Confused by BSOD's

[jlawes20389]

Hi guys, first post and looking for a bit of help

Specs:
Asrock 4CoreDual-Sata2
Intel E2140
2GB Corsair XMS DDR2 (2 x 1GB)
Sapphire Radeon HD4650
Maxtor 6L200M0

I have had the above system for some time now but the graphics card is only a few months old. Previously the system has been running perfectly fine under Windows XP and Windows Vista. I have recently put Windows 7 Home Premium 32bit on and am encountering some problems that I am stumped on.

I am getting graphical corruption in games and also in Media Center and Media Player. I am also getting the occasional BSOD

Using MCE and WMP the graphical corruption is mainly green artifacts flashing every now and then. My other half likes to play Sims 3 and she has been getting problems with the textures being stretched across the screen and then it will eventually lock up and BSOD.

One BSOD pointed to atikmdag.sys so I have used driver sweeper to clean the drivers and reinstalled with the latest and also older ones with no luck. I have also checked the temperature of the card and its not exceeding 65C in games.

When added the graphics card and upgraded to Win 7, I ran memtest overnight and had no errors. Furmark shows no problems with the graphics when running the stress test.

WhoCrashed gives me the following:

On Mon 16/08/2010 22:43:13 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x1000008E (0xC0000005, 0x82C8AB19, 0x8B630C38, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
Dump file: C:\Windows\Minidump\081610-25656-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 16/08/2010 22:13:19 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0xA (0x463C9B61, 0x2, 0x1, 0x82C635D0)
Error: IRQL_NOT_LESS_OR_EQUAL
Dump file: C:\Windows\Minidump\081610-27296-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 16/08/2010 21:25:33 your computer crashed
This was likely caused by the following module: dxgmms1.sys
Bugcheck code: 0x1000007E (0xC0000005, 0x90AB5857, 0x80ED32E8, 0x80ED2EC0)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
Dump file: C:\Windows\Minidump\081610-28937-01.dmp
file path: C:\Windows\system32\drivers\dxgmms1.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: DirectX Graphics MMS
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 16/08/2010 20:14:52 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0xA (0x7CEBF05F, 0x2, 0x1, 0x82C7F5D0)
Error: IRQL_NOT_LESS_OR_EQUAL
Dump file: C:\Windows\Minidump\081610-27171-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

On Mon 16/08/2010 18:54:26 your computer crashed
This was likely caused by the following module: atikmdag.sys
Bugcheck code: 0x1000008E (0xC0000005, 0x9066941E, 0x9E2DD60C, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
Dump file: C:\Windows\Minidump\081610-27250-01.dmp
file path: C:\Windows\system32\drivers\atikmdag.sys
product: ATI Radeon Family
company: ATI Technologies Inc.
description: ATI Radeon Kernel Mode Driver

On Mon 16/08/2010 17:52:47 your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0xA (0x8CCC, 0x2, 0x1, 0x82CD5A12)
Error: IRQL_NOT_LESS_OR_EQUAL
Dump file: C:\Windows\Minidump\081610-26437-01.dmp
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

Dump files are also attached.

Sorry for long first post but thanks in advance for any help!

 

[richc46]

STOP 0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint in startup without having a debugger attached, Hardware incompatibility, Faulty system service, 3rd party remote control, Memory

STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

STOP 0x0000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control,

icrosoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Windows7_BSOD[1].zip\Windows7_BSOD_jcgriff2\081610-27296-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82c38000 PsLoadedModuleList = 0x82d77570
Debug session time: Mon Aug 16 18:11:45.093 2010 (GMT-4)
System Uptime: 0 days 0:06:13.062
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {463c9b61, 2, 1, 82c635d0}
Probably caused by : memory_corruption ( nt!MiIdentifyPfn+1e4 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 463c9b61, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c635d0, address which referenced memory
Debugging Details:
------------------
 
