Bluescreen from OS from Norton 360

Hi,

 

I recently did custom build pc upgrade, and installed a fresh copy of Windows 7 x64 OS. Norton 360 was re-installed on OS.

 

I have been getting repeated bluescreen. Used a Diagnostic tool to analyze the dump file created, and gave some experts to analyze the logs collected from Diagnostic tool.

 

Once of the bluescreen shows issues related with Norton 360 software as per

 

fffff880`0bcfb6f8  fffff880`04ab0a12Unable to load image BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
 BHDrvx64+0xa1a12

 

 

I was told by experts that this driver means:

 

\??\c:\program files (x86)\norton 360\nortondata\21.1.0.18\definitions\bashdefs\20131203.001\bhdrvx64.sys

 

 

How do I resolve this issue ?

 

Thank You

 

 

Hi,

 

I recently did custom build pc upgrade, and installed a fresh copy of Windows 7 x64 OS. Norton 360 was re-installed on OS.

 

I have been getting repeated bluescreen. Used a Diagnostic tool to analyze the dump file created, and gave some experts to analyze the logs collected from Diagnostic tool.

 

Once of the bluescreen shows issues related with Norton 360 software as per

 

fffff880`0bcfb6f8  fffff880`04ab0a12Unable to load image BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
 BHDrvx64+0xa1a12

 

 

I was told by experts that this driver means:

 

\??\c:\program files (x86)\norton 360\nortondata\21.1.0.18\definitions\bashdefs\20131203.001\bhdrvx64.sys

 

 

How do I resolve this issue ?

 

Thank You

 

 

I have done as suggested. Will wait for few days to make sure bluescreen does not occur

Thanks; we'll be here in case it does....

We'll I had 3 x bluescreens occurred after Norton was removed and re-installed. There are few reasons for the bluescreens relating to TP link adapter, NVIDIA. The 3rd is related to Norton again. This was reported

fffff880`0a78dd18  fffff880`042cc110Unable to load image SYMEVENT64x86.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS
 SYMEVENT64x86+0x26110
---------------------------------------------------------------------------------------------
fffff880`0a78d958  fffff880`0476bd43Unable to load image BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
 BHDrvx64+0x10ed43

 

 

I'm sorry, but what is a "TP link adapter"  and is that made by Nvidia or is that something totally seperate from your Nvidia graphic card?

 

Dave

I'm sorry, but what is a "TP link adapter"  and is that made by Nvidia or is that something totally seperate from your Nvidia graphic card?

Dave

 

TP Link is a wireless networking adapter over wired onboard networking. Right now I’ve uninstalled TP link completely and went back to onboard networking. Will get another wireless adapter.

 

Nvidia is the graphics external card Ge Force am using. I’ve uninstalled everything and went to  NVIDIA DRIVERS 314.22WHQL.

 

Right now I have uninstalled Norton 360 as well, and will see if I can clear those annoying bluescreen as I can’t use this pc properly.

 

If it stops, I will attempt a Norton 360 re-install again and see if I get bluescreen.

 

Thank you for your patience

Thank you for yours! LOL I know you're signing up for an "adventure" when you start doing custom builds, but this sort of thing is still annoying. We'll see if we can't help you through it!

 

V/R,

--DistEd2

Thanks for explaining that, I'm still a little confused about  "wireless networking adapter over wired onboard networking" but I'll get back to that one later.

 

I'm sure your aware that the little snips you posted about the crashes really don't give any useful information.  I'm sure you just did that to save space from posting the entire output.

 

The warning appears to be because your trying to use a 32bit debugger on a 64bit driver and it's unable to read the timestamps.  But thats not very important because you could always right click on the files and check the properties if the time stamp was important.

 

The error about not loading symbols is normal.

Third party programs almost never release the symbol packages for there files and even if they did they would not be available through the MS symbolic store or download packages.

The symbols would make it easier for people to reverse engineer the executables and drivers and most companies would not like that to happen.

Microsoft releases the symbols as a courtesy to software developers as a way to debug problems in development since they want programs to run smoothly on windows.

 

Besides that, no information pertaining to the crash is given or even the faulting module.

I have no doubt that a norton file may be listed as a faulting module but that doesn't necessarily mean that it caused the crash.  

 

For example, a lot of crash files I have debugged will list "ntoskrnl" as the faulting module.  That file is the brains of windows. it's the Windows "NT Operating System Kernel"  Just because it's listed as the faulting module does not mean it is the problem.  The windows kernal "crashed" because something else made it crash.

 

Every time I see drivers listed in the debug, the first step is to update those drivers.

360 is an easy one, make sure you are running the most recent version and the live updates are complete.

 

For your Nvidia card, I would go the other direction and update it to the newest driver version.

Graphic drivers are one of the most common causes of crashes because display drivers are in use for every program, they run all the time just like windows.

 

Leave that "TP Link" unistalled for a while if you can get along without it.

The way you describe it seems to me that your computer connects to the internet though a wired LAN cable and the adapter is used to provide wireless to another system?

Is that what it does?

 

I'm also more than happy to look at some of your dump files if they are minidumps and not full kernal dumps.

Please don't think I'm an expert at it but I have done it a lot and I happen to have a system here setup with windbg connected to the Microsoft symbol server.

 

If you want to take me up on that offer just let me know and I'll send you an email address in a private message.

 

Dave

 

 

 

 

 

Thanks for explaining that, I'm still a little confused about  "wireless networking adapter over wired onboard networking" but I'll get back to that one later.

 I have a modem that supports both LAN and Wi-Fi. TP Link was used for Wi-Fi. PC was recently upgraded with a new motherboard, extra disks added. Prior to TP Link, which was installed by computer shop that did the upgrade, I was using Netgear WN series usb for Wi-Fi and was running Windows XP actually. I upgraded the OS to Windows 7 Pro x64 but motherboard was only capable at 4 GB max, so I decided to upgrade the custom build pc after few yrs of use. Upgrade kept the same Windows 7 Pro x 64, and installed other drivers for me.

 

I started getting bluescreens, and took pc back to shop. They did few days testing and installed a WindowsSevens Diagnostic Tool to capture dumps logs for analysis. They did upgrade my NVIDIA Ge Force card, which was not upgraded or replaced. They could reporduce one single bluescreen after pusing computer hard.

 

They noted Power supply was perhaps not good enough for my later motherboard and I upgraded this one as well.

 

I took computer back, and left it on not doing anything, and I started getting bluescreen again. This has been persistent after weeks leaving it on. So I used the same Windows SevenForms Diagnostic tools to collects logs, and sent it there for review.

 

Feedback I have been given from them after analyzing the mini dumps came from there. Am no experts at analyzing mini dumps.

 

I did try to upgrade TP Link but the latest update still gace bluescreen from yesterday. Norton 360 was also reported.

 

I did remove and un-installed Norton 360, but after 3 x more bluescreens, and the logs analysis, while I read and understand what is said below, that just being reported does not mean it's the root cause, I decided to uninstall Norton 360 for now. I do use Norton 360 on 3 x other computers and have no issues with bluescreens.

 

So for now need to work backwards, and see that system stops doing this, and then add one by one, and monitor. But I won't use TP LInk again. Will get another Wi-Fi adapter.

 

I'm also more than happy to look at some of your dump files if they are minidumps and not full kernal dumps.

Please don’t think I’m an expert at it but I have done it a lot and I happen to have a system here setup with windbg connected to the Microsoft symbol server.

If you want to take me up on that offer just let me know and I’ll send you an email address in a private message.

 

If I get further bluescreens, we’ll see. SevenForums are looking at them for me at present.

 

 

 

 

If all these bluescreens started after the replacement of the motherboard, then it's a hardware problem.

Especially if the blue screens are involving multiple drivers.

 

Make sure the motherboard supports the RAM and the BIOS shows the correct timings and settings for both the RAM and CPU.  Running a RAM diagnostic may or may not show a problem

Make sure your using default settings in the BIOS and the system is not overclocked.

Also install the motherboard monitoring tool if available and make sure the temperatures are in safe limits.

 

You also may want to look up the Motherboard BIOS updates and check the "read me" files to see if they say anything about correcting problems that you may be experiencing.

 

Sometimes I can find other people having similar issues by googling the motherboard and RAM combination

example:  ASUS P8Z77-V with CORSAIR Vengeance RAM.

 

Best of luck,

Dave