Seemingly "Random" Bsods

[Gingermadman]

two new bsods.

 

[Jonathan_King]

Try a repair install.

http://www.sevenforums.com/tutorials/3413-repair-install.html

 

[Gingermadman]

Driver verified minidump attached, any ideas from this?

 

[Gingermadman]

ran the memtest that was included in the Hirens Recovery Suite disc thing, after 5 scan things it came up with an error on test 8.

Would that be resulting in blue screens?

 

[Jonathan_King]

Very possibly. Could you borrow some RAM from a friend to test?

 

[Gingermadman]

Very possibly. Could you borrow some RAM from a friend to test?

I'm the only person with DDR3 that I know unfortunatly.

 

[jcgriff2]

Hi -

The bugchecks from the last 2 dumps -

0xa = invalid system memory referenced; was a driver verifier enabled dump, but listed "memory corruption" as the cause

0x7e (0xc0000005,,,) = system thread threw an exception = 0xc0000005 = memory access violation. This dump was not verifier-enabled and named the default NT Kernel as probable cause

These drivers pre-date Windows 7 RTM and should be updated; however, drivers from both ATI & NVIDIA video found. What video card do you have?

[FONT=lucida console]AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)  - ATI[/FONT]
 
[FONT=lucida console]nvBridge.kmd Wed Jun 10 09:24:21 2009 (4A2FB405) - NVIDIA[/FONT]
[FONT=lucida console]nvlddmkm.sys Wed Jun 10 10:31:48 2009 (4A2FC3D4) - NVIDIA[/FONT]
 
[FONT=lucida console]viahduaa.sys Mon Aug 17 07:20:43 2009 (4A893D0B) - Via audio[/FONT]

ATI --> Graphics Drivers & Software
Via audio --> VIA Drivers Download - VIA Technologies, Inc.
NVIDIA --> Drivers - Download NVIDIA Drivers

Regards. . .

jcgriff2

.

BUGCHECK SUMMARY

[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Fri Mar 19 15:34:54.747 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 8:23:21.666[/FONT]
[FONT=lucida console]BugCheck A, {fffffa8025b000f0, 2, 1, fffff80002b32a57}[/FONT]
[FONT=lucida console]Probably caused by : memory_corruption ( nt!MiReleaseConfirmedPageFileSpace+87 )[/FONT]
[FONT=lucida console]DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0xA[/FONT]
[FONT=lucida console]PROCESS_NAME:  System[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Mon Mar 15 15:12:14.515 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 1:23:53.403[/FONT]
[FONT=lucida console]BugCheck 1000007E, {ffffffffc0000005, fffff80002ab1953, fffff8800311da58, fffff8800311d2b0}[/FONT]
[FONT=lucida console]Probably caused by : ntkrnlmp.exe ( nt!KiOutSwapKernelStacks+ab )[/FONT]
[FONT=lucida console]PROCESS_NAME:  System[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0x7E[/FONT]

 

[Gingermadman]

updated sound driver to latest and nvidia drivers to the beta 197.13

 

[Gingermadman]

uploading more dumps.

 

[Gingermadman]

Still not found anything to do with the AMD PCI-E filter driver.

Going over all my dumps, it's either pointing to a driver (usually the nvidia from what I can tell from the .sys files it says it's causing it) , ram or motherboard.

I'll keep trying to find the actual problem but it does seem like the motherboard, if it points to problems with the network driver, pci-e drivers and memory problems.

When I ram memtest 86+ and got the error on test 8, it's been said that can point to bad voltages, timings or faulty stick.

Going to use the warranty on my ram stick soon, though if that doesn't fix it I guess the only thing left is the motherboard?

 

[jcgriff2]

Hi-

The bugchecks from the last 3 dumps -

0xa = invalid memory referenced

0xbe = attempt to write to read-only memory

0x3b (0xc0000005,,,) = system service threw an exception, 0xc0000005 = memory access violation. NVIDIA video named probable cause - it is the beta version as you mentioned -

[FONT=lucida console][COLOR=navy]nvlddmkm.sys[/COLOR] Tue [COLOR=red]Mar 16[/COLOR] 03:57:48[COLOR=red] 2010[/COLOR] (4B9F39FC)[/FONT]

However, one of the dumps showed a driver not seen before that has caused many BSODs - NVIDIA tweaking utility - which would obviously impact NVIDIA video -

[FONT=lucida console][COLOR=navy]RivaTuner64.sys[/COLOR] Tue [COLOR=red]Jul 17[/COLOR] 15:13:42 [COLOR=red]2007[/COLOR] (469D14E6)[/FONT]

Riva Tuner support --> RivaTuner


Just to note - these 2 are still around; no evidence either was involved in BSODs -

[FONT=lucida console]viahduaa.sys Thu Jul 09 23:07:01 2009 (4A56B055)[/FONT]
[FONT=lucida console]AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)[/FONT]

I'm surprised that the Driver Verifier did not flag Riva Tuner.

Update Riva Tuner or remove it and see if BSODs persist.

Have a good weekend!

jcgriff2

.

BUGCHECK SUMMARY

[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Tue Mar 23 19:33:42.542 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 0:33:03.430[/FONT]
[FONT=lucida console]BugCheck A, {fffffa7b03a07a80, 2, 0, fffff80002a596ca}[/FONT]
[FONT=lucida console]Probably caused by : CLASSPNP.SYS ( CLASSPNP!TransferPktComplete+1ce )[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0xA[/FONT]
[FONT=lucida console]PROCESS_NAME:  System[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Mon Mar 22 20:39:53.960 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 10:59:20.849[/FONT]
[FONT=lucida console]BugCheck BE, {400747, 8310000108bbb025, fffff8800531a6f0, a}[/FONT]
[FONT=lucida console]Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+40a84 )[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0xBE[/FONT]
[FONT=lucida console]PROCESS_NAME:  Xfire.exe[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Sun Mar 21 11:37:03.992 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 1:56:23.880[/FONT]
[FONT=lucida console]BugCheck 3B, {c0000005, fffff88013df5d53, fffff8800357c5f0, 0}[/FONT]
[FONT=lucida console]*** WARNING: Unable to verify timestamp for nvlddmkm.sys[/FONT]
[FONT=lucida console]*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys[/FONT]
[FONT=lucida console]Probably caused by : nvlddmkm.sys ( nvlddmkm+1c6d53 )[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0x3B[/FONT]
[FONT=lucida console]PROCESS_NAME:  BFBC2Game.exe[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]by [COLOR=navy]jcgriff2   [/COLOR][/FONT]
 
[FONT=lucida console][COLOR=navy]J. C. Griffith, Microsoft MVP[/COLOR] [/FONT]
 
[FONT=lucida console][COLOR=#000055]https://mvp.support.microsoft.com/profile/Griffith[/COLOR] [/FONT]
 
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]

 

[Gingermadman]

I just recently installed RivaTuner as I've heard many problems of recent drivers not increasing fan speed as the load strengthened.

I don't think the driver has changed much from beta to Whql.

I got another Realtek based crashed, so I updated it once more but I've still BSOD. The most recent dump is from after I updated.

This thread here NDIS.SYS Blue Screen Error! is very interesting. I don't know if this at all applies to Avira anti virus or if it's even for Windows 7 but I'll see if I can work it out.

Edit. can't seem to find any options like this for my Realtek Card or anti virus, anyone got any ideas?

It seems like the same problem as everyone on that thread seems to have it saying it's also nvidia and memory problems.

 

[Gingermadman]

Turned off power saving on my network card (I guess that's the router it's affecting when it's turned off.). I'll see if that does anything.

I turned the power saving thing off on the adaptor settings in network connections, no change.

 

[jcgriff2]

Hi -

3 dumps; 2 bugchecks -

0x3b (0xc0000005,,,) = system service threw an exception, 0xc0000005 = memory access violation. Probable cause listed as the Microsoft Win32 subsystem driver win32k.sys

(2) 0xd1 = attempt made by driver to access pageable (or bad) memory at a time that it should not have (process IRQL too high). Probable causes -

- ndis.sys = Microsoft Network Driver Interface Specification driver (NDIS wrapper)
- Rt64win7.sys = Realtek Ethernet driver

[FONT=lucida console]Rt64win7.sys      Tue Jan 12 01:37:27 2010 (4B4C18A7  [/FONT]

win32k.sys nor ndis.sys is the issue here. They are innocent bystanders. What the real problem is exactly is unknown to me at this time.

You mentioned Avira - remove it and see -

Avira Removal --> Avira Solutions - Knowledge Base Problem Details

Install MSE --> http://www.microsoft.com/security_essentials/

I still don't understand given NVIDIA, what this ATI driver is doing here -

[FONT=lucida console]AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)[/FONT]

I have Windows 7 x64 w/ NVIDIA 9600M GT video and do not have the ATI driver in my system.


As far as Riva Tuner - it is from 2007, tweaks video and is an obvious candidate for interference with NVIDIA video - which could be related to the 0x3b system service crash & win32k.sys - possibly involving a transition from user-mode into kernel code territory; hence access violation. Just a theory, though!

Regards. . .

jcgriff2

.

BUGCHECK SUMMARY

[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Sun Mar 28 16:45:00.185 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 4:01:22.419[/FONT]
[FONT=lucida console]BugCheck 3B, {c0000005, fffff96000142ad3, fffff88003a8f0c0, 0}[/FONT]
[FONT=lucida console]Probably caused by : win32k.sys ( win32k!TimersProc+73 )[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0x3B[/FONT]
[FONT=lucida console]PROCESS_NAME:  csrss.exe[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Sun Mar 28 12:42:47.396 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 5:26:01.284[/FONT]
[FONT=lucida console]BugCheck D1, {7, 2, 1, fffff880014b1ad3}[/FONT]
[FONT=lucida console]Probably caused by : ndis.sys ( ndis!ndisReceiveWorkerThread+f3 )[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0xD1[/FONT]
[FONT=lucida console]PROCESS_NAME:  System[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=lucida console]Debug session time: Sat Mar 27 18:05:57.670 2010 (GMT-4)[/FONT]
[FONT=lucida console]System Uptime: 0 days 3:40:22.559[/FONT]
[FONT=lucida console]BugCheck D1, {ce928030, 2, 1, fffff88013c1271c}[/FONT]
[FONT=lucida console]*** WARNING: Unable to verify timestamp for Rt64win7.sys[/FONT]
[FONT=lucida console]*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys[/FONT]
[FONT=lucida console]Probably caused by : Rt64win7.sys ( Rt64win7+1271c )[/FONT]
[FONT=lucida console]BUGCHECK_STR:  0xD1[/FONT]
[FONT=lucida console]PROCESS_NAME:  BFBC2Game.exe[/FONT]
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]
[FONT=lucida console]by [COLOR=navy]jcgriff2   [/COLOR][/FONT]
 
[FONT=lucida console][COLOR=navy]J. C. Griffith, Microsoft MVP[/COLOR] [/FONT]
 
[FONT=lucida console][COLOR=#000055]https://mvp.support.microsoft.com/profile/Griffith[/COLOR] [/FONT]
 
[FONT=lucida console]¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨[/FONT]

 

[Gingermadman]

the ATiPCIe driver is a north bridge filter, and doesn't seem to be installed, as the only remnants I can find of it are two installers, both that won't work without Catalyst installed.

I'm sure it came when I installed something for my AMD processor, which will show up as ATi. I'll keep looking to see what I can do to get rid of it.

edit. Uninstalled all parts of ATi Catalyst, we'll see if that does the job. I had to reinstall all the ATi parts again, then go for an express uninstall everything.

 

[Gingermadman]

got a memory management bsod today, no dump from it though? strange that.

Also seemed to have went from either 781gb free to 790gb free. I lose data or something? hard drive has been checked and should of been fine with the chkdsk etc.

either that or I deleted something and I don't remember.


edit. all files I've used recently and saved recently all seem to be intact.

Guess it must be the RAM then, will see if I can get it returned soon.

 

[Gingermadman]

wish it would just go away now

 

[Gingermadman]

2 more today.

 

[Gingermadman]

memory corruption

 

[zigzag3143]

memory corruption

these crashes were caused by memory corruption. Because of which I would download memtestx86 for at least 5 passes

Let us know the results

Ken

Loading Dump File [C:\Users\K\Desktop\040310-17534-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*F:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a1e000 PsLoadedModuleList = 0xfffff800`02c5be50
Debug session time: Fri Apr  2 19:16:19.463 2010 (GMT-4)
System Uptime: 0 days 13:04:36.351
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff96000172ac0, fffff8800387f0c0, 0}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000172ac0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800387f0c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!TimersProc+60
fffff960`00172ac0 8900            mov     dword ptr [rax],eax

CONTEXT:  fffff8800387f0c0 -- (.cxr 0xfffff8800387f0c0)
rax=000000000f99a027 rbx=0000000000000000 rcx=0000000002ce53f7
rdx=0000000000000000 rsi=000000007fffffff rdi=fffff900c39c1ea8
rip=fffff96000172ac0 rsp=fffff8800387faa0 rbp=000000000000000f
 r8=fffffa8006141968  r9=0000000000000000 r10=fffffffffffffffd
r11=0000000014b8e830 r12=0000000000000000 r13=fffff9600038f2c0
r14=0000000000000002 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
win32k!TimersProc+0x60:
fffff960`00172ac0 8900            mov     dword ptr [rax],eax ds:002b:00000000`0f99a027=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff960001735d4 to fffff96000172ac0

STACK_TEXT:  
fffff880`0387faa0 fffff960`001735d4 : 00000000`00000000 fffff960`0038fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x60
fffff880`0387faf0 fffff960`00104714 : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`800002b8 : win32k!RawInputThread+0x9b4
fffff880`0387fbc0 fffff960`00183ea6 : fffffa80`00000002 fffff880`03864f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0387fbf0 fffff800`02a8f153 : fffffa80`06220760 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0387fc20 000007fe`fd393d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01dcfaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd393d3a


CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32k
5 errors : !win32k (fffff96000172ac1-fffff96000172af1)
fffff96000172ac0  89 *00  e2  c7  21  00  e9  f6  00  00  00  48  8d  5f  e8  0f ....!......H._..
fffff96000172ad0  0d *00  40  8b  53  48  f6  c2  20 *00  85  df  00  00  00  0f [email protected].. .......
fffff96000172ae0  ba *00  48  03  0f  82  cd  00  00  00  8b  4b  40  8b  c1  2b ..H........K@..+
fffff96000172af0  c5 *00  43  40  3b  cd  0f  87  bb  00  00  00  8b  43  44  89 ..C@;........CD.

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  STRIDE

STACK_COMMAND:  .cxr 0xfffff8800387f0c0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000172ac0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800387f0c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!TimersProc+60
fffff960`00172ac0 8900            mov     dword ptr [rax],eax

CONTEXT:  fffff8800387f0c0 -- (.cxr 0xfffff8800387f0c0)
rax=000000000f99a027 rbx=0000000000000000 rcx=0000000002ce53f7
rdx=0000000000000000 rsi=000000007fffffff rdi=fffff900c39c1ea8
rip=fffff96000172ac0 rsp=fffff8800387faa0 rbp=000000000000000f
 r8=fffffa8006141968  r9=0000000000000000 r10=fffffffffffffffd
r11=0000000014b8e830 r12=0000000000000000 r13=fffff9600038f2c0
r14=0000000000000002 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
win32k!TimersProc+0x60:
fffff960`00172ac0 8900            mov     dword ptr [rax],eax ds:002b:00000000`0f99a027=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff960001735d4 to fffff96000172ac0

STACK_TEXT:  
fffff880`0387faa0 fffff960`001735d4 : 00000000`00000000 fffff960`0038fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x60
fffff880`0387faf0 fffff960`00104714 : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`800002b8 : win32k!RawInputThread+0x9b4
fffff880`0387fbc0 fffff960`00183ea6 : fffffa80`00000002 fffff880`03864f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0387fbf0 fffff800`02a8f153 : fffffa80`06220760 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0387fc20 000007fe`fd393d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01dcfaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd393d3a


CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32k
5 errors : !win32k (fffff96000172ac1-fffff96000172af1)
fffff96000172ac0  89 *00  e2  c7  21  00  e9  f6  00  00  00  48  8d  5f  e8  0f ....!......H._..
fffff96000172ad0  0d *00  40  8b  53  48  f6  c2  20 *00  85  df  00  00  00  0f [email protected].. .......
fffff96000172ae0  ba *00  48  03  0f  82  cd  00  00  00  8b  4b  40  8b  c1  2b ..H........K@..+
fffff96000172af0  c5 *00  43  40  3b  cd  0f  87  bb  00  00  00  8b  43  44  89 ..C@;........CD.

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  STRIDE

STACK_COMMAND:  .cxr 0xfffff8800387f0c0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000172ac0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800387f0c0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!TimersProc+60
fffff960`00172ac0 8900            mov     dword ptr [rax],eax

CONTEXT:  fffff8800387f0c0 -- (.cxr 0xfffff8800387f0c0)
rax=000000000f99a027 rbx=0000000000000000 rcx=0000000002ce53f7
rdx=0000000000000000 rsi=000000007fffffff rdi=fffff900c39c1ea8
rip=fffff96000172ac0 rsp=fffff8800387faa0 rbp=000000000000000f
 r8=fffffa8006141968  r9=0000000000000000 r10=fffffffffffffffd
r11=0000000014b8e830 r12=0000000000000000 r13=fffff9600038f2c0
r14=0000000000000002 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
win32k!TimersProc+0x60:
fffff960`00172ac0 8900            mov     dword ptr [rax],eax ds:002b:00000000`0f99a027=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff960001735d4 to fffff96000172ac0

STACK_TEXT:  
fffff880`0387faa0 fffff960`001735d4 : 00000000`00000000 fffff960`0038fa90 00000000`00000004 00000000`00000001 : win32k!TimersProc+0x60
fffff880`0387faf0 fffff960`00104714 : fffffa80`0000007b 00000000`0000000f fffff880`00000001 ffffffff`800002b8 : win32k!RawInputThread+0x9b4
fffff880`0387fbc0 fffff960`00183ea6 : fffffa80`00000002 fffff880`03864f40 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x58
fffff880`0387fbf0 fffff800`02a8f153 : fffffa80`06220760 00000000`00000004 000007ff`fffd3000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`0387fc20 000007fe`fd393d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`01dcfaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd393d3a


CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32k
5 errors : !win32k (fffff96000172ac1-fffff96000172af1)
fffff96000172ac0  89 *00  e2  c7  21  00  e9  f6  00  00  00  48  8d  5f  e8  0f ....!......H._..
fffff96000172ad0  0d *00  40  8b  53  48  f6  c2  20 *00  85  df  00  00  00  0f [email protected].. .......
fffff96000172ae0  ba *00  48  03  0f  82  cd  00  00  00  8b  4b  40  8b  c1  2b ..H........K@..+
fffff96000172af0  c5 *00  43  40  3b  cd  0f  87  bb  00  00  00  8b  43  44  89 ..C@;........CD.

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  STRIDE

STACK_COMMAND:  .cxr 0xfffff8800387f0c0 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID:  X64_MEMORY_CORRUPTION_STRIDE

Followup: memory_corruption
---------