My first BSOD

Mork

Well-Known Member
#1
Hello. This is my first post here. I am not sure what all you need, so let me explain what I got and leave it to hear back if more information is needed, etc.

I have a laptop in home network, on which I am running 64-bit Win7. I got a BSOD although I don't believe I was doing anything special when it occurred. Merely installing a new VM with Oracle VirtualBox. I have done so several times without incident until now. In the blue screen, I was shown the name of one driver which was apparently objectionable for some reason or another. The name of it was "risdpe64.sys". Searching for this file after rebooting, I found two copies:

C:\Windows\System32\DriverStore\FileRepository\risdpcie.inf_amd64_neutral_1b449f00ac4efbba\risdpe64.sys

C:\Windows\System32\drivers\risdpe64.sys

When I rebooted, Windows showed me an error message about this event and provided a link to Search for a solution, which I clicked but nothing came of it. That is, no solution was offered, and the window just closed. However, in this error message I was informed of this:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033
Additional information about the problem:
BCCode: 1000007e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF8800560F913
BCP3: FFFFF880032558B8
BCP4: FFFFF88003255110
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1
Files that help describe the problem:
C:\Windows\Minidump\090712-81557-01.dmp
C:\Users\display\AppData\Local\Temp\WER-219446-0.sysdata.xml
Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows
If the online privacy statement is not available, please read our privacy statement offline:
C:\windows\system32\en-US\erofflps.txt
----------------------------------

In that information two files are mentioned helping to describe the problem. The dmp file appears to be a binary file, and I am not sure what program would allow me to read it, or, indeed, if that would even help me. Nonetheless, I have attached it to this message. The other file, namely, "WER-219446-0.sysdata.xml", is rather large. If it should be needed, please let me know. Thank you.
 


Attachments

usasma

Fantastic Member
Microsoft Community Contributor
#2
Nice work for your first BSOD! There's a number of programs to read memory dump files - but most require some sort of experience to figure out what happened (that's why we're here!). If interested in delving more deeply into this, I've got lot's of resources - feel free to ask for them. Here's a couple to start with:
- Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
- Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
- How I do it: http://www.carrona.org/howidoit.html
In this case, the risdpe64.sys driver is the most significant bit of information. In most cases BSOD's are caused by 3rd party (non-Windows) drivers - either they are corrupted or they're not compatible.

So, the first step is to replace them. The easiest thing is to just overwrite them with a later version - but sometimes it's better to un-install the current version and then install the freshly downloaded version (in case the new one doesn't overwrite a corrupted, older file).

I've made a table for looking up drivers here: Driver Reference Table - risdpe64.sys
In this case it tells you to get another copy of the driver from your PC Manufacturer's website (they're the OEM).
It also tells you that this driver is related to your Ricoh Media Card Reader - so go to the Toshiba Support/Download website for your model and download the appropriate installation file. (I found the Toshiba info from the memory dump).

If this doesn't fix things for you, please provide this info: http://windows7forums.com/blue-screen-death-bsod/38837-how-ask-help-bsod-problem.html

Just FYI - there's at least one driver that I'm uncertain about - and that we have no info on (it's the 7r709jh7.vbt one).
Please run a couple of these free anti-malware scans to ensure that you're not infected: Free Online AntiMalware Resources

3rd Party Drivers:The following is for information purposes only. Any drivers in red should be updated.
Code:
[font=lucida console]**************************Fri Sep  7 20:11:38.582 2012 (UTC - 4:00)**************************
GEARAspiWDM.sys             Mon May 18 08:17:04 2009 (4A1151C0)
[COLOR=RED][B]TVALZFL.sys                 Fri Jun 19 06:05:44 2009 (4A3B62F8)[/B][/COLOR]
[COLOR=RED][B]pgeffect.sys                Mon Jun 22 05:00:11 2009 (4A3F481B)[/B][/COLOR]
[COLOR=RED][B]PxHlpa64.sys                Tue Jun 23 19:16:35 2009 (4A416253)[/B][/COLOR]
[COLOR=RED][B]tos_sps64.sys               Wed Jun 24 01:31:09 2009 (4A41BA1D)[/B][/COLOR]
[COLOR=RED][B]thpdrv.sys                  Sun Jun 28 22:02:56 2009 (4A4820D0)[/B][/COLOR]
[COLOR=RED][B]Thpevm.SYS                  Mon Jun 29 04:15:37 2009 (4A487829)[/B][/COLOR]
[COLOR=RED][B]rimspe64.sys                Wed Jul  1 19:54:49 2009 (4A4BF749)[/B][/COLOR]
[COLOR=RED][B]rixdpe64.sys                Sat Jul  4 06:27:00 2009 (4A4F2E74)[/B][/COLOR]
[COLOR=RED][B]FwLnk.sys                   Mon Jul  6 20:51:41 2009 (4A529C1D)[/B][/COLOR]
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
[COLOR=RED][B]TVALZ_O.SYS                 Mon Jul 13 22:19:26 2009 (4A5BEB2E)[/B][/COLOR]
risdpe64.sys                Tue Jul 28 05:24:10 2009 (4A6EC3BA)
tdcmdpst.sys                Thu Jul 30 04:39:35 2009 (4A715C47)
HECIx64.sys                 Thu Sep 17 15:54:16 2009 (4AB293E8)
iaStor.sys                  Fri Oct  2 15:58:50 2009 (4AC65B7A)
SynTP.sys                   Thu Oct 15 22:28:35 2009 (4AD7DA53)
Impcd.sys                   Mon Oct 26 16:39:41 2009 (4AE6090D)
IntcDAud.sys                Fri Oct 30 10:56:33 2009 (4AEAFEA1)
igdkmd64.sys                Fri Oct 30 15:23:10 2009 (4AEB3D1E)
RTKVHD64.sys                Mon Nov  2 05:44:45 2009 (4AEEB81D)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
afw.sys                     Tue Apr 20 08:02:46 2010 (4BCD97E6)
afwcore.sys                 Mon Sep 27 07:38:38 2010 (4CA0823E)
VBEngNT.sys                 Mon Jan 31 09:01:32 2011 (4D46C0BC)
rtl8192se.sys               Fri Mar 11 01:15:57 2011 (4D79BE1D)
ASWFilt64.dll               Mon Mar 21 09:28:04 2011 (4D875264)
VBFilt64.dll                Mon Mar 21 09:28:09 2011 (4D875269)
SandBox64.sys               Mon Mar 21 09:29:00 2011 (4D87529C)
Rt64win7.sys                Fri Jun 10 02:33:15 2011 (4DF1BAAB)
truecrypt.sys               Tue Feb  7 04:09:36 2012 (4F30EA50)
MpFilter.sys                Fri Mar  9 06:05:26 2012 (4F59E3F6)
phylock.sys                 Sat Jul  7 12:49:50 2012 (4FF868AE)
7r709jh7.vbt                Thu Jul 19 19:36:43 2012 (50089A0B)
SbieDrv.sys                 Sat Aug 25 16:27:46 2012 (50393542)
VBoxEhciR0.r0               Fri Sep  7 11:29:34 2012 (504A12DE)
VMMR0.r0                    Fri Sep  7 11:37:41 2012 (504A14C5)
VBoxDDR0.r0                 Fri Sep  7 11:37:42 2012 (504A14C6)
VBoxDD2R0.r0                Fri Sep  7 11:37:42 2012 (504A14C6)
VBoxNetFlt.sys              Fri Sep  7 11:37:43 2012 (504A14C7)
VBoxDrv.sys                 Fri Sep  7 11:37:44 2012 (504A14C8)
VBoxUSBMon.sys              Fri Sep  7 11:37:45 2012 (504A14C9)
[/font]
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
http://www.carrona.org/drivers/driver.php?id=TVALZFL.sys
http://www.carrona.org/drivers/driver.php?id=pgeffect.sys
http://www.carrona.org/drivers/driver.php?id=PxHlpa64.sys
http://www.carrona.org/drivers/driver.php?id=tos_sps64.sys
http://www.carrona.org/drivers/driver.php?id=thpdrv.sys
http://www.carrona.org/drivers/driver.php?id=Thpevm.SYS
http://www.carrona.org/drivers/driver.php?id=rimspe64.sys
http://www.carrona.org/drivers/driver.php?id=rixdpe64.sys
http://www.carrona.org/drivers/driver.php?id=FwLnk.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=TVALZ_O.SYS
http://www.carrona.org/drivers/driver.php?id=risdpe64.sys
http://www.carrona.org/drivers/driver.php?id=tdcmdpst.sys
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys
http://www.carrona.org/drivers/driver.php?id=iaStor.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Impcd.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
http://www.carrona.org/drivers/driver.php?id=afw.sys
http://www.carrona.org/drivers/driver.php?id=afwcore.sys
http://www.carrona.org/drivers/driver.php?id=VBEngNT.sys
http://www.carrona.org/drivers/driver.php?id=rtl8192se.sys
ASWFilt64.dll - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
VBFilt64.dll - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=SandBox64.sys
http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys
http://www.carrona.org/drivers/driver.php?id=truecrypt.sys
http://www.carrona.org/drivers/driver.php?id=MpFilter.sys
phylock.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
7r709jh7.vbt - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=SbieDrv.sys
VBoxEhciR0.r0 - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=VMMR0.r0
http://www.carrona.org/drivers/driver.php?id=VBoxDDR0.r0
http://www.carrona.org/drivers/driver.php?id=VBoxDD2R0.r0
http://www.carrona.org/drivers/driver.php?id=VBoxNetFlt.sys
http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys
http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys
 


This website is not affiliated, owned, or endorsed by Microsoft Corporation. It is a member of the Microsoft Partner Program.