Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


How can I test for conflicts between two programs causing BSOD?

Posted on 2008-10-26
Medium Priority
Last Modified: 2013-12-12
Using Vista Business SP1... HP 8710 Laptop 2 G RAM 2.2 CPU

Recently installed update to Zone Alarm Internet Security Suite and immediately started getting BSOD.  Contected tech support and they suggested disabling all programs in start menu and non ms services then enabling five at a time to pinpoint what program ZA is conflicting with.   I tried doing that and after a whole day of restarts without any problem finally got a BSOD.   So I disabled the last five services again and lo and behold BSOD again.  Doesn't make sense.  Problem is it might take an hour or two before the BSOD happens, sometime just 10 or 15 minutes so it's a long time consuming processs of elimination.

Is there another way I can find out what might be conflicting with ZA.  The WinDbg Mini Dump follows... I sent this to ZA support but I'm not sure if it points to anything that might help.

Another note.. if I close down ZA , no BSOD at all.   Any help appreciated.  Just not sure whether I should be pressing ZA support to resolve the issue or it's my responsibility.

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\Mini102708-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: set _NT_SYMBOL_PATH=srv*C:\Users\Allan\Downloads\symstore*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Kernel base = 0x8203f000 PsLoadedModuleList = 0x82156c70
Debug session time: Mon Oct 27 09:25:02.361 2008 (GMT+13)
System Uptime: 0 days 1:13:27.513
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {82275a63, 2, 0, 0}

Probably caused by : ntkrpamp.exe ( nt!NtDeviceIoControlFile+0 )

Followup: MachineOwner

0: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arg1: 82275a63, Address of system function (system call routine)
Arg2: 00000002, Current IRQL
Arg3: 00000000, 0
Arg4: 00000000, 0

Debugging Details:

PROCESS_NAME:  vsmon.exe


82275a63 8bff            mov     edi,edi




LAST_CONTROL_TRANSFER:  from 774d9a94 to 82096d6d

9d1d1d64 774d9a94 badb0d00 03aeea08 00000000 nt!KiServiceExit2+0x154
WARNING: Frame IP not in any known module. Following frames may be wrong.
03aeea60 00000000 00000000 00000000 00000000 0x774d9a94


82275a63 8bff            mov     edi,edi

SYMBOL_NAME:  nt!NtDeviceIoControlFile+0

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  ntkrpamp.exe


FAILURE_BUCKET_ID:  RAISED_IRQL_FAULT_vsmon.exe_nt!NtDeviceIoControlFile+0

BUCKET_ID:  RAISED_IRQL_FAULT_vsmon.exe_nt!NtDeviceIoControlFile+0

Followup: MachineOwner
Question by:inajam
  • 3
  • 2
LVL 32

Expert Comment

ID: 22809214
PROCESS_NAME:  vsmon.exe ---> vsmon.exe is part of Zone Alarm. First thing to try is disabling Zone Alarm.

Author Comment

ID: 22809391
As I said, all is ok if I shut down Zone Alarm but it's no good to me shut down.  Their tech support said it's conflicting with another program... how do I determine what that program is without having to go through disabling each one in a tiral and error approach?  
LVL 32

Accepted Solution

willcomp earned 1500 total points
ID: 22809406
My best guess is that ZA is causing an error all by itself and there is no other program except Vista involved.

Author Comment

ID: 22936008
I've sent a complete dump to Zone Alarm support and am awaiting their reply.  Will post back when I get some response from them.

Author Comment

ID: 23118601
Zone Alarm tech support suggested I download and try the latest beta but that caused the same problem.   I think I'll just have to give it up.   Installed latest Norton Internet Security and it's so much faster loading, best of all, no bluescreens.  Cheers willcomp for responding... it must be a ZA fault.

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While Plesk offers many potential benefits to website administrators, including compatibility with Windows Server and other leading technologies, the company has also been working to differentiate it from other control panels for content management…
This applies to Dell but may also apply to other manufacturers as well. We ran across a few machines that just dropped recently it trust relationship with the server. After doing the basic removing and joining the domain again, it changed to No logo…
XMind Plus helps organize all details/aspects of any project from large to small in an orderly and concise manner. If you are working on a complex project, use this micro tutorial to show you how to make a basic flow chart. The software is free when…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question