Solved Random BSOD, unknown cause

[AXavierB]

Yesterday, for the first time, I experienced a STOP error while browsing my computer. I saw a Java loading bar pop up, but I didn't get a good look at what it was; I assume it was an update. Seconds later, my computer shut itself down and, when I restarted, I got a BSOD. Occasionally it would let me onto Windows for a few seconds before crashing again, and eventually it started crashing before I even got a chance to log in. The issue extended to Safe Mode, as well. With each blue screen, the error code was different.

However, since this morning, I've been able to enter Safe Mode for indefinite periods of time with no problems. I can also enter normal mode, but I get another BSOD after spending roughly three minutes in it. In neither Safe Mode nor normal mode can I access wireless internet, however. I tried using System Configuration to select which services/programs loaded on startup, but so far I'm no closer to finding the cause of the error. I was given a Seagate FreeAgent 250 GB external hard drive by my mom to help save my files, but I can't seem to find a way to write to it. At the moment I'm concerned I'll have to completely wipe my system and lose all my data. Any help would be appreciated.

By the way, I have an Asus K50IJ notebook and I run Vista Home Premium x64. I installed Ubuntu to see if my computer would run it, and it does so with few problems, so I figure it can't be a hard drive error.

Using another computer at the moment (a Mac) since I can't access the internet on mine, so I wouldn't know how to install new drivers if that's the problem. or update my BIOS.

 

[Shadowjk]

Please could you upload your Minidumps to be Analysed also be aware that if you have any more Minidumps please upload them

See http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html For More Information

Many Thanks,
Josh

 

[AXavierB]

Here's what I got by doing that. I couldn't get anywhere with perfmon /report, though; it kept giving me an error message saying "An error occurred while attempting to generate the report. The system cannot find the file specified."

View attachment Windows_NT6_BSOD_jcgriff2.zip

Also I can access the internet from Safe Mode now, using Safe Mode with Networking. Didn't know about that at first. But I still can't seem to backup my C drive.

 

[Shadowjk]

Please Run a full Virus scan and Reinstall any Drivers with a Warning Sign or a red X by them

Along with that please run a SFC /scannow

See http://www.vistax64.com/tutorials/66978-system-files-sfc-command.html For More Information

To Reinstall a Driver please see the Attachment

YOU WILL NEED TO BE AN ADMINISTRATOR

Could you also please do a Clean boot to see if any third party Software is causing the Blue Screen

See Perform a clean startup to determine whether background programs are interfering with your game or program For More Information

For Reference:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Josh\Desktop\Mini020211-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18267.amd64fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0xfffff800`0261b000 PsLoadedModuleList = 0xfffff800`027dfdd0
Debug session time: Thu Feb  3 01:12:36.130 2011 (UTC + 0:00)
System Uptime: 0 days 0:01:08.754
Loading Kernel Symbols
..

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

.............................................................
..................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc000001d, fffff800026a1304, c, fffffa8005716500}

Probably caused by : ntkrnlmp.exe ( nt!KeInsertQueueApc+94 )

Followup: MachineOwner
---------

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff800026a1304, The address that the exception occurred at
Arg3: 000000000000000c, Parameter 0 of the exception
Arg4: fffffa8005716500, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.

FAULTING_IP: 
nt!KeInsertQueueApc+94
fffff800`026a1304 493bc5          cmp     rax,r13

EXCEPTION_PARAMETER1:  000000000000000c

EXCEPTION_PARAMETER2:  fffffa8005716500

ERROR_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.

BUGCHECK_STR:  0x1E_c000001d

CUSTOMER_CRASH_COUNT:  3

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  userinit.exe

CURRENT_IRQL:  c

LAST_CONTROL_TRANSFER:  from fffff80002657b07 to fffff800026754d0

FAILED_INSTRUCTION_ADDRESS: 
nt!KeInsertQueueApc+94
fffff800`026a1304 493bc5          cmp     rax,r13

STACK_TEXT:  


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KeInsertQueueApc+94
fffff800`026a1304 493bc5          cmp     rax,r13

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!KeInsertQueueApc+94

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c0e5ae3

FAILURE_BUCKET_ID:  X64_0x1E_c000001d_BAD_IP_nt!KeInsertQueueApc+94

BUCKET_ID:  X64_0x1E_c000001d_BAD_IP_nt!KeInsertQueueApc+94

Followup: MachineOwner
---------

Hope This Helps,
Josh

 

[AXavierB]

My only virus scanner is avast! Free Antivirus, which doesn't seem to work in Safe Mode. I had AVG until last week; I uninstalled it because its updates caused my computer to crash (although I've been unable to remove its drivers and files). I also have Spybot: Search & Destroy, which picked up trojan horses but couldn't eliminate them.

I performed a clean boot, and I still got the blue screen. I also disabled the two drivers that had warning signs next to them. One is avast! Network Shield Support and the other is Security Processor Loader Driver. I tried uninstalling both, but they reappeared when I booted back up.

 

[richc46]

I will notify security. Those trojans have to be removed before further action is taken.

 

[Shadowjk]

TY Rich

 

[AXavierB]

Problem solved. I took my computer to a professional to backup my data, then installed Windows 7 and formatted Vista.

 

[Shadowjk]

Okay as long as it was solved I am happy thank you for reporting back