First off, I would just install microsoft security essentials to replace the loss of AVG, it's not the greatest thing but it is stable in win 7.
Give me a little time and I'll edit this post with the dump info.
edit: it seems the acronis disk filter driver is interfering with activity. I'm still running debug on the two most recent dump files though.
Code:
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001904fb
Arg2: 96a83788
Arg3: 96a83360
Arg4: 8b0fa20f
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for tdrpm273.sys
FAULTING_MODULE: 82051000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 0
EXCEPTION_RECORD: 96a83788 -- (.exr 0xffffffff96a83788)
ExceptionAddress: 8b0fa20f (Ntfs!TxfShutdownRm+0x000001e9)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 326a8b04
Attempt to read from address 326a8b04
CONTEXT: 96a83360 -- (.cxr 0xffffffff96a83360)
eax=8b056820 ebx=00000000 ecx=8b0c1d4a edx=8fb041ec esi=8fb04000 edi=8fb04060
eip=8b0fa20f esp=96a83850 ebp=96a838d0 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
Ntfs!TxfShutdownRm+0x1e9:
8b0fa20f a1048b6a32 mov eax,dword ptr ds:[326A8B04h] ds:0023:326a8b04=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x24
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 8b0fb810 to 8b0fa20f
STACK_TEXT:
96a838d0 8b0fb810 96a83a70 8fb04000 00000000 Ntfs!TxfShutdownRm+0x1e9
96a8392c 8b0f5a55 96a83a70 859a10d8 00000000 Ntfs!TxfShutdownVolume+0xef
96a83978 8b0f5b47 96a83a70 859a10d8 00000001 Ntfs!TxfShutdownVolumeNoRaise+0x75
96a839b0 8b0f5c23 01a83a70 859a10d8 00000001 Ntfs!NtfsShutdownVolume+0x5d
96a839c4 8b0c8731 96a83a70 859a10d8 00000000 Ntfs!NtfsShutdownVolumeWorker+0x12
96a83a24 8b0f5d47 96a83a70 00000000 8b0f5c11 Ntfs!NtfsForEachVcb+0x10c
96a83b90 8208d4ac 84b7dab8 85445588 85445588 Ntfs!NtfsFsdShutdown+0xf6
WARNING: Stack unwind information not available. Following frames may be wrong.
96a83ba8 8af7e3e8 84b7d7d0 00000000 8591fd30 nt+0x3c4ac
96a83bd4 8208d4ac 84b7d7d0 85445588 8b62f520 fltmgr!FltpDispatch+0xe2
96a83bec 8b63355e 8b654f7c 84b7d7d0 85445588 nt+0x3c4ac
96a83bf0 8b654f7c 84b7d7d0 85445588 60000001 tdrpm273+0x555e
96a83bf4 84b7d7d0 85445588 60000001 8b655e31 tdrpm273+0x26f7c
96a83bf8 85445588 60000001 8b655e31 84b5a518 0x84b7d7d0
96a83bfc 60000001 8b655e31 84b5a518 84b5a518 0x85445588
96a83c00 8b655e31 84b5a518 84b5a518 8591fd30 0x60000001
96a83c04 84b5a518 84b5a518 8591fd30 84b5a518 tdrpm273+0x27e31
96a83c08 84b5a518 8591fd30 84b5a518 8b654f07 0x84b5a518
96a83c0c 8591fd30 84b5a518 8b654f07 60000001 0x84b5a518
96a83c10 84b5a518 8b654f07 60000001 84b5a500 0x8591fd30
96a83c14 8b654f07 60000001 84b5a500 8591fd30 0x84b5a518
96a83c18 60000001 84b5a500 8591fd30 8b62f520 tdrpm273+0x26f07
96a83c1c 84b5a500 8591fd30 8b62f520 8591fd30 0x60000001
96a83c20 8591fd30 8b62f520 8591fd30 8b655da6 0x84b5a500
96a83c24 8b62f520 8591fd30 8b655da6 60000001 0x8591fd30
