Frequent unexpected reboots & some BSODs: help!

[dduane]

Friends,

First of all, thanks for being here to offer advice. This problem has been driving me crazy.

About two months ago, my relatively new W7 x64 machine started rebooting without warning. Lately the problem has escalated slightly in that it's also occasionally throwing BSODs, though not all that frequently. Please see the .zip file for all the sordid details. The reboots are the really annoying thing: they seem to have become more frequent recently and can happen three or four times a day now. Sometimes they'll even happen if the login screen isn't touched for ten or fifteen minutes after boot-up.

I started investigating this problem by looking at the minidumps and trying to isolate and remove the more obvious possibilities: a rather elderly Wacom tablet (now uninstalled, though it never caused any trouble before November), a new Lexmark printer (which was added to the system in November, also now uninstalled). The uninstallations have made no difference to the reboots, which continue to happen at unpredictable intervals.

The system is a custom build from Scan in the UK, delivered to me at the end of July '10. The processor is an Intel Core i3 530 2.93Ghz (overclocked to I think 6 Ghz.) on a Gigabyte H55M-UD2H motherboard with 4G of CMX memory, Artic Freezer Pro and Akasa Amberfans. There are two Samsung HDs (500G system drive and 1 T storage drive) and two Optiarc DVDs: everything's in an Antec 300 case with a Corsair 650W PSU. Display adapter is an ATI Radeon HD 5800, and the monitor's a Samsung SyncMaster 2443NW. Keyboard is a Perixx with a touchpad. Sound system is a Creative X-fi Titanium. Internet comes from house WiFi (crap satellite broadband, let's not get into it...) via a Edimax USB adapter.

The Windows running on the machine was installed by the builders and is x64. The system also came with MSOffice 2010 and Norton Internet Security.

Ruled out are memory issues (I ran the onboard Microsoft memory diagnostic and it came up clean) and overheating problems (as far as I can tell: CoreTemp shows the processor cores never running any hotter than 150F even when being pushed hard by programs like Terragen 2). I attempted using the driver verification program, but stopped after the machine seemed to throw even more bluescreens, and found it wasn't shedding any more light on the problem. All the obvious drivers have been replaced with the newest available (the monitor is a sore point as there's nothing newer than 2009). ...Wait, maybe I'm wrong there: I'm not sure if I updated the SoundBlaster. But have been downloading and replacing everything else in sight in an attempt to solve this problem.

Hoping someone can offer some useful insights into this. Thanks!

Best -- Diane

 

[cybercore]

Hello and Welcome. : )

[B]BugCheck C9[/B], {22e, fffff880047d7818, fffff9802361adc0, 0}

Unable to load image \SystemRoot\system32\DRIVERS\[B]wacomvhid.sys[/B], Win32 error 0n2
*** WARNING: Unable to verify timestamp for wacomvhid.sys
*** ERROR: Module load completed but symbols could not be loaded for wacomvhid.sys
Probably caused by : HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )

1. Disable Driver Verifier


2. Update Wacom mouse:

wacomvhid.sys Fri Feb 16 12:29:28 2007
WacomVKHid.sys Thu Feb 15 18:10:54 2007


3. Update Intel Management Engine Interface driver:

HECIx64.sys Thu Sep 17 15:54:16 2009

http://www.intel.com/support/detect.htm



If crashes persist AFTER the above updates, uninstall Symantec and install MSE as the replacement.






Crash Dumps:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\010411-33368-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03202000 PsLoadedModuleList = 0xfffff800`0343fe50
Debug session time: Tue Jan  4 05:27:24.882 2011 (UTC - 5:00)
System Uptime: 0 days 0:00:45.818
Loading Kernel Symbols
...............................................................
................................................................
.....
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C9, {22e, fffff880047d7818, fffff9802361adc0, 0}

Unable to load image \SystemRoot\system32\DRIVERS\wacomvhid.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for wacomvhid.sys
*** ERROR: Module load completed but symbols could not be loaded for wacomvhid.sys
Probably caused by : HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_IOMANAGER_VIOLATION (c9)
The IO manager has caught a misbehaving driver.
Arguments:
Arg1: 000000000000022e, The caller has completed a successful IRP_MJ_PNP instead of passing it down.
Arg2: fffff880047d7818, The address in the driver's code where the error was detected.
Arg3: fffff9802361adc0, IRP address.
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0xc9_22e

DRIVER_VERIFIER_IO_VIOLATION_TYPE:  22e

FAULTING_IP: 
HIDCLASS!HidpMajorHandler+0
fffff880`047d7818 48895c2410      mov     qword ptr [rsp+10h],rbx

FOLLOWUP_IP: 
HIDCLASS!HidpMajorHandler+0
fffff880`047d7818 48895c2410      mov     qword ptr [rsp+10h],rbx

IRP_ADDRESS:  fffff9802361adc0

DEVICE_OBJECT: fffffa800751d060

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  System

CURRENT_IRQL:  2

LOCK_ADDRESS:  fffff80003476400 -- (!locks fffff80003476400)

Resource @ nt!PiEngineLock (0xfffff80003476400)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
    Lock address  : 0xfffff80003476400
    Thread Count  : 0
    Thread address: 0x0000000000000000
    Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff800036fc3dc to fffff80003272740

STACK_TEXT:  
fffff880`033a1048 fffff800`036fc3dc : 00000000`000000c9 00000000`0000022e fffff880`047d7818 fffff980`2361adc0 : nt!KeBugCheckEx
fffff880`033a1050 fffff800`0370647a : fffff800`036fa9f0 fffff880`047d7818 fffff980`2361adc0 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`033a1090 fffff800`03707483 : 00000000`0000022e fffff980`2361adc0 fffff980`2361adc0 00000000`ffffffff : nt!ViErrorFinishReport+0xda
fffff880`033a10e0 fffff800`03712ec2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!VfErrorReport1+0x63
fffff880`033a1180 fffff800`036fc04e : fffffa80`053b6788 00000000`00000001 00000000`00000000 00000000`00000000 : nt!VfPnpVerifyIrpStackUpward+0xb2
fffff880`033a11e0 fffff800`03708b2d : fffffa80`077214c0 fffffa80`053b65d0 fffff980`2361adc0 fffff980`2361adc0 : nt!VfMajorVerifyIrpStackUpward+0x6e
fffff880`033a1220 fffff800`0371a50d : fffff980`2361af20 fffff880`033a1400 00000000`00000000 fffff980`2361af20 : nt!IovpCompleteRequest2+0xad
fffff880`033a1290 fffff800`03274d26 : fffff980`2361af23 fffff800`00000000 00000000`00000013 fffff880`00000005 : nt!IovpLocalCompletionRoutine+0x9d
fffff880`033a12f0 fffff800`0371219f : fffff980`2361adc0 00000000`00000000 fffff980`2361ad00 00000000`00000000 : nt!IopfCompleteRequest+0x3a6
fffff880`033a13d0 fffff880`053f98f7 : fffff880`047e8c10 fffff880`047d7419 fffff880`053f9a8a fffff980`2361adc0 : nt!IovCompleteRequest+0x19f
fffff880`033a14a0 fffff880`047e8c10 : fffff880`047d7419 fffff880`053f9a8a fffff980`2361adc0 fffffa80`00000000 : wacomvhid+0x18f7
fffff880`033a14a8 fffff880`047d7419 : fffff880`053f9a8a fffff980`2361adc0 fffffa80`00000000 fffffa80`053b6800 : HIDCLASS! ?? ::NNGAKEGL::`string'
fffff880`033a14b0 fffff880`047e564a : fffff880`047e2300 fffffa80`0751d1b0 fffffa80`0751d1b0 fffff880`033a15c8 : HIDCLASS!WPP_RECORDER_SF_Dsq+0x12d
fffff880`033a1530 fffff880`047d790d : fffff880`047e23a8 fffff880`047e13c0 fffffa80`0751d1b0 fffffa80`00000001 : HIDCLASS!HidpIrpMajorPnp+0x8a
fffff880`033a15a0 fffff800`03718c16 : fffff980`2361adc0 fffff980`2361adc0 00000000`00000002 fffff800`0371437e : HIDCLASS!HidpMajorHandler+0xf5
fffff880`033a1610 fffff800`0371b52a : fffff980`2361af68 fffffa80`0751d060 fffffa80`0751c3a0 fffffa80`05ed5da0 : nt!IovCallDriver+0x566
fffff880`033a1670 fffff800`03718c16 : fffff980`2361adc0 00000000`00000002 fffffa80`0751c3a0 fffffa80`07562010 : nt!ViFilterDispatchPnp+0x13a
fffff880`033a16a0 fffff800`034de519 : fffffa80`0751c3a0 00000000`c00000bb fffff880`033a17a0 fffffa80`07562010 : nt!IovCallDriver+0x566
fffff880`033a1700 fffff800`03631a08 : 00000000`c00000bb fffff880`033a18c0 fffff880`033a18d0 00000000`00200020 : nt!IopSynchronousCall+0xc5
fffff880`033a1770 fffff800`03634010 : fffffa80`035a5458 fffffa80`035a5430 00000000`00000000 fffffa80`035a5430 : nt!PnpIrpQueryID+0x68
fffff880`033a1800 fffff800`0365d23c : fffffa80`035a5430 00000000`00000001 00000000`00000001 00000000`00200020 : nt!PnpQueryID+0x30
fffff880`033a1860 fffff800`0365f314 : fffffa80`035a5430 fffffa80`035a5430 fffffa80`035a1250 00000000`00000001 : nt!PipProcessStartPhase3+0x7c
fffff880`033a1950 fffff800`0365f7fc : fffff800`03473d80 00000000`00000000 00000000`00000001 fffff800`034df840 : nt!PipProcessDevNodeTree+0x264
fffff880`033a1bc0 fffff800`03374382 : 00000001`00000003 fffff800`034175f8 00000000`00000001 00000000`00000000 : nt!PiProcessStartSystemDevices+0x7c
fffff880`033a1c10 fffff800`0327f961 : fffff800`03374080 fffff880`01339e01 fffffa80`03585b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x302
fffff880`033a1cb0 fffff800`03516c06 : 00000000`00000000 fffffa80`03585b60 00000000`00000080 fffffa80`03568040 : nt!ExpWorkerThread+0x111
fffff880`033a1d40 fffff800`03250c26 : fffff880`031d5180 fffffa80`03585b60 fffff880`031dffc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`033a1d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  .bugcheck ; kb

SYMBOL_NAME:  HIDCLASS!HidpMajorHandler+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: HIDCLASS

IMAGE_NAME:  HIDCLASS.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcbfd

FAILURE_BUCKET_ID:  X64_0xc9_22e_VRF_HIDCLASS!HidpMajorHandler+0

BUCKET_ID:  X64_0xc9_22e_VRF_HIDCLASS!HidpMajorHandler+0

Followup: MachineOwner
---------

Drivers:

start             end                 module name
fffff880`04451000 fffff880`0448f000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00d4c000 fffff880`00da3000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`04278000 fffff880`04302000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045dd000 fffff880`045f3000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`012fe000 fffff880`01309000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`012cb000 fffff880`012d4000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`012d4000 fffff880`012fe000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04c03000 fffff880`053f8000   atikmdag atikmdag.sys Tue Oct 26 22:29:53 2010 (4CC78EA1)
fffff880`04b4c000 fffff880`04b97000   atikmpag atikmpag.sys Tue Oct 26 22:14:23 2010 (4CC78AFF)
fffff880`01bdc000 fffff880`01be4000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff880`02eed000 fffff880`02ef4000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04a23000 fffff880`04b10000   BHDrvx64 BHDrvx64.sys Mon Nov 15 18:11:35 2010 (4CE1BE27)
fffff880`04750000 fffff880`04761000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`046b4000 fffff880`04750000   ccHPx64  ccHPx64.sys  Fri Feb 05 16:05:45 2010 (4B6C8829)
fffff880`01a1c000 fffff880`01a46000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00efd000 fffff880`00fbd000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01bac000 fffff880`01bdc000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cee000 fffff880`00d4c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01640000 fffff880`016b3000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04a0d000 fffff880`04a1d000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`01be4000 fffff880`01bf2000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04600000 fffff880`046a8b80   ctaud2k  ctaud2k.sys  Wed Jul 07 09:42:14 2010 (4C348436)
fffff880`047a4000 fffff880`047d5000   ctoss2k  ctoss2k.sys  Wed Jul 07 09:38:24 2010 (4C348350)
fffff880`05485000 fffff880`0548d000   ctprxy2k ctprxy2k.sys Wed Jul 07 09:42:17 2010 (4C348439)
fffff880`045bf000 fffff880`045dd000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`045b0000 fffff880`045bf000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01b96000 fffff880`01bac000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04bd4000 fffff880`04bf6000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`01a00000 fffff880`01a09000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01bf2000 fffff880`01bfe000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01a09000 fffff880`01a1c000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`054a0000 fffff880`05594000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05594000 fffff880`055da000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04515000 fffff880`0458b000   eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`02ecd000 fffff880`02eed000   ENG64    ENG64.SYS    Mon Dec 13 20:47:30 2010 (4D06CCB2)
fffff880`0458b000 fffff880`045b0000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`03c37000 fffff880`03df1000   EX64     EX64.SYS     Mon Dec 13 20:55:48 2010 (4D06CEA4)
fffff880`013c3000 fffff880`013d7000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01309000 fffff880`01355000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`016c4000 fffff880`016ce000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01b5c000 fffff880`01b96000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01a69000 fffff880`01ab3000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04a00000 fffff880`04a0d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`037de000 fffff800`03827000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`055da000 fffff880`055fe000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05400000 fffff880`05411000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`047d5000 fffff880`047ee000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`04bf6000 fffff880`04bfe080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`01b53000 fffff880`01b5c000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`010c3000 fffff880`012cb000   iaStor   iaStor.sys   Fri Oct 02 15:58:50 2009 (4AC65B7A)
fffff880`0449a000 fffff880`04515000   IDSvia64 IDSvia64.sys Fri Nov 05 17:13:11 2010 (4CD47367)
fffff880`04b36000 fffff880`04b4c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02e92000 fffff880`02eb9000   Ironx64  Ironx64.SYS  Tue Apr 27 20:48:23 2010 (4BD785D7)
fffff880`017eb000 fffff880`017fa000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00ba4000 fffff800`00bae000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04761000 fffff880`047a4000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`015e2000 fffff880`015fc000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`017c0000 fffff880`017eb000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`0548d000 fffff880`05492200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`00c96000 fffff880`00cda000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0142f000 fffff880`0143e000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00c10000 fffff880`00c2a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02f52000 fffff880`02f5d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ebc000 fffff880`00ec6000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01047000 fffff880`010a5000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02e00000 fffff880`02e0b000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01b41000 fffff880`01b53000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016ce000 fffff880`017c0000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`047ee000 fffff880`047fa000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`01400000 fffff880`0142f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0439e000 fffff880`043ad000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04302000 fffff880`04347000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`00c2a000 fffff880`00c8a000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02f5d000 fffff880`02f6e000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02fea000 fffff880`02ff6000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03202000 fffff800`037de000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0143f000 fffff880`015e2000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`03df1000 fffff880`03dfa000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04350000 fffff880`04376000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fca000 fffff880`00fdf000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ec6000 fffff880`00ef9000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ff4000 fffff880`00ffb000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c00000 fffff880`00c10000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`016b3000 fffff880`016c4000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`04b97000 fffff880`04bd4000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cda000 fffff880`00cee000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0103b000 fffff880`01046e00   PxHlpa64 PxHlpa64.sys Fri May 15 17:43:06 2009 (4A0DE1EA)
fffff880`01600000 fffff880`01624000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`01a46000 fffff880`01a61000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`013d7000 fffff880`013f8000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`01624000 fffff880`0163e000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02f99000 fffff880`02fea000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02f37000 fffff880`02f40000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02f40000 fffff880`02f49000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02f49000 fffff880`02f52000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01b07000 fffff880`01b41000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04400000 fffff880`04451000   Rt64win7 Rt64win7.sys Tue Jan 12 01:37:27 2010 (4B4C18A7)
fffff880`05493000 fffff880`0549f000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`043ad000 fffff880`043ca000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01aff000 fffff880`01b07000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`02e0c000 fffff880`02e92000   SRTSP64  SRTSP64.SYS  Wed Feb 24 18:59:29 2010 (4B85BD61)
fffff880`02eb9000 fffff880`02ecd000   SRTSPX64 SRTSPX64.SYS Wed Feb 24 18:59:48 2010 (4B85BD74)
fffff880`053fb000 fffff880`053fc480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01355000 fffff880`013c3000   SYMDS64  SYMDS64.SYS  Mon Aug 17 19:35:30 2009 (4A89E942)
fffff880`01000000 fffff880`0103b000   SYMEFA64 SYMEFA64.SYS Wed Apr 21 17:47:39 2010 (4BCF727B)
fffff880`03c00000 fffff880`03c36000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Aug 13 18:28:21 2009 (4A849385)
fffff880`0438c000 fffff880`0439e000   SymIMv   SymIMv.sys   Fri Apr 30 22:12:21 2010 (4BDB8E05)
fffff880`04202000 fffff880`04278000   SYMTDIV  SYMTDIV.SYS  Tue May 04 00:38:27 2010 (4BDFA4C3)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`02f8c000 fffff880`02f99000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02f6e000 fffff880`02f8c000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`043e5000 fffff880`043f9000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`04b10000 fffff880`04b36000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`010a5000 fffff880`010b7000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05474000 fffff880`05485000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05c71000 fffff880`05ccb000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0541e000 fffff880`05474000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05411000 fffff880`0541e000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fbd000 fffff880`00fca000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02ef4000 fffff880`02f02000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02f02000 fffff880`02f27000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00fdf000 fffff880`00ff4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00da3000 fffff880`00dff000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01ab3000 fffff880`01aff000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04376000 fffff880`0438c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`053f8000 fffff880`053fa300   wacomvhid wacomvhid.sys Fri Feb 16 12:29:28 2007 (45D5E9F8)
fffff880`055fe000 fffff880`055ffc80   WacomVKHid WacomVKHid.sys Thu Feb 15 18:10:54 2007 (45D4E87E)
fffff880`043ca000 fffff880`043e5000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02f27000 fffff880`02f37000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04347000 fffff880`04350000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`00eb3000 fffff880`00ebc000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

 

[zigzag3143]

Friends,

First of all, thanks for being here to offer advice. This problem has been driving me crazy.

About two months ago, my relatively new W7 x64 machine started rebooting without warning. Lately the problem has escalated slightly in that it's also occasionally throwing BSODs, though not all that frequently. Please see the .zip file for all the sordid details. The reboots are the really annoying thing: they seem to have become more frequent recently and can happen three or four times a day now. Sometimes they'll even happen if the login screen isn't touched for ten or fifteen minutes after boot-up.

I started investigating this problem by looking at the minidumps and trying to isolate and remove the more obvious possibilities: a rather elderly Wacom tablet (now uninstalled, though it never caused any trouble before November), a new Lexmark printer (which was added to the system in November, also now uninstalled). The uninstallations have made no difference to the reboots, which continue to happen at unpredictable intervals.

The system is a custom build from Scan in the UK, delivered to me at the end of July '10. The processor is an Intel Core i3 530 2.93Ghz (overclocked to I think 6 Ghz.) on a Gigabyte H55M-UD2H motherboard with 4G of CMX memory, Artic Freezer Pro and Akasa Amberfans. There are two Samsung HDs (500G system drive and 1 T storage drive) and two Optiarc DVDs: everything's in an Antec 300 case with a Corsair 650W PSU. Display adapter is an ATI Radeon HD 5800, and the monitor's a Samsung SyncMaster 2443NW. Keyboard is a Perixx with a touchpad. Sound system is a Creative X-fi Titanium. Internet comes from house WiFi (crap satellite broadband, let's not get into it...) via a Edimax USB adapter.

The Windows running on the machine was installed by the builders and is x64. The system also came with MSOffice 2010 and Norton Internet Security.

Ruled out are memory issues (I ran the onboard Microsoft memory diagnostic and it came up clean) and overheating problems (as far as I can tell: CoreTemp shows the processor cores never running any hotter than 150F even when being pushed hard by programs like Terragen 2). I attempted using the driver verification program, but stopped after the machine seemed to throw even more bluescreens, and found it wasn't shedding any more light on the problem. All the obvious drivers have been replaced with the newest available (the monitor is a sore point as there's nothing newer than 2009). ...Wait, maybe I'm wrong there: I'm not sure if I updated the SoundBlaster. But have been downloading and replacing everything else in sight in an attempt to solve this problem.

Hoping someone can offer some useful insights into this. Thanks!

Best -- Diane

Diane Hi and welcome

there are a few problems here that need resolving before we can assertain what the true cause of the bsod's are

1-Your symantec remove and replace with Microsoft Security Essentials

Download and run the Norton Removal Tool to uninstall your Norton product | Norton Support

http://www.microsoft.com/security_essentials/

2-luafv.sys (a virtualization driver in the OS) if you dont run a virtuakl machine rename the file to prevent it running. I fyou do run a system file check to verify and repair your system files

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html?ltr=S


3 memory test

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.


Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. Test the sticks individually, and if you find a good one, test it in all slots.


Ken J

 

[cybercore]

The system is a custom build from Scan in the UK, delivered to me at the end of July '10. The processor is an Intel Core i3 530 2.93Ghz (overclocked to I think 6 Ghz.) on a Gigabyte H55M-UD2H motherboard with 4G of CMX memory,

2.93Ghz @ 6Ghz ?? If true so, it's too high. Load setup defaults in the bios.

 

[dduane]

Hi Cybercore! Thanks for the help.

A couple of questions: (a) When I uninstalled the Wacom tablet (I did it via Control Panel), I'd have thought it would have removed all the drivers. Yet there those two are, still. Should I remove them manually before installing the new drivers?

(b) Re the Intel Management engine driver: Do I go to Intel or Gigabyte for that? (I assume it's something to do with the mobo's chipset.)

Thanks again!

Best -- Diane

 

[dduane]

The system is a custom build from Scan in the UK, delivered to me at the end of July '10. The processor is an Intel Core i3 530 2.93Ghz (overclocked to I think 6 Ghz.) on a Gigabyte H55M-UD2H motherboard with 4G of CMX memory,

2.93Ghz @ 6Ghz ?? If true so, it's too high. Load setup defaults in the bios.

I might be misspeaking here: I'll check the numbers. Thanks!

best -- Diane

 

[dduane]

Hi Zigzag!

Diane Hi and welcome

there are a few problems here that need resolving before we can assertain what the true cause of the bsod's are

1-Your symantec remove and replace with Microsoft Security Essentials

Download and run the Norton Removal Tool to uninstall your Norton product | Norton Support

http://www.microsoft.com/security_essentials/

2-luafv.sys (a virtualization driver in the OS) if you dont run a virtuakl machine rename the file to prevent it running. I fyou do run a system file check to verify and repair your system files

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html?ltr=S


3 memory test

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.


Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. Test the sticks individually, and if you find a good one, test it in all slots.


Ken J

I'll do all these in the AM and report back. (I have work-stuff to do before I hit the sack tonight...)

Thanks!

Best -- Diane

 

[dduane]

Just an addendum:

1-Your symantec remove and replace with Microsoft Security Essentials

Done. MSE is now installing.

2-luafv.sys (a virtualization driver in the OS) if you dont run a virtuakl machine rename the file to prevent it running. I fyou do run a system file check to verify and repair your system files

I don't have any virtual machines running (being very unclear on the basic concept to begin with.) I'll rename the file shortly. ETA: I'm having trouble renaming it -- I get a window saying "You need permission to perform this action: You require permission from TrustedInstaller to make this change." I'm running as administrator at the moment. Where do I acquire the needed permission?

...Ran scannow anyway (with the /verifyonly switch) and it came up clean: "Windows resource protection did not find any integrity violations."

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

Will do this later today and report back.

Thanks!

Best -- Diane

 

[cybercore]

Hi Cybercore! Thanks for the help.

A couple of questions: (a) When I uninstalled the Wacom tablet (I did it via Control Panel), I'd have thought it would have removed all the drivers. Yet there those two are, still. Should I remove them manually before installing the new drivers?

(b) Re the Intel Management engine driver: Do I go to Intel or Gigabyte for that? (I assume it's something to do with the mobo's chipset.)

Thanks again!

Best -- Diane

1. Wacom: rename these 2 files to .old:

wacomvhid.sys Fri Feb 16 12:29:28 2007
WacomVKHid.sys Thu Feb 15 18:10:54 2007


2. Intel Management Engine: as in my link in my 1st post, run Intel Driver Update Utility in IE, let the utility install and find the updates for you Intel® Driver Update Utility

 

[cybercore]

Hey there, DO NOT RENAME luafv.sys - that's a system file. I guess noone suggested that, don't touch it.

 

[dduane]

1. Wacom: rename these 2 files to .old:

wacomvhid.sys Fri Feb 16 12:29:28 2007
WacomVKHid.sys Thu Feb 15 18:10:54 2007

Unfortunately I don't seem able to do this: I keep getting a window that says "You need permission from SYSTEM to perform this action." Thoughts? (Also, re that virtualization driver in your other message: no probs, I'll leave it alone.)

2. Intel Management Engine: as in my link in my 1st post, run Intel Driver Update Utility in IE, let the utility install and find the updates for you Intel® Driver Update Utility

Oops, sorry, I missed the link. ETA: Done. All the utility wanted was an update to the onboard Realtek LAN driver. Also: Memtest86 has gone through six full passes without any errors.

Thanks again!

Best -- Diane

 

[cybercore]

If there are no 7 compatible drivers at Wacom Downloads, then disable your Wacom in Control Panel > Device Manager.

 

[dduane]

If there are no 7 compatible drivers at Wacom Downloads, then disable your Wacom in Control Panel > Device Manager.

As it happens, I had the new W7-friendly Wacom drivers already, and had installed them last week before the restarts began to become really annoying. I reinstalled them today (having figured out how to set the permissions so that I could change the name of the one driver which wasn't overwritten by the new ones).

However, a new problem presented itself last night. After running the Intel online diagnostic and installing the Realtek wired-network driver update it recommended, Windows would not start. System Repair was unable to do an automatic repair, and the system would not restart without being restored back to the last restore point before the Realtek update was installed. So I rolled it back to that restore point.

The unscheduled restarts/reboots are still happening (had one about two hours ago while doing a render in Terragen).

Are there any further thoughts on this? I wish I could have another BSOD so that some further clue as to the restarts would show...

Best -- Diane