Frequent BSODs And Freezes

marcsika · Sep 24, 2011

Hello,

I've recently started to get the blue screen alternating with reboots and freezes, which started a couple of months ago. Initially it was only once every 2 weeks or so, then 1-2 per week, and now I have randomly either of them a few times a day. I've actually changed the settings to not reboot automatically when coming up with errors so I can finally get a log of the dump files, hoping I can figure out what is going wrong. Alas, I can't do it on my own, hence my help request here.

I've attached the files are per the sticky post, hope everything was done correctly.

Is Vista . . .
- x86 (32-bit) or x64 ? 32bit
- the original installed OS on the system? original installation (bought the pc from HP, it came preinstalled)
- an OEM or full retail version? OEM
- OEM = came pre-installed on system
- Full Retail = you purchased it from retailer

- What is the age of system (hardware)? About 2-3 years old
- What is the age of OS installation (have you re-installed the OS?) over a year old

This might be not relevant but I've noticed that the crashes (specially the freezups) tend to happen when I have Window Media Player open watching something, or I'm listening to Winamp...might be just a coincidence though, but thought to mention just in case it's relevant.

Thanks in advance for your help!

richc46 · Sep 24, 2011

Welcome

I have reviewed your files, they are consistent. It appears that the cause of your problem is a driver. I will give you the instuctions for a driver verifier test. Please be sure that you understand the instructions and the caution that you should observe.

Driver Verifier Inst

Since the driver that crashed you has not been listed you shouldrun driver verifier
Please run Verifier with these settings:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'lltell you what the driver is. But sometimes it'll crash and won't tell you thedriver. Other times it'll crash before you can log in to Windows. If you can'tget to Safe Mode, then you'll have to resort to offline editing of the registryto disable Driver Verifier.
So, I'd suggest that you first backup your stuff and then make sure you've gotaccess to another computer so you can contact us if problems arise. Then make aSystem Restore point (so you can restore the system using the Vista/Windows 7Startup Repair feature).
Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and pressEnter
- Select "Create custom settings (for code developers)" and click"Next"
- Select "Select individual settings from a full list" and click"Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click"Next"
NOTE: You can use Low Resource Simulation if you'd like. From my limitedexperimentation it makes the BSOD's come faster.
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.
Reboot the system and wait for it to crash to the Blue Screen. Continue to useyour system normally, and if you know what causes the crash, do thatrepeatedly. The objective here is to get the system to crash because DriverVerifier is stressing the drivers out. If it doesn't crash for you, then let itrun for at least 36 hours of continuous operation (an estimate on my part).
Reboot into Windows (after the crash) and turn off Driver Verifier by goingback in and selecting "Delete existing settings" on the first page,then locate and zip up the memory dump file and upload it with your next post.
If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from yourinstallation DVD to set the system back to the previous restore point that youcreated.

Enable the driver verifier

www.sevenforums.com/crash-lockup-debug-how/65331-using-driver-verifier-identify-issues-drivers.html

richc46 · Sep 24, 2011

Good News
I have narrowed it down to probably your Norton Firewall. Ditch Norton. Use Microsoft Security Essentials, Malwarebytes for a free weekly scan and the Windows firewall, try that before anything else

marcsika · Sep 24, 2011

Thanks for the fast reply! Btw, I don't have Norton installed on my pc. I only use the inbuilt Windows firewall and incidentally use Microsoft Security Essentials (along with Malwarebytes as antivirus). Don't really use anything else for "protection" at all.

I'll print out the instructions and follow them along. Will post back as soon as I got results (or questions re. how to do something specific).

Thanks again!
M.

richc46 · Sep 24, 2011

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp4_Windows_NT6_BSOD_jcgriff2.zip\Windows_NT6_BSOD_jcgriff2\Mini092411-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18304.x86fre.vistasp1_gdr.090805-0102
Machine Name:
Kernel base = 0x82609000 PsLoadedModuleList = 0x82720c70
Debug session time: Sat Sep 24 09:54:20.665 2011 (GMT-4)
System Uptime: 0 days 0:40:13.603
Loading Kernel Symbols
...............................................................
................................................................
............
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 4A, {8283fa63, 2, 0, 0}
Probably caused by : ntkrpamp.exe ( nt!NtDeviceIoControlFile+0 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 8283fa63, Address of system function (system call routine)
Arg2: 00000002, Current IRQL
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
 
[B]PROCESS_NAME:  NisSrv.exe[/B]
BUGCHECK_STR:  RAISED_IRQL_FAULT
FAULTING_IP: 
nt!NtDeviceIoControlFile+0
8283fa63 8bff            mov     edi,edi
CUSTOMER_CRASH_COUNT:  2
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 77059a94 to 82660d6d
STACK_TEXT:  
8bb44d64 77059a94 badb0d00 0442f60c 00000000 nt!KiServiceExit2+0x154
WARNING: Frame IP not in any known module. Following frames may be wrong.
0442f664 00000000 00000000 00000000 00000000 0x77059a94
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!NtDeviceIoControlFile+0
8283fa63 8bff            mov     edi,edi
SYMBOL_NAME:  nt!NtDeviceIoControlFile+0
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4a7965dc
FAILURE_BUCKET_ID:  RAISED_IRQL_FAULT_NisSrv.exe_nt!NtDeviceIoControlFile+0
BUCKET_ID:  RAISED_IRQL_FAULT_NisSrv.exe_nt!NtDeviceIoControlFile+0
Followup: MachineOwner
---------

Further review indicates, that it might be part of Security Essentials and not Norton. Try disable your security, stay offline and see if you have problems. Include the firewall.

richc46 · Sep 24, 2011

Since Security Essentials, has not caused problems for any other member. Using a different anti virus, check for a possible virus. You can use this one.
http://go.eset.com/us/online-scanner/benefits

marcsika · Sep 24, 2011

Hold on, I'm confused. Should I use MSE or should I disable it? Not quite sure what I"m supposed to do!

richc46 · Sep 24, 2011

This is what I would suggest. Security Essentials may contain a virus. I suspect this only because, I have never seen a situation where Security Essentials causes a problem.
Leave everything alone
Use this to test for a virus
Free ESET Online Antivirus Scanner - New Features<
If negative
Run a full scan with malwarebytes. Make sure to update first.
If everything is negative, turn off Security Essentials, stay off line since you are not protected and see if you still get BSODs
or
You can make a system restore point, uninstall Security Essentials and replace with another anti virus. If you do not like the results you can go back using the System Restore point.

marcsika · Sep 24, 2011

Ok then will do this and then report back. Btw, my Malwarebytes is up to date because I have the full (purchased) version, so it always updates automatically. I just liked it too much that I bought it.

richc46 · Sep 24, 2011

Run a scan with MB too. I have the paid, too. Won it in a contest.

marcsika · Sep 24, 2011

OK will do - just downloaded now the ESET and will run it. Will start the full scan with MB once this is done just to be safe, and then head to sleep...will report back tomorrow on the results.

richc46 · Sep 24, 2011

Just work at your own pace. I take care of most of the BSODs, so we will probably meet again. Good Night.

marcsika · Sep 24, 2011

Thanks Richard

marcsika · Sep 29, 2011

Well I had to uninstall MSE because there were no viruses on my pc and it was still crashing a few times a day. Knock on wood, ever since my pc has been up and fine with no interruptions. So I'll keep only Malwarebytes up and use now and then ESET for an online scan. I usually like Microsoft products, but I don't think it's healthy for the pc to constantly crash, freeze or reboot.

Thanks Richard again for pointing the finger at MSE, so far it seems you were right.

richc46 · Sep 29, 2011

Based upon the report it was MSE, but I am really shocked, as yours is the first case. I wish you luck. Feel free to post with any questions or problems.
The security that you discussed Malwarbytes and Eset is not enough, far from it. Go online and get a free one, this is good
avast! Free Antivirus - Download Software for Virus Protection
Using your method you have no real time protection for a virus.

marcsika · Sep 29, 2011

Ok thanks for the tip!

Frequent BSODs And Freezes

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer