BSOD (2 dumps) Fresh Copy of Windows...

IoNGeNeRaL · Nov 4, 2010

Hey guys. For some reason I am getting more BSODs. Only two.

In the second BSOD I noticed something wrong with the file "win32k.sys" or something. Something about an access violation. Not too sure. Can you guys help me figure out what's causing this?

Thanks

EDIT: I'd just like to add one thing. I did a Memory Diagnostics Test aswell, and it showed nothing wrong at all, even on my motherboards memory testing feature it showed nothing.

CarlTR6 · Nov 4, 2010

Hi, HiddenC; sorry to see that you are posting again in this section. Uninstall Norton/Symantec completely using the removal tool: Tool. One of your dumps directly blames Norton. Download and install Microsoft Security Essentials and make sure Windows Firewall is turned. I advise you not to reinstall Norton. Many times when you see win32k.sys blamed for a crash, the crash has been caused by a third party firewall/anitvirus program.

Error code 19, BAD_POOL_HEADER. Usual causes: Device driver.

Error code BE, ATTEMPTED_WRITE_TO_READONLY_MEMORY. Usual causes: Device driver, Memory

Code:

Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e53000 PsLoadedModuleList = 0xfffff800`03090e50
Debug session time: Thu Nov  4 10:50:31.075 2010 (GMT-4)
System Uptime: 0 days 0:03:16.057
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {3, fffff8a00a268c80, fffff8a00a268c80, fffff8a00a268c00}

Unable to load image \SystemRoot\system32\drivers\NISx64\1201000.025\[B]SRTSP64.SYS[/B], Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP64.SYS
*** ERROR: Module load completed but symbols could not be loaded for [B]SRTSP64.SYS[/B]
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+c7b )

Followup: Pool_corruption
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff8a00a268c80, the pool entry being checked.
Arg3: fffff8a00a268c80, the read back flink freelist value (should be the same as 2).
Arg4: fffff8a00a268c00, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------


BUGCHECK_STR:  0x19_3

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  MsMpEng.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002ff610b to fffff80002ec3740

STACK_TEXT:  
fffff880`08aa4af8 fffff800`02ff610b : 00000000`00000019 00000000`00000003 fffff8a0`0a268c80 fffff8a0`0a268c80 : nt!KeBugCheckEx
fffff880`08aa4b00 fffff800`02ff84c1 : 00000000`00000000 fffff8a0`0a1d2170 00000000`0005c000 fffff880`000e2a82 : nt!ExDeferredFreePool+0xc7b
fffff880`08aa4b90 fffff880`06d52d61 : 00000000`00000000 00000000`00000801 00000000`65456153 fffff800`0000016b : nt!ExFreePoolWithTag+0x411
fffff880`08aa4c40 00000000`00000000 : 00000000`00000801 00000000`65456153 fffff800`0000016b fffff8a0`0a198508 : SRTSP64+0x78d61


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+c7b
fffff800`02ff610b cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExDeferredFreePool+c7b

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+c7b

BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+c7b

Followup: Pool_corruption
---------

5: kd> lmtsmn
start             end                 module name
fffff880`0459d000 fffff880`045db000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f22000 fffff880`00f79000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d46000 fffff880`02dd0000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04f73000 fffff880`04f89000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`04588000 fffff880`0459d000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00c93000 fffff880`00c9e000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04adc000 fffff880`04ae4000   ASACPI   ASACPI.sys   Wed Jul 15 23:31:29 2009 (4A5E9F11)
fffff880`0455c000 fffff880`04562000   AsIO     AsIO.sys     Thu Apr 22 07:18:03 2010 (4BD0306B)
fffff880`04556000 fffff880`0455c000   AsUpIO   AsUpIO.sys   Sun Jul 05 22:21:38 2009 (4A515FB2)
fffff880`00e63000 fffff880`00e6c000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c69000 fffff880`00c93000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00870000 fffff960`008d1000   ATMFD    ATMFD.DLL    Thu May 27 00:11:31 2010 (4BFDF0F3)
fffff880`011f8000 fffff880`011ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04469000 fffff880`04556000   BHDrvx64 BHDrvx64.sys Fri Aug 27 18:11:09 2010 (4C7837FD)
fffff880`0439a000 fffff880`043ab000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0614d000 fffff880`0616b000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00620000 fffff960`00647000   cdd      cdd.dll      unavailable (00000000)
fffff880`0101f000 fffff880`01049000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d1e000 fffff880`00dde000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`011c8000 fffff880`011f8000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cc0000 fffff880`00d1e000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01340000 fffff880`013b3000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04f63000 fffff880`04f73000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05c59000 fffff880`05c62000   cpuz134_x64 cpuz134_x64.sys Fri Jul 09 07:16:58 2010 (4C37052A)
fffff880`05cc6000 fffff880`05cd4000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`042f9000 fffff880`0437c000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`05d7e000 fffff880`05d90000   dc3d     dc3d.sys     Thu Jul 01 06:07:45 2010 (4C2C68F1)
fffff880`0437c000 fffff880`0439a000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`042ea000 fffff880`042f9000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01400000 fffff880`01416000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`11ebc000 fffff880`11ede000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05ce0000 fffff880`05ce9000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05cd4000 fffff880`05ce0000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05ce9000 fffff880`05cfc000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05d19000 fffff880`05d25000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04af2000 fffff880`04be6000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0424f000 fffff880`042c5000   eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`07800000 fffff880`07820000   ENG64    ENG64.SYS    Wed Sep 15 06:25:35 2010 (4C909F1F)
fffff880`042c5000 fffff880`042ea000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`07833000 fffff880`079f1000   EX64     EX64.SYS     Wed Sep 15 06:33:41 2010 (4C90A105)
fffff880`01140000 fffff880`01154000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01083000 fffff880`010cf000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`015ed000 fffff880`015f7000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0118e000 fffff880`011c8000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02e0a000 fffff800`02e53000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04a46000 fffff880`04a6a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05c6a000 fffff880`05cc6000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`05d4e000 fffff880`05d67000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05d67000 fffff880`05d6f080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05d40000 fffff880`05d4e000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06085000 fffff880`0614d000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f7000 fffff880`01600000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`12b87000 fffff880`12ba5000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04000000 fffff880`0407b000   IDSvia64 IDSvia64.sys Fri Sep 10 17:54:50 2010 (4C8AA92A)
fffff880`0414b000 fffff880`04177000   Ironx64  Ironx64.SYS  Wed Jun 23 20:28:49 2010 (4C22A6C1)
fffff880`00c00000 fffff880`00c20000   jraid    jraid.sys    Thu Oct 29 04:14:20 2009 (4AE94EDC)
fffff880`04be6000 fffff880`04bf5000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05d90000 fffff880`05d9e000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba3000 fffff800`00bad000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`12bb4000 fffff880`12bf7000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`015c2000 fffff880`015dc000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`017af000 fffff880`017da000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04ff5000 fffff880`04ffa200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05c21000 fffff880`05c36000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05dd6000 fffff880`05df9000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c9f000 fffff880`00cac000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`05d70000 fffff880`05d7e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`12ba5000 fffff880`12bb4000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05d9e000 fffff880`05dab000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c4f000 fffff880`00c69000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01049000 fffff880`01076000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`06c99000 fffff880`06ca9000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`0616b000 fffff880`06183000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`06183000 fffff880`061b0000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`061b0000 fffff880`061fe000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`05c36000 fffff880`05c59000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02cff000 fffff880`02d0a000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f82000 fffff880`00f8c000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`012e2000 fffff880`01340000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`041ea000 fffff880`041f5000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e9000 fffff880`017fb000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0165d000 fffff880`0174f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04fad000 fffff880`04fb9000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0605a000 fffff880`0606d000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04fb9000 fffff880`04fe8000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`11e84000 fffff880`11e99000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c8a000 fffff880`02c99000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c00000 fffff880`02c45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0174f000 fffff880`017af000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02d0a000 fffff880`02d1b000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`041de000 fffff880`041ea000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e53000 fffff800`0342f000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0141f000 fffff880`015c2000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01076000 fffff880`0107f000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`11e12000 fffff880`11e2a000   nusb3hub nusb3hub.sys Thu Apr 22 21:34:35 2010 (4BD0F92B)
fffff880`04400000 fffff880`04430000   nusb3xhc nusb3xhc.sys Thu Apr 22 21:34:36 2010 (4BD0F92C)
fffff880`12b85000 fffff880`12b86180   nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`11e99000 fffff880`11ebc000   nvhda64v nvhda64v.sys Mon Jun 21 18:07:25 2010 (4C1FE29D)
fffff880`11ef3000 fffff880`12b84e00   nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`06007000 fffff880`0605a000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02c4e000 fffff880`02c74000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fcc000 fffff880`00fe1000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f8c000 fffff880`00fbf000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00dde000 fffff880`00dee000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015dc000 fffff880`015ed000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06853000 fffff880`068f9000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05dab000 fffff880`05dbb000   point64  point64.sys  Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`043ab000 fffff880`043e8000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cac000 fffff880`00cc0000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04f89000 fffff880`04fad000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04c00000 fffff880`04c1b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04c1b000 fffff880`04c3c000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04c3c000 fffff880`04c56000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0418d000 fffff880`041de000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04fe8000 fffff880`04ff3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02ce4000 fffff880`02ced000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02ced000 fffff880`02cf6000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02cf6000 fffff880`02cff000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01154000 fffff880`0118e000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0606d000 fffff880`06085000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`00c20000 fffff880`00c4f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`068f9000 fffff880`06904000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`017e2000 fffff880`017e9000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffff880`017da000 fffff880`017e2000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09462000 fffff880`094d3000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`06cda000 fffff880`06d94000   SRTSP64  SRTSP64.SYS  Tue Jul 27 18:18:25 2010 (4C4F5B31)
fffff880`04177000 fffff880`0418d000   SRTSPX64 SRTSPX64.SYS Tue Jul 27 18:18:31 2010 (4C4F5B37)
fffff880`06c03000 fffff880`06c99000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06943000 fffff880`069aa000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06904000 fffff880`06931000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04ff3000 fffff880`04ff4480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`010cf000 fffff880`01140000   SYMDS64  SYMDS64.SYS  Mon May 17 21:12:48 2010 (4BF1E990)
fffff880`01214000 fffff880`012e2000   SYMEFA64 SYMEFA64.SYS Thu Jul 22 22:19:55 2010 (4C48FC4B)
fffff880`04115000 fffff880`0414b000   SYMEVENT64x86 SYMEVENT64x86.SYS Fri Jul 30 19:05:59 2010 (4C535AD7)
fffff880`040af000 fffff880`04115000   SYMNETS  SYMNETS.SYS  Tue Jul 06 23:22:28 2010 (4C33F2F4)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06931000 fffff880`06943000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02d39000 fffff880`02d46000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02d1b000 fffff880`02d39000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02deb000 fffff880`02dff000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04562000 fffff880`04588000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`11e00000 fffff880`11e12000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05d25000 fffff880`05d3fc00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05cfc000 fffff880`05d19000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04430000 fffff880`04431f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04acb000 fffff880`04adc000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`11e2a000 fffff880`11e84000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04a6a000 fffff880`04a75000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04a75000 fffff880`04acb000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05dbb000 fffff880`05dd6000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00fbf000 fffff880`00fcc000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00dee000 fffff880`00dfc000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02caf000 fffff880`02cd4000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0164a000 fffff880`0165a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fe1000 fffff880`00ff6000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`013b3000 fffff880`013ff000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04f4d000 fffff880`04f5a000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02c74000 fffff880`02c8a000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02dd0000 fffff880`02deb000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02cd4000 fffff880`02ce4000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e6f000 fffff880`00f13000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f13000 fffff880`00f22000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02c45000 fffff880`02c4e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000e0000 fffff960`003ef000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`04f5a000 fffff880`04f63000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f79000 fffff880`00f82000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04c5e000 fffff880`04f4d000   WN311B64 WN311B64.sys Thu Jan 21 22:30:58 2010 (4B591BF2)
fffff880`05c00000 fffff880`05c21000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06ca9000 fffff880`06cda000   AODDriver2.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01200000 fffff880`0120e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01000000 fffff880`0100c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01416000 fffff880`0141f000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0100c000 fffff880`0101f000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck BE, {fffff960001f2f98, 1d3000011b98d021, fffff880029e1650, b}

Probably caused by : win32k.sys ( win32k!UpdateAsyncKeyState+116 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff960001f2f98, Virtual address for the attempted write.
Arg2: 1d3000011b98d021, PTE contents.
Arg3: fffff880029e1650, (reserved)
Arg4: 000000000000000b, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xBE

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880029e1650 -- (.trap 0xfffff880029e1650)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff900c0580a70 rbx=0000000000000000 rcx=0000000000000001
rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000000
rip=fffff96000151916 rsp=fffff880029e17e0 rbp=0000000000000001
 r8=0000000000000000  r9=fffff900c1d8ae10 r10=fffff960001f2f10
r11=fffffa80067d6fc8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac pe nc
win32k!UpdateAsyncKeyState+0x116:
fffff960`00151916 4308941088000000 or      byte ptr [r8+r10+88h],dl ds:0120:fffff960`001f2f98=24
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002effae2 to fffff80002e7f740

STACK_TEXT:  
fffff880`029e14e8 fffff800`02effae2 : 00000000`000000be fffff960`001f2f98 1d300001`1b98d021 fffff880`029e1650 : nt!KeBugCheckEx
fffff880`029e14f0 fffff800`02e7d82e : 00000000`00000001 fffff900`c2b6eea0 fffffa80`06aa0000 fffff800`02e855da : nt! ?? ::FNODOBFM::`string'+0x4237e
fffff880`029e1650 fffff960`00151916 : 00000000`00000001 00000000`00000001 00000000`00000001 00000000`00000001 : nt!KiPageFault+0x16e
fffff880`029e17e0 fffff960`00147043 : fffff900`c0881750 00000000`00000001 00000000`00000202 00000000`00000001 : win32k!UpdateAsyncKeyState+0x116
fffff880`029e1810 fffff960`001478bc : fffff880`029e1a90 000000ea`0000048c 00000000`00000001 fffff900`00022e5f : win32k!xxxButtonEvent+0x7cb
fffff880`029e19b0 fffff960`0014b958 : 00000000`00022e5f 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!xxxDoButtonEvent+0x1a8
fffff880`029e1a60 fffff960`00113818 : 00000000`00000000 fffff960`0032fa90 00000000`00000004 00000000`00000003 : win32k!ProcessQueuedMouseEvents+0x2bc
fffff880`029e1af0 fffff960`000a4708 : fffffa80`0000007b 00000000`0000000f fffff880`00000003 ffffffff`800003a4 : win32k!RawInputThread+0x878
fffff880`029e1bc0 fffff960`0012429a : fffffa80`00000002 fffff880`0590ef40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`029e1bf0 fffff800`02e7e993 : fffffa80`06aa0060 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`029e1c20 000007fe`fcd93d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0181fd58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fcd93d3a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!UpdateAsyncKeyState+116
fffff960`00151916 4308941088000000 or      byte ptr [r8+r10+88h],dl

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  win32k!UpdateAsyncKeyState+116

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c7dc13c

FAILURE_BUCKET_ID:  X64_0xBE_win32k!UpdateAsyncKeyState+116

BUCKET_ID:  X64_0xBE_win32k!UpdateAsyncKeyState+116

Followup: MachineOwner
---------

This driver is shown as an unloaded module in both dumps which means it was involved in the crash, not necesarily the cause of the crash. I recommend that you uninstall OverDrive.

AODDriver2.sys - Advanced Micro Devices belonging to AMD OverDrive Service Driver

Update the following driver.

AsUpIO.sys Sun Jul 05 22:21:38 2009 - Asus utility driver. ASUSTeK Computer Inc.-Support-

IoNGeNeRaL · Nov 4, 2010

Norton has been fully removed. I am just waiting for your update.

Thanks.

CarlTR6 · Nov 4, 2010

Good job on removing Norton. I have finished my analysis; you can refresh the page.

IoNGeNeRaL · Nov 4, 2010

AMD OverDrive is uninstalled. However, as for the ASUS Utility Driver, I don't know. Is that the ASUS Update Utility? If so, I am sure it's the latest version on their website. :/ Could you find me the latest version?

CarlTR6 · Nov 4, 2010

Yes, it is a utility driver. Did you enter your computer/motherboard model and that information into the search at the Asus site? If you can't find an update, don't worry about it for the moment. Let's see how your does with Norton and OverDrive removed.

BSOD (2 dumps) Fresh Copy of Windows...

IoNGeNeRaL

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

IoNGeNeRaL

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

IoNGeNeRaL

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

Similar threads

BSOD (2 dumps) Fresh Copy of Windows...

IoNGeNeRaL

New member

My Computer My Computer

CarlTR6

Antique Senior Member

My Computer My Computer

IoNGeNeRaL

New member

My Computer My Computer

CarlTR6

Antique Senior Member

My Computer My Computer

IoNGeNeRaL

New member

My Computer My Computer

CarlTR6

Antique Senior Member

My Computer My Computer

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer