BSOD Help

TheFrin · Jun 25, 2010

Hi, I Just joined after lurking the forums trying to figure out my BSOD problems. I hope someone could help me with this conundrum.

So chronologically I guess would be the best way to go about this.

I have had Win 7 since RC7100, and purchased my full copy on release. I have had no problems with Win 7, not to mention BSOD's.

But alas, 5 days ago I was replaying Stalker: Shadow of Chernobyl, and I BSOD. Got pissed off, I hadn't quick saved in a while, lol. But I was shocked because It was my first BSOD and I run my computer very clinically. I have never had any trouble playing any games.

So, I went to turn up my case fans, (my friends usually have to do this when playing games and they BSOD) but they were already on full. Checked my GPU-Z temps and fan speeds. Everything looked ok, so I reckoned it wasn't an over heated GFX card.

I left it at that, didn't think of anything else.

So I went to play stalker again, updated my drivers and after a while it did it again, and again, and again.

So I stopped playing Stalker.

Yesterday, I started replaying Mass Effect 2, and low and behold I BSOD, now on 2 separate games. I'm guessing its now a GFX driver issue or even a sound driver issue.

So I pulled out my phone to take a picture of the error code on the BSOD.

PAGE_FAULT_IN_NONPAGED_AREA 0x0000000050

So, at this time I'm freaking out, not knowing what's wrong with my machine.

so I googled 0x0000000050 and found this "This Stop error indicates that requested data was not in memory. The system generates an exception error when using a reference to an invalid system memory address. Defective memory (including main memory, L2 RAM cache, video RAM) or incompatible software (including remote control and antivirus software) might cause this Stop error."

Windows Blue Screen Of Death error: STOP: 0x00000050

Now I'm FREAKING OUT lol.

So I realise I need to know what's wrong. I get memtest and run it for 6 hours 5 passes all clear. So my RAM is ok.

I am at a loss, I have no idea what to do next, here are my 10 dump files that I have.

Ho hum, looks like no gaming for a while lol.

Anyway,

Thanks in advance.

TheFrin

Lordbob75 · Jun 25, 2010

Hello TheFrin.

You have 5 unique BSoDs there, thank you for all of them.

Since they were all caused by system files, it is possible you have a corrupted install.
Hit start, and bring up an elevated command prompt (right click run as admin) and type sfc /scannow. What does it say?

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\AppData\Local\Temp\7zOEE0.tmp\062510-19593-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a04000 PsLoadedModuleList = 0xfffff800`02c41e50
Debug session time: Fri Jun 25 13:56:01.407 2010 (UTC - 7:00)
System Uptime: 1 days 21:06:25.608
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff8800aedfa08, fffff8800aedf270, fffff88001254a30}

Unable to load image \SystemRoot\system32\DRIVERS\SiWinAcc.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for SiWinAcc.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsSnapshotScbInternal+160 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff8800aedfa08
Arg3: fffff8800aedf270
Arg4: fffff88001254a30

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff8800aedfa08 -- (.exr 0xfffff8800aedfa08)
ExceptionAddress: fffff88001254a30 (Ntfs!NtfsSnapshotScbInternal+0x0000000000000160)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff8800aedf270 -- (.cxr 0xfffff8800aedf270)
rax=527265776f506574 rbx=fffff88004d26c70 rcx=fffff8800aee0260
rdx=fffff88004d26c70 rsi=fffff8800aee0308 rdi=fffff8800aee0260
rip=fffff88001254a30 rsp=fffff8800aedfc40 rbp=0000000000000727
 r8=0000000000000000  r9=0000000000000002 r10=fffff8800aee0260
r11=fffff8800aee0078 r12=fffffa8005ae2070 r13=0000000000000000
r14=fffff8a004d26ed8 r15=fffff8a0169e6d60
iopl=0         nv up ei pl nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
Ntfs!NtfsSnapshotScbInternal+0x160:
fffff880`01254a30 48394860        cmp     qword ptr [rax+60h],rcx ds:002b:52726577`6f5065d4=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cac0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsSnapshotScbInternal+160
fffff880`01254a30 48394860        cmp     qword ptr [rax+60h],rcx

FAULTING_IP: 
Ntfs!NtfsSnapshotScbInternal+160
fffff880`01254a30 48394860        cmp     qword ptr [rax+60h],rcx

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880012e8e73 to fffff88001254a30

STACK_TEXT:  
fffff880`0aedfc40 fffff880`012e8e73 : fffff8a0`04d26b40 fffff880`0aee04c0 fffff880`04d26c70 fffffa80`03b00604 : Ntfs!NtfsSnapshotScbInternal+0x160
fffff880`0aedfc70 fffff880`01257aa9 : fffffa80`05567350 00000000`000007ff fffff880`0aee01c0 fffff880`0aecf000 : Ntfs!NtfsCommonCleanup+0x843
fffff880`0aee0080 fffff800`02a83d4a : fffff880`0aee01c0 fffff880`012545d3 fffff880`0aed9000 fffffa80`05567358 : Ntfs!NtfsCommonCleanupCallout+0x19
fffff880`0aee00b0 fffff880`01257662 : fffff880`01257a90 fffff880`0aee01c0 fffff880`0aee0500 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0xda
fffff880`0aee0190 fffff880`012f9244 : fffff880`0aee0260 fffff880`0aee0260 fffff880`0aee0260 fffffa80`05ae2070 : Ntfs!NtfsCommonCleanupOnNewStack+0x42
fffff880`0aee0200 fffff880`0117d23f : fffff880`0aee0260 fffffa80`04376b80 fffffa80`04376fb0 fffffa80`071b9010 : Ntfs!NtfsFsdCleanup+0x144
fffff880`0aee0470 fffff880`0117b6df : fffffa80`042dc6f0 00000000`00000000 fffffa80`040ebe00 fffffa80`04376b80 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`0aee0500 fffff880`011db02e : fffffa80`04376b80 00000000`00000001 fffffa80`0522c660 00000000`00000000 : fltmgr!FltpDispatch+0xcf
fffff880`0aee0560 fffffa80`04376b80 : 00000000`00000001 fffffa80`0522c660 00000000`00000000 fffffa80`04376b80 : SiWinAcc+0x102e
fffff880`0aee0568 00000000`00000001 : fffffa80`0522c660 00000000`00000000 fffffa80`04376b80 fffff800`02d8b9af : 0xfffffa80`04376b80
fffff880`0aee0570 fffffa80`0522c660 : 00000000`00000000 fffffa80`04376b80 fffff800`02d8b9af fffffa80`071b9010 : 0x1
fffff880`0aee0578 00000000`00000000 : fffffa80`04376b80 fffff800`02d8b9af fffffa80`071b9010 00000000`00000000 : 0xfffffa80`0522c660


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  Ntfs!NtfsSnapshotScbInternal+160

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff8800aedf270 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsSnapshotScbInternal+160

BUCKET_ID:  X64_0x24_Ntfs!NtfsSnapshotScbInternal+160

Followup: MachineOwner
---------

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\AppData\Local\Temp\7zOE7F.tmp\062210-20576-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a10000 PsLoadedModuleList = 0xfffff800`02c4de50
Debug session time: Tue Jun 22 15:38:14.177 2010 (UTC - 7:00)
System Uptime: 0 days 0:28:12.377
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff880039043a0, 0, fffff80002d75927, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!ObReferenceObjectByHandleWithTag+e7 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff880039043a0, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80002d75927, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

OVERLAPPED_MODULE: Address regions for 'nvlddmkm' and 'nvlddmkm.sys' overlap

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cb80e0
 fffff880039043a0 

FAULTING_IP: 
nt!ObReferenceObjectByHandleWithTag+e7
fffff800`02d75927 488b03          mov     rax,qword ptr [rbx]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  RapportLaunSer

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88007afb950 -- (.trap 0xfffff88007afb950)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000100000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d75927 rsp=fffff88007afbae0 rbp=fffff88007afbc00
 r8=fffff88003904000  r9=00000000000000e8 r10=fffff80002d7bd00
r11=fffff88007afbc18 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!ObReferenceObjectByHandleWithTag+0xe7:
fffff800`02d75927 488b03          mov     rax,qword ptr [rbx] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002b00e54 to fffff80002a80600

STACK_TEXT:  
fffff880`07afb7e8 fffff800`02b00e54 : 00000000`00000050 fffff880`039043a0 00000000`00000000 fffff880`07afb950 : nt!KeBugCheckEx
fffff880`07afb7f0 fffff800`02a7e6ee : 00000000`00000000 fffff880`039043a0 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42877
fffff880`07afb950 fffff800`02d75927 : 00000000`00000000 fffffa80`0536f440 fffffa80`07403400 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`07afbae0 fffff800`02d7bd69 : 00000000`00000000 fffff800`00100000 00000000`00000000 00000000`00000001 : nt!ObReferenceObjectByHandleWithTag+0xe7
fffff880`07afbbb0 fffff800`02a7f853 : fffffa80`0536f440 00000000`ffffffff 00000000`00000000 00000000`00000000 : nt!NtWaitForSingleObject+0x69
fffff880`07afbc20 00000000`76f4fefa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0124fda8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f4fefa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ObReferenceObjectByHandleWithTag+e7
fffff800`02d75927 488b03          mov     rax,qword ptr [rbx]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!ObReferenceObjectByHandleWithTag+e7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

FAILURE_BUCKET_ID:  X64_0x50_nt!ObReferenceObjectByHandleWithTag+e7

BUCKET_ID:  X64_0x50_nt!ObReferenceObjectByHandleWithTag+e7

Followup: MachineOwner
---------

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\AppData\Local\Temp\7zOE9F.tmp\062310-20108-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a06000 PsLoadedModuleList = 0xfffff800`02c43e50
Debug session time: Wed Jun 23 10:04:00.478 2010 (UTC - 7:00)
System Uptime: 0 days 6:12:00.679
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002e27ffb, 1, f}

Probably caused by : ntkrnlmp.exe ( nt!CmpCallCallBacks+eb )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002e27ffb, The address that the exception occurred at
Arg3: 0000000000000001, Parameter 0 of the exception
Arg4: 000000000000000f, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!CmpCallCallBacks+eb
fffff800`02e27ffb f044017710      lock add dword ptr [rdi+10h],r14d

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  000000000000000f

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cae0e0
 000000000000000f 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  dwm.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88005cb0ae8 -- (.exr 0xfffff88005cb0ae8)
ExceptionAddress: fffff80002e27ffb (nt!CmpCallCallBacks+0x00000000000000eb)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 000000000000000f
Attempt to write to address 000000000000000f

TRAP_FRAME:  fffff88005cb0b90 -- (.trap 0xfffff88005cb0b90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a010204180 rbx=0000000000000000 rcx=00000000000007ff
rdx=00000000000004f1 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e27ffb rsp=fffff88005cb0d20 rbp=fffff88005cb1310
 r8=0000000000000801  r9=00000000000004ef r10=fffff80002bf2420
r11=0000000000000011 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!CmpCallCallBacks+0xeb:
fffff800`02e27ffb f044017710      lock add dword ptr [rdi+10h],r14d ds:00000000`00000010=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ab0929 to fffff80002a76600

STACK_TEXT:  
fffff880`05cb0318 fffff800`02ab0929 : 00000000`0000001e ffffffff`c0000005 fffff800`02e27ffb 00000000`00000001 : nt!KeBugCheckEx
fffff880`05cb0320 fffff800`02a75c42 : fffff880`05cb0ae8 00000000`00000000 fffff880`05cb0b90 00000000`00000000 : nt!KiDispatchException+0x1b9
fffff880`05cb09b0 fffff800`02a747ba : 00000000`00000001 00000000`00000000 00000000`41735300 00000000`000007ff : nt!KiExceptionDispatch+0xc2
fffff880`05cb0b90 fffff800`02e27ffb : 00000000`000004ef 00000000`00000000 00000000`00000000 00000000`000007ff : nt!KiPageFault+0x23a
fffff880`05cb0d20 fffff800`02d96b1b : fffffa80`0000001c fffff880`05cb0f50 fffff8a0`00058001 fffff880`0000001d : nt!CmpCallCallBacks+0xeb
fffff880`05cb0df0 fffff800`02d70a64 : fffff800`02d50ae0 00000000`00000000 fffffa80`04321010 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x2c227
fffff880`05cb10c0 fffff800`02d75b76 : fffffa80`04321010 fffff880`05cb1240 00000000`00000240 fffffa80`036f2f30 : nt!ObpLookupObjectName+0x585
fffff880`05cb11c0 fffff800`02d54bec : fffffa80`06ff7af0 00000000`00000000 fffffa80`065fd400 fffffa80`00000000 : nt!ObOpenObjectByName+0x306
fffff880`05cb1290 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmOpenKey+0x28a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!CmpCallCallBacks+eb
fffff800`02e27ffb f044017710      lock add dword ptr [rdi+10h],r14d

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!CmpCallCallBacks+eb

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!CmpCallCallBacks+eb

BUCKET_ID:  X64_0x1E_c0000005_nt!CmpCallCallBacks+eb

Followup: MachineOwner
---------

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\AppData\Local\Temp\7zOE2E.tmp\062110-22666-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a50000 PsLoadedModuleList = 0xfffff800`02c8de50
Debug session time: Mon Jun 21 05:31:06.099 2010 (UTC - 7:00)
System Uptime: 2 days 1:07:41.300
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F7, {21f89382a0ee, 21fa9382a0ee, ffffde056c7d5f11, 0}

Probably caused by : win32k.sys ( win32k!SetWakeBit+f8 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: 000021f89382a0ee, Actual security check cookie from the stack
Arg2: 000021fa9382a0ee, Expected security check cookie
Arg3: ffffde056c7d5f11, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------


DEFAULT_BUCKET_ID:  GS_FALSE_POSITIVE_MISSING_GSFRAME

SECURITY_COOKIE:  Expected 000021fa9382a0ee found 000021f89382a0ee

BUGCHECK_STR:  0xF7_ONE_BIT

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002b55405 to fffff80002ac0600

STACK_TEXT:  
fffff880`03483338 fffff800`02b55405 : 00000000`000000f7 000021f8`9382a0ee 000021fa`9382a0ee ffffde05`6c7d5f11 : nt!KeBugCheckEx
fffff880`03483340 fffff800`02ac50fa : fffffa80`04769350 00000000`00000000 fffff800`02c65f70 fffff880`03483400 : nt!_report_gsfailure+0x25
fffff880`03483380 fffff800`02ac4771 : fffffa80`075de5e0 00000000`00000000 00000000`00000000 00000000`00000002 : nt!KiDeferredReadyThread+0x31a
fffff880`03483400 fffff960`000fb30c : fffff960`00000000 fffff900`00000002 fffff900`c2cfc800 fffffa80`0410fc68 : nt!KeSetEvent+0x1e1
fffff880`03483470 fffff960`000c8485 : fffff900`c2d126f0 fffff900`c2de0690 00000000`00000012 fffff900`c0819300 : win32k!SetWakeBit+0xf8
fffff880`034834a0 fffff960`000c8181 : fffff900`c1ff9f00 fffff900`c2de0690 00000000`0000011b fffff900`c30b5ce0 : win32k!WakeSomeone+0x221
fffff880`034834e0 fffff960`00126505 : fffff900`c2d77010 fffff900`c2cfc93c fffff900`c26fb650 00000000`00000001 : win32k!PostInputMessage+0x1f5
fffff880`03483560 fffff960`001290e7 : fffffa80`0a8ab071 fffff900`c2cfc93c 00000000`000001e9 00000000`0000018f : win32k!PostRawMouseInput+0x2ad
fffff880`034835d0 fffff960`00127b49 : fffff900`c2cfc93c 00000000`0a8ab071 fffff900`c2cfc8b0 00000000`0a8ab071 : win32k!xxxMoveEventAbsolute+0x17f
fffff880`03483660 fffff960`001279a0 : fffff900`c2cfc8b0 0000018f`000001e9 00000000`00000000 00000000`00200286 : win32k!ProcessMouseInput+0x195
fffff880`034836d0 fffff800`02a9d009 : 00000000`00000001 00000000`00000000 00000000`20707249 00000000`00000001 : win32k!InputApc+0x7c
fffff880`03483700 fffff800`02ac795d : fffffa80`06135060 00000000`00000000 fffff960`00127924 00000000`00000000 : nt!KiDeliverApc+0x211
fffff880`03483780 fffff800`02ac3c4b : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x3dd
fffff880`03483810 fffff960`000c87f0 : fffff900`00000002 fffffa80`05c23820 fffff900`00000001 fffff880`0000000d : nt!KeWaitForMultipleObjects+0x271
fffff880`03483ac0 fffff960`000c970c : 00000000`00000000 fffff900`c01d5010 fffff960`0030f340 fffff900`c01eadd0 : win32k!xxxMsgWaitForMultipleObjects+0x108
fffff880`03483b40 fffff960`00084634 : fffffa80`00000001 fffffa80`0000000c fffffa80`06135060 fffff6fc`4001a2b0 : win32k!xxxDesktopThread+0x254
fffff880`03483bc0 fffff960`00103fa6 : fffffa80`00000001 fffff960`0030f340 00000000`00000020 00000000`00000000 : win32k!xxxCreateSystemThreads+0x64
fffff880`03483bf0 fffff800`02abf853 : fffffa80`06135060 00000000`00000004 000007ff`fffac000 00000000`00000000 : win32k!NtUserCallNoParam+0x36
fffff880`03483c20 000007fe`fd613d3a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0236fa18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd613d3a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!SetWakeBit+f8
fffff960`000fb30c 488b5c2430      mov     rbx,qword ptr [rsp+30h]

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  win32k!SetWakeBit+f8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4bdc4376

FAILURE_BUCKET_ID:  X64_0xF7_ONE_BIT_MISSING_GSFRAME_win32k!SetWakeBit+f8

BUCKET_ID:  X64_0xF7_ONE_BIT_MISSING_GSFRAME_win32k!SetWakeBit+f8

Followup: MachineOwner
---------

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\AppData\Local\Temp\7zOE4E.tmp\062210-19281-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a4a000 PsLoadedModuleList = 0xfffff800`02c87e50
Debug session time: Tue Jun 22 15:08:40.393 2010 (UTC - 7:00)
System Uptime: 0 days 0:10:10.594
Loading Kernel Symbols
...............................................................
................................................................
..............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck BE, {fffff880001c9110, 4a0121, fffff880066f9b90, b}

Probably caused by : win32k.sys ( win32k!DrvUpdateGraphicsDeviceList+198 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff880001c9110, Virtual address for the attempted write.
Arg2: 00000000004a0121, PTE contents.
Arg3: fffff880066f9b90, (reserved)
Arg4: 000000000000000b, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xBE

PROCESS_NAME:  dwm.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880066f9b90 -- (.trap 0xfffff880066f9b90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a004640980 rbx=0000000000000000 rcx=00000000000007ff
rdx=00000000000004f1 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e6bffb rsp=fffff880066f9d20 rbp=fffff880066fa310
 r8=0000000000000801  r9=00000000000004ef r10=fffff80002c36420
r11=0000000000000011 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!CmpCallCallBacks+0xeb:
fffff800`02e6bffb f044017710      lock add dword ptr [rdi+10h],r14d ds:00000000`00000010=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002b3aa22 to fffff80002aba600

STACK_TEXT:  
fffff880`066f9a28 fffff800`02b3aa22 : 00000000`000000be fffff880`001c9110 00000000`004a0121 fffff880`066f9b90 : nt!KeBugCheckEx
fffff880`066f9a30 fffff800`02ab86ee : 00000000`00000001 00000000`00000000 00000000`41735300 00000000`000007ff : nt! ?? ::FNODOBFM::`string'+0x423be
fffff880`066f9b90 fffff800`02e6bffb : 00000000`000004ef 00000000`00000000 00000000`00000000 00000000`000007ff : nt!KiPageFault+0x16e
fffff880`066f9d20 fffff800`02ddab1b : fffffa80`0000001c fffff880`066f9f50 fffff8a0`00058001 fffff880`0000001d : nt!CmpCallCallBacks+0xeb
fffff880`066f9df0 fffff800`02db4a64 : fffff800`02d94ae0 00000000`00000000 fffffa80`05778010 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x2c227
fffff880`066fa0c0 fffff800`02db9b76 : fffffa80`05778010 fffff880`066fa240 00000000`00000240 fffffa80`0370cf30 : nt!ObpLookupObjectName+0x585
fffff880`066fa1c0 fffff800`02d98bec : fffffa80`0635a010 00000000`00000000 fffffa80`063eeb00 fffffa80`00000000 : nt!ObOpenObjectByName+0x306
fffff880`066fa290 fffff800`02d9be12 : fffff880`066fa8e8 fffff8a0`82000000 fffff880`066fa620 00000000`00000000 : nt!CmOpenKey+0x28a
fffff880`066fa3e0 fffff800`02ab9853 : fffff8a0`002bd060 fffff880`066fa500 00000000`001a0000 00000000`000001a8 : nt!NtOpenKey+0x12
fffff880`066fa420 fffff800`02ab5df0 : fffff800`02d75c45 00000000`00000000 00000000`00000000 fffff960`0034d6c0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`066fa5b8 fffff800`02d75c45 : 00000000`00000000 00000000`00000000 fffff960`0034d6c0 fffff880`066fa8e8 : nt!KiServiceLinkage
fffff880`066fa5c0 fffff800`02d757e3 : 00000000`00000000 400001c0`400000c0 00000000`00000000 00000000`021fe9b0 : nt!RtlpGetRegistryHandle+0x131
fffff880`066fa8a0 fffff960`000ad164 : 00000000`00000000 00000000`00000004 00000000`00000000 00000000`00000000 : nt!RtlQueryRegistryValues+0x37
fffff880`066fa970 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!DrvUpdateGraphicsDeviceList+0x198


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!DrvUpdateGraphicsDeviceList+198
fffff960`000ad164 440fb71d38fe2c00 movzx   r11d,word ptr [win32k!gProtocolType (fffff960`0037cfa4)]

SYMBOL_STACK_INDEX:  d

SYMBOL_NAME:  win32k!DrvUpdateGraphicsDeviceList+198

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4bdc4376

FAILURE_BUCKET_ID:  X64_0xBE_win32k!DrvUpdateGraphicsDeviceList+198

BUCKET_ID:  X64_0xBE_win32k!DrvUpdateGraphicsDeviceList+198

Followup: MachineOwner
---------

~Lordbob

ttran · Jun 25, 2010

If the scan didn't find any problem, then I would suggest your to run check disk and diagnostic. Because Bugcheck 24 usually points to hard drive. In addition, NTFS.sys is a hard drive controller driver.
http://www.sevenforums.com/tutorials/433-disk-check.html
HD Diagnostic
Bugcheck

Code:

BugCheck 24, {1904fb, fffff8800aedfa08, fffff8800aedf270, fffff88001254a30}

Unable to load image \SystemRoot\system32\DRIVERS\SiWinAcc.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for SiWinAcc.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsSnapshotScbInternal+160 )

Followup: MachineOwner
---------

Also, I saw one of the minidump file point to the SiWinAcc.sys, which is Silicon Image driver - comes with package for the SIxxxx drivers, and yes, I checked the loaded drivers and saw that they kind of out of date, please update them if you can:
Silicon Image - Support

Code:

fffff880`010e7000 fffff880`01101000   SI3132   SI3132.sys   Thu Oct 04 01:39:29 2007 (4703E1E1)
fffff880`0177c000 fffff880`01784000   SiRemFil SiRemFil.sys Thu Jun 21 02:42:10 2007 (46798312)
fffff880`011da000 fffff880`011e3000   SiWinAcc SiWinAcc.sys Fri Jun 15 07:02:02 2007 (4671D6FA)

Also:

Code:

ASACPI   ASACPI.sys   Mon Mar 28 09:30:36 2005 (42476C4C)

It's pretty out of date, read this article to know what to do:
http://www.sevenforums.com/787431-post2.html

~Tuan

TheFrin · Jun 25, 2010

For the moment is says:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

There is a system repair pending which requires reboot to complete. Restart
Windows and run sfc again.

C:\Windows\system32>

So I'm going to do that.

brb

New Scan:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>

@ Tuan, Thanks I'm going to update all of that now.

~TheFrin

TheFrin · Jun 25, 2010

@ Lordbob, The most recent scan is in the post above, I edited it in before, so I'm bumping it now. ;p

@ Tuan, Those are the most up to date Silicon Image Drivers I can find (Download Asus M2N32-SLI Deluxe Silicon Image 3132 Serial ATA Driver 1.0.5.0 Driver for Windows XP - Softpedia)

The Silicon Image support site was no use to me unfortunately, when I looked for what I thought I needed, its either brought up white papers, or firmware.

I was able to update the ASACPI.sys so I will see how that goes.

Im going to restart and run a Disk Check, and see how that goes.

Thanks for the help so far guys.

TheFrin

Lordbob75 · Jun 25, 2010

Ok, so you had some corrupted system files. I figured. If those are fixed, then you might be set, but keep us up to date.

~Lordbob

TheFrin · Jun 26, 2010

I thought I may aswell go and have a game of something, So I threw Mass Effect 2 on, and after 15 or so minutes I BSOD'd again.

Its another 0x00000024 so I'm going to recheck my HDD and what not. I think my comp could have BSOD whilst on the chdisk last night, but I was asleep so I cant say for sure.

ttran · Jun 26, 2010

Yes, you have a good guess buddy, bugcheck code 24 is usually hard drive, and ntfs.sys is the hard drive controller driver, they both appear in the minidump you just posted.
So I would suggest you to run the check disk again and also the hard drive diagnostic as I suggested on my first post above
Have you updated or re-install the silicon image that I suggested yet, I still think that it was the cause, the date of driver still from 2007
BUGCHECK:

Code:

BugCheck 24, {1904fb, fffff88009dc5398, fffff88009dc4c00, fffff880012628ad}

Unable to load image \SystemRoot\system32\DRIVERS\SiWinAcc.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for SiWinAcc.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsProcessUsnRecordsForCommit+16d )

You also have some other old driver, update them please:

Code:

LMouFilt LMouFilt.Sys Wed Jul 18 07:35:26 2007 (469D604E)
nvm62x64 nvm62x64.sys Sat Oct 18 04:01:06 2008 (48F8FD12)

I'm looking for the silicon image drivers with you too, don't know if I can, it is time consuming stuff. Hope someone know where it is

~Tuan

ttran · Jun 26, 2010

Try this:
Silicon Image - Support | Search Results

TheFrin · Jun 26, 2010

I just ran the Western Digital Data Lifeguard and got this PASS.

Test Option: EXTENDED TEST Model Number: WDC WD10EADS-00L5B1 Unit Serial Number: WD-WCAU48132387 Firmware Number: 01.01A01 Capacity: 1000.20 GB SMART Status: Not Available Test Result: PASS Test Time: 17:43:22, June 26, 2010

I have just gotten the 3132r5_x64_15190_logo_win7 drivers off of the Silicon Image website, you posted Tuan so I'll throw them on now, and run another disk check when I do the restart.

At least I'm making some progress on this, so thanks guys, just wondering what do you use to veiw the dump files?

TheFrin

TheFrin · Jun 26, 2010

Right going through my device manager to install the Silicon Image drivers I down loaded, I found that my SATA drivers are Nvidia nForce, and my mother board does have a nForce 590 chip set.

So, now I'm guessing I have those Silicone Image driver files for no reason, and evidently there is a driver conflict, but I'm confused why this is acting up now I haven't made any hardware changes recently, and as far as I know, I have never used the Silicon Image drivers.

ttran · Jun 26, 2010

I'm not quite sure what to tell you know. I'm not a speacialist with hardware stuff. How have you been updating drivers?
I found this article in NVIDIA forum that talk something about nVIDIA SATA and silicon image
NVIDIA Forums > SATA drives connected to Silicon Image controller?

I guess you can update that driver from nVIDIA site, such as downloading SATA driver???
~Tuan

TheFrin · Jun 26, 2010

Hey Tuan, thanks for the link, I went in to my bios and have disabled my SI SATA controller, and (as far as I can tell) am using only the Nvidia nForce drivers.

That being said, I just went to have a quick game of Mass Effect, to see if everything was working, but alas it isn't, I BSOD'd again.

This time, on the actual BSOD, I saw a DirectX fault, dxgmms1.sys (I think that was it), so I'm thinking if I can reinstall my copy of DirectX this may very well go away, as I only crash when gaming, and I assume only when that specific bit of DirectX is being used.

Thanks for the help so far guys, Ill keep you updated as it goes.

TheFrin

[Edit] After a clicks of links I found;

http://nzgeek.org/blog/dxgmms1-sys-crash-blue-screen-of-death/

so it takes me here;

http://www.microsoft.com/downloads/...6f-c3d3-4cbb-8c6c-ac76c94d3d0e&displaylang=en

TheFrin · Jun 26, 2010

This hasn't worked, another BSOD, whilst in game here is the dump file.

ttran · Jun 26, 2010

Please update these drivers as wells:

Code:

LHidFilt LHidFilt.Sys Wed Jul 18 07:35:22 2007 (469D604A)
LMouFilt LMouFilt.Sys Wed Jul 18 07:35:26 2007 (469D604E)

Tthey are Logitech Setpoint HID filter driver
Also

Code:

nvm62x64 nvm62x64.sys Sat Oct 18 04:01:06 2008 (48F8FD12)

It is nVidia Ethernet Networking Driver (nForce chipset driver)

Also, run system file check
Start-->cmd-->sfc /scannow (space between sfc and /)

~Tuan

zigzag3143 · Jun 26, 2010

This thread is getting too many people far too confused. Lets wait until the user comes back and has updated all the drivers we have suggested

The other option would be to start a new thread as these will be new problems

Ken

TheFrin · Jun 27, 2010

Hi, sorry about the wait, I was running mem test for almost 12 hours, there was a post here telling me to do it again, so a total of 12 passes on 2 tests have shown my RAM is ok.

I have just installed the Logitech latest set point and the latest nForce drivers for both the ethernet and storage. Both drivers were new in 2009.

So I'll see if this works when I get the chance

TheFrin · Jun 27, 2010

No, no joy, I had a nice long 25 min (as opposed to the usual 5-10 min) on Mass Effect 2, then it BSOD'd, bleh, here is the mini-dump.

How do you guys view the minidumps? I would like to be able to have a browse of these myself.

TheFrin

{edit} her is the scan now result:

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\System32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\System32>

Lordbob75 · Jun 27, 2010

http://www.sevenforums.com/crash-lo...intermediate-configuring-debugging-tools.html

Alright. Looks like you need to update your RAID drivers.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\DavidLap\AppData\Local\Temp\7zOA4F5.tmp\062710-18595-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a0e000 PsLoadedModuleList = 0xfffff800`02c4be50
Debug session time: Sun Jun 27 13:38:01.820 2010 (UTC - 7:00)
System Uptime: 0 days 0:33:14.021
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002d73927, fffff880069b5120, 0}

Probably caused by : ntkrnlmp.exe ( nt!ObReferenceObjectByHandleWithTag+e7 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002d73927, Address of the instruction which caused the bugcheck
Arg3: fffff880069b5120, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ObReferenceObjectByHandleWithTag+e7
fffff800`02d73927 488b03          mov     rax,qword ptr [rbx]

CONTEXT:  fffff880069b5120 -- (.cxr 0xfffff880069b5120)
rax=909090908d8d8d8d rbx=909090908d8d9c1d rcx=00000000000003a4
rdx=0000000000000002 rsi=fffff8a003bc7640 rdi=fffffa8007706720
rip=fffff80002d73927 rsp=fffff880069b5af0 rbp=fffff880069b5c00
 r8=fffff8800945f000  r9=0000000000000000 r10=00000000000003a4
r11=000000000031ce70 r12=0000000000000000 r13=00000000000003a4
r14=0000000000000001 r15=fffffa80078439e0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ObReferenceObjectByHandleWithTag+0xe7:
fffff800`02d73927 488b03          mov     rax,qword ptr [rbx] ds:002b:90909090`8d8d9c1d=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  Steam.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002d9c0e5 to fffff80002d73927

STACK_TEXT:  
fffff880`069b5af0 fffff800`02d9c0e5 : 00000000`00000000 fffff800`00000002 fffffa80`036f3570 00000000`00000001 : nt!ObReferenceObjectByHandleWithTag+0xe7
fffff880`069b5bc0 fffff800`02a7d853 : fffffa80`07706720 fffffa80`080f5fe0 fffff900`c010f010 00000000`00000000 : nt!NtSetEvent+0x75
fffff880`069b5c20 00000000`75722dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008ebf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75722dd9


FOLLOWUP_IP: 
nt!ObReferenceObjectByHandleWithTag+e7
fffff800`02d73927 488b03          mov     rax,qword ptr [rbx]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ObReferenceObjectByHandleWithTag+e7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

STACK_COMMAND:  .cxr 0xfffff880069b5120 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ObReferenceObjectByHandleWithTag+e7

BUCKET_ID:  X64_0x3B_nt!ObReferenceObjectByHandleWithTag+e7

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`10b7d000 fffff880`10bbb000   1394ohci 1394ohci.sys Mon Jul 13 17:07:12 2009 (4A5BCC30)
fffff880`00e91000 fffff880`00ee8000   ACPI     ACPI.sys     Mon Jul 13 16:19:34 2009 (4A5BC106)
fffff880`0649e000 fffff880`064b6000   adfs     adfs.SYS     Thu Jun 26 13:52:37 2008 (48640195)
fffff880`03e39000 fffff880`03ec3000   afd      afd.sys      Mon Jul 13 16:21:40 2009 (4A5BC184)
fffff880`0fe64000 fffff880`0fe7a000   AgileVpn AgileVpn.sys Mon Jul 13 17:10:24 2009 (4A5BCCF0)
fffff880`01238000 fffff880`0124f000   amdk8    amdk8.sys    Mon Jul 13 16:19:25 2009 (4A5BC0FD)
fffff880`011a1000 fffff880`011ac000   amdxata  amdxata.sys  Tue May 19 10:56:59 2009 (4A12F2EB)
fffff880`043f0000 fffff880`043f8000   ASACPI   ASACPI.sys   Wed Jul 15 20:31:29 2009 (4A5E9F11)
fffff880`03ded000 fffff880`03df3000   AsIO     AsIO.sys     Mon Aug 03 00:03:16 2009 (4A768BB4)
fffff880`03de7000 fffff880`03ded000   AsUpIO   AsUpIO.sys   Sun Jul 05 19:21:38 2009 (4A515FB2)
fffff880`01faa000 fffff880`01fb3000   aswFsBlk aswFsBlk.SYS Thu May 06 13:33:48 2010 (4BE327AC)
fffff880`03c2b000 fffff880`03c4d000   aswFW    aswFW.SYS    Thu May 06 13:41:34 2010 (4BE3297E)
fffff880`01f3b000 fffff880`01f56000   aswMonFlt aswMonFlt.sys Thu May 06 13:34:13 2010 (4BE327C5)
fffff880`0177e000 fffff880`01785000   aswNdis  aswNdis.sys  Sat Jan 09 14:22:03 2010 (4B48F37B)
fffff880`016c8000 fffff880`01709000   aswNdis2 aswNdis2.sys Thu May 06 13:40:54 2010 (4BE32956)
fffff880`03ec3000 fffff880`03ecd000   aswRdr   aswRdr.SYS   Thu May 06 13:34:28 2010 (4BE327D4)
fffff880`03cde000 fffff880`03d4b000   aswSnx   aswSnx.SYS   Thu May 06 13:41:22 2010 (4BE32972)
fffff880`0107b000 fffff880`0109e000   aswSP    aswSP.SYS    Thu May 06 13:39:05 2010 (4BE328E9)
fffff880`03c4d000 fffff880`03c5d000   aswTdi   aswTdi.SYS   Thu May 06 13:39:25 2010 (4BE328FD)
fffff880`07671000 fffff880`0767c000   asyncmac asyncmac.sys Mon Jul 13 17:10:13 2009 (4A5BCCE5)
fffff880`00ff2000 fffff880`00ffb000   atapi    atapi.sys    Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Mon Jul 13 16:19:52 2009 (4A5BC118)
fffff960`008f0000 fffff960`00951000   ATMFD    ATMFD.DLL    Wed May 26 21:11:31 2010 (4BFDF0F3)
fffff880`03d66000 fffff880`03d6d000   Beep     Beep.SYS     Mon Jul 13 17:00:13 2009 (4A5BCA8D)
fffff880`03e26000 fffff880`03e37000   blbdrive blbdrive.sys Mon Jul 13 16:35:59 2009 (4A5BC4DF)
fffff880`065b8000 fffff880`065d6000   bowser   bowser.sys   Mon Jul 13 16:23:50 2009 (4A5BC206)
fffff960`00650000 fffff960`00677000   cdd      cdd.dll      Mon Jul 13 18:25:40 2009 (4A5BDE94)
fffff880`03cb4000 fffff880`03cde000   cdrom    cdrom.sys    Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`00d38000 fffff880`00df8000   CI       CI.dll       Mon Jul 13 18:32:13 2009 (4A5BE01D)
fffff880`01400000 fffff880`01430000   CLASSPNP CLASSPNP.SYS Mon Jul 13 16:19:58 2009 (4A5BC11E)
fffff880`00cda000 fffff880`00d38000   CLFS     CLFS.SYS     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`0143e000 fffff880`014b1000   cng      cng.sys      Mon Jul 13 16:49:40 2009 (4A5BC814)
fffff880`0fe54000 fffff880`0fe64000   CompositeBus CompositeBus.sys Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`064b6000 fffff880`064be000   cpuz132_x64 cpuz132_x64.sys Thu Mar 26 16:17:23 2009 (49CC0D03)
fffff880`01fd4000 fffff880`01fe2000   crashdmp crashdmp.sys Mon Jul 13 17:01:01 2009 (4A5BCABD)
fffff880`0121a000 fffff880`01238000   dfsc     dfsc.sys     Mon Jul 13 16:23:44 2009 (4A5BC200)
fffff880`03e17000 fffff880`03e26000   discache discache.sys Mon Jul 13 16:37:18 2009 (4A5BC52E)
fffff880`017d9000 fffff880`017ef000   disk     disk.sys     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`04899000 fffff880`048bb000   drmk     drmk.sys     Mon Jul 13 18:01:25 2009 (4A5BD8E5)
fffff880`01fe2000 fffff880`01fec000   dump_diskdump dump_diskdump.sys Mon Jul 13 17:01:00 2009 (4A5BCABC)
fffff880`01e3f000 fffff880`01e52000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 16:21:51 2009 (4A5BC18F)
fffff880`01e00000 fffff880`01e3f000   dump_nvstor64 dump_nvstor64.sys Tue Aug 04 17:31:07 2009 (4A78D2CB)
fffff880`049ec000 fffff880`049f8000   Dxapi    Dxapi.sys    Mon Jul 13 16:38:28 2009 (4A5BC574)
fffff880`04203000 fffff880`042f7000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 18:00:14 2009 (4AC5509E)
fffff880`042f7000 fffff880`0433d000   dxgmms1  dxgmms1.sys  Mon Jul 13 16:38:32 2009 (4A5BC578)
fffff880`01000000 fffff880`01014000   fileinfo fileinfo.sys Mon Jul 13 16:34:25 2009 (4A5BC481)
fffff880`011ac000 fffff880`011f8000   fltmgr   fltmgr.sys   Mon Jul 13 16:19:59 2009 (4A5BC11F)
fffff880`014c2000 fffff880`014cc000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 16:19:45 2009 (4A5BC111)
fffff880`015be000 fffff880`015f8000   fvevol   fvevol.sys   Fri Sep 25 19:34:26 2009 (4ABD7DB2)
fffff880`01734000 fffff880`0177e000   fwpkclnt fwpkclnt.sys Mon Jul 13 16:21:08 2009 (4A5BC164)
fffff800`02fea000 fffff800`03033000   hal      hal.dll      Mon Jul 13 18:27:36 2009 (4A5BDF08)
fffff880`043cc000 fffff880`043f0000   HDAudBus HDAudBus.sys Mon Jul 13 17:06:13 2009 (4A5BCBF5)
fffff880`04800000 fffff880`0485c000   HdAudio  HdAudio.sys  Mon Jul 13 17:06:59 2009 (4A5BCC23)
fffff880`03c7a000 fffff880`03c93000   HIDCLASS HIDCLASS.SYS Mon Jul 13 17:06:21 2009 (4A5BCBFD)
fffff880`0feaa000 fffff880`0feb2080   HIDPARSE HIDPARSE.SYS Mon Jul 13 17:06:17 2009 (4A5BCBF9)
fffff880`10bea000 fffff880`10bf8000   hidusb   hidusb.sys   Mon Jul 13 17:06:22 2009 (4A5BCBFE)
fffff880`064f0000 fffff880`065b8000   HTTP     HTTP.sys     Mon Jul 13 16:22:16 2009 (4A5BC1A8)
fffff880`0165e000 fffff880`01667000   hwpolicy hwpolicy.sys Mon Jul 13 16:19:22 2009 (4A5BC0FA)
fffff880`04383000 fffff880`043a1000   i8042prt i8042prt.sys Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`043a1000 fffff880`043b0000   kbdclass kbdclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`017ef000 fffff880`017fd000   kbdhid   kbdhid.sys   Mon Jul 13 17:00:20 2009 (4A5BCA94)
fffff800`00bcd000 fffff800`00bd7000   kdcom    kdcom.dll    Mon Jul 13 18:31:07 2009 (4A5BDFDB)
fffff880`04928000 fffff880`0496b000   ks       ks.sys       Mon Jul 13 17:00:31 2009 (4A5BCA9F)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 16:20:54 2009 (4A5BC156)
fffff880`01709000 fffff880`01734000   ksecpkg  ksecpkg.sys  Thu Dec 10 23:03:32 2009 (4B21E0B4)
fffff880`048bb000 fffff880`048c0200   ksthunk  ksthunk.sys  Mon Jul 13 17:00:19 2009 (4A5BCA93)
fffff880`03c93000 fffff880`03ca8000   LHidFilt LHidFilt.Sys Thu Mar 18 01:51:17 2010 (4BA1E985)
fffff880`01e52000 fffff880`01e67000   lltdio   lltdio.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`0109e000 fffff880`010b2000   LMouFilt LMouFilt.Sys Thu Mar 18 01:51:24 2010 (4BA1E98C)
fffff880`01f18000 fffff880`01f3b000   luafv    luafv.sys    Mon Jul 13 16:26:13 2009 (4A5BC295)
fffff880`00cb9000 fffff880`00cc6000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 18:29:09 2009 (4A5BDF65)
fffff880`01f0a000 fffff880`01f18000   monitor  monitor.sys  Mon Jul 13 16:38:52 2009 (4A5BC58C)
fffff880`04917000 fffff880`04926000   mouclass mouclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`03df3000 fffff880`03e00000   mouhid   mouhid.sys   Mon Jul 13 17:00:20 2009 (4A5BCA94)
fffff880`00fd8000 fffff880`00ff2000   mountmgr mountmgr.sys Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`065d6000 fffff880`065ee000   mpsdrv   mpsdrv.sys   Mon Jul 13 17:08:25 2009 (4A5BCC79)
fffff880`06400000 fffff880`0642d000   mrxsmb   mrxsmb.sys   Sat Feb 27 00:52:19 2010 (4B88CF33)
fffff880`0642d000 fffff880`0647b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 00:52:28 2010 (4B88CF3C)
fffff880`0647b000 fffff880`0649e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 00:52:26 2010 (4B88CF3A)
fffff880`03dcb000 fffff880`03dd6000   Msfs     Msfs.SYS     Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`00ef1000 fffff880`00efb000   msisadrv msisadrv.sys Mon Jul 13 16:19:26 2009 (4A5BC0FE)
fffff880`0101d000 fffff880`0107b000   msrpc    msrpc.sys    Mon Jul 13 16:21:32 2009 (4A5BC17C)
fffff880`03e0c000 fffff880`03e17000   mssmbios mssmbios.sys Mon Jul 13 16:31:10 2009 (4A5BC3BE)
fffff880`0164c000 fffff880`0165e000   mup      mup.sys      Mon Jul 13 16:23:45 2009 (4A5BC201)
fffff880`014cc000 fffff880`015be000   ndis     ndis.sys     Mon Jul 13 16:21:40 2009 (4A5BC184)
fffff880`0fe9e000 fffff880`0feaa000   ndistapi ndistapi.sys Mon Jul 13 17:10:00 2009 (4A5BCCD8)
fffff880`10bbb000 fffff880`10bea000   ndiswan  ndiswan.sys  Mon Jul 13 17:10:11 2009 (4A5BCCE3)
fffff880`049d7000 fffff880`049ec000   NDProxy  NDProxy.SYS  Mon Jul 13 17:10:05 2009 (4A5BCCDD)
fffff880`03f41000 fffff880`03f50000   netbios  netbios.sys  Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff880`03ecd000 fffff880`03f12000   netbt    netbt.sys    Mon Jul 13 16:21:28 2009 (4A5BC178)
fffff880`01668000 fffff880`016c8000   NETIO    NETIO.SYS    Mon Jul 13 16:21:46 2009 (4A5BC18A)
fffff880`03dd6000 fffff880`03de7000   Npfs     Npfs.SYS     Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`03e00000 fffff880`03e0c000   nsiproxy nsiproxy.sys Mon Jul 13 16:21:02 2009 (4A5BC15E)
fffff800`02a0e000 fffff800`02fea000   nt       ntkrnlmp.exe Sat Feb 27 00:55:23 2010 (4B88CFEB)
fffff880`0124f000 fffff880`013f2000   Ntfs     Ntfs.sys     Mon Jul 13 16:20:47 2009 (4A5BC14F)
fffff880`03d5d000 fffff880`03d66000   Null     Null.SYS     Mon Jul 13 16:19:37 2009 (4A5BC109)
fffff880`01642000 fffff880`0164c000   NVAMACPI NVAMACPI.sys Fri Jul 17 01:51:47 2009 (4A603BA3)
fffff880`10b25000 fffff880`10b26180   nvBridge nvBridge.kmd Mon Jun 07 15:07:11 2010 (4C0D6D8F)
fffff880`0feb7000 fffff880`10b24c80   nvlddmkm nvlddmkm.sys Mon Jun 07 15:16:55 2010 (4C0D6FD7)
fffff880`0fe00000 fffff880`0fe53600   nvmf6264 nvmf6264.sys Wed Nov 11 16:16:48 2009 (4AFB45E0)
fffff880`00e2a000 fffff880`00e55000   nvstor   nvstor.sys   Tue May 19 23:45:37 2009 (4A13A711)
fffff880`01162000 fffff880`011a1000   nvstor64 nvstor64.sys Tue Aug 04 17:31:07 2009 (4A78D2CB)
fffff880`03f1b000 fffff880`03f41000   pacer    pacer.sys    Mon Jul 13 17:09:41 2009 (4A5BCCC5)
fffff880`04366000 fffff880`04383000   parport  parport.sys  Mon Jul 13 17:00:40 2009 (4A5BCAA8)
fffff880`00f3b000 fffff880`00f50000   partmgr  partmgr.sys  Mon Jul 13 16:19:58 2009 (4A5BC11E)
fffff880`00efb000 fffff880`00f2e000   pci      pci.sys      Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`00fc1000 fffff880`00fc8000   pciide   pciide.sys   Mon Jul 13 16:19:49 2009 (4A5BC115)
fffff880`00fc8000 fffff880`00fd8000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`014b1000 fffff880`014c2000   pcw      pcw.sys      Mon Jul 13 16:19:27 2009 (4A5BC0FF)
fffff880`072b7000 fffff880`0735d000   peauth   peauth.sys   Mon Jul 13 18:01:19 2009 (4A5BD8DF)
fffff880`0485c000 fffff880`04899000   portcls  portcls.sys  Mon Jul 13 17:06:27 2009 (4A5BCC03)
fffff880`00cc6000 fffff880`00cda000   PSHED    PSHED.dll    Mon Jul 13 18:32:23 2009 (4A5BE027)
fffff880`03fea000 fffff880`03ffd000   RapportKE64 RapportKE64.sys Mon Jun 07 13:59:30 2010 (4C0D5DB2)
fffff880`03d4b000 fffff880`03d5d000   RapportPG64 RapportPG64.sys Mon Jun 07 13:59:36 2010 (4C0D5DB8)
fffff880`0fe7a000 fffff880`0fe9e000   rasl2tp  rasl2tp.sys  Mon Jul 13 17:10:11 2009 (4A5BCCE3)
fffff880`048c1000 fffff880`048dc000   raspppoe raspppoe.sys Mon Jul 13 17:10:17 2009 (4A5BCCE9)
fffff880`048dc000 fffff880`048fd000   raspptp  raspptp.sys  Mon Jul 13 17:10:18 2009 (4A5BCCEA)
fffff880`048fd000 fffff880`04917000   rassstp  rassstp.sys  Mon Jul 13 17:10:25 2009 (4A5BCCF1)
fffff880`03f99000 fffff880`03fea000   rdbss    rdbss.sys    Mon Jul 13 16:24:09 2009 (4A5BC219)
fffff880`03db0000 fffff880`03db9000   RDPCDD   RDPCDD.sys   Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`03db9000 fffff880`03dc2000   rdpencdd rdpencdd.sys Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`03dc2000 fffff880`03dcb000   rdprefmp rdprefmp.sys Mon Jul 13 17:16:35 2009 (4A5BCE63)
fffff880`077af000 fffff880`077e7000   RDPWD    RDPWD.SYS    Mon Jul 13 17:16:47 2009 (4A5BCE6F)
fffff880`01600000 fffff880`0163a000   rdyboost rdyboost.sys Mon Jul 13 16:34:34 2009 (4A5BC48A)
fffff880`077ef000 fffff880`077f6000   RivaTuner64 RivaTuner64.sys Tue Jul 17 12:13:42 2007 (469D14E6)
fffff880`01e67000 fffff880`01e7f000   rspndr   rspndr.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`03f7f000 fffff880`03f99000   SCDEmu   SCDEmu.SYS   Mon Apr 12 01:52:25 2010 (4BC2DF49)
fffff880`01133000 fffff880`01162000   SCSIPORT SCSIPORT.SYS Mon Jul 13 17:01:04 2009 (4A5BCAC0)
fffff880`0735d000 fffff880`07368000   secdrv   secdrv.SYS   Wed Sep 13 06:18:38 2006 (4508052E)
fffff880`0435a000 fffff880`04366000   serenum  serenum.sys  Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`0433d000 fffff880`0435a000   serial   serial.sys   Mon Jul 13 17:00:40 2009 (4A5BCAA8)
fffff880`01119000 fffff880`01133000   SI3132   SI3132.sys   Wed Oct 03 11:39:29 2007 (4703E1E1)
fffff880`0163a000 fffff880`01642000   SiRemFil SiRemFil.sys Wed Jun 20 12:42:10 2007 (46798312)
fffff880`01014000 fffff880`0101d000   SiWinAcc SiWinAcc.sys Thu Jun 14 17:02:02 2007 (4671D6FA)
fffff880`017d1000 fffff880`017d9000   spldr    spldr.sys    Mon May 11 09:56:27 2009 (4A0858BB)
fffff880`076fd000 fffff880`07795000   srv      srv.sys      Tue Dec 08 01:32:55 2009 (4B1E0F37)
fffff880`07200000 fffff880`07269000   srv2     srv2.sys     Mon Jul 13 16:25:02 2009 (4A5BC24E)
fffff880`07368000 fffff880`07395000   srvnet   srvnet.sys   Tue Dec 08 01:32:26 2009 (4B1E0F1A)
fffff880`010b7000 fffff880`01119000   storport storport.sys Mon Jul 13 17:01:18 2009 (4A5BCACE)
fffff880`04926000 fffff880`04927480   swenum   swenum.sys   Mon Jul 13 17:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Mon Jul 13 16:25:34 2009 (4A5BC26E)
fffff880`07395000 fffff880`073a7000   tcpipreg tcpipreg.sys Mon Jul 13 17:09:49 2009 (4A5BCCCD)
fffff880`03c1e000 fffff880`03c2b000   TDI      TDI.SYS      Mon Jul 13 16:21:18 2009 (4A5BC16E)
fffff880`07795000 fffff880`077a0000   tdtcp    tdtcp.sys    Mon Jul 13 17:16:32 2009 (4A5BCE60)
fffff880`03c00000 fffff880`03c1e000   tdx      tdx.sys      Mon Jul 13 16:21:15 2009 (4A5BC16B)
fffff880`03f6b000 fffff880`03f7f000   termdd   termdd.sys   Mon Jul 13 17:16:36 2009 (4A5BCE64)
fffff960`005a0000 fffff960`005aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`077a0000 fffff880`077af000   tssecsrv tssecsrv.sys Mon Jul 13 17:16:41 2009 (4A5BCE69)
fffff880`077e7000 fffff880`077ef000   TuneUpUtilitiesDriver64 TuneUpUtilitiesDriver64.sys Thu Sep 17 04:54:52 2009 (4AB2238C)
fffff880`00e55000 fffff880`00e7b000   tunnel   tunnel.sys   Mon Jul 13 17:09:37 2009 (4A5BCCC1)
fffff880`01f56000 fffff880`01faa000   udfs     udfs.sys     Mon Jul 13 16:23:37 2009 (4A5BC1F9)
fffff880`0496b000 fffff880`0497d000   umbus    umbus.sys    Mon Jul 13 17:06:56 2009 (4A5BCC20)
fffff880`01eef000 fffff880`01f09c00   usbaudio usbaudio.sys Mon Jul 13 17:06:31 2009 (4A5BCC07)
fffff880`03c5d000 fffff880`03c7a000   usbccgp  usbccgp.sys  Mon Jul 13 17:06:45 2009 (4A5BCC15)
fffff880`049f8000 fffff880`049f9f00   USBD     USBD.SYS     Mon Jul 13 17:06:23 2009 (4A5BCBFF)
fffff880`043bb000 fffff880`043cc000   usbehci  usbehci.sys  Fri Oct 23 21:27:33 2009 (4AE28235)
fffff880`0497d000 fffff880`049d7000   usbhub   usbhub.sys   Fri Oct 23 21:28:24 2009 (4AE28268)
fffff880`043b0000 fffff880`043bb000   usbohci  usbohci.sys  Mon Jul 13 17:06:30 2009 (4A5BCC06)
fffff880`10b27000 fffff880`10b7d000   USBPORT  USBPORT.SYS  Mon Jul 13 17:06:31 2009 (4A5BCC07)
fffff880`00f2e000 fffff880`00f3b000   vdrvroot vdrvroot.sys Mon Jul 13 17:01:31 2009 (4A5BCADB)
fffff880`03d6d000 fffff880`03d7b000   vga      vga.sys      Mon Jul 13 16:38:47 2009 (4A5BC587)
fffff880`03d7b000 fffff880`03da0000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 16:38:51 2009 (4A5BC58B)
fffff880`00f50000 fffff880`00f65000   volmgr   volmgr.sys   Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`00f65000 fffff880`00fc1000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`01785000 fffff880`017d1000   volsnap  volsnap.sys  Mon Jul 13 16:20:08 2009 (4A5BC128)
fffff880`03f50000 fffff880`03f6b000   wanarp   wanarp.sys   Mon Jul 13 17:10:21 2009 (4A5BCCED)
fffff880`03da0000 fffff880`03db0000   watchdog watchdog.sys Mon Jul 13 16:37:35 2009 (4A5BC53F)
fffff880`00c00000 fffff880`00ca4000   Wdf01000 Wdf01000.sys Mon Jul 13 16:22:07 2009 (4A5BC19F)
fffff880`00ca4000 fffff880`00cb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`03f12000 fffff880`03f1b000   wfplwf   wfplwf.sys   Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`0039f000   win32k   win32k.sys   Sat May 01 08:06:30 2010 (4BDC4376)
fffff880`00ee8000 fffff880`00ef1000   WMILIB   WMILIB.SYS   Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`01fb3000 fffff880`01fd4000   WudfPf   WudfPf.sys   Mon Jul 13 17:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07600000 fffff880`07671000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`017ef000 fffff880`017fd000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01430000 fffff880`0143a000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`03c62000 fffff880`03ca1000   dump_nvstor6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`03ca1000 fffff880`03cb4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

~Lordbob

TheFrin · Jun 27, 2010

Hey peeps,

fffff880`01119000 fffff880`01133000 SI3132 SI3132.sys Wed Oct 03 11:39:29 2007 (4703E1E1)
fffff880`0163a000 fffff880`01642000 SiRemFil SiRemFil.sys Wed Jun 20 12:42:10 2007 (46798312)
fffff880`01014000 fffff880`0101d000 SiWinAcc SiWinAcc.sys Thu Jun 14 17:02:02 2007 (4671D6FA)

Those are the most up-to-date drivers available. I say this because, if you go to:

ASUSTeK Computer Inc.-Support-

Look for Motherboard > Socket AM2/AM2+/AM3 > M2N32SLI > Win7 64 bit, you will find no RAID/IDE drivers (Win7 installs them automatically), and If you go digging, in the Vista drivers section, the 32bit IDE bit are the most recent versions of these drivers and the same ones I have installed.

Saying that, the Silicon Image Drivers are for my DVD drives on IDE 1 and 2. I have looked on the Silicon Image support page and the drivers given are the same drivers I have.

Silicon Image - Support | Search Results

BSOD Help

New member

My Computer

Computer Voodooist

My Computer

Computational Biologist

My Computer

New member

My Computer

New member

My Computer

Computer Voodooist

My Computer

New member

My Computer

Computational Biologist

My Computer

Computational Biologist

My Computer

New member

My Computer

New member

My Computer

Computational Biologist

My Computer

New member

My Computer

New member

My Computer

Computational Biologist

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

Computer Voodooist

My Computer

New member

My Computer