Many BSOD mostly on ntoskrnl.exe module and ohter

jatheman · 24 Mar 2011

Hi there.
I'm having several BSOD specially with the ntoskrnl.exe module. I've reinstalled windows 7 3 times, but still the same problem. First I tought it was related to the wireless network card (that I have removed) but still BSOD.

The latest BSOD occured when I started Steam Cloud and I was just going to upload my latest configuration of CS source in order to be able to play this game.
Error message:

This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x1A (0x31, 0xFFFFFA80072ABCC0, 0xFFFFF8800E3F4000, 0xFFFFF8A00B567211)
Error: MEMORY_MANAGEMENT

Little info about my system (se my system specs for more details):
- System is 9 mnd old (home built)
- OEM win 7 Home Premium 64 bit, service pack 1 installed (and all the other updates as well), latest OS install on 20.03.2011
- Intel i7-860 2.8 Ghz with Cooler Master V10 cooler
- 4 Gb RAM
- XFX Radeon HD 5770 1 Gb RAM
- MSI P55-GD65 Motherboard

See my attached dump files that also includes a WhoCrashed log file and System Healt Report. The OS is in Norwegian so some of the System Helat Report is in Norwegian.

Regards,

Jatheman

mgorman87 · 24 Mar 2011

Please uninstall Norton. It was the cause of your last BSOD - Norton Removal Tool
You may use Microsoft Security Essentials as a replacement

Code:

Ctafiltv.sys Thu Aug 14 02:48:33 2008 (48A3D541)

Please install the latest Creative sound drivers for your card. You can check on your computer manufacturer's site, if you have an OEM machine.

Code:

Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)

Update your network card drivers from here

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Mike\Downloads\BSDO_systemreport_whocrashed_20110324\Windows_NT6_BSOD_jcgriff2\032411-44085-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a1b000 PsLoadedModuleList = 0xfffff800`02c60e90
Debug session time: Thu Mar 24 12:36:56.887 2011 (UTC - 4:00)
System Uptime: 0 days 0:36:17.995
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
.....
Unable to load image \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20110323.035\EX64.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for EX64.SYS
*** ERROR: Module load completed but symbols could not be loaded for EX64.SYS
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff88008e0f494, fffff880089d0b48, fffff880089d03a0}

Probably caused by : hardware ( EX64+a494 )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88008e0f494, The address that the exception occurred at
Arg3: fffff880089d0b48, Exception Record Address
Arg4: fffff880089d03a0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
EX64+a494
fffff880`08e0f494 180400          sbb     byte ptr [rax+rax],al

EXCEPTION_RECORD:  fffff880089d0b48 -- (.exr 0xfffff880089d0b48)
ExceptionAddress: fffff88008e0f494 (EX64+0x000000000000a494)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 0000000000000060
Attempt to write to address 0000000000000060

CONTEXT:  fffff880089d03a0 -- (.cxr 0xfffff880089d03a0)
rax=0000000000000030 rbx=fffff8a003426d88 rcx=00000000baffc883
rdx=0000000000000000 rsi=fffff8a00b758cc0 rdi=0000000000000001
rip=fffff88008e0f494 rsp=fffff880089d0d80 rbp=fffff8a008f85ec0
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000184
r11=0000000000000000 r12=0000000000000000 r13=fffff880089d1100
r14=fffff88008fac330 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
EX64+0xa494:
fffff880`08e0f494 180400          sbb     byte ptr [rax+rax],al ds:002b:00000000`00000060=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  0000000000000060

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ccc0e8
 0000000000000060 

FOLLOWUP_IP: 
EX64+a494
fffff880`08e0f494 180400          sbb     byte ptr [rax+rax],al

BUGCHECK_STR:  0x7E

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

MISALIGNED_IP: 
EX64+a494
fffff880`08e0f494 180400          sbb     byte ptr [rax+rax],al

LAST_CONTROL_TRANSFER:  from fffff88008f8ea20 to fffff88008e0f494

STACK_TEXT:  
fffff880`089d0d80 fffff880`08f8ea20 : fffff800`02bc6fbd fffff8a0`0b758d00 00000000`00000050 00000054`e522b9bc : EX64+0xa494
fffff880`089d0d88 fffff800`02bc6fbd : fffff8a0`0b758d00 00000000`00000050 00000054`e522b9bc 00000000`000007ff : EX64+0x189a20
fffff880`089d0d90 fffff880`08e7da66 : fffff8a0`0919a610 00000000`00000004 fffff8a0`65456153 fffff8a0`0000016b : nt!ExFreePoolWithTag+0x22d
fffff880`089d0e40 fffff8a0`0919a610 : 00000000`00000004 fffff8a0`65456153 fffff8a0`0000016b 00000000`00000000 : EX64+0x78a66
fffff880`089d0e48 00000000`00000004 : fffff8a0`65456153 fffff8a0`0000016b 00000000`00000000 fffff880`08e0e57e : 0xfffff8a0`0919a610
fffff880`089d0e50 fffff8a0`65456153 : fffff8a0`0000016b 00000000`00000000 fffff880`08e0e57e 00000000`00000000 : 0x4
fffff880`089d0e58 fffff8a0`0000016b : 00000000`00000000 fffff880`08e0e57e 00000000`00000000 00000000`00000801 : 0xfffff8a0`65456153
fffff880`089d0e60 00000000`00000000 : fffff880`08e0e57e 00000000`00000000 00000000`00000801 fffff880`08fac330 : 0xfffff8a0`0000016b


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  EX64+a494

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  hardware

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  .cxr 0xfffff880089d03a0 ; kb

MODULE_NAME: hardware

FAILURE_BUCKET_ID:  X64_IP_MISALIGNED_EX64.SYS

BUCKET_ID:  X64_IP_MISALIGNED_EX64.SYS

Followup: MachineOwner
---------

6: kd> lmntsm
start             end                 module name
fffff880`04856000 fffff880`04894000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00ebe000 fffff880`00f15000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`0429b000 fffff880`04324000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`05126000 fffff880`0513c000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00e00000 fffff880`00e0b000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`08200000 fffff880`0820b000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00ff5000 fffff880`00ffe000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c1a000 fffff880`00c44000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`04e67000 fffff880`050f4000   athrx    athrx.sys    Sat Nov 13 23:32:38 2010 (4CDF6666)
fffff880`0607e000 fffff880`0609e000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`056f6000 fffff880`05ff2000   atikmdag atikmdag.sys Wed Jan 26 17:48:28 2011 (4D40A4BC)
fffff880`04a00000 fffff880`04a4e000   atikmpag atikmpag.sys Wed Jan 26 17:13:33 2011 (4D409C8D)
fffff880`0165b000 fffff880`01662000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04a94000 fffff880`04baa000   BHDrvx64 BHDrvx64.sys Wed Feb 23 17:42:55 2011 (4D658D6F)
fffff880`04969000 fffff880`0497a000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03f6b000 fffff880`03f89000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`048cd000 fffff880`04969000   ccHPx64  ccHPx64.sys  Fri Feb 05 16:05:45 2010 (4B6C8829)
fffff960`00720000 fffff960`00747000   cdd      cdd.dll      unavailable (00000000)
fffff880`01628000 fffff880`01652000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00d2c000 fffff880`00dec000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`019be000 fffff880`019ee000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00cce000 fffff880`00d2c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01179000 fffff880`011eb000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`05116000 fffff880`05126000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0615f000 fffff880`0616d000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`05ff2000 fffff880`05fff000   Ctafiltv Ctafiltv.sys Thu Aug 14 02:48:33 2008 (48A3D541)
fffff880`04485000 fffff880`044a3000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04476000 fffff880`04485000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`019a8000 fffff880`019be000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`060db000 fffff880`060fd000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06179000 fffff880`06182000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0616d000 fffff880`06179000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06182000 fffff880`06195000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`049f4000 fffff880`04a00000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`05600000 fffff880`056f4000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04a4e000 fffff880`04a94000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`04400000 fffff880`04476000   eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`08fbf000 fffff880`08fdf000   ENG64    ENG64.SYS    Mon Dec 13 20:47:30 2010 (4D06CCB2)
fffff880`08d7f000 fffff880`08da4000   EraserUtilDrvI10 EraserUtilDrvI10.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`08e05000 fffff880`08fbf000   EX64     EX64.SYS     Mon Dec 13 20:55:48 2010 (4D06CEA4)
fffff880`010cc000 fffff880`010e0000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01012000 fffff880`0105e000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0196e000 fffff880`019a8000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`0187b000 fffff880`018c5000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`03005000 fffff800`0304e000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`0497a000 fffff880`0499e000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`06103000 fffff880`0615f000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`061b3000 fffff880`061cc000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`061cc000 fffff880`061d4080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`061a5000 fffff880`061b3000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`03ea2000 fffff880`03f6b000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01965000 fffff880`0196e000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`04516000 fffff880`04591000   IDSvia64 IDSvia64.sys Fri Nov 05 17:13:11 2010 (4CD47367)
fffff880`04bd0000 fffff880`04be6000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04214000 fffff880`0423b000   Ironx64  Ironx64.SYS  Tue Apr 27 20:48:23 2010 (4BD785D7)
fffff880`051f1000 fffff880`05200000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06000000 fffff880`0600e000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bb0000 fffff800`00bba000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04e11000 fffff880`04e54000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013e1000 fffff880`013fc000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`060fd000 fffff880`06102200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`061d7000 fffff880`061ec000   LHidFilt LHidFilt.Sys Tue Aug 24 13:21:36 2010 (4C73FFA0)
fffff880`01600000 fffff880`01615000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04894000 fffff880`048a8000   LMouFilt LMouFilt.Sys Tue Aug 24 13:21:43 2010 (4C73FFA7)
fffff880`0424f000 fffff880`04272000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`06195000 fffff880`061a5000   LUsbFilt LUsbFilt.Sys Tue Aug 24 13:21:47 2010 (4C73FFAB)
fffff880`00c6b000 fffff880`00cba000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`045e2000 fffff880`045f0000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04e00000 fffff880`04e0f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`061ec000 fffff880`061f9000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`03f89000 fffff880`03fa1000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03fa1000 fffff880`03fce000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`07e52000 fffff880`07e9f000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`07e9f000 fffff880`07ec3000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`015d8000 fffff880`015e3000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f1e000 fffff880`00f28000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0111b000 fffff880`01179000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0450b000 fffff880`04516000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01953000 fffff880`01965000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01485000 fffff880`01578000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`05160000 fffff880`0516c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03e70000 fffff880`03e83000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`0516c000 fffff880`0519b000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`06069000 fffff880`0607e000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`043ae000 fffff880`043bd000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04324000 fffff880`04369000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01578000 fffff880`015d8000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`015e3000 fffff880`015f4000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`044ff000 fffff880`0450b000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a1b000 fffff800`03005000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`0123e000 fffff880`013e1000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01652000 fffff880`0165b000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`03e1d000 fffff880`03e70000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`04372000 fffff880`04398000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00f68000 fffff880`00f7d000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f28000 fffff880`00f5b000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00fee000 fffff880`00ff5000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00dec000 fffff880`00dfc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07ec3000 fffff880`07f69000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0609e000 fffff880`060db000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cba000 fffff880`00cce000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0513c000 fffff880`05160000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0519b000 fffff880`051b6000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`051b6000 fffff880`051d7000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`051d7000 fffff880`051f1000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`044ae000 fffff880`044ff000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`01460000 fffff880`01469000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01469000 fffff880`01472000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01472000 fffff880`0147b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01919000 fffff880`01953000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`03e83000 fffff880`03e9b000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04800000 fffff880`04856000   Rt64win7 Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)
fffff880`07f69000 fffff880`07f74000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`05101000 fffff880`0510d000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`043bd000 fffff880`043da000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01911000 fffff880`01919000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08cf9000 fffff880`08d7f000   SRTSP64  SRTSP64.SYS  Wed Feb 24 18:59:29 2010 (4B85BD61)
fffff880`0423b000 fffff880`0424f000   SRTSPX64 SRTSPX64.SYS Wed Feb 24 18:59:48 2010 (4B85BD74)
fffff880`0827d000 fffff880`08316000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`08212000 fffff880`0827d000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`07f74000 fffff880`07fa5000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`04e0f000 fffff880`04e10480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0105e000 fffff880`010cc000   SYMDS64  SYMDS64.SYS  Mon Aug 17 19:35:30 2009 (4A89E942)
fffff880`010e0000 fffff880`0111b000   SYMEFA64 SYMEFA64.SYS Wed Apr 21 17:47:39 2010 (4BCF727B)
fffff880`04591000 fffff880`045c7000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Aug 13 18:28:21 2009 (4A849385)
fffff880`08316000 fffff880`0838c000   SYMTDIV  SYMTDIV.SYS  Tue May 04 00:38:27 2010 (4BDFA4C3)
fffff880`01677000 fffff880`0187b000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`07fa5000 fffff880`07fb7000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`011eb000 fffff880`011f8000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0121b000 fffff880`0123d000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`04200000 fffff880`04214000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00470000 fffff960`0047a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04baa000 fffff880`04bd0000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`03e9b000 fffff880`03ea2000   TurboB   TurboB.sys   Mon Nov 02 15:47:34 2009 (4AEF4566)
fffff880`04e54000 fffff880`04e66000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`045c7000 fffff880`045e1c80   usbaudio usbaudio.sys Sat Nov 20 05:43:52 2010 (4CE7A668)
fffff880`048a8000 fffff880`048c5000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`061d5000 fffff880`061d6f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04be6000 fffff880`04bf7000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`0600f000 fffff880`06069000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`0499e000 fffff880`049f4000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`00f5b000 fffff880`00f68000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01662000 fffff880`01670000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0142b000 fffff880`01450000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f7d000 fffff880`00f92000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00f92000 fffff880`00fee000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`018c5000 fffff880`01911000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`050f4000 fffff880`05101000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`04398000 fffff880`043ae000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`043da000 fffff880`043f5000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`01450000 fffff880`01460000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e0b000 fffff880`00eaf000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eaf000 fffff880`00ebe000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04369000 fffff880`04372000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00020000 fffff960`00331000   win32k   win32k.sys   unavailable (00000000)
fffff880`0510d000 fffff880`05116000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f15000 fffff880`00f1e000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04272000 fffff880`04293000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`0838c000 fffff880`083fd000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`019ee000 fffff880`019fc000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01600000 fffff880`0160c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0160c000 fffff880`01615000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01615000 fffff880`01628000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

jatheman · 25 Mar 2011

Thanks for your replay.
I can uninstall Norton (is this just for checking if Norton is the reason for BSOD? - I certainly need a anti virus program). I updated the Norton to 2011 version yesterday.
I have a Creative headset not a Creative sound card, but i did install a driver for this headset. (the soundcard is inbuilt in the motherboard - Realteck i think). I update the drivers as well and I will update this post lateer.

thanks again!

Jatheman

mgorman87 · 25 Mar 2011

Norton was listed as the cause of the crash. Norton doesn't play nice on some win 7 machines. Install MSE as your anti virus. It works just fine

jatheman · 25 Mar 2011

ok. But the strange thing is that my brother has exactly the same configuration doesn't have any problems with his computer.... The same software (OS, Norton etc.)

J

Jonathan_King · 25 Mar 2011

I might as well just post my recommendations. Install the network adapter driver first, and that will probably stop any Norton BSODs. The latest versions of Norton have been pretty good about not causing BSODs. Not to say it's never the cause, but bad network adapter drivers are more likely.

One Verifier_Enabled dump pointed to the NT Kernel, and another blamed hardware. These are both signs of hardware trouble, so let's run some diagnostics.

Start with the 3 Prime95 tests: https://www.sevenforums.com/tutorials...t-prime95.html

Also run Memtest86: RAM - Test with Memtest86+

Finish up with SeaTools: SeaTools for Windows | Seagate

...Summary of the dumps:

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Mar 24 17:16:58.001 2011 (UTC - 4:00)
System Uptime: 0 days 0:23:05.999
Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+7321 )
BUGCHECK_STR:  0x1a_31
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  hl2.exe
FAILURE_BUCKET_ID:  X64_0x1a_31_nt!_??_::NNGAKEGL::_string_+7321
SystemProductName = MS-7583
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Mar 24 15:35:59.464 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:23.573
*** WARNING: Unable to verify timestamp for Ctafiltv.sys
*** ERROR: Module load completed but symbols could not be loaded for Ctafiltv.sys
Probably caused by : Ctafiltv.sys ( Ctafiltv+1807 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_VRF_Ctafiltv+1807
SystemProductName = MS-7583
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Mar 24 14:46:17.243 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:25.351
Probably caused by : ntkrnlmp.exe ( nt!RtlDispatchException+122 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_VRF_nt!RtlDispatchException+122
SystemProductName = MS-7583
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Mar 24 12:36:56.887 2011 (UTC - 4:00)
System Uptime: 0 days 0:36:17.995
*** WARNING: Unable to verify timestamp for EX64.SYS
*** ERROR: Module load completed but symbols could not be loaded for EX64.SYS
Probably caused by : hardware ( EX64+a494 )
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
FAILURE_BUCKET_ID:  X64_IP_MISALIGNED_EX64.SYS
SystemProductName = MS-7583
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Sun Mar 20 08:48:54.856 2011 (UTC - 4:00)
System Uptime: 0 days 0:03:38.058
Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+6378 )
BUGCHECK_STR:  0x1a_31
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  mscorsvw.exe
FAILURE_BUCKET_ID:  X64_0x1a_31_nt!_??_::NNGAKEGL::_string_+6378
SystemProductName = MS-7583
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

jatheman · 26 Mar 2011

Jonathan_King said:

One Verifier_Enabled dump pointed to the NT Kernel, and another blamed hardware. These are both signs of hardware trouble, so let's run some diagnostics.

Start with the 3 Prime95 tests: https://www.sevenforums.com/tutorials...t-prime95.html

Also run Memtest86: RAM - Test with Memtest86+

Finish up with SeaTools: SeaTools for Windows | Seagate

Hi and thanks for your replay!

I have previously tested the CPU with Prime95, idle temp 18-20 °C and 100 %load 40-50 °C. It is staple and I've never had BSOD during this test.
Memory has been tested, but not with that tool. I can run it together with the SeaTools.
I have installed the network driver and have not had any BSOD so let's hope it is solved...

Jatheman