ntoskrnl.exe causing BSOD Windows 7

CarlTR6 · 25 Jul 2010

Elis said:

i dont have the option to deactivate the 56k modem in the bios, so i will uninstall it from device manager and delete the drivers

That will work. Let us know how it goes.

Elis · 26 Jul 2010

hi, removed the 56 k modem and all is well . . . . . so far, no bsods today, and the laptop has been on all day running prime 95.

CarlTR6 · 26 Jul 2010

Ellis, that is really good news. As old as those drivers are, they certainly were not helping your system. I am glad that you removed Kaspsersky which is one more potential destabilizer. since your computer has been running Prime all day and no BSOD's, I think you may have solved your problem. Any of those drivers I listed that you can update, do so.

Keep us updated. I hope we can mark this one as solved. :)

Elis · 27 Jul 2010

Bad news, it Bsoded again, i have attached the minidump so you can see what caused it.

one thing i did notice was that windows aero surned off and windows had a cross through the wifi signal icon saying no connection.

so the driverfs for theese may be the problem, but i will wait for the analysis of the minidump.

thanks.

CarlTR6 · 27 Jul 2010

I am sorry to hear this. It definitely looks driver related. Unfortunately the dump does not give us the offending driver.

STOP 0x00000019: BAD_POOL_HEADER

Usual causes: Device driver

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\AppData\Local\Temp\Temp1_minidump(2).zip\072710-28345-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a60000 PsLoadedModuleList = 0xfffff800`02c9de50
Debug session time: Tue Jul 27 10:29:51.648 2010 (GMT-4)
System Uptime: 0 days 3:19:26.051
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {22, fffffa8000000000, 0, 0}

GetPointerFromAddress: unable to read from fffff80002d080e0
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+72f8 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000022, 
Arg2: fffffa8000000000
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x19_22

POOL_ADDRESS:  fffffa8000000000 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002b276c0 to fffff80002ad0600

STACK_TEXT:  
fffff880`0469ca28 fffff800`02b276c0 : 00000000`00000019 00000000`00000022 fffffa80`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`0469ca30 fffff800`02c05518 : 00000000`00000000 fffff880`0469cb80 fffff880`0469caf0 fffff800`00000001 : nt! ?? ::FNODOBFM::`string'+0x72f8
fffff880`0469cac0 fffff800`02f21d6e : 00000000`00000000 fffffa80`03b9c000 00000000`ffffe859 fffffa80`00000000 : nt!ExFreePoolWithTag+0x468
fffff880`0469cb70 fffff800`02f43390 : fffffa80`034f5001 00000000`00000080 fffffa80`00c81040 fffff800`02c5e568 : nt!PfpFlushBuffers+0x23e
fffff880`0469cc10 fffff800`02d75a86 : ffffffff`ff676980 fffffa80`034f5060 fffff880`0469cdb0 fffffa80`034f5060 : nt!PfTLoggingWorker+0xe0
fffff880`0469cd40 fffff800`02aaeb06 : fffff800`02c4ae80 fffffa80`034f5060 fffff800`02c58c40 fffff880`01251534 : nt!PspSystemThreadStartup+0x5a
fffff880`0469cd80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+72f8
fffff800`02b276c0 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+72f8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

FAILURE_BUCKET_ID:  X64_0x19_22_nt!_??_::FNODOBFM::_string_+72f8

BUCKET_ID:  X64_0x19_22_nt!_??_::FNODOBFM::_string_+72f8

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`04d18000 fffff880`04d56000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f3c000 fffff880`00f93000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03ac0000 fffff880`03b4a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045ea000 fffff880`04600000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c35000 fffff880`00c40000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`05a71000 fffff880`05a7c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00de9000 fffff880`00df2000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c00000 fffff880`00c2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04cfd000 fffff880`04d18000   b44amd64 b44amd64.sys Tue Nov 21 07:23:06 2006 (4562EFAA)
fffff880`00e09000 fffff880`00e15000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`04a48000 fffff880`04cf0000   bcmwl664 bcmwl664.sys Tue Jul 07 20:45:04 2009 (4A53EC10)
fffff880`03ed4000 fffff880`03ee5000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02747000 fffff880`02765000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00740000 fffff960`00767000   cdd      cdd.dll      unavailable (00000000)
fffff880`01917000 fffff880`01941000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cf7000 fffff880`00db7000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018b1000 fffff880`018e1000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c99000 fffff880`00cf7000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04a3c000 fffff880`04a40500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`010e0000 fffff880`01153000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00e00000 fffff880`00e09000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`0484b000 fffff880`0485b000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c34000 fffff880`02c42000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e33000 fffff880`03eb6000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03eb6000 fffff880`03ed4000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03a7c000 fffff880`03a8b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0189b000 fffff880`018b1000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`02c00000 fffff880`02c22000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`02c4e000 fffff880`02c57000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`02c42000 fffff880`02c4e000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`02c57000 fffff880`02c6a000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02c28000 fffff880`02c34000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0485f000 fffff880`04953000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04953000 fffff880`04999000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0106e000 fffff880`01082000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01022000 fffff880`0106e000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`01861000 fffff880`0189b000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04835000 fffff880`04842000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02a17000 fffff800`02a60000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04811000 fffff880`04835000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`02d55000 fffff880`02db1000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`05a8a000 fffff880`05aa3000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`03e00000 fffff880`03e08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05a7c000 fffff880`05a8a000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02600000 fffff880`026c8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`014d5000 fffff880`014de000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04a00000 fffff880`04a1e000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04005000 fffff880`045e9fe0   igdkmd64 igdkmd64.sys Wed Sep 23 15:22:57 2009 (4ABA7591)
fffff880`00db7000 fffff880`00dbf000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03f0b000 fffff880`03f21000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04a2d000 fffff880`04a3c000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00ba3000 fffff800`00bad000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`02c7f000 fffff880`02cc2000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013e6000 fffff880`01400000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`02c22000 fffff880`02c27200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03e16000 fffff880`03e2b000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03a8b000 fffff880`03aae000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c41000 fffff880`00c85000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`02c6a000 fffff880`02c78000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04a1e000 fffff880`04a2d000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05aa5000 fffff880`05ab2000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00dcf000 fffff880`00de9000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01941000 fffff880`0196e000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`0399f000 fffff880`039af000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`02765000 fffff880`0277d000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0277d000 fffff880`027aa000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`027aa000 fffff880`027f8000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`018e1000 fffff880`01904000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00c2a000 fffff880`00c35000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`019d5000 fffff880`019e0000   Msfs     Msfs.SYS     unavailable (00000000)
fffff880`00f9c000 fffff880`00fa6000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01082000 fffff880`010e0000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`03a71000 fffff880`03a7c000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015ee000 fffff880`01600000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014e4000 fffff880`015d6000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03f45000 fffff880`03f51000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0271c000 fffff880`0272f000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`03f51000 fffff880`03f80000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`02d40000 fffff880`02d55000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03bd4000 fffff880`03be3000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03b4a000 fffff880`03b8f000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019e0000 fffff880`019f1000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03a65000 fffff880`03a71000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a60000 fffff800`0303c000   nt       ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
fffff880`01243000 fffff880`013e6000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0196e000 fffff880`01977000   Null     Null.SYS     unavailable (00000000)
fffff880`026c9000 fffff880`0271c000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03b98000 fffff880`03bbe000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fe6000 fffff880`00ffb000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fa6000 fffff880`00fd9000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00dbf000 fffff880`00dcf000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`038af000 fffff880`03955000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`02db1000 fffff880`02dee000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c85000 fffff880`00c99000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03f21000 fffff880`03f45000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f80000 fffff880`03f9b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03f9b000 fffff880`03fbc000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fbc000 fffff880`03fd6000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a14000 fffff880`03a65000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03fd6000 fffff880`03fe1000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`019ba000 fffff880`019c3000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019c3000 fffff880`019cc000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019cc000 fffff880`019d5000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0119f000 fffff880`011d9000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04d76000 fffff880`04d8a000   rimmpx64 rimmpx64.sys Sun Mar 18 23:09:34 2007 (45FDFEEE)
fffff880`04d8a000 fffff880`04da1000   rimspx64 rimspx64.sys Tue Feb 27 02:10:37 2007 (45E3D96D)
fffff880`04da1000 fffff880`04df8000   rixdpx64 rixdpx64.sys Mon Mar 26 06:48:23 2007 (4607A4F7)
fffff880`0272f000 fffff880`02747000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04d56000 fffff880`04d76000   sdbus    sdbus.sys    Fri Oct 09 22:41:20 2009 (4ACFF450)
fffff880`03955000 fffff880`03960000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`02d37000 fffff880`02d40000   sffdisk  sffdisk.sys  Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`02d2e000 fffff880`02d37000   sffp_sd  sffp_sd.sys  Fri Oct 09 23:17:02 2009 (4ACFFCAE)
fffff880`015e6000 fffff880`015ee000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`05ac4000 fffff880`05b5c000   srv      srv.sys      Tue Dec 08 03:32:55 2009 (4B1E0F37)
fffff880`03800000 fffff880`03869000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`03960000 fffff880`0398d000   srvnet   srvnet.sys   Tue Dec 08 03:32:26 2009 (4B1E0F1A)
fffff880`04a41000 fffff880`04a42480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01600000 fffff880`017fd000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`0398d000 fffff880`0399f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0181e000 fffff880`0182b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01800000 fffff880`0181e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03a00000 fffff880`03a14000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00490000 fffff960`0049a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03ee5000 fffff880`03f0b000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`02cc2000 fffff880`02cd4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05aa3000 fffff880`05aa4f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04800000 fffff880`04811000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`02cd4000 fffff880`02d2e000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`049a6000 fffff880`049fc000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04999000 fffff880`049a6000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fd9000 fffff880`00fe6000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01977000 fffff880`01985000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01985000 fffff880`019aa000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015d6000 fffff880`015e6000   vmstorfl vmstorfl.sys unavailable (00000000)
fffff880`00e15000 fffff880`00e2a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e2a000 fffff880`00e86000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01153000 fffff880`0119f000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04cf0000 fffff880`04cfd000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03bbe000 fffff880`03bd4000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03be3000 fffff880`03bfe000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`019aa000 fffff880`019ba000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e89000 fffff880`00f2d000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f2d000 fffff880`00f3c000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03b8f000 fffff880`03b98000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys   unavailable (00000000)
fffff880`04842000 fffff880`0484b000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f93000 fffff880`00f9c000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0182b000 fffff880`0184c000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`05b64000 fffff880`05b95000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`05b95000 fffff880`05bb0000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02dfc000 fffff880`02dfe000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03fe1000 fffff880`03ffa000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02dee000 fffff880`02dfc000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03e09000 fffff880`03e16000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05b5c000 fffff880`05b64000   TuneUpUtilit
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05a00000 fffff880`05a71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018e1000 fffff880`018ef000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018ef000 fffff880`018fb000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018fb000 fffff880`01904000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01904000 fffff880`01917000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Are you running a tuneup utility program? I see mention of this in the dump analysis. If you are, please uninstall this third part software. Windows 7 does not need third party tuneup utilities and they tend to do more harm than good.

Jonathan_King · 27 Jul 2010

Please enable driver verifier: Using Driver Verifier to identify issues with Drivers

CarlTR6 · 27 Jul 2010

I am suspecting this driver may well be part of the problem:

b44amd64.sys Tue Nov 21 07:23:06 2006 It is one of your network adapter card drivers. Please try to update this driver - Broadcom.com - Downloads & Support - as well as all of the Broadcom drivers.

Do as Jonathan suggested and enable Driver Verifier following the instructions in the link he gave you.

Also these old drivers are still showing up in your system:

rimmpx64.sys Sun Mar 18 23:09:34 2007
rimspx64.sys Tue Feb 27 02:10:37 2007
rixdpx64.sys Mon Mar 26 06:48:23 2007

Elis · 27 Jul 2010

Hi, i actually uninstalled tune up utilities before that bsod, but it has done it again about 5 mins ago, again, here is the minidump.

Thanks.

Jonathan_King · 27 Jul 2010

No signs of Verifier running in that dump...

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\DOCUME~1\JK\LOCALS~1\Temp\Temporary Directory 4 for minidump.zip\072710-18361-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a03000 PsLoadedModuleList = 0xfffff800`02c40e50
Debug session time: Tue Jul 27 11:58:38.078 2010 (GMT-4)
System Uptime: 0 days 0:27:13.138
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff680003be080, 0, 0, fffff80002aa64ac}

Probably caused by : memory_corruption ( nt!MiDeletePageTableHierarchy+9c )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff680003be080, memory referenced
Arg2: 0000000000000000, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002aa64ac, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cab0e0
 fffff680003be080 

CURRENT_IRQL:  0

FAULTING_IP: 
nt!MiDeletePageTableHierarchy+9c
fffff800`02aa64ac 498b06          mov     rax,qword ptr [r14]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  dllhost.exe

TRAP_FRAME:  fffff88005b42dd0 -- (.trap 0xfffff88005b42dd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000ef82000000 rbx=0000000000000000 rcx=0000000fffffffff
rdx=0000058000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002aa64ac rsp=fffff88005b42f60 rbp=fffffa80037ae060
 r8=0000007ffffffff8  r9=0000098000000000 r10=fffff80002cad840
r11=fffff88005b43040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe cy
nt!MiDeletePageTableHierarchy+0x9c:
fffff800`02aa64ac 498b06          mov     rax,qword ptr [r14] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a72b69 to fffff80002a73600

STACK_TEXT:  
fffff880`05b42c88 fffff800`02a72b69 : 00000000`0000000a fffff680`003be080 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`05b42c90 fffff800`02a717e0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`05b42dd0 fffff800`02aa64ac : fffffa80`006075f0 00000000`00000001 fffffa80`00748b90 fffff680`0036a000 : nt!KiPageFault+0x260
fffff880`05b42f60 fffff800`02a47c36 : fffff700`010805c8 fffffa80`037ae3f8 fffff700`01080000 fffff8a0`08744060 : nt!MiDeletePageTableHierarchy+0x9c
fffff880`05b43070 fffff800`02a465a2 : fffffa80`037ae060 fffffa80`00000006 fffff8a0`000000f4 fffff880`00000000 : nt!MiDeleteAddressesInWorkingSet+0x3fb
fffff880`05b43920 fffff800`02d59c4f : fffff8a0`0309aa50 fffff880`05b43c20 00000000`00000000 fffffa80`02e36060 : nt!MmCleanProcessAddressSpace+0x96
fffff880`05b43970 fffff800`02d324d1 : 00000000`00000000 00000000`00000001 00000000`7efaa000 fffffa80`0353e660 : nt!PspExitThread+0x92f
fffff880`05b43a30 fffff800`02a500e3 : fffffa80`02e36060 fffff800`02a50009 00000000`00000000 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`05b43a60 fffff800`02a50520 : 00000000`00007530 fffff880`05b43ae0 fffff800`02d325dc 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`05b43ae0 fffff800`02a728f7 : 00000000`00000001 fffffa80`02e36060 ffffffff`dc3cba00 00000000`7efaa000 : nt!KiInitiateUserApc+0x70
fffff880`05b43c20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiDeletePageTableHierarchy+9c
fffff800`02aa64ac 498b06          mov     rax,qword ptr [r14]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiDeletePageTableHierarchy+9c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiDeletePageTableHierarchy+9c

BUCKET_ID:  X64_0xA_nt!MiDeletePageTableHierarchy+9c

Followup: MachineOwner
---------

If you need help enabling it let us know.

Elis · 27 Jul 2010

okay, i have enabled the verifier, and it bsoded as it was shutting down, i have the dump now.

the problem is that windows will not boot now, except in safe mode (i am in safe mode now)

is this normal?

Elis