Intermittent BSOD - SFCFix failed to repair

X

xxkinetikxx

Member
Joined
Dec 9, 2019
Posts
8
Hello,

We're experiencing random BSOD's. I've attempted to run SFC /scannow along with SFC Fix to no avail.

Log file below:

Code: 
SFCFix version 3.0.2.1 by niemiro.
Start time: 2019-12-09 15:12:07.072
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Not using a script file.




AutoAnalysis::
WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_0.0.0.0_none_6b7da006d4ae6c79.
CORRUPT: Failed to repair orphaned component "value name not identified" (x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_0.0.0.0_none_6b7da006d4ae6c79) on component watchlist.


WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_0.0.0.0_none_c79c3b8a8d0bddaf.
CORRUPT: Failed to repair orphaned component "value name not identified" (amd64_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_0.0.0.0_none_c79c3b8a8d0bddaf) on component watchlist.


WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-FS-Core~31bf3856ad364e35~amd64~~0.0.0.0.
CORRUPT: Failed to repair orphaned package Package_for_KB2541014~31bf3856ad364e35~amd64~~6.1.1.0 (WinEmb-FS-Core~31bf3856ad364e35~amd64~~0.0.0.0) on package watchlist.
Failed to open registry key for second time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-FS-Core~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.
Failed to import registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-FS-Core~31bf3856ad364e35~amd64~~0.0.0.0.
Failed to open registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\WinEmb-FS-Core~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.

WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-ServerCore-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0.
CORRUPT: Failed to repair orphaned package Package_3_for_KB2744842~31bf3856ad364e35~amd64~~6.1.1.0 (Microsoft-Windows-ServerCore-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0) on package watchlist.
Failed to open registry key for second time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-ServerCore-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.
Failed to import registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-ServerCore-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0.
Failed to open registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-ServerCore-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.

WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0.
CORRUPT: Failed to repair orphaned package Package_3_for_KB2744842~31bf3856ad364e35~amd64~~6.1.1.0 (Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0) on package watchlist.
Failed to open registry key for second time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.
Failed to import registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0.
Failed to open registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.

WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-FailoverCluster-Core-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0.
CORRUPT: Failed to repair orphaned package Package_3_for_KB2744842~31bf3856ad364e35~amd64~~6.1.1.0 (Microsoft-Windows-FailoverCluster-Core-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0) on package watchlist.
Failed to open registry key for second time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-FailoverCluster-Core-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.
Failed to import registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-FailoverCluster-Core-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0.
Failed to open registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-FailoverCluster-Core-WOW64-Package~31bf3856ad364e35~amd64~~0.0.0.0 with error code ERROR_ACCESS_DENIED.

WARNING: Failed to backup registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~ko-KR~0.0.0.0.
CORRUPT: Failed to repair orphaned package Package_ (Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~ko-KR~0.0.0.0) on package watchlist.
Failed to open registry key for second time HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~ko-KR~0.0.0.0 with error code ERROR_ACCESS_DENIED.
Failed to import registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~ko-KR~0.0.0.0.
Failed to open registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackageDetect\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~ko-KR~0.0.0.0 with error code ERROR_ACCESS_DENIED.


CORRUPT: C:\Windows\winsxs\x86_microsoft-windows-synceng_31bf3856ad364e35_6.1.7601.17959_none_be497d719c3754a1\synceng.dll


SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
   CBS & SFC total detected corruption count:     1
   CBS & SFC total unimportant corruption count:  0
   CBS & SFC total fixed corruption count:        0
   SURT total detected corruption count:          19
   SURT total unimportant corruption count:       0
   SURT total fixed corruption count:             0
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 5 datablocks.
Finish time: 2019-12-09 15:57:47.656
----------------------EOF-----------------------
 
I've ran and collected the data as described however it does include sensitive data. Is it possible to send it to you via personal message?
 
Hi. . .

The output from all of your December 2019 dumps -

Code: 
[font=lucida console]
BugCheck A, {0, 2, 1, fffff80001a567de}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 1, fffff88006247150, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck A, {0, 2, 1, fffff80001a5c7de}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck A, {0, 2, 1, fffff80001a23a5e}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck A, {0, 2, 1, fffff80001aa77de}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck A, {0, 2, 1, fffff80001a29a5e}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, fffff88000fe7f91, fffff880099bf160, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17d )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 16aa6c, fffff880057f0150, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, fffff88002febf91, fffff8800a9a1390, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17d )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 400000, fffff88006b51380, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 17aaec, fffff88005e78150, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 0, fffff880069d1380, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck A, {0, 2, 1, fffff80001a79a5e}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 400000, fffff88006d0c150, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 5560001, fffff88007557150, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck A, {0, 2, 1, fffff80001a37a5e}
Probably caused by : termdd.sys ( termdd!IcaDereferenceChannel+8c )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, 0, fffff88006a1f150, 0}
Probably caused by : termdd.sys ( termdd!IcaChannelInputInternal+17f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

termdd.sys is a Windows driver and therefore is not the actual cause of the BSODS.

Run Driver Verifier - Driver Verifier - BSOD related - Windows 10, 8.1, 8, 7 + Vista

Regards. . .

jcgriff2
 
They all occurred under VMWare.

See if there is a new version of VMWare available.

John
 
The most recent dump file shows the following:

Code: 
0: kd> .load pde;!dpx
=========================================================================================
PDE v11.3 - Copyright 2017 Andrew Richards
=========================================================================================
Start memory scan : 0xfffff88006a1e888 ($csp)
End memory scan : 0xfffff88006a21000 (Kernel Stack Base)

