BSOD 3 times already!

[Israfel]

Ok, so i have a big problem. I am getting BSOD every like 2 hours on my PC. One had to do with IRQ or something like that, the other FLTMGR. It created the dump file on my computer and i have no idea what to do from here. This is a serious problem, since all my work gets erased and starting over is frustrating ><

BTW< i am running Windows Vista Home Basic 32X

Anything else you need to know i would gladly answer.

 

[roy69]

The irq error normally points towards drivers.

Try starting in safe mode to see if this works, if it does then it does pinpoint the problem to drivers.

When you get the error IRQ NOT LESS OR EQUAL there should be a filename with it.

FLTMGR is a windows system file. Filter Manager Driver.

Have you got SP2 installed?

Have you got any software running in the background?

Look in your error logs to see if they provide more info;

Left Click on Start Menu.
Right click on Computer and choose manage.
Click on the event viewer.
You now have loads of options to try and pin down what is happening.
Expand the error tab.
Look for things in the last 24 hours.

 

[Israfel]

Well these are the errors i have gotten on the 27-28th, but as for the IRQ error, none of my drivers have done this before and none of them have updated to my knowledge..

Log Name:      Application
Source:        System Restore
Date:          12/28/2009 12:50:58 AM
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
Failed to create restore point on volume (Process = C:\Users\Richard\AppData\Local\Temp\{6FCBE663-D5D4-438B-A234-4B18A6C28805}\setup.exe -removeonly -media_path:"C:\Program Files\InstallShield Installation Information\{901DC58A-5C1B-4315-BA40-5AD3D3A463B9}\" -tempdisk1folder:"C:\Users\Richard\AppData\Local\Temp\{6FCBE663-D5D4-438B-A234-4B18A6C28805}\"; Descripton = Removed ijji REACTOR; Hr = 0x8000ffff).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="System Restore" />
    <EventID Qualifiers="0">8193</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T08:50:58.000Z" />
    <EventRecordID>10528</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>C:\Users\Richard\AppData\Local\Temp\{6FCBE663-D5D4-438B-A234-4B18A6C28805}\setup.exe -removeonly -media_path:"C:\Program Files\InstallShield Installation Information\{901DC58A-5C1B-4315-BA40-5AD3D3A463B9}\" -tempdisk1folder:"C:\Users\Richard\AppData\Local\Temp\{6FCBE663-D5D4-438B-A234-4B18A6C28805}\"</Data>
    <Data>Removed ijji REACTOR</Data>
    <Data>0x8000ffff</Data>
    <Binary>FFFF008002020000D60100000000000032CA19E58CAF4DCB010000000000000000000000</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        VSS
Date:          12/28/2009 12:50:58 AM
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80070422. 

Operation:
   Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8193</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T08:50:58.000Z" />
    <EventRecordID>10527</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>CoCreateInstance</Data>
    <Data>0x80070422</Data>
    <Data>

Operation:
   Instantiating VSS server</Data>
    <Binary>2D20436F64653A2042554543584D4C4330303030343238312D2043616C6C3A2042554543584D4C4330303030343235302D205049443A202030303030313935322D205449443A202030303030333934302D20434D443A2020433A5C55736572735C526963686172645C417070446174615C4C6F63616C5C54656D705C7B36464342453636332D443544342D343338422D413233342D3442313841364332383830357D5C73657475702E657865202D72656D6F76656F6E6C79202D6D656469615F706174683A22433A5C50726F6772616D2046696C65735C496E7374616C6C536869656C6420496E7374616C6C6174696F6E20496E666F726D6174696F6E5C7B39303144433538412D354331422D343331352D424134302D3541443344334134363342397D5C22202D74656D706469736B31666F6C6465723A22433A5C55736572735C526963686172645C417070446174615C4C6F63616C5C54656D705C7B36464342453636332D443544342D343338422D413233342D3442313841364332383830357D5C222020202D20557365723A20526963686172642D50435C526963686172642020202020202D205369643A2020532D312D352D32312D3435303132393231392D313333393939303238392D313331383932353132382D31303030202020</Binary>
  </EventData>
</Event>

Log Name:      Application
Source:        VSS
Date:          12/28/2009 12:50:58 AM
Event ID:      39
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
Volume Shadow Copy Service error:  The Volume Shadow Copy service (VSS) is disabled.  Please  enable the service and try again. 

Operation:
   Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">39</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T08:50:58.000Z" />
    <EventRecordID>10526</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Operation:
   Instantiating VSS server</Data>
    <Binary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inary>
  </EventData>
</Event>

Log Name:      System
Source:        EventLog
Date:          12/28/2009 12:23:43 AM
Event ID:      6008
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
The previous system shutdown at 12:22:06 AM on 12/28/2009 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6008</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T08:23:43.000Z" />
    <EventRecordID>53488</EventRecordID>
    <Channel>System</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>12:22:06 AM</Data>
    <Data>12/28/2009</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>11305</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Binary>D9070C0001001C00000016000600D501D9070C0001001C00080016000600D5013C0000003C000000000000000000000000000000000000000100000002000000</Binary>
  </EventData>
</Event>

Log Name:      Security
Source:        Microsoft-Windows-Eventlog
Date:          12/28/2009 12:23:43 AM
Event ID:      1101
Task Category: Event processing
Level:         Error
Keywords:      Audit Success
User:          N/A
Computer:      Richard-PC
Description:
Audit events have been dropped by the transport.  The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
    <EventID>1101</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4020000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T08:23:43.985Z" />
    <EventRecordID>12101</EventRecordID>
    <Correlation />
    <Execution ProcessID="1012" ThreadID="1148" />
    <Channel>Security</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <UserData>
    <AuditEventsDropped xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
      <Reason>34</Reason>
    </AuditEventsDropped>
  </UserData>
</Event>

Log Name:      Application
Source:        Application Hang
Date:          12/27/2009 9:18:12 PM
Event ID:      1002
Task Category: (101)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
The program firefox.exe version 1.9.1.3622 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: 4e0 Start Time: 01ca877cda153d80 Termination Time: 27
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Hang" />
    <EventID Qualifiers="0">1002</EventID>
    <Level>2</Level>
    <Task>101</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T05:18:12.000Z" />
    <EventRecordID>10503</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>firefox.exe</Data>
    <Data>1.9.1.3622</Data>
    <Data>4e0</Data>
    <Data>01ca877cda153d80</Data>
    <Data>27</Data>
    <Binary>55006E006B006E006F0077006E0000000000</Binary>
  </EventData>
</Event>

Log Name:      System
Source:        EventLog
Date:          12/27/2009 9:14:04 PM
Event ID:      6008
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
The previous system shutdown at 9:12:32 PM on 12/27/2009 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6008</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T05:14:04.000Z" />
    <EventRecordID>53390</EventRecordID>
    <Channel>System</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>9:12:32 PM</Data>
    <Data>12/27/2009</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>2726</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Binary>D9070C0000001B0015000C002000BB03D9070C0001001C0005000C002000BB033C0000003C000000000000000000000000000000000000000100000000000000</Binary>
  </EventData>
</Event>

Log Name:      Security
Source:        Microsoft-Windows-Eventlog
Date:          12/27/2009 9:14:05 PM
Event ID:      1101
Task Category: Event processing
Level:         Error
Keywords:      Audit Success
User:          N/A
Computer:      Richard-PC
Description:
Audit events have been dropped by the transport.  The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
    <EventID>1101</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4020000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T05:14:05.690Z" />
    <EventRecordID>12065</EventRecordID>
    <Correlation />
    <Execution ProcessID="1032" ThreadID="1320" />
    <Channel>Security</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <UserData>
    <AuditEventsDropped xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
      <Reason>34</Reason>
    </AuditEventsDropped>
  </UserData>
</Event>

Log Name:      System
Source:        EventLog
Date:          12/27/2009 8:27:31 PM
Event ID:      6008
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
The previous system shutdown at 8:26:09 PM on 12/27/2009 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6008</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T04:27:31.000Z" />
    <EventRecordID>53294</EventRecordID>
    <Channel>System</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>8:26:09 PM</Data>
    <Data>12/27/2009</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>126201</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Binary>D9070C0000001B0014001A0009002D00D9070C0001001C0004001A0009002D003C0000003C000000000000000000000000000000000000000100000002000000</Binary>
  </EventData>
</Event>

Log Name:      Security
Source:        Microsoft-Windows-Eventlog
Date:          12/27/2009 8:27:33 PM
Event ID:      1101
Task Category: Event processing
Level:         Error
Keywords:      Audit Success
User:          N/A
Computer:      Richard-PC
Description:
Audit events have been dropped by the transport.  The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
    <EventID>1101</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>101</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4020000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T04:27:33.556Z" />
    <EventRecordID>12029</EventRecordID>
    <Correlation />
    <Execution ProcessID="1036" ThreadID="1520" />
    <Channel>Security</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <UserData>
    <AuditEventsDropped xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
      <Reason>34</Reason>
    </AuditEventsDropped>
  </UserData>
</Event>

Log Name:      Application
Source:        Application Error
Date:          12/27/2009 7:52:19 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
Faulting application vlc.exe, version 0.9.8.1, time stamp 0x493a8cbd, faulting module libi420_yuy2_sse2_plugin.dll, version 0.0.0.0, time stamp 0x493a92d3, exception code 0xc0000005, fault offset 0x00001858, process id 0xd10, application start time 0x01ca8652efcaebf0.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-28T03:52:19.000Z" />
    <EventRecordID>10470</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>vlc.exe</Data>
    <Data>0.9.8.1</Data>
    <Data>493a8cbd</Data>
    <Data>libi420_yuy2_sse2_plugin.dll</Data>
    <Data>0.0.0.0</Data>
    <Data>493a92d3</Data>
    <Data>c0000005</Data>
    <Data>00001858</Data>
    <Data>d10</Data>
    <Data>01ca8652efcaebf0</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-Time-Service
Date:          12/27/2009 9:23:45 AM
Event ID:      36
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" EventSourceName="W32Time" />
    <EventID Qualifiers="33370">36</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-27T17:23:45.000Z" />
    <EventRecordID>53284</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData Name="MSG_TIME_SOURCE_NONE">
    <Data Name="UnsynchronizedTimeSeconds">86400</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Application Hang
Date:          12/27/2009 1:33:05 AM
Event ID:      1002
Task Category: (101)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Richard-PC
Description:
The program firefox.exe version 1.9.1.3622 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: 11a8 Start Time: 01ca86d751c712a0 Termination Time: 7
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Hang" />
    <EventID Qualifiers="0">1002</EventID>
    <Level>2</Level>
    <Task>101</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-12-27T09:33:05.000Z" />
    <EventRecordID>10454</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Richard-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>firefox.exe</Data>
    <Data>1.9.1.3622</Data>
    <Data>11a8</Data>
    <Data>01ca86d751c712a0</Data>
    <Data>7</Data>
    <Binary>55006E006B006E006F0077006E0000000000</Binary>
  </EventData>
</Event>

 

[roy69]

Having a quick look, you have a problem with VSS (volume shadow copy service)

Click on the start orb
Right click on computer and choose manage
Under computer managemnet at the bottom of the options you will see services and applications
Double click this and choose services
Select volume shadow copy and change it to manual or automatic.
Also click on start to ensure it is working correctly.
If it starts then you should be able to create restore points.

 

[Israfel]

Alright, well i turned it on, put the startup to Automatic and everything. I am just hoping that this will fix my BSOD problem lol

By the way, is there any way to like Screenshot a BSOD? in the time i have to write down the code, thats just enough time to grab paper and a pencil before my PC restarts.

[EDIT] Ok, i got another friggen IRQ error, right before i was about to beat the last boss in Prototype. If you can't tell, i am rather pissed off. Why the hell is this happening, i have all the latest drivers, all my hardware is compatible with each other, this all Just started happening a few days ago ><

 

[usasma]

Upload Dump Files:
Please go to C:\Windows\Minidump and zip up the contents of the folder. Then upload/attach the .zip file with your next post.
{Left click on the first minidump file.
Hold down the "Shift" key and left click on the last minidump file.
Right click on the blue highlighted area and select "Send to"
Select "Compressed (zipped) folder" and note where the folder is saved.
Upload that .zip file with your next post.

If you have issues with "Access Denied" errors, try copying the files to your desktop and zipping them up from there. If it still won't let you zip them up, post back for further advice.

If you don't have anything in that folder, please check in C:\Windows for a file named MEMORY.DMP. If you find it, zip it up and upload it to a free file hosting service - then post the link to it.
Then, follow the directions here to set your system for Minidumps (much smaller than the MEMORY.DMP file): Set MiniDump

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.

If you're having difficulties with the format, please open an elevated (Run as administrator) Command Prompt and type "msinfo32 /nfo C:\Users\Public\Desktop\TEST.NFO" (without the quotes) and press Enter. Then navigate to the C:\Users\Public\Desktop directory to retrieve the TEST.NFO file. If you have difficulties with making this work, please post back.

 

[Israfel]

Well, here are the files ya asked for o.o

 

[usasma]

Your network device is having problems:

Realtek RTL8168/8111 Family PCI-E Gigabit Ethernet NIC (NDIS 6.0) PCI\VEN_10EC&DEV_8168&SUBSYS_23071565&REV_02\4&ECC2264&0&0038 This device cannot start.

Please download a fresh driver from the RealTek website and install it.

The symbols for the dump file are incorrect - this is usually caused by having incorrect versions of the system files. There's usually 2 reasons for this:
1 - OS corruption - usually solvable by running SFC.EXE /SCANNOW from an elevated (Run as administrator) Command Prompt and then running Windows Udpate
2 - "hacked" versions of the OS. There isn't anything that we can do to help with this.

I've also seen mention of your Kaspersky product in the dump files (and I suspect that this is the cause of your problems).
Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the Kaspersky from your system
- remove any remnants of Kaspersky using this free tool: Service messages
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's

Please update these older drivers that were loaded when the crash occurred:

aexhz7fl.SYS Thu Sep 06 08:08:54 2007 
AtiPcie.sys  Mon Oct 30 14:22:24 2006
atksgt.sys   Fri Sep 14 08:13:09 2007
BIOS.sys     Wed Mar 16 02:23:52 2005
BS_I2cIo.sys Mon Dec 11 08:02:22 2006
lirsgt.sys   Sun Jan 29 06:06:18 2006
mdmxsdk.sys  Mon Jun 19 17:26:59 200
RTKVHDA.sys  Wed Nov 08 06:04:28 2006
xaudio.sys   Fri Jun 29 20:11:00 2007

Here's the summaries of the BSOD's:

BugCheck A, {81f4130c, ff, 0, 81adeda6}
Probably caused by : ntkrnlpa.exe ( nt+97da6 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 50, {a8a599f8, 1, 9aae9bb7, 0}
Probably caused by : win32k.sys ( win32k+d9bb7 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 1000008E, {c0000006, 81c713f3, ba830b00, 0}
Probably caused by : ntkrnlpa.exe ( nt+2203f3 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck A, {a8c9429c, 2, 1, 81a0efe9}
Probably caused by : dxgkrnl.sys ( dxgkrnl+35c1c )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck 50, {a6f08574, 0, 8a49e4f4, 0}
Probably caused by : klif.sys ( klif+1965a )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck A, {81f4130c, ff, 0, 81adeda6}
Probably caused by : ntkrnlpa.exe ( nt+97da6 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck A, {81f3d30c, ff, 0, 81adada6}
Probably caused by : ntkrnlpa.exe ( nt+97da6 )
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BugCheck A, {bfb01d2c, ff, 0, 81dc2347}
Probably caused by : ntkrnlpa.exe ( nt+3d669 )

 

[Israfel]

Well i have a question. A few really.

1. I don't have Kaspersky, why my computer says i do is beyond me. I have have downloaded it at one point, but i don't think i'd keep something like that.

2. I also don't use my Ethernet port, and the only PCI-e cards i have installed are my Graphics Card and my Wireless o.o

3. I don't recognize half of those programs, and my windows update doesn't say it needs any new drivers for any of em.

I do have a new motherboard that differs from my old one, and i just hooked my **** up and started my PC. I Dled the Driver Software from their website because my CD Drive didn't work >.>

Should i try to install using the CD as well? I think i did, but i am not 100% sure.

 

[roy69]

If you have a new motherboard then reinstall the drivers from the disk that came with it.

Is the motherboard excatly the same make and model as the old one?

Normally if I install a new motherboard for a client then I would install the OS as new, ensuring all the user files had been backed up and the drivers are burnt to a cd or dvd.

 

[Israfel]

The motherboard is nowhere near the same as the last one. My last one came with a premade E-machines computer, and it didn't even really have a name, the new one that i have is a Biostar model

I will give the CD a shot again, see if it will help/work. I will give an update in a few hours, on the account of i have a few things at work i need to do XD

 

[usasma]

Do this so we can find out what's using Kaspersky (several companies use it in their products):

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.

If you're having difficulties with the format, please open an elevated (Run as administrator) Command Prompt and type "msinfo32 /nfo C:\Users\Public\Desktop\TEST.NFO" (without the quotes) and press Enter. Then navigate to the C:\Users\Public\Desktop directory to retrieve the TEST.NFO file. If you have difficulties with making this work, please post back.

While you may not use your ethernet port - it's still having problems. I'd suggest uninstalling the software for it, then remove the card from your system (if you can't do that, disable it in the BIOS).

Please follow these instructions for replacing/updating drivers:

Please update or remove the older drivers that were loaded at the time of the crash. Don't use Windows Update or the Update drivers function of Device Manager. Please use the following instructions to locate the most current drivers:

How To Find Updated Drivers:
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

 

[ComputerAge]

Israfel,

I'm confused whether it is your motherboard or network card.

Could you just clarify that for me?

 

[Israfel]

Well here is the file you requested. I will do what i can about the drivers, granted i can't promise anything XD

 

[ComputerAge]

Well here is the file you requested. I will do what i can about the drivers, granted i can't promise anything XD

myspaceim.exe seems to be closing a lot. Do you think there might be any open access through MySpace causing a virus/malware infection?

 

[Israfel]

I actually Open and close Myspace IM quite a lot on my own, but there was a time before that where it wasn't me

One of the new Myspace updates caused it to freeze after it had connected apparently, sending it into a perpetual loop of connecting and disconnecting, so that cause it to close a lot as well.

 

[usasma]

Zone Alarm uses Kaspersky anti-virus technology. Download a copy of the installer, extract it and you'll see the Kaspersky stuff buried in it (I did this recently with another person's problem).

Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the ZoneAlarm from your system
- remove any remnants of ZoneAlarm using this free tool: http://download.zonealarm.com/bin/free/support/cpes_clean.exe
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's

If you want more control over your firewall, use this free utility for controlling the Windows Firewall: Windows 7 Firewall Control : Sphinx Software

 

[ComputerAge]

I don't think it's a virus causing the BSODs. It might be a driver conflict or something to that sort.

 

[Israfel]

Well i havn't had a BSOD since i did the first few things, so i am thinking it might be fixed, being a Driver Conflict. if the BSOD's persist, i will uninstall ZA and such and see if that helps.

 

[ComputerAge]

Ok, good.