Solved BSOD caused by ntoskrnl.exe

luiscastilho · Oct 23, 2010

Windows crashed while I was playing Dragon Age Origins. Can someone help me find out which driver or whatever caused this crash?

System info:
Windows 7 Ultimate x64 (retail)
Bought this computer a few weeks ago

Let me know if you guys need any more info.
Thanks a lot!

CarlTR6 · Oct 23, 2010

Hi, Luis, and welcome to the forum. Sorry you are having problems. As you noticed, the dump blames ntkrnlmp.exe. It is not likely the real cause as it is a Windows core system driver. More than likely it was affected by something else.

Error code A, IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c58000 PsLoadedModuleList = 0xfffff800`02e95e50
Debug session time: Sat Oct 23 11:39:20.144 2010 (GMT-4)
System Uptime: 0 days 1:38:48.316
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa5c07c26c48, 2, 0, fffff80002cce945}

Probably caused by : ntkrnlmp.exe ( nt!SwapContext_PatchXSave+42 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa5c07c26c48, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cce945, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f000e0
 fffffa5c07c26c48 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!SwapContext_PatchXSave+42
fffff800`02cce945 4983be1801000000 cmp     qword ptr [r14+118h],0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff880046ef640 -- (.trap 0xfffff880046ef640)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=fffff88006370e00
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cce945 rsp=fffff880046ef7d0 rbp=fffff88006370db0
 r8=fffff88002f68700  r9=0000000000000000 r10=0000000000000027
r11=fffffa800817b010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!SwapContext_PatchXSave+0x42:
fffff800`02cce945 4983be1801000000 cmp     qword ptr [r14+118h],0 ds:1f80:00000000`00000118=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cc7ca9 to fffff80002cc8740

STACK_TEXT:  
fffff880`046ef4f8 fffff800`02cc7ca9 : 00000000`0000000a fffffa5c`07c26c48 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`046ef500 fffff800`02cc6920 : 00000000`00000000 fffff880`02f64180 fffffa80`083f3748 fffffa80`083f3088 : nt!KiBugCheckDispatch+0x69
fffff880`046ef640 fffff800`02cce945 : 00000000`00000000 00000000`00000000 fffffa80`0674f4c0 00001f80`00cd007c : nt!KiPageFault+0x260
fffff880`046ef7d0 fffff800`02cce5da : 00000000`00000000 ffffffff`ffffffef fffff880`009b2180 fffff800`02ce7d1c : nt!SwapContext_PatchXSave+0x42
fffff880`046ef810 fffff800`02ccf992 : fffffa80`069ea3f0 fffffa80`069ea3f0 fffff880`00000000 fffff800`00000001 : nt!KiSwapContext+0x7a
fffff880`046ef950 fffff800`02cd32a1 : 00000000`00000001 00000000`00000000 fffff880`000000bc fffff800`02cda456 : nt!KiCommitThreadWait+0x1d2
fffff880`046ef9e0 fffff800`02fc3df7 : fffffa80`07c2b800 fffff880`046efbc8 fffff880`046efca0 fffffa80`07c2b1f0 : nt!KeRemoveQueueEx+0x301
fffff880`046efa90 fffff800`02cd8aa6 : 00000000`00000000 fffff880`046efba8 fffff880`046efbc8 00000000`00000001 : nt!IoRemoveIoCompletion+0x47
fffff880`046efb20 fffff800`02cc7993 : fffffa80`069ea3f0 00000000`778f4270 fffff880`00000000 00000000`01721b80 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff880`046efc20 00000000`7784165a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`023ef518 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7784165a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!SwapContext_PatchXSave+42
fffff800`02cce945 4983be1801000000 cmp     qword ptr [r14+118h],0

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!SwapContext_PatchXSave+42

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!SwapContext_PatchXSave+42

BUCKET_ID:  X64_0xA_nt!SwapContext_PatchXSave+42

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`10b8c000 fffff880`10bca000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`010bd000 fffff880`01114000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d60000 fffff880`02dea000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0fe45000 fffff880`0fe5b000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0104d000 fffff880`01058000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`0fe00000 fffff880`0fe45000   aoox1mqm aoox1mqm.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`0101a000 fffff880`01023000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01023000 fffff880`0104d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`01e6b000 fffff880`01e88000   avgntflt avgntflt.sys Thu Feb 11 10:12:02 2010 (4B741E42)
fffff880`03d40000 fffff880`03d62000   avipbb   avipbb.sys   Mon Feb 22 05:08:50 2010 (4B8257B2)
fffff880`017f8000 fffff880`017ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03d2f000 fffff880`03d40000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`01f9e000 fffff880`01fbc000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006e0000 fffff960`00707000   cdd      cdd.dll      unavailable (00000000)
fffff880`00dc3000 fffff880`00ded000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`013b7000 fffff880`013e7000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d36000 fffff880`00d94000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01565000 fffff880`015d8000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`043eb000 fffff880`043fb000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`066eb000 fffff880`066f4000   cpuz134_x64 cpuz134_x64.sys Fri Jul 09 07:16:58 2010 (4C37052A)
fffff880`049ca000 fffff880`049d8000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03c8e000 fffff880`03d11000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03d11000 fffff880`03d2f000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03c7f000 fffff880`03c8e000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`014c9000 fffff880`014df000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0493a000 fffff880`0495c000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0480c000 fffff880`04815000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04800000 fffff880`0480c000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`01213000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`049be000 fffff880`049ca000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`042e2000 fffff880`043d6000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04200000 fffff880`04246000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`010a4000 fffff880`010b8000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01058000 fffff880`010a4000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`015e9000 fffff880`015f3000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0148f000 fffff880`014c9000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01784000 fffff880`017ce000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02c0f000 fffff800`02c58000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04246000 fffff880`0426a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04962000 fffff880`049be000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`00cc0000 fffff880`00cd9000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`049f7000 fffff880`049ff080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`02cbb000 fffff880`02cc9000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`01ed6000 fffff880`01f9e000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01486000 fffff880`0148f000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03d88000 fffff880`03d9e000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03de4000 fffff880`03df3000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`01e2c000 fffff880`01e3a000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba9000 fffff800`00bb3000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04816000 fffff880`04859000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`0154b000 fffff880`01565000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01759000 fffff880`01784000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`0495c000 fffff880`04961200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`01ea9000 fffff880`01ebe000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`01e48000 fffff880`01e6b000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cde000 fffff880`00d22000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`01e3a000 fffff880`01e48000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03c00000 fffff880`03c0f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`01e1f000 fffff880`01e2c000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`01000000 fffff880`0101a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01fbc000 fffff880`01fd4000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0664d000 fffff880`0667a000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0667a000 fffff880`066c8000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`066c8000 fffff880`066eb000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02d19000 fffff880`02d24000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01114000 fffff880`0111e000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`014ed000 fffff880`0154b000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03c74000 fffff880`03c7f000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e6000 fffff880`017f8000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01607000 fffff880`016f9000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0fe7f000 fffff880`0fe8b000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`10bca000 fffff880`10bf9000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`048c5000 fffff880`048da000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c74000 fffff880`02c83000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c00000 fffff880`02c45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`016f9000 fffff880`01759000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02d24000 fffff880`02d35000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03c68000 fffff880`03c74000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c58000 fffff800`03234000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01214000 fffff880`013b7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013f0000 fffff880`013f9000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10b3f000 fffff880`10b40180   nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`048da000 fffff880`048fd000   nvhda64v nvhda64v.sys Mon Jun 21 18:07:25 2010 (4C1FE29D)
fffff880`0fead000 fffff880`10b3ee00   nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`02c4e000 fffff880`02c74000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`0115e000 fffff880`01173000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`0112b000 fffff880`0115e000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`011e4000 fffff880`011eb000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`011eb000 fffff880`011fb000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015d8000 fffff880`015e9000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`066f4000 fffff880`0679a000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`048fd000 fffff880`0493a000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d22000 fffff880`00d36000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0fe5b000 fffff880`0fe7f000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0fe8b000 fffff880`0fea6000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03d9e000 fffff880`03dbf000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03dbf000 fffff880`03dd9000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03c17000 fffff880`03c68000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03dd9000 fffff880`03de4000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02cfe000 fffff880`02d07000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d07000 fffff880`02d10000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d10000 fffff880`02d19000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0144c000 fffff880`01486000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01ebe000 fffff880`01ed6000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`10b41000 fffff880`10b8c000   Rt64win7 Rt64win7.sys Thu Nov 05 09:15:41 2009 (4AF2DE0D)
fffff880`00d94000 fffff880`00dc3000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`0679a000 fffff880`067a5000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`043d6000 fffff880`043e2000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c83000 fffff880`02ca0000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`017de000 fffff880`017e6000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`00ec5000 fffff880`00feb000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`06abb000 fffff880`06b51000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06a54000 fffff880`06abb000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`067a5000 fffff880`067d2000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`043fb000 fffff880`043fc480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`067d2000 fffff880`067e4000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02d53000 fffff880`02d60000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02d35000 fffff880`02d53000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02dea000 fffff880`02dfe000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00400000 fffff960`0040a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03d62000 fffff880`03d88000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04859000 fffff880`0486b000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`049d8000 fffff880`049f5000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`049f5000 fffff880`049f6f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`042cd000 fffff880`042de000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0486b000 fffff880`048c5000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04277000 fffff880`042cd000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0426a000 fffff880`04277000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`0111e000 fffff880`0112b000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00e00000 fffff880`00e0e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02cc9000 fffff880`02cee000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017ce000 fffff880`017de000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`01173000 fffff880`01188000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01188000 fffff880`011e4000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01400000 fffff880`0144c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02ca0000 fffff880`02cbb000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02cee000 fffff880`02cfe000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e12000 fffff880`00eb6000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb6000 fffff880`00ec5000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02c45000 fffff880`02c4e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003df000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`043e2000 fffff880`043eb000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00feb000 fffff880`00ff4000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01e88000 fffff880`01ea9000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06b51000 fffff880`06b82000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01e04000 fffff880`01e1f000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`014df000 fffff880`014ed000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015f3000 fffff880`015ff000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`013e7000 fffff880`013f0000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01200000 fffff880`01213000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

I find you have an almost guaranteed BSOD maker on your system.

Please uninstall any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dump, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads. Select delete; do not select reinstall.
Here is an alternative virtualization program that does not user the sptd.sys driver:
Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

While you are trouble shooting, I also recommend that you uninstall Avira using this tool: Tool. Notice in the usual causes above that antivirus scanner is mentioned. Avira has been known to cause BSOD's on some Win 7 systems. Download and install Microsoft Security Essentials in its place. Make sure Windows Firewall is turned on. After you get your system stable, you can try Avira again; but I do not recommend doing so.

Uninstall sptd.sys and uninstall Avira. Reboot and let's see how your system does. If you get another BSOD, upload the dump and we will look further. If you are running smoothly, please update us and let us know.

luiscastilho · Oct 23, 2010

Now that was a quick reply! Thanks a lot for your help. I will uninstall both and see how it goes.

I also noticed my system is heating up a lot while I'm playing games, specially the processor. Do you think this crash can be heat related somehow?

Thanks again.

CarlTR6 · Oct 23, 2010

Heat can most definitely cause crashes. Do you have a program to monitor your temps such as CPUZ or Speedfan? You will need to know what the max temp of your CPU and video card are. As long as the temps are not exceeding the manufacturers' recommended max temps, you are OK.

luiscastilho · Nov 21, 2010

Hi Carl,

Just to let you know, using Memtest86 I was able to identify a faulty RAM module. I took my PC back to where I bought it and had this stick replaced. Since then no more BSODs. I beleive that was the problem.

Thanks for your help!

CarlTR6 · Nov 21, 2010

Luis, thank for letting us know this good news - the news we love to hear.

And thank you for reporting the fix. Happy computing! I will ask the moderators to mark this thread as solved.

Solved BSOD caused by ntoskrnl.exe

luiscastilho

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

luiscastilho

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

luiscastilho

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

Solved BSOD caused by ntoskrnl.exe

luiscastilho

New member

My Computer My Computer

CarlTR6

Antique Senior Member

My Computer My Computer

luiscastilho

New member

My Computer My Computer

CarlTR6

Antique Senior Member

My Computer My Computer

luiscastilho

New member

My Computer My Computer

CarlTR6

Antique Senior Member

My Computer My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer