Random BSOD

yeyo03

New member
Local time
9:30 AM
Messages
21
I did the SF Diagnostic Tools It is upload on the top

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 1a
BCP1: 0000000000041790
BCP2: FFFFFA8004CFCB60
BCP3: 000000000000FFFF
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Please Help
 
Last edited:

My Computer

Computer type
PC/Desktop
OS
Windows 7 Professional 64bit
CPU
i5-3570k
Motherboard
P8H77V-LK
Memory
8GB
Graphics Card(s)
ASUS GeForce 650
Hard Drives
120GB SSD Crucial
1TB
3TB
Antivirus
Microsoft Security Essentials
Browser
Chrome

My Computer

Computer type
PC/Desktop
OS
Windows 10
CPU
Intel Core i5 3570K
Motherboard
Asus P8Z77V-PRO
Memory
16GB 1600Mhz G.Skill
Graphics Card(s)
Gigabyte GTX 970 G1-Gaming
PSU
Seasonic 1000W Platinum
Case
Fractal Design Define R4
Cooling
Noctua NH-D14
I have reuploaded the files it is 556Kb
 

My Computer

Computer type
PC/Desktop
OS
Windows 7 Professional 64bit
CPU
i5-3570k
Motherboard
P8H77V-LK
Memory
8GB
Graphics Card(s)
ASUS GeForce 650
Hard Drives
120GB SSD Crucial
1TB
3TB
Antivirus
Microsoft Security Essentials
Browser
Chrome
Your PC appears to be faulting due to an Asus related driver:
Bugcheck:
Code:
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff88009300e00, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff880089ba9b4, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)
Analysis:
Code:
STACK_TEXT:  
00000000`00000050 fffff880`09300e00 00000000`00000000 fffff880`08c6a980 : nt!KeBugCheckEx
00000000`00000000 fffff880`09300e00 fffffa80`20206f00 fffffa80`08fc7a50 : nt! ?? ::FNODOBFM::`string'+0x43836
00000000`20206f49 00000000`00000001 00000000`00000001 00000000`20206f49 : nt!KiPageFault+0x16e
00000000`00000001 00000000`00000001 00000000`20206f49 00000000`00000000 : [COLOR=Red][U][B]IOMap64[/B][/U][/COLOR]+0x19b4
00000000`00000001 00000000`20206f49 00000000`00000000 [COLOR=Blue][U][B]fffff880`089ba641[/B][/U][/COLOR] : [B]0x20206f49[/B]
00000000`20206f49 00000000`00000000 [COLOR=Blue][U][B]fffff880`089ba641[/B][/U][/COLOR] fffffa80`08e7cb30 : [B]0x1[/B]
00000000`00000000 [COLOR=Blue][U][B]fffff880`089ba641[/B][/U][/COLOR] fffffa80`08e7cb30 fffff800`02c8bfbc : [B]0x1[/B]
[COLOR=Blue][U][B]fffff880`089ba641[/B][/U][/COLOR] fffffa80`08e7cb30 fffff800`02c8bfbc ffffffff`ffffffff : [B]0x20206f49[/B]
By looking at the stack IOMap64 is clearly visible, but do you notice the pattern?


Code:
[B][COLOR=DarkOrchid]u[/COLOR][/B] [COLOR=Blue][U][B]fffff880`089ba641[/B][/U][/COLOR]
[COLOR=Red][U][B]IOMap64[/B][/U][/COLOR]+0x1641:
fffff880`089ba641 413bc4          cmp     eax,r12d
fffff880`089ba644 0f847efeffff    je      [U][B][COLOR=Red]IOMap64[/COLOR][/B][/U]+0x14c8 (fffff880`089ba4c8)
fffff880`089ba64a 48c7060c000000  mov     qword ptr [rsi],0Ch
fffff880`089ba651 eb67            jmp     [COLOR=Red][U][B]IOMap64[/B][/U][/COLOR]+0x16ba (fffff880`089ba6ba)
fffff880`089ba653 443927          cmp     dword ptr [rdi],r12d
fffff880`089ba656 750c            jne     [COLOR=Red][B][U]IOMap64[/U][/B][/COLOR]+0x1664 (fffff880`089ba664)
fffff880`089ba658 488b05c13a0000  mov     rax,qword ptr [[COLOR=Red][U][B]IOMap64[/B][/U][/COLOR]+0x5120 (fffff880`089be120)]
fffff880`089ba65f 493bc4          cmp     rax,r12
If we unassemble the program code we can clearly see
that IOMap64 is being called.


Code:
[COLOR=DarkOrchid][B]lmvm[/B][/COLOR] [COLOR=Red][U][B]IOMap64[/B][/U][/COLOR]
start             end                 module name
fffff880`089b9000 fffff880`089c2000   IOMap64  T (no symbols)           
    Loaded symbol image file: IOMap64.sys
    Image path: \??\C:\Windows\system32\drivers\IOMap64.sys
    Image name: IOMap64.sys
    Timestamp:        [COLOR=Red][U][B]Fri Feb 05 03:55:34 2010[/B][/U][/COLOR] (4B6B7A96)
    CheckSum:         00013681
    ImageSize:        00009000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
By running the lmvm command we can receive more information about the driver. We can see that it is very outdated by looking at it's Timestamp.


Remove all Asus related software and utilities!

 

My Computer

Computer type
PC/Desktop
OS
Windows 10
CPU
Intel Core i5 3570K
Motherboard
Asus P8Z77V-PRO
Memory
16GB 1600Mhz G.Skill
Graphics Card(s)
Gigabyte GTX 970 G1-Gaming
PSU
Seasonic 1000W Platinum
Case
Fractal Design Define R4
Cooling
Noctua NH-D14
Back
Top