BSOD, possibly while using DVBViewer to record

Welcome to SevenForums.

Please uninstall Comodo Internet Security and Acronis. They are contributing to your crashes.

Code:

Start Menu\Programs\Acronis	Public:Start Menu\Programs\Acronis	Public
Start Menu\Programs\Acronis\Acronis True Image Home 2011	Public:Start Menu\Programs\Acronis\Acronis True Image Home 2011	Public
Start Menu\Programs\Acronis\Acronis True Image Home 2011\Tools and Utilities	Public:Start Menu\Programs\Acronis\Acronis True Image Home 2011\Tools and Utilities	Public
Start Menu\Programs\Acronis\Plus Pack for Acronis True Image Home 2011	Public:Start Menu\Programs\Acronis\Plus Pack for Acronis True Image Home 2011	Public
Start Menu\Programs\COMODO	Public:Start Menu\Programs\COMODO	Public
Start Menu\Programs\COMODO\COMODO Internet Security	Public:Start Menu\Programs\COMODO\COMODO Internet Security	Public

Code:

fffff880`0244cfc8  fffff880`01a500f2Unable to load image \SystemRoot\system32\DRIVERS\tdrpm273.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for tdrpm273.sys
*** ERROR: Module load completed but symbols could not be loaded for tdrpm273.sys
 tdrpm273+0x4c0f2
...................................................................................................................
fffff880`0244c818  fffff880`02e62617Unable to load image \SystemRoot\System32\DRIVERS\cmdguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
 cmdguard+0x2f617

Uninstall using Revo uninstaller in Advanced Mode. (Gives you the option to remove registry leftovers)

• Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Update your video drivers.

METHOD:

Click on the Start ► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to "AMD/ATI" and reboot the system. Delete remnants of its drivers/older drivers using Driver Sweeper.

Drivers - Clean Left over Files after Uninstalling

Link for update: AMD Driver Autodetect

Code:

fffff880`0350f168  fffff880`04a76288Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
 atikmdag+0x3c288

Code:

lmvm atikmdag
start             end                 module name
fffff880`04a3a000 fffff880`04f5c000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        Fri Apr 24 16:51:57 2009 (49F199CD)
    CheckSum:         004CC863
    ImageSize:        00522000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Perform a System File Check:

1. Click on the start
2. Type CMD on Search
3. Left click and Run as Administrator
4. Type SFC /scannow

Full tutorial here:

• SFC /SCANNOW Command - System File Checker

Disk Check on your hard drive for file system errors and bad sectors on it:

• Disk Check

Reduce items at start-up. Nothing except anti-virus is required:

• Startup Programs - Change
• Troubleshoot Application Conflicts by Performing a Clean Startup

Go to this link: Intel® Driver Update Utility. Check the system for latest updates. Download and install them one by one.

Let us know if this has helped.

Thank you for a very quick and comprehensive answer! Plenty of very useful links here.

I performed all the steps, except removing Acronis. I find indispensable to be able to make an image backup of my system, this saved countless hours of re-install.

I did disable the Acronis automatic startup program though.

To be noted that Revo was not able to even list the Comodo program, so I had to use the Windows uninstaller instead.

I'll run the system a while to see if the problem is cured, and get back to you in a few days to confirm if it is.

If not, I'll get back sooner!

Well yes.

Anyway.

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• RAM - Test with Memtest86+

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.

*Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.

If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.

*If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.

*If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.

3. Test the next stick of RAM (stick #2) in the next motherboard slot.

*If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.

*If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.

4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

   Information

Errors are sometimes found after 8 passes.

   Tip

Do this test overnight, before going to bed.

Good luck :)

Will take a look at it and report what I find.

Please proceed with memtest if you haven't already.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880099d10b8, fffff880099d0910, fffff80002ab39a6}

Probably caused by : memory_corruption ( nt!MmMapViewInSystemCache+226 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880099d10b8
Arg3: fffff880099d0910
Arg4: fffff80002ab39a6

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880099d10b8 -- (.exr 0xfffff880099d10b8)
ExceptionAddress: fffff80002ab39a6 (nt!MmMapViewInSystemCache+0x0000000000000226)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff880099d0910 -- (.cxr 0xfffff880099d0910)
rax=0000000000000000 rbx=fffff6fcc00da800 rcx=0000000000000014
rdx=0000000000000040 rsi=fffff8a0034377f0 rdi=fffff8a0034373f0
rip=fffff80002ab39a6 rsp=fffff880099d12f0 rbp=fffff6fcc00daa00
 r8=fffffa8000000020  r9=fffff880099d1360 r10=0000000000000000
r11=0000000000000000 r12=fffffa8007348d00 r13=ff51474eff544af1
r14=fffffa800374cc70 r15=fffffa8007348d80
iopl=0         nv up ei pl nz ac pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010212
nt!MmMapViewInSystemCache+0x226:
fffff800`02ab39a6 4d897d18        mov     qword ptr [r13+18h],r15 ds:002b:ff51474e`ff544b09=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  wmpnetwk.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cce100
GetUlongFromAddress: unable to read from fffff80002cce1c0
 ffffffffffffffff 

FOLLOWUP_IP: 
nt!MmMapViewInSystemCache+226
fffff800`02ab39a6 4d897d18        mov     qword ptr [r13+18h],r15

FAULTING_IP: 
nt!MmMapViewInSystemCache+226
fffff800`02ab39a6 4d897d18        mov     qword ptr [r13+18h],r15

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff80002ab2b87 to fffff80002ab39a6

STACK_TEXT:  
fffff880`099d12f0 fffff800`02ab2b87 : fffff8a0`035c8600 fffff880`02f63830 fffff880`099d1498 fffff8a0`03419c30 : nt!MmMapViewInSystemCache+0x226
fffff880`099d1460 fffff800`02ab1aef : fffff880`00000000 00000000`00000000 fffffa80`0466fc80 fffffa80`00000000 : nt!CcGetVacbMiss+0x177
fffff880`099d1520 fffff800`02d85dc2 : fffffa80`00000000 00000000`00000000 fffff880`099d15f0 fffff880`099d1680 : nt!CcGetVirtualAddress+0x2e0
fffff880`099d15b0 fffff880`0120a730 : fffff8a0`00000000 fffff880`00000005 fffffa80`06d23500 fffff880`0125d001 : nt!CcCopyRead+0x132
fffff880`099d1670 fffff880`0120ada3 : 00000000`00000000 fffff8a0`03202bb0 fffff880`099d18a0 fffff880`099d1798 : Ntfs!NtfsCachedRead+0x180
fffff880`099d16d0 fffff880`0120ca68 : fffffa80`06d23500 fffffa80`045edc10 fffff880`099d1801 fffffa80`069f6a00 : Ntfs!NtfsCommonRead+0x583
fffff880`099d1870 fffff880`010d2bcf : fffffa80`045edfb0 fffffa80`045edc10 fffffa80`069f6ae0 00000000`00000001 : Ntfs!NtfsFsdRead+0x1b8
fffff880`099d1920 fffff880`010d16df : fffffa80`046378e0 00000000`00000001 fffffa80`04637800 fffffa80`045edc10 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`099d19b0 fffff800`02da421b : 00000000`00000000 fffffa80`06885070 00000000`00000001 fffffa80`045edc10 : fltmgr!FltpDispatch+0xcf
fffff880`099d1a10 fffff800`02d85b63 : fffffa80`06885070 fffffa80`06885070 fffffa80`06885070 fffff880`02f63180 : nt!IopSynchronousServiceTail+0xfb
fffff880`099d1a80 fffff800`02a9aed3 : 00000000`000004d8 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x631
fffff880`099d1b70 00000000`77b0137a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`031bdca8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b0137a


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MmMapViewInSystemCache+226

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff880099d0910 ; kb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x24_nt!MmMapViewInSystemCache+226

BUCKET_ID:  X64_0x24_nt!MmMapViewInSystemCache+226

Followup: MachineOwner
---------

Edit:

I see you have a SSD:

Code:

Model    SAMSUNG SSD 830 Series ATA Device

Please follow this:

writhziden said:

If you have an SSD, make sure the following are up to date:

• SSD firmware
• BIOS Version
• Chipset Drivers
• Hard disk controller drivers/SATA drivers
• If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Look forward to the results from memtest.