BSOD 0x01E Windows 7 Home Prem 64bit

Stonington · 29 Dec 2010

Hello. This is my first post on the forums although ive used it many times as a guest to solve some problems and I have appreciated the level of integrity this site has to offer. Having said that im having a BSOD issue (0x01E) on a windows 7 32bit home premium machine. It happens more often than not on shutdown but has occasionally happened on startup.

Is Windows 7 . . .- x86 (32-bit) or x64 ? 64- the original installed OS on the system? Yes- an OEM or full retail version? OEM- OEM = came pre-installed on system- Full Retail = you purchased it from retailer - What is the age of system (hardware)? Around 6 months old- What is the age of OS installation (have you re-installed the OS?) Clean install (recovery partition)

yowanvista · 29 Dec 2010

https://www.sevenforums.com/crashes-d...tructions.html

Stonington · 29 Dec 2010

Thanks, got a little ahead of myself. Unfortunately I cant access the internet on the machine that is having the BSOD as that is when it occurs is when I try to go online. Im typing this on another machine. I did, however, zip the .dmp files and attach them to this thread.

CarlTR6 · 29 Dec 2010

Follow the instructions in the link yowanvista gave you. Download the tool to the machine you are using to access the internet. Transfer the tool to the machine having the crashes, run the tool, zip the files and upload them as you did the dumps. Those files give us information the dumps don't give.

I did look at both dumps you uploaded. Neither give a specific cause. Both indicate memory corruption. I suggest you begin by uninstalling McAfee using this removal tool: Tool. McAfee is a known and documented cause of BSOD's on some Win 7 systems. Download and install Microsoft Security Essentials in its place and make sure Windows Firewall is turned on.

I find three out of date drivers loaded on your system. Two could well be the cause of the BSOD's when you try to connect to the internet. Update these drivers through the links provided.

BCM42RLY.sys Tue Jul 07 20:34:55 2009 - Broadcom iLine10(tm) PCI Network Adapter. Broadcom.com - Downloads & Support. Update this driver.

bcmwl664.sys Tue Jul 07 20:45:04 2009 - Broadcom 802.11g Network Adapter - Dell Wireless 1390 WLAN Mini-Card. Broadcom.com - Downloads & Support. Update this driver.

CtClsFlt.sys Mon Jun 15 01:06:41 2009 - Creative Camera Class Upper Filter Driver. Creative Worldwide Support. Update this driver.

Uninstall McAfee and update these drivers. Reboot and see how your system does. Please post back and let us know. If you get another BSOD after following these suggestions, upload it and we will go from there.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e15000 PsLoadedModuleList = 0xfffff800`03052e50
Debug session time: Tue Dec  7 13:58:31.759 2010 (GMT-5)
System Uptime: 0 days 0:07:56.351
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff88001e20928, 0, fffffa8004c8e047, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+42837 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff88001e20928, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffffa8004c8e047, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030bd0e0
 fffff88001e20928 

FAULTING_IP: 
+5c43952f01b0da64
fffffa80`04c8e047 8b4358          mov     eax,dword ptr [rbx+58h]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88001f6d880 -- (.trap 0xfffff88001f6d880)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=fffffa8004525bd1
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffffa8004c8e047 rsp=fffff88001f6da10 rbp=fffff8000302a5f8
 r8=fffffa8004818550  r9=0000000000000130 r10=fffff88002d640c0
r11=fffffa8005633370 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
fffffa80`04c8e047 8b4358          mov     eax,dword ptr [rbx+58h] ds:08d0:00000000`00000058=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002f05f14 to fffff80002e85740

