Results 1 to 7 of 7
  1. #1
    New Lounger
    Join Date
    Jun 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Blue screen almost every day

    Hello, i am asking for your help because my computer gets a blue screen almost every day, which is really scaring me, so i think i need to zip the minidump file for you to be able to tell me what to do so that is what i have done. Thanks a lot for your help and time.
    Minidump.zip

  2. #2
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    Location
    A cultural area in SW England
    Posts
    3,421
    Thanks
    33
    Thanked 195 Times in 175 Posts
    It would be easier in the short term if you gave the STOP code and the small amount of text found at the top left of the Blue Screen. Are they all the same?

    Example:
    STOP: 0x0000007a (0x0000000000000004, 0x0000000000000000, 0xfffffa800a1206e0, 0x000007fbba710218) KERNEL_DATA_INPAGE_ERROR

    from which you extract
    STOP 7A KERNEL_DATA_INPAGE_ERROR
    (as I highlighted in red)
    Your STOP code(s) will undoubtedly differ!
    BATcher

    Time prevents everything happening all at once...

  3. #3
    New Lounger
    Join Date
    Jun 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Well i have never written it so i gues i will next time i get one, but i have downloaded who crashed and i think i get th stop code with that, there is 5 differents one :
    Bugcheck code: 0xF7 (0xFFFFF8800C6911F8, 0xF880021D439D, 0xFFFF077FFDE2BC62, 0x0)
    Bugcheck code: 0xFC (0xFFFFF8800157845A, 0x8000000004872963, 0xFFFFF8800EF6C0B0, 0x2)
    Bugcheck code: 0xF7 (0xFFFFF8800DE721F8, 0xF8800A631383, 0xFFFF077FF59CEC7C, 0x0)
    Bugcheck code: 0x3B (0xC0000005, 0xFFFFF800039C0B27, 0xFFFFF8800EF51B90, 0x0)
    Bugcheck code: 0xFC (0xFFFFF8800120545A, 0x800000000454F963, 0xFFFFF8800C1E50B0, 0x2)

    Is this helping you ? I am downloading the latest updates of my drivers and i will try to do what whocrashed tells me, hope the bugcheck code is helping you

  4. #4
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    Location
    A cultural area in SW England
    Posts
    3,421
    Thanks
    33
    Thanked 195 Times in 175 Posts
    STOP Error 0x000000F7: DRIVER_OVERRAN_STACK_BUFFER
    STOP error 0xF7 means that a driver has overrun a stack-based buffer. STOP code 0x000000F7 may also display "DRIVER_OVERRAN_STACK_BUFFER" on the same STOP message.

    STOP Error 0x000000FC: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
    STOP error 0xFC means that an attempt was made to execute non-executable memory. STOP code 0x000000FC may also display "ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY" on the same STOP message.

    STOP Error 0x0000003B: SYSTEM_SERVICE_EXCEPTION
    STOP error 0x3B means that an exception happened while executing a routine that transitions from non-privileged code to privileged code. STOP code 0x0000003B may also display "SYSTEM_SERVICE_EXCEPTION" on the same STOP message.

    That is an collection of STOP codes I've never come across before, but it looks like driver-related problems. Have you installed some new hardware recently? If so, could you try removing it, to see if that improves matters?
    BATcher

    Time prevents everything happening all at once...

  5. #5
    New Lounger
    Join Date
    Jun 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts
    No i didn't, but i am installing latest updates for driveres, will tell if it's better.

  6. #6
    Super Moderator jwitalka's Avatar
    Join Date
    Dec 2009
    Location
    Minnesota
    Posts
    6,798
    Thanks
    117
    Thanked 799 Times in 720 Posts
    You might also want to run a memory test to make sure you're memory is OK as well as insuring you don't have a dirty CPU/heatsink assembly causing overheating.
    For a memory test, click on Start and type memory then click on Windows Memory Diagnostic.

    Jerry

  7. #7
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,492
    Thanks
    284
    Thanked 577 Times in 480 Posts
    The dumps have the feel of an infection; 2x 0xFC, 2x 0xF7 + 1 0x3B - 4 of them have the antivirus file system filter/driver involved and the 0xF7 bugcheck has been related to malware infections.

