Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Random BSOD Usually with System Idle/Unattended

06 Jun 2015   #1
Randall G

CA - California Windows 7 Home Premium 64 Bit
Random BSOD Usually with System Idle/Unattended

The computer has been experiencing random freezing/BSOD since new, May of 2011. Has gotten much worse lately (BSOD every day or every few days). The BSOD primarily occur while the system is idle/unattended.
I’ve performed 6(+) memtest passes, and chkdsk of the hard-drive (no issues noted).

Thanks so much!

My System SpecsSystem Spec
07 Jun 2015   #2

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit

Welcome to the forum.

 Clean boot
Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:
  • Click on the
  • Type CMD on Search
  • Left click and Run as Administrator
  • Type SFC /scannow
Full tutorial here:

Please update this driver: Driver Reference Table

See if that stops the bsod.

Sometimes drivers remain and do not get completely uninstalled.

 Driver Removal Process:

  • Download Driver Sweeper to the desired location.
  • Extract the files from the zip.
  • Uninstall the driver Program & Features - Control Panel.
  • Run Driver Sweeper, check the drivers you want to uninstall or clean registry leftovers of.
Link to full tutorial: Drivers - Clean Left over Files after Uninstalling

Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\YUSSIKAT\Downloads\RANDALL_S-VM-Sat_06_06_2015_195959_50\060615-20295-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*
Symbol search path is: SRV*c:\symbols*
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18869.amd64fre.win7sp1_gdr.150525-0603
Machine Name:
Kernel base = 0xfffff800`0321e000 PsLoadedModuleList = 0xfffff800`03465730
Debug session time: Sun Jun  7 07:57:59.582 2015 (UTC + 6:00)
System Uptime: 1 days 7:47:29.784
Loading Kernel Symbols

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa8019e66178, 2, 1, fffff8000329ca15}

*** WARNING: Unable to verify timestamp for npf.sys
*** ERROR: Module load completed but symbols could not be loaded for npf.sys
Probably caused by : npf.sys ( npf+2bb2 )

Followup: MachineOwner

0: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arg1: fffffa8019e66178, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000329ca15, address which referenced memory

Debugging Details:

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034cf100
GetUlongFromAddress: unable to read from fffff800034cf1c0
 fffffa8019e66178 Nonpaged pool


fffff800`0329ca15 f0480fba2900    lock bts qword ptr [rcx],0





ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

TRAP_FRAME:  fffff880009e0590 -- (.trap 0xfffff880009e0590)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=fffffa8019e66178
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000329ca15 rsp=fffff880009e0720 rbp=fffffa8019e66178
 r8=fffffa8006ca38f8  r9=0000000000000000 r10=fffffffffffffffe
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
fffff800`0329ca15 f0480fba2900    lock bts qword ptr [rcx],0 ds:fffffa80`19e66178=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003291e69 to fffff800032928c0

fffff880`009e0448 fffff800`03291e69 : 00000000`0000000a fffffa80`19e66178 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`009e0450 fffff800`03290ae0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009e0590 fffff800`0329ca15 : 00000000`00000000 fffff880`0166e5b2 fffff880`00000000 fffffa80`00000000 : nt!KiPageFault+0x260
fffff880`009e0720 fffff880`0616abb2 : 00000000`00000001 fffffa80`089a71a0 fffffa80`06e3f460 fffffa80`19e63000 : nt!KeAcquireSpinLockRaiseToDpc+0x55
fffff880`009e0770 00000000`00000001 : fffffa80`089a71a0 fffffa80`06e3f460 fffffa80`19e63000 00000000`00060000 : npf+0x2bb2
fffff880`009e0778 fffffa80`089a71a0 : fffffa80`06e3f460 fffffa80`19e63000 00000000`00060000 fffff880`009e0798 : 0x1
fffff880`009e0780 fffffa80`06e3f460 : fffffa80`19e63000 00000000`00060000 fffff880`009e0798 fffff880`009e0798 : 0xfffffa80`089a71a0
fffff880`009e0788 fffffa80`19e63000 : 00000000`00060000 fffff880`009e0798 fffff880`009e0798 00000000`00000000 : 0xfffffa80`06e3f460
fffff880`009e0790 00000000`00060000 : fffff880`009e0798 fffff880`009e0798 00000000`00000000 fffffa80`06e3f460 : 0xfffffa80`19e63000
fffff880`009e0798 fffff880`009e0798 : fffff880`009e0798 00000000`00000000 fffffa80`06e3f460 fffff880`0170938b : 0x60000
fffff880`009e07a0 fffff880`009e0798 : 00000000`00000000 fffffa80`06e3f460 fffff880`0170938b fffffa80`19c13780 : 0xfffff880`009e0798
fffff880`009e07a8 00000000`00000000 : fffffa80`06e3f460 fffff880`0170938b fffffa80`19c13780 fffffa80`19c13780 : 0xfffff880`009e0798


fffff880`0616abb2 ??              ???


SYMBOL_NAME:  npf+2bb2

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  npf.sys


FAILURE_BUCKET_ID:  X64_0xA_npf+2bb2

BUCKET_ID:  X64_0xA_npf+2bb2


FAILURE_ID_HASH_STRING:  km:x64_0xa_npf+2bb2

FAILURE_ID_HASH:  {5f20b508-1aab-ff9b-98bc-ef920917c6aa}

Followup: MachineOwner

0: kd> lmvm npf
start             end                 module name
fffff880`06168000 fffff880`06174000   npf      T (no symbols)           
    Loaded symbol image file: npf.sys
    Image path: \??\C:\Windows\system32\drivers\npf.sys
    Image name: npf.sys
    Timestamp:        Fri Jun 25 22:50:58 2010 (4C24DE72)
    CheckSum:         00011844
    ImageSize:        0000C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
My System SpecsSystem Spec
07 Jun 2015   #3
Randall G

CA - California Windows 7 Home Premium 64 Bit

So far I have:

1. Ran sfc /scannow from within windows multiple times--unable to fix all corrupt files.
2. Download and ran the "System Readiness Tool."
3. Repeated sfc /scannow--still have corrupt files.
4. Ran sfc /scannow from boot command (see attached pic)--still corrupt files.
5. Performed chkdsk /R of hard-drive. No issues noted (see attached pic).
6. Generated sfcdetails.txt (attached).

System restore is not the best option for me, considering the BSODs have been occurring for a long time now (albeit, not nearly as often...used to be around monthly, now close to daily). That is, any restore point may be corrupt.

Any thoughts on the sfc.details.txt file?

Thanks in advance!
My System SpecsSystem Spec

07 Jun 2015   #4
Randall G

CA - California Windows 7 Home Premium 64 Bit

Looks like Windows systems files aren't corrupt, as I only see these files identified as being unrepairable in the sfcdetails.txt file:

• telemetry.ASM-WindowsDefault.json

Which, according to this link, are incorrectly being flagged as corrupt:

"This update contains the following files that are occasionally updated by the Diagnostic Tracking Service:


The two files are marked as static files in the update. When an advanced user runs the System File Checker Tool (sfc.exe), the files are unintentionally flagged as corrupted. There is no impact or actual corruption on a device running this update, and a later service update will resolve this issue."

I'll move on to updating drivers.
My System SpecsSystem Spec
08 Jun 2015   #5

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10

KB3022345 strikes again
The problem here is that the KB (contrary to MS statements) does appear to cause problems in a few machines - or at least problems disappear when the update is uninstalled.
I would recommend uninstalling it, and then doing a Check for Udpdates, and Hiding the update if/when it reappears.
My System SpecsSystem Spec
08 Jun 2015   #6
Randall G

CA - California Windows 7 Home Premium 64 Bit

Alas, KB3022345 was installed 5/13/15, which is about 2 months after the BSODs became frequent. On the other hand, I did install Netgear’s Netgenie on 3/13/15: the BSOD’s started occurring frequently 3 days later. Netgenie is associated with npf.sys, which koolkat77 suggested updating in his post above.

BSOD Since Dec MS OS Patch - Microsoft Community
Stuttering or jerky mouse leading to a system crash!

Version is installed on my PC—Netgear doesn’t let on to which version is available at their website, nor do they provide any details (that I can find) on what’s supposed to be fixed:

genie Landing Page | Apps | Discover | Home | NETGEAR

Guess you have to download it to find out which version it is? Regardless, I’ve uninstalled the program, which isn’t necessary to access router settings. I’ll be sure to post back here if this corrects the BSOD problem.

My System SpecsSystem Spec
04 Jul 2015   #7
Randall G

CA - California Windows 7 Home Premium 64 Bit

It's been four weeks now, and no new BSODs. One of two things corrected the problem:

1) SFC /scannow
2) Uninstalling Netgear’s Netgenie.

Note I did not uninstall KB3022345.


My System SpecsSystem Spec

 Random BSOD Usually with System Idle/Unattended

Thread Tools

Similar help and support threads
Thread Forum
BSOD during random, unattended idle moments - BCP2 FFFFFA8003FC1CB0
Win 7 x64 Windows Home Premium Tower i7 2600k, gt 250, 16g ram, 5 2t hardrives My computer crashes every other day or so. I return to it in the morning or such, and it has restarted. Looking for your genius help/analysis to narrow down my troubleshooting. I have attached my output file. ...
BSOD Help and Support
BSOD random even when system idle all drivers BIOS current PLease help
I am at my wits ends and I dont know what is wrong! I have tried everything on the web to fix this. My new system randomly crashes and BSOD on me. I have updated the bios chipset everything I can think of. The Mobo I suspect is to blame its been a nightmare from day one. PLease someone help me!!!!...
BSOD Help and Support
Random reboots when system is idle
Is Windows 7 . . . - x86 (32-bit) or x64 ? x64 - the original installed OS on the system? YES - an OEM or full retail version? Retail OEM - OEM = came pre-installed on system - Full Retail = you purchased it from retailer - What is the age of system (hardware)? 3 years old - What is the...
BSOD Help and Support
Random BSOD 3B (usually unattended) - Windows 7 x64
Been getting random reboots with bugcheck 3B listed on an almost daily basis. On every occasion it has happened when I have been away from the computer. I ran verifier.exe and that flagged up a bigcheck c9 for stream.sys but that file doesn't seem to be damaged and is identical to the...
BSOD Help and Support
Random BSOD, cant pin down, happens even while system idle
Having random crashes and restarts. Cant find a cause, cant figure out how to read the bsod error report, otherwise I would stop bothering you guys on here. Crashed many times last few days even while idle, and while internet browsing. Deleted the earlier dumps so I can have a smaller managable...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 20:58.
Twitter Facebook Google+