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82d97700
Unable to read MiSystemVaType memory at 82d770c0
 463c9b61 
CURRENT_IRQL:  2
FAULTING_IP: 
nt!MiIdentifyPfn+1e4
82c635d0 f00fba2a1f      lock bts dword ptr [edx],1Fh
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
TRAP_FRAME:  9953f6e4 -- (.trap 0xffffffff9953f6e4)
ErrCode = 00000002
eax=82d59d20 ebx=84ef8b20 ecx=463c9b61 edx=463c9b61 esi=463c9b39 edi=865919b0
eip=82c635d0 esp=9953f758 ebp=9953f794 iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!MiIdentifyPfn+0x1e4:
82c635d0 f00fba2a1f      lock bts dword ptr [edx],1Fh ds:0023:463c9b61=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from 82c635d0 to 82c70b7b
STACK_TEXT:  
9953f6e4 82c635d0 badb0d00 463c9b61 00000801 nt!KiTrap0E+0x2cf
9953f794 82c616f1 00000000 84ef8000 9953f83c nt!MiIdentifyPfn+0x1e4
9953f7c0 82e1bf0c 84ef8060 83e041e8 9953f850 nt!MmQueryPfnList+0xaf
9953f808 82e4d0f4 00000001 83e04168 00000000 nt!PfpPfnPrioRequest+0xde
9953f888 82e3262f 00000000 00000001 9953fcd0 nt!PfQuerySuperfetchInformation+0xea
9953fd00 82e3017b 0000004f 00000000 00000000 nt!ExpQuerySystemInformation+0x24a4
9953fd1c 82c6d79a 0000004f 01abef50 00000014 nt!NtQuerySystemInformation+0x76
9953fd1c 773864f4 0000004f 01abef50 00000014 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
01abce10 00000000 00000000 00000000 00000000 0x773864f4
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!MiIdentifyPfn+1e4
82c635d0 f00fba2a1f      lock bts dword ptr [edx],1Fh
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  nt!MiIdentifyPfn+1e4
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c3f9b
IMAGE_NAME:  memory_corruption
FAILURE_BUCKET_ID:  0xA_nt!MiIdentifyPfn+1e4
BUCKET_ID:  0xA_nt!MiIdentifyPfn+1e4
Followup: MachineOwner
---------

.


Most of the dumps indicate memory, lets start there. In addition do the following as shown below
http://memtest.org/

Uninstall Daemon, alcohol 120% or other virtualiztion software. Remove the driver sptd with the removal tool http://www.duplexsecure.com/en/downloads
Test memory with memtest 86. Run for 6 passes and then check each slot with a good stick.
Uninstall anti virus and replace with Microsoft Security Essentials.
Update these drivers
Atikmdag.sys
ATI Radeon Kernel Mode Driver - ATI Radeon Family - ATI Technologies Inc.
Productname: ATI Radeon Family
Description: ATI Radeon Kernel Mode Driver
Company: ATI Technologies Inc.

dxgmms1.sys

 

[jlawes20389]

Thanks for your reply. Downloading Memtest now and will run for 6 passes as advised then will report back

 

[jlawes20389]

ok, I downloaded and ran Memtest 86 overnight. When i woke up it was still running and had so far gone through 9 passes with no errors. Daemon uninstalled and used the SPTD driver with the removal tool.

At the moment I have anti virus to remove but will put on the Microsoft one.

I am running the latest ATI Drivers already so Atikmdag.sys should be the latest one.

I am still getting graphical corruption in MCE though but haven't got time to test a game yet as I am now off to work.

What would be next?

 

[Jonathan_King]

Hope the BSODs stop.

If they don't, upload the new dumps: http://www.sevenforums.com/tutorials/83172-dump-files-upload-seven-forums.html

 

[jlawes20389]

Another day another BSOD. Have attached the latest dump file for this one.

I have now swapped out both sticks of ram for some known good ram. Will see how it goes now

 

[richc46]

No dump files, here.

 

[CarlTR6]

Where is the latest dump?

 

[richc46]

LOL just asked that, too.
Finish with the tests, then if the problem continues the dump file will be more valuable.

 

[CarlTR6]

Yes, we were posting at the same time.

 

[jlawes20389]

oops, thought i posted it but hadn't!

 

[richc46]

Others will probably answer, but I prefer to wait until all the suggestions were taken and if it continues, look at the new dump. Or its just extra work.

 

[jlawes20389]

Right... Have had another BSOD now. This time with the different RAM. New dump attached

So far i have ran Memtest which ran for 9 passes with no errors, uninstalled Daemon and removed the STDP Driver with the removal tool, checked the ATI drivers are up to date and now swapped the RAM

 

[CarlTR6]

This is a hardware/hardware related error. Error code 19 - Bad pool header usually caused by a device driver. The dump blames DirectX. That could indicate a graphics card problem. The driver, RTCore32.sys, is also indicated.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\Downloads\081710-21093-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*[URL]http://msdl.microsoft.com/download/symbols[/URL]
Executable search path is: 
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82c37000 PsLoadedModuleList = 0x82d76570
Debug session time: Tue Aug 17 13:12:41.527 2010 (GMT-4)
System Uptime: 0 days 0:12:34.949
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
.......
0: kd> !Analyze
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, 85b19928, 85b1a330, 9413c55}

Unable to load image \SystemRoot\System32\drivers\dxgkrnl.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dxgkrnl.sys
*** ERROR: Module load completed but symbols could not be loaded for dxgkrnl.sys
Probably caused by : dxgmms1.sys ( dxgmms1!operator delete+16 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 85b19928, The pool entry we were looking for within the page.
Arg3: 85b1a330, The next pool entry.
Arg4: 09413c55, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 82d96700
Unable to read MiSystemVaType memory at 82d760c0
 85b19928 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  ehshell.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 8eabe044 to 82d4ec4e

STACK_TEXT:  
9cd469bc 8eabe044 85b19930 00000000 9cd46a10 nt!ExFreePoolWithTag+0x1b2
9cd469cc 8eac974e 85b19930 85b21cf8 00000000 dxgmms1!operator delete+0x16
9cd46a10 8eac9f53 00000000 00000000 9a7285b0 dxgmms1!VIDMM_GLOBAL::CloseOneAllocation+0x1a8
9cd46a30 8eaad32b 9a454bd0 00000000 9cd46abc dxgmms1!VIDMM_GLOBAL::CloseAllocation+0x37
9cd46a40 8ea194aa 859df000 9a454bd0 00000000 dxgmms1!VidMmCloseAllocation+0x13
WARNING: Stack unwind information not available. Following frames may be wrong.
9cd46abc 8ea17481 00000000 00000000 9a7e0070 dxgkrnl+0x244aa
9cd46ae4 8ea1995e 00000001 00000000 00000000 dxgkrnl+0x22481
9cd46b08 8ea19d6e 00000000 00000000 9a601a50 dxgkrnl+0x2495e
9cd46b64 8ea1a594 9cd46b98 00000001 12749f84 dxgkrnl+0x24d6e
9cd46d28 82c6c79a 09e1fa04 09e1fa14 773b64f4 dxgkrnl+0x25594
9cd46d28 773b64f4 09e1fa04 09e1fa14 773b64f4 nt!KiFastCallEntry+0x12a
09e1fa14 00000000 00000000 00000000 00000000 0x773b64f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dxgmms1!operator delete+16
8eabe044 5d              pop     ebp

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  dxgmms1!operator delete+16

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME:  dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc265

FAILURE_BUCKET_ID:  0x19_20_dxgmms1!operator_delete+16

BUCKET_ID:  0x19_20_dxgmms1!operator_delete+16

Followup: MachineOwner
---------

0: kd> lmtsmn
start    end        module name
87600000 87648000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
87f75000 87fcf000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
8f542000 8f554000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
87759000 87762000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
8772d000 87736000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
87736000 87759000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
8e016000 8e08e000   athrusb  athrusb.sys  Mon Jan 29 07:56:51 2007 (45BDEF13)
8e40a000 8e9f5000   atikmdag atikmdag.sys Tue Jul 06 21:34:15 2010 (4C33D997)
877b9000 877f2000   atikmpag atikmpag.sys Tue Jul 06 21:15:23 2010 (4C33D52B)
8f68c000 8f68f000   BdaSup   BdaSup.SYS   Mon Jul 13 19:51:23 2009 (4A5BC87B)
87ee1000 87ee8000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
87800000 8780e000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8748c000 87494000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
8e1cc000 8e1e5000   bowser   bowser.sys   Mon Jul 13 19:14:21 2009 (4A5BBFCD)
823b0000 823ce000   cdd      cdd.dll      unavailable (00000000)
874d6000 87581000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
87e64000 87e89000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
87494000 874d6000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
879a7000 87a04000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8f535000 8f542000   CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
8f742000 8f74f000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
87be1000 87bf9000   dfsc     dfsc.sys     Mon Jul 13 19:14:16 2009 (4A5BBFC8)
87bd5000 87be1000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
87e53000 87e64000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
8f71f000 8f738000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
8f75a000 8f763000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8f74f000 8f75a000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8f763000 8f774000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
8f738000 8f742000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
8e9f5000 8eaac000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 20:48:33 2009 (4AC54DE1)
8eaac000 8eae5000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:25:25 2009 (4A5BC265)
8eb69000 8eb74000   fdc      fdc.sys      unavailable (00000000)
8eb96000 8eba0c00   fetnd6   fetnd6.sys   Thu Jun 19 07:45:41 2008 (485A46E5)
87796000 877a7000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8f64d000 8f657000   flpydisk flpydisk.sys unavailable (00000000)
87762000 87796000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
87a12000 87a1b000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
87e21000 87e53000   fvevol   fvevol.sys   Fri Sep 25 22:24:21 2009 (4ABD7B55)
87d53000 87d84000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
82c00000 82c37000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
8f657000 8f68b880   hcw88bda hcw88bda.sys Fri Jul 10 12:37:19 2009 (4A576E3F)
8f52d000 8f535000   hcw88rc5 hcw88rc5.sys Fri Jul 10 10:35:05 2009 (4A575199)
8f4de000 8f52c700   hcw88tse hcw88tse.sys Fri Jul 10 10:35:10 2009 (4A57519E)
8f43b000 8f49bd80   hcw88vid hcw88vid.sys Fri Jul 10 10:35:18 2009 (4A5751A6)
8eae5000 8eb04000   HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
8f6a0000 8f6f0000   HdAudio  HdAudio.sys  Mon Jul 13 19:51:46 2009 (4A5BC892)
8f798000 8f7ab000   HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
8f7ab000 8f7b1480   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
8f78d000 8f798000   hidusb   hidusb.sys   Mon Jul 13 19:51:04 2009 (4A5BC868)
8e147000 8e1cc000   HTTP     HTTP.sys     Mon Jul 13 19:12:53 2009 (4A5BBF75)
87e19000 87e21000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
877a7000 877b9000   intelppm intelppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
8f5df000 8f5ec000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8f7ba000 8f7c6000   kbdhid   kbdhid.sys   Mon Jul 13 19:45:09 2009 (4A5BC705)
80bd1000 80bd9000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
8f4aa000 8f4de000   ks       ks.sys       Mon Jul 13 19:45:13 2009 (4A5BC709)
87994000 879a7000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
87b10000 87b35000   ksecpkg  ksecpkg.sys  Thu Dec 10 23:04:22 2009 (4B21C4C6)
8f7b2000 8f7b9d80   LHidFilt LHidFilt.Sys Thu Mar 18 04:50:19 2010 (4BA1E94B)
8e0ce000 8e0de000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
8e099000 8e0b4000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
87403000 8747b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
8f7dd000 8f7e8000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
8f5ec000 8f5f9000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8e08e000 8e099000   mouhid   mouhid.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
87717000 8772d000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
8e1e5000 8e1f7000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
8e1f7000 8e21a000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:32:02 2010 (4B88CA72)
8e21a000 8e255000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
8e255000 8e270000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
87f3a000 87f45000   Msfs     Msfs.SYS     unavailable (00000000)
87651000 87659000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8e3ea000 8e3eb700   MSPCLOCK MSPCLOCK.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
8e3e8000 8e3e9580   MSPQM    MSPQM.sys    Mon Jul 13 19:45:07 2009 (4A5BC703)
87969000 87994000   msrpc    msrpc.sys    unavailable (00000000)
87c00000 87c0a000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
87e09000 87e19000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
87a1b000 87ad2000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
8f56c000 8f577000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
8e124000 8e134000   ndisuio  ndisuio.sys  Mon Jul 13 19:53:51 2009 (4A5BC90F)
8f577000 8f599000   ndiswan  ndiswan.sys  Mon Jul 13 19:54:34 2009 (4A5BC93A)
8f68f000 8f6a0000   NDProxy  NDProxy.SYS  Mon Jul 13 19:54:27 2009 (4A5BC933)
87ebb000 87ec9000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
87b35000 87b67000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
87ad2000 87b10000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
87f45000 87f53000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
87ff5000 87fff000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82c37000 83037000   nt       ntkrnlmp.exe Fri Jun 18 23:55:07 2010 (4C1C3F9B)
8783a000 87969000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
87eda000 87ee1000   Null     Null.SYS     unavailable (00000000)
8e0de000 8e124000   nwifi    nwifi.sys    Mon Jul 13 19:51:59 2009 (4A5BC89F)
87fd6000 87ff5000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8eb74000 8eb8c000   parport  parport.sys  Mon Jul 13 19:45:34 2009 (4A5BC71E)
8768e000 8769f000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8e270000 8e277000   parvdm   parvdm.sys   unavailable (00000000)
87664000 8768e000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
87710000 87717000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
87702000 87710000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
87a04000 87a12000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8e277000 8e30e000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
8f6f0000 8f71f000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
8747b000 8748c000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
8f554000 8f56c000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
8f599000 8f5b1000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
8f5b1000 8f5c8000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
8f5c8000 8f5df000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
87b94000 87bd5000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
87f22000 87f2a000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
87f2a000 87f32000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
87f32000 87f3a000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
87ddc000 87e09000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
8e134000 8e147000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
8e30e000 8e318000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8eb8c000 8eb96000   serenum  serenum.sys  Mon Jul 13 19:45:27 2009 (4A5BC717)
87b67000 87b81000   serial   serial.sys   Mon Jul 13 19:45:33 2009 (4A5BC71D)
87dd4000 87ddc000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
8e395000 8e3e6000   srv      srv.sys      Mon Jun 21 22:47:32 2010 (4C202444)
8e346000 8e395000   srv2     srv2.sys     Mon Jun 21 22:47:19 2010 (4C202437)
8e318000 8e339000   srvnet   srvnet.sys   Mon Jun 21 22:47:09 2010 (4C20242D)
8f49c000 8f4a9180   STREAM   STREAM.SYS   Mon Jul 13 19:50:57 2009 (4A5BC861)
8f5f9000 8f5fa380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
87c0a000 87d53000   tcpip    tcpip.sys    Sun Jun 13 23:36:59 2010 (4C15A3DB)
8e339000 8e346000   tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
87f6a000 87f75000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
87f53000 87f6a000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
87ec9000 87ed9000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
82380000 82389000   TSDDD    TSDDD.dll    unavailable (00000000)
8780e000 8782f000   tunnel   tunnel.sys   Mon Jul 13 19:54:03 2009 (4A5BC91B)
87dc3000 87dd4000   uagp35   uagp35.sys   Mon Jul 13 19:25:40 2009 (4A5BC274)
8f5fb000 8f609000   umbus    umbus.sys    Mon Jul 13 19:51:38 2009 (4A5BC88A)
8f774000 8f78b000   usbccgp  usbccgp.sys  Mon Jul 13 19:51:31 2009 (4A5BC883)
8f78b000 8f78c700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
8eb5a000 8eb69000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
8f609000 8f64d000   usbhub   usbhub.sys   Mon Jul 13 19:52:06 2009 (4A5BC8A6)
8eb0f000 8eb5a000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
8f7c6000 8f7dd000   USBSTOR  USBSTOR.SYS  Mon Jul 13 19:51:19 2009 (4A5BC877)
8eb04000 8eb0f000   usbuhci  usbuhci.sys  Mon Jul 13 19:51:10 2009 (4A5BC86E)
87659000 87664000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
87ee8000 87ef4000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
876fa000 87702000   viaide   viaide.sys   Mon Jul 13 19:11:20 2009 (4A5BBF18)
87ef4000 87f15000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8769f000 876af000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
876af000 876fa000   volmgrx  volmgrx.sys  unavailable (00000000)
87d84000 87dc3000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
87b81000 87b94000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
87f15000 87f22000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
87581000 875f2000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
875f2000 87600000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
87fcf000 87fd6000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
82120000 8236a000   win32k   win32k.sys   unavailable (00000000)
87648000 87651000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8e0b4000 8e0ce000   WudfPf   WudfPf.sys   Mon Jul 13 19:50:13 2009 (4A5BC835)

Unloaded modules:
8e3e6000 8e3e8000   RTCore32.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87e89000 87e96000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87e96000 87ea1000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87ea1000 87eaa000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87eaa000 87ebb000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8780e000 8781a000   ATITool.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87ebb000 87eda000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Since the dump indicates a driver problem, I looked at your drivers and you have some out of date drivers on your system.

athrusb.sys Mon Jan 29 07:56:51 2007
fetnd6.sys Thu Jun 19 07:45:41 2008
hcw88bda.sys Fri Jul 10 12:37:19 2009
hcw88rc5 hcw88rc5.sys Fri Jul 10 10:35:05 2009
hcw88tse hcw88tse.sys Fri Jul 10 10:35:10 2009
hcw88vid hcw88vid.sys Fri Jul 10 10:35:18 2009

Update these drivers from the manufacturers' websites. Post if you need help with this.

I could not find a date for RTCore32.sys. It is RivaTuner/EVGA Precision driver. RivaTuner. Are you overclocking your graphics card? Your previous dump also indicated this driver is a problem.

If you are overclocking anything, please return to stock values. I also suggest that you uninstall RivaTuner as two dumps indicate this driver.

Athrusb.sys - Atheros Extensible Wireless LAN device driver is a driver file from company Atheros Communications, Inc. belonging to product Driver for Atheros Wireless USB Network Adapter. Update this driver; it is way obsolete. If you cannot update it, consider upgrading your wireless adapter.

Fetnd6.sys - NDIS 6.0 miniport driver is a driver file from company VIA Technologies, Inc. belonging to product VIA Rhine Family Fast Ethernet Adapter. This driver is obsolete. Update it. If you cannot update it, consider upgrading your Ethernet adapter.

Once you have updated drivers and uninstalled RivaTuner, see how your system runs. If you get another BSOD, please upload it and we will go from there.

 

[jlawes20389]

Ok thanks.

I am not sure why RTCore32.sys is being indicated because I do not have Rivatuner or EVGA precision installed and never have done.

Will update the drivers and try again.

Edit:

I do not have an Atheros wireless lan device. I am using a Belkin USB wireless and already have installed the latest drivers from the Belkin Website.

All drivers have now been updated except the Atheros one

The system is currently running at stock speeds. Would you know if MSI Afterburner uses the RTCore32.sys driver as I have that installed

 

[richc46]

Do the easy things first, and the problem may be solved. If the problem continues we can concentrate on the more difficult solutions.

Incidentally, I was looking at the dump as Carl was posting, he gave good advice. It a pain, now, but it will get solved.

 

[jlawes20389]

thanks for the advice so far! I have removed MSI Afterburner incase this is what has installed the RTCore32.sys driver.

I have updated all the other drivers to the latest versions except the Atheros one which I am struggling with. Any pointers for this one?

 

[CarlTR6]

jlawes, navigate to C:\Windows\System32\Drivers. Look for Athrusb.sys. Rename it from .sys to .bak. Reboot and the driver will not load. Also look for RTCore32.sys. If it is not there, you have uninstalled it. If it is there, rename it to .bak.

Run your system for a couple of days. If you get another BSOD, upload it and we will go from there. I hope you will be running crash free. Let us know.

 

[jlawes20389]

Thanks Carl. Renamed the athrusb driver and the RTCore32 one was nowhere to be found so I assume I managed to delete it.

So far I am unable to recreate the BSOD like before but I am still getting graphical corruption in Media Center and the ATI driver is crashing every couple of minutes. Also, renaming the Atheros driver has stopped my network adaptor from working. Am going to try to find newer drivers for both

 

[CarlTR6]

Thanks for the report back. Obvioulsy something you uninstalled removed the RTCore32'sys driver. Good job on the renaming. The value of renaming is that you can reverse it something is broken - unlike deleting. YOu may have to ugrade your network adapter to one that is compatible with Win 7; I had to do that on my system. You can always rename the Atheros driver back to .sys, reboot and see if it causes a crash. If it doesn't, you will have networking.

Let me know if you find updates.