Random BSODs, Bug Check 3b

[aln]

Win7 Ultimate 64bit.

Random BSODs every few days. Usually happens when I am
not sitting at the computer. All power saving options turned off.
No disk spin downs, etc.

(almost) Always at address ntoskrnl.exe+70740.

I am usually transferring 22Mbps of data 24x7 plus doing video
encodes (using the latest version of handbrake)

It is the original installed OS on the system
It is a full retail version (technet sub)

16gb of memory. memtest+ ran for 16 hours with no probs.

- What is the age of system (hardware)? All new parts.
- What is the age of OS installation (have you re-installed the OS?)
About 1.5 months. Did not re-install the OS.

One hardware device disabled (HD audio) that I never use (no speakers),

One former esata port multiplier device removed (Sil2132r ??) but the device
driver still has parts left behind. It generates a few system events messages
about the device driver not loaded, but who cares.

 

[fimble]

Hi aln and Welcome to SF!

ZoneAlarm Security and Firewall is known to be a cause of BSOD's on many Windows 7 systems. Download the ZoneAlarm Remover. Download Microsoft Security Essentials as its replacement. Uninstall ZoneAlarm through Programs and Features. Boot to safe mode and run the ZoneAlarm Remover. Reboot. Install MSE. Make sure that Windows Firewall is enabled.
Alternatively
Try this Microsoft hotfix if you wish to keep ZoneAlarm: Stop Error 0x07F when you run applications that transfer data using the UDP protocol in Win Server 2008 R2/Win 7" which I can neither verify or discount. It may work, it may not.

Will now check for outdated drivers from your latest dump file.

 

[fimble]

Bugchek Analysis

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000001000000006, Address of the instruction which caused the bugcheck
Arg3: fffff880063af030, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
+13
00000010`00000006 ??              ???

CONTEXT:  fffff880063af030 -- (.cxr 0xfffff880063af030)
rax=0000000000000000 rbx=fffffa800e9ac3a0 rcx=fffffa800e9ac3a0
rdx=fffffa800e9ac301 rsi=00000000041de9b0 rdi=0000001000000006
rip=0000001000000006 rsp=fffff880063afa08 rbp=fffff880063afca0
 r8=00000000056ff17c  r9=0000000000000008 r10=0000000000000000
r11=000000000012019f r12=0000000000000003 r13=0000000000000001
r14=000000008400008b r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
00000010`00000006 ??              ???
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  vsmon.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002fdc473 to 0000001000000006

STACK_TEXT:  
fffff880`063afa08 fffff800`02fdc473 : fffffa80`0e9ac3a0 fffffa80`00000000 fffffa80`0c78b080 fffffa80`0f7b5501 : 0x10`00000006
fffff880`063afa10 fffff800`02fdcf66 : fffff880`063afbf8 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x373
fffff880`063afb40 fffff800`02cc0993 : fffff880`063afca0 fffffa80`0fc4be70 fffff880`063afbf8 00000000`00000000 : nt!NtDeviceIoControlFile+0x56
fffff880`063afbb0 00000000`73f32dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`041de958 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73f32dd9


FOLLOWUP_IP: 
nt!IopXxxControlFile+373
fffff800`02fdc473 440fb6f0        movzx   r14d,al

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!IopXxxControlFile+373

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

STACK_COMMAND:  .cxr 0xfffff880063af030 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!IopXxxControlFile+373

BUCKET_ID:  X64_0x3B_nt!IopXxxControlFile+373

Followup: MachineOwner

Drivers:

fffff880`00f22000 fffff880`00f79000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
fffff880`03d42000 fffff880`03dcc000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`0451a000 fffff880`04530000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`011bf000 fffff880`011ca000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
fffff880`077f0000 fffff880`077fb000   asyncmac asyncmac.sys Tue Jul 14 01:10:13 2009 (4A5BCCE5)
fffff880`01181000 fffff880`0118a000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`0118a000 fffff880`011b4000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
fffff880`0423c000 fffff880`04268000   atikmpag atikmpag.sys Fri Dec 11 19:51:08 2009 (4B22A2AC)
fffff880`048aa000 fffff880`04eed000   atipmdag atipmdag.sys Fri Dec 11 20:33:38 2009 (4B22ACA2)
fffff880`02da4000 fffff880`02dab000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`043e7000 fffff880`043f8000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`06abc000 fffff880`06ada000   bowser   bowser.sys   Tue Jul 14 00:23:50 2009 (4A5BC206)
fffff960`00610000 fffff960`00637000   cdd      cdd.dll      unavailable (00000000)
fffff880`00cfd000 fffff880`00dbd000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
fffff880`011ca000 fffff880`011fa000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00c9f000 fffff880`00cfd000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01200000 fffff880`01273000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
fffff880`0450a000 fffff880`0451a000   CompositeBus CompositeBus.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`053ed000 fffff880`053f6000   cpuz134_x64 cpuz134_x64.sys Fri Jul 09 12:16:58 2010 (4C37052A)
fffff880`053f6000 fffff880`053ff000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 13:33:36 2010 (4CD94DB0)
fffff880`06d9f000 fffff880`06dad000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`04346000 fffff880`043c9000   csc      csc.sys      Tue Jul 14 00:24:26 2009 (4A5BC22A)
fffff880`043c9000 fffff880`043e7000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
fffff880`04337000 fffff880`04346000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`013e7000 fffff880`013fd000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`06d77000 fffff880`06d99000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`06dad000 fffff880`06dc0000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`02c00000 fffff880`02d54000   dump_iaStor dump_iaStor.sys Tue Sep 14 02:23:32 2010 (4C8ECE94)
fffff880`06dc0000 fffff880`06dcc000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`04eed000 fffff880`04fe1000   dxgkrnl  dxgkrnl.sys  Tue Nov 02 02:51:31 2010 (4CCF7CB3)
fffff880`04800000 fffff880`04846000   dxgmms1  dxgmms1.sys  Tue Nov 02 02:50:56 2010 (4CCF7C90)
fffff880`01331000 fffff880`01345000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`012e5000 fffff880`01331000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
fffff880`015d7000 fffff880`015e1000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`00c00000 fffff880`00c3a000   fvevol   fvevol.sys   Sat Sep 26 03:34:26 2009 (4ABD7DB2)
fffff880`0162b000 fffff880`01675000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
fffff800`02c08000 fffff800`02c51000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
fffff880`04846000 fffff880`0486a000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
fffff880`0763d000 fffff880`07656000   HIDCLASS HIDCLASS.SYS Tue Jul 14 01:06:21 2009 (4A5BCBFD)
fffff880`06a19000 fffff880`06a21080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`0762f000 fffff880`0763d000   hidusb   hidusb.sys   Tue Jul 14 01:06:22 2009 (4A5BCBFE)
fffff880`05200000 fffff880`052c8000   HTTP     HTTP.sys     Tue Jul 14 00:22:16 2009 (4A5BC1A8)
fffff880`017ef000 fffff880`017f8000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
fffff880`044dd000 fffff880`044fb000   i8042prt i8042prt.sys Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`0102d000 fffff880`01181000   iaStor   iaStor.sys   Tue Sep 14 02:23:32 2010 (4C8ECE94)
fffff880`04226000 fffff880`0423c000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`044fb000 fffff880`0450a000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`07656000 fffff880`07664000   kbdhid   kbdhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff800`00bc2000 fffff800`00bcc000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
fffff880`04402000 fffff880`04445000   ks       ks.sys       Thu Mar 04 04:32:25 2010 (4B8F37D9)
fffff880`015ac000 fffff880`015c6000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
fffff880`01600000 fffff880`0162b000   ksecpkg  ksecpkg.sys  Fri Dec 11 06:03:32 2009 (4B21E0B4)
fffff880`06d99000 fffff880`06d9e200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`06a8f000 fffff880`06aa4000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`06a4b000 fffff880`06a6e000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`00c47000 fffff880`00c8b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
fffff880`06a3d000 fffff880`06a4b000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`045f0000 fffff880`045ff000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`07664000 fffff880`07671000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`00dcd000 fffff880`00de7000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`02d6a000 fffff880`02d9b000   MpFilter MpFilter.sys Wed Sep 15 01:19:28 2010 (4C901110)
fffff880`07600000 fffff880`07610000   MpNWMon  MpNWMon.sys  Wed Sep 15 01:19:30 2010 (4C901112)
fffff880`052c8000 fffff880`052e0000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`0534f000 fffff880`0537c000   mrxsmb   mrxsmb.sys   Sat Feb 27 07:52:19 2010 (4B88CF33)
fffff880`0537c000 fffff880`053ca000   mrxsmb10 mrxsmb10.sys Sat Feb 27 07:52:28 2010 (4B88CF3C)
fffff880`053ca000 fffff880`053ed000   mrxsmb20 mrxsmb20.sys Sat Feb 27 07:52:26 2010 (4B88CF3A)
fffff880`011b4000 fffff880`011bf000   msahci   msahci.sys   Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`012cd000 fffff880`012d8000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00f82000 fffff880`00f8c000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`0134f000 fffff880`013ad000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
fffff880`0432c000 fffff880`04337000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`015e1000 fffff880`015f3000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`0169d000 fffff880`0178f000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`04554000 fffff880`04560000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`04560000 fffff880`0458f000   ndiswan  ndiswan.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`0533a000 fffff880`0534f000   NDProxy  NDProxy.SYS  Tue Jul 14 01:10:05 2009 (4A5BCCDD)
fffff880`03dcc000 fffff880`03ddb000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`03cfd000 fffff880`03d42000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
fffff880`0178f000 fffff880`017ef000   NETIO    NETIO.SYS    Fri Apr 09 03:43:59 2010 (4BBE946F)
fffff880`07190000 fffff880`071d5000   nfsrdr   nfsrdr.sys   Tue Jul 14 00:24:22 2009 (4A5BC226)
fffff880`0776a000 fffff880`0777f000   NisDrvWFP NisDrvWFP.sys Wed Sep 15 01:20:25 2010 (4C901149)
fffff880`01000000 fffff880`01011000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`04320000 fffff880`0432c000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`02c51000 fffff800`0322d000   nt       ntkrnlmp.exe Sat Jun 19 05:16:41 2010 (4C1C44A9)
fffff880`01409000 fffff880`015ac000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
fffff880`02d9b000 fffff880`02da4000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`03c9e000 fffff880`03cc4000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
fffff880`044c0000 fffff880`044dd000   parport  parport.sys  Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`00fcc000 fffff880`00fe1000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00f8c000 fffff880`00fbf000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
fffff880`00dbd000 fffff880`00dcd000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`015c6000 fffff880`015d7000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`07081000 fffff880`07127000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`06d3a000 fffff880`06d77000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00c8b000 fffff880`00c9f000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`04530000 fffff880`04554000   rasl2tp  rasl2tp.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`0458f000 fffff880`045aa000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`045aa000 fffff880`045cb000   raspptp  raspptp.sys  Tue Jul 14 01:10:18 2009 (4A5BCCEA)
fffff880`045cb000 fffff880`045e5000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`042cf000 fffff880`04320000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
fffff880`045e5000 fffff880`045f0000   rdpbus   rdpbus.sys   Tue Jul 14 01:17:46 2009 (4A5BCEAA)
fffff880`02dee000 fffff880`02df7000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`02df7000 fffff880`02e00000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`015f3000 fffff880`015fc000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`013ad000 fffff880`013e7000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
fffff880`07127000 fffff880`07146000   rpcxdr   rpcxdr.sys   Tue Jul 14 00:24:45 2009 (4A5BC23D)
fffff880`06aa4000 fffff880`06abc000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`0445d000 fffff880`044b4000   Rt64win7 Rt64win7.sys Fri Sep 03 06:58:32 2010 (4C808E88)
fffff880`06ade000 fffff880`06d39d80   RTKVHD64 RTKVHD64.sys Fri Sep 03 09:02:27 2010 (4C80AB93)
fffff880`07146000 fffff880`07151000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`044b4000 fffff880`044c0000   serenum  serenum.sys  Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`03ddb000 fffff880`03df8000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`0168d000 fffff880`01695000   SiRemFil SiRemFil.sys Wed Oct 18 23:20:39 2006 (4536A8B7)
fffff880`01345000 fffff880`0134f000   SiWinAcc SiWinAcc.sys Mon Nov 01 19:23:29 2004 (41868D31)
fffff880`01685000 fffff880`0168d000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`076d4000 fffff880`0776a000   srv      srv.sys      Fri Aug 27 04:38:00 2010 (4C773318)
fffff880`07000000 fffff880`07067000   srv2     srv2.sys     Fri Aug 27 04:37:46 2010 (4C77330A)
fffff880`07151000 fffff880`0717e000   srvnet   srvnet.sys   Fri Aug 27 04:37:24 2010 (4C7732F4)
fffff880`04400000 fffff880`04401480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Mon Jun 14 04:39:04 2010 (4C15A458)
fffff880`0717e000 fffff880`07190000   tcpipreg tcpipreg.sys Tue Jul 14 01:09:49 2009 (4A5BCCCD)
fffff880`03cf0000 fffff880`03cfd000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
fffff880`03cd2000 fffff880`03cf0000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
fffff880`00de7000 fffff880`00dfb000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`04200000 fffff880`04226000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
fffff880`04445000 fffff880`04457000   umbus    umbus.sys    Tue Jul 14 01:06:56 2009 (4A5BCC20)
fffff880`07610000 fffff880`0762d000   usbccgp  usbccgp.sys  Tue Jul 14 01:06:45 2009 (4A5BCC15)
fffff880`0762d000 fffff880`0762ef00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
fffff880`04877000 fffff880`04888000   usbehci  usbehci.sys  Tue Jul 14 01:06:30 2009 (4A5BCC06)
fffff880`052e0000 fffff880`0533a000   usbhub   usbhub.sys   Tue Jul 14 01:07:09 2009 (4A5BCC2D)
fffff880`04268000 fffff880`042be000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
fffff880`0486a000 fffff880`04877000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00fbf000 fffff880`00fcc000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`02dab000 fffff880`02db9000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`02db9000 fffff880`02dde000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`01675000 fffff880`01685000   vmstorfl vmstorfl.sys Tue Jul 14 00:42:54 2009 (4A5BC67E)
fffff880`00fe1000 fffff880`00ff6000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
fffff880`01273000 fffff880`012bf000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
fffff880`03c00000 fffff880`03c95000   vsdatant vsdatant.sys Sun May 09 17:28:58 2010 (4BE6E2CA)
fffff880`01011000 fffff880`0102c000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
fffff880`02dde000 fffff880`02dee000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00e6f000 fffff880`00f13000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00f13000 fffff880`00f22000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`03c95000 fffff880`03c9e000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003e0000   win32k   win32k.sys   Wed Oct 20 04:08:46 2010 (4CBE5D3E)
fffff880`00f79000 fffff880`00f82000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`06a6e000 fffff880`06a8f000   WudfPf   WudfPf.sys   Tue Jul 14 01:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06de9000 fffff880`06deb000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`06a00000 fffff880`06a19000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`06deb000 fffff880`06df9000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`06dcc000 fffff880`06de9000   usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001D000
fffff880`06a22000 fffff880`06a30000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`06a30000 fffff880`06a3d000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`0777f000 fffff880`077f0000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`012bf000 fffff880`012cd000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`02c03000 fffff880`02d57000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00154000
fffff880`02d57000 fffff880`02d6a000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

Outdated Drivers:

SiRemFil.sys Wed Oct 18 23:20:39 2006
SiWinAcc.sys Mon Nov 01 19:23:29 2004 Silicon Image driver

Drivers for Updating:

atikmpag.sys Fri Dec 11 19:51:08 2009
atipmdag.sys Fri Dec 11 20:33:38 2009 AMD/ATI Drivers

Rt64win7.sys Fri Sep 03 06:58:32 2010 Realtek LAN RTL811

RTKVHD64.sys Fri Sep 03 09:02:27 2010 Realtek HD Audio

 

[aln]

Thanks for the prompt replies. (Really, it is very much appreciated.)

I'll have to think of my plan of attack. My probable order of attack is:

1. Fix the old ATI drivers
2. Try replacing ZA
3. Consider the 2008R2 UDP fix

I'll do these one by one to see if it resolves it. Of course, there is no
definitive way to cause the errors, so I'll consider 7 days of no BSODs
to be success.

Thanks.

 

[fimble]

Good idea to split the changes. But I'd put ZoneAlarm as #1 Top Priority

 

[aln]

Well, I uninstalled and deleted the ATI drivers (confirmed in SAFE MODE), re-installed the latest and greatest, and the two drivers you reference are back.

Are you sure there are more recent versions??? I think they may be the most current version .... but I could be wrong.

Will tackle the ZA issue tomorrow. I tried Windows Firewall once, but hated that it only protected for INCOMING connections, and only minimal, pre-defined outgoing programs. I want to know which programs are trying to "call home!"

Thanks again.

 

[fimble]

Latest as of 09:00 GMT 26/01/11 was released 12/13/2010 v10.12. v11.1 is due for release today??.
Might be worth checking the ATI driver dates in their Properties Window after a re-boot.

Go to Control Panel >> Windows Firewall. In the left hand panel, click on Advanced Settings for setting up/changing your inbound and outbound rules.

 

[aln]

Latest as of 09:00 GMT 26/01/11 was released 12/13/2010 v10.12. v11.1 is due for release today??.
Might be worth checking the ATI driver dates in their Properties Window after a re-boot.

I know, I have re-installed v10.12. But the two files you referenced haven't changed.
So my question should have been, if v10.12 is installed, should the dates of those two drivers be more current then 2009?

 

[fimble]

The dates should really have changed. I've seen some issues where the date hasn't "changed" in the Drivers folder but it has in WinDbug. And vice-versa.
It's not a life threatener as they are past the Windows 7 "birth line" of July 13th 2009.

 

[aln]

I confirmed that the two drivers have not been updated since 2009. A red herring so to speak.

I updated the GigE Realtek driver and will wait to see if that has any effect on the BSODs, if not, bye-bye ZoneAlarm.

Thank again for the quick replies (and sanity checks!)

 

[raceb4us]

Living with 10.12 drivers has been interesting with BSODs. After using driver sweeper in safe mode and reinstalling my PC was finally back to normal until last night (grey screen of lock up), the mini-dump points to the ATI driver. I am ready to go back to 10.10 or 10.11. I am hoping 01.11 is more stable.