Windows 7 Daily Freeze and BSOD

Lorian · 08 Jan 2010

Hi

I'm hoping someone can help me with an infuriating issue I have with Win 7 Ultimate x64.

It crashes once, and once only, within the first 1-2 hours of use every single day.

It's always the same, at somepoint within the first 2-hours of use after the first boot of the day Windows will freeze then bluescreen about 30 seconds later.

Once it's rebooted it'll be absolutely fine for the remainder of the day. I've had this issue every day for 3 months now since doing a complete clean install of Win 7 Ultimate x64.

My hardware is:

ASUS P6T
Intel Core i7 920 2.66Ghz (Nehalem) (Socket LGA1366) (not OC'd)
Corsair XMS3 6GB (3x2GB) DDR3 PC3-12800C9 (1600MHz) Tri-Channel (TR3X6G1600C9)
Sapphire ATI Radeon HD 4850 512MB GDDR3
Crucial M225 64GB 2.5" SATA-II Solid State Hard Drive (CT64M225)
Win 7 Ultimate x64

All drivers for everything are the latest versions including all chipset drivers and gfx card.

Here is the list of things I have tried.

BIOS versions 0403, 0502, 0507, 0603, 0707, 0801, now running 0904
Ran Memtest for 8 passes, all fine.
Scanned all system files
Unplugged all external USB devices
Unplugged all internal drives except boot drive
Stopped Overclocking
Disabled Sleep/Hibernate
Replaced primary HD (was WD Raptor) for a new SSD with complete re-install
Removed and reseated RAM
Replaced Heasink/Fan with new Noctua NH-U12P
Removed ESET Smart Security and switched to Microsoft Security Essentials
Performed full scan with MSE and Spybot

Yet still every day it hangs..

It's driving me crazy..

I've attached the last two minidump files.. any help would be greatly appreciated.

Thanks

L

TimStitt · 08 Jan 2010

Hi Lorian,

Please double-check that you have the latest hardware drivers. The first dump suggests a hardware fault on the intel processor chip, so I'd start with the latest drivers for this and the motherboard.

I know you mentioned drivers; but I just wanted to check that they came from the manufacturers website (as these are the latest) and not windows automatic update (which may not have the latest drivers yet).

Also check that the motherboard is dust free and that the processor fan is not obstructed in anyway.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Tim\Desktop\010610-12136-01\010610-12136-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`0301e000 PsLoadedModuleList = 0xfffff800`0325be50
Debug session time: Thu Jan  7 00:20:58.788 2010 (GMT+11)
System Uptime: 0 days 0:00:06.928
Loading Kernel Symbols
................................................
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 124, {0, fffffa80067e34f8, 0, 0}

Probably caused by : hardware

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa80067e34f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.

Debugging Details:
------------------


BUGCHECK_STR:  0x124_GenuineIntel

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`033626f0 fffff800`032d8a89 : fffffa80`067e34d0 fffffa80`05519680 00000000`0000000b 00000000`00000001 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`03362c10 fffff800`031ba547 : fffffa80`067e34d0 fffff800`032335f8 fffffa80`05519680 00000002`00000005 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`03362c40 fffff800`03122b95 : fffff800`03295360 fffffa80`06506f18 fffffa80`06506f10 fffffa80`05519680 : nt!WheapProcessWorkQueueItem+0x57
fffff880`03362c80 fffff800`0309d161 : fffff880`0115ae00 fffff800`03122b70 fffffa80`05519680 936b936b`a690a690 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`03362cb0 fffff800`03333166 : 8c068c06`40484048 fffffa80`05519680 00000000`00000080 fffffa80`0548d890 : nt!ExpWorkerThread+0x111
fffff880`03362d40 fffff800`0306e486 : fffff880`0316a180 fffffa80`05519680 fffff880`031750c0 d443d443`a5cca5cc : nt!PspSystemThreadStartup+0x5a
fffff880`03362d80 00000000`00000000 : fffff880`03363000 fffff880`0335d000 fffff880`03f18540 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: hardware

IMAGE_NAME:  hardware

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE_PRV

BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE_PRV

Followup: MachineOwner
---------

Zardoc · 08 Jan 2010

Sorry Timstit, wasn't looking at the screen. Didn't notice your post. Well, two heads are better than one LOL.

Hi here is your bug report.
For sure it's a hardware issue. I had a problem with my video card. I thought it was the processor or the board. You are going to have to do some manual troubleshooting. Remove everything and keep your machine barebones (1 dvd, one hard drive, no usb, min Ram) stock settings. Try to trade off vid card. Check temps. Set bios too load default settings.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [E:\Zardoc\Download\Screen Savers and themes\Windows 7 Themes\Urban Helix\010610-12136-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is: I:\Win7 DVD
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`0301e000 PsLoadedModuleList = 0xfffff800`0325be50
Debug session time: Wed Jan  6 08:20:58.788 2010 (GMT-5)
System Uptime: 0 days 0:00:06.928
Loading Kernel Symbols
................................................
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 124, {0, fffffa80067e34f8, 0, 0}
Probably caused by : hardware
Followup: MachineOwner
---------
4: kd> !analyze -v;!thread;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa80067e34f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.
Debugging Details:
------------------

BUGCHECK_STR:  0x124_GenuineIntel
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
CURRENT_IRQL:  0
STACK_TEXT:  
fffff880`033626f0 fffff800`032d8a89 : fffffa80`067e34d0 fffffa80`05519680 00000000`0000000b 00000000`00000001 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`03362c10 fffff800`031ba547 : fffffa80`067e34d0 fffff800`032335f8 fffffa80`05519680 00000002`00000005 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`03362c40 fffff800`03122b95 : fffff800`03295360 fffffa80`06506f18 fffffa80`06506f10 fffffa80`05519680 : nt!WheapProcessWorkQueueItem+0x57
fffff880`03362c80 fffff800`0309d161 : fffff880`0115ae00 fffff800`03122b70 fffffa80`05519680 936b936b`a690a690 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`03362cb0 fffff800`03333166 : 8c068c06`40484048 fffffa80`05519680 00000000`00000080 fffffa80`0548d890 : nt!ExpWorkerThread+0x111
fffff880`03362d40 fffff800`0306e486 : fffff880`0316a180 fffffa80`05519680 fffff880`031750c0 d443d443`a5cca5cc : nt!PspSystemThreadStartup+0x5a
fffff880`03362d80 00000000`00000000 : fffff880`03363000 fffff880`0335d000 fffff880`03f18540 00000000`00000000 : nt!KxStartSystemThread+0x16

STACK_COMMAND:  kb
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: hardware
IMAGE_NAME:  hardware
DEBUG_FLR_IMAGE_TIMESTAMP:  0
FAILURE_BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE_PRV
BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE_PRV
Followup: MachineOwner
---------
GetPointerFromAddress: unable to read from fffff800032c6000
THREAD fffffa8005519680  Cid 0004.0030  Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 4
Not impersonating
GetUlongFromAddress: unable to read from fffff80003204b74
Owning Process            fffffa800548d890       Image:         System
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      444          
Context Switch Count      92             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0xfffff8000309d050)
Stack Init fffff88003362db0 Current fffff88003362370
Base fffff88003363000 Limit fffff8800335d000 Call 0
Priority 12 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`033626f0 fffff800`032d8a89 : fffffa80`067e34d0 fffffa80`05519680 00000000`0000000b 00000000`00000001 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`03362c10 fffff800`031ba547 : fffffa80`067e34d0 fffff800`032335f8 fffffa80`05519680 00000002`00000005 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`03362c40 fffff800`03122b95 : fffff800`03295360 fffffa80`06506f18 fffffa80`06506f10 fffffa80`05519680 : nt!WheapProcessWorkQueueItem+0x57
fffff880`03362c80 fffff800`0309d161 : fffff880`0115ae00 fffff800`03122b70 fffffa80`05519680 936b936b`a690a690 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`03362cb0 fffff800`03333166 : 8c068c06`40484048 fffffa80`05519680 00000000`00000080 fffffa80`0548d890 : nt!ExpWorkerThread+0x111
fffff880`03362d40 fffff800`0306e486 : fffff880`0316a180 fffffa80`05519680 fffff880`031750c0 d443d443`a5cca5cc : nt!PspSystemThreadStartup+0x5a
fffff880`03362d80 00000000`00000000 : fffff880`03363000 fffff880`0335d000 fffff880`03f18540 00000000`00000000 : nt!KxStartSystemThread+0x16
rax=fffffa8006880000 rbx=fffffa80067e34f8 rcx=fffff88003362730
rdx=fffff88002f71000 rsi=0000000000000000 rdi=fffffa8006880000
rip=fffff800034c43cc rsp=fffff880033626f0 rbp=0000000000000001
 r8=000000000000f1e0  r9=000000000000060c r10=00000000000007ff
r11=000000000000060c r12=fffff800032953c0 r13=0000000000000001
r14=0000000000000000 r15=0000000000000001
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!WheapCreateLiveTriageDump+0x6c:
fffff800`034c43cc 48897c2438      mov     qword ptr [rsp+38h],rdi ss:0018:fffff880`03362728=fffffa8000000910
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`033626f0 fffff800`032d8a89 : fffffa80`067e34d0 fffffa80`05519680 00000000`0000000b 00000000`00000001 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`03362c10 fffff800`031ba547 : fffffa80`067e34d0 fffff800`032335f8 fffffa80`05519680 00000002`00000005 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`03362c40 fffff800`03122b95 : fffff800`03295360 fffffa80`06506f18 fffffa80`06506f10 fffffa80`05519680 : nt!WheapProcessWorkQueueItem+0x57
fffff880`03362c80 fffff800`0309d161 : fffff880`0115ae00 fffff800`03122b70 fffffa80`05519680 936b936b`a690a690 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`03362cb0 fffff800`03333166 : 8c068c06`40484048 fffffa80`05519680 00000000`00000080 fffffa80`0548d890 : nt!ExpWorkerThread+0x111
fffff880`03362d40 fffff800`0306e486 : fffff880`0316a180 fffffa80`05519680 fffff880`031750c0 d443d443`a5cca5cc : nt!PspSystemThreadStartup+0x5a
fffff880`03362d80 00000000`00000000 : fffff880`03363000 fffff880`0335d000 fffff880`03f18540 00000000`00000000 : nt!KxStartSystemThread+0x16
start             end                 module name
fffff800`00bba000 fffff800`00bc4000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`0301e000 fffff800`035fb000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff800`035fb000 fffff800`03644000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00cf0000 fffff880`00d34000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00d34000 fffff880`00d48000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00d48000 fffff880`00da6000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e2d000 fffff880`00ed1000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ed1000 fffff880`00ee0000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ee0000 fffff880`00f37000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f37000 fffff880`00f40000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f40000 fffff880`00f4a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f4a000 fffff880`00f7d000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f7d000 fffff880`00f8a000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00f8a000 fffff880`00f9f000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f9f000 fffff880`00fb4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0105f000 fffff880`010bb000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`010bb000 fffff880`010c2000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`010c2000 fffff880`010d2000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`010d2000 fffff880`010ec000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`010ec000 fffff880`010f5000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010f5000 fffff880`0111f000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`0111f000 fffff880`0112a000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`0112a000 fffff880`01176000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01176000 fffff880`0118a000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0118a000 fffff880`011e8000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01254000 fffff880`013f7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`0143a000 fffff880`01450000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01450000 fffff880`01480000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01480000 fffff880`0148e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0148e000 fffff880`0149a000   dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0149a000 fffff880`014a3000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`014a3000 fffff880`014b6000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`014d3000 fffff880`01546000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01546000 fffff880`01557000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`01557000 fffff880`01561000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01561000 fffff880`015ad000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`015ad000 fffff880`015e7000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01600000 fffff880`01610000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`01610000 fffff880`01618000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01618000 fffff880`0162a000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0162a000 fffff880`01633000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01635000 fffff880`01727000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01727000 fffff880`01787000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01787000 fffff880`017b2000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`017b2000 fffff880`017fc000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
Mini Kernel Dump does not contain unloaded driver list
start             end                 module name
fffff880`00ee0000 fffff880`00f37000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`0111f000 fffff880`0112a000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`010ec000 fffff880`010f5000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010f5000 fffff880`0111f000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01450000 fffff880`01480000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d48000 fffff880`00da6000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`014d3000 fffff880`01546000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01480000 fffff880`0148e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0143a000 fffff880`01450000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0149a000 fffff880`014a3000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0148e000 fffff880`0149a000   dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`014a3000 fffff880`014b6000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01176000 fffff880`0118a000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0112a000 fffff880`01176000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01557000 fffff880`01561000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`017b2000 fffff880`017fc000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`035fb000 fffff800`03644000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0162a000 fffff880`01633000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff800`00bba000 fffff800`00bc4000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01787000 fffff880`017b2000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`00cf0000 fffff880`00d34000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`010d2000 fffff880`010ec000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f40000 fffff880`00f4a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0118a000 fffff880`011e8000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01618000 fffff880`0162a000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01635000 fffff880`01727000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01727000 fffff880`01787000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff800`0301e000 fffff800`035fb000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01254000 fffff880`013f7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`00f8a000 fffff880`00f9f000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f4a000 fffff880`00f7d000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`010bb000 fffff880`010c2000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`010c2000 fffff880`010d2000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01546000 fffff880`01557000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`00d34000 fffff880`00d48000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`015ad000 fffff880`015e7000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01610000 fffff880`01618000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`00f7d000 fffff880`00f8a000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01600000 fffff880`01610000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f9f000 fffff880`00fb4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0105f000 fffff880`010bb000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01561000 fffff880`015ad000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`00e2d000 fffff880`00ed1000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ed1000 fffff880`00ee0000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f37000 fffff880`00f40000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
Mini Kernel Dump does not contain unloaded driver list
Bugcheck code 00000124
Arguments 00000000`00000000 fffffa80`067e34f8 00000000`00000000 00000000`00000000

TimStitt · 08 Jan 2010

Other thoughts:

From an elevated CMD prompt, run an SFC /SCANNOW to ensure that microsoft system files are a-ok?
Check all automatic updates, scans, backups etc to ensure that they are not running inside your 2 hour window. Let's rule this out as an issue
Try clearing the page file at shutdown (open secpol.msc from run, navigate to local policy / security options / 'Shutdown: Clear virtual memory' - set this to ENABLED)
If this is only a new problem, system restore back to an earlier time where it did not occur
Minimise your RAM, corrupt RAM can cause issues to appear almost anywhere. Replace or swap out RAM if you can to verify that none of yours is faulty.
Check all drivers on your system: Enter Verifier.exe in the RUN dialogue box, run through the wizard to create standard settings and check all drivers on the system. Restart when told to.

Zardoc · 08 Jan 2010

Wait, it might not be hardware.

Here is the other bug report. Can you try to boot and choose last good config. or can you restore in any way to a last working version?

There seems to ba a corrupt driver also involved (intelppm.sys) This was an issue with AMD based systems in XP SP3 and also was a problem during betat testing of Win7 but it should not be the case here, Did you try to reboot while Windows was transferring files or running something?

I wouls also try a clean install before tossing everything.

Code:

Loading Dump File [I:\010810-11091-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is: I:\Win7 DVD
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`03057000 PsLoadedModuleList = 0xfffff800`03294e50
Debug session time: Fri Jan  8 07:39:03.926 2010 (GMT-5)
System Uptime: 0 days 2:08:06.066
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 9C, {0, fffff88003101c70, 0, 0}
Probably caused by : intelppm.sys ( intelppm!C1Halt+2 )
Followup: MachineOwner
---------
6: kd> !analyze -v;!thread;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
MACHINE_CHECK_EXCEPTION (9c)
A fatal Machine Check Exception has occurred.
KeBugCheckEx parameters;
    x86 Processors
        If the processor has ONLY MCE feature available (For example Intel
        Pentium), the parameters are:
        1 - Low  32 bits of P5_MC_TYPE MSR
        2 - Address of MCA_EXCEPTION structure
        3 - High 32 bits of P5_MC_ADDR MSR
        4 - Low  32 bits of P5_MC_ADDR MSR
        If the processor also has MCA feature available (For example Intel
        Pentium Pro), the parameters are:
        1 - Bank number
        2 - Address of MCA_EXCEPTION structure
        3 - High 32 bits of MCi_STATUS MSR for the MCA bank that had the error
        4 - Low  32 bits of MCi_STATUS MSR for the MCA bank that had the error
    IA64 Processors
        1 - Bugcheck Type
            1 - MCA_ASSERT
            2 - MCA_GET_STATEINFO
                SAL returned an error for SAL_GET_STATEINFO while processing MCA.
            3 - MCA_CLEAR_STATEINFO
                SAL returned an error for SAL_CLEAR_STATEINFO while processing MCA.
            4 - MCA_FATAL
                FW reported a fatal MCA.
            5 - MCA_NONFATAL
                SAL reported a recoverable MCA and we don't support currently
                support recovery or SAL generated an MCA and then couldn't
                produce an error record.
            0xB - INIT_ASSERT
            0xC - INIT_GET_STATEINFO
                  SAL returned an error for SAL_GET_STATEINFO while processing INIT event.
            0xD - INIT_CLEAR_STATEINFO
                  SAL returned an error for SAL_CLEAR_STATEINFO while processing INIT event.
            0xE - INIT_FATAL
                  Not used.
        2 - Address of log
        3 - Size of log
        4 - Error code in the case of x_GET_STATEINFO or x_CLEAR_STATEINFO
    AMD64 Processors
        1 - Bank number
        2 - Address of MCA_EXCEPTION structure
        3 - High 32 bits of MCi_STATUS MSR for the MCA bank that had the error
        4 - Low  32 bits of MCi_STATUS MSR for the MCA bank that had the error
Arguments:
Arg1: 0000000000000000
Arg2: fffff88003101c70
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------

BUGCHECK_STR:  0x9C_GenuineIntel
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
CURRENT_IRQL:  f
LAST_CONTROL_TRANSFER:  from fffff800030206e0 to fffff800030c8f00
STACK_TEXT:  
fffff880`03101c38 fffff800`030206e0 : 00000000`0000009c 00000000`00000000 fffff880`03101c70 00000000`00000000 : nt!KeBugCheckEx
fffff880`03101c40 fffff800`0301fe1f : 00000000`00000008 00000000`00000000 00000000`00000008 00000000`00000000 : hal!HalpMcaReportError+0x164
fffff880`03101d90 fffff800`03013e88 : 00000000`00000000 fffff880`030f9180 00000000`00000000 00000000`00000000 : hal!HalpMceHandlerWithRendezvous+0x9f
fffff880`03101dc0 fffff800`030c77ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hal!HalHandleMcheck+0x40
fffff880`03101df0 fffff800`030c7613 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxMcheckAbort+0x6c
fffff880`03101f30 fffff880`041979c2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiMcheckAbort+0x153
fffff880`03121c98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : intelppm!C1Halt+0x2

STACK_COMMAND:  kb
FOLLOWUP_IP: 
intelppm!C1Halt+2
fffff880`041979c2 c3              ret
SYMBOL_STACK_INDEX:  6
SYMBOL_NAME:  intelppm!C1Halt+2
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: intelppm
IMAGE_NAME:  intelppm.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc0fd
FAILURE_BUCKET_ID:  X64_0x9C_GenuineIntel_intelppm!C1Halt+2
BUCKET_ID:  X64_0x9C_GenuineIntel_intelppm!C1Halt+2
Followup: MachineOwner
---------
GetPointerFromAddress: unable to read from fffff800032ff000
THREAD fffff880031040c0  Cid 0000.0000  Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 6
Not impersonating
GetUlongFromAddress: unable to read from fffff8000323db74
Owning Process            fffff80003250140       Image:         <Unknown>
Attached Process          fffffa800548d890       Image:         System
fffff78000000000: Unable to get shared data
Wait Start TickCount      0            
Context Switch Count      2788796             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!KiIdleLoop (0xfffff800030d16a0)
Stack Init fffff88003121db0 Current fffff88003121d40
Base fffff88003122000 Limit fffff8800311c000 Call 0
Priority 16 BasePriority 0 UnusualBoost 0 ForegroundBoost 0 IoPriority 0 PagePriority 0
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`03101c38 fffff800`030206e0 : 00000000`0000009c 00000000`00000000 fffff880`03101c70 00000000`00000000 : nt!KeBugCheckEx
fffff880`03101c40 fffff800`0301fe1f : 00000000`00000008 00000000`00000000 00000000`00000008 00000000`00000000 : hal!HalpMcaReportError+0x164
fffff880`03101d90 fffff800`03013e88 : 00000000`00000000 fffff880`030f9180 00000000`00000000 00000000`00000000 : hal!HalpMceHandlerWithRendezvous+0x9f
fffff880`03101dc0 fffff800`030c77ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hal!HalHandleMcheck+0x40
fffff880`03101df0 fffff800`030c7613 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxMcheckAbort+0x6c
fffff880`03101f30 fffff880`041979c2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiMcheckAbort+0x153 (TrapFrame @ fffff880`03101f30)
fffff880`03121c98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : intelppm!C1Halt+0x2
rax=0000000000000006 rbx=0000000000000000 rcx=000000000000009c
rdx=0000000000000000 rsi=fffff88003101f30 rdi=0000000000000000
rip=fffff800030c8f00 rsp=fffff88003101c38 rbp=fffff88003101fb0
 r8=fffff88003101c70  r9=0000000000000000 r10=000000031c8db1b0
r11=000012b9fb67059d r12=fffffa8006a79c60 r13=fffffa8006ac9500
r14=fffffa8006a79c00 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff800`030c8f00 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`03101c40=000000000000009c
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`03101c38 fffff800`030206e0 : 00000000`0000009c 00000000`00000000 fffff880`03101c70 00000000`00000000 : nt!KeBugCheckEx
fffff880`03101c40 fffff800`0301fe1f : 00000000`00000008 00000000`00000000 00000000`00000008 00000000`00000000 : hal!HalpMcaReportError+0x164
fffff880`03101d90 fffff800`03013e88 : 00000000`00000000 fffff880`030f9180 00000000`00000000 00000000`00000000 : hal!HalpMceHandlerWithRendezvous+0x9f
fffff880`03101dc0 fffff800`030c77ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hal!HalHandleMcheck+0x40
fffff880`03101df0 fffff800`030c7613 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxMcheckAbort+0x6c
fffff880`03101f30 fffff880`041979c2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiMcheckAbort+0x153 (TrapFrame @ fffff880`03101f30)
fffff880`03121c98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : intelppm!C1Halt+0x2
start             end                 module name
fffff800`00baa000 fffff800`00bb4000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`0300e000 fffff800`03057000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff800`03057000 fffff800`03634000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`00c0e000 fffff880`00c52000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00c52000 fffff880`00c66000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00c66000 fffff880`00cc4000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00cc4000 fffff880`00d84000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00d84000 fffff880`00d9e000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d9e000 fffff880`00da7000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00da7000 fffff880`00dd1000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00dd1000 fffff880`00ddc000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00e0d000 fffff880`00e22000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e22000 fffff880`00e37000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e37000 fffff880`00e93000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00e93000 fffff880`00e9a000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e9a000 fffff880`00eaa000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00eb0000 fffff880`00f54000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f54000 fffff880`00f63000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f63000 fffff880`00fba000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00fba000 fffff880`00fc3000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fc3000 fffff880`00fcd000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00fcd000 fffff880`01000000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`010b3000 fffff880`010ff000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`010ff000 fffff880`01113000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01113000 fffff880`01171000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01171000 fffff880`011e4000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01205000 fffff880`013a8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013a8000 fffff880`013c2000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`013c2000 fffff880`013d3000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`013d3000 fffff880`013dd000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01400000 fffff880`01412000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01412000 fffff880`0141b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0141d000 fffff880`0150f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0150f000 fffff880`0156f000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0156f000 fffff880`0159a000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0159a000 fffff880`015e4000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`015e4000 fffff880`015f4000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`015f4000 fffff880`015fc000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01800000 fffff880`0180e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0180e000 fffff880`01833000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01833000 fffff880`01843000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`01843000 fffff880`0184c000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0184c000 fffff880`01855000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01855000 fffff880`0185e000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0185e000 fffff880`01869000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01869000 fffff880`0187a000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0187a000 fffff880`01898000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`01898000 fffff880`018a5000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`018dd000 fffff880`01917000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01917000 fffff880`0192d000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0192d000 fffff880`0195d000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01993000 fffff880`019bd000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`019bd000 fffff880`019e9000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`019e9000 fffff880`019f2000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`019f2000 fffff880`019f9000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`02c4a000 fffff880`02cd4000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02cd4000 fffff880`02d19000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`02d19000 fffff880`02d22000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d22000 fffff880`02d48000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`02d48000 fffff880`02d57000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d57000 fffff880`02d72000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02d72000 fffff880`02db2000   truecrypt truecrypt.sys Mon Nov 23 12:22:57 2009 (4B0AC4F1)
fffff880`02db2000 fffff880`02dc6000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`04000000 fffff880`0402c000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`0403f000 fffff880`04090000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04090000 fffff880`0409c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`0409c000 fffff880`040a7000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`040a7000 fffff880`040b6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`040b6000 fffff880`04139000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`04139000 fffff880`04157000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04157000 fffff880`04168000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04168000 fffff880`0416e000   AsIO     AsIO.sys     Mon Aug 03 03:03:16 2009 (4A768BB4)
fffff880`0416e000 fffff880`04194000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04194000 fffff880`041aa000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`041aa000 fffff880`04200000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04200000 fffff880`04221000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04221000 fffff880`0423b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0423b000 fffff880`0424f380   pcouffin pcouffin.sys Tue Dec 05 09:39:30 2006 (457584A2)
fffff880`04250000 fffff880`0425b000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0425b000 fffff880`0426a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0426a000 fffff880`04279000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04279000 fffff880`0427a480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0427b000 fffff880`0428d000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`042ab000 fffff880`042f7000   Rt64win7 Rt64win7.sys Tue Nov 17 12:01:19 2009 (4B02D6DF)
fffff880`042f7000 fffff880`04335000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`04335000 fffff880`0433d000   ASACPI   ASACPI.sys   Wed Jul 15 23:31:29 2009 (4A5E9F11)
fffff880`0433d000 fffff880`04346000   GEARAspiWDM GEARAspiWDM.sys Fri Feb 01 09:06:03 2008 (47A3274B)
fffff880`04346000 fffff880`0434f000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`0434f000 fffff880`0435f000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0435f000 fffff880`04375000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`04375000 fffff880`04399000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04399000 fffff880`043a5000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`043a5000 fffff880`043d4000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`043d4000 fffff880`043ef000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04800000 fffff880`0480d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`0480d000 fffff880`0481e000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0481e000 fffff880`04861000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`04862000 fffff880`04e98000   atikmdag atikmdag.sys Tue Nov 24 22:44:50 2009 (4B0CA832)
fffff880`04e98000 fffff880`04f8c000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04f8c000 fffff880`04fd2000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04fd2000 fffff880`04ff6000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05200000 fffff880`05218000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0522a000 fffff880`05284000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`05284000 fffff880`05299000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`05299000 fffff880`052cb280   RtHDMIVX RtHDMIVX.sys Thu Sep 24 22:13:24 2009 (4ABC2744)
fffff880`052cc000 fffff880`05309000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`05309000 fffff880`0532b000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0532b000 fffff880`05330200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05331000 fffff880`053f9000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`05461000 fffff880`054ae000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`054ae000 fffff880`054d1000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`054d1000 fffff880`054ec000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`054ec000 fffff880`05504000   adfs     adfs.SYS     Mon Nov 03 11:48:14 2008 (490F2B4E)
fffff880`05504000 fffff880`055aa000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`055aa000 fffff880`055b5000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`055b5000 fffff880`055e2000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`055e2000 fffff880`055f4000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`06c00000 fffff880`06c53000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`06c53000 fffff880`06c66000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`06c66000 fffff880`06c7e000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06c7e000 fffff880`06c8c000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06c8c000 fffff880`06ca5000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`06ca5000 fffff880`06cb3000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`06cbb000 fffff880`06ed9b80   RTKVHD64 RTKVHD64.sys Fri Dec 25 05:41:24 2009 (4B3496D4)
fffff880`06eda000 fffff880`06ee6000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`06ee6000 fffff880`06ef4000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`06ef4000 fffff880`06f02000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`06f02000 fffff880`06f0e000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06f0e000 fffff880`06f17000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06f17000 fffff880`06f2a000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06f2a000 fffff880`06f4d000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`06f4d000 fffff880`06f6e000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`06f6e000 fffff880`06f8b000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`06f8b000 fffff880`06f8cf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`06f8d000 fffff880`06f99000   dc3d     dc3d.sys     Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`06f99000 fffff880`06fa1080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06fa2000 fffff880`06fb7000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06fb7000 fffff880`06fc4000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`06fc4000 fffff880`06fd2000   point64k point64k.sys Fri Oct 16 16:08:03 2009 (4AD8D2A3)
fffff880`06fd2000 fffff880`06ff0000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`07400000 fffff880`07431000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)
fffff880`07431000 fffff880`07441000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff880`07441000 fffff880`0744b000   kerneld  kerneld.amd64 Sat Sep 05 13:27:16 2009 (4AA29F74)
fffff880`0744b000 fffff880`07456000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`07456000 fffff880`074c7000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`074d7000 fffff880`07540000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`07540000 fffff880`075d8000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys   unavailable (00000000)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00650000 fffff960`00677000   cdd      cdd.dll      unavailable (00000000)
fffff960`008d0000 fffff960`00931000   ATMFD    ATMFD.DLL    unavailable (00000000)
Unloaded modules:
fffff880`07456000 fffff880`074c7000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07456000 fffff880`074c7000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0195d000 fffff880`0196b000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0196b000 fffff880`01977000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01977000 fffff880`01980000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01980000 fffff880`01993000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`042f7000 fffff880`04335000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f63000 fffff880`00fba000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`054ec000 fffff880`05504000   adfs     adfs.SYS     Mon Nov 03 11:48:14 2008 (490F2B4E)
fffff880`02c4a000 fffff880`02cd4000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0435f000 fffff880`04375000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd1000 fffff880`00ddc000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04335000 fffff880`0433d000   ASACPI   ASACPI.sys   Wed Jul 15 23:31:29 2009 (4A5E9F11)
fffff880`04168000 fffff880`0416e000   AsIO     AsIO.sys     Mon Aug 03 03:03:16 2009 (4A768BB4)
fffff880`0744b000 fffff880`07456000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00d9e000 fffff880`00da7000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00da7000 fffff880`00dd1000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04862000 fffff880`04e98000   atikmdag atikmdag.sys Tue Nov 24 22:44:50 2009 (4B0CA832)
fffff960`008d0000 fffff960`00931000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`019f2000 fffff880`019f9000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04157000 fffff880`04168000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06fd2000 fffff880`06ff0000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00650000 fffff960`00677000   cdd      cdd.dll      unavailable (00000000)
fffff880`01993000 fffff880`019bd000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cc4000 fffff880`00d84000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0192d000 fffff880`0195d000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c66000 fffff880`00cc4000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01171000 fffff880`011e4000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0434f000 fffff880`0435f000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06ee6000 fffff880`06ef4000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`040b6000 fffff880`04139000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`06f8d000 fffff880`06f99000   dc3d     dc3d.sys     Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`04139000 fffff880`04157000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`040a7000 fffff880`040b6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01917000 fffff880`0192d000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05309000 fffff880`0532b000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06f0e000 fffff880`06f17000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06f02000 fffff880`06f0e000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06f17000 fffff880`06f2a000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06eda000 fffff880`06ee6000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04e98000 fffff880`04f8c000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04f8c000 fffff880`04fd2000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`010ff000 fffff880`01113000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010b3000 fffff880`010ff000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013d3000 fffff880`013dd000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`018dd000 fffff880`01917000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`0159a000 fffff880`015e4000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`0433d000 fffff880`04346000   GEARAspiWDM GEARAspiWDM.sys Fri Feb 01 09:06:03 2008 (47A3274B)
fffff800`0300e000 fffff800`03057000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04fd2000 fffff880`04ff6000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`06c8c000 fffff880`06ca5000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`06f99000 fffff880`06fa1080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06c7e000 fffff880`06c8c000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`05331000 fffff880`053f9000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01412000 fffff880`0141b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04194000 fffff880`041aa000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0425b000 fffff880`0426a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06ca5000 fffff880`06cb3000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00baa000 fffff800`00bb4000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`07441000 fffff880`0744b000   kerneld  kerneld.amd64 Sat Sep 05 13:27:16 2009 (4AA29F74)
fffff880`0481e000 fffff880`04861000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013a8000 fffff880`013c2000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0156f000 fffff880`0159a000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0532b000 fffff880`05330200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06fa2000 fffff880`06fb7000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06f2a000 fffff880`06f4d000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c0e000 fffff880`00c52000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`06ef4000 fffff880`06f02000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0426a000 fffff880`04279000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06fb7000 fffff880`06fc4000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d84000 fffff880`00d9e000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`019bd000 fffff880`019e9000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`07431000 fffff880`07441000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff880`05200000 fffff880`05218000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04000000 fffff880`0402c000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`05461000 fffff880`054ae000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`054ae000 fffff880`054d1000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`0185e000 fffff880`01869000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fc3000 fffff880`00fcd000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01113000 fffff880`01171000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`0409c000 fffff880`040a7000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01400000 fffff880`01412000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0141d000 fffff880`0150f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04399000 fffff880`043a5000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06c53000 fffff880`06c66000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`043a5000 fffff880`043d4000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05284000 fffff880`05299000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d48000 fffff880`02d57000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cd4000 fffff880`02d19000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0150f000 fffff880`0156f000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01869000 fffff880`0187a000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04090000 fffff880`0409c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03057000 fffff800`03634000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01205000 fffff880`013a8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`019e9000 fffff880`019f2000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`06c00000 fffff880`06c53000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02d22000 fffff880`02d48000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e0d000 fffff880`00e22000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fcd000 fffff880`01000000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e93000 fffff880`00e9a000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e9a000 fffff880`00eaa000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0423b000 fffff880`0424f380   pcouffin pcouffin.sys Tue Dec 05 09:39:30 2006 (457584A2)
fffff880`013c2000 fffff880`013d3000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05504000 fffff880`055aa000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06fc4000 fffff880`06fd2000   point64k point64k.sys Fri Oct 16 16:08:03 2009 (4AD8D2A3)
fffff880`052cc000 fffff880`05309000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c52000 fffff880`00c66000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04375000 fffff880`04399000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`043d4000 fffff880`043ef000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04200000 fffff880`04221000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04221000 fffff880`0423b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0403f000 fffff880`04090000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04250000 fffff880`0425b000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01843000 fffff880`0184c000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0184c000 fffff880`01855000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01855000 fffff880`0185e000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`06c66000 fffff880`06c7e000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`042ab000 fffff880`042f7000   Rt64win7 Rt64win7.sys Tue Nov 17 12:01:19 2009 (4B02D6DF)
fffff880`05299000 fffff880`052cb280   RtHDMIVX RtHDMIVX.sys Thu Sep 24 22:13:24 2009 (4ABC2744)
fffff880`06cbb000 fffff880`06ed9b80   RTKVHD64 RTKVHD64.sys Fri Dec 25 05:41:24 2009 (4B3496D4)
fffff880`055aa000 fffff880`055b5000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`015f4000 fffff880`015fc000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07456000 fffff880`074c7000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`07540000 fffff880`075d8000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`074d7000 fffff880`07540000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`055b5000 fffff880`055e2000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`04279000 fffff880`0427a480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`055e2000 fffff880`055f4000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01898000 fffff880`018a5000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0187a000 fffff880`01898000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02db2000 fffff880`02dc6000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02d72000 fffff880`02db2000   truecrypt truecrypt.sys Mon Nov 23 12:22:57 2009 (4B0AC4F1)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`0416e000 fffff880`04194000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`0427b000 fffff880`0428d000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`06f6e000 fffff880`06f8b000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`06f8b000 fffff880`06f8cf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0480d000 fffff880`0481e000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0522a000 fffff880`05284000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`041aa000 fffff880`04200000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`054d1000 fffff880`054ec000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`04800000 fffff880`0480d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01800000 fffff880`0180e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0180e000 fffff880`01833000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015e4000 fffff880`015f4000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e22000 fffff880`00e37000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e37000 fffff880`00e93000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d57000 fffff880`02d72000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01833000 fffff880`01843000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00eb0000 fffff880`00f54000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f54000 fffff880`00f63000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d19000 fffff880`02d22000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys   unavailable (00000000)
fffff880`04346000 fffff880`0434f000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fba000 fffff880`00fc3000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06f4d000 fffff880`06f6e000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`07400000 fffff880`07431000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)
Unloaded modules:
fffff880`07456000 fffff880`074c7000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07456000 fffff880`074c7000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0195d000 fffff880`0196b000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0196b000 fffff880`01977000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01977000 fffff880`01980000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01980000 fffff880`01993000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000009C
Arguments 00000000`00000000 fffff880`03101c70 00000000`00000000 00000000`00000000

Lorian · 08 Jan 2010

TimStitt said:

Hi Lorian,

Please double-check that you have the latest hardware drivers. The first dump suggests a hardware fault on the intel processor chip, so I'd start with the latest drivers for this and the motherboard.

I know you mentioned drivers; but I just wanted to check that they came from the manufacturers website (as these are the latest) and not windows automatic update (which may not have the latest drivers yet).

Also check that the motherboard is dust free and that the processor fan is not obstructed in anyway.

Thank you for the swift reply.
I have the latest motherboard drivers direct from the ASUS website and all others from the manufacturer. I have also tried running DriverGenius just to be sure that that confirms that everything is up to date.

The inside of my machine is immaculate.. no dust in sight!

Zardoc said:

For sure it's a hardware issue. I had a problem with my video card. I thought it was the processor or the board. You are going to have to do some manual troubleshooting. Remove everything and keep your machine barebones (1 dvd, one hard drive, no usb, min Ram) stock settings. Try to trade off vid card. Check temps. Set bios too load default settings.

The Graphics card and RAM are about the only thing I haven't swapped out.. although it doesn't make sense that a graphics/RAM issue would only happen once per day and always within 2 hours? ..

TimStitt said:

Other thoughts:

From an elevated CMD prompt, run an SFC /SCANNOW to ensure that microsoft system files are a-ok?
Check all automatic updates, scans, backups etc to ensure that they are not running inside your 2 hour window. Let's rule this out as an issue
Try clearing the page file at shutdown (open secpol.msc from run, navigate to local policy / security options / 'Shutdown: Clear virtual memory' - set this to ENABLED)
If this is only a new problem, system restore back to an earlier time where it did not occur
Minimise your RAM, corrupt RAM can cause issues to appear almost anywhere. Replace or swap out RAM if you can to verify that none of yours is faulty.
Check all drivers on your system: Enter Verifier.exe in the RUN dialogue box, run through the wizard to create standard settings and check all drivers on the system. Restart when told to.

I ran SFC /SCANNOW, all is good.
Just tried Verifier, no issues flagged up.
I didn't mention it in my original post but i have tried completely disabling the Pagefile (same issue occurs) and have now recreated it.

Zardoc said:

Wait, it might not be hardware.

Here is the other bug report. Can you try to boot and choose last good config. or can you restore in any way to a last working version?

This is a clean install, the issue has been there since day 1 so sadly I there is no good restore point.

Zardoc said:

There seems to ba a corrupt driver also involved (intelppm.sys) This was an issue
with AMD based systems in XP SP3 and also was a problem during betat testing of Win7 but it should not be the case here, Did you try to reboot while Windows was transferring files or running something?

I wouls also try a clean install before tossing everything.

This is my 2nd clean install of Win 7. Both installs went smoothly and the issue was apparent in both.

Thank you for the responses guys.

Due to the nature of the issue I can only change one thing per day because the issue won't manifest itself again until tomorrow now.

I'll swap out my RAM tonight.. if it hangs again tomorrow I'll try changing my Graphcs card and see what happens on Sunday.

I'll report back..

L

Zardoc · 08 Jan 2010

Lorian,

I know it's a tough deal.

It took me 2 weeks to find my issue (Video Card). On top of that my mem settings were also a bit off. This gave me a few freezes once in a while. First I swapped the board and processor (Convinced Intel to swap). Then I swapped the vid card. It was running at 70C idle (not normal). Everything ran smooth for a week. So, I ordered another vid card, tweaked my mem settings and the issue is now gone. (For long I hope)

Be patient, you'll find it.

TimStitt · 08 Jan 2010

@Zardoc - 2 heads 'are' better than 1, we'll see what we can do here

@Lorian - Next lot of brainstorming:

It's really weird that the issue only occurs once a day, regardless of reboots etc. I'm trying to think what happens only during first boot of the day and I can only come up with something that might be cpu-clock (as in telling the time) related. Please double check your bios clock settings, timezone etc. As it only occurs once a day, you may consider pushing your clock forward a day and rebooting to see if you can force the BSOD again.
Double check that you have the correct bus settings set for your CPU (set auto in bios if not done already) and do a quick check for any physical jumpers on the mobo.
Do a power calculation, there are many on-line calculators to ensure that your power supply is outputting enough wattage for all of your attached devices (including usb, firewire, eSAta etc)
Before you turn your PC on, unplug all external devices (including network adapters and disable any wireless adapters (to rule out external influences), also befire you shut it down, disable all backups, windows update etc (anything that could run just once a day). - If we can disable everything, maybe we can stop it occurring and then slowly enable stuff to find the cause.
Also take a look in 'control panel' / select 'performance and information tools'/ click on 'advanced tools'
- Generate a system health report and review this
- You can also check the 'Resource monitor and performance monitor' for anything untoward
- In Performance monitor, it is a good idea to press the green + (plus) button and ensure that you are montoring processor items especially (like the interupt time), you can use the highlight button to more easily view your choices if you select many.

PsychoCheF · 09 Jan 2010

Hi!

I thought that i shall borrow this thread for a sec, and hopefully help out a bit.
I have exact the same problem!

BCCode: 9c
BCP1: 0000000000000000
BCP2: FFFFF88003101C70
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

So hopefully two people with errors can provide more information.

I have an idea that its something on my motherboard that causing the problem, previous i had a DFI LANPARTY JR X58-T3H6, but i failed after 6 months because something which handles the power in the board burnd up.
So i got it replaced with a ASUS Rampage II GENE, and then this error start to appear.
So if this power issue didn't damaged (which of course is possible) any other hardware it must be the motherboard.
(you can see the rest of my hardware in "My System Specs")

I also get the error once a day, but only if I load the pc, e.g. playing modern warfare 2, if i just surf it's run ok.
After a reboot it's good and i can play for hours...

I had tested my memory with memtest86+ for approximately 6 hours, no errors.
I thought that i shall try out with some more stressing benchmarks, but the life is always short on time.

If i can provide any more information to the to gurus here so ask and tell me what you need.

TimStitt · 09 Jan 2010

Hi PsychoCheF,

Even though the error is the same, the problems/solutions could be different. Please check through our posts above and hopefully something works for you.

It also may be a good idea to open a new case and drop in your dump files and any event log information. That way we may have more people helping, we don't mix up your issue with Lorian's and the issue itself get's more exposure on the net .

We also cross reference both cases so that readers have access to all information.

I'll be happy to take a look at your case too. :)