BSOD Randomly when doing tasks

AmishMan · 20 Jun 2014

Hello I've had this current PC for over 2 or 3 years since I built it and recently in the past months it has been giving me BSOD. Some Examples of things im doing when this happens Uploading Files in dropbox (big files), Downloading torrent files through uTorrent, mainly just those or if im moving stuff around or delete huge amounts of files it just gives.

I know my computer can't do a lot at once since im running a fairly slow CPU(Intel Core 2 Quad Q9550)
So when I do these things I make sure it's the only thing going on.
I have a feeling either my Hard Drive is failing or my RAM might be.

Any help or advice would be much appreciated seeming how this is a growing problem.
Which in other words my computer BSOD number is rising by the week.

Other information I looked into the dump files and its mainly being caused by hal.dll if that helps any not sure.

Thank you,
AmishMan

koolkat77 · 20 Jun 2014

Welcome to the Forum AmishMan,

Reduce items at start-up:

How to Change, Add, or Remove Startup Programs in Windows 7

Perform a clean boot:

How to Troubleshoot a Problem by Performing a Clean Startup in Windows 7 or Vista

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable!:-

hamachi.sys Thu Feb 19 16:36:41 2009 (499D3639)
LogMeIn Hamachi Virtual network interface driver
Driver Reference Table - hamachi.sys

Rt64win7.sys Thu Feb 26 15:04:13 2009 (49A65B0D)
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
Driver Reference Table - Rt64win7.sys

xusb21.sys Fri Aug 14 04:10:17 2009 (4A848F49)
XBox USB wireless controller [br] BSOD issues in Win7 with 2009 driver (found in mid-2012)
Driver Reference Table - xusb21.sys

Scan with Kaspersky TDSSKiller:

Anti-rootkit utility TDSSKiller

ESET online scanner:

Free Online Virus Scanner | ESET

Recommended antivirus software for Windows 7 based on stability compared to others:-

Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

How to Repair Windows 7 System Files with System File Checker

Run Disk Check on your hard disk for file system errors and bad sectors on it:

How to Run Disk Check in Windows 7

Check for heating issues using Speccy or HWmonitor

Upload a screen shot:

Screenshots and Files - Upload and Post in Seven Forums

Post a screenshot of your Hard Drive(s) using Crystal Disk Info software:

CrystalDiskInfo - Software - Crystal Dew World

Run a Hard Drive test:

How to Use SeaTools for DOS and Windows Disk Check Utility

BSOD BUGCHECK SUMMARY

Code:

Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 12:22:38.940 2014 (UTC + 6:00)
System Uptime: 0 days 0:21:17.487
BugCheck A, {8, 2, 0, fffff80002e197f7}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 12:00:25.330 2014 (UTC + 6:00)
System Uptime: 0 days 6:33:29.814
BugCheck A, {8, 2, 0, fffff800034077f7}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 05:25:49.516 2014 (UTC + 6:00)
System Uptime: 0 days 0:01:30.000
BugCheck A, {8, 2, 0, fffff800033eb33e}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 05:23:37.672 2014 (UTC + 6:00)
System Uptime: 0 days 0:01:31.219
BugCheck A, {8, 2, 0, fffff800033f333e}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 05:20:58.157 2014 (UTC + 6:00)
System Uptime: 0 days 0:01:42.704
BugCheck A, {8, 2, 0, fffff800033f07f7}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 05:18:02.332 2014 (UTC + 6:00)
System Uptime: 0 days 2:51:59.863
BugCheck A, {8, 2, 0, fffff80002e207f7}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 02:25:17.265 2014 (UTC + 6:00)
System Uptime: 0 days 0:06:25.796
BugCheck A, {8, 2, 0, fffff80002e1e33e}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Fri Jun 20 02:18:10.573 2014 (UTC + 6:00)
System Uptime: 3 days 13:09:42.041
BugCheck A, {8, 2, 0, fffff800033fc33e}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Sat Jun 14 04:33:54.376 2014 (UTC + 6:00)
System Uptime: 0 days 0:02:55.861
BugCheck A, {8, 2, 0, fffff80002e147f7}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Debug session time: Sat Jun 14 04:29:51.577 2014 (UTC + 6:00)
System Uptime: 16 days 0:03:23.941
BugCheck A, {8, 2, 0, fffff800033f77f7}
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+10bb8 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

AmishMan · 20 Jun 2014

I did all of the above and noticed how it didn't BSOD for awhile but half way into my download only running the one program and web browser it blue screened.
Here's a screen shot from a program call bluescreen viewer and I'll upload the new dump.

koolkat77 · 20 Jun 2014

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\admin\Downloads\AMISH-PC-Fri_06_20_2014_200343_67\062014-22218-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`02e4f000 PsLoadedModuleList = 0xfffff800`03092670
Debug session time: Sat Jun 21 05:54:50.365 2014 (UTC + 6:00)
System Uptime: 0 days 2:07:10.912
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {1800135, 2, 0, fffff880014dc360}

*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+18424 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000001800135, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880014dc360, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030fc100
GetUlongFromAddress: unable to read from fffff800030fc1c0
 0000000001800135 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
ndis! ?? ::FNODOBFM::`string'+15cd
fffff880`014dc360 8b4728          mov     eax,dword ptr [rdi+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff880093ed790 -- (.trap 0xfffff880093ed790)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000001e0 rbx=0000000000000000 rcx=00000000c00bfe21
rdx=fffffa800689ad20 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880014dc360 rsp=fffff880093ed920 rbp=fffffa80045b3000
 r8=fffffa8004724900  r9=0000000000000001 r10=0000000000000001
r11=fffffa80047841a0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
ndis! ?? ::FNODOBFM::`string'+0x15cd:
fffff880`014dc360 8b4728          mov     eax,dword ptr [rdi+28h] ds:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ec41a9 to fffff80002ec4c00

STACK_TEXT:  
fffff880`093ed648 fffff800`02ec41a9 : 00000000`0000000a 00000000`01800135 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`093ed650 fffff800`02ec2e20 : 00000000`00000000 fffffa80`04729a70 00000000`00000000 fffffa80`0689ad20 : nt!KiBugCheckDispatch+0x69
fffff880`093ed790 fffff880`014dc360 : fffffa80`08428960 fffffa80`045b3000 fffffa80`000000a0 fffffa80`057454f0 : nt!KiPageFault+0x260
fffff880`093ed920 fffff880`0964e424 : fffffa80`047841a0 00000000`00000000 fffffa80`04724900 fffffa80`045b3000 : ndis! ?? ::FNODOBFM::`string'+0x15cd
fffff880`093ed9c0 fffffa80`047841a0 : 00000000`00000000 fffffa80`04724900 fffffa80`045b3000 fffffa80`04729c00 : Rt64win7+0x18424
fffff880`093ed9c8 00000000`00000000 : fffffa80`04724900 fffffa80`045b3000 fffffa80`04729c00 00000000`000001c0 : 0xfffffa80`047841a0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Rt64win7+18424
fffff880`0964e424 ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  Rt64win7+18424

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Rt64win7

IMAGE_NAME:  Rt64win7.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  536b4de6

FAILURE_BUCKET_ID:  X64_0xD1_Rt64win7+18424

BUCKET_ID:  X64_0xD1_Rt64win7+18424

Followup: MachineOwner
---------

3: kd> lmvm Rt64win7
start             end                 module name
fffff880`09636000 fffff880`0971d000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        Thu May 08 15:27:02 2014 (536B4DE6)
    CheckSum:         000E7862
    ImageSize:        000E7000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Seems like the same BSOD but with the newer driver version.

Could you uninstall Utorrent for the time being.

AmishMan · 21 Jun 2014

Yeah I unistalled it and now it's fine no problems for now I'll say it's been resolved in about a week of nothing happening. Thank you for the help!

koolkat77 · 21 Jun 2014

Good luck. :)