Windows Sharing Issue

shoaibwaheedj · Aug 22, 2017

Hello

i am facing windows sharing issue From last 2 months and done lot of things to resume my sharing services but:-( ....... after reinstalling windows its work fine and after couple of hours my sharing services goes down no one can access my system on simple work-group environment but i can access all system on network and i was also unable to access my own shared folder of my system. i install avira antivirus its scan my system and found threads and remove the all treads but my services did not resume i again reinstall my system and install avira and have still same things.

some of PC on my network also have svr.sys blue screen error i done sfc scan and chkdsk on all system but problem is still there. common thing between svr.sys its occur on same time on all systems. i also sniff my network and nothing found strange.

i consult with different persons but no one can found the issue. this issue i occurs from last 2 months.

can have guide me how can i remove this issue.

jcgriff2 · Aug 22, 2017

What was the outcome of SFC. Any files that Windows could not fix?

What OS are you running?

shoaibwaheedj · Aug 22, 2017

i receive this after scan

"Windows Resource Protection did not find any integrity violations."

windows 7 64Bit

jcgriff2 · Aug 22, 2017

That's exactly what I needed to know.

Let's go on to the BSODs now.

Please run - Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 & Vista

Attach the resulting zip to your next post in this thread.

I've moved the thread to the BSOD forum.

Regards. . .

jcgriff2

shoaibwaheedj · Aug 23, 2017

attached file is result of BSOD.

x BlueRobot · Aug 23, 2017

Code:

[COLOR=#ff0000]BugCheck 50[/COLOR], {[COLOR=#008000]fffffa80735ac0ed[/COLOR], [COLOR=#0000cd]1[/COLOR], fffffa80035ac003, 5}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+44891 )

Code:

0: kd> [COLOR=#008000]!dpx[/COLOR]
Start memory scan  : 0xfffff880023f9698 ($csp)
End memory scan    : 0xfffff880023fa000 (Stack Base)

0xfffff880023f97a8 : 0xfffff800016566c0 : nt!NonPagedPoolDescriptor
0xfffff880023f97b8 : 0xfffff800014f01ed : nt!ExpAllocateBigPool+0xcd
0xfffff880023f97f8 : 0xfffff800014cd76e : nt!KiPageFault+0x16e
0xfffff880023f9918 : 0xfffff880016c077a : tcpip!TcpTlConnectionSend+0x7a
0xfffff880023f99b0 : 0xfffff8800247fcf0 : afd!WskProTLSendOrDisconnectComplete
0xfffff880023f99f8 : 0xfffff88003b8ae3f : srvnet!SrvNetSendData+0xff
0xfffff880023f9a18 : 0xfffff800014d1eda : nt!KiSwapContext+0x7a
0xfffff880023f9a28 : 0xfffff88002e7bba1 : srv!SrvDereferenceTransaction+0x161
0xfffff880023f9a48 : 0xfffff88003b8cf54 : srvnet!SrvLibLookasideAllocate+0x54
0xfffff880023f9a78 : 0xfffff88002e04416 : srv!SrvAllocateNonPagedPool+0x66
0xfffff880023f9a98 : 0xfffff88003b8cf54 : srvnet!SrvLibLookasideAllocate+0x54
0xfffff880023f9ae8 : 0xfffff88002e4c815 : srv!ExecuteTransaction+0xc5
0xfffff880023f9b28 : 0xfffff88002e4a8c4 : srv!SrvSmbTransaction+0x664
0xfffff880023f9c18 : 0xfffff88002e1d110 : srv!WPP_GLOBAL_Control
0xfffff880023f9c20 : 0xfffff88002e00000 : "srv!SrvCredentialHandler <PERF> (srv+0x0)"
0xfffff880023f9c28 : 0xfffff88002e02bb8 : srv!SrvProcessSmb+0xb8
0xfffff880023f9c30 : 0xfffff88002e1d100 : srv!_security_cookie
0xfffff880023f9ca8 : 0xfffff88002e02ad3 : srv!SrvRestartReceive+0xa3
0xfffff880023f9ce8 : 0xfffff88002e4778f : srv!WorkerThread+0xe9
0xfffff880023f9d20 : 0xfffff88002e476b0 : srv!WorkerThread
0xfffff880023f9d38 : 0xfffff8000176ccce : nt!PspSystemThreadStartup+0x5a
0xfffff880023f9d78 : 0xfffff800014c0fe6 : nt!KiStartSystemThread+0x16

Code:

0: kd> [COLOR=#008000].trap 0xfffff880023f9800[/COLOR]
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa80035ace00 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000017bfd27f rsi=0000000000000000 rdi=0000000000000000
rip=fffffa80035ac003 rsp=fffff880023f9998 rbp=fffffa8002e7b000
 r8=0000000000012408  r9=00000000000007ff r10=000000000000074d
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
[COLOR=#0000cd]fffffa80`035ac003[/COLOR] 0025e4000070    add     byte ptr [fffffa80`735ac0ed],ah ds:[COLOR=#ff0000]fffffa80`735ac0ed[/COLOR]=??

It appears that invalid address was written too, unfortunately the function name hasn't been saved or is within an different address space.

The other bugcheck revealed similar information, however, there doesn't appear to be much information to go on.

Considering the call stack shows a number of network-related calls, I would suggest disabling your Avira security suite momentarily or running Driver Verifier for at least 48 hours - Driver Verifier - BSOD related - Windows 10, 8.1, 8, 7 & Vista

shoaibwaheedj · Aug 24, 2017

please find the attached file verifier result

x BlueRobot · Aug 26, 2017

There appears to be one new dump file which shows the same bugcheck as before. Have you ensured that Driver Verifier has been enabled correctly?

Could you please enter the following command into a Command Prompt window:

Code:

verifier /query

Please post the output of the command.

Code:

0: kd> [COLOR=#008000]!verifier[/COLOR]

Verify Flags Level 0x00000000

  STANDARD FLAGS:
    [X] (0x00000000) Automatic Checks
    [ ] (0x00000001) Special pool
    [ ] (0x00000002) Force IRQL checking
    [ ] (0x00000008) Pool tracking
    [ ] (0x00000010) I/O verification
    [ ] (0x00000020) Deadlock detection
    [ ] (0x00000080) DMA checking
    [ ] (0x00000100) Security checks
    [ ] (0x00000800) Miscellaneous checks

  ADDITIONAL FLAGS:
    [ ] (0x00000004) Randomized low resources simulation
    [ ] (0x00000200) Force pending I/O requests
    [ ] (0x00000400) IRP logging

    [X] Indicates flag is enabled


Summary of All Verifier Statistics

  RaiseIrqls           0x0
  AcquireSpinLocks     0x0
  Synch Executions     0x0
  Trims                0x0

  Pool Allocations Attempted             0x0
  Pool Allocations Succeeded             0x0
  Pool Allocations Succeeded SpecialPool 0x0
  Pool Allocations With NO TAG           0x0
  Pool Allocations Failed                0x0

  Current paged pool allocations         0x0 for 00000000 bytes
  Peak paged pool allocations            0x0 for 00000000 bytes
  Current nonpaged pool allocations      0x0 for 00000000 bytes
  Peak nonpaged pool allocations         0x0 for 00000000 bytes

Have you tried the Avira suggestion?

shoaibwaheedj · Aug 28, 2017

below is details of verifier /qurey and previously i contact to mcafee and they told me that i buy the product it will resolve it i buy it but not work then i found avira free for windows i install it but still same issue.

Level: 0000092B
RaiseIrqls: 0
AcquireSpinLocks: 3408903
SynchronizeExecutions: 22800303
AllocationsAttempted: 29696405
AllocationsSucceeded: 29696405
AllocationsSucceededSpecialPool: 29696405
AllocationsWithNoTag: 0
AllocationsFailed: 0
AllocationsFailedDeliberately: 0
Trims: 4185053
UnTrackedPool: 3411

Verified drivers:

Name: amdxata.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 0

Name: serial.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 5
CurrentNonPagedPoolAllocations: 1
PeakPagedPoolAllocations: 7
PeakNonPagedPoolAllocations: 2
PagedPoolUsageInBytes: 256
NonPagedPoolUsageInBytes: 32
PeakPagedPoolUsageInBytes: 1088
PeakNonPagedPoolUsageInBytes: 4144

Name: avkmgr.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 0

Name: avipbb.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 2112
CurrentNonPagedPoolAllocations: 4
PeakPagedPoolAllocations: 3587
PeakNonPagedPoolAllocations: 7
PagedPoolUsageInBytes: 280016
NonPagedPoolUsageInBytes: 4192
PeakPagedPoolUsageInBytes: 1846096
PeakNonPagedPoolUsageInBytes: 8256

Name: e1g6032e.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 1038
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 1038
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 1143968
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 1143968

Name: ndis.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 6
CurrentNonPagedPoolAllocations: 3575
PeakPagedPoolAllocations: 8
PeakNonPagedPoolAllocations: 3584
PagedPoolUsageInBytes: 984
NonPagedPoolUsageInBytes: 933488
PeakPagedPoolUsageInBytes: 1156
PeakNonPagedPoolUsageInBytes: 938168

Name: vncmirror.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 0

Name: videoprt.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 37
CurrentNonPagedPoolAllocations: 5
PeakPagedPoolAllocations: 38
PeakNonPagedPoolAllocations: 8
PagedPoolUsageInBytes: 4920
NonPagedPoolUsageInBytes: 400
PeakPagedPoolUsageInBytes: 6956
PeakNonPagedPoolUsageInBytes: 2400

Name: dump_dumpata.sys, loads: 0, unloads: 0
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 0

Name: dump_atapi.sys, loads: 2, unloads: 1
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 0

Name: avgntflt.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 17258
CurrentNonPagedPoolAllocations: 9
PeakPagedPoolAllocations: 17811
PeakNonPagedPoolAllocations: 10
PagedPoolUsageInBytes: 1558228
NonPagedPoolUsageInBytes: 8376
PeakPagedPoolUsageInBytes: 2036844
PeakNonPagedPoolUsageInBytes: 12424

Name: avnetflt.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 3
PeakPagedPoolAllocations: 1
PeakNonPagedPoolAllocations: 4
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 168
PeakPagedPoolUsageInBytes: 328
PeakNonPagedPoolUsageInBytes: 296

Name: secdrv.sys, loads: 1, unloads: 0
CurrentPagedPoolAllocations: 1
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 3
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 72
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 316
PeakNonPagedPoolUsageInBytes: 0

Name: vncmirror.dll, loads: 11, unloads: 10
CurrentPagedPoolAllocations: 0
CurrentNonPagedPoolAllocations: 0
PeakPagedPoolAllocations: 0
PeakNonPagedPoolAllocations: 0
PagedPoolUsageInBytes: 0
NonPagedPoolUsageInBytes: 0
PeakPagedPoolUsageInBytes: 0
PeakNonPagedPoolUsageInBytes: 0

x BlueRobot · Aug 28, 2017

I wouldn't take any form of advice from McAfee or any other "support" desks.

Please continue to run Driver Verifier until another crash occurs. Have you tried removing Avira or booting into Safe Mode?

Windows Sharing Issue

shoaibwaheedj

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

shoaibwaheedj

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

shoaibwaheedj

Member

Attachments

x BlueRobot

Administrator

shoaibwaheedj

Member

Attachments

x BlueRobot

Administrator

shoaibwaheedj

Member

x BlueRobot

Administrator

Windows Sharing Issue

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Attachments

Administrator

Member

Attachments

Administrator

Member

Administrator

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)