96a83c28 8591fd30 8b655da6 60000001 84b5a501 tdrpm273+0x1520
96a83c2c 8b655da6 60000001 84b5a501 84b5a518 0x8591fd30
96a83c30 60000001 84b5a501 84b5a518 8591fd30 tdrpm273+0x27da6
96a83c34 84b5a501 84b5a518 8591fd30 84b7dab8 0x60000001
96a83c38 84b5a518 8591fd30 84b7dab8 8b655323 0x84b5a501
96a83c3c 8591fd30 84b7dab8 8b655323 84b5a518 0x84b5a518
96a83c40 84b7dab8 8b655323 84b5a518 8591fba0 0x8591fd30
96a83c44 8b655323 84b5a518 8591fba0 8591fc58 0x84b7dab8
96a83c48 84b5a518 8591fba0 8591fc58 96a83c80 tdrpm273+0x27323
96a83c4c 8591fba0 8591fc58 96a83c80 96a81000 0x84b5a518
96a83c50 8591fc58 96a83c80 96a81000 8b65328c 0x8591fba0
96a83c54 96a83c80 96a81000 8b65328c 96a84000 0x8591fc58
96a83c58 96a81000 8b65328c 96a84000 8591fba0 0x96a83c80
96a83c80 823737eb 00000001 00000000 00000000 0x96a81000
96a83cb4 823736d8 821b77c8 821920c0 86eb8490 nt+0x3227eb
96a83cec 82377a5d 00000001 86eb8490 8218b580 nt+0x3226d8
96a83d00 820bf03b 00000000 00000000 86eb8490 nt+0x326a5d
96a83d50 8225f9df 80000000 b9b8c0ba 00000000 nt+0x6e03b
96a83d90 821111d9 820bef2e 80000000 00000000 nt+0x20e9df
00000000 00000000 00000000 00000000 00000000 nt+0xc01d9
CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
8b0fa20d - Ntfs!TxfShutdownRm+1e7
[ 68:78 ]
1 error : !Ntfs (8b0fa20d)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
MEMORY_CORRUPTOR: ONE_BIT
STACK_COMMAND: .cxr 0xffffffff96a83360 ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption Code:
80ba1000 80ba9000 kdcom kdcom.dll Mon Jul 13 20:08:58 2009 (4A5BDAAA)
81850000 81858000 framebuf framebuf.dll unavailable (00000000)
81950000 81b9b000 win32k win32k.sys unavailable (00000000)
81ba0000 81bb7000 dxg dxg.sys unavailable (00000000)
81bd0000 81bd9000 TSDDD TSDDD.dll unavailable (00000000)
8201a000 82051000 hal halmacpi.dll Mon Jul 13 18:11:03 2009 (4A5BBF07)
82051000 82461000 nt ntkrnlpa.exe Tue Oct 26 21:30:44 2010 (4CC78ED4)
82600000 82611000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 18:12:47 2009 (4A5BBF6F)
82611000 8262b000 WudfPf WudfPf.sys Mon Jul 13 18:50:13 2009 (4A5BC835)
8262b000 82636000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 18:13:13 2009 (4A5BBF89)
82636000 82647000 PSHED PSHED.dll Mon Jul 13 20:09:36 2009 (4A5BDAD0)
82647000 8264f000 BOOTVID BOOTVID.dll Mon Jul 13 20:04:34 2009 (4A5BD9A2)
8264f000 82691000 CLFS CLFS.SYS Mon Jul 13 18:11:10 2009 (4A5BBF0E)
82691000 8273c000 CI CI.dll Mon Jul 13 20:09:28 2009 (4A5BDAC8)
8273c000 827ad000 Wdf01000 Wdf01000.sys Mon Jul 13 18:11:36 2009 (4A5BBF28)
827ad000 827bb000 WDFLDR WDFLDR.SYS Mon Jul 13 18:11:25 2009 (4A5BBF1D)
827bb000 827ff000 usbhub usbhub.sys Mon Jul 13 18:52:06 2009 (4A5BC8A6)
8ae00000 8ae0b000 dump_dumpata dump_dumpata.sys Mon Jul 13 18:11:16 2009 (4A5BBF14)
8ae0b000 8ae53000 ACPI ACPI.sys Mon Jul 13 18:11:11 2009 (4A5BBF0F)
8ae53000 8ae5c000 WMILIB WMILIB.SYS Mon Jul 13 18:11:22 2009 (4A5BBF1A)
8ae5c000 8ae64000 msisadrv msisadrv.sys Mon Jul 13 18:11:09 2009 (4A5BBF0D)
8ae64000 8ae8e000 pci pci.sys Mon Jul 13 18:11:16 2009 (4A5BBF14)
8ae8e000 8ae99000 vdrvroot vdrvroot.sys Mon Jul 13 18:46:19 2009 (4A5BC74B)
8ae99000 8aeaa000 partmgr partmgr.sys Mon Jul 13 18:11:35 2009 (4A5BBF27)
8aeaa000 8aeb2000 compbatt compbatt.sys Mon Jul 13 18:19:18 2009 (4A5BC0F6)
8aeb2000 8aebd000 BATTC BATTC.SYS Mon Jul 13 18:19:15 2009 (4A5BC0F3)
8aebd000 8aecd000 volmgr volmgr.sys Mon Jul 13 18:11:25 2009 (4A5BBF1D)
8aecd000 8af18000 volmgrx volmgrx.sys Mon Jul 13 18:11:41 2009 (4A5BBF2D)
8af18000 8af1f000 pciide pciide.sys Mon Jul 13 18:11:19 2009 (4A5BBF17)
8af1f000 8af2d000 PCIIDEX PCIIDEX.SYS Mon Jul 13 18:11:15 2009 (4A5BBF13)
8af2d000 8af43000 mountmgr mountmgr.sys Mon Jul 13 18:11:27 2009 (4A5BBF1F)
8af43000 8af4c000 atapi atapi.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
8af4c000 8af6f000 ataport ataport.SYS Mon Jul 13 18:11:18 2009 (4A5BBF16)
8af6f000 8af78000 amdxata amdxata.sys Tue May 19 12:57:35 2009 (4A12F30F)
8af78000 8afac000 fltmgr fltmgr.sys Mon Jul 13 18:11:13 2009 (4A5BBF11)
8afac000 8afbd000 fileinfo fileinfo.sys Mon Jul 13 18:21:51 2009 (4A5BC18F)
8afbd000 8afc6300 PxHelp20 PxHelp20.sys Tue Jun 23 18:16:17 2009 (4A416241)
8afc7000 8aff9000 netbt netbt.sys Mon Jul 13 18:12:18 2009 (4A5BBF52)
8b000000 8b00d000 crashdmp crashdmp.sys Mon Jul 13 18:45:50 2009 (4A5BC72E)
8b00d000 8b017000 Dxapi Dxapi.sys Mon Jul 13 18:25:25 2009 (4A5BC265)
8b017000 8b146000 Ntfs Ntfs.sys Mon Jul 13 18:12:05 2009 (4A5BBF45)
8b146000 8b171000 msrpc msrpc.sys Mon Jul 13 18:11:59 2009 (4A5BBF3F)
8b171000 8b184000 ksecdd ksecdd.sys Mon Jul 13 18:11:56 2009 (4A5BBF3C)
8b184000 8b1e1000 cng cng.sys Mon Jul 13 18:32:55 2009 (4A5BC427)
8b1e1000 8b1ef000 pcw pcw.sys Mon Jul 13 18:11:10 2009 (4A5BBF0E)
8b1ef000 8b1f8000 Fs_Rec Fs_Rec.sys Mon Jul 13 18:11:14 2009 (4A5BBF12)
8b200000 8b217000 USBSTOR USBSTOR.SYS Mon Jul 13 18:51:19 2009 (4A5BC877)
8b217000 8b222000 usbprint usbprint.sys Mon Jul 13 19:17:06 2009 (4A5BCE82)
8b222000 8b22b000 dump_atapi dump_atapi.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
8b22c000 8b2e3000 ndis ndis.sys Mon Jul 13 18:12:24 2009 (4A5BBF58)
8b2e3000 8b321000 NETIO NETIO.SYS Mon Jul 13 18:12:35 2009 (4A5BBF63)
8b321000 8b346000 ksecpkg ksecpkg.sys Thu Dec 10 22:04:22 2009 (4B21C4C6)
8b346000 8b3d7100 timntr timntr.sys Wed Jun 02 07:57:37 2010 (4C065541)
8b3d8000 8b3ef000 tdx tdx.sys Mon Jul 13 18:12:10 2009 (4A5BBF4A)
8b3ef000 8b3fa000 TDI TDI.SYS Mon Jul 13 18:12:12 2009 (4A5BBF4C)
8b404000 8b54d000 tcpip tcpip.sys Sun Jun 13 22:36:59 2010 (4C15A3DB)
8b54d000 8b57e000 fwpkclnt fwpkclnt.sys Mon Jul 13 18:12:03 2009 (4A5BBF43)
8b57e000 8b586380 vmstorfl vmstorfl.sys Mon Jul 13 18:28:44 2009 (4A5BC32C)
8b587000 8b5c6000 volsnap volsnap.sys Mon Jul 13 18:11:34 2009 (4A5BBF26)
8b5c6000 8b5e7000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 18:25:49 2009 (4A5BC27D)
8b5e7000 8b5f2000 Msfs Msfs.SYS Mon Jul 13 18:11:26 2009 (4A5BBF1E)
8b5f2000 8b600000 Npfs Npfs.SYS Mon Jul 13 18:11:31 2009 (4A5BBF23)
8b600000 8b607000 Null Null.SYS Mon Jul 13 18:11:12 2009 (4A5BBF10)
8b607000 8b60e000 Beep Beep.SYS Mon Jul 13 18:45:00 2009 (4A5BC6FC)
8b60e000 8b61a000 vga vga.sys Mon Jul 13 18:25:50 2009 (4A5BC27E)
8b61a000 8b627000 watchdog watchdog.sys Mon Jul 13 18:24:10 2009 (4A5BC21A)
8b62e000 8b6e3fa0 tdrpm273 tdrpm273.sys Tue Aug 10 04:56:21 2010 (4C612245)
8b6e4000 8b6ec000 rdpencdd rdpencdd.sys Mon Jul 13 19:01:39 2009 (4A5BCAE3)
8b6ec000 8b713fc0 snapman snapman.sys Thu Nov 11 05:05:27 2010 (4CDBCDF7)
8b714000 8b741000 rdyboost rdyboost.sys Mon Jul 13 18:22:02 2009 (4A5BC19A)
8b741000 8b751000 mup mup.sys Mon Jul 13 18:14:14 2009 (4A5BBFC6)
8b751000 8b759000 hwpolicy hwpolicy.sys Mon Jul 13 18:11:01 2009 (4A5BBF05)
8b759000 8b78b000 fvevol fvevol.sys Fri Sep 25 21:24:21 2009 (4ABD7B55)
8b78b000 8b79c000 disk disk.sys Mon Jul 13 18:11:28 2009 (4A5BBF20)
8b79c000 8b7c1000 CLASSPNP CLASSPNP.SYS Mon Jul 13 18:11:20 2009 (4A5BBF18)
8b7c1000 8b7c9000 AtiPcie AtiPcie.sys Tue May 05 10:00:16 2009 (4A005480)
8b7c9000 8b7e0000 usbccgp usbccgp.sys Mon Jul 13 18:51:31 2009 (4A5BC883)
8b7e0000 8b7f3000 HIDCLASS HIDCLASS.SYS Mon Jul 13 18:51:01 2009 (4A5BC865)
8b7f3000 8b7fe000 mouhid mouhid.sys Mon Jul 13 18:45:08 2009 (4A5BC704)
90c00000 90c16000 cdfs cdfs.sys Mon Jul 13 18:11:14 2009 (4A5BBF12)
90c16000 90c17700 USBD USBD.SYS Mon Jul 13 18:51:05 2009 (4A5BC869)
90c18000 90c23000 hidusb hidusb.sys Mon Jul 13 18:51:04 2009 (4A5BC868)
90c28000 90c73000 USBPORT USBPORT.SYS Mon Jul 13 18:51:13 2009 (4A5BC871)
90c73000 90c82000 usbehci usbehci.sys Mon Jul 13 18:51:14 2009 (4A5BC872)
90c82000 90ca1000 HDAudBus HDAudBus.sys Mon Jul 13 18:50:55 2009 (4A5BC85F)
90ca1000 90cac000 usbuhci usbuhci.sys Mon Jul 13 18:51:10 2009 (4A5BC86E)
90cac000 90cba000 blbdrive blbdrive.sys Mon Jul 13 18:23:04 2009 (4A5BC1D8)
90cba000 90cc7000 CompositeBus CompositeBus.sys Mon Jul 13 18:45:26 2009 (4A5BC716)
90cc7000 90cd1000 mssmbios mssmbios.sys Mon Jul 13 18:19:25 2009 (4A5BC0FD)
90cd1000 90ce3000 AgileVpn AgileVpn.sys Mon Jul 13 18:55:00 2009 (4A5BC954)
90ce3000 90cfb000 rasl2tp rasl2tp.sys Mon Jul 13 18:54:33 2009 (4A5BC939)
90cfb000 90d06000 ndistapi ndistapi.sys Mon Jul 13 18:54:24 2009 (4A5BC930)
90d06000 90d28000 ndiswan ndiswan.sys Mon Jul 13 18:54:34 2009 (4A5BC93A)
90d28000 90d40000 raspppoe raspppoe.sys Mon Jul 13 18:54:53 2009 (4A5BC94D)
90d40000 90d57000 raspptp raspptp.sys Mon Jul 13 18:54:47 2009 (4A5BC947)
90d57000 90d6e000 rassstp rassstp.sys Mon Jul 13 18:54:57 2009 (4A5BC951)
90d6e000 90d78000 rdpbus rdpbus.sys Mon Jul 13 19:02:40 2009 (4A5BCB20)
90d78000 90d88000 termdd termdd.sys Mon Jul 13 19:01:35 2009 (4A5BCADF)
90d88000 90d95000 kbdclass kbdclass.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
