Windows 7: Random BSOD, need help!

vanquish3r · 18 Mar 2011

Hi,

I've been getting a lot of random BSOD's lately and I just can't seem to pinpoint the problem. The only new thing i've installed are hard drives, and i've disconnected/swapped most of them out, yet the problem still persists. The requested zip file is attached with the perfmon html & other folder.

Thanks in advance.

- x86 (32-bit) or x64 ? x64
- the original installed OS on the system? Originally had Vista, full formatted and installed windows 7 64.
- an OEM or full retail version? Full Retail
- What is the age of system (hardware)? About 4 years or so
- What is the age of OS installation (have you re-installed the OS?) July 2010 I believe was the last reinstall.

Basic Computer Specs
Core 2 Duo E6600 2.4ghz @ 3.5ghz (overclocked since 2007 and has been rock solid stable)
4 gigs of ram
nvidia gtx 260 core 216
Intel G2 80g SSD
550W thermaltake TR-500P PSU

zigzag3143 · 18 Mar 2011

Quote: Originally Posted by vanquish3r

Hi,

I've been getting a lot of random BSOD's lately and I just can't seem to pinpoint the problem. The only new thing i've installed are hard drives, and i've disconnected/swapped most of them out, yet the problem still persists. The requested zip file is attached with the perfmon html & other folder.

Thanks in advance.

- x86 (32-bit) or x64 ? x64
- the original installed OS on the system? Originally had Vista, full formatted and installed windows 7 64.
- an OEM or full retail version? Full Retail
- What is the age of system (hardware)? About 4 years or so
- What is the age of OS installation (have you re-installed the OS?) July 2010 I believe was the last reinstall.

Basic Computer Specs
Core 2 Duo E6600 2.4ghz @ 3.5ghz (overclocked since 2007 and has been rock solid stable)
4 gigs of ram
nvidia gtx 260 core 216
Intel G2 80g SSD
550W thermaltake TR-500P PSU

A memory exception caused by Your transwiz speech to speech translator> I would re-install to test or remove it if un-needed.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\031711-12682-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02c14000 PsLoadedModuleList = 0xfffff800`02e59e90
Debug session time: Thu Mar 17 15:22:56.593 2011 (GMT-4)
System Uptime: 0 days 0:11:52.154
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff88002e64505, 0, ffffffffffffffff}

Unable to load image spwz.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for spwz.sys
*** ERROR: Module load completed but symbols could not be loaded for spwz.sys
Probably caused by : spwz.sys ( spwz+424ce )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88002e64505, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
USBPORT!USBPORT_DereferenceDeviceHandle+ad
fffff880`02e64505 488b4320        mov     rax,qword ptr [rbx+20h]

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec50e8
 ffffffffffffffff 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002ce0028 to fffff80002c94640

STACK_TEXT:  
fffff800`00b9c008 fffff800`02ce0028 : 00000000`0000001e ffffffff`c0000005 fffff880`02e64505 00000000`00000000 : nt!KeBugCheckEx
fffff800`00b9c010 fffff800`02c93cc2 : fffff800`00b9c7e8 40000000`00090060 fffff800`00b9c890 fffffa80`062056e8 : nt! ?? ::FNODOBFM::`string'+0x4987d
fffff800`00b9c6b0 fffff800`02c925ca : fffffa80`039d4000 fffff880`02e4d54a 00000000`00000000 00000000`00000002 : nt!KiExceptionDispatch+0xc2
fffff800`00b9c890 fffff880`02e64505 : fffffa80`05348050 00000000`000008b0 fffffa80`06205610 fffffa80`053481a0 : nt!KiGeneralProtectionFault+0x10a
fffff800`00b9ca20 fffff880`02e4f5bc : fffffa80`05348050 fffffa80`03a48f02 00000000`00000000 fffffa80`053481a0 : USBPORT!USBPORT_DereferenceDeviceHandle+0xad
fffff800`00b9ca80 fffff880`02e4fab7 : fffffa80`066dbc02 fffffa80`06252480 00000000`ffffffff fffffa80`05348ea8 : USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x9f8
fffff800`00b9cb60 fffff880`02e4d64f : fffffa80`05348ea8 fffffa80`053481a0 fffffa80`05349040 00000000`00000000 : USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x3a7
fffff800`00b9cbc0 fffff880`02e3ef89 : fffffa80`05348050 00000000`00000000 fffffa80`0513f702 fffffa80`05348ea8 : USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xf3
fffff800`00b9cc00 fffff880`010494ce : fffffa80`0513f000 fffffa80`05348ea8 fffffa80`0513f750 fffffa80`05348ec0 : USBPORT!USBPORT_Xdpc_Worker+0x1d9
fffff800`00b9cc30 fffffa80`0513f000 : fffffa80`05348ea8 fffffa80`0513f750 fffffa80`05348ec0 fffff800`02e06e80 : spwz+0x424ce
fffff800`00b9cc38 fffffa80`05348ea8 : fffffa80`0513f750 fffffa80`05348ec0 fffff800`02e06e80 00000000`00000000 : 0xfffffa80`0513f000
fffff800`00b9cc40 fffffa80`0513f750 : fffffa80`05348ec0 fffff800`02e06e80 00000000`00000000 fffff800`00b96080 : 0xfffffa80`05348ea8
fffff800`00b9cc48 fffffa80`05348ec0 : fffff800`02e06e80 00000000`00000000 fffff800`00b96080 00000000`00000022 : 0xfffffa80`0513f750
fffff800`00b9cc50 fffff800`02e06e80 : 00000000`00000000 fffff800`00b96080 00000000`00000022 00000000`00000000 : 0xfffffa80`05348ec0
fffff800`00b9cc58 00000000`00000000 : fffff800`00b96080 00000000`00000022 00000000`00000000 00000000`00000000 : nt!KiInitialPCR+0x180


STACK_COMMAND:  kb

FOLLOWUP_IP: 
spwz+424ce
fffff880`010494ce ??              ???

SYMBOL_STACK_INDEX:  9

SYMBOL_NAME:  spwz+424ce

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: spwz

IMAGE_NAME:  spwz.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ad24632

FAILURE_BUCKET_ID:  X64_0x1E_spwz+424ce

BUCKET_ID:  X64_0x1E_spwz+424ce

Followup: MachineOwner
---------

0: kd> lmvm spwz
start             end                 module name
fffff880`01007000 fffff880`0112d000   spwz     T (no symbols)           
    Loaded symbol image file: spwz.sys
    Image path: spwz.sys
    Image name: spwz.sys
    Timestamp:        Sun Oct 11 16:55:14 2009 (4AD24632)
    CheckSum:         000D6B26
    ImageSize:        00126000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Jonathan_King · 18 Mar 2011

Ken - that driver is a variant of SPTD.

Please uninstall Daemon Tools (the program using it), and then remove SPTD with this tool: http://www.duplexsecure.com/download...t-v177-x64.exe

vanquish3r · 18 Mar 2011

Uninstalled daemon tools & used the SPTD remover tool. I will post here again if the problem persists. Thanks again!

vanquish3r · 19 Mar 2011

D'oh! it happened again

BSOD while browsing the web.

Attached is the minidump file from the latest crash.

vanquish3r · 19 Mar 2011

Also I wanted to throw in that I ran memtest just now and it passed with no errors.

Jonathan_King · 19 Mar 2011

Definitely update this Realtek ethernet driver:

Code:

Rt64win7.sys        Thu Feb 26 04:04:13 2009 (49A65B0D)

Update link: Realtek

You might also remove AVG for now, use the tool found here: AVG - Download tools

Replace it with MSE: http://www.microsoft.com/security_essentials

...Summary of the dumps:

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Sat Mar 19 14:31:03.236 2011 (UTC - 4:00)
System Uptime: 0 days 0:08:29.672
Probably caused by : ntkrnlmp.exe ( nt!SwapContext+11 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!SwapContext+11
SystemProductName = EP45-UD3P
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

vanquish3r · 20 Mar 2011

Did all of the above and still another crash

Attached another minidump file from the most recent crash.

mgorman87 · 20 Mar 2011

What kind of sound card are you running? This last crash listed Audiodg.exe which is the audio engine for the OS. Try this out and see if it does anything while I look into your system dump some more.

Disabling Audio Effects

Right-click the speaker icon in the lower right corner.
Select Playback Devices from the menu. A list of devices should appear on the screen.
Double-click the device that has a green checkmark. The properties windows for that device should open.
Click the Enhancements tab at the top.
From the list of enhancements, uncheck all of them, or click the Disable all enhancements checkbox.
Click the OK button to save your changes and close the window.
Click OK to close the Playback Devices window.

vanquish3r · 20 Mar 2011

Running an HT Omega Striker 7.1. I've gone ahead and disabled all the enhancements.

Windows 7: Random BSOD, need help!

Random BSOD, need help! problems?