BSOD - Windows Power Kernal

MTF79 · 01 Jan 2011

Hi, new member in need of some help. I've had two BSODs in the last 12 hours on a previously stable system. One was simply a crash while idling, the other was during a boot today (first boot after reboot/shutdown after the crash). Chkdsk shows no errors, and I don't think temperature is an issue here. 'Panther' was showing up in the logs last night, but I assume this is a symptom and not a cause. I have followed the steps in your BSOD Posting Instructions thread, files are attached. System is an i7 920, 6GB of DDR3 RAM (Corsair I think), HD5770 graphics, MSI X58 Platinum mobo, 750W PSU, all stock/standard settings, custom build by a small manufacturer, rig is 8 months old now. OS is retail W7 x64 Ultimate. Only recent driver/software changes were an updated graphics driver two days before first crash.

Any help would be greatly appreciated; I am pretty decent at this sort of thing usually, but I know there are too many possible causes for this to figure it out on my own.

MTF79 · 08 Jan 2011

Bump in the hope of an answer, would appreciate any help that might solve this issue.

CarlTR6 · 08 Jan 2011

Hi, MTF, and welcome to the forum. Your dump blames atikmdag.sys, a video driver, for the crash. This driver is up to date. The dump also shows memory corruption. There may be other things conflicting with the video driver.

While you are troubleshooting, I recommend the you uninstall Kaspersky using this removal tool: Tool. Kaspersky is known to cause BSOS's on some Win 7 systems. Download and install Microsoft Security Essentials in its place. After you get your system stable, you can try Kaspersky again; but I do not recommend doing so.

I also suggest that you uninstall Spybot. It is possible that Tea Timer is causing conflicts. Many third party security programs create problems with Win 7. For added protection you can try Malwarebytes (free) and use it as an on demand scanner.

I find one out of date driver on your system. This driver has a bad reputation on with Win 7.

pcouffin.sys Tue Dec 05 09:39:30 2006 - low level access layer for CD devices (A part of many different CD/DVD burning programs). VSO Download DVD Burning Software, convert AVI to DVD, video converter, DVD copy to DVD slideshow photo
or
rename to pcouffin.BAK and see what CD/DVD program it breaks.

Here are some articles you can read about this driver.

Patin Couffin driver

Pcouffin.sys and missing DVD drives!?!?!?

You can use VSO Clean to remove the driver.

Uninstall Kaspersky and Spybot and take care of the pcouffin driver. Reboot and see how your system does. Post back and let us know. If you get another BSOD, upload it.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e0c000 PsLoadedModuleList = 0xfffff800`03049e50
Debug session time: Fri Dec 31 15:41:11.272 2010 (GMT-5)
System Uptime: 0 days 8:04:49.413
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff88005157817, fffff8800a411900, 0}

Probably caused by : atikmdag.sys ( atikmdag+90817 )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88005157817, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800a411900, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
atikmdag+90817
fffff880`05157817 8b4820          mov     ecx,dword ptr [rax+20h]

CONTEXT:  fffff8800a411900 -- (.cxr 0xfffff8800a411900)
rax=0000000000000000 rbx=fffffa8006554a00 rcx=fffffa8008d461f0
rdx=0000000000000001 rsi=0000000000000015 rdi=fffffa8009b43010
rip=fffff88005157817 rsp=fffff8800a4122d0 rbp=fffffa8008d461f0
 r8=0000000000000015  r9=fffff88005519970 r10=0000000000000000
r11=fffff8800a412420 r12=0000000000000000 r13=fffffa800a7a94d0
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
atikmdag+0x90817:
fffff880`05157817 8b4820          mov     ecx,dword ptr [rax+20h] ds:002b:00000000`00000020=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  dwm.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88005157817

STACK_TEXT:  
fffff880`0a4122d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : atikmdag+0x90817


FOLLOWUP_IP: 
atikmdag+90817
fffff880`05157817 8b4820          mov     ecx,dword ptr [rax+20h]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  atikmdag+90817

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atikmdag

IMAGE_NAME:  atikmdag.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4cef1f94

STACK_COMMAND:  .cxr 0xfffff8800a411900 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_atikmdag+90817

BUCKET_ID:  X64_0x3B_atikmdag+90817

Followup: MachineOwner
---------

6: kd> lmtsmn
start             end                 module name
fffff880`05a76000 fffff880`05ab4000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f1a000 fffff880`00f71000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03466000 fffff880`034f0000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05ad9000 fffff880`05aef000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01324000 fffff880`0132f000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`012e6000 fffff880`012ef000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`012ef000 fffff880`01319000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`06535000 fffff880`06555000   AtihdW76 AtihdW76.sys Fri Sep 24 01:44:48 2010 (4C9C3AD0)
fffff880`050c7000 fffff880`058d8000   atikmdag atikmdag.sys Thu Nov 25 21:46:44 2010 (4CEF1F94)
fffff880`04c00000 fffff880`04c4c000   atikmpag atikmpag.sys Thu Nov 25 21:16:47 2010 (4CEF188F)
fffff960`00840000 fffff960`008a1000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`04b89000 fffff880`04b90000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04d94000 fffff880`04da5000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05cce000 fffff880`05cec000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006e0000 fffff960`00707000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`04ac0000 fffff880`04aea000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ccf000 fffff880`00d8f000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`010ad000 fffff880`010dd000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c71000 fffff880`00ccf000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`05ac9000 fffff880`05ad9000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`08a54000 fffff880`08a62000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04cf3000 fffff880`04d76000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`08d72000 fffff880`08d84000   dc3d     dc3d.sys     Thu Jul 01 06:07:45 2010 (4C2C68F1)
fffff880`04d76000 fffff880`04d94000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04843000 fffff880`04852000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01a09000 fffff880`01a1f000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`06592000 fffff880`065b4000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`08a62000 fffff880`08a75000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04852000 fffff880`04a5a000   dump_iaStor dump_iaStor.sys Fri Oct 02 15:58:50 2009 (4AC65B7A)
fffff880`08cd3000 fffff880`08cdf000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`058d8000 fffff880`059cc000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05000000 fffff880`05046000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`035e9000 fffff880`035f4000   ElbyCDIO ElbyCDIO.sys Thu Dec 17 17:25:16 2009 (4B2AAFCC)
fffff880`0a0e7000 fffff880`0a11d000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0137b000 fffff880`0138f000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0132f000 fffff880`0137b000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01411000 fffff880`0141b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`00da9000 fffff880`00de3000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0178b000 fffff880`017d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`033e8000 fffff800`03431000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`05046000 fffff880`0506a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`08d35000 fffff880`08d4e000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`08d4e000 fffff880`08d56080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`08d27000 fffff880`08d35000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`05c06000 fffff880`05cce000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01a00000 fffff880`01a09000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`010de000 fffff880`012e6000   iaStor   iaStor.sys   Fri Oct 02 15:58:50 2009 (4AC65B7A)
fffff880`05da2000 fffff880`05dc8000   idmwfp   idmwfp.sys   Thu Dec 23 11:29:57 2010 (4D137905)
fffff880`04dcb000 fffff880`04de1000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05bc4000 fffff880`05bd3000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08d84000 fffff880`08d92000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbd000 fffff800`00bc7000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01a29000 fffff880`02188000   kl1      kl1.sys      Wed Jun 09 09:34:19 2010 (4C0F985B)
fffff880`0483c000 fffff880`04843000   kl2      kl2.sys      Wed Jun 09 09:24:47 2010 (4C0F961F)
fffff880`04aea000 fffff880`04b80000   klif     klif.sys     Fri Aug 06 13:14:46 2010 (4C5C4306)
fffff880`0357a000 fffff880`03583000   klim6    klim6.sys    Thu Apr 22 11:07:24 2010 (4BD0662C)
fffff880`04ca2000 fffff880`04ce5000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`015d7000 fffff880`015f1000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01760000 fffff880`0178b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`065b4000 fffff880`065b9200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`08ddc000 fffff880`08df1000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`08a75000 fffff880`08a98000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c19000 fffff880`00c5d000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`08cdf000 fffff880`08ced000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05bd3000 fffff880`05be2000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08d9e000 fffff880`08dab000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d8f000 fffff880`00da9000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`05cec000 fffff880`05d04000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05d04000 fffff880`05d31000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`05d31000 fffff880`05d7f000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`05d7f000 fffff880`05da2000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01319000 fffff880`01324000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04bee000 fffff880`04bf9000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f7a000 fffff880`00f84000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0138f000 fffff880`013ed000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`035de000 fffff880`035e9000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`021ec000 fffff880`021fe000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0160e000 fffff880`01700000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05b13000 fffff880`05b1f000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06453000 fffff880`06466000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`05b1f000 fffff880`05b4e000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`06520000 fffff880`06535000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03583000 fffff880`03592000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`034f0000 fffff880`03535000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01700000 fffff880`01760000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`04800000 fffff880`04811000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03451000 fffff880`0345d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e0c000 fffff800`033e8000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01434000 fffff880`015d7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`08d92000 fffff880`08d9e000   NuidFltr NuidFltr.sys Tue Jun 29 04:54:32 2010 (4C29B4C8)
fffff880`04b80000 fffff880`04b89000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`06400000 fffff880`06453000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`0353e000 fffff880`03564000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fc4000 fffff880`00fd9000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f84000 fffff880`00fb7000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fee000 fffff880`00ffe000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`05ba4000 fffff880`05bb8380   pcouffin pcouffin.sys Tue Dec 05 09:39:30 2006 (457584A2)
fffff880`01400000 fffff880`01411000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`086fc000 fffff880`087a2000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`08dab000 fffff880`08dbb000   point64  point64.sys  Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`06555000 fffff880`06592000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c5d000 fffff880`00c71000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`05aef000 fffff880`05b13000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05b4e000 fffff880`05b69000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`05b69000 fffff880`05b8a000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`05b8a000 fffff880`05ba4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03400000 fffff880`03451000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`05bb9000 fffff880`05bc4000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`04bd3000 fffff880`04bdc000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04bdc000 fffff880`04be5000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04be5000 fffff880`04bee000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01073000 fffff880`010ad000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`06466000 fffff880`0647e000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05a20000 fffff880`05a76000   Rt64win7 Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)
fffff880`08aa3000 fffff880`08cd2800   RTKVHD64 RTKVHD64.sys Wed Mar 17 04:49:15 2010 (4BA0978B)
fffff880`05088000 fffff880`050b7000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`087a2000 fffff880`087ad000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`05ab4000 fffff880`05ac0000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03592000 fffff880`035af000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`021e4000 fffff880`021ec000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0a020000 fffff880`0a0b6000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`08671000 fffff880`086d8000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`087ad000 fffff880`087da000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`05bf1000 fffff880`05bf2480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`087da000 fffff880`087ec000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0482f000 fffff880`0483c000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`04811000 fffff880`0482f000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`035ca000 fffff880`035de000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00590000 fffff960`0059a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04da5000 fffff880`04dcb000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`08a00000 fffff880`08a54000   udfs     udfs.sys     Mon Jul 13 19:23:37 2009 (4A5BC1F9)
fffff880`05a00000 fffff880`05a12000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`08d0c000 fffff880`08d26c00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`08ced000 fffff880`08d0a000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`08d0a000 fffff880`08d0bf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`05077000 fffff880`05088000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`064c6000 fffff880`06520000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04c4c000 fffff880`04ca2000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`08d57000 fffff880`08d72000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`0506a000 fffff880`05077000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`05be2000 fffff880`05bf1000   VClone   VClone.sys   Sun Aug 09 17:25:45 2009 (4A7F3ED9)
fffff880`00fb7000 fffff880`00fc4000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`04b90000 fffff880`04b9e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`04b9e000 fffff880`04bc3000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`02188000 fffff880`02198000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fd9000 fffff880`00fee000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`02198000 fffff880`021e4000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03564000 fffff880`0357a000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`035af000 fffff880`035ca000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`04bc3000 fffff880`04bd3000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e67000 fffff880`00f0b000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f0b000 fffff880`00f1a000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03535000 fffff880`0353e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003e0000   win32k   win32k.sys   Tue Oct 19 23:08:47 2010 (4CBE5D3F)
fffff880`05ac0000 fffff880`05ac9000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f71000 fffff880`00f7a000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`08dbb000 fffff880`08ddc000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`0a0b6000 fffff880`0a0e7000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`08600000 fffff880`08671000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`017d5000 fffff880`017e3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`048a5000 fffff880`04aad000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04aad000 fffff880`04ac0000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

MTF79 · 09 Jan 2011

Thanks a lot for the response Carl. In the meantime, I had uninstalled that video driver, as the problems only became apparent in the two days or so since I had installed it. This has improved the situation (no BSODs) but there are still issues with boot and shutdown performance monitoring and some unusual booting behaviour. I will uninstall Spybot and remove the pcouffin driver. If there is no further improvement, I will also try MSE instead of Kaspersky; it would be a pity to remove it permanently as I am otherwise very satisfied with it.

Thanks again.

CarlTR6 · 09 Jan 2011

Kaspersky, may not be a problem. The idea in troubleshooting is to remove every potential cause and then add things back one at a time when your system is stable. I am glad you are seeing some improvement.

MTF79 · 17 Jan 2011

Hi, I've just had a new BSOD, machine was idling so I don't think overheating is the issue (I know machines can overheat when idling, but I don't think it's the case here). I have re-run the health check and the jcgriff program, and attached the new log files. No changes since the initial advice, could this be related to the pcouffin driver I removed then? I have used my DVD burner several times since then, with no issues.

Any help is greatly appreciated.

CarlTR6 · 17 Jan 2011

Hi, MTF. I am sorry you are still having a problem. This dump is bugcheck 3B, SYSTEM_SERVICE_EXCEPTION, blames atikmdag.sys, your video driver, and shows memory corruption. All of your drivers appear to be up to date. I doubt that removing pcouffin.sys triggered the BSOD. I suspect that removing has helped your system's stability.

What version on Catalyst do you have installed? Catalyst 10.12 Preview is causing problems on some Win 7 systems. If you have 10.12 installed, uninstall it, run Driver Sweeper and install 10.3 - 10.11.. Here is some reading on this: AMD Game Forums - 10.12 blue screen error problem.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e11000 PsLoadedModuleList = 0xfffff800`0304ee50
Debug session time: Mon Jan 17 16:11:24.090 2011 (GMT-5)
System Uptime: 0 days 3:34:31.215
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff88005923817, fffff88009d79900, 0}

Probably caused by : atikmdag.sys ( atikmdag+90817 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88005923817, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88009d79900, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
atikmdag+90817
fffff880`05923817 8b4820          mov     ecx,dword ptr [rax+20h]

CONTEXT:  fffff88009d79900 -- (.cxr 0xfffff88009d79900)
rax=0000000000000000 rbx=fffffa8008e3dfe0 rcx=fffffa8008fa7d90
rdx=0000000000000001 rsi=0000000000000015 rdi=fffffa8008fa7010
rip=fffff88005923817 rsp=fffff88009d7a2d0 rbp=fffffa8008fa7d90
 r8=0000000000000015  r9=fffff88005ce5970 r10=0000000000000000
r11=fffff88009d7a420 r12=0000000000000000 r13=fffffa800a5d6520
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
atikmdag+0x90817:
fffff880`05923817 8b4820          mov     ecx,dword ptr [rax+20h] ds:002b:00000000`00000020=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  dwm.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88005923817

STACK_TEXT:  
fffff880`09d7a2d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : atikmdag+0x90817


FOLLOWUP_IP: 
atikmdag+90817
fffff880`05923817 8b4820          mov     ecx,dword ptr [rax+20h]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  atikmdag+90817

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atikmdag

IMAGE_NAME:  atikmdag.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4cef1f94

STACK_COMMAND:  .cxr 0xfffff88009d79900 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_atikmdag+90817

BUCKET_ID:  X64_0x3B_atikmdag+90817

Followup: MachineOwner
---------