Solved Windows 7 64bit BSOD 3b win32k.sys

joorschot · Nov 26, 2010

My system randomly freezes or gives bsod.
This time i got a BSOD so i can upload a dump file.

Had this problems with Vista 64 bit. Decided to upgrade to Windows 7 (maybe more stable). But still have the errors, maybe hardware related?

Is Windows 7 . . .- x64 - the original installed OS on the system?- an OEM version?- OEM = came pre-installed on system Vista x64 ultimate.
Reinstalled system with Windows 7 x64 Ultimate (Dutch)- What is the age of system (hardware) 2 years?- What is the age of OS installation (reinstalled januari 2011)

yowanvista · Nov 26, 2010

Remove amBX Illuminate developed by Philips.

Code:

Probably caused by : win32k.sys ( win32k!HANDLELOCK::vLockHandle+10f 
PROCESS_NAME:  Illuminate.exe

Code:

TSDDD.sys probably malware

Run a scan of Malwarebytes in safe mode

joorschot · Nov 26, 2010

Thanx for the quick reply. Just removed the Philips ambx illuminate software.
We'll just wait and see.

CarlTR6 · Nov 26, 2010

The malware scan is important. It is easy to do.

joorschot · Jan 21, 2011

Still having problems.
Did a clean install of W7 x64, installed office 2007 (x32), microsoft virusscanner, livemail.
Got another BSOD, with the minidump attached tot this reply.

wish · Jan 21, 2011

joorschot said:
Still having problems.
Did a clean install of W7 x64, installed office 2007 (x32), microsoft virusscanner, livemail.
Got another BSOD, with the minidump attached tot this reply.

Your Asus ATK0110 ACPI Utility driver is obsolete and need to be updated:
ASACPI.sys Sun Mar 27 18:30:36 2005 → ASUSTeK Computer Inc.-Support-

Also update these drivers:

Code:

yk62x64.sys  Mon Feb 23 07:02:27 2009 → [URL="http://www.marvell.com/support.html"]Marvell: Support[/URL]
netr28ux.sys Sun May 24 21:38:17 2009  → [URL="http://www.ralinktech.com/support.php"]Ralink corp.[/URL]
nvlddmkm.sys Thu May 14 13:48:07 2009 → [URL="http://www.nvidia.com/Download/index.aspx"]Drivers - Download NVIDIA Drivers[/URL]

Code:

kd> lmvm serenum
start             end                 module name
fffff880`040a0000 fffff880`040ac000   serenum    (pdb symbols)          c:\windows\symbols\SerEnum.pdb\63178B4383DE46C0B7B203D3CE2159601\SerEnum.pdb
    Loaded symbol image file: serenum.sys
    Mapped memory image file: C:\Windows\Symbols\serenum.sys\4A5BCAA1c000\serenum.sys
    Image path: \SystemRoot\system32\DRIVERS\serenum.sys
    Image name: serenum.sys
    Timestamp:        Mon Jul 13 17:00:33 2009 (4A5BCAA1)
    CheckSum:         00013C2F
    ImageSize:        0000C000
    File version:     6.1.7600.16385
    Product version:  6.1.7600.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     serenum.sys
    OriginalFilename: serenum.sys
    ProductVersion:   6.1.7600.16385
    FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
    FileDescription:  Serial Port Enumerator
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
2: kd> ub fffff880`040a0000
*** WARNING: Unable to verify timestamp for ASACPI.sys

joorschot · Jan 21, 2011

I Knew i needed to do some upgrading but not what , I was curious wat the dump was about.
Thank you for the quick reply.
I will install the updates, this is a good advice!!
:thumbsup:

joorschot · Jan 29, 2011

wish said:

joorschot said:
Still having problems.
Did a clean install of W7 x64, installed office 2007 (x32), microsoft virusscanner, livemail.
Got another BSOD, with the minidump attached tot this reply.

Your Asus ATK0110 ACPI Utility driver is obsolete and need to be updated:
ASACPI.sys Sun Mar 27 18:30:36 2005 → ASUSTeK Computer Inc.-Support-

Also update these drivers:

Code:

yk62x64.sys  Mon Feb 23 07:02:27 2009 → [URL="http://www.marvell.com/support.html"]Marvell: Support[/URL]
netr28ux.sys Sun May 24 21:38:17 2009  → [URL="http://www.ralinktech.com/support.php"]Ralink corp.[/URL]
nvlddmkm.sys Thu May 14 13:48:07 2009 → [URL="http://www.nvidia.com/Download/index.aspx"]Drivers - Download NVIDIA Drivers[/URL]