    There are other possible contenders amongst the drivers, the Vista-era SaiK0728.sys (Saitek mouse/pen driver), the GigaByte 'utilities' Easy Saver and On/Off Charge driver and DaemonTools all need uninstalling to test. All other pre 2011 drivers listed need checking/updating too, details and some hopefully useful links for 3rd party drivers are listed below.

    I would remove Avast! during testing, follow up the uninstall by using the removal tool to ensure any remnants are removed: http://www.avast.com/uninstall-utility Then install MSE during testing: http://windows.microsoft.com/en-US/w...tials-download and check that the buit-in Windows firewall is enabled.

    To try to flush out any bad driver, we need to enable Driver Verifier on 3rd party drivers - using DV is risky, it's designed to cause stress (we want it to trigger a crash and save a dump!) and may lead to a Blue screen on boot - carefully read and follow the instructions so you can activate it and know how to react if it crashes on the first boot: http://carrona.org/verifier.html

    Once you have triggered 2-3 crashes using DV, turn it off, reboot and attach the latest dumps.


    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: g:\symbols;srv*c:\Symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
    Machine Name:
    Kernel base = 0xfffff800`03606000 PsLoadedModuleList = 0xfffff800`03849670
    Debug session time: Thu Jun 6 20:29:20.583 2013 (GMT+1)
    System Uptime: 0 days 1:49:04.410
    Loading Kernel Symbols
    .................................................. .............
    .................................................. ..............
    .................................................
    Loading User Symbols
    Loading unloaded module list
    .....
    Unable to load image \??\C:\Windows\system32\drivers\aswMonFlt.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for aswMonFlt.sys
    *** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    Use !analyze -v to get detailed debugging information.

    BugCheck F7, {fffff8800de721f8, f8800a631383, ffff077ff59cec7c, 0}

    Probably caused by : aswMonFlt.sys ( aswMonFlt+a1fe )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v; !sysinfo cpuspeed; !sysinfo SMBIOS; lmtsmn; q
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    DRIVER_OVERRAN_STACK_BUFFER (f7)
    A driver has overrun a stack-based buffer. This overrun could potentially
    allow a malicious user to gain control of this machine.

    DESCRIPTION
    A driver overran a stack-based buffer (or local variable) in a way that would
    have overwritten the function's return address and jumped back to an arbitrary
    address when the function returned. This is the classic "buffer overrun"
    hacking attack and the system has been brought down to prevent a malicious user
    from gaining complete control of it.

    Do a kb to get a stack backtrace -- the last routine on the stack before the
    buffer overrun handlers and bugcheck call is the one that overran its local
    variable(s).
    Arguments:
    Arg1: fffff8800de721f8, Actual security check cookie from the stack
    Arg2: 0000f8800a631383, Expected security check cookie
    Arg3: ffff077ff59cec7c, Complement of the expected security check cookie
    Arg4: 0000000000000000, zero

    Debugging Details:
    ------------------


    DEFAULT_BUCKET_ID: GS_FALSE_POSITIVE_MISSING_GSFRAME

    SECURITY_COOKIE: Expected 0000f8800a631383 found fffff8800de721f8

    CUSTOMER_CRASH_COUNT: 1

    BUGCHECK_STR: 0xF7

    PROCESS_NAME: des2svr.exe

    CURRENT_IRQL: 0

    LAST_CONTROL_TRANSFER: from fffff8800a62d1fe to fffff8000367bc00

    STACK_TEXT:
    fffff880`0de71058 fffff880`0a62d1fe : 00000000`000000f7 fffff880`0de721f8 0000f880`0a631383 ffff077f`f59cec7c : nt!KeBugCheckEx
    fffff880`0de71060 00000000`000000f7 : fffff880`0de721f8 0000f880`0a631383 ffff077f`f59cec7c 00000000`00000000 : aswMonFlt+0xa1fe
    fffff880`0de71068 fffff880`0de721f8 : 0000f880`0a631383 ffff077f`f59cec7c 00000000`00000000 fffff800`036a683b : 0xf7
    fffff880`0de71070 0000f880`0a631383 : ffff077f`f59cec7c 00000000`00000000 fffff800`036a683b fffff880`0a6301b4 : 0xfffff880`0de721f8
    fffff880`0de71078 ffff077f`f59cec7c : 00000000`00000000 fffff800`036a683b fffff880`0a6301b4 fffff880`0a62d856 : 0xf880`0a631383
    fffff880`0de71080 00000000`00000000 : fffff800`036a683b fffff880`0a6301b4 fffff880`0a62d856 00000000`00000000 : 0xffff077f`f59cec7c


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    aswMonFlt+a1fe
    fffff880`0a62d1fe ?? ???

