Random BSOD's, error 0xa

I wish you were here. So far no more blue screens. Driver verifier is still running, but everything is working fine as of now.

adrastea said:

I wish you were here. So far no more blue screens. Driver verifier is still running, but everything is working fine as of now.

Fingers crossed

Another one happened today as soon as my computer loaded up. It never loaded the desktop, just said starting windows then blue screened after trying to load the desktop.
Here's the dump file.

Please remove any CD visualization programs such as Daemon Tools and Alcohol 120%.

They use a driver, found in your dmp, called sptd.sys, that is notorious for causing BSODs.

Use this SPTD uninstaller DuplexSecure - Downloads DuplexSecure - FAQ

when you're done you can use this Freeware:

MagicISO Virtual CD/DVD-ROM (MagicDisc) in its place

Using MagicISO to create ISO image files

So I ran the uninstaller for that driver, but it didn't detect it on my computer. I also checked where it said it's located in the registry and it wasn't listed there. What's that all about?

Problem Devices:

Code:

Standard PS/2 Keyboard	ACPI\PNP0303\4&8AB8035&0	This device is not present, is not working properly, or does not have all its drivers installed.

Do not worry about the above if you have a USB keyboard.


Security Software:

Code:

msmpeng.exe	c:\program files\microsoft security client\antimalware\msmpeng.exe	852	8	200	1380	3/16/2012 1:13 PM	3.0.8402.0	12.48 KB (12,784 bytes)	4/27/2011 5:21 PM
nissrv.exe	c:\program files\microsoft security client\antimalware\nissrv.exe	2276	8	200	1380	3/16/2012 1:13 PM	3.0.8402.0	281.52 KB (288,272 bytes)	4/27/2011 5:21 PM
msseces.exe	c:\program files\microsoft security client\msseces.exe	3016	8	200	1380	3/16/2012 1:13 PM	2.1.1116.0	1.37 MB (1,436,736 bytes)	6/15/2011 2:35 PM

Possible out of date driver:

Code:

AtiPcie	fffff880`01630000	fffff880`01638000	Tue May 05 09:00:22 2009 (4a005486)	000134c7		AtiPcie.sys

AtiPcie.sys

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\adrastea\Windows_NT6_BSOD_jcgriff2\031612-19702-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`02a57000 PsLoadedModuleList = 0xfffff800`02c9b650
Debug session time: Fri Mar 16 12:07:33.704 2012 (UTC - 6:00)
System Uptime: 0 days 0:05:32.264
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {80000a, 2, 0, fffff88002d0fe27}

Probably caused by : afd.sys ( afd!AfdSetupReceiveDatagramIrp+67 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000080000a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88002d0fe27, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d05100
 000000000080000a 

CURRENT_IRQL:  2

FAULTING_IP: 
afd!AfdSetupReceiveDatagramIrp+67
fffff880`02d0fe27 f6430a05        test    byte ptr [rbx+0Ah],5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff88008293020 -- (.trap 0xfffff88008293020)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88000a00f1c rbx=0000000000000000 rcx=0000000000000001
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88002d0fe27 rsp=fffff880082931b0 rbp=fffffa80046eef40
 r8=00000001d467c000  r9=0000000000000000 r10=0000000000000000
r11=0000fffffffff000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
afd!AfdSetupReceiveDatagramIrp+0x67:
fffff880`02d0fe27 f6430a05        test    byte ptr [rbx+0Ah],5 ds:ca80:00000000`0000000a=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ad32e9 to fffff80002ad3d40

