Random BSOD new PC

[Kzyto]

Hi all,

I am from The Netherlands and i hope i can explain my problem clearly for you guys.
Cuase there is no very good Dutch site wich can help me with my problems i hope this site will help.

I have now my new home built pc for a week. When arrived just installed everyting and installed Windows 7 64bit.

After a few minutes running Win 7 the horror began.
This is a log file i copied.

Logboeknaam: System
Bron: Microsoft-Windows-Kernel-Power
Datum: 26-6-2010 19:17:39
Gebeurtenis-id:41
Taakcategorie: (63)
Niveau: Kritiek
Trefwoorden: (2)
Gebruiker: SYSTEM
Computer: Jeffrey-PC
Beschrijving:
The system did not properly shit down. This fault is probably caused because the system is not responding or power loss.
Gebeurtenis-XML:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2010-06-26T17:17:39.073622000Z" />
<EventRecordID>2149</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Jeffrey-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">209</Data>
<Data Name="BugcheckParameter1">0xfffffa804d48745c</Data>
<Data Name="BugcheckParameter2">0x6</Data>
<Data Name="BugcheckParameter3">0x1</Data>
<Data Name="BugcheckParameter4">0xfffff88004110c54</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

So what i tried.. Installing Windows XP.
XP runs more stable But also gives me BSOD. They happen random. Sometimes when i am replacing files. Sometimes during a game and also when the computer is just idle and i am sitting at the couch.

Memtest gave no problems.
Tried 1 RAM module
Tried other PCIE slot for my graphic card

Also have tried different drivers but i just can not find what its the main problem.

I also have Debugdiag but dont know have it works. Windbg gave me this log

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\WINDOWS\Minidump\Mini070110-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: D:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Thu Jul 1 01:09:24.003 2010 (UTC + 2:00)
System Uptime: 0 days 2:45:22.044
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
.....................................................
Loading User Symbols
Loading unloaded module list
.................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c000001d, 805832e0, a5431ab1, 0}

Probably caused by : hardware ( nt!SeQueryInformationToken+204 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c000001d, The exception code that was not handled
Arg2: 805832e0, The address that the exception occurred at
Arg3: a5431ab1, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {UITZONDERING} Ongeldige instructie Er is geprobeerd een ongeldige instructie uit te voeren.

FAULTING_IP:
nt!SeQueryInformationToken+204
805832e0 ff ???

TRAP_FRAME: a5431ab1 -- (.trap 0xffffffffa5431ab1)
ErrCode = 00000000
eax=00000000 ebx=8a044508 ecx=60010002 edx=60000001 esi=8a06ed00 edi=00000000
eip=805832e0 esp=a5431b25 ebp=a5433a78 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!SeQueryInformationToken+0x204:
805832e0 ff ???
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: wuauclt.exe

MISALIGNED_IP:
nt!SeQueryInformationToken+204
805832e0 ff ???

UNALIGNED_STACK_POINTER: a5431b25

LAST_CONTROL_TRANSFER: from 8a4f8900 to 805832e0

FAILED_INSTRUCTION_ADDRESS:
nt!SeQueryInformationToken+204
805832e0 ff ???

STACK_TEXT:
a5433a78 8a4f8900 00000000 00000000 8a4f88e8 nt!SeQueryInformationToken+0x204
WARNING: Frame IP not in any known module. Following frames may be wrong.
a5433b60 805bf460 8a4f8900 00000000 89f1fcb8 0x8a4f8900
a5433bd8 805bb9ec 00000000 a5433c18 00000040 nt!MiFindExportedRoutineByName+0x7e
a5433c2c 80576033 00000000 00000000 00000001 nt!IopInitializeDCB+0xc2
a5433ca8 805769aa 0007e694 00100080 0007e654 nt!SeAssignSecurity+0xa
a5433d04 8057a1a9 0007e694 00100080 0007e654 nt!SepDuplicateToken+0x22a
a5433d44 8054163c 0007e694 00100080 0007e654 nt!RtlFreeHeap+0x193
a5433d64 7c90e514 badb0d00 0007e608 00fbfafa nt!RtlIpv4StringToAddressExW+0xbd
a5433d78 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!SeQueryInformationToken+204
805832e0 ff ???