90d95000 90da2000 mouclass mouclass.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
90da2000 90da3380 swenum swenum.sys Mon Jul 13 18:45:08 2009 (4A5BC704)
90da4000 90dd8000 ks ks.sys Wed Mar 03 21:57:52 2010 (4B8F2FC0)
90dd8000 90dd9680 spio spio.sys Thu Mar 06 00:33:48 2008 (47CF904C)
90dda000 90de8000 umbus umbus.sys Mon Jul 13 18:51:38 2009 (4A5BC88A)
90de8000 90df9000 NDProxy NDProxy.SYS Mon Jul 13 18:54:27 2009 (4A5BC933)
90df9000 90dff480 HIDPARSE HIDPARSE.SYS Mon Jul 13 18:50:59 2009 (4A5BC863)
90e00000 90e1f000 cdrom cdrom.sys Mon Jul 13 18:11:24 2009 (4A5BBF1C)
90e1f000 90e29000 usbohci usbohci.sys Mon Jul 13 18:51:14 2009 (4A5BC872)
90e29000 90e35000 kbdhid kbdhid.sys Mon Jul 13 18:45:09 2009 (4A5BC705)
90e38000 90e92000 afd afd.sys Mon Jul 13 18:12:34 2009 (4A5BBF62)
90e92000 90e99000 wfplwf wfplwf.sys Mon Jul 13 18:53:51 2009 (4A5BC90F)
90e99000 90eb8000 pacer pacer.sys Mon Jul 13 18:53:58 2009 (4A5BC916)
90eb8000 90ec6000 netbios netbios.sys Mon Jul 13 18:53:54 2009 (4A5BC912)
90ec6000 90f07000 rdbss rdbss.sys Mon Jul 13 18:14:26 2009 (4A5BBFD2)
90f07000 90f11000 nsiproxy nsiproxy.sys Mon Jul 13 18:12:08 2009 (4A5BBF48)
90f11000 90f75000 csc csc.sys Mon Jul 13 18:15:08 2009 (4A5BBFFC)
90f75000 90f8d000 dfsc dfsc.sys Mon Jul 13 18:14:16 2009 (4A5BBFC8)
90f8d000 90fae000 tunnel tunnel.sys Mon Jul 13 18:54:03 2009 (4A5BC91B)
90fae000 90fff000 yk62x86 yk62x86.sys Mon Sep 28 01:33:34 2009 (4AC058BE)
9b02b000 9b071000 nwifi nwifi.sys Mon Jul 13 18:51:59 2009 (4A5BC89F)
9b071000 9b081000 ndisuio ndisuio.sys Mon Jul 13 18:53:51 2009 (4A5BC90F)
9b081000 9b09a000 bowser bowser.sys Mon Jul 13 18:14:21 2009 (4A5BBFCD)
9b09a000 9b0ac000 mpsdrv mpsdrv.sys Mon Jul 13 18:52:52 2009 (4A5BC8D4)
9b0ac000 9b0cf000 mrxsmb mrxsmb.sys Sat Feb 27 01:32:02 2010 (4B88CA72)
9b0cf000 9b10a000 mrxsmb10 mrxsmb10.sys Sat Feb 27 01:32:21 2010 (4B88CA85)
9b10a000 9b125000 mrxsmb20 mrxsmb20.sys Sat Feb 27 01:32:11 2010 (4B88CA7B)
Unloaded modules:
8b7c9000 8b7d6000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
8b7d6000 8b7e1000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
8b7e1000 8b7ea000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
8b7ea000 8b7fb000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
8b6e4000 8b6ec000 spldr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000 If another member can provide additional information on this file it would be helpful
spio.sys Thu Mar 06 00:33:48 2008 -
http://www.runscanner.net/lib/spio.sys.html It's not in the driver database.
AtiPcie.sys - Tue May 05 10:00:16 2009 - Should be updated if possible - system manufacturer or
http://www.AMD.com
Removing acronis may resolve the issue, but both memory and system file integrity checks are in order I think.
info on file check -
SFC /SCANNOW Command - System File Checker
Info on memory test -
Memory Diagnostics Tool