BSOD - possibly ntoskrnl? - some advice please..

[Goose0211]

Hi,

I have just started getting a 'selection' of BSOD, they come up pretty regularly but the machine can occasionally boot ok and occasionally into safe mode. If i get in ok it runs for a while and then seems to Blue screen when I run a program - can vary from IE to Chrome to another application- nothing specific.

i have looked at some of the minidump files and it looks like they are pointing at the ntoskrnl.exe but would like a bit of clarification on this, and some advice as to where to go next!

I have tried all I can think of - removing recently installed software, done a few hours of memtest - came back fine but need to be pointed in the right direction, before i potentially do a rebuild.....last resort!

I have attached a host of minidump files and would be gratefull if someone could have a look and help me out.

If you need any more info - let me know

Thanks

 

[CarlTR6]

Hi, goose, and welcome to the forum. You do have a bunch of mini dumps. Please read this thread, follow the instructions and post back. We will be glad to help you.


http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[Goose0211]

Thanks for the quick reply Carl, Ive attached the 2 requested files - hopefully they are as they should be!!

thanks again

 

[CarlTR6]

Thanks, Goose. Everything came through just fine. I looked at your four most recent dumps. None of them point a specific cause and they all indicate memory corruption. You will have to troubleshoot. Please note the usual causes below.

Error code A (2X), IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Error code D1, DRIVER_IRQL_NOT_LESS_OR_EQUAL. Usually caused by a device driver.

Error code 7F, UNEXPECTED_KERNEL_MODE_TRAP. Usual causes: Memory corruption, Hardware (memory in particular), Installing a faulty or mismatched hardware (especially memory) or a failure after installing it, 3rd party firewall, Device drivers, SCSI/network/BIOS updates needed, Improperly seated cards, Incompatible storage devices, Overclocking, Virus scanner, Backup tool, Bad motherboard, Missing Service Pack.

To begin your troubleshooting, I recommend that you uninstall Kaspersky using this removal tool: Tool. Kaspersky is a known cause of BSOD's on some Win 7 systems. You can tyr it again after you know your system is stable; but I do not recommend doing so. Download and install Microsoft Security Essentials in its place and make sure Windows Firewall is turned on.

I find outdated drivers loaded on your system. Out of date drivers can and do cause memory corruption and BSOD's. Update or eliminate the following drivers.

Acceler.sys Fri Jun 26 16:56:34 2009 - HP Mobile Data Protection System Accelerometer. HP® - Holiday Deals on Laptops, Desktops, Printers, Servers and more.

bcmwl664.sys Tue Jul 07 20:45:04 2009 - bcmwl664.sys - Broadcom 802.11g Network Adapter wireless driver. Broadcom.com - Downloads & Support.

CtClsFlt.sys Mon Jun 15 01:06:41 2009 - Creative Camera Class Upper Filter Driver. Creative Worldwide Support.

o2mdgx64.sys Thu May 21 08:22:50 2009 - O2-Card-Reader-Controller-Driver. OEM - none at O2Micro - Welcome. Try to update this driver through the Dell site.

SynTP.sys Fri Jun 26 14:35:47 2009 - Synaptic Touch Pad Driver. Drivers | Synaptics.

How to find drivers-

- I have listed links to most of the drivers in the code box above. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Uninstall Kaspersky, update or eliminate the above drivers, reboot, and let's see how your system runs. Update us and let us know. If you get another BSOD, upload it and we will go from there.

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c02000 PsLoadedModuleList = 0xfffff800`02e3fe50
Debug session time: Sun Dec  5 17:36:33.726 2010 (GMT-5)
System Uptime: 0 days 0:00:51.303
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 0, fffff80002c92436}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002c92436, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eaa0e0
 0000000000000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopCompleteRequest+c73
fffff800`02c92436 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  AtBroker.exe

IRP_ADDRESS:  ffffffffffffff88

TRAP_FRAME:  fffff88006d43da0 -- (.trap 0xfffff88006d43da0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88006d44428 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c92436 rsp=fffff88006d43f30 rbp=fffff88006d44080
 r8=0000000000000000  r9=fffff88006d44030 r10=0000000000000002
r11=fffffa80057c7b20 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac po cy
nt!IopCompleteRequest+0xc73:
fffff800`02c92436 488b09          mov     rcx,qword ptr [rcx] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c71ca9 to fffff80002c72740

