Here's my analysis.
Code:
BugCheck 1000007E, {ffffffffc0000005, fffff800034f4622, fffff880033e06d8, fffff880033dff30}
Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
An access violation has occurred which indicates the CPU tried to access memory which it couldn't address.
The 2nd parameter is the address at which the exception occurred at.
The 3rd parameter contains the exception record address.
Code:
EXCEPTION_RECORD: fffff880033e06d8 -- (.exr 0xfffff880033e06d8)
ExceptionAddress: fffff800034f4622 (nt!KxWaitForLockOwnerShip+0x0000000000000012)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
The exception occurred because the CPU attempted to read from this address which is clearly invalid.
I believe the KxWaitForLockOwnerShip function is waiting for a locked process to be unlocked so that it can be accessed but I'm not completely sure on that.
Code:
4: kd> u fffff800034f4622
nt!KxWaitForLockOwnerShip+0x12:
fffff800`034f4622 48890a mov qword ptr [rdx],rcx <-- a move instruction from the RCX register to the RDX register has been initiated
fffff800`034f4625 33db xor ebx,ebx
fffff800`034f4627 660f1f0400 nop word ptr [rax+rax]
fffff800`034f462c ffc3 inc ebx
fffff800`034f462e 851d946d2000 test dword ptr [nt!HvlLongSpinCountMask (fffff800`036fb3c8)],ebx
fffff800`034f4634 0f847fb3faff je nt! ?? ::FNODOBFM::`string'+0x5da0 (fffff800`0349f9b9)
fffff800`034f463a f390 pause
fffff800`034f463c 488b4f08 mov rcx,qword ptr [rdi+8]
With that said lets take a look at the registers
Code:
4: kd> r
rax=0000000000000000 rbx=fffff8000367afe0 rcx=fffff880033e09c0
rdx=2020000000000000 rsi=fffff880009b3180 rdi=fffff880033e09c0
rip=fffff800034f4622 rsp=fffff880033e0910 rbp=00000000425be7d8
r8=fffff880033e09c0 r9=0000000000000001 r10=0000000000000002
r11=fffffa800c2b0d18 r12=00000000425be7d8 r13=0000058000000000
r14=0000000000000001 r15=2aaaaaaaaaaaaaab
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt!KxWaitForLockOwnerShip+0x12:
fffff800`034f4622 48890a mov qword ptr [rdx],rcx ds:002b:20200000`00000000=????????????????
The RDX register is invalid...
The Callstack doesn't reveal too much.
Lets dump the raw stack and see if we can find anything.
Avast is causing issues, with that said you appear to have bitdefender installed so they can conflict with each other.
Try removing Avast and see if that fixes the issue, if not remove Bitdefender and replace it with Microsoft Security Essentials.
Code:
Unable to load image \SystemRoot\system32\drivers\aswMonFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
aswMonFlt+0x1cac6
Code:
Bitdefender Wallet "c:\program files\bitdefender\bitdefender\pwdmanui.exe" --hidden --nowizard NT AUTHORITY\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
It's probably conflicting with Bitdefender.
Make sure you completely remove Avast, try using the removal tool.
www.avast.com/en-gb/uninstall-utility