Windows 8 and 8.1 Forums


BSOD for normal user only - can I debug from admin a/c

  1. #1


    Posts : 3
    Windows 8.1 64bit

    BSOD for normal user only - can I debug from admin a/c


    Hi,

    I understand the sticky and how to go about posting for BSOD help, but before I start can you tell me if I need to be logged in to the account that has suffered the problem or can I do it from my (admin) account on the same computer? The unexpected_kernel_mode_trap problem has (so far) only occurred on my son's user account.

    Once I know which account to start from I'll follow the sticky and ask for help with the problem.

    Cheers, Moose.

    (PS will it be ok to follow this thread now or will you want a new one with the U_K_M_T error message in the title?)

      My System SpecsSystem Spec

  2. #2


    Posts : 5,139
    Win8.1Pro - Finally!!!


    Start from your son's account - that's where we'd like the reports from.

    After generating the reports, please start with these free hardware diagnostics (you can run them from any account): Hardware Diagnostics
    The unexpected_kernel_mode_trap problem is often a hardware issue (see the "Usual causes" section here: BSOD Index ) so we start with the diagnostics first.
      My System SpecsSystem Spec

  3. #3


    Posts : 3
    Windows 8.1 64bit


    Sorry for the delay, we've had the week from hell and I haven't had a chance to get on the computers to make a start on this.

    I have attached the SF Diagnostic Tool results in the zipped folder. I've given it my user name on this forum, but I've suddenly thought you might have meant "the user name for the computer user account" If you need the user account name it's "Adam C".

    I will run the debug tool and attach it in a minute.

    Thanks for your help.

    Moose.

    Edit - this has also occurred on my wife's user account as well. She also has a standard account not admin, but I'll work through solely on Adam's account for now and hope the solution sorts it out for them both.
    Last edited by Moose67; 29 Jun 2014 at 07:05.
      My System SpecsSystem Spec

  4. #4


    Posts : 3
    Windows 8.1 64bit


    I thought for a moment I was on top of all this, but I've fallen at the second hurdle... My Avast blocked the SF Debug download as it thought it was suspicious and it now won't let me access gthe download link. I'm going to try and contact an Avast forum to find out how I can bypass the block, but for now I can't post the results of the SF debug tool.

    I will run the hardware diagnostics as mentioned in your original comment and will get the debug tool run once I can get it past Avast.

    Cheers, Moose.
      My System SpecsSystem Spec

  5. #5


    Posts : 5,139
    Win8.1Pro - Finally!!!


    I've also been extremely busy this last week, so don't worry about the delay.

    Only 53 Windows Updates installed. Most systems have 60 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

    Don't worry about the specific number, it's just important that you have checked and installed any updates that were available.

    Please ensure that there is only one anti-virus and one firewall running resident in memory at a time. This includes MalwareBytes. The problem is that these programs can compete for access and can monopolize your system. In most cases it'll just slow down your system, but in some cases it can allow malware in and can cause system crashes (to include BSOD's).
    FYI - I leave my anti-virus running when I scan with MalwareBytes - but this is only for scans, not for memory resident protection. If it crashes during this, then I start looking for other problems.
    Use Toshiba's Service Station app to ensure that you have all Toshiba updates.

    Please uninstall SuperAntiSpyware as it's outdated (drivers date from 2011) and could be the cause of some problems.
    I wouldn't reinstall it (as you also have MalwareBytes as a backup scanner), but if you must - please wait until the system is stabilized before downloading and installing the latest, Win8.1 compatible version.

    The memory dumps blame wpcfltr.sys - a driver related to the Family Safety app from Microsoft.
    Please try removing all Family Safety stuff from the system.
    If you had Family Safety prior to Win8/8.1 - uninstall it.
    Follow the instructions here: How do I remove Family Safety? - Windows Help

    Also, be sure to try the malware scans from the hardware diagnostics links I gave you earlier - this could be malware-related.