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!SeQueryInformationToken+204

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: hardware

FAILURE_BUCKET_ID: IP_MISALIGNED

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner

The last bsod about 15min ago when a game was loading i got PAGE FAULT IN NON PAGED AREA. Ati3duag.dll

Yesterday i got IRQL NOT LESS OR EQUAL

Please help !

 

[ttran]

Please update your minidump:
http://www.sevenforums.com/crash-lockup-debug-how/34900-1-novice-how-ask-help-bsod-problem.html

 

[Kzyto]

nobody who can help me ?
today had a bsod STOP 0x0000008E

and just also had a 0x000000D1 viahduaa.sys BSOD

 

[ttran]

Sorry I just realized you are using window xp. Are you sure your system support winxp?

 

[Davidxtux]

Even though you are running Windows XP you might have windows 7 drivers for your hardware. Make sure you have the most current legacy drivers and not windows 7.

 

[Kzyto]

i will try to make a dual boot system system so i can test xp and win 7.

 

[Kzyto]

Well i installed Win 7 64 bits now and even when it is installing i had a bsod... i added the minidump... please help it is really getting frustrating.

 

[ttran]

Hi friend

Sorry for leaving your case for 11 hours

STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED

Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

Hardware was blamed in the dmp file

Please run:
http://www.sevenforums.com/tutorials/433-disk-check.html
then, HD Diagnostic <--Instruction

I suspect the CPU too, please run prime95:
Prime95 <--Instruction

Download third party called memtestx86, burn it to CD using Iso recorder: ISO Recorder v3 , and let it run for at least 6 passes

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : hardware ( nt!KiKernelCalloutExceptionHandler+e )

Followup: MachineOwner
---------

Regard,

Tuan

 

[Kzyto]

Still nothing found...
Did the CPU stress test nothing wrong
Did the HDtune test.. HDD is fine
Memtest last week 12 hour run without errors.

Did not had a bsod today ... bit strange....

 

[Kzyto]

Well i thought it was going very well untill now...
2 bsod in 2 minutes...

here are the minidumps
Hope they tell anything...

 

[Kzyto]

Booohooo and another bsod i am crying here.....

 

[Kzyto]

So there is nobody who can tell me anymore what the problem could be ? What can i do ? Bring the computer to a specialist ? Change hardware piece by piece ?

Had a bsod when booting cold state...

 

[ttran]

STOP 0x0000007F: UNEXPECTED_KERNEL_MODE_TRAP http://www.carrona.org/bsodindx.html#top

Usual causes: Memory corruption, Hardware (memory in particular), Installing a faulty or mismatched hardware (especially memory) or a failure after installing it, 3rd party firewall, Device drivers, SCSI/network/BIOS updates needed, Improperly seated cards, Incompatible storage devices, Overclocking, Virus scanner, Backup tool, Bad motherboard, Missing Service Pack

First of all, please do system file check: http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

If you haven't done memtestx86, please do so, the stop code is 7F, in which memory corruption is potential cause, here is the instruction: Memory Diagnostics

Please enable Driver Verifier, it will flag bad drivers, then we will know what to tell you:
http://www.sevenforums.com/crash-lo...-driver-verifier-identify-issues-drivers.html

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\TUANTR~1\AppData\Local\Temp\Rar$DI00.001\070910-18376-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*e:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02862000 PsLoadedModuleList = 0xfffff800`02a9fe50
Debug session time: Fri Jul  9 21:33:07.315 2010 (UTC + 7:00)
System Uptime: 0 days 0:00:19.125
Loading Kernel Symbols
...............................................................
................................................................
.......
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 6f8, fffff800028bcc1c}

Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )

Followup: MachineOwner
---------

Regard,

Tuan

 

[Kzyto]

Well i did the scannow test and radardt.dll seems te be currupt. After replacing the file it still reports its corrupt :S

I also used driver verifier but i don`t know if it went ok.. this is the latest bsod dmp file.

