locked
BSOD's with various antivirus programs RRS feed

  • Question

  • I am getting BSODs with various antivirus software that I have been trying, notably Bit Defender and more recently Kaspersky. The details from the last few BSODs are as follows:-

    ==================================================
    Dump File         : 072611-93506-01.dmp
    Crash Time        : 26/07/2011 17:15:45
    Bug Check String  : MEMORY_MANAGEMENT
    Bug Check Code    : 0x0000001a
    Parameter 1       : 00000000`00001238
    Parameter 2       : fffffa80`03232ed0
    Parameter 3       : 00000000`00000802
    Parameter 4       : 00000000`00000000
    Caused By Driver  : rdyboost.sys
    Caused By Address : rdyboost.sys+4eb2
    File Description  :
    Product Name      :
    Company           :
    File Version      :
    Processor         : x64
    Crash Address     : ntoskrnl.exe+7fd00
    Stack Address 1   :
    Stack Address 2   :
    Stack Address 3   :
    Computer Name     :
    Full Path         : C:\Windows\Minidump\072611-93506-01.dmp
    Processors Count  : 2
    Major Version     : 15
    Minor Version     : 7601
    Dump File Size    : 301,375
    ==================================================

    ==================================================
    Dump File         : 080411-83632-01.dmp
    Crash Time        : 04/08/2011 15:40:06
    Bug Check String  : PFN_LIST_CORRUPT
    Bug Check Code    : 0x0000004e
    Parameter 1       : 00000000`0000009a
    Parameter 2       : 00000000`00027be6
    Parameter 3       : 00000000`00000006
    Parameter 4       : 00000000`00000002
    Caused By Driver  : dump_ataport.sys
    Caused By Address : dump_ataport.sys+2ff2b30
    File Description  :
    Product Name      :
    Company           :
    File Version      :
    Processor         : x64
    Crash Address     : ntoskrnl.exe+7fd00
    Stack Address 1   :
    Stack Address 2   :
    Stack Address 3   :
    Computer Name     :
    Full Path         : C:\Windows\Minidump\080411-83632-01.dmp
    Processors Count  : 2
    Major Version     : 15
    Minor Version     : 7601
    Dump File Size    : 301,263
    ==================================================

    ==================================================
    Dump File         : 080311-87656-01.dmp
    Crash Time        : 03/08/2011 21:02:34
    Bug Check String  : PFN_LIST_CORRUPT
    Bug Check Code    : 0x0000004e
    Parameter 1       : 00000000`0000009a
    Parameter 2       : 00000000`00003928
    Parameter 3       : 00000000`00000006
    Parameter 4       : 00000000`00000002
    Caused By Driver  : bowser.sys
    Caused By Address : bowser.sys+25f8000
    File Description  :
    Product Name      :
    Company           :
    File Version      :
    Processor         : x64
    Crash Address     : ntoskrnl.exe+7fd00
    Stack Address 1   :
    Stack Address 2   :
    Stack Address 3   :
    Computer Name     :
    Full Path         : C:\Windows\Minidump\080311-87656-01.dmp
    Processors Count  : 2
    Major Version     : 15
    Minor Version     : 7601
    Dump File Size    : 301,263
    ==================================================

    I have run the removal tools from older antivirus trials, used Memtest86+ & Windows memory tester to check the memory, run CHKDSK /f /r, but still the problem persists. What else can I try?

    Brian E
    Thursday, August 4, 2011 3:37 PM

Answers

  • Hi Brian E,

    Refer to: http://msdn.microsoft.com/en-us/library/ff559014(v=VS.85).aspx 

    It could be caused by a driver passing a bad memory descriptor list.

    Perform a Clean Boot, and also test your memory, refer to: http://www.memtest.org/ 

    Regards,

    Miya

    Note: Since the site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.


    This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    • Proposed as answer by pkn2011 Tuesday, August 9, 2011 9:04 AM
    • Marked as answer by Miya Yao Tuesday, August 16, 2011 8:23 AM
    Monday, August 8, 2011 3:31 AM
  • Hello,

    Bug Check Code 0x1a: http://msdn.microsoft.com/en-us/library/ff557391(v=VS.85).aspx

    Bug Check Code 0x4E: http://msdn.microsoft.com/en-us/library/ff559014(v=VS.85).aspx

     

    Please proceed like that:

    • Disable all security softwares that you have
    • Uninstall all programs that you don't use
    • Update all possible drivers
    • Run msconfig and disable all startup items except Microsoft ones

    Once done, check again.

     

    Are you sure that no error was detected when using memtest86+?

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator 

    • Proposed as answer by pkn2011 Tuesday, August 9, 2011 9:05 AM
    • Marked as answer by Miya Yao Tuesday, August 16, 2011 8:23 AM
    Monday, August 8, 2011 7:38 PM

All replies

  • Hi Brian, try running SFC /Scannow in a command prompt run as an Administrator. This will check if any of your system files have a problem.

    If all is okay then try bootng up in SAFE mode. ie Reboot, and hit F8 repeatedly until you can break in. Select Safe Mode there. See if the problem exists in safe mode. If it doesn't there's likely an incompatability with running softwares.

    Also you can use msconfig.exe (type it in the search box at the Start button) and onto the startup menu - deselect any entries related to the Antivirus programs you think are causing you problem. and perhaps other softwares too.

    Try a 'Clean boot' to help determine which drivers/software etc is causing the conflict..

    ---------Quoting Arthur Xie-------

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7
    http://support.microsoft.com/kb/929135

    ------------------------------------

    You'll be able to access Fix-it troubleshooters there too.

    Regards, pkn


    If my post was helpful - give it a Vote. If it helps solve your problem - propose it as Answer. ;-)
    • Proposed as answer by pkn2011 Friday, August 5, 2011 5:27 AM
    Thursday, August 4, 2011 6:03 PM
  • Hello

    Thanks for the suggestions. I have already run SFC /scannow and it didn't find any error. I'll try the clean boot method after reminding myself of the procedure.


    Brian E
    Thursday, August 4, 2011 6:21 PM
  • Hi again, I notice from your DMP above this line. "Bug Check String : PFN_LIST_CORRUPT"

    I'm not really familiar with the specifics of bugchecking but this might be part of the cause too?

    Hope you're making progress,

    Regards, pkn


    If my post was helpful - give it a Vote. If it helps solve your problem - propose it as Answer. ;-)
    Friday, August 5, 2011 5:36 AM
  • Hi Brian E,

    Refer to: http://msdn.microsoft.com/en-us/library/ff559014(v=VS.85).aspx 

    It could be caused by a driver passing a bad memory descriptor list.

    Perform a Clean Boot, and also test your memory, refer to: http://www.memtest.org/ 

    Regards,

    Miya

    Note: Since the site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.


    This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    • Proposed as answer by pkn2011 Tuesday, August 9, 2011 9:04 AM
    • Marked as answer by Miya Yao Tuesday, August 16, 2011 8:23 AM
    Monday, August 8, 2011 3:31 AM
  • Hello,

    Bug Check Code 0x1a: http://msdn.microsoft.com/en-us/library/ff557391(v=VS.85).aspx

    Bug Check Code 0x4E: http://msdn.microsoft.com/en-us/library/ff559014(v=VS.85).aspx

     

    Please proceed like that:

    • Disable all security softwares that you have
    • Uninstall all programs that you don't use
    • Update all possible drivers
    • Run msconfig and disable all startup items except Microsoft ones

    Once done, check again.

     

    Are you sure that no error was detected when using memtest86+?

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator 

    • Proposed as answer by pkn2011 Tuesday, August 9, 2011 9:05 AM
    • Marked as answer by Miya Yao Tuesday, August 16, 2011 8:23 AM
    Monday, August 8, 2011 7:38 PM