Windows 7: windows 7 memory dump

icealys · 06 Jan 2010

hi I installed windows 7 ultimate 64 bit like month ago and I started having some problems after the first few days...windows explorer shut down on me and restarted at random times, mostly when opening or using firefox or multitasking...then i started getting blue screens with the memory dump error..so far i have had a few of them. Here is the error

usasma · 07 Jan 2010

Start with this:

Quote:

H/W Diagnostics:
Please start by running these hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Malware (read the details at the link)

Then, when that's done, try running Driver Verifier according to these directions:

Quote:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.

So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Windows 7 Startup Repair feature).

Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.

Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.

Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.

If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.

More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users

icealys · 08 Jan 2010

hmm I tried doing the steps for the verifier and no blue screens but windows was not able to start. It just came up to the windows icon screen and it just stayed idle and said at the bottom "windows is now starting". Nothing happened. I still have to run the tests for the memory and the harddrive but here is some more information for you. I didnt seem to have any problems when running windows xp.

usasma · 09 Jan 2010

Try redoing Driver Verifier - but this time select ALL drivers. This will slow the machine down drastically - but it should result in a BSOD very quickly.

I suspect that this is a hardware problem - but there's no evidence of exactly which piece of hardware that it could be. I'd suggest reinstalling Windows just to see if 1) you can do it, and 2) to ensure that it's not a Windows problem.

icealys · 10 Jan 2010

ok I added all the drivers this time and waited for awhile..still the start up screen showed up for a little but i finally got a blue screen..here is the file.

usasma · 12 Jan 2010

An interesting bugcheck, and it's from a Driver Verifier enabled memory dump.
Unfortunately, it just doesn't tell us much.

I'd suggest reinstalling Windows as discussed before. If it still BSOD's, then it's likely to be hardware.
Try these hardware tests first:

Quote:

H/W Diagnostics:
Please start by running these bootable hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Malware (read the details at the link)

Here's the memory dump:

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR\TempDUMP\DATA\01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02857000 PsLoadedModuleList = 0xfffff800`02a94e50
Debug session time: Sun Jan 10 20:50:37.200 2010 (GMT-5)
System Uptime: 0 days 0:00:52.462
Loading Kernel Symbols
...............................................................
...........................
Loading User Symbols
Loading unloaded module list
.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D4, {fffff88010d48048, 2, 1, fffff800028e06cf}

Probably caused by : ntkrnlmp.exe ( nt!ExInitializeResourceLite+ef )

Followup: MachineOwner
---------

2: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff80002aff000
THREAD fffff980006c8b60  Cid 0004.0034  Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 2
IRP List:
    Unable to read nt!_IRP @ fffff98009a60a20
Not impersonating
GetUlongFromAddress: unable to read from fffff80002a3db74
Owning Process            fffff9800034cb30       Image:         System
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      3362         
Context Switch Count      1121             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0xfffff800028d6050)
Stack Init fffff880040badb0 Current fffff880033ae390
Base fffff880040bb000 Limit fffff880040b5000 Call 0
Priority 13 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`040ba528 fffff800`028c8469 : 00000000`0000000a fffff880`10d48048 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`040ba530 fffff800`028c70e0 : 00000000`00000003 fffff980`09d3cef0 00000000`00000000 fffffa80`07bd5398 : nt!KiBugCheckDispatch+0x69
fffff880`040ba670 fffff800`028e06cf : 00000000`00000000 fffff980`0a070b44 00000000`00000150 fffff800`02d6409d : nt!KiPageFault+0x260 (TrapFrame @ fffff880`040ba670)
fffff880`040ba800 fffff880`0142f470 : fffff980`09a60a20 fffff980`09c42e40 00000000`00000150 00000000`00000000 : nt!ExInitializeResourceLite+0xef
fffff880`040ba860 fffff880`014ce8a8 : 00010000`00017194 00000000`00000008 fffff880`014ce5b8 00000000`00000000 : Ntfs!NtfsAllocateNonpagedFcb+0x54
fffff880`040ba890 fffff880`0149acf6 : fffff980`09c42e40 fffffa80`09001180 fffff980`09c42e40 00010000`00017194 : Ntfs!NtfsCreateFcb+0x2f0
fffff880`040ba970 fffff880`014beb04 : fffff880`033ae660 fffff980`09a60a20 fffff980`09c42e40 00000000`00000000 : Ntfs!NtfsOpenFile+0x1ca
fffff880`040bab50 fffff880`01427c0d : fffff980`09c42e40 fffff980`09a60a20 fffff880`033ae660 fffff980`09d9af00 : Ntfs!NtfsCommonCreate+0xc54
fffff880`040bad30 fffff800`028c0d87 : fffff880`033ae5d0 dddddddd`dddddddd dddddddd`dddddddd dddddddd`dddddddd : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`040bad60 fffff800`028c0d41 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KySwitchKernelStackCallout+0x27 (TrapFrame @ fffff880`040bac20)
fffff880`033ae4a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SCAN_AT_RAISED_IRQL_CAUGHT_IMPROPER_DRIVER_UNLOAD (d4)
A driver unloaded without cancelling lookaside lists, DPCs, worker threads, etc.
The broken driver's name is displayed on the screen.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
An attempt was made to access the driver at raised IRQL after it unloaded.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff88010d48048, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff800028e06cf, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002aff0e0
 fffff88010d48048 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExInitializeResourceLite+ef
fffff800`028e06cf 488918          mov     qword ptr [rax],rbx