rsp : 0xfffff88006a1e888 : 0xfffff80001af0f69 : nt!KiBugCheckDispatch+0x69
r11 : 0xfffff88006a1ea88 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1e888 : 0xfffff80001af0f69 : nt!KiBugCheckDispatch+0x69
0xfffff88006a1e9a0 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1e9a8 : 0xfffff80001af0bd3 : nt!KiSystemServiceCopyEnd+0x13
0xfffff88006a1e9b0 : 0xfffff80001cca008 : "nt!BBTBuffer (nt+0x27b008)"
0xfffff88006a1e9b8 : 0xfffff80001af0600 : nt!KiSystemServiceHandler
0xfffff88006a1e9c8 : 0xfffff80001af067c : nt!KiSystemServiceHandler+0x7c
0xfffff88006a1e9e8 : 0xfffff80001ad0dcc : nt!_C_specific_handler
0xfffff88006a1e9f0 : 0xfffff80001ce69a0 : "nt!BBTBuffer (nt+0x2979a0)"
0xfffff88006a1e9f8 : 0xfffff80001f07831 : nt!IopXxxControlFile+0xc51
0xfffff88006a1ea08 : 0xfffff80001ae9edd : nt!RtlpExecuteHandlerForException+0xd
0xfffff88006a1ea10 : 0xfffff80001cd9560 : "nt!BBTBuffer (nt+0x28a560)"
0xfffff88006a1ea20 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1ea30 : 0xfffff88006a1ead0 : 0xfffff80001af0bd3 : nt!KiSystemServiceCopyEnd+0x13
0xfffff88006a1ea38 : 0xfffff80001aad1f5 : nt!RtlDispatchException+0x415
0xfffff88006a1ea48 : 0xfffff88006a1ea88 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1ea58 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1ea88 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1eaa8 : 0xfffff80001cca008 : "nt!BBTBuffer (nt+0x27b008)"
0xfffff88006a1eac8 : 0xfffff80001a9f731 : nt!RtlGetExtendedContextLength+0x19
0xfffff88006a1ead0 : 0xfffff80001af0bd3 : nt!KiSystemServiceCopyEnd+0x13
0xfffff88006a1ead8 : 0xfffff80001a4f000 : "nt!_imp_CiInitialize (nt+0x0)"
0xfffff88006a1eae0 : 0xfffff80001cca008 : "nt!BBTBuffer (nt+0x27b008)"
0xfffff88006a1eb00 : 0xfffff80001af0600 : nt!KiSystemServiceHandler
0xfffff88006a1eb28 : 0xfffff88006a1eb88 : 0xfffff80001b4cb84 : nt!KeRemoveDeviceQueue+0x94
0xfffff88006a1eb40 : 0xfffff88006a1eb00 : 0xfffff80001af0600 : nt!KiSystemServiceHandler
0xfffff88006a1eb68 : 0xfffff80001a0b992 : hal!HalpAllocateAdapterCallback+0x146
0xfffff88006a1eb88 : 0xfffff80001b4cb84 : nt!KeRemoveDeviceQueue+0x94
0xfffff88006a1ec58 : 0xfffff88000f4c110 : NDIS!WPP_GLOBAL_Control
0xfffff88006a1eca0 : 0xfffff80001c49880 : nt!NonPagedPoolDescriptor
0xfffff88006a1eca8 : 0xfffff80001c288a6 : nt!ExAllocatePoolWithTag+0x316
0xfffff88006a1ecb8 : 0xfffff80001c4a9c0 : nt!ExpScratchBufferLookasideList
0xfffff88006a1edd8 : 0xfffff80001ad0cb3 : nt!memmove+0x223
0xfffff88006a1ee18 : 0xfffff80001a09dcc : hal!HalpDmaSyncMapBuffers+0x1b0
0xfffff88006a1ee50 : 0xfffff88006a1f0b0 : 0xfffff8800679c0c0 : "tdtcp!TdCalloutStack (tdtcp+0x70c0)"
0xfffff88006a1ee68 : 0xfffff80001aeed62 : nt!KiPageFault+0x422
0xfffff88006a1eea0 : 0xfffff88006a1f0a0 : 0xfffff88000df4294 : "termdd!__PchSym_ (termdd+0xc294)"
0xfffff88006a1eea8 : 0xfffff88006a1f0a0 : 0xfffff88000df4294 : "termdd!__PchSym_ (termdd+0xc294)"
0xfffff88006a1eed0 : 0xfffff88006a1f0a0 : 0xfffff88000df4294 : "termdd!__PchSym_ (termdd+0xc294)"
[COLOR=rgb(255, 0, 0)]Unable to load image \SystemRoot\system32\DRIVERS\vmxnet.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vmxnet.sys[/COLOR]
0xfffff88006a1efd8 : 0xfffff80001ad0cb3 : nt!memmove+0x223
0xfffff88006a1eff8 : 0xfffff88000dead24 : termdd!IcaChannelInput
0xfffff88006a1f000 : 0xfffff880067d827b : RDPWD!HandleDisconnectProviderUlt+0xff
0xfffff88006a1f008 : 0xfffff88000de8000 : "termdd!IcaLoadSdWorker (termdd+0x0)"
0xfffff88006a1f010 : 0xfffff88000df4114 : "termdd!__PchSym_ (termdd+0xc114)"
0xfffff88006a1f018 : 0xfffff88000de8000 : "termdd!IcaLoadSdWorker (termdd+0x0)"
0xfffff88006a1f020 : 0xfffff88000df4108 : "termdd!__PchSym_ (termdd+0xc108)"
0xfffff88006a1f028 : 0xfffff880067b0000 : "RDPWD!McGenControlCallbackV2 (RDPWD+0x0)"
0xfffff88006a1f030 : 0xfffff880067e3038 : "RDPWD!__PchSym_ (RDPWD+0x33038)"
0xfffff88006a1f038 : 0xfffff880067b0000 : "RDPWD!McGenControlCallbackV2 (RDPWD+0x0)"
0xfffff88006a1f040 : 0xfffff880067e2f90 : "RDPWD!__PchSym_ (RDPWD+0x32f90)"
0xfffff88006a1f048 : 0xfffff880067b0000 : "RDPWD!McGenControlCallbackV2 (RDPWD+0x0)"
0xfffff88006a1f050 : 0xfffff880067e2f84 : "RDPWD!__PchSym_ (RDPWD+0x32f84)"
0xfffff88006a1f058 : 0xfffff88000de8000 : "termdd!IcaLoadSdWorker (termdd+0x0)"
0xfffff88006a1f060 : 0xfffff88000df4294 : "termdd!__PchSym_ (termdd+0xc294)"
0xfffff88006a1f068 : 0xfffff880067a0000 : "tssecsrv!DriverEntry (tssecsrv+0x0)"
0xfffff88006a1f070 : 0xfffff880067a9138 : "tssecsrv!g_pTemplateList (tssecsrv+0x9138)"
0xfffff88006a1f078 : 0xfffff880067a0000 : "tssecsrv!DriverEntry (tssecsrv+0x0)"
0xfffff88006a1f080 : 0xfffff880067a90a8 : "tssecsrv!g_pTemplateList (tssecsrv+0x90a8)"
0xfffff88006a1f088 : 0xfffff880067a0000 : "tssecsrv!DriverEntry (tssecsrv+0x0)"
0xfffff88006a1f090 : 0xfffff880067a9054 : "tssecsrv!g_pTemplateList (tssecsrv+0x9054)"
0xfffff88006a1f098 : 0xfffff88000de8000 : "termdd!IcaLoadSdWorker (termdd+0x0)"
0xfffff88006a1f0a0 : 0xfffff88000df4294 : "termdd!__PchSym_ (termdd+0xc294)"
0xfffff88006a1f0a8 : 0xfffff88006795000 : "tdtcp!TdiDeviceOpenEndpoint (tdtcp+0x0)"
0xfffff88006a1f0b0 : 0xfffff8800679c0c0 : "tdtcp!TdCalloutStack (tdtcp+0x70c0)"
0xfffff88006a1f0b8 : 0xfffff88000de8000 : "termdd!IcaLoadSdWorker (termdd+0x0)"
0xfffff88006a1f0c0 : 0xfffff88000df4324 : "termdd!__PchSym_ (termdd+0xc324)"
0xfffff88006a1f118 : 0xfffff80001bc9a9e : nt!KiDispatchException+0x17e
0xfffff88006a1f168 : 0xfffff88000f860d3 : NDIS!ndisMAllocSGList+0xe3
0xfffff88006a1f198 : 0xfffff88001203068 : cng!SslDecryptPacket+0x128
0xfffff88006a1f1e8 : 0xfffff88006a1fb28 : 0xfffff88000deaf93 : termdd!IcaChannelInputInternal+0x17f
0xfffff88006a1f210 : 0xfffff88006a1fb88 : 0xfffff88000dee18f : termdd!IcaCallNextDriver+0x5b
0xfffff88006a1f288 : 0xfffff88000f4c110 : NDIS!WPP_GLOBAL_Control
0xfffff88006a1f2d0 : 0xfffff80001c49880 : nt!NonPagedPoolDescriptor
0xfffff88006a1f2d8 : 0xfffff80001c288a6 : nt!ExAllocatePoolWithTag+0x316
0xfffff88006a1f2e8 : 0xfffff80001c4a9c0 : nt!ExpScratchBufferLookasideList
0xfffff88006a1f468 : 0xfffff88000eea3f9 : NDIS!ndisSendNBLToFilter+0x69
0xfffff88006a1f4a8 : 0xfffff88000deae01 : termdd!IcaChannelInput+0xdd
0xfffff88006a1f4e8 : 0xfffff880067b8f68 : RDPWD!WDW_OnDataReceived+0x360
0xfffff88006a1f528 : 0xfffff8800165deee : tcpip!IppFragmentPackets+0x39e
0xfffff88006a1f598 : 0xfffff80001ae50c2 : nt!KiDispatchInterrupt+0x12
0xfffff88006a1f5a8 : 0xfffff80001acb4b8 : nt!KeUpdateRunTime+0xb8
0xfffff88006a1f5c8 : 0xfffff80001ae7b83 : nt!KiDpcInterruptBypass+0x13
0xfffff88006a1f5d0 : 0xfffff80001ae83d8 : nt!KiSecondaryClockInterrupt+0x318
0xfffff88006a1f5d8 : 0xfffff80001ae8444 : nt!KiSecondaryClockInterrupt+0x384
0xfffff88006a1f5e8 : 0xfffff80001a9f731 : nt!RtlGetExtendedContextLength+0x19
0xfffff88006a1f738 : 0xfffff80001c49880 : nt!NonPagedPoolDescriptor
0xfffff88006a1f748 : 0xfffff80001c2836f : nt!ExDeferredFreePool+0x34f
0xfffff88006a1f778 : 0xfffff8800124fd33 : cng!SHA384Final+0x179
0xfffff88006a1f7a8 : 0xfffff80001af1042 : nt!KiExceptionDispatch+0xc2
0xfffff88006a1f7d8 : 0xfffff80001c29651 : nt!ExFreePoolWithTag+0x411
0xfffff88006a1f888 : 0xfffff8800121ca24 : cng!BCryptFree+0x14
0xfffff88006a1f988 : 0xfffff80001aeed62 : nt!KiPageFault+0x422
0xfffff88006a1f9e0 : 0xfffff88006a1fb88 : 0xfffff88000dee18f : termdd!IcaCallNextDriver+0x5b
0xfffff88006a1fa68 : 0xfffff88001203068 : cng!SslDecryptPacket+0x128
0xfffff88006a1fac8 : 0xfffff80001a8f5a2 : nt!ExReleaseResourceAndLeaveCriticalRegion+0x12
0xfffff88006a1fb10 : 0xfffff88006a1fb28 : 0xfffff88000deaf93 : termdd!IcaChannelInputInternal+0x17f
0xfffff88006a1fb28 : 0xfffff88000deaf93 : termdd!IcaChannelInputInternal+0x17f
0xfffff88006a1fb58 : 0xfffff88000def67f : termdd!IcaCallSd+0x43
0xfffff88006a1fb88 : 0xfffff88000dee18f : termdd!IcaCallNextDriver+0x5b
0xfffff88006a1fbb8 : 0xfffff880067a15c5 : tssecsrv!ScrIoctl+0x75
0xfffff88006a1fc08 : 0xfffff88000deae01 : termdd!IcaChannelInput+0xdd
0xfffff88006a1fc18 : 0xfffff88000dee18f : termdd!IcaCallNextDriver+0x5b
0xfffff88006a1fc48 : 0xfffff880067d825e : RDPWD!HandleDisconnectProviderUlt+0xe2
0xfffff88006a1fcd8 : 0xfffff880067d73fc : RDPWD!RecognizeMCSFrame+0x50
0xfffff88006a1fd18 : 0xfffff880067d6fe4 : RDPWD!MCSIcaRawInputWorker+0x3d4
0xfffff88006a1fd38 : 0xfffff880067a415d : tssecsrv!CSecurityFilter::GetProcessedData+0x81
0xfffff88006a1fda8 : 0xfffff88006a1fef0 : dt tssecsrv!CRawInputDM
0xfffff88006a1fdb8 : 0xfffff88000dee1f8 : termdd!IcaRawInput+0x50
0xfffff88006a1fde8 : 0xfffff880067a2900 : tssecsrv!CRawInputDM::PassDataToServer+0x2c
0xfffff88006a1fdf8 : 0xfffff88006a1fef0 : dt tssecsrv!CRawInputDM
0xfffff88006a1fe18 : 0xfffff880067a1d85 : tssecsrv!CFilter::FilterIncomingData+0xc9
0xfffff88006a1fec8 : 0xfffff880067a17c2 : tssecsrv!ScrRawInput+0x82
0xfffff88006a1fef0 : 0xfffff880067a71f8 : dt tssecsrv!CRawInputDM
0xfffff88006a1ff38 : 0xfffff88000dee1f8 : termdd!IcaRawInput+0x50
0xfffff88006a1ff68 : 0xfffff880067974bd : tdtcp!TdInputThread+0x465
0xfffff88006a1ffc8 : 0xfffff80001d62fda : nt!PspInitializeThunkContext+0x166
0xfffff88006a1ffe8 : 0xfffff80001d63028 : nt!PspInitializeThunkContext+0x1b4


0: kd> lmvm vmxnet
Browse full module list
start end module name
fffff880`03076000 fffff880`03083000 vmxnet T (no symbols)
Loaded symbol image file: vmxnet.sys
Image path: \SystemRoot\system32\DRIVERS\vmxnet.sys
Image name: vmxnet.sys
Browse all global symbols functions data
Timestamp: Tue May 8 11:19:16 2012 (4FA8F324)
CheckSum: 00016332
ImageSize: 0000D000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:



vmxnet.sys is a VMWare driver so I suspect VMWare needs updating.
 
Last edited:
Looking through some of the other dumps I also see an Intel ethernet driver showing up and so this is another driver to update if the VMWare update does not help.

Unable to load image \SystemRoot\system32\DRIVERS\E1G6032E.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for E1G6032E.sys

Code: 
3: kd> lmvm E1G6032E
Browse full module list
start end module name
fffff880`03246000 fffff880`03269980 E1G6032E T (no symbols)
Loaded symbol image file: E1G6032E.sys
Image path: \SystemRoot\system32\DRIVERS\E1G6032E.sys
Image name: E1G6032E.sys
Browse all global symbols functions data
Timestamp: Thu May 29 00:14:51 2008 (483DE76B)
CheckSum: 00029649
ImageSize: 00023980
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
 
philc43 said:
Looking through some of the other dumps I also see an Intel ethernet driver showing up and so this is another driver to update if the VMWare update does not help.

Unable to load image \SystemRoot\system32\DRIVERS\E1G6032E.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for E1G6032E.sys
Click to expand...
I missed that one!

Good catch.

Intel update - Driver Reference Table (DRT) | E1G6032E.sys

Regards. . .

jcgriff2
 
You are most welcome and I hope that at least one of the varying potential solutions works and ends your BSOD epidemic.

JC
 
Updated the VMware tools driver package & the intel driver as mentioned. Restarted. Ran a chkdsk /r which came back clean. Still experiencing blue screens. I'm also unable to run a sfc /scannow as I receive the message: Windows resource protection could not perform the requested operation.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top