Hi benjis78,
I've been through the event logs and there are a few patters emerging.
Before we go any further, please consider my request to re-install VMWARE, these events may or may not be related to your BSOD issue and we should at least attempt to reinstall VMware first before we go down the wrong road.
I know this is dragging on a bit, but if you could please test for BSOD between each change it will help us pinpoint the issue.
The Capt and I have both mentioned that your firewall/antivirus may be causing your problem and Capt has suggested that you uninstall it and we disabled this for testing purposes, yet found that the the issue still occurs. However, like the misleading information in the mini-dump that you first posted, it' s been niggling at me. Let's take the Capt's advice because regardless of the product being disabled, the drivers that it uses are likely to be still loaded in windows. Importantly, the new information in the event log entries support this scenario. Especially the fact that many of the BSOD's are commonly preceded by the loading of the the Zone alarm vsdatant.sys.
Here is the other event log follow-ups; but please note that they may not all be related:
Events 7218,7220,7225 - Unisntall the Intel Chipset Identification Utility as ChipUtil325.exe is crashing constantly (Events 7218,7220,7225)
Root list catalogue (Events 7701) It looks like your Certificate Revocation List (CRL) is not up to date. I posted something on this recently, I'll reference it and get back to you shortly.
Channel Error 36888 refers to Secure Channel (sChannel), this uses Transport layer Secrity (TLS) and SSL (Secure Sockets Layer) for security encryption, although it uses TLS by default. You may see advice to uncheck the use of TLS in your browser (ie - internet options, advanced tab) to remove this error but I don't think it will fix your issue (just hide it from you). This error can be caused by:
- An certificate catalogue that's not up to date (which you have)
- Power management issues (which I will revisit below)
- Port permission on your firewall (which we are going to uninstall anyway)
Event 10016 errors this occurs when permission for the COM Server application for a particular application is not allowed. We can set the permissions to allowed by using dcomcnfg.exe but first I need to know what they are.
- Open REGEDIT and click on computer
- Navigate to HKEY_CLASSES_ROOT\CLSID\CLSID
View attachment 84920
- Press F3 (for FIND)
- Paste in the first of the below APPID's and search for it
- When you find it, in the right hand column you should have another registry entry could AppID, double click on this then copy and paste the value data here.
View attachment 84919
- Repeat for the next APPID
- If there is no AppID in the right column, please right click on the EVENT APPID that you found in the CLSID key and export a copy, then attach it to your thread.
View attachment 84921
(Note the Key's I used in the examples are not your EVENT APPID key (I don't have those two on my system)
(Event 26964)
EVENT APPID
{145B4335-FE2A-4927-A040-7C35AD3180EF}
EVENT APPID
{D3DCB472-7261-43CE-924B-0704BD730D5F}
Power Management
Previously we talked about sleep mode and I want to ensure that your wireless adapter is not affected. I know that we ruled out that your PC is not going into sleep mode or coming out of it to cause the issue, but what if it's just checking for it and crashing? There is one event entry that may support this scenario so let's rule this out (and I forgot to note which event number sorry
).
- Open device manager Type devmgmt.msc into RUN or SEARCH and press ENTER.
- Navigate to your wireless network device
- Right click and select properties
- On the Power management tab, UNTICK "Allow the computer to turn this device off"
- Ok exit
- repeat this for all network adapters (where the Power Management option exists)
- Open control panel and click on power options
- Select Change plan settings (in your current plan)
- select "put the computer to sleep 'NEVER' from the dropdown"
- Save Changes
I've been through the event logs and there are a few patters emerging.
Before we go any further, please consider my request to re-install VMWARE, these events may or may not be related to your BSOD issue and we should at least attempt to reinstall VMware first before we go down the wrong road.
I know this is dragging on a bit, but if you could please test for BSOD between each change it will help us pinpoint the issue.
The Capt and I have both mentioned that your firewall/antivirus may be causing your problem and Capt has suggested that you uninstall it and we disabled this for testing purposes, yet found that the the issue still occurs. However, like the misleading information in the mini-dump that you first posted, it' s been niggling at me. Let's take the Capt's advice because regardless of the product being disabled, the drivers that it uses are likely to be still loaded in windows. Importantly, the new information in the event log entries support this scenario. Especially the fact that many of the BSOD's are commonly preceded by the loading of the the Zone alarm vsdatant.sys.
Here is the other event log follow-ups; but please note that they may not all be related:
Events 7218,7220,7225 - Unisntall the Intel Chipset Identification Utility as ChipUtil325.exe is crashing constantly (Events 7218,7220,7225)
Root list catalogue (Events 7701) It looks like your Certificate Revocation List (CRL) is not up to date. I posted something on this recently, I'll reference it and get back to you shortly.
Channel Error 36888 refers to Secure Channel (sChannel), this uses Transport layer Secrity (TLS) and SSL (Secure Sockets Layer) for security encryption, although it uses TLS by default. You may see advice to uncheck the use of TLS in your browser (ie - internet options, advanced tab) to remove this error but I don't think it will fix your issue (just hide it from you). This error can be caused by:
- An certificate catalogue that's not up to date (which you have)
- Power management issues (which I will revisit below)
- Port permission on your firewall (which we are going to uninstall anyway)
Event 10016 errors this occurs when permission for the COM Server application for a particular application is not allowed. We can set the permissions to allowed by using dcomcnfg.exe but first I need to know what they are.
- Open REGEDIT and click on computer
- Navigate to HKEY_CLASSES_ROOT\CLSID\CLSID
View attachment 84920
- Press F3 (for FIND)
- Paste in the first of the below APPID's and search for it
- When you find it, in the right hand column you should have another registry entry could AppID, double click on this then copy and paste the value data here.
View attachment 84919
- Repeat for the next APPID
- If there is no AppID in the right column, please right click on the EVENT APPID that you found in the CLSID key and export a copy, then attach it to your thread.
View attachment 84921
(Note the Key's I used in the examples are not your EVENT APPID key (I don't have those two on my system)
(Event 26964)
EVENT APPID
{145B4335-FE2A-4927-A040-7C35AD3180EF}
EVENT APPID
{D3DCB472-7261-43CE-924B-0704BD730D5F}
Power Management
Previously we talked about sleep mode and I want to ensure that your wireless adapter is not affected. I know that we ruled out that your PC is not going into sleep mode or coming out of it to cause the issue, but what if it's just checking for it and crashing? There is one event entry that may support this scenario so let's rule this out (and I forgot to note which event number sorry
).- Open device manager Type devmgmt.msc into RUN or SEARCH and press ENTER.
- Navigate to your wireless network device
- Right click and select properties
- On the Power management tab, UNTICK "Allow the computer to turn this device off"
- Ok exit
- repeat this for all network adapters (where the Power Management option exists)
- Open control panel and click on power options
- Select Change plan settings (in your current plan)
- select "put the computer to sleep 'NEVER' from the dropdown"
- Save Changes
My Computer
At a glance
Windows 7 Ultimate 64 bitIntel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz8 GB KingstonNvidia GeForce 9600GT
- Computer Manufacturer/Model Number
- Custom Hack job
- OS
- Windows 7 Ultimate 64 bit
- CPU
- Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz
- Motherboard
- GigaByte EP45-UD3
- Memory
- 8 GB Kingston
- Graphics Card(s)
- Nvidia GeForce 9600GT
- Sound Card
- Soundblaster Audigy
- Monitor(s) Displays
- AOC x2 22"
- Hard Drives
- 2 x Samsung 500GB (RAID)
2 x Samsung 2TB
1 x WD Green 2TB
1 x Seagate 1TB
1 x Samsung 500GB
- PSU
- Thermaltake QFan 750W
- Case
- CM Scout Gaming
- Cooling
- Coolermaster V10
- Keyboard
- Microsoft Wireless Keyboard 1000
- Mouse
- Microsoft Wireless Optical 2000
- Internet Speed
- 320
- Other Info
- Winfast PVR2000CP
LG DVD-RAM DVD/RW/DL Super Multi
Linksys WMP300Nx2 Wireless Adapter