BSODs and unstable Win7

tumblebug · 30 Jan 2011

Hi Carl

Posting again...

I left the laptop alone for a while with the XP virtual machine was updating itself. I was in a meeting for about 30 minutes. When I came back, I could not view any pages in IE8 - not even the Google home page, but IE did not crash - no errors or anything - it just wouldn't render any pages. Then Outlook started crashing - everytime I clicked on an email to reply, it would crash. I figured that a reboot was in order and once again, just before it rebooted...BSOD citing "memory_management".

Up until my meeting, the laptop had been stable so maybe there some Toshiba hibernation driver or something trying to kick in and failing, taking the memory with it?

As an aside - I've used XP professionally for years before this and generally pushed those machines very hard, and I've never ever had as many blue screens in all that time as I have had with this system over the past 2-3 weeks. This is dead frustrating

Tim

tumblebug · 31 Jan 2011

Hi Carl

Definately something to do with the laptop's hibernation - just had another crash after leaving the laptop alone. I've included another dump from eariler this afternoon where Word crashed during editing a document and BSOD'd.

Tim

CarlTR6 · 31 Jan 2011

I looked at all four of your latest dumps. All blame Windows system drivers and all show memory corruption.

Bugcheck 1A (3X), MEMORY_MANAGEMENT. Usual causes: Device driver, memory, kernel.

Bugcheck BE, ATTEMPTED_WRITE_TO_READONLY_MEMORY. Usual causes: Device driver, Memory.

I agree with you that a good possible cause is the Toshiba utilities. In spite of your renaming tosrfec.sys and TVALZFL.sys, they are still loading. That means they reinstalled themselves. They are shown in the dumps as unloaded modules.

1. Let's make sure you do not have RAM problem. Test your RAM with Memtest 86+ following the instructions in this tutorial: RAM - Test with Memtest86+. Run Memtest from a cold boot after your computer has been off for an hour or so. Let it run for 7 passes; this will take 6-8 hours. If you see any errors, you can stop the test. Post back with your results.

2. If you get no errors with Memtest, enable Driver Verifier carefully the instructions in this tutorial: Driver Verifier - Enable and Disable. If Verifier finds a faulty driver, it will trigger a BSOD. Please upload any and all Driver Verifier enabled dumps.

3. You can try completely uninstalling the Toshiba utilities.

4. If you have no RAM problems and if Driver Verifier does not show us anything, I suggest that you try the clean boot method: How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0345a000 PsLoadedModuleList = 0xfffff800`03697e50
Debug session time: Sun Jan 30 22:43:26.826 2011 (GMT-5)
System Uptime: 0 days 4:59:41.855
Loading Kernel Symbols
...............................................................
................................................................
................................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41790, fffffa8004687170, ffff, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041790, The subtype of the bugcheck.
Arg2: fffffa8004687170
Arg3: 000000000000ffff
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41790

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  TFPUTaskMonito

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff8000353df9e to fffff800034ca740

STACK_TEXT:  
fffff880`03de85c8 fffff800`0353df9e : 00000000`0000001a 00000000`00041790 fffffa80`04687170 00000000`0000ffff : nt!KeBugCheckEx
fffff880`03de85d0 fffff800`034fddf9 : fffffa80`00000000 00000001`80199fff 00000000`00000000 fffffa80`0c2340c8 : nt! ?? ::FNODOBFM::`string'+0x33906
fffff880`03de8790 fffff800`0349d81c : ffffffff`ffffffff fffff880`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveMappedView+0xd9
fffff880`03de88b0 fffff800`037afdcf : fffff8a0`035ac060 fffff880`03de8c20 00000000`00000000 fffffa80`06e0bb60 : nt!MmCleanProcessAddressSpace+0x228
fffff880`03de8900 fffff800`03788635 : 00000000`40010004 00000000`00000001 000007ff`fffd9000 fffffa80`0c144b60 : nt!PspExitThread+0x92f
fffff880`03de89c0 fffff800`034a71db : fffffa80`06be2420 00000000`00000000 fffffa80`06e0bb60 fffff800`037e0414 : nt!PsExitSpecialApc+0x1d
fffff880`03de89f0 fffff800`034a7620 : 00000000`00000000 fffff880`03de8a70 fffff800`0378874c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`03de8a70 fffff800`034c9a37 : fffffa80`06e0bb60 00000000`0498fcd8 fffff880`03de8bc8 fffff880`03de8c00 : nt!KiInitiateUserApc+0x70
fffff880`03de8bb0 00000000`7786030a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`0498fcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7786030a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+33906
fffff800`0353df9e cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+33906

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+33906

BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+33906

Followup: MachineOwner
---------

System Uptime: 0 days 2:20:29.064
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck BE, {fffff8a00bc3d2b0, 8000000214a83121, fffff880084e7770, b}

Probably caused by : fileinfo.sys ( fileinfo!FIStreamGetNext+5b )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8a00bc3d2b0, Virtual address for the attempted write.
Arg2: 8000000214a83121, PTE contents.
Arg3: fffff880084e7770, (reserved)
Arg4: 000000000000000b, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xBE

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880084e7770 -- (.trap 0xfffff880084e7770)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=007400750065006e rbx=0000000000000000 rcx=fffff8a00bc3d2b0
rdx=0074007500650070 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800036a1cab rsp=fffff880084e7908 rbp=fffffa8007c1fb20
 r8=fffff8a00286ad00  r9=0000000000000000 r10=0039003000370030
r11=fffff880084e7900 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ExfAcquireRundownProtection+0xb:
fffff800`036a1cab f0480fb111      lock cmpxchg qword ptr [rcx],rdx ds:0b10:fffff8a0`0bc3d2b0=007400750065006e
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800036fdae2 to fffff8000367d740

STACK_TEXT:  
fffff880`084e7608 fffff800`036fdae2 : 00000000`000000be fffff8a0`0bc3d2b0 80000002`14a83121 fffff880`084e7770 : nt!KeBugCheckEx
fffff880`084e7610 fffff800`0367b82e : 00000000`00000001 fffff8a0`0bc3d2a0 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x4237e
fffff880`084e7770 fffff800`036a1cab : fffff880`0131b2e3 fffffa80`07f1cee0 fffffa80`00000000 00000000`001f0818 : nt!KiPageFault+0x16e
fffff880`084e7908 fffff880`0131b2e3 : fffffa80`07f1cee0 fffffa80`00000000 00000000`001f0818 00000000`09c20050 : nt!ExfAcquireRundownProtection+0xb
fffff880`084e7910 fffff880`0131bb1d : 00000000`001f0818 fffff880`084e7ca0 00000000`09c20050 00000000`00000000 : fileinfo!FIStreamGetNext+0x5b
fffff880`084e7940 fffff880`01318716 : fffffa80`07f1cee0 00000000`001f0818 fffffa80`000d4a3c 00000000`09e10858 : fileinfo!FIIterate+0x219
fffff880`084e79d0 fffff800`03998707 : fffffa80`06e05a30 fffffa80`06e05a30 fffffa80`07f1cff8 fffffa80`07f1cee0 : fileinfo!FIControlDispatch+0x156
fffff880`084e7a10 fffff800`03998f66 : fffffa80`0cf263a0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
fffff880`084e7b40 fffff800`0367c993 : 80000000`00000002 00000000`04fa9970 00000000`000005a0 fffff880`084e7c20 : nt!NtDeviceIoControlFile+0x56
fffff880`084e7bb0 00000000`7791fdca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00d3b2b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7791fdca


STACK_COMMAND:  kb

FOLLOWUP_IP: 
fileinfo!FIStreamGetNext+5b
fffff880`0131b2e3 408af0          mov     sil,al

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  fileinfo!FIStreamGetNext+5b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: fileinfo

IMAGE_NAME:  fileinfo.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc481

FAILURE_BUCKET_ID:  X64_0xBE_fileinfo!FIStreamGetNext+5b

BUCKET_ID:  X64_0xBE_fileinfo!FIStreamGetNext+5b

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`00ec8000 fffff880`00f1f000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02e67000 fffff880`02ef1000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0466f000 fffff880`04685000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`07655000 fffff880`07786000   agrsm64  agrsm64.sys  Tue Jul 21 14:03:31 2009 (4A6602F3)
fffff880`012ba000 fffff880`012c5000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04600000 fffff880`04648000   Apfiltr  Apfiltr.sys  Fri Nov 27 08:39:59 2009 (4B0FD6AF)
fffff880`07e81000 fffff880`07e8c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`0127c000 fffff880`01285000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01285000 fffff880`012af000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00970000 fffff960`009d1000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`04260000 fffff880`04321000   ATSwpWDF ATSwpWDF.sys Wed May 19 23:31:31 2010 (4BF4AD13)
fffff880`00f90000 fffff880`00f9c000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`044f3000 fffff880`044fa000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03d80000 fffff880`03d91000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`024c8000 fffff880`024e6000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00680000 fffff960`006a7000   cdd      cdd.dll      unavailable (00000000)
fffff880`04321000 fffff880`0433e000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`0448f000 fffff880`044b9000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d21000 fffff880`00de1000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01b9b000 fffff880`01bcb000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cc3000 fffff880`00d21000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05ff1000 fffff880`05ff5500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01383000 fffff880`013f6000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00f87000 fffff880`00f90000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`05800000 fffff880`05810000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0525e000 fffff880`0526c000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03cfd000 fffff880`03d80000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`045d1000 fffff880`045ec000   ctxusbm  ctxusbm.sys  Mon Sep 07 14:09:28 2009 (4AA54C58)
fffff880`045b3000 fffff880`045d1000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04251000 fffff880`04260000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01b85000 fffff880`01b9b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05200000 fffff880`05222000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`026ee000 fffff880`02701000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`024e6000 fffff880`026ee000   dump_iaStor dump_iaStor.sys Fri Jan 15 15:21:57 2010 (4B50CE65)
fffff880`077dc000 fffff880`077e8000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03c00000 fffff880`03cf4000   dxgkrnl  dxgkrnl.sys  Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`046d0000 fffff880`0471f000   e1k62x64 e1k62x64.sys Wed Sep 29 16:02:28 2010 (4CA39B54)
fffff880`01311000 fffff880`01325000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`012c5000 fffff880`01311000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0142b000 fffff880`01435000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01b4b000 fffff880`01b85000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01000000 fffff880`0104a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`03be9000 fffff800`03c32000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04786000 fffff880`047aa000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04a46000 fffff880`04a57000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`07600000 fffff880`07619000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`07619000 fffff880`07621080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`077e8000 fffff880`077f6000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02400000 fffff880`024c8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01b42000 fffff880`01b4b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`05fab000 fffff880`05fc9000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01074000 fffff880`0127c000   iaStor   iaStor.sys   Fri Jan 15 15:21:57 2010 (4B50CE65)
fffff880`04a68000 fffff880`051e2ce0   igdkmd64 igdkmd64.sys Wed Feb 10 19:56:24 2010 (4B7355B8)
fffff880`04648000 fffff880`0466ec00   Impcd    Impcd.sys    Wed Feb 10 18:01:59 2010 (4B733AE7)
fffff880`07795000 fffff880`077dc000   IntcDAud IntcDAud.sys Fri Jan 08 06:51:38 2010 (4B471C4A)
fffff880`03db7000 fffff880`03dcd000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05fc9000 fffff880`05fd8000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bc8000 fffff800`00bd2000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`05279000 fffff880`052bc000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01400000 fffff880`0141a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`075f9000 fffff880`075fe200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02701000 fffff880`02716000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0433e000 fffff880`04361000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c6b000 fffff880`00caf000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`07786000 fffff880`07795000   modem    modem.sys    Mon Jul 13 20:10:48 2009 (4A5BCD08)
fffff880`05250000 fffff880`0525e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05fd8000 fffff880`05fe7000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`07622000 fffff880`0762f000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fb1000 fffff880`00fcb000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`044b9000 fffff880`044ea000   MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`07e71000 fffff880`07e81000   MpNWMon  MpNWMon.sys  Tue Sep 14 20:19:30 2010 (4C901112)
fffff880`02794000 fffff880`027ac000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`027ac000 fffff880`027d9000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04382000 fffff880`043d0000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`027d9000 fffff880`027fc000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`012af000 fffff880`012ba000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04558000 fffff880`04563000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f28000 fffff880`00f32000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01325000 fffff880`01383000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02fc5000 fffff880`02fd0000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01b30000 fffff880`01b42000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016ce000 fffff880`017c0000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05810000 fffff880`0581c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02769000 fffff880`0277c000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`047ca000 fffff880`047f9000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05392000 fffff880`053a7000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02f99000 fffff880`02fa8000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02ef1000 fffff880`02f36000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`05824000 fffff880`05f83000   NETw5s64 NETw5s64.sys Wed Jan 13 11:37:13 2010 (4B4DF6B9)
fffff880`07fa2000 fffff880`07fb7000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`04563000 fffff880`04574000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02e57000 fffff880`02e63000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`0360d000 fffff800`03be9000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0144c000 fffff880`015ef000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`044ea000 fffff880`044f3000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02716000 fffff880`02769000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02f3f000 fffff880`02f65000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f72000 fffff880`00f87000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f32000 fffff880`00f65000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fcb000 fffff880`00fd2000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fd2000 fffff880`00fe2000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0141a000 fffff880`0142b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`043d0000 fffff880`04476000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`053a7000 fffff880`053e4000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00caf000 fffff880`00cc3000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04685000 fffff880`046a9000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`046a9000 fffff880`046c4000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03dcd000 fffff880`03dee000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`051e3000 fffff880`051fd000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04200000 fffff880`04251000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`046c4000 fffff880`046cf000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0453d000 fffff880`04546000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04546000 fffff880`0454f000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0454f000 fffff880`04558000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01af6000 fffff880`01b30000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0277c000 fffff880`02794000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0740d000 fffff880`075f8a80   RTKVHD64 RTKVHD64.sys Fri Oct 30 06:17:58 2009 (4AEABD56)
fffff880`047aa000 fffff880`047ca000   sdbus    sdbus.sys    Fri Oct 09 22:41:20 2009 (4ACFF450)
fffff880`07400000 fffff880`0740b000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`05f9f000 fffff880`05fab000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02fa8000 fffff880`02fc5000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01aee000 fffff880`01af6000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07f0c000 fffff880`07fa2000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07ea5000 fffff880`07f0c000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`01bcb000 fffff880`01bf8000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`0581c000 fffff880`0581d480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`053e4000 fffff880`053f6000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`05fe7000 fffff880`05ff1000   tdcmdpst tdcmdpst.sys Thu Jul 30 04:39:35 2009 (4A715C47)
fffff880`04592000 fffff880`0459f000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`04574000 fffff880`04592000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`0459f000 fffff880`045b3000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`01ae2000 fffff880`01aee000   thpdrv   thpdrv.sys   Sun Jun 28 22:02:56 2009 (4A4820D0)
fffff880`01ae0000 fffff880`01ae1f80   Thpevm   Thpevm.SYS   Mon Jun 29 04:15:37 2009 (4A487829)
fffff880`01a66000 fffff880`01ae0000   tos_sps64 tos_sps64.sys Wed Jun 24 01:31:09 2009 (4A41BA1D)
fffff880`05f90000 fffff880`05f9f000   tpm      tpm.sys      Mon Jul 13 19:21:48 2009 (4A5BC18C)
fffff960`00570000 fffff960`0057a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03d91000 fffff880`03db7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`052bc000 fffff880`052ce000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0762f000 fffff880`0764c000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`052fa000 fffff880`052fbf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0471f000 fffff880`04730000   usbehci  usbehci.sys  Fri Dec 04 02:26:02 2009 (4B18B98A)
fffff880`05338000 fffff880`05392000   usbhub   usbhub.sys   Fri Dec 04 02:26:39 2009 (4B18B9AF)
fffff880`04730000 fffff880`04786000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`052eb000 fffff880`052fa000   usbrpm   usbrpm.sys   Mon Jul 13 20:35:14 2009 (4A5BD2C2)
fffff880`05222000 fffff880`0524f200   usbvideo usbvideo.sys Wed Mar 03 23:40:57 2010 (4B8F39D9)
fffff880`00f65000 fffff880`00f72000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02f7b000 fffff880`02f85000   vfilter  vfilter.sys  Thu Jul 08 22:18:29 2010 (4C3686F5)
fffff880`044fa000 fffff880`04508000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`04508000 fffff880`0452d000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f9c000 fffff880`00fb1000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`01a15000 fffff880`01a61000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`052fc000 fffff880`05338000   vpchbus  vpchbus.sys  Tue Sep 22 21:32:32 2009 (4AB97AB0)
fffff880`02f85000 fffff880`02f99000   vpcnfltr vpcnfltr.sys Tue Sep 22 21:32:30 2009 (4AB97AAE)
fffff880`052ce000 fffff880`052eb000   vpcusb   vpcusb.sys   Tue Sep 22 21:32:39 2009 (4AB97AB7)
fffff880`02e00000 fffff880`02e56580   vpcvmm   vpcvmm.sys   Thu Dec 31 02:27:33 2009 (4B3C5265)
fffff880`05f83000 fffff880`05f90000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02f65000 fffff880`02f7b000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`077f6000 fffff880`07800000   vwifimp  vwifimp.sys  Mon Jul 13 20:07:28 2009 (4A5BCC40)
fffff880`02fd8000 fffff880`02ff3000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0452d000 fffff880`0453d000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e15000 fffff880`00eb9000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb9000 fffff880`00ec8000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02f36000 fffff880`02f3f000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003c0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`00f1f000 fffff880`00f28000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04361000 fffff880`04382000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07e00000 fffff880`07e71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08ea5000 fffff880`090ad000   hiber_iaStor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`090ad000 fffff880`090c0000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0764c000 fffff880`07651000   TVALZ.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01bcb000 fffff880`01bd9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04274000 fffff880`0447c000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0447c000 fffff880`0448f000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01a61000 fffff880`01a66000   TVALZ.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02fc5000 fffff880`02fd8000   tosrfcom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

tumblebug · 01 Feb 2011

Hi Carl

Ran Memtest overnight for about 12 hours - it was an extremely hot night here last night so I didnt get the PC to cool off properly before starting the test...

but there is some good/bad news....errors were found but does Memtest write a log to file automatically? If so, where is it? I create a USB boot device and memtest started straight away and I couldn't find any options to tell it to log to a file. So I'm not sure what I can send to you. I took some closeup pictures of the screen (from an iphone) that I've attached - I hope they are clear enough for you can glean some information. Although from everything I've read about memtest, even having 1 error over the testing period means that the memory is suspect so I'll test each memory module individually tonight.

Does anything on those screenshots tell you/me what module it could be? I noticed the "errors per memory slot" section on the screen there.

Tim

tumblebug · 02 Feb 2011

Hi Carl

An update - I took out 1 memory module (laptop has 2x4G sticks) and it took about 3 hours for the laptop to completely freeze and for the video to go abit nuts - no blue screen, laptop just completely froze - exactly like memory getting messed up.

So I took that stick out and put the other in and the laptop's been operating fine for the last 9-10 hours (altho slower due to only having half the memory) - it even came back from hibernation properly so it's looking like some bad memory.

CarlTR6 · 02 Feb 2011

Very good and you tested the RAM just right. If Memtest show errors with both sticks in, you take one stick out and test the remaining stick with Memtest. Then you take that stick and test the second stick. Next you take a known good stick and test the other motherboard slot. At this point, it appears that you have either a bad RAM stick or a bad motherboard slot. Since you can boot and run with one stick without BSOD's, it is definitely A RAM problem. Good detective work. Run Memtest on each stick separately.

Memtest does not produce a log file. It is all on the screen. Let us know how the Memtest goes.

tumblebug · 08 Feb 2011

Hi Carl

Sorry to be a bit quiet - I ran the memory tests and it did appear to be the memory module itself. In fact, I've been running without a problem for the last 4-5 days on just the good module in both motherboard slots - laptop's been a bit slower but atleast there's been no BSODs.

The bad module has gone back to the supplier and I've just got another module to put in - here's hoping it does the trick :)

I think you can mark this thread as "resolved" :) Is there a way of adding reputation points or something? I'm willing to add some recognition for your help :)

Tim