Windows 7: Frequent BSOD

Elipsis · 15 Apr 2011

Hello,

I keep getting repeated blue screens with various error messages (stop 0x1E and 0xA are the most common, but I've also had others eg. 0x3B, 0x50, 0x24). It started blue screening a while back, once a day or less, but recently it has been happening almost constantly. My computer will usually work for around 5 minutes before BSOD, and I can see no correlation to what I am doing on it at the time. I also don't think the BSOD started happening after I installed anything, but I can't be sure.

I have tried systematically taking out each memory stick, and even 2 memory sticks at a time, to see if it is that. I have tried doing a few system restores to times before it got this bad, and I also tried re-installing the BIOS from disc. It doesn't give me enough time to complete a virus scan (or much else for that matter), but I have had AVG installed on the computer fo quite a while now.

It's like looking for a needle in a haystack and I could do with some direction! I have attached the dmpfiles.

Thanks.

EDIT: managed to run an anti-virus scan with Avast, it found some viruses and corrupted files and fixed them, then promptly blue-screened again. Error stop 0x1A MEMORY_MANAGEMENT.

fimble · 15 Apr 2011

Hi Elipsis,

There's a rootkit that's been doing the rounds since December that shows itself through blue screens with usually a IRQ not less or equal stop code. It usually blames the iastor.sys driver as the cause.
It starts by blue screening/freezing on random programs, then when booting to Normal Mode, then when you try to boot to Safe Mode. Eventually it will allow no access whatsoever.

If this sounds familar, Download TDSSKiller and run it in Safe Mode. Just to rule out the rootkit.
As long as you can keep Safe Mode open for 30 seconds or so it should be enough to run TDSSKiller and remove the rootkit.

AVG is known to be a cause of BSOD's on Windows 7 systems. Suggest that you uninstall it. Download the correct AVG Remover for your system (32 or 64 bit).
If you have AVG ID protection installed, download the AVGID Protection Remover from the above link as well (it wouldn't hurt to download and run it anyway). Download Microsoft Security Essentials as its replacement. Re-boot to Safe Mode. In Safe Mode run the AVG Removal tools. Re-boot to normal mode and install MSE. Make sure your Windows firewall is enabled!

I'll look at your dump files and will update this post shortly.

***UPDATE***

STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED
Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

Your latest dump file lists ntkrnlmp.exe as the probable cause. This is a Windows System file and for it to be the cause of your crash is highly unlikely.
Old and incompatible drivers can and do cause issues with Windows 7, often giving false error codes.

~~Be aware that Avast! doesn't have a very good record with Windows 7 if you've downloaded and installed it~~(Was thinking Avira). While Blue Screening you'll be far better off with MSE

As a Priority:

gdrv.sys Fri Aug 08 19:28:54 2008 Gigabyte Easy Saver. Known issues with Windows 7, uninstall it.

Outdated Drivers. Update:

jraid.sys Tue Nov 04 02:20:09 2008 JMicron Raid Driver

netr28x.sys Fri Jun 19 08:56:06 2009 Ralink RT2860 series Wireless LAN Card

Rt64win7.sys Thu Feb 26 09:04:13 2009 Realtek PCIe GBE Family Controller v7.041

RTKVHD64.sys Thu Jul 24 11:05:39 2008 Realtek HD Audio R2.59

Bugcheck Analysis:

Code:

Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c4b000 PsLoadedModuleList = 0xfffff800`02e88e50
Debug session time: Fri Apr 15 07:01:25.083 2011 (UTC + 1:00)
System Uptime: 0 days 0:03:16.160
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002c985a1, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!KiApcInterrupt+1f1 )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002c985a1, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KiApcInterrupt+1f1
fffff800`02c985a1 48cf            iretq

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ef30e0
 ffffffffffffffff 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  wermgr.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff8800b1e34b8 -- (.exr 0xfffff8800b1e34b8)
ExceptionAddress: fffff80002c985a1 (nt!KiApcInterrupt+0x00000000000001f1)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000008
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff8800b1e3560 -- (.trap 0xfffff8800b1e3560)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000000006e rbx=0000000000000000 rcx=0000000000000092
rdx=0000000000000123 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c985a1 rsp=fffff8800b1e36f8 rbp=fffffa8004ab160d
 r8=0000000000000045  r9=0000000000000024 r10=0000000000000024
r11=0000000000000200 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di ng nz na pe nc
nt!KiApcInterrupt+0x1f1:
fffff800`02c985a1 48cf            iretq
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cf5a39 to fffff80002cbb740

