Yet another BSOD ... at startup.

JoX · Apr 2, 2011

Every time I startup Windows it crashes to BSOD "DRIVER_IRQL_NOT_LESS_OR_EQUAL" and some mention about ataport.SYS.

After I do a System Restore from Safe Mode I (mostly) can start up without BSOD ... until the next time I start the computer. Curses.

It all started a day ago and I have changed no HW. A possible suspect may be something to do with my new networked Synology DS211j NAS. When I installed some SW for it my Antivirus program (Kaspersky 2011) decided to quarantine the backup software (presumably a false alarm). I tried (unsuccesfully) to uninstall it and not long thereafter the BSODs started.

I'm running :

Windows 7 Home Premium 64bit
Original on system
OEM
Hardware approximately 12 months old.
OS has been reinstalled about a month ago after a corruption of it.

Note :
OS running on separate SSD disc.
Water-cooling for the CPU (in case some log shows CPU fan problems)

Attached .zip-file according to instructions.

Any advice would be appreciated.

JoX · Apr 4, 2011

I ran a memtest and there appears to be some sort of fault, but I'm not sure if it's related to the BSOD mentioned above. See attached image.

I would really appreciate some advice on this.

mgorman87 · Apr 4, 2011

Is this Synology hardware required to be connected to use your computer? Can you boot into safe mode and disable it from device manager and see if you can boot?

If you can boot into Windows without it crashing, I would like you to update some things for me.

Start off with this

Code:

ASACPI.sys   Sun Mar 27 22:30:36 2005 (42476C4C)

A known BSOD maker in Windows 7. The 2005 version of this driver is known to cause BSOD on Windows 7 systems. Download the ATK0110 utility from here - ASUSTeK Computer Inc. -Support- Drivers and Download P7P55D LE. After you install it browse to C:\windows\system32\drivers and check the properties of ASACPI.sys and make sure it now says 2009.

Code:

Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)

Update your Realtek drivers - here

Please enable driver verifier once you've updated the drivers - http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Run this diagnostic test once you've enabled driver verifier
http://www.sevenforums.com/tutorials/100352-cpu-stress-test-prime95.html - Run all three tests for a couple hours each

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Mike\Downloads\Windows_NT6_BSOD_jcgriff2_and_perfmon\Windows_NT6_BSOD_jcgriff2\040211-16099-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a07000 PsLoadedModuleList = 0xfffff800`02c4ce90
Debug session time: Sat Apr  2 13:57:15.705 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:19.720
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {b584d5e, 2, 1, fffff88000db33d4}

Probably caused by : ataport.SYS ( ataport!IdeProcessCompletedRequests+a4 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000b584d5e, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88000db33d4, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cb80e8
 000000000b584d5e 

CURRENT_IRQL:  2

FAULTING_IP: 
ataport!IdeProcessCompletedRequests+a4
fffff880`00db33d4 884321          mov     byte ptr [rbx+21h],al

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff80000b9c950 -- (.trap 0xfffff80000b9c950)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800c12cb05 rbx=0000000000000000 rcx=fffffa8009cca1a0
rdx=fffffa800a32fb80 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000db33d4 rsp=fffff80000b9cae0 rbp=fffffa800c12c7d0
 r8=0000000000000000  r9=0000000000000001 r10=fffffa8009ccb610
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
ataport!IdeProcessCompletedRequests+0xa4:
fffff880`00db33d4 884321          mov     byte ptr [rbx+21h],al ds:00000000`00000021=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a86be9 to fffff80002a87640

STACK_TEXT:  
fffff800`00b9c808 fffff800`02a86be9 : 00000000`0000000a 00000000`0b584d5e 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff800`00b9c810 fffff800`02a85860 : 00000000`00000001 00000000`00000001 fffffa80`09dd6b60 00000000`0b584d3d : nt!KiBugCheckDispatch+0x69
fffff800`00b9c950 fffff880`00db33d4 : fffff800`03021460 fffffa80`00000000 fffff800`02a83ba0 00000000`00000173 : nt!KiPageFault+0x260
fffff800`00b9cae0 fffff880`00db3104 : fffffa80`09cca1a0 00000000`00000000 fffffa80`09cca1a0 fffffa80`0a32fb80 : ataport!IdeProcessCompletedRequests+0xa4
fffff800`00b9cc10 fffff800`02a92b1c : fffff800`02bf9e80 00000000`000004f0 fffffa80`09cca050 fffffa80`09cca118 : ataport!IdePortCompletionDpc+0x1a8
fffff800`00b9ccd0 fffff800`02a7f36a : fffff800`02bf9e80 fffff800`02c07cc0 00000000`00000000 fffff880`00db2f5c : nt!KiRