BSOD on shutdown

Hello and Welcome to SF !

Seems like AVG and nVidia i.e. AVGIDSFilter.sys and nvoclk64.sys causing the problem here. I would recommend to uninstall AVG completely and use the Removal tool AVG - Download tools to remove the left over files. As for nVidia nVidia Driver Cleanup Guide | Captain Debugger

You could reinstall AVG once the BSOD Stops.

Bugcheck:

Code:

nable to load image \SystemRoot\system32\DRIVERS\AVGIDSFilter.Sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for AVGIDSFilter.Sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSFilter.Sys

Could not read faulting driver name
Probably caused by : AVGIDSFilter.Sys ( AVGIDSFilter+1406 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffaa00b3b6e40, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800036f92a9, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800039020e0
 fffffaa00b3b6e40 

FAULTING_IP: 
nt!MmCopyToCachedPage+219
fffff800`036f92a9 488b07          mov     rax,qword ptr [rdi]

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  Steam.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff8800e5161b0 -- (.trap 0xfffff8800e5161b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000fffffffff
rdx=fffff8000365a000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800036f92a9 rsp=fffff8800e516340 rbp=fffff8800e516380
 r8=0000098000000000  r9=00000000126dc020 r10=0000058000000000
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!MmCopyToCachedPage+0x219:
fffff800`036f92a9 488b07          mov     rax,qword ptr [rdi] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800037498c1 to fffff800036ca740

STACK_TEXT:  
fffff880`0e516048 fffff800`037498c1 : 00000000`00000050 fffffaa0`0b3b6e40 00000000`00000000 fffff880`0e5161b0 : nt!KeBugCheckEx
fffff880`0e516050 fffff800`036c882e : 00000000`00000000 00000000`00000000 0000003d`00000000 ffffffff`dc3cba00 : nt! ?? ::FNODOBFM::`string'+0x40e8b
fffff880`0e5161b0 fffff800`036f92a9 : 00000000`00000002 ffffffff`ffffffff 00000000`00000002 ffffffff`ffffffff : nt!KiPageFault+0x16e
fffff880`0e516340 fffff800`036f66ce : fffff980`0523c000 00000000`126dc020 fffff880`00000000 00000000`00001000 : nt!MmCopyToCachedPage+0x219
fffff880`0e516530 fffff800`036f6434 : fffffa80`0a73d910 00000000`126dc020 fffff880`0e516670 00000000`00000000 : nt!CcMapAndCopyInToCache+0x20e
fffff880`0e516620 fffff880`012dffb8 : 00000000`03200000 fffffa80`063d1000 fffff880`0e516710 fffffa80`000a0000 : nt!CcCopyWrite+0x194
fffff880`0e5166b0 fffff880`0116a132 : fffffa80`063d1070 fffff880`0116d732 fffff880`000a0000 00000000`000a0001 : Ntfs!NtfsCopyWriteA+0x208
fffff880`0e5168a0 fffff880`0116dc2a : fffff880`0e516970 fffffa80`060689b8 00000000`12640000 00000000`000a0000 : fltmgr!FltpPerformFastIoCall+0xf2
fffff880`0e516900 fffff880`0118b7fe : 00000000`000a0000 00000000`00000000 fffffa80`063d1070 fffff880`0e516b00 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`0e516940 fffff880`04080406 : fffffa80`063d10e4 00000000`10d2e874 00000000`00000000 fffffa80`063d10e4 : fltmgr!FltpFastIoWrite+0x1ce
fffff880`0e5169e0 fffffa80`063d10e4 : 00000000`10d2e874 00000000`00000000 fffffa80`063d10e4 00000000`00000000 : AVGIDSFilter+0x1406
fffff880`0e5169e8 00000000`10d2e874 : 00000000`00000000 fffffa80`063d10e4 00000000`00000000 00000000`12640020 : 0xfffffa80`063d10e4
fffff880`0e5169f0 00000000`00000000 : fffffa80`063d10e4 00000000`00000000 00000000`12640020 fffff880`0e516b00 : 0x10d2e874


STACK_COMMAND:  kb

FOLLOWUP_IP: 
AVGIDSFilter+1406
fffff880`04080406 ??              ???

SYMBOL_STACK_INDEX:  a

SYMBOL_NAME:  AVGIDSFilter+1406

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: AVGIDSFilter

IMAGE_NAME:  AVGIDSFilter.Sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c5896d9

FAILURE_BUCKET_ID:  X64_0x50_AVGIDSFilter+1406

BUCKET_ID:  X64_0x50_AVGIDSFilter+1406

Followup: MachineOwner
---------

paulmh5 said:

I removed AVG this morning, kicking and blue screening as it went but my PC still managed to error on boot up this evening.
None of my recent BSODs with the driver verifier enabled have produced any dump files, is there something I need to do to get them as its making troubleshooting difficult with no files to upload for you guys.

If AVG is removed but still the dump files are showing left overs of AVG. It's hard to move forward without rule out that cause. Make sure you run the removal tool posted in that article.

Let's rule out Hardware issues we have to run some test to conform it. Follow this article Hardware Diagnostic | Captain Debugger

Update the Motherboard Chipset drivers.

paulmh5 said:

I've got the latest release from Nvidia for my board, 15.53 I think.

I would suggest to reinstall it. If still you're getting BSOD then I guess we might need to reinstall Windows because lot of files corrupted and missing on SFC report is not a good sign.