BSOD on Windows 7 ... Please help!

Hello All,

New member here. I read over the issues and did some looking at my own logs but it is not that simple for me to get to this without your help.

Attached is my BSOD files in zip format. It seems to happen mostly during web play back for flash.

I removed chrome, using firefox now, with flash hardware acceleration off. drivers for video card is the latest and no other updates are around. The bios is beta but that is the last they had and i just changed it. The old one had same issues.

PC is not over heating at all. I am really lost ... Thank you for the help.

X2 555
890 Gigabyte
4gb gskill
x5770

no virus or malware.

This Patin-Couffin low level access layer driver for CD devices from VSO Software should be removed
VSO Software:Â Video Converter and Burning Software
Remove Avast and use MSE

Remove Gigabyte EasyTune and Gigabyte Easy Saver
Update Realtek driver Realtek

Code:

Rt64win7.sys        fffff880`03c0d000    fffff880`03c3f000    0x00032000    0x49a65b0d    26/02/2009 13:04:13

Run a scan of Malwarebytes

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8200bc9eee8, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff880012d8550, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ecb100
 fffff8200bc9eee8 

FAULTING_IP: 
Ntfs!NtfsFindPrefixHashEntry+227
fffff880`012d8550 498b7c2418      mov     rdi,qword ptr [r12+18h]

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  where.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88009f67d60 -- (.trap 0xfffff88009f67d60)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000058 rbx=0000000000000000 rcx=000000000000021e
rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880012d8550 rsp=fffff88009f67ef0 rbp=0000000000007fa0
 r8=0000000015cd690f  r9=0000000000000000 r10=000000000000001a
r11=fffff88009f67f38 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
Ntfs!NtfsFindPrefixHashEntry+0x227:
fffff880`012d8550 498b7c2418      mov     rdi,qword ptr [r12+18h] ds:0040:00000000`00000018=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c463cf to fffff80002c9bd00

STACK_TEXT:  
fffff880`09f67bf8 fffff800`02c463cf : 00000000`00000050 fffff820`0bc9eee8 00000000`00000000 fffff880`09f67d60 : nt!KeBugCheckEx
fffff880`09f67c00 fffff800`02c99e2e : 00000000`00000000 fffff820`0bc9eee8 fffff800`02dce800 fffff8a0`0a9717b0 : nt! ?? ::FNODOBFM::`string'+0x44891
fffff880`09f67d60 fffff880`012d8550 : fffff880`09f684a0 fffff8a0`0020ab00 fffffa80`04993180 fffff980`0fa80568 : nt!KiPageFault+0x16e
fffff880`09f67ef0 fffff880`012d6fd2 : fffffa80`05ead9b0 fffffa80`04994350 fffff8a0`0020ab00 fffff880`0113f801 : Ntfs!NtfsFindPrefixHashEntry+0x227
fffff880`09f68020 fffff880`012d4911 : fffffa80`05ead9b0 fffffa80`05dd1010 fffff880`09f681f0 fffff880`09f68240 : Ntfs!NtfsFindStartingNode+0x452
fffff880`09f680f0 fffff880`0123da3d : fffffa80`05ead9b0 fffffa80`05dd1010 fffff880`09f684a0 fffffa80`05ead900 : Ntfs!NtfsCommonCreate+0x3e1
fffff880`09f682d0 fffff800`02ca8668 : fffff880`09f68410 fffff8a0`0bb19ac0 fffff8a0`0bb19ac0 fffff880`012d7e35 : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`09f68300 fffff880`0123e1bf : fffff880`0123da20 fffff880`0123d020 fffff880`09f68400 fffff880`012def00 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`09f683e0 fffff880`012d799c : 00000000`00000000 00000000`00000000 fffff880`09f68640 fffffa80`05dd1010 : Ntfs!NtfsCommonCreateOnNewStack+0x4f
fffff880`09f68440 fffff880`0111ebcf : fffffa80`04993030 fffffa80`05dd1010 00000000`00000000 fffffa80`04945de0 : Ntfs!NtfsFsdCreate+0x1ac
fffff880`09f685f0 fffff880`0113e2b9 : fffffa80`05dd1010 fffffa80`0499a010 fffffa80`05dd1000 fffffa80`04945de0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`09f68680 fffff800`02f99625 : 00000000`00000005 fffffa80`04124cc8 fffffa80`059c5b10 00000000`00000000 : fltmgr!FltpCreate+0x2a9
fffff880`09f68730 fffff800`02f95ec8 : fffffa80`04943060 fffff800`00000000 fffffa80`04124b10 fffffa80`00000001 : nt!IopParseDevice+0x5a5
fffff880`09f688c0 fffff800`02f970e6 : 00000000`00000000 fffffa80`04124b10 fffff8a0`029321c0 fffffa80`039ee7b0 : nt!ObpLookupObjectName+0x588
fffff880`09f689b0 fffff800`02f989ec : fffffa80`05c80040 00000000`00000000 fffffa80`05a5b701 fffffa80`05c80030 : nt!ObOpenObjectByName+0x306
fffff880`09f68a80 fffff800`02f842a4 : 00000000`000ddc88 fffff8a0`00100001 00000000`000de4e0 00000000`000ddc28 : nt!IopCreateFile+0x2bc
fffff880`09f68b20 fffff800`02c9af93 : fffffa80`03c45060 00000000`00000001 fffffa80`04c46b60 fffff800`02f92bc4 : nt!NtOpenFile+0x58
fffff880`09f68bb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Ntfs!NtfsFindPrefixHashEntry+227
fffff880`012d8550 498b7c2418      mov     rdi,qword ptr [r12+18h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  Ntfs!NtfsFindPrefixHashEntry+227

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d79997b

FAILURE_BUCKET_ID:  X64_0x50_Ntfs!NtfsFindPrefixHashEntry+227

BUCKET_ID:  X64_0x50_Ntfs!NtfsFindPrefixHashEntry+227

Followup: MachineOwner
---------

Thank you for the update. I did all except the gigabyte tuner as I use that for limiting my fan speed.

What was the main issue you think? the driver?

Amir911 said:

Thank you for the update. I did all except the gigabyte tuner as I use that for limiting my fan speed.

What was the main issue you think? the driver?

Try getting an updated version from Gigabyte :)

Just a note in passing. where.exe which is Related to Made by 3am Labs Inc. This file should be found in the Program Files\RemotelyAnywhere folder was running at the time of the crash.

I would remove it to test.