BSOD random and rare but caught one finally

Zelnick · 03 Jan 2013

Hi people, unfortunately by the time I read the post on how to post on BSODs I had already created the below file in txt and deleted the minidump but anyway, I have been experiencing bsods rarely and intermittently. This time it really caught my attention as I was only uploading a gmail attachment when it happened. I have noticed these bsods occur when there is some kind of network traffic that's somehow strained either by my ISP throttling or sudden demand of out going request/uploads or incoming responses/downloads but is not always the case. This are the results, not entirely sure what is causing it but my suspicions are tied to a new modem device whose drivers I installed in order to access internet. That's just about when the BSODs begun but are very rare, thin and in between. So here are my results:-

Code:

Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`0361b000 PsLoadedModuleList = 0xfffff800`03860e90
Debug session time: Thu Jan  3 16:47:04.605 2013 (UTC - 5:00)
System Uptime: 0 days 2:51:14.244
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800036e2628, address which referenced memory

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800038cc0e8
GetUlongFromAddress: unable to read from fffff800038cc198
 0000000000000028 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiFindNodeOrParent+0
fffff800`036e2628 48f7412800ffffff test    qword ptr [rcx+28h],0FFFFFFFFFFFFFF00h

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff88006f853b0 -- (.trap 0xfffff88006f853b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800036e2628 rsp=fffff88006f85548 rbp=0000000000000000
 r8=fffff88006f85590  r9=0000000000000000 r10=fffffa8004deb950
r11=0000058000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!MiFindNodeOrParent:
fffff800`036e2628 48f7412800ffffff test    qword ptr [rcx+28h],0FFFFFFFFFFFFFF00h ds:00000000`00000028=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff8000369abe9 to fffff8000369b640

STACK_TEXT:  
fffff880`06f85268 fffff800`0369abe9 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`06f85270 fffff800`03699860 : fffffa80`02d9f330 fffff880`00040004 00000000`00000000 fffffa80`04deb998 : nt!KiBugCheckDispatch+0x69
fffff880`06f853b0 fffff800`036e2628 : fffff800`036e4807 00000000`000007ff 00000000`000006b6 00000000`00000000 : nt!KiPageFault+0x260
fffff880`06f85548 fffff800`036e4807 : 00000000`000007ff 00000000`000006b6 00000000`00000000 00001f80`00000000 : nt!MiFindNodeOrParent
fffff880`06f85550 fffff800`036e48dd : 00000000`00046eea 00000000`000034c9 fffff880`06f85770 fffff800`038226c0 : nt!MiLocateAddressInTree+0x17
fffff880`06f85580 fffff800`036e4958 : 00000000`00000002 fffffa80`04debab0 00000000`0000003a fffffa80`04debab0 : nt!MiGetSharedProtosAtDpcLevel+0xbd
fffff880`06f855d0 fffff800`0363297b : 000067ee`6ae0cafc 00000000`00000000 fffff800`0380de00 fffff800`036bde4d : nt!MiGetSharedProtos+0x18
fffff880`06f85600 fffff800`037433bb : 00000000`00000000 02000000`0004c940 00000000`42506600 fffff800`03986c8f : nt! ?? ::FNODOBFM::`string'+0x938b
fffff880`06f85630 fffff800`03743f3b : 00000000`00000000 00000000`00000004 fffffa80`01e858a0 fffffa80`01e84000 : nt!MiIdentifyPfn+0x39b
fffff880`06f856d0 fffff800`03aa9c05 : fffffa80`01e84000 fffff880`06f85c60 fffff880`06f857a8 00000000`00000000 : nt!MmQueryPfnList+0xbb
fffff880`06f85710 fffff800`039ebde8 : 00000000`00000006 00000000`00000000 fffffa80`01e84000 00000000`00000001 : nt!PfpPfnPrioRequest+0x115
fffff880`06f85760 fffff800`039a50d3 : 00000000`00000000 00000000`00000000 00000000`64496d4d 00000000`64496d01 : nt! ?? ::NNGAKEGL::`string'+0x48fbd
fffff880`06f857f0 fffff800`039a5949 : 00000000`020bbd88 00000000`00000000 00000000`020bbde0 00000000`020bbda8 : nt!ExpQuerySystemInformation+0x1193
fffff880`06f85ba0 fffff800`0369a8d3 : 00000000`00000005 fffff880`06f85c60 00000000`06900df0 00000000`02f3fe20 : nt!NtQuerySystemInformation+0x4d
fffff880`06f85be0 00000000`7720167a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`020bbcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7720167a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiFindNodeOrParent+0
fffff800`036e2628 48f7412800ffffff test    qword ptr [rcx+28h],0FFFFFFFFFFFFFF00h

