Yet another BSOD from ataport.sys Win7
Running an HP laptop with Win7 for over a year with no problems. Started about a week ago, random BSOD all with similar errors. Tried running Kapersky's rootkit, and Malwarebytes. Have both ZoneAlarm and AVG running. Even tried Win7 Repair command prompt "bootrec /fixmbr"and "bootrec /fixboot" with no positive results. Really stumped now....please help!
August 11th, 2012 5:48pm

You ran TDSSKiller?
Free Windows Admin Tool Kit Click here and download it now
August 11th, 2012 5:53pm

Yes, I did run the TDSSKiller from Kapersky. I thought the problem was with the ataport.sys file and I even removed the hard drive, and using an external USB drive adapter, on another laptop running the same version of Win7, I tried to rename ataport.sys to ataport.sy_ in an effort to replace this file. I got a message was that I was not permitted to do that (which is really strange), even though I could copy and rename the same file on the Win7 system that was running. I then booted the infected laptop with an Ubuntu CD. I was then able to rename and replace ataport.sys with the file from the unaffected laptop. Still get the same BSOD's.
August 11th, 2012 6:46pm

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible. If you are overclocking STOP You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking. Please follow these instructions to collect data from the crashes and upload them here, to your Skydrive or a file sharing service like Rapidshare. http://www.sysnative.com/forums/showthread.php/68-Blue-Screen-of-Death-%28BSOD%29-Posting-Instructions-Windows-8-7-amp-Vista?p=303&viewfull=1#post303 http://sysnative.com/0x8/BSOD_Windows7_Vista_v2.64_jcgriff2_.exe To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder. The procedure: * Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine. * Zip up the contents of that folder Please upload them to skydrive or a file sharing service and put a link to them in your next post. Please also go to start>search/run>cmd>msinfo32 and include it in the upload To ensure minidumps are enabled: * Go to Start, in the Search Box type: sysdm.cpl, press Enter. * Under the Advanced tab, click on the Startup and Recovery Settings... button. * Ensure that Automatically restart is unchecked. * Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies). * Ensure that the Small Dump Directory is listed as %systemroot%\Minidump. * OK your way out. * Reboot if changes have been made. http://www.sysnative.com/forums/showthread.php/325-BSODs-but-no-Dump-Files http://www.osronline.com/article.cfm?article=545 Please also go to start>run>msinfo32 and save the results. Upload it with the DMP files, thanks. MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag
Free Windows Admin Tool Kit Click here and download it now
August 12th, 2012 4:19am

Thank you for helping me! Followed the instructions and here is the zipped files. http://sdrv.ms/Nr5TkL Mike
August 12th, 2012 12:19pm

Mike There are many things going on here. All of which can be solved. First Literally all of these crashes were related to your MBAM and Zone alarm is contributing. I would remove and replace BOTH with MSE and the win 7 firewall AT LEAST TO TEST. http://www.microsoft.com/security_essentials/ They are all c00000005 (which is a memory exception. Usually that is either RAM or more frequently a driver. Your second issue is really ancient drivers from as far back as 2002 that absolutely must be updated. Especially Aspi32.SYS Aspi32.SYS 5/6/2002 12:43:02 PM ghpciscan.sys 12/16/2003 10:41:37 PM mdmxsdk.sys 6/19/2006 5:26:59 PM HpqKbFiltr.sys 6/18/2007 6:12:03 PM SynTP.sys 4/17/2008 8:15:05 PM IntcHdmi.sys 6/30/2008 8:52:24 AM LMIRfsDriver.sys 7/14/2008 12:26:22 PM CHDRT32.sys 10/3/2008 2:39:26 PM HSX_CNXT.sys 2/13/2009 4:57:25 PM HSXHWAZL.sys 2/13/2009 4:58:15 PM HSX_DPV.sys 2/13/2009 5:00:17 PM Rt86win7.sys 2/26/2009 5:04:22 AM XAudio32.sys 4/29/2009 2:20:55 PM spldr.sys 5/11/2009 12:13:47 PM RtsUStor.sys 6/4/2009 4:45:47 AM How To Find Drivers: - search Google for the name of the driver - compare the Google results with what's installed on your system to figure out which device/program it belongs to - visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager). - if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program The most common drivers are listed on this page: Driver Reference http://www.carrona.org/dvrref.php http://sysnative.com/drivers/ - - Driver manufacturer links are on this page: http://www.carrona.org/drvrdown.htm Now if you continue to crash we can identify any additions source by running these to tests. These crashes were caused by memory corruption c00000005(probably a driver). Please run these two tests to verify your memory and find which driver is causing the problem. *Dont forget to upload any further DMP files (especially those when verifier is running) *If you are overclocking anything reset to default before running these tests. In other words STOP!!! If you dont know what this means you probably arent 1-Memtest. *Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. http://www.memtest.org *Boot from the CD, and leave it running for at least 5 or 6 passes. *Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. *Test the sticks individually, and if you find a good one, test it in all slots. Any errors are indicative of a memory problem. If a known good stick fails in a motherboard slot it is probably the slot. 2-Driver verifier Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. *But sometimes it'll crash and won't tell you the driver. *Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier. *I'd suggest that you first backup your data and then make sure you've got access to another computer so you can contact us if problems arise. *Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature). *In Windows 7 you can make a Startup Repair disk by going to Start....All Programs...Maintenance...Create a System Repair Disc - with Windows Vista you'll have to use your installation disk or the "Repair your computer" option at the top of the Safe Mode menu . Then, here's the procedure: - Go to Start and type in "verifier" (without the quotes) and press Enter - Select "Create custom settings (for code developers)" and click "Next" - Select "Select individual settings from a full list" and click "Next" - Select everything EXCEPT FOR "Low Resource Simulation" and click "Next" - Select "Select driver names from a list" and click "Next" *Then select all drivers NOT provided by Microsoft and click "Next" - Select "Finish" on the next page. *Reboot the system and wait for it to crash to the Blue Screen. *Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out. If it doesn't crash for you, then let it run for at least 36 hours of continuous operation. *If you can't get into Windows because it crashes too soon, try it in Safe Mode. *If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created. *Further Reading "http://support.microsoft.com/kb/244617" Using Driver Verifier to identify issues with Windows drivers for advanced users MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag
Free Windows Admin Tool Kit Click here and download it now
August 12th, 2012 1:35pm

Mike There are many things going on here. All of which can be solved. First Literally all of these crashes were related to your MBAM and Zone alarm is contributing. I would remove and replace BOTH with MSE and the win 7 firewall AT LEAST TO TEST. http://www.microsoft.com/security_essentials/ They are all c00000005 (which is a memory exception. Usually that is either RAM or more frequently a driver. Your second issue is really ancient drivers from as far back as 2002 that absolutely must be updated. Especially Aspi32.SYS Aspi32.SYS 5/6/2002 12:43:02 PM ghpciscan.sys 12/16/2003 10:41:37 PM mdmxsdk.sys 6/19/2006 5:26:59 PM HpqKbFiltr.sys 6/18/2007 6:12:03 PM SynTP.sys 4/17/2008 8:15:05 PM IntcHdmi.sys 6/30/2008 8:52:24 AM LMIRfsDriver.sys 7/14/2008 12:26:22 PM CHDRT32.sys 10/3/2008 2:39:26 PM HSX_CNXT.sys 2/13/2009 4:57:25 PM HSXHWAZL.sys 2/13/2009 4:58:15 PM HSX_DPV.sys 2/13/2009 5:00:17 PM Rt86win7.sys 2/26/2009 5:04:22 AM XAudio32.sys 4/29/2009 2:20:55 PM spldr.sys 5/11/2009 12:13:47 PM RtsUStor.sys 6/4/2009 4:45:47 AM How To Find Drivers: - search Google for the name of the driver - compare the Google results with what's installed on your system to figure out which device/program it belongs to - visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager). - if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program The most common drivers are listed on this page: Driver Reference http://www.carrona.org/dvrref.php http://sysnative.com/drivers/ - - Driver manufacturer links are on this page: http://www.carrona.org/drvrdown.htm Now if you continue to crash we can identify any additions source by running these to tests. These crashes were caused by memory corruption c00000005(probably a driver). Please run these two tests to verify your memory and find which driver is causing the problem. *Dont forget to upload any further DMP files (especially those when verifier is running) *If you are overclocking anything reset to default before running these tests. In other words STOP!!! If you dont know what this means you probably arent 1-Memtest. *Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. http://www.memtest.org *Boot from the CD, and leave it running for at least 5 or 6 passes. *Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. *Test the sticks individually, and if you find a good one, test it in all slots. Any errors are indicative of a memory problem. If a known good stick fails in a motherboard slot it is probably the slot. 2-Driver verifier Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. *But sometimes it'll crash and won't tell you the driver. *Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier. *I'd suggest that you first backup your data and then make sure you've got access to another computer so you can contact us if problems arise. *Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature). *In Windows 7 you can make a Startup Repair disk by going to Start....All Programs...Maintenance...Create a System Repair Disc - with Windows Vista you'll have to use your installation disk or the "Repair your computer" option at the top of the Safe Mode menu . Then, here's the procedure: - Go to Start and type in "verifier" (without the quotes) and press Enter - Select "Create custom settings (for code developers)" and click "Next" - Select "Select individual settings from a full list" and click "Next" - Select everything EXCEPT FOR "Low Resource Simulation" and click "Next" - Select "Select driver names from a list" and click "Next" *Then select all drivers NOT provided by Microsoft and click "Next" - Select "Finish" on the next page. *Reboot the system and wait for it to crash to the Blue Screen. *Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out. If it doesn't crash for you, then let it run for at least 36 hours of continuous operation. *If you can't get into Windows because it crashes too soon, try it in Safe Mode. *If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created. *Further Reading "http://support.microsoft.com/kb/244617" Using Driver Verifier to identify issues with Windows drivers for advanced users MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag
August 12th, 2012 1:37pm

Hello, I am not able to download the dumps. However, I would recommend proceeding like that: Update all possible driversUninstall all unused programsRun chkdsk /r /f and sfc /scannowPerform a clean boot: http://support.microsoft.com/kb/929135Disable temporary all security softwares you haveRun memtest86+ to check your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support for assistance Once done, check again. You can also contact Microsoft CSS for assistance. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer
Free Windows Admin Tool Kit Click here and download it now
August 13th, 2012 11:12am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics