none
Windows 7 BSOD - can anybody help me? Happened when writing email this morning.

    Question

  •  

    Hi, I'm getting frequent BSOD on Windows 7, and got the following info:

     

    Problem signature:

     

      Problem Event Name:                        BlueScreen

      OS Version:                                          6.1.7600.2.0.0.25648

      Locale ID:                                             2057

     

    The BFCodes were:

    000000000000007F
    0000000000000008
    0000000080050031
    FFFFF80002C89DA2

     

    And the dumps were:

    Dump Files: C:\Windows\Minidump\032211-18657-01.dmp

    C:\User\AppData\Local\Temp\WER-27253-0.sysdata.xml

       

    Links above to the files!

    Thanks in advance for your help,

    Susan



    Tuesday, March 22, 2011 9:19 AM

Answers

  • Hello Susan,

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault).  The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
            use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
            use .trap on that value
    Else
            .trap on the appropriate frame will show where the trap was taken
            (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 0000000080050031
    Arg3: 00000000000006f8
    Arg4: fffff80002c76da2

    Debugging Details:
    ------------------


    BUGCHECK_STR:  0x7f_8

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    PROCESS_NAME:  csrss.exe

    CURRENT_IRQL:  2

    LAST_CONTROL_TRANSFER:  from fffff80002c70ca9 to fffff80002c71740

    STACK_TEXT: 
    fffff880`02f6ace8 fffff800`02c70ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
    fffff880`02f6acf0 fffff800`02c6f172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`02f6ae30 fffff800`02c76da2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
    fffff880`02f8dff0 fffff800`02c39f5a : fffffa80`0a85a8f0 00000000`00000001 00000000`00000000 fffffa80`076ed7c8 : nt!SeAccessCheckWithHint+0x312
    fffff880`02f8e0d0 fffff880`01591c5a : 3fb3f722`f373362f 99fff8d9`cf6fbd77 bb95dfbf`b5e7be77 69333b53`baba79fa : nt!SeAccessCheckFromState+0x102
    fffff880`02f8e7c0 fffff880`0158f94f : 54fef172`c0000022 203bff23`00000000 d3f273fe`f71779df b776b9bb`b6fcbeb5 : NETIO!CompareSecurityContexts+0x6a
    fffff880`02f8e830 fffff880`015919b5 : 007335ff`539adf79 696bf7fc`9a7fedb7 2a7f35bd`134f5b01 42abbbe7`17d7b37f : NETIO!MatchValues+0xef
    fffff880`02f8e880 fffff880`01591845 : fffffa80`08c0a090 fffffa80`0951c860 fffff880`02f8eaa8 fffff880`02f8f1e0 : NETIO!FilterMatch+0x95
    fffff880`02f8e8d0 fffff880`01592ccb : 00000000`00000000 00000000`00000000 fffff880`02f8f1e0 fffff880`02f8ea90 : NETIO!IndexListClassify+0x69
    fffff880`02f8e950 fffff880`0163f417 : fffff880`02f8ee28 fffff880`02f8ee28 fffff880`02f8fb60 fffffa80`06e5f030 : NETIO!KfdClassify+0xa4e
    fffff880`02f8ecc0 fffff880`0163883e : fffff880`01747690 00000000`00000000 fffffa80`09c289b0 00000000`00000000 : tcpip!WfpAleClassify+0x57
    fffff880`02f8ed00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    NETIO!CompareSecurityContexts+6a
    fffff880`01591c5a 448b442470      mov     r8d,dword ptr [rsp+70h]

    SYMBOL_STACK_INDEX:  5

    SYMBOL_NAME:  NETIO!CompareSecurityContexts+6a

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: NETIO

    IMAGE_NAME:  NETIO.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a

    FAILURE_BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a

    BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a

    Followup: MachineOwner
    ---------

    ---------------------------------------------------------------------------------

    Your BSOD is caused by netio.sys driver.

    Try this Micrsoft hotfix and check if it solves the problem.

    http://support.microsoft.com/kb/979278/en


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Tuesday, March 22, 2011 2:04 PM

  • Your BSOD is caused by netio.sys driver.

    Try this Micrsoft hotfix and check if it solves the problem.

    http://support.microsoft.com/kb/979278/en

     



    it is not caused by the NetIO driver, the fault occurs earlier. That's why it is a double fault.

