win7x64 crashes on 10-minute-rate

draegloth · 01 Feb 2011

Hello Everyone.

For months now I have a problem with my Win7x64-System. Several Minutes (up to thirty after the first boot of the day to some four to five after that) after booting, several programs and/or background tasks crash, and then BAM - BSoD.
At first I thought it was a RAM-problem, and after installing some new RAM the problem vanished. For three days. Now it returned. Some weeks before this shit started I changed my graphic card after my old was broken, the RAM is now about two weeks old.

My system:

Asus M2-N32 Deluxe motherboard
AMD Athlon 64x2 6000+
2x2GB Kingston DDR2-RAM
Nvidia GeForce 9800 GT
Win7x64 Professional Retail, installed about a year ago

Right now I'm trying to get the BSOD-dump and the health report, but the three times i tried so far the system crashed before it could finish...

Oh, and the Bluescreens have varying error-messages, from "none at all" over "a driver has overrun a stack based buffer" and other-text based ones to the wohle lot of "typical" ones as "IRQL_NOT_LESS_OR_EQUAL", "BAD_POOL_CALLER", etc.

I just created a new user account to try getting things done, and for some reason, it works. No crashes, no BSoD - I'm confused. The requested .zip is attached, I hope it's good.

PS: As the new user account seems to work fine.. Is there an easy way (or tool) to move all personal stuff to a new account? i'm thinking mostly of "install only for this user"-programs...

[edit]
I managed to get a perfmon-report from my main account. I'll continue trying to get a jcgriff.

CarlTR6 · 01 Feb 2011

That fact you can boot and run without BSOD's in the new account but cannot do so in the main account points to a driver problem or a software conflict. It is also possible your user profile for your main account is corrupt. I assume your main account is an administrator account. Is your new account an administrator account? You are going to want to have a functioning admin account.

I looked through your Perfmon report as best I could; there is a language barrier. However based on what I can see there and in the four dumps I reviewed, I can make some recommendations. All four of the dumps I looked at indicate memory corruption.

1. Uninstall Panda Cloud using this removal tool: Tool. Panda is directly blamed for the crash in one of your dumps. Panda is a known cause of BSOD's on some Win 7 systems as are many third party AV and firewall programs. Download and install Microsoft Security Essentials in place of Panda. Make sure Windows Firewall is turned on.

2. I suggest that you uninstall Daemon Tools. It uses a driver, found in your dump, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads. Select uninstall; do NOT select reinstall.

Here is a free alternative CD virtualization program that does not use the sptd.sys driver.
Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

3. Here an almost guaranteed BSOD maker:

Code:

ASACPI.sys   Sun Mar 27 22:30:36 2005

The 2005 version of this driver is a known BSOD cause.
Please visit this link: ASUSTeK Computer Inc.-Support- download_item_mkt
Scroll down to the Utilities category, then scroll down to the "ATK0110 driver for WindowsXP/Vista/Windows 7 32&64-bit " (it's about the 8th item down).
Download and install it.
Go to C:\Windows\System32\drivers to check and make sure that the ASACPI.sys file is date stamped from 2009 or 2010 (NOT 2005).

4. Out of date drivers can and do cause conflicts memory corruption and BSOD's I find the following outdated drivers loaded on your system. These in red font are really obsolete. You should update these drivers or uninstall the software or hardware they are associated with. If there is no update, it means the software or hardware is obsolete as far as Win 7 is concerned.

ADIHdAud.sys Tue Apr 03 17:30:45 2007 - SoundMAX Digital HD Audio Driver. OEM - none at Analog Devices | Mixed-signal and Digital Signal Processing ICs.

atksgt.sys Sun May 17 09:36 - part of a Copy Protection platform dveloped by Tages SA. TAGES, the AAA Copy Protection System.

lirsgt.sys Sun May 17 09:06:57 2009 - part of a Copy Protection platform developed by Tages SA. TAGES, the AAA Copy Protection System.

LUM.sys Fri Feb 02 08:48:34 2007 - I cannot find what this driver belongs to. Rename it. See note below.

LV561V64.SYS Thu Apr 30 18:43:07 2009 - Logitech Quickcam. Downloads.

LVPr2M64.sys Wed Oct 07 04:26:50 2009 - Logitech Downloads.

ManyCam_x64.sys Thu Mar 13 03:46:01 2008 - ManyCam Virtual Webcam. Download ManyCam free virtual webcam and webcam graphics software!.

mv2.sys Wed Feb 06 16:02:40 2008 - UltraVnc miniport driver2. Download UltraVNC: Remote Support Software, Remote Support tool,Remote Desktop Control, Remote Access Software, PC Remote Control.

nvstor.sys Wed May 20 02:45:37 2009 - nVidia Storage Drivers Drivers - Download NVIDIA Drivers.

nvstor64.sys Wed Apr 29 21:57:30 2009 - nVidia Storage Driver (nForce chipset driver) Drivers - Download NVIDIA Drivers.

Ph3xIB64.sys Fri May 08 17:11:49 2009 - NXP Semiconductors Inbox. Hybrid Capture and Tuner Driver. NXP Semiconductors. NXP Semiconductors.

SI3132.sys Wed Oct 03 14:39:29 2007 - Silicon Image driver. Silicon Image - Support.

SiRemFil.sys Wed Jun 20 15:42:10 2007 - Silicon Image driver. Silicon Image - Support.

SiWinAcc.sys Thu Jun 14 20:02:02 2007 - Silicon Image driver - comes with package for the SIxxxx drivers. Silicon Image - Support.

sptd.sys Sun Mar 22 08:35:35 2009 - SCSI Pass Through Direct Host - Daemon Tools (known issues with Win7). Downloads :: DAEMON-Tools.cc
Removal tool at: DuplexSecure - Downloads
Complete (to the best of our knowledge) variant driver listing here: sptd info.

truecrypt.sys Mon Jun 15 05:16:54 2009 - TrueCrypt driver. TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux - Downloads

vcd10bus.sys Mon Jun 16 03:36:31 2008 - Virtual CD v10 Bus Enumerator, H+H Software GmbH. Virtual CD. Upgrade theis software to Version 10 which is Win 7 compatible.

wacommousefilter.sys Fri Feb 16 13:12:17 2007 - Wacom(tablet) Mouse Filter. Wacom Hardware Drivers.

wacomvhid.sys Mon Aug 18 18:44:49 2008 - Wacom(tablet) HID filter. Wacom Hardware Drivers.

WacomVKHid.sys Thu Feb 15 18:10:54 2007 - Wacom(tablet) HID filter. Wacom Hardware Drivers.

How to find drivers:

- I have listed links to most of the drivers in the code box above. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Note

Renaming drivers: create a restore point, using Windows Explorer, navigate to C:\Windows\System32\Drivers, locate the driver files, and rename them from .sys to .old. Reboot and the drivers will not load. This will break whatever software or hardware these drivers are associated with.

Code:

Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e16000 PsLoadedModuleList = 0xfffff800`03053e50
Debug session time: Tue Feb  1 11:36:51.027 2011 (GMT-5)
System Uptime: 0 days 0:13:28.009
Loading Kernel Symbols
...............................................................
................................................................
..........................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 34, {50830, fffff880031bd6d8, fffff880031bcf40, fffff80002e9bec4}

Probably caused by : ntkrnlmp.exe ( nt!ExIsResourceAcquiredSharedLite+4 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CACHE_MANAGER (34)
    See the comment for FAT_FILE_SYSTEM (0x23)
Arguments:
Arg1: 0000000000050830
Arg2: fffff880031bd6d8
Arg3: fffff880031bcf40
Arg4: fffff80002e9bec4

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880031bd6d8 -- (.exr 0xfffff880031bd6d8)
ExceptionAddress: fffff80002e9bec4 (nt!ExIsResourceAcquiredSharedLite+0x0000000000000004)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000000000000003f
Attempt to read from address 000000000000003f

CONTEXT:  fffff880031bcf40 -- (.cxr 0xfffff880031bcf40)
rax=0000000000000000 rbx=fffff8800027bc10 rcx=ffffffffffffffff
rdx=0000000000000001 rsi=0000000000000000 rdi=fffff8a0002c8010
rip=fffff80002e9bec4 rsp=fffff880031bd910 rbp=fffff880031bdc58
 r8=fffffa80054bcfb8  r9=fffffa8004d67010 r10=fffffa80054b5280
r11=fffff880031bd920 r12=fffff880031bdb68 r13=0000000000000000
r14=fffffa80054b5170 r15=fffffa80054b5170
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!ExIsResourceAcquiredSharedLite+0x4:
fffff800`02e9bec4 83794000        cmp     dword ptr [rcx+40h],0 ds:002b:00000000`0000003f=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000000000000003f

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030be0e0
 000000000000003f 

FOLLOWUP_IP: 
nt!ExIsResourceAcquiredSharedLite+4
fffff800`02e9bec4 83794000        cmp     dword ptr [rcx+40h],0

FAULTING_IP: 
nt!ExIsResourceAcquiredSharedLite+4
fffff800`02e9bec4 83794000        cmp     dword ptr [rcx+40h],0

BUGCHECK_STR:  0x34

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from fffff880014ebd3e to fffff80002e9bec4

STACK_TEXT:  
fffff880`031bd910 fffff880`014ebd3e : fffff8a0`0027bc10 00000045`0a0f3e3a fffff880`031bdc58 fffff880`031bdc58 : nt!ExIsResourceAcquiredSharedLite+0x4
fffff880`031bd940 fffff800`02e739d3 : fffff8a0`0027bc10 00000045`0a0f3e3a 00000045`0a0f3e3a fffffa80`054b5170 : Ntfs!LfsFlushToLsn+0xbe
fffff880`031bd970 fffff800`02e71f32 : fffffa80`054b5170 fffff880`031bdc58 00000000`00000000 fffff880`031bdaa8 : nt!CcAcquireByteRangeForWrite+0x844
fffff880`031bda50 fffff800`02e7994b : fffffa80`0480f3e0 fffff800`00000001 00000000`00000001 00000000`00001000 : nt!CcFlushCache+0x2c2
fffff880`031bdb50 fffff800`02e7a520 : fffff880`041e7d00 fffff880`031bdc58 00000000`00000000 fffff800`00000000 : nt!CcWriteBehind+0x1eb
fffff880`031bdc00 fffff800`02e93961 : fffffa80`036f3190 fffff800`03182c20 fffff800`0308d140 fffffa80`00000005 : nt!CcWorkerThread+0x1c8
fffff880`031bdcb0 fffff800`0312ac06 : 00000000`00000000 fffffa80`036e3680 00000000`00000080 fffffa80`036cd740 : nt!ExpWorkerThread+0x111
fffff880`031bdd40 fffff800`02e64c26 : fffff880`009e6180 fffffa80`036e3680 fffff880`009f0f40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031bdd80 00000000`00000000 : fffff880`031be000 fffff880`031b8000 fffff880`031bcc60 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExIsResourceAcquiredSharedLite+4

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff880031bcf40 ; kb

FAILURE_BUCKET_ID:  X64_0x34_nt!ExIsResourceAcquiredSharedLite+4

BUCKET_ID:  X64_0x34_nt!ExIsResourceAcquiredSharedLite+4

Followup: MachineOwner
---------

Debug session time: Tue Feb  1 11:04:59.958 2011 (GMT-5)
System Uptime: 0 days 0:10:40.940
Loading Kernel Symbols
...............................................................
................................................................
...............................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880031f4cc8, fffff880031f4530, fffff80002e3d064}

Probably caused by : Ntfs.sys ( Ntfs!NtfsLookupAllocation+1f0 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880031f4cc8
Arg3: fffff880031f4530
Arg4: fffff80002e3d064

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880031f4cc8 -- (.exr 0xfffff880031f4cc8)
ExceptionAddress: fffff80002e3d064 (nt!ExReleaseFastMutex+0x0000000000000004)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff880031f4530 -- (.cxr 0xfffff880031f4530)
rax=fffffa80036fa090 rbx=fffff8a001685d60 rcx=006b006300610050
rdx=fffff880014a3ee0 rsi=fffff880014a3ed0 rdi=fffff88001685c70
rip=fffff80002e3d064 rsp=fffff880031f4f00 rbp=fffffa80087eab80
 r8=0000000000000000  r9=0000000000000000 r10=fffff880014a2980
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExReleaseFastMutex+0x4:
fffff800`02e3d064 0fb65130        movzx   edx,byte ptr [rcx+30h] ds:002b:006b0063`00610080=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  1

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030af0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsLookupAllocation+1f0
fffff880`014534d0 b001            mov     al,1

FAULTING_IP: 
nt!ExReleaseFastMutex+4
fffff800`02e3d064 0fb65130        movzx   edx,byte ptr [rcx+30h]

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880014534d0 to fffff80002e3d064

STACK_TEXT:  
fffff880`031f4f00 fffff880`014534d0 : fffff8a0`01685d60 fffffa80`087eab80 00000000`00000edc fffff8a0`01685c70 : nt!ExReleaseFastMutex+0x4
fffff880`031f4f30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsLookupAllocation+0x1f0


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  Ntfs!NtfsLookupAllocation+1f0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff880031f4530 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsLookupAllocation+1f0

BUCKET_ID:  X64_0x24_Ntfs!NtfsLookupAllocation+1f0

Followup: MachineOwner
---------

Debug session time: Tue Feb  1 09:23:34.908 2011 (GMT-5)
System Uptime: 0 days 0:03:19.890
Loading Kernel Symbols
...............................................................
................................................................
...............................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffa800bda4200, 0, fffff88002167d03, 2}

Unable to load image \SystemRoot\system32\DRIVERS\PSINProt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for PSINProt.sys
*** ERROR: Module load completed but symbols could not be loaded for PSINProt.sys

Could not read faulting driver name
Probably caused by : PSINProt.sys ( PSINProt+5d03 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa800bda4200, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88002167d03, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030fa0e0
 fffffa800bda4200 

FAULTING_IP: 
PSINProt+5d03
fffff880`02167d03 488b36          mov     rsi,qword ptr [rsi]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  WerFault.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff8800bd2f1b0 -- (.trap 0xfffff8800bd2f1b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000004 rbx=0000000000000000 rcx=fffff8800217f480
rdx=fffff8800bd2f3b0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88002167d03 rsp=fffff8800bd2f340 rbp=fffffa8008708cc0
 r8=fffffa8008708cb8  r9=0000000000000008 r10=000000000000000a
r11=0000000000000008 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
PSINProt+0x5d03:
fffff880`02167d03 488b36          mov     rsi,qword ptr [rsi] ds:1afc:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002f418f2 to fffff80002ec2740

STACK_TEXT:  
fffff880`0bd2f048 fffff800`02f418f2 : 00000000`00000050 fffffa80`0bda4200 00000000`00000000 fffff880`0bd2f1b0 : nt!KeBugCheckEx
fffff880`0bd2f050 fffff800`02ec082e : 00000000`00000000 00000000`0000271b fffffa80`03c37300 fffffa80`08e9c1d0 : nt! ?? ::FNODOBFM::`string'+0x40ec0
fffff880`0bd2f1b0 fffff880`02167d03 : 00000000`0000271b fffffa80`08708cc0 fffff880`0217f138 fffff880`02165fb5 : nt!KiPageFault+0x16e
fffff880`0bd2f340 00000000`0000271b : fffffa80`08708cc0 fffff880`0217f138 fffff880`02165fb5 00000000`00000000 : PSINProt+0x5d03
fffff880`0bd2f348 fffffa80`08708cc0 : fffff880`0217f138 fffff880`02165fb5 00000000`00000000 fffffa80`000000ee : 0x271b
fffff880`0bd2f350 fffff880`0217f138 : fffff880`02165fb5 00000000`00000000 fffffa80`000000ee fffffa80`03862010 : 0xfffffa80`08708cc0
fffff880`0bd2f358 fffff880`02165fb5 : 00000000`00000000 fffffa80`000000ee fffffa80`03862010 fffffa80`0866bab0 : PSINProt+0x1d138
fffff880`0bd2f360 00000000`00000000 : fffffa80`000000ee fffffa80`03862010 fffffa80`0866bab0 00000000`fffffffe : PSINProt+0x3fb5


STACK_COMMAND:  kb

FOLLOWUP_IP: 
PSINProt+5d03
fffff880`02167d03 488b36          mov     rsi,qword ptr [rsi]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  PSINProt+5d03

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: PSINProt

IMAGE_NAME:  PSINProt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c473e2a

FAILURE_BUCKET_ID:  X64_0x50_PSINProt+5d03

BUCKET_ID:  X64_0x50_PSINProt+5d03

Followup: MachineOwner
---------

Debug session time: Tue Feb  1 10:53:10.123 2011 (GMT-5)
System Uptime: 0 days 0:09:37.105
Loading Kernel Symbols
...............................................................
................................................................
...............................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff88004231448, 0, fffff880045be0b9, 0}


Could not read faulting driver name
Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+169 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff88004231448, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff880045be0b9, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800031000e0
 fffff88004231448 

FAULTING_IP: 
dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+169
fffff880`045be0b9 448b54c208      mov     r10d,dword ptr [rdx+rax*8+8]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  dwm.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff8800a08f0a0 -- (.trap 0xfffff8800a08f0a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000088 rbx=0000000000000000 rcx=0000000000000044
rdx=fffff88004231000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880045be0b9 rsp=fffff8800a08f230 rbp=fffff8800a08fa40
 r8=fffffa80038c3098  r9=0000000000000001 r10=fffff8a00372e470
r11=0000000040001100 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+0x169:
fffff880`045be0b9 448b54c208      mov     r10d,dword ptr [rdx+rax*8+8] ds:fffff880`04231448=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002f48f14 to fffff80002ec8740

STACK_TEXT:  
fffff880`0a08ef38 fffff800`02f48f14 : 00000000`00000050 fffff880`04231448 00000000`00000000 fffff880`0a08f0a0 : nt!KeBugCheckEx
fffff880`0a08ef40 fffff800`02ec682e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42837
fffff880`0a08f0a0 fffff880`045be0b9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`0a08f230 fffff880`045a43e7 : fffffa80`03944401 fffffa80`03aa3920 00000000`001a0098 fffff880`0000001b : dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+0x169
fffff880`0a08f320 fffff880`0451cf12 : fffff8a0`036725b0 00000000`00000200 fffff880`0a08fa40 00000000`00000000 : dxgmms1!VidMmReferenceDmaBuffer+0x43
fffff880`0a08f370 fffff880`0451c6d7 : fffff8a0`00000001 fffff8a0`04a67f10 fffff880`0a08f9f0 00000000`00000000 : dxgkrnl!DXGCONTEXT::Render+0x326
fffff880`0a08f980 fffff960`0019bc22 : 00000000`0216ea50 00000000`00000000 00000000`00000000 00000000`00000000 : dxgkrnl!DxgkRender+0x3e7
fffff880`0a08fbf0 fffff800`02ec7993 : fffffa80`0391c060 00000000`0216f9a0 00000000`017d7840 fffffa80`03830c00 : win32k!NtGdiDdDDIRender+0x12
fffff880`0a08fc20 000007fe`ff2b13ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0216ea28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`ff2b13ba


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+169
fffff880`045be0b9 448b54c208      mov     r10d,dword ptr [rdx+rax*8+8]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+169

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME:  dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ccf7c90

FAILURE_BUCKET_ID:  X64_0x50_dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+169

BUCKET_ID:  X64_0x50_dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+169

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`10da5000 fffff880`10de3000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00e2f000 fffff880`00e86000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`04d03000 fffff880`04d6d000   ADIHdAud ADIHdAud.sys Tue Apr 03 17:30:45 2007 (4612C785)
fffff880`03ec0000 fffff880`03f4a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0406c000 fffff880`04082000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`10076000 fffff880`100ba000   akyvzcyj akyvzcyj.SYS Sat Mar 21 10:48:32 2009 (49C4FE40)
fffff880`04055000 fffff880`0406c000   amdk8    amdk8.sys    Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`01062000 fffff880`0106d000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`047e1000 fffff880`047e9000   ASACPI   ASACPI.sys   Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`0c8c6000 fffff880`0c8d1000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`01163000 fffff880`0116c000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0116c000 fffff880`01196000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`07769000 fffff880`077b8000   atksgt   atksgt.sys   Sun May 17 09:36:34 2009 (4A1012E2)
fffff960`00930000 fffff960`00991000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`04643000 fffff880`04646e80   BdaSup   BdaSup.SYS   Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`01ba8000 fffff880`01baf000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0401e000 fffff880`0402f000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06ac8000 fffff880`06ae6000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00690000 fffff960`006b7000   cdd      cdd.dll      Tue Nov 02 00:59:22 2010 (4CCF9AAA)
fffff880`01b75000 fffff880`01b9f000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c9a000 fffff880`00d5a000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01aa3000 fffff880`01ad3000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c3c000 fffff880`00c9a000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0131d000 fffff880`01390000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`047e9000 fffff880`047f9000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02189000 fffff880`02197000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0417c000 fffff880`041ff000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`04000000 fffff880`0401e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`0416d000 fffff880`0417c000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01a8d000 fffff880`01aa3000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04daa000 fffff880`04dcc000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`02197000 fffff880`021a1000   dump_diskdump dump_diskdump.sys Mon Jul 12 23:32:05 2010 (4C3BDE35)
fffff880`021de000 fffff880`021f1000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`021a1000 fffff880`021de000   dump_nvstor64 dump_nvstor64.sys Wed Apr 29 21:57:30 2009 (49F9058A)
fffff880`0216f000 fffff880`0217b000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`044ad000 fffff880`045a1000   dxgkrnl  dxgkrnl.sys  Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`045a1000 fffff880`045e7000   dxgmms1  dxgmms1.sys  Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`08247000 fffff880`0827d000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`045e7000 fffff880`045f4000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`012a2000 fffff880`012b6000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`04c66000 fffff880`04c71000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01256000 fffff880`012a2000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0142b000 fffff880`01435000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01a53000 fffff880`01a8d000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`10d98000 fffff880`10da5000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02e0f000 fffff800`02e58000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`10000000 fffff880`10024000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`100c8000 fffff880`100e1000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`045f4000 fffff880`045fc080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04deb000 fffff880`04df9000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06a00000 fffff880`06ac8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01435000 fffff880`0143e000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04c0d000 fffff880`04c1c000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04ce0000 fffff880`04cee000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bc2000 fffff800`00bcc000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04600000 fffff880`04643000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01400000 fffff880`0141a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0179d000 fffff880`017c8000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04647000 fffff880`0464c200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`077b8000 fffff880`077c5000   lirsgt   lirsgt.sys   Sun May 17 09:06:57 2009 (4A100BF1)
fffff880`06b56000 fffff880`06b6b000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02000000 fffff880`02023000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`04163000 fffff880`0416d000   LUM      LUM.sys      Fri Feb 02 08:48:34 2007 (45C34132)
fffff880`020e0000 fffff880`0216e280   LV561V64 LV561V64.SYS Thu Apr 30 18:43:07 2009 (49FA297B)
fffff880`083b9000 fffff880`083c3000   LVPr2M64 LVPr2M64.sys Wed Oct 07 04:26:50 2009 (4ACC50CA)
fffff880`100e1000 fffff880`100e7a00   ManyCam_x64 ManyCam_x64.sys Thu Mar 13 03:46:01 2008 (47D8DBB9)
fffff880`00c1b000 fffff880`00c28000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`0217b000 fffff880`02189000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04c1c000 fffff880`04c2b000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04ccb000 fffff880`04cd8000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`01149000 fffff880`01163000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02023000 fffff880`0203b000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`076cb000 fffff880`076f8000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`076f8000 fffff880`07746000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07746000 fffff880`07769000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01a12000 fffff880`01a1d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e86000 fffff880`00e90000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`012bf000 fffff880`0131d000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04158000 fffff880`04163000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e8000 fffff880`017fa000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`047f9000 fffff880`04800000   mv2      mv2.sys      Wed Feb 06 16:02:40 2008 (47AA2070)
fffff880`0164b000 fffff880`0173d000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`10df4000 fffff880`10e00000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06bbe000 fffff880`06bd1000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`03e8c000 fffff880`03ebb000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04cee000 fffff880`04d03000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03fd4000 fffff880`03fe3000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03f4a000 fffff880`03f8f000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0173d000 fffff880`0179d000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01a1d000 fffff880`01a2e000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0414c000 fffff880`04158000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e58000 fffff800`03434000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01450000 fffff880`015f3000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01b9f000 fffff880`01ba8000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10d85000 fffff880`10d86180   nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`100f3000 fffff880`10d84e00   nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`10024000 fffff880`10075380   nvmf6264 nvmf6264.sys Thu Apr 30 15:45:59 2009 (49F9FFF7)
fffff880`01196000 fffff880`011c1000   nvstor   nvstor.sys   Wed May 20 02:45:37 2009 (4A13A711)
fffff880`011c1000 fffff880`011fe000   nvstor64 nvstor64.sys Wed Apr 29 21:57:30 2009 (49F9058A)
fffff880`06b6b000 fffff880`06bbe000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03f98000 fffff880`03fbe000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`04429000 fffff880`04446000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`010ac000 fffff880`010c1000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01079000 fffff880`010ac000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01132000 fffff880`01139000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`01139000 fffff880`01149000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0141a000 fffff880`0142b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07600000 fffff880`076a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04653000 fffff880`047e0580   Ph3xIB64 Ph3xIB64.sys Fri May 08 17:11:49 2009 (4A04A015)
fffff880`04d6d000 fffff880`04daa000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c28000 fffff880`00c3c000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01ad3000 fffff880`01afd000   PSINAflt PSINAflt.sys Thu May 27 08:17:36 2010 (4BFE62E0)
fffff880`06af5000 fffff880`06b14000   PSINFile PSINFile.sys Wed Jul 21 14:29:40 2010 (4C473C94)
fffff880`04123000 fffff880`0414c000   psinknc  psinknc.sys  Thu Jun 17 07:38:54 2010 (4C1A094E)
fffff880`06b14000 fffff880`06b35000   PSINProc PSINProc.sys Thu Apr 29 17:54:42 2010 (4BDA0022)
fffff880`01afd000 fffff880`01b20000   PSINProt PSINProt.sys Wed Jul 21 14:36:26 2010 (4C473E2A)
fffff880`04082000 fffff880`040a6000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`040a6000 fffff880`040c1000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`013dc000 fffff880`013fd000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0123a000 fffff880`01254000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`040d2000 fffff880`04123000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`100e8000 fffff880`100f3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01bf2000 fffff880`01bfb000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`083c3000 fffff880`083f1000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
fffff880`01a00000 fffff880`01a09000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01a09000 fffff880`01a12000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0820f000 fffff880`08247000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
fffff880`01200000 fffff880`0123a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`06bd1000 fffff880`06be9000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0205b000 fffff880`020d3000   rtl8187  rtl8187.sys  Wed Dec 09 04:16:39 2009 (4B1F6AF7)
fffff880`00e00000 fffff880`00e2f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`076a6000 fffff880`076b1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0441d000 fffff880`04429000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04400000 fffff880`0441d000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00fda000 fffff880`00ff4000   SI3132   SI3132.sys   Wed Oct 03 14:39:29 2007 (4703E1E1)
fffff880`017e0000 fffff880`017e8000   SiRemFil SiRemFil.sys Wed Jun 20 15:42:10 2007 (46798312)
fffff880`012b6000 fffff880`012bf000   SiWinAcc SiWinAcc.sys Thu Jun 14 20:02:02 2007 (4671D6FA)
fffff880`017d8000 fffff880`017e0000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0c855000 fffff880`0c8c6000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`00e9d000 fffff880`00fd1000   sptd     sptd.sys     Sun Mar 22 08:35:35 2009 (49C63097)
fffff880`08323000 fffff880`083b9000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`082bc000 fffff880`08323000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`077c5000 fffff880`077f2000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`01000000 fffff880`01062000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`10de3000 fffff880`10df3d00   STREAM   STREAM.SYS   Mon Jul 13 20:06:18 2009 (4A5BCBFA)
fffff880`04c52000 fffff880`04c53480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`040c1000 fffff880`040ce000   tapoas   tapoas.sys   Sun Jul 11 20:31:59 2010 (4C3A627F)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`076b1000 fffff880`076c3000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0143e000 fffff880`0144b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`083f1000 fffff880`083fc000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`01a2e000 fffff880`01a4c000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03e78000 fffff880`03e8c000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`03e3a000 fffff880`03e78000   truecrypt truecrypt.sys Mon Jun 15 05:16:54 2009 (4A361186)
fffff960`00400000 fffff960`0040a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`08200000 fffff880`0820f000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
fffff880`0402f000 fffff880`04055000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04c54000 fffff880`04c66000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04dcc000 fffff880`04de9000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04de9000 fffff880`04deaf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`10d87000 fffff880`10d98000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`04c71000 fffff880`04ccb000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
fffff880`04446000 fffff880`04451000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04451000 fffff880`044a7000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`02040000 fffff880`0205b000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`03e0c000 fffff880`03e398c0   VBoxDrv  VBoxDrv.sys  Thu Dec 17 08:58:01 2009 (4B2A38E9)
fffff880`04c2b000 fffff880`04c51b40   VBoxNetFlt VBoxNetFlt.sys Thu Dec 17 08:58:01 2009 (4B2A38E9)
fffff880`03e00000 fffff880`03e0b600   VBoxUSBMon VBoxUSBMon.sys Thu Dec 17 08:58:01 2009 (4B2A38E9)
fffff880`100ba000 fffff880`100c8000   vcd10bus vcd10bus.sys Mon Jun 16 03:36:31 2008 (485617FF)
fffff880`01b3b000 fffff880`01b75000   vdrv1000 vdrv1000.sys Thu Mar 25 05:44:39 2010 (4BAB3087)
fffff880`00e90000 fffff880`00e9d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01baf000 fffff880`01bbd000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01bbd000 fffff880`01be2000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017c8000 fffff880`017d8000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`010c1000 fffff880`010d6000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010d6000 fffff880`01132000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01390000 fffff880`013dc000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`020d3000 fffff880`020e0000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03fbe000 fffff880`03fd4000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`04cd8000 fffff880`04ce0000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
fffff880`0464d000 fffff880`0464f680   wacomvhid wacomvhid.sys Mon Aug 18 18:44:49 2008 (48A9FB61)
fffff880`04650000 fffff880`04651c80   WacomVKHid WacomVKHid.sys Thu Feb 15 18:10:54 2007 (45D4E87E)
fffff880`03fe3000 fffff880`03ffe000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01be2000 fffff880`01bf2000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d5a000 fffff880`00dfe000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00c00000 fffff880`00c0f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03f8f000 fffff880`03f98000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00320000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`00fd1000 fffff880`00fda000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06b35000 fffff880`06b56000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`01ad3000 fffff880`01ae1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01ae1000 fffff880`01aeb000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01aeb000 fffff880`01b28000   dump_nvstor6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01b28000 fffff880`01b3b000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

draegloth · 02 Feb 2011

First of all, THANK YOU.

I'll now start doing as you told me and post results..
oh, and the other account was a normal user account, didn't try another admin-acc so far.

ad 1.
here the problem starts, your link 404's

. This is the correct location acc. to the panda website.
and i have to add that i switched to panda because avira freeAV (which i used before) was told to be a possible reason for my problems..

ad 2.
did it.

ad 3.
did it. correct date stamp.

ad 4.
threw out manyCAM, virtualCD and wacom due to the fact that i didn't use them for quite a time.
updated silicon image driver.
LUM seems to be an IBM license manager, used by CAD-tool CATIA. didn't find an update, but only did a quick search.
didn't touch anything else, as drivers from 2009 were mostly up-to-date.
SOUNDMAX, okay, nothing for it, but as my only sound-output-device i do not want to call it obsolete^^

after finishing point 2, no more BSoD occured. this might just be a good day, but i hope my old box will now be stable once more.. I'll run the jcgriff once more and will add it to my first post as soon as it finished.

once more, THANK YOU, good sir.

[edit]
the next time something works, i'll just keep my mouth shut -.-

CarlTR6 · 02 Feb 2011

You are very welcome for the help.

draegloth said:

First of all, THANK YOU.

I'll now start doing as you told me and post results..
oh, and the other account was a normal user account, didn't try another admin-acc so far.

ad 1.
here the problem starts, your link 404's

. This is the correct location acc. to the panda website.
and i have to add that i switched to panda because avira freeAV (which i used before) was told to be a possible reason for my problems..

Thank you for the update regarding the broken link. I updated my list accordingly. :) Most third party AV program s cause conflicts on some Win 7 systems. This is due to Win 7's own internal security coding. I am sure the AV makers will get it right as time goes on.

If you want a third party AV that generally runs very well with Win 7 and was designed to do so, try Avast, In fact, Avast and MSE can run simultaneously without conflict - one of the few exceptions to the rule of never running two AV programs simultaneously. The advantage of Avast over MSE is Avast has an email scanner. MSE does not.

ad 2.
did it.

Very good. I am sure that was the cause of some of your crashes.

ad 3.
did it. correct date stamp.

Excellent. That should great help your system's stability.

If you need help with the drivers, please post. To explain further, Win 7 is a totally new OS. It is not an evolution from XP and is different even from Vista. Software and hardware designed for XP and not upgraded for Win 7 will not run well on Win 7 except in the XP mode. It is like taking a 2011 Porsche 911 and trying to use a 1960's VW Beetle front end under it. :)

draegloth · 02 Feb 2011

okay. the next time i'll really just keep my mouth shut if somethings works the way i want it to -.-

attached: jcgriff and perfmon, again from a user-account, AND perfmon and jcgriff as far as it worked from admin..

CarlTR6 · 02 Feb 2011

I looked at your latest four dumps. Nothing jumps out at me that I have not already commented on except one dump blames MSE for the crash. However, you still have Daemon Tools and sptd.sys loading and with sptd.sys, anything can happen. You can't just disable it; you have to uninstall Daemon and then run DuplexSecure - Downloads. sptd.sys will load whether or not Daemon is running.

Continue to work on updating drivers or uninstalling the software/hardware they are associated with. Start with the oldest drivers and work your way up.

Code:

Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e02000 PsLoadedModuleList = 0xfffff800`0303fe50
Debug session time: Wed Feb  2 09:23:17.771 2011 (GMT-5)
System Uptime: 0 days 0:12:21.628
Loading Kernel Symbols
...............................................................
................................................................
....................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80003166d47, fffff8800b190110, 0}

Probably caused by : ntkrnlmp.exe ( nt!ObReferenceObjectByHandleWithTag+e7 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80003166d47, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800b190110, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ObReferenceObjectByHandleWithTag+e7
fffff800`03166d47 488b03          mov     rax,qword ptr [rbx]

CONTEXT:  fffff8800b190110 -- (.cxr 0xfffff8800b190110)
rax=ff8b9197ff8b9197 rbx=ff8b9197ff8b9d37 rcx=00000000000002e8
rdx=0000000000100000 rsi=fffff8a002fbe2c0 rdi=fffffa8003dec060
rip=fffff80003166d47 rsp=fffff8800b190ae0 rbp=fffff8800b190c00
 r8=fffff8800cb74000  r9=0000000000000000 r10=fffff8000316d120
r11=fffff8800b190c18 r12=0000000000000000 r13=00000000000002e8
r14=0000000000000001 r15=fffffa80083f36a0
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!ObReferenceObjectByHandleWithTag+0xe7:
fffff800`03166d47 488b03          mov     rax,qword ptr [rbx] ds:002b:ff8b9197`ff8b9d37=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  Skype.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff8000316d189 to fffff80003166d47

STACK_TEXT:  
fffff880`0b190ae0 fffff800`0316d189 : 00000000`00000000 fffff800`00100000 00000000`00000000 00000000`00000001 : nt!ObReferenceObjectByHandleWithTag+0xe7
fffff880`0b190bb0 fffff800`02e71993 : fffffa80`03dec060 00000000`000002e8 00000000`00000000 00000000`00000000 : nt!NtWaitForSingleObject+0x69
fffff880`0b190c20 00000000`74c42dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`06faf0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x74c42dd9


FOLLOWUP_IP: 
nt!ObReferenceObjectByHandleWithTag+e7
fffff800`03166d47 488b03          mov     rax,qword ptr [rbx]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ObReferenceObjectByHandleWithTag+e7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff8800b190110 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ObReferenceObjectByHandleWithTag+e7

BUCKET_ID:  X64_0x3B_nt!ObReferenceObjectByHandleWithTag+e7

Followup: MachineOwner
---------

Debug session time: Wed Feb  2 08:26:34.127 2011 (GMT-5)
System Uptime: 0 days 0:29:05.109
Loading Kernel Symbols
...............................................................
................................................................
.......................................................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff8000319c5b1, 0, ffffffffffffffff}

Unable to load image \SystemRoot\system32\DRIVERS\MpFilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : MpFilter.sys ( MpFilter+212ab )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8000319c5b1, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExMapHandleToPointer+31
fffff800`0319c5b1 488b03          mov     rax,qword ptr [rbx]

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030be0e0
 ffffffffffffffff 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88008d9b218 -- (.exr 0xfffff88008d9b218)
ExceptionAddress: fffff8000319c5b1 (nt!ExMapHandleToPointer+0x0000000000000031)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff88008d9b2c0 -- (.trap 0xfffff88008d9b2c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=8b48d68b49c03665 rbx=0000000000000000 rcx=00000000000000c8
rdx=00000000000010c8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000319c5b1 rsp=fffff88008d9b450 rbp=fffffa800624e060
 r8=fffff880015b1000  r9=0000000000000020 r10=fffff8000319c620
r11=0000000000315320 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!ExMapHandleToPointer+0x31:
fffff800`0319c5b1 488b03          mov     rax,qword ptr [rbx] ds:b6d9:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ec0a39 to fffff80002e86740

STACK_TEXT:  
fffff880`08d9aa48 fffff800`02ec0a39 : 00000000`0000001e ffffffff`c0000005 fffff800`0319c5b1 00000000`00000000 : nt!KeBugCheckEx
fffff880`08d9aa50 fffff800`02e85d82 : fffff880`08d9b218 8b48d68b`49c03665 fffff880`08d9b2c0 fffff8a0`00001700 : nt!KiDispatchException+0x1b9
fffff880`08d9b0e0 fffff800`02e8468a : 00000000`00000000 00000000`00000000 00000000`00000000 00001f80`01000000 : nt!KiExceptionDispatch+0xc2
fffff880`08d9b2c0 fffff800`0319c5b1 : 00000000`000010c8 fffff800`02e85993 ffffffff`800010c8 fffffa80`054b1b60 : nt!KiGeneralProtectionFault+0x10a
fffff880`08d9b450 fffff800`0319c3f0 : 00000000`000010c8 fffff8a0`00001700 00000000`00000000 00000000`00000000 : nt!ExMapHandleToPointer+0x31
fffff880`08d9b480 fffff800`02e85993 : fffffa80`054b1b60 fffff880`08d9b550 00000000`00000c9c fffffa80`00000000 : nt!ObpCloseHandle+0x70
fffff880`08d9b4d0 fffff800`02e81f30 : fffff880`01b772ab 00000000`00000000 00000000`00000000 fffff8a0`05e04490 : nt!KiSystemServiceCopyEnd+0x13
fffff880`08d9b668 fffff880`01b772ab : 00000000`00000000 00000000`00000000 fffff8a0`05e04490 fffff800`0317e689 : nt!KiServiceLinkage
fffff880`08d9b670 00000000`00000000 : 00000000`00000000 fffff8a0`05e04490 fffff800`0317e689 fffff880`08d9b6d8 : MpFilter+0x212ab


STACK_COMMAND:  kb

FOLLOWUP_IP: 
MpFilter+212ab
fffff880`01b772ab ??              ???

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  MpFilter+212ab

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: MpFilter

IMAGE_NAME:  MpFilter.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c901110

FAILURE_BUCKET_ID:  X64_0x1E_MpFilter+212ab

BUCKET_ID:  X64_0x1E_MpFilter+212ab

Followup: MachineOwner
---------

Debug session time: Wed Feb  2 09:40:27.230 2011 (GMT-5)
System Uptime: 0 days 0:14:45.212
Loading Kernel Symbols
...............................................................
................................................................
....................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff8800c6393c8, 0, fffff8000316a790, 2}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!ObpCreateHandle+300 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8800c6393c8, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8000316a790, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030aa0e0
 fffff8800c6393c8 

FAULTING_IP: 
nt!ObpCreateHandle+300
fffff800`0316a790 418b442408      mov     eax,dword ptr [r12+8]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  iPodService.ex

CURRENT_IRQL:  0

TRAP_FRAME:  fffff8800bd7e660 -- (.trap 0xfffff8800bd7e660)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=00000000001f0003 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000316a790 rsp=fffff8800bd7e7f0 rbp=00000000000000f0
 r8=00000000000000f0  r9=fffff8800c639000 r10=fffff80002fee5a0
r11=fffff8800bd7e7c0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ObpCreateHandle+0x300:
fffff800`0316a790 418b442408      mov     eax,dword ptr [r12+8] ds:b420:00000000`00000008=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ef18f2 to fffff80002e72740

STACK_TEXT:  
fffff880`0bd7e4f8 fffff800`02ef18f2 : 00000000`00000050 fffff880`0c6393c8 00000000`00000000 fffff880`0bd7e660 : nt!KeBugCheckEx
fffff880`0bd7e500 fffff800`02e7082e : 00000000`00000000 fffff880`0bd7e960 fffffa80`0396bb00 fffff880`0bd7e6a0 : nt! ?? ::FNODOBFM::`string'+0x40ec0
fffff880`0bd7e660 fffff800`0316a790 : fffff880`0bd7e960 fffffa80`0396bb50 fffffa80`00000000 00000000`00000080 : nt!KiPageFault+0x16e
fffff880`0bd7e7f0 fffff800`031633d1 : fffffa80`00000000 fffffa80`0396bb50 00000000`00000000 00000000`00000000 : nt!ObpCreateHandle+0x300
fffff880`0bd7e900 fffff800`03142318 : 00000000`026af8b8 fffff880`0bd7eca0 00000000`00000000 00000000`00000001 : nt!ObInsertObjectEx+0x291
fffff880`0bd7eb40 fffff800`02e71993 : fffffa80`03e81b60 00000000`026af898 fffff880`0bd7ebc8 00000000`00000000 : nt!NtCreateEvent+0xd8
fffff880`0bd7ebb0 00000000`773b01da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`026af878 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773b01da


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ObpCreateHandle+300
fffff800`0316a790 418b442408      mov     eax,dword ptr [r12+8]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!ObpCreateHandle+300

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x50_nt!ObpCreateHandle+300

BUCKET_ID:  X64_0x50_nt!ObpCreateHandle+300

Followup: MachineOwner
---------

Debug session time: Wed Feb  2 07:28:00.515 2011 (GMT-5)
System Uptime: 0 days 0:20:12.497
Loading Kernel Symbols
...............................................................
................................................................
..............................................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff800031885b1, fffff880031d2608, fffff880031d1e70}

Probably caused by : ntkrnlmp.exe ( nt!ExMapHandleToPointer+31 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800031885b1, The address that the exception occurred at
Arg3: fffff880031d2608, Exception Record Address
Arg4: fffff880031d1e70, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExMapHandleToPointer+31
fffff800`031885b1 488b03          mov     rax,qword ptr [rbx]

EXCEPTION_RECORD:  fffff880031d2608 -- (.exr 0xfffff880031d2608)
ExceptionAddress: fffff800031885b1 (nt!ExMapHandleToPointer+0x0000000000000031)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff880031d1e70 -- (.cxr 0xfffff880031d1e70)
rax=5c89444824549208 rbx=5c89444824549208 rcx=0000000000000230
rdx=0000000000000e30 rsi=fffff8a000001700 rdi=0000000000000e30
rip=fffff800031885b1 rsp=fffff880031d2840 rbp=fffffa80036cd740
 r8=fffff88001463000  r9=0000000000000018 r10=fffff80003188620
r11=0000000000315320 r12=0000000000000000 r13=fffffa80036cd740
r14=fffff880031d2b80 r15=0000000000000001
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!ExMapHandleToPointer+0x31:
fffff800`031885b1 488b03          mov     rax,qword ptr [rbx] ds:002b:5c894448`24549208=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030aa0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
nt!ExMapHandleToPointer+31
fffff800`031885b1 488b03          mov     rax,qword ptr [rbx]

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff800031883f0 to fffff800031885b1

STACK_TEXT:  
fffff880`031d2840 fffff800`031883f0 : 00000000`00000e30 fffff8a0`00001700 00000000`00001000 fffff880`031d2ac8 : nt!ExMapHandleToPointer+0x31
fffff880`031d2870 fffff800`02e71993 : fffffa80`036e0b60 fffff880`031d2940 00000000`00000001 fffff800`03001888 : nt!ObpCloseHandle+0x70
fffff880`031d28c0 fffff800`02e6df30 : fffff800`03115c2a 00000000`00000000 fffffa80`0ae2b000 00000000`00000001 : nt!KiSystemServiceCopyEnd+0x13
fffff880`031d2a58 fffff800`03115c2a : 00000000`00000000 fffffa80`0ae2b000 00000000`00000001 fffffa80`00000000 : nt!KiServiceLinkage
fffff880`031d2a60 fffff800`03116437 : ffffffff`80000a60 fffff880`031d2b80 00000000`00000200 fffff880`031d2be0 : nt!CmpDoFileWrite+0x312
fffff880`031d2b20 fffff800`03115ec8 : 00000000`00000000 fffff8a0`0000041d 00000000`000020e8 00000000`00000001 : nt!CmpFileWrite+0x2f
fffff880`031d2b50 fffff800`031158d2 : 00000000`00004800 00000000`fffffe00 00000000`00000000 00000000`00000000 : nt!HvpWriteDirtyDataToLog+0x26c
fffff880`031d2be0 fffff800`03101e17 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff8a0`13329660 : nt!HvOptimizedSyncHive+0x26
fffff880`031d2c10 fffff800`03101f79 : 00000000`00000000 fffff880`031d2cb8 fffff800`03101e00 fffffa80`04f6ecd0 : nt!CmpDoFlushNextHive+0x197
fffff880`031d2c70 fffff800`02e7f961 : fffff800`03101ed4 fffff800`0316ec00 fffffa80`00000028 fffff800`030175f8 : nt!CmpLazyFlushWorker+0xa5
fffff880`031d2cb0 fffff800`03116c06 : 00c00008`00440100 fffffa80`036e0b60 00000000`00000080 fffffa80`036cd740 : nt!ExpWorkerThread+0x111
fffff880`031d2d40 fffff800`02e50c26 : fffff880`009e6180 fffffa80`036e0b60 fffff880`009f0f40 10000800`1c02a504 : nt!PspSystemThreadStartup+0x5a
fffff880`031d2d80 00000000`00000000 : fffff880`031d3000 fffff880`031cd000 fffff880`031d25a0 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExMapHandleToPointer+31

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff880031d1e70 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_nt!ExMapHandleToPointer+31

BUCKET_ID:  X64_0x7E_nt!ExMapHandleToPointer+31

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`04400000 fffff880`0443e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`1007a000 fffff880`100be000   a6aww978 a6aww978.SYS Sat Mar 21 10:48:32 2009 (49C4FE40)
fffff880`01038000 fffff880`0108f000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`05474000 fffff880`054de000   ADIHdAud ADIHdAud.sys Tue Apr 03 17:30:45 2007 (4612C785)
fffff880`03e7a000 fffff880`03f04000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04cd9000 fffff880`04cef000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`040d8000 fffff880`040ef000   amdk8    amdk8.sys    Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00df3000 fffff880`00dfe000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`047f3000 fffff880`047fb000   ASACPI   ASACPI.sys   Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`085c2000 fffff880`085cd000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00e86000 fffff880`00e8f000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e8f000 fffff880`00eb9000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`01b6a000 fffff880`01bb9000   atksgt   atksgt.sys   Sun May 17 09:36:34 2009 (4A1012E2)
fffff960`00950000 fffff960`009b1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`047e9000 fffff880`047ece80   BdaSup   BdaSup.SYS   Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`01a6d000 fffff880`01a74000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`040a1000 fffff880`040b2000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06381000 fffff880`0639f000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      unavailable (00000000)
fffff880`01a3a000 fffff880`01a64000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cf6000 fffff880`00db6000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01b3a000 fffff880`01b6a000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c98000 fffff880`00cf6000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`012d2000 fffff880`01345000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04600000 fffff880`04610000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02192000 fffff880`021a0000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04000000 fffff880`04083000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`04083000 fffff880`040a1000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`0418b000 fffff880`0419a000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01b24000 fffff880`01b3a000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0551b000 fffff880`0553d000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`021a0000 fffff880`021aa000   dump_diskdump dump_diskdump.sys Mon Jul 12 23:32:05 2010 (4C3BDE35)
fffff880`021e7000 fffff880`021fa000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`021aa000 fffff880`021e7000   dump_nvstor64 dump_nvstor64.sys Wed Apr 29 21:57:30 2009 (49F9058A)
fffff880`02178000 fffff880`02184000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04446000 fffff880`0453a000   dxgkrnl  dxgkrnl.sys  Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`0453a000 fffff880`04580000   dxgmms1  dxgmms1.sys  Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`0855b000 fffff880`08591000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`04580000 fffff880`0458d000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01257000 fffff880`0126b000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`04c3b000 fffff880`04c46000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`0120b000 fffff880`01257000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01400000 fffff880`0140a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01aea000 fffff880`01b24000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0162b000 fffff880`01675000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`045ef000 fffff880`045fc000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`033de000 fffff800`03427000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`10056000 fffff880`1007a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03e52000 fffff880`03e6b000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`100be000 fffff880`100c6080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0555c000 fffff880`0556a000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`062b9000 fffff880`06381000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`017ef000 fffff880`017f8000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04dbc000 fffff880`04dcb000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04cb5000 fffff880`04cc3000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbe000 fffff800`00bc8000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`047a6000 fffff880`047e9000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`015cd000 fffff880`015e7000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01600000 fffff880`0162b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`047ed000 fffff880`047f2200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06271000 fffff880`0627e000   lirsgt   lirsgt.sys   Sun May 17 09:06:57 2009 (4A100BF1)
fffff880`020d1000 fffff880`020e6000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02000000 fffff880`02023000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`04181000 fffff880`0418b000   LUM      LUM.sys      Fri Feb 02 08:48:34 2007 (45C34132)
fffff880`020e9000 fffff880`02177280   LV561V64 LV561V64.SYS Thu Apr 30 18:43:07 2009 (49FA297B)
fffff880`084d1000 fffff880`084db000   LVPr2M64 LVPr2M64.sys Wed Oct 07 04:26:50 2009 (4ACC50CA)
fffff880`0443e000 fffff880`04444a00   ManyCam_x64 ManyCam_x64.sys Thu Mar 13 03:46:01 2008 (47D8DBB9)
fffff880`00c77000 fffff880`00c84000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`02184000 fffff880`02192000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04dcb000 fffff880`04dda000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04ca0000 fffff880`04cad000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e6c000 fffff880`00e86000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0639f000 fffff880`063b7000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`063b7000 fffff880`063e4000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06200000 fffff880`0624e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0624e000 fffff880`06271000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01ad2000 fffff880`01add000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0108f000 fffff880`01099000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01274000 fffff880`012d2000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04176000 fffff880`04181000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0140a000 fffff880`0141c000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`04610000 fffff880`04617000   mv2      mv2.sys      Wed Feb 06 16:02:40 2008 (47AA2070)
fffff880`0169d000 fffff880`0178f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04d13000 fffff880`04d1f000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05460000 fffff880`05473000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04d1f000 fffff880`04d4e000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04cc3000 fffff880`04cd8000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03f8e000 fffff880`03f9d000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03f04000 fffff880`03f49000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0178f000 fffff880`017ef000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01bd2000 fffff880`01be3000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0416a000 fffff880`04176000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e02000 fffff800`033de000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0142a000 fffff880`015cd000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01a64000 fffff880`01a6d000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10df2000 fffff880`10df3180   nvBridge nvBridge.kmd Tue Mar 16 03:26:37 2010 (4B9F32AD)
fffff880`100c8000 fffff880`10df1700   nvlddmkm nvlddmkm.sys Tue Mar 16 03:57:48 2010 (4B9F39FC)
fffff880`0419a000 fffff880`041eb380   nvmf6264 nvmf6264.sys Thu Apr 30 15:45:59 2009 (49F9FFF7)
fffff880`00fd0000 fffff880`00ffb000   nvstor   nvstor.sys   Wed May 20 02:45:37 2009 (4A13A711)
fffff880`00db6000 fffff880`00df3000   nvstor64 nvstor64.sys Wed Apr 29 21:57:30 2009 (49F9058A)
fffff880`0540d000 fffff880`05460000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03f52000 fffff880`03f78000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`045b6000 fffff880`045d3000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`010a6000 fffff880`010bb000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f88000 fffff880`00fbb000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`010bb000 fffff880`010c2000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e5c000 fffff880`00e6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015e7000 fffff880`015f8000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06c72000 fffff880`06d18000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04618000 fffff880`047a5580   Ph3xIB64 Ph3xIB64.sys Fri May 08 17:11:49 2009 (4A04A015)
fffff880`054de000 fffff880`0551b000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c84000 fffff880`00c98000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`02023000 fffff880`0204d000   PSINAflt PSINAflt.sys Thu May 27 08:17:36 2010 (4BFE62E0)
fffff880`02070000 fffff880`0208f000   PSINFile PSINFile.sys Wed Jul 21 14:29:40 2010 (4C473C94)
fffff880`04141000 fffff880`0416a000   psinknc  psinknc.sys  Thu Jun 17 07:38:54 2010 (4C1A094E)
fffff880`0208f000 fffff880`020b0000   PSINProc PSINProc.sys Thu Apr 29 17:54:42 2010 (4BDA0022)
fffff880`0204d000 fffff880`02070000   PSINProt PSINProt.sys Wed Jul 21 14:36:26 2010 (4C473E2A)
fffff880`04cef000 fffff880`04d13000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04d4e000 fffff880`04d69000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04d69000 fffff880`04d8a000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04d8a000 fffff880`04da4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`040f0000 fffff880`04141000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04db1000 fffff880`04dbc000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01ab7000 fffff880`01ac0000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`084db000 fffff880`08509000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
fffff880`01ac0000 fffff880`01ac9000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01ac9000 fffff880`01ad2000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`08523000 fffff880`0855b000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
fffff880`01391000 fffff880`013cb000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04dda000 fffff880`04df2000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05585000 fffff880`055fd000   rtl8187  rtl8187.sys  Wed Dec 09 04:16:39 2009 (4B1F6AF7)
fffff880`01009000 fffff880`01038000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`06d18000 fffff880`06d23000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`045aa000 fffff880`045b6000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0458d000 fffff880`045aa000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00eb9000 fffff880`00ed3000   SI3132   SI3132.sys   Wed Oct 03 14:39:29 2007 (4703E1E1)
fffff880`0168d000 fffff880`01695000   SiRemFil SiRemFil.sys Wed Jun 20 15:42:10 2007 (46798312)
fffff880`0126b000 fffff880`01274000   SiWinAcc SiWinAcc.sys Thu Jun 14 20:02:02 2007 (4671D6FA)
fffff880`01685000 fffff880`0168d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`010ca000 fffff880`011fe000   sptd     sptd.sys     Sun Mar 22 08:35:35 2009 (49C63097)
fffff880`0843b000 fffff880`084d1000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06d62000 fffff880`06dc9000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06d23000 fffff880`06d50000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`00c00000 fffff880`00c62000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`013e9000 fffff880`013f9d00   STREAM   STREAM.SYS   Mon Jul 13 20:06:18 2009 (4A5BCBFA)
fffff880`04c27000 fffff880`04c28480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04da4000 fffff880`04db1000   tapoas   tapoas.sys   Sun Jul 11 20:31:59 2010 (4C3A627F)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06d50000 fffff880`06d62000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01be3000 fffff880`01bf0000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`08509000 fffff880`08514000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`013cb000 fffff880`013e9000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03e3e000 fffff880`03e52000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`03e00000 fffff880`03e3e000   truecrypt truecrypt.sys Mon Jun 15 05:16:54 2009 (4A361186)
fffff960`00570000 fffff960`0057a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`08514000 fffff880`08523000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
fffff880`040b2000 fffff880`040d8000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04c29000 fffff880`04c3b000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0553d000 fffff880`0555a000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0555a000 fffff880`0555bf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`045de000 fffff880`045ef000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`04c46000 fffff880`04ca0000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
fffff880`045d3000 fffff880`045de000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`10000000 fffff880`10056000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0556a000 fffff880`05585000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`03fc4000 fffff880`03ff18c0   VBoxDrv  VBoxDrv.sys  Thu Dec 17 08:58:01 2009 (4B2A38E9)
fffff880`04c00000 fffff880`04c26b40   VBoxNetFlt VBoxNetFlt.sys Thu Dec 17 08:58:01 2009 (4B2A38E9)
fffff880`03fb8000 fffff880`03fc3600   VBoxUSBMon VBoxUSBMon.sys Thu Dec 17 08:58:01 2009 (4B2A38E9)
fffff880`041ec000 fffff880`041fa000   vcd10bus vcd10bus.sys Mon Jun 16 03:36:31 2008 (485617FF)
fffff880`01a00000 fffff880`01a3a000   vdrv1000 vdrv1000.sys Thu Mar 25 05:44:39 2010 (4BAB3087)
fffff880`01099000 fffff880`010a6000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01a74000 fffff880`01a82000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01a82000 fffff880`01aa7000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01675000 fffff880`01685000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fbb000 fffff880`00fd0000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01345000 fffff880`01391000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`05400000 fffff880`0540d000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03f78000 fffff880`03f8e000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`04cad000 fffff880`04cb5000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
fffff880`047fb000 fffff880`047fd680   wacomvhid wacomvhid.sys Mon Aug 18 18:44:49 2008 (48A9FB61)
fffff880`047fe000 fffff880`047ffc80   WacomVKHid WacomVKHid.sys Thu Feb 15 18:10:54 2007 (45D4E87E)
fffff880`03f9d000 fffff880`03fb8000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01aa7000 fffff880`01ab7000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ed5000 fffff880`00f79000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f79000 fffff880`00f88000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03f49000 fffff880`03f52000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00380000   win32k   win32k.sys   unavailable (00000000)
fffff880`01000000 fffff880`01009000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`020b0000 fffff880`020d1000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06c00000 fffff880`06c71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08591000 fffff880`085c2000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01b6a000 fffff880`01b78000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01b78000 fffff880`01b82000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01b82000 fffff880`01bbf000   dump_nvstor6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01bbf000 fffff880`01bd2000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

draegloth · 02 Feb 2011

interesting. i used duplex secure, and it told me sptd.sys was gone. I'll use it again and post results..

[edit]
"No SPTD version was detected" - thats what it says...

CarlTR6 · 02 Feb 2011

Possibly the dump occurred before you removed sptd.sys? Use Windows Explorer and do a search of your C: hard drive for sptd.sys, Rename every instance you find from .sys to .old. Reboot and it will not load.

draegloth · 03 Feb 2011

I'm confused, and you're right - there was a sptd.sys, in /windows/system32/drivers.. renamed it to .old, rebooted, went to the kitchen, and when i came back there was a SYSTEM_SERVICE_EXCEPTION.

i think i'll fire up memtest once more over the weekend.

CarlTR6 · 03 Feb 2011

Be sure to run Memtest from a cold boot after your computer has been off for an hour or so. If Memtest finds no errors, run Prime95 to test both your CPU and your RAM. Follow the instructions in this tutorial: https://www.sevenforums.com/tutorials...t-prime95.html. Run 3 separate tests, one on each of the settings (Blend, Small FFTs, Large FFTs).