Repeated crash

Outraj said:

Hi,

I have a repeated crash with my computer.

A blue screen when I'm playing. It say that it is because of some problems, not only one. But, when I'm looking the windows report, its say that:

-<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2010-04-05T13:23:05.984800000Z" />
<EventRecordID>10511</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Damien-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="BugcheckCode">209</Data>
<Data Name="BugcheckParameter1">0x13</Data>
<Data Name="BugcheckParameter2">0x2</Data>
<Data Name="BugcheckParameter3">0x1</Data>
<Data Name="BugcheckParameter4">0xfffff8800165f3ff</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>


And, many times, the games crash to...


I have windows7 64bits ultimate édition. All my drivers are updated.

Can some one help me please ?

Hello Welcome to SF,

I guess the issue is with Epfwndis.sys which is your ESET Smart Security. If your Overclocking please stop. Make sure your BIOS have the latest firmware.

Hardware Diagnostic

Run the Memory Diagnostic & HD Diagnostic

Also i would recommend to run System Integrity Checker
Start > Run > CMD >Right Click and Run as administrator > SFC/ SCANNOW

Update the following Driver

Code:

wdcsam64.sys Wed Apr 16 14:09:08 2008
dadder.sys   Thu Aug 02 15:03:03 2007
AsIO.sys     Mon Dec 17 14:41:49 2007
ASACPI.sys   Mon Mar 28 08:00:36 2005

ASACPI.sys is dated 2005 which is well known for problem. Go to C:\Windows\Drivers and rename ASACPI.sys to ASACPI.old


Bugcheck Analysis

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000013, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff8800165f3ff, address which referenced memory
Debugging Details:
------------------

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cab0e0
 0000000000000013 
CURRENT_IRQL:  2
FAULTING_IP: 
ndis!NdisAllocateNetBufferAndNetBufferList+df
fffff880`0165f3ff 48891f          mov     qword ptr [rdi],rbx
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  uTorrent.exe
TRAP_FRAME:  fffff880091b4e20 -- (.trap 0xfffff880091b4e20)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000013 rbx=0000000000000000 rcx=fffffa8003c25b68
rdx=fffffa8003c25a41 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800165f3ff rsp=fffff880091b4fb0 rbp=fffff880091b50a0
 r8=fffffa8003c25a40  r9=0000000000000000 r10=fffffa8004521900
r11=fffff880091b4ff8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
ndis!NdisAllocateNetBufferAndNetBufferList+0xdf:
fffff880`0165f3ff 48891f          mov     qword ptr [rdi],rbx ds:6fca:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff80002a74469 to fffff80002a74f00
STACK_TEXT:  
fffff880`091b4cd8 fffff800`02a74469 : 00000000`0000000a 00000000`00000013 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`091b4ce0 fffff800`02a730e0 : 00000000`00000014 00000000`00000000 fffff880`00000000 fffffa80`05985c90 : nt!KiBugCheckDispatch+0x69
fffff880`091b4e20 fffff880`0165f3ff : fffff880`00000000 00000000`00000008 fffffa80`06300bd0 fffff880`0fe06bfe : nt!KiPageFault+0x260
fffff880`091b4fb0 fffff880`0169aea2 : 00000000`00000000 fffff880`091b50a0 00000000`00000000 fffffa80`05336fca : ndis!NdisAllocateNetBufferAndNetBufferList+0xdf
fffff880`091b5000 fffff880`0169e4e9 : 00000000`88972200 00000000`00000000 00000000`00000001 fffffa80`05336fe6 : ndis!ndisXlateSendPacketArrayToNetBufferLists+0xa2
fffff880`091b5070 fffff880`0169424b : fffffa80`053f8450 00000000`00000001 fffffa80`059b38d0 00000000`00000000 : ndis!ndisMSendPacketsToNetBufferLists+0xa9
fffff880`091b50f0 fffff880`01719ef4 : fffff880`00000000 fffff880`091b51c8 fffffa80`059b38d0 00000000`00000000 : ndis!ndisSendPacketsWithPause+0x28b
fffff880`091b5180 fffff880`042137eb : fffffa80`05985c90 fffffa80`075f40b0 fffffa80`05985c02 fffffa80`05985c90 : ndis!ndisSendWithPause+0x64
fffff880`091b51c0 fffffa80`05985c90 : fffffa80`075f40b0 fffffa80`05985c02 fffffa80`05985c90 00000000`000004f1 : Epfwndis+0x37eb
fffff880`091b51c8 fffffa80`075f40b0 : fffffa80`05985c02 fffffa80`05985c90 00000000`000004f1 00000000`00000000 : 0xfffffa80`05985c90
fffff880`091b51d0 fffffa80`05985c02 : fffffa80`05985c90 00000000`000004f1 00000000`00000000 fffffa80`05985c90 : 0xfffffa80`075f40b0
fffff880`091b51d8 fffffa80`05985c90 : 00000000`000004f1 00000000`00000000 fffffa80`05985c90 00000000`00000002 : 0xfffffa80`05985c02
fffff880`091b51e0 00000000`000004f1 : 00000000`00000000 fffffa80`05985c90 00000000`00000002 fffffa80`053369b0 : 0xfffffa80`05985c90
fffff880`091b51e8 00000000`00000000 : fffffa80`05985c90 00000000`00000002 fffffa80`053369b0 fffff880`04214b3a : 0x4f1

STACK_COMMAND:  kb
FOLLOWUP_IP: 
Epfwndis+37eb
fffff880`042137eb ??              ???
SYMBOL_STACK_INDEX:  8
SYMBOL_NAME:  Epfwndis+37eb
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: Epfwndis
IMAGE_NAME:  Epfwndis.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  49dded68
FAILURE_BUCKET_ID:  X64_0xD1_Epfwndis+37eb
BUCKET_ID:  X64_0xD1_Epfwndis+37eb

Hope this helps,
Captain