Blue Screen after login Windows 7

Forums › Microsoft Windows › Blue Screen after login Windows 7

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#76382 1-Feb-2011 21:25

Hi All,

I booted up my laptop this morning only to find that right after login (after the welcome part) it trew a blue screen at me.

What I have tried

System Restore to Yesterday (After a windows hotfix - Microsoft Fix it 50602)

System Startup Repair

What Works

Safe Mode

Laptop Specs:
OS: Windows 7 Home Premium
RAM: 4GB (3GB in Use)
Processor: 2.00 GHz T6400

Screenshot of Blue Screen (http://img12.imageshack.us/img12/7179/photoesl.jpg)

billgates

4705 posts

Uber Geek
+1 received by user: 671

Trusted

#433945 1-Feb-2011 21:33

Download Windbg, run it in safe mode and point it towards the crash dump file that the blue screen is creating. It will tell you what needs fixing or what is faulty.

Do whatever you want to do man.

Regs

4066 posts

Uber Geek
+1 received by user: 206

Trusted

Snowflake

#433975 1-Feb-2011 22:08

my money is that it is probably due to a recent video driver update. try deleting the display adaptor device, from device manager, while in safe mode and rebooting.

http://support.microsoft.com/kb/137539

Double fault
A double fault occurs when an exception occurs while trying to call the handler for a prior exception. Normally, the two exceptions can be handled serially, however there are several exceptions that cannot be handled serially and in this situation the processor signals a double fault. The two primary causes for this are hardware and kernel stack overflows. Hardware problems are usually related to CPU, RAM, or bus. Kernel stack overflows are almost always caused by faulty kernel-mode drivers.

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#433998 1-Feb-2011 22:59

Thanks for your quick reply's

billgates: Download Windbg, run it in safe mode and point it towards the crash dump file that the blue screen is creating. It will tell you what needs fixing or what is faulty.

I installed it using the 86x compilers and the windows debug utility. However how do I point it to my crash dump files?

Regs: my money is that it is probably due to a recent video driver update. try deleting the display adaptor device, from device manager, while in safe mode and rebooting.

http://support.microsoft.com/kb/137539

Double fault
A double fault occurs when an exception occurs while trying to call the handler for a prior exception. Normally, the two exceptions can be handled serially, however there are several exceptions that cannot be handled serially and in this situation the processor signals a double fault. The two primary causes for this are hardware and kernel stack overflows. Hardware problems are usually related to CPU, RAM, or bus. Kernel stack overflows are almost always caused by faulty kernel-mode drivers.

I deleted the adapter device and it got a little bit further it showed my background and the icons however 1 second later the blue screen appeared however this time with a different error code:

http://img145.imageshack.us/img145/2609/photo2jp.jpg

Thanks,

mme

Regs

4066 posts

Uber Geek
+1 received by user: 206

Trusted

Snowflake

#434016 1-Feb-2011 23:37

mme: I deleted the adapter device and it got a little bit further it showed my background and the icons however 1 second later the blue screen appeared however this time with a different error code:

http://img145.imageshack.us/img145/2609/photo2jp.jpg

thats the same error again. deleting the device and making a little progress is promising. perhaps it bombed when it auto-installed the same device driver again and activated it. perhaps you could try the "roll back driver" button on the display adaptor in device manager, or right-click display adaptor select "uninstall" button and check the box "delete the driver software..."

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#434018 1-Feb-2011 23:42

Regs:
thats the same error again. deleting the device and making a little progress is promising. perhaps it bombed when it auto-installed the same device driver again and activated it. perhaps you could try the "roll back driver" button on the display adaptor in device manager, or right-click display adaptor select "uninstall" button and check the box "delete the driver software..."

The Rollback driver option is Grayed-Out

I also ran the debug utility and found this:

Debug:
FOLLOWUP_IP: WinFLdrv+1a509d416a50 83c410 add esp,10h
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: WinFLdrv+1a50
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: WinFLdrv
IMAGE_NAME: WinFLdrv.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4b03b4d3
FAILURE_BUCKET_ID: 0x7f_8_WinFLdrv+1a50
BUCKET_ID: 0x7f_8_WinFLdrv+1a50

Does this mean it has something to do with 'WinFLdrv.sys' ?

Thanks,

mme

Regs

4066 posts

Uber Geek
+1 received by user: 206

Trusted

Snowflake

#434020 1-Feb-2011 23:48

instead of the 'rollback' option, try the delete driver option.

perhaps it might also be a good idea to run an antivirus or antimalware (or both) over your system while in safe mode. microsoft security essentials does a pretty good job of both http://www.microsoft.com/security_essentials/default.aspx

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs

Dyson

Shop now for Dyson appliances (affiliate link).

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#434021 1-Feb-2011 23:55

Regs: instead of the 'rollback' option, try the delete driver option.

perhaps it might also be a good idea to run an antivirus or antimalware (or both) over your system while in safe mode. microsoft security essentials does a pretty good job of both http://www.microsoft.com/security_essentials/default.aspx

I also tried the delete option and restarted immediately, it got a little further again holding out about 4 seconds then another blue screen. Installing Microsoft Security Essentials is also not an option as it does not allow it to be installed in safe mode.

Thanks,

mme

Regs

4066 posts

Uber Geek
+1 received by user: 206

Trusted

Snowflake

#434028 2-Feb-2011 00:23

mme: I also tried the delete option and restarted immediately, it got a little further again holding out about 4 seconds then another blue screen. Installing Microsoft Security Essentials is also not an option as it does not allow it to be installed in safe mode.

have you tried starting up the pc when it is *not* connected to the internet/network? some malware goes crazy only when it gets 'online'. pull your network cables, or disable wireless adaptors and see if you get any further.

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#434035 2-Feb-2011 01:37

Regs:
mme: I also tried the delete option and restarted immediately, it got a little further again holding out about 4 seconds then another blue screen. Installing Microsoft Security Essentials is also not an option as it does not allow it to be installed in safe mode.

have you tried starting up the pc when it is *not* connected to the internet/network? some malware goes crazy only when it gets 'online'. pull your network cables, or disable wireless adaptors and see if you get any further.

Thanks for your quick reply's Regs,

I have disabled all network adapters and rebooted but it did not make a difference.

After searching around in the internet I found that WinFLdrv.sys has something to do with Folder Lock 6 (which I have installed). So I disabled the Cryptographic Service and rebooted (with everything else enabled) it then lasted around 10 seconds then the Blue screen re-appeared.

Thanks,

mme

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#434044 2-Feb-2011 02:45

I renamed the 'WinFLdrv.sys' to 'WinFLdrv.sys.bak' and everything booted up again.

Not sure what the initial problem was though. Any suggestions?

Thanks,

mme

Ramjet007

320 posts

Ultimate Geek
+1 received by user: 18

#434046 2-Feb-2011 06:09

You could try combofix from
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

This is a very good AV (if you think it may be a virus).

It's just an exe and can be run in safe mode.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#434076 2-Feb-2011 08:36

Ramjet007: You could try combofix from
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

This is a very good AV (if you think it may be a virus).

It's just an exe and can be run in safe mode.

Hi,

I ran ComboFix (See link below for result)

http://www.box.net/shared/imz8je0yee

Just wondering also what is the 'WinFLdrv.sys' file for ? Is it for Folder Lock 6 or something else.

Thanks,

mme

mme

161 posts

Master Geek
+1 received by user: 9

Lifetime subscriber

#434092 2-Feb-2011 08:58

Sorry for bumping this topic (edit button isn't there anymore)

However I have definitely found the problem its Folder Lock 6 when I attempt to go into the options it blue screens and puts the driver (WinFLdrv.sys) back.

Hope this solves the problem for anybody else.

Thanks so much for all your quick and great help

Regards,

mme