Code:

kd> lmvm serenum
start             end                 module name
fffff880`040a0000 fffff880`040ac000   serenum    (pdb symbols)          c:\windows\symbols\SerEnum.pdb\63178B4383DE46C0B7B203D3CE2159601\SerEnum.pdb
    Loaded symbol image file: serenum.sys
    Mapped memory image file: C:\Windows\Symbols\serenum.sys\4A5BCAA1c000\serenum.sys
    Image path: \SystemRoot\system32\DRIVERS\serenum.sys
    Image name: serenum.sys
    Timestamp:        Mon Jul 13 17:00:33 2009 (4A5BCAA1)
    CheckSum:         00013C2F
    ImageSize:        0000C000
    File version:     6.1.7600.16385
    Product version:  6.1.7600.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     serenum.sys
    OriginalFilename: serenum.sys
    ProductVersion:   6.1.7600.16385
    FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
    FileDescription:  Serial Port Enumerator
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
2: kd> ub fffff880`040a0000
*** WARNING: Unable to verify timestamp for ASACPI.sys

Installed:
ASACPI.sys Sun Mar 27 18:30:36 2005 → ASUSTeK Computer Inc.-Support-

and updated these drivers:
yk62x64.sys Mon Feb 23 07:02:27 2009 → Marvell: Support
netr28ux.sys Sun May 24 21:38:17 2009 → Ralink corp.
vlddmkm.sys Thu May 14 13:48:07 2009 → Drivers - Download NVIDIA Drivers

Got the attached dump after a several days without errors

wish · Jan 30, 2011

Hi,
Enable driver verifier and wait until your Windows crash.
The purpose is to find out whether there are any offending drivers.
http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

After that follow this instruction to collect all data.
Blue Screen of Death (BSOD) Posting Instructions

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffffffffffbb0, 0, fffff80002a9239c, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!ObReferenceObjectSafe+c )

Followup: MachineOwner
---------

joorschot · Feb 9, 2011

PC crashed this morning.
As you requested I followed the steps described.

Attached the result.
Thanks in advance for your great help.

Is Windows 7 . . .- x64 -
the original installed OS on the system?- an OEM version?
- OEM = came pre-installed on system Vista x64 ultimate.
Reinstalled system with Windows 7 x64 Ultimate (Dutch)-

What is the age of system (hardware) 2 years?-
What is the age of OS installation (reinstalled januari 2011)

Virusscan MS Security Essentials

wish · Feb 10, 2011

You may disable the driver verifier.

Then do these hardware test:
- Memory test for at least 7 passes
- CPU stress test
- VGA test

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a4a000 PsLoadedModuleList = 0xfffff800`02c87e50
Debug session time: Tue Feb  8 23:37:23.477 2011 (GMT-8)
System Uptime: 0 days 0:00:15.991
Loading Kernel Symbols
...............................................................
......................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {fffff8a0007a99b8, 2, 1, fffff80002beda68}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+16b5 )

Followup: Pool_corruption
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: fffff8a0007a99b8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80002beda68, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExDeferredFreePool+16b5
fffff800`02beda68 48895008        mov     qword ptr [rax+8],rdx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  System

TRAP_FRAME:  fffff880031a00d0 -- (.trap 0xfffff880031a00d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a0007a99b0 rbx=0000000000000000 rcx=fffffa80039772e0
rdx=fffff8a00079a670 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002beda68 rsp=fffff880031a0260 rbp=0000000000000000
 r8=0000000000000001  r9=0000000000000060 r10=fffff80002a4a000
r11=000000000000045c r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!ExDeferredFreePool+0x16b5:
fffff800`02beda68 48895008        mov     qword ptr [rax+8],rdx ds:a670:fffff8a0`007a99b8=fffffa80039772e0
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ab9ca9 to fffff80002aba740

