BSOD sometime on my system

writhziden · Feb 26, 2012

Nah, you can keep them there unless you want to remove them to free up space. Just don't remove any .dmp files after you have another crash, though I'm wishing you the best that crashes do not happen again.

symetric · Feb 26, 2012

writhziden said:
Nah, you can keep them there unless you want to remove them to free up space. Just don't remove any .dmp files after you have another crash, though I'm wishing you the best that crashes do not happen again.

er... I decided to play a game and I have a BSOD, I don't know if you need the whole directory but I zipped you the last dump file... just to see if it is again the memory problem ! I Wish...

Thank you very much again...

writhziden · Feb 26, 2012

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\symetric\022612-42167-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c67000 PsLoadedModuleList = 0xfffff800`02eac670
Debug session time: Sun Feb 26 19:43:45.462 2012 (UTC - 7:00)
System Uptime: 0 days 0:38:02.944
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, fffffa8004133070, fffffa8004133940, c8da1a0}

GetPointerFromAddress: unable to read from fffff80002f16100
Probably caused by : ntkrnlmp.exe ( nt!KiDeliverApc+1c7 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffffa8004133070, The pool entry we were looking for within the page.
Arg3: fffffa8004133940, The next pool entry.
Arg4: 000000000c8da1a0, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS:  fffffa8004133070 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  1

IRP_ADDRESS:  ffffffffffffff88

LAST_CONTROL_TRANSFER:  from fffff80002e11cae to fffff80002ce3c40

STACK_TEXT:  
fffff880`07652878 fffff800`02e11cae : 00000000`00000019 00000000`00000020 fffffa80`04133070 fffffa80`04133940 : nt!KeBugCheckEx
fffff880`07652880 fffff800`02cf909e : 00000000`00000001 fffff800`02ce64da 00000000`20206f49 fffffa80`04133090 : nt!ExDeferredFreePool+0x12da
fffff880`07652930 fffff800`02cd72f7 : 00000000`00000000 00000000`00000000 fffffa80`043cff00 fffff880`07652ca0 : nt!IopCompleteRequest+0x5ce
fffff880`07652a00 fffff800`02ce913d : fffff880`02fd62c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1c7
fffff880`07652a80 fffff800`02ceb74f : 00000000`000003ac 00000000`001ea4b0 fffff880`0000006a 00000000`0250f338 : nt!KiCommitThreadWait+0x3dd
fffff880`07652b10 fffff800`02fda44e : fffff880`07652c00 fffffa80`00000006 00000000`00000001 fffff800`02cdf801 : nt!KeWaitForSingleObject+0x19f
fffff880`07652bb0 fffff800`02ce2ed3 : fffffa80`07ca0840 00000000`000003ac fffff880`07652bf8 fffffa80`07d33800 : nt!NtWaitForSingleObject+0xde
fffff880`07652c20 00000000`773f135a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0250f298 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773f135a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiDeliverApc+1c7
fffff800`02cd72f7 4533c9          xor     r9d,r9d

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KiDeliverApc+1c7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

FAILURE_BUCKET_ID:  X64_0x19_20_nt!KiDeliverApc+1c7

BUCKET_ID:  X64_0x19_20_nt!KiDeliverApc+1c7

Followup: MachineOwner
---------

Points more to a driver issue...

symetric · Feb 26, 2012

writhziden said:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [D:\Kingston\BSODDmpFiles\symetric\022612-42167-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c67000 PsLoadedModuleList = 0xfffff800`02eac670
Debug session time: Sun Feb 26 19:43:45.462 2012 (UTC - 7:00)
System Uptime: 0 days 0:38:02.944
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
Use !analyze -v to get detailed debugging information.
 
BugCheck 19, {20, fffffa8004133070, fffffa8004133940, c8da1a0}
 
GetPointerFromAddress: unable to read from fffff80002f16100
Probably caused by : ntkrnlmp.exe ( nt!KiDeliverApc+1c7 )
 
Followup: MachineOwner
---------
 
3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffffa8004133070, The pool entry we were looking for within the page.
Arg3: fffffa8004133940, The next pool entry.
Arg4: 000000000c8da1a0, (reserved)
 
Debugging Details:
------------------
 
 
BUGCHECK_STR:  0x19_20
 
POOL_ADDRESS:  fffffa8004133070 
 
CUSTOMER_CRASH_COUNT:  1
 
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
 
PROCESS_NAME:  svchost.exe
 
CURRENT_IRQL:  1
 
IRP_ADDRESS:  ffffffffffffff88
 
LAST_CONTROL_TRANSFER:  from fffff80002e11cae to fffff80002ce3c40
 
STACK_TEXT:  
fffff880`07652878 fffff800`02e11cae : 00000000`00000019 00000000`00000020 fffffa80`04133070 fffffa80`04133940 : nt!KeBugCheckEx
fffff880`07652880 fffff800`02cf909e : 00000000`00000001 fffff800`02ce64da 00000000`20206f49 fffffa80`04133090 : nt!ExDeferredFreePool+0x12da
fffff880`07652930 fffff800`02cd72f7 : 00000000`00000000 00000000`00000000 fffffa80`043cff00 fffff880`07652ca0 : nt!IopCompleteRequest+0x5ce
fffff880`07652a00 fffff800`02ce913d : fffff880`02fd62c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1c7
fffff880`07652a80 fffff800`02ceb74f : 00000000`000003ac 00000000`001ea4b0 fffff880`0000006a 00000000`0250f338 : nt!KiCommitThreadWait+0x3dd
fffff880`07652b10 fffff800`02fda44e : fffff880`07652c00 fffffa80`00000006 00000000`00000001 fffff800`02cdf801 : nt!KeWaitForSingleObject+0x19f
fffff880`07652bb0 fffff800`02ce2ed3 : fffffa80`07ca0840 00000000`000003ac fffff880`07652bf8 fffffa80`07d33800 : nt!NtWaitForSingleObject+0xde
fffff880`07652c20 00000000`773f135a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0250f298 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773f135a
 
 
STACK_COMMAND:  kb
 
FOLLOWUP_IP: 
nt!KiDeliverApc+1c7
fffff800`02cd72f7 4533c9          xor     r9d,r9d
 
SYMBOL_STACK_INDEX:  3
 
SYMBOL_NAME:  nt!KiDeliverApc+1c7
 
FOLLOWUP_NAME:  MachineOwner
 
MODULE_NAME: nt
 
IMAGE_NAME:  ntkrnlmp.exe
 
DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3
 
FAILURE_BUCKET_ID:  X64_0x19_20_nt!KiDeliverApc+1c7
 
BUCKET_ID:  X64_0x19_20_nt!KiDeliverApc+1c7
 
Followup: MachineOwner
---------

Points more to a driver issue...

And only with that dump...we don't know which driver heh ?

writhziden · Feb 26, 2012

Unfortunately, no. The only one that still stands out is the Creative driver.

symetric · Feb 27, 2012

writhziden said:
Unfortunately, no. The only one that still stands out is the Creative driver.

Good morning, the MEMTEST still running this morning 8 pass no error... I will check tonight when I come back from work.

I remember in the last year, some tech on internet told me that my SoundBlaster is not so "compatible" with Win 7... I should buy a new one ? Do you think it is why the driver is not good... I mean, I have a retail box of SoundBlaster Audigy 2 Platinum ZS...but when I try to install the good driver for this card it doenst work (on Creative web site) The tech told me to check the model on my card and it is SB0460, so that why I have to install driver for this card to make it work... Do you understand what I try to explain lol...

The model SB0460 is an SoundBlaster X-FI... strange no ?

Should I go buy another SoundBlaster Fully compatible with Win 7 and that support my FRONT CONTROL (for my SoundBlaster)

writhziden · Feb 27, 2012

It is worth investigating. Try a newer sound card that is known to work with Windows 7 and see if it helps. Borrow one from a friend if you can so you do not have to spend the money in case it does not resolve the issue.

symetric · Feb 27, 2012

writhziden said:
It is worth investigating. Try a newer sound card that is known to work with Windows 7 and see if it helps. Borrow one from a friend if you can so you do not have to spend the money in case it does not resolve the issue.

Hi again, MEMTEST is now at Pass 19 with no error...21 hrs online... you think I can stop ?

Those module should be ok ?? I should put back my other module in place since I got a BSOD only with those 2 modules installed..

writhziden · Feb 27, 2012

Yes, I would say that is sufficient testing. Have you tested with all three modules?

symetric · Feb 27, 2012

No...only 2 X 2048 DDR2... I crash with those last time so I think I dont need to test the othr 2 module ? 21 Pass now with no error

Maybe I should remove my SB driver , remove my SB card and put the soundcard that come with my motherboard ?

Maybe that the problem ? or its really the memory... really Im a bit confused

writhziden · Feb 27, 2012

It could be both. I would leave the other two modules out since they were bought at a different time. You can put them back in after we find out how to get the system stable and see if they work and the system remains stable.

Sorry, forgot you were the one who bought two pairs of modules at different times. I help a lot of people, so it can get confusing...

Dave76 · Feb 28, 2012

Let's take a look at the BIOS voltage settings for your RAM.

Go to your BIOS and tell us what the CPU, RAM and North Bridge (NB) voltages are.

Let us know if you have any questions.

symetric · Feb 28, 2012

Dave76 said:
Let's take a look at the BIOS voltage settings for your RAM.

Go to your BIOS and tell us what the CPU, RAM and North Bridge (NB) voltages are.

Let us know if you have any questions.

Hello Dave76 !

I attached a jpg of my BIOS Voltage, thank for helping me too...

Don't forget that I didnt put back my 2 other memory module...

symetric · Mar 1, 2012

Hello writhziden, did you clean our thread, it seem to miss some post ??

Also, this morning I got another BSOD while playing a Flash Game (CityVille) on Facebook with Google Chrome

Here the dmp file...thanks

writhziden · Mar 1, 2012

There was a server crash, so we are running from a backup, I believe. Many threads are missing posts or missing entirely if they were new.

Code:

[list=1][*]
Loading Dump File [D:\Kingston\BSODDmpFiles\symetric\030112-36816-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e0c000 PsLoadedModuleList = 0xfffff800`03051670
Debug session time: Thu Mar  1 04:50:26.336 2012 (UTC - 7:00)
System Uptime: 0 days 11:26:22.193
Loading Kernel Symbols
...............................................................
................................................................
.....................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {fffff8e002f639bc, 2, 1, fffff80002fb7fa2}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Core_iCompleteDoneTransfer+a15 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: fffff8e002f639bc, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80002fb7fa2, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExFreePoolWithTag+212
fffff800`02fb7fa2 ff411c          inc     dword ptr [rcx+1Ch]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  iexplore.exe

TRAP_FRAME:  fffff88002f929e0 -- (.trap 0xfffff88002f929e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000005fffffffa0 rbx=0000000000000000 rcx=fffff8e002f639a0
rdx=fffff88002f63180 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002fb7fa2 rsp=fffff88002f92b70 rbp=0000000000000000
 r8=000000000000d430  r9=0000000000000000 r10=fffff80002e0c000
r11=000000000000054e r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!ExFreePoolWithTag+0x212:
fffff800`02fb7fa2 ff411c          inc     dword ptr [rcx+1Ch] ds:fffff8e0`02f639bc=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e881e9 to fffff80002e88c40

STACK_TEXT:  
fffff880`02f92898 fffff800`02e881e9 : 00000000`0000000a fffff8e0`02f639bc 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`02f928a0 fffff800`02e86e60 : 00000000`00000000 fffff880`00f2a051 fffffa80`046177e0 fffffa80`08bcba00 : nt!KiBugCheckDispatch+0x69
fffff880`02f929e0 fffff800`02fb7fa2 : fffffa80`03fb0820 fffff880`00f1dc9b fffffa80`04e12240 fffffa80`04618701 : nt!KiPageFault+0x260
fffff880`02f92b70 fffff800`02e75491 : fffffa80`046095c0 fffffa80`05368050 fffffa80`73556f49 fffff800`02fb7fbd : nt!ExFreePoolWithTag+0x212
fffff880`02f92c20 fffff800`02e8c021 : fffffa80`04618913 00000000`00000000 00000000`00000000 00000000`00000050 : nt!IopUnloadSafeCompletion+0x61
fffff880`02f92c60 fffff880`04013631 : fffffa80`05368050 fffffa80`04617600 00000000`00000000 00000000`00000000 : nt!IopfCompleteRequest+0x341
fffff880`02f92d50 fffff880`04013b0f : fffffa80`07decc02 fffffa80`04618720 00000000`ffffffff fffffa80`05368eb0 : USBPORT!USBPORT_Core_iCompleteDoneTransfer+0xa15
fffff880`02f92e30 fffff880`0401166f : fffffa80`05368eb0 fffffa80`053681a0 fffffa80`05369050 00000000`00000000 : USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x3a7
fffff880`02f92e90 fffff880`04002f89 : fffffa80`05368050 00000000`00000000 fffffa80`05368e02 fffffa80`05368eb0 : USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xf3
fffff880`02f92ed0 fffff800`02e940ac : fffff880`02f63180 fffffa80`05368eb0 fffffa80`05368ec8 00000000`00000000 : USBPORT!USBPORT_Xdpc_Worker+0x1d9
fffff880`02f92f00 fffff800`02e8b765 : 00000000`00000000 fffffa80`0458ab60 00000000`00000000 fffff880`04002db0 : nt!KiRetireDpcList+0x1bc
fffff880`02f92fb0 fffff800`02e8b57c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KyRetireDpcList+0x5
fffff880`07de3e20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue


STACK_COMMAND:  kb

FOLLOWUP_IP: 
USBPORT!USBPORT_Core_iCompleteDoneTransfer+a15
fffff880`04013631 440fb6db        movzx   r11d,bl

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  USBPORT!USBPORT_Core_iCompleteDoneTransfer+a15

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: USBPORT

IMAGE_NAME:  USBPORT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4d8c0c08

FAILURE_BUCKET_ID:  X64_0xC5_2_USBPORT!USBPORT_Core_iCompleteDoneTransfer+a15

BUCKET_ID:  X64_0xC5_2_USBPORT!USBPORT_Core_iCompleteDoneTransfer+a15

Followup: MachineOwner
---------
[*]
Loading Dump File [D:\Kingston\BSODDmpFiles\symetric\022812-24554-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e01000 PsLoadedModuleList = 0xfffff800`03046670
Debug session time: Tue Feb 28 21:10:56.303 2012 (UTC - 7:00)
System Uptime: 0 days 1:00:16.160
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {0, 0, 0, 0}

Unable to load image \SystemRoot\system32\DRIVERS\NuidFltr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NuidFltr.sys
*** ERROR: Module load completed but symbols could not be loaded for NuidFltr.sys
Probably caused by : NuidFltr.sys ( NuidFltr+2899 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

FAULTING_IP: 
+6462366164323833
00000000`00000000 ??              ???

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

ERROR_CODE: (NTSTATUS) 0 - STATUS_WAIT_0

BUGCHECK_STR:  0x1E_0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

EXCEPTION_RECORD:  fffff80000b9c368 -- (.exr 0xfffff80000b9c368)
ExceptionAddress: fffff88000ebc6eb (Wdf01000!FxObjectHandleGetPtrQI+0x000000000000003b)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff80000b9c410 -- (.trap 0xfffff80000b9c410)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88000ee80b0 rbx=0000000000000000 rcx=fffffa80071ecb30
rdx=fffff80000b9c5f0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000ebc6eb rsp=fffff80000b9c5a0 rbp=0000057ffad68188
 r8=0000057ff8e134c8  r9=0000000000001030 r10=0000000000000000
r11=fffff80000b9c608 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
Wdf01000!FxObjectHandleGetPtrQI+0x3b:
fffff880`00ebc6eb ff5028          call    qword ptr [rax+28h] ds:fffff880`00ee80d8=0049004300410052
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e755fe to fffff80002e7dc10

STACK_TEXT:  
fffff800`00b9b448 fffff800`02e755fe : fffffa80`50646641 fffff800`000001a4 fffff800`00b9bbc0 fffff800`02ea9830 : nt!KeBugCheck
fffff800`00b9b450 fffff800`02ea94fd : fffff800`0308771c fffff800`02fc4c30 fffff800`02e01000 fffff800`00b9c368 : nt!KiKernelCalloutExceptionHandler+0xe
fffff800`00b9b480 fffff800`02ea82d5 : fffff800`02fc80fc fffff800`00b9b4f8 fffff800`00b9c368 fffff800`02e01000 : nt!RtlpExecuteHandlerForException+0xd
fffff800`00b9b4b0 fffff800`02eb9361 : fffff800`00b9c368 fffff800`00b9bbc0 fffff800`00000000 00000000`00001030 : nt!RtlDispatchException+0x415
fffff800`00b9bb90 fffff800`02e7d2c2 : fffff800`00b9c368 fffffa80`071ecb30 fffff800`00b9c410 0000057f`f8e134c8 : nt!KiDispatchException+0x135
fffff800`00b9c230 fffff800`02e7bbca : fffff800`02e01000 00000000`00000001 00000000`00000000 00000000`00000001 : nt!KiExceptionDispatch+0xc2
fffff800`00b9c410 fffff880`00ebc6eb : 00000000`00000000 fffffa80`071eb820 fffffa80`071f14d0 fffffa80`071eba00 : nt!KiGeneralProtectionFault+0x10a
fffff800`00b9c5a0 fffff880`00e8543f : 00000000`00000000 fffffa80`071eba05 fffffa80`071ecea0 fffff880`09a40660 : Wdf01000!FxObjectHandleGetPtrQI+0x3b
fffff800`00b9c610 fffff880`0597b899 : 00000000`00000000 0000057f`f8e134c8 0000057f`f8e134c8 fffff880`00e9ff38 : Wdf01000!imp_WdfDeviceGetIoTarget+0x7f
fffff800`00b9c650 00000000`00000000 : 0000057f`f8e134c8 0000057f`f8e134c8 fffff880`00e9ff38 fffff800`00b9c6d8 : NuidFltr+0x2899


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NuidFltr+2899
fffff880`0597b899 ??              ???

SYMBOL_STACK_INDEX:  9

SYMBOL_NAME:  NuidFltr+2899

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NuidFltr

IMAGE_NAME:  NuidFltr.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d9f9308

FAILURE_BUCKET_ID:  X64_0x1E_0_NuidFltr+2899

BUCKET_ID:  X64_0x1E_0_NuidFltr+2899

Followup: MachineOwner
---------


[/list]

Points to USB devices...
Points to your mouse... Hmm... deja vu!

Start with the steps in http://www.sevenforums.com/tutorials/165554-usb-driver-general-fix-problems.html.
Then use hard reset to resolve hardware and software issues (works on all computers, not just HP Pavilions) to reset your USB ports. They may have entered a power state to protect the system from a surge and need to be reset.

symetric · Mar 2, 2012

Hello writhziden,

I'm checking your tutorial about the "General Fix of USBDriver"

I was removing all my USB hardware from usb port and my computer close.. I was thinking I touch the power cord but no... it create a dump file, you can check it...

Also, in the tutorial it say, plug a wired mouse and keyboard , I can plug a keyboard wired I have the hole in the back of my computer but I can't for a mouse.. Idon't have any green hole for it..... should I stay connected my wireless hardware (mouse and kb) and do what they say in the tutorial ?

symetric · Mar 2, 2012

Humm do I really need to make the usb tutorial... and delete the INFCACHE.1 file since I got a clean install of Win 7....

writhziden · Mar 2, 2012

Code:

Loading Dump File [D:\Kingston\BSODDmpFiles\symetric\030212-19219-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e0d000 PsLoadedModuleList = 0xfffff800`03052670
Debug session time: Fri Mar  2 17:11:06.213 2012 (UTC - 7:00)
System Uptime: 1 days 12:19:02.070
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff88000fb76eb, fffff880033a0ef8, fffff880033a0750}

Unable to load image \SystemRoot\system32\DRIVERS\point64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for point64.sys
*** ERROR: Module load completed but symbols could not be loaded for point64.sys
Probably caused by : point64.sys ( point64+186a )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88000fb76eb, The address that the exception occurred at
Arg3: fffff880033a0ef8, Exception Record Address
Arg4: fffff880033a0750, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
Wdf01000!FxObjectHandleGetPtrQI+3b
fffff880`00fb76eb ff5028          call    qword ptr [rax+28h]

EXCEPTION_RECORD:  fffff880033a0ef8 -- (.exr 0xfffff880033a0ef8)
ExceptionAddress: fffff88000fb76eb (Wdf01000!FxObjectHandleGetPtrQI+0x000000000000003b)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff880033a0750 -- (.cxr 0xfffff880033a0750)
rax=fffff88000fe30b0 rbx=fffffa800717cb30 rcx=fffffa800717cb30
rdx=fffff880033a1180 rsi=0000057ff8e834c8 rdi=0000000000001000
rip=fffff88000fb76eb rsp=fffff880033a1130 rbp=0000057ff8e864c8
 r8=0000057ff8e834c8  r9=0000000000001000 r10=fffff80002e0d000
r11=fffff880033a1198 r12=fffffa8007179b50 r13=fffffa8007179b50
r14=fffff88000fdc800 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
Wdf01000!FxObjectHandleGetPtrQI+0x3b:
fffff880`00fb76eb ff5028          call    qword ptr [rax+28h] ds:002b:fffff880`00fe30d8=0049004300410052
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030bc100
 ffffffffffffffff 

FOLLOWUP_IP: 
point64+186a
fffff880`0463e86a ??              ???

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff88000fb700c to fffff88000fb76eb

STACK_TEXT:  
fffff880`033a1130 fffff880`00fb700c : 0000057f`f8e834c8 00000000`00000000 fffffa80`07516010 fffffa80`07159600 : Wdf01000!FxObjectHandleGetPtrQI+0x3b
fffff880`033a11a0 fffff880`0463e86a : 00000000`00000000 fffff880`046441a0 fffffa80`07179e70 fffffa80`00000028 : Wdf01000!imp_WdfObjectDelete+0x88
fffff880`033a11f0 00000000`00000000 : fffff880`046441a0 fffffa80`07179e70 fffffa80`00000028 fffffa80`07179b30 : point64+0x186a


SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  point64+186a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: point64

IMAGE_NAME:  point64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4dd37e38

STACK_COMMAND:  .cxr 0xfffff880033a0750 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_point64+186a

BUCKET_ID:  X64_0x7E_point64+186a

Followup: MachineOwner
---------

Microsoft IntelliPoint Filter Driver caused the latest crash. These are starting to point to a mouse related issue. Can you try a different mouse?

And yes, I would still proceed with the steps even though it is a clean install to make sure we are thorough.

symetric · Mar 2, 2012

I think the crash is when I unplug my Wieless receiver for my Mouse and Keyboard (but not sure) and I plug it to another USB Port... right now I have only this plugged in one USB Port..

Dave76 · Mar 4, 2012

Can you borrow a wired USB mouse to use for testing?
Mouse and keyboard faults can cause many different types of crashes, this is a important trouble shooting step.
Use the wired keyboard even if you don't find a wired mouse to use.

What is the age, brand and wattage rating of your PSU (Power Supply Unit)?

Do you still have the two older RAM cards installed?
Your voltage settings look pretty good, definitely should be enough to run your current 4GB RAM.
For testing purposes, take the two older RAM cards out and install the two newer cards.
Use RAM slots 1 and 3.
If you are still getting crashes change them to slots 2 and 4.

Are your RAM frequencies set on Auto or entered manually?

Is the 'Intel Speed Step' enabled?

BSOD sometime on my system

Closed by request.

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

Endeavor to Persevere

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Closed by request.

My Computer My Computer

New member

My Computer My Computer

Endeavor to Persevere

My Computer My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer