locked
Windows 7 BlueScreen RRS feed

  • Question

  • Hi. I have a Windows7 OS 64 bit sys that BlueScreens when I connect to my linksys wifi at home. It also BlueScreens when I plug in to it. It never BlueScreens or has any trouble when I connect through my Verizon air card (or mifi). Weird?

    Minidump file: https://www.yousendit.com/download/ aHlUaUNIcHZIcWRFQlE9PQ

    Problem signature:

    Problem Event Name: BlueScreen

    OS Version: 6.1.7600.2.0.0.768.3

    Locale ID: 1033

    Additional information about the problem:

    BCCode: 7f

    BCP1: 0000000000000008

    BCP2: 0000000080050033

    BCP3: 00000000000406F8

    BCP4: FFFFF80002E83E58

    OS Version: 6_1_7600

    Service Pack: 0_0

    Product: 768_1

    Files that help describe the problem:

    C:\Windows\Minidump\082310-19203-01.dmp

    C:\Users\kevlar\AppData\Local\Temp\WER-44101-0.sysdata.xml

    Read our privacy statement online:

    http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:

    C:\Windows\system32\en-US\erofflps.txt

    OS specs:
    Manufacturer Hewlett-Packard
      Model HP Pavilion dv7 Notebook PC
      Total amount of system memory 4.00 GB RAM
      System type 64-bit operating system
      Number of processor cores 4

    Graphics  
    --------------------------------------------------------------------------------
     
      Display adapter type ATI Mobility Radeon HD 4650
      Total available graphics memory 2799 MB
            Dedicated graphics memory 1024 MB
            Dedicated system memory 0 MB
            Shared system memory 1775 MB
      Display adapter driver version 8.632.0.0
      Primary monitor resolution 1600x900
      DirectX version DirectX 10
     
    Network  
    --------------------------------------------------------------------------------
     
      Network Adapter Realtek PCIe GBE Family Controller
      Network Adapter Intel(R) WiFi Link 5100 AGN -

     

    Monday, August 23, 2010 5:44 PM

Answers

  • Remove Zonealarm as fast as possible, This tool generates a lot a of crashes.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Sabrina Shen Wednesday, August 25, 2010 9:23 AM
    • Marked as answer by Sabrina Shen Friday, August 27, 2010 8:30 AM
    Monday, August 23, 2010 9:16 PM
  • If you aren't working in an environment with a hardware firewall, I think the host based firewall that is built into Windows does pretty well. You may just need to lock down some of the inbound rules that are enabled. If you are looking for a free A/V,

    http://www.microsoft.com/Security_Essentials/


    -- Mike Burr
    • Proposed as answer by Sabrina Shen Wednesday, August 25, 2010 9:24 AM
    • Marked as answer by Sabrina Shen Friday, August 27, 2010 8:31 AM
    Tuesday, August 24, 2010 12:33 AM
  • Ok. I think I can see now that the link is to a free virus protection from Microsoft. I am using AVG free and not having any issues from it that I can tell.
    • Proposed as answer by Sabrina Shen Wednesday, August 25, 2010 9:24 AM
    • Marked as answer by Sabrina Shen Friday, August 27, 2010 8:31 AM
    Tuesday, August 24, 2010 1:06 AM

All replies

  • Here is the correct URL to the mindump from the latest BlueScreen from yesterday: https://www.yousendit.com/download/aHlUaUNIcHZIcWRFQlE9PQ
    Monday, August 23, 2010 5:48 PM
  • This looks like a standard double fault exception. Since it was not
    caused by a specific driver, I would recommend checking memory using the
    Windows Memory Diagnostic tool or memtest86+,
     
     
    Also, have you recently installed any other hardware?
     
    As a general precaution, I would ensure that the system is not
    overclocked in any way and that all of the drivers and the BIOS are up
    to the latest versions provided by the vendors.
     
    These types of errors may take multiple dumps to firmly verify a cause,
    if you find that the error continues, please feel free to post the
    additional dumps for analysis and taken in combination, we might be able
    to identify a cause or recommend a more specific direction.
     
    More information
     
    1: kd> !analyze -v
    *******************************************************************************
    *
          *
    *                        Bugcheck Analysis
          *
    *
          *
    *******************************************************************************
     
    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault).  The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
            use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
            use .trap on that value
    Else
            .trap on the appropriate frame will show where the trap was taken
            (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 0000000080050033
    Arg3: 00000000000406f8
    Arg4: fffff80002e83e58
     
    Debugging Details:
    ------------------
     BUGCHECK_STR:  0x7f_8
     
    CUSTOMER_CRASH_COUNT:  1
     
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
     
    PROCESS_NAME:  OUTLOOK.EXE
     
    CURRENT_IRQL:  2
     
    LAST_CONTROL_TRANSFER:  from fffff80002ebab69 to fffff80002ebb600
     
    STACK_TEXT:
    fffff880`009f0ce8 fffff800`02ebab69 : 00000000`0000007f
    00000000`00000008 00000000`80050033 00000000`000406f8 : nt!KeBugCheckEx
    fffff880`009f0cf0 fffff800`02eb9032 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!KiBugCheckDispatch+0x69
    fffff880`009f0e30 fffff800`02e83e58 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!KiDoubleFaultAbort+0xb2
    fffff880`0391cde0 00000000`00000000 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!SeAccessCheckFromState+0x58
     STACK_COMMAND:  kb
     
    FOLLOWUP_IP:
    nt!KiDoubleFaultAbort+b2
    fffff800`02eb9032 90              nop
     
    SYMBOL_STACK_INDEX:  2
     
    SYMBOL_NAME:  nt!KiDoubleFaultAbort+b2
     
    FOLLOWUP_NAME:  MachineOwner
     
    MODULE_NAME: nt
     
    IMAGE_NAME:  ntkrnlmp.exe
     
    DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb
     
    FAILURE_BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b2
     
    BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b2
     
    Followup: MachineOwner
    ---------
     
    1: kd> kv
    Child-SP          RetAddr           : Args to Child
                                          : Call Site
    fffff880`009f0ce8 fffff800`02ebab69 : 00000000`0000007f
    00000000`00000008 00000000`80050033 00000000`000406f8 : nt!KeBugCheckEx
    fffff880`009f0cf0 fffff800`02eb9032 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!KiBugCheckDispatch+0x69
    fffff880`009f0e30 fffff800`02e83e58 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!KiDoubleFaultAbort+0xb2 (TrapFrame @ fffff880`009f0e30)
    fffff880`0391cde0 00000000`00000000 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!SeAccessCheckFromState+0x58
    1: kd> .trap fffff880`009f0e30
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=ffffe2546dae7ace rbx=0000000000000000 rcx=fffff8800391ce61
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff80002e83e58 rsp=fffff8800391cde0 rbp=fffffa800864e970
     r8=000000000000030f  r9=0000000000000001 r10=fffffa800864e950
    r11=fffff8800391d538 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    nt!SeAccessCheckFromState+0x58:
    fffff800`02e83e58 c684248000000000 mov     byte ptr [rsp+80h],0
    ss:fffff880`0391ce60=??
    1: kd> kv
      *** Stack trace for last set context - .thread/.cxr resets it
    Child-SP          RetAddr           : Args to Child
                                          : Call Site
    fffff880`0391cde0 00000000`00000000 : 00000000`00000000
    00000000`00000000 00000000`00000000 00000000`00000000 :
    nt!SeAccessCheckFromState+0x58
     
     

    -- Mike Burr
    Monday, August 23, 2010 6:46 PM
  • Thanks Mike. No. I have not installed any hardware but have allowed auto-updates which I never did before Windows 7. And I upgraded my firewall, Zonealarm, about the time the bluescreens started.
    I will try your suggestions and check back if it continues.
    Thanks again for some hope.

    Kevin

    Monday, August 23, 2010 8:58 PM
  • Remove Zonealarm as fast as possible, This tool generates a lot a of crashes.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Sabrina Shen Wednesday, August 25, 2010 9:23 AM
    • Marked as answer by Sabrina Shen Friday, August 27, 2010 8:30 AM
    Monday, August 23, 2010 9:16 PM
  • Is there a good firewall you suggest? Preferrably free if possible.

    Thanks

    Tuesday, August 24, 2010 12:17 AM
  • If you aren't working in an environment with a hardware firewall, I think the host based firewall that is built into Windows does pretty well. You may just need to lock down some of the inbound rules that are enabled. If you are looking for a free A/V,

    http://www.microsoft.com/Security_Essentials/


    -- Mike Burr
    • Proposed as answer by Sabrina Shen Wednesday, August 25, 2010 9:24 AM
    • Marked as answer by Sabrina Shen Friday, August 27, 2010 8:31 AM
    Tuesday, August 24, 2010 12:33 AM
  • I unistalled Zonealarm and am now connected via my Linksys. So far no bluescreen. Thanks to you both for your help. I am not sure I am out of trouble yet since it has been random as far as how long before it would crash.

    Is the link, http://www.microsoft.com/Security_Essentials/, a different installation from the built-in Windows7 firewall?

    Tuesday, August 24, 2010 12:47 AM
  • Ok. I think I can see now that the link is to a free virus protection from Microsoft. I am using AVG free and not having any issues from it that I can tell.
    • Proposed as answer by Sabrina Shen Wednesday, August 25, 2010 9:24 AM
    • Marked as answer by Sabrina Shen Friday, August 27, 2010 8:31 AM
    Tuesday, August 24, 2010 1:06 AM
  • Use the buildin Windows Firewall. This is fine.

    Use Windows 7 Firewall Control to control the Firewall:

    http://www.sphinx-soft.com/Vista/index.html

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, August 24, 2010 2:46 PM
  • a. When exactly do you get the blue screen error?

     

    Blue-screen (crash) can be caused by due to a lot of reasons. A few of them being the following:

     

    1. An outdated or misbehaving device driver.

    2. Computer virus.

    3. A corrupted program.

    4. A problem with your computer's memory.

    5. Hard disk or motherboard is corrupted

     

    Firstly, let’s boot into safe mode with networking and check if the blue-screen crash continues to occur or not.

     

    Refer the following Microsoft article for more information on how to boot into safe mode with networking:

     

    Advanced startup options (including safe mode)
    http://windows.microsoft.com/en-us/windows7/Advanced-startup-options-including-safe-mode

     

    Let us know what happens in safe mode with networking.

     

    Additionally, I’d suggest you to include attach the minidump files which would help us in analyzing the exact cause of the blue screen crash (error).

     

    For more information on how to upload minidump files, refer the following TechNet link:

     

    Use SkyDrive to upload collected files and post screen shot/picture.

    http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

     

    Wednesday, August 25, 2010 6:25 AM