    I've also gotta wonder if there's a problem with Avast because it blocked the report app and won't let you back at it (this doesn't happen often). Could it be blocking some components of Family Safety? The test here is to:
    - uninstall Avast
    - enable Windows Defender and the Windows Firewall
    - test to see if this stops the BSOD's


    Analysis:
    The following is for informational purposes only.
    Code:
    **************************Sat Jun 28 15:47:55.791 2014 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\062814-35078-01.dmp]
    Windows 8 Kernel Version 9600 MP (2 procs) Free x64
    Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
    System Uptime:3 days 1:44:49.551
    *** WARNING: Unable to verify timestamp for wpcfltr.sys
    *** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
    Probably caused by :wpcfltr.sys ( wpcfltr+3517 )
    BugCheck 7F, {8, ffffd000255830b0, ffffd00022f78f10, fffff802e50b743b}
    BugCheck Info: UNEXPECTED_KERNEL_MODE_TRAP (7f)
    Arguments: 
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: ffffd000255830b0
    Arg3: ffffd00022f78f10
    Arg4: fffff802e50b743b
    BUGCHECK_STR:  0x7f_8
    PROCESS_NAME:  spoolsv.exe
    FAILURE_BUCKET_ID: 0x7f_8_wpcfltr+3517
    CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
    MaxSpeed:     2400
    CurrentSpeed: 2395
      BIOS Version                  1.20
      BIOS Release Date             09/04/2013
      Manufacturer                  TOSHIBA
      Product Name                  SATELLITE C55-A-1HN
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Jun 22 12:35:14.596 2014 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\062214-30312-01.dmp]
    Windows 8 Kernel Version 9600 MP (2 procs) Free x64
    Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
    System Uptime:2 days 22:19:32.358
    *** WARNING: Unable to verify timestamp for wpcfltr.sys
    *** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
    Probably caused by :wpcfltr.sys ( wpcfltr+3476 )
    BugCheck 7F, {8, ffffd001da3830b0, ffffd0002251efb0, fffff802b10ae5b8}
    BugCheck Info: UNEXPECTED_KERNEL_MODE_TRAP (7f)
    Arguments: 
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: ffffd001da3830b0
    Arg3: ffffd0002251efb0
    Arg4: fffff802b10ae5b8
    BUGCHECK_STR:  0x7f_8
    PROCESS_NAME:  AvastSvc.exe
    FAILURE_BUCKET_ID: 0x7f_8_wpcfltr+3476
    CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
    MaxSpeed:     2400
    CurrentSpeed: 2395
      BIOS Version                  1.20
      BIOS Release Date             09/04/2013
      Manufacturer                  TOSHIBA
      Product Name                  SATELLITE C55-A-1HN
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Thu Jun 19 02:36:11.572 2014 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\061914-28781-01.dmp]
    Windows 8 Kernel Version 9600 MP (2 procs) Free x64
    Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
    System Uptime:3 days 19:28:04.333
    *** WARNING: Unable to verify timestamp for wpcfltr.sys
    *** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
    Probably caused by :wpcfltr.sys ( wpcfltr+3517 )
    BugCheck 7F, {8, ffffd001d8d830b0, ffffd00020e39f10, fffff802f28b943b}
    BugCheck Info: UNEXPECTED_KERNEL_MODE_TRAP (7f)
    Arguments: 
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: ffffd001d8d830b0
    Arg3: ffffd00020e39f10
    Arg4: fffff802f28b943b
    BUGCHECK_STR:  0x7f_8
    PROCESS_NAME:  svchost.exe
    FAILURE_BUCKET_ID: 0x7f_8_wpcfltr+3517
    CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
    MaxSpeed:     2400
    CurrentSpeed: 2395
      BIOS Version                  1.20
      BIOS Release Date             09/04/2013
      Manufacturer                  TOSHIBA
      Product Name                  SATELLITE C55-A-1HN
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Jun 15 07:07:41.782 2014 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\061514-29156-01.dmp]
    Windows 8 Kernel Version 9600 MP (2 procs) Free x64
    Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
    System Uptime:0 days 0:32:51.541
    *** WARNING: Unable to verify timestamp for wpcfltr.sys
    *** ERROR: Module load completed but symbols could not be loaded for wpcfltr.sys
    Probably caused by :wpcfltr.sys ( wpcfltr+3517 )
    BugCheck 7F, {8, fffff803e4286e70, ffffd0002251af10, fffff803e24a543b}
    BugCheck Info: UNEXPECTED_KERNEL_MODE_TRAP (7f)
    Arguments: 
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: fffff803e4286e70
    Arg3: ffffd0002251af10
    Arg4: fffff803e24a543b
    BUGCHECK_STR:  0x7f_8
    PROCESS_NAME:  dllhost.exe
    FAILURE_BUCKET_ID: 0x7f_8_wpcfltr+3517
    CPUID:        "Intel(R) Pentium(R) CPU 2020M @ 2.40GHz"
    MaxSpeed:     2400
    CurrentSpeed: 2395
      BIOS Version                  1.20
      BIOS Release Date             09/04/2013
      Manufacturer                  TOSHIBA
      Product Name                  SATELLITE C55-A-1HN
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    
    3rd Party Drivers:
    The following is for information purposes only.
    Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
    Code:
    **************************Sat Jun 28 15:47:55.791 2014 (UTC - 4:00)**************************
    PEGAGFN.sys                 Wed Aug  5 01:50:46 2009 (4A791DB6)
    SASKUTIL64.SYS              Tue Jul 12 17:00:01 2011 (4E1CB5D1)
    SASDIFSV64.SYS              Thu Jul 21 19:03:00 2011 (4E28B024)
    tos_sps64.sys               Sun Jun 17 21:21:30 2012 (4FDE829A)
    TVALZFL.sys                 Sat Jul 21 18:29:07 2012 (500B2D33)
    TVALZ_O.SYS                 Wed Jul 25 19:23:25 2012 (50107FED)
    tdcmdpst.sys                Wed Jul 25 19:41:48 2012 (5010843C)
    mbam.sys                    Thu Feb 28 15:33:07 2013 (512FBF03)
    AmUStor.SYS                 Mon May 27 05:08:18 2013 (51A32282)
    IntcDAud.sys                Tue Jul  2 06:31:16 2013 (51D2ABF4)
    L1C63x64.sys                Tue Jul 16 02:56:31 2013 (51E4EE9F)
    dump_iaStorA.sys            Thu Aug  1 21:39:52 2013 (51FB0DE8)
    iaStorA.sys                 Thu Aug  1 21:39:52 2013 (51FB0DE8)
    btfilter.sys                Fri Aug  9 05:41:27 2013 (5204B947)
    Thotkey.sys                 Thu Aug 15 02:13:20 2013 (520C7180)
    athwbx.sys                  Thu Aug 15 23:13:28 2013 (520D98D8)
    stwrt64.sys                 Fri Aug 16 06:26:26 2013 (520DFE52)
    TeeDriverx64.sys            Mon Aug 19 13:23:31 2013 (52125493)
    intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
    SynTP.sys                   Thu Aug 22 12:59:30 2013 (52164372)
    Smb_driver_Intel.sys        Thu Aug 22 13:02:05 2013 (5216440D)
    iwdbus.sys                  Thu Sep 26 17:38:04 2013 (5244A93C)
    igdkmd64.sys                Mon Oct 28 17:57:02 2013 (526EDDAE)
    tosrfec.sys                 Wed Oct 30 23:20:55 2013 (5271CC97)
    aswKbd.sys                  Tue Mar 18 16:32:37 2014 (5328AD65)
    aswRdr2.sys                 Thu Apr 17 07:02:56 2014 (534FB4E0)
    aswMonFlt.sys               Thu Apr 17 07:04:01 2014 (534FB521)
    aswRvrt.sys                 Thu Apr 17 07:04:41 2014 (534FB549)
    aswVmm.sys                  Thu Apr 17 07:04:55 2014 (534FB557)
    aswSnx.sys                  Mon May  5 04:04:42 2014 (5367461A)
    aswNdisFlt.sys              Mon May  5 04:05:20 2014 (53674640)
    aswSP.sys                   Mon May  5 04:11:11 2014 (5367479F)
    aswStm.sys                  Mon May  5 04:11:48 2014 (536747C4)
    
