BSOD Help

Hello, again! I am in need of some expert help. I have an older Gateway MX8734 laptop that has really been running pretty good. Lately, however, I have been getting BSOD. I have NO IDEA how to interpret these error messages nor what I can do to fix them. I have done some research here, and decided to follow the instructions in a post in this forum. Please find links to my diagnostic files:

http://speccy.piriform.com/results/IgYScHiQT7rhkglvk1uW5fZ
https://skydrive.live.com/#cid=C6B6860B34CE2355&id=C6B6860B34CE2355%21106 (Never used this before, so let me know if works!)

MiniToolBox output:

MiniToolBox by Farbar Version: 18-01-2012
Ran by Bomber (administrator) on 17-03-2012 at 07:44:01
Microsoft Windows 7 Home Premium Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************

=========================== Installed Programs ============================

Adobe AIR (Version: 2.7.0.19530)
Adobe Flash Player 11 ActiveX (Version: 11.1.102.62)
Adobe Reader X (10.1.2) (Version: 10.1.2)
Auslogics Disk Defrag (Version: version 3.2)
avast! Free Antivirus (Version: 7.0.1407.0)
Blue Coat K9 Web Protection 4.2.123 (Version: 4.2.123)
Canon Easy-PhotoPrint EX
Canon IJ Network Scan Utility
Canon IJ Network Tool
Canon MP560 series MP Drivers
Canon Utilities Solution Menu
CCleaner (Version: 3.09)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dropbox (Version: 1.2.52)
Duplicate Cleaner 2.0.6 (Version: 2.0.6)
EASEUS Partition Master 9.0.0 Home Edition
Evernote v. 4.5.3 (Version: 4.5.3.6131)
Glary Utilities 2.35.0.1216 (Version: 2.35.0.1216)
Google Chrome (Version: 17.0.963.79)
Google Update Helper (Version: 1.3.21.99)
ImgBurn (Version: 2.5.5.0)
Intel® Graphics Media Accelerator Driver (Version: 8.15.10.1930)
Java Auto Updater (Version: 2.0.6.1)
Java™ 6 Update 29 (Version: 6.0.290)
Logitech Harmony Remote Software (Version: 1.0.110307)
Macrium Reflect Free Edition (Version: 5.0.4258)
Magical Jelly Bean KeyFinder (Version: 2.0.8.2)
Malwarebytes Anti-Malware version 1.60.1.1000 (Version: 1.60.1.1000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Corporation (Version: 9.1.0.0)
Microsoft LifeCam (Version: 3.60.253.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Picture It! Photo Premium 9 (Version: 9.0.0.0000)
Microsoft Silverlight (Version: 4.1.10111.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
MotoHelper MergeModules (Version: 1.2.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NirSoft BlueScreenView
nLite 1.4.9.1 (Version: 1.4.9.1)
PDF24 Creator 3.5.2
Personal Checkbook Advantage
Revo Uninstaller 1.92 (Version: 1.92)
Samsung Simple Upgrade Tool for SCH-I500 EH09 (Version: 1.0.001)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.550.0)
Scribus 1.3.3.14 (Version: 1.3.3.14)
SIW version 2011.10.29 (Version: 2011.10.29)
Skype™ 5.5 (Version: 5.5.124)
Speccy (Version: 1.16)
SUPERAntiSpyware (Version: 5.0.1118)
TeamViewer 6 (Version: 6.0.11656)
TeamViewer 7 (Version: 7.0.12189)
The Print Shop® 6.0 Deluxe
TurboTax 2010
TurboTax 2010 WinPerFedFormset (Version: 010.000.5821)
TurboTax 2010 WinPerReleaseEngine (Version: 010.000.0501)
TurboTax 2010 WinPerTaxSupport (Version: 010.000.0222)
TurboTax 2010 wrapper (Version: 010.000.0157)
TurboTax 2011
TurboTax 2011 WinPerFedFormset (Version: 011.000.2727)
TurboTax 2011 WinPerReleaseEngine (Version: 011.000.0436)
TurboTax 2011 WinPerTaxSupport (Version: 011.000.0210)
TurboTax 2011 wrapper (Version: 011.000.0120)
TurboTax 2011 wwiiper (Version: 011.000.1499)
TurboTax 2011 wwviper (Version: 011.000.1328)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition
Update for Microsoft Outlook Social Connector (KB2583935)
Windows 7 USB/DVD Download Tool (Version: 1.0.30)

**** End of log ****


As I am waiting for a reply, I will follow this advice:

6. While waiting for a reply -
· Run - Driver Verifier - Windows 7 & Vista

· Run Hardware Diagnostics -
- RAM -http://www.carrona.org/memdiag.html (read the details at the link)
- HDD - http://www.carrona.org/hddiag.html (read the details at the link)

Your skydrive upload worked fine.

I'll have a closer look at the information when I get home later this afternoon ... but a quick look at the minidumps indicates that the problem may be caused by:

• Blue Coat K9 Web Protection 4.2.123 (Version: 4.2.123)
• avast! Free Antivirus (Version: 7.0.1407.0)

Let me know how you get on with Driver Verifier: If the system crashes, zip up the new minidump(s) and attach to a reply.

Thanks for your help. It did crash with Driver Verifier. I tried to compress the file, as well as the entire Minidump folder. I get an error message "File not found or no read permission".

How are you attempting to zip the file? I'll include my suggested instructions:

Please zip up the last minidump and attach to your reply so I can have a closer look.

• Navigate to C:\Windows\Minidump <<< folder
• Right-click on the most recent minidump file > Send to ... > Compressed (zipped) Folder.
  The zip file will be located in the same place (the Minidump folder).
• Attach the zip file to your next reply.
  When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.

That's what I was doing. Somehow, it worked this time! See attached....

No luck there: Nothing to unzip.

Please restart the computer and try again.

Out of the 4 minidumps that you were able to provide, 3 of them point squarely at bckd.sys as the cause of the crash.

• The fourth minidump (the earliest one) doesn't provide any useful information.

WinDbg reports "Probably caused by : tdx.sys" in 2 instances, but as you can see from the crash stacks that I included in the summary below, bckd.sys is the third-party/non-Microsoft driver lowest in the stack and therefore the most likely culprit (in all 3 of the 4 crashes).

bckd.sys    Sat Jun 11 07:40:03 2011

bckd.sys is the K9 parental web filter belonging to Blue Coat K9 Web Protection 4.2.123 (Version: 4.2.123). I suggest that you un-install the program and test the system for some time to determine to your satisfaction whether or not the BSOD problem still exists. If you want/need to use the program again, then try obtaining and installing the latest version of the program and see what happens.

=======================
BSOD BUGCHECK SUMMARY: 4 minidumps

I tried to zip up the Minidump folder and file to no avail. Same error message. I can clearly see the errors in BlueScreenView. Is there any way I can use that (or another) program to provide you with what caused the BSOD after running Driver Verifier?

In the meantime, I have uninstalled K9. I will report back in a week. Thanks for all of your help.

Try this with BlueScreenView:

• Double-click on the BlueScreenView.exe file, to run the program.
• When scanning is done (usually complete by the time the interface appears), go ...
  
  • Edit > Select All
  • File > Save Selected Items, and save the report to your Desktop as BSOD.txt.
  • Close the BlueScreenView window.
• Open BSOD.txt using Notepad and go ...
  
  • Edit > Select All
  • Edit > Copy, and then paste the entire contents of the text file into your next reply.

Here you go. By the way, I did run MemTest and 3 passes were fine.

==================================================
Dump File : 031712-21450-01.dmp
Crash Time : 3/17/2012 8:35:34 AM
Bug Check String : SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000007e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8c8b9503
Parameter 3 : 0x807868cc
Parameter 4 : 0x807864b0
Caused By Driver : SASKUTIL.SYS
Caused By Address : SASKUTIL.SYS+7503
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Crash Address : SASKUTIL.SYS+7503
Stack Address 1 : SASKUTIL.SYS+1fcc
Stack Address 2 : ntkrnlpa.exe+1c3336
Stack Address 3 : ntkrnlpa.exe+3b153d
Computer Name :
Full Path : C:\Windows\Minidump\031712-21450-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 135,472
==================================================

==================================================
Dump File : 030912-63913-01.dmp
Crash Time : 3/9/2012 7:31:53 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x00000000
Parameter 3 : 0xc497ba20
Parameter 4 : 0x00000000
Caused By Driver : bckd.sys
Caused By Address : bckd.sys+9837
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Crash Address :
Stack Address 1 : bckd.sys+993e
Stack Address 2 : bckd.sys+a88e
Stack Address 3 : bckd.sys+b336
Computer Name :
Full Path : C:\Windows\Minidump\030912-63913-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 145,256
==================================================

==================================================
Dump File : 030712-32838-01.dmp
Crash Time : 3/7/2012 8:01:50 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8e171c82
Parameter 3 : 0xb89878e8
Parameter 4 : 0x00000000
Caused By Driver : tdx.sys
Caused By Address : tdx.sys+4c82
File Description : TDI Translation Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.17514 (win7sp1_rtm.101119-1850)
Processor : 32-bit
Crash Address : tdx.sys+4c82
Stack Address 1 : tdx.sys+c009
Stack Address 2 : ntkrnlpa.exe+3758e
Stack Address 3 : aswTdi.SYS+d14
Computer Name :
Full Path : C:\Windows\Minidump\030712-32838-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 145,256
==================================================

==================================================
Dump File : 030112-21091-01.dmp
Crash Time : 3/1/2012 8:43:57 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8df49c82
Parameter 3 : 0xbd9b38e8
Parameter 4 : 0x00000000
Caused By Driver : tdx.sys
Caused By Address : tdx.sys+4c82
File Description : TDI Translation Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.17514 (win7sp1_rtm.101119-1850)
Processor : 32-bit
Crash Address : tdx.sys+4c82
Stack Address 1 : tdx.sys+c009
Stack Address 2 : ntkrnlpa.exe+3758e
Stack Address 3 : aswTdi.SYS+d14
Computer Name :
Full Path : C:\Windows\Minidump\030112-21091-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 145,328
==================================================

==================================================
Dump File : 022712-18766-01.dmp
Crash Time : 2/27/2012 11:03:35 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x82b29359
Parameter 3 : 0xb1feb6ec
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+120359
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.17727 (win7sp1_gdr.111118-2330)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+120359
Stack Address 1 : ntkrnlpa.exe+249cfb
Stack Address 2 : ntkrnlpa.exe+246e2b
Stack Address 3 : ntkrnlpa.exe+246ef8
Computer Name :
Full Path : C:\Windows\Minidump\022712-18766-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7601
Dump File Size : 145,328
==================================================

The BlueScreenView report is not showing the crash dump as VERIFIER_ENABLED ... so it may not provide us with any useful information. However, I am still curious. Please run the jcgriff2 information collecting application once again (as you did for your first post here) to see if it will collect that minidump for me to look at.

• Note: FIRSTLY ... re-name the previous jcgriff2 folder in Documents that was created, in preparation for creating a new one.

Same link as initial post, the file is (2). Should I run Driver Verifier, again?

https://skydrive.live.com/?cid=c6b6860b34ce2355#cid=C6B6860B34CE2355&id=C6B6860B34CE2355%21106

The crash dump was not VERIFIER_ENABLED so is of no real use.

Yes: Run Driver Verifier again. You should be able to leave it run for 36 hours ... whether you are using the computer or not ... and it shouldn't crash the system if all is well. After 36 hours without a crash, turn Driver Verifier off.

If the system does crash with Driver Verifier enabled, then I will want to see the minidump(s).

========================
BSOD BUGCHECK SUMMARY: 031712-21450-01.dmp
................................................................
Loading Dump File [C:\CactusIsland\bomber1712_BC\Windows7_Vista_jcgriff2 (2)\031712-21450-01.dmp]
Built by: 7601.17727.x86fre.win7sp1_gdr.111118-2330
Debug session time: Sun Mar 18 00:25:34.691 2012 (UTC + 11:00)
System Uptime: 0 days 0:00:09.079
Unable to load image \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SASKUTIL.SYS
*** ERROR: Module load completed but symbols could not be loaded for SASKUTIL.SYS
Probably caused by : memory_corruption
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: System
BUGCHECK_STR: 0x7E
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
Bugcheck code 1000007E
Arguments c0000005 8c8b9503 807868cc 807864b0
................................................................

Hi. Thanks, again, for all of your help. I tried to run Driver Verifier, again. BSOD at restart. Had to use system restore to get computer running. After restore, there was not a new minidump. I will try, again, and post results.

Why is it that I cannot zip up the minidump folder? Is that a symptom of what is causing BSOD?

Clearly, all is not well with the system. I'll await the result of you attempting DV again.

I am puzzled about the inability to simply zip up the minidump folder, or one of the minidump files. I wonder whether you are able to successfully zip up any other file?