Problem Devices:
Code:
AMD High Definition Audio Device HDAUDIO\FUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_1002\5&2BD0AD1&0&0001 This device is disabled.
avast! Network Shield Support ROOT\LEGACY_ASWTDI\0000 This device is not present, is not working properly, or does not have all its drivers installed.
Did you intentionally disable the AMD HD audio? What about avast!?
Security Software: If you disabled avast! intentionally, enable it again. It is not a likely culprit to the crashes.
Possible out of date drivers:
Code:
ASACPI fffff880`04df0000 fffff880`04df8000 Sun Mar 27 20:30:36 2005 (42476c4c) 00003c77 ASACPI.sys
ahcix64s fffff880`01af4000 fffff880`01b44000 Tue Mar 17 00:38:19 2009 (49bf455b) 00038ade ahcix64s.sys
dump_ahcix64s fffff880`09ba8000 fffff880`09bf8000 Tue Mar 17 00:38:19 2009 (49bf455b) 00038ade dump_ahcix64s.sys
amdsbs fffff880`0111b000 fffff880`01162000 Fri Mar 20 12:36:03 2009 (49c3e213) 0003938a amdsbs.sys
AsUpIO fffff880`04b9a000 fffff880`04ba0000 Sun Jul 05 20:21:38 2009 (4a515fb2) 0000edf8 AsUpIO.sys
Older versions of ASACPI.SYS are a known BSOD problem on Windows 7. Update the driver by:
- Going to the Asus motherboard support site
When you reach the website: - Click Downloads -> Windows 7 64bit
- Scroll down the page and click Utilities
- Hold Ctrl and press f (ctrl+f) to enter the browser's find feature
- Search for "ATK0110" (without quotes)
- Download and install the driver.
- After installation is complete, verify that it installed correctly.
- Click Start Menu
- Click My Computer
- Go to C:\WIndows\System32\drivers\
- Verify that the ASACPI.SYS file is dated 2009 or newer (2010,etc.)
Thanks to JMH and zigzag3143 for the above information.
ahcix64s.sys -> Downloads -> Windows 7 64bit -> Others -> RAID Controller Driver
dump_ahcix64s.sys -> Downloads -> Windows 7 64bit -> Others -> RAID Controller Driver
amdsbs.sys -> Downloads -> Windows 7 64bit -> Others -> RAID Controller Driver (not sure about this one???)
AsUpIO.sys
Code:
-
Loading Dump File [D:\Kingston\BSODDmpFiles\mike212\Windows_NT6_BSOD_jcgriff2\033112-33493-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`03249000 PsLoadedModuleList = 0xfffff800`0348d650
Debug session time: Sat Mar 31 03:59:13.053 2012 (UTC - 6:00)
System Uptime: 0 days 0:06:57.645
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff8000329dc90, 0, 0}
Probably caused by : ntkrnlmp.exe ( nt!RtlpVirtualUnwind+714 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8000329dc90, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!RtlpVirtualUnwind+714
fffff800`0329dc90 493b09 cmp rcx,qword ptr [r9]
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034f7100
0000000000000000
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR: 0x1E_c0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: SABnzbd.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff8800bab22e0 -- (.trap 0xfffff8800bab22e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffffffdda2ff00 rbx=0000000000000000 rcx=00000101dda2ff05
rdx=fffff8800bab2ca7 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000329dc90 rsp=fffff8800bab2478 rbp=fffff8800bab2ca0
r8=fffffa8003368840 r9=0000000000000000 r10=fffffffffff3c70a
r11=fffffa80048bc480 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!RtlpVirtualUnwind+0x714:
fffff800`0329dc90 493b09 cmp rcx,qword ptr [r9] ds:23b4:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80003310a08 to fffff800032c5d40
STACK_TEXT:
fffff880`0bab1a58 fffff800`03310a08 : 00000000`0000001e ffffffff`c0000005 fffff800`0329dc90 00000000`00000000 : nt!KeBugCheckEx
fffff880`0bab1a60 fffff800`032c53c2 : fffff880`0bab2238 fffffa80`02dda100 fffff880`0bab22e0 fffffa80`04902b60 : nt! ?? ::FNODOBFM::`string'+0x48d2d
fffff880`0bab2100 fffff800`032c3f3a : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`02dda100 : nt!KiExceptionDispatch+0xc2
fffff880`0bab22e0 fffff800`0329dc90 : fffff880`02f42a61 fffff880`0bab2970 fffff880`0bab2790 fffff880`0bab2790 : nt!KiPageFault+0x23a
fffff880`0bab2478 fffff880`0bab24f8 : fffffa80`048bc450 00000000`00000000 fffffa80`0488fba0 00000000`00000000 : nt!RtlpVirtualUnwind+0x714
fffff880`0bab2508 fffffa80`048bc450 : 00000000`00000000 fffffa80`0488fba0 00000000`00000000 00000000`065db024 : 0xfffff880`0bab24f8
fffff880`0bab2510 00000000`00000000 : fffffa80`0488fba0 00000000`00000000 00000000`065db024 fffffa80`048bc450 : 0xfffffa80`048bc450
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!RtlpVirtualUnwind+714
fffff800`0329dc90 493b09 cmp rcx,qword ptr [r9]
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!RtlpVirtualUnwind+714
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4ec79dd2
FAILURE_BUCKET_ID: X64_0x1E_c0000005_nt!RtlpVirtualUnwind+714
BUCKET_ID: X64_0x1E_c0000005_nt!RtlpVirtualUnwind+714
Followup: MachineOwner
---------
-
Loading Dump File [D:\Kingston\BSODDmpFiles\mike212\Windows_NT6_BSOD_jcgriff2\033112-33009-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`03249000 PsLoadedModuleList = 0xfffff800`0348d650
Debug session time: Sat Mar 31 03:52:41.834 2012 (UTC - 6:00)
System Uptime: 0 days 0:00:26.426
Loading Kernel Symbols
.......................................................
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 124, {0, fffffa8003007038, 0, 0}
Probably caused by : hardware
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa8003007038, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.
Debugging Details:
------------------
BUGCHECK_STR: 0x124_AuthenticAMD
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`033876f0 fffff800`0350acb9 : fffffa80`03007010 fffffa80`018c4040 fffffa80`00000005 00000000`00000000 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`03387c10 fffff800`033eb687 : fffffa80`03007010 fffff800`034652b8 fffffa80`018c4040 00000000`00000000 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`03387c40 fffff800`03352a35 : fffff800`034c6ac0 00000000`00000001 fffffa80`02840820 fffffa80`018c4040 : nt!WheapProcessWorkQueueItem+0x57
fffff880`03387c80 fffff800`032cf471 : fffff880`01030e00 fffff800`03352a10 fffffa80`018c4000 00000000`00000000 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`03387cb0 fffff800`0355ff7a : 00000000`00000000 fffffa80`018c4040 00000000`00000080 fffffa80`018b2040 : nt!ExpWorkerThread+0x111
fffff880`03387d40 fffff800`032b69c6 : fffff880`03163180 fffffa80`018c4040 fffff880`0316dfc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03387d80 00000000`00000000 : fffff880`03388000 fffff880`03382000 fffff880`033870d0 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: hardware
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: X64_0x124_AuthenticAMD_PROCESSOR_CACHE_PRV
BUCKET_ID: X64_0x124_AuthenticAMD_PROCESSOR_CACHE_PRV
Followup: MachineOwner
---------
- Caused by Sabnzbd.exe. I am not familiar with this program. Are you?
- Stop 0x124 hardware crash
See Stop 0x124 - what it means and what to try and use the following to supplement the help in that link: