Stop Error caused by rdbss.sys file

I have been getting a blue screen after using IE 8 lately. A reboot clears it up for a while. All drivers have been updated, according to microsoft update.
What is the next step when it happens again? Spybot and Malwarebytes show no problems.

 

After some real quick research, it seems that the file rdbss.sys commonly causes blue screen errors and is usually associated to some type of internet activity, whether it's Skype, IE, Maxthon browser, and it occasionally causes USB devices to fail until the PC is rebooted. The BSOD can also be caused by some type of router/modem issue as illustrated in this thread. You can try the Microsoft Hotfix available here (yeah- it says it's for Server2003, but if you scroll down, you'll see it's for XP also). You can also try uninstalling IE8 (if possible) and going back to IE6 or IE7. It could be a compatibility issue between IE8 and your modem/router.... good luck!

(BTW- please include your OS version next time )

 

What OS are you running? This started after installing IE8? Open a command box and type eventvwr
What, if any, reports do you see? You can post them back here.
Also, does this occur in safe mode? :wave:wave

 

Running XP home that came with IE8. Didn't install it. Event viewer shows a sytem error that resulted in blue screen after a couple of errors saying various applications hang. Explain how to post event logs here and I will. Thanks

 

Highlight the events, holding down the shift key. Right click, copy, paste in notepad and attach to a post here.:wave:wave

 

0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 34 30 30 30 30 30 38 4000008
0020: 30 20 20 50 61 72 61 6d 0 Param
0028: 65 74 65 72 73 20 38 36 eters 86
0030: 65 35 33 31 33 30 2c 20 e53130,
0038: 38 36 38 62 37 63 32 38 868b7c28
0040: 2c 20 38 30 35 35 31 32 , 805512
0048: 62 38 2c 20 30 30 30 30 b8, 0000
0050: 30 30 30 31 0001

I am hoping this is what it should look like.
Thanks

 

Try opening a command prompt and type SFC /scannow
Note the space before the /

Did you try the link to the fix provided by dlb?:wave:wave

 

Yes I did download the hotfix referenced by dlb. BSOD still occurred after that. What will the command prompt you reference do?
Thanks

 

Ran the scannow command. Apparently did not help as BSOD was there this morning. Any other ideas or actions? The machine reboots fine from BSOD but it is becoming mildly annoying. Thanks for any help.

 

Okay, try rebooting in safe mode with networking. Depending on your computer make, probably tapping F8 on startup will bring you to a screen where you can select that option.

Thinking it is some software conflict that safe mode will circumvent.

Any errors there?:wave:wave

 

OK. Booted up in safe mode. What next?

 

Any errors in safe mode?

 

mostly just because i've had so many issues with IE8 my suggestion is go here :http://www.microsoft.com/downloads/...be-3385-447c-8a30-081805b2f90b&displaylang=en download IE7 and install it over 8. check the requirements on the page before hand and make sure your system meets them though

 

Brandy-no errors, but it has mostly been just sitting. Are you suggesting I just run safe mode all the time? It blows.
Magical-This is the first issue with IE 8 I've had and have used it since it came out.

 

No, this just tells us that it is either system problem or faulty device driver.
Click start - run, and type sigverif in the box. This will find drivers not signed by XP. Find any? Can you list them?

Another possible fix, and maybe the best, is to restore the system to a point in time preceding this problem. Do you know how to do this?:wave:wave

 

brandypeppy- one file found in sigverif...id'd as covpndrv.sys in C\windows\system32\drivers. What next?
Halo-Thanks for suggestion. Will try if need to.

 

Do you mean cvpndrv.sys? Right click on it, what is the size?

I am finding conflicting information about this file. I think you should run the malware scans to rule that out.

http://forums.majorgeeks.com/showthread.php?t=35407

If you don't find anything we can then try disabling this driver to see if it clears the problem.:wave:wave

 

No, ran again and it is covpndrv, not just cv. Properties says it is 33.1KB

 

I can find very few references to that file, and the fact that it is unsigned is suspicious. Run the malware removal process first then come back if clean.:wave:wave

It's a GOOD thing to run through that procedure from time to time in any case!!

 

OK, ran the cleaning steps. Malaware, spybot and Super antispyware found no problems. MGTools and Combofix generated logs which were saved.
Is it now wait and see?
Thanks

 

Try the following;
After Sigverif.exe is finished running its check, a list of all unsigned drivers installed on your computer is displayed. The list of all signed and unsigned drivers found by Sigverif.exe can be found in the Sigverif.txt file in the %Windir% folder, typically the Winnt or Windows folder. All unsigned drivers are noted as Unsigned.

When you determine what drivers are unsigned, create a folder in which to place the unsigned drivers. Typically, SysDriversBak is an easy folder name to remember.

Restart your computer without the unsigned drivers in the Winnt\System32\Drivers folder and test your program or other functionality to see if the error messages or issues occur.


And then?? Problem solved?:wave:wave

 

Thanks for sticking with me on this. How do I move unsigned drivers to the new folder I will create?

 

OK, ran sigverif and it found that covpndrv file as unsigned. But a message said that 1023 files were not checked. does that seem correct?
I did cut the file file from sys32 nd put it in a new folder.

 

Not unusal to have unscanned files. Boot with this driver in the other folder, symptoms?:wave

 

Will let IE run for awhile. BSOD never happened on startup, only after a few hours after operation. Did find something interesting...was snooping around Dell tools and discovered "driver reset" utility. It would not open. Author of Dell "reset" is the same author of unsigned file. F5 Networks. ??? Does this info help any?

 

Plodr- It is a Dell 530 desktop and the reset tool came preloaded in the Dell Accessories folder. I do not thinks it is the one you referenced.
Brandypeppy- the machine has run about 8 hours, including 2 or 3 restarts over the last few days. No BSOD yet.