STACK_TEXT:  
fffff880`0319ff88 fffff800`02ab9ca9 : 00000000`0000000a fffff8a0`007a99b8 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0319ff90 fffff800`02ab8920 : 00000000`00000000 fffff8a0`0079a660 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`031a00d0 fffff800`02beda68 : fffff8a0`0079a670 00000000`00000060 00000000`00000003 00000000`00000001 : nt!KiPageFault+0x260
fffff880`031a0260 fffff880`00ce6c53 : fffff980`03a000f0 00000000`00000000 00000000`63734943 0000000a`0000045b : nt!ExDeferredFreePool+0x16b5
fffff880`031a0310 fffff880`00ce6281 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : CI!CipImageGetImageHash+0x42b
fffff880`031a04f0 fffff880`00ce4fbb : 00000000`00000001 fffff880`031a07b0 fffff880`031a07b0 80000000`00000020 : CI!CipValidateFileHash+0x211
fffff880`031a0660 fffff800`02d2568e : 00000000`00000056 00000000`000fffff fffffa80`064d0f20 00000000`00000000 : CI!CiValidateImageHeader+0x213
fffff880`031a0740 fffff800`02d2557c : 00000000`00000001 00000000`01000000 fffffa80`064d0920 00000000`00000000 : nt!SeValidateImageHeader+0x2e
fffff880`031a0780 fffff800`02db5d95 : fffffa80`064d0f20 fffffa80`064d0920 00000000`00000001 00000000`00000056 : nt!MiValidateImageHeader+0xa4
fffff880`031a0840 fffff800`02dab013 : fffff880`031a0aa0 00000000`00000000 fffff880`031a0d58 00000000`00000001 : nt!MmCreateSection+0x8c9
fffff880`031a0a50 fffff800`02ab9993 : fffffa80`04605040 fffff880`031a0cf8 fffff880`031a0ae8 00000000`00000000 : nt!NtCreateSection+0x162
fffff880`031a0ad0 fffff800`02ab5f30 : fffff800`02e938b6 fffffa80`04605040 00000000`00000000 00000000`00000004 : nt!KiSystemServiceCopyEnd+0x13
fffff880`031a0cd8 fffff800`02e938b6 : fffffa80`04605040 00000000`00000000 00000000`00000004 00000000`0000002c : nt!KiServiceLinkage
fffff880`031a0ce0 fffff800`02e93c7c : ffffffff`8000022c 00000000`00100000 00000000`00000001 fffff800`02ab893d : nt!MmCheckSystemImage+0x96
fffff880`031a0e10 fffff800`02e93e97 : ffffffff`8000022c 00001f80`00000001 fffff8a0`006afc40 00000000`00000000 : nt!MiCreateSectionForDriver+0xcc
fffff880`031a0ec0 fffff800`02e9f73a : 00000000`00000000 fffff880`031a1080 fffffa80`04605040 00000000`00000000 : nt!MiObtainSectionForDriver+0xd7
fffff880`031a0f20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmLoadSystemImage+0x23a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+16b5
fffff800`02beda68 48895008        mov     qword ptr [rax+8],rdx

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!ExDeferredFreePool+16b5

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0xC5_2_VRF_nt!ExDeferredFreePool+16b5

BUCKET_ID:  X64_0xC5_2_VRF_nt!ExDeferredFreePool+16b5

Followup: Pool_corruption
---------

2: kd> lmvm CI
start             end                 module name
fffff880`00cda000 fffff880`00d9a000   CI         (pdb symbols)          c:\windows\symbols\ci.pdb\5F1BDC2205AC402CB0F09FC7CF17A3701\ci.pdb
    Loaded symbol image file: CI.dll
    Mapped memory image file: C:\Windows\Symbols\CI.dll\4A5BE01Dc0000\CI.dll
    Image path: \SystemRoot\system32\CI.dll
    Image name: CI.dll
    Timestamp:        Mon Jul 13 18:32:13 2009 (4A5BE01D)
    CheckSum:         000C6E0E
    ImageSize:        000C0000
    File version:     6.1.7600.16385
    Product version:  6.1.7600.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ci.dll
    OriginalFilename: ci.dll
    ProductVersion:   6.1.7600.16385
    FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
    FileDescription:  Code Integrity Module
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

joorschot · Feb 18, 2011

Did the memory test without errors.

VGA test without errors.

When working yesterday 2 freezes and today a BSOD

Minidump attached.

Still need to do the CPU test

wish · Feb 19, 2011

Hello,
Report back the CPU test result when you done.

Then your latest dump lead to USB port driver.
Do you have any device driver related to USB port?

Perform system file checker:
Right click cmd.exe → run as administrator → sfc /scannow

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02a04000 PsLoadedModuleList = 0xfffff800`02c41e50
Debug session time: Fri Feb 18 06:35:08.704 2011 (GMT-8)
System Uptime: 0 days 0:55:38.172
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {56151c8, 2, 0, fffff8800419a825}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption

Followup: memory_corruption
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000056151c8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800419a825, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cac0e0
 00000000056151c8 

CURRENT_IRQL:  2

FAULTING_IP: 
USBPORT!USBPORT_ProcessNeoStateChangeList+3bd
fffff880`0419a825 48397a28        cmp     qword ptr [rdx+28h],rdi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88002ffba70 -- (.trap 0xfffff88002ffba70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000032a801 rbx=0000000000000000 rcx=00000000ff38ea75
rdx=00000000056151a0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800419a825 rsp=fffff88002ffbc00 rbp=fffffa8005615050
 r8=fffffa80056151a0  r9=0000000000000000 r10=000000000000f911
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
USBPORT!USBPORT_ProcessNeoStateChangeList+0x3bd:
fffff880`0419a825 48397a28        cmp     qword ptr [rdx+28h],rdi ds:00000000`056151c8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a73ca9 to fffff80002a74740

STACK_TEXT:  
fffff880`02ffb928 fffff800`02a73ca9 : 00000000`0000000a 00000000`056151c8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02ffb930 fffff800`02a72920 : fffffa80`056151a0 00000000`0032a801 fffffa80`056151a0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`02ffba70 fffff880`0419a825 : fffffa80`056151a0 fffffa80`05615050 00000000`ffffffff 00000000`00000002 : nt!KiPageFault+0x260
fffff880`02ffbc00 fffff880`041c04ef : fffffa80`05615102 00000000`00000246 fffffa80`0032a801 fffffa80`056151a0 : USBPORT!USBPORT_ProcessNeoStateChangeList+0x3bd
fffff880`02ffbc70 fffff800`02a7fbfc : fffff880`02fd3180 fffffa80`05615050 fffffa80`05616178 00000000`00000000 : USBPORT!USBPORT_IsrDpc+0x1f3
fffff880`02ffbcd0 fffff800`02a7ceea : fffff880`02fd3180 fffff880`02fddfc0 00000000`00000000 fffff880`041c02fc : nt!KiRetireDpcList+0x1bc
fffff880`02ffbd80 00000000`00000000 : fffff880`02ffc000 fffff880`02ff6000 fffff880`02ffbd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !USBPORT
    fffff8800419af31 - USBPORT!Allocate_HS+13d
    [ 21:01 ]
1 error : !USBPORT (fffff8800419af31)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------
 kd> lmtsmn
start             end                 module name
fffff880`00ec8000 fffff880`00f1f000   ACPI     ACPI.sys     Mon Jul 13 16:19:34 2009 (4A5BC106)
fffff880`02c8f000 fffff880`02d19000   afd      afd.sys      Mon Jul 13 16:21:40 2009 (4A5BC184)
fffff880`053e7000 fffff880`053fd000   AgileVpn AgileVpn.sys Mon Jul 13 17:10:24 2009 (4A5BCCF0)
fffff880`00c4d000 fffff880`00c58000   amdxata  amdxata.sys  Tue May 19 10:56:59 2009 (4A12F2EB)
fffff880`04024000 fffff880`0402c000   ASACPI   ASACPI.sys   Wed May 13 18:25:17 2009 (4A0B72FD)
fffff880`07375000 fffff880`07380000   asyncmac asyncmac.sys Mon Jul 13 17:10:13 2009 (4A5BCCE5)
fffff880`00c1a000 fffff880`00c23000   atapi    atapi.sys    Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`00c23000 fffff880`00c4d000   ataport  ataport.SYS  Mon Jul 13 16:19:52 2009 (4A5BC118)
fffff880`019b9000 fffff880`019c0000   Beep     Beep.SYS     Mon Jul 13 17:00:13 2009 (4A5BCA8D)
fffff880`03b1d000 fffff880`03b2e000   blbdrive blbdrive.sys Mon Jul 13 16:35:59 2009 (4A5BC4DF)
fffff880`066f9000 fffff880`06717000   bowser   bowser.sys   Mon Jul 13 16:23:50 2009 (4A5BC206)
fffff960`00680000 fffff960`006a7000   cdd      cdd.dll      unavailable (00000000)
fffff880`01955000 fffff880`0197f000   cdrom    cdrom.sys    Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`00d28000 fffff880`00de8000   CI       CI.dll       Mon Jul 13 18:32:13 2009 (4A5BE01D)
fffff880`018ef000 fffff880`0191f000   CLASSPNP CLASSPNP.SYS Mon Jul 13 16:19:58 2009 (4A5BC11E)
fffff880`00cca000 fffff880`00d28000   CLFS     CLFS.SYS     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 16:49:40 2009 (4A5BC814)
fffff880`04038000 fffff880`04048000   CompositeBus CompositeBus.sys Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`0459a000 fffff880`045a8000   crashdmp crashdmp.sys Mon Jul 13 17:01:01 2009 (4A5BCABD)
fffff880`03a7c000 fffff880`03aff000   csc      csc.sys      Mon Jul 13 16:24:26 2009 (4A5BC22A)
fffff880`03aff000 fffff880`03b1d000   dfsc     dfsc.sys     Mon Jul 13 16:23:44 2009 (4A5BC200)
fffff880`02c68000 fffff880`02c77000   discache discache.sys Mon Jul 13 16:37:18 2009 (4A5BC52E)
fffff880`00c58000 fffff880`00c6e000   disk     disk.sys     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`04572000 fffff880`04594000   drmk     drmk.sys     Mon Jul 13 18:01:25 2009 (4A5BD8E5)
fffff880`045b4000 fffff880`045bd000   dump_atapi dump_atapi.sys Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`045a8000 fffff880`045b4000   dump_dumpata dump_dumpata.sys Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`045bd000 fffff880`045d0000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 16:21:51 2009 (4A5BC18F)
fffff880`045d0000 fffff880`045dc000   Dxapi    Dxapi.sys    Mon Jul 13 16:38:28 2009 (4A5BC574)
fffff880`0404c000 fffff880`04140000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 20:22:56 2011 (4D3FA1A0)
fffff880`04140000 fffff880`04186000   dxgmms1  dxgmms1.sys  Tue Jan 25 20:22:12 2011 (4D3FA174)
fffff880`01145000 fffff880`01159000   fileinfo fileinfo.sys Mon Jul 13 16:34:25 2009 (4A5BC481)
fffff880`010f9000 fffff880`01145000   fltmgr   fltmgr.sys   Mon Jul 13 16:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 16:19:45 2009 (4A5BC111)
fffff880`011b7000 fffff880`011f1000   fvevol   fvevol.sys   Fri Sep 25 19:34:26 2009 (4ABD7DB2)
fffff880`01589000 fffff880`015d3000   fwpkclnt fwpkclnt.sys Mon Jul 13 16:21:08 2009 (4A5BC164)
fffff800`02fe1000 fffff800`0302a000   hal      hal.dll      Mon Jul 13 18:27:36 2009 (4A5BDF08)
fffff880`04000000 fffff880`04024000   HDAudBus HDAudBus.sys Mon Jul 13 17:06:13 2009 (4A5BCBF5)
fffff880`044d9000 fffff880`04535000   HdAudio  HdAudio.sys  Mon Jul 13 17:06:59 2009 (4A5BCC23)
fffff880`01f84000 fffff880`01f9d000   HIDCLASS HIDCLASS.SYS Mon Jul 13 17:06:21 2009 (4A5BCBFD)
fffff880`01f9d000 fffff880`01fa5080   HIDPARSE HIDPARSE.SYS Mon Jul 13 17:06:17 2009 (4A5BCBF9)
fffff880`01f76000 fffff880`01f84000   hidusb   hidusb.sys   Mon Jul 13 17:06:22 2009 (4A5BCBFE)
fffff880`06631000 fffff880`066f9000   HTTP     HTTP.sys     Mon Jul 13 16:22:16 2009 (4A5BC1A8)
fffff880`015f2000 fffff880`015fb000   hwpolicy hwpolicy.sys Mon Jul 13 16:19:22 2009 (4A5BC0FA)
fffff880`03b54000 fffff880`03b6a000   intelppm intelppm.sys Mon Jul 13 16:19:25 2009 (4A5BC0FD)
fffff880`03a6b000 fffff880`03a7a000   kbdclass kbdclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`01fa6000 fffff880`01fb4000   kbdhid   kbdhid.sys   Mon Jul 13 17:00:20 2009 (4A5BCA94)
fffff800`00bd5000 fffff800`00bdf000   kdcom    kdcom.dll    Mon Jul 13 18:31:07 2009 (4A5BDFDB)
fffff880`0188c000 fffff880`018cf000   ks       ks.sys       Wed Mar 03 20:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 16:20:54 2009 (4A5BC156)
fffff880`0155e000 fffff880`01589000   ksecpkg  ksecpkg.sys  Thu Dec 10 22:03:32 2009 (4B21E0B4)
fffff880`04594000 fffff880`04599200   ksthunk  ksthunk.sys  Mon Jul 13 17:00:19 2009 (4A5BCA93)
fffff880`01e21000 fffff880`01e36000   lltdio   lltdio.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`01fcf000 fffff880`01ff2000   luafv    luafv.sys    Mon Jul 13 16:26:13 2009 (4A5BC295)
fffff880`00c72000 fffff880`00cb6000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 18:29:10 2009 (4A5BDF66)
fffff880`01fc1000 fffff880`01fcf000   monitor  monitor.sys  Mon Jul 13 16:38:52 2009 (4A5BC58C)
fffff880`02c77000 fffff880`02c86000   mouclass mouclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`01fb4000 fffff880`01fc1000   mouhid   mouhid.sys   Mon Jul 13 17:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000   mountmgr mountmgr.sys Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`0197f000 fffff880`019b0000   MpFilter MpFilter.sys Tue Sep 14 17:19:28 2010 (4C901110)
fffff880`072df000 fffff880`072ef000   MpNWMon  MpNWMon.sys  Tue Sep 14 17:19:30 2010 (4C901112)
fffff880`06717000 fffff880`0672f000   mpsdrv   mpsdrv.sys   Mon Jul 13 17:08:25 2009 (4A5BCC79)
fffff880`0672f000 fffff880`0675c000   mrxsmb   mrxsmb.sys   Fri Feb 26 23:52:19 2010 (4B88CF33)
fffff880`0675c000 fffff880`067aa000   mrxsmb10 mrxsmb10.sys Fri Feb 26 23:52:28 2010 (4B88CF3C)
fffff880`067aa000 fffff880`067cd000   mrxsmb20 mrxsmb20.sys Fri Feb 26 23:52:26 2010 (4B88CF3A)
fffff880`0182b000 fffff880`01836000   Msfs     Msfs.SYS     Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`00f28000 fffff880`00f32000   msisadrv msisadrv.sys Mon Jul 13 16:19:26 2009 (4A5BC0FE)
fffff880`01159000 fffff880`011b7000   msrpc    msrpc.sys    Mon Jul 13 16:21:32 2009 (4A5BC17C)
fffff880`02c5d000 fffff880`02c68000   mssmbios mssmbios.sys Mon Jul 13 16:31:10 2009 (4A5BC3BE)
fffff880`01235000 fffff880`01247000   mup      mup.sys      Mon Jul 13 16:23:45 2009 (4A5BC201)
fffff880`0140c000 fffff880`014fe000   ndis     ndis.sys     Mon Jul 13 16:21:40 2009 (4A5BC184)
fffff880`03bf1000 fffff880`03bfd000   ndistapi ndistapi.sys Mon Jul 13 17:10:00 2009 (4A5BCCD8)
fffff880`01e36000 fffff880`01e49000   ndisuio  ndisuio.sys  Mon Jul 13 17:09:25 2009 (4A5BCCB5)
fffff880`03a00000 fffff880`03a2f000   ndiswan  ndiswan.sys  Mon Jul 13 17:10:11 2009 (4A5BCCE3)
fffff880`044c4000 fffff880`044d9000   NDProxy  NDProxy.SYS  Mon Jul 13 17:10:05 2009 (4A5BCCDD)
fffff880`02da3000 fffff880`02db2000   netbios  netbios.sys  Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff880`02d19000 fffff880`02d5e000   netbt    netbt.sys    Mon Jul 13 16:21:28 2009 (4A5BC178)
fffff880`014fe000 fffff880`0155e000   NETIO    NETIO.SYS    Thu Apr 08 19:43:59 2010 (4BBE946F)
fffff880`01e50000 fffff880`01f4a000   netr28ux netr28ux.sys Wed Aug 05 06:59:46 2009 (4A799052)
fffff880`072ef000 fffff880`07304000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 17:20:25 2010 (4C901149)
fffff880`01836000 fffff880`01847000   Npfs     Npfs.SYS     Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`02c51000 fffff880`02c5d000   nsiproxy nsiproxy.sys Mon Jul 13 16:21:02 2009 (4A5BC15E)
fffff800`02a04000 fffff800`02fe1000   nt       ntkrnlmp.exe Tue Oct 26 19:43:09 2010 (4CC791BD)
fffff880`0125b000 fffff880`013fe000   Ntfs     Ntfs.sys     Mon Jul 13 16:20:47 2009 (4A5BC14F)
fffff880`019b0000 fffff880`019b9000   Null     Null.SYS     Mon Jul 13 16:19:37 2009 (4A5BC109)
fffff880`053e5000 fffff880`053e6180   nvBridge nvBridge.kmd Sat Oct 16 10:06:16 2010 (4CB9DB88)
fffff880`0480b000 fffff880`053e4a80   nvlddmkm nvlddmkm.sys Sat Oct 16 10:12:46 2010 (4CB9DD0E)
fffff880`04400000 fffff880`04453000   nwifi    nwifi.sys    Mon Jul 13 17:07:23 2009 (4A5BCC3B)
fffff880`02d67000 fffff880`02d8d000   pacer    pacer.sys    Mon Jul 13 17:09:41 2009 (4A5BCCC5)
fffff880`00f72000 fffff880`00f87000   partmgr  partmgr.sys  Mon Jul 13 16:19:58 2009 (4A5BC11E)
fffff880`00f32000 fffff880`00f65000   pci      pci.sys      Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`00ff8000 fffff880`00fff000   pciide   pciide.sys   Mon Jul 13 16:19:49 2009 (4A5BC115)
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 16:19:27 2009 (4A5BC0FF)
fffff880`06a31000 fffff880`06ad7000   peauth   peauth.sys   Mon Jul 13 18:01:19 2009 (4A5BD8DF)
fffff880`04535000 fffff880`04572000   portcls  portcls.sys  Mon Jul 13 17:06:27 2009 (4A5BCC03)
fffff880`00cb6000 fffff880`00cca000   PSHED    PSHED.dll    Mon Jul 13 18:32:23 2009 (4A5BE027)
fffff880`03bcd000 fffff880`03bf1000   rasl2tp  rasl2tp.sys  Mon Jul 13 17:10:11 2009 (4A5BCCE3)
fffff880`03a2f000 fffff880`03a4a000   raspppoe raspppoe.sys Mon Jul 13 17:10:17 2009 (4A5BCCE9)
fffff880`03a4a000 fffff880`03a6b000   raspptp  raspptp.sys  Mon Jul 13 17:10:18 2009 (4A5BCCEA)
fffff880`01872000 fffff880`0188c000   rassstp  rassstp.sys  Mon Jul 13 17:10:25 2009 (4A5BCCF1)
fffff880`02c00000 fffff880`02c51000   rdbss    rdbss.sys    Mon Jul 13 16:24:09 2009 (4A5BC219)
fffff880`04800000 fffff880`0480b000   rdpbus   rdpbus.sys   Mon Jul 13 17:17:46 2009 (4A5BCEAA)
fffff880`01810000 fffff880`01819000   RDPCDD   RDPCDD.sys   Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`01819000 fffff880`01822000   rdpencdd rdpencdd.sys Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`01822000 fffff880`0182b000   rdprefmp rdprefmp.sys Mon Jul 13 17:16:35 2009 (4A5BCE63)
fffff880`010bf000 fffff880`010f9000   rdyboost rdyboost.sys Mon Jul 13 16:34:34 2009 (4A5BC48A)
fffff880`045dc000 fffff880`045f4000   rspndr   rspndr.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`06ad7000 fffff880`06ae2000   secdrv   secdrv.SYS   Wed Sep 13 06:18:38 2006 (4508052E)
fffff880`0402c000 fffff880`04038000   serenum  serenum.sys  Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`02db2000 fffff880`02dcf000   serial   serial.sys   Mon Jul 13 17:00:40 2009 (4A5BCAA8)
fffff880`015eb000 fffff880`015f2000   speedfan speedfan.sys Sun Sep 24 06:26:48 2006 (45168798)
fffff880`015e3000 fffff880`015eb000   spldr    spldr.sys    Mon May 11 09:56:27 2009 (4A0858BB)
fffff880`07249000 fffff880`072df000   srv      srv.sys      Thu Aug 26 20:38:00 2010 (4C773318)
fffff880`06b21000 fffff880`06b88000   srv2     srv2.sys     Thu Aug 26 20:37:46 2010 (4C77330A)
fffff880`06ae2000 fffff880`06b0f000   srvnet   srvnet.sys   Thu Aug 26 20:37:24 2010 (4C7732F4)
fffff880`04048000 fffff880`04049480   swenum   swenum.sys   Mon Jul 13 17:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 20:39:04 2010 (4C15A458)
fffff880`06b0f000 fffff880`06b21000   tcpipreg tcpipreg.sys Mon Jul 13 17:09:49 2009 (4A5BCCCD)
fffff880`01865000 fffff880`01872000   TDI      TDI.SYS      Mon Jul 13 16:21:18 2009 (4A5BC16E)
fffff880`01847000 fffff880`01865000   tdx      tdx.sys      Mon Jul 13 16:21:15 2009 (4A5BC16B)
fffff880`02dea000 fffff880`02dfe000   termdd   termdd.sys   Mon Jul 13 17:16:36 2009 (4A5BCE64)
fffff960`00450000 fffff960`0045a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03b2e000 fffff880`03b54000   tunnel   tunnel.sys   Mon Jul 13 17:09:37 2009 (4A5BCCC1)
fffff880`018cf000 fffff880`018e1000   umbus    umbus.sys    Mon Jul 13 17:06:56 2009 (4A5BCC20)
fffff880`01f57000 fffff880`01f74000   usbccgp  usbccgp.sys  Mon Jul 13 17:06:45 2009 (4A5BCC15)
fffff880`01f74000 fffff880`01f75f00   USBD     USBD.SYS     Mon Jul 13 17:06:23 2009 (4A5BCBFF)
fffff880`041e9000 fffff880`041fa000   usbehci  usbehci.sys  Mon Jul 13 17:06:30 2009 (4A5BCC06)
fffff880`0446a000 fffff880`044c4000   usbhub   usbhub.sys   Mon Jul 13 17:07:09 2009 (4A5BCC2D)
fffff880`04193000 fffff880`041e9000   USBPORT  USBPORT.SYS  Mon Jul 13 17:06:31 2009 (4A5BCC07)
fffff880`04186000 fffff880`04193000   usbuhci  usbuhci.sys  Mon Jul 13 17:06:27 2009 (4A5BCC03)
fffff880`00f65000 fffff880`00f72000   vdrvroot vdrvroot.sys Mon Jul 13 17:01:31 2009 (4A5BCADB)
fffff880`019c0000 fffff880`019ce000   vga      vga.sys      Mon Jul 13 16:38:47 2009 (4A5BC587)
fffff880`019ce000 fffff880`019f3000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 16:38:51 2009 (4A5BC58B)
fffff880`015d3000 fffff880`015e3000   vmstorfl vmstorfl.sys Mon Jul 13 16:42:54 2009 (4A5BC67E)
fffff880`00f87000 fffff880`00f9c000   volmgr   volmgr.sys   Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`00f9c000 fffff880`00ff8000   volmgrx  volmgrx.sys  Mon Jul 13 16:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000   volsnap  volsnap.sys  Mon Jul 13 16:20:08 2009 (4A5BC128)
fffff880`01f4a000 fffff880`01f57000   vwifibus vwifibus.sys Mon Jul 13 17:07:21 2009 (4A5BCC39)
fffff880`02d8d000 fffff880`02da3000   vwififlt vwififlt.sys Mon Jul 13 17:07:22 2009 (4A5BCC3A)
fffff880`01ff2000 fffff880`01ffc000   vwifimp  vwifimp.sys  Mon Jul 13 17:07:28 2009 (4A5BCC40)
fffff880`02dcf000 fffff880`02dea000   wanarp   wanarp.sys   Mon Jul 13 17:10:21 2009 (4A5BCCED)
fffff880`01800000 fffff880`01810000   watchdog watchdog.sys Mon Jul 13 16:37:35 2009 (4A5BC53F)
fffff880`00e15000 fffff880`00eb9000   Wdf01000 Wdf01000.sys Mon Jul 13 16:22:07 2009 (4A5BC19F)
fffff880`00eb9000 fffff880`00ec8000   WDFLDR   WDFLDR.SYS   Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`02d5e000 fffff880`02d67000   wfplwf   wfplwf.sys   Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff960`00030000 fffff960`00340000   win32k   win32k.sys   unavailable (00000000)
fffff880`00f1f000 fffff880`00f28000   WMILIB   WMILIB.SYS   Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`01e00000 fffff880`01e21000   WudfPf   WudfPf.sys   Mon Jul 13 17:05:37 2009 (4A5BCBD1)
fffff880`03b6a000 fffff880`03bcd000   yk62x64  yk62x64.sys  Wed Sep 15 07:31:29 2010 (4C90D8C1)

Unloaded modules:
fffff880`07304000 fffff880`07375000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0191f000 fffff880`0192d000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0192d000 fffff880`01939000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01939000 fffff880`01942000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01942000 fffff880`01955000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
3: kd> lmvm USBPORT
start             end                 module name
fffff880`04193000 fffff880`041e9000   USBPORT    (pdb symbols)          c:\symbols\usbport.pdb\845F4E75FADE4484B3A6EF6B6F404FA31\usbport.pdb
    Loaded symbol image file: USBPORT.SYS
    Mapped memory image file: C:\Symbols\USBPORT.SYS\4A5BCC0756000\USBPORT.SYS
    Image path: \SystemRoot\system32\DRIVERS\USBPORT.SYS
    Image name: USBPORT.SYS
    Timestamp:        Mon Jul 13 17:06:31 2009 (4A5BCC07)
    CheckSum:         0005E0B4
    ImageSize:        00056000
    File version:     6.1.7600.16385
    Product version:  6.1.7600.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     usbport.sys
    OriginalFilename: usbport.sys
    ProductVersion:   6.1.7600.16385
    FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
    FileDescription:  USB 1.1 & 2.0 Port Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

joorschot · Aug 27, 2011

Hello,

Had the errors for several months, then i came across a posting from someone who had the same kind of problem.
He had 2 memory banks filled 2 empty, he added 2 mem banks so all 4 were occupied, and his problem was solved.
I bought the same memory installed them and all is stable now for a month. As posted earlier I tested the memory several times but didn't result in bad memory.
Thank you for assisting me !!!
Kind regards

joorschot · Aug 27, 2011

Random freezes ASUS P5Q3 - Deluxe/Wifi-AP@n

Solved with 4xkvr1333d3n9/2g kingston ram, default speed settings BIOS

Solved Windows 7 64bit BSOD 3b win32k.sys

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Antique Senior Member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer