Windows has recovered from an unexpected shutdown
UI[4]=Windows can check online for a solution to the problem.
UI[5]=&Check for solution
UI[6]=&Check later
UI[7]=Cancel
UI[8]=Windows has recovered from an unexpected shutdown
UI[9]=A problem caused Windows to stop working correctly. Windows will notify you if a solution is available.
UI[10]=Close
Sec[0].Key=BCCode
Sec[0].Value=3b
Sec[1].Key=BCP1
Sec[1].Value=00000000C0000005
Sec[2].Key=BCP2
Sec[2].Value=FFFFF80002C5701E
Sec[3].Key=BCP3
Sec[3].Value=FFFFF88007E96CB0
Sec[4].Key=BCP4
Sec[4].Value=0000000000000000
Sec[5].Key=OS Version
Sec[5].Value=6_1_7600
Sec[6].Key=Service Pack
Sec[6].Value=0_0
Sec[7].Key=Product
Sec[7].Value=256_1
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=CA
State[1].Value=1
State[2].Key=BLOB
State[2].Value=CHKSUM=E6825749F32282F3E771D63D602B3A71;BID=OCATAG;ID=e2323990-b5d7-47ac-8af5-4253bccaeb21;SUB=1//3//2010 1:57:34 PM
File[0].CabName=010310-18891-01.dmp
File[0].Path=010310-18891-01.dmp
File[0].Flags=851970
File[0].Type=2
File[0].Original.Path=C:\Windows\Minidump\010310-18891-01.dmp
File[1].CabName=sysdata.xml
File[1].Path=WER-60387-0.sysdata.xml
File[1].Flags=851970
File[1].Type=5
File[1].Original.Path=C:\Users\Betino\AppData\Local\Temp\WER-60387-0.sysdata.xml
File[2].CabName=WERInternalMetadata.xml
File[2].Path=WER58C9.tmp.WERInternalMetadata.xml
File[2].Flags=589827
File[2].Type=5
File[2].Original.Path=C:\Users\Betino\AppData\Local\Temp\WER58C9.tmp.WERInternalMetadata.xml
File[3].CabName=Report.cab
File[3].Path=Report.cab
File[3].Flags=196608
File[3].Type=7
File[3].Original.Path=Report.cab
FriendlyEventName=Shut down unexpectedly
ConsentKey=BlueScreen
AppName=Windows
AppPath=C:\Windows\System32\WerFault.exe


I have also attached the .zip file with the .dmp file.

 

[usasma]

Here's the older drivers that were present in this dump file:

[U][B]Apfiltr.sys  Wed Oct 29 19:42:41 2008[/B][/U]
CAX_CNXT.sys Fri Dec 22 15:29:46 2006
CAX_DPV.sys  Fri Dec 22 15:33:24 2006
CAXHWAZL.sys Fri Dec 22 15:30:47 2006
[U][B]mdmxsdk.sys  Mon Jun 19 17:27:26 2006[/B][/U]
[U][B]rimssn64.sys Tue Sep 02 04:50:00 2008
risdsn64.sys Mon Sep 22 05:54:03 2008
RTL8187.sys  Thu Jun 26 21:40:34 2008 [/B][/U]
[U][B]SFEP.sys     Fri Aug 03 01:35:53 2007
xaudio64.sys Tue Nov 28 19:45:04 2006[/B][/U]

Please update the drivers as I recommended in my previous post. Then we can move on from there.

 

[beethoven]

Here's the older drivers that were present in this dump file:

[U][B]Apfiltr.sys  Wed Oct 29 19:42:41 2008[/B][/U]
CAX_CNXT.sys Fri Dec 22 15:29:46 2006
CAX_DPV.sys  Fri Dec 22 15:33:24 2006
CAXHWAZL.sys Fri Dec 22 15:30:47 2006
[U][B]mdmxsdk.sys  Mon Jun 19 17:27:26 2006[/B][/U]
[U][B]rimssn64.sys Tue Sep 02 04:50:00 2008
risdsn64.sys Mon Sep 22 05:54:03 2008
RTL8187.sys  Thu Jun 26 21:40:34 2008 [/B][/U]
[U][B]SFEP.sys     Fri Aug 03 01:35:53 2007
xaudio64.sys Tue Nov 28 19:45:04 2006[/B][/U]

Please update the drivers as I recommended in my previous post. Then we can move on from there.

I have searched for them, but found not newer. They are the latest from sony.com website. It's because they don't use to update all of them, but only the "visible" ones. I'll try too google much more.

Thanks again!

 

[usasma]

Apfiltr.sys Wed Oct 29 19:42:41 2008 - Alps pointing device
CAX_CNXT.sys Fri Dec 22 15:29:46 2006 - Conexant Modem
CAX_DPV.sys Fri Dec 22 15:33:24 2006 - Conexant Modem
CAXHWAZL.sys Fri Dec 22 15:30:47 2006 - Conexant Modem
mdmxsdk.sys Mon Jun 19 17:27:26 2006 - Conexant Modem
rimssn64.sys Tue Sep 02 04:50:00 2008 - Ricoh Memory card reader
risdsn64.sys Mon Sep 22 05:54:03 2008 - Ricoh Memory card reader
RTL8187.sys Thu Jun 26 21:40:34 2008 - Realtek wireless USB device
SFEP.sys Fri Aug 03 01:35:53 2007 - Sony Firmware Extension Parser driver
xaudio64.sys Tue Nov 28 19:45:04 2006 - Conexant Modem

FWIW - I know that there's a more recent version of the RTL8187 driver available from the Realtek website, and that there's a more recent version of the SFEP driver from the Sony website.

Please visit the web site of the manufacturer of the Device (Not SONY except for the SFEP.sys driver)
If the manufacturer doesn't have drivers, then search Google for the exact model number and see what's available at the other major manufacturer's websites (you'll have to do this for the Alps touchpad)

If this doesn't work, then wipe the hard drive clean with DBAN or KillDisk and then install Win7 clean
Upgrading from Windows XP to Windows 7 - Help & How-to - Microsoft Windows