STACK_TEXT:  
fffff880`06d43c58 fffff800`02c71ca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`06d43c60 fffff800`02c70920 : fffffa80`06b4fc00 fffffa80`06b3f810 fffffa80`06b23370 fffff880`00e47579 : nt!KiBugCheckDispatch+0x69
fffff880`06d43da0 fffff800`02c92436 : fffffa80`06b43600 fffff880`00000000 a6c00001`003e9901 00000000`00000000 : nt!KiPageFault+0x260
fffff880`06d43f30 fffff800`02c4f0c7 : 00000000`00000000 fffff800`02eac840 fffff880`06d44100 fffffa80`00000000 : nt!IopCompleteRequest+0xc73
fffff880`06d44000 fffff800`02c4f487 : 00000000`00000006 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`06d44080 fffff800`02c69471 : fffff800`02c4d95e fffff880`00001000 00000000`00000000 fffff880`01800000 : nt!KiApcInterrupt+0xd7
fffff880`06d44218 fffff800`02c4d95e : fffff880`00001000 00000000`00000000 fffff880`01800000 fffff880`06d442c0 : nt!memmove+0x41
fffff880`06d44220 fffff800`02c559fe : fffffa80`04671910 fffff8a0`02dfa000 fffffa80`03d58570 fffffa80`00000000 : nt!EtwpEventWriteFull+0x3be
fffff880`06d44490 fffff800`0301a2f6 : 00000000`0000003a 000007fe`fddb00f0 fffff880`06d44798 fffff880`06d44780 : nt!EtwWrite+0xae
fffff880`06d44500 fffff800`02ce12ea : fffffa80`06b49000 00000000`00000000 000007fe`fddb0000 fffff800`02f50000 : nt!EtwpPsProvTraceImage+0x1c5
fffff880`06d445e0 fffff800`02ecddc5 : fffffa80`055edc70 fffffa80`06b49000 fffff8a0`00002000 fffff880`06d44798 : nt! ?? ::FNODOBFM::`string'+0x29333
fffff880`06d44700 fffff800`02f2f43e : fffffa80`06b23370 00000000`00000000 fffffa80`06b43660 00000000`00000001 : nt! ?? ::NNGAKEGL::`string'+0x210c6
fffff880`06d448a0 fffff800`02f57cd4 : 000007ff`fffd9000 fffff880`06d44c20 00000000`00000000 fffffa80`0613b8a0 : nt!PspExitProcess+0x4e
fffff880`06d44900 fffff800`02f30635 : 00000000`00000001 fffff800`02f71101 000007ff`fffd9000 00000000`00000000 : nt!PspExitThread+0x834
fffff880`06d449c0 fffff800`02c4f1db : fffffa80`0616d001 fffffa80`06458b10 00000000`00000000 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`06d449f0 fffff800`02c4f620 : 00000000`0036df90 fffff880`06d44a70 fffff800`02f3074c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`06d44a70 fffff800`02c71a37 : 00000000`00000378 00000000`022be7f0 00000000`00000000 0000007f`ffffffff : nt!KiInitiateUserApc+0x70
fffff880`06d44bb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02c70920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260

BUCKET_ID:  X64_0xA_nt!KiPageFault+260

Followup: MachineOwner
---------

 

[Goose0211]

Thanks again for that, just for info I had MSE running on it and removed as part of a troubleshooting process - only put Kaspersky on after the first few BSOD's to try a different AV to see if it was virus related and it picked anything else up!

Really appreciate the help...... when you say memory corruption, do you mean physical chip problems or virtual memory corruption?

Thanks again, I'll await your next update.

 

[CarlTR6]

Memory corruption means the system memory is corrupted. This can be caused by bad RAM, software or hardware conflicts, and device driver conflicts. My method of troubleshooting is to eliminate all known possible conflicts before testing the RAM. MSE will not cause a BSOD unless something else is interfering with it and this is rare.

 

[Goose0211]

Have managed to locate most of the updates - am struggling with a couple though - mainly because Im not sure what they ere for - or do!!

Acceler.sys - links and google search take me to HP website and a Pro Liant server download?!? - I have a Dell studio 1747 laptop

CtClsFlt.sys - is this the Webcam? not sure what a Class upper filter driver is

You also mention eliminating the drivers, how would I do this if I dont know what they represent in device manager? Is there a better way to remove these drivers - if I dont need them - not sure??

Thanks again

 

[Goose0211]

I 'think' i have updated the relevant updates, though not the 2 i was struggling with, however removing Kaspersky is proving to be a problem, the removal tool finds nothing - though its definitely there, and when I remove or try to from add/remove it just blue screens, ive attached the recent dumps if they help.

This is getting v frustrating now - as you may imagine, as can't get the machine up for long enough to do anything, and when I do it just blue screens.

Thanks

 

[CarlTR6]

Download Revo Uninstaller (free) and use it to uninstall Kaspersky. Use it in the Safe Mode if you need to. Also, download and install Malwarebytes and run a scan. Let's make sure you don't have a nasty lurking about.

Acceler.sys belongs to a utility. I believe the driver has an update. You can disable a driver by renaming it. [FONT=&quot]Create a restore point; using Windows Explorer, navigate to C:\Windows\System32\Drivers, locate the driver files, and rename them from .sys to .old or.bak. Reboot and the drivers will not load. This will break whatever software or hardware these drivers are associated with. Sometimes drivers are not located in the System32 folder; the are located in a sub folder in the Programs folder. If you can't find a driver in System32, do a search of C: drive for that driver.

To the best of my knowledge, [/FONT]CtClsFlt.sys is a Creative camera driver. It seems to me that I remember seeing an updated version of this driver. You can always rename it to see if doing so helps your system. It is a Vista driver and it make work with Win 7.

Have you checked for updated drivers for all your devices at the Dell support site? BTW, looking at the drivers unloaded during the crash shows o2mdgx64.sys. This driver is up to date; but it may be the driver which requires fixing. I believe this driver is a card reader controller driver. An unloaded driver means the driver was involved in the crash, but not necessarily the cause of the crash.

Your latest three dumps show the Kaspersky drivers still loaded. Work on getting Kaspersky off or your system. YOu may have to reinstall it and then run the removal tool or use Revo Uninstaller. We may be able to tell more once Kaspersky is gone.

Error code A (2X), IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Error code 1E, KMODE_EXCEPTION_NOT_HANDLED. Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS.

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.20738.amd64fre.win7_ldr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03255000 PsLoadedModuleList = 0xfffff800`03489eb0
Debug session time: Mon Dec  6 15:43:28.354 2010 (GMT-5)
System Uptime: 0 days 0:00:49.930
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 0, fffff800032de803}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800032de803, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034f40e0
 0000000000000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopCompleteRequest+ae3
fffff800`032de803 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  AtBroker.exe

IRP_ADDRESS:  ffffffffffffff89

TRAP_FRAME:  fffff88006910a70 -- (.trap 0xfffff88006910a70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88006911428 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800032de803 rsp=fffff88006910c00 rbp=fffff88006910d50
 r8=fffffa80067e3910  r9=fffff88006910d00 r10=0000000000000002
r11=fffffa8005bdaea0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac po cy
nt!IopCompleteRequest+0xae3:
fffff800`032de803 488b09          mov     rcx,qword ptr [rcx] ds:5060:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800032baae9 to fffff800032bb580

STACK_TEXT:  
fffff880`06910928 fffff800`032baae9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`06910930 fffff800`032b9760 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`064ce440 : nt!KiBugCheckDispatch+0x69
fffff880`06910a70 fffff800`032de803 : fffffa80`06555060 00000000`00000000 fffff880`06910e40 fffff800`035859c2 : nt!KiPageFault+0x260
fffff880`06910c00 fffff800`0329658f : 00000000`00000001 00000000`00000000 fffff880`06910e00 fffff800`00000000 : nt!IopCompleteRequest+0xae3
fffff880`06910cd0 fffff800`03296957 : 00000000`0000012a 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`06910d50 fffff800`032c94cc : fffff800`03436e80 fffff800`00000001 00000000`00000000 00000000`00000000 : nt!KiApcInterrupt+0xd7
fffff880`06910ee0 fffff800`032d3ef1 : 00000000`00000000 00000000`00000002 00000000`00000001 fffff800`034f6840 : nt!KeFlushMultipleRangeTb+0x1cc
fffff880`06910fb0 fffff800`032ec773 : 00000000`00000002 fffff880`06911100 fffff8a0`03cae000 ffffffff`ffffffff : nt!MiFlushTbAsNeeded+0x1d1
fffff880`069110c0 fffff800`033ee445 : 00000000`00002000 fffffa80`03c62000 00000000`00000001 fffff6fc`5001e570 : nt!MiAllocatePagedPoolPages+0x1433
fffff880`069111f0 fffff800`032cdfc0 : 00000000`00002000 fffffa80`03c62000 00000000`00000001 fffff800`033ee34f : nt!MiAllocatePoolPages+0x35
fffff880`06911330 00000000`00000200 : 00000001`00000080 fffff880`06911428 fffff880`06911428 00000000`00000000 : nt!ExpAllocateBigPool+0xb0
fffff880`06911420 00000001`00000080 : fffff880`06911428 fffff880`06911428 00000000`00000000 00000000`00000000 : 0x200
fffff880`06911428 fffff880`06911428 : fffff880`06911428 00000000`00000000 00000000`00000000 fffff800`032a0000 : 0x1`00000080
fffff880`06911430 fffff880`06911428 : 00000000`00000000 00000000`00000000 fffff800`032a0000 00000000`0017c868 : 0xfffff880`06911428
fffff880`06911438 00000000`00000000 : 00000000`00000000 fffff800`032a0000 00000000`0017c868 fffffa80`049b3000 : 0xfffff880`06911428


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`032b9760 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c42e3

FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260

BUCKET_ID:  X64_0xA_nt!KiPageFault+260

Followup: MachineOwner
---------

System Uptime: 0 days 0:54:29.524
Loading Kernel Symbols
...............................................................
................................................................
................................
Loading User Symbols
Loading unloaded module list
.....................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80003246a71, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!KiApcInterrupt+1f1 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80003246a71, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KiApcInterrupt+1f1
fffff800`03246a71 48cf            iretq

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034a40e0
 ffffffffffffffff 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  regsvr32.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88007db14c8 -- (.exr 0xfffff88007db14c8)
ExceptionAddress: fffff80003246a71 (nt!KiApcInterrupt+0x00000000000001f1)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000008
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff88007db1570 -- (.trap 0xfffff88007db1570)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000000000e rbx=0000000000000000 rcx=0000000000000188
rdx=000000000000018f rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003246a71 rsp=fffff88007db1708 rbp=fffffa8004cd3618
 r8=00000000000000ba  r9=0000000000000090 r10=0000000000000090
r11=0000000000000200 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di ng nz na pe nc
nt!KiApcInterrupt+0x1f1:
fffff800`03246a71 48cf            iretq
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800032ac789 to fffff8000326b580

STACK_TEXT:  
fffff880`07db0cf8 fffff800`032ac789 : 00000000`0000001e ffffffff`c0000005 fffff800`03246a71 00000000`00000000 : nt!KeBugCheckEx
fffff880`07db0d00 fffff800`0326abc2 : fffff880`07db14c8 00000000`00000190 fffff880`07db1570 00000000`000000b2 : nt!KiDispatchException+0x1b9
fffff880`07db1390 fffff800`032694ca : 00000000`00000000 fffffa80`04cd3650 fffffa80`04cd4970 00000000`000000b2 : nt!KiExceptionDispatch+0xc2
fffff880`07db1570 fffff800`03246a71 : fffffa80`04ccc186 00000000`00000000 00000000`00000200 00000001`07db1730 : nt!KiGeneralProtectionFault+0x10a
fffff880`07db1708 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiApcInterrupt+0x1f1


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiApcInterrupt+1f1
fffff800`03246a71 48cf            iretq

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!KiApcInterrupt+1f1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c42e3

FAILURE_BUCKET_ID:  X64_0x1E_nt!KiApcInterrupt+1f1

BUCKET_ID:  X64_0x1E_nt!KiApcInterrupt+1f1

Followup: MachineOwner
---------

5: kd> lmtsmn
start             end                 module name
fffff880`05752000 fffff880`05790000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`0480d000 fffff880`04819000   Acceler  Acceler.sys  Fri Jun 26 16:56:34 2009 (4A453602)
fffff880`00f4b000 fffff880`00fa2000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`046cc000 fffff880`04756000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0483f000 fffff880`04855000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00ff5000 fffff880`01000000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04cbe000 fffff880`04ce0000   AnyDVD   AnyDVD.sys   Sat Dec 19 13:22:08 2009 (4B2D19D0)
fffff880`00e59000 fffff880`00e62000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e62000 fffff880`00e8c000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04ceb000 fffff880`05395000   atikmdag atikmdag.sys Tue Apr 06 21:47:17 2010 (4BBBE425)
fffff880`048d3000 fffff880`04909000   atikmpag atikmpag.sys Tue Apr 06 21:23:30 2010 (4BBBDE92)
fffff880`00e1e000 fffff880`00e2a000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`07000000 fffff880`07009000   BCM42RLY BCM42RLY.sys Tue Jul 07 20:34:55 2009 (4A53E9AF)
fffff880`0a7b9000 fffff880`0a7c2000   bcmvwl64 bcmvwl64.sys Tue Dec 08 11:07:09 2009 (4B1E79AD)
fffff880`0a4b5000 fffff880`0a7a3000   bcmwl664 bcmwl664.sys Tue Dec 08 11:10:06 2009 (4B1E7A5E)
fffff880`030b0000 fffff880`030b7000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`046b1000 fffff880`046c2000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04bac000 fffff880`04bca000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`0106a000 fffff880`01094000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cba000 fffff880`00d7a000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0103a000 fffff880`0106a000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c5c000 fffff880`00cba000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05457000 fffff880`0545b500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`0116e000 fffff880`011e1000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00e15000 fffff880`00e1e000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`0482f000 fffff880`0483f000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06b33000 fffff880`06b41000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`06bc4000 fffff880`06bee2a0   CtClsFlt CtClsFlt.sys Mon Jun 15 01:06:41 2009 (4A35D6E1)
fffff880`031ad000 fffff880`031cb000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`046a2000 fffff880`046b1000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01dc3000 fffff880`01dd9000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05dac000 fffff880`05dce000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06b4f000 fffff880`06b5b000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06b66000 fffff880`06b79000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06b5b000 fffff880`06b66000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`06b27000 fffff880`06b33000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04909000 fffff880`049fd000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05395000 fffff880`053db000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04697000 fffff880`046a2000   ElbyCDIO ElbyCDIO.sys Thu Dec 17 17:25:16 2009 (4B2AAFCC)
fffff880`04a9e000 fffff880`04ad4000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`010f0000 fffff880`01104000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010a4000 fffff880`010f0000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`04c67000 fffff880`04c75000   ftusbrdload ftusbrdload.sys Tue Apr 13 10:40:06 2010 (4BC48246)
fffff880`01d89000 fffff880`01dc3000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`03131000 fffff880`0317b000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04800000 fffff880`0480d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`037d8000 fffff800`03821000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`053db000 fffff880`053ff000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05d13000 fffff880`05d6f000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`04bf3000 fffff880`04bfb080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04ae4000 fffff880`04bac000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01d80000 fffff880`01d89000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0545c000 fffff880`0547a000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04819000 fffff880`0482f000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0547a000 fffff880`05489000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bc3000 fffff800`00bc6000   kdcom    kdcom.dll    Tue Nov 30 09:40:39 2010 (4CF50CE7)
fffff880`01621000 fffff880`01d80000   kl1      kl1.sys      Wed Jun 09 09:34:19 2010 (4C0F985B)
fffff880`031a6000 fffff880`031ad000   kl2      kl2.sys      Wed Jun 09 09:24:47 2010 (4C0F961F)
fffff880`03011000 fffff880`030a7000   klif     klif.sys     Fri Oct 01 03:28:56 2010 (4CA58DB8)
fffff880`0548b000 fffff880`05495000   klmouflt klmouflt.sys Mon Nov 02 11:26:06 2009 (4AEF081E)
fffff880`05c4f000 fffff880`05c92000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015c4000 fffff880`015ef000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05dce000 fffff880`05dd3200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06a44000 fffff880`06a59000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06a00000 fffff880`06a23000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c04000 fffff880`00c48000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`06b41000 fffff880`06b4f000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`057ef000 fffff880`057fe000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00e3f000 fffff880`00e59000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04bca000 fffff880`04be2000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04a00000 fffff880`04a2d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04a2d000 fffff880`04a7b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`04a7b000 fffff880`04a9e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00e8c000 fffff880`00e97000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03115000 fffff880`03120000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fab000 fffff880`00fb5000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01110000 fffff880`0116e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`0468c000 fffff880`04697000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0145c000 fffff880`0146e000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01472000 fffff880`01564000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04879000 fffff880`04885000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05dd4000 fffff880`05de7000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04885000 fffff880`048b4000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05cfe000 fffff880`05d13000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`047e9000 fffff880`047f8000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04756000 fffff880`0479b000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01564000 fffff880`015c4000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`03120000 fffff880`03131000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04680000 fffff880`0468c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03205000 fffff800`037d8000   nt       ntkrnlmp.exe Sat Jun 19 00:09:07 2010 (4C1C42E3)
fffff880`01255000 fffff880`013f8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`030a7000 fffff880`030b0000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`06a59000 fffff880`06aac000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`0a482000 fffff880`0a492800   o2mdgx64 o2mdgx64.sys Thu Nov 12 03:07:00 2009 (4AFBC224)
fffff880`047a4000 fffff880`047ca000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e00000 fffff880`00e15000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fb5000 fffff880`00fe8000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00dd6000 fffff880`00de6000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07010000 fffff880`070b6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05d6f000 fffff880`05dac000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c48000 fffff880`00c5c000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01104000 fffff880`0110fe00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`04855000 fffff880`04879000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`048b4000 fffff880`048cf000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`05c03000 fffff880`05c24000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`05c24000 fffff880`05c3e000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0462f000 fffff880`04680000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`030fa000 fffff880`03103000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03103000 fffff880`0310c000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0310c000 fffff880`03115000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`05de7000 fffff880`05dff000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05400000 fffff880`05457000   Rt64win7 Rt64win7.sys Thu Mar 04 08:42:52 2010 (4B8FB8DC)
fffff880`057c0000 fffff880`057ef000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`05790000 fffff880`057b0000   sdbus    sdbus.sys    Fri Oct 09 22:41:20 2009 (4ACFF450)
fffff880`070b6000 fffff880`070c1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01454000 fffff880`0145c000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07167000 fffff880`071fd000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07100000 fffff880`07167000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`070c1000 fffff880`070ee000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`0144c000 fffff880`01454000   stdflt   stdflt.sys   Tue Aug 11 13:47:05 2009 (4A81AE99)
fffff880`06aac000 fffff880`06b27000   stwrt64  stwrt64.sys  Wed Jul 15 14:54:48 2009 (4A5E25F8)
fffff880`05c4d000 fffff880`05c4e480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04c75000 fffff880`04cbe000   SynTP    SynTP.sys    Fri Jun 26 14:35:47 2009 (4A451503)
fffff880`04403000 fffff880`04600000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`070ee000 fffff880`07100000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`03199000 fffff880`031a6000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0317b000 fffff880`03199000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`0461b000 fffff880`0462f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005a0000 fffff960`005aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`031cb000 fffff880`031f1000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`05c92000 fffff880`05ca4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`06b79000 fffff880`06b96000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05489000 fffff880`0548af00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04c00000 fffff880`04c11000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05ca4000 fffff880`05cfe000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04c11000 fffff880`04c67000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`06b96000 fffff880`06bc3200   usbvideo usbvideo.sys Wed Mar 03 23:40:57 2010 (4B8F39D9)
fffff880`05c3e000 fffff880`05c4d000   VClone   VClone.sys   Sun Aug 09 17:25:45 2009 (4A7F3ED9)
fffff880`00fe8000 fffff880`00ff5000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`030b7000 fffff880`030c5000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`030c5000 fffff880`030ea000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e2a000 fffff880`00e3f000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d7a000 fffff880`00dd6000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01400000 fffff880`0144c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0a7a3000 fffff880`0a7b0000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`047ca000 fffff880`047e0000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`04600000 fffff880`0461b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`030ea000 fffff880`030fa000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e98000 fffff880`00f3c000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f3c000 fffff880`00f4b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0479b000 fffff880`047a4000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000f0000 fffff960`003ff000   win32k   win32k.sys   Tue Aug 31 22:58:05 2010 (4C7DC13D)
fffff880`046c2000 fffff880`046cb000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fa2000 fffff880`00fab000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06a23000 fffff880`06a44000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`047e0000 fffff880`047e9000   klim6.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a400000 fffff880`0a471000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01dd9000 fffff880`01df2000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04ad4000 fffff880`04ae2000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06bef000 fffff880`06bfc000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a471000 fffff880`0a482000   o2mdgx64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04be2000 fffff880`04bf3000   o2mdgx64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a7b0000 fffff880`0a7b9000   bcmvwl64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a7d2000 fffff880`0a7df000   vwifibus.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a4e4000 fffff880`0a7d2000   bcmwl664.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a77e000 fffff880`0a78b000   vwifibus.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0a490000 fffff880`0a77e000   bcmwl664.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05745000 fffff880`05752000   vwifibus.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0549d000 fffff880`05745000   bcmwl664.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04be2000 fffff880`04bf3000   o2mdgx64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`057b0000 fffff880`057c0000   o2mdgx64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07cf7000 fffff880`07d68000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01dd9000 fffff880`01de7000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01de7000 fffff880`01df3000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01df3000 fffff880`01dfe000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01600000 fffff880`01613000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

A list of your loaded and unloaded drivers shows in the last dump file, error code 1E.

 

[Goose0211]

I thought we were progressing - I removed Kaspersky - I hope! also renamed the 2 drivers CtClsFlt.sys and o2mdgx64.sys and rebooted and got another blue screen on boot - the earlier of the 2 in the attachment.

I then got into safemode and disabled all non microsoft services and managed to get it to boot happily twice and was able to use it for an hour or so with no issues - and thought I'll start by rebooting once more and then gradually re-enable the various services to try and narrow things down - but another blue screen - the second in the zip file! before I could start more troubleshooting.

Have updated all I can see from Dell and have done a malware scan - all seems good.

Thanks for the help so far - Im sure we'll get there....!

 

[CarlTR6]

Your uptime before these crashes was short. The first crash occurred in one minute; the second occurred in 40 seconds. Sometimes this indicates a faulty power supply and can indicate bad RAM. Do you have another known good power supply you can test with?

Run Memtest from a cold boot after your computer has been off for a while following these instructions: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html. Let Memtest run for at least seven passes; this will take 6-8 hours. Post back with the results.

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c1f000 PsLoadedModuleList = 0xfffff800`02e5ce50
Debug session time: Tue Dec  7 12:43:56.682 2010 (GMT-5)
System Uptime: 0 days 0:01:13.259
Loading Kernel Symbols
...............................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {8, 2, 1, fffff80002caf44b}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002caf44b, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec70e0
 0000000000000008 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopCompleteRequest+c88
fffff800`02caf44b 48894108        mov     qword ptr [rcx+8],rax

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  AtBroker.exe

IRP_ADDRESS:  ffffffffffffff88

TRAP_FRAME:  fffff880042c9240 -- (.trap 0xfffff880042c9240)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000020 rbx=0000000000000000 rcx=fffff8a0042e003e
rdx=fffff8a00000f1c0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002f75901 rsp=fffff880042c93d0 rbp=fffff880042c9780
 r8=0000000000002000  r9=fffff880042c95d0 r10=0000000000000000
r11=00000000000001c8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe nc
nt!ObpQueryNameString+0x4ed:
fffff800`02f75901 668939          mov     word ptr [rcx],di ds:e990:fffff8a0`042e003e=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c8eca9 to fffff80002c8f740

STACK_TEXT:  
fffff880`042c8c88 fffff800`02c8eca9 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`042c8c90 fffff800`02c8d920 : fffffa80`033107d0 fffffa80`064b4010 fffff880`042c8e70 fffff800`0320e44e : nt!KiBugCheckDispatch+0x69
fffff880`042c8dd0 fffff800`02caf44b : 00000000`00000000 fffffa80`0646db30 00000000`00000000 fffffa80`04fb8f20 : nt!KiPageFault+0x260
fffff880`042c8f60 fffff800`02c6c0c7 : 00000000`00000000 fffff880`042c91d0 fffff880`042c9300 fffff880`00000000 : nt!IopCompleteRequest+0xc88
fffff880`042c9030 fffff800`02c42bb5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`042c90b0 fffff800`02caac44 : 00000000`00000000 fffff8a0`042e0000 00000000`00000002 00000000`00000000 : nt!KiCheckForKernelApcDelivery+0x25
fffff880`042c90e0 fffff800`02c8d82e : 00000000`00000001 fffffa80`04bb2320 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x1844
fffff880`042c9240 fffff800`02f75901 : fffff880`042c9780 fffff8a0`0000f1e0 00000000`00000001 fffffa80`064e3000 : nt!KiPageFault+0x16e
fffff880`042c93d0 fffff800`02f7656a : fffffa80`04bb2370 fffff8a0`042e0000 fffffa80`00002000 fffff880`042c95d0 : nt!ObpQueryNameString+0x4ed
fffff880`042c94d0 fffff800`02f75ecf : fffff880`00401802 fffffa80`051c2f20 fffff8a0`20206f49 00000000`06dbdb48 : nt!ObQueryNameString+0xe
fffff880`042c9510 fffff800`02f76612 : fffffa80`051c2f20 fffff960`00401802 00000000`00000000 fffffa80`064e3000 : nt!IopQueryNameInternal+0x9f
fffff880`042c95b0 fffff800`02f754c4 : 00000000`00000000 fffff800`00401802 00000000`00000000 fffffa80`064e3000 : nt!IopQueryName+0x26
fffff880`042c9600 fffff800`02eeada3 : fffffa80`051c2f20 fffffa80`064e3000 fffff8a0`00002000 fffff880`042c9798 : nt!ObpQueryNameString+0xb0
fffff880`042c9700 fffff800`02f4c43e : fffffa80`0646db30 00000000`00000000 fffffa80`065016e0 00000000`00000001 : nt! ?? ::NNGAKEGL::`string'+0x210a4
fffff880`042c98a0 fffff800`02f74cd4 : 000007ff`fffd8000 fffff880`042c9c20 00000000`00000000 fffffa80`05ca9e60 : nt!PspExitProcess+0x4e
fffff880`042c9900 fffff800`02f4d635 : 00000000`00000001 fffff800`02f8e101 000007ff`fffd8000 00000000`00000000 : nt!PspExitThread+0x834
fffff880`042c99c0 fffff800`02c6c1db : fffffa80`05fa7401 fffffa80`0645ab10 00000000`00000000 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`042c99f0 fffff800`02c6c620 : 00000000`0049e250 fffff880`042c9a70 fffff800`02f4d74c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`042c9a70 fffff800`02c8ea37 : 00000000`00000375 00000000`00000000 00000000`00000001 0000007f`ffffffff : nt!KiInitiateUserApc+0x70
fffff880`042c9bb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02c8d920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260

BUCKET_ID:  X64_0xA_nt!KiPageFault+260

Followup: MachineOwner
---------

System Uptime: 0 days 0:00:39.615
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {8, 2, 1, fffff80002c9544b}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002c9544b, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: Address regions for 'nwifi' and 'usbvideo.sys' overlap

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ead0e0
 0000000000000008 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopCompleteRequest+c88
fffff800`02c9544b 48894108        mov     qword ptr [rcx+8],rax

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  AtBroker.exe

IRP_ADDRESS:  ffffffffffffff88

TRAP_FRAME:  fffff88002998240 -- (.trap 0xfffff88002998240)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000020 rbx=0000000000000000 rcx=fffff8a002d2703e
rdx=fffff8a00000f1c0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002f5b901 rsp=fffff880029983d0 rbp=fffff88002998780
 r8=0000000000002000  r9=fffff880029985d0 r10=0000000000000000
r11=00000000000001c8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe nc
nt!ObpQueryNameString+0x4ed:
fffff800`02f5b901 668939          mov     word ptr [rcx],di ds:9010:fffff8a0`02d2703e=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c74ca9 to fffff80002c75740

STACK_TEXT:  
fffff880`02997c88 fffff800`02c74ca9 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`02997c90 fffff800`02c73920 : fffffa80`03334110 fffffa80`06bffee0 fffff880`02997e70 fffff800`031f444e : nt!KiBugCheckDispatch+0x69
fffff880`02997dd0 fffff800`02c9544b : 00000000`00000000 fffffa80`06b7ab30 fffff8a0`027a0a50 00000000`00000000 : nt!KiPageFault+0x260
fffff880`02997f60 fffff800`02c520c7 : 00000000`00000000 fffff880`029981d0 fffff880`02998300 fffff880`00000000 : nt!IopCompleteRequest+0xc88
fffff880`02998030 fffff800`02c28bb5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`029980b0 fffff800`02c90c44 : 00000000`00000000 fffff8a0`02d27000 00000000`00000002 00000000`00000000 : nt!KiCheckForKernelApcDelivery+0x25
fffff880`029980e0 fffff800`02c7382e : 00000000`00000001 fffffa80`04c2f2c0 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x1844
fffff880`02998240 fffff800`02f5b901 : fffff880`02998780 fffff8a0`0000f1e0 00000000`00000001 fffffa80`06bf2000 : nt!KiPageFault+0x16e
fffff880`029983d0 fffff800`02f5c56a : fffffa80`04c2f310 fffff8a0`02d27000 fffffa80`00002000 fffff880`029985d0 : nt!ObpQueryNameString+0x4ed
fffff880`029984d0 fffff800`02f5becf : fffff880`00401802 fffffa80`056a5070 fffff8a0`20206f49 00000000`03bc1d2b : nt!ObQueryNameString+0xe
fffff880`02998510 fffff800`02f5c612 : fffffa80`056a5070 fffff960`00401802 00000000`00000000 fffffa80`06bf2000 : nt!IopQueryNameInternal+0x9f
fffff880`029985b0 fffff800`02f5b4c4 : 00000000`00000000 fffff800`00401802 00000000`00000000 fffffa80`06bf2000 : nt!IopQueryName+0x26
fffff880`02998600 fffff800`02ed0da3 : fffffa80`056a5070 fffffa80`06bf2000 fffff8a0`00002000 fffff880`02998798 : nt!ObpQueryNameString+0xb0
fffff880`02998700 fffff800`02f3243e : fffffa80`06b7ab30 00000000`00000000 fffffa80`06bd9060 00000000`00000001 : nt! ?? ::NNGAKEGL::`string'+0x210a4
fffff880`029988a0 fffff800`02f5acd4 : 000007ff`fffda000 fffff880`02998c20 00000000`00000000 fffffa80`06182e60 : nt!PspExitProcess+0x4e
fffff880`02998900 fffff800`02f33635 : 00000000`00000001 fffff800`02f74101 000007ff`fffda000 00000000`00000000 : nt!PspExitThread+0x834
fffff880`029989c0 fffff800`02c521db : fffffa80`06bf9601 fffffa80`06bf9b10 00000000`00000000 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`029989f0 fffff800`02c52620 : 00000000`0027def0 fffff880`02998a70 fffff800`02f3374c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`02998a70 fffff800`02c74a37 : 00000000`00000381 00000000`00000000 00000000`00000001 0000007f`ffffffff : nt!KiInitiateUserApc+0x70
fffff880`02998bb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02c73920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260

BUCKET_ID:  X64_0xA_nt!KiPageFault+260

Followup: MachineOwner
---------

6: kd> lmtsmn
start             end                 module name
fffff880`08175000 fffff880`081b3000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f88000 fffff880`00fdf000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03e81000 fffff880`03f0b000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0404f000 fffff880`04065000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c6c000 fffff880`00c77000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07e9a000 fffff880`07ebc000   AnyDVD   AnyDVD.sys   Sat Dec 19 13:22:08 2009 (4B2D19D0)
fffff880`00e99000 fffff880`00ea2000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ea2000 fffff880`00ecc000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04642000 fffff880`04cec000   atikmdag atikmdag.sys Tue Apr 06 21:47:17 2010 (4BBBE425)
fffff880`040fa000 fffff880`04130000   atikmpag atikmpag.sys Tue Apr 06 21:23:30 2010 (4BBBDE92)
fffff880`00e5e000 fffff880`00e6a000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`07ec0000 fffff880`08168000   bcmwl664 bcmwl664.sys Tue Jul 07 20:45:04 2009 (4A53EC10)
fffff880`016ca000 fffff880`016d1000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`017c0000 fffff880`017d1000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`036d4000 fffff880`036f2000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007b0000 fffff960`007d7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`01697000 fffff880`016c1000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d2d000 fffff880`00ded000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0162f000 fffff880`0165f000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ccf000 fffff880`00d2d000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`07e57000 fffff880`07e5b500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`0116b000 fffff880`011de000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00e55000 fffff880`00e5e000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04dee000 fffff880`04dfe000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05b3f000 fffff880`05b4d000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03fe2000 fffff880`04000000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03fd3000 fffff880`03fe2000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01200000 fffff880`01216000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`043aa000 fffff880`043cc000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05b4d000 fffff880`05b59000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05b64000 fffff880`05b77000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05b59000 fffff880`05b64000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`05b25000 fffff880`05b31000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04cec000 fffff880`04de0000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04130000 fffff880`04176000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03e68000 fffff880`03e73000   ElbyCDIO ElbyCDIO.sys Thu Dec 17 17:25:16 2009 (4B2AAFCC)
fffff880`010ed000 fffff880`01101000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010a1000 fffff880`010ed000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013e5000 fffff880`013ef000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`04de0000 fffff880`04dee000   ftusbrdload ftusbrdload.sys Tue Apr 13 10:40:06 2010 (4BC48246)
fffff880`0104c000 fffff880`01086000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0174b000 fffff880`01795000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`081d3000 fffff880`081e0000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`031e1000 fffff800`0322a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04600000 fffff880`04624000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04311000 fffff880`0436d000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`0360c000 fffff880`036d4000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`014a5000 fffff880`014ae000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`07e5c000 fffff880`07e7a000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`081e0000 fffff880`081f6000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`07e7a000 fffff880`07e89000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bae000 fffff800`00bb1000   kdcom    kdcom.dll    Tue Nov 30 09:40:39 2010 (4CF50CE7)
fffff880`0424d000 fffff880`04290000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013ba000 fffff880`013d4000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`043cc000 fffff880`043d1200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05a44000 fffff880`05a59000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05a00000 fffff880`05a23000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c77000 fffff880`00cbb000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05b31000 fffff880`05b3f000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`07e8b000 fffff880`07e9a000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00e7f000 fffff880`00e99000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`036f2000 fffff880`0370a000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0370a000 fffff880`03737000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`03737000 fffff880`03785000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`03785000 fffff880`037a8000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00ff2000 fffff880`00ffd000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0172f000 fffff880`0173a000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fe8000 fffff880`00ff2000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0110d000 fffff880`0116b000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03e5d000 fffff880`03e68000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01493000 fffff880`014a5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014c3000 fffff880`015b5000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04635000 fffff880`04641000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05be7000 fffff880`05bfa000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04089000 fffff880`040b8000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`042fc000 fffff880`04311000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03f95000 fffff880`03fa4000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03f0b000 fffff880`03f50000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0173a000 fffff880`0174b000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e51000 fffff880`03e5d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c05000 fffff800`031e1000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01217000 fffff880`013ba000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`016c1000 fffff880`016ca000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`05b94000 fffff880`05be7000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03f59000 fffff880`03f7f000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013d4000 fffff880`013e5000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`04415000 fffff880`044bb000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0436d000 fffff880`043aa000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cbb000 fffff880`00ccf000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01101000 fffff880`0110ce00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`04065000 fffff880`04089000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`040b8000 fffff880`040d3000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`040d3000 fffff880`040f4000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`041cc000 fffff880`041e6000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e00000 fffff880`03e51000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`01714000 fffff880`0171d000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0171d000 fffff880`01726000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01726000 fffff880`0172f000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`015b5000 fffff880`015ef000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`05a59000 fffff880`05a71000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07e00000 fffff880`07e57000   Rt64win7 Rt64win7.sys Thu Mar 04 08:42:52 2010 (4B8FB8DC)
fffff880`01600000 fffff880`0162f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`081b3000 fffff880`081d3000   sdbus    sdbus.sys    Fri Oct 09 22:41:20 2009 (4ACFF450)
fffff880`044bb000 fffff880`044c6000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0148b000 fffff880`01493000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`05e1b000 fffff880`05eb1000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`04505000 fffff880`0456c000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`044c6000 fffff880`044f3000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`05aaa000 fffff880`05b25000   stwrt64  stwrt64.sys  Wed Jul 15 14:54:48 2009 (4A5E25F8)
fffff880`081f6000 fffff880`081f7480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04000000 fffff880`0404f000   SynTP    SynTP.sys    Thu Oct 29 20:19:12 2009 (4AEA3100)
fffff880`02a02000 fffff880`02bff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`044f3000 fffff880`04505000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`017b3000 fffff880`017c0000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01795000 fffff880`017b3000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03fbf000 fffff880`03fd3000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00570000 fffff960`0057a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`017d1000 fffff880`017f7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04290000 fffff880`042a2000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05b77000 fffff880`05b94000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`07e89000 fffff880`07e8af00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04624000 fffff880`04635000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`042a2000 fffff880`042fc000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04176000 fffff880`041cc000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`041e6000 fffff880`041f5000   VClone   VClone.sys   Sun Aug 09 17:25:45 2009 (4A7F3ED9)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`016d1000 fffff880`016df000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`016df000 fffff880`01704000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e6a000 fffff880`00e7f000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`08168000 fffff880`08175000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03f7f000 fffff880`03f95000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03fa4000 fffff880`03fbf000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01704000 fffff880`01714000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ed5000 fffff880`00f79000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f79000 fffff880`00f88000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03f50000 fffff880`03f59000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000e0000 fffff960`003ef000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`03e73000 fffff880`03e7c000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fdf000 fffff880`00fe8000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05a23000 fffff880`05a44000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`05bc2000 fffff880`05bf0000   usbvideo.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05b94000 fffff880`05bc2000   usbvideo.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0165f000 fffff880`0166d000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0166d000 fffff880`01679000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01679000 fffff880`01684000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01684000 fffff880`01697000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

 

[Goose0211]

Interesting point you mention - I reckon about 90% of the crashes are on/during boot if that possibly means anything?

I will do the memtest tonight so will post back with those results tomorrow

I am using a laptop though, so when you mention power supply are you thinking AC charger or battery or......?

 

[CarlTR6]

Is there any difference when you are on the battery as opposed to the charger?

 

[Goose0211]

Have tried the laptop with and without battery on charger and not - all options have produced a Blue screen at some point!

Will post back later with the memtest results

 

[CarlTR6]

Do the crashes happen right after booting with both the battery and the charger? Or does it run longer without crashing one way or the other?

 

[Goose0211]

On average the crashes happen straight after entering my password into the login screen - the welcome screen will think for 3-4 seconds, then either log in or Blue screen, very rarely does it get it and then blue screen, though it has done once or twice.

l reckon battery and charger pretty much the same but not tested fully on that one but from the last couple of days both with and without charger I havent noticed a difference.

The memtest results were fine - 9 passes - no errors.

 

[CarlTR6]

Looks like your RAM is probably OK. Have you tried booting in the Safe Mode? Do you BSOD's in the Safe Mode?

 

[Goose0211]

Yes, safe mode and with networking it does happen, though less so than normal mode. I have tried booting into diagnostic mode which so far has been fine which leads me to think it's not hardware related.

I presume it's a case of enabling services one by one from this mode and rebooting to find the problem service or driver?

If there's a quick/better way of doing it please let me know!!

 

[CarlTR6]

Unfortunately there is no quick way. I had to do this with my system when I first installed Win 7. My problem turned out to be a faulty graphics card and the fault did not show up in tests of the graphics card. You can try a clean boot which may be a little faster: How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

 

[Goose0211]

I have updated every driver i can see and have also just tried the clean boot method, so all I had was system services starting up - which resulted in another Blue screen... dump for this one attached.

Hopefully there is something in this that helps!

Thanks