Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: BSOD random times ngfilter.sys

23 Jul 2014   #1

WIn 7 ent x64
BSOD random times ngfilter.sys

I leave this Win 7 ent x64 company laptop on all the time (docked). Half of the mornings it has rebooted with this BSOD. I have updated all the drivers I could find. Any help appreciated.

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\072214-152225-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18229.amd64fre.win7sp1_gdr.130801-1533
Machine Name:
Kernel base = 0xfffff800`03600000 PsLoadedModuleList = 0xfffff800`038436d0
Debug session time: Tue Jul 22 16:58:28.319 2014 (UTC - 4:00)
System Uptime: 0 days 21:24:52.531
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* *
* Bugcheck Analysis *
* *

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff880046f3800, fffff88003df4098, fffff88003df38f0}

Unable to load image \SystemRoot\system32\DRIVERS\ngfilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ngfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for ngfilter.sys
Probably caused by : ngfilter.sys ( ngfilter+2704 )

Followup: MachineOwner

2: kd> !analyze -v
* *
* Bugcheck Analysis *
* *

This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff880046f3800, The address that the exception occurred at
Arg3: fffff88003df4098, Exception Record Address
Arg4: fffff88003df38f0, Context Record Address

Debugging Details:

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

fffff880`046f3800 8b4138 mov eax,dword ptr [rcx+38h]

EXCEPTION_RECORD: fffff88003df4098 -- (.exr 0xfffff88003df4098)
ExceptionAddress: fffff880046f3800 (afd!AfdCheckAndReferenceEndpoint+0x0000000000000002)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000038
Attempt to read from address 0000000000000038

CONTEXT: fffff88003df38f0 -- (.cxr 0xfffff88003df38f0)
rax=ffff000007afb293 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000022 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880046f3800 rsp=fffff88003df42d8 rbp=fffff88003df4438
r8=fffff88003df4460 r9=0000000000000000 r10=fffff88003df4460
r11=0000000000000022 r12=fffffa80440838d0 r13=fffff88003df4430
r14=fffffa804c1f0d88 r15=fffff88003df4a80
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
fffff880`046f3800 8b4138 mov eax,dword ptr [rcx+38h] ds:002b:00000000`00000038=????????
Resetting default scope




ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 0000000000000038

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800038ad100

fffff880`206ce704 ?? ???



LAST_CONTROL_TRANSFER: from fffff88004757883 to fffff880046f3800

fffff880`03df42d8 fffff880`04757883 : 00000000`00000000 fffff880`03df4430 fffffa80`4f50cd88 fffff880`03df4a80 : afd!AfdCheckAndReferenceEndpoint+0x2
fffff880`03df42e0 fffff880`206ce704 : 00000000`00000026 fffff880`03df43e0 fffff880`03df4400 00000000`00000801 : afd!AfdReceiveDatagramEventHandler+0x53
fffff880`03df43d0 00000000`00000026 : fffff880`03df43e0 fffff880`03df4400 00000000`00000801 00000000`00000000 : ngfilter+0x2704
fffff880`03df43d8 fffff880`03df43e0 : fffff880`03df4400 00000000`00000801 00000000`00000000 504e474e`00000200 : 0x26
fffff880`03df43e0 fffff880`03df4400 : 00000000`00000801 00000000`00000000 504e474e`00000200 00000000`00000026 : 0xfffff880`03df43e0
fffff880`03df43e8 00000000`00000801 : 00000000`00000000 504e474e`00000200 00000000`00000026 fffff880`00000026 : 0xfffff880`03df4400
fffff880`03df43f0 00000000`00000000 : 504e474e`00000200 00000000`00000026 fffff880`00000026 fffff880`03df4438 : 0x801


SYMBOL_NAME: ngfilter+2704


MODULE_NAME: ngfilter

IMAGE_NAME: ngfilter.sys


STACK_COMMAND: .cxr 0xfffff88003df38f0 ; kb

FAILURE_BUCKET_ID: X64_0x7E_ngfilter+2704

BUCKET_ID: X64_0x7E_ngfilter+2704

Followup: MachineOwner

My System SpecsSystem Spec
23 Jul 2014   #2

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit

Hi tika9119.

Please post a report following Windows Genuine and Activation Issue Posting Instructions before we start troubleshooting.
My System SpecsSystem Spec
23 Jul 2014   #3

WIn 7 ent x64

Diagnostic Report (1.9.0027.0):
My System SpecsSystem Spec

24 Jul 2014   #4

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10

This is a KMS license owned by DELL itself as far as I can tell - you are very likely to be severely restricted in what you are able to do in terms of troubleshooting, as the Group Policy settings are probably such as to lock you out of much of the system.

I think you'd be well advised to ask your System Admin for assistance - their reaction is very likely to be a reformat and reinstall.
My System SpecsSystem Spec
24 Jul 2014   #5

WIn 7 ent x64

I really do not want to use my company help desk to support this because, you are right, they will have me re-image the laptop. This is at least a day long process, sometimes longer.

I have local admin rights and I have found very little I that has locked me out via group policy that I have not been able to work around. If I could find out what is causing these BSOD and then discover that I am unable to fixed it due to domain restrictions, I would then call my help desk.

If you could give some direction as to the root of the issue that would be very helpful.
My System SpecsSystem Spec

 BSOD random times ngfilter.sys

Thread Tools

Similar help and support threads
Thread Forum
BSOD at random times, at least 3 times per week. Win 7 64 Ultimate
This is my custom build computer of 4 - 5 years. The past year or so i keep getting random BSOD. There are times right after i do a windows update, the very next day my computer will crash. I am running the latest nvidia drivers, and also run windows update. Some times the error says Memory...
BSOD Help and Support
Random BSOD problems in the past 2 days. Random errors at random times
Three days ago my water cooling failed (got up to 77C while gaming is when I noticed the problem as my CPU should not go over 62C). I decided to install an aftermarket heatsink instead of a new water cooling system ,and add a few more fans just to make sure my whole motherboard was getting plenty...
BSOD Help and Support
BSOD. 2 or 3 times a day at Random times.
Hi. I get a BSOD on my computer at most, twice a day. I am not sure what causes it as it happens at random times in the day. I have attached the SF Diagnostic File if that helps. Thanks, Kieran
BSOD Help and Support
BSoD at random times and pink graphics at times,
Hello, New member here and thanks in advance for looking. I have a home built w7 Home Premium box we use almost exclusively for Windows Media Center. I started getting bsod's about a month ago and before that got distorted *pinkish* video on restart or bootup at times. Tried using...
BSOD Help and Support
BSOD at random times, 2 times/day in the last 4 days
Hi, I have started getting BSODs twice a day at random moments on my computer in the last 4 days. I've tried to figure out the reason for the BSODs but I'm not sure. I often get the * Hardware failure * bsod. Now I know these can be caused by a number of things, so that is why I included with...
BSOD Help and Support
BSOD at random times, other times just lock up
I have been getting BSOD's for the last week or so. I can't read the entire screen in time when it happens but I do catch something about a hardware issue. This has happened several times while playing video games, but others when surfing the web, or just doing some typing. I've checked all of...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:18.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App