Multiple BSODs on new PC

croc83 · 29 Nov 2010

Hi,

Desperately need some help with this PC, I've tried re-installing Win 7 but still getting BSODs several times a day. I've attached the mini dumps file. Any help would be much appreciated.

Here is my system information:

OS Name Microsoft Windows 7 Home Premium
Version 6.1.7600 Build 7600
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name ALFA1
System Manufacturer Packard Bell
System Model ixtreme M3720
System Type x64-based PC
Processor Intel(R) Core(TM)2 Quad CPU Q8300 @ 2.50GHz, 2500 Mhz, 4 Core(s), 4 Logical Processor(s)
BIOS Version/Date AMI P01-A3, 21/07/2009
SMBIOS Version 2.5
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume2
Locale United Kingdom
Hardware Abstraction Layer Version = "6.1.7600.16385"
User Name ALFA1\Marg
Time Zone GMT Standard Time
Installed Physical Memory (RAM) 4.00 GB
Total Physical Memory 3.75 GB
Available Physical Memory 2.38 GB
Total Virtual Memory 7.50 GB
Available Virtual Memory 6.12 GB
Page File Space 3.75 GB
Page File C:\pagefile.sys

Thanks

CarlTR6 · 29 Nov 2010

Hi, croc; welcome to the forum. Sorry you are having problems. I looked at your four most recent dumps. They indicate hardware/hardware related (drivers) problems and memory corruption. Unfortunately, the dumps do not point to a specific cause. That means you have to troubleshoot. Troubleshooting is a process of elimination.

To begin, I recommend that you uninstall Norton/Symantec with this removal tool: Tool. Norton is known to cause BSOD's on some Win 7 systems. Norton was involved in at least two of your crashes. This does not necessarily mean Norton caused the crashes. To replace Norton, download and install Microsoft Security Essentials and make sure Windows Firewall is turned on.

You should update a couple of out of date drivers. Outdated drivers can and do cause BSOD's.

nvlddmkm.sys Thu May 14 16:48:07 2009 - nvlddmkm.sys Thu May 14 16:48:07 2009 - nVidia Video drivers Drivers - Download NVIDIA Drivers

Rt64win7.sys Thu Feb 26 04:04:13 2009 - Realtek 8101E/8168/8169 Network Driver Interface Specification 6.20 64-bit Driver. Latest PCIe GBE (GigaBit Ethernet) drivers here: Realtek

How to find drivers -

- I have listed links to most of the drivers in the code box above. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Uninstall Norton, install MSE, and update those two drivers. Reboot and see how your system runs. Post back and let us know. If you get another BSOD after you have done all of the above, upload it and we will go from there.

croc83 · 29 Nov 2010

Hi Carl,

Thanks for helping me out with this. The thing with Norton is I've also got it installed on another identical pc and that one is fine. The only things different with this one is I have a DYMO labelwriter and a Canon MP560 printer plugged into it. I suspected the problem might be with the wireless adapter, but I don't use wireless so I disabled it on device manager. As you can see I'm no expert when it comes to computers so your help is most appreciated.

Thanks

croc83 · 29 Nov 2010

One other thing, I've also installed PCI cards to hook up some old dot matrix printers to both the computers, was wondering if maybe I could have damaged something when doing this?

CarlTR6 · 29 Nov 2010

I don't see any indication of hardware damage. One of your error codes indicated a possible hard drive problem. I suggest you run Check Disk. Run CHKDSK /R /F from an elevated (Run as adminstrator) Command Prompt. Please do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Windows 7) (winlogon for XP). [/quote]

Copy/paste the results into your next post.

I forgot to post the dumps in my post above Here they are:

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a09000 PsLoadedModuleList = 0xfffff800`02c46e50
Debug session time: Mon Nov 29 08:33:31.053 2010 (GMT-5)
System Uptime: 0 days 0:12:32.926
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002a80a56, fffff88006e18f40, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiCommitThreadWait+296 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002a80a56, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88006e18f40, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KiCommitThreadWait+296
fffff800`02a80a56 f0480fba2b00    lock bts qword ptr [rbx],0

CONTEXT:  fffff88006e18f40 -- (.cxr 0xfffff88006e18f40)
rax=000000000000ef0e rbx=c78b4d0000017024 rcx=00000000000000a0
rdx=0000000000000000 rsi=fffffa80049b5120 rdi=fffffa8006aa4970
rip=fffff80002a80a56 rsp=fffff88006e19910 rbp=0000000000000000
 r8=fffff80002a09000  r9=0000000000000000 r10=fffffffffffffffd
r11=fffffa80065374e0 r12=0000000000000000 r13=0000000000000000
r14=c78b4d0000015a24 r15=00000000000000a0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!KiCommitThreadWait+0x296:
fffff800`02a80a56 f0480fba2b00    lock bts qword ptr [rbx],0 ds:002b:c78b4d00`00017024=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  ccsvchst.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002a80a56

STACK_TEXT:  
fffff880`06e19910 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x296


FOLLOWUP_IP: 
nt!KiCommitThreadWait+296
fffff800`02a80a56 f0480fba2b00    lock bts qword ptr [rbx],0

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!KiCommitThreadWait+296

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff88006e18f40 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!KiCommitThreadWait+296

BUCKET_ID:  X64_0x3B_nt!KiCommitThreadWait+296

Followup: MachineOwner
---------

1: kd> lmtsmn
start             end                 module name
fffff880`00eb5000 fffff880`00f0c000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c00000 fffff880`02c8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04572000 fffff880`04588000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00df0000 fffff880`00dfb000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07298000 fffff880`072a3000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00db2000 fffff880`00dbb000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dbb000 fffff880`00de5000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`017f8000 fffff880`017ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0423d000 fffff880`0432a000   BHDrvx64 BHDrvx64.sys Wed Oct 27 21:57:13 2010 (4CC8D879)
fffff880`04115000 fffff880`04126000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`026c8000 fffff880`026e6000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`04079000 fffff880`04115000   ccHPx64  ccHPx64.sys  Fri Feb 05 16:05:45 2010 (4B6C8829)
fffff960`00620000 fffff960`00647000   cdd      cdd.dll      unavailable (00000000)
fffff880`00c00000 fffff880`00c1d000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`013d4000 fffff880`013fe000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cd8000 fffff880`00d98000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01450000 fffff880`01480000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c7a000 fffff880`00cd8000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`014cb000 fffff880`0153e000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04562000 fffff880`04572000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02732000 fffff880`02740000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03a00000 fffff880`03a1e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03bd8000 fffff880`03be7000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0143a000 fffff880`01450000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`041dc000 fffff880`041fe000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`02740000 fffff880`0274c000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`02757000 fffff880`0276a000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0274c000 fffff880`02757000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`043f4000 fffff880`04400000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0441f000 fffff880`04513000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04513000 fffff880`04559000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03b3d000 fffff880`03bb3000   eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`06400000 fffff880`06420000   ENG64    ENG64.SYS    Wed Sep 15 06:25:35 2010 (4C909F1F)
fffff880`03bb3000 fffff880`03bd8000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`06433000 fffff880`065f1000   EX64     EX64.SYS     Wed Sep 15 06:33:41 2010 (4C90A105)
fffff880`0111a000 fffff880`0112e000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01060000 fffff880`010ac000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0154f000 fffff880`01559000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0168b000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04175000 fffff880`04182000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02fe5000 fffff800`0302e000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04211000 fffff880`04235000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04000000 fffff880`0405c000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`03be7000 fffff880`03c00000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0483d000 fffff880`04845080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0405c000 fffff880`0406a000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02600000 fffff880`026c8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`017ef000 fffff880`017f8000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03ac2000 fffff880`03b3d000   IDSvia64 IDSvia64.sys Fri Sep 10 17:54:50 2010 (4C8AA92A)
fffff880`04350000 fffff880`04366000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03a1f000 fffff880`03a46000   Ironx64  Ironx64.SYS  Tue Apr 27 20:48:23 2010 (4BD785D7)
fffff880`045e7000 fffff880`045f6000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0406a000 fffff880`04078000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bba000 fffff800`00bc4000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0538d000 fffff880`053d0000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013ba000 fffff880`013d4000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`045f8000 fffff880`045fd200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0276a000 fffff880`0277f000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`026ee000 fffff880`02711000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c22000 fffff880`00c66000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`01491000 fffff880`0149f000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04384000 fffff880`04393000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`016dd000 fffff880`016ea000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d98000 fffff880`00db2000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03c70000 fffff880`03c88000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03c88000 fffff880`03cb5000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`03cb5000 fffff880`03d03000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`03d03000 fffff880`03d26000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00de5000 fffff880`00df0000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01209000 fffff880`01214000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f15000 fffff880`00f1f000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01169000 fffff880`011c7000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03ab7000 fffff880`03ac2000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017dd000 fffff880`017ef000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016eb000 fffff880`017dd000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045ac000 fffff880`045b8000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`027d2000 fffff880`027e5000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`045b8000 fffff880`045e7000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`053e2000 fffff880`053f7000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02dcc000 fffff880`02ddb000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c8a000 fffff880`02ccf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`011ec000 fffff880`011fd000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03aab000 fffff880`03ab7000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a09000 fffff800`02fe5000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01217000 fffff880`013ba000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`014aa000 fffff880`014b3000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0484a000 fffff880`05351b00   nvlddmkm nvlddmkm.sys Thu May 14 16:48:07 2009 (4A0C8387)