    Susan, do you use ZoneAlarm? if yes update the network card drivers and try this hotfix (or install the Sp1 which includes the fix):

    Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F"
    http://support.microsoft.com/kb/981180/en-us

    If this doesn't solve it, uninstall ZoneAlarm.


    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    Tuesday, March 22, 2011 2:26 PM

All replies

  • Please use Microsoft Skydrive to upload C:\Windows\Minidump\032211-18657-01.dmp
    dump files.

    Once done, post a link here so that I download it and analyze it to determine the cause of your BSOD.

    If you want to read dump files without my helpn use Windbg and refer to this Microsoft article:

    http://support.microsoft.com/kb/315263

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Tuesday, March 22, 2011 1:35 PM
  • Hi Thanks so much for your help.  Hope this is what you meant!

     

    http://cid-42f38373c51efd63.office.live.com/self.aspx/.Documents/032211-18657-01.dmp

     

    Thanks very much

    Susan

    Tuesday, March 22, 2011 1:52 PM
  • Hello Susan,

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    UNEXPECTED_KERNEL_MODE_TRAP (7f)
    This means a trap occurred in kernel mode, and it's a trap of a kind
    that the kernel isn't allowed to have/catch (bound trap) or that
    is always instant death (double fault).  The first number in the
    bugcheck params is the number of the trap (8 = double fault, etc)
    Consult an Intel x86 family manual to learn more about what these
    traps are. Here is a *portion* of those codes:
    If kv shows a taskGate
            use .tss on the part before the colon, then kv.
    Else if kv shows a trapframe
            use .trap on that value
    Else
            .trap on the appropriate frame will show where the trap was taken
            (on x86, this will be the ebp that goes with the procedure KiTrap)
    Endif
    kb will then show the corrected stack.
    Arguments:
    Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
    Arg2: 0000000080050031
    Arg3: 00000000000006f8
    Arg4: fffff80002c76da2

    Debugging Details:
    ------------------


    BUGCHECK_STR:  0x7f_8

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    PROCESS_NAME:  csrss.exe

    CURRENT_IRQL:  2

    LAST_CONTROL_TRANSFER:  from fffff80002c70ca9 to fffff80002c71740

    STACK_TEXT: 
    fffff880`02f6ace8 fffff800`02c70ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
    fffff880`02f6acf0 fffff800`02c6f172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`02f6ae30 fffff800`02c76da2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
    fffff880`02f8dff0 fffff800`02c39f5a : fffffa80`0a85a8f0 00000000`00000001 00000000`00000000 fffffa80`076ed7c8 : nt!SeAccessCheckWithHint+0x312
    fffff880`02f8e0d0 fffff880`01591c5a : 3fb3f722`f373362f 99fff8d9`cf6fbd77 bb95dfbf`b5e7be77 69333b53`baba79fa : nt!SeAccessCheckFromState+0x102
    fffff880`02f8e7c0 fffff880`0158f94f : 54fef172`c0000022 203bff23`00000000 d3f273fe`f71779df b776b9bb`b6fcbeb5 : NETIO!CompareSecurityContexts+0x6a
    fffff880`02f8e830 fffff880`015919b5 : 007335ff`539adf79 696bf7fc`9a7fedb7 2a7f35bd`134f5b01 42abbbe7`17d7b37f : NETIO!MatchValues+0xef
    fffff880`02f8e880 fffff880`01591845 : fffffa80`08c0a090 fffffa80`0951c860 fffff880`02f8eaa8 fffff880`02f8f1e0 : NETIO!FilterMatch+0x95
    fffff880`02f8e8d0 fffff880`01592ccb : 00000000`00000000 00000000`00000000 fffff880`02f8f1e0 fffff880`02f8ea90 : NETIO!IndexListClassify+0x69
    fffff880`02f8e950 fffff880`0163f417 : fffff880`02f8ee28 fffff880`02f8ee28 fffff880`02f8fb60 fffffa80`06e5f030 : NETIO!KfdClassify+0xa4e
    fffff880`02f8ecc0 fffff880`0163883e : fffff880`01747690 00000000`00000000 fffffa80`09c289b0 00000000`00000000 : tcpip!WfpAleClassify+0x57
    fffff880`02f8ed00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    NETIO!CompareSecurityContexts+6a
    fffff880`01591c5a 448b442470      mov     r8d,dword ptr [rsp+70h]

    SYMBOL_STACK_INDEX:  5

    SYMBOL_NAME:  NETIO!CompareSecurityContexts+6a

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: NETIO

    IMAGE_NAME:  NETIO.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a

    FAILURE_BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a

    BUCKET_ID:  X64_0x7f_8_NETIO!CompareSecurityContexts+6a

    Followup: MachineOwner
    ---------

    ---------------------------------------------------------------------------------

    Your BSOD is caused by netio.sys driver.