STACK_TEXT:  
fffff880`01f6d718 fffff800`02f05f14 : 00000000`00000050 fffff880`01e20928 00000000`00000000 fffff880`01f6d880 : nt!KeBugCheckEx
fffff880`01f6d720 fffff800`02e8382e : 00000000`00000000 fffff880`01e208d0 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42837
fffff880`01f6d880 fffffa80`04c8e047 : fffff880`01e208d0 fffffa80`00070000 fffffa80`05633370 fffff800`02e8b5da : nt!KiPageFault+0x16e
fffff880`01f6da10 fffff880`01e208d0 : fffffa80`00070000 fffffa80`05633370 fffff800`02e8b5da ffffffff`800009d4 : 0xfffffa80`04c8e047
fffff880`01f6da18 fffffa80`00070000 : fffffa80`05633370 fffff800`02e8b5da ffffffff`800009d4 fffffa80`00000104 : 0xfffff880`01e208d0
fffff880`01f6da20 fffffa80`05633370 : fffff800`02e8b5da ffffffff`800009d4 fffffa80`00000104 00000000`00000cc8 : 0xfffffa80`00070000
fffff880`01f6da28 fffff800`02e8b5da : ffffffff`800009d4 fffffa80`00000104 00000000`00000cc8 00000000`00000000 : 0xfffffa80`05633370
fffff880`01f6da30 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff880`00000000 fffff880`0000000a : nt!KiSwapContext+0x7a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+42837
fffff800`02f05f14 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+42837

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+42837

BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+42837

Followup: MachineOwner
---------

Debug session time: Tue Dec 28 16:40:39.485 2010 (GMT-5)
System Uptime: 0 days 0:12:35.077
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002e517e7, 0, 7efa0000}

Probably caused by : ntkrnlmp.exe ( nt!RtlImageNtHeaderEx+3f )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002e517e7, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 000000007efa0000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!RtlImageNtHeaderEx+3f
fffff800`02e517e7 66390a          cmp     word ptr [rdx],cx

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000000007efa0000

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030a90e0
 000000007efa0000 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  iexplore.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88002fb6448 -- (.exr 0xfffff88002fb6448)
ExceptionAddress: fffff80002e517e7 (nt!RtlImageNtHeaderEx+0x000000000000003f)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000000007efa0000
Attempt to read from address 000000007efa0000

TRAP_FRAME:  fffff88002fb64f0 -- (.trap 0xfffff88002fb64f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000005a4d
rdx=000000007efa0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e517e7 rsp=fffff88002fb6688 rbp=fffff800030165f8
 r8=0000000000000000  r9=fffff88002fb66c8 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
nt!RtlImageNtHeaderEx+0x3f:
fffff800`02e517e7 66390a          cmp     word ptr [rdx],cx ds:0001:00000000`7efa0000=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002eaba39 to fffff80002e71740

STACK_TEXT:  
fffff880`02fb5c78 fffff800`02eaba39 : 00000000`0000001e ffffffff`c0000005 fffff800`02e517e7 00000000`00000000 : nt!KeBugCheckEx
fffff880`02fb5c80 fffff800`02e70d82 : fffff880`02fb6448 fffff880`0634c8d0 fffff880`02fb64f0 00000000`00000000 : nt!KiDispatchException+0x1b9
fffff880`02fb6310 fffff800`02e6f8fa : 00000000`00000000 fffff880`0634c8d0 fffffa80`04e8bf00 fffffa80`04e8bf20 : nt!KiExceptionDispatch+0xc2
fffff880`02fb64f0 fffff800`02e517e7 : fffff800`02e51872 00000000`00000010 00000000`00000082 fffff880`02fb66b8 : nt!KiPageFault+0x23a
fffff880`02fb6688 fffff800`02e51872 : 00000000`00000010 00000000`00000082 fffff880`02fb66b8 fffffa80`03ba9680 : nt!RtlImageNtHeaderEx+0x3f
fffff880`02fb6690 fffffa80`04c0dbd3 : fffff800`030165f8 00000000`00000000 fffffa80`04c122f8 fffffa80`04c15cc0 : nt!RtlImageNtHeader+0x1e
fffff880`02fb66c0 fffff800`030165f8 : 00000000`00000000 fffffa80`04c122f8 fffffa80`04c15cc0 00000000`00000000 : 0xfffffa80`04c0dbd3
fffff880`02fb66c8 00000000`00000000 : fffffa80`04c122f8 fffffa80`04c15cc0 00000000`00000000 00000000`00000000 : nt!ExWorkerQueue+0x58


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!RtlImageNtHeaderEx+3f
fffff800`02e517e7 66390a          cmp     word ptr [rdx],cx

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!RtlImageNtHeaderEx+3f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1E_nt!RtlImageNtHeaderEx+3f

BUCKET_ID:  X64_0x1E_nt!RtlImageNtHeaderEx+3f

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`00eb4000 fffff880`00f0b000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03944000 fffff880`039ce000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04e5a000 fffff880`04e70000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c45000 fffff880`00c50000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`051a7000 fffff880`051ef000   Apfiltr  Apfiltr.sys  Wed Sep 16 08:47:47 2009 (4AB0DE73)
fffff880`00def000 fffff880`00df8000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c00000 fffff880`00c2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00f7c000 fffff880`00f88000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`05d42000 fffff880`05d4b000   BCM42RLY BCM42RLY.sys Tue Jul 07 20:34:55 2009 (4A53E9AF)
fffff880`04e86000 fffff880`0512e000   bcmwl664 bcmwl664.sys Tue Jul 07 20:45:04 2009 (4A53EC10)
fffff880`017af000 fffff880`017b6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03aed000 fffff880`03afe000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02400000 fffff880`0241e000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00620000 fffff960`00647000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`0177c000 fffff880`017a6000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`05d18000 fffff880`05d25980   cfwids   cfwids.sys   Fri Aug 06 18:38:08 2010 (4C5C8ED0)
fffff880`00d15000 fffff880`00dd5000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01714000 fffff880`01744000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cb7000 fffff880`00d15000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04e45000 fffff880`04e49500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`0117c000 fffff880`011ef000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00f73000 fffff880`00f7c000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04e4a000 fffff880`04e5a000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05a00000 fffff880`05a0e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`05bca000 fffff880`05bf42a0   CtClsFlt CtClsFlt.sys Mon Jun 15 01:06:41 2009 (4A35D6E1)
fffff880`03acf000 fffff880`03aed000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03ac0000 fffff880`03acf000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`016fe000 fffff880`01714000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01400000 fffff880`01422000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05a0e000 fffff880`05a1a000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05a25000 fffff880`05a38000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05a1a000 fffff880`05a25000   dump_msahci dump_msahci.sys Fri Nov 13 23:36:50 2009 (4AFE33E2)
fffff880`05a38000 fffff880`05a44000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03c0f000 fffff880`03d03000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`03d03000 fffff880`03d49000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`05d4b000 fffff880`05d81000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0107f000 fffff880`01093000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01033000 fffff880`0107f000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`016c4000 fffff880`016fe000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`03846000 fffff880`03890000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`033dd000 fffff800`03426000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03dc1000 fffff880`03de5000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03d49000 fffff880`03d5a000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`02532000 fffff880`025fa000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`016bb000 fffff880`016c4000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0517a000 fffff880`05198000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0464e000 fffff880`04db6fc0   igdkmd64 igdkmd64.sys Fri Oct 30 15:23:10 2009 (4AEB3D1E)
fffff880`04e00000 fffff880`04e25180   Impcd    Impcd.sys    Mon Oct 26 16:39:41 2009 (4AE6090D)
fffff880`05aa8000 fffff880`05ae6000   IntcDAud IntcDAud.sys Sat Sep 26 10:42:55 2009 (4ABE286F)
fffff880`04e26000 fffff880`04e3c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05198000 fffff880`051a7000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bc6000 fffff800`00bc9000   kdcom    kdcom.dll    Thu Aug 05 10:06:25 2010 (4C5AC561)
fffff880`03b24000 fffff880`03b67000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013d4000 fffff880`013ee000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01575000 fffff880`015a0000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`059f1000 fffff880`059f6200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03a3d000 fffff880`03a52000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05a52000 fffff880`05a75000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c5f000 fffff880`00ca3000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05d26000 fffff880`05d41c80   mfeapfk  mfeapfk.sys  Fri Aug 06 18:33:56 2010 (4C5C8DD4)
fffff880`05ae6000 fffff880`05b12800   mfeavfk  mfeavfk.sys  Fri Aug 06 18:34:19 2010 (4C5C8DEB)
fffff880`05b13000 fffff880`05b7c680   mfefirek mfefirek.sys Fri Aug 06 18:37:18 2010 (4C5C8E9E)
fffff880`01093000 fffff880`01111c00   mfehidk  mfehidk.sys  Fri Aug 06 18:33:19 2010 (4C5C8DAF)
fffff880`03816000 fffff880`03826900   mfenlfk  mfenlfk.sys  Fri Aug 06 18:33:43 2010 (4C5C8DC7)
fffff880`03890000 fffff880`038d3180   mfewfpk  mfewfpk.sys  Fri Aug 06 18:33:33 2010 (4C5C8DBD)
fffff880`05a44000 fffff880`05a52000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`051ef000 fffff880`051fe000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00dd5000 fffff880`00def000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0241e000 fffff880`02436000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02436000 fffff880`02463000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`02463000 fffff880`024b1000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`01744000 fffff880`01767000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00c2a000 fffff880`00c35000   msahci   msahci.sys   Fri Nov 13 23:36:50 2009 (4AFE33E2)
fffff880`0161b000 fffff880`01626000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f14000 fffff880`00f1e000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0111e000 fffff880`0117c000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03ab5000 fffff880`03ac0000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`016a9000 fffff880`016bb000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01423000 fffff880`01515000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04e70000 fffff880`04e7c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02507000 fffff880`0251a000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04600000 fffff880`0462f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03bd3000 fffff880`03be8000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03827000 fffff880`03836000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`038ff000 fffff880`03944000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01515000 fffff880`01575000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01626000 fffff880`01637000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03aa9000 fffff880`03ab5000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e01000 fffff800`033dd000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01231000 fffff880`013d4000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`017a6000 fffff880`017af000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`024b4000 fffff880`02507000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`039d7000 fffff880`039fd000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f5e000 fffff880`00f73000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f1e000 fffff880`00f51000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00c35000 fffff880`00c45000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013ee000 fffff880`013ff000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`044c7000 fffff880`0456d000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03a00000 fffff880`03a3d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ca3000 fffff880`00cb7000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01112000 fffff880`0111de00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`04db7000 fffff880`04ddb000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03de5000 fffff880`03e00000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04ddb000 fffff880`04dfc000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0462f000 fffff880`04649000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a58000 fffff880`03aa9000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`01600000 fffff880`01609000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01609000 fffff880`01612000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01612000 fffff880`0161b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0166f000 fffff880`016a9000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0251a000 fffff880`02532000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0513b000 fffff880`0517a000   Rt64win7 Rt64win7.sys Thu Aug 20 12:05:06 2009 (4A8D7432)
fffff880`05808000 fffff880`059f0980   RTKVHD64 RTKVHD64.sys Fri Oct 02 07:09:59 2009 (4AC5DF87)
fffff880`0456d000 fffff880`04578000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`015ec000 fffff880`015f4000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`05c82000 fffff880`05d18000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`04400000 fffff880`04467000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`04578000 fffff880`045a5000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04e7c000 fffff880`04e7d480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`02a00000 fffff880`02bfd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`045a5000 fffff880`045b7000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`038d4000 fffff880`038e1000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`038e1000 fffff880`038ff000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`01652000 fffff880`01666000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00550000 fffff960`0055a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03afe000 fffff880`03b24000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03b67000 fffff880`03b79000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05b7d000 fffff880`05b9a000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05b9a000 fffff880`05b9bf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03d5a000 fffff880`03d6b000   usbehci  usbehci.sys  Fri Dec 04 02:26:02 2009 (4B18B98A)
fffff880`03b79000 fffff880`03bd3000   usbhub   usbhub.sys   Fri Dec 04 02:26:39 2009 (4B18B9AF)
fffff880`03d6b000 fffff880`03dc1000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05b9c000 fffff880`05bc9200   usbvideo usbvideo.sys Wed Mar 03 23:40:57 2010 (4B8F39D9)
fffff880`00f51000 fffff880`00f5e000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`017b6000 fffff880`017c4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`017c4000 fffff880`017e9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f88000 fffff880`00f9d000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f9d000 fffff880`00ff9000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`015a0000 fffff880`015ec000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0512e000 fffff880`0513b000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03800000 fffff880`03816000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`01637000 fffff880`01652000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`017e9000 fffff880`017f9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e01000 fffff880`00ea5000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea5000 fffff880`00eb4000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`039ce000 fffff880`039d7000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00030000 fffff960`0033f000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`04e3c000 fffff880`04e45000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f0b000 fffff880`00f14000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05a75000 fffff880`05a96000   WudfPf   WudfPf.sys   Fri Jan 15 02:32:54 2010 (4B501A26)

Unloaded modules:
fffff880`05d81000 fffff880`05df2000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`045b7000 fffff880`045e4000   mfeavfk01.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01744000 fffff880`01752000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01752000 fffff880`0175e000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0175e000 fffff880`01769000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01769000 fffff880`0177c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Stonington · 03 Jan 2011

Bump for relevant attachments now posted!

zigzag3143 · 03 Jan 2011

Stonington said:

Bump for relevant attachments now posted!

Which relevant attachments and where?

Stonington · 03 Jan 2011

zigzag3143 said:

Stonington said:

Bump for relevant attachments now posted!

Which relevant attachments and where?

In my initial thread. I used the tool and saved the folder and the html output file. I also attached new .dmp files as we reloaded the laptop after I made this post but we are still getting BSOD errors (same error code). Hopefully the files I attached in the initial post will be helpful in determining the cause of the problem. Thanks in advance for any and all help!

CarlTR6 · 03 Jan 2011

It helps us if you upload any updated attachments to attach them to your most recent post. We can't tell by looking if the attachments have been in the original post all the time of if they are new.

I looked at your two newest dumps. Both indicate memory corruption. You still have the outdated drivers I mentioned above loaded on your system. Any one or all of these can cause memory corruption and BSOD's. Try to update them through the Dell site. Next try the links I provided. Don't update them through Device Manager or Windows Updates.

]
BCM42RLY.sys Tue Jul 07 20:34:55 2009 - Broadcom iLine10(tm) PCI Network Adapter. Broadcom.com - Downloads & Support.

bcmwl664.sys Tue Jul 07 20:45:04 2009 - Broadcom 802.11g Network Adapter - Dell Wireless 1390 WLAN Mini-Card. Broadcom.com - Downloads & Support.

CtClsFlt.sys Mon Jun 15 01:06:41 2009 - Creative Camera Class Upper Filter Driver. Creative Worldwide Support. Update this driver.

Code:

]Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a00000 PsLoadedModuleList = 0xfffff800`02c3de50
Debug session time: Sun Jan  2 09:37:50.338 2011 (GMT-5)
System Uptime: 0 days 0:02:18.930
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {1067ff0f0, 2, 0, fffff80002a77995}

Probably caused by : ntkrnlmp.exe ( nt!KiCommitThreadWait+1d5 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000001067ff0f0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002a77995, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ca80e0
 00000001067ff0f0 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KiCommitThreadWait+1d5
fffff800`02a77995 488bbb90000000  mov     rdi,qword ptr [rbx+90h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff880039527c0 -- (.trap 0xfffff880039527c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000007fffff9e000 rbx=0000000000000000 rcx=fffff88003952910
rdx=00000000000007ff rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002a77995 rsp=fffff88003952950 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000007e00 r10=0000000000000008
r11=fffffa8003b0b884 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!KiCommitThreadWait+0x1d5:
fffff800`02a77995 488bbb90000000  mov     rdi,qword ptr [rbx+90h] ds:3b00:00000000`00000090=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a6fca9 to fffff80002a70740

STACK_TEXT:  
fffff880`03952678 fffff800`02a6fca9 : 00000000`0000000a 00000001`067ff0f0 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03952680 fffff800`02a6e920 : fffffa80`062fc060 00000001`067ff060 00000000`1140155d fffff800`02beae80 : nt!KiBugCheckDispatch+0x69
fffff880`039527c0 fffff800`02a77995 : fffffa80`067ff060 fffffa80`067ff060 fffffa80`0610f900 fffff800`00000008 : nt!KiPageFault+0x260
fffff880`03952950 fffff800`02a7b2a1 : 00000000`00000000 00000000`00233ce0 fffff880`00000078 fffffa80`0610f900 : nt!KiCommitThreadWait+0x1d5
fffff880`039529e0 fffff800`02d6bdf7 : fffffa80`065c9600 fffff880`03952bc8 fffff880`03952ca0 fffff800`02d87a43 : nt!KeRemoveQueueEx+0x301
fffff880`03952a90 fffff800`02a80aa6 : 000007fe`fd6a8f00 fffff880`03952ba8 fffff880`03952bc8 00000000`00000001 : nt!IoRemoveIoCompletion+0x47
fffff880`03952b20 fffff800`02a6f993 : fffffa80`067ff060 00000000`77654270 00000000`00000000 00000000`0217f240 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff880`03952c20 00000000`775a165a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0217fa18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x775a165a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiCommitThreadWait+1d5
fffff800`02a77995 488bbb90000000  mov     rdi,qword ptr [rbx+90h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KiCommitThreadWait+1d5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiCommitThreadWait+1d5

BUCKET_ID:  X64_0xA_nt!KiCommitThreadWait+1d5

Followup: MachineOwner
---------

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a58000 PsLoadedModuleList = 0xfffff800`02c95e50
Debug session time: Mon Jan  3 12:00:58.073 2011 (GMT-5)
System Uptime: 0 days 0:02:18.665
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002aa87e7, 0, 7fffffa0000}

Probably caused by : ntkrnlmp.exe ( nt!RtlImageNtHeaderEx+3f )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002aa87e7, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 000007fffffa0000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!RtlImageNtHeaderEx+3f
fffff800`02aa87e7 66390a          cmp     word ptr [rdx],cx

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000007fffffa0000

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d000e0
 000007fffffa0000 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  conhost.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88002dc4448 -- (.exr 0xfffff88002dc4448)
ExceptionAddress: fffff80002aa87e7 (nt!RtlImageNtHeaderEx+0x000000000000003f)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000007fffffa0000
Attempt to read from address 000007fffffa0000

TRAP_FRAME:  fffff88002dc44f0 -- (.trap 0xfffff88002dc44f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000005a4d
rdx=000007fffffa0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002aa87e7 rsp=fffff88002dc4688 rbp=fffff80002c6d5f8
 r8=0000000000000000  r9=fffff88002dc46c8 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
nt!RtlImageNtHeaderEx+0x3f:
fffff800`02aa87e7 66390a          cmp     word ptr [rdx],cx ds:0001:000007ff`fffa0000=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002b02a39 to fffff80002ac8740

STACK_TEXT:  
fffff880`02dc3c78 fffff800`02b02a39 : 00000000`0000001e ffffffff`c0000005 fffff800`02aa87e7 00000000`00000000 : nt!KeBugCheckEx
fffff880`02dc3c80 fffff800`02ac7d82 : fffff880`02dc4448 fffff880`05a2e8d0 fffff880`02dc44f0 00000000`00000000 : nt!KiDispatchException+0x1b9
fffff880`02dc4310 fffff800`02ac68fa : 00000000`00000000 fffff880`05a2e8d0 fffffa80`04959700 fffffa80`049597c0 : nt!KiExceptionDispatch+0xc2
fffff880`02dc44f0 fffff800`02aa87e7 : fffff800`02aa8872 00000000`00000010 00000000`00000082 fffff880`02dc46b8 : nt!KiPageFault+0x23a
fffff880`02dc4688 fffff800`02aa8872 : 00000000`00000010 00000000`00000082 fffff880`02dc46b8 fffffa80`03ba8b60 : nt!RtlImageNtHeaderEx+0x3f
fffff880`02dc4690 fffffa80`04c32bd3 : fffff800`02c6d5f8 00000000`00000000 fffffa80`04c372f8 fffffa80`04c3acc0 : nt!RtlImageNtHeader+0x1e
fffff880`02dc46c0 fffff800`02c6d5f8 : 00000000`00000000 fffffa80`04c372f8 fffffa80`04c3acc0 00000000`00000000 : 0xfffffa80`04c32bd3
fffff880`02dc46c8 00000000`00000000 : fffffa80`04c372f8 fffffa80`04c3acc0 00000000`00000000 00000000`00000000 : nt!ExWorkerQueue+0x58


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!RtlImageNtHeaderEx+3f
fffff800`02aa87e7 66390a          cmp     word ptr [rdx],cx

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!RtlImageNtHeaderEx+3f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1E_nt!RtlImageNtHeaderEx+3f

BUCKET_ID:  X64_0x1E_nt!RtlImageNtHeaderEx+3f

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`00d67000 fffff880`00dbe000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03c0e000 fffff880`03c98000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03fe4000 fffff880`03ffa000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00de3000 fffff880`00dee000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04c2d000 fffff880`04c75000   Apfiltr  Apfiltr.sys  Wed Sep 16 08:47:47 2009 (4AB0DE73)
fffff880`01d5b000 fffff880`01d64000   aswFsBlk aswFsBlk.SYS Tue Sep 07 10:47:09 2010 (4C86506D)
fffff880`01d21000 fffff880`01d5b000   aswMonFlt aswMonFlt.sys Tue Sep 07 10:47:32 2010 (4C865084)
fffff880`03c98000 fffff880`03ca2000   aswRdr   aswRdr.SYS   Tue Sep 07 10:47:47 2010 (4C865093)
fffff880`02896000 fffff880`028b9000   aswSP    aswSP.SYS    Tue Sep 07 10:52:07 2010 (4C865197)
fffff880`02875000 fffff880`02885000   aswTdi   aswTdi.SYS   Tue Sep 07 10:52:27 2010 (4C8651AB)
fffff880`00ff5000 fffff880`00ffe000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c76000 fffff880`00ca0000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00fe9000 fffff880`00ff5000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`043f2000 fffff880`043fb000   BCM42RLY BCM42RLY.sys Tue Jul 07 20:34:55 2009 (4A53E9AF)
fffff880`04ce9000 fffff880`04f91000   bcmwl664 bcmwl664.sys Tue Jul 07 20:45:04 2009 (4A53EC10)
fffff880`0293e000 fffff880`02945000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`02885000 fffff880`02896000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`035b9000 fffff880`035d7000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007d0000 fffff960`007f7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`0290b000 fffff880`02935000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00efe000 fffff880`00fbe000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`010ad000 fffff880`010dd000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d09000 fffff880`00d67000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04cc9000 fffff880`04ccd500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00fe0000 fffff880`00fe9000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04cce000 fffff880`04cde000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`01cc6000 fffff880`01cd4000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0402e000 fffff880`040582a0   CtClsFlt CtClsFlt.sys Mon Jun 15 01:06:41 2009 (4A35D6E1)
fffff880`03de1000 fffff880`03dff000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03dd2000 fffff880`03de1000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01235000 fffff880`0124b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04181000 fffff880`041a3000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`01cd4000 fffff880`01ce0000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01ceb000 fffff880`01cfe000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01ce0000 fffff880`01ceb000   dump_msahci dump_msahci.sys Fri Nov 13 23:36:50 2009 (4AFE33E2)
fffff880`05808000 fffff880`05814000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03ef0000 fffff880`03fe4000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`03e00000 fffff880`03e46000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0349e000 fffff880`034d4000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`01130000 fffff880`01144000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010e4000 fffff880`01130000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`011ae000 fffff880`011e8000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`02800000 fffff880`0284a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a0f000 fffff800`02a58000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03ebe000 fffff880`03ee2000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03e46000 fffff880`03e57000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`034f1000 fffff880`035b9000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015e4000 fffff880`015ed000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04c00000 fffff880`04c1e000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04446000 fffff880`04baefc0   igdkmd64 igdkmd64.sys Fri Oct 30 15:23:10 2009 (4AEB3D1E)
fffff880`04c84000 fffff880`04ca9180   Impcd    Impcd.sys    Mon Oct 26 16:39:41 2009 (4AE6090D)
fffff880`041a3000 fffff880`041e1000   IntcDAud IntcDAud.sys Sat Sep 26 10:42:55 2009 (4ABE286F)
fffff880`04caa000 fffff880`04cc0000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04c1e000 fffff880`04c2d000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bba000 fffff800`00bbd000   kdcom    kdcom.dll    Thu Aug 05 10:06:25 2010 (4C5AC561)
fffff880`04080000 fffff880`040c3000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05800000 fffff880`05805200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`01d85000 fffff880`01d9a000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`01cfe000 fffff880`01d21000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cb1000 fffff880`00cf5000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`01cb8000 fffff880`01cc6000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04c75000 fffff880`04c84000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00c5c000 fffff880`00c76000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`035d7000 fffff880`035ef000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03400000 fffff880`0342d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0342d000 fffff880`0347b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0347b000 fffff880`0349e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00ca0000 fffff880`00cab000   msahci   msahci.sys   Fri Nov 13 23:36:50 2009 (4AFE33E2)
fffff880`029a3000 fffff880`029ae000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ebc000 fffff880`00ec6000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01150000 fffff880`011ae000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03dc7000 fffff880`03dd2000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015d2000 fffff880`015e4000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014d8000 fffff880`015ca000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04ff4000 fffff880`05000000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`01ded000 fffff880`01e00000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04400000 fffff880`0442f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0412f000 fffff880`04144000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03d2c000 fffff880`03d3b000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03ca2000 fffff880`03ce7000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`029ae000 fffff880`029bf000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03dbb000 fffff880`03dc7000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a58000 fffff800`03034000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01253000 fffff880`013f6000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02935000 fffff880`0293e000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01d9a000 fffff880`01ded000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03cf0000 fffff880`03d16000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fcb000 fffff880`00fe0000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ec6000 fffff880`00ef9000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00dd3000 fffff880`00de3000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0429b000 fffff880`04341000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04144000 fffff880`04181000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cf5000 fffff880`00d09000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01144000 fffff880`0114fe00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`04baf000 fffff880`04bd3000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04bd3000 fffff880`04bee000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`029bf000 fffff880`029e0000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`029e0000 fffff880`029fa000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03d6a000 fffff880`03dbb000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02988000 fffff880`02991000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02991000 fffff880`0299a000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0299a000 fffff880`029a3000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01073000 fffff880`010ad000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01c00000 fffff880`01c18000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04f9e000 fffff880`04ff4000   Rt64win7 Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)
fffff880`05814000 fffff880`059fc980   RTKVHD64 RTKVHD64.sys Fri Oct 02 07:09:59 2009 (4AC5DF87)
fffff880`04341000 fffff880`0434c000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`015ca000 fffff880`015d2000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`04200000 fffff880`04296000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`0438b000 fffff880`043f2000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`0434c000 fffff880`04379000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04cde000 fffff880`04cdf480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`03a00000 fffff880`03bfd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`04379000 fffff880`0438b000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02868000 fffff880`02875000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0284a000 fffff880`02868000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03d56000 fffff880`03d6a000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00580000 fffff960`0058a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`028b9000 fffff880`028df000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`040c3000 fffff880`040d5000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`041e1000 fffff880`041fe000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05806000 fffff880`05807f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03e57000 fffff880`03e68000   usbehci  usbehci.sys  Fri Dec 04 02:26:02 2009 (4B18B98A)
fffff880`040d5000 fffff880`0412f000   usbhub   usbhub.sys   Fri Dec 04 02:26:39 2009 (4B18B9AF)
fffff880`03e68000 fffff880`03ebe000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04000000 fffff880`0402d200   usbvideo usbvideo.sys Wed Mar 03 23:40:57 2010 (4B8F39D9)
fffff880`00fbe000 fffff880`00fcb000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02945000 fffff880`02953000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02953000 fffff880`02978000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00dbe000 fffff880`00dd3000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0148b000 fffff880`014d7000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04f91000 fffff880`04f9e000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03d16000 fffff880`03d2c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03d3b000 fffff880`03d56000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02978000 fffff880`02988000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03ce7000 fffff880`03cf0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`04cc0000 fffff880`04cc9000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00eb3000 fffff880`00ebc000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01d64000 fffff880`01d85000   WudfPf   WudfPf.sys   Fri Jan 15 02:32:54 2010 (4B501A26)

Unloaded modules:
fffff880`01c7d000 fffff880`01cb8000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015ed000 fffff880`015fb000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`011e8000 fffff880`011f4000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`011f4000 fffff880`011ff000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`028f8000 fffff880`0290b000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Stonington · 03 Jan 2011

I was able to find the Mini-Card driver. No go for the other two on dell's site or the direct support links you provided. I even asked my good friend google and he wasnt much help in locating them either. You would think Dell would have them on their site but they dont (not by entering service tag anyways).