BSOD EventID 41 Task 63

psymonds · 30 Mar 2011

BSOD on a Lenovo T500 Win 7 64 bit SP1 recently installed.
Original OS was VISTA with a "free" upgrade to Win 7, which was provided as an OEM upgrade and installed shortly after purchase. The purchase date was August 2009 and the OS installation is original, no reinstalls. I recently added an external monitor AOC e2243Fw and was using PowerStrip for color adjustment until yesterday when I had BSOD two times and removed Power Strip as a precaution.
My attempt to run perfmon /report resulted in another BSOD 5 minutes ago. I will attempt it again after I complete this post. I have the dump file ready to attach, but it is prior to the BSOD from 5 minutes ago.

Please let me know if you'd like me to re-run the tool for the BSOD dump file.

I'd be very grateful for help resolving this. Thanks.
Phil

psymonds · 30 Mar 2011

OK, I've got the perfmon report, attached.

psymonds · 31 Mar 2011

I can't help but notice, after one day, my particular BSOD message is 6 pages back, it's been read 64 times and there are no replies. I am actually quite shocked at how many BSOD complaints there are. I thought Win 7 was supposed to be "better", better than what, now I'm not sure.

I see I'm not the only one in this situation. I fully recognize, people who pass through here are volunteers and the people who post are strangers. It's hit and miss. So, what separates the ones that get attention from the ones that don't? Is it dumb luck?

My Lenovo is covered under extended warranty from IBM Global. I don't normally take extended warranty on anything, but I depend on this computer to earn my living and figure, it isn't "if", but "when". I don't like dealing with them because it consumes more time that I'd like to spend at the moment -- let's say they aren't always so swift at understanding the diagnosis. They will tie up my time when I don't really have time.

I thought maybe this forum would provide a way for more efficient use of time, rather than someone calling me back at the most inconvenient time. Anyhow, just wondering what expectations I should have. I think maybe I was hoping for too much.

Thanks for looking in anyway.

mgorman87 · 31 Mar 2011

Sorry that no ones responded.

There was only one BSOD memory dump in your report you uploaded and it pointed at your video card driver as the cause of the crash.

Please download the latest version of your driver from here

Please enable driver verifier - Driver Verifier - Enable and Disable

Please run a hard drive scan using Seatools

Code:

e1y60x64.sys Fri Aug 22 18:09:50 2008 (48AF392E)

Update your Intel network drivers - here

Code:

NETw5s64.sys Tue Sep 15 15:40:39 2009 (4AAFEDB7)

Update your Intel WiFi drivers - here

Start with that and see if the problem continues.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Mike\Downloads\Windows_NT6_BSOD_jcgriff2 (11)\Windows_NT6_BSOD_jcgriff2\032911-43196-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02e67000 PsLoadedModuleList = 0xfffff800`030ace90
Debug session time: Tue Mar 29 21:36:36.823 2011 (UTC - 4:00)
System Uptime: 0 days 1:35:33.415
Loading Kernel Symbols
...............................................................
................................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 406f8, fffff88004ac4e1d}

Unable to load image \SystemRoot\system32\DRIVERS\igdkmd64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for igdkmd64.sys
*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
Probably caused by : igdkmd64.sys ( igdkmd64+14e1d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000406f8
Arg4: fffff88004ac4e1d

Debugging Details:
------------------


BUGCHECK_STR:  0x7f_8

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  7

LAST_CONTROL_TRANSFER:  from fffff80002ee6be9 to fffff80002ee7640

STACK_TEXT:  
fffff800`04601d28 fffff800`02ee6be9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
fffff800`04601d30 fffff800`02ee50b2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`04601e70 fffff880`04ac4e1d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`0bdcef40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : igdkmd64+0x14e1d


STACK_COMMAND:  kb

FOLLOWUP_IP: 
igdkmd64+14e1d
fffff880`04ac4e1d c744245000000000 mov     dword ptr [rsp+50h],0

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  igdkmd64+14e1d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: igdkmd64

IMAGE_NAME:  igdkmd64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c75709e

