Win7 64bit BSOD

[superstat]

Hi,

Getting BSOD randomly, no pattern seems to be occuring. Could someone please have a look at the dmp?

Its attached. Any help would be greatly appreciated. If its any help I got two units of the same spec and one is running perfectly and the problem machine has this BSOD problem.

Thank you very much in advance

AJ

 

[Jonathan_King]

Welcome!

What anti-virus are you using? If you are using AVG, remove it, and install Microsoft Security Essentials instead.

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\021510-21637-01\021510-21637-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a4a000 PsLoadedModuleList = 0xfffff800`02c87e50
Debug session time: Mon Feb 15 02:52:38.094 2010 (GMT-5)
System Uptime: 0 days 0:10:04.219
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {5003, fffff780c0000000, 439b, 696400128736}

Unable to load image \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AVGIDSFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSFilter.sys
Probably caused by : AVGIDSFilter.sys ( AVGIDSFilter+1406 )

Followup: MachineOwner
---------

 

[superstat]

Hi Jonathan,

I am using AVG yes. Do we suspect this to be the problem or do we know its the problem? I shall remove immediately.

Thank you very much indeed.

O and thanks for the welcome.

AJ

 

[Jonathan_King]

Hi Jonathan,

I am using AVG yes. Do we suspect this to be the problem or do we know its the problem? I shall remove immediately.

Thank you very much indeed.

O and thanks for the welcome.

AJ

The rogue file appears to belong to AVG. I recommend completely removing AVG with an uninstaller, like Revo Uninstaller.

 

[myzr7]

Bug check does say AVG is probable cause.Must be a corrupt version somehow if you have the same running on your other pc with no problems. Makes me wonder if maybe you have some malware on board. Might be worth a few scans with malwarebytes

....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {5003, fffff780c0000000, 439b, 696400128736}
Unable to load image \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AVGIDSFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSFilter.sys
Probably caused by : AVGIDSFilter.sys ( AVGIDSFilter+1406 )
Followup: MachineOwner
---------
6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff780c0000000
Arg3: 000000000000439b
Arg4: 0000696400128736
Debugging Details:
------------------
 
BUGCHECK_STR:  0x1a_5003
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  avgcsrva.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff80002b2bc41 to fffff80002abbf00
STACK_TEXT:  
fffff880`07fb5248 fffff800`02b2bc41 : 00000000`0000001a 00000000`00005003 fffff780`c0000000 00000000`0000439b : nt!KeBugCheckEx
fffff880`07fb5250 fffff800`02ad8f56 : fffff6fc`c00f7bd8 00000000`00000001 fffff880`00000001 ffffffff`ffff0001 : nt! ?? ::FNODOBFM::`string'+0x2a22f
fffff880`07fb53c0 fffff800`02ae7f81 : fffff980`1ef7b000 00000000`008bb000 fffff880`00000004 fffff880`07fb55a8 : nt!MmCheckCachedPageStates+0x4d6
fffff880`07fb5570 fffff800`02ae7bf4 : fffffa80`084287c0 00000000`070bdf20 fffff880`07fb56b0 00000000`000034bc : nt!CcMapAndCopyInToCache+0x301
fffff880`07fb5660 fffff880`014edfb8 : 00000000`008c34bc fffffa80`0a394c00 fffff880`07fb5750 fffffa80`00008000 : nt!CcCopyWrite+0x194
fffff880`07fb56f0 fffff880`012be132 : fffffa80`0a394c80 fffff880`012c1732 fffffa80`00008000 00000000`00008001 : Ntfs!NtfsCopyWriteA+0x208
fffff880`07fb58e0 fffff880`012c1c2a : fffff880`07fb59b0 fffffa80`0a63b0d8 00000000`070bdf00 00000000`00008000 : fltmgr!FltpPerformFastIoCall+0xf2
fffff880`07fb5940 fffff880`012df7fe : 00000000`00008000 00000000`00000000 fffffa80`0a394c80 fffff880`07fb5b40 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`07fb5980 fffff880`02e01406 : fffff880`02e011c0 00000000`00000000 00000000`00000000 fffffa80`0a394cf4 : fltmgr!FltpFastIoWrite+0x1ce
fffff880`07fb5a20 fffff880`02e011c0 : 00000000`00000000 00000000`00000000 fffffa80`0a394cf4 fffff880`00000000 : AVGIDSFilter+0x1406
fffff880`07fb5a28 00000000`00000000 : 00000000`00000000 fffffa80`0a394cf4 fffff880`00000000 00000000`070bdf20 : AVGIDSFilter+0x11c0
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
AVGIDSFilter+1406
fffff880`02e01406 ??              ???
SYMBOL_STACK_INDEX:  9
SYMBOL_NAME:  AVGIDSFilter+1406
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: AVGIDSFilter
IMAGE_NAME:  AVGIDSFilter.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4acfa5a7
FAILURE_BUCKET_ID:  X64_0x1a_5003_AVGIDSFilter+1406
BUCKET_ID:  X64_0x1a_5003_AVGIDSFilter+1406
Followup: MachineOwner
---------
6: kd> lmvm AVGIDSFilter
start             end                 module name
fffff880`02e00000 fffff880`02e0c000   AVGIDSFilter T (no symbols)           
    Loaded symbol image file: AVGIDSFilter.sys
    Image path: \??\C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys
    Image name: AVGIDSFilter.sys
    Timestamp:        Fri Oct 09 16:05:43 2009 (4ACFA5A7)
    CheckSum:         0000C5A9
    ImageSize:        0000C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[superstat]

Thank you very much.

I have done this now and will see what happens.

I have also attached all of the minidumps from the computer. 7 in 7 days. Could someone please have a look at these to see if it is AVG everytime. Thank you very much for all your help.

Superstat

 

[Jonathan_King]

Those dmps point to bad RAM.

Download a copy of Memtest86 and burn the ISO to a CD using ImgBurn. Boot from the CD, and run at least 5 passes.

 

[superstat]

Hey guys,

Just thought I would keep you updated.

Ran memory tests and also ran Dell memory tests and complete computer tests. Nothing.

Although it did pick up an error with a USB flash drive that has been in the machine since day one. I installed something from it and never removed it. I have now removed this and am running the computer to see if these errors continue. Thank you for your help. I'll keep you updated.

AJ