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiFindNodeOrParent+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiFindNodeOrParent+0

BUCKET_ID:  X64_0xA_nt!MiFindNodeOrParent+0

Followup: MachineOwner
---------

I ran my antivirus but didn't catch anything, my system is stable and fully in my control. What is causing this rare BSOD

?

**Pauly** · 03 Jan 2013

Hello Zelnick, Welcome to SF

Unfortunately theres not a lot to go on without any uploaded files the error code 0xA BSOD Index has a variety of possible causes
Heres a copy of my generic first post when i start a BSOD thread with someone may not all apply but have a read through theres a few things you can do like the virus checks and hardware tests while your waiting for another crash, also running the tool collects other stuff seperate from the crash dump that we can look at, probably wont help us solve it initially without dump files but may give some clues, upload it and i will have a look tomorrow if no one else does

First off if your OCing in anyway stop, return everything to stock settings for the purposes of testing

If you havent already, fill in your system specs so we know what we are dealing with
System Info - See Your System Specs

Make sure you have read the guide on asking for help with BSOD so you know what we need
https://www.sevenforums.com/crashes-d...tructions.html
And if necessary set your machine to create minidumps (Method 2 Step 2 is easiest IMO)
Dump Files - Configure Windows to Create on BSOD

Run some scans to check against virus or infection
http://support.kaspersky.com/5350
Windows Defender Offline

Run some basic hardware tests
RAM - Test with Memtest86+
Disk Check (windows based check)
Hard Drive Diagnostic Procedure (bootable disk check)

Zelnick · 04 Jan 2013

Pauly said:

Hello Zelnick, Welcome to SF

Unfortunately theres not a lot to go on without any uploaded files the error code 0xA BSOD Index has a variety of possible causes
Heres a copy of my generic first post when i start a BSOD thread with someone may not all apply but have a read through theres a few things you can do like the virus checks and hardware tests while your waiting for another crash, also running the tool collects other stuff seperate from the crash dump that we can look at, probably wont help us solve it initially without dump files but may give some clues, upload it and i will have a look tomorrow if no one else does

First off if your OCing in anyway stop, return everything to stock settings for the purposes of testing

If you havent already, fill in your system specs so we know what we are dealing with
System Info - See Your System Specs

Make sure you have read the guide on asking for help with BSOD so you know what we need
https://www.sevenforums.com/crashes-d...tructions.html
And if necessary set your machine to create minidumps (Method 2 Step 2 is easiest IMO)
Dump Files - Configure Windows to Create on BSOD

Run some scans to check against virus or infection
Anti-rootkit utility TDSSKiller
Windows Defender Offline

Run some basic hardware tests
RAM - Test with Memtest86+
Disk Check (windows based check)
Hard Drive Diagnostic Procedure (bootable disk check)

Managed to scrounge around the minidump folder and realized I hadn't actually deleted it, it was still backed up so I run the app made available here and got the files, zipped them up and uploaded. I hope it's all that you need.

I have run a virus scan but nothing, run unhackme but also nothing, run memtest and it passed, though have yet to test the drives. Crystaldiskinfo says its healthy though. Any suggestions with that in mind?

**Pauly** · 05 Jan 2013

Dump files says 0xA error probably caused by memory corruption but that means it could be RAM, HDD, GFX Memory or Driver quite general nothing specific in there

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {28, 2, 0, fffff800036e2628}
Probably caused by : memory_corruption ( nt!MiFindNodeOrParent+0 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800036e2628, address which referenced memory
Debugging Details:
------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800038cc0e8
GetUlongFromAddress: unable to read from fffff800038cc198
 0000000000000028 Nonpaged pool
CURRENT_IRQL:  2
FAULTING_IP: 
nt!MiFindNodeOrParent+0
fffff800`036e2628 48f7412800ffffff test    qword ptr [rcx+28h],0FFFFFFFFFFFFFF00h
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
TRAP_FRAME:  fffff88006f853b0 -- (.trap 0xfffff88006f853b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800036e2628 rsp=fffff88006f85548 rbp=0000000000000000
 r8=fffff88006f85590  r9=0000000000000000 r10=fffffa8004deb950
r11=0000058000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!MiFindNodeOrParent:
fffff800`036e2628 48f7412800ffffff test    qword ptr [rcx+28h],0FFFFFFFFFFFFFF00h ds:00000000`00000028=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff8000369abe9 to fffff8000369b640
STACK_TEXT:  
fffff880`06f85268 fffff800`0369abe9 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`06f85270 fffff800`03699860 : fffffa80`02d9f330 fffff880`00040004 00000000`00000000 fffffa80`04deb998 : nt!KiBugCheckDispatch+0x69
fffff880`06f853b0 fffff800`036e2628 : fffff800`036e4807 00000000`000007ff 00000000`000006b6 00000000`00000000 : nt!KiPageFault+0x260
fffff880`06f85548 fffff800`036e4807 : 00000000`000007ff 00000000`000006b6 00000000`00000000 00001f80`00000000 : nt!MiFindNodeOrParent
fffff880`06f85550 fffff800`036e48dd : 00000000`00046eea 00000000`000034c9 fffff880`06f85770 fffff800`038226c0 : nt!MiLocateAddressInTree+0x17
fffff880`06f85580 fffff800`036e4958 : 00000000`00000002 fffffa80`04debab0 00000000`0000003a fffffa80`04debab0 : nt!MiGetSharedProtosAtDpcLevel+0xbd
fffff880`06f855d0 fffff800`0363297b : 000067ee`6ae0cafc 00000000`00000000 fffff800`0380de00 fffff800`036bde4d : nt!MiGetSharedProtos+0x18
fffff880`06f85600 fffff800`037433bb : 00000000`00000000 02000000`0004c940 00000000`42506600 fffff800`03986c8f : nt! ?? ::FNODOBFM::`string'+0x938b
fffff880`06f85630 fffff800`03743f3b : 00000000`00000000 00000000`00000004 fffffa80`01e858a0 fffffa80`01e84000 : nt!MiIdentifyPfn+0x39b
fffff880`06f856d0 fffff800`03aa9c05 : fffffa80`01e84000 fffff880`06f85c60 fffff880`06f857a8 00000000`00000000 : nt!MmQueryPfnList+0xbb
fffff880`06f85710 fffff800`039ebde8 : 00000000`00000006 00000000`00000000 fffffa80`01e84000 00000000`00000001 : nt!PfpPfnPrioRequest+0x115
fffff880`06f85760 fffff800`039a50d3 : 00000000`00000000 00000000`00000000 00000000`64496d4d 00000000`64496d01 : nt! ?? ::NNGAKEGL::`string'+0x48fbd
fffff880`06f857f0 fffff800`039a5949 : 00000000`020bbd88 00000000`00000000 00000000`020bbde0 00000000`020bbda8 : nt!ExpQuerySystemInformation+0x1193
fffff880`06f85ba0 fffff800`0369a8d3 : 00000000`00000005 fffff880`06f85c60 00000000`06900df0 00000000`02f3fe20 : nt!NtQuerySystemInformation+0x4d
fffff880`06f85be0 00000000`7720167a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`020bbcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7720167a

STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!MiFindNodeOrParent+0
fffff800`036e2628 48f7412800ffffff test    qword ptr [rcx+28h],0FFFFFFFFFFFFFF00h
SYMBOL_STACK_INDEX:  3
SYMBOL_NAME:  nt!MiFindNodeOrParent+0
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a
IMAGE_NAME:  memory_corruption
FAILURE_BUCKET_ID:  X64_0xA_nt!MiFindNodeOrParent+0
BUCKET_ID:  X64_0xA_nt!MiFindNodeOrParent+0
Followup: MachineOwner
---------
0: kd> lmntsm
start             end                 module name
fffff880`00f81000 fffff880`00fd8000   ACPI     ACPI.sys     Sat Nov 20 09:19:16 2010 (4CE79294)
fffff880`03b0d000 fffff880`03b96000   afd      afd.sys      Sat Nov 20 09:23:27 2010 (4CE7938F)
fffff880`053b9000 fffff880`053cf000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`00c2a000 fffff880`00c35000   amdxata  amdxata.sys  Fri Mar 19 16:18:18 2010 (4BA3A3CA)
fffff880`080a2000 fffff880`080ad000   asyncmac asyncmac.sys Tue Jul 14 01:10:13 2009 (4A5BCCE5)
fffff880`00de7000 fffff880`00df0000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00c00000 fffff880`00c2a000   ataport  ataport.SYS  Sat Nov 20 09:19:15 2010 (4CE79293)
fffff960`00930000 fffff960`00991000   ATMFD    ATMFD.DLL    Sat Nov 20 09:49:28 2010 (4CE799A8)
fffff880`02844000 fffff880`02864000   avgntflt avgntflt.sys Mon Nov 26 16:20:26 2012 (50B396CA)
fffff880`03aab000 fffff880`03acf000   avipbb   avipbb.sys   Thu Nov 22 10:13:46 2012 (50ADFADA)
fffff880`02de4000 fffff880`02dee000   avkmgr   avkmgr.sys   Wed Sep 19 09:31:52 2012 (505982F8)
fffff880`019f4000 fffff880`019fb000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`02dd3000 fffff880`02de4000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`029ab000 fffff880`029c9000   bowser   bowser.sys   Tue Jul 14 00:23:50 2009 (4A5BC206)
fffff960`00700000 fffff960`00727000   cdd      cdd.dll      unavailable (00000000)
fffff880`0298e000 fffff880`029ab000   cdfs     cdfs.sys     Tue Jul 14 00:19:46 2009 (4A5BC112)
fffff880`016b6000 fffff880`016e0000   cdrom    cdrom.sys    Sat Nov 20 09:19:20 2010 (4CE79298)
fffff880`00d0d000 fffff880`00dcd000   CI       CI.dll       Sat Nov 20 13:12:36 2010 (4CE7C944)
fffff880`01650000 fffff880`01680000   CLASSPNP CLASSPNP.SYS Sat Nov 20 09:19:23 2010 (4CE7929B)
fffff880`00caf000 fffff880`00d0d000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01093000   cmdguard cmdguard.sys Wed Nov 07 22:07:39 2012 (509ADBAB)
fffff880`03b01000 fffff880`03b0d000   cmdhlp   cmdhlp.sys   Wed Nov 07 22:07:03 2012 (509ADB87)
fffff880`01173000 fffff880`011e5000   cng      cng.sys      Sat Nov 20 10:08:45 2010 (4CE79E2D)
fffff880`053a9000 fffff880`053b9000   CompositeBus CompositeBus.sys Sat Nov 20 10:33:17 2010 (4CE7A3ED)
fffff880`04536000 fffff880`04544000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`02c00000 fffff880`02c83000   csc      csc.sys      Sat Nov 20 09:27:12 2010 (4CE79470)
fffff880`02c83000 fffff880`02ca1000   dfsc     dfsc.sys     Sat Nov 20 09:26:31 2010 (4CE79447)
fffff880`02dc4000 fffff880`02dd3000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`0163a000 fffff880`01650000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`0450e000 fffff880`04530000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`04550000 fffff880`04559000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`04544000 fffff880`04550000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`04559000 fffff880`0456c000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`0456c000 fffff880`04578000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`03c0a000 fffff880`03cfe000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 09:50:50 2010 (4CE799FA)
fffff880`03cfe000 fffff880`03d44000   dxgmms1  dxgmms1.sys  Sat Nov 20 09:49:53 2010 (4CE799C1)
fffff880`010f5000 fffff880`01109000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`010a9000 fffff880`010f5000   fltmgr   fltmgr.sys   Sat Nov 20 09:19:24 2010 (4CE7929C)
fffff880`013e1000 fffff880`013eb000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`01600000 fffff880`0163a000   fvevol   fvevol.sys   Sat Nov 20 09:24:06 2010 (4CE793B6)
fffff880`018f1000 fffff880`0193b000   fwpkclnt fwpkclnt.sys Sat Nov 20 09:21:37 2010 (4CE79321)
fffff800`03c05000 fffff800`03c4e000   hal      hal.dll      Sat Nov 20 13:00:25 2010 (4CE7C669)
fffff880`03d44000 fffff880`03d68000   HDAudBus HDAudBus.sys Sat Nov 20 10:43:42 2010 (4CE7A65E)
fffff880`04586000 fffff880`0459f000   HIDCLASS HIDCLASS.SYS Sat Nov 20 10:43:49 2010 (4CE7A665)
fffff880`0459f000 fffff880`045a7080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`04578000 fffff880`04586000   hidusb   hidusb.sys   Sat Nov 20 10:43:49 2010 (4CE7A665)
fffff880`028c5000 fffff880`0298e000   HTTP     HTTP.sys     Sat Nov 20 09:24:30 2010 (4CE793CE)
fffff880`019eb000 fffff880`019f4000   hwpolicy hwpolicy.sys Sat Nov 20 09:18:54 2010 (4CE7927E)
fffff880`0537c000 fffff880`0539a000   i8042prt i8042prt.sys Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`07ccc000 fffff880`07ce4000   idmwfp   idmwfp.sys   Tue Aug 10 14:35:33 2010 (4C6155A5)
fffff880`03a26000 fffff880`03a40000   inspect  inspect.sys  Wed Nov 07 22:07:02 2012 (509ADB86)
fffff880`00ec6000 fffff880`00ece000   intelide intelide.sys Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`03ef8000 fffff880`03f0e000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`02da6000 fffff880`02dc4000   ISODrv64 ISODrv64.sys Fri Jan 29 03:39:02 2010 (4B625856)
fffff880`0539a000 fffff880`053a9000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff800`00bca000 fffff800`00bd4000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
fffff880`081c8000 fffff880`081d3000   kerneld  kerneld.x64  Thu Mar 01 21:17:21 2012 (4F4FE761)
fffff880`03e00000 fffff880`03e43000   ks       ks.sys       Sat Nov 20 10:33:23 2010 (4CE7A3F3)
fffff880`013b5000 fffff880`013d0000   ksecdd   ksecdd.sys   Sat Nov 20 09:21:15 2010 (4CE7930B)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Sat Nov 20 10:10:34 2010 (4CE79E9A)
fffff880`04530000 fffff880`04535200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`02885000 fffff880`0289a000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`01680000 fffff880`016a3000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`00c4c000 fffff880`00c9b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:03:51 2010 (4CE7C737)
fffff880`045ed000 fffff880`045fc000   modem    modem.sys    Tue Jul 14 01:10:48 2009 (4A5BCD08)
fffff880`03ec4000 fffff880`03ed2000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`03faa000 fffff880`03fb9000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`045aa000 fffff880`045b7000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`00dcd000 fffff880`00de7000   mountmgr mountmgr.sys Sat Nov 20 09:19:21 2010 (4CE79299)
fffff880`029c9000 fffff880`029e1000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`02800000 fffff880`0282d000   mrxsmb   mrxsmb.sys   Sat Nov 20 09:27:41 2010 (4CE7948D)
fffff880`07c5b000 fffff880`07ca8000   mrxsmb10 mrxsmb10.sys Sat Nov 20 09:26:53 2010 (4CE7945D)
fffff880`07ca8000 fffff880`07ccc000   mrxsmb20 mrxsmb20.sys Sat Nov 20 09:26:47 2010 (4CE79457)
fffff880`015e2000 fffff880`015ed000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00fe1000 fffff880`00feb000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`01115000 fffff880`01173000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`02d9b000 fffff880`02da6000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`019d9000 fffff880`019eb000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`01486000 fffff880`01579000   ndis     ndis.sys     Sat Nov 20 09:23:30 2010 (4CE79392)
fffff880`053f3000 fffff880`053ff000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`0289a000 fffff880`028ad000   ndisuio  ndisuio.sys  Sat Nov 20 10:50:08 2010 (4CE7A7E0)
fffff880`03f0e000 fffff880`03f3d000   ndiswan  ndiswan.sys  Sat Nov 20 10:52:32 2010 (4CE7A870)
fffff880`03eaf000 fffff880`03ec4000   NDProxy  NDProxy.SYS  Sat Nov 20 10:52:20 2010 (4CE7A864)
fffff880`03a40000 fffff880`03a4f000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`03b96000 fffff880`03bdb000   netbt    netbt.sys    Sat Nov 20 09:23:18 2010 (4CE79386)
fffff880`01579000 fffff880`015d9000   NETIO    NETIO.SYS    Sat Nov 20 09:23:13 2010 (4CE79381)
fffff880`015ed000 fffff880`015fe000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`02d8f000 fffff880`02d9b000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`0361b000 fffff800`03c05000   nt       ntkrnlmp.exe Sat Nov 20 09:30:02 2010 (4CE7951A)
fffff880`01212000 fffff880`013b5000   Ntfs     Ntfs.sys     Sat Nov 20 09:20:57 2010 (4CE792F9)
fffff880`016e0000 fffff880`016e9000   Null     Null.SYS     unavailable (00000000)
fffff880`04821000 fffff880`05342000   nvlddmkm nvlddmkm.sys Sat Dec 01 03:24:02 2012 (50B97852)
fffff880`045d4000 fffff880`045ed000   orange_zte_cdc_acm orange_zte_cdc_acm.sys Tue Jan 18 15:07:27 2011 (4D35ACAF)
fffff880`03a00000 fffff880`03a26000   pacer    pacer.sys    Sat Nov 20 10:52:18 2010 (4CE7A862)
fffff880`0535f000 fffff880`0537c000   parport  parport.sys  Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Sat Nov 20 09:20:00 2010 (4CE792C0)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Sat Nov 20 09:19:11 2010 (4CE7928F)
fffff880`00feb000 fffff880`00ffb000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`013d0000 fffff880`013e1000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`07ce4000 fffff880`07d8a000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`03c00000 fffff880`03c09000   pneteth  pneteth.sys  Fri Nov 25 05:25:50 2011 (4ECF26DE)
fffff880`044d1000 fffff880`0450e000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00c9b000 fffff880`00caf000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`01109000 fffff880`01114e00   PxHlpa64 PxHlpa64.sys Wed Jun 24 00:16:35 2009 (4A416253)
fffff880`053cf000 fffff880`053f3000   rasl2tp  rasl2tp.sys  Sat Nov 20 10:52:34 2010 (4CE7A872)
fffff880`04800000 fffff880`0481b000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`03f3d000 fffff880`03f5e000   raspptp  raspptp.sys  Sat Nov 20 10:52:31 2010 (4CE7A86F)
fffff880`03f5e000 fffff880`03f78000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`02d3e000 fffff880`02d8f000   rdbss    rdbss.sys    Sat Nov 20 09:27:51 2010 (4CE79497)
fffff880`03f9f000 fffff880`03faa000   rdpbus   rdpbus.sys   Tue Jul 14 01:17:46 2009 (4A5BCEAA)
fffff880`0146e000 fffff880`01477000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`01477000 fffff880`01480000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`015d9000 fffff880`015e2000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`0199f000 fffff880`019d9000   rdyboost rdyboost.sys Sat Nov 20 09:43:10 2010 (4CE7982E)
fffff880`028ad000 fffff880`028c5000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`03d68000 fffff880`03d9a000   Rt64win7 Rt64win7.sys Thu Feb 26 09:04:13 2009 (49A65B0D)
fffff880`0420b000 fffff880`044d0e00   RTKVHD64 RTKVHD64.sys Thu Jul 07 10:34:50 2011 (4E157DBA)
fffff880`07d8a000 fffff880`07d95000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`05353000 fffff880`0535f000   serenum  serenum.sys  Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`03a4f000 fffff880`03a6c000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`01997000 fffff880`0199f000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`0812f000 fffff880`081c8000   srv      srv.sys      Sat Nov 20 09:28:05 2010 (4CE794A5)
fffff880`080c4000 fffff880`0812f000   srv2     srv2.sys     Sat Nov 20 09:27:43 2010 (4CE7948F)
fffff880`07d95000 fffff880`07dc6000   srvnet   srvnet.sys   Sat Nov 20 09:27:20 2010 (4CE79478)
fffff880`03dfd000 fffff880`03dfe480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`016ed000 fffff880`018f1000   tcpip    tcpip.sys    Sat Nov 20 09:25:52 2010 (4CE79420)
fffff880`07dc6000 fffff880`07dd8000   tcpipreg tcpipreg.sys Sat Nov 20 10:51:48 2010 (4CE7A844)
fffff880`03af4000 fffff880`03b01000   TDI      TDI.SYS      Sat Nov 20 09:22:06 2010 (4CE7933E)
fffff880`03ad2000 fffff880`03af4000   tdx      tdx.sys      Sat Nov 20 09:21:54 2010 (4CE79332)
fffff880`02d2a000 fffff880`02d3e000   termdd   termdd.sys   Sat Nov 20 11:03:40 2010 (4CE7AB0C)
fffff880`02ce9000 fffff880`02d2a000   truecrypt truecrypt.sys Tue Feb 07 09:09:36 2012 (4F30EA50)
fffff960`00520000 fffff960`0052a000   TSDDD    TSDDD.dll    Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`03ed2000 fffff880`03ef8000   tunnel   tunnel.sys   Sat Nov 20 10:51:50 2010 (4CE7A846)
fffff880`03e43000 fffff880`03e55000   umbus    umbus.sys    Sat Nov 20 10:44:37 2010 (4CE7A695)
fffff880`045b7000 fffff880`045d4000   usbccgp  usbccgp.sys  Sat Nov 20 10:44:03 2010 (4CE7A673)
fffff880`045a8000 fffff880`045a9f00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
fffff880`05342000 fffff880`05353000   usbehci  usbehci.sys  Sat Nov 20 10:43:54 2010 (4CE7A66A)
fffff880`03e55000 fffff880`03eaf000   usbhub   usbhub.sys   Sat Nov 20 10:44:30 2010 (4CE7A68E)
fffff880`03da7000 fffff880`03dfd000   USBPORT  USBPORT.SYS  Sat Nov 20 10:44:00 2010 (4CE7A670)
fffff880`03fe1000 fffff880`03ffc000   USBSTOR  USBSTOR.SYS  Sat Nov 20 10:44:05 2010 (4CE7A675)
fffff880`03d9a000 fffff880`03da7000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`02caa000 fffff880`02ce9000   VBoxDrv  VBoxDrv.sys  Wed Dec 19 13:48:25 2012 (50D1C5A9)
fffff880`03f78000 fffff880`03f9f000   VBoxNetAdp VBoxNetAdp.sys Wed Dec 19 13:47:17 2012 (50D1C565)
fffff880`03fb9000 fffff880`03fe1000   VBoxNetFlt VBoxNetFlt.sys Wed Dec 19 13:47:16 2012 (50D1C564)
fffff880`03a87000 fffff880`03aab000   VBoxUSBMon VBoxUSBMon.sys Wed Dec 19 13:47:17 2012 (50D1C565)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`0142b000 fffff880`01439000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`01439000 fffff880`0145e000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`0193b000 fffff880`0194b000   vmstorfl vmstorfl.sys unavailable (00000000)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Sat Nov 20 09:19:28 2010 (4CE792A0)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`0194b000 fffff880`01997000   volsnap  volsnap.sys  Sat Nov 20 09:20:08 2010 (4CE792C8)
fffff880`03a6c000 fffff880`03a87000   wanarp   wanarp.sys   Sat Nov 20 10:52:36 2010 (4CE7A874)
fffff880`0145e000 fffff880`0146e000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00ece000 fffff880`00f72000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00f72000 fffff880`00f81000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`03bdb000 fffff880`03be4000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff960`00000000 fffff960`00310000   win32k   win32k.sys   Sat Nov 20 09:52:51 2010 (4CE79A73)
fffff880`00fd8000 fffff880`00fe1000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`02864000 fffff880`02885000   WudfPf   WudfPf.sys   Sat Nov 20 10:42:44 2010 (4CE7A624)
fffff880`08000000 fffff880`08031000   WUDFRd   WUDFRd.sys   Sat Nov 20 10:43:32 2010 (4CE7A654)
Unloaded modules:
fffff880`08031000 fffff880`080a2000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01680000 fffff880`0168e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0168e000 fffff880`0169a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0169a000 fffff880`016a3000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`016a3000 fffff880`016b6000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

How did you get on with memtest how many passes did you get, recommend min 7-8 passes with no errors
Get all your HDDs tested thoroughly
Only old driver i can see is your network driver Rt64win7.sys visit the device manufacturers website and see if you can update, if its onboard go to mobo manufacturers site cant be any more specific as you havent filled in your system specs

Zelnick · 12 Jan 2013

Pauly said:

How did you get on with memtest how many passes did you get, recommend min 7-8 passes with no errors
Get all your HDDs tested thoroughly
Only old driver i can see is your network driver Rt64win7.sys visit the device manufacturers website and see if you can update, if its onboard go to mobo manufacturers site cant be any more specific as you havent filled in your system specs

I have been having net issues thats why I have taken a little long to respond. I ran 1 pass of memtest with no errors but will do as you recommend and get back to you.
I downloaded Seatools since I use a Seagate hard drive ran it and got no errors.
I ran memCL for the GPU test random iterations and got 3 errors in them but followed up and found that it has a problem with the way it tests for random iterations so I will run OCCT for the gpu and also get back to you on that.
I will be downloading the latest drivers for my mobo.
When you asked for my system specifications, I took a second look at the files I attached in SF_03-01-2013.zip above and all the system specifications are there in full, literally my whole PC details are there.

**Pauly** · 12 Jan 2013

OK let us know how the tests go

mgorman87 · 12 Jan 2013

You can also try running driver verifier and see if you have any misbehaving drivers

Driver Verifier - Enable and Disable

BSOD BUGCHECK SUMMARY

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Jan  3 16:47:04.605 2013 (UTC - 5:00)
System Uptime: 0 days 2:51:14.244
Probably caused by : memory_corruption ( nt!MiFindNodeOrParent+0 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!MiFindNodeOrParent+0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Zelnick · 17 Jan 2013

mgorman87 said:

You can also try running driver verifier and see if you have any misbehaving drivers

Driver Verifier - Enable and Disable

BSOD BUGCHECK SUMMARY

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Jan  3 16:47:04.605 2013 (UTC - 5:00)
System Uptime: 0 days 2:51:14.244
Probably caused by : memory_corruption ( nt!MiFindNodeOrParent+0 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!MiFindNodeOrParent+0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

I'll do that soon when am not so intensively using my pc. Does it crash on the faulty driver? I think I have heard when this test runs and comes accross the culprit, the pc then crashes

Pauly said:

How did you get on with memtest how many passes did you get, recommend min 7-8 passes with no errors
Get all your HDDs tested thoroughly
Only old driver i can see is your network driver Rt64win7.sys visit the device manufacturers website and see if you can update, if its onboard go to mobo manufacturers site cant be any more specific as you havent filled in your system specs

A friend of mine came to my place, saw how the gpu was performing in Most wanted 2012, told me to price it and now it is sold, I have a HD 3450 as I await a far better GPU.

Today I caught another bsod and it occured when the pc had gone into the blackscreen just about to go silent from its blackscreen of shutdown, it bluescreened! Can you believe that?! it was a very bizarre sight to see after seeing the screen go dark as windows was shutting down expecting silence to follow. As I recall the only thing I did differently then was hurriedly but completely shut my usb modem from the pc and straight went into shutting down the pc.

Now I was very keen after that experience to thoroughly test the rams and undoubtedly they have passed mem test v4.1 without any errors. I also tested the previous gpu and it also passed without any errors.
Am now suspecting compatibility issues of the modem drivers with the Win 7 OS, as I also have a friend with the very same modem experiencing the same awkward bsods. I updated my motherboard drivers from the site to the ones shown as latest before this bsod that occured today. Any other leads?

**Pauly** · 20 Jan 2013

If you are satisfied that all hardware tests are satisfactory then you could try driver verifier as above

Zelnick · 29 Jan 2013

Pauly said:

If you are satisfied that all hardware tests are satisfactory then you could try driver verifier as above

I ran it but it found nothing. I later ran chkdsk c:/b and sfc /SCANNOW, the system became much much much faster, but soon after that it crashed with a bsod. This time I chose to re-install windows and keep the modem away from the system to see if this bsods persist. I can only say after about a month and a half since they are quite rare but the last too were to close to each other in time.

So far so good nothing has happened yet. I will update in about a month and a half's time.