Windows 7: Laptop is freezing all of a sudden

skillboy · 10 Aug 2010

It all started yesterday when I was playing a game, which I've played since I got my laptop, and all of a sudden it started freezing out of nowhere until it got to the point where it crashed. Then the next day, I couldn't turn it on for 1 minute without it freezing and then crashing.

The last time I downloaded something was a month ago. I can't even delete any programs due to the freezing. It's only less then a year old so that can't be the problem. And it's an acer, which was really fast before all the freezing.

I even tried registry booster, and got rid of the few problems it had detected (since I didn't pay for it, I could only get rid of a few) and did nothing.

If anyone could give me some help, that would be greatly appreciated

CarlTR6 · 10 Aug 2010

Can you boot in the safe mode? If so, try a restore point prior to the problem. Please do not use a registry tool. Unless you are very familiar with the registry, these tools can make things far worse.

If you can, please upload any mini dump files.

[1 - Novice] How to ask for help with a BSOD problem

http://www.sevenforums.com/tutorials...en-forums.html

skillboy · 10 Aug 2010

Unfortunately, when I run it to safe mode, that doesn't work either. I clicked on safe mode and it started loading all the files and whatnot. But then it always stops at a file named: \windows\system32\DRIVERS\AtiPcie.sys

I don't know if that should mean anything but that's the last file that loads before it stops loading the rest.

Also, uploading Dump files right now

skillboy · 10 Aug 2010

I have another problem. When I copied the dump files onto my desktop, it didn't have the icon that I saw in that link you posted. So when I tried to put it in a new folder, an error popped up.

Do I need to download something?

CarlTR6 · 10 Aug 2010

That is an indication that driver is causing problems. ATI PCIE Driver is a driver for your ATI PCIE chipset Global Provider of Innovative Graphics, Processors and Media Solutions | AMD. Either it has gotten corrupted or something else is interfering with it.

Can you zip those dumps into a zip file and upload them?

Do you have a Windows DVD that you can boot from?

skillboy · 12 Aug 2010

hello

Turns it, it was false alarm on the safe boot. It starts like 30 seconds afters. So that driver shouldn't be the problem.

And actually it was working after I posted that last message. Then again, this morning it did the same thing. I noticed before that, something happened with my firefox. It said that some media plugin thing has crashed, and then it shuts down my computer and starts freezing. So I was wondering how I can prevent it from never crashing and how I can fix that.

And for the dump files and that zip file you want, it's going to be a challenge because I have to do it pretty quick before my laptop crashes again. I'll try my best

skillboy · 13 Aug 2010

Yes, finally got those dump files uploaded

Hopefully someone can analyze and help decode what's going on

Lasy B · 13 Aug 2010

Quote: Originally Posted by skillboy

I even tried registry booster, and got rid of the few problems it had detected (since I didn't pay for it, I could only get rid of a few) and did nothing.

If anyone could give me some help, that would be greatly appreciated.

This is off topic, I know, but (my opinion) think yourself lucky that registry booster was only in "trial mode" and could only remove a few things.
Far better would be to use something like CCleaner to clear your registry. But even then not too often.

CarlTR6 · 13 Aug 2010

I just looked at the three most recent. All three have the same error code, 7E, and blame memory corruption. On of them points to a device filter as the cause but doesn't tell which one.

Error code 7E - usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control,

Obviously, this is a hardware/hardware related problem.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\AppData\Local\Temp\Temp1_081210-20092-01.zip\081310-25755-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: 
Windows 7 Kernel Version 7600 UP Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a0f000 PsLoadedModuleList = 0xfffff800`02c4ce50
Debug session time: Fri Aug 13 11:40:46.471 2010 (GMT-4)
System Uptime: 0 days 0:10:13.469
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {fffff6fc400070f0, ffffffffc0000185, 6fd8860, fffff88000e1e93c}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
GetPointerFromAddress: unable to read from fffff80002cb7220
Probably caused by : memory_corruption

Followup: memory_corruption
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc400070f0, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000185, error status (normally i/o status code)
Arg3: 0000000006fd8860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff88000e1e93c, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc0000185 - The I/O device reported an I/O error.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c0000185

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88002b4d620 -- (.trap 0xfffff88002b4d620)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88000e16500 rbx=0000000000000000 rcx=fffffa800238a050
rdx=fffffa80019b8e10 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000e1e93c rsp=fffff88002b4d7b8 rbp=fffffa8001b04d40
 r8=0000000000000007  r9=fffffa800238a1a0 r10=0000000000000000
r11=fffffa80019b8fb8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po cy
ataport!ChannelQueryDeviceRelations:
fffff880`00e1e93c fe07            inc     byte ptr [rdi] ds:fea0:00000000`00000000=??
Resetting default scope

LOCK_ADDRESS:  fffff80002c83400 -- (!locks fffff80002c83400)

Resource @ nt!PiEngineLock (0xfffff80002c83400)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
    Lock address  : 0xfffff80002c83400
    Thread Count  : 0
    Thread address: 0x0000000000000000
    Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff80002af40a8 to fffff80002a7f600

STACK_TEXT:  
fffff880`02b4d308 fffff800`02af40a8 : 00000000`0000007a fffff6fc`400070f0 ffffffff`c0000185 00000000`06fd8860 : nt!KeBugCheckEx
fffff880`02b4d310 fffff800`02a7142b : fffffa80`04137740 fffff880`02b4d480 fffff800`02c0c440 1e04f797`473301d4 : nt! ?? ::FNODOBFM::`string'+0x34c4e
fffff880`02b4d3f0 fffff800`02a9a4a4 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff 00000000`00000000 : nt!MiIssueHardFault+0x28b
fffff880`02b4d4c0 fffff800`02a7d6ee : 00000000`00000008 fffffa80`019b8e10 fffffa80`00000000 00000000`002a0028 : nt!MmAccessFault+0x11c4
fffff880`02b4d620 fffff880`00e1e93c : fffff880`00e1c4ce 00000000`00000000 fffff880`02b4d880 fffff800`02b7ec80 : nt!KiPageFault+0x16e
fffff880`02b4d7b8 fffff880`00e1c4ce : 00000000`00000000 fffff880`02b4d880 fffff800`02b7ec80 fffffa80`0237c700 : ataport!ChannelQueryDeviceRelations
fffff880`02b4d7c0 fffff800`02e3e70e : 00000000`00000000 00000000`00000000 fffffa80`01b04d40 fffff800`02bf9e80 : ataport!IdePortDispatchPnp+0x22
fffff880`02b4d7f0 fffff800`02e3ea7a : 00000000`00000000 fffffa80`01b04d40 fffff800`02b7ec80 00000000`00000000 : nt!PnpAsynchronousCall+0xce
fffff880`02b4d830 fffff800`02e40d67 : fffff800`02c831c0 fffffa80`02388cd0 00000000`00000002 00000000`00000460 : nt!PnpQueryDeviceRelations+0xfa
fffff880`02b4d8f0 fffff800`02e6c95c : fffffa80`02388cd0 fffffa80`02380020 fffffa80`02388cd0 00000000`00000002 : nt!PipEnumerateDevice+0x117
fffff880`02b4d950 fffff800`02e6cf68 : fffff800`02c80d80 00000000`00000000 00000000`00000001 fffff800`02ced698 : nt!PipProcessDevNodeTree+0x21c
fffff880`02b4dbc0 fffff800`02b812f7 : 00000001`00000003 00000000`00000000 00000000`00000001 00000000`00000000 : nt!PiProcessReenumeration+0x98
fffff880`02b4dc10 fffff800`02a8c861 : fffff800`02b80fd0 fffff800`02e95a01 fffffa80`015d3000 fffffa80`015d3040 : nt!PnpDeviceActionWorker+0x327
fffff880`02b4dcb0 fffff800`02d24a86 : f46effef`7eebfbff fffffa80`015d3040 00000000`00000080 fffffa80`015449e0 : nt!ExpWorkerThread+0x111
fffff880`02b4dd40 fffff800`02a5db06 : fffff800`02bf9e80 fffffa80`015d3040 fffffa80`015cd680 eb1ffffe`ef72feb7 : nt!PspSystemThreadStartup+0x5a
fffff880`02b4dd80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !ataport
    fffff88000e1e000-fffff88000e1e007  8 bytes - ataport!DeviceAtaPassThroughIoctl+1a0
    [ 85 4a 08 75 b3 83 7a 0c:00 c0 6a 0a a0 f8 ff ff ]
    fffff88000e1e009-fffff88000e1e010  8 bytes - ataport!DeviceAtaPassThroughIoctl+1a9 (+0x09)
    [ 74 ad 81 7a 0c e0 a5 01:00 00 00 00 00 00 00 00 ]
    fffff88000e1e012-fffff88000e1e025  20 bytes - ataport!DeviceAtaPassThroughIoctl+1b2 (+0x09)
    [ 77 a4 3b f7 76 10 2b f7:00 00 00 00 00 00 48 00 ]
    fffff88000e1e028-fffff88000e1e048  33 bytes - ataport!DeviceAtaPassThroughIoctl+1c8 (+0x16)
    [ 48 8b 7d 18 48 8b cd 4c:00 00 00 00 00 00 00 00 ]
    fffff88000e1e04a-fffff88000e1e095  76 bytes - ataport!DeviceAtaPassThroughIoctl+1ea (+0x22)
    [ 00 48 8b d3 e8 bd 4f ff:08 80 00 00 00 00 00 00 ]
    fffff88000e1e098-fffff88000e1e09c  5 bytes - ataport!DeviceAtaPassThroughIoctl+238 (+0x4e)
    [ ff 41 b8 ff 0f:ec 55 10 00 00 ]
    fffff88000e1e09f-fffff88000e1e0ae  16 bytes - ataport!DeviceAtaPassThroughIoctl+23f (+0x07)
    [ 8b c2 c1 ea 0c 41 23 c8:00 b8 ff ff 72 0e 00 00 ]
    fffff88000e1e0b0-fffff88000e1e0ba  11 bytes - ataport!DeviceAtaPassThroughIoctl+250 (+0x11)
    [ 00 c1 e9 0c 03 ca 41 3b:90 e8 b1 60 0e 00 00 00 ]
    fffff88000e1e0bd-fffff88000e1e0d6  26 bytes - ataport!DeviceAtaPassThroughIoctl+25d (+0x0d)
    [ 0f 87 f5 fe ff ff 33 c9:00 00 00 00 00 00 00 00 ]
    fffff88000e1e0d8-fffff88000e1e0dc  5 bytes - ataport!DeviceAtaPassThroughIoctl+278 (+0x1b)
    [ 00 c0 e9 55 01:21 00 00 00 00 ]
    fffff88000e1e0df-fffff88000e1e0e2  4 bytes - ataport!DeviceAtaPassThroughIoctl+27f (+0x07)
    [ 4c 89 b8 80:00 bc 07 00 ]
    fffff88000e1e0e5-fffff88000e1e12f  75 bytes - ataport!DeviceAtaPassThroughIoctl+285 (+0x06)
    [ 00 4c 89 70 08 4c 89 70:04 00 00 00 00 00 00 00 ]
    fffff88000e1e131-fffff88000e1e13c  12 bytes - ataport!DeviceAtaPassThroughIoctl+2d1 (+0x4c)
    [ 49 3b c6 75 0f bb 9a 00:13 00 00 a0 f8 ff ff e7 ]
    fffff88000e1e140-fffff88000e1e151  18 bytes - ataport!DeviceAtaPassThroughIoctl+2e0 (+0x0f)
    [ 4c 8b 64 24 30 4c 8b c6:21 00 00 00 00 00 00 00 ]
    fffff88000e1e153-fffff88000e1e15b  9 bytes - ataport!DeviceAtaPassThroughIoctl+2f3 (+0x13)
    [ 41 3b c6 8b d8 0f 8c c6:80 01 00 00 00 28 00 31 ]
    fffff88000e1e15e-fffff88000e1e178  27 bytes - ataport!DeviceAtaPassThroughIoctl+2fe (+0x0b)
    [ 48 8b d6 49 8b cf e8 67:00 00 01 00 00 08 00 00 ]
    fffff88000e1e17b-fffff88000e1e184  10 bytes - ataport!DeviceAtaPassThroughIoctl+31b (+0x1d)
    [ 24 5f 3c 03 75 12 8a 86:00 00 00 00 00 10 41 08 ]
    fffff88000e1e187-fffff88000e1e18d  7 bytes - ataport!DeviceAtaPassThroughIoctl+327 (+0x0c)
