Solved Frequently random BSOD.

[schwartz31]

I've been getting BSOD frequently. When i'm playing games, surfing on the web, even while it's in idle. It's rly annoying.

Any help is welcome. thx

Gigabyte GA-870A-UD3 v2
QuadCore AMD Phenom II X4 Black Edition B55, 3.8 GHz
2x4Gb Exceleram DDR3 1600 MHz
NVIDIA GeForce GTX 275
WD Caviar Green 1 TB
Chieftec CTG-600-80P

Edit: ASUS W-card model: WL-138G V2

 

[koolkat77]

Welcome

Please uninstall the following while troubleshooting with your computer:

Problematic software:

[FONT="Verdana"][SIZE="2"]Start Menu\Programs\DAEMON Tools Lite	Public:Start Menu\Programs\DAEMON Tools Lite	Public[/SIZE][/FONT]

Remove Daemon Tools, sptd.sys is known to cause BSODs.

• How to remove sptd.sys from system

[FONT="Verdana"][SIZE="2"]Start Menu\Programs\ESET	Public:Start Menu\Programs\ESET	Public
Start Menu\Programs\ESET\ESET Smart Security	Public:Start Menu\Programs\ESET\ESET Smart Security	Public[/SIZE][/FONT]

ESET antivirus contributes in BSODs, please uninstall it with its removal tool (search in google) and replace with MSE (at least to test)

Recommended antivirus program for Windows 7 based on stability compared to others:-

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

Run a full scan with both (separately) once downloaded, installed and updated.

BSOD Analyze

:note: Uninstall the drivers from program from control panel first then delete remnants of the drivers above using Driver Sweeper, then install the latest.​

Get the latest drivers for Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC installed. Source​

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {0, 2, 0, fffff88007a1ae8d}

*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by :[COLOR="Red"] Rt64win7.sys[/COLOR] ( Rt64win7+18e8d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88007a1ae8d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002efb100
GetUlongFromAddress: unable to read from fffff80002efb1c0
 0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
Rt64win7+18e8d
fffff880`07a1ae8d 418bc6          mov     eax,r14d

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TAG_NOT_DEFINED_c000000f:  FFFFF80000BA2FB0

TRAP_FRAME:  fffff80000b9c330 -- (.trap 0xfffff80000b9c330)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa80084dd000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88007a1ae8d rsp=fffff80000b9c4c0 rbp=fffffa800886a500
 r8=0000000000000000  r9=0000000000000000 r10=fffff80002e3ee80
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
Rt64win7+0x18e8d:
fffff880`07a1ae8d 418bc6          mov     eax,r14d
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ccb569 to fffff80002ccbfc0

STACK_TEXT:  
fffff800`00b9c1e8 fffff800`02ccb569 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff800`00b9c1f0 fffff800`02cca1e0 : fffff800`00040001 00000000`0000000f 00000000`00000000 fffffa80`084dd000 : nt!KiBugCheckDispatch+0x69
fffff800`00b9c330 fffff880`07a1ae8d : 00000000`00000000 00000000`00000000 fffff800`00b9c660 fffff800`02dba421 : nt!KiPageFault+0x260
fffff800`00b9c4c0 00000000`00000000 : 00000000`00000000 fffff800`00b9c660 fffff800`02dba421 fffff800`02e40100 : Rt64win7+0x18e8d


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Rt64win7+18e8d
fffff880`07a1ae8d 418bc6          mov     eax,r14d

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  Rt64win7+18e8d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Rt64win7

IMAGE_NAME:  Rt64win7.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4e81e2b9

FAILURE_BUCKET_ID:  X64_0xD1_Rt64win7+18e8d

BUCKET_ID:  X64_0xD1_Rt64win7+18e8d

Followup: MachineOwner
---------

0: kd> lmvm Rt64win7
start             end                 module name
fffff880`07a02000 fffff880`07aa2000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: [COLOR="red"]Rt64win7.sys[/COLOR]
    Timestamp:        [COLOR="Red"]Tue Sep 27 20:50:33 2011[/COLOR] (4E81E2B9)
    CheckSum:         0009FB77
    ImageSize:        000A0000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Get the latest drivers for Broadcom 802.11g Network Adapter - Dell Wireless 1390 WLAN Mini-Card.

2: kd> lmvm bcmwl664
start             end                 module name
fffff880`072c9000 fffff880`07582000   bcmwl664 T (no symbols)           
    Loaded symbol image file: bcmwl664.sys
    Image path: \SystemRoot\system32\DRIVERS\bcmwl664.sys
    Image name: [COLOR="red"]bcmwl664.sys[/COLOR]
    Timestamp:        [COLOR="red"]Fri Oct 23 23:32:30 2009[/COLOR] (4AE1E8AE)
    CheckSum:         002C4C85
    ImageSize:        002B9000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Let us know the results

 

[schwartz31]

Thx for reply. I'm done with everything u said, just scan left to take care and..

I'm scanning with MSE atm. And have one question. My PC using ASUS W-card model: WL-138G V2. You said to update my W-card Dell Wireless?

Get the latest drivers for Broadcom 802.11g Network Adapter - Dell Wireless 1390 WLAN Mini-Card.

My bad i forgot to add model for my Wireless card in first post. So should i install Dell driver or download from ASUS for my model ? thx

 

[koolkat77]

Yes you can do that and sorry I forgot to post the link to it, Driver Reference Table

 

[schwartz31]

Another BSOD occurred. :\ Dell Wireless driver was installed. Last dmp file is in attachment.

MSE and Malwarebytes says nothing about infections.
Last Realtek drivers are installed.
Currently Wireless driver is installed from ASUS site for win7 x64. Tell me if im doing something wrong..

http://www.asus.com/Networks/Wireless_Adapters/WL138g_V2/#download

Also Daemon tools has been removed from system.

Thx.

 

[koolkat77]

STOP 0x0000003B: SYSTEM_SERVICE_EXCEPTION  
Usual causes:  System service, Device driver, graphics driver, ?memory
BugCheck 3B, {c0000005, fffff80002f9c210, fffff88009477700, 0}
Probably caused by : ntkrnlmp.exe ( nt!ObDereferenceSecurityDescriptor+20 )
PROCESS_NAME:  uTorrent.exe

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
• Guide to using Memtest86+ - Geeks to Go Forums

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.
Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.
If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.
If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.
If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.
3. Test the next stick of RAM (stick #2) in the next motherboard slot.
If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.
If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.
4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

 

[schwartz31]

Test is still working (more then 10hours). So far no errors.
Do i need to test each stick if test doesnt say any error at the end?

I have one more graph. card available for testing. if its graph card fault. Let me know what to do next.

Thx for help so far. Really appreciate.

 

[koolkat77]

OK, test the ram that way later. And yes you could try the other graphics card

Keep us posted

 

[schwartz31]

Here we go again. :banghead: After changing graph. cards. both PC's was working ok till this morning. dmp file is in attachment.

Back to RAM tests i guess. Or should i try to do something new?

 

[koolkat77]

Proceed with ram test, I will let you know if I find anything interesting from the .dmp

Edit: Looks like the drivers weren't updated.

Check if this link is helpful: Broadcom Wireless Win64bit BSOD bcmwl664.sys Fix - RRTech...The SOURCE for Extreme Liquid Cooling or this Downloads | Broadcom

3: kd> lmvm bcmwl664
start             end                 module name
fffff880`05664000 fffff880`0591d000   bcmwl664 T (no symbols)           
    Loaded symbol image file: bcmwl664.sys
    Image path: \SystemRoot\system32\DRIVERS\bcmwl664.sys
    Image name: bcmwl664.sys
    Timestamp:        Fri Oct 23 23:32:30 2009 (4AE1E8AE)
    CheckSum:         002C4C85
    ImageSize:        002B9000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[schwartz31]

Don't know what to say about that.. I did install latest driver from ASUS site.

Ok. now this driver is installed on my pc. (from your first link) Be back later with news. thx

Edit. two more times bsod occurred in interval of 1h - 1 1/2h

 

[koolkat77]

Okay, good luck

 

[schwartz31]

One more bsod for good morning. :banghead: Wireless driver is probably again problem.

 

[Arc]

Well, update these drivers one by one ......

► NEC Electronics USB 3.0 Host Controller Driver

lmvm nusb3xhc   
start             end                 module name
fffff880`04000000 fffff880`04039000   nusb3xhc   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\nusb3xhc.sys
    [COLOR=Red]Image name: nusb3xhc.sys
    Timestamp:        Tue Oct 25 06:27:38 2011 [/COLOR](4EA60982)
    CheckSum:         0003598F
    ImageSize:        00039000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04

Update it from Support/Design | Renesas Electronics

► Broadcom 802.11g Network Adapter - Dell Wireless 1390 WLAN Mini-Card

lmvm bcmwl664
start             end                 module name
fffff880`0567a000 fffff880`05933000   bcmwl664   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\bcmwl664.sys
    Image name: bcmwl664.sys
    Timestamp:        Fri Oct 23 23:02:30 2009 (4AE1E8AE)
    CheckSum:         002C4C85
    ImageSize:        002B9000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e

Search it in your manufacturer's website .... and search in Downloads | Broadcom too, but perhaps it may not be there.

► Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC

lmvm Rt64win7
start             end                 module name
fffff880`0597e000 fffff880`059b0000   Rt64win7   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
   [COLOR=Red] Image name: Rt64win7.sys
    Timestamp:        Thu Feb 26 14:34:13 2009[/COLOR] (49A65B0D)
    CheckSum:         000361A5
    ImageSize:        00032000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update it from Realtek

► Disable USB Selective Suspense.
http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html

** if you dont use the wireless adapter, does it still crash? Can you test the adapter in another computer? that might be a faulty one.

Let us know the results.

 

[schwartz31]

NEC Electronics USB 3.0 Host Controller Driver

3.0.23.0 version installed.

Downloads | Broadcom <-- there is no drivers for my W-card. At least i can't find them.

PCI\VEN_14E4&DEV_4318&SUBSYS_100F1043&REV_02
PCI\VEN_14E4&DEV_4318&SUBSYS_100F1043
PCI\VEN_14E4&DEV_4318&CC_028000
PCI\VEN_14E4&DEV_4318&CC_0280

W-card drivers - Currently is installed from manufacturer's website ASUS.

Driver date: 10/23/2009
Driver version: 5.60.18.41

If is there any newer driver can u please tell me?

ASUS W-card model: WL-138G V2

Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC

Currently version installed 7.061 from your link.

Disable USB Selective Suspense.

Disabled

What do you mean by " if you dont use the wireless adapter, does it still crash? "
When it's removed from Motherboard? Or while im not online on the Net?

(I removed once my wireless card from pc. And bsod occurred again. That was before i asked for help here.)

I have two more computers in my house, beside this one i use. One is similar to my spec. with x64 win7 OS. other one is very old, using win xp sp3. The question is: Can i test W-card on old computer with win xp ? If is my W-card faulty, will the problem keep happening on older windows version like xp ? (I'm asking this because other part of family are using this computer all day. But i can take old computer for testing..)

Please let me know.

 

[Arc]

If the problem is with the network adapter, it will crash everywhere.

And, as you are saying that you have removed it once and it still crashed, ae may give the adapter a benefit of doubt for the time being.

Follow the other steps, let us know the results. OK?

 

[schwartz31]

Ok.

W-card is installed on old computer, and i'm sharing net connection through UTP cable to my pc.

Be back later with news.

 

[schwartz31]

Blue screen without wireless card. What should i do next? I done everything from your post.

 

[Arc]

Strange, coz this time it is crashed on the latest realtek driver.

fffff880`029d13b8  fffff880`05806c3fUnable to load image \SystemRoot\system32\DRIVERS\Rt64win7.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
 Rt64win7+0x6c3f
----------------------------
lmvm rt64win7
start             end                 module name
fffff880`05800000 fffff880`058b3000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        Tue Jun 12 19:30:29 2012 (4FD74B7D)
    CheckSum:         000B8CFC
    ImageSize:        000B3000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

As a test, you Uninstall ESET, and use Microsoft Security Essentials - Microsoft Windows.

Also, Scan the system for possible virus infection.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Let us know the results.

 

[schwartz31]

Eset is uninstalled from my system. and im using Microsoft Security Essentials with malwarebytes.

Will do more scanning. be back with news.