fffff880`0277f000 fffff880`027d2000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02d90000 fffff880`02db6000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f5f000 fffff880`00f74000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f1f000 fffff880`00f52000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fe5000 fffff880`00fec000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fec000 fffff880`00ffc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04126000 fffff880`04143000   PciPPorts PciPPorts.sys Thu Jul 23 05:37:35 2009 (4A682F5F)
fffff880`0153e000 fffff880`0154f000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`03d26000 fffff880`03dcc000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04800000 fffff880`0483d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c66000 fffff880`00c7a000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04588000 fffff880`045ac000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04400000 fffff880`0441b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`05352000 fffff880`05373000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`05373000 fffff880`0538d000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a5a000 fffff880`03aab000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`015ef000 fffff880`015f8000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`014c1000 fffff880`014ca000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01200000 fffff880`01209000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`015a5000 fffff880`015df000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`027e5000 fffff880`027fd000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04143000 fffff880`04175000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`03dcc000 fffff880`03dd7000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`016d5000 fffff880`016dd000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`054fd000 fffff880`05583000   SRTSP64  SRTSP64.SYS  Wed Feb 24 18:59:29 2010 (4B85BD61)
fffff880`03a46000 fffff880`03a5a000   SRTSPX64 SRTSPX64.SYS Wed Feb 24 18:59:48 2010 (4B85BD74)
fffff880`05467000 fffff880`054fd000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`05400000 fffff880`05467000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`03c00000 fffff880`03c2d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`045f6000 fffff880`045f7480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`010ac000 fffff880`0111a000   SYMDS64  SYMDS64.SYS  Mon Aug 17 19:35:30 2009 (4A89E942)
fffff880`0112e000 fffff880`01169000   SYMEFA64 SYMEFA64.SYS Wed Apr 21 17:47:39 2010 (4BCF727B)
fffff880`02d5a000 fffff880`02d90000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Aug 13 18:28:21 2009 (4A849385)
fffff880`02ce4000 fffff880`02d5a000   SYMTDIV  SYMTDIV.SYS  Tue May 04 00:38:27 2010 (4BDFA4C3)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`03c2d000 fffff880`03c3f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0101e000 fffff880`0102b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01000000 fffff880`0101e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`0102b000 fffff880`0103f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004e0000 fffff960`004ea000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0432a000 fffff880`04350000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`053d0000 fffff880`053e2000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04366000 fffff880`04383000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`045fe000 fffff880`045fff00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04200000 fffff880`04211000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`04182000 fffff880`041dc000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
fffff880`04393000 fffff880`0439e000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0439e000 fffff880`043f4000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`02cd8000 fffff880`02ce4000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`01480000 fffff880`01491000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`0103f000 fffff880`0105a000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00f52000 fffff880`00f5f000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`014b3000 fffff880`014c1000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`011c7000 fffff880`011ec000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f74000 fffff880`00f89000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f89000 fffff880`00fe5000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01559000 fffff880`015a5000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02db6000 fffff880`02dcc000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02ddb000 fffff880`02df6000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`015df000 fffff880`015ef000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e02000 fffff880`00ea6000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea6000 fffff880`00eb5000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02ccf000 fffff880`02cd8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000f0000 fffff960`003ff000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`04559000 fffff880`04562000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f0c000 fffff880`00f15000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02711000 fffff880`02732000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`05583000 fffff880`055b4000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`07227000 fffff880`07298000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`016dd000 fffff880`016eb000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01480000 fffff880`0148c000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0148c000 fffff880`01497000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01497000 fffff880`014aa000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04366000 fffff880`04384000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Debug session time: Mon Nov 29 10:10:16.977 2010 (GMT-5)
System Uptime: 0 days 0:04:41.224
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 34, {50830, fffff88003193748, fffff88003192fb0, fffff80002aca6fc}

Probably caused by : ntkrnlmp.exe ( nt!KiCancelTimer+90 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CACHE_MANAGER (34)
    See the comment for FAT_FILE_SYSTEM (0x23)
Arguments:
Arg1: 0000000000050830
Arg2: fffff88003193748
Arg3: fffff88003192fb0
Arg4: fffff80002aca6fc

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff88003193748 -- (.exr 0xfffff88003193748)
ExceptionAddress: fffff80002aca6fc (nt!KiCancelTimer+0x0000000000000090)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88003192fb0 -- (.cxr 0xfffff88003192fb0)
rax=000000000000a78f rbx=fffff80002cc9f60 rcx=fffff80002cc9f60
rdx=0000000000000000 rsi=0f3f394800002da8 rdi=0f3f394800004328
rip=fffff80002aca6fc rsp=fffff88003193980 rbp=0000000000000001
 r8=fffff80002a53000  r9=0000000000000002 r10=fffffffffef12040
r11=00000000a8ae5f80 r12=0000000000000002 r13=0000000000000000
r14=000000000000009c r15=0000000000000002
iopl=0         nv up ei pl nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
nt!KiCancelTimer+0x90:
fffff800`02aca6fc f0480fba2f00    lock bts qword ptr [rdi],0 ds:002b:0f3f3948`00004328=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cfb0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
nt!KiCancelTimer+90
fffff800`02aca6fc f0480fba2f00    lock bts qword ptr [rdi],0

FAULTING_IP: 
nt!KiCancelTimer+90
fffff800`02aca6fc f0480fba2f00    lock bts qword ptr [rdi],0

BUGCHECK_STR:  0x34

LAST_CONTROL_TRANSFER:  from fffff80002acfd5a to fffff80002aca6fc

STACK_TEXT:  
fffff880`03193980 fffff800`02acfd5a : 77e24519`0cd7a787 fffff880`02f63180 fffff800`02cc9f60 00000000`00000000 : nt!KiCancelTimer+0x90
fffff880`031939c0 fffff800`02ad5456 : 000026f9`5fc12e40 ffffffff`fef12040 fffffa80`03d02ab0 00000000`00000002 : nt!KiSetTimerEx+0x6a
fffff880`03193a50 fffff800`02aab2fe : 00000000`00000000 ffffffff`fef12040 fffff800`02c685a0 fffff800`02cca100 : nt!KeSetCoalescableTimer+0xb2
fffff880`03193aa0 fffff800`02aaad04 : 00000000`00000002 00000000`00000000 fffff800`02c685a0 fffffa80`03e27420 : nt!CcRescheduleLazyWriteScan+0x36
fffff880`03193ae0 fffff800`02ab7551 : 00000000`00000180 fffffa80`00000000 00000000`0000002b fffff800`02cca138 : nt!CcLazyWriteScan+0x45c
fffff880`03193bc0 fffff800`02ad0961 : fffffa80`03d02800 fffff800`02d7eda8 fffff800`02cca140 00000000`00000000 : nt!CcWorkerThread+0x1f9
fffff880`03193c70 fffff800`02d67c06 : ffffffff`ffffffff fffffa80`03d131a0 00000000`00000080 fffffa80`03ce8040 : nt!ExpWorkerThread+0x111
fffff880`03193d00 fffff800`02aa1c26 : fffff880`02f63180 fffffa80`03d131a0 fffff880`02f6dfc0 00204008`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03193d40 00000000`00000000 : fffff880`03194000 fffff880`0318e000 fffff880`031939b0 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!KiCancelTimer+90

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff88003192fb0 ; kb

FAILURE_BUCKET_ID:  X64_0x34_nt!KiCancelTimer+90

BUCKET_ID:  X64_0x34_nt!KiCancelTimer+90

Followup: MachineOwner
---------

croc83 · 30 Nov 2010

Hi Carl,

Thanks again for all the info. I've updated the NVIDIA and Realtek driver and so far no BSODs. I haven't yet uninstalled Norton but I will try that if I get any more BSODs. Will test it out today and report back with any further problems.

I have also ran CHK DSK, here are my results:

　
Checking file system on C:
The type of the file system is NTFS.
Volume label is Packard Bell.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
279296 file records processed. File verification completed.
255 large file records processed. 0 bad file records processed. 0 EA records processed. 224 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)...
406886 index entries processed. Index verification completed.
0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)...
279296 file SDs/SIDs processed. Cleaning up 928 unused index entries from index $SII of file 0x9.
Cleaning up 928 unused index entries from index $SDH of file 0x9.
Cleaning up 928 unused security descriptors.
Security descriptor verification completed.
63796 data files processed. CHKDSK is verifying Usn Journal...
35935832 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
279280 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
57493430 free clusters processed. Free space verification is complete.
Windows has checked the file system and found no problems.
306221055 KB total disk space.
75701896 KB in 215110 files.
154560 KB in 63797 indexes.
0 KB in bad sectors.
390875 KB in use by the system.
65536 KB occupied by the log file.
229973724 KB available on disk.

croc83 · 30 Nov 2010

Hi Carl its me again,

Just had another BSOD since updating drivers for NVIDIA and Realtek. I've uploaded the dump files. I'm not too keen on uninstalling Norton as we have it installed on the other pc, same spec. If this is absolutely necessary I will do but I would like to keep Norton if possible. Once again, any help most appreciated.

Thanks,
Croc

croc83 · 30 Nov 2010

Hi Carl,

Quick update, I have now uninstalled Norton and will see how that goes. I will post any problems if i have any.

CarlTR6 · 30 Nov 2010

Good morning, croc. Check Disk found not bad sectors on your hard drive; that is a good sign. It did clean up up some stuff which which should help your hard drive. It is not a bad idea to run check disk every two or three months. That keeps your hard drive in order and you can detect bad sectors - which can be a sign of of a failing hard drive.

Regarding Norton, Norton may or may not be the cause of your BSOD's. But it is a known cause of BSOD's on some Win 7 sytems. In troubleshooting, the idea is to remove all potential causes of BSOD's. Once you get your system stable, you can start adding back those things that are current. You do this one at a time with several days in between installations. When you add something back and you start getting BSOD's, you have found your cause. There are valid reasons why Norton and other third party security programs cause problems on some Win 7 systems - and remember, no two systems are exactly a like. It has to do with Win 7's own built in security measures. The makers of third party software do not have the Win 7 system core code and that code is vastly different from XP and even from Vista. Below are the thoughts of JC Griffith. John is a Microsoft MVP, a member of this forum, and a noted expert on Microsoft operating systems.

My theory revolves around the enhanced security that came about in Vista when the user tokens were split. A "user-admin" account in Vista & Windows 7 runs with a single user token. When full admin rights are needed, elevation occurs via consent.exe (UAC) and the 2nd token is obtained for the particular function requiring full admin permission. Only the single Hidden Admin user account (SID = x-500) runs with both user tokens in Vista & Windows 7.

Certain system services run under the "Local Account". The firewall drivers run in kernel mode under NT AUTHORITY\SYSTEM and can block local NETBIOS ports used by system services, resulting in APPHANGs, which after 30000ms, becomes an APPCRASH.

- Windows Explorer or IE8 screen background fading white
- small blue circle spinning endlessly
- The phrase "..Not Responding..." appears
- WERCON screen appears and asks about reporting, close program, check online for solution, restart the crashing app, etc...

In XP, all admin accounts run with 2 user tokens = full admin rights; hence the reason Zone Alarm, NIS, KIS, MIS, N360, et al., do not have problems. Only 1 level of security to deal with.

I have always held that the differing levels of security in Vista/ Windows 7 make it extremely difficult for Internet Security Suites to function normally (as in XP).

Food for thought!
J. C. Griffith

Security programs like Norton, McAfee, etc. are basically rootkits, albeit good root kits. They entangle deeply into your OS and in many places. And like root kits, they can slow your system down and cause crashes.

Your latest error code is another 3B and it blames the Windows system core. Something is causing conflicts and the leading suspect at the moment is Norton.

croc83 · 11 Jan 2011

Hi Carl,

Once again thanks for all your help with this. I have been on holiday during christmas and have just come back to discover that after removing Norton and installing MSE we are still having problems with system crashes. I have attached the minidumps files and perfmon report. Any help would be much appreciated.

Thanks
Croc

Multiple BSODs on new PC

Multiple BSODs on new PC

Still having problems