    [ 88 47 2e 8a 86 ec 03:00 00 a0 00 00 00 00 ]
    fffff88000e1e190-fffff88000e1e197  8 bytes - ataport!DeviceAtaPassThroughIoctl+330 (+0x09)
    [ 88 47 28 48 8b 86 18 04:00 00 00 00 00 00 00 00 ]
    fffff88000e1e19a-fffff88000e1e1a2  9 bytes - ataport!DeviceAtaPassThroughIoctl+33a (+0x0a)
    [ 49 3b c6 74 1f 80 be f1:02 01 00 00 00 00 00 08 ]
    fffff88000e1e1a5-fffff88000e1e1b3  15 bytes - ataport!DeviceAtaPassThroughIoctl+345 (+0x0b)
    [ 10 72 16 48 8b 00 48 89:00 00 00 40 00 80 10 00 ]
    fffff88000e1e1b6-fffff88000e1e1c9  20 bytes - ataport!DeviceAtaPassThroughIoctl+356 (+0x11)
    [ 48 8b 48 08 48 89 4f 20:00 00 00 12 00 00 00 00 ]
    fffff88000e1e1cc-fffff88000e1e205  58 bytes - ataport!DeviceAtaPassThroughIoctl+36c (+0x16)
    [ 89 47 08 41 80 fd 01 74:00 00 00 00 f6 04 00 80 ]
    fffff88000e1e209-fffff88000e1e285  125 bytes - ataport!DeviceAtaPassThroughIoctl+3a9 (+0x3d)
    [ 48 8b cb e8 ff 4d ff ff:00 00 08 00 00 00 00 00 ]
    fffff88000e1e288-fffff88000e1e292  11 bytes - ataport!IdeInitAtaPassThroughIrb+24 (+0x7f)
    [ 48 8b fa 48 8b e9 45 88:00 00 00 00 00 00 00 00 ]
    fffff88000e1e295-fffff88000e1e298  4 bytes - ataport!IdeInitAtaPassThroughIrb+31 (+0x0d)
    [ 8a 81 58 04:00 00 00 00 ]
    fffff88000e1e29b-fffff88000e1e29f  5 bytes - ataport!IdeInitAtaPassThroughIrb+37 (+0x06)
    [ 41 88 80 ee 03:00 00 00 00 00 ]
    fffff88000e1e2a2-fffff88000e1e2a5  4 bytes - ataport!IdeInitAtaPassThroughIrb+3e (+0x07)
    [ 8a 81 59 04:00 00 00 00 ]
    fffff88000e1e2a8-fffff88000e1e2ac  5 bytes - ataport!IdeInitAtaPassThroughIrb+44 (+0x06)
    [ 41 88 80 ef 03:00 00 00 00 00 ]
    fffff88000e1e2af-fffff88000e1e2b6  8 bytes - ataport!IdeInitAtaPassThroughIrb+4b (+0x07)
    [ 8b 42 0c 41 89 80 fc 03:00 00 00 00 00 00 00 00 ]
    fffff88000e1e2b9-fffff88000e1e2c3  11 bytes - ataport!IdeInitAtaPassThroughIrb+55 (+0x0a)
    [ f6 42 02 02 74 08 41 83:00 00 00 00 00 00 00 00 ]
    fffff88000e1e2c6-fffff88000e1e2d2  13 bytes - ataport!IdeInitAtaPassThroughIrb+62 (+0x0d)
    [ 40 f6 42 02 04 74 09 41:00 00 00 00 00 00 00 00 ]
    fffff88000e1e2d5-fffff88000e1e2e0  12 bytes - ataport!IdeInitAtaPassThroughIrb+71 (+0x0f)
    [ 07 f6 42 02 08 74 08 41:00 00 00 00 00 00 00 00 ]
    fffff88000e1e2e3-fffff88000e1e2ee  12 bytes - ataport!IdeInitAtaPassThroughIrb+7f (+0x0e)
    [ 08 f6 42 02 20 75 08 41:00 00 00 00 00 00 00 00 ]
    fffff88000e1e2f1-fffff88000e1e2fc  12 bytes - ataport!IdeInitAtaPassThroughIrb+8d (+0x0e)
    [ 10 f6 42 02 01 74 0a 41:00 00 00 00 00 00 00 00 ]
    fffff88000e1e2ff-fffff88000e1e306  8 bytes - ataport!IdeInitAtaPassThroughIrb+9b (+0x0e)
    [ 01 eb 08 41 83 a0 f8 03:00 00 00 00 00 00 00 00 ]
    fffff88000e1e309-fffff88000e1e314  12 bytes - ataport!IdeInitAtaPassThroughIrb+a5 (+0x0a)
    [ fe f6 42 02 10 74 08 41:00 00 00 00 00 00 00 00 ]
    fffff88000e1e317-fffff88000e1e31c  6 bytes - ataport!IdeInitAtaPassThroughIrb+b3 (+0x0e)
    [ 02 41 83 88 f8 03:00 00 00 00 00 00 ]
    fffff88000e1e31f-fffff88000e1e321  3 bytes - ataport!IdeInitAtaPassThroughIrb+bb (+0x08)
    [ 20 ba 12:00 00 00 ]
    fffff88000e1e325-fffff88000e1e329  5 bytes - ataport!IdeInitAtaPassThroughIrb+c1 (+0x06)
    [ 41 c6 80 f1 03:00 00 00 00 00 ]
    fffff88000e1e32c-fffff88000e1e340  21 bytes - ataport!IdeInitAtaPassThroughIrb+c8 (+0x07)
    [ 12 8d 4a f2 41 b8 49 64:00 00 00 00 00 00 00 00 ]
    fffff88000e1e343-fffff88000e1e349  7 bytes - ataport!IdeInitAtaPassThroughIrb+df (+0x17)
    [ 48 3b c6 75 0a be 9a:00 00 00 00 00 00 00 ]
    fffff88000e1e34c-fffff88000e1e34e  3 bytes - ataport!IdeInitAtaPassThroughIrb+e8 (+0x09)
    [ c0 e9 b1:00 00 00 ]
    fffff88000e1e352-fffff88000e1e358  7 bytes - ataport!IdeInitAtaPassThroughIrb+ee (+0x06)
    [ 8b 47 28 89 83 30 04:00 00 00 00 00 00 00 ]
    fffff88000e1e35b-fffff88000e1e372  24 bytes - ataport!IdeInitAtaPassThroughIrb+f7 (+0x09)
    [ 0f b7 47 2c 66 89 83 34:00 00 00 00 00 70 66 26 ]
    fffff88000e1e374-fffff88000e1e380  13 bytes - ataport!IdeInitAtaPassThroughIrb+110 (+0x19)
    [ 00 4f 80 bd 58 04 00 00:e8 f2 e6 ff 84 05 6b 0a ]
    fffff88000e1e383-fffff88000e1e3a2  32 bytes - ataport!IdeInitAtaPassThroughIrb+11f (+0x0f)
    [ 75 04 0c b0 eb 02 0c a0:00 e7 f0 e3 ff 90 05 6b ]
    fffff88000e1e3a4-fffff88000e1e3b2  15 bytes - ataport!IdeInitAtaPassThroughIrb+140 (+0x21)
    [ 00 8a 47 26 88 83 3e 04:ea f2 e7 ff ac 05 6b 0a ]
    fffff88000e1e3b4-fffff88000e1e3c0  13 bytes - ataport!IdeInitAtaPassThroughIrb+150 (+0x10)
    [ 00 b8 c4 00 00 00 3b c8:e9 f1 e6 ff b8 05 6b 0a ]
    fffff88000e1e3c4-fffff88000e1e3f0  45 bytes - ataport!IdeInitAtaPassThroughIrb+160 (+0x10)
    [ 83 f9 35 7f 51 83 f9 34:ea f2 e7 ff c4 05 6b 0a ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3790 errors : !ataport (fffff88000e1e000-fffff88000e1efff)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_4096