FAILURE_BUCKET_ID:  X64_0x7f_8_igdkmd64+14e1d

BUCKET_ID:  X64_0x7f_8_igdkmd64+14e1d

Followup: MachineOwner
---------

0: kd> lmntsm
start             end                 module name
fffff880`05f5f000 fffff880`05f9d000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`08782000 fffff880`08798780   5U875    5U875.sys    Tue Sep 02 22:27:57 2008 (48BDF62D)
fffff880`00f89000 fffff880`00fe0000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`02e65000 fffff880`02eee000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`04000000 fffff880`04016000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01200000 fffff880`0120b000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`08178000 fffff880`08183000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`013c8000 fffff880`013d1000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`013d1000 fffff880`013fb000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff960`00860000 fffff960`008c1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`03b1b000 fffff880`03b4f000   AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:24:45 2010 (4C58972D)
fffff880`01bcc000 fffff880`01bd6000   AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:38 2010 (4C8EA9CE)
fffff880`02bb5000 fffff880`02bc1000   AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:21 2010 (4C5896D9)
fffff880`03e00000 fffff880`03e50000   avgldx64 avgldx64.sys Tue Dec 07 21:01:55 2010 (4CFEE713)
fffff880`03c3d000 fffff880`03c4c000   avgmfx64 avgmfx64.sys Mon Sep 06 20:49:14 2010 (4C858C0A)
fffff880`01bc2000 fffff880`01bcc000   avgrkx64 avgrkx64.sys Mon Sep 06 20:49:37 2010 (4C858C21)
fffff880`01000000 fffff880`01061000   avgtdia  avgtdia.sys  Fri Nov 12 06:08:42 2010 (4CDD203A)
fffff880`00e5e000 fffff880`00e6a000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`03c58000 fffff880`03c5f000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03fc1000 fffff880`03fd2000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02ae1000 fffff880`02aff000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`0868b000 fffff880`08756000   CAX_CNXT CAX_CNXT.sys Tue Mar 25 19:45:42 2008 (47E98EA6)
fffff880`08450000 fffff880`085c4000   CAX_DPV  CAX_DPV.sys  Tue Mar 25 19:51:10 2008 (47E98FEE)
fffff880`08362000 fffff880`083b5000   CAXHWAZL CAXHWAZL.sys Tue Mar 25 19:47:04 2008 (47E98EF8)
fffff960`00760000 fffff960`00787000   cdd      cdd.dll      unavailable (00000000)
fffff880`03c13000 fffff880`03c3d000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`0825a000 fffff880`082fd000   CHDRT64  CHDRT64.sys  Wed Jul 22 17:57:53 2009 (4A678B61)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01b92000 fffff880`01bc2000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00d32000 fffff880`00d90000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05fe9000 fffff880`05fed500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01188000 fffff880`011fa000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`00e55000 fffff880`00e5e000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`041f0000 fffff880`04200000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`08679000 fffff880`08687000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03f20000 fffff880`03fa3000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`08600000 fffff880`08612000   dc3d     dc3d.sys     Tue Dec 14 06:09:28 2010 (4D075068)
fffff880`03fa3000 fffff880`03fc1000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`03f11000 fffff880`03f20000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01b7c000 fffff880`01b92000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`08437000 fffff880`08440180   DLABMFSE DLABMFSE.SYS Mon Jun 18 19:26:42 2007 (467714B2)
fffff880`08441000 fffff880`08449900   DLABOIOE DLABOIOE.SYS Mon Jun 18 19:26:38 2007 (467714AE)
fffff880`03c4c000 fffff880`03c4e300   DLACDBHE DLACDBHE.SYS Thu Feb 08 23:05:10 2007 (45CBF2F6)
fffff880`08687000 fffff880`08687d80   DLADResE DLADResE.SYS Mon Jun 18 19:27:48 2007 (467714F4)
fffff880`0840e000 fffff880`0842f200   DLAIFS_E DLAIFS_E.SYS Mon Jun 18 19:25:21 2007 (46771461)
fffff880`08430000 fffff880`08436c00   DLAOPIOE DLAOPIOE.SYS Mon Jun 18 19:27:20 2007 (467714D8)
fffff880`08688000 fffff880`0868ab80   DLAPoolE DLAPoolE.SYS Mon Jun 18 19:25:52 2007 (46771480)
fffff880`03c5f000 fffff880`03c66e00   DLARTL_E DLARTL_E.SYS Thu Feb 08 23:04:36 2007 (45CBF2D4)
fffff880`08200000 fffff880`08221680   DLAUDF_E DLAUDF_E.SYS Mon Jun 18 19:26:15 2007 (46771497)
fffff880`083d6000 fffff880`083f5680   DLAUDFAE DLAUDFAE.SYS Mon Jun 18 19:26:36 2007 (467714AC)
fffff880`0833a000 fffff880`0835c000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0126b000 fffff880`01287960   DRVECDB  DRVECDB.SYS  Mon Mar 12 05:25:09 2007 (45F51C75)
fffff880`08400000 fffff880`0840dd80   DRVEDDM  DRVEDDM.SYS  Fri Feb 09 15:34:03 2007 (45CCDABB)
fffff880`085c4000 fffff880`085d7000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`03cd0000 fffff880`03ded000   dump_iaStor dump_iaStor.sys Wed Feb 11 20:24:30 2009 (49937A4E)
fffff880`087d6000 fffff880`087e2000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`054cf000 fffff880`055c3000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`015e8000 fffff880`015f3000   DzHDD64  DzHDD64.sys  Tue Nov 10 08:47:48 2009 (4AF96F04)
fffff880`0408f000 fffff880`040df000   e1y60x64 e1y60x64.sys Fri Aug 22 18:09:50 2008 (48AF392E)
fffff880`03e50000 fffff880`03e59000   easytthr easytthr.sys Sun Aug 29 10:10:54 2010 (4C7A6A6E)
fffff880`01257000 fffff880`0126b000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0120b000 fffff880`01257000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`015f3000 fffff880`015fd000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01b42000 fffff880`01b7c000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01a3f000 fffff880`01a89000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`02e1e000 fffff800`02e67000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04153000 fffff880`04177000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`04a46000 fffff880`04a57000   HECIx64  HECIx64.sys  Wed Mar 26 17:12:59 2008 (47EABC5B)
fffff880`08629000 fffff880`08642000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`08612000 fffff880`0861a080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0861b000 fffff880`08629000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02a18000 fffff880`02ae1000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`03f0b000 fffff880`03f11000   hugoio64 hugoio64.sys Fri Apr 04 10:39:14 2008 (47F63D92)
fffff880`01b39000 fffff880`01b42000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`05857000 fffff880`05875000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`012ab000 fffff880`013c8000   iaStor   iaStor.sys   Wed Feb 11 20:24:30 2009 (49937A4E)
fffff880`05fee000 fffff880`05ffa000   ibmpmdrv ibmpmdrv.sys Tue Nov 17 22:13:20 2009 (4B036650)
fffff880`04ab0000 fffff880`054ceb60   igdkmd64 igdkmd64.sys Wed Aug 25 15:35:58 2010 (4C75709E)
fffff880`03e7f000 fffff880`03e95000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`05875000 fffff880`05884000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08642000 fffff880`08650000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00ba3000 fffff800`00bad000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04689000 fffff880`046cc000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`015bc000 fffff880`015d7000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`0835c000 fffff880`08361200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0822b000 fffff880`08240000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`085d7000 fffff880`085fa000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00ccf000 fffff880`00d1e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`02bc1000 fffff880`02bc5280   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:27:26 2006 (449716BE)
fffff880`08756000 fffff880`08765000   modem    modem.sys    Mon Jul 13 20:10:48 2009 (4A5BCD08)
fffff880`087e2000 fffff880`087f0000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05886000 fffff880`05895000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0865c000 fffff880`08669000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`010c0000 fffff880`010da000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`02aff000 fffff880`02b17000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02b17000 fffff880`02b44000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`02b44000 fffff880`02b91000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`02b91000 fffff880`02bb5000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`03cc5000 fffff880`03cd0000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fe9000 fffff880`00ff3000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`081fe000 fffff880`081ffc00   MSPCLOCK MSPCLOCK.sys Mon Jul 13 20:00:17 2009 (4A5BCA91)
fffff880`081fc000 fffff880`081fda80   MSPQM    MSPQM.sys    Mon Jul 13 20:00:17 2009 (4A5BCA91)
fffff880`0112a000 fffff880`01188000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`03ef9000 fffff880`03f04000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01b27000 fffff880`01b39000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016da000 fffff880`017cd000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`0403a000 fffff880`04046000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`08240000 fffff880`08253000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`04046000 fffff880`04075000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`047a0000 fffff880`047b5000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`02fdc000 fffff880`02feb000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`0168b000 fffff880`016d0000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`058a5000 fffff880`05f52000   NETw5s64 NETw5s64.sys Tue Sep 15 15:40:39 2009 (4AAFEDB7)
fffff880`01be4000 fffff880`01bf5000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03eed000 fffff880`03ef9000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e67000 fffff800`03451000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01419000 fffff880`015bc000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`08650000 fffff880`0865c000   NuidFltr NuidFltr.sys Tue Jun 29 04:54:32 2010 (4C29B4C8)
fffff880`03c4f000 fffff880`03c58000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04600000 fffff880`04653000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02f8c000 fffff880`02fb2000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`041ca000 fffff880`041e7000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00e7f000 fffff880`00e86000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e86000 fffff880`00e96000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00e96000 fffff880`00ecf000   pcmcia   pcmcia.sys   Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015d7000 fffff880`015e8000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`03a1f000 fffff880`03ac5000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`08669000 fffff880`08679000   point64  point64.sys  Tue Dec 14 06:09:25 2010 (4D075065)
fffff880`082fd000 fffff880`0833a000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`055ef000 fffff880`055fa000   psadd    psadd.sys    Mon Feb 19 13:56:37 2007 (45D9F2E5)
fffff880`00d1e000 fffff880`00d32000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`02feb000 fffff880`02ff2000   pstrip64 pstrip64.sys Wed Apr 14 08:07:40 2004 (407D298C)
fffff880`01288000 fffff880`01293d00   PxHlpa64 PxHlpa64.sys Wed Mar 12 21:58:17 2008 (47D88A39)
fffff880`08222000 fffff880`0822b000   rasacd   rasacd.sys   Mon Jul 13 20:10:09 2009 (4A5BCCE1)
fffff880`04016000 fffff880`0403a000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04a80000 fffff880`04a9b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`055c3000 fffff880`055e4000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04075000 fffff880`0408f000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e9c000 fffff880`03eed000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`055e4000 fffff880`055ef000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`03caa000 fffff880`03cb3000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03cb3000 fffff880`03cbc000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03cbc000 fffff880`03cc5000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01aed000 fffff880`01b27000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`05fbd000 fffff880`05fd2000   rimmpx64 rimmpx64.sys Wed Feb 20 20:24:19 2008 (47BCD2C3)
fffff880`05fd2000 fffff880`05fe9000   rimspx64 rimspx64.sys Thu Jul 26 07:33:52 2007 (46A886A0)
fffff880`05800000 fffff880`05857000   rixdpx64 rixdpx64.sys Fri Jul 27 06:45:50 2007 (46A9CCDE)
fffff880`047b5000 fffff880`047ef000   RMCAST   RMCAST.sys   Sat Nov 20 05:49:51 2010 (4CE7A7CF)
fffff880`04653000 fffff880`0466b000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05f9d000 fffff880`05fbd000   sdbus    sdbus.sys    Sat Nov 20 04:37:42 2010 (4CE796E6)
fffff880`03ac5000 fffff880`03ad0000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04a74000 fffff880`04a80000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04a57000 fffff880`04a74000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`03f04000 fffff880`03f0b000   smiifx64 smiifx64.sys Mon May 12 05:01:13 2008 (48280759)
fffff880`01ae5000 fffff880`01aed000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`080df000 fffff880`08178000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`03b4f000 fffff880`03bba000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`03ad0000 fffff880`03b01000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`08799000 fffff880`087a9d00   STREAM   STREAM.SYS   Mon Jul 13 20:06:18 2009 (4A5BCBFA)
fffff880`05ffa000 fffff880`05ffb480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04177000 fffff880`041ca000   SynTP    SynTP.sys    Thu Apr 22 19:11:30 2010 (4BD0D7A2)
fffff880`0183b000 fffff880`01a3f000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`03b01000 fffff880`03b13000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`03df1000 fffff880`03dfe000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01800000 fffff880`01822000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`02e21000 fffff880`02e35000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`05895000 fffff880`058a4000   tpm      tpm.sys      Mon Jul 13 19:21:48 2009 (4A5BC18C)
fffff880`02e1b000 fffff880`02e21000   Tppwr64v Tppwr64v.sys Wed Oct 18 04:40:21 2006 (4535E875)
fffff960`00580000 fffff960`0058a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03e59000 fffff880`03e7f000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`046cc000 fffff880`046de000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`08765000 fffff880`08782000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`05884000 fffff880`05885f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04142000 fffff880`04153000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`04746000 fffff880`047a0000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`040ec000 fffff880`04142000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`087f0000 fffff880`087fc000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`046fb000 fffff880`0470a000   usbrpm   usbrpm.sys   Sat Nov 20 06:37:19 2010 (4CE7B2EF)
fffff880`087c5000 fffff880`087d6000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`087aa000 fffff880`087c5000   USBSTOR  USBSTOR.SYS  Sat Nov 20 05:44:05 2010 (4CE7A675)
fffff880`040df000 fffff880`040ec000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`03c67000 fffff880`03c75000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`03c75000 fffff880`03c9a000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`010da000 fffff880`01116000   vmbus    vmbus.sys    Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`01a89000 fffff880`01a99000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00e6a000 fffff880`00e7f000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00d90000 fffff880`00dec000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01a99000 fffff880`01ae5000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`0470a000 fffff880`04746000   vpchbus  vpchbus.sys  Sat Nov 20 06:35:38 2010 (4CE7B28A)
fffff880`02fb2000 fffff880`02fc6000   vpcnfltr vpcnfltr.sys Sat Nov 20 06:35:20 2010 (4CE7B278)
fffff880`046de000 fffff880`046fb000   vpcusb   vpcusb.sys   Sat Nov 20 06:35:31 2010 (4CE7B283)
fffff880`01061000 fffff880`010b7600   vpcvmm   vpcvmm.sys   Sat Nov 20 06:35:48 2010 (4CE7B294)
fffff880`02eee000 fffff880`02f83000   vsdatant vsdatant.sys Sun May 09 12:28:58 2010 (4BE6E2CA)
fffff880`05f52000 fffff880`05f5f000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02fc6000 fffff880`02fdc000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02e00000 fffff880`02e1b000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`03c9a000 fffff880`03caa000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ed6000 fffff880`00f7a000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f7a000 fffff880`00f89000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02f83000 fffff880`02f8c000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`00361000   win32k   win32k.sys   unavailable (00000000)
fffff880`01116000 fffff880`0112a000   winhv    winhv.sys    Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`041e7000 fffff880`041f0000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fe0000 fffff880`00fe9000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`083b5000 fffff880`083d6000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`03b13000 fffff880`03b1b000   xaudio64 xaudio64.sys Thu Oct 18 18:37:08 2007 (4717E014)

Unloaded modules:
fffff880`081f4000 fffff880`081fc000   ALSysIO64.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00008000
fffff880`08183000 fffff880`081f4000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01bd6000 fffff880`01be4000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`03cd4000 fffff880`03df1000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0011D000
fffff880`03c00000 fffff880`03c13000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

psymonds · 31 Mar 2011

Thanks very much for looking at my problem. I wish I knew how to read the dump, but somethings are better left to those who have the knowledge. I was reading through the forum earlier today hoping for a hint and it appears that I got lucky because I updated the video and network drivers late this afternoon. But it was just a lucky guess. Actually, Intel had a very good message, which was to use the brand specific drivers over their generic ones. I was able to download two of the three drivers (video and wireless) from Lenovo. I took the other network driver from Intel.

I've had a bad feeling about the video driver from the day I got the external monitor, which didn't seem to be operating as I thought it should -- nothing tangible, more of a feeling due to color being off and not being able to get it corrected. It actually seems much better now with the newer driver -- go figure, or maybe just my imagination.

I ran Seatools and memtest yesterday and they reported no problems. Before I retire for the night, I'll start the verifier and see what it generates. Great documentation on that one!

So far, no BSOD today, but the day's not over yet.

I'm very grateful for your assistance.

psymonds · 31 Mar 2011

What do you know...I turned on the verifier and I got the BSOD on boot, before loading Windows. The o/s took me into an automatic repair procedure, which I allowed to run. It booted OK on restart (only one cycle of repair). I ran the tool again and have a new file to post. Maybe there is something enlightening here? Thanks.

mgorman87 · 31 Mar 2011

There is no new minidump file. It is still the same one as before. Browse to c:\windows\minidump and upload any files in there

psymonds · 01 Apr 2011

Unfortunately, I can't find a dump or log from the 3/31 boot problem. I found one mini dump from 3/29 that was already posted. I think the only route we've got is to let the verifier do it's job and see what happens.

Thanks again for your help.

psymonds · 01 Apr 2011

Good news and bad. System repair is an automated registry roll back. It terminates verifier.exe, so I didn't realize it wasn't running on reboot. When I tried to shut down verifier.exe late in the afternoon, it was apparent it wasn't running. I started it again, several times. It is choking on DRVEDDM.SYS and DRVECDB.SYS. The second one is from Sonic Systems, but I don't understand what it is for and couldn't locate an update. The first one is identifed as Device Driver Manager, and again, I can't figure out what it does, but it's name scares me. I managed to obtain one more dump, attached. I don't know where to go from here. A little more help would be appreciated. Thanks.

mgorman87 · 01 Apr 2011

This newest dump points to your Sonic CD/DVD driver (used by many different CD/DVD programs). Browse to C:\System32\Drivers\PxHlpa64.sys and rename it from .sys to .bak and reboot, see what it breaks and let me know.

EDIT: On a side note. Your driver isn't the latest out. Check out the list of programs here and see if you have any of them installed. If you do check and see if you have the latest version or uninstall it.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Mike\AppData\Local\Temp\Rar$DI00.633\040111-28875-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02e5f000 PsLoadedModuleList = 0xfffff800`030a4e90
Debug session time: Fri Apr  1 18:35:28.580 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:59.203
Loading Kernel Symbols
...............................................................
................................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {f6, 284, fffffa8009ed2b30, fffff880012239d2}

Unable to load image \SystemRoot\System32\Drivers\PxHlpa64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for PxHlpa64.sys
*** ERROR: Module load completed but symbols could not be loaded for PxHlpa64.sys
Probably caused by : PxHlpa64.sys ( PxHlpa64+69d2 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000284, Handle value being referenced.
Arg3: fffffa8009ed2b30, Address of the current process.
Arg4: fffff880012239d2, Address inside the driver that is performing the incorrect reference.

Debugging Details:
------------------


BUGCHECK_STR:  0xc4_f6

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  DrgToDsc.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800033663dc to fffff80002edf640

STACK_TEXT:  
fffff880`0b3e40b8 fffff800`033663dc : 00000000`000000c4 00000000`000000f6 00000000`00000284 fffffa80`09ed2b30 : nt!KeBugCheckEx
fffff880`0b3e40c0 fffff800`0337bae4 : 00000000`00000284 fffffa80`09ed2b30 00000000`00000004 00000000`749c2e09 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`0b3e4100 fffff800`031350c0 : 00000000`00000000 fffff880`0b3e4350 fffff880`0b3e4500 fffff880`0b3e46d8 : nt!VfCheckUserHandle+0x1b4
fffff880`0b3e41e0 fffff800`031b05e5 : 00000000`00000000 00000000`00000001 fffffa80`0485f660 fffffa80`0485f600 : nt! ?? ::NNGAKEGL::`string'+0x2173e
fffff880`0b3e42b0 fffff800`02ede8d3 : fffffa80`09f1fb60 fffff880`0b3e4668 00000000`00000002 fffff980`168ccdf0 : nt!NtQueryValueKey+0x115
fffff880`0b3e4440 fffff800`02edae70 : fffff800`0336ac86 fffff880`012239d2 fffff880`0b3e46d8 00000000`00000210 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0b3e4648 fffff800`0336ac86 : fffff880`012239d2 fffff880`0b3e46d8 00000000`00000210 00000000`00000000 : nt!KiServiceLinkage
fffff880`0b3e4650 fffff880`012239d2 : 00000000`00000210 00000000`00000000 00000000`00000000 fffffa80`058a6050 : nt!VfZwQueryValueKey+0x76
fffff880`0b3e46a0 00000000`00000210 : 00000000`00000000 00000000`00000000 fffffa80`058a6050 fffffa80`00000210 : PxHlpa64+0x69d2
fffff880`0b3e46a8 00000000`00000000 : 00000000`00000000 fffffa80`058a6050 fffffa80`00000210 fffff880`0b3e46d0 : 0x210


STACK_COMMAND:  kb

FOLLOWUP_IP: 
PxHlpa64+69d2
fffff880`012239d2 85c0            test    eax,eax

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  PxHlpa64+69d2

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: PxHlpa64

IMAGE_NAME:  PxHlpa64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  47d88a39

FAILURE_BUCKET_ID:  X64_0xc4_f6_VRF_PxHlpa64+69d2

BUCKET_ID:  X64_0xc4_f6_VRF_PxHlpa64+69d2

Followup: MachineOwner
---------