BSOD after fresh Win7 Install

Porkstorm · Feb 17, 2011

I've been having random BSOD crashed for about a year now, since I assembled this machine. 3 or 4 different error codes, all of which pointed to memory issues from what I could find online.
I performed a fresh install of Win7 a few nights ago, including a format of my HDD. 2 or 3 days later, the first BSOD occurred.

Basic Information:
Win7Prox64
Intel Core2Quad Q8300 (@2.5GhZ) Processor
Gigabyte P31-ES3G Motherboard
4gigs DDR2 PC2-8500 Ram (2x2gb) Memory Master RAM
300g Western Digital SATA Velociraptor HDD.
Radeon HD5750 Video Card

Attachment includes my System Health Report (Html file) And the Bluescreen Dump report (Both as requested in the posting guidelines forum).

Thank you in advance for any and all help

zigzag3143 · Feb 17, 2011

Porkstorm said:
I've been having random BSOD crashed for about a year now, since I assembled this machine. 3 or 4 different error codes, all of which pointed to memory issues from what I could find online.
I performed a fresh install of Win7 a few nights ago, including a format of my HDD. 2 or 3 days later, the first BSOD occurred.

Basic Information:
Win7Prox64
Intel Core2Quad Q8300 (@2.5GhZ) Processor
Gigabyte P31-ES3G Motherboard
4gigs DDR2 PC2-8500 Ram (2x2gb) Memory Master RAM
300g Western Digital SATA Velociraptor HDD.
Radeon HD5750 Video Card

Attachment includes my System Health Report (Html file) And the Bluescreen Dump report (Both as requested in the posting guidelines forum).

Thank you in advance for any and all help

Memory corruption possibly caused by malware bytes

I would run memtest and remove mbam and replace with Microsoft security essentials
Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. Test the sticks individually, and if you find a good one, test it in all slots.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\021711-18127-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02a5a000 PsLoadedModuleList = 0xfffff800`02c97e50
Debug session time: Thu Feb 17 18:32:26.296 2011 (GMT-5)
System Uptime: 0 days 0:09:33.184
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa98619de9fb, 2, 0, fffff80002aeb895}

Probably caused by : memory_corruption ( nt!MiUnlinkPageFromLockedList+265 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa98619de9fb, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002aeb895, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d020e0
 fffffa98619de9fb 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiUnlinkPageFromLockedList+265
fffff800`02aeb895 410fb6511b      movzx   edx,byte ptr [r9+1Bh]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  mbam.exe

TRAP_FRAME:  fffff880092b3280 -- (.trap 0xfffff880092b3280)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000082089f8a rbx=0000000000000000 rcx=000000000004dd22
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002aeb895 rsp=fffff880092b3410 rbp=0000000000000005
 r8=0000058000000000  r9=fffffa98619de9e0 r10=fffffa800232dfa0
r11=2aaaaaaaaaaaaaab r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe cy
nt!MiUnlinkPageFromLockedList+0x265:
fffff800`02aeb895 410fb6511b      movzx   edx,byte ptr [r9+1Bh] ds:fffffa98`619de9fb=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ac9ca9 to fffff80002aca740

STACK_TEXT:  
fffff880`092b3138 fffff800`02ac9ca9 : 00000000`0000000a fffffa98`619de9fb 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`092b3140 fffff800`02ac8920 : 00000000`00000000 fffffa80`019d11b0 00000000`00000000 fffffa80`03f58220 : nt!KiBugCheckDispatch+0x69
fffff880`092b3280 fffff800`02aeb895 : fa8003f5`82a004c0 fa8003f5`82a004c0 fa8003f5`82a004c0 fa8003f5`82a004c0 : nt!KiPageFault+0x260
fffff880`092b3410 fffff800`02ae7535 : fffff6fc`c00cc580 00000000`00000000 fffff880`c00cc580 fffff880`092b3500 : nt!MiUnlinkPageFromLockedList+0x265
fffff880`092b34a0 fffff800`02b0ecae : fffff980`19880000 00000000`0056b000 fffff880`00000000 fffffa80`070485b0 : nt!MmCheckCachedPageStates+0x295
fffff880`092b3650 fffff800`02de579b : 00000000`00300000 00000000`00300000 fffffa80`0704f3d0 00000000`08a20020 : nt!CcFetchDataForRead+0x10e
fffff880`092b36b0 fffff880`012c8c48 : fffff880`00000000 00000000`00000005 fffffa80`00040000 fffffa80`0086b001 : nt!CcCopyRead+0x16b
fffff880`092b3770 fffff880`011030c8 : fffffa80`0704f3d0 fffffa80`07048548 00000000`00120089 fffffa80`0704f401 : Ntfs!NtfsCopyReadA+0x1a8
fffff880`092b3940 fffff880`01106c2a : fffff880`092b3a10 00000000`08720003 00000000`08720000 fffffa80`0704f300 : fltmgr!FltpPerformFastIoCall+0x88
fffff880`092b39a0 fffff880`011245f0 : fffffa80`0704f3d0 00000000`00000000 fffff880`092b3b00 00000000`0086b000 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`092b39e0 fffff800`02de60c9 : fffffa80`0704f3d0 fffff880`00000001 fffffa80`039dcf30 fffffa80`0704f3d0 : fltmgr!FltpFastIoRead+0x1d0
fffff880`092b3a80 fffff800`02ac9993 : 00000000`000060a1 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x417
fffff880`092b3b70 00000000`74852dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008ebf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x74852dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiUnlinkPageFromLockedList+265
fffff800`02aeb895 410fb6511b      movzx   edx,byte ptr [r9+1Bh]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiUnlinkPageFromLockedList+265

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiUnlinkPageFromLockedList+265

BUCKET_ID:  X64_0xA_nt!MiUnlinkPageFromLockedList+265

Followup: MachineOwner
---------

Porkstorm · Feb 17, 2011

The crash happened before I installed Malwarebytes... though I imagine that does not rule out the issue.
Also, I am unable to run memtest86 as my keyboard does not function during boot (after the windows install, that is).
I have MS Security essentials installed as well, and am going to remove Malware Bytes.

Any more information you can provide about testing the motherboard RAM slots? I was under the impression that you need to run 2 identical RAM chips in the slots in order for the computer to work correctly?

Porkstorm · Feb 17, 2011

Actually, I believe the crash happened AS I installed Malwarebytes. Though before I reinstalled windows recently, I was getting the crash long before I used that program.

Porkstorm · Feb 18, 2011

Had another BSOD last night... here's the report...

DeanP · Feb 18, 2011

Hello,

Dump blames Ancillary Function Driver for WinSock, use SFC /scannow to verify and repair OS files.

Also, update this driver

Rt64win7.sys Thu Feb 26 22:04:13 2009
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
Realtek

Regards...

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffa8079d3e299, 0, fffff88002ca3662, 5}


Could not read faulting driver name
Probably caused by : afd.sys ( afd!AfdDerefPollInfoFileObjects+12 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa8079d3e299, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88002ca3662, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cf30e0
 fffffa8079d3e299 

FAULTING_IP: 
afd!AfdDerefPollInfoFileObjects+12
fffff880`02ca3662 33f6            xor     esi,esi

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  Launcher.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88003b536a0 -- (.trap 0xfffff88003b536a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8003ada54e rbx=0000000000000000 rcx=fffffa8003ada580
rdx=000000000000019f rsi=0000000000000000 rdi=0000000000000000
rip=fffff88002ca3662 rsp=fffff88003b5383d rbp=fffffa8003ada580
 r8=0000000000006210  r9=0000000000000001 r10=fffffa80040a6d60
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         ov up ei pl nz ac po nc
afd!AfdDerefPollInfoFileObjects+0x12:
fffff880`02ca3662 33f6            xor     esi,esi
Resetting default scope

UNALIGNED_STACK_POINTER:  fffff88003b5383d

LAST_CONTROL_TRANSFER:  from fffff80002b3a8c1 to fffff80002abb740

STACK_TEXT:  
fffff880`03b53538 fffff800`02b3a8c1 : 00000000`00000050 fffffa80`79d3e299 00000000`00000000 fffff880`03b536a0 : nt!KeBugCheckEx
fffff880`03b53540 fffff800`02ab982e : 00000000`00000000 00000000`00000000 fffffa80`05a84900 fffffa80`05a84830 : nt! ?? ::FNODOBFM::`string'+0x40e8b
fffff880`03b536a0 fffff880`02ca3662 : 00000000`10fffff8 00000002`46000000 8003b538`60000000 00000000`18fffff8 : nt!KiPageFault+0x16e
fffff880`03b5383d 8003b539`18fffff8 : 8003c366`40fffff8 fffffa80`03bb7160 00000000`04000000 8002cb9d`e6000000 : afd!AfdDerefPollInfoFileObjects+0x12
fffff880`03b5386d 8003c366`40fffff8 : fffffa80`03bb7160 00000000`04000000 8002cb9d`e6000000 00000000`00fffff8 : 0x8003b539`18fffff8
fffff880`03b53875 fffffa80`03bb7160 : 00000000`04000000 8002cb9d`e6000000 00000000`00fffff8 8003ada5`80000000 : 0x8003c366`40fffff8
fffff880`03b5387d 00000000`04000000 : 8002cb9d`e6000000 00000000`00fffff8 8003ada5`80000000 00000000`00fffffa : 0xfffffa80`03bb7160
fffff880`03b53885 8002cb9d`e6000000 : 00000000`00fffff8 8003ada5`80000000 00000000`00fffffa 8003bb71`60000000 : 0x4000000
fffff880`03b5388d 00000000`00fffff8 : 8003ada5`80000000 00000000`00fffffa 8003bb71`60000000 8003b539`18fffffa : 0x8002cb9d`e6000000
fffff880`03b53895 8003ada5`80000000 : 00000000`00fffffa 8003bb71`60000000 8003b539`18fffffa 00000000`00fffff8 : 0xfffff8
fffff880`03b5389d 00000000`00fffffa : 8003bb71`60000000 8003b539`18fffffa 00000000`00fffff8 8003ada5`80000000 : 0x8003ada5`80000000
fffff880`03b538a5 8003bb71`60000000 : 8003b539`18fffffa 00000000`00fffff8 8003ada5`80000000 8003c367`7cfffffa : 0xfffffa
fffff880`03b538ad 8003b539`18fffffa : 00000000`00fffff8 8003ada5`80000000 8003c367`7cfffffa 8003c366`40fffffa : 0x8003bb71`60000000
fffff880`03b538b5 00000000`00fffff8 : 8003ada5`80000000 8003c367`7cfffffa 8003c366`40fffffa 8003ada5`80fffffa : 0x8003b539`18fffffa
fffff880`03b538bd 8003ada5`80000000 : 8003c367`7cfffffa 8003c366`40fffffa 8003ada5`80fffffa 00000000`00fffffa : 0xfffff8
fffff880`03b538c5 8003c367`7cfffffa : 8003c366`40fffffa 8003ada5`80fffffa 00000000`00fffffa 00000000`00000000 : 0x8003ada5`80000000
fffff880`03b538cd 8003c366`40fffffa : 8003ada5`80fffffa 00000000`00fffffa 00000000`00000000 8003ada5`90000000 : 0x8003c367`7cfffffa
fffff880`03b538d5 8003ada5`80fffffa : 00000000`00fffffa 00000000`00000000 8003ada5`90000000 00000000`00fffffa : 0x8003c366`40fffffa
fffff880`03b538dd 00000000`00fffffa : 00000000`00000000 8003ada5`90000000 00000000`00fffffa 8003ada5`98000000 : 0x8003ada5`80fffffa
fffff880`03b538e5 00000000`00000000 : 8003ada5`90000000 00000000`00fffffa 8003ada5`98000000 00000000`00fffffa : 0xfffffa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
afd!AfdDerefPollInfoFileObjects+12
fffff880`02ca3662 33f6            xor     esi,esi

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  afd!AfdDerefPollInfoFileObjects+12

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: afd

IMAGE_NAME:  afd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc184

FAILURE_BUCKET_ID:  X64_0x50_afd!AfdDerefPollInfoFileObjects+12

BUCKET_ID:  X64_0x50_afd!AfdDerefPollInfoFileObjects+12

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`00f5c000 fffff880`00fb3000   ACPI     ACPI.sys     Tue Jul 14 11:19:34 2009 (4A5BC106)
fffff880`02c57000 fffff880`02ce1000   afd      afd.sys      Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`03e10000 fffff880`03e26000   AgileVpn AgileVpn.sys Tue Jul 14 12:10:24 2009 (4A5BCCF0)
fffff880`00c54000 fffff880`00c5f000   amdxata  amdxata.sys  Wed May 20 05:56:59 2009 (4A12F2EB)
fffff880`069d6000 fffff880`069e1000   asyncmac asyncmac.sys Tue Jul 14 12:10:13 2009 (4A5BCCE5)
fffff880`00e9b000 fffff880`00ea4000   atapi    atapi.sys    Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00c2a000 fffff880`00c54000   ataport  ataport.SYS  Tue Jul 14 11:19:52 2009 (4A5BC118)
fffff880`0483f000 fffff880`05076000   atikmdag atikmdag.sys Wed Jan 05 15:48:52 2011 (4D23DC14)
fffff880`03f3f000 fffff880`03f8c000   atikmpag atikmpag.sys Wed Jan 05 15:19:38 2011 (4D23D53A)
fffff880`019a1000 fffff880`019a8000   Beep     Beep.SYS     Tue Jul 14 12:00:13 2009 (4A5BCA8D)
fffff880`03ef2000 fffff880`03f03000   blbdrive blbdrive.sys Tue Jul 14 11:35:59 2009 (4A5BC4DF)
fffff880`046bf000 fffff880`046dd000   bowser   bowser.sys   Tue Jul 14 11:23:50 2009 (4A5BC206)
fffff960`00790000 fffff960`007b7000   cdd      cdd.dll      Wed Jan 26 19:31:34 2011 (4D3FBFC6)
fffff880`01907000 fffff880`01924000   cdfs     cdfs.sys     Tue Jul 14 11:19:46 2009 (4A5BC112)
fffff880`0193d000 fffff880`01967000   cdrom    cdrom.sys    Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`00d40000 fffff880`00e00000   CI       CI.dll       Tue Jul 14 13:32:13 2009 (4A5BE01D)
fffff880`018d7000 fffff880`01907000   CLASSPNP CLASSPNP.SYS Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00ce2000 fffff880`00d40000   CLFS     CLFS.SYS     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`0115b000 fffff880`011ce000   cng      cng.sys      Tue Jul 14 11:49:40 2009 (4A5BC814)
fffff880`03e00000 fffff880`03e10000   CompositeBus CompositeBus.sys Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`01924000 fffff880`01932000   crashdmp crashdmp.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`03e51000 fffff880`03ed4000   csc      csc.sys      Tue Jul 14 11:24:26 2009 (4A5BC22A)
fffff880`03ed4000 fffff880`03ef2000   dfsc     dfsc.sys     Tue Jul 14 11:23:44 2009 (4A5BC200)
fffff880`02dc7000 fffff880`02dd6000   discache discache.sys Tue Jul 14 11:37:18 2009 (4A5BC52E)
fffff880`018c1000 fffff880`018d7000   disk     disk.sys     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`05b2e000 fffff880`05b56000   Dot4     Dot4.sys     Tue Jul 14 12:00:16 2009 (4A5BCA90)
fffff880`05b71000 fffff880`05b7b000   Dot4Prt  Dot4Prt.sys  Tue Jul 14 12:00:13 2009 (4A5BCA8D)
fffff880`05b1e000 fffff880`05b2e000   dot4usb  dot4usb.sys  Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff880`04099000 fffff880`040bb000   drmk     drmk.sys     Tue Jul 14 13:01:25 2009 (4A5BD8E5)
fffff880`040ce000 fffff880`040d7000   dump_atapi dump_atapi.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`01086000 fffff880`01092000   dump_dumpata dump_dumpata.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`05ae2000 fffff880`05af5000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:21:51 2009 (4A5BC18F)
fffff880`05af5000 fffff880`05b01000   Dxapi    Dxapi.sys    Tue Jul 14 11:38:28 2009 (4A5BC574)
fffff880`05076000 fffff880`0516a000   dxgkrnl  dxgkrnl.sys  Wed Jan 26 17:22:56 2011 (4D3FA1A0)
fffff880`0516a000 fffff880`051b0000   dxgmms1  dxgmms1.sys  Wed Jan 26 17:22:12 2011 (4D3FA174)
fffff880`051e5000 fffff880`051f2000   fdc      fdc.sys      Tue Jul 14 12:00:54 2009 (4A5BCAB6)
fffff880`010e9000 fffff880`010fd000   fileinfo fileinfo.sys Tue Jul 14 11:34:25 2009 (4A5BC481)
fffff880`04188000 fffff880`04193000   flpydisk flpydisk.sys Tue Jul 14 12:00:54 2009 (4A5BCAB6)
fffff880`0109d000 fffff880`010e9000   fltmgr   fltmgr.sys   Tue Jul 14 11:19:59 2009 (4A5BC11F)
fffff880`013e0000 fffff880`013ea000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 11:19:45 2009 (4A5BC111)
fffff880`01887000 fffff880`018c1000   fvevol   fvevol.sys   Sat Sep 26 14:34:26 2009 (4ABD7DB2)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Tue Jul 14 11:21:08 2009 (4A5BC164)
fffff800`02a02000 fffff800`02a4b000   hal      hal.dll      Tue Jul 14 13:27:36 2009 (4A5BDF08)
fffff880`051b0000 fffff880`051d4000   HDAudBus HDAudBus.sys Tue Jul 14 12:06:13 2009 (4A5BCBF5)
fffff880`04000000 fffff880`0405c000   HdAudio  HdAudio.sys  Tue Jul 14 12:06:59 2009 (4A5BCC23)
fffff880`041d5000 fffff880`041ee000   HIDCLASS HIDCLASS.SYS Tue Jul 14 12:06:21 2009 (4A5BCBFD)
fffff880`041ee000 fffff880`041f6080   HIDPARSE HIDPARSE.SYS Tue Jul 14 12:06:17 2009 (4A5BCBF9)
fffff880`041c7000 fffff880`041d5000   hidusb   hidusb.sys   Tue Jul 14 12:06:22 2009 (4A5BCBFE)
fffff880`05a18000 fffff880`05ae0000   HTTP     HTTP.sys     Tue Jul 14 11:22:16 2009 (4A5BC1A8)
fffff880`013ea000 fffff880`013f3000   hwpolicy hwpolicy.sys Tue Jul 14 11:19:22 2009 (4A5BC0FA)
fffff880`00e93000 fffff880`00e9b000   intelide intelide.sys Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`03f29000 fffff880`03f3f000   intelppm intelppm.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD)
fffff880`01200000 fffff880`0120f000   kbdclass kbdclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`05b89000 fffff880`05b97000   kbdhid   kbdhid.sys   Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff800`00bcd000 fffff800`00bd7000   kdcom    kdcom.dll    Tue Jul 14 13:31:07 2009 (4A5BDFDB)
fffff880`040d9000 fffff880`0411c000   ks       ks.sys       Thu Mar 04 17:32:25 2010 (4B8F37D9)
fffff880`013b5000 fffff880`013cf000   ksecdd   ksecdd.sys   Tue Jul 14 11:20:54 2009 (4A5BC156)
fffff880`015bc000 fffff880`015e7000   ksecpkg  ksecpkg.sys  Fri Dec 11 19:03:32 2009 (4B21E0B4)
fffff880`040bb000 fffff880`040c0200   ksthunk  ksthunk.sys  Tue Jul 14 12:00:19 2009 (4A5BCA93)
fffff880`05bdb000 fffff880`05bf0000   lltdio   lltdio.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`05b97000 fffff880`05bba000   luafv    luafv.sys    Tue Jul 14 11:26:13 2009 (4A5BC295)
fffff880`00c8a000 fffff880`00cce000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 13:29:10 2009 (4A5BDF66)
fffff880`05b7b000 fffff880`05b89000   monitor  monitor.sys  Tue Jul 14 11:38:52 2009 (4A5BC58C)
fffff880`011ef000 fffff880`011fe000   mouclass mouclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`040c1000 fffff880`040ce000   mouhid   mouhid.sys   Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff880`00c10000 fffff880`00c2a000   mountmgr mountmgr.sys Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`01967000 fffff880`01998000   MpFilter MpFilter.sys Wed Sep 15 12:19:28 2010 (4C901110)
fffff880`0693b000 fffff880`0694b000   MpNWMon  MpNWMon.sys  Wed Sep 15 12:19:30 2010 (4C901112)
fffff880`046dd000 fffff880`046f5000   mpsdrv   mpsdrv.sys   Tue Jul 14 12:08:25 2009 (4A5BCC79)
fffff880`046f5000 fffff880`04722000   mrxsmb   mrxsmb.sys   Sat Feb 27 20:52:19 2010 (4B88CF33)
fffff880`04722000 fffff880`04770000   mrxsmb10 mrxsmb10.sys Sat Feb 27 20:52:28 2010 (4B88CF3C)
fffff880`04770000 fffff880`04793000   mrxsmb20 mrxsmb20.sys Sat Feb 27 20:52:26 2010 (4B88CF3A)
fffff880`01809000 fffff880`01814000   Msfs     Msfs.SYS     Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00fbc000 fffff880`00fc6000   msisadrv msisadrv.sys Tue Jul 14 11:19:26 2009 (4A5BC0FE)
fffff880`010fd000 fffff880`0115b000   msrpc    msrpc.sys    Tue Jul 14 11:21:32 2009 (4A5BC17C)
fffff880`02dbc000 fffff880`02dc7000   mssmbios mssmbios.sys Tue Jul 14 11:31:10 2009 (4A5BC3BE)
fffff880`015e7000 fffff880`015f9000   mup      mup.sys      Tue Jul 14 11:23:45 2009 (4A5BC201)
fffff880`0146a000 fffff880`0155c000   ndis     ndis.sys     Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`02dd6000 fffff880`02de2000   ndistapi ndistapi.sys Tue Jul 14 12:10:00 2009 (4A5BCCD8)
fffff880`01850000 fffff880`0187f000   ndiswan  ndiswan.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`04193000 fffff880`041a8000   NDProxy  NDProxy.SYS  Tue Jul 14 12:10:05 2009 (4A5BCCDD)
fffff880`02d55000 fffff880`02d64000   netbios  netbios.sys  Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff880`02ce1000 fffff880`02d26000   netbt    netbt.sys    Tue Jul 14 11:21:28 2009 (4A5BC178)
fffff880`0155c000 fffff880`015bc000   NETIO    NETIO.SYS    Fri Apr 09 14:43:59 2010 (4BBE946F)
fffff880`0694b000 fffff880`06960000   NisDrvWFP NisDrvWFP.sys Wed Sep 15 12:20:25 2010 (4C901149)
fffff880`01814000 fffff880`01825000   Npfs     Npfs.SYS     Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`02db0000 fffff880`02dbc000   nsiproxy nsiproxy.sys Tue Jul 14 11:21:02 2009 (4A5BC15E)
fffff800`02a4b000 fffff800`03028000   nt       ntkrnlmp.exe Wed Oct 27 15:43:09 2010 (4CC791BD)
fffff880`01212000 fffff880`013b5000   Ntfs     Ntfs.sys     Tue Jul 14 11:20:47 2009 (4A5BC14F)
fffff880`01998000 fffff880`019a1000   Null     Null.SYS     Tue Jul 14 11:19:37 2009 (4A5BC109)
fffff880`02d2f000 fffff880`02d55000   pacer    pacer.sys    Tue Jul 14 12:09:41 2009 (4A5BCCC5)
fffff880`03fe2000 fffff880`03fff000   parport  parport.sys  Tue Jul 14 12:00:40 2009 (4A5BCAA8)
fffff880`00e0d000 fffff880`00e22000   partmgr  partmgr.sys  Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00fc6000 fffff880`00ff9000   pci      pci.sys      Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`00c00000 fffff880`00c10000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`013cf000 fffff880`013e0000   pcw      pcw.sys      Tue Jul 14 11:19:27 2009 (4A5BC0FF)
fffff880`04600000 fffff880`046a6000   peauth   peauth.sys   Tue Jul 14 13:01:19 2009 (4A5BD8DF)
fffff880`0405c000 fffff880`04099000   portcls  portcls.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00cce000 fffff880`00ce2000   PSHED    PSHED.dll    Tue Jul 14 13:32:23 2009 (4A5BE027)
fffff880`03e26000 fffff880`03e4a000   rasl2tp  rasl2tp.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`02de2000 fffff880`02dfd000   raspppoe raspppoe.sys Tue Jul 14 12:10:17 2009 (4A5BCCE9)
fffff880`011ce000 fffff880`011ef000   raspptp  raspptp.sys  Tue Jul 14 12:10:18 2009 (4A5BCCEA)
fffff880`00c5f000 fffff880`00c79000   rassstp  rassstp.sys  Tue Jul 14 12:10:25 2009 (4A5BCCF1)
fffff880`02c00000 fffff880`02c51000   rdbss    rdbss.sys    Tue Jul 14 11:24:09 2009 (4A5BC219)
fffff880`013f3000 fffff880`013fe000   rdpbus   rdpbus.sys   Tue Jul 14 12:17:46 2009 (4A5BCEAA)
fffff880`019eb000 fffff880`019f4000   RDPCDD   RDPCDD.sys   Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`019f4000 fffff880`019fd000   rdpencdd rdpencdd.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`01800000 fffff880`01809000   rdprefmp rdprefmp.sys Tue Jul 14 12:16:35 2009 (4A5BCE63)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Tue Jul 14 11:34:34 2009 (4A5BC48A)
fffff880`05a00000 fffff880`05a18000   rspndr   rspndr.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`04800000 fffff880`04832000   Rt64win7 Rt64win7.sys Thu Feb 26 22:04:13 2009 (49A65B0D)
fffff880`046a6000 fffff880`046b1000   secdrv   secdrv.SYS   Thu Sep 14 01:18:38 2006 (4508052E)
fffff880`051f2000 fffff880`051fe000   serenum  serenum.sys  Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`02d64000 fffff880`02d81000   serial   serial.sys   Tue Jul 14 12:00:40 2009 (4A5BCAA8)
fffff880`0145a000 fffff880`01462000   spldr    spldr.sys    Tue May 12 04:56:27 2009 (4A0858BB)
fffff880`06874000 fffff880`0690a000   srv      srv.sys      Fri Aug 27 15:38:00 2010 (4C773318)
fffff880`0680d000 fffff880`06874000   srv2     srv2.sys     Fri Aug 27 15:37:46 2010 (4C77330A)
fffff880`04793000 fffff880`047c0000   srvnet   srvnet.sys   Fri Aug 27 15:37:24 2010 (4C7732F4)
fffff880`051fe000 fffff880`051ff480   swenum   swenum.sys   Tue Jul 14 12:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jun 14 15:39:04 2010 (4C15A458)
fffff880`047c0000 fffff880`047d2000   tcpipreg tcpipreg.sys Tue Jul 14 12:09:49 2009 (4A5BCCCD)
fffff880`01843000 fffff880`01850000   TDI      TDI.SYS      Tue Jul 14 11:21:18 2009 (4A5BC16E)
fffff880`01825000 fffff880`01843000   tdx      tdx.sys      Tue Jul 14 11:21:15 2009 (4A5BC16B)
fffff880`02d9c000 fffff880`02db0000   termdd   termdd.sys   Tue Jul 14 12:16:36 2009 (4A5BCE64)
fffff960`00470000 fffff960`0047a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03f03000 fffff880`03f29000   tunnel   tunnel.sys   Tue Jul 14 12:09:37 2009 (4A5BCCC1)
fffff880`0411c000 fffff880`0412e000   umbus    umbus.sys    Tue Jul 14 12:06:56 2009 (4A5BCC20)
fffff880`041a8000 fffff880`041c5000   usbccgp  usbccgp.sys  Tue Jul 14 12:06:45 2009 (4A5BCC15)
fffff880`041c5000 fffff880`041c6f00   USBD     USBD.SYS     Tue Jul 14 12:06:23 2009 (4A5BCBFF)
fffff880`051d4000 fffff880`051e5000   usbehci  usbehci.sys  Tue Jul 14 12:06:30 2009 (4A5BCC06)
fffff880`0412e000 fffff880`04188000   usbhub   usbhub.sys   Tue Jul 14 12:07:09 2009 (4A5BCC2D)
fffff880`03f8c000 fffff880`03fe2000   USBPORT  USBPORT.SYS  Tue Jul 14 12:06:31 2009 (4A5BCC07)
fffff880`05b12000 fffff880`05b1e000   usbprint usbprint.sys Tue Jul 14 12:38:18 2009 (4A5BD37A)
fffff880`05b01000 fffff880`05b12000   usbscan  usbscan.sys  Tue Jul 14 12:35:32 2009 (4A5BD2D4)
fffff880`05b56000 fffff880`05b71000   USBSTOR  USBSTOR.SYS  Tue Jul 14 12:06:34 2009 (4A5BCC0A)
fffff880`04832000 fffff880`0483f000   usbuhci  usbuhci.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Tue Jul 14 12:01:31 2009 (4A5BCADB)
fffff880`019a8000 fffff880`019b6000   vga      vga.sys      Tue Jul 14 11:38:47 2009 (4A5BC587)
fffff880`019b6000 fffff880`019db000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:38:51 2009 (4A5BC58B)
fffff880`0144a000 fffff880`0145a000   vmstorfl vmstorfl.sys Tue Jul 14 11:42:54 2009 (4A5BC67E)
fffff880`00e22000 fffff880`00e37000   volmgr   volmgr.sys   Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00e37000 fffff880`00e93000   volmgrx  volmgrx.sys  Tue Jul 14 11:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Tue Jul 14 11:20:08 2009 (4A5BC128)
fffff880`02d81000 fffff880`02d9c000   wanarp   wanarp.sys   Tue Jul 14 12:10:21 2009 (4A5BCCED)
fffff880`019db000 fffff880`019eb000   watchdog watchdog.sys Tue Jul 14 11:37:35 2009 (4A5BC53F)
fffff880`00ea9000 fffff880`00f4d000   Wdf01000 Wdf01000.sys Tue Jul 14 11:22:07 2009 (4A5BC19F)
fffff880`00f4d000 fffff880`00f5c000   WDFLDR   WDFLDR.SYS   Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`02d26000 fffff880`02d2f000   wfplwf   wfplwf.sys   Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`003a0000   win32k   win32k.sys   Wed Jan 05 16:59:44 2011 (4D23ECB0)
fffff880`00fb3000 fffff880`00fbc000   WMILIB   WMILIB.SYS   Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`05bba000 fffff880`05bdb000   WudfPf   WudfPf.sys   Tue Jul 14 12:05:37 2009 (4A5BCBD1)
fffff880`0690a000 fffff880`0693b000   WUDFRd   WUDFRd.sys   Tue Jul 14 12:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`06960000 fffff880`069d1000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`069d1000 fffff880`069d3000   MSTEE.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`069d3000 fffff880`069d6000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00003000
fffff880`01907000 fffff880`01915000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01915000 fffff880`01921000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01921000 fffff880`0192a000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`0192a000 fffff880`0193d000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

Porkstorm · Feb 18, 2011

Thank you, going to try this fix now.

Porkstorm · Feb 18, 2011

Well, I ran the /scannow once, results were fine.
Started to run it a second time (as instructed on the howto page) and BSOD occurred during the second scan.
Here's my new Dump report.

Porkstorm · Feb 18, 2011

Ran Memtest for about 3 hours (3 full cycles of its test) with 0 errors and 3 full passes... planning on running it again for another 8 hours this evening when I go to sleep.

Updated my Ethernet drivers and uninstalled Malwarebytes; any other suggestions?

DeanP · Feb 18, 2011

What anti virus are you running?

Also I would test the RAM with Memtest86+

Porkstorm · Feb 18, 2011

DeanP said:
What anti virus are you running?

Also I would test the RAM with Memtest86+

Using Microsoft Security Essentials, currently. I did run Memtest86+ for about 3 hours with no issues found, and I am currently re-scanning with the SFC /scannnow to see if it has any issues.

I booted from CD rom with Memtest86+ iso and let that run, that's the correct procedure yes?

DeanP · Feb 18, 2011

Yes, that's the correct procedure.
Could you enable Driver Verifier?
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Restart the computer when Verifier is on. It will cause BSOD - because it is finding and stressing the faulty driver. Give couple of BSOD. Then go to Safe Mode - turn it off. Reboot into normal mode and upload the Verifier dumps.

Porkstorm · Feb 18, 2011

DeanP said:
Yes, that's the correct procedure.
Could you enable Driver Verifier?
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Restart the computer when Verifier is on. It will cause BSOD - because it is finding and stressing the faulty driver. Give couple of BSOD. Then go to Safe Mode - turn it off. Reboot into normal mode and upload the Verifier dumps.

Okay, I enabled it as per the steps you linked, and I will restart a few times and (hopefully) return with some information.

Porkstorm · Feb 18, 2011

Alright. After enabling the verifier.exe as per the settings you linked, I've restarted my system 3 times. No BSODs have occurred thus far...?

DeanP · Feb 18, 2011

Wait at least 36 hours for BSOD to occur. If it doesn't occur, you do not have any faulty drivers.

Porkstorm · Feb 19, 2011

I will do that. The only reason I asked is that somewhere I read that the verifier would actually *cause* a BSOD.

How do I find the verifier log when a BSOD happens?

Also, thank you again for all of the assistance

reventon · Feb 19, 2011

Porkstorm said:
I am unsure of how to find the logs that the Driver Verifier is supposed to make for the BSOD crashes... so that I can upload them and make sense of what is crashing.

Blue Screen of Death (BSOD) Posting Instructions - Windows 7 Forums

Porkstorm · Feb 19, 2011

Alright. I've:
1. Uninstalled Malwarebytes
2. Enabled Driver Verifier
3. Run Memtest86+ for a few hours (with no issues found)
4. Updated Drivers
5. Run the /scannow checker multiple times (with no issues found)

And I have just received another BSOD.

How do I find/upload the logs that Driver Verifier keeps for the BSOD crashes so that I am able to upload it?

Porkstorm · Feb 19, 2011

OKay, here's my new BSOD report.

Rank Check Disk last night, it restarted before I could see if it had any errors.

Also, ran Memtest86+ overnight, 0 errors. Do I need to test each stick individually if the test doesn't find any issues when running it with my normal setup?

zigzag3143 · Feb 19, 2011

Porkstorm said:
OKay, here's my new BSOD report.

Rank Check Disk last night, it restarted before I could see if it had any errors.

Also, ran Memtest86+ overnight, 0 errors. Do I need to test each stick individually if the test doesn't find any issues when running it with my normal setup?

Driver verified Saitek Hid Driver Version : 6.2.2.4 (your sailH8000.sys).

Yours is dated 4/2008 so way too old. Remove or update

How To Find Drivers:

- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\021911-14851-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02a07000 PsLoadedModuleList = 0xfffff800`02c44e50
Debug session time: Sat Feb 19 03:35:59.840 2011 (GMT-5)
System Uptime: 0 days 1:50:22.759
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {f6, 528, fffffa8004b8ab30, fffff88002b66234}

Unable to load image \SystemRoot\system32\DRIVERS\SaiH8000.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SaiH8000.sys
*** ERROR: Module load completed but symbols could not be loaded for SaiH8000.sys
Probably caused by : SaiH8000.sys ( SaiH8000+26234 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000528, Handle value being referenced.
Arg3: fffffa8004b8ab30, Address of the current process.
Arg4: fffff88002b66234, Address inside the driver that is performing the incorrect reference.

Debugging Details:
------------------


BUGCHECK_STR:  0xc4_f6

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  dxdiag.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002f023dc to fffff80002a77740

STACK_TEXT:  
fffff880`07329de8 fffff800`02f023dc : 00000000`000000c4 00000000`000000f6 00000000`00000528 fffffa80`04b8ab30 : nt!KeBugCheckEx
fffff880`07329df0 fffff800`02f17ae4 : 00000000`00000528 fffffa80`04b8ab30 00000000`00000004 fffff980`239f6000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`07329e30 fffff800`02cd2030 : ffffffff`ffffffff fffff880`0732a080 fffff880`0732a200 fffff880`0732a408 : nt!VfCheckUserHandle+0x1b4
fffff880`07329f10 fffff800`02d503b5 : 00000000`00000000 fffff800`00000001 fffffa80`0461a3c0 fffff6fc`40015b00 : nt! ?? ::NNGAKEGL::`string'+0x20b4e
fffff880`07329fe0 fffff800`02a76993 : fffffa80`047066e0 fffff880`0732a398 00000000`00000002 fffff880`0732a420 : nt!NtQueryValueKey+0x115
fffff880`0732a170 fffff800`02a72f30 : fffff800`02f06c86 fffff880`02b66234 fffff880`0732a408 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0732a378 fffff800`02f06c86 : fffff880`02b66234 fffff880`0732a408 00000000`00000000 00000000`00000000 : nt!KiServiceLinkage
fffff880`0732a380 fffff880`02b66234 : fffff880`0732a4d0 fffff880`0732a538 fffff880`0732a4d0 fffff800`02b7f1c2 : nt!VfZwQueryValueKey+0x76
fffff880`0732a3d0 fffff880`0732a4d0 : fffff880`0732a538 fffff880`0732a4d0 fffff800`02b7f1c2 00000000`0000000c : SaiH8000+0x26234
fffff880`0732a3d8 fffff880`0732a538 : fffff880`0732a4d0 fffff800`02b7f1c2 00000000`0000000c fffff880`0732a400 : 0xfffff880`0732a4d0
fffff880`0732a3e0 fffff880`0732a4d0 : fffff800`02b7f1c2 00000000`0000000c fffff880`0732a400 00000001`082f3963 : 0xfffff880`0732a538
fffff880`0732a3e8 fffff800`02b7f1c2 : 00000000`0000000c fffff880`0732a400 00000001`082f3963 fffff800`00080006 : 0xfffff880`0732a4d0
fffff880`0732a3f0 00000000`00000000 : fffff880`0732a1b0 fffffa80`00000040 00000000`00000000 00000000`00000000 : nt!MmAllocateSpecialPool+0x722


STACK_COMMAND:  kb

FOLLOWUP_IP: 
SaiH8000+26234
fffff880`02b66234 488b4c2440      mov     rcx,qword ptr [rsp+40h]

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  SaiH8000+26234

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: SaiH8000

IMAGE_NAME:  SaiH8000.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  47f6106a

FAILURE_BUCKET_ID:  X64_0xc4_f6_VRF_SaiH8000+26234

BUCKET_ID:  X64_0xc4_f6_VRF_SaiH8000+26234

Followup: MachineOwner
---------

BSOD after fresh Win7 Install

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Banned

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Banned

My Computer My Computer

New member

My Computer My Computer

Banned

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Banned

My Computer My Computer

New member

My Computer My Computer

BSOD Squad

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer