BSOD when running memory intensive apps

Hi, when running memory certain intensive applications like VLC (when watching videos) or uTorrent, I intermitentley get BSOD crashes (screen shot below), which can happen every 10 minutes to several hours apart.

Basic System Info:
Windows 7 x64 Ultimate Service Pack 1
Full Retail Version
Original OS installed on my bootcamp partition
System is about 3 years old
The OS was recently installed (last two weeks or so) on the Hard Drive from an image file/backup of a year old build from a previous hard drive that was physically damaged/dropped but had otherwise been working fine.

Thanks in advance for any help/guidance

[IMG]file:///C:/Users/Christopher/Desktop/BSOD%20Screenshot.jpg[/IMG]

If you have time to spare I would test your ram with memtest86. If everything passes then report back but if you start getting errors then test each stick individually to narrow down which is/are bad.

Thanks, I started the memtest early this morning, when I left for work it was about halfway through the second pass with no errors so far, but I let it keep running and will post an update when I get home tonight.

I am going to assume you don't get any errors on your RAM. That is good news as it is most likely software. Are all your drivers updated?

It ran 8 passes and found no errors. As far as I can tell everything is up to date, I've had widows check for new drivers and double check most of the major components with their manufacturer websites. I know there's got to be a conflict somewhere but I don't now how to spot or find it.

I have narrowed this down a little more and it seems to only happen when I am downloading with utorrent, and I was downloading at the times the BSOD happened while I was watching video. I still however have no idea how to resolve the problem.

It is most likely your network adapter driver that is causing the issue. Re-install using the following method...
To fully re-install a driver, use the following steps.

1. Click Start Menu
2. Right Click My Computer/Computer
3. Click Manage
4. Click Device Manager from the list on the left
5. Find the device you are trying to uninstall by expanding the appropriate set of devices
6. Right click the device
7. Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
8. Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
9. Install the latest driver for the device.

Alternatively:

1. Login as an adminstrative user.
2. Click Start Menu
3. Click Control Panel
4. Click Hardware and Sound
5. Click Device Manager (the last link under Devices and Printers)
6. Find the device you are trying to uninstall by expanding the appropriate set of devices
7. Right click the device
8. Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
9. Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
10. Install the latest driver for the device.

Update the following drivers or report back if you cannot find an up to date version.

Code:

MacHALDriver	fffff880`08ed5000	fffff880`08edc000	Wed Jul 30 13:01:43 2008 (4890ba97)	00009b47		MacHALDriver.sys
KeyAgent	fffff880`08ecd000	fffff880`08ed5000	Wed Aug 27 17:58:23 2008 (48b5ea1f)	00008ec9		KeyAgent.sys

MacHALDriver.sys
KeyAgent.sys

I figured out how to apply all the driver updates apple has for the system, which included new versions of the drivers writhziden recommended, but the next time i started downloading/uploading a torrent I got another blue screen. I've attached the new files and a new performance report. Also, I ran the system file checker and it did not find any errors.

Outdated drivers:

Code:

IRFilter	fffff880`039eb000	fffff880`039f7000	Wed Jul 02 13:53:12 2008 (486bdca8)	0000d020		IRFilter.sys
nvmfdx64	fffff880`02c54000	fffff880`02dbf780	Tue Jul 08 03:18:13 2008 (487330d5)	0016dbd4		nvmfdx64.sys
nvsmu		fffff880`02b9e000	fffff880`02ba9000	Tue Jul 22 11:21:00 2008 (488616fc)	00008fd0		nvsmu.sys
GEARAspiWDM	fffff880`02dc0000	fffff880`02dcd000	Mon May 18 06:17:04 2009 (4a1151c0)	000159b4		GEARAspiWDM.sys

IRFilter.sys
nvmfdx64.sys
nvsmu.sys
GEARAspiWDM.sys

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\cornc5\Windows_NT6_BSOD_jcgriff2\022312-18844-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`01c13000 PsLoadedModuleList = 0xfffff800`01e58670
Debug session time: Thu Feb 23 19:51:46.839 2012 (UTC - 7:00)
System Uptime: 0 days 1:26:47.839
Loading Kernel Symbols
...............................................................
................................................................
................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {28, 2, 0, fffff880017adb2d}

Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880017adb2d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001ec2100
 0000000000000028 

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`017adb2d 448b5228        mov     r10d,dword ptr [rdx+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff880021db7f0 -- (.trap 0xfffff880021db7f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880021dba10 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880017adb2d rsp=fffff880021db980 rbp=fffff880021dbab0
 r8=00000000ffffffbc  r9=0000000000000044 r10=0000000000000000
r11=fffffa80072446c0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!RtlCopyBufferToMdl+0x1d:
fffff880`017adb2d 448b5228        mov     r10d,dword ptr [rdx+28h] ds:1900:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80001c8f1e9 to fffff80001c8fc40

STACK_TEXT:  
fffff880`021db6a8 fffff800`01c8f1e9 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`021db6b0 fffff800`01c8de60 : fffffa80`089d1098 00000000`000200ff 00000000`00000202 00000000`00000044 : nt!KiBugCheckDispatch+0x69
fffff880`021db7f0 fffff880`017adb2d : 00000000`0000002e fffff880`0188afec 00000000`0000000a fffffa80`0731cf58 : nt!KiPageFault+0x260
fffff880`021db980 fffff880`01912bac : 00000000`00000000 fffff880`018e1906 00000000`00000001 fffff880`0842c00f : NETIO!RtlCopyBufferToMdl+0x1d
fffff880`021db9e0 fffff880`018deef3 : fffffa80`072446c0 00000000`00000001 fffffa80`07306220 00000000`00000000 : tcpip! ?? ::FNODOBFM::`string'+0x1d5cf
fffff880`021dba50 fffff880`018d1d54 : fffff880`021dbf08 fffffa80`00000029 fffffa80`07306220 00000000`00000001 : tcpip!TcpTcbCarefulDatagram+0x543
fffff880`021dbc00 fffff880`018d067a : fffffa80`0777cf00 fffff880`018c8b34 fffffa80`0775c8e0 00000000`00000000 : tcpip!TcpTcbReceive+0x694
fffff880`021dbdb0 fffff880`018d22ab : fffffa80`09b89940 fffffa80`07795000 00000000`00000000 fffff880`021dc100 : tcpip!TcpMatchReceive+0x1fa
fffff880`021dbf00 fffff880`018c91c7 : fffffa80`0777cf00 fffffa80`076e48cc fffffa80`0000406a 00000000`0000406a : tcpip!TcpPreValidatedReceive+0x36b
fffff880`021dbfd0 fffff880`018c8d3a : 00000000`00000000 fffff880`019e3800 fffff880`021dc190 fffffa80`072eb6f0 : tcpip!IppDeliverListToProtocol+0x97
fffff880`021dc090 fffff880`018c8339 : fffffa80`072eb6f0 fffffa80`072eb6f0 00000000`00000000 fffff880`021dc180 : tcpip!IppProcessDeliverList+0x5a
fffff880`021dc130 fffff880`018c60af : 00000000`00000000 00000000`08985b00 fffff880`019e3800 fffff880`019e3800 : tcpip!IppReceiveHeaderBatch+0x23a
fffff880`021dc210 fffff880`018c56a2 : fffffa80`08981550 00000000`00000000 fffffa80`08985b00 fffff880`00000001 : tcpip!IpFlcReceivePackets+0x64f
fffff880`021dc410 fffff880`0194434a : fffffa80`07486740 00000000`00000014 fffffa80`08985ba0 fffffa80`074bbfc0 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`021dc4f0 fffff800`01c9c618 : fffffa80`07781858 00000000`00000000 fffffa80`06cf1b60 00000000`00000001 : tcpip! ?? ::FNODOBFM::`string'+0x55122
fffff880`021dc540 fffff880`018c5202 : fffff880`018c4a60 00000000`00000000 00000000`00000000 fffffa80`07781801 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`021dc620 fffff880`017680eb : fffffa80`08985460 00000000`00000000 fffffa80`085e21a0 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`021dc690 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`017adb2d 448b5228        mov     r10d,dword ptr [rdx+28h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETIO!RtlCopyBufferToMdl+1d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79381

FAILURE_BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

Followup: MachineOwner
---------

Still points to a network device. Appears to be your nVidia Networking Controller Driver (nForce chipset driver) or your nVidia nForce System Management Controller (nVidia nForce chipset driver) which are outdated.

Thanks for all the help writhzide! I've installed the updated drivers, but the BSOD's are still happening, however instead of happening within five minutes of my starting a torrent, they now are happening after about thirty, so maybe part of the problem is fixed but at least some part of the problem is still there. I've attached a new set of dump files and a new performance report, and new thoughts or ideas would be most appreciated.