    http://www.carrona.org/drivers/driver.php?id=PEGAGFN.sys
    http://www.carrona.org/drivers/driver.php?id=SASKUTIL64.SYS
    http://www.carrona.org/drivers/driver.php?id=SASDIFSV64.SYS
    http://www.carrona.org/drivers/driver.php?id=tos_sps64.sys
    http://www.carrona.org/drivers/driver.php?id=TVALZFL.sys
    http://www.carrona.org/drivers/driver.php?id=TVALZ_O.SYS
    http://www.carrona.org/drivers/driver.php?id=tdcmdpst.sys
    http://www.carrona.org/drivers/driver.php?id=mbam.sys
    http://www.carrona.org/drivers/driver.php?id=AmUStor.SYS
    http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
    http://www.carrona.org/drivers/driver.php?id=L1C63x64.sys
    http://www.carrona.org/drivers/driver.php?id=dump_iaStorA.sys
    http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
    http://www.carrona.org/drivers/driver.php?id=btfilter.sys
    http://www.carrona.org/drivers/driver.php?id=Thotkey.sys
    http://www.carrona.org/drivers/driver.php?id=athwbx.sys
    http://www.carrona.org/drivers/driver.php?id=stwrt64.sys
    http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys
    http://www.carrona.org/drivers/driver.php?id=SynTP.sys
    http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
    http://www.carrona.org/drivers/driver.php?id=iwdbus.sys
    http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
    http://www.carrona.org/drivers/driver.php?id=tosrfec.sys
    http://www.carrona.org/drivers/driver.php?id=aswKbd.sys
    http://www.carrona.org/drivers/driver.php?id=aswRdr2.sys
    http://www.carrona.org/drivers/driver.php?id=aswMonFlt.sys
    http://www.carrona.org/drivers/driver.php?id=aswRvrt.sys
    http://www.carrona.org/drivers/driver.php?id=aswVmm.sys
    http://www.carrona.org/drivers/driver.php?id=aswSnx.sys
    http://www.carrona.org/drivers/driver.php?id=aswNdisFlt.sys
    http://www.carrona.org/drivers/driver.php?id=aswSP.sys
    http://www.carrona.org/drivers/driver.php?id=aswStm.sys
      My System SpecsSystem Spec

BSOD for normal user only - can I debug from admin a/c
Related Threads
Hi guys, my desktop was perfectly fine a week ago and suddenly I got a BSOD or two per day (4 to 5 hours using my computer). All that I can remember is that I upgraded my GC driver 2 days before that and did some trick I didn't understand in the registry to help Battlefield 4 loading facter. I...
I was running Windows 8.0 and was getting random BSOD with various messages. Usually stating something about kernel or security. I upgraded to 8.1 update and ran windows update until all updates were applied. The frequency of BSOD increased. After many searches for solutions, I finally found...
Solved How do I transfer main user to Elevated Admin user? in User Accounts and Family Safety
I have been using an unelevated admin user account since installing win 8.1 pro and I've been having problems constantly (UAC nagging me, access denied when trying to kill processes and so on) and I decided I want to use the elevated admin account as my main. I understand security risks and...
Non-Admin Standard User Able to Reset PC in User Accounts and Family Safety
I'm setting up a stolen laptop tracking software and want to leave a standard/non-admin user account open for a potential thief. The software requires someone to log in and connect to the internet in order to start tracking. So if I only have my personal admin account password protected, I will be...
Well...ive been having the BSOD Issue for a week or two now. It takes forever to boot and then it gives me a blue screen with the Error Driver_Power_State_Failure I treid going bcak restore points...that dint work I also tried Refreshing and Resetting the PC using those settings on...
How to give admin permission to limited user in User Accounts and Family Safety
Hello forum. I am an administrator with 3 limited users on a windows 8 machine. I have installed a game on my account that I want to let one of my users play. I have tried everything I have read about giving permissions, admin right etc, but it still asks for my password everytime he opens the...
Solved Can't create user accounts despite being admin! in User Accounts and Family Safety
Hello all, I am using windows 8 pro OS. I have only one local account on my machine. My account is already in Administrator groups. I have checked that. My problem is that I am not able to create/change any user account from control panel. After traversing to Control Panel\All Control Panel...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook