BSOD using Verifier.exe...

CycloneJoe67 · 06 Feb 2011

Attempted to track down a suspected faulty driver using verifier.exe resulted in multiple BSOD, although only one mini-dump file was successfully written, of the Nvidia system driver nvlddmkm.sys. However, repeated use of verifier.exe isolating this driver did not result in additional BSOD's which I found was odd. Attached is the mini-dump file of this event; any comments or suggestions would be helpful.

Background information:
Computer background info:
-OS: Windows 7 Home Premium 64 bit, OEM version, purchased from Fry's Electronics.
-Motherboard: Gigabyte P55A-UD3
-Chipset: Intel i5-760
-RAM: 8gig Corsair XMS3 1600, matched latency
-HD: Seagate Barracuda 1 Tb 7200 rpm 32 Mb cache
-Video Card: NVidia GTX 460 768 MB

Have also run Memtest for 7 days trying different combination of RAM in different slots, omitting RAM, and using new RAM. There is no anti-virus loaded on this machine at this time to eliminate its possibility of causing errors as well.

Thank you in advance
Joe

fimble · 07 Feb 2011

Hi CycloneJoe67 and Welcome.

STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL
Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Your latest dump file blames Pool_corruption which usually indicates bad drivers. Although your drivers look good.

You could update your graphics driver to the latest version. nVidia Graphics Driver.
Download and install Driver Sweeper.
Boot to Safe Mode
Uninstall current Graphics Drivers set up.
Run Driver Sweeper to clean up any left overs.
Reboot to Normal Mode.
Install your new Graphics Drivers.

Set Driver Verifier to check all drivers except system drivers.

GoTo Start and in the Search or Run... Window type verifier.exe and press Enter
Select Create custom settings (for code developers) and click "Next"
Select Select individual settings from a full list and click "Next"
Select every option EXCEPT for Low Resource Simulation and click "Next"
Select Select driver names from a list and click "Next"
Select all drivers listed that are NOT provided by Microsoft and click "Next"
Select "Finish" on the next page.

As a Priority:

Run an up to date scan with Malwarebytes' Free.

Download and install BSOD friendly Microsoft Security Essentials.

Bugcheck Analysis

Code:

Loading Dump File [D:\ DOWNLOADS\ DUMPS\CycloneJoe67\020511-16239-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\XSymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03017000 PsLoadedModuleList = 0xfffff800`03254e50
Debug session time: Sun Feb  6 07:31:32.250 2011 (UTC + 0:00)
System Uptime: 0 days 0:00:10.686
Loading Kernel Symbols
...............................................................
......................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 0, fffff800030a72b3}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+f13 )

Followup: Pool_corruption
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800030a72b3, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032bf0e0
 0000000000000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopCompleteRequest+ae3
fffff800`030a72b3 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

IRP_ADDRESS:  ffffffffffffff89

TRAP_FRAME:  fffff880031a7ec0 -- (.trap 0xfffff880031a7ec0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880031a7f80 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030a72b3 rsp=fffff880031a8050 rbp=fffff880031a81a0
 r8=fffff880031a8158  r9=fffff880031a8150 r10=0000000000000002
r11=fffff800030a67d0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe cy
nt!IopCompleteRequest+0xae3:
fffff800`030a72b3 488b09          mov     rcx,qword ptr [rcx] ds:00000000`00000000=????????????????
Resetting default scope

LOCK_ADDRESS:  fffff8000328b400 -- (!locks fffff8000328b400)

Resource @ nt!PiEngineLock (0xfffff8000328b400)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
    Lock address  : 0xfffff8000328b400
    Thread Count  : 0
    Thread address: 0x0000000000000000
    Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff80003086ca9 to fffff80003087740

STACK_TEXT:  
fffff880`031a7d78 fffff800`03086ca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`031a7d80 fffff800`03085920 : 00000000`00000000 fffff980`0224cee0 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`031a7ec0 fffff800`030a72b3 : 00000000`00000000 00000000`00000000 0000dc8c`00000006 00000000`00000001 : nt!KiPageFault+0x260
fffff880`031a8050 fffff800`030640c7 : 00000000`00000001 00000000`00000000 fffff8a0`0051fd00 00000000`00000000 : nt!IopCompleteRequest+0xae3
fffff880`031a8120 fffff800`03064487 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`031a81a0 fffff800`0318e910 : 00000000`00000001 fffff6fc`c0011320 00000000`00000000 fffff980`02264fe0 : nt!KiApcInterrupt+0xd7
fffff880`031a8330 fffff800`031ba356 : fffff800`03017000 00000000`20206f49 00000000`00000b8a fffff880`031a8848 : nt!MmFreeSpecialPool+0x450
fffff880`031a8470 fffff800`033433f4 : 00000000`00000010 00000000`00000082 fffff880`031a8548 fffff880`031a8848 : nt!ExDeferredFreePool+0xf13
fffff880`031a8520 fffff800`03502ff5 : ffffffff`00000001 00000000`00000000 00000000`00000001 00000000`000007ff : nt!RtlFreeUnicodeString+0x18
fffff880`031a8550 fffff800`03341794 : fffff880`031a8860 00000000`00000000 00000000`c0000023 00000000`00000000 : nt!PipCallDriverAddDeviceQueryRoutine+0x755
fffff880`031a8650 fffff800`03341aa2 : 00000000`00000000 00000000`00000000 fffff880`031a8860 fffff880`031a8828 : nt!RtlpCallQueryRegistryRoutine+0xf4
fffff880`031a86d0 fffff800`03472bcc : fffffa80`07f43390 00000000`00000000 00000000`c0000034 fffff880`031a8828 : nt!RtlQueryRegistryValues+0x17e
fffff880`031a87a0 fffff800`03474362 : fffffa80`07f43610 fffffa80`07f43390 00000000`00000001 fffff980`0000004c : nt!PipCallDriverAddDevice+0x45c
fffff880`031a8950 fffff800`034747fc : fffffa80`08f1f3f0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x2b2
fffff880`031a8bc0 fffff800`03189382 : 00000001`00000003 00000000`00000000 00000000`32706e50 00000000`00000084 : nt!PiProcessStartSystemDevices+0x7c
fffff880`031a8c10 fffff800`03094961 : fffff800`03189080 fffff800`034dee01 fffffa80`06742000 00000000`0000055a : nt!PnpDeviceActionWorker+0x302
fffff880`031a8cb0 fffff800`0332bc06 : 12213610`1e310e1c fffffa80`06742040 00000000`00000080 fffffa80`0671f890 : nt!ExpWorkerThread+0x111
fffff880`031a8d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PspSystemThreadStartup+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+f13
fffff800`031ba356 90              nop

SYMBOL_STACK_INDEX:  7

SYMBOL_NAME:  nt!ExDeferredFreePool+f13

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0xA_VRF_nt!ExDeferredFreePool+f13

BUCKET_ID:  X64_0xA_VRF_nt!ExDeferredFreePool+f13

Followup: Pool_corruption

Drivers:

Code:

fffff880`00ee6000 fffff880`00f3d000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
fffff880`02cb0000 fffff880`02d3a000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`00ff4000 fffff880`00fff000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
fffff880`00feb000 fffff880`00ff4000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
fffff880`019e0000 fffff880`019e7000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`0142b000 fffff880`0143c000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`019ad000 fffff880`019d7000   cdrom    cdrom.sys    Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00d34000 fffff880`00df4000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
fffff880`01947000 fffff880`01977000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00cd6000 fffff880`00d34000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`010fb000 fffff880`0116e000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
fffff880`01977000 fffff880`01985000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`0140d000 fffff880`0142b000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
fffff880`02c97000 fffff880`02ca6000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`01931000 fffff880`01947000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01991000 fffff880`0199a000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`01985000 fffff880`01991000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`0199a000 fffff880`019ad000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`10aa4000 fffff880`10b98000   dxgkrnl  dxgkrnl.sys  Tue Nov 02 02:51:31 2010 (4CCF7CB3)
fffff880`10b98000 fffff880`10bde000   dxgmms1  dxgmms1.sys  Tue Nov 02 02:50:56 2010 (4CCF7C90)
fffff880`0107c000 fffff880`01090000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`01030000 fffff880`0107c000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`018f7000 fffff880`01931000   fvevol   fvevol.sys   Sat Sep 26 03:34:26 2009 (4ABD7DB2)
fffff880`0116e000 fffff880`011b8000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
fffff800`035f3000 fffff800`0363c000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
fffff880`01000000 fffff880`01024000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
fffff880`018ee000 fffff880`018f7000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
fffff880`0121b000 fffff880`01231000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff800`00bb3000 fffff800`00bbd000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
fffff880`013d6000 fffff880`013f0000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
fffff880`0158f000 fffff880`015ba000   ksecpkg  ksecpkg.sys  Fri Dec 11 06:03:32 2009 (4B21E0B4)
fffff880`00c7e000 fffff880`00cc2000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
fffff880`00fd1000 fffff880`00feb000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`015ba000 fffff880`015c5000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00f46000 fffff880`00f50000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`0109d000 fffff880`010fb000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
fffff880`02c8c000 fffff880`02c97000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`018dc000 fffff880`018ee000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`0143d000 fffff880`0152f000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`02dc4000 fffff880`02dd3000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02d3a000 fffff880`02d7f000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
fffff880`0152f000 fffff880`0158f000   NETIO    NETIO.SYS    Tue Jul 14 00:21:46 2009 (4A5BC18A)
fffff880`015c5000 fffff880`015d6000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`03017000 fffff800`035f3000   nt       ntkrnlmp.exe Sat Jun 19 05:16:41 2010 (4C1C44A9)
fffff880`01233000 fffff880`013d6000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
fffff880`019d7000 fffff880`019e0000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`10aa2000 fffff880`10aa3180   nvBridge nvBridge.kmd Fri Jul 09 22:07:54 2010 (4C378FAA)
fffff880`0fe10000 fffff880`10aa1e00   nvlddmkm nvlddmkm.sys Fri Jul 09 22:15:58 2010 (4C37918E)
fffff880`02d88000 fffff880`02dae000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
fffff880`00f90000 fffff880`00fa5000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00f50000 fffff880`00f83000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`00fba000 fffff880`00fc1000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
fffff880`00fc1000 fffff880`00fd1000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`00cc2000 fffff880`00cd6000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`01090000 fffff880`0109c040   PxHlpa64 PxHlpa64.sys Tue Oct 20 19:08:42 2009 (4ADDFCAA)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
fffff880`01835000 fffff880`0183e000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`0183e000 fffff880`01847000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`019f5000 fffff880`019fe000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`018a2000 fffff880`018dc000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
fffff880`02dd3000 fffff880`02df0000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`0189a000 fffff880`018a2000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Mon Jun 14 04:39:04 2010 (4C15A458)
fffff880`01400000 fffff880`0140d000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
fffff880`015d6000 fffff880`015f4000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
fffff880`011b8000 fffff880`011de000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
fffff880`03ea9000 fffff880`03eff000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
fffff880`10bde000 fffff880`10beb000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00f83000 fffff880`00f90000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`019e7000 fffff880`019f5000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`01800000 fffff880`01825000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`00fa5000 fffff880`00fba000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
fffff880`0184e000 fffff880`0189a000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
fffff880`02dae000 fffff880`02dc4000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
fffff880`01825000 fffff880`01835000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00e33000 fffff880`00ed7000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00ed7000 fffff880`00ee6000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`02d7f000 fffff880`02d88000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`00f3d000 fffff880`00f46000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)

Let us know how it goes. If you get further problems with blue screens, attach your new dump files and details and we'll move on from there.