Results 1 to 7 of 7
  1. #1
    New Lounger
    Join Date
    Jun 2013
    Thanked 0 Times in 0 Posts

    Blue screen almost every day

    Hello, i am asking for your help because my computer gets a blue screen almost every day, which is really scaring me, so i think i need to zip the minidump file for you to be able to tell me what to do so that is what i have done. Thanks a lot for your help and time.

  2. #2
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    A cultural area in SW England
    Thanked 185 Times in 170 Posts
    It would be easier in the short term if you gave the STOP code and the small amount of text found at the top left of the Blue Screen. Are they all the same?

    STOP: 0x0000007a (0x0000000000000004, 0x0000000000000000, 0xfffffa800a1206e0, 0x000007fbba710218) KERNEL_DATA_INPAGE_ERROR

    from which you extract
    (as I highlighted in red)
    Your STOP code(s) will undoubtedly differ!

    Time prevents everything happening all at once...

  3. #3
    New Lounger
    Join Date
    Jun 2013
    Thanked 0 Times in 0 Posts
    Well i have never written it so i gues i will next time i get one, but i have downloaded who crashed and i think i get th stop code with that, there is 5 differents one :
    Bugcheck code: 0xF7 (0xFFFFF8800C6911F8, 0xF880021D439D, 0xFFFF077FFDE2BC62, 0x0)
    Bugcheck code: 0xFC (0xFFFFF8800157845A, 0x8000000004872963, 0xFFFFF8800EF6C0B0, 0x2)
    Bugcheck code: 0xF7 (0xFFFFF8800DE721F8, 0xF8800A631383, 0xFFFF077FF59CEC7C, 0x0)
    Bugcheck code: 0x3B (0xC0000005, 0xFFFFF800039C0B27, 0xFFFFF8800EF51B90, 0x0)
    Bugcheck code: 0xFC (0xFFFFF8800120545A, 0x800000000454F963, 0xFFFFF8800C1E50B0, 0x2)

    Is this helping you ? I am downloading the latest updates of my drivers and i will try to do what whocrashed tells me, hope the bugcheck code is helping you

  4. #4
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    A cultural area in SW England
    Thanked 185 Times in 170 Posts
    STOP error 0xF7 means that a driver has overrun a stack-based buffer. STOP code 0x000000F7 may also display "DRIVER_OVERRAN_STACK_BUFFER" on the same STOP message.

    STOP error 0xFC means that an attempt was made to execute non-executable memory. STOP code 0x000000FC may also display "ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY" on the same STOP message.

    STOP error 0x3B means that an exception happened while executing a routine that transitions from non-privileged code to privileged code. STOP code 0x0000003B may also display "SYSTEM_SERVICE_EXCEPTION" on the same STOP message.

    That is an collection of STOP codes I've never come across before, but it looks like driver-related problems. Have you installed some new hardware recently? If so, could you try removing it, to see if that improves matters?

    Time prevents everything happening all at once...

  5. #5
    New Lounger
    Join Date
    Jun 2013
    Thanked 0 Times in 0 Posts
    No i didn't, but i am installing latest updates for driveres, will tell if it's better.

  6. #6
    Super Moderator jwitalka's Avatar
    Join Date
    Dec 2009
    Thanked 791 Times in 713 Posts
    You might also want to run a memory test to make sure you're memory is OK as well as insuring you don't have a dirty CPU/heatsink assembly causing overheating.
    For a memory test, click on Start and type memory then click on Windows Memory Diagnostic.


  7. #7
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Cardiff, UK
    Thanked 553 Times in 460 Posts
    The dumps have the feel of an infection; 2x 0xFC, 2x 0xF7 + 1 0x3B - 4 of them have the antivirus file system filter/driver involved and the 0xF7 bugcheck has been related to malware infections.

    There are other possible contenders amongst the drivers, the Vista-era SaiK0728.sys (Saitek mouse/pen driver), the GigaByte 'utilities' Easy Saver and On/Off Charge driver and DaemonTools all need uninstalling to test. All other pre 2011 drivers listed need checking/updating too, details and some hopefully useful links for 3rd party drivers are listed below.

    I would remove Avast! during testing, follow up the uninstall by using the removal tool to ensure any remnants are removed: Then install MSE during testing: and check that the buit-in Windows firewall is enabled.

    To try to flush out any bad driver, we need to enable Driver Verifier on 3rd party drivers - using DV is risky, it's designed to cause stress (we want it to trigger a crash and save a dump!) and may lead to a Blue screen on boot - carefully read and follow the instructions so you can activate it and know how to react if it crashes on the first boot:

    Once you have triggered 2-3 crashes using DV, turn it off, reboot and attach the latest dumps.

    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: g:\symbols;srv*c:\Symbols*
    Executable search path is:
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
    Machine Name:
    Kernel base = 0xfffff800`03606000 PsLoadedModuleList = 0xfffff800`03849670
    Debug session time: Thu Jun 6 20:29:20.583 2013 (GMT+1)
    System Uptime: 0 days 1:49:04.410
    Loading Kernel Symbols
    .................................................. .............
    .................................................. ..............
    Loading User Symbols
    Loading unloaded module list
    Unable to load image \??\C:\Windows\system32\drivers\aswMonFlt.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for aswMonFlt.sys
    *** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    Use !analyze -v to get detailed debugging information.

    BugCheck F7, {fffff8800de721f8, f8800a631383, ffff077ff59cec7c, 0}

    Probably caused by : aswMonFlt.sys ( aswMonFlt+a1fe )

    Followup: MachineOwner

    0: kd> !analyze -v; !sysinfo cpuspeed; !sysinfo SMBIOS; lmtsmn; q
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    A driver has overrun a stack-based buffer. This overrun could potentially
    allow a malicious user to gain control of this machine.

    A driver overran a stack-based buffer (or local variable) in a way that would
    have overwritten the function's return address and jumped back to an arbitrary
    address when the function returned. This is the classic "buffer overrun"
    hacking attack and the system has been brought down to prevent a malicious user
    from gaining complete control of it.

    Do a kb to get a stack backtrace -- the last routine on the stack before the
    buffer overrun handlers and bugcheck call is the one that overran its local
    Arg1: fffff8800de721f8, Actual security check cookie from the stack
    Arg2: 0000f8800a631383, Expected security check cookie
    Arg3: ffff077ff59cec7c, Complement of the expected security check cookie
    Arg4: 0000000000000000, zero

    Debugging Details:


    SECURITY_COOKIE: Expected 0000f8800a631383 found fffff8800de721f8



    PROCESS_NAME: des2svr.exe


    LAST_CONTROL_TRANSFER: from fffff8800a62d1fe to fffff8000367bc00

    fffff880`0de71058 fffff880`0a62d1fe : 00000000`000000f7 fffff880`0de721f8 0000f880`0a631383 ffff077f`f59cec7c : nt!KeBugCheckEx
    fffff880`0de71060 00000000`000000f7 : fffff880`0de721f8 0000f880`0a631383 ffff077f`f59cec7c 00000000`00000000 : aswMonFlt+0xa1fe
    fffff880`0de71068 fffff880`0de721f8 : 0000f880`0a631383 ffff077f`f59cec7c 00000000`00000000 fffff800`036a683b : 0xf7
    fffff880`0de71070 0000f880`0a631383 : ffff077f`f59cec7c 00000000`00000000 fffff800`036a683b fffff880`0a6301b4 : 0xfffff880`0de721f8
    fffff880`0de71078 ffff077f`f59cec7c : 00000000`00000000 fffff800`036a683b fffff880`0a6301b4 fffff880`0a62d856 : 0xf880`0a631383
    fffff880`0de71080 00000000`00000000 : fffff800`036a683b fffff880`0a6301b4 fffff880`0a62d856 00000000`00000000 : 0xffff077f`f59cec7c


    fffff880`0a62d1fe ?? ???


    SYMBOL_NAME: aswMonFlt+a1fe

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: aswMonFlt

    IMAGE_NAME: aswMonFlt.sys



    BUCKET_ID: X64_0xF7_MISSING_GSFRAME_aswMonFlt+a1fe

    Followup: MachineOwner
    SaiK0728.sys Fri Jan 18 18:28:04 2008 (4790EFB4)

    gdrv.sys Fri Mar 13 03:22:29 2009 (49B9D175)
    Gigabyte Easy Saver - mobo power utility driver

    intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
    Intel Processor driver

    tap0901t.sys Wed Sep 16 07:02:43 2009 (4AB07F83)
    Google Earth or Tunngle (P2P VPN software)

    amdxata.sys Fri Mar 19 16:18:18 2010 (4BA3A3CA)
    AMD storage controller driver - usually from the Windows 7 DVD

    AppleCharger.sys Mon Jan 10 09:57:29 2011 (4D2AD809)
    GIGABYTE On/Off Charge driver. See here for details - [br] May cause BSOD on Win7/8 systems - uninstall to test (haven't seen recently (15Jan2013))

    speedfan.sys Fri Mar 18 16:08:46 2011 (4D83838E)

    iaStor.sys Tue Apr 26 19:06:18 2011 (4DB7099A)
    Intel Storage drivers

    nvBridge.kmd Sat May 21 04:58:23 2011 (4DD7385F)
    nVidia Compatible Vista Kernel Mode Driver (likely belongs to nForce chipset drivers)

    SCDEmu.SYS Wed Jun 15 09:29:27 2011 (4DF86D67)
    PowerISO Virtual Drive driver

    SaiU0CCB.sys Mon Sep 19 13:41:38 2011 (4E773882)
    Saitek HID Driver (likely for a mouse)

    SaiK0CCB.sys Mon Sep 19 13:41:43 2011 (4E773887)
    Saitek HID Driver (likely for a mouse)

    tap0901.sys Thu Nov 24 18:50:27 2011 (4ECE91F3)
    OpenVPN driver or COMODO

    dtsoftbus01.sys Fri Jan 13 13:45:46 2012 (4F10358A)
    Daemon Tools driver [br] Possible BSOD issues in Win7

    SaiMini.sys Mon Jan 23 17:29:11 2012 (4F1D98E7)
    Saitek Magic Mini driver

    SaiBus.sys Mon Jan 23 17:29:11 2012 (4F1D98E7)
    Saitek Magic Bus driver

    IntcDAud.sys Tue Jun 19 15:40:51 2012 (4FE08F73)
    Intel Graphics Media Accelerator HD Driver

    HECIx64.sys Mon Jul 2 23:14:58 2012 (4FF21D62)
    Intel Management Engine Interface

    nvhda64v.sys Tue Jul 3 16:25:04 2012 (4FF30ED0)
    nVidia HDMI Audio Device (nForce chipset driver)

    EtronXHCI.sys Fri Jul 20 08:15:46 2012 (500905A2)
    Etron USB 3.0 Extensible Host Controller Driver

    EtronHub3.sys Fri Jul 20 08:15:52 2012 (500905A8)
    Etron USB 3.0 Extensible Hub Driver

    mbam.sys Mon Aug 20 17:49:41 2012 (50326AA5)

    RTKVHD64.sys Tue Sep 11 14:57:45 2012 (504F4359)
    Realtek High Definition Audio Function Driver

    rtwlanu.sys Wed Sep 12 09:35:53 2012 (50504969)
    Realtek RTLxxxxx Wireless USB 2.0 Adapter

    igdkmd64.sys Wed Oct 17 20:12:29 2012 (507F031D)
    Intel Graphics driver

    Rt64win7.sys Thu Oct 25 10:20:09 2012 (50890449)
    Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC

    iaStorA.sys Mon Nov 19 20:09:40 2012 (50AA9204)
    Intel RST (Rapid Storage Technology) driver

    dump_iaStorA.sys Mon Nov 19 20:09:40 2012 (50AA9204)
    driver created to provide disk access during crash dump file generation

    iaStorF.sys Mon Nov 19 20:09:43 2012 (50AA9207)
    Intel RST (Rapid Storage Technology) Filter driver

    nvlddmkm.sys Fri Jan 18 13:22:15 2013 (50F94C87)
    nVidia Video drivers

    aswRvrt.sys Thu May 9 09:47:02 2013 (518B6286)
    Avast! Revert driver[br](Likely a boot driver)

    aswVmm.sys Thu May 9 09:47:06 2013 (518B628A)
    avast! VM Monitor driver

    aswFsBlk.SYS Thu May 9 09:47:16 2013 (518B6294)
    avast! File System Access Blocking Driver

    aswMonFlt.sys Thu May 9 09:47:23 2013 (518B629B)
    avast! File System Minifilter Driver

    aswTdi.SYS Thu May 9 09:47:32 2013 (518B62A4)
    avast! TDI Filter Driver

    aswrdr2.sys Thu May 9 09:47:41 2013 (518B62AD)

    aswrdr2.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

    aswSP.SYS Thu May 9 09:48:25 2013 (518B62D9)
    avast! Self Protection Driver

    aswSnx.SYS Thu May 9 09:48:30 2013 (518B62DE)
    avast! Virtualization Driver
    Last edited by satrow; 2013-06-12 at 18:17.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts