win7 unexpected shutdown

[mattdisney]

I'm running WIN7 64bit. This is a selfbuilt PC.
PC has started shutting down. please help.

Regards


Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 2057
Additional information about the problem:
BCCode: 50
BCP1: FFFFBA8003C2EADA
BCP2: 0000000000000000
BCP3: FFFFF80002DC7D0C
BCP4: 0000000000000007
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1
Files that help describe the problem:
C:\Windows\Minidump\102310-21808-01.dmp
C:\Users\Matt\AppData\Local\Temp\WER-43773-0.sysdata.xml

 

[Tews]

http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[yowanvista]

Follow these instructions: http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[mattdisney]

Is Windows 7 .
x64
- the original installed OS on the system?
-full retail version?
This machine is a selfbuild
- What is the age of system (hardware)? about 6-9months
- What is the age of OS installation 2months

 

[Tews]

Your first .dmp file blames tdrpm251.sys (Acronis True Image Try and Decide) as the cause of this crash.. Upgrade, or uninstall Acronis ...
The rest of your .dmp files blame Rt64win7.sys - a component of your Realtek networking drivers

Please do the following:
- download the latest Windows 7 compatible driver from here:Realtek
- uninstall the current networking drivers from your system
- install the freshly downloaded drivers and monitor for further BSOD's

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ffffda8003af67d0, 0, fffff80002cb22a9, 7}

Unable to load image \SystemRoot\system32\DRIVERS\tdrpm251.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for tdrpm251.sys
*** ERROR: Module load completed but symbols could not be loaded for tdrpm251.sys

Could not read faulting driver name
Probably caused by : tdrpm251.sys ( tdrpm251+52c1d )

Followup: MachineOwner
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ffffda8003af67d0, 0, fffff80002cb22a9, 7}

Unable to load image \SystemRoot\system32\DRIVERS\tdrpm251.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for tdrpm251.sys
*** ERROR: Module load completed but symbols could not be loaded for tdrpm251.sys

Could not read faulting driver name
Probably caused by : tdrpm251.sys ( tdrpm251+52c1d )

Followup: MachineOwner
---------


*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

FAILURE_BUCKET_ID:  X64_0x9F_3_Rt64win7_IMAGE_pci.sys

BUCKET_ID:  X64_0x9F_3_Rt64win7_IMAGE_pci.sys

Followup: MachineOwner
---------
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa8004365060, fffff80000b9c4d8, fffffa8003ecb6f0}

Probably caused by : pci.sys

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0x9F_3_Rtnic64_IMAGE_pci.sys

BUCKET_ID:  X64_0x9F_3_Rtnic64_IMAGE_pci.sys

Followup: MachineOwner
---------


FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0x9F_3_Rtnic64_IMAGE_pci.sys

BUCKET_ID:  X64_0x9F_3_Rtnic64_IMAGE_pci.sys

Followup: MachineOwner


FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0x9F_3_Rtnic64_IMAGE_pci.sys

BUCKET_ID:  X64_0x9F_3_Rtnic64_IMAGE_pci.sys

These Drivers are out of date and need to be updated...

Followup: MachineOwner
fffff880`04720000 fffff880`0472d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff880`03c00000 fffff880`03c32000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`03c99000 fffff880`03cab000   Rtnic64  Rtnic64.sys  Fri May 30 11:12:23 2008 (48401957)

 

[Crispy]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ffffda8003af67d0, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80002cb22a9, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000007, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ebb0e0
 ffffda8003af67d0 

FAULTING_IP: 
nt!MmCopyToCachedPage+219
fffff800`02cb22a9 488b07          mov     rax,qword ptr [rdi]

MM_INTERNAL_CODE:  7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  ekrn.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88009822050 -- (.trap 0xfffff88009822050)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000fffffffff
rdx=fffff80002c13000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cb22a9 rsp=fffff880098221e0 rbp=fffff88009822240
 r8=0000098000000000  r9=0000000004018028 r10=0000058000000000
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!MmCopyToCachedPage+0x219:
fffff800`02cb22a9 488b07          mov     rax,qword ptr [rdi] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002d02849 to fffff80002c83740

STACK_TEXT:  
fffff880`09821ee8 fffff800`02d02849 : 00000000`00000050 ffffda80`03af67d0 00000000`00000000 fffff880`09822050 : nt!KeBugCheckEx
fffff880`09821ef0 fffff800`02c8182e : 00000000`00000000 00000000`00000000 f8a00bae`96400400 f8a00bae`96480400 : nt! ?? ::FNODOBFM::`string'+0x40e0b
fffff880`09822050 fffff800`02cb22a9 : 00000000`00000002 ffffffff`ffffffff 00000000`00000002 ffffffff`ffffffff : nt!KiPageFault+0x16e
fffff880`098221e0 fffff800`02caf6ce : fffff980`1b011000 00000000`04018028 fffff880`00000000 00000000`00001000 : nt!MmCopyToCachedPage+0x219
fffff880`098223d0 fffff800`02caf434 : fffffa80`03b331f0 00000000`04018028 fffff880`09822510 00000000`00000000 : nt!CcMapAndCopyInToCache+0x20e
fffff880`098224c0 fffff880`012c1fb8 : 00000000`00d20000 fffffa80`0a143200 fffff880`098225b0 fffffa80`00020000 : nt!CcCopyWrite+0x194
fffff880`09822550 fffff880`01066132 : fffffa80`0a1432b0 fffff880`01069732 fffffa80`00020000 00000000`00020001 : Ntfs!NtfsCopyWriteA+0x208
fffff880`09822740 fffff880`01069c2a : fffff880`09822810 fffffa80`087b64c8 00000000`04007000 00000000`00020000 : fltmgr!FltpPerformFastIoCall+0xf2
fffff880`098227a0 fffff880`010877fe : 00000000`00020000 00000000`00000000 fffffa80`0a1432b0 fffffa80`0b1a0e78 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`098227e0 fffff880`01a5ac1d : 00000000`00000056 fffff880`01067160 fffffa80`0b1a0f80 00000000`00020000 : fltmgr!FltpFastIoWrite+0x1ce
fffff880`09822880 00000000`00000056 : fffff880`01067160 fffffa80`0b1a0f80 00000000`00020000 fffffa80`00000000 : tdrpm251+0x52c1d
fffff880`09822888 fffff880`01067160 : fffffa80`0b1a0f80 00000000`00020000 fffffa80`00000000 00000000`04007028 : 0x56
fffff880`09822890 fffff880`01069c2a : fffff880`09822a00 fffffa80`0b1a0e78 00000000`04007000 00000000`00020000 : fltmgr!FltpPerformPreCallbacks+0x430
fffff880`09822990 fffff880`010877fe : 00000000`00020000 00000000`00000000 fffffa80`0a1432b0 fffff880`09822b00 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`098229d0 fffff800`02f9a80e : fffffa80`0a143324 00000000`00000004 fffff880`09822be0 fffffa80`0a143324 : fltmgr!FltpFastIoWrite+0x1ce
fffff880`09822a70 fffff800`02c82993 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWriteFile+0x5ad
fffff880`09822b70 00000000`75742dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0146f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75742dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tdrpm251+52c1d
fffff880`01a5ac1d ??              ???

SYMBOL_STACK_INDEX:  a

SYMBOL_NAME:  tdrpm251+52c1d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tdrpm251

IMAGE_NAME:  tdrpm251.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a72f8d9

FAILURE_BUCKET_ID:  X64_0x50_tdrpm251+52c1d

BUCKET_ID:  X64_0x50_tdrpm251+52c1d

Followup: MachineOwner
---------

Start buy uninstalling your ATI drivers run driver sweeper (Refer to my sig for details on how this is done) and download the latest drivers from ATI: http://www.sevenforums.com/graphic-cards/1810-latest-ati-catalyst-driver-windows-7-a.html

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa800dd8b010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002d8bab7, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f050e0
 fffffa800dd8b010 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiReleaseConfirmedPageFileSpace+87
fffff800`02d8bab7 480fb328        btr     qword ptr [rax],rbp

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  CCC.exe

TRAP_FRAME:  fffff880091165e0 -- (.trap 0xfffff880091165e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8005d8b010 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d8bab7 rsp=fffff88009116770 rbp=0000000040000000
 r8=fffff880091167a0  r9=fffffa8006a8cb30 r10=0000000fffffffff
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MiReleaseConfirmedPageFileSpace+0x87:
fffff800`02d8bab7 480fb328        btr     qword ptr [rax],rbp ds:67f8:fffffa80`05d8b010=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cccca9 to fffff80002ccd740

STACK_TEXT:  
fffff880`09116498 fffff800`02cccca9 : 00000000`0000000a fffffa80`0dd8b010 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`091164a0 fffff800`02ccb920 : fffff980`0a400000 fffffa80`07084b60 00008eb3`00006a38 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`091165e0 fffff800`02d8bab7 : 00000000`00000001 fffffa80`07084b60 fffffa80`0535b830 fffffa80`0535b830 : nt!KiPageFault+0x260
fffff880`09116770 fffff800`02d40e38 : 40000000`00000000 00000000`00000048 00000000`6a0a0004 00000000`6a117000 : nt!MiReleaseConfirmedPageFileSpace+0x87
fffff880`091167f0 fffff800`02d00df9 : 00000000`00000000 00000000`6a1cdfff fffffa80`00000000 fffff880`09116b08 : nt! ?? ::FNODOBFM::`string'+0x33798
fffff880`091169b0 fffff800`02fe61d0 : fffffa80`073b0f80 0007ffff`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveMappedView+0xd9
fffff880`09116ad0 fffff800`02fe65db : 00000980`00000000 00000000`6a0a0000 fffffa80`00000001 fffffa80`073b0670 : nt!MiUnmapViewOfSection+0x1b0
fffff880`09116b90 fffff800`02ccc993 : 00000000`00000000 00000000`1fe80000 fffffa80`06a8cb30 00000000`00000000 : nt!NtUnmapViewOfSection+0x5f
fffff880`09116be0 00000000`76fcfffa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`1baebb98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76fcfffa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiReleaseConfirmedPageFileSpace+87
fffff800`02d8bab7 480fb328        btr     qword ptr [rax],rbp

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiReleaseConfirmedPageFileSpace+87

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiReleaseConfirmedPageFileSpace+87

BUCKET_ID:  X64_0xA_nt!MiReleaseConfirmedPageFileSpace+87

Followup: MachineOwner
---------

Download and run memtest86 see if it comes up with any errors, try run for for at least 24 hours: Memtest86.com - Memory Diagnostic

 

[mattdisney]

Thanks for your assistance we, will see what happens.

Could you assist me further, Windows is not recocnising HDTV, inorder to duplicate for play back

regards

Matt

 

[mattdisney]

all good

all good thank you Vmuch

Regards

Matt

 

[Crispy]

No problem glade we helped you solve you problem.