STACK_TEXT:  
fffff880`08292ed8 fffff800`02ad32e9 : 00000000`0000000a 00000000`0080000a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`08292ee0 fffff800`02ad1f60 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00800000 : nt!KiBugCheckDispatch+0x69
fffff880`08293020 fffff880`02d0fe27 : fffffa80`05bb4a60 00000000`00000000 00000000`00000001 fffffa80`046eef40 : nt!KiPageFault+0x260
fffff880`082931b0 fffff880`02cbe849 : fffffa80`06924100 00000000`00000000 fffffa80`000004c0 fffffa80`053da170 : afd!AfdSetupReceiveDatagramIrp+0x67
fffff880`08293280 fffff880`02d007d9 : 00000000`00000000 00000000`00000001 fffffa80`05f64220 00000000`00000000 : afd!AfdReceiveDatagramEventCommonHandler+0x389
fffff880`08293320 fffff880`0172fc75 : fffffa80`000004c0 fffffa80`045c8b10 00000000`00000000 fffffa80`059c1d10 : afd!AfdTLDgramReceiveEventHandler+0xe9
fffff880`082933b0 fffff880`0172984d : fffffa80`00000028 fffffa80`059c1d10 fffffa80`00000000 fffffa80`04358fe8 : tcpip!UdpDeliverDatagrams+0x155
fffff880`08293540 fffff880`01708227 : fffffa80`04727380 fffffa80`0668ca80 00000000`00000017 00000000`00000000 : tcpip!UdpReceiveDatagrams+0x1ed
fffff880`08293650 fffff880`01707d3a : 00000000`00000000 fffff880`01822800 fffff880`08293810 fffffa80`045c8b10 : tcpip!IppDeliverListToProtocol+0xf7
fffff880`08293710 fffff880`01707339 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`08293800 : tcpip!IppProcessDeliverList+0x5a
fffff880`082937b0 fffff880`016ec26f : fffffa80`066b9080 00000000`00000001 00000000`00000000 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x23a
fffff880`08293890 fffff800`02adfa88 : fffff880`01822800 fffffa80`045b6911 fffff880`00000001 fffffa80`04358d50 : tcpip!IppLoopbackTransmit+0x38f
fffff880`08293940 fffff880`016ec90f : fffff880`01738c70 fffffa80`06667ca0 fffff880`08293b02 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`08293a20 fffff880`0170974a : fffffa80`066b9080 00000000`00000000 fffffa80`06667c00 fffff880`016f0592 : tcpip!IppLoopbackEnqueue+0x22f
fffff880`08293ad0 fffff880`0170b895 : 00000000`00000000 fffffa80`04358e00 fffff880`08293c00 fffff800`00000000 : tcpip!IppDispatchSendPacketHelper+0x38a
fffff880`08293b90 fffff880`01709fd3 : fffffa80`04945411 fffffa80`00000000 fffffa80`00000028 fffffa80`00000000 : tcpip!IppPacketizeDatagrams+0x2d5
fffff880`08293cb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!IppSendDatagramsCommon+0x753


STACK_COMMAND:  kb

FOLLOWUP_IP: 
afd!AfdSetupReceiveDatagramIrp+67
fffff880`02d0fe27 f6430a05        test    byte ptr [rbx+0Ah],5

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  afd!AfdSetupReceiveDatagramIrp+67

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: afd

IMAGE_NAME:  afd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4efa9418

FAILURE_BUCKET_ID:  X64_0xD1_afd!AfdSetupReceiveDatagramIrp+67

BUCKET_ID:  X64_0xD1_afd!AfdSetupReceiveDatagramIrp+67

Followup: MachineOwner
---------

1. Possible cause is Drivers... The driver being blamed is a system driver, but it is related to your network.

Use the subsequent steps to determine the cause of your crashes:

• If you are overclocking any hardware, please stop.
  
  
• Update your network adapter drivers or re-install the latest if you already have the latest. Your current drivers may be out of date or corrupted.
  AR922X is the driver you want to choose, and click on the blue check mark under Windows 7 64-bit.
  Realtek PCIe GBE Family Controller Win7 and WinServer 2008 R2 Auto Installation Program (SID:1483418) is the link you should choose.
  
  Do your normal routine for a few days and see how the system responds. Report back afterward. If you have any crashes, proceed to the next step and upload your crash reports.
  
  
• An underlying driver may be incompatible\conflicting with your system. Run Driver Verifier to find any issues. To run Driver Verifier, do the following:
  
  a. Backup your system and user files
  b. Create a system restore point
  c. If you do not have a Windows 7 DVD, Create a system repair disc
  d. Run Driver Verifier and in step 3, only select Standard settings. Do not select the other two settings in the red boxes.
  
  If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using System Restore OPTION TWO.
  
  Thanks to zigzag3143 for contributing to the Verifier steps.
  If you are unable to start Windows with all drivers being verified or if the blue screen crashes fail to create .dmp files, run them in groups of 5 or 10 until you find a group that causes blue screen crashes and stores the blue screen .dmp files.
  The idea with Verifier is to cause the system to crash, so do the things you normally do that cause crashes. After you have a few crashes, upload the crash reports for us to take a look and try to find patterns.

Just had two blue screens right in a row. The first was while I was on Facebook using Google chrome, steam running in the background. The second was right after my computer restarted when I was collecting the dump files. Both drivers from the previous post were updated as suggested. I'll continue running driver verifier.
Here's the dump files.
This bug report was 0x24

032012-15584-01.dmp shows a 0x24 crash related to NTFS.sys; this often means data corruption. It can also mean Memory problems... Drivers... corrupted SCSI or IDE Drivers...

Begin by checking for data corruption/hard disk errors.

• Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log.
  For any drives that do not give the message:
  Windows has checked the file system and found no problems
  run disk check again as above. In other words, if it says:
  Windows has made corrections to the file system
  after running the disk check, run the disk check again.

I've already run the disk check with both boxes checked, and nothing came up wrong. I can always try it again I guess.