BSOD - W7 x64 Thinkcenter E20

jmwiles3 · 10 Jul 2010

Hello. I'm thinking the issue in the dump below is caused by a driver, but I'm unable to determine which one.

After spending what seems like days going back and forth with IBM tech support they have concluded that the system issues are in fact software related. This is the first and only dump I have, no other times before this file has the system given any blue screens just rebooted without any warning.

After searching online I think it may be the audio driver, based upon results online with the same exception address.

Any help, foresight, etc., is greatly appreciated.

Thanks!

Code:

EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.
 
FAULTING_IP: 
+3839343061303633
00000000`00000000 ?? ???
 
EXCEPTION_PARAMETER1: 0000000000000000
 
EXCEPTION_PARAMETER2: 0000000000000000
 
ERROR_CODE: (NTSTATUS) 0 - STATUS_WAIT_0
 
BUGCHECK_STR: 0x1E_0
 
CUSTOMER_CRASH_COUNT: 1
 
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
 
PROCESS_NAME: System
 
CURRENT_IRQL: 2
 
EXCEPTION_RECORD: fffff88002f8b3a8 -- (.exr 0xfffff88002f8b3a8)
ExceptionAddress: fffff80002ac89d2 (nt!KiProcessExpiredTimerList+0x0000000000000072)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
 
TRAP_FRAME: fffff88002f8b450 -- (.trap 0xfffff88002f8b450)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0008000000000000 rbx=0000000000000000 rcx=0000000003b94003
rdx=fffffa8003b94178 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ac89d2 rsp=fffff88002f8b5e0 rbp=000000000018af92
r8=0000000000000001 r9=0000000000000000 r10=0000000000000092
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!KiProcessExpiredTimerList+0x72:
fffff800`02ac89d2 803818 cmp byte ptr [rax],18h ds:0700:00080000`00000000=??
Resetting default scope
 
LAST_CONTROL_TRANSFER: from fffff80002ab532e to fffff80002abd5d0
 
STACK_TEXT: 
fffff880`02f8a498 fffff800`02ab532e : fffff880`02f8a4b0 fffff880`02f8a5d0 fffff880`02f8ac10 fffff800`02aea524 : nt!KeBugCheck
fffff880`02f8a4a0 fffff800`02ae32ed : fffff800`02ccbb88 fffff800`02c04a40 fffff800`02a4d000 fffff880`02f8b3a8 : nt!KiKernelCalloutExceptionHandler+0xe
fffff880`02f8a4d0 fffff800`02aea950 : fffff800`02c0cb24 fffff880`02f8a548 fffff880`02f8b3a8 fffff800`02a4d000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02f8a500 fffff800`02af78df : fffff880`02f8b3a8 fffff880`02f8ac10 fffff880`00000000 fffff880`02f8b608 : nt!RtlDispatchException+0x410
fffff880`02f8abe0 fffff800`02abcc42 : fffff880`02f8b3a8 fffffa80`03bafe70 fffff880`02f8b450 00000000`00000004 : nt!KiDispatchException+0x16f
fffff880`02f8b270 fffff800`02abb54a : fffffa80`06ef3000 fffff880`04391691 00000000`002b99f4 00000000`00000001 : nt!KiExceptionDispatch+0xc2
fffff880`02f8b450 fffff800`02ac89d2 : fffffa80`03bafe70 fffffa80`06271688 fffffa80`06271688 00000000`00000000 : nt!KiGeneralProtectionFault+0x10a
fffff880`02f8b5e0 fffff800`02ac957e : 0000003a`c3055087 fffff880`02f8bc58 00000000`0018af92 fffff880`02f667c8 : nt!KiProcessExpiredTimerList+0x72
fffff880`02f8bc30 fffff800`02ac8d97 : 00000010`ca7870ca 00000010`0018af92 00000010`ca7870e5 00000000`00000092 : nt!KiTimerExpiration+0x1be
fffff880`02f8bcd0 fffff800`02ac5dfa : fffff880`02f63180 fffff880`02f6dfc0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff880`02f8bd80 00000000`00000000 : fffff880`02f8c000 fffff880`02f86000 fffff880`02f8bd40 00000000`00000000 : nt!KiIdleLoop+0x5a
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP: 
nt!KiKernelCalloutExceptionHandler+e
fffff800`02ab532e 90 nop
 
SYMBOL_STACK_INDEX: 1
 
SYMBOL_NAME: nt!KiKernelCalloutExceptionHandler+e
 
FOLLOWUP_NAME: MachineOwner
 
MODULE_NAME: nt
 
IMAGE_NAME: ntkrnlmp.exe
 
DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
 
FAILURE_BUCKET_ID: X64_0x1E_0_nt!KiKernelCalloutExceptionHandler+e
 
BUCKET_ID: X64_0x1E_0_nt!KiKernelCalloutExceptionHandler+e
 
Followup: MachineOwner
---------
 
2: kd> .exr 0xfffff88002f8b3a8
ExceptionAddress: fffff80002ac89d2 (nt!KiProcessExpiredTimerList+0x0000000000000072)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

Jonathan_King · 10 Jul 2010

Welcome to SF!

I see no evidence pointing to audio driver, but anything is possible.

To go on, we will need the dmp files. Please see my tutorial: https://www.sevenforums.com/tutorials...en-forums.html

From the looks of it, you will need to enable driver verifier. See here: Using Driver Verifier to identify issues with Drivers

jmwiles3 · 10 Jul 2010

dmp file attached as requested in a zip file.

Jonathan_King · 10 Jul 2010

In addition to my previous post, you may consider removing AVG as a basic troubleshooting step. Nothing to point to it as the cause in this dump, but from experience, I can say AVG, and other 3rd party anti-virus programs cause a lot of BSODs.

If you decide to do that, I highly recommend the free alternative Microsoft Security Essentials.

Here is the AVG uninstaller for your system: http://download.avg.com/filedir/util...removerx64.exe

Code:

Opened log file 'C:\Users\Jonathan\_jcgriff2_\dbug\__Kernel__\_99-dbug.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\_jcgriff2_\dbug\__Kernel__\070910-19422-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a4d000 PsLoadedModuleList = 0xfffff800`02c8ae50
Debug session time: Fri Jul  9 15:06:35.814 2010 (UTC - 4:00)
System Uptime: 0 days 7:00:38.000
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiKernelCalloutExceptionHandler+e )

Followup: MachineOwner
---------

2: kd> !analyze -v;lmtsmn;.bugcheck;.logclose;q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

FAULTING_IP: 
+3839343061303633
00000000`00000000 ??              ???

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

ERROR_CODE: (NTSTATUS) 0 - STATUS_WAIT_0

BUGCHECK_STR:  0x1E_0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

EXCEPTION_RECORD:  fffff88002f8b3a8 -- (.exr 0xfffff88002f8b3a8)
.exr 0xfffff88002f8b3a8
ExceptionAddress: fffff80002ac89d2 (nt!KiProcessExpiredTimerList+0x0000000000000072)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff88002f8b450 -- (.trap 0xfffff88002f8b450)
.trap 0xfffff88002f8b450
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0008000000000000 rbx=0000000000000000 rcx=0000000003b94003
rdx=fffffa8003b94178 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ac89d2 rsp=fffff88002f8b5e0 rbp=000000000018af92
 r8=0000000000000001  r9=0000000000000000 r10=0000000000000092
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!KiProcessExpiredTimerList+0x72:
fffff800`02ac89d2 803818          cmp     byte ptr [rax],18h ds:0700:00080000`00000000=??
.trap
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ab532e to fffff80002abd5d0