    SYMBOL_STACK_INDEX: 1

    SYMBOL_NAME: aswMonFlt+a1fe

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: aswMonFlt

    IMAGE_NAME: aswMonFlt.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 518b629b

    FAILURE_BUCKET_ID: X64_0xF7_MISSING_GSFRAME_aswMonFlt+a1fe

    BUCKET_ID: X64_0xF7_MISSING_GSFRAME_aswMonFlt+a1fe

    Followup: MachineOwner
    SaiK0728.sys Fri Jan 18 18:28:04 2008 (4790EFB4)
    Saitek
    http://www.carrona.org/drivers/driver.php?id=SaiK0728.sys

    gdrv.sys Fri Mar 13 03:22:29 2009 (49B9D175)
    Gigabyte Easy Saver - mobo power utility driver
    http://www.carrona.org/drivers/driver.php?id=gdrv.sys

    intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
    Intel Processor driver
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys

    tap0901t.sys Wed Sep 16 07:02:43 2009 (4AB07F83)
    Google Earth or Tunngle (P2P VPN software)
    http://www.carrona.org/drivers/driver.php?id=tap0901t.sys

    amdxata.sys Fri Mar 19 16:18:18 2010 (4BA3A3CA)
    AMD storage controller driver - usually from the Windows 7 DVD
    http://www.carrona.org/drivers/driver.php?id=amdxata.sys

    AppleCharger.sys Mon Jan 10 09:57:29 2011 (4D2AD809)
    GIGABYTE On/Off Charge driver. See here for details - http://www.gigabyte.us/MicroSite/185/on-off-charge.htm [br] May cause BSOD on Win7/8 systems - uninstall to test (haven't seen recently (15Jan2013))
    http://www.carrona.org/drivers/driver.php?id=AppleCharger.sys

    speedfan.sys Fri Mar 18 16:08:46 2011 (4D83838E)
    SpeedFan
    http://www.carrona.org/drivers/driver.php?id=speedfan.sys

    iaStor.sys Tue Apr 26 19:06:18 2011 (4DB7099A)
    Intel Storage drivers
    http://www.carrona.org/drivers/driver.php?id=iaStor.sys

    nvBridge.kmd Sat May 21 04:58:23 2011 (4DD7385F)
    nVidia Compatible Vista Kernel Mode Driver (likely belongs to nForce chipset drivers)
    http://www.carrona.org/drivers/driver.php?id=nvBridge.kmd

    SCDEmu.SYS Wed Jun 15 09:29:27 2011 (4DF86D67)
    PowerISO Virtual Drive driver
    http://www.carrona.org/drivers/driver.php?id=SCDEmu.SYS

    SaiU0CCB.sys Mon Sep 19 13:41:38 2011 (4E773882)
    Saitek HID Driver (likely for a mouse)
    http://www.carrona.org/drivers/driver.php?id=SaiU0CCB.sys

    SaiK0CCB.sys Mon Sep 19 13:41:43 2011 (4E773887)
    Saitek HID Driver (likely for a mouse)
    http://www.carrona.org/drivers/driver.php?id=SaiK0CCB.sys

    tap0901.sys Thu Nov 24 18:50:27 2011 (4ECE91F3)
    OpenVPN driver or COMODO
    http://www.carrona.org/drivers/driver.php?id=tap0901.sys

    dtsoftbus01.sys Fri Jan 13 13:45:46 2012 (4F10358A)
    Daemon Tools driver [br] Possible BSOD issues in Win7
    http://www.carrona.org/drivers/driver.php?id=dtsoftbus01.sys

    SaiMini.sys Mon Jan 23 17:29:11 2012 (4F1D98E7)
    Saitek Magic Mini driver
    http://www.carrona.org/drivers/driver.php?id=SaiMini.sys

    SaiBus.sys Mon Jan 23 17:29:11 2012 (4F1D98E7)
    Saitek Magic Bus driver
    http://www.carrona.org/drivers/driver.php?id=SaiBus.sys

    IntcDAud.sys Tue Jun 19 15:40:51 2012 (4FE08F73)
    Intel Graphics Media Accelerator HD Driver
    http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys

    HECIx64.sys Mon Jul 2 23:14:58 2012 (4FF21D62)
    Intel Management Engine Interface
    http://www.carrona.org/drivers/driver.php?id=HECIx64.sys

    nvhda64v.sys Tue Jul 3 16:25:04 2012 (4FF30ED0)
    nVidia HDMI Audio Device (nForce chipset driver)
    http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys

    EtronXHCI.sys Fri Jul 20 08:15:46 2012 (500905A2)
    Etron USB 3.0 Extensible Host Controller Driver
    http://www.carrona.org/drivers/driver.php?id=EtronXHCI.sys

    EtronHub3.sys Fri Jul 20 08:15:52 2012 (500905A8)
    Etron USB 3.0 Extensible Hub Driver
    http://www.carrona.org/drivers/driver.php?id=EtronHub3.sys

    mbam.sys Mon Aug 20 17:49:41 2012 (50326AA5)
    MBAMProtector
    http://www.carrona.org/drivers/driver.php?id=mbam.sys

    RTKVHD64.sys Tue Sep 11 14:57:45 2012 (504F4359)
    Realtek High Definition Audio Function Driver
    http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys

    rtwlanu.sys Wed Sep 12 09:35:53 2012 (50504969)
    Realtek RTLxxxxx Wireless USB 2.0 Adapter
    http://www.carrona.org/drivers/driver.php?id=rtwlanu.sys

    igdkmd64.sys Wed Oct 17 20:12:29 2012 (507F031D)
    Intel Graphics driver
    http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys

    Rt64win7.sys Thu Oct 25 10:20:09 2012 (50890449)
    Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
    http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys

    iaStorA.sys Mon Nov 19 20:09:40 2012 (50AA9204)
    Intel RST (Rapid Storage Technology) driver
    http://www.carrona.org/drivers/driver.php?id=iaStorA.sys

    dump_iaStorA.sys Mon Nov 19 20:09:40 2012 (50AA9204)
    driver created to provide disk access during crash dump file generation
    http://www.carrona.org/drivers/driver.php?id=dump_iaStorA.sys

    iaStorF.sys Mon Nov 19 20:09:43 2012 (50AA9207)
    Intel RST (Rapid Storage Technology) Filter driver
    http://www.carrona.org/drivers/driver.php?id=iaStorF.sys

    nvlddmkm.sys Fri Jan 18 13:22:15 2013 (50F94C87)
    nVidia Video drivers
    http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys

    aswRvrt.sys Thu May 9 09:47:02 2013 (518B6286)
    Avast! Revert driver[br](Likely a boot driver)
    http://www.carrona.org/drivers/driver.php?id=aswRvrt.sys

    aswVmm.sys Thu May 9 09:47:06 2013 (518B628A)
    avast! VM Monitor driver
    http://www.carrona.org/drivers/driver.php?id=aswVmm.sys

    aswFsBlk.SYS Thu May 9 09:47:16 2013 (518B6294)
    avast! File System Access Blocking Driver
    http://www.carrona.org/drivers/driver.php?id=aswFsBlk.SYS

    aswMonFlt.sys Thu May 9 09:47:23 2013 (518B629B)
    avast! File System Minifilter Driver
    http://www.carrona.org/drivers/driver.php?id=aswMonFlt.sys

    aswTdi.SYS Thu May 9 09:47:32 2013 (518B62A4)
    avast! TDI Filter Driver
    http://www.carrona.org/drivers/driver.php?id=aswTdi.SYS

    aswrdr2.sys Thu May 9 09:47:41 2013 (518B62AD)

    aswrdr2.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

    aswSP.SYS Thu May 9 09:48:25 2013 (518B62D9)
    avast! Self Protection Driver
    http://www.carrona.org/drivers/driver.php?id=aswSP.SYS

    aswSnx.SYS Thu May 9 09:48:30 2013 (518B62DE)
    avast! Virtualization Driver
    http://www.carrona.org/drivers/driver.php?id=aswSnx.SYS
    Last edited by satrow; 2013-06-12 at 19:17.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •