BSOD on new desktop Computer

timsparks · Jan 16, 2013

Hi guys,

I'm doing some basic IT support for a local charity.
They've just bought a new desktop, Windows 8 64bit, Compaq, AMD E1-1200 with 4Gb RAM.

Keeps getting BSOD reports - using Blue Screen View they seem to be ntoskrnl.exe (and on one occasion atikmdag.sys) - but no idea how to go about fixing this...

Dump reports attached. Can't do a full SF report yet as the computer in question is being used. Will do as soon as I can.

Any suggestions much appreciated.

Thanks,

Tim

usasma · Jan 17, 2013

Sorry for the delay in responding, my system is "borked"
Please submit the rest of the reports ASAP

2 antivirus's running (although from their appearance in the dump files it may have been that you've uninstalled Norton and installed AVG). Please remove the Norton and then make sure that the Windows Firewall is enabled (if the other antivirus doesn't have a firewall). Only run one antivirus and one firewall at a time.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

RTL8192cu.sys Tue Jun 15 05:56:58 2010 (4C174E6A)
Realtek RTL8192C Wireless USB drive
http://www.carrona.org/drivers/driver.php?id=RTL8192cu.sys

scmndisp.sys Fri May 27 06:30:22 2011 (4DDF7D3E)
Netgear Neutral Wireless Solution
http://www.carrona.org/drivers/driver.php?id=scmndisp.sys

SRTSPX64.SYS Tue Nov 15 17:30:55 2011 (4EC2E81F)
Symantec Real Time Storage Protection (PEL) x64
http://www.carrona.org/drivers/driver.php?id=SRTSPX64.SYS

CLVirtualDrive.sys Mon Dec 26 08:26:47 2011 (4EF87617)
CyberLink Virtual Device Driver
http://www.carrona.org/drivers/driver.php?id=CLVirtualDrive.sys

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Mon Jan 14 09:52:29.870 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\011413-33041-01.dmp]
Windows 8 Kernel Version 9200 MP (2 procs) Free x64
Built by: [B]9200[/B].16461.amd64fre.win8_gdr.121119-1606
System Uptime:[B]3 days 3:24:13.846[/B]
*** ERROR: Module load completed but symbols could not be loaded for cdd.dll
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]cdd.dll ( cdd+c51d )[/B]
BugCheck [B]3B, {c0000005, 107d29000, fffff8801b10f200, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000107d29000, Address of the instruction which caused the bugcheck
Arg3: fffff8801b10f200, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]0x3B_cdd+c51d[/B]
  BIOS Version                  8.10
  BIOS Release Date             09/27/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  CQ2930EA
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Jan 11 06:27:51.323 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\011113-28017-01.dmp]
Windows 8 Kernel Version 9200 MP (2 procs) Free x64
Built by: [B]9200[/B].16461.amd64fre.win8_gdr.121119-1606
System Uptime:[B]0 days 19:51:23.663[/B]
*** ERROR: Module load completed but symbols could not be loaded for cdd.dll
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]cdd.dll ( cdd+1a4d1 )[/B]
BugCheck [B]3B, {c0000005, ad2ac000, fffff88018a59510, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 00000000ad2ac000, Address of the instruction which caused the bugcheck
Arg3: fffff88018a59510, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME: [B]iexplore.exe[/B]
FAILURE_BUCKET_ID: [B]0x3B_cdd+1a4d1[/B]
  BIOS Version                  8.10
  BIOS Release Date             09/27/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  CQ2930EA
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jan 10 09:26:22.137 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\011013-35365-01.dmp]
Windows 8 Kernel Version 9200 MP (2 procs) Free x64
Built by: [B]9200[/B].16461.amd64fre.win8_gdr.121119-1606
System Uptime:[B]0 days 0:57:28.447[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]win32k.sys ( win32k+bf767 )[/B]
BugCheck [B]3B, {c0000005, 4b116000, fffff8801a5fdb20, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 000000004b116000, Address of the instruction which caused the bugcheck
Arg3: fffff8801a5fdb20, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]0x3B_win32k+bf767[/B]
  BIOS Version                  8.10
  BIOS Release Date             09/27/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  CQ2930EA
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Jan  4 10:54:48.790 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\010413-28579-01.dmp]
Windows 8 Kernel Version 9200 MP (2 procs) Free x64
Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
System Uptime:[B]1 days 6:49:42.842[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+36216 )[/B]
BugCheck [B]AB, {3, c0, 0, 2}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000AB"]SESSION_HAS_VALID_POOL_ON_EXIT (ab)[/URL]
Arguments: 
Arg1: 0000000000000003, session ID
Arg2: 00000000000000c0, number of paged pool bytes that are leaking
Arg3: 0000000000000000, number of nonpaged pool bytes that are leaking
Arg4: 0000000000000002, total number of paged and nonpaged allocations that are leaking.
    nonpaged allocations are in the upper half of this word,
    paged allocations are in the lower half of this word.
BUGCHECK_STR:  0xAB_Gtmp
PROCESS_NAME: [B]csrss.exe[/B]
FAILURE_BUCKET_ID: [B]LEAKED_SESSION_POOLTAG_Gtmp[/B]
  BIOS Version                  8.10
  BIOS Release Date             09/27/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  CQ2930EA
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Mon Jan 14 09:52:29.870 2013 (UTC - 5:00)**************************
[COLOR=RED][B]RTL8192cu.sys               Tue Jun 15 05:56:58 2010 (4C174E6A)[/B][/COLOR]
[COLOR=RED][B]CLVirtualDrive.sys          Mon Dec 26 08:26:47 2011 (4EF87617)[/B][/COLOR]
RTKVHD64.sys                Tue Jun 19 04:50:56 2012 (4FE03D70)
usbfilter.sys               Tue Jun 19 07:07:40 2012 (4FE05D7C)
L1C63x64.sys                Wed Jul 18 22:54:44 2012 (500776F4)
dump_storahci.sys           Wed Jul 25 22:30:35 2012 (5010ABCB)
atikmpag.sys                Wed Aug  8 09:48:21 2012 (50226E25)
atikmdag.sys                Wed Aug  8 10:32:04 2012 (50227864)
avgrkx64.sys                Thu Sep 13 20:41:40 2012 (50527D44)
avgloga.sys                 Thu Sep 20 21:23:51 2012 (505BC1A7)
avgldx64.sys                Mon Oct  1 21:05:50 2012 (506A3DEE)
avgidsha.sys                Sun Oct 14 21:22:54 2012 (507B656E)
avgidsdrivera.sys           Mon Oct 22 06:47:11 2012 (5085242F)
avgmfx64.sys                Thu Nov 15 17:03:50 2012 (50A566C6)
avgwfpa.sys                 Mon Nov 26 17:09:35 2012 (50B3E89F)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Jan 11 06:27:51.323 2013 (UTC - 5:00)**************************
avgmfx64.sys                Thu Oct  4 21:08:44 2012 (506E331C)
avgwfpa.sys                 Thu Nov  1 18:44:14 2012 (5092FB3E)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Jan  4 10:54:48.790 2013 (UTC - 5:00)**************************
[COLOR=RED][B]scmndisp.sys                Fri May 27 06:30:22 2011 (4DDF7D3E)[/B][/COLOR]
[COLOR=RED][B]SRTSPX64.SYS                Tue Nov 15 17:30:55 2011 (4EC2E81F)[/B][/COLOR]
SYMEVENT64x86.SYS           Wed May 23 20:52:24 2012 (4FBD8648)
SYMNETS.SYS                 Fri Jul 20 22:07:07 2012 (500A0ECB)
Ironx64.SYS                 Mon Jul 23 20:34:50 2012 (500DEDAA)
EraserUtilRebootDrv.sys     Tue Jul 31 19:36:50 2012 (50186C12)
eeCtrl64.sys                Tue Jul 31 19:36:51 2012 (50186C13)
rtwlanu.sys                 Wed Aug  1 05:42:36 2012 (5018FA0C)
IDSvia64.sys                Tue Aug 28 22:48:40 2012 (503D8308)
SYMDS64.SYS                 Tue Oct  2 22:52:00 2012 (506BA850)
SYMEFA64.SYS                Wed Oct  3 15:00:06 2012 (506C8B36)
BHDrvx64.sys                Fri Oct 19 00:40:41 2012 (5080D9C9)
[/FONT]

timsparks · Jan 23, 2013

Ok - got the full report this time. See attached.

Correct, Norton came preinstalled - then was uninstalled and then AVG installed. As far as I can tell Windows Firewall is turned on.

I'll go through those drivers when I next get a moment on the machine.

usasma · Jan 23, 2013

You have a Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter

I do not recommend using wireless USB network devices. Especially in Win7/Win8 systems.
These wireless USB devices have many issues with Win7(and I suspect with Win8) - using Vista drivers with them is almost sure to cause a BSOD.
Should you want to keep using these devices, be sure to have Win7/Win8 drivers - DO NOT use Vista drivers!!!
An installable wireless PCI/PCIe card that's plugged into your motherboard is much more robust, reliable, and powerful.

This device has a problem:

WAN Miniport (Network Monitor) #2 ROOT\MS_NDISWANBH\0001 This device is not working properly because Windows cannot load the drivers required for this device.

Please locate it in Device Manager (Network Adapters section)
Right click on it and select "Uninstall"
Reboot and see if it returns with a problem.
Post back with the results (fixed or not).

Other than that, the advice from my first post still applies.

BSOD on new desktop Computer

timsparks

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

timsparks

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One