STACK_TEXT:  
fffff880`0b1e2ce8 fffff800`02cf5a39 : 00000000`0000001e ffffffff`c0000005 fffff800`02c985a1 00000000`00000000 : nt!KeBugCheckEx
fffff880`0b1e2cf0 fffff800`02cbad82 : fffff880`0b1e34b8 00000000`00000124 fffff880`0b1e3560 00000000`000000bd : nt!KiDispatchException+0x1b9
fffff880`0b1e3380 fffff800`02cb968a : 00000000`00000000 fffffa80`04ab1670 fffffa80`04ab2990 00000000`000000bd : nt!KiExceptionDispatch+0xc2
fffff880`0b1e3560 fffff800`02c985a1 : fffffa80`04aaa18a 00000000`00000000 00000000`00000200 00000001`0b1e3720 : nt!KiGeneralProtectionFault+0x10a
fffff880`0b1e36f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiApcInterrupt+0x1f1


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiApcInterrupt+1f1
fffff800`02c985a1 48cf            iretq

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!KiApcInterrupt+1f1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!KiApcInterrupt+1f1

BUCKET_ID:  X64_0x1E_c0000005_nt!KiApcInterrupt+1f1

Followup: MachineOwner

Drivers:

Code:

fffff880`04355000 fffff880`04393000   1394ohci 1394ohci.sys Tue Jul 14 01:07:12 2009 (4A5BCC30)
fffff880`00ed8000 fffff880`00f2f000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
fffff880`04d3d000 fffff880`04dc7000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`043b8000 fffff880`043ce000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`010cb000 fffff880`010d6000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
fffff880`085c4000 fffff880`085cf000   asyncmac asyncmac.sys Tue Jul 14 01:10:13 2009 (4A5BCCE5)
fffff880`00fdd000 fffff880`00fe6000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00cc0000 fffff880`00cea000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
fffff880`0507e000 fffff880`050a0000   AtiHdmi  AtiHdmi.sys  Tue Mar 09 10:08:38 2010 (4B961E26)
fffff880`05621000 fffff880`05f1d000   atikmdag atikmdag.sys Wed Jan 26 22:48:28 2011 (4D40A4BC)
fffff880`03c1e000 fffff880`03c6c000   atikmpag atikmpag.sys Wed Jan 26 22:13:33 2011 (4D409C8D)
fffff880`07000000 fffff880`0702b000   AVGIDSDriver AVGIDSDriver.Sys Wed Mar 30 15:57:08 2011 (4D9344C4)
fffff880`0180c000 fffff880`01816000   AVGIDSEH AVGIDSEH.Sys Tue Feb 22 05:23:04 2011 (4D634838)
fffff880`03e9e000 fffff880`03ea9000   AVGIDSFilter AVGIDSFilter.Sys Thu Feb 10 04:59:37 2011 (4D5370B9)
fffff880`02c11000 fffff880`02c60000   avgldx64 avgldx64.sys Fri Jan 07 04:36:39 2011 (4D269857)
fffff880`01876000 fffff880`01885000   avgmfx64 avgmfx64.sys Tue Mar 01 12:25:15 2011 (4D6CE5AB)
fffff880`01800000 fffff880`0180c000   avgrkx64 avgrkx64.sys Wed Jan 19 02:31:31 2011 (4D364D03)
fffff880`02c63000 fffff880`02cc2000   avgtdia  avgtdia.sys  Thu Feb 10 05:50:32 2011 (4D537CA8)
fffff880`0188e000 fffff880`01895000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`02c00000 fffff880`02c11000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`03fc2000 fffff880`03fe0000   bowser   bowser.sys   Tue Jul 14 00:23:50 2009 (4A5BC206)
fffff960`006f0000 fffff960`00717000   cdd      cdd.dll      unavailable (00000000)
fffff880`0184c000 fffff880`01876000   cdrom    cdrom.sys    Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
fffff880`019cf000 fffff880`019ff000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00d46000 fffff880`00da4000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
fffff880`043a8000 fffff880`043b8000   CompositeBus CompositeBus.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`06fd3000 fffff880`06fe1000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`02de0000 fffff880`02dfe000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
fffff880`02dd1000 fffff880`02de0000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`019b9000 fffff880`019cf000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`050dd000 fffff880`050ff000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`06fed000 fffff880`06ff6000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`06fe1000 fffff880`06fed000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`06e00000 fffff880`06e13000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`06e13000 fffff880`06e1f000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`03c6c000 fffff880`03d60000   dxgkrnl  dxgkrnl.sys  Tue Nov 02 02:51:31 2010 (4CCF7CB3)
fffff880`05f1d000 fffff880`05f63000   dxgmms1  dxgmms1.sys  Tue Nov 02 02:50:56 2010 (4CCF7C90)
fffff880`01122000 fffff880`01136000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`010d6000 fffff880`01122000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
fffff880`013eb000 fffff880`013f5000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`0197f000 fffff880`019b9000   fvevol   fvevol.sys   Sat Sep 26 03:34:26 2009 (4ABD7DB2)
fffff880`01194000 fffff880`011de000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
fffff880`0854a000 fffff880`08553000   gdrv     gdrv.sys     Fri Aug 08 19:28:54 2008 (489C9066)
fffff800`02c02000 fffff800`02c4b000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
fffff880`05f63000 fffff880`05f87000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
fffff880`05105000 fffff880`0511e000   HIDCLASS HIDCLASS.SYS Tue Jul 14 01:06:21 2009 (4A5BCBFD)
fffff880`06e54000 fffff880`06e5c080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`06e46000 fffff880`06e54000   hidusb   hidusb.sys   Tue Jul 14 01:06:22 2009 (4A5BCBFE)
fffff880`03efa000 fffff880`03fc2000   HTTP     HTTP.sys     Tue Jul 14 00:22:16 2009 (4A5BC1A8)
fffff880`01976000 fffff880`0197f000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
fffff880`01200000 fffff880`01216000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`00e00000 fffff880`00e1b000   jraid    jraid.sys    Tue Nov 04 02:20:09 2008 (490FB159)
fffff880`05600000 fffff880`0560f000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`0512b000 fffff880`05139000   kbdhid   kbdhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff800`00bd0000 fffff800`00bd3000   kdcom    kdcom.dll    Mon Mar 14 11:05:09 2011 (4D7DF665)
fffff880`04814000 fffff880`04d3d000   kl1      kl1.sys      Tue Sep 01 12:29:21 2009 (4A9D0591)
fffff880`03d92000 fffff880`03dd5000   ks       ks.sys       Thu Mar 04 04:32:25 2010 (4B8F37D9)
fffff880`013c0000 fffff880`013da000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 06:03:32 2009 (4B21E0B4)
fffff880`050ff000 fffff880`05104200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`06e3e000 fffff880`06e45680   Lachesis Lachesis.sys Fri Aug 17 08:48:44 2007 (46C552DC)
fffff880`0518b000 fffff880`051a0000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`05147000 fffff880`0516a000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`06e5d000 fffff880`06e61980   Lycosa   Lycosa.sys   Fri Jan 18 08:51:42 2008 (4790689E)
fffff880`00cee000 fffff880`00d32000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
fffff880`05139000 fffff880`05147000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`0560f000 fffff880`0561e000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`0511e000 fffff880`0512b000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`00fc3000 fffff880`00fdd000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`03fe0000 fffff880`03ff8000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`03e00000 fffff880`03e2d000   mrxsmb   mrxsmb.sys   Sat Feb 27 07:52:19 2010 (4B88CF33)
fffff880`03e2d000 fffff880`03e7b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 07:52:28 2010 (4B88CF3C)
fffff880`03e7b000 fffff880`03e9e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 07:52:26 2010 (4B88CF3A)
fffff880`014ad000 fffff880`014b8000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00f38000 fffff880`00f42000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`01136000 fffff880`01194000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
fffff880`02dc6000 fffff880`02dd1000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`01964000 fffff880`01976000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`014d2000 fffff880`015c4000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`043f2000 fffff880`043fe000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`03de7000 fffff880`03dfa000   ndisuio  ndisuio.sys  Tue Jul 14 01:09:25 2009 (4A5BCCB5)
fffff880`04200000 fffff880`0422f000   ndiswan  ndiswan.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`05069000 fffff880`0507e000   NDProxy  NDProxy.SYS  Tue Jul 14 01:10:05 2009 (4A5BCCDD)
fffff880`04800000 fffff880`0480f000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02cc2000 fffff880`02d07000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Tue Jul 14 00:21:46 2009 (4A5BC18A)
fffff880`04292000 fffff880`04348000   netr28x  netr28x.sys  Fri Jun 19 08:56:06 2009 (4A3B4496)
fffff880`014b8000 fffff880`014c9000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`02dba000 fffff880`02dc6000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`02c4b000 fffff800`03227000   nt       ntkrnlmp.exe Sat Jun 19 05:16:41 2010 (4C1C44A9)
fffff880`0121d000 fffff880`013c0000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
fffff880`01885000 fffff880`0188e000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`051a0000 fffff880`051f3000   nwifi    nwifi.sys    Tue Jul 14 01:07:23 2009 (4A5BCC3B)
fffff880`04dd0000 fffff880`04df6000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
fffff880`00f82000 fffff880`00f97000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00f42000 fffff880`00f75000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`00fac000 fffff880`00fb3000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
fffff880`00fb3000 fffff880`00fc3000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`013da000 fffff880`013eb000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`070fc000 fffff880`071a2000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`050a0000 fffff880`050dd000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00d32000 fffff880`00d46000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`043ce000 fffff880`043f2000   rasl2tp  rasl2tp.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`0422f000 fffff880`0424a000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`0424a000 fffff880`0426b000   raspptp  raspptp.sys  Tue Jul 14 01:10:18 2009 (4A5BCCEA)
fffff880`0426b000 fffff880`04285000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`02d69000 fffff880`02dba000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
fffff880`018c8000 fffff880`018d1000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`0149b000 fffff880`014a4000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`014a4000 fffff880`014ad000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`0192a000 fffff880`01964000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
fffff880`03c00000 fffff880`03c18000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`03d60000 fffff880`03d92000   Rt64win7 Rt64win7.sys Thu Feb 26 09:04:13 2009 (49A65B0D)
fffff880`06e69000 fffff880`06fd2f80   RTKVHD64 RTKVHD64.sys Thu Jul 24 11:05:39 2008 (488853F3)
fffff880`0109c000 fffff880`010cb000   SCSIPORT SCSIPORT.SYS Tue Jul 14 01:01:04 2009 (4A5BCAC0)
fffff880`071a2000 fffff880`071ad000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`04393000 fffff880`0439f000   serenum  serenum.sys  Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`02d1d000 fffff880`02d3a000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`01922000 fffff880`0192a000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`08553000 fffff880`085c4000   spsys    spsys.sys    Mon May 11 18:20:58 2009 (4A085E7A)
fffff880`084b4000 fffff880`0854a000   srv      srv.sys      Fri Aug 27 04:38:00 2010 (4C773318)
fffff880`0702b000 fffff880`07092000   srv2     srv2.sys     Fri Aug 27 04:37:46 2010 (4C77330A)
fffff880`071ad000 fffff880`071da000   srvnet   srvnet.sys   Fri Aug 27 04:37:24 2010 (4C7732F4)
fffff880`04285000 fffff880`04286480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jun 14 04:39:04 2010 (4C15A458)
fffff880`071da000 fffff880`071ec000   tcpipreg tcpipreg.sys Tue Jul 14 01:09:49 2009 (4A5BCCCD)
fffff880`015e2000 fffff880`015ef000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
fffff880`015c4000 fffff880`015e2000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
fffff880`02d55000 fffff880`02d69000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
fffff960`00510000 fffff960`0051a000   TSDDD    TSDDD.dll    Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`01073000 fffff880`01099000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
fffff880`03dd5000 fffff880`03de7000   umbus    umbus.sys    Tue Jul 14 01:06:56 2009 (4A5BCC20)
fffff880`06e1f000 fffff880`06e3c000   usbccgp  usbccgp.sys  Tue Jul 14 01:06:45 2009 (4A5BCC15)
fffff880`06e3c000 fffff880`06e3df00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
fffff880`05fea000 fffff880`05ffb000   usbehci  usbehci.sys  Tue Jul 14 01:06:30 2009 (4A5BCC06)
fffff880`0500f000 fffff880`05069000   usbhub   usbhub.sys   Tue Jul 14 01:07:09 2009 (4A5BCC2D)
fffff880`05f94000 fffff880`05fea000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
fffff880`05f87000 fffff880`05f94000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00f75000 fffff880`00f82000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`01895000 fffff880`018a3000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`018a3000 fffff880`018c8000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`00f97000 fffff880`00fac000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00da4000 fffff880`00e00000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
fffff880`018d6000 fffff880`01922000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
fffff880`04348000 fffff880`04355000   vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
fffff880`02d07000 fffff880`02d1d000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
fffff880`02d3a000 fffff880`02d55000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
fffff880`0148b000 fffff880`0149b000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00e25000 fffff880`00ec9000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00ec9000 fffff880`00ed8000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`04dc7000 fffff880`04dd0000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00320000   win32k   win32k.sys   Wed Oct 20 04:08:46 2010 (4CBE5D3E)
fffff880`0439f000 fffff880`043a8000   wmiacpi  wmiacpi.sys  Tue Jul 14 00:31:02 2009 (4A5BC3B6)
fffff880`00f2f000 fffff880`00f38000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`0516a000 fffff880`0518b000   WudfPf   WudfPf.sys   Tue Jul 14 01:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`01816000 fffff880`01824000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01824000 fffff880`01830000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01830000 fffff880`01839000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01839000 fffff880`0184c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

Let us know how it goes. If you get further problems with blue screens, attach your new dump files and details and we'll move on from there.

Elipsis · 15 Apr 2011

Thanks, I managed to complete a full scan with avast and found and removed a rootkit. I have completely removed AVG now too. It seems more stable now, but it has crashed once since removing the rootkit and other viruses.

fimble · 15 Apr 2011

Post Updated! Have you run the TDSSKiller?

Elipsis · 15 Apr 2011

Thanks, I did the TDSSKiller and it found and cured a problem, and I'm just going through your other suggestions now. Fingers crossed!

Elipsis · 15 Apr 2011

I've removed the rootkit, uninstalled Gigabyte Energy Saver, and updated the drivers. My computer is more stable now, but it did crash again, minidump attached. The error code on BSOD was something to do with memory management again.

Dave76 · 15 Apr 2011

Quote: Originally Posted by fimble

Be aware that Avast! doesn't have a very good record with Windows 7 if you've downloaded and installed it. While Blue Screening you'll be far better off with MSE

Good work.

Agree that for testing it is a good idea to remove any Anti-virus and use MSE for testing purposes.

I haven't seen Avast causing problems with Windows 7, which doesn't mean it never has.
It is recommended by many members on this forum, I use MSE and Avast on different computers and haven't had problems with either.

YMMV

fimble · 16 Apr 2011

Quote: Originally Posted by Dave76

Quote: Originally Posted by fimble

Be aware that Avast! doesn't have a very good record with Windows 7 if you've downloaded and installed it. While Blue Screening you'll be far better off with MSE

Good work.

Agree that for testing it is a good idea to remove any Anti-virus and use MSE for testing purposes.

I haven't seen Avast causing problems with Windows 7, which doesn't mean it never has.
It is recommended by many members on this forum, I use MSE and Avast on different computers and haven't had problems with either.

YMMV

I'm retracting that comment. Thanks Dave76. I was thinking of Avira.

fimble · 16 Apr 2011

Hi Elipsis

First an apology. You'll be OK with Avast! when done, I was thinking of Avira.
Good job on the driver updating/removal as well!!

STOP 0x0000001A: MEMORY_MANAGEMENT
Usual causes: Device driver, memory, kernel

Your latest dump file lists ntkrnlmp.exe as the probable cause. This is a Windows System file.

As a Priority:

There are some AVG drivers still on your system which will not help stability.
AVGIDSEH.Sys
avgldx64.sys
avgmfx64.sys
Did you run the removal tool, preferably in Safe Mode?
AVG Removal Tools

Memory_Management usually means drivers or your RAM/RAM settings are mismatched or incorrect.
Make sure your Ram is set to the default (no overclocking) settings.

Outdated/Old Drivers to update:

Although you updated the RTWin64 driver, if you follow the Realtek links provided below you'll get the very latest. There isn't a problem with the one you have but it's always (?) better to have the latest available drivers.

Lachesis.sys Fri Aug 17 08:48:44 2007 Razer Lachesis Mouse driver
Lycosa.sys Fri Jan 18 08:51:42 2008 Razer Tarantula Keyboard Driver Razer Support

Rt64win7.sys Mon Sep 20 08:38:09 2010 Realtek PCIe GBE Family Controller v7.041

RtHDMIVX.sys Mon May 24 13:07:55 2010 ATI HDMI Audio Device (in RED) R2.55

Bugcheck Analysis:

Code:

Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03005000 PsLoadedModuleList = 0xfffff800`03242e50
Debug session time: Sat Apr 16 02:34:47.070 2011 (UTC + 1:00)
System Uptime: 0 days 0:22:44.037
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41790, fffffa800467b410, ffff, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041790, The subtype of the bugcheck.
Arg2: fffffa800467b410
Arg3: 000000000000ffff
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41790

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  avgrsa.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800030e8f9e to fffff80003075740

STACK_TEXT:  
fffff880`09774648 fffff800`030e8f9e : 00000000`0000001a 00000000`00041790 fffffa80`0467b410 00000000`0000ffff : nt!KeBugCheckEx
fffff880`09774650 fffff800`030b70da : 00000000`00000000 00000000`0bedffff fffffa80`00000000 fffffa80`08f72b30 : nt! ?? ::FNODOBFM::`string'+0x33906
fffff880`09774810 fffff800`03074993 : ffffffff`ffffffff fffff880`09774ad0 fffff880`09774ad8 00000000`00008000 : nt!NtFreeVirtualMemory+0x5ca
fffff880`09774900 fffff800`03070f30 : fffff800`03305a9f fffffa80`08f72b30 fffffa80`075975e0 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
fffff880`09774a98 fffff800`03305a9f : fffffa80`08f72b30 fffffa80`075975e0 00000000`00000000 00000000`00000000 : nt!KiServiceLinkage
fffff880`09774aa0 fffff800`0335ac4e : 00000000`0bde0000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlFreeUserStack+0x27
fffff880`09774ad0 fffff800`0335e72d : fffff880`00000000 00000000`0bedf900 000007ff`fff8c000 00000000`00000000 : nt!PspExitThread+0x7ae
fffff880`09774b90 fffff800`0335e969 : fffffa80`075975e0 00000000`00000000 fffffa80`075975e0 00000000`00000000 : nt!PspTerminateThreadByPointer+0x4d
fffff880`09774be0 fffff800`03074993 : fffffa80`075975e0 fffff880`09774ca0 00000000`00000000 fffffa80`08ef4fc0 : nt!NtTerminateThread+0x45
fffff880`09774c20 00000000`76e0028a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0bedf968 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76e0028a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+33906
fffff800`030e8f9e cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+33906

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+33906

BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+33906

Followup: MachineOwner

Drivers:

Code:

fffff880`058fb000 fffff880`05939000   1394ohci 1394ohci.sys Tue Jul 14 01:07:12 2009 (4A5BCC30)
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
fffff880`02ce4000 fffff880`02d6e000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`05998000 fffff880`059ae000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`0106d000 fffff880`01078000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
fffff880`03858000 fffff880`03861000   aswFsBlk aswFsBlk.SYS Wed Feb 23 14:54:56 2011 (4D651FC0)
fffff880`0381e000 fffff880`03858000   aswMonFlt aswMonFlt.sys Wed Feb 23 14:55:04 2011 (4D651FC8)
fffff880`04582000 fffff880`0458c000   aswRdr   aswRdr.SYS   Wed Feb 23 14:55:11 2011 (4D651FCF)
fffff880`01800000 fffff880`01880000   aswSnx   aswSnx.SYS   Wed Feb 23 14:56:59 2011 (4D65203B)
fffff880`048e0000 fffff880`0492b000   aswSP    aswSP.SYS    Wed Feb 23 14:57:02 2011 (4D65203E)
fffff880`02c8f000 fffff880`02c9f000   aswTdi   aswTdi.SYS   Wed Feb 23 14:55:51 2011 (4D651FF7)
fffff880`0abd5000 fffff880`0abe0000   asyncmac asyncmac.sys Tue Jul 14 01:10:13 2009 (4A5BCCE5)
fffff880`00e6a000 fffff880`00e73000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`01043000 fffff880`0106d000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
fffff880`04ab8000 fffff880`053b4000   atikmdag atikmdag.sys Wed Jan 26 22:48:28 2011 (4D40A4BC)
fffff880`04967000 fffff880`049b5000   atikmpag atikmpag.sys Wed Jan 26 22:13:33 2011 (4D409C8D)
fffff880`0194a000 fffff880`01954000   AVGIDSEH AVGIDSEH.Sys Tue Feb 22 05:23:04 2011 (4D634838)
fffff880`02c00000 fffff880`02c4f000   avgldx64 avgldx64.sys Fri Jan 07 04:36:39 2011 (4D269857)
fffff880`01880000 fffff880`0188f000   avgmfx64 avgmfx64.sys Tue Mar 01 12:25:15 2011 (4D6CE5AB)
fffff880`019b4000 fffff880`019bb000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`02ddd000 fffff880`02dee000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`039dd000 fffff880`039fb000   bowser   bowser.sys   Tue Jul 14 00:23:50 2009 (4A5BC206)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      unavailable (00000000)
fffff880`0198a000 fffff880`019b4000   cdrom    cdrom.sys    Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00e73000 fffff880`00f33000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
fffff880`0191a000 fffff880`0194a000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00cff000 fffff880`00d5d000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01136000 fffff880`011a9000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
fffff880`05988000 fffff880`05998000   CompositeBus CompositeBus.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`07da4000 fffff880`07db2000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`02dbf000 fffff880`02ddd000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
fffff880`04046000 fffff880`04055000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`01904000 fffff880`0191a000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`07c5e000 fffff880`07c80000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`07dbe000 fffff880`07dc7000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`07db2000 fffff880`07dbe000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`07dc7000 fffff880`07dda000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`07d36000 fffff880`07d42000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`05633000 fffff880`05727000   dxgkrnl  dxgkrnl.sys  Tue Nov 02 02:51:31 2010 (4CCF7CB3)
fffff880`05727000 fffff880`0576d000   dxgmms1  dxgmms1.sys  Tue Nov 02 02:50:56 2010 (4CCF7C90)
fffff880`0ab2e000 fffff880`0ab64000   fastfat  fastfat.SYS  Tue Jul 14 00:23:28 2009 (4A5BC1F0)
fffff880`05939000 fffff880`05946000   fdc      fdc.sys      Tue Jul 14 01:00:54 2009 (4A5BCAB6)
fffff880`010c4000 fffff880`010d8000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`057f4000 fffff880`057ff000   flpydisk flpydisk.sys Tue Jul 14 01:00:54 2009 (4A5BCAB6)
fffff880`01078000 fffff880`010c4000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`018ca000 fffff880`01904000   fvevol   fvevol.sys   Sat Sep 26 03:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
fffff800`035e1000 fffff800`0362a000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
fffff880`0576d000 fffff880`05791000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
fffff880`07c86000 fffff880`07ce2000   HdAudio  HdAudio.sys  Tue Jul 14 01:06:59 2009 (4A5BCC23)
fffff880`07d74000 fffff880`07d8d000   HIDCLASS HIDCLASS.SYS Tue Jul 14 01:06:21 2009 (4A5BCBFD)
fffff880`07d8d000 fffff880`07d95080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`07d66000 fffff880`07d74000   hidusb   hidusb.sys   Tue Jul 14 01:06:22 2009 (4A5BCBFE)
fffff880`03915000 fffff880`039dd000   HTTP     HTTP.sys     Tue Jul 14 00:22:16 2009 (4A5BC1A8)
fffff880`014ef000 fffff880`014f8000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
fffff880`05952000 fffff880`05970000   i8042prt i8042prt.sys Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`04951000 fffff880`04967000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`00c6c000 fffff880`00c8d000   jraid    jraid.sys    Thu Nov 25 03:27:17 2010 (4CEDD795)
fffff880`05970000 fffff880`0597f000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`07d96000 fffff880`07da4000   kbdhid   kbdhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff800`00bb6000 fffff800`00bc0000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
fffff880`04059000 fffff880`04582000   kl1      kl1.sys      Tue Sep 01 12:29:21 2009 (4A9D0591)
fffff880`053b4000 fffff880`053f7000   ks       ks.sys       Thu Mar 04 04:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 06:03:32 2009 (4B21E0B4)
fffff880`07c80000 fffff880`07c85200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`07de8000 fffff880`07def680   Lachesis Lachesis.sys Fri Aug 17 08:48:44 2007 (46C552DC)
fffff880`03882000 fffff880`03897000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`048ac000 fffff880`048cf000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`07d61000 fffff880`07d65980   Lycosa   Lycosa.sys   Fri Jan 18 08:51:42 2008 (4790689E)
fffff880`00ca7000 fffff880`00ceb000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
fffff880`07dda000 fffff880`07de8000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`04aa0000 fffff880`04aaf000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`07df0000 fffff880`07dfd000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`00c8d000 fffff880`00ca7000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`0188f000 fffff880`018c0000   MpFilter MpFilter.sys Wed Sep 15 01:19:28 2010 (4C901110)
fffff880`0ab1e000 fffff880`0ab2e000   MpNWMon  MpNWMon.sys  Wed Sep 15 01:19:30 2010 (4C901112)
fffff880`03800000 fffff880`03818000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`049c7000 fffff880`049f4000   mrxsmb   mrxsmb.sys   Sat Feb 27 07:52:19 2010 (4B88CF33)
fffff880`0a4cb000 fffff880`0a519000   mrxsmb10 mrxsmb10.sys Sat Feb 27 07:52:28 2010 (4B88CF3C)
fffff880`0a519000 fffff880`0a53c000   mrxsmb20 mrxsmb20.sys Sat Feb 27 07:52:26 2010 (4B88CF3A)
fffff880`013eb000 fffff880`013f6000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`010d8000 fffff880`01136000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
fffff880`0403b000 fffff880`04046000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`014dd000 fffff880`014ef000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`014fb000 fffff880`015ed000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`059d2000 fffff880`059de000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`038ea000 fffff880`038fd000   ndisuio  ndisuio.sys  Tue Jul 14 01:09:25 2009 (4A5BCCB5)
fffff880`04a57000 fffff880`04a86000   ndiswan  ndiswan.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`0485a000 fffff880`0486f000   NDProxy  NDProxy.SYS  Tue Jul 14 01:10:05 2009 (4A5BCCDD)
fffff880`045d1000 fffff880`045e0000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02c9f000 fffff880`02ce4000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Tue Jul 14 00:21:46 2009 (4A5BC18A)
fffff880`09209000 fffff880`0932f000   netr28x  netr28x.sys  Thu Dec 30 09:34:19 2010 (4D1C521B)
fffff880`00de9000 fffff880`00dfa000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`0402f000 fffff880`0403b000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`03005000 fffff800`035e1000   nt       ntkrnlmp.exe Sat Jun 19 05:16:41 2010 (4C1C44A9)
fffff880`01248000 fffff880`013eb000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
fffff880`018c0000 fffff880`018c9000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`03897000 fffff880`038ea000   nwifi    nwifi.sys    Tue Jul 14 01:07:23 2009 (4A5BCC3B)
fffff880`04595000 fffff880`045bb000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
fffff880`00d90000 fffff880`00da5000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00d5d000 fffff880`00d90000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`00ff3000 fffff880`00ffa000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`0a53c000 fffff880`0a5e2000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`07c21000 fffff880`07c5e000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00ceb000 fffff880`00cff000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`059ae000 fffff880`059d2000   rasl2tp  rasl2tp.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`059de000 fffff880`059f9000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`05611000 fffff880`05632000   raspptp  raspptp.sys  Tue Jul 14 01:10:18 2009 (4A5BCCEA)
fffff880`04a86000 fffff880`04aa0000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`02d6e000 fffff880`02dbf000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
fffff880`015ed000 fffff880`015f6000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`015f6000 fffff880`015ff000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`01235000 fffff880`0123e000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
fffff880`038fd000 fffff880`03915000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`04a00000 fffff880`04a57000   Rt64win7 Rt64win7.sys Mon Sep 20 08:38:09 2010 (4C970F61)
fffff880`0486f000 fffff880`048ab500   RtHDMIVX RtHDMIVX.sys Mon May 24 13:07:55 2010 (4BFA6C1B)
fffff880`00dba000 fffff880`00de9000   SCSIPORT SCSIPORT.SYS Tue Jul 14 01:01:04 2009 (4A5BCAC0)
fffff880`0a5e2000 fffff880`0a5ed000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`05946000 fffff880`05952000   serenum  serenum.sys  Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`045e0000 fffff880`045fd000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`014d5000 fffff880`014dd000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`0aa88000 fffff880`0ab1e000   srv      srv.sys      Fri Aug 27 04:38:00 2010 (4C773318)
fffff880`0a43f000 fffff880`0a4a6000   srv2     srv2.sys     Fri Aug 27 04:37:46 2010 (4C77330A)
fffff880`0a400000 fffff880`0a42d000   srvnet   srvnet.sys   Fri Aug 27 04:37:24 2010 (4C7732F4)
fffff880`059f9000 fffff880`059fa480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Mon Jun 14 04:39:04 2010 (4C15A458)
fffff880`0a42d000 fffff880`0a43f000   tcpipreg tcpipreg.sys Tue Jul 14 01:09:49 2009 (4A5BCCCD)
fffff880`02c82000 fffff880`02c8f000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
fffff880`02c64000 fffff880`02c82000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
fffff880`0401b000 fffff880`0402f000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
fffff960`005b0000 fffff960`005ba000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`0492b000 fffff880`04951000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
fffff880`07ce2000 fffff880`07d36000   udfs     udfs.sys     Tue Jul 14 00:23:37 2009 (4A5BC1F9)
fffff880`049b5000 fffff880`049c7000   umbus    umbus.sys    Tue Jul 14 01:06:56 2009 (4A5BCC20)
fffff880`07d42000 fffff880`07d5f000   usbccgp  usbccgp.sys  Tue Jul 14 01:06:45 2009 (4A5BCC15)
fffff880`07d5f000 fffff880`07d60f00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
fffff880`05600000 fffff880`05611000   usbehci  usbehci.sys  Tue Jul 14 01:06:30 2009 (4A5BCC06)
fffff880`04800000 fffff880`0485a000   usbhub   usbhub.sys   Tue Jul 14 01:07:09 2009 (4A5BCC2D)
fffff880`0579e000 fffff880`057f4000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
fffff880`05791000 fffff880`0579e000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00fe6000 fffff880`00ff3000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`019bb000 fffff880`019c9000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`019c9000 fffff880`019ee000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`00da5000 fffff880`00dba000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
fffff880`011a9000 fffff880`011f5000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
fffff880`0932f000 fffff880`0933c000   vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
fffff880`045bb000 fffff880`045d1000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
fffff880`04000000 fffff880`0401b000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
fffff880`019ee000 fffff880`019fe000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00f33000 fffff880`00fd7000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00fd7000 fffff880`00fe6000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`0458c000 fffff880`04595000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff960`00030000 fffff960`00340000   win32k   win32k.sys   unavailable (00000000)
fffff880`0597f000 fffff880`05988000   wmiacpi  wmiacpi.sys  Tue Jul 14 00:31:02 2009 (4A5BC3B6)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`03861000 fffff880`03882000   WudfPf   WudfPf.sys   Tue Jul 14 01:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`093b8000 fffff880`093c5000   vwifibus.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`09292000 fffff880`093b8000   netr28x.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00126000
fffff880`0938a000 fffff880`09397000   vwifibus.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`09264000 fffff880`0938a000   netr28x.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00126000
fffff880`058ee000 fffff880`058fb000   vwifibus.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`05804000 fffff880`058ee000   netr28x.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  000EA000
fffff880`0ab64000 fffff880`0abd5000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01954000 fffff880`01962000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01962000 fffff880`0196e000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0196e000 fffff880`01977000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01977000 fffff880`0198a000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

Let us know how it goes.

Dave76 · 16 Apr 2011

@fimble, no problem.

@Elipsis
Can you enter your system specs in the 'My System Specs' in the lower left corner of any of your posts.
We need to know what system you have to troubleshoot hardware.

D/L CPUZ and post a snip of the CPU, Mainboard, Memory, and SPD tabs.

For posting the information , enter 'Snipping tool' in the Start button > Search box, hit enter. Select the area you want to post and save to a convenient place.
How to Post a Screenshot in Seven Forums

Have you been checking your temperatures?

Use Real Temp for Intel CPU orCore Temp for AMD CPU , run one of these and check the CPU temps when at idle, under load and/or testing.
Let us know the minimum and maximum temps you get.

Go to your BIOS and tell us what the CPU, RAM and North Bridge (NB) or integrated memory controller voltages are.
North Bridge (NB) or integrated memory controller depending on your system.

Windows 7: Frequent BSOD

Frequent BSOD problems?