Unexpected Kernal Mode Trap on Boot-up

Here are the details on attaching a file - they are in a tutorial which is easier than me rewriting the information :)

How to Upload and Post Screenshots and Files at Ten Forums

Phil

Thanks for the link to the tutorial.

The following is the file associated with the starting post. I also have another .DMP file (Memory.DMP) which is too big to post on this forum.

Tracey

Hi Tracey,

The full memory.dmp can be shared via a link to a cloud service such as OneDrive. However, it may not be necessary.

All your mini-dump files show a similar stack (find this by using the k command in WinDBG) and there are two 3rd party drivers in all the stacks which do not have symbol files loaded. This could be the cause of your problem so I would look for updated drivers for them. One of them is an Avast driver so for simplicity you could simply uninstall Avast and see if it makes a difference. (I use Windows defender and don't bother with additional anti-virus packages.). The other is a Tunebyte high speed dubbing driver and there may need to be an updated driver provided by the manufacturer.

Code:

3: kd> k
 # Child-SP          RetAddr           Call Site
00 ffffa380`77f089a8 fffff800`f1bfd8a9 nt!KeBugCheckEx
01 ffffa380`77f089b0 fffff800`f1bfb6f3 nt!KiBugCheckDispatch+0x69
02 ffffa380`77f08af0 fffff800`f1af0927 nt!KiDoubleFaultAbort+0xb3
03 ffffa380`79cfbf70 fffff800`f1ad66d9 nt!MiInsertNonPagedPoolOnSlist+0x17
04 ffffa380`79cfc040 fffff800`f1d05323 nt!MiFreePoolPages+0x49
05 ffffa380`79cfc070 fffff800`f1d06801 nt!ExDeferredFreePool+0x303
06 ffffa380`79cfc0f0 fffff800`f1af1e94 nt!ExFreePoolWithTag+0x7e1
07 ffffa380`79cfc1f0 fffff800`f1af2801 nt!IopCompleteRequest+0xa64
08 ffffa380`79cfc2e0 fffff805`51cc4b5e nt!IopfCompleteRequest+0x441
09 ffffa380`79cfc410 fffff805`4e813615 portcls!DispatchDeviceIoControl+0x13e
0a ffffa380`79cfc4b0 fffff805`51cc4886 ks!KsDispatchIrp+0x55
0b ffffa380`79cfc570 fffff805`4f40a84c portcls!PcDispatchIrp+0x66
0c ffffa380`79cfc5e0 ffff8e8d`c2ce0a28 tbhsd+0xa84c
0d ffffa380`79cfc5e8 ffff8e8d`c2ce0a70 0xffff8e8d`c2ce0a28
0e ffffa380`79cfc5f0 ffff8e8d`c2ce0010 0xffff8e8d`c2ce0a70
0f ffffa380`79cfc5f8 fffff805`4f23179e 0xffff8e8d`c2ce0010
10 ffffa380`79cfc600 fffff805`4f231529 ksthunk!CKSThunkDevice::DispatchIoctl+0xbe
11 ffffa380`79cfc640 fffff805`4e73c39d ksthunk!CKernelFilterDevice::DispatchIrp+0xf9
12 ffffa380`79cfc6a0 ffff8e8d`c2ce0000 aswSnx+0x4c39d
13 ffffa380`79cfc6a8 00000000`00000000 0xffff8e8d`c2ce0000

Code:

BugCheck 7F, {8, ffffa38077f08af0, ffffa38079cfbf70, fffff800f1af0927}

*** WARNING: Unable to verify timestamp for tbhsd.sys
*** ERROR: Module load completed but symbols could not be loaded for tbhsd.sys
*** WARNING: Unable to verify timestamp for aswSnx.sys
*** ERROR: Module load completed but symbols could not be loaded for aswSnx.sys

I also looked at your eventlog file to see if there were any other issues and this indicated that you are also running Bitdefender. In my experience it is not a good idea to run more than one antivirus package as they often conflict with each other. There were a number of Bitdefender errors such as:

Code:

Application pop-up: BitDefender Threat Scanner : A problem has occured in BitDefender Threat Scanner. A file containing error information has been created at C:\WINDOWS\TEMP\BitDefender Threat Scanner.dmp. You are strongly encouraged to send the file to the developers of the application for further investigation of the error.

Just something to watch out for :)

Phil

Thanks for your feedback.

As far as Avast is concerned I have now removed it and installed Avira on a temporary basis. Is Windows Defender really that good that you can do without a third-party program? As for the other item you mentioned, 'a Tunebyte high speed dubbing driver', I have no idea what the heck it is therefore I cannot update it as yet. I'll do some searching on the net and see what I come up with but at present I'm completely at a loss. Any chance you could give me some pointers?

Finally you also mention BitDefender. Yes, well! I DID have BitDefender installed but removed it some while ago as I decided I didn't like it but there's this little remnant left over that generates a log file and I don't know where to find it. I'm beginning to wonder if something was installed in the Reserved Partition this is still having some sort of effect on my PC. What do you think? Is it possible. My husband also gets a message coming up when he shuts down as do I but that is the only time it makes itself known and the log file location is detailed in the message displayed.

Again, many thanks for your comments so far and if can spare a little more of your time answering the questions above it would be very much appreciated. Whatever, at least you've given me some ideas as to what to look for and hopefully I shall be able to take it from here. I would particularly be interested to hear back regarding Windows Defender if at all possible please.

Tracey

Just a quick answer on Windows defender - I think with all AV products there has to be an element of caution, no AV can catch absolutely everything out there or anticipate every new threat before it happens. So you are the best defence and you should avoid doing anything that could allow harmful files access to your PC - so never open files sent to you that you do not know the history of. Don't click on links in emails or on websites that have any suspicious domain names etc, etc. I know that sometimes we drop our guard and maybe end up on websites that are not safe so an AV is necessary to minimise damage that could occur.

I have found Win Defender perfectly adequate for me but I also run Malwarebytes as an added precaution. Have a look at some of the threads in the AV section, you will find others who are like me and also see recommendations to use different products. You just have to do what feels right for you. All I will say is that as a BSOD analyst I see an awful lot of BSOD events that are triggered by the AV package drivers which do not always keep up with the changes in the operating system as W10 evolves.

Regarding Bitdefender you may have to do a google search on uninstall methods for complete removal of the particular product you had.

Phil

Thanks for your message and the info re AV packages. I think for the moment though I'll stick with Avira and see how I get on with it.

As for the Bitdefender message that came up on shutting down, I believe I have got rid of it from both mine and my husbands PCs. A quick search on the net revealed that it could well be a problem with SpyBot. I uninstalled it from my PC with no problems but interestingly my husband had some problems and had to call on me to do it for him. He kept getting a message come up and it turned out it was the same message that appeared on shutting down which pretty much sealed SpyBot as the cause. Anyway I removed SpyBot for him and so far he's not had it appear again during shutdown although it is still early as he says he only got it appearing perhaps twice per month.

Regarding the Tunebyte driver it looks like it was a driver installed with Audials so since I rarely use it I uninstalled it. Its really just a matter of waiting and seeing what happens if anything after taking the above action. Hopefully I'll be OK now. Again thank you very much for your assistance.

Tracey

You are welcome! Hope it continues to be free of any BSOD but if not just post a new set of files and we can look again.