BSOD: Paused YouTube video, left for 15 min, system rebooted

Only one dump makes it a little harder to find a definitive cause, it looks like Symantec/Norton network security driver could well be the cause of the problem - Driver Reference Table - SYMNETS.SYS

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 1, fffff80002cce0cf}

*** WARNING: Unable to verify timestamp for SYMNETS.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMNETS.SYS
Probably caused by : NETIO.SYS ( NETIO!WfpExpireEntryLru+17 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cce0cf, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002efd100
GetUlongFromAddress: unable to read from fffff80002efd1c0
 0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
fffff800`02cce0cf 488713          xchg    rdx,qword ptr [rbx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  nis.exe

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre

TRAP_FRAME:  fffff8800bbcff30 -- (.trap 0xfffff8800bbcff30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800b980ad0 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff8800bbd0130 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cce0cf rsp=fffff8800bbd00c0 rbp=0000000000000004
 r8=fffff8800bbd0130  r9=fffff8800198ac90 r10=0000000000000000
r11=0000000000000040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f:
fffff800`02cce0cf 488713          xchg    rdx,qword ptr [rbx] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cc3469 to fffff80002cc3ec0

STACK_TEXT:  
fffff880`0bbcfde8 fffff800`02cc3469 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0bbcfdf0 fffff800`02cc20e0 : 00000000`00000010 fffff880`0bbd0120 00000000`0000000b 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0bbcff30 fffff800`02cce0cf : 00000000`00000003 00000000`00000002 00000000`00000003 00000000`00000002 : nt!KiPageFault+0x260
fffff880`0bbd00c0 fffff880`017579c7 : 00000000`00000004 fffff880`0bbd03a0 00000000`0000d40d fffffa80`0c7eb7c8 : nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f
fffff880`0bbd0110 fffff880`018e608d : fffffa80`10c42580 fffffa80`0cfc8550 fffff880`0bbd03a0 00000000`0000d40d : NETIO!WfpExpireEntryLru+0x17
fffff880`0bbd0160 fffff880`018ad7b7 : 00000000`00000004 fffff8a0`08780032 fffff880`0bbd03d0 fffffa80`00000001 : tcpip!WfpAleCloseRemoteEndpointConnection+0x2d
fffff880`0bbd0190 fffff880`01925e5b : fffffa80`10c42580 fffffa80`107bb56a 00000000`00000001 fffffa80`10c42580 : tcpip! ?? ::FNODOBFM::`string'+0x20f72
fffff880`0bbd02e0 fffff880`019261e2 : 00000dd4`0000000b fffffa80`107bb4a0 fffffa80`09f6cea0 00000000`00000001 : tcpip!WfpAleHandleSendCompletion+0xeb
fffff880`0bbd0400 fffff880`019306b2 : 00000000`00000000 00000000`00000001 00000000`00000000 fffffa80`09fb84e8 : tcpip!WfpAlepAuthorizeSendCompletion+0x32
fffff880`0bbd0450 fffff880`01551af2 : 00000000`00000dd4 00000000`00000dd4 fffffa80`102a2e00 00000000`00000001 : tcpip!WfpAleCompleteOperation+0x162
fffff880`0bbd04f0 fffff880`0b41e7bb : 00000000`00000000 00000000`00000000 fffffa80`1055b130 00000000`00000030 : fwpkclnt!FwpsCompleteOperation0+0x1e
fffff880`0bbd0520 00000000`00000000 : 00000000`00000000 fffffa80`1055b130 00000000`00000030 00000000`00000dd4 : SYMNETS+0x1e7bb


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!WfpExpireEntryLru+17
fffff880`017579c7 488b4310        mov     rax,qword ptr [rbx+10h]

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  NETIO!WfpExpireEntryLru+17

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  5294760d

IMAGE_VERSION:  6.1.7601.18327

FAILURE_BUCKET_ID:  X64_0xA_NETIO!WfpExpireEntryLru+17

BUCKET_ID:  X64_0xA_NETIO!WfpExpireEntryLru+17

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xa_netio!wfpexpireentrylru+17

FAILURE_ID_HASH:  {fcdee258-ad7b-b100-5f3a-ac9544c5fd1f}

Followup: MachineOwner
---------