 

[ttran]

STOP 0x0000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED http://www.carrona.org/bsodindx.html#top

Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control,

This one was caused by atikmdag.sys, which is your graphic card driver. Please download and install fresh copy of it (keep in mind to remove all trace of old ATi driver before installing new one)

Also, run this video stress test:
http://www.carrona.org/furmark.html

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\TUANTR~1\AppData\Local\Temp\Rar$DI00.593\071010-17877-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*e:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02814000 PsLoadedModuleList = 0xfffff800`02a51e50
Debug session time: Sat Jul 10 17:31:41.543 2010 (UTC + 7:00)
System Uptime: 0 days 0:22:22.369
Loading Kernel Symbols
...............................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
.....
Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc000001d, fffff880048a315c, fffff88006cb5e78, fffff88006cb56e0}

Probably caused by : atikmdag.sys ( atikmdag+6f15c )

Followup: MachineOwner
---------

Did you get this BSODs after turning on Driver Verifier?
Regard,

Tuan

 

[Kzyto]

yes the latest bsod file i added was after i turned on driver verifier...

Formark used for 45min... max temp 83... worked fine without problems..

edit: added dump file... just had another bsod while playing a game.

 

[Kzyto]

Just had 2 bsod. 1 bsod immidiately after win 7 reboot because of a bsod.

 

[Jonathan_King]

I have a bad video card as a potential solution in mind, but let's do software first.

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads

Your Atheros L1c PCI-E Gigabit Ethernet Controller drivers were blamed by one dump, for what it's worth. They are dated pre-Windows 7 RTM:

L1C62x64.sys Wed Apr 01 01:09:17 2009

You should update them to the latest version.

Let us know when you have completed those two steps and post any new dmps, if the crashes continue.

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Jul 10 17:01:44.346 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:52.172
BugCheck 1E, {0, 0, 0, 0}
Probably caused by : ntkrnlmp.exe ( nt!KiKernelCalloutExceptionHandler+e )
BUGCHECK_STR:  0x1E_0
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Jul 10 17:00:20.364 2010 (UTC - 4:00)
System Uptime: 0 days 0:23:55.190
BugCheck D1, {fffff8804b344fa0, b, 1, fffff8800498acd8}
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : hardware ( atikmdag+e7cd8 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Jul 10 16:35:56.215 2010 (UTC - 4:00)
System Uptime: 0 days 2:51:30.041
BugCheck A, {48, 2, 1, fffff8000296ca5f}
Probably caused by : memory_corruption ( nt!MiIdentifyPfn+26f )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Jul 10 13:43:31.651 2010 (UTC - 4:00)
System Uptime: 0 days 7:09:14.102
BugCheck E6, {f, 3, fffff88002e51830, 0}
*** WARNING: Unable to verify timestamp for L1C62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for L1C62x64.sys
Probably caused by : L1C62x64.sys ( L1C62x64+5d3a )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xE6
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
[/font]

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\_jcgriff2_\dbug\__Kernel__\071010-16863-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02868000 PsLoadedModuleList = 0xfffff800`02aa5e50
Debug session time: Sat Jul 10 17:01:44.346 2010 (UTC - 4:00)
System Uptime: 0 days 0:00:52.172
Loading Kernel Symbols
...............................................................
................................................................
.............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiKernelCalloutExceptionHandler+e )

Followup: MachineOwner
---------

3: kd> !analyze -v;lmtsmn;.bugcheck;.logclose;q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

FAULTING_IP: 
+6338333632653166
00000000`00000000 ??              ???

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

ERROR_CODE: (NTSTATUS) 0 - STATUS_WAIT_0

BUGCHECK_STR:  0x1E_0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  System

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88002ffda18 -- (.exr 0xfffff88002ffda18)
.exr 0xfffff88002ffda18
ExceptionAddress: fffffa800560e2d6
   ExceptionCode: c000001d (Illegal instruction)
  ExceptionFlags: 00000000
NumberParameters: 0

TRAP_FRAME:  fffff88002ffdac0 -- (.trap 0xfffff88002ffdac0)
.trap 0xfffff88002ffdac0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000aec85 rbx=0000000000000000 rcx=fffffa8005e86640
rdx=fffffa8005e86468 rsi=0000000000000000 rdi=0000000000000000
rip=fffffa800560e2d6 rsp=fffff88002ffdc58 rbp=0000000000000001
 r8=0000000000000000  r9=000000000fd0e30c r10=0000000000009ede
r11=fffffa80039c40ec r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl zr na po nc
fffffa80`0560e2d6 ??              ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800028d032e to fffff800028d85d0

STACK_TEXT:  
fffff880`02ffcb08 fffff800`028d032e : 00003c45`00003c47 fffff800`00003c46 fffff880`02ffd280 fffff800`02905524 : nt!KeBugCheck
fffff880`02ffcb10 fffff800`028fe2ed : fffff800`02ae6edc fffff800`02a2503c fffff800`02868000 fffff880`02ffda18 : nt!KiKernelCalloutExceptionHandler+0xe
fffff880`02ffcb40 fffff800`02905950 : fffff800`02a27b24 fffff880`02ffcbb8 fffff880`02ffda18 fffff800`02868000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02ffcb70 fffff800`029128df : fffff880`02ffda18 fffff880`02ffd280 fffff880`00000000 00000000`00000001 : nt!RtlDispatchException+0x410
fffff880`02ffd250 fffff800`028d7c42 : fffff880`02ffda18 00000000`00000000 fffff880`02ffdac0 fffff880`02fd5180 : nt!KiDispatchException+0x16f
fffff880`02ffd8e0 fffff800`028d5d9f : fffff880`02ffdac0 00000000`00000000 fffffa80`06387900 fffff800`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`02ffdac0 fffffa80`0560e2d6 : 00000000`00000000 00000000`000aec85 fffff880`03efb7f2 00000000`00000010 : nt!KiInvalidOpcodeFault+0x11f
fffff880`02ffdc58 00000000`00000000 : 00000000`000aec85 fffff880`03efb7f2 00000000`00000010 00000000`00000246 : 0xfffffa80`0560e2d6


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiKernelCalloutExceptionHandler+e
fffff800`028d032e 90              nop

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!KiKernelCalloutExceptionHandler+e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

FAILURE_BUCKET_ID:  X64_0x1E_0_VRF_nt!KiKernelCalloutExceptionHandler+e

BUCKET_ID:  X64_0x1E_0_VRF_nt!KiKernelCalloutExceptionHandler+e

Followup: MachineOwner
---------

start             end                 module name
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02ccc000 fffff880`02d56000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04000000 fffff880`04016000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03ef8000 fffff880`03f0d000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`011c2000 fffff880`011cd000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`0118f000 fffff880`01198000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01198000 fffff880`011c2000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`0506f000 fffff880`05092000   AtiHdmi  AtiHdmi.sys  Thu May 06 05:20:39 2010 (4BE289E7)
fffff880`04837000 fffff880`04f13000   atikmdag atikmdag.sys Thu May 27 12:47:58 2010 (4BFEA23E)
fffff880`03f0d000 fffff880`03f53000   atikmpag atikmpag.sys Thu May 27 12:25:36 2010 (4BFE9D00)
fffff880`04f69000 fffff880`04fae000   axxy6g1b axxy6g1b.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`015f9000 fffff880`01600000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03ec1000 fffff880`03ed2000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02b79000 fffff880`02b97000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00630000 fffff960`00657000   cdd      cdd.dll      unavailable (00000000)
fffff880`01060000 fffff880`0108a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01200000 fffff880`01230000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cfb000 fffff880`00d59000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`014e5000 fffff880`01558000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`041db000 fffff880`041eb000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05153000 fffff880`05161000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e20000 fffff880`03ea3000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03ea3000 fffff880`03ec1000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03e11000 fffff880`03e20000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0143a000 fffff880`01450000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`050cf000 fffff880`050f1000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0516d000 fffff880`05176000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05161000 fffff880`0516d000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05176000 fffff880`05189000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`051f3000 fffff880`051ff000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0403a000 fffff880`0412e000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`0412e000 fffff880`04174000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0104c000 fffff880`01060000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01000000 fffff880`0104c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01569000 fffff880`01573000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0162b000 fffff880`01675000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`0281f000 fffff800`02868000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04174000 fffff880`04198000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`050f7000 fffff880`05153000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`051b6000 fffff880`051cf000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`051cf000 fffff880`051d7080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`051a8000 fffff880`051b6000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02ab1000 fffff880`02b79000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`017f6000 fffff880`017ff000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03f6d000 fffff880`03f7c000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`051d8000 fffff880`051e6000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba6000 fffff800`00bb0000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03f8b000 fffff880`03fce000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`014cb000 fffff880`014e5000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01600000 fffff880`0162b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`050f1000 fffff880`050f6200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`04198000 fffff880`041aa000   L1C62x64 L1C62x64.sys Wed Apr 01 01:09:17 2009 (49D2F6FD)
fffff880`02a84000 fffff880`02a99000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02a61000 fffff880`02a84000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cda000 fffff880`00ce7000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`03fe0000 fffff880`03fee000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03f7c000 fffff880`03f8b000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`051e6000 fffff880`051f3000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`01175000 fffff880`0118f000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02b97000 fffff880`02baf000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02baf000 fffff880`02bdc000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`02a00000 fffff880`02a4e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`02bdc000 fffff880`02bff000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00fe6000 fffff880`00ff1000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e57000 fffff880`00e61000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0146d000 fffff880`014cb000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`00ff1000 fffff880`00ffc000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e4000 fffff880`017f6000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01692000 fffff880`01784000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`041eb000 fffff880`041f7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04fae000 fffff880`04fdd000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0505a000 fffff880`0506f000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02dca000 fffff880`02dd9000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d56000 fffff880`02d9b000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01784000 fffff880`017e4000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02c90000 fffff880`02ca1000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02868000 fffff800`02e44000   nt       ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
fffff880`0125d000 fffff880`01400000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0124c000 fffff880`01255000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02da4000 fffff880`02dca000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`010d8000 fffff880`010ed000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`010a5000 fffff880`010d8000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0115e000 fffff880`01165000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`01165000 fffff880`01175000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01558000 fffff880`01569000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0681a000 fffff880`068c0000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05092000 fffff880`050cf000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ce7000 fffff880`00cfb000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04016000 fffff880`0403a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04fdd000 fffff880`04ff8000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04800000 fffff880`04821000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03f53000 fffff880`03f6d000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04821000 fffff880`0482c000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`011f2000 fffff880`011fb000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01098000 fffff880`010a1000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`00e7e000 fffff880`00e87000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`015bf000 fffff880`015f9000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02a99000 fffff880`02ab1000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`00fb7000 fffff880`00fe6000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`068c0000 fffff880`068cb000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`041c6000 fffff880`041d2000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02dd9000 fffff880`02df6000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01685000 fffff880`0168d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`00e88000 fffff880`00fae000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`06a9d000 fffff880`06b35000   srv      srv.sys      Tue Dec 08 03:32:55 2009 (4B1E0F37)
fffff880`0690a000 fffff880`06973000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`068cb000 fffff880`068f8000   srvnet   srvnet.sys   Tue Dec 08 03:32:26 2009 (4B1E0F1A)
fffff880`041f7000 fffff880`041f8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`068f8000 fffff880`0690a000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02cbf000 fffff880`02ccc000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02ca1000 fffff880`02cbf000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005a0000 fffff960`005aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03ed2000 fffff880`03ef8000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03fce000 fffff880`03fe0000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05189000 fffff880`051a6000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`051a6000 fffff880`051a7f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`041b5000 fffff880`041c6000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05000000 fffff880`0505a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`041aa000 fffff880`041b5000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04f13000 fffff880`04f69000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00e61000 fffff880`00e6e000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0108a000 fffff880`01098000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`011cd000 fffff880`011f2000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01675000 fffff880`01685000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`010ed000 fffff880`01102000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01102000 fffff880`0115e000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01573000 fffff880`015bf000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`00e6e000 fffff880`00e7e000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d59000 fffff880`00dfd000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00cc0000 fffff880`00ccf000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d9b000 fffff880`02da4000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys   unavailable (00000000)
fffff880`041d2000 fffff880`041db000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fae000 fffff880`00fb7000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`01450000 fffff880`0145e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0145e000 fffff880`0146a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01230000 fffff880`01239000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01239000 fffff880`0124c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

 

[Kzyto]

Thanks for your reply.. I updated the atheros Lan driver. I dont think deamon tools is causing the bsod. Even when windows is just installed and only running with basic drivers it will crash.. I will try it now with the updated driver and will add the dump file when it crashes.

 

[Jonathan_King]

SPTD.sys is a low-level driver that will load even in Safe Mode! For that reason, I ask that you remove Daemon Tools. If it turns out it is not the cause, you can always reinstall it.