Blue Screen Error

Anonymous

Hey all, I had posted a question about this issue in the past (http://answers.microsoft.com/en-us/windows/forum/windows\_7-system/apparent-blue-screen-error-bccode-19/926cad07-b0e5-4517-b44e-bb21ae8ec29b), but it seems to not have been resolved even after following the steps given to me in the previous question (deleting Neo_0010.sys in the System32 folder).

Here are the past three Action Center reports: https://www.dropbox.com/s/q30bfnv6qaewzqo/Action%20Center%20Reports.txt?dl=0

Here are the past 3 DMPs (2 happened today, and 1 happened on the 8th), MSInfo32 and Speccy report: https://www.dropbox.com/s/d0q0f6usik3aqd1/DMPs%20MSInfo32%20and%20Speccy.rar?dl=0

This starting to get frustrating, especially since my laptop is only about 2-3 months old, and I want to resolve this as soon as possible.

If more information is needed let me know.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

45 answers

Anonymous

Debug session time: Mon Sep 29 11:39:51.208 2014 (UTC - 4:00)

BugCheck 3B, {c0000005, fffff800033af123, fffff8800bdb3e50, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+43 )

Followup: MachineOwner

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the bugcheck

Arg2: fffff800033af123, Address of the instruction which caused the bugcheck

Arg3: fffff8800bdb3e50, Address of the context record for the exception that caused the bugcheck

Arg4: 0000000000000000, zero.

Debugging Details:

See if the linked "HOTFIX" below, is applicable to your system.

"The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files"

Source:

Stop error code 0x0000003B (SYSTEM_SERVICE_EXCEPTION) on a computer that is running Windows 7 or Windows Server 2008 R2 when you use some IEEE 1394 devices.

http://support2.microsoft.com/kb/980932

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name File version File size Date Time Platform

1394bus.sys 6.1.7600.16385 68,096 14-Jul-2009 00:06 x64

1394ohci.sys 6.1.7600.20649 228,352 20-Feb-2010 04:36 x64

Ohci1394.sys 6.1.7600.16385 72,832 14-Jul-2009 00:06 x64

fffff8800fd7a000 fffff8800fdb8000   1394ohci   (deferred)

    Mapped memory image file: c:\symbols\1394ohci.sys\4CE7A6A83e000*1394ohci.sys*

    Image path: \SystemRoot\system32\DRIVERS\1394ohci.sys

    Image name: 1394ohci.sys

    Timestamp:        Sat Nov 20 05:44:56 2010 (4CE7A6A8)

    CheckSum:         0003B054

    ImageSize:        0003E000

    File version:     6.1.7601.17514<========== Current version

    Product version: 6.1.7601.17514

    File flags:       0 (Mask 3F)

    File OS:          40004 NT Win32

    File type:        3.7 Driver

    File date:        00000000.00000000

    Translations:     0409.04b0

    CompanyName:      Microsoft Corporation

    ProductName:      Microsoft® Windows® Operating System

    InternalName:     1394ohci.sys

    OriginalFilename: 1394ohci.sys

    ProductVersion:   6.1.7601.17514

    FileVersion:      6.1.7601.17514 (win7sp1_rtm.101119-1850)

    FileDescription: 1394 OpenHCI Driver

    LegalCopyright:   © Microsoft Corporation. All rights reserved.

Please remove. This seems to be a part of an incomplete installation of MBAM

Image path: ??\C:\Windows\system32\drivers\MBAMSwissArmy.sys

    Image name: MBAMSwissArmy.sys

    Timestamp:        Thu Mar 20 18:12:35 2014 (532B67D3)

    CheckSum:         00027177

File name	File version	File size	Date	Time	Platform
1394bus.sys	6.1.7600.16385	68,096	14-Jul-2009	00:06	x64
1394ohci.sys	6.1.7600.20649	228,352	20-Feb-2010	04:36	x64
Ohci1394.sys	6.1.7600.16385	72,832	14-Jul-2009	00:06	x64

I downloaded the hotfix, and it was not applicable to my system. I removed the MBAMSwissArmy file and re-installed MBAM as well

0 comments

Anonymous

2014-09-30T13:35:57+00:00

Let's wait and see how that goes.
Was this answer helpful?

0 comments No comments
Anonymous

2014-10-16T12:28:22+00:00

Let's wait and see how that goes.

Dunno if you're still monitoring this thread, but it happened again today when I shut off my computer: https://onedrive.live.com/redir?resid=6858C63B379322D7!107&authkey=!ALBwf1JS8LMIZ5I&ithint=file%2crar

Source

Windows

Summary

Shut down unexpectedly

Date

‎10/‎16/‎2014 12:54 AM

Status

Not reported

Problem signature

Problem Event Name: BlueScreen

OS Version: 6.1.7601.2.1.0.256.48

Locale ID: 1033

Extra information about the problem

BCCode: c2

BCP1: 0000000000000007

BCP2: 000000000000109B

BCP3: 000000000D85411C

BCP4: FFFFFA800AC01590

OS Version: 6_1_7601

Service Pack: 1_0

Product: 256_1
Was this answer helpful?

0 comments No comments
Anonymous

2014-10-16T17:06:10+00:00

Please download and run ADWCleaner and upload a copy of the report produced to your OneDrive. Remove all that it finds. :

http://www.bleepingcomputer.com/download/adwcleaner/

I suggest you take the precaution of creating a system restore point before running ADWCleaner, to guard against unforeseen consequences. Select Start, Control Panel, System, System Protection, and click the Create button.
Was this answer helpful?

0 comments No comments
Anonymous

2014-10-16T17:23:19+00:00

Please download and run ADWCleaner and upload a copy of the report produced to your OneDrive. Remove all that it finds. :

http://www.bleepingcomputer.com/download/adwcleaner/

I suggest you take the precaution of creating a system restore point before running ADWCleaner, to guard against unforeseen consequences. Select Start, Control Panel, System, System Protection, and click the Create button.

Here is the report:

https://onedrive.live.com/redir?resid=6858C63B379322D7!108&authkey=!AEtP2KppV3xR5Jc&ithint=file%2ctxt
Was this answer helpful?

0 comments No comments