BSOD Win 7 both IRQ and System service

marganis · 21 Oct 2010

Hi there!

I recently bought a new computer, (bought the parts myself and put it together) and ever since I have started to getting these blue screens every now and then. Maybe 4 times a week or so.

I understand that these errors are usually some kind of driver conflict but I dont know how to check which ones that are.

I will attach some of the dmp files, any help is appriciated.

/

Marganis

yowanvista · 21 Oct 2010

One dump blames atikmdag.sys, part ot your ATI display driver

Possible causes:bad RAM/PSU, incorrect RAM timings/voltages, bad Graphics card, overheating

Uninstall it then use driver sweeper to remove the leftover driver files
Guru3D - Driver Sweeper

Then reinstall your ATI drivers
Graphics Drivers & Software

This was likely caused by the following module: atikmdag.sys
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8800486E7A4, 0xFFFFF88003F61520, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION

Lemur · 21 Oct 2010

Hi Marganis, and welcome to SF.

First, complete your System Specs, which aids us greatly.

Second, follow the directions below:

BSOD Posting Instructions
https://www.sevenforums.com/crashes-d...tructions.html

marganis · 21 Oct 2010

@towanvista: Thank you! I will do that right away.

@Lemur: Sorry about that, I guess getting frustrated about the BSOD caused me to skip the stickies. How do you mean the complete specs? The DXdiag thing?

Some info about my computer then:

Windows 7 Home premium 64-bit
Retail version

Bought a completly new computer this August
This installation of Windows is a few weeks old, cant remember the exact date.

Also attached the requested rar-file.

Lemur · 21 Oct 2010

marganis said:

@Lemur: Sorry about that, I guess getting frustrated about the BSOD caused me to skip the stickies. How do you mean the complete specs? The DXdiag thing?

HOW TO FILL OUT YOUR SYSTEM SPECS

In the line at the top of www.SevenForums.com you will see UserCP.
That is an abbreviation for User Control Panel.
Click on UserCP.
In the left-hand column, under Your Profile you will see Edit System Spec.
Click on Edit System Spec
You can copy and paste from the output of Speccy, Speccy - System Information - Free Download to fill out much of the info. Be sure to use the Other Info section of your System Specs for such info as your optical drive, your wireless adapter, your speakers, etc.

Lemur · 21 Oct 2010

Different dumps pointed to different things, which may OR may not be the culprit. atikmdag, lcmedia, eamon.

I suggest you start off by

- running memtest86+
Memtest86+ - Advanced Memory Diagnostic Tool

- Using Driver Verifier
Using Driver Verifier (Windows Driver Kit)

CarlTR6 · 21 Oct 2010

I looked at your five most recent dumps. I found an almost guaranteed cause of BSOD's:

Please uninstall any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dump, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads. Select delete; do not select reinstall.

Here is an alternative virtualization program that does not user the sptd.sys driver:

Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a4e000 PsLoadedModuleList = 0xfffff800`02c8be50
Debug session time: Thu Oct 21 09:26:05.972 2010 (GMT-4)
System Uptime: 0 days 6:09:45.080
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, 0, fffff88009ea4ea0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88009ea4ea0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
+0
00000000`00000000 ??              ???

CONTEXT:  fffff88009ea4ea0 -- (.cxr 0xfffff88009ea4ea0)
rax=0000000000000001 rbx=fffffa80093e8850 rcx=0000000000000000
rdx=fffffa8006ea3b60 rsi=0000000000000000 rdi=fffff88009ea5a88
rip=0000000000000000 rsp=fffff88009ea5878 rbp=fffffa800a18c070
 r8=0000000000000000  r9=0000000000000000 r10=0000005300000000
r11=fffff8a0137e5670 r12=fffff8a001ec54b0 r13=fffffa800a182690
r14=fffffa8009f46060 r15=0000000000000000
iopl=0         nv up ei ng nz ac po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010296
00000000`00000000 ??              ???
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  LCDMedia.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to 0000000000000000

STACK_TEXT:  
fffff880`09ea45d8 fffff800`02abdca9 : 00000000`0000003b 00000000`c0000005 00000000`00000000 fffff880`09ea4ea0 : nt!KeBugCheckEx
fffff880`09ea45e0 fffff800`02abd5fc : fffff880`09ea5638 fffff880`09ea4ea0 00000000`00000000 fffff800`02aecc90 : nt!KiBugCheckDispatch+0x69
fffff880`09ea4720 fffff800`02ae440d : fffff800`02ce1708 fffff800`02c1b420 fffff800`02a4e000 fffff880`09ea5638 : nt!KiSystemServiceHandler+0x7c
fffff880`09ea4760 fffff800`02aeba90 : fffff800`02c0e1a0 fffff880`09ea47d8 fffff880`09ea5638 fffff800`02a4e000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`09ea4790 fffff800`02af89ef : fffff880`09ea5638 fffff880`09ea4ea0 fffff880`00000000 fffff880`09ea5a88 : nt!RtlDispatchException+0x410
fffff880`09ea4e70 fffff800`02abdd82 : fffff880`09ea5638 fffffa80`093e8850 fffff880`09ea56e0 00000000`00000000 : nt!KiDispatchException+0x16f
fffff880`09ea5500 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceHandler+7c
fffff800`02abd5fc b801000000      mov     eax,1

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceHandler+7c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x3B_nt!KiSystemServiceHandler+7c

BUCKET_ID:  X64_0x3B_nt!KiSystemServiceHandler+7c

Followup: MachineOwner
---------

7: kd> lmtsmn
start             end                 module name
fffff880`041be000 fffff880`041fc000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`0107e000 fffff880`010d5000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c00000 fffff880`02c8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05081000 fffff880`05097000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0102a000 fffff880`01035000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07e71000 fffff880`07e7c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`011d6000 fffff880`011df000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`0102a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`05685000 fffff880`056a5000   AtihdW76 AtihdW76.sys Thu Jul 15 08:46:49 2010 (4C3F0339)
fffff880`04802000 fffff880`04fbd000   atikmdag atikmdag.sys Wed Aug 25 21:47:22 2010 (4C75C7AA)
fffff880`04174000 fffff880`041be000   atikmpag atikmpag.sys Wed Aug 25 21:20:56 2010 (4C75C178)
fffff960`00930000 fffff960`00991000   ATMFD    ATMFD.DLL    Thu May 27 00:11:31 2010 (4BFDF0F3)
fffff880`05023000 fffff880`05068000   ayfug0dt ayfug0dt.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`00ff3000 fffff880`00ffa000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04127000 fffff880`04138000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06f46000 fffff880`06f64000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`07f69000 fffff880`07f86000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`00c2f000 fffff880`00c59000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d2a000 fffff880`00dea000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01200000 fffff880`01230000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ccc000 fffff880`00d2a000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`012f3000 fffff880`01366000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`05071000 fffff880`05081000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`07f86000 fffff880`07f94000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04086000 fffff880`04109000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`04109000 fffff880`04127000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04077000 fffff880`04086000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0141b000 fffff880`01431000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`056e2000 fffff880`05704000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`07fa0000 fffff880`07fa9000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07f94000 fffff880`07fa0000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07fa9000 fffff880`07fbc000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05766000 fffff880`05772000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0421c000 fffff880`04310000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04310000 fffff880`04356000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`01281000 fffff880`01295000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01235000 fffff880`01281000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01411000 fffff880`0141b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01035000 fffff880`0106f000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`017a1000 fffff880`017eb000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`043e1000 fffff880`043ee000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02a05000 fffff800`02a4e000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04356000 fffff880`0437a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`0570a000 fffff880`05766000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`00c59000 fffff880`00c72000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`057f7000 fffff880`057ff080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`013ec000 fffff880`013fa000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06e7e000 fffff880`06f46000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`016a5000 fffff880`016ae000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0415e000 fffff880`04174000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05157000 fffff880`05166000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`011df000 fffff880`011ed000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00baf000 fffff800`00bb9000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`05175000 fffff880`051b8000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`015e1000 fffff880`015fb000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05704000 fffff880`05709200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`051b8000 fffff880`051bbd80   LGBusEnum LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`07fbc000 fffff880`07fbe480   LGVirHid LGVirHid.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`05600000 fffff880`05615000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05780000 fffff880`057a3000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c74000 fffff880`00cb8000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05772000 fffff880`05780000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05166000 fffff880`05175000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`01431000 fffff880`0143e000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`011bc000 fffff880`011d6000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`06f64000 fffff880`06f7c000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`06f7c000 fffff880`06fa9000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06fa9000 fffff880`06ff7000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`06e00000 fffff880`06e23000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02d32000 fffff880`02d3d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010d5000 fffff880`010df000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01295000 fffff880`012f3000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`0406c000 fffff880`04077000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01693000 fffff880`016a5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016af000 fffff880`017a1000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`050bb000 fffff880`050c7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`050c7000 fffff880`050f6000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05670000 fffff880`05685000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d9f000 fffff880`02dae000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c8a000 fffff880`02ccf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02d3d000 fffff880`02d4e000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04060000 fffff880`0406c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a4e000 fffff800`0302a000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0143e000 fffff880`015e1000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`011f2000 fffff880`011fb000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02d79000 fffff880`02d9f000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`0111f000 fffff880`01134000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`010ec000 fffff880`0111f000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`011a5000 fffff880`011ac000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`011ac000 fffff880`011bc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01400000 fffff880`01411000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07c60000 fffff880`07d06000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0106f000 fffff880`0107d000   point64k point64k.sys Tue Nov 03 21:55:38 2009 (4AF0ED2A)
fffff880`056a5000 fffff880`056e2000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cb8000 fffff880`00ccc000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`05097000 fffff880`050bb000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`050f6000 fffff880`05111000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`05111000 fffff880`05132000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`05132000 fffff880`0514c000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0400f000 fffff880`04060000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`0514c000 fffff880`05157000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02d17000 fffff880`02d20000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d20000 fffff880`02d29000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d29000 fffff880`02d32000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`013b2000 fffff880`013ec000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`05000000 fffff880`05018000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04fbd000 fffff880`04ff6000   Rt64win7 Rt64win7.sys Fri May 22 10:52:30 2009 (4A16BC2E)
fffff880`00c00000 fffff880`00c2f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`07d06000 fffff880`07d11000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`043ee000 fffff880`043fa000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02dae000 fffff880`02dcb000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0168b000 fffff880`01693000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`00ec4000 fffff880`00fea000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`07ed3000 fffff880`07f69000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07d50000 fffff880`07db7000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07d11000 fffff880`07d3e000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`051d7000 fffff880`051d8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07d3e000 fffff880`07d50000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02d6c000 fffff880`02d79000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02d4e000 fffff880`02d6c000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02de6000 fffff880`02dfa000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00490000 fffff960`0049a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04138000 fffff880`0415e000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`051bc000 fffff880`051ce000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04200000 fffff880`0421ac00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`051d9000 fffff880`051f6000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`057f5000 fffff880`057f6f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0437a000 fffff880`0438b000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05616000 fffff880`05670000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0438b000 fffff880`043e1000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`010df000 fffff880`010ec000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00e00000 fffff880`00e0e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02ce2000 fffff880`02d07000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017eb000 fffff880`017fb000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`01134000 fffff880`01149000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01149000 fffff880`011a5000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01366000 fffff880`013b2000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02dcb000 fffff880`02de6000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02d07000 fffff880`02d17000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e11000 fffff880`00eb5000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb5000 fffff880`00ec4000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02ccf000 fffff880`02cd8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`0037f000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`05068000 fffff880`05071000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fea000 fffff880`00ff3000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04000000 fffff880`0400e000   WRfiltv  WRfiltv.sys  Thu Jul 30 23:40:32 2009 (4A7267B0)
fffff880`057a3000 fffff880`057c4000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`057c4000 fffff880`057f5000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`07e00000 fffff880`07e71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`013ec000 fffff880`013fa000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01431000 fffff880`0143d000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0106f000 fffff880`01078000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`011df000 fffff880`011f2000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`051a6000 fffff880`051d7000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05175000 fffff880`051a6000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Kernel base = 0xfffff800`02a03000 PsLoadedModuleList = 0xfffff800`02c40e50
Debug session time: Mon Oct 11 05:40:20.409 2010 (GMT-4)
System Uptime: 0 days 0:02:56.517
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {80, 2, 1, fffff80002ab40a2}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+b5c )

Followup: Pool_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000080, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002ab40a2, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cab0e0
 0000000000000080 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KxWaitForLockOwnerShip+12
fffff800`02ab40a2 48890a          mov     qword ptr [rdx],rcx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  chrome.exe

TRAP_FRAME:  fffff8800a588b00 -- (.trap 0xfffff8800a588b00)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff8800a588d78
rdx=0000000000000080 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ab40a2 rsp=fffff8800a588c90 rbp=000000000000007f
 r8=fffff8800a588d78  r9=0000000000000015 r10=fffff88005ed1cc8
r11=fffff8800a588eb0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!KxWaitForLockOwnerShip+0x12:
fffff800`02ab40a2 48890a          mov     qword ptr [rdx],rcx ds:ffb0:00000000`00000080=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a72ca9 to fffff80002a73740

STACK_TEXT:  
fffff880`0a5889b8 fffff800`02a72ca9 : 00000000`0000000a 00000000`00000080 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0a5889c0 fffff800`02a71920 : 00000000`00000000 fffff900`c2b66200 00000000`00000002 0000007f`0000029e : nt!KiBugCheckDispatch+0x69
fffff880`0a588b00 fffff800`02ab40a2 : 00000000`000041a9 00000000`000015e3 fffff900`c0200000 fffff800`02a7f21b : nt!KiPageFault+0x260
fffff880`0a588c90 fffff800`02a84f2d : fffff900`c2b66200 fffff900`c0200000 fffff900`c0220d48 fffff800`02a7f772 : nt!KxWaitForLockOwnerShip+0x12
fffff880`0a588cc0 fffff800`02b4613e : 00000000`0000007f fffff900`c2b66240 00000000`00000dc0 00000000`000015e3 : nt!KeAcquireInStackQueuedSpinLock+0x8d
fffff880`0a588d10 fffff800`02ba6e71 : 00000000`6e677247 fffff900`c2b66240 000015e3`00000021 00000190`00000620 : nt!ExpInsertPoolTrackerExpansion+0x2e
fffff880`0a588dd0 fffff960`00256eb8 : fffff880`00000015 fffff880`0a589610 fffff880`0a5893b0 00000000`0000007f : nt!ExDeferredFreePool+0xb5c
fffff880`0a588ec0 fffff960`001ce9ee : 00000000`00000005 00000000`00000000 00000000`021015e0 00000000`00000005 : win32k!RGNMEMOBJ::vCreate+0x108
fffff880`0a589330 fffff960`00188985 : 00000000`00000005 00000000`00000001 00000000`120415da 00000005`00000000 : win32k!NtGdiFrameRgn+0x242
fffff880`0a5896d0 fffff960`00188e49 : 00000000`00000019 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!DrawWindowShadow+0x1b5
fffff880`0a589740 fffff960`00189012 : fffff900`00000000 fffff900`c087ddb0 fffff900`c2b5e228 fffff900`c087e980 : win32k!GenerateWindowShadow+0x175
fffff880`0a589820 fffff960`001894c5 : fffff900`c087e980 fffff900`c2643c00 fffff900`c1ca2ac0 00000000`00000000 : win32k!zzzApplyShadow+0x46
fffff880`0a5898a0 fffff960`000b851b : fffff900`c2643c00 00000000`00000000 00000000`00000000 00000000`00000004 : win32k!xxxAddShadow+0x17d
fffff880`0a589960 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!xxxSendChangedMsgs+0xcb


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+b5c
fffff800`02ba6e71 90              nop

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  nt!ExDeferredFreePool+b5c

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!ExDeferredFreePool+b5c

BUCKET_ID:  X64_0xA_nt!ExDeferredFreePool+b5c

Followup: Pool_corruption
---------

Kernel base = 0xfffff800`02a13000 PsLoadedModuleList = 0xfffff800`02c50e50
Debug session time: Fri Oct  1 06:31:35.568 2010 (GMT-4)
System Uptime: 0 days 0:08:53.677
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiKernelCalloutExceptionHandler+e )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

FAULTING_IP: 
+517d952f01b5d7f8
00000000`00000000 ??              ???

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  System

CURRENT_IRQL:  2

EXCEPTION_RECORD:  fffff8800305b9f8 -- (.exr 0xfffff8800305b9f8)
ExceptionAddress: fffff80002a8f3f2 (nt!KiTimerExpiration+0x00000000000000f2)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff8800305baa0 -- (.trap 0xfffff8800305baa0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0100030500000000 rbx=0000000000000000 rcx=fffff880009b59a8
rdx=00000000000000a1 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002a8f3f2 rsp=fffff8800305bc30 rbp=00000000000085a1
 r8=fffffa8009abf1a0  r9=00000000000000c7 r10=00000000000000a1
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe cy
nt!KiTimerExpiration+0xf2:
fffff800`02a8f3f2 48894808        mov     qword ptr [rax+8],rcx ds:0003:01000305`00000008=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a7b46e to fffff80002a83710

STACK_TEXT:  
fffff880`0305aae8 fffff800`02a7b46e : fffffa80`08461be0 00000000`00000103 fffff880`0305b260 fffff800`02ab0668 : nt!KeBugCheck
fffff880`0305aaf0 fffff800`02aa940d : fffff800`02c91b7c fffff800`02bcbe84 fffff800`02a13000 fffff880`0305b9f8 : nt!KiKernelCalloutExceptionHandler+0xe
fffff880`0305ab20 fffff800`02ab0a90 : fffff800`02bd2b14 fffff880`0305ab98 fffff880`0305b9f8 fffff800`02a13000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0305ab50 fffff800`02abd9ef : fffff880`0305b9f8 fffff880`0305b260 fffff880`00000000 fffff880`009b2180 : nt!RtlDispatchException+0x410
fffff880`0305b230 fffff800`02a82d82 : fffff880`0305b9f8 00000001`3e18a6fc fffff880`0305baa0 fffff880`009b59a8 : nt!KiDispatchException+0x16f
fffff880`0305b8c0 fffff800`02a8168a : fffffa80`084fe000 fffff880`0305bb00 00000000`000085a1 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`0305baa0 fffff800`02a8f3f2 : 00000001`3e187fec fffff880`0305bc58 00000000`000085a1 fffff880`009b59a8 : nt!KiGeneralProtectionFault+0x10a
fffff880`0305bc30 fffff800`02a8ecb7 : 00000000`5b6a46c7 00000000`000085a1 00000000`5b6a469d 00000000`000000a1 : nt!KiTimerExpiration+0xf2
fffff880`0305bcd0 fffff800`02a8beea : fffff880`009b2180 fffff880`009bd0c0 00000000`00000000 fffff800`02b3c230 : nt!KiRetireDpcList+0x277
fffff880`0305bd80 00000000`00000000 : fffff880`0305c000 fffff880`03056000 fffff880`0305bd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiKernelCalloutExceptionHandler+e
fffff800`02a7b46e 90              nop

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!KiKernelCalloutExceptionHandler+e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1E_nt!KiKernelCalloutExceptionHandler+e

BUCKET_ID:  X64_0x1E_nt!KiKernelCalloutExceptionHandler+e

Followup: MachineOwner
---------

Update this driver:

Rt64win7.sys Fri May 22 10:52:30 2009 - PCIe GBE (GigaBit Ethernet) drivers here: Realtek

I recommend that you download and install Microsoft Security Essentials. MSE supersedes Windows Defender and will turn Windows Defender off. What firewall are you using?