Bsod

Hi,

I have a problem with the firewall module of BitDefender. Specifically, the driver "BDFNDISF6.SYS" is causing me blue screens whenever I use my torrent program to download anything, after exactly I go to the downloaded files. For now I disabled the firewall and I am using windows's own for now. I have discovered it is the firewall that is causing my issues by googling and finding about this error. I decided to start a new topic, because I didn't seen anyone specifically having this problem with the new 2013 version, so this is the reason. Here are my computer specifications:

OS: Windows 7 Ultimate 64-bit version 6.1(build 7601: Service Pack 1)

Motherboard: Gigabyte GA-P31-DS3L

Processor: Intel Core 2 Duo E6550 2.33Ghz

Memory: Kingston KLDE 2x2048MB(4GB) 800Mhz

Graphics Card: Gigabyte GV-NX86T256H based on the NVIDIA 8600GT 256MB

Hard Disk: Western Digital WD1001FALS 1TB

Software: BitDefender Internet Security 2013

Thank you for your time. :-)

Kind regards,

Robert

Find more posts tagged with

Comments

ayrton2388

Same thing for me. I can safely say that BitDefender 2013 DOES NOT fix the Bsod From Bdfndisf6.sys problem. Can you help, please? This happens when i run a utorrent / bittorrent applications. My Firefox also keeps crashing a lot. Don`t know if it`s related, don`t care that much about that, but it started like the same time with BSoD.

Here is a download link for the generated log, using that bitdefender tool.

http://www.mediafire.com/?jhhxogk4l9j1ooz

i also copy pasted 2 dmp logs:

Microsoft ® Windows Debugger Version 6.12.0002.633 X86

Copyright © Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\New folder\071912-22171-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:

Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504

Machine Name:

Kernel base = 0xe2c42000 PsLoadedModuleList = 0xe2d8b4d0

Debug session time: Thu Jul 19 02:37:29.128 2012 (UTC + 3:00)

System Uptime: 0 days 2:15:28.832

Loading Kernel Symbols

...............................................................

................................................................

.......................

Loading User Symbols

Loading unloaded module list

......

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {18, 2, 0, c95daeeb}

Unable to load image \??\c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys, Win32 error 0n2

*** WARNING: Unable to verify timestamp for bdfndisf6.sys

*** ERROR: Module load completed but symbols could not be loaded for bdfndisf6.sys

Probably caused by : bdfndisf6.sys ( bdfndisf6+beeb )

Followup: MachineOwner

---------

0: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high. This is usually

caused by drivers using improper addresses.

If kernel debugger is available get stack backtrace.

Arguments:

Arg1: 00000018, memory referenced

Arg2: 00000002, IRQL

Arg3: 00000000, value 0 = read operation, 1 = write operation

Arg4: c95daeeb, address which referenced memory

Debugging Details:

------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from e2dab848

Unable to read MiSystemVaType memory at e2d8ae20

00000018

CURRENT_IRQL: 2

FAULTING_IP:

bdfndisf6+beeb

c95daeeb a5 movs dword ptr es:[edi],dword ptr [esi]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xD1

PROCESS_NAME: System

TRAP_FRAME: e2d69924 -- (.trap 0xffffffffe2d69924)

ErrCode = 00000000

eax=00000000 ebx=c4e62c90 ecx=00000000 edx=00000000 esi=00000018 edi=e2d699b8

eip=c95daeeb esp=e2d69998 ebp=e2d699cc iopl=0 nv up ei pl nz ac pe nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216

bdfndisf6+0xbeeb:

c95daeeb a5 movs dword ptr es:[edi],dword ptr [esi] es:0023:e2d699b8=00000000 ds:0023:00000018=????????

Resetting default scope

LAST_CONTROL_TRANSFER: from c95daeeb to e2c8365b

STACK_TEXT:

e2d69924 c95daeeb badb0d00 00000000 c38c20f0 nt!KiTrap0E+0x2cf

WARNING: Stack unwind information not available. Following frames may be wrong.

e2d699cc c95d3a50 c4e62c90 00000000 c4e62c90 bdfndisf6+0xbeeb

e2d699ec c95d3f9e c4af9638 00000000 c3f6d7c0 bdfndisf6+0x4a50

e2d69a10 c95d09de c3f6d7c0 c28dd3d8 00000000 bdfndisf6+0x4f9e

e2d69a50 c95d1101 c3f6d7c0 c28dd3d8 00000000 bdfndisf6+0x19de

e2d69ab4 c97a1e94 c3f6d7c0 c28dd3d8 00000000 bdfndisf6+0x2101

e2d69b00 d1d88776 02a280e0 e2d69b3c 00000001 ndis!ndisMIndicatePacketsToNetBufferLists+0xea

e2d69b40 d1d88a44 0295f2f8 00000028 c45d4044 ndiswan!IndicateRecvPacket+0x2b5

e2d69b74 d1d896f9 c295f2f8 c367b008 c2bd6844 ndiswan!ProcessPPPFrame+0x124

e2d69b94 d1d86d11 c2874a58 c367b008 c2bd6800 ndiswan!ReceivePPP+0xb3

e2d69bc4 c97645b5 c3f6bc60 0000002a 0000002a ndiswan!ProtoCoReceivePacket+0x226

e2d69bf4 c97c38a4 c4e0cf48 e2d69c34 00000001 ndis!ndisMCoIndicateReceiveNdisPacketToNdisPacket+0xda

e2d69c08 d1d9d60d c4e0cf48 e2d69c34 00000001 ndis!NdisMCoIndicateReceivePacket+0x15

e2d69c38 d1d9e176 c475b008 c3641f10 c475b2b0 raspppoe!MpIndicatePacketOnCall+0x1bb

e2d69c58 d1d96b2e c475b2b0 c475b024 00000000 raspppoe!MpIndicateReceivedPackets+0x8e

e2d69c78 e2cba1b5 d1d9a1a8 00000000 4b6aede6 raspppoe!TimerEvent+0x112

e2d69cd4 e2cba018 e2d6cd20 e2d76380 00000000 nt!KiExecuteAllDpcs+0xf9

e2d69d20 e2cb9e38 00000000 0000000e 00000000 nt!KiRetireDpcList+0xd5

e2d69d24 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x38

STACK_COMMAND: kb

FOLLOWUP_IP:

bdfndisf6+beeb

c95daeeb a5 movs dword ptr es:[edi],dword ptr [esi]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: bdfndisf6+beeb

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: bdfndisf6

IMAGE_NAME: bdfndisf6.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ec14cc6

FAILURE_BUCKET_ID: 0xD1_bdfndisf6+beeb

BUCKET_ID: 0xD1_bdfndisf6+beeb

Followup: MachineOwner

---------

Microsoft ® Windows Debugger Version 6.12.0002.633 X86

Copyright © Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\New folder\071912-15281-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:

Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504

Machine Name:

Kernel base = 0xe2c05000 PsLoadedModuleList = 0xe2d4e4d0

Debug session time: Thu Jul 19 18:31:05.905 2012 (UTC + 3:00)

System Uptime: 0 days 0:13:20.608

Loading Kernel Symbols

...............................................................

................................................................

......................

Loading User Symbols

Loading unloaded module list

.........

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {18, 2, 0, c9a0beeb}

Unable to load image \??\c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys, Win32 error 0n2

*** WARNING: Unable to verify timestamp for bdfndisf6.sys

*** ERROR: Module load completed but symbols could not be loaded for bdfndisf6.sys

Probably caused by : bdfndisf6.sys ( bdfndisf6+beeb )

Followup: MachineOwner

---------

0: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high. This is usually

caused by drivers using improper addresses.

If kernel debugger is available get stack backtrace.

Arguments:

Arg1: 00000018, memory referenced

Arg2: 00000002, IRQL

Arg3: 00000000, value 0 = read operation, 1 = write operation

Arg4: c9a0beeb, address which referenced memory

Debugging Details:

------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from e2d6e848

Unable to read MiSystemVaType memory at e2d4de20

00000018

CURRENT_IRQL: 2

FAULTING_IP:

bdfndisf6+beeb

c9a0beeb a5 movs dword ptr es:[edi],dword ptr [esi]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xD1

PROCESS_NAME: vsserv.exe

TRAP_FRAME: c9182bf4 -- (.trap 0xffffffffc9182bf4)

ErrCode = 00000000

eax=00000000 ebx=c4b4b6f0 ecx=00000000 edx=00000000 esi=00000018 edi=c9182c88

eip=c9a0beeb esp=c9182c68 ebp=c9182c9c iopl=0 nv up ei pl nz ac pe nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216

bdfndisf6+0xbeeb:

c9a0beeb a5 movs dword ptr es:[edi],dword ptr [esi] es:0023:c9182c88=00000000 ds:0023:00000018=????????

Resetting default scope

LAST_CONTROL_TRANSFER: from c9a0beeb to e2c4665b

STACK_TEXT:

c9182bf4 c9a0beeb badb0d00 00000000 00000000 nt!KiTrap0E+0x2cf

WARNING: Stack unwind information not available. Following frames may be wrong.

c9182c9c c9a04a50 c4b4b6f0 00000000 c4b4b6f0 bdfndisf6+0xbeeb

c9182cbc c9a04f9e c4d74588 00000000 c3f47608 bdfndisf6+0x4a50

c9182ce0 c9a019de c3f47608 c2b4df00 00000000 bdfndisf6+0x4f9e

c9182d20 c9a02101 c3f47608 c2b4df00 00000000 bdfndisf6+0x19de

c9182d84 c97b0e94 c3f47608 c2b4df00 00000000 bdfndisf6+0x2101

c9182dd0 d1f84776 029ac0e0 c9182e0c 00000001 ndis!ndisMIndicatePacketsToNetBufferLists+0xea

c9182e10 d1f84a44 02934868 00000028 eb403044 ndiswan!IndicateRecvPacket+0x2b5

c9182e44 d1f856f9 c3934868 c37f14c0 f28f6764 ndiswan!ProcessPPPFrame+0x124

c9182e64 d1f82d11 c27429a0 c37f14c0 f28f6720 ndiswan!ReceivePPP+0xb3

c9182e94 c97735b5 c3f4d130 0000002a 0000002a ndiswan!ProtoCoReceivePacket+0x226

c9182ec4 c97d28a4 c296d320 c9182f04 00000001 ndis!ndisMCoIndicateReceiveNdisPacketToNdisPacket+0xda

c9182ed8 d1f9960d c296d320 c9182f04 00000001 ndis!NdisMCoIndicateReceivePacket+0x15

c9182f08 d1f9a176 c3934460 c30fbd50 c3934708 raspppoe!MpIndicatePacketOnCall+0x1bb

c9182f28 d1f92b2e c3934708 c393447c 00000000 raspppoe!MpIndicateReceivedPackets+0x8e

c9182f48 e2c7d1b5 d1f961a8 00000000 834624be raspppoe!TimerEvent+0x112

c9182fa4 e2c7d018 e2d2fd20 c4d7abe0 00000000 nt!KiExecuteAllDpcs+0xf9

c9182ff4 e2c7c7dc e9607ce4 00000000 00000000 nt!KiRetireDpcList+0xd5

c9182ff8 e9607ce4 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c

e2c7c7dc 00000000 0000001a 00d6850f bb830000 0xe9607ce4

STACK_COMMAND: kb

FOLLOWUP_IP:

bdfndisf6+beeb

c9a0beeb a5 movs dword ptr es:[edi],dword ptr [esi]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: bdfndisf6+beeb

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: bdfndisf6

IMAGE_NAME: bdfndisf6.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ec14cc6

FAILURE_BUCKET_ID: 0xD1_bdfndisf6+beeb

BUCKET_ID: 0xD1_bdfndisf6+beeb

Followup: MachineOwner

---------

rootkit

Hello everyone

@ ayrton2388

Please check my post from here:

http://forum.bitdefender.com/index.php?sho...st&p=149957

@ robertul

Please follow the steps explained in the article below and send me via PM the generated log file:

http://forum.bitdefender.com/index.php?showtopic=29927

If the file is too big to attach it, upload it on

http://www.sendspace.com

http://www.mediafire.com

and send me a PM with the download link.

After this, please also send me these files also http://forum.bitdefender.com/index.php?sho...st&p=149957

Have a nice day!

robertul

I have disabled the firewall and I am using windows's firewall. It seems to work fine, obviously it was the firewall it gave me blue screens and the other modules seemed to have worked fine. No problems for now. So, I guess I will be using BitDefender IS 2013 without the firewall module and everything will be fine. I hope I will not have problems, because it is very annoying for an excellent product like this to have so many bugs.

So, Christian, I guess you don't have any resolution for this. Anyway, my time is limited, so, I will stick with what I have said above, works perfect for me, I don't need a 3rd party firewall, I'm fine with windows's own, that's all I need and if it works correctly, I don't need to bother to try to repair the firewall or anything else. As I said, I don't have all the time in the world. Thank you for your time and have a nice day! :-)

Best regards,

Robert

robertul

Until you will find a proper resolution for this faulty driver, I will stick with the windows firewall and bitdefender's firewall will be disabled. BitDefender seems to work fine with everything else but the firewall. It's okay for me if I got it to work fine just disabling the firewall. It's been a long time for now since I use it and it doesn't interfere in my usual daily activities and didn't gave me one single problem since then. Thank you for your support and time and I wish to hear from you soon when you will find a fix for this. And please, try to solve all the major bugs, if there any in this product. That's really what does matter most in your users. This is my opinion and I think other people's too. This is a wonderful piece of product with even low demanding of your computer's resources, so it's would be a shame if major bugs would still be in future versions.

Best regards,

Robert

rootkit

Hello

A product update was released. Your build should be 16.18.0.1406(please right click on Bitdefender icon from system tray-near the clock-and choose "About". You should see in the left side the build number).

In order for the product update to be installed, you need to reboot your machine(you should see in the Events -> "Reboot required" under the Update module).

Changelog:

http://forum.bitdefender.com/index.php?sho...st&p=151654

http://forum.bitdefender.com/index.php?showtopic=35499

Let me know if the situation is solved.

Have a great weekend!

robertul

Hello Christian

I updated the product and the problem persists. As it seems, technically, there isn't any fix for this BSOD. I am sorry, but I will switch to an unobtrusive software to protect my computer. At last, I don't need these type of suites, these are excellent for the average user. But I am a little more educated, so I don't need these type of behemoths of security products. Sure, they are excellent, as I said for the average user, I don't question that, but for me, it is overkill, in one word! Plus, another disadvantage is that your team at BitDefender don't quite listen to us, the users and don't involve a lot in solving the problems with this software rather than make it so much powerful so that almost all malware stay away from their computer. You need to balance a little. Sure, security is a top priority, but what for, if the product has a lot of bugs, even after many releases and so many beta testing? What's the point of that, if the users will get annoyed and eventually, will switch to a product that maybe it is less secure, but doesn't have annoying bugs and don't interfere in their work.

So, this is my feedback, as well as my own experience with this product. You can use this to improve it. Thank you for your time and I hope you and all the team of BitDefender will listen and try to fix these things. Thank you for your support and have a great week-end! :-)

And, one more thing, I almost forgot. I am not disappointed with this product, so, don't think I am not satisfied, just that I realized that this is too much for myself. Something simpler and less obtrusive is exactly what I need.

Best regards and all due respect,

Robert

rootkit

Hi Robert

We apologize for any negative experience you have encountered with our products or our support. Your feedback is appreciated, and will be directed to the appropriate team for review, to enable us to improve our support and services.

We received a positive feedback after the update and the issue was resolved.

http://forum.bitdefender.com/index.php?showtopic=36476 (on the Romanian area)

Thank you for taking the time and please do not hesitate to contact us if you need further details from us.

Take care.