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD4

PROCESS_NAME:  System

TRAP_FRAME:  fffff880040ba670 -- (.trap 0xfffff880040ba670)
.trap 0xfffff880040ba670
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88010d48048 rbx=0000000000000000 rcx=fffff80002a6c770
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800028e06cf rsp=fffff880040ba800 rbp=fffff98009a60a20
 r8=0000000000000000  r9=0000000000000000 r10=fffff880033ae7b0
r11=fffff880040ba7f0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ExInitializeResourceLite+0xef:
fffff800`028e06cf 488918          mov     qword ptr [rax],rbx ds:8460:fffff880`10d48048=????????????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800028c8469 to fffff800028c8f00

STACK_TEXT:  
fffff880`040ba528 fffff800`028c8469 : 00000000`0000000a fffff880`10d48048 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`040ba530 fffff800`028c70e0 : 00000000`00000003 fffff980`09d3cef0 00000000`00000000 fffffa80`07bd5398 : nt!KiBugCheckDispatch+0x69
fffff880`040ba670 fffff800`028e06cf : 00000000`00000000 fffff980`0a070b44 00000000`00000150 fffff800`02d6409d : nt!KiPageFault+0x260
fffff880`040ba800 fffff880`0142f470 : fffff980`09a60a20 fffff980`09c42e40 00000000`00000150 00000000`00000000 : nt!ExInitializeResourceLite+0xef
fffff880`040ba860 fffff880`014ce8a8 : 00010000`00017194 00000000`00000008 fffff880`014ce5b8 00000000`00000000 : Ntfs!NtfsAllocateNonpagedFcb+0x54
fffff880`040ba890 fffff880`0149acf6 : fffff980`09c42e40 fffffa80`09001180 fffff980`09c42e40 00010000`00017194 : Ntfs!NtfsCreateFcb+0x2f0
fffff880`040ba970 fffff880`014beb04 : fffff880`033ae660 fffff980`09a60a20 fffff980`09c42e40 00000000`00000000 : Ntfs!NtfsOpenFile+0x1ca
fffff880`040bab50 fffff880`01427c0d : fffff980`09c42e40 fffff980`09a60a20 fffff880`033ae660 fffff980`09d9af00 : Ntfs!NtfsCommonCreate+0xc54
fffff880`040bad30 fffff800`028c0d87 : fffff880`033ae5d0 dddddddd`dddddddd dddddddd`dddddddd dddddddd`dddddddd : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`040bad60 fffff800`028c0d41 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KySwitchKernelStackCallout+0x27
fffff880`033ae4a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExInitializeResourceLite+ef
fffff800`028e06cf 488918          mov     qword ptr [rax],rbx

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!ExInitializeResourceLite+ef

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_0xD4_VRFK_nt!ExInitializeResourceLite+ef

BUCKET_ID:  X64_0xD4_VRFK_nt!ExInitializeResourceLite+ef

Followup: MachineOwner
---------

rax=fffff880040ba630 rbx=fffff98009d3cef0 rcx=000000000000000a
rdx=fffff88010d48048 rsi=fffff98009c42e40 rdi=0000000000000000
rip=fffff800028c8f00 rsp=fffff880040ba528 rbp=fffff880040ba6f0
 r8=0000000000000002  r9=0000000000000001 r10=fffff800028e06cf
r11=fffff6fb7e200430 r12=fffff9800a070b44 r13=0000000000000000
r14=fffff9800a070c48 r15=fffffa8009001100
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`028c8f00 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`040ba530=000000000000000a
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`040ba528 fffff800`028c8469 : 00000000`0000000a fffff880`10d48048 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`040ba530 fffff800`028c70e0 : 00000000`00000003 fffff980`09d3cef0 00000000`00000000 fffffa80`07bd5398 : nt!KiBugCheckDispatch+0x69
fffff880`040ba670 fffff800`028e06cf : 00000000`00000000 fffff980`0a070b44 00000000`00000150 fffff800`02d6409d : nt!KiPageFault+0x260 (TrapFrame @ fffff880`040ba670)
fffff880`040ba800 fffff880`0142f470 : fffff980`09a60a20 fffff980`09c42e40 00000000`00000150 00000000`00000000 : nt!ExInitializeResourceLite+0xef
fffff880`040ba860 fffff880`014ce8a8 : 00010000`00017194 00000000`00000008 fffff880`014ce5b8 00000000`00000000 : Ntfs!NtfsAllocateNonpagedFcb+0x54
fffff880`040ba890 fffff880`0149acf6 : fffff980`09c42e40 fffffa80`09001180 fffff980`09c42e40 00010000`00017194 : Ntfs!NtfsCreateFcb+0x2f0
fffff880`040ba970 fffff880`014beb04 : fffff880`033ae660 fffff980`09a60a20 fffff980`09c42e40 00000000`00000000 : Ntfs!NtfsOpenFile+0x1ca
fffff880`040bab50 fffff880`01427c0d : fffff980`09c42e40 fffff980`09a60a20 fffff880`033ae660 fffff980`09d9af00 : Ntfs!NtfsCommonCreate+0xc54
fffff880`040bad30 fffff800`028c0d87 : fffff880`033ae5d0 dddddddd`dddddddd dddddddd`dddddddd dddddddd`dddddddd : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`040bad60 fffff800`028c0d41 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KySwitchKernelStackCallout+0x27 (TrapFrame @ fffff880`040bac20)
fffff880`033ae4a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue
start             end                 module name
fffff800`00bd5000 fffff800`00bdf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`0280e000 fffff800`02857000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff800`02857000 fffff800`02e34000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`00c41000 fffff880`00c85000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00c85000 fffff880`00c99000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00c99000 fffff880`00cf7000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00cf7000 fffff880`00db7000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e63000 fffff880`00e73000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00e73000 fffff880`00e8d000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e8d000 fffff880`00e96000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e96000 fffff880`00ec0000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00ed0000 fffff880`00f74000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f74000 fffff880`00f83000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f83000 fffff880`00f98000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f98000 fffff880`00fad000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00fad000 fffff880`00fd8000   nvstor   nvstor.sys   Wed May 20 02:45:37 2009 (4A13A711)
fffff880`00fd8000 fffff880`00ffd000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01000000 fffff880`0100a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0100a000 fffff880`01017000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01017000 fffff880`0104a000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0104b000 fffff880`01171000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`01171000 fffff880`0117a000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0117a000 fffff880`011a9000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`011a9000 fffff880`01200000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`01200000 fffff880`0125e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`0125e000 fffff880`012d1000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`012d1000 fffff880`012ef000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`012f1000 fffff880`01353000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`01353000 fffff880`01392000   nvstor64 nvstor64.sys Tue Aug 04 20:31:07 2009 (4A78D2CB)
fffff880`01392000 fffff880`0139d000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`0139d000 fffff880`013e9000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013e9000 fffff880`013fd000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01416000 fffff880`015b9000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`015b9000 fffff880`015d3000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015d3000 fffff880`015e4000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`015e4000 fffff880`015ee000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`015ee000 fffff880`015ff000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01600000 fffff880`0160d000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0160f000 fffff880`01701000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01701000 fffff880`01761000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01761000 fffff880`0178c000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0178c000 fffff880`017d6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`017d6000 fffff880`017e6000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`017e6000 fffff880`017ef000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`017ef000 fffff880`017fa000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01a00000 fffff880`01a3f000   dump_nvstor64 dump_nvstor64.sys Tue Aug 04 20:31:07 2009 (4A78D2CB)
fffff880`01a3f000 fffff880`01a52000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01a52000 fffff880`01a7c000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01a7c000 fffff880`01a85000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01a85000 fffff880`01a8c000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01a8c000 fffff880`01a9a000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01a9d000 fffff880`01ae9000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`01ae9000 fffff880`01af1000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01af1000 fffff880`01b2b000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01b2b000 fffff880`01b3d000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01b3d000 fffff880`01b46000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01b46000 fffff880`01b80000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01b80000 fffff880`01b96000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01b96000 fffff880`01bc6000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01bc6000 fffff880`01bd4000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01bd4000 fffff880`01bde000   dump_diskdump dump_diskdump.sys Mon Jul 13 20:01:00 2009 (4A5BCABC)
fffff880`01bde000 fffff880`01bee000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`01bee000 fffff880`01bf7000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01bf7000 fffff880`01c00000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04200000 fffff880`04214000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`04214000 fffff880`0422e000   SCDEmu   SCDEmu.SYS   Sun Nov 08 22:27:29 2009 (4AF78C21)
fffff880`04244000 fffff880`042b9000   avgtdia  avgtdia.sys  Mon Nov 02 08:26:13 2009 (4AEEDDF5)
fffff880`042b9000 fffff880`042fe000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`042fe000 fffff880`04388000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04388000 fffff880`04391000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04391000 fffff880`043b7000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`043b7000 fffff880`043c6000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`043c6000 fffff880`043e3000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`043e3000 fffff880`043fe000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`04414000 fffff880`04465000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04465000 fffff880`04471000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`04471000 fffff880`0447c000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0447c000 fffff880`0448b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0448b000 fffff880`0450e000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`0450e000 fffff880`0452c000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`0452c000 fffff880`0453d000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0453d000 fffff880`04543bc0   avgmfx64 avgmfx64.sys Tue Oct 13 03:25:18 2009 (4AD42B5E)
fffff880`04544000 fffff880`045b1000   avgldx64 avgldx64.sys Sun Sep 20 11:04:15 2009 (4AB6446F)
fffff880`045b1000 fffff880`045d7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`045d7000 fffff880`045ed000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04a13000 fffff880`04b07000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04b07000 fffff880`04b4d000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`10dd9000 fffff880`10dda180   nvBridge nvBridge.kmd Fri Nov 20 22:09:47 2009 (4B0759FB)

Unloaded modules:
fffff880`100cb000 fffff880`10dd9000   nvlddmkm.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`011a9000 fffff880`01200000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`042fe000 fffff880`04388000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01392000 fffff880`0139d000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00e8d000 fffff880`00e96000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e96000 fffff880`00ec0000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04544000 fffff880`045b1000   avgldx64 avgldx64.sys Sun Sep 20 11:04:15 2009 (4AB6446F)
fffff880`0453d000 fffff880`04543bc0   avgmfx64 avgmfx64.sys Tue Oct 13 03:25:18 2009 (4AD42B5E)
fffff880`04244000 fffff880`042b9000   avgtdia  avgtdia.sys  Mon Nov 02 08:26:13 2009 (4AEEDDF5)
fffff880`01a85000 fffff880`01a8c000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0452c000 fffff880`0453d000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`01a52000 fffff880`01a7c000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cf7000 fffff880`00db7000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01b96000 fffff880`01bc6000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c99000 fffff880`00cf7000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0125e000 fffff880`012d1000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01bc6000 fffff880`01bd4000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0448b000 fffff880`0450e000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`0450e000 fffff880`0452c000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`0447c000 fffff880`0448b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01b80000 fffff880`01b96000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01bd4000 fffff880`01bde000   dump_diskdump dump_diskdump.sys Mon Jul 13 20:01:00 2009 (4A5BCABC)
fffff880`01a3f000 fffff880`01a52000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01a00000 fffff880`01a3f000   dump_nvstor64 dump_nvstor64.sys Tue Aug 04 20:31:07 2009 (4A78D2CB)
fffff880`04a13000 fffff880`04b07000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04b07000 fffff880`04b4d000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`013e9000 fffff880`013fd000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0139d000 fffff880`013e9000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`015e4000 fffff880`015ee000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01b46000 fffff880`01b80000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`0178c000 fffff880`017d6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`0280e000 fffff800`02857000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`01b3d000 fffff880`01b46000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`045d7000 fffff880`045ed000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff800`00bd5000 fffff800`00bdf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`015b9000 fffff880`015d3000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01761000 fffff880`0178c000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`00c41000 fffff880`00c85000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00e73000 fffff880`00e8d000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`017ef000 fffff880`017fa000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`0100a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01200000 fffff880`0125e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04471000 fffff880`0447c000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01b2b000 fffff880`01b3d000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0160f000 fffff880`01701000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043b7000 fffff880`043c6000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`042b9000 fffff880`042fe000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01701000 fffff880`01761000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`015ee000 fffff880`015ff000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04465000 fffff880`04471000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02857000 fffff800`02e34000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01416000 fffff880`015b9000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01a7c000 fffff880`01a85000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10dd9000 fffff880`10dda180   nvBridge nvBridge.kmd Fri Nov 20 22:09:47 2009 (4B0759FB)
fffff880`00fad000 fffff880`00fd8000   nvstor   nvstor.sys   Wed May 20 02:45:37 2009 (4A13A711)
fffff880`01353000 fffff880`01392000   nvstor64 nvstor64.sys Tue Aug 04 20:31:07 2009 (4A78D2CB)
fffff880`04391000 fffff880`043b7000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f83000 fffff880`00f98000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01017000 fffff880`0104a000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e63000 fffff880`00e73000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015d3000 fffff880`015e4000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`00c85000 fffff880`00c99000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04414000 fffff880`04465000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`01bee000 fffff880`01bf7000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01bf7000 fffff880`01c00000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`017e6000 fffff880`017ef000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01af1000 fffff880`01b2b000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04214000 fffff880`0422e000   SCDEmu   SCDEmu.SYS   Sun Nov 08 22:27:29 2009 (4AF78C21)
fffff880`0117a000 fffff880`011a9000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`043c6000 fffff880`043e3000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01ae9000 fffff880`01af1000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0104b000 fffff880`01171000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`012f1000 fffff880`01353000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01600000 fffff880`0160d000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`012d1000 fffff880`012ef000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`04200000 fffff880`04214000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`045b1000 fffff880`045d7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`0100a000 fffff880`01017000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01a8c000 fffff880`01a9a000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`00fd8000 fffff880`00ffd000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017d6000 fffff880`017e6000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f98000 fffff880`00fad000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01a9d000 fffff880`01ae9000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`043e3000 fffff880`043fe000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01bde000 fffff880`01bee000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ed0000 fffff880`00f74000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f74000 fffff880`00f83000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04388000 fffff880`04391000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`01171000 fffff880`0117a000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`100cb000 fffff880`10dd9000   nvlddmkm.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 000000D4
Arguments fffff880`10d48048 00000000`00000002 00000000`00000001 fffff800`028e06cf

icealys · 12 Jan 2010

Here are all my blue screen crash dumps since last month...can you find anything wrong with the software?

usasma · 14 Jan 2010

Here's the BSOD's from your upload. Please note that they change constantly. This is a symptom of a hardware problem. A much less likely issue would be a corruption of Windows - so reinstall Windows to rule that out (as suggested previously) then proceed with hardware troubleshooting if you experience further BSOD's

Code:

102909-42182-01.dmp    10/29/2009 3:18:24 AM    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED    0x1000007e    
121409-22261-01.dmp    12/14/2009 9:33:04 PM    NTFS_FILE_SYSTEM    0x00000024    122909-28314-01.dmp    12/29/2009 7:32:30 PM    KMODE_EXCEPTION_NOT_HANDLED    0x0000001e    123009-30404-01.dmp    12/30/2009 2:06:04 PM        0x00000109 
123109-38360-01.dmp    12/31/2009 7:59:14 AM    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED    0x1000007e
010610-27128-01.dmp    1/6/2010 12:29:04 PM    SYSTEM_SERVICE_EXCEPTION    0x0000003b    
011010-28220-01.dmp    1/10/2010 3:38:54 AM    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED    0x1000007e
011010-17300-01.dmp    1/10/2010 8:51:48 PM    SYSTEM_SCAN_AT_RAISED_IRQL_CAUGHT_IMPROPER_DRIVER_UNLOAD    0x000000d4

icealys · 04 Feb 2010

i tried running windows 7 diagnostics and it found no problems with my memory..I also reinstalled the OS and still got this bluescreen.

jcgriff2 · 04 Feb 2010

Bugcheck = 0x4e (0x2,,,) = PFN list was corrupted

Update your NVIDIA nForce drivers -

Code:

nvm62x64.sys Fri Oct 17 17:01:06 2008 (48F8FD12)
nvstor.sys   Wed May 20 02:45:37 2009 (4A13A711)

NVIDIA --> Drivers - Download NVIDIA Drivers

Regards. . .

jcgriff2

.

Windows 7: windows 7 memory dump

windows 7 memory dump problems?