SCF Advanced Search


Members
Stats
  • Total Posts: 32649
  • Total Topics: 9903
  • Online Today: 1312
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)











Author Topic: Solving repeating BSOD (after hibernation or regular)  (Read 1720 times)

0 Members and 1 Guest are viewing this topic.

devnullius

  • SCF VIP Member
  • *****
  • Posts: 3527
  • KARMA: 153
  • Gender: Female
    • SCForum.info
Solving repeating BSOD (after hibernation or regular)
« on: 07. March 2014., 09:55:42 »
 :thumbsup: I exclude normal solutions like faulty RAM or HDD...

Google queries:
* symbol search path windows 8.1
* ndis.sys bsod windows 8.1
* BSOD - IRQL_NOT_LESS_OR_EQUAL
* Module load completed but symbols could not be loaded for Neo_VPN123.sys
* symfix
* ndis.sys fffff880`01c9f000
* trace bsod file verification

Useless official link:
http://msdn.microsoft.com/en-us/library/windows/desktop/ee416349(v=vs.85).aspx

Most helpful link ever:
http://www.instructables.com/id/How-to-Analyze-a-BSOD-Crash-Dump/

Link to start with:
http://www.reviversoft.com/blog/2013/09/using-driver-verifier-to-fix-a-blue-screen-of-death/
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Most important and helpful part of that article:
Paste the following text into the Symbol Search Path Dialog
SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols


This will take a little while. Be patient.

What did I solve with it?

Well, I was having BSOD's for a LONG time now. Almost always after system restore. I replaced / unplugged many hardwares but even after my new computer, I kept having this problem. Surely I was repeating my errors and I suspected "some" VPN tool. But hunting them down for years, I have quite a few ;-) So which one? I always ignored it, but 2 days ago (new video card) I had it.

Time to solve!

I first enabled driver verification for all non-Microsoft drivers.

That resulted in immediate BSOD. I booted into safe mode, without network, and disabled windows 8 driver verification again (with verifier.exe).

Now I had (yet another) dump report (C:\Windows\minidump\*.dmp).

Analyzing it with 'WinDbg (x64).exe' (don't forget to set Symbol Path! Why MS makes this so complicated... Sigh), gave:
Code: [Select]
************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\030714-70465-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9200.16628.amd64fre.win8_gdr.130531-1504
Machine Name:
Kernel base = 0xfffff802`a0001000 PsLoadedModuleList = 0xfffff802`a02cda20
Debug session time: Fri Mar  7 09:19:20.139 2014 (UTC + 1:00)
System Uptime: 0 days 0:00:40.992
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {9b, 204, 580, fffff88001c94d47}

*** WARNING: Unable to verify timestamp for Neo_VPN123.sys
*** ERROR: Module load completed but symbols could not be loaded for Neo_VPN123.sys
Probably caused by : Neo_VPN123.sys ( Neo_VPN123+1113 )

Followup: MachineOwner
---------


I did not find a way to add Neo_VPN123 symbol set, BUT a quick google search showed me this belonged to my beloved (but not working anymore) SoftEther. So I just removed it, should be solved now. If not: next dmp analysis on its way. I should have learned this long ago but always failed on Symbols...  :down:

Anyways, enjoy - a non-coin article for once again :)

Devvie
More information about bitcoin, altcoin & crypto in general? GO TO  j.gs/7385484/btc

Cuisvis hominis est errare, nullius nisi insipientis in errore persevare... So why not get the real SCForum employees to help YOUR troubled computer!!! SCF Remote PC Assist http://goo.gl/n1ONa9

Samker's Computer Forum - SCforum.info

Solving repeating BSOD (after hibernation or regular)
« on: 07. March 2014., 09:55:42 »
Sponsored Links:




devnullius

  • SCF VIP Member
  • *****
  • Posts: 3527
  • KARMA: 153
  • Gender: Female
    • SCForum.info
Re: Solving repeating BSOD (after hibernation or regular)
« Reply #1 on: 07. March 2014., 20:59:45 »
I haven't tested yet, but if BSOD is still there, that is because I'm failing to remove the device - locked registry :(

Nothing I can do :/

Posted here: http://scforum.info/index.php/topic,8908.msg23670.html#msg23670
More information about bitcoin, altcoin & crypto in general? GO TO  j.gs/7385484/btc

Cuisvis hominis est errare, nullius nisi insipientis in errore persevare... So why not get the real SCForum employees to help YOUR troubled computer!!! SCF Remote PC Assist http://goo.gl/n1ONa9

 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising