Memory corruption or something else?

su1c1dal · Jan 3, 2011

BSOD - Memory corruption or something else?

evening guys,

been having a few random hard locks over the last week or so - mainly while gaming. now not everyone bsods, in fact a couple of them have just rebooted the system without a bsod. i have attached the 2 dump files i have related to these crashes and the bsod screen via bluescreenreview - apologies if this is wrong.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\010211-23306-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*[URL="http://msdl.microsoft.com/download/symbols"]Symbol information[/URL]
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e0f000 PsLoadedModuleList = 0xfffff800`0304ce50
Debug session time: Sun Jan  2 20:58:26.272 2011 (UTC + 0:00)
System Uptime: 0 days 1:35:01.818
Loading Kernel Symbols
..................................................  .............
..................................................  ..............
............................................
Loading User Symbols
Loading unloaded module list
.....
**************************************************  *****************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
**************************************************  *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 1cdfb, 2, 1cddd}

Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )

Followup: MachineOwner
---------

2: kd> !analyze -v
**************************************************  *****************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
**************************************************  *****************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 000000000001cdfb, page frame number
Arg3: 0000000000000002, current page state
Arg4: 000000000001cddd, 0

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_99

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  BlackOpsMP.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002f0f38c to fffff80002e7f740

STACK_TEXT:  
fffff880`0943f718 fffff800`02f0f38c : 00000000`0000004e 00000000`00000099 00000000`0001cdfb 00000000`00000002 : nt!KeBugCheckEx
fffff880`0943f720 fffff800`02e25281 : fffff880`07be2000  ba700000`1cdfb96b fffffa80`00569f10 fffffa80`041deb60 :  nt!MiBadShareCount+0x4c
fffff880`0943f760 fffff800`0322f260 : fffff880`07be2000  fffff800`0000001e fffffa80`06b3aa60 fffff880`05185e00 : nt! ??  ::FNODOBFM::`string'+0x2e21d
fffff880`0943f8b0 fffff800`0322f333 : fffff8a0`02af61e0  fffff880`0943fca0 fffff8a0`0bd46000 fffffa80`05f3b000 :  nt!MiRemoveFromSystemSpace+0x1d0
fffff880`0943f910 fffff880`0519ab1e : fffffa80`05671de0  fffff880`0519b5fd 00000000`00000000 00000000`00000000 :  nt!MmUnmapViewInSystemSpace+0x73
fffff880`0943f940 fffff880`051a97b7 : 00000000`40000140  fffffa80`0686e010 fffff880`0943fca0 00000000`00000174 :  dxgmms1!VIDMM_GLOBAL DestroyOneAllocation+0x146
fffff880`0943fa20 fffff880`0518324b : fffffa80`03e379a0  00000000`75212450 fffffa80`6d4d6956 00000000`00000174 :  dxgmms1!VIDMM_DMA_POOL::RemoveDmaBufferFromPool+0x  117
fffff880`0943fa70 fffff880`051831d3 : fffff8a0`0de71860  00000000`fffa7000 fffff8a0`0acefc40 00000000`40000140 :  dxgmms1!VIDMM_DMA_POOL::`scalar deleting destructor'+0x6b
fffff880`0943faa0 fffff880`050d53f9 : fffff8a0`0acefc00  fffff8a0`0de71860 00000000`00000000 00000000`fffa7000 :  dxgmms1!VidMmDestoryDmaPool+0x13
fffff880`0943fad0 fffff880`050d729d : fffff8a0`0de71860  fffff8a0`0de71860 fffff880`0943fca0 00000000`fffa7000 :  dxgkrnl!DXGCONTEXTDestroy+0x16d
fffff880`0943fb50 fffff880`050d4366 : 00000000`0df4dc74  fffffa80`041deb60 fffff880`0943fbc8 00000000`07a7e7c8 :  dxgkrnl!DXGDEVICEDestroyContext+0xb9
fffff880`0943fb80 fffff960`001eba06 : 00000000`00000020  ffffffff`ffb3b400 00000000`000007f8 00000000`75245f70 :  dxgkrnl!DxgkDestroyContext+0x1a6
fffff880`0943fbf0 fffff800`02e7e993 : fffffa80`041deb60  fffff880`0943fca0 00000000`fffa7000 fffffa80`04110060 :  win32k!NtGdiDdDDIDestroyContext+0x12
fffff880`0943fc20 00000000`7526121a : 00000000`00000000  00000000`00000000 00000000`00000000 00000000`00000000 :  nt!KiSystemServiceCopyEnd+0x13
00000000`07a7e808 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7526121a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`02f0f38c cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\010211-23150-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*[URL="http://msdl.microsoft.com/download/symbols"]Symbol information[/URL]
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e67000 PsLoadedModuleList = 0xfffff800`030a4e50
Debug session time: Sun Jan  2 22:14:06.310 2011 (UTC + 0:00)
System Uptime: 0 days 1:14:51.245
Loading Kernel Symbols
..................................................  .............
..................................................  ..............
............................................
Loading User Symbols
Loading unloaded module list
.....
**************************************************  *****************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
**************************************************  *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d8994426c2, b3b7465eebc1f6a8, fffff80002e2871c, 1}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

3: kd> !analyze -v
**************************************************  *****************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
**************************************************  *****************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See [URL="http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx"]http://www.microsoft.com/whdc/driver...tPatching.mspx[/URL]
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d8994426c2, Reserved
Arg2: b3b7465eebc1f6a8, Reserved
Arg3: fffff80002e2871c, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification

Debugging Details:
------------------


BUGCHECK_STR:  0x109

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ed7740

STACK_TEXT:  
fffff880`031bd5d8 00000000`00000000 : 00000000`00000109 a3a039d8`994426c2 b3b7465e`ebc1f6a8 fffff800`02e2871c : nt!KeBugCheckEx


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !hal
    fffff80002e28796 - hal!HalpHpetClockInterruptWork+7a
    [ 15:55 ]
1 error : !hal (fffff80002e28796)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption

rand memtest for a good 6 or so hours with no errors at all, anyone have a clue whats going on - as this is doing my pickle now and it's hit and miss weather i can have a game without crashing/locking up.

CarlTR6 · Jan 3, 2011

Hi and welcome to the forum. I see a number of files are missing in your upload. I looked at your three most recent dumps. Each has a different error code, two directly blame memory corruption, and the other indicated memory corruption. This points to a hardware/hardware related (drivers) issue.

Uninstall Trusteer Rapport. It is known to cause BSOD's on Win 7 systems. Here is some reading on this software. Online Banking Security | Trusteer,

MPECS Inc. Blog: Windows 7 BSODs – RapportPG64.sys is the Culprit

I recommend that you uninstall TuneUp Utilities. Windows 7 is a totally different operating system than XP. Win 7 is not an evolution from XP. It is a totally new OS and even changed from Vista. Thus the wisdom we learned about XP - tweaking, cleaning, modifying for speed, etc - do not apply at all to Win 7. Forget that knowledge.

Windows is a closed source system. Developers of tuneup utilities and registry cleaners do not have the core code of Win 7 and are not working on definitive information, but rather they are going on past knowledge and experience, most of which is not applicable to Win 7. Automatic cleaners will usually have to do some guesswork.

There is almost no tweaking that can be done to Win 7 to speed it up. The system is designed to diagnose itself and take care of itself which it does remarkably well. Win 7 maintains itself and that includes the registry.

Tuneup utilities are pure snake oil. At best they do nothing except use resources. At worst, they can mess your system up, slowing it down, and even crash it. There is no tuneup utility out there anywhere that can speed Win 7 up and improve its performance, at least not at this time.

This isn't to say that the system does not need to be maintained. Uninstall programs that you don't use, delete unneeded and unnecessary files. Defrag your hard drive. But don't screw with the registry unless you are an in depth expert in the Win 7 registry.

We have seen the adverse effects of tuneup utilities and registry cleaners and registry defraggers in the Crashes and Debugging Section. Most of the time, the cure is a clean install. Using a program such as Ccleaner is fine to get rid of old and unnecessary files. A tuneup utility is not only unneeded, it can actually harm your system. Don't use them.

If you are overclocking anything, return to default values.

Another cause of memory corruption are out of date drivers. These can and do cause conflicts, memory corruption and BSOD's. I find these outdated drivers loaded on your system. The ones in red font are really obsolete. Some are XP drivers. Update the following drivers through the links provided or uninstall the software they are associated with.

ADIHdAud.sys Thu May 21 04:21:06 2009 - SoundMAX Digital HD Audio Driver. OEM - none at Analog Devices | Mixed-signal and Digital Signal Processing ICs. Try to update this driver through computer manufacturer's or motherboard manufacturer's website.

Alpham164.sys Mon Jul 23 03:57:03 2007 - Ideazon ZBoard/Ideazon ZBoard Fang MM USB HID. http://www.steelseries.com/download.

Alpham264.sys Tue Mar 20 05:51:03 2007 - Ideazon ZBoard/Ideazon ZBoard Fang MM USB HID. http://www.steelseries.com/download.

AsIO.sys Mon Apr 06 03:21:08 2009 - Asus PCProbe Utility. ASUSTeK Computer Inc.-Support-.

KMWDFILTER.sys Wed Apr 29 02:20:48 2009 - UASSOFT.com HID (mouse) Driver Suspect that this is a Kensington Mouse Works driver - but there's nothing listed here AFAIK: ÆóÒµµç×ÓÓÊ¾Ö. Update the driver or upgrade your mouse.

se64a.sys Thu May 03 01:50:31 2007 - EnTech softEngine. EnTech Taiwan. This utility is obsolete. Uninstall it.

yk62x64.sys Mon Feb 23 10:02:27 2009 - NDIS6.2 Miniport Drive, Marvell: Support.

Follow these suggestions and see how your systems does.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c4f000 PsLoadedModuleList = 0xfffff800`02e8ce50
Debug session time: Thu Dec 23 16:17:57.096 2010 (GMT-5)
System Uptime: 0 days 0:50:21.032
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002fbbede, fffff88002a21b90, 0}

Probably caused by : ntkrnlmp.exe ( nt!ObpGetObjectSecurity+46 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002fbbede, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88002a21b90, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ObpGetObjectSecurity+46
fffff800`02fbbede 48398598000000  cmp     qword ptr [rbp+98h],rax

CONTEXT:  fffff88002a21b90 -- (.cxr 0xfffff88002a21b90)
rax=fffff80002f8621c rbx=fffff88002a22648 rcx=fffff80002dc5abb
rdx=0000000000000100 rsi=fffff88002a22690 rdi=fffff80002dc5a8b
rip=fffff80002fbbede rsp=fffff88002a22560 rbp=0000000000000000
 r8=fffff88002a22690  r9=0000000000000001 r10=0000000000000001
r11=0000000000000001 r12=fffff80002dc5abb r13=0000000000000000
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ObpGetObjectSecurity+0x46:
fffff800`02fbbede 48398598000000  cmp     qword ptr [rbp+98h],rax ss:0018:00000000`00000098=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  RapportMgmtSer

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002fbbede

STACK_TEXT:  
fffff880`02a22560 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObpGetObjectSecurity+0x46


FOLLOWUP_IP: 
nt!ObpGetObjectSecurity+46
fffff800`02fbbede 48398598000000  cmp     qword ptr [rbp+98h],rax

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ObpGetObjectSecurity+46

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff88002a21b90 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ObpGetObjectSecurity+46

BUCKET_ID:  X64_0x3B_nt!ObpGetObjectSecurity+46

Followup: MachineOwner
---------

Debug session time: Sun Jan  2 15:58:26.272 2011 (GMT-5)
System Uptime: 0 days 1:35:01.818
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 1cdfb, 2, 1cddd}

Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 000000000001cdfb, page frame number
Arg3: 0000000000000002, current page state
Arg4: 000000000001cddd, 0

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_99

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  BlackOpsMP.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002f0f38c to fffff80002e7f740

STACK_TEXT:  
fffff880`0943f718 fffff800`02f0f38c : 00000000`0000004e 00000000`00000099 00000000`0001cdfb 00000000`00000002 : nt!KeBugCheckEx
fffff880`0943f720 fffff800`02e25281 : fffff880`07be2000 ba700000`1cdfb96b fffffa80`00569f10 fffffa80`041deb60 : nt!MiBadShareCount+0x4c
fffff880`0943f760 fffff800`0322f260 : fffff880`07be2000 fffff800`0000001e fffffa80`06b3aa60 fffff880`05185e00 : nt! ?? ::FNODOBFM::`string'+0x2e21d
fffff880`0943f8b0 fffff800`0322f333 : fffff8a0`02af61e0 fffff880`0943fca0 fffff8a0`0bd46000 fffffa80`05f3b000 : nt!MiRemoveFromSystemSpace+0x1d0
fffff880`0943f910 fffff880`0519ab1e : fffffa80`05671de0 fffff880`0519b5fd 00000000`00000000 00000000`00000000 : nt!MmUnmapViewInSystemSpace+0x73
fffff880`0943f940 fffff880`051a97b7 : 00000000`40000140 fffffa80`0686e010 fffff880`0943fca0 00000000`00000174 : dxgmms1!VIDMM_GLOBAL::DestroyOneAllocation+0x146
fffff880`0943fa20 fffff880`0518324b : fffffa80`03e379a0 00000000`75212450 fffffa80`6d4d6956 00000000`00000174 : dxgmms1!VIDMM_DMA_POOL::RemoveDmaBufferFromPool+0x117
fffff880`0943fa70 fffff880`051831d3 : fffff8a0`0de71860 00000000`fffa7000 fffff8a0`0acefc40 00000000`40000140 : dxgmms1!VIDMM_DMA_POOL::`scalar deleting destructor'+0x6b
fffff880`0943faa0 fffff880`050d53f9 : fffff8a0`0acefc00 fffff8a0`0de71860 00000000`00000000 00000000`fffa7000 : dxgmms1!VidMmDestoryDmaPool+0x13
fffff880`0943fad0 fffff880`050d729d : fffff8a0`0de71860 fffff8a0`0de71860 fffff880`0943fca0 00000000`fffa7000 : dxgkrnl!DXGCONTEXT::Destroy+0x16d
fffff880`0943fb50 fffff880`050d4366 : 00000000`0df4dc74 fffffa80`041deb60 fffff880`0943fbc8 00000000`07a7e7c8 : dxgkrnl!DXGDEVICE::DestroyContext+0xb9
fffff880`0943fb80 fffff960`001eba06 : 00000000`00000020 ffffffff`ffb3b400 00000000`000007f8 00000000`75245f70 : dxgkrnl!DxgkDestroyContext+0x1a6
fffff880`0943fbf0 fffff800`02e7e993 : fffffa80`041deb60 fffff880`0943fca0 00000000`fffa7000 fffffa80`04110060 : win32k!NtGdiDdDDIDestroyContext+0x12
fffff880`0943fc20 00000000`7526121a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`07a7e808 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7526121a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`02f0f38c cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner
---------

Debug session time: Sun Jan  2 17:14:06.310 2011 (GMT-5)
System Uptime: 0 days 1:14:51.245
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d8994426c2, b3b7465eebc1f6a8, fffff80002e2871c, 1}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See [URL="http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx"]Patching Policy for x64-Based Systems: Information for Driver Developers[/URL]
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d8994426c2, Reserved
Arg2: b3b7465eebc1f6a8, Reserved
Arg3: fffff80002e2871c, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification

Debugging Details:
------------------


BUGCHECK_STR:  0x109

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ed7740

STACK_TEXT:  
fffff880`031bd5d8 00000000`00000000 : 00000000`00000109 a3a039d8`994426c2 b3b7465e`ebc1f6a8 fffff800`02e2871c : nt!KeBugCheckEx


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !hal
    fffff80002e28796 - hal!HalpHpetClockInterruptWork+7a
    [ 15:55 ]
1 error : !hal (fffff80002e28796)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

3: kd> lmtsmn
start             end                 module name
fffff880`03e00000 fffff880`03e3e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f6c000 fffff880`00fc3000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`05200000 fffff880`05279000   ADIHdAud ADIHdAud.sys Thu May 21 04:21:06 2009 (4A150EF2)
fffff880`02caa000 fffff880`02d34000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`042ba000 fffff880`042d0000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`053e8000 fffff880`053f4f00   Alpham164 Alpham164.sys Mon Jul 23 03:57:03 2007 (46A45F4F)
fffff880`053f5000 fffff880`053fa500   Alpham264 Alpham264.sys Tue Mar 20 05:51:03 2007 (45FFAE87)
fffff880`01134000 fffff880`0113f000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`048de000 fffff880`048e6000   ASACPI   ASACPI.sys   Wed May 13 21:25:17 2009 (4A0B72FD)
fffff880`03f0f000 fffff880`03f15000   AsIO     AsIO.sys     Mon Apr 06 03:21:08 2009 (49D9AD64)
fffff880`067bf000 fffff880`067ca000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`01101000 fffff880`0110a000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0110a000 fffff880`01134000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`0533a000 fffff880`0535a000   AtihdW76 AtihdW76.sys Fri Sep 24 01:44:48 2010 (4C9C3AD0)
fffff880`048e9000 fffff880`050fa000   atikmdag atikmdag.sys Thu Nov 25 21:46:44 2010 (4CEF1F94)
fffff880`03f51000 fffff880`03f9d000   atikmpag atikmpag.sys Thu Nov 25 21:16:47 2010 (4CEF188F)
fffff960`008d0000 fffff960`00931000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`01930000 fffff880`01937000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03efe000 fffff880`03f0f000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04713000 fffff880`04731000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00630000 fffff960`00657000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`0273f000 fffff880`0275c000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`018eb000 fffff880`01915000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d02000 fffff880`00dc2000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01885000 fffff880`018b5000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ca4000 fffff880`00d02000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0186d000 fffff880`0187d000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`047e7000 fffff880`047ef000   cpuz132_x64 cpuz132_x64.sys Thu Mar 26 19:17:23 2009 (49CC0D03)
fffff880`047ef000 fffff880`047f8000   cpuz134_x64 cpuz134_x64.sys Fri Jul 09 07:16:58 2010 (4C37052A)
fffff880`0275c000 fffff880`0276a000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e5d000 fffff880`03ee0000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03ee0000 fffff880`03efe000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`06744000 fffff880`0674e000   dgderdrv dgderdrv.sys Tue Jul 20 21:56:51 2010 (4C4653E3)
fffff880`0185e000 fffff880`0186d000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`00fd6000 fffff880`00fec000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05397000 fffff880`053b9000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`02776000 fffff880`0277f000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0276a000 fffff880`02776000   dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0277f000 fffff880`02792000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05279000 fffff880`05285000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`050fa000 fffff880`051ee000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04800000 fffff880`04846000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02619000 fffff880`026f1000   eamonm   eamonm.sys   Fri Aug 13 08:38:55 2010 (4C653CDF)
fffff880`01937000 fffff880`0195c000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`02712000 fffff880`0273f000   epfw     epfw.sys     Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`019f4000 fffff880`019ff000   Epfwndis Epfwndis.sys Wed Jul 14 04:10:31 2010 (4C3D70F7)
fffff880`04600000 fffff880`04611000   epfwwfp  epfwwfp.sys  Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`051ee000 fffff880`051fb000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`0118b000 fffff880`0119f000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0531a000 fffff880`05325000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`0113f000 fffff880`0118b000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`00c00000 fffff880`00c3a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0142b000 fffff880`01475000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`03e4a000 fffff880`03e57000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02e1e000 fffff800`02e67000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04846000 fffff880`0486a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05293000 fffff880`052ac000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`052ac000 fffff880`052b4080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05285000 fffff880`05293000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0464b000 fffff880`04713000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01235000 fffff880`0123e000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03f3b000 fffff880`03f51000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04390000 fffff880`0439f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04299000 fffff880`042a7000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bcc000 fffff800`00bd6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`053dc000 fffff880`053e8000   KMWDFILTER KMWDFILTER.sys Wed Apr 29 02:20:48 2009 (49F7F1C0)
fffff880`043b0000 fffff880`043f3000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`053b9000 fffff880`053be200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02792000 fffff880`027a7000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`018b5000 fffff880`018d8000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c4c000 fffff880`00c90000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`042a7000 fffff880`042b5000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0439f000 fffff880`043ae000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`053bf000 fffff880`053cc000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`010e7000 fffff880`01101000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04731000 fffff880`04749000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04749000 fffff880`04776000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04776000 fffff880`047c4000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`047c4000 fffff880`047e7000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`019ba000 fffff880`019c5000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fcc000 fffff880`00fd6000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0119f000 fffff880`011fd000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02def000 fffff880`02dfa000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015ee000 fffff880`01600000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0149c000 fffff880`0158e000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`042f4000 fffff880`04300000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06729000 fffff880`0673c000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04300000 fffff880`0432f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05325000 fffff880`0533a000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02dbc000 fffff880`02dcb000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d34000 fffff880`02d79000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0158e000 fffff880`015ee000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019c5000 fffff880`019d6000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c9a000 fffff880`02ca6000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e67000 fffff800`03443000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0124d000 fffff880`013f0000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01927000 fffff880`01930000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`066d6000 fffff880`06729000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02d82000 fffff880`02da8000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`010d0000 fffff880`010d7000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`010d7000 fffff880`010e7000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06047000 fffff880`060ed000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`053cc000 fffff880`053dc000   point64  point64.sys  Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`0535a000 fffff880`05397000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c90000 fffff880`00ca4000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01915000 fffff880`01927000   RapportPG64 RapportPG64.sys Sun Oct 03 17:40:07 2010 (4CA8F837)
fffff880`042d0000 fffff880`042f4000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0432f000 fffff880`0434a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0434a000 fffff880`0436b000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0436b000 fffff880`04385000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0180d000 fffff880`0185e000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04385000 fffff880`04390000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0199f000 fffff880`019a8000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019a8000 fffff880`019b1000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019b1000 fffff880`019ba000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`00dc2000 fffff880`00dfc000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`027a7000 fffff880`027bf000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02c90000 fffff880`02c9a000   SASDIFSV64 SASDIFSV64.SYS Mon Feb 08 19:11:52 2010 (4B70A848)
fffff880`02c86000 fffff880`02c90000   SASKUTIL64 SASKUTIL64.SYS Tue Feb 09 17:27:34 2010 (4B71E156)
fffff880`02de8000 fffff880`02def000   se64a    se64a.sys    Thu May 03 01:50:31 2007 (46397827)
fffff880`060ed000 fffff880`060f8000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03e3e000 fffff880`03e4a000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02dcb000 fffff880`02de8000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0148d000 fffff880`01494000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffff880`01485000 fffff880`0148d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06640000 fffff880`066d6000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06137000 fffff880`0619e000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`060f8000 fffff880`06125000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`043ae000 fffff880`043af480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06125000 fffff880`06137000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01800000 fffff880`0180d000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019d6000 fffff880`019f4000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c72000 fffff880`02c86000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004f0000 fffff960`004fa000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0673c000 fffff880`06744000   TuneUpUtilitiesDriver64 TuneUpUtilitiesDriver64.sys Thu Sep 17 07:54:52 2009 (4AB2238C)
fffff880`03f15000 fffff880`03f3b000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04200000 fffff880`04212000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0427c000 fffff880`04299000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0423e000 fffff880`0423ff00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`048cd000 fffff880`048de000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`052c0000 fffff880`0531a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04877000 fffff880`048cd000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0422f000 fffff880`0423e000   usbrpm   usbrpm.sys   Mon Jul 13 20:35:14 2009 (4A5BD2C2)
fffff880`0486a000 fffff880`04877000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0195c000 fffff880`0196a000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0196a000 fffff880`0198f000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01475000 fffff880`01485000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01074000 fffff880`010d0000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00e6a000 fffff880`00eb6000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04240000 fffff880`0427c000   vpchbus  vpchbus.sys  Tue Sep 22 21:32:32 2009 (4AB97AB0)
fffff880`02da8000 fffff880`02dbc000   vpcnfltr vpcnfltr.sys Tue Sep 22 21:32:30 2009 (4AB97AAE)
fffff880`04212000 fffff880`0422f000   vpcusb   vpcusb.sys   Tue Sep 22 21:32:39 2009 (4AB97AB7)
fffff880`02c1b000 fffff880`02c71180   vpcvmm   vpcvmm.sys   Tue Sep 22 21:32:38 2009 (4AB97AB6)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0198f000 fffff880`0199f000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00eb9000 fffff880`00f5d000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f5d000 fffff880`00f6c000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d79000 fffff880`02d82000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`00fc3000 fffff880`00fcc000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`026f1000 fffff880`02712000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`03f9d000 fffff880`04000000   yk62x64  yk62x64.sys  Mon Feb 23 10:02:27 2009 (49A2BA83)

Unloaded modules:
fffff880`0674e000 fffff880`067bf000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018b5000 fffff880`018c3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018c3000 fffff880`018cf000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018cf000 fffff880`018d8000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018d8000 fffff880`018eb000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

su1c1dal · Jan 4, 2011

cheers for that carl,

what files were missing? and do you need them or are you able to have a best guestimate of whats what?

have gotten rid of the the items you mentioned, tune was a free key that i had and was only used as a reg/junk cleaner anyways.

as for the drivers side of things, asus only have one soundmax/audio driver for my p45 chipset & win7 x64 - the same one i have now, if it continues then will reinstall it but as it messes with all my audio inc teamspeak and gaming it will be done cautionary.

merc stealth k/b drivers/software appear to be the same but updated anyway.

pc probe has gone, never found it that helpful - speed fan & real temp much better.

KMWDFILTER.sys - can only think that that maybe something to do with my cheap wireless mouse, it's never given any issues before and i've been using it for a couple of years as cant use my ms sidewinder for general stuff - only gaming. plus it's using a windows driver afaik as in PnP. would it just be easier to get rid of that file then?

CarlTR6 · Jan 4, 2011

I think we can make do with the files we have, for now anyway. I was looking for msinfo32 and the perfmon report in particular. Good job with Probe and TuneUp Utilities. If you would like a good cleaner that works well with Win 7, I suggest Ccleaner (free). A number of us here uese it. It is well written software.

Yes, apparently KMWDFILTER.sys is a mouse driver. It is a Vista driver and it may work. If it does not, you will have to upgrade your mouse. A driver can be causing conflicts while the hardware or software the driver belongs to works fine. You can rename it from KMWDFILTER.sys to KMWDFILTER.old, reboot and it will not load. Doing this will break whatever the drivers belongs to. What about the ZBoard drivers? Were you able to update them?

su1c1dal · Jan 5, 2011

CarlTR6 said:
I think we can make do with the files we have, for now anyway. I was looking for msinfo32 and the perfmon report in particular. Good job with Probe and TuneUp Utilities. If you would like a good cleaner that works well with Win 7, I suggest Ccleaner (free). A number of us here uese it. It is well written software.

Yes, apparently KMWDFILTER.sys is a mouse driver. It is a Vista driver and it may work. If it does not, you will have to upgrade your mouse. A driver can be causing conflicts while the hardware or software the driver belongs to works fine. You can rename it from KMWDFILTER.sys to KMWDFILTER.old, reboot and it will not load. Doing this will break whatever the drivers belongs to. What about the ZBoard drivers? Were you able to update them?

i'm sure the perfmon.html file was in the main zip file carl - just checked and it's there, or is that not the right one? will change that sys file to old and see what happens. as i said lastnight, the zboard package is the same - but i did an uninstall and reinstall.

su1c1dal · Jan 5, 2011

here is a fresh upload with all the files, the perfmon file is there as a seperate file in the zip.

CarlTR6 · Jan 5, 2011

Got them and thanks. The perfmon report worked just fine.

I did find some additional outdated drivers. The Garmin drivers may be OK; they are Vista drivers and they may work.

grmn0400.sys 11/05/2009 - GARMIN USB HS DATACARD PROGRAMMER (install) W4R3. Garmin | Software

grmn1200.sys 11/05/2009 - grmn1200 driver .Garmin | Software

grmngen.sys 12/05/2009 - Garmin driver. I cannot find the specific purpose. Garmin | Software

grmnusb.sys 08/05/2009 - Garmin USB GPS. Garmin | Software

AsInsHelp32.sys 04/01/2008 - Asus Data Security Manager Driver. ASUSTeK Computer Inc.-Support-.

AsInsHelp64.sys 04/01/2008 - ASUS TurboV Remote V1.00.13 for Windows 32/64bit XP & 32/64bit Vista & 32/64bit Driver. ASUSTeK Computer Inc.-Support-.

su1c1dal · Jan 10, 2011

right it's been fine upto now. but earlier it just did a reboot of it's own accord. just finished 20mins of gaming, closed the game down (maifa2 on steam just to clarify) and checked the gpu temp which was 60°c. opened up firefox and a few seconds later bamm - now bluescreen nothing of warning just blackscreen and auto reboot

looking at the monitors all the temps were fine - well nothing out of the ordinary.

attached is a zip of the latest dump files. if nothing else this is becoming a bit frustrating.

CarlTR6 · Jan 10, 2011

I am still seeing outdated drivers loaded on your system. Third party drivers with dates of 2008 and earlier are sure trouble for Win 7.

ADIHdAud.sys Thu May 21 04:21:06 2009 - SoundMAX Digital HD Audio Driver. OEM - none at Analog Devices | Mixed-signal and Digital Signal Processing ICs. Try to update this driver through computer manufacturer's or motherboard manufacturer's website. If you cannot update the driver, upgrade your sound card to one certified compatible with Win 7.

Alpham164.sys Mon Jul 23 03:57:03 2007 - Ideazon ZBoard/Ideazon ZBoard Fang MM USB HID. http://www.steelseries.com/download. Uninstall ZBoard it is obsolete.

Alpham264.sys Tue Mar 20 05:51:03 2007 - Ideazon ZBoard/Ideazon ZBoard Fang MM USB HID. http://www.steelseries.com/download. See above.

AsIO.sys Mon Apr 06 03:21:08 2009 - Asus PCProbe Utility. ASUSTeK Computer Inc.-Support-. Update PCProbe or uninstall it.

yk62x64.sys Mon Feb 23 10:02:27 2009 - NDIS6.2 Miniport Drive, Marvell: Support. Update this driver.

You may have more going on than obsolete drivers; but until you update or eliminate them, you will continue to be frustrated. I suggest after you take care of all of your obsolete drivers, that you test your RAM with Memtest following the instructions in this tutorial: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html. Run Memtest from a cold boot after your computer has been off for an hour or two. Let it run for at least seven passes; this will take 6-8 hours. Post back with your results.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e4f000 PsLoadedModuleList = 0xfffff800`0308ce50
Debug session time: Mon Jan 10 12:09:07.677 2011 (GMT-5)
System Uptime: 0 days 1:35:43.612
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d8969596d4, b3b7465ee91268ca, fffff80002ebf710, 1}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See [url=http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx]Patching Policy for x64-Based Systems: Information for Driver Developers[/url]
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d8969596d4, Reserved
Arg2: b3b7465ee91268ca, Reserved
Arg3: fffff80002ebf710, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification

Debugging Details:
------------------


BUGCHECK_STR:  0x109

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ebf740

STACK_TEXT:  
fffff880`031af5d8 00000000`00000000 : 00000000`00000109 a3a039d8`969596d4 b3b7465e`e91268ca fffff800`02ebf710 : nt!KeBugCheckEx


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff80002ebf716 - nt!KiBugCheckReturn+2
    [ 00:40 ]
1 error : !nt (fffff80002ebf716)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

2: kd> lmtsmn
start             end                 module name
fffff880`041b2000 fffff880`041f0000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f7f000 fffff880`00fd6000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`04549000 fffff880`045c2000   ADIHdAud ADIHdAud.sys Thu May 21 04:21:06 2009 (4A150EF2)
fffff880`02cfa000 fffff880`02d84000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0403c000 fffff880`04052000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`02cda000 fffff880`02ce6f00   Alpham164 Alpham164.sys Mon Jul 23 03:57:03 2007 (46A45F4F)
fffff880`051f6000 fffff880`051fb500   Alpham264 Alpham264.sys Tue Mar 20 05:51:03 2007 (45FFAE87)
fffff880`00de0000 fffff880`00deb000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04000000 fffff880`04008000   ASACPI   ASACPI.sys   Wed May 13 21:25:17 2009 (4A0B72FD)
fffff880`03f32000 fffff880`03f38000   AsIO     AsIO.sys     Mon Apr 06 03:21:08 2009 (49D9AD64)
fffff880`0819b000 fffff880`081a6000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00dad000 fffff880`00db6000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00db6000 fffff880`00de0000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`044c4000 fffff880`044e4000   AtihdW76 AtihdW76.sys Fri Sep 24 01:44:48 2010 (4C9C3AD0)
fffff880`0484e000 fffff880`0505f000   atikmdag atikmdag.sys Thu Nov 25 21:46:44 2010 (4CEF1F94)
fffff880`03f74000 fffff880`03fc0000   atikmpag atikmpag.sys Thu Nov 25 21:16:47 2010 (4CEF188F)
fffff960`00870000 fffff960`008d1000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`018ec000 fffff880`018f3000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03f21000 fffff880`03f32000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03b2a000 fffff880`03b48000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`03b0d000 fffff880`03b2a000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`018b9000 fffff880`018e3000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cd3000 fffff880`00d93000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01853000 fffff880`01883000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c75000 fffff880`00cd3000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01116000 fffff880`01189000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04021000 fffff880`04031000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03a36000 fffff880`03a3e000   cpuz132_x64 cpuz132_x64.sys Thu Mar 26 19:17:23 2009 (49CC0D03)
fffff880`02792000 fffff880`0279b000   cpuz134_x64 cpuz134_x64.sys Fri Jul 09 07:16:58 2010 (4C37052A)
fffff880`03a00000 fffff880`03a0e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e80000 fffff880`03f03000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03f03000 fffff880`03f21000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`08120000 fffff880`0812a000   dgderdrv dgderdrv.sys Tue Jul 20 21:56:51 2010 (4C4653E3)
fffff880`03e71000 fffff880`03e80000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0183d000 fffff880`01853000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04521000 fffff880`04543000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`03a1a000 fffff880`03a23000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`03a0e000 fffff880`03a1a000   dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`03a23000 fffff880`03a36000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04400000 fffff880`0440c000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0505f000 fffff880`05153000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05153000 fffff880`05199000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0263f000 fffff880`02717000   eamonm   eamonm.sys   Fri Aug 13 08:38:55 2010 (4C653CDF)
fffff880`018f3000 fffff880`01918000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`02738000 fffff880`02765000   epfw     epfw.sys     Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`04031000 fffff880`0403c000   Epfwndis Epfwndis.sys Wed Jul 14 04:10:31 2010 (4C3D70F7)
fffff880`0279b000 fffff880`027ac000   epfwwfp  epfwwfp.sys  Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`041f0000 fffff880`041fd000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010a4000 fffff880`010b8000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`044a4000 fffff880`044af000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01058000 fffff880`010a4000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01803000 fffff880`0183d000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01189000 fffff880`011d3000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04014000 fffff880`04021000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02e06000 fffff800`02e4f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`05199000 fffff880`051bd000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`045d0000 fffff880`045e9000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`045e9000 fffff880`045f1080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`045c2000 fffff880`045d0000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`03a45000 fffff880`03b0d000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015ed000 fffff880`015f6000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03f5e000 fffff880`03f74000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04800000 fffff880`0480f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02ce7000 fffff880`02cf5000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba7000 fffff800`00bb1000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`019bd000 fffff880`01a00000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013d4000 fffff880`013ee000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01591000 fffff880`015bc000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04543000 fffff880`04548200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02765000 fffff880`0277a000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`01891000 fffff880`018b4000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c1d000 fffff880`00c61000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`01883000 fffff880`01891000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0480f000 fffff880`0481e000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`045f2000 fffff880`045ff000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d93000 fffff880`00dad000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03b48000 fffff880`03b60000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03b60000 fffff880`03b8d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`03b8d000 fffff880`03bdb000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`03bdb000 fffff880`03bfe000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01976000 fffff880`01981000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fdf000 fffff880`00fe9000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010b8000 fffff880`01116000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03e66000 fffff880`03e71000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015db000 fffff880`015ed000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0143f000 fffff880`01531000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04076000 fffff880`04082000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0810d000 fffff880`08120000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04082000 fffff880`040b1000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`044af000 fffff880`044c4000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c14000 fffff880`02c23000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d84000 fffff880`02dc9000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01531000 fffff880`01591000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01981000 fffff880`01992000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e5a000 fffff880`03e66000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e4f000 fffff800`0342b000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01231000 fffff880`013d4000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`018e3000 fffff880`018ec000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`080ba000 fffff880`0810d000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02dd2000 fffff880`02df8000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fe9000 fffff880`00ff0000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00ff0000 fffff880`01000000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013ee000 fffff880`013ff000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`064ae000 fffff880`06554000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03fcf000 fffff880`03fdf000   point64  point64.sys  Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`044e4000 fffff880`04521000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c61000 fffff880`00c75000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04052000 fffff880`04076000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`040b1000 fffff880`040cc000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`051ca000 fffff880`051eb000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`040cc000 fffff880`040e6000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e09000 fffff880`03e5a000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`051eb000 fffff880`051f6000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0195b000 fffff880`01964000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01964000 fffff880`0196d000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0196d000 fffff880`01976000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01400000 fffff880`0143a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0277a000 fffff880`02792000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02cd0000 fffff880`02cda000   SASDIFSV64 SASDIFSV64.SYS Mon Feb 08 19:11:52 2010 (4B70A848)
fffff880`02cc6000 fffff880`02cd0000   SASKUTIL64 SASKUTIL64.SYS Tue Feb 09 17:27:34 2010 (4B71E156)
fffff880`06554000 fffff880`0655f000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04008000 fffff880`04014000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c23000 fffff880`02c40000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015d4000 fffff880`015db000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffff880`015cc000 fffff880`015d4000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08024000 fffff880`080ba000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06400000 fffff880`06467000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`0655f000 fffff880`0658c000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`040e6000 fffff880`040e7480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0658c000 fffff880`0659e000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019b0000 fffff880`019bd000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01992000 fffff880`019b0000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02cb2000 fffff880`02cc6000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00410000 fffff960`0041a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03f38000 fffff880`03f5e000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`0481e000 fffff880`04830000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`03fdf000 fffff880`03ffc000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`041fd000 fffff880`041fef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0413e000 fffff880`0414f000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0444a000 fffff880`044a4000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`040e8000 fffff880`0413e000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`03fc0000 fffff880`03fcf000   usbrpm   usbrpm.sys   Mon Jul 13 20:35:14 2009 (4A5BD2C2)
fffff880`051bd000 fffff880`051ca000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01918000 fffff880`01926000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01926000 fffff880`0194b000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015bc000 fffff880`015cc000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0440e000 fffff880`0444a000   vpchbus  vpchbus.sys  Tue Sep 22 21:32:32 2009 (4AB97AB0)
fffff880`02c00000 fffff880`02c14000   vpcnfltr vpcnfltr.sys Tue Sep 22 21:32:30 2009 (4AB97AAE)
fffff880`04830000 fffff880`0484d000   vpcusb   vpcusb.sys   Tue Sep 22 21:32:39 2009 (4AB97AB7)
fffff880`02c5b000 fffff880`02cb1180   vpcvmm   vpcvmm.sys   Tue Sep 22 21:32:38 2009 (4AB97AB6)
fffff880`02c40000 fffff880`02c5b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0194b000 fffff880`0195b000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ecc000 fffff880`00f70000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f70000 fffff880`00f7f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dc9000 fffff880`02dd2000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003c0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`00fd6000 fffff880`00fdf000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02717000 fffff880`02738000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`0414f000 fffff880`041b2000   yk62x64  yk62x64.sys  Mon Feb 23 10:02:27 2009 (49A2BA83)

Unloaded modules:
fffff880`0812a000 fffff880`0819b000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01883000 fffff880`01891000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01891000 fffff880`0189d000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0189d000 fffff880`018a6000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018a6000 fffff880`018b9000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Memory corruption or something else?

su1c1dal

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

su1c1dal

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

su1c1dal

New member

My Computer

su1c1dal

New member

My Computer

CarlTR6

Antique Senior Member

My Computer

su1c1dal

New member

My Computer

CarlTR6

Antique Senior Member

My Computer