[RESOLVED] Driver Overrun of Stack Based Buffer

[KITES]

So a friend brought over his Desk Top (2.53 GHz, 256K)... ststing he was at some site that said to accept Cookie to view pag... Well!!! a Blue screen poped up shortly thereafter. Now when powerung up all goes good up to where it is loading personal desk top settings... then a Blue Screen with (in part), A Driver Has Overrun A Stack Based Buffer. From what I have found, this may be a Hackers Attack. Any Ideas How to Reverse or Fix this Attack??
Same happens if I boot in Safe Mode.

HELP!!

[Train]

DRIVER_OVERRAN_STACK_BUFFER

http://msdn2.microsoft.com/en-us/library/ms797143.aspx

Looks like a good start.

[KITES]

So does this mean Safe Mode the Debug Mode then kb ??

[Train]

Debugging Tools for Windows
k, kb, kd, kp, kP, kv (Display Stack Backtrace)

http://msdn2.microsoft.com/en-us/library/ms797143.aspx

[Fenz]

I'm having the same problem on my laptop... its running vista premium 32 bit.... i've tried as many things as i could possibly think of as well as contact microsoft support but to no avail.... the stack backtrace sounds like a good idea but the only problem is that i cannot install the windows debugger because everytime i install anything i get the BSOD with that error... if i could actually get the program to install i'd try it but i get this error with almost everything i do.... is there anything else i could try?

[Train]

Did you try a Safe Mode install of the Debugger?

[Fenz]

yes i tried it in safe mode... got another error message... everything is alright now because i just said to hell with it and reformatted ha... thanks for the help though.

[Train]

I agree, sometimes a clean install is the easiest way to handle it.

[dneilson]

For me the easiest, less time consuming and aggrevating way is to restore my image backup.

[KITES]

RESOLVED

[bonniesgirl]

I am have a similar issue. I believe it has to do with my Nvidia display driver which I updated after I upgraded to Windows 7.

I get BSOD randomly while my pc is running. I tried using windbg to check the dump and or minidump files but I am not familar with this program and could not seem to get dumpchk to work either. The first dump was on Jan 4 '10 and that is the date of one of my Nvidia driver modifications so I deleted that and on restart the pc automatically DL the update for the display driver. In one site I found, it stated that any newer version of the Nvidia driver can cause this kind of problem b/c the newer version tells it to display to many colors and that I should use and older version of the driver but I'm unsure how to proceed.

I am currently running windows 7 64 bit. My graphics card is Nvidia Geforce GT 220 driver version 196.21. Can you tell me if this could be the conflict here?

[jdc2000]

You could try using BlueScreenView to look at the minidump files.

http://www.nirsoft.net/utils/blue_screen_view.html

It does sound like the display driver update is causing the issue.

[bonniesgirl]

Thank you for the link... I DL Blue screen view and it shows three drivers that have caused issues:

dxgkrln.sys
nvlddmkm.sys
msfs.sys

Any insight on these drivers?

[bonniesgirl]

I thought this might help... blue screen view report:


==================================================
Dump File : 030710-24492-01.dmp
Crash Time : 3/7/2010 3:20:54 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`09bf0010
Parameter 2 : fffff880`0ffb1a20
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030710-24492-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030710-30420-01.dmp
Crash Time : 3/7/2010 2:16:42 PM
Bug Check String : DRIVER_OVERRAN_STACK_BUFFER
Bug Check Code : 0x000000f7
Parameter 1 : 23d5b596`05680ce0
Parameter 2 : 00002b99`2ddfa232
Parameter 3 : ffffd466`d2205dcd
Parameter 4 : 00000000`00000000
Caused By Driver : nvlddmkm.sys
Caused By Address : nvlddmkm.sys+16f056
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030710-30420-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030710-28438-01.dmp
Crash Time : 3/7/2010 1:29:44 AM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`084994e0
Parameter 2 : fffff880`0ff53a20
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030710-28438-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030510-25396-01.dmp
Crash Time : 3/5/2010 8:12:13 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`091ec4e0
Parameter 2 : fffff880`0ff60a20
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030510-25396-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 030110-20514-01.dmp
Crash Time : 3/1/2010 4:30:04 PM
Bug Check String :
Bug Check Code : 0x00000117
Parameter 1 : fffffa80`08f114e0
Parameter 2 : fffff880`0ffaaa20
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000000
Caused By Driver : Msfs.SYS
Caused By Address : Msfs.SYS+28048a0
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\030110-20514-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 022210-24835-01.dmp
Crash Time : 2/22/2010 10:45:55 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`0907a010
Parameter 2 : fffff880`0ffbaa20
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\022210-24835-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 022010-21060-01.dmp
Crash Time : 2/20/2010 7:08:03 PM
Bug Check String :
Bug Check Code : 0x00000117
Parameter 1 : fffffa80`071f24e0
Parameter 2 : fffff880`0ffc0230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000000
Caused By Driver : nvlddmkm.sys
Caused By Address : nvlddmkm.sys+10d230
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\022010-21060-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 012610-23275-01.dmp
Crash Time : 1/26/2010 6:41:11 AM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`0903c4e0
Parameter 2 : fffff880`0ffc6230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\012610-23275-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 012010-25771-01.dmp
Crash Time : 1/20/2010 11:27:43 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`06d0d4e0
Parameter 2 : fffff880`0ff60230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\012010-25771-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 011510-28236-01.dmp
Crash Time : 1/15/2010 1:03:52 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`0bb0d010
Parameter 2 : fffff880`0ff1b230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\011510-28236-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 011310-24538-01.dmp
Crash Time : 1/13/2010 8:25:04 AM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`06f464e0
Parameter 2 : fffff880`0ffaa230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\011310-24538-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 011010-25334-01.dmp
Crash Time : 1/10/2010 12:44:13 AM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`087bd4e0
Parameter 2 : fffff880`0ffa3230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\011010-25334-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 010910-26348-01.dmp
Crash Time : 1/9/2010 12:39:20 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`091b54e0
Parameter 2 : fffff880`0ffa0230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\010910-26348-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 010710-32089-01.dmp
Crash Time : 1/7/2010 8:38:11 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`06b324e0
Parameter 2 : fffff880`0ff96230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5cef8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\010710-32089-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 010510-30186-01.dmp
Crash Time : 1/5/2010 4:46:43 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`08ed64e0
Parameter 2 : fffff880`0fffc230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5ccbc
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\010510-30186-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================

==================================================
Dump File : 010410-32027-01.dmp
Crash Time : 1/4/2010 5:06:48 PM
Bug Check String :
Bug Check Code : 0x00000116
Parameter 1 : fffffa80`08394260
Parameter 2 : fffff880`0ff47230
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000002
Caused By Driver : dxgkrnl.sys
Caused By Address : dxgkrnl.sys+5ccbc
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\minidump\010410-32027-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600
==================================================