STACK_TEXT:  
fffff880`02f8a498 fffff800`02ab532e : fffff880`02f8a4b0 fffff880`02f8a5d0 fffff880`02f8ac10 fffff800`02aea524 : nt!KeBugCheck
fffff880`02f8a4a0 fffff800`02ae32ed : fffff800`02ccbb88 fffff800`02c04a40 fffff800`02a4d000 fffff880`02f8b3a8 : nt!KiKernelCalloutExceptionHandler+0xe
fffff880`02f8a4d0 fffff800`02aea950 : fffff800`02c0cb24 fffff880`02f8a548 fffff880`02f8b3a8 fffff800`02a4d000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02f8a500 fffff800`02af78df : fffff880`02f8b3a8 fffff880`02f8ac10 fffff880`00000000 fffff880`02f8b608 : nt!RtlDispatchException+0x410
fffff880`02f8abe0 fffff800`02abcc42 : fffff880`02f8b3a8 fffffa80`03bafe70 fffff880`02f8b450 00000000`00000004 : nt!KiDispatchException+0x16f
fffff880`02f8b270 fffff800`02abb54a : fffffa80`06ef3000 fffff880`04391691 00000000`002b99f4 00000000`00000001 : nt!KiExceptionDispatch+0xc2
fffff880`02f8b450 fffff800`02ac89d2 : fffffa80`03bafe70 fffffa80`06271688 fffffa80`06271688 00000000`00000000 : nt!KiGeneralProtectionFault+0x10a
fffff880`02f8b5e0 fffff800`02ac957e : 0000003a`c3055087 fffff880`02f8bc58 00000000`0018af92 fffff880`02f667c8 : nt!KiProcessExpiredTimerList+0x72
fffff880`02f8bc30 fffff800`02ac8d97 : 00000010`ca7870ca 00000010`0018af92 00000010`ca7870e5 00000000`00000092 : nt!KiTimerExpiration+0x1be
fffff880`02f8bcd0 fffff800`02ac5dfa : fffff880`02f63180 fffff880`02f6dfc0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff880`02f8bd80 00000000`00000000 : fffff880`02f8c000 fffff880`02f86000 fffff880`02f8bd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiKernelCalloutExceptionHandler+e
fffff800`02ab532e 90              nop

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!KiKernelCalloutExceptionHandler+e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

FAILURE_BUCKET_ID:  X64_0x1E_0_nt!KiKernelCalloutExceptionHandler+e

BUCKET_ID:  X64_0x1E_0_nt!KiKernelCalloutExceptionHandler+e

Followup: MachineOwner
---------

start             end                 module name
fffff880`00f8f000 fffff880`00fe6000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`07423000 fffff880`0743b000   adfs     adfs.SYS     Mon Nov 03 11:48:14 2008 (490F2B4E)
fffff880`03afa000 fffff880`03b84000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04580000 fffff880`04596000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011d9000 fffff880`011e4000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07913000 fffff880`0791e000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff960`00850000 fffff960`008b1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`04115000 fffff880`0415c000   avgldx64 avgldx64.sys Thu Jun 03 17:06:48 2010 (4C081968)
fffff880`0410d000 fffff880`04114080   avgmfx64 avgmfx64.sys Sun Apr 25 17:06:15 2010 (4BD4AEC7)
fffff880`017f3000 fffff880`017ff0c0   avgrkx64 avgrkx64.sys Wed Feb 10 22:52:44 2010 (4B737F0C)
fffff880`01060000 fffff880`010b1000   avgtdia  avgtdia.sys  Thu Jun 03 17:09:57 2010 (4C081A25)
fffff880`02ded000 fffff880`02df4000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`040fc000 fffff880`0410d000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07538000 fffff880`07556000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00780000 fffff960`007a7000   cdd      cdd.dll      unavailable (00000000)
fffff880`02dba000 fffff880`02de4000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`015a2000 fffff880`015d2000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d1c000 fffff880`00d7a000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01422000 fffff880`01495000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04570000 fffff880`04580000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`048d0000 fffff880`048de000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0405b000 fffff880`040de000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`040de000 fffff880`040fc000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03a97000 fffff880`03aa6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`017dd000 fffff880`017f3000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`048ae000 fffff880`048d0000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`041dc000 fffff880`041ef000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02c87000 fffff880`02da5000   dump_iaStorV dump_iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`0427e000 fffff880`0428a000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0428f000 fffff880`04383000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04383000 fffff880`043c9000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04200000 fffff880`04247000   e1k62x64 e1k62x64.sys Wed Sep 23 20:11:00 2009 (4ABAB914)
fffff880`0104c000 fffff880`01060000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01000000 fffff880`0104c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`014a6000 fffff880`014b0000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`016a9000 fffff880`016e3000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01783000 fffff880`017cd000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a04000 fffff800`02a4d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04258000 fffff880`0427c000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`043c9000 fffff880`043da000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`01400000 fffff880`01419000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05c00000 fffff880`05c08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0403c000 fffff880`0404a000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07470000 fffff880`07538000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`016a0000 fffff880`016a9000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`010bb000 fffff880`011d9000   iaStorV  iaStorV.sys  Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`0455a000 fffff880`04570000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04461000 fffff880`04470000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`041ef000 fffff880`041fd000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb8000 fffff800`00bc2000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04856000 fffff880`04899000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013aa000 fffff880`013c4000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01758000 fffff880`01783000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05df6000 fffff880`05dfb200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`046bd000 fffff880`046d2000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`013c4000 fffff880`013e7000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cc4000 fffff880`00d08000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`053f2000 fffff880`05400000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04470000 fffff880`0447f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0404a000 fffff880`04057000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d7a000 fffff880`00d94000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`07556000 fffff880`0756e000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0756e000 fffff880`0759b000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0759b000 fffff880`075e9000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07400000 fffff880`07423000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02c5e000 fffff880`02c69000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fef000 fffff880`00ff9000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00d94000 fffff880`00df2000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03a8c000 fffff880`03a97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0168e000 fffff880`016a0000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014b0000 fffff880`015a2000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045ba000 fffff880`045c6000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04725000 fffff880`04738000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`045c6000 fffff880`045f5000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04899000 fffff880`048ae000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03bc9000 fffff880`03bd8000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03ab5000 fffff880`03afa000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`016f8000 fffff880`01758000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0447f000 fffff880`04535000   netr28x  netr28x.sys  Fri Jun 19 03:56:06 2009 (4A3B4496)
fffff880`02c69000 fffff880`02c7a000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03a80000 fffff880`03a8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a4d000 fffff800`03029000   nt       ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
fffff880`01207000 fffff880`013aa000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02de4000 fffff880`02ded000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`053b3000 fffff880`053b4180   nvBridge nvBridge.kmd Tue Dec 29 21:26:17 2009 (4B3ABA49)
fffff880`048e4000 fffff880`053b2580   nvlddmkm nvlddmkm.sys Tue Dec 29 21:55:44 2009 (4B3AC130)
fffff880`046d2000 fffff880`04725000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03b8d000 fffff880`03bb3000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01495000 fffff880`014a6000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`04750000 fffff880`047f6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`053b5000 fffff880`053f2000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`045f5000 fffff880`04600000   psadd    psadd.sys    Mon Feb 19 13:56:37 2007 (45D9F2E5)
fffff880`00d08000 fffff880`00d1c000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04596000 fffff880`045ba000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04400000 fffff880`0441b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0441b000 fffff880`0443c000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0443c000 fffff880`04456000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a2f000 fffff880`03a80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04456000 fffff880`04461000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02c43000 fffff880`02c4c000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c4c000 fffff880`02c55000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c55000 fffff880`02c5e000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01654000 fffff880`0168e000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04738000 fffff880`04750000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c09000 fffff880`05df5c00   RTKVHD64 RTKVHD64.sys Mon Nov 09 04:13:59 2009 (4AF7DD57)
fffff880`04000000 fffff880`0403c000   RtsUStor RtsUStor.sys Thu Nov 05 22:23:27 2009 (4AF396AF)
fffff880`0743b000 fffff880`07446000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`043da000 fffff880`043e6000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03bd8000 fffff880`03bf5000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0164c000 fffff880`01654000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0780a000 fffff880`078a2000   srv      srv.sys      Tue Dec 08 03:32:55 2009 (4B1E0F37)
fffff880`0462d000 fffff880`04696000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`04600000 fffff880`0462d000   srvnet   srvnet.sys   Tue Dec 08 03:32:26 2009 (4B1E0F1A)
fffff880`0427c000 fffff880`0427d480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Tue Jan 26 22:49:10 2010 (4B5FB7B6)
fffff880`07446000 fffff880`07458000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02c7a000 fffff880`02c87000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`015d2000 fffff880`015f0000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03a1b000 fffff880`03a2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`04542000 fffff880`04551000   tpm      tpm.sys      Mon Jul 13 19:21:48 2009 (4A5BC18C)
fffff960`005d0000 fffff960`005da000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`0415c000 fffff880`04182000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`043e6000 fffff880`043f8000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05dfc000 fffff880`05dfdf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04247000 fffff880`04258000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04182000 fffff880`041dc000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04800000 fffff880`04856000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02c00000 fffff880`02c0e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02c0e000 fffff880`02c33000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017cd000 fffff880`017dd000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01600000 fffff880`0164c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04535000 fffff880`04542000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03bb3000 fffff880`03bc9000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03a00000 fffff880`03a1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c33000 fffff880`02c43000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00edc000 fffff880`00f80000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f80000 fffff880`00f8f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03b84000 fffff880`03b8d000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003df000   win32k   win32k.sys   unavailable (00000000)
fffff880`04551000 fffff880`0455a000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fe6000 fffff880`00fef000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0469c000 fffff880`046bd000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`078a2000 fffff880`07913000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`016e3000 fffff880`016f1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`02c89000 fffff880`02da7000   dump_iaStorV
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0011E000
fffff880`02da7000 fffff880`02dba000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
Bugcheck code 0000001E
Arguments 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000
Closing open log file C:\Users\Jonathan\_jcgriff2_\dbug\__Kernel__\_99-dbug.txt


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨

jmwiles3 · 11 Jul 2010

I'd really rather not remove AVG since our entire organization uses it with no problems. However, I did notice one thing in the verifier setup. The note that says to not enable deadlock detection if you're running norton seems to apply in this case to AVG as well. With it enabled the machine sat at starting windows for over 2 hours before I got tired of waiting. Once this was disabled the OS booted within seconds just like normal.

I noticed also that the guesstimated wait time was about 36 hours for the bsod to possibly reappear, any notion of this happening sooner?

Jonathan_King · 11 Jul 2010

The logic behind waiting 36 hours with Verifier enabled is as follows: If the system lasts 36 hours without a crash, it is probably safe to say drivers are not the problem.

Go ahead and remove AVG at least temporarily. Some programs work on some systems, but have issues on others.

Remove AVG for the time being, and you can reinstall it later if we determine it is not the cause.

jmwiles3 · 12 Jul 2010

Just a quick update... been over 24 hours and the machine hasn't had any issues or BSODs. Time will tell.

jmwiles3 · 13 Jul 2010

The machine just rebooted on it's own, with no BSOD. The only thing in the event log... event id 41, Task 63.

jmwiles3 · 15 Jul 2010

Just received a message that the computer BSODed again with a 3E error. No dump was created, so there is no dmp to upload.

From what I've read STOP error 0x3E means that the system has multiple processors, but they are asymmetric in relation to one another. STOP code 0x0000003E may also display "MULTIPROCESSOR_CONFIGURATION_NOT_SUPPORTED" on the same STOP message.

Which makes no sense, because this version of 7 is the same installed on multiple machines with multiple cores.

jmwiles3 · 23 Jul 2010

Ok, obviously this isn't being caused by avg. Since it hasn't been installed for over two weeks now and the system is still crashing.

I've set the machine to not auto restart on crash, which doesn't appear to be working.

I've updated the bios to the latest and greatest available. As well as the intel chipset drivers.

Memory tests: memtest (windows), lenovo's stress testing, and memtest86 all passed.

Stress Testing: Lenovo's software and prime95 with no failures. CPU temperature readings never exceeded 70c at full load, with the fans running at normal speed.

Windows Update pulls from a WSUS 3.x server on the local domain, polling every 22 hours (the max) and is set to reboot only when no users are logged in.

This machine has restarted three times since 12 am this morning with the same kernel-power event id 41, Task 63. Prior to this there were no recorded restarts since last week.

I was thinking that it might be something to do with windows update. The last update was installed on 7/20/2010. So, I'm not so sure about that now.

Also of note, there have been no BSODs since the last mentioned here. And, one time the system got stuck after it loaded classpnp.sys in safemode.

Any other ideas, etc.,?