BSOD for normal user only - can I debug from admin a/c

Moose67 · Jun 15, 2014

Hi,

I understand the sticky and how to go about posting for BSOD help, but before I start can you tell me if I need to be logged in to the account that has suffered the problem or can I do it from my (admin) account on the same computer? The unexpected_kernel_mode_trap problem has (so far) only occurred on my son's user account.

Once I know which account to start from I'll follow the sticky and ask for help with the problem.

Cheers, Moose.

(PS will it be ok to follow this thread now or will you want a new one with the U_K_M_T error message in the title?)

usasma · Jun 16, 2014

Start from your son's account - that's where we'd like the reports from.

After generating the reports, please start with these free hardware diagnostics (you can run them from any account): Hardware Diagnostics
The unexpected_kernel_mode_trap problem is often a hardware issue (see the "Usual causes" section here: BSOD Index ) so we start with the diagnostics first.

Moose67 · Jun 29, 2014

Sorry for the delay, we've had the week from hell and I haven't had a chance to get on the computers to make a start on this.

I have attached the SF Diagnostic Tool results in the zipped folder. I've given it my user name on this forum, but I've suddenly thought you might have meant "the user name for the computer user account"

If you need the user account name it's "Adam C".

I will run the debug tool and attach it in a minute.

Thanks for your help.

Moose.

Edit - this has also occurred on my wife's user account as well. She also has a standard account not admin, but I'll work through solely on Adam's account for now and hope the solution sorts it out for them both.

Moose67 · Jun 29, 2014

I thought for a moment I was on top of all this, but I've fallen at the second hurdle... My Avast blocked the SF Debug download as it thought it was suspicious and it now won't let me access gthe download link. I'm going to try and contact an Avast forum to find out how I can bypass the block, but for now I can't post the results of the SF debug tool.

I will run the hardware diagnostics as mentioned in your original comment and will get the debug tool run once I can get it past Avast.

Cheers, Moose.

usasma · Jun 30, 2014

I've also been extremely busy this last week, so don't worry about the delay.

Only 53 Windows Updates installed. Most systems have 60 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

Don't worry about the specific number, it's just important that you have checked and installed any updates that were available.

Please ensure that there is only one anti-virus and one firewall running resident in memory at a time. This includes MalwareBytes. The problem is that these programs can compete for access and can monopolize your system. In most cases it'll just slow down your system, but in some cases it can allow malware in and can cause system crashes (to include BSOD's).

FYI - I leave my anti-virus running when I scan with MalwareBytes - but this is only for scans, not for memory resident protection. If it crashes during this, then I start looking for other problems.

Use Toshiba's Service Station app to ensure that you have all Toshiba updates.

Please uninstall SuperAntiSpyware as it's outdated (drivers date from 2011) and could be the cause of some problems.
I wouldn't reinstall it (as you also have MalwareBytes as a backup scanner), but if you must - please wait until the system is stabilized before downloading and installing the latest, Win8.1 compatible version.

The memory dumps blame wpcfltr.sys - a driver related to the Family Safety app from Microsoft.
Please try removing all Family Safety stuff from the system.
If you had Family Safety prior to Win8/8.1 - uninstall it.
Follow the instructions here: How do I remove Family Safety? - Windows Help

Also, be sure to try the malware scans from the hardware diagnostics links I gave you earlier - this could be malware-related.

I've also gotta wonder if there's a problem with Avast because it blocked the report app and won't let you back at it (this doesn't happen often). Could it be blocking some components of Family Safety? The test here is to:
- uninstall Avast
- enable Windows Defender and the Windows Firewall
- test to see if this stops the BSOD's

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Sat Jun 28 15:47:55.791 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\062814-35078-01.dmp]
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]3 days 1:44:49.551[/B]
*** WARNING: Unable to verify timestamp for wpcfltr.sys
*** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
Probably caused by :[B]wpcfltr.sys ( wpcfltr+3517 )[/B]
BugCheck [B]7F, {8, ffffd000255830b0, ffffd00022f78f10, fffff802e50b743b}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000007F"]UNEXPECTED_KERNEL_MODE_TRAP (7f)[/URL]
Arguments: 
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd000255830b0
Arg3: ffffd00022f78f10
Arg4: fffff802e50b743b
BUGCHECK_STR:  0x7f_8
PROCESS_NAME:  spoolsv.exe
FAILURE_BUCKET_ID: [B]0x7f_8_wpcfltr+3517[/B]
CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2395[/B]
  BIOS Version                  1.20
  BIOS Release Date             09/04/2013
  Manufacturer                  TOSHIBA
  Product Name                  SATELLITE C55-A-1HN
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Jun 22 12:35:14.596 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\062214-30312-01.dmp]
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]2 days 22:19:32.358[/B]
*** WARNING: Unable to verify timestamp for wpcfltr.sys
*** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
Probably caused by :[B]wpcfltr.sys ( wpcfltr+3476 )[/B]
BugCheck [B]7F, {8, ffffd001da3830b0, ffffd0002251efb0, fffff802b10ae5b8}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000007F"]UNEXPECTED_KERNEL_MODE_TRAP (7f)[/URL]
Arguments: 
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd001da3830b0
Arg3: ffffd0002251efb0
Arg4: fffff802b10ae5b8
BUGCHECK_STR:  0x7f_8
PROCESS_NAME:  AvastSvc.exe
FAILURE_BUCKET_ID: [B]0x7f_8_wpcfltr+3476[/B]
CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2395[/B]
  BIOS Version                  1.20
  BIOS Release Date             09/04/2013
  Manufacturer                  TOSHIBA
  Product Name                  SATELLITE C55-A-1HN
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jun 19 02:36:11.572 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\061914-28781-01.dmp]
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]3 days 19:28:04.333[/B]
*** WARNING: Unable to verify timestamp for wpcfltr.sys
*** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
Probably caused by :[B]wpcfltr.sys ( wpcfltr+3517 )[/B]
BugCheck [B]7F, {8, ffffd001d8d830b0, ffffd00020e39f10, fffff802f28b943b}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000007F"]UNEXPECTED_KERNEL_MODE_TRAP (7f)[/URL]
Arguments: 
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd001d8d830b0
Arg3: ffffd00020e39f10
Arg4: fffff802f28b943b
BUGCHECK_STR:  0x7f_8
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x7f_8_wpcfltr+3517[/B]
CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2395[/B]
  BIOS Version                  1.20
  BIOS Release Date             09/04/2013
  Manufacturer                  TOSHIBA
  Product Name                  SATELLITE C55-A-1HN
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Jun 15 07:07:41.782 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\061514-29156-01.dmp]
Windows 8 Kernel Version 9600 MP (2 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 0:32:51.541[/B]
*** WARNING: Unable to verify timestamp for wpcfltr.sys
*** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
Probably caused by :[B]wpcfltr.sys ( wpcfltr+3517 )[/B]
BugCheck [B]7F, {8, fffff803e4286e70, ffffd0002251af10, fffff803e24a543b}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000007F"]UNEXPECTED_KERNEL_MODE_TRAP (7f)[/URL]
Arguments: 
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: fffff803e4286e70
Arg3: ffffd0002251af10
Arg4: fffff803e24a543b
BUGCHECK_STR:  0x7f_8
PROCESS_NAME:  dllhost.exe
FAILURE_BUCKET_ID: [B]0x7f_8_wpcfltr+3517[/B]
CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2395[/B]
  BIOS Version                  1.20
  BIOS Release Date             09/04/2013
  Manufacturer                  TOSHIBA
  Product Name                  SATELLITE C55-A-1HN
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Sat Jun 28 15:47:55.791 2014 (UTC - 4:00)**************************
[COLOR=RED][B]PEGAGFN.sys                 Wed Aug  5 01:50:46 2009 (4A791DB6)[/B][/COLOR]
[COLOR=RED][B]SASKUTIL64.SYS              Tue Jul 12 17:00:01 2011 (4E1CB5D1)[/B][/COLOR]
[COLOR=RED][B]SASDIFSV64.SYS              Thu Jul 21 19:03:00 2011 (4E28B024)[/B][/COLOR]
tos_sps64.sys               Sun Jun 17 21:21:30 2012 (4FDE829A)
TVALZFL.sys                 Sat Jul 21 18:29:07 2012 (500B2D33)
TVALZ_O.SYS                 Wed Jul 25 19:23:25 2012 (50107FED)
tdcmdpst.sys                Wed Jul 25 19:41:48 2012 (5010843C)
mbam.sys                    Thu Feb 28 15:33:07 2013 (512FBF03)
AmUStor.SYS                 Mon May 27 05:08:18 2013 (51A32282)
IntcDAud.sys                Tue Jul  2 06:31:16 2013 (51D2ABF4)
L1C63x64.sys                Tue Jul 16 02:56:31 2013 (51E4EE9F)
dump_iaStorA.sys            Thu Aug  1 21:39:52 2013 (51FB0DE8)
iaStorA.sys                 Thu Aug  1 21:39:52 2013 (51FB0DE8)
btfilter.sys                Fri Aug  9 05:41:27 2013 (5204B947)
Thotkey.sys                 Thu Aug 15 02:13:20 2013 (520C7180)
athwbx.sys                  Thu Aug 15 23:13:28 2013 (520D98D8)
stwrt64.sys                 Fri Aug 16 06:26:26 2013 (520DFE52)
TeeDriverx64.sys            Mon Aug 19 13:23:31 2013 (52125493)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
SynTP.sys                   Thu Aug 22 12:59:30 2013 (52164372)
Smb_driver_Intel.sys        Thu Aug 22 13:02:05 2013 (5216440D)
iwdbus.sys                  Thu Sep 26 17:38:04 2013 (5244A93C)
igdkmd64.sys                Mon Oct 28 17:57:02 2013 (526EDDAE)
tosrfec.sys                 Wed Oct 30 23:20:55 2013 (5271CC97)
aswKbd.sys                  Tue Mar 18 16:32:37 2014 (5328AD65)
aswRdr2.sys                 Thu Apr 17 07:02:56 2014 (534FB4E0)
aswMonFlt.sys               Thu Apr 17 07:04:01 2014 (534FB521)
aswRvrt.sys                 Thu Apr 17 07:04:41 2014 (534FB549)
aswVmm.sys                  Thu Apr 17 07:04:55 2014 (534FB557)
aswSnx.sys                  Mon May  5 04:04:42 2014 (5367461A)
aswNdisFlt.sys              Mon May  5 04:05:20 2014 (53674640)
aswSP.sys                   Mon May  5 04:11:11 2014 (5367479F)
aswStm.sys                  Mon May  5 04:11:48 2014 (536747C4)
[/FONT]

BSOD for normal user only - can I debug from admin a/c

Moose67

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

Moose67

New Member

My Computer

System One

Moose67

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One