    Try this Micrsoft hotfix and check if it solves the problem.

    http://support.microsoft.com/kb/979278/en


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Tuesday, March 22, 2011 2:04 PM

  • Your BSOD is caused by netio.sys driver.

    Try this Micrsoft hotfix and check if it solves the problem.

    http://support.microsoft.com/kb/979278/en

     



    it is not caused by the NetIO driver, the fault occurs earlier. That's why it is a double fault.

    Susan, do you use ZoneAlarm? if yes update the network card drivers and try this hotfix (or install the Sp1 which includes the fix):

    Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F"
    http://support.microsoft.com/kb/981180/en-us

    If this doesn't solve it, uninstall ZoneAlarm.


    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    Tuesday, March 22, 2011 2:26 PM
  • Thanks for your reply, it's great to have people able to help!  I will see what I can do with the information.

     

    Thanks very much!

    Susan

    Tuesday, March 22, 2011 4:29 PM
  • I am not sure, it's a friend's PC I'm trying to fix. I will check tomorrow!

     

    Thanks very much!

    Susan

    Tuesday, March 22, 2011 4:32 PM
  • Hi,

    Results verified by WinDBG, DumpCHK, and BlueScreenView.

    The Bug_Check was 7F CAUSE netio.sys which is a Windows component which means something
    else drove it into Fault.

    BugCheck 7F, {8, 80050031, 6f8, fffff80002c76da2}
    Probably caused by : NETIO.SYS ( NETIO!CompareSecurityContexts+6a )

    1. Update the network driver you are using - NIC or WiFi - check the System Maker's Site
    (Motherboard Maker for custom systems) and/or the actual device maker's site.

    2. Check with System Maker for updates to BIOS, low level chipset drivers and the major device
    drivers.

    3. Norton/Symantec is known for causing strange issues and aggravating others. Best to uninstall
    it to test as merely disabling it will still allow pieces of it to install. Uninstall it and run the Norton
    Removal Tool to prevent trouble causing remnants from being left behind. Below are
    recommendations to use while testing, even better permanently.

    Norton Removal Tool
    http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN&ln=en_US

    List of anti-malware program cleanup/uninstall tools
    http://social.answers.microsoft.com/Forums/en-US/msestart/thread/407bf6da-c05d-4546-8788-0aa4c25a1f91/

    ------------------------------

    Here is what I use and recommend : (These are all Free versions and very effective.)

    Avast and Prevx have proven extremely reliable and compatible with everything I have
    thrown at them. Microsoft Security Essentials and Prevx have also proven to be very
    reliable and compatible. Use MSE and Prevx or Avast and Prevx however not all 3.

    Avast Home Free - stop any shields you do not need except leave Standard, Web, and
    Network running.

    Prevx - Home - Free

    Windows Firewall

    Windows Defender (not needed if using MSE)

    IE - Protected Mode

    IE 8 - SmartScreen Filter ON  (IE 7 Phishing Filter)

    I also have IE to always start with InPrivate Filter active if IE 8.
    (You occasionally have to turn it temporarily off with the little Icon on LEFT of the + bottom
    right of IE)

    Two versions of Avast are available 5.x and 4.8x

    Avast 5.x - Home - Free - Stop the Shields you do not use (except File, Web, Network, &
    Behavior) - double click the Orange Icon in Notification Area - Real Time Shields - click the
    Shield you want to stop - STOP. To stop the Orange Icon from showing an error indicator -
    click the Orange Icon - Upper Right - Settings - click Status Bar - uncheck the Shields you
    disabled - click OK
    http://www.avast.com/free-antivirus-download

    Avast 4.8x - Home - Free - stop any shields you do not need except leave Standard, Web,
    and Network running. (Double Click Blue icon - details next to OK. - upper left Shields -
    Terminate those you do not use.)
    http://www.avast.com/free-antivirus-download#tab4

    Or use Microsoft Security Essentials - Free
    http://www.microsoft.com/Security_Essentials/

    Prevx works well along side Avast or MSE

    Prevx - Home - Free small, fast, exceptional CLOUD protection, works with other security
    programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back here
    or use Google to see how to remove. 
    http://www.prevx.com/   <-- information
    http://info.prevx.com/downloadcsi.asp  <-- download

    PCmag - Prevx - Editor'a Choice
    http://www.pcmag.com/article2/0,2817,2346862,00.asp

    Also get Malwarebytes - free - use as scanner only. If you ever suspect malware, and that
    would be unsual with Avast and Prevx running except for an occasional low level cookie
    (no big deal), UPDATE it and then run it as a scanner. I have many scanners and they
    never find anything of note since I started using this setup.

    http://www.malwarebytes.org/

    ================================================================
    ================================================================

    Do you have ZoneAlarm or any 3rd party firewall installed? If so that could be the cause.
    Other antivirus/security programs could be at least partially responsible.

    This Hotfix "Might" apply however do not use unless you are fairly sure.

    Using two Windows Filtering Platform (WFP) drivers causes a computer to crash when the
    computer is running Windows Vista, Windows 7, or Windows Server 2008
    http://support.microsoft.com/kb/979278

    Also check these :

    Stop error message when you run an application that transfers data by using the UDP protocol
    in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F
    http://support.microsoft.com/kb/981180/

    General causes of "STOP 0x0000007F" errors (applies to Vista and Windows 7 as well)
    http://support.microsoft.com/kb/137539

    ===========================================================

    For BlueScreen troubleshooting methods using BlueScreenView and MyEventViewer see my replies
    if this thread - top 3 answers (+1 other).

    http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/c675b7b8-795f-474d-a1c4-6b77b3fcd990

    We can analyze the minidumps if you make them available from the SkyDrive or other file
    sharing sites.

    Zip or upload the contents of C:\Windows\minidump

    Use SkyDrive to upload collected files and post screen shot/picture.
    http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

    ------------------------------------------------------------------------------------------------------------------------

    References to Vista also apply to Windows 7.

    BCCode: 7f 0x0000007f with the 00000008 parameter usually means a hardware issue.

    Have you added hardware or updated drivers recently? Check Control Panel - Windows
    Updates to see if any drivers have been updated there just before this started happening.

    For 7f - this could be a hardware issue such as poorly seated cards or memory, though there are
    other causes. Weak powersupply could also lead to this. Use the troubleshooters above and below
    and when you get to the  drivers and memory sections refer to my next message below and then
    return to the troubleshooters if needed

    If a PC remove ALL power. Open case, remove and reseat ALL cards, memory chips, and ALL
    cables (do not just try to snug) on both ends if they can be reached and on the device ends if not
    (removing the cables and reseating them helps to eliminate minor corrosion).

    Notice the 08 (double fault) as 1st parameter means there are likely two causes. Be sure to Update
    your drivers manually as using Windows Updates only finds certified drivers and Microsoft and
    the Device makers are far behind in that proces. Update NIC, WiFi, BIOS and Video/Display and
    other major drivers

    If a Laptop or a PC you might have to take to a shop (not BestBuy or other BigBox Stores) or your
    System maker's Support.

    ----------------------------------------------------------------------

    BCCode: 7F   0x0000007F  which is the same as 0x1000007F

    The UNEXPECTED_KERNEL_MODE_TRAP bug check has a value of 0x0000007F. This bug check indicates that the Intel CPU generated a trap and the kernel failed to catch this trap.

    This trap could be a bound trap (a trap the kernel is not permitted to catch) or adouble fault(a fault that occurred while processing an earlier fault, which always results in a system failure).

    Parameters

    The first parameter that appears on the blue screen specifies the trap number.

    The most common trap codes include the following:

    • 0x00000000, or Divide by Zero Error, indicates that a DIV instruction is executed and the divisor is zero. Memory corruption, other hardware problems, or software failures can cause this error.
    • 0x00000004, or Overflow, occurs when the processor executes a call to an interrupt handler when the overflow (OF) flag is set.
    • 0x00000005, or Bounds Check Fault, indicates that the processor, while executing a BOUND instruction, finds that the operand exceeds the specified limits. A BOUND instruction ensures that a signed array index is within a certain range.
    • 0x00000006, or Invalid Opcode, indicates that the processor tries to execute an invalid instruction. This error typically occurs when the instruction pointer has become corrupted and is pointing to the wrong location. The most common cause of this error is hardware memory corruption.
    • 0x00000008, or Double Fault, indicates that an exception occurs during a call to the handler for a prior exception. Typically, the two exceptions are handled serially. However, there are several exceptions that cannot be handled serially, and in this situation the processor signals a double fault. There are two common causes of a double fault


    CAUSE

    Bug check 0x7F typically occurs after you install a faulty or mismatched hardware (especially memory) or if installed hardware fails.

    A double fault can occur when the kernel stack overflows. This overflow occurs if multiple drivers are attached to the same stack. For example, if two file system filter drivers are attached to the same stack and then the file system recurses back in, the stack overflows.

    Resolving the Problem

    Troubleshooting: If you recently added hardware to the computer, remove it to see if the error recurs. If existing hardware has failed, remove or replace the faulty component. Run hardware diagnostics that the system manufacturer supplies to determine which hardware component failed.

    The memory scanner is especially important. Faulty or mismatched memory can cause this bug check. For more informaiton about these procedures, see the owner's manual for your computer. Check that all adapter cards in the computer are properly seated. Use an ink eraser or an electrical contact treatment, available at electronics supply stores, to ensure adapter card contacts are clean.

    If the error appears on a newly installed system, check the availability of updates for the BIOS, the SCSI controller, or network cards. These kind of updates are typically available on the Web site or BBS of the hardware manufacturer.

    Confirm that all hard disk drives, hard disk controllers, and SCSI adapters are listed in the Microsoft Windows Marketplace Tested Products List.

    If the error occurred after the installation of a new or updated device driver, you should remove or replace the driver. If, under this circumstance, the error occurs during the startup sequence and the system partition is formatted with NTFS, you might be able to use Safe Mode to rename or delete the faulty driver. If the driver is used as part of the system startup process in Safe Mode, you have to start the computer by using the Recovery Console in order to access the file.

    Also restart your computer, and then press F8 at the character-based menu that displays the operating system choices. At theAdvanced Options menu, select theLast Known Good Configuration option. This option is most effective when you add only one driver or service at a time.

    Overclocking (setting the CPU to run at speeds above the rated specification) can cause this error. If you have overclocked the computer that is experiencing the error, return the CPU to the default clock speed setting.

    Check the System Log in Event Viewer for additional error messages that might help identify the device or driver that is causing the error. You can also disable memory caching of the BIOS to try to resolve the problem.

    If you encountered this error while upgrading to a new version of the Windows operating system, the error might be caused by a device driver, a system service, a virus scanner, or a backup tool that is incompatible with the new version. If possible, remove all third-party device drivers and system services and disable any virus scanners before you upgrade. Contact the software manufacturer to obtain updates of these tools. Also make sure that you have installed the latest Windows Service Pack.

    Finally, if all the above steps do not resolve the error, take the system motherboard to a repair facility for diagnostic testing. A crack, a scratched trace, or a defective component on the motherboard can also cause this error.


    BCCode: 7F   0x0000007F  which is the same as 0x1000007F  <-- read this link
    http://www.faultwire.com/solutions-fatal_error/Run-a-system-diagnostic-utility-supplied-by-your-0x1000007F-*1304.html

    ==========================================

    Look in the Event Viewer to see if anything is reported about those.
    http://www.computerperformance.co.uk/vista/vista_event_viewer.htm

    MyEventViewer - Free - a simple alternative to the standard event viewer of Windows.
    TIP - Options - Advanced Filter allows you to see a time frame instead of the whole file.

    http://www.nirsoft.net/utils/my_event_viewer.html

    -------------------------------------------------------------------------

    Here are some methods to possibly fix the blue screen issue. If you could give the Blue Screen
    info that would help. Such as the BCC and the other 4 entries on the lower left. And any other
    error information such as STOP codes and info such as IRQL_NOT_LESS_OR_EQUAL or PAGE_FAULT_IN_NONPAGED_AREA and similar messages.

    As examples :

    BCCode: 116
    BCP1: 87BC9510
    BCP2: 8C013D80
    BCP3: 00000000
    BCP4: 00000002

    or in this format :

    Stop: 0x00000000 (oxoooooooo oxoooooooo oxooooooooo oxoooooooo)
    tcpip.sys - Address 0x00000000 base at 0x000000000 DateStamp 0x000000000


    This is an excellent tool for posting Blue Screen Error Information

    BlueScreenView scans all your minidump files created during 'blue screen of death'
    crashes, and displays the information about all crashes in one table - Free

    http://www.nirsoft.net/utils/blue_screen_view.html


    Many BlueScreens are caused by old or corrupted drivers, especially video drivers however
    there are other causes.

    You can do these in Safe Mode if needed or from Command Prompt from Vista DVD or
    Recovery Options if your system has that installed by the maker.

    How to Boot to the System Recovery Options in Windows 7
    http://www.sevenforums.com/tutorials/668-system-recovery-options.html

    You can try a System Restore back to a point before the problem started if there is one.

    How to Do a System Restore in Windows 7
    http://www.sevenforums.com/tutorials/700-system-restore.html

    -------------------------------------------------------------------------

    Start - type this in Search Box ->  COMMAND   find at top and RIGHT CLICK  -  RUN AS ADMIN

    Enter this at the prompt - sfc /scannow

    How to Repair Windows 7 System Files with System File Checker
    http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log (and Windows 7)
    http://support.microsoft.com/kb/928228


    The log might give you the answer if there was a corrupted driver. (Does not tell all the possible
    driver issues).

    Also run CheckDisk so we can rule out corruption as much as possible.

    How to Run Check Disk at Startup in Windows 7
    http://www.sevenforums.com/tutorials/433-disk-check.html

    -------------------------------------------------------------------------

    Often updating drivers will help, usually Video, Sound, Network Card  (NIC), WiFi, 3rd party
    keyboard and mouse, as well as other major device drivers.

    Manually look at manufacturer's sites for drivers - and Device Maker's sites.
    http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm

    Installing and updating drivers in 7 (updating drivers manually using the methods above is preferred
    to ensure the latest drivers from System maker and Device makers are found)
    http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html

    How To Disable Automatic Driver Installation In Windows Vista - Drivers
    http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/
    http://technet.microsoft.com/en-us/library/cc730606(WS.10).aspx

    -------------------------------------------------------------------------

    How to fix BlueScreen (STOP) errors that cause Windows Vista to shut down or restart
    unexpectedly
    http://support.microsoft.com/kb/958233

    Troubleshooting Vista Blue Screen, STOP Errors (and Windows 7)
    http://www.chicagotech.net/vista/vistabluescreen.htm

    Understanding and Decoding BSOD (blue screen of death) Messages
    http://www.taranfx.com/blog/?p=692

    Windows - Troubleshooting Blue Screen Errors
    http://kb.wisc.edu/page.php?id=7033

    -------------------------------------------------------------------------

    In some cases this might be required.

    StartUp Repair from Recovery Options or Windows 7 disk

    How to Run a Startup Repair in Windows 7
    http://www.sevenforums.com/tutorials/681-startup-repair.html

    How to Boot to the System Recovery Options in Windows 7
    http://www.sevenforums.com/tutorials/668-system-recovery-options.html

    How to Create a Windows 7 System Repair Disc
    http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

    How to Do a Repair Install to Fix Windows 7
    http://www.sevenforums.com/tutorials/3413-repair-install.html

    Hope this helps.


    Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

    Tuesday, March 22, 2011 4:46 PM
  • Hi,

    References to Vista also apply to Windows 7.

    This is my generic how to for proper driver updates :

    This utility makes it easy to see which versions are loaded :

    DriverView - Free - utility displays the list of all device drivers currently loaded on your system.
    For each driver in the list, additional useful information is displayed: load address of the driver,
    description, version, product name, company that created the driver, and more.
    http://www.nirsoft.net/utils/driverview.html

    For Drivers check System Maker as fallbacks and Device Maker's which are the most current.
    Control Panel - Device Manager - Display Adapter - write down the make and complete model
    of your video adapter - double click - Driver's tab - write down the version info. Now click UPdate
    Driver (this may not do anything as MS is far behind certifying drivers) - then Right Click -
    Uninstall - REBOOT this will refresh the driver stack.

    Repeat that for Network - Network Card (NIC), Wifi, Sound, Mouse and Keyboard if 3rd party
    with their own software and drivers and any other major device drivers you have.

    Now go to System Maker's site (Dell, HP, Toshiba as examples) (as rollback) and then Device
    Maker's site (Realtek, Intel, Nvidia, ATI as examples) and get their latest versions. (Look for
    BIOS, Chipset and software updates at System Maker's site while there.)

    Download - SAVE - go to where you put them - Right Click - RUN AD ADMIN - REBOOT after
    each installation.

    Always check in Device Manager - Drivers tab to be sure the version you are installing actually
    shows up. This is because some drivers rollback before the latest is installed (sound drivers
    particularly do this) so install a driver - reboot - check to be sure it is installed and repeat as
    needed.

    Repeat at Device Makers - BTW at Device Makers DO NOT RUN THEIR SCANNER - check
    manually by model.

    Manually look at manufacturer's sites for drivers - and Device Maker's sites.
    http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm

    Installing and updating drivers in 7 (updating drivers manually using the methods above is preferred
    to ensure the latest drivers from System maker and Device makers are found)
    http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html

    If you update drivers manually then it is a good idea to disable Driver Installations in Windows
    Updates, this leaves Windows Updates ON however it will not install drivers which will usually
    be older and cause issues. If Updates suggests a new driver then HIDE it (Right Click on it)
    and then go look for new ones manually if you wish.

    How To Disable Automatic Driver Installation In Windows Vista - Drivers
    http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/
    http://technet.microsoft.com/en-us/library/cc730606(WS.10).aspx

    ==========================================

    Memory tests do not catch all errors such as mismatched memory (possible even for sticks
    that appear to be identical) and when faster memory is placed in system behind slower memory.
    So it is best to also swap sticks in and out to check for those even if all memory tests fail to show
    a problem.

    To test RAM check here - let it run 4+ hours or so. <-- best method
    www.memtest.org

    For the Windows Memory Diagnostic Tool.

    Start - type in Search box ->  Memory - find Memory Diagnostics tool at top of list - Right Click -
    RUN AS ADMIN follow the instructions

    Windows Vista: How to Scan / Test your RAM or Memory with Windows Vista Memory Diagnostic
    Tool
    http://www.shivaranjan.com/2007/11/01/windows-vista-how-to-scan-test-your-ram-or-memory-with-windows-vista-memory-diagnostic-tool/

    How to Run the Memory Diagnostics Tool in Windows 7
    http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html

    Test Your Computer’s Memory Using Windows Vista Memory Diagnostic Tool
    http://www.howtogeek.com/howto/windows-vista/test-your-computers-memory-using-windows-vista-memory-diagnostic-tool/

    Hope this helps.


    Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.
    Tuesday, March 22, 2011 4:49 PM
  • Hi SpiritX,

     

    Thanks for all the info, looks like it may take me a while to go through it all! The PC does have norton so could be the culprit.  Will have to see how it goes!

     

    Kind regards

    Susan

    Wednesday, March 23, 2011 4:27 PM
  • Does the PC have ZoneAlarm? Have you tried the hotfixes?

    The minidumps are not useful for UNEXPECTED_KERNEL_MODE_TRAP bug checks.

    Configure your Windows to create a kernel dump [1] and upload the zipped dump (C:\Windows\memory.dmp) to your SkyDrive and post a link here.

    André

    [1] http://www.brighthub.com/computing/windows-platform/articles/81867.aspx


    "A programmer is just a tool which converts caffeine into code"

    Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
    Wednesday, March 23, 2011 8:07 PM
  • The PC doesn't have zone alarm, it had norton so I uninstalled and replaced with Avast, am waiting to hear if the problem is fixed but as it was intermittent I think it will be wise to wait a couple weeks!

     

    THanks for your help!


    Susan

    • Proposed as answer by Andre.Ziegler Monday, March 28, 2011 2:07 PM
    Monday, March 28, 2011 8:02 AM