Reproducible BSODs caused by an application

stef · Sep 23, 2012

Hi,
I keep getting random BSODs when running an application (bsw.exe). I am not 100% sure about this, but it seems like i can only reproduce this when i am logged in remotely or using terminal services.
Can someone please take a look at the dumps and hopefully give me more details on this? What I think i figured out so far from looking at the dumps is that bsw.exe somehow causes csrss.exe to fail with a "ReadMemory error: Cannot get nt!KeMaximumIncrement value. fffff78000000000: Unable to get shared data"

I am hoping to find out more details on what bsw.exe is doing here. I don't think there is anything wrong with the systems - i was able to reproduce this on 3 different ones.

I attached two complete sets of dump and system info files from two different machines (Win7 and Win7sp1). I also uploaded the files here:
https://skydrive.live.com/#!/?cid=6...!cid=6A89509B3105B1DD&id=6A89509B3105B1DD!105

Thank you!!!

jcgriff2 · Sep 24, 2012

Hi -

What is bsw.exe?

Is it --> http://systemexplorer.net/file-database/file/bsw-exe/123873

I see "VM" listed throughout the files.
Are you running in a VM environment?
Is the app running in VM on the remote system?

You said BSOD occurs only when you run the app remotely.
- Can you run it on your system locally with success?
- Can you run it on the remote system in person successfully?

The one item that stands out is an old Intel Ethernet driver -

Code:

E1G6032E.sys                Wed May 28 19:14:51 2008 (483DE76B)

https://www.sysnative.com/drivers/driver.php?id=E1G6032E.sys

That is from the Windows 7 SP1 system, but I doubt it is the sole cause.

It looks more to be an issue with bsw itself given 0xf4 bugcheck + "image" (corrupted install..?).

Code:

FAILURE_BUCKET_ID:  X64_0xF4_bsw.exe_IMAGE__

It's not really worth the time to test a W7 system void of SP1 because all Windows 7 systems should be fully updated, including SP1.

Regards. . .

jcgriff2

Code:


Debug session time: Sun Sep 23 08:28:10.174 2012 (GMT-4)
Loading Dump File [C:\Users\PalmDesert\SysnativeBSODApps\092312-75078-01.dmp]
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime: 0 days 2:59:22.366
BugCheck F4, {3, fffffa8004c92060, fffffa8004c92340, fffff80002be68b0}
Probably caused by : _
Bugcheck code 000000f4
Arguments 00000000`00000003 fffffa80`04c92060 fffffa80`04c92340 fffff800`02be68b0
PROCESS_NAME:  bsw.exe
BUGCHECK_STR:  0xF4_bsw.exe
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
FAILURE_BUCKET_ID:  X64_0xF4_bsw.exe_IMAGE__
MaxSpeed:     2000
CurrentSpeed: 1995
BiosVersion = 6.00
BiosReleaseDate = 10/13/2009
SystemManufacturer = VMware, Inc.
SystemProductName = VMware Virtual Platform
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

stef · Sep 24, 2012

Hi jcgriff2,

Here are the details you requested:
Bsw.exe is HyperLynx: http://www.mentor.com/products/pcb-system-design/circuit-simulation/hyperlynx-signal-integrity/
The released version works fine, but I am using a new beta version of it and i started getting the bluescreens with this. There is also a simresserver.exe running in parallel as a service, so i'm wondering if that has to do anything with this. So this is most probably something caused by this non-released version of bsw. I am just hoping to gather more details on this before reporting it, so hopefully they can fix this.

Yes, both minidumps are from VMs (VMWare), but i was able to reproduce this on a real machine too when logged in remotely. I can send you that crash dump too if needed.
I can run it fine both locally and on the remote system too, when i don't use Remote Desktop. It runs fine interactively.

Thank you for looking into this! I appreciate your help!

Regards,
Stefan

jcgriff2 · Sep 24, 2012

Hi Stefan. . .

Is it your system that BSODs or the one you're connected to via RD?

Is bsw.exe running on your system or the RD system -- BSODs?

I am not familiar with bsw.exe, but I do beta test other apps. I would think if all conditions are the same and the the system only BSODs under the beta version bsw, it is very likey involved or there is a conflict with another driver.

stef said:
... bsw.exe somehow causes csrss.exe to fail with a "ReadMemory error: Cannot get nt!KeMaximumIncrement value. fffff78000000000: Unable to get shared data"

Bugcheck 0xf4 (0x3,,,) simply tells us that a process critical to Windows suddenly terminated. csrss.exe is often seen with 0xf4, but the W7 SP1 system listed nothing as the probable cause, not even the usual NT default.

Code:

 BugCheck F4, {3, fffffa8004c92060, fffffa8004c92340, fffff80002be68b0}
Probably caused by : _

The dump listed bsw.exe as the process running, but didn't actually name bsw drivers as the probable cause. Have others reported BSODs while running the beta bsw version?

stef said:
Yes, both minidumps are from VMs (VMWare), but i was able to reproduce this on a real machine too when logged in remotely. I can send you that crash dump too if needed.
I can run it fine both locally and on the remote system too, when i don't use Remote Desktop. It runs fine interactively.

I mentioned the Intel Ethernet driver because the May 2008 timestamp = Vista SP1 era. Since the BSODs are only occurring while RD'ing, the outdated Intel driver may be a contibuting factor. It should be updated -

https://www.sysnative.com/drivers/driver.php?id=E1G6032E.sys

The bsw developers are best suited to deal with crashes involving their app as they have symbol files not available to us.

However, I'll be glad to take a look at the non-VM dump to see if it yields any clues.

Regards. . .

jcgriff2

stef · Sep 24, 2012

The system i am connected to via RD BSODs, and bsw.exe is running on the RD system.

I will try updating the Ethernet driver and let you know if that makes a difference.

The non-VM dump shows exactly the same thing as the dumps you looked at, so at this point I don't want to waist more of your time.
Thanks again for looking into this!!!

jcgriff2 · Sep 24, 2012

Hi Stefan...

Both dumps -- one from the W7 SP0 system & the other from the W7 SP1 system - had the same Intel Ethernet driver -

Code:


E1G6032E.sys                Wed May 28 19:14:51 2008 (483DE76B)

Just curious.... does the 3rd system that BSOD'd also have that same driver?

Also, the 3rd BSOD contained this same Probably caused by - ?

Code:

 BugCheck F4, {3, fffffa8004c92060, fffffa8004c92340, fffff80002be68b0}
Probably caused by : _

I don't recall ever seeing that before.

System uptimes before BSOD were:

Code:

System Uptime: 0 days 2:59:22.366
System Uptime: 0 days 1:46:46.413

You could run Driver Verifier on the offending systems to test 3rd party drivers, which would include bsw + Intel -

https://www.sysnative.com/forums/showthread.php/29-Driver-Verifier-BSOD-related

If software related, Driver Verifier will add additional info to dump files to help ID the offending driver.

It's not a waste of my time to try and help, I assure you. I understand why you want to provide as much feedback to the developer as possible, but beta apps often get frequent updates behind-the-scenes before the next public version release. You may want to just submit your dump files & info to them and continue your own testing. I'll be glad to look at any dump files you have or new ones from future BSODs.

Regards. . .

jcgriff2

stef · Sep 26, 2012

Hi jcgriff2,

I'm out of the office this week, but i will definitely try updating E1G6032E.sys
The real machine has Win7 (no SP1) and it looks like it uses E1G6032E.sys. $sys_list.txt collected with your utility shows the following entry:
145792 6/10/2009 1:35:09 PM "C:\Windows\System32\DriverStore\FileRepository\nete1g3e.inf_amd64_neutral_7f08406e40c6ede2\E1G6032E.sys"

And yes, the third BSOD shows exactly the same Probably caused by -

Thank you again for all this good data and great help you provide here.

Regards,
Stefan

jcgriff2 · Sep 26, 2012

Thanks for posting back, Stefan.. pleease let us know how things go.

Regards. . .

jcgriff2

stef · Oct 3, 2012

Hi jcgriff2,

Just a quick update...
When i try to update the driver for E1G6032E.sys, Windows says that i already have the latest driver. It shows me i have version 8.4.1.0. I didn't find a newer one and Intel's website says "These adapters are only supported by the drivers included "in box" with Microsoft Windows* 7 and Windows* Server 2008 R2" and doesn't provide a download.
Please let me know if you'll have any other suggestions.

Thanks,
Stefan

jcgriff2 · Oct 4, 2012

System files show - Intel(R) PRO/1000 MT Network Connection

There doesn't appear to be driver updates available - http://www.intel.com/support/network/sb/CS-030613.htm

¹In-box support

Driver and software updates are not planned for adapters with only
in-box support. These adapters cannot be updated using automated or manual
methods.

Intel® PROSet for Windows Device Manager and Advanced Network Services (ANS)
driver for teaming and VLANS are not included with in-box support.

You might be able to add an adapter with in-box
support to a team using multi-vendor teaming (MVT). See the user
guide for MVT considerations.

http://www.intel.com/support/network/sb/CS-030613.htm

Not sure if this may help or not - http://downloadcenter.intel.com/Det...el(R)+PRO/1000+MT+Network+Connection&lang=eng

http://downloadcenter.intel.com/SearchResult.aspx?keyword=PROWin32.exe&OSVersion=Windows+7*

If you do try them, create a system restore point first, so you can fall back in case Internet connectivity is INOP after update.

Regards. . .

jcgriff2

Search

Search

Reproducible BSODs caused by an application

stef

Member

Attachments

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

stef

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

stef

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

stef

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

stef

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Reproducible BSODs caused by an application

Member

Attachments

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)