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

Followup: memory_corruption
---------


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\AppData\Local\Temp\Temp1_081210-20092-01.zip\081310-24148-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: 
Windows 7 Kernel Version 7600 UP Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a64000 PsLoadedModuleList = 0xfffff800`02ca1e50
Debug session time: Fri Aug 13 12:26:08.670 2010 (GMT-4)
System Uptime: 0 days 0:20:22.667
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {fffff6fc00017608, ffffffffc0000185, 5b52c860, fffff80002ec1ed0}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
GetPointerFromAddress: unable to read from fffff80002d0c220
Probably caused by : memory_corruption

Followup: memory_corruption
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc00017608, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000185, error status (normally i/o status code)
Arg3: 000000005b52c860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff80002ec1ed0, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc0000185 - The I/O device reported an I/O error.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c0000185

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88006490a70 -- (.trap 0xfffff88006490a70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800237fca0 rbx=0000000000000000 rcx=fffffa800410c330
rdx=fffffa800237fa50 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ec1ed0 rsp=fffff88006490c08 rbp=0000000000000000
 r8=fffff80002c79610  r9=0000000000000000 r10=0000000000000001
r11=fffffa80040a1668 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
nt!PiProcessReenumeration:
fffff800`02ec1ed0 6f              outs    dx,dword ptr [rsi] ds:00000000`00000000=????????
Resetting default scope

LOCK_ADDRESS:  fffff80002cd8400 -- (!locks fffff80002cd8400)

Resource @ nt!PiEngineLock (0xfffff80002cd8400)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
    Lock address  : 0xfffff80002cd8400
    Thread Count  : 0
    Thread address: 0x0000000000000000
    Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff80002b490a8 to fffff80002ad4600

STACK_TEXT:  
fffff880`06490758 fffff800`02b490a8 : 00000000`0000007a fffff6fc`00017608 ffffffff`c0000185 00000000`5b52c860 : nt!KeBugCheckEx
fffff880`06490760 fffff800`02ac642b : fffffa80`01a338b0 fffff880`064908d0 fffff800`02c61440 74e077b2`52919c50 : nt! ?? ::FNODOBFM::`string'+0x34c4e
fffff880`06490840 fffff800`02aef4a4 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff800`02abf2d7 : nt!MiIssueHardFault+0x28b
fffff880`06490910 fffff800`02ad26ee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x11c4
fffff880`06490a70 fffff800`02ec1ed0 : fffff800`02bd62f7 00000000`00000000 fffff800`02c795f8 00000000`00000001 : nt!KiPageFault+0x16e
fffff880`06490c08 fffff800`02bd62f7 : 00000000`00000000 fffff800`02c795f8 00000000`00000001 00000000`00000000 : nt!PiProcessReenumeration
fffff880`06490c10 fffff800`02ae1861 : fffff800`02bd5fd0 fffff800`02eeaa01 fffffa80`040a1300 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
fffff880`06490cb0 fffff800`02d79a86 : 00000000`2fcbafdd fffffa80`040a1360 00000000`00000080 fffffa80`015449e0 : nt!ExpWorkerThread+0x111
fffff880`06490d40 fffff800`02ab2b06 : fffff800`02c4ee80 fffffa80`040a1360 fffffa80`04076220 fffff880`01213534 : nt!PspSystemThreadStartup+0x5a
fffff880`06490d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff80002ec1000-fffff80002ec1001  2 bytes - nt!PiProcessNewDeviceNode+940
    [ 24 88:00 00 ]
    fffff80002ec1005-fffff80002ec1013  15 bytes - nt!PiProcessNewDeviceNode+945 (+0x05)
    [ 8b d7 48 8b cb e8 71 56:00 00 00 00 00 00 00 00 ]
    fffff80002ec1015-fffff80002ec101d  9 bytes - nt!PiProcessNewDeviceNode+955 (+0x10)
    [ 00 00 4c 8d 44 24 78 ba:f9 ff ff 01 00 00 00 00 ]
    fffff80002ec1021-fffff80002ec1084  100 bytes - nt!PiProcessNewDeviceNode+961 (+0x0c)
    [ 48 8b cb e8 57 56 fd ff:00 00 00 00 00 00 00 00 ]
    fffff80002ec1088-fffff80002ec1096  15 bytes - nt!PiProcessNewDeviceNode+9c8 (+0x67)
    [ 4c 8d 4c 24 40 48 8b cb:a0 b8 c5 c0 00 f9 ff ff ]
    fffff80002ec109a-fffff80002ec10a2  9 bytes - nt!PiProcessNewDeviceNode+9da (+0x12)
    [ 3b c6 7d 30 f6 84 24 44:00 00 00 00 00 00 00 00 ]
    fffff80002ec10a5-fffff80002ec10ad  9 bytes - nt!PiProcessNewDeviceNode+9e5 (+0x0b)
    [ 20 75 0b 0f ba a4 24 44:00 00 00 00 00 00 00 00 ]
    fffff80002ec10b0-fffff80002ec10bd  14 bytes - nt!PiProcessNewDeviceNode+9f0 (+0x0b)
    [ 12 73 05 44 8a c6 eb 0f:00 00 00 00 00 00 00 00 ]
    fffff80002ec10c0-fffff80002ec10dc  29 bytes - nt!PiProcessNewDeviceNode+a00 (+0x10)
    [ 41 c0 e8 04 44 22 c5 48:00 00 00 00 00 00 00 00 ]
    fffff80002ec10df-fffff80002ec1110  50 bytes - nt!PiProcessNewDeviceNode+a1f (+0x1f)
    [ 48 8b d6 48 0f 45 54 24:00 00 00 00 00 00 00 00 ]
    fffff80002ec1113-fffff80002ec112e  28 bytes - nt!PiProcessNewDeviceNode+a53 (+0x34)
    [ 48 89 7c 24 60 48 3b fe:00 00 00 00 00 00 00 00 ]
    fffff80002ec1131-fffff80002ec1143  19 bytes - nt!PiProcessNewDeviceNode+a71 (+0x1e)
    [ 48 8d 4c 24 68 e8 f1 bc:00 00 00 00 00 00 00 00 ]
    fffff80002ec1146-fffff80002ec1148  3 bytes - nt!PiProcessNewDeviceNode+a86 (+0x15)
    [ 41 b8 10:00 00 00 ]
    fffff80002ec114c-fffff80002ec1159  14 bytes - nt!PiProcessNewDeviceNode+a8c (+0x06)
    [ 33 d2 e8 3d 56 c1 ff 65:00 00 00 00 00 00 00 00 ]
    fffff80002ec115c-fffff80002ec1164  9 bytes - nt!PiProcessNewDeviceNode+a9c (+0x10)
    [ 48 83 c9 ff 66 01 88 c4:00 00 00 00 00 00 00 00 ]
    fffff80002ec1167-fffff80002ec117c  22 bytes - nt!PiProcessNewDeviceNode+aa7 (+0x0b)
    [ 48 8d 3d f2 70 e1 ff 40:00 00 00 00 00 00 00 00 ]
    fffff80002ec117f-fffff80002ec1183  5 bytes - nt!PiProcessNewDeviceNode+abf (+0x18)
    [ 20 8b 83 40 01:00 00 00 00 00 ]
    fffff80002ec1186 - nt!PiProcessNewDeviceNode+ac6 (+0x07)
    [ 25:00 ]
    fffff80002ec1188 - nt!PiProcessNewDeviceNode+ac8 (+0x02)
    [ 20:00 ]
    fffff80002ec118b-fffff80002ec1190  6 bytes - nt!PiProcessNewDeviceNode+acb (+0x03)
    [ 74 09 83 bb 48 01:00 00 00 00 00 00 ]
    fffff80002ec1193-fffff80002ec119d  11 bytes - nt!PiProcessNewDeviceNode+ad3 (+0x08)
    [ 09 74 60 3b c6 74 16 83:00 00 00 00 00 00 00 00 ]
    fffff80002ec11a0-fffff80002ec11aa  11 bytes - nt!PiProcessNewDeviceNode+ae0 (+0x0d)
    [ 03 74 53 3b c6 74 09 83:00 00 00 00 00 00 00 00 ]
    fffff80002ec11ad-fffff80002ec11c5  25 bytes - nt!PiProcessNewDeviceNode+aed (+0x0d)
    [ 13 74 46 48 8b 54 24 50:00 00 00 b0 31 97 c0 00 ]
    fffff80002ec11c9-fffff80002ec11cd  5 bytes - nt!PiProcessNewDeviceNode+b09 (+0x1c)
    [ 48 8d 8c 24 98:00 00 00 00 00 ]
    fffff80002ec11d1-fffff80002ec11df  15 bytes - nt!PiProcessNewDeviceNode+b11 (+0x08)
    [ 66 89 44 24 68 48 8d 05:00 00 00 00 00 00 00 00 ]
    fffff80002ec11e1 - nt!PiProcessNewDeviceNode+b21 (+0x10)
    [ 0f:00 ]
    fffff80002ec11e3-fffff80002ec1204  34 bytes - nt!PiProcessNewDeviceNode+b23 (+0x02)
    [ 48 89 74 24 28 89 74 24:00 00 00 00 00 00 00 00 ]
    fffff80002ec1207-fffff80002ec120b  5 bytes - nt!PiProcessNewDeviceNode+b47 (+0x24)
    [ 66 01 aa c4 01:00 00 00 00 00 ]
    fffff80002ec120e-fffff80002ec1215  8 bytes - nt!PiProcessNewDeviceNode+b4e (+0x07)
    [ 75 17 48 8d 42 50 48 39:00 00 00 00 00 00 00 00 ]
    fffff80002ec1217-fffff80002ec121d  7 bytes - nt!PiProcessNewDeviceNode+b57 (+0x09)
    [ 74 0e 66 39 b2 c6 01:00 00 00 00 00 00 00 ]
    fffff80002ec1220-fffff80002ec122b  12 bytes - nt!PiProcessNewDeviceNode+b60 (+0x09)
    [ 75 05 e8 49 69 bc ff 48:00 00 00 00 00 00 00 00 ]
    fffff80002ec122f-fffff80002ec1242  20 bytes - nt!PiProcessNewDeviceNode+b6f (+0x0f)
    [ 48 8b cb e8 a9 be fd ff:00 00 00 00 00 00 00 00 ]
    fffff80002ec1244-fffff80002ec1276  51 bytes - nt!PiProcessNewDeviceNode+b84 (+0x15)
    [ 66 01 82 c4 01 00 00 40:06 06 06 ff 06 06 06 ff ]
    fffff80002ec1278-fffff80002ec1388  273 bytes - nt!PiProcessNewDeviceNode+bb8 (+0x34)
    [ 00 00 41 b9 07 00 00 00:31 31 31 ff 06 06 06 ff ]
    fffff80002ec138a-fffff80002ec13ca  65 bytes - nt!PiProcessNewDeviceNode+cca (+0x112)
    [ 01 00 00 33 c0 66 f2 af:20 ff 85 85 85 ff ec ec ]
    fffff80002ec13cc-fffff80002ec13da  15 bytes - nt!PiProcessNewDeviceNode+d0c (+0x42)
    [ 48 89 6c 24 60 eb 02 33:d2 d2 d2 ff f9 f9 f9 ff ]
    fffff80002ec13dc-fffff80002ec1439  94 bytes - nt!PiProcessNewDeviceNode+d1c (+0x10)
    [ e8 4f ee c1 ff 65 48 8b:8d 8d 8d ff 1f 1f 1f ff ]
    fffff80002ec143b-fffff80002ec1476  60 bytes - nt!PiProcessNewDeviceNode+d7b (+0x5f)
    [ 8d 8c 24 28 01 00 00 48:ff 4b 4b 4b ff 44 44 44 ]
    fffff80002ec1478-fffff80002ec14c6  79 bytes - nt!PiProcessNewDeviceNode+db8 (+0x3d)
    [ 41 b9 01 00 00 00 45 33:5e 5e 5e ff 5e 5e 5e ff ]
    fffff80002ec14c8-fffff80002ec15d6  271 bytes - nt!PiProcessNewDeviceNode+e08 (+0x50)
    [ b9 0e 00 00 00 8b 83 40:fd fd fd ff e7 e7 e7 ff ]
    fffff80002ec15d8-fffff80002ec1606  47 bytes - nt!PiProcessNewDeviceNode+f18 (+0x110)
    [ e8 53 ec c1 ff 65 48 8b:88 88 88 ff 75 75 75 ff ]
    fffff80002ec1608-fffff80002ec160e  7 bytes - nt!PiProcessNewDeviceNode+f48 (+0x30)
    [ 48 8b cb e8 80 4e fc:b6 b6 b6 ff b2 b2 b2 ]
    fffff80002ec1610-fffff80002ec1633  36 bytes - nt!PiProcessNewDeviceNode+f50 (+0x08)
    [ 4c 8d 43 38 48 8d 4b 28:aa aa aa ff 9e 9e 9e ff ]
    fffff80002ec1636 - nt!PiProcessNewDeviceNode+f76 (+0x26)
    [ 13:00 ]
    fffff80002ec163a-fffff80002ec1662  41 bytes - nt!PiProcessNewDeviceNode+f7a (+0x04)
    [ 49 8b cc e8 ce c8 d0 ff:00 00 00 00 00 00 64 00 ]
    fffff80002ec1666-fffff80002ec166a  5 bytes - nt!PiProcessNewDeviceNode+fa6 (+0x2c)
    [ 48 8b 8c 24 88:00 00 00 00 00 ]
    fffff80002ec166e-fffff80002ec16cb  94 bytes - nt!PiProcessNewDeviceNode+fae (+0x08)
    [ 49 3b cd 74 07 33 d2 e8:00 00 00 00 00 00 00 00 ]
    fffff80002ec16cf-fffff80002ec16ee  32 bytes - nt!PiProcessNewDeviceNode+100f (+0x61)
    [ 49 3b cd 74 07 33 d2 e8:00 00 00 00 00 00 00 00 ]
    fffff80002ec16f2-fffff80002ec1706  21 bytes - nt!PiProcessNewDeviceNode+1032 (+0x23)
    [ 49 3b cd 74 07 33 d2 e8:00 00 00 00 00 00 00 00 ]
    fffff80002ec1709-fffff80002ec1716  14 bytes - nt!PiProcessNewDeviceNode+1049 (+0x17)
    [ 48 33 cc e8 bf a6 c0 ff:00 00 00 00 00 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3846 errors : !nt (fffff80002ec1000-fffff80002ec1fff)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_4096

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

Followup: memory_corruption
---------


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\AppData\Local\Temp\Temp1_081210-20092-01.zip\081310-18938-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: 
Windows 7 Kernel Version 7600 UP Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a0c000 PsLoadedModuleList = 0xfffff800`02c49e50
Debug session time: Fri Aug 13 11:55:03.961 2010 (GMT-4)
System Uptime: 0 days 0:13:50.959
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {fffff6fc40009050, ffffffffc0000185, 30842860, fffff8800120a1c0}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
GetPointerFromAddress: unable to read from fffff80002cb4220
Probably caused by : memory_corruption

Followup: memory_corruption
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc40009050, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc0000185, error status (normally i/o status code)
Arg3: 0000000030842860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff8800120a1c0, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc0000185 - The I/O device reported an I/O error.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c0000185

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88006ed0260 -- (.trap 0xfffff88006ed0260)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88006ed0470 rbx=0000000000000000 rcx=fffff88006ed0870
rdx=fffff88006ed04d8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800120a1c0 rsp=fffff88006ed03f8 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000000001 r10=fffff8800120d030
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
pcw!PcwAddInstance:
fffff880`0120a1c0 0000            add     byte ptr [rax],al ds:fffff880`06ed0470=f0
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002af10a8 to fffff80002a7c600

STACK_TEXT:  
fffff880`06ecff48 fffff800`02af10a8 : 00000000`0000007a fffff6fc`40009050 ffffffff`c0000185 00000000`30842860 : nt!KeBugCheckEx
fffff880`06ecff50 fffff800`02a6e42b : fffffa80`025ac9b0 fffff880`06ed00c0 fffff800`02c09440 fffffa80`025ac9b0 : nt! ?? ::FNODOBFM::`string'+0x34c4e
fffff880`06ed0030 fffff800`02a974a4 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff 30fffa80`00dcd640 : nt!MiIssueHardFault+0x28b
fffff880`06ed0100 fffff800`02a7a6ee : 00000000`00000008 00000000`00000001 00000002`a1cc9000 00000000`00000000 : nt!MmAccessFault+0x11c4
fffff880`06ed0260 fffff880`0120a1c0 : fffff800`02d0d6e3 fffff880`06ed04a8 00000000`00000001 fffff880`06ed0570 : nt!KiPageFault+0x16e
fffff880`06ed03f8 fffff800`02d0d6e3 : fffff880`06ed04a8 00000000`00000001 fffff880`06ed0570 fffff800`02a425e8 : pcw!PcwAddInstance
fffff880`06ed0400 fffff800`02d0d732 : 00000000`00000001 00000000`00000000 00000000`00000001 00000000`00000000 : nt!PcwAddInstance+0x47
fffff880`06ed0440 fffff800`02d0d48b : 00000000`00000001 00000000`00000000 fffff800`02d8af00 00000000`00000000 : nt!PcwpAddProcessorCounterSet+0x26
fffff880`06ed0490 fffff880`012061c6 : fffff8a0`00276730 fffff8a0`0016f308 fffff8a0`002766e0 00000000`00000000 : nt!ExProcessorCounterSetCallback+0x563
fffff880`06ed0730 fffff880`01206534 : fffff880`06ed0870 00000000`00000000 fffff8a0`02a157b0 fffff880`06ed0a38 : pcw!PcwpCollectNotification+0xca
fffff880`06ed07b0 fffff880`012067f0 : 00000000`00000000 00000000`02f6f3c0 00000000`00000400 00000000`00000000 : pcw!PcwpCollectQueryItem+0x8c
fffff880`06ed0840 fffff880`01207605 : fffff880`06ed0a38 fffff880`06ed09d0 fffff880`06ed0a88 fffff800`02bf6e80 : pcw!PcwpCollectQuery+0xf8
fffff880`06ed0960 fffff880`01207f90 : fffffa80`03a12720 fffff880`01207f3b fffffa80`038ab9c0 fffff8a0`0240dea0 : pcw!PcwpIoctlCollect+0x3d
fffff880`06ed0990 fffff800`02d98423 : 00000000`02f6f2e8 fffff880`01207db0 00000000`00000003 fffffa80`0314e401 : pcw!PcwpFastIoDeviceControl+0x1e0
fffff880`06ed0a10 fffff800`02d98f16 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x373
fffff880`06ed0b40 fffff800`02a7b853 : fffffa80`0370c060 00000000`02f6f7e8 fffff880`06ed0bc8 00000000`0000ffff : nt!NtDeviceIoControlFile+0x56
fffff880`06ed0bb0 00000000`7767fdca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02f6f278 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7767fdca


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !pcw
    fffff8800120a000-fffff8800120a003  4 bytes - pcw!PcwCreateInstance+88
    [ c0 e9 0d 01:00 00 00 00 ]
    fffff8800120a006-fffff8800120a009  4 bytes - pcw!PcwCreateInstance+8e (+0x06)
    [ 8d 14 f5 40:00 00 00 00 ]
    fffff8800120a00d-fffff8800120a00e  2 bytes - pcw!PcwCreateInstance+95 (+0x07)
    [ b9 01:00 00 ]
    fffff8800120a012-fffff8800120a027  22 bytes - pcw!PcwCreateInstance+9a (+0x05)
    [ 41 b8 50 63 77 49 ff 15:00 00 00 00 00 00 00 00 ]
    fffff8800120a02a-fffff8800120a02c  3 bytes - pcw!PcwCreateInstance+b2 (+0x18)
    [ c0 e9 e3:00 00 00 ]
    fffff8800120a030-fffff8800120a051  34 bytes - pcw!PcwCreateInstance+b8 (+0x06)
    [ 4c 8d 40 18 49 8b d6 33:00 00 00 00 00 00 00 00 ]
    fffff8800120a055-fffff8800120a058  4 bytes - pcw!PcwCreateInstance+dd (+0x25)
    [ c7 47 10 01:00 00 00 00 ]
    fffff8800120a05c-fffff8800120a067  12 bytes - pcw!PcwCreateInstance+e4 (+0x07)
    [ 48 89 6f 28 48 8b 45 20:00 00 00 00 00 00 00 00 ]
    fffff8800120a069-fffff8800120a097  47 bytes - pcw!PcwCreateInstance+f1 (+0x0d)
    [ 48 89 47 30 f0 83 40 10:00 00 00 00 00 00 00 00 ]
    fffff8800120a09b-fffff8800120a0a7  13 bytes - pcw!PcwCreateInstance+123 (+0x32)
    [ f0 0f c1 41 14 48 8b 5f:00 00 00 00 00 00 00 00 ]
    fffff8800120a0ab-fffff8800120a0bb  17 bytes - pcw!PcwCreateInstance+133 (+0x10)
    [ 48 03 de 89 47 14 ff 15:00 00 00 00 00 00 00 00 ]
    fffff8800120a0bd-fffff8800120a0cf  19 bytes - pcw!PcwCreateInstance+145 (+0x12)
    [ 73 09 48 8b cb ff 15 78:00 00 00 00 00 00 00 00 ]
    fffff8800120a0d3-fffff8800120a10b  57 bytes - pcw!PcwCreateInstance+15b (+0x16)
    [ 48 8b 41 08 48 89 0f 48:00 00 00 00 00 00 00 00 ]
    fffff8800120a10d-fffff8800120a118  12 bytes - pcw!PcwCreateInstance+195 (+0x3a)
    [ 33 db 85 db 79 78 83 3d:00 00 00 00 00 00 00 00 ]
    fffff8800120a11a-fffff8800120a11d  4 bytes - pcw!PcwCreateInstance+1a2 (+0x0d)
    [ 74 6f 48 ba:00 00 00 00 ]
    fffff8800120a11f - pcw!PcwCreateInstance+1a7 (+0x05)
    [ 08:00 ]
    fffff8800120a125-fffff8800120a188  100 bytes - pcw!PcwCreateInstance+1ad (+0x06)
    [ 80 48 85 15 cb a1 ff ff:00 00 00 00 00 00 00 00 ]
    fffff8800120a18b-fffff8800120a1f0  102 bytes - pcw!PcwCreateInstance+213 (+0x66)
    [ 48 8b 6c 24 68 48 8b 74:00 00 00 00 00 00 00 00 ]
    fffff8800120a1f4-fffff8800120a200  13 bytes - pcw!PcwAddInstance+34 (+0x69)
    [ 8b 0f 85 c9 74 1c 83 f9:00 00 00 00 00 00 00 00 ]
    fffff8800120a203-fffff8800120a233  49 bytes - pcw!PcwAddInstance+43 (+0x0f)
    [ c0 eb 63 44 8b c3 48 8b:00 00 00 00 00 00 00 00 ]
    fffff8800120a235-fffff8800120a239  5 bytes - pcw!PcwAddInstance+75 (+0x32)
    [ 75 06 83 7f 3c:00 00 00 00 00 ]
    fffff8800120a23b-fffff8800120a252  24 bytes - pcw!PcwAddInstance+7b (+0x06)
    [ 77 b0 48 8b 44 24 70 48:00 00 00 00 00 00 00 00 ]
    fffff8800120a254-fffff8800120a26e  27 bytes - pcw!PcwAddInstance+94 (+0x19)
    [ 4c 8b c6 48 8b cf 89 6c:00 00 00 00 00 00 00 00 ]
    fffff8800120a270-fffff8800120a273  4 bytes - pcw!PcwAddInstance+b0 (+0x1c)
    [ 74 70 48 ba:00 00 00 00 ]
    fffff8800120a275 - pcw!PcwAddInstance+b5 (+0x05)
    [ 08:00 ]
    fffff8800120a27b-fffff8800120a2de  100 bytes - pcw!PcwAddInstance+bb (+0x06)
    [ 80 48 85 15 75 a0 ff ff:00 00 00 00 00 00 00 00 ]
    fffff8800120a2e2-fffff8800120a30a  41 bytes - pcw!PcwAddInstance+122 (+0x67)
    [ 48 8b 6c 24 58 48 8b 74:00 00 00 00 00 00 00 00 ]
    fffff8800120a30e-fffff8800120a31d  16 bytes - pcw!Template_qhzr1hzr3+e (+0x2c)
    [ 45 33 c0 49 8d 43 20 49:00 00 00 00 00 00 00 00 ]
    fffff8800120a321-fffff8800120a339  25 bytes - pcw!Template_qhzr1hzr3+21 (+0x13)
    [ 45 89 43 b4 41 8d 48 02:00 00 00 00 00 00 00 00 ]
    fffff8800120a33d-fffff8800120a364  40 bytes - pcw!Template_qhzr1hzr3+3d (+0x1c)
    [ 89 4c 24 48 49 89 43 c8:00 00 00 00 00 00 00 00 ]
    fffff8800120a368-fffff8800120a39b  52 bytes - pcw!Template_qhzr1hzr3+68 (+0x2b)
    [ 89 4c 24 68 48 8b 0d 6d:00 00 00 00 00 00 00 00 ]
    fffff8800120a39f-fffff8800120a3d0  50 bytes - pcw!Template_qhzr1hzr3+9f (+0x37)
    [ c3 cc cc cc cc cc cc cc:00 00 00 00 00 00 00 00 ]
    fffff8800120a3d4-fffff8800120a3dc  9 bytes - pcw!Template_qhzr1+2c (+0x35)
    [ 49 89 43 d8 48 8b 84 24:00 00 00 00 00 00 00 00 ]
    fffff8800120a3e0-fffff8800120a3e8  9 bytes - pcw!Template_qhzr1+38 (+0x0c)
    [ 89 4c 24 4c c7 44 24 48:00 00 00 00 00 00 00 00 ]
    fffff8800120a3ec-fffff8800120a44b  96 bytes - pcw!Template_qhzr1+44 (+0x0c)
    [ 49 89 43 e8 41 0f b7 43:00 00 00 00 00 00 00 00 ]
    fffff8800120a44e-fffff8800120a4c6  121 bytes - pcw!PcwpInitSid+26 (+0x62)
    [ c0 eb 46 44 8a 44 24 58:00 00 00 00 00 00 00 00 ]
    fffff8800120a4ca-fffff8800120a50a  65 bytes - pcw!PcwpCreateAllowedDacl+22 (+0x7c)
    [ 48 8d 68 18 85 d2 74 34:00 00 00 00 00 00 00 00 ]
    fffff8800120a50c-fffff8800120a50f  4 bytes - pcw!PcwpCreateAllowedDacl+64 (+0x42)
    [ 8b d7 b9 01:00 00 00 00 ]
    fffff8800120a513-fffff8800120a528  22 bytes - pcw!PcwpCreateAllowedDacl+6b (+0x07)
    [ 41 b8 50 63 77 54 ff 15:00 00 00 00 00 00 00 00 ]
    fffff8800120a52b-fffff8800120a52f  5 bytes - pcw!PcwpCreateAllowedDacl+83 (+0x18)
    [ c0 eb 6c b8 95:00 00 00 00 00 ]
    fffff8800120a532-fffff8800120a537  6 bytes - pcw!PcwpCreateAllowedDacl+8a (+0x07)
    [ c0 eb 65 41 b8 02:00 00 00 00 00 00 ]
    fffff8800120a53b-fffff8800120a575  59 bytes - pcw!PcwpCreateAllowedDacl+93 (+0x09)
    [ 8b d7 48 8b c8 ff 15 5a:00 00 00 00 00 00 00 00 ]
    fffff8800120a579-fffff8800120a57b  3 bytes - pcw!PcwpCreateAllowedDacl+d1 (+0x3e)
    [ 44 8b 45:00 00 00 ]
    fffff8800120a57d-fffff8800120a5cc  80 bytes - pcw!PcwpCreateAllowedDacl+d5 (+0x04)
    [ 48 8b cb ff 15 22 7c ff:00 00 00 00 00 00 00 00 ]
    fffff8800120a5cf-fffff8800120a5de  16 bytes - pcw!PcwpCreateDefaultSecurityDescriptor+13 (+0x52)
    [ 48 8b 05 2a 9b ff ff 48:00 00 00 00 00 00 00 00 ]
    fffff8800120a5e1-fffff8800120a5e2  2 bytes - pcw!PcwpCreateDefaultSecurityDescriptor+25 (+0x12)
    [ bb 20:00 00 ]
    fffff8800120a5e6-fffff8800120a602  29 bytes - pcw!PcwpCreateDefaultSecurityDescriptor+2a (+0x05)
    [ 48 8b e9 4d 8d 83 50 ff:00 00 00 00 00 00 00 00 ]
    fffff8800120a605-fffff8800120a608  4 bytes - pcw!PcwpCreateDefaultSecurityDescriptor+49 (+0x1f)
    [ c6 84 24 c8:00 00 00 00 ]
    fffff8800120a60d-fffff8800120a610  4 bytes - pcw!PcwpCreateDefaultSecurityDescriptor+51 (+0x08)
    [ c6 84 24 c9:00 00 00 00 ]
    fffff8800120a615-fffff8800120a618  4 bytes - pcw!PcwpCreateDefaultSecurityDescriptor+59 (+0x08)
    [ c6 84 24 ca:00 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3689 errors : !pcw (fffff8800120a000-fffff8800120afff)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_4096

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

Followup: memory_corruption
---------

Let's begin by testing your RAM. Download a copy of Memtest86+ - Advanced Memory Diagnostic Tool and burn the ISO to a CD using http://isorecorder.alexfeinman.com/Windows 7. Boot from the CD, and leave it running for at least 7 passes.

I found the following out of date drivers loaded on your system. In general, Windows 7 does not like older drivers, They can and do cause memory corruption and crashes.

Quote:

adfs.SYS Thu Jun 26 16:52:37 2008
AtiPcie.sys Tue May 05 11:00:22 2009
DKbFltr.sys Wed Mar 25 23:15:42 2009
Mpfp.sys Thu Apr 09 14:22:13 2009
mwlPSDFilter.sys Tue Jun 02 06:07:30 2009
mwlPSDNServ.sys Tue Jun 02 06:07:39 2009
mwlPSDVDisk.sys Tue Jun 02 06:15:29 2009
NTIDrvr.sys Tue Mar 24 23:09:39 2009
pnarp.sys Tue Oct 28 01:57:00 2008
SynTP.sys Thu Jun 18 22:33:58 2009
UBHelper.sys Mon Apr 27 04:48:19 2009
usbfilter.sys Fri Apr 03 07:39:51 2009

Because one of the dumps specifically mentioned a device filter, see if you can update these two drivers: mwlPSDFilter.sys and usbfilter.sys. Also try to update the two drivers dated 2008. I suggest going to your laptop manufacturer's website and download and install the latest chipset drivers for your laptop.

If you need help finding these drivers, please post.

Capt.Jack Sparrow · 13 Aug 2010

Hello,

Also try stress test: Free Software - GIMPS

Quote:

Prime95 Setup:
- extract the contents of the zip file to a location of your choice
- double click on the executable file
- select "Just stress testing"
- select the "Blend" test. If you've already run MemTest overnight you may want to run the "Small FFTs" test instead.
- "Number of torture test threads to run" should equal the number of CPU's times 2 (if you're using hyperthreading).
The easiest way to figure this out is to go to Task Manager...Performance tab - and see the number of boxes under CPU Usage History
Then run the test for 6 to 24 hours - or until you get errors (whichever comes first).
The Test selection box and the stress.txt file describes what components that the program stresses.

Also Enable Driver Verifier: Using Driver Verifier to identify issues with Drivers

- Captain

Windows 7: Laptop is freezing all of a sudden

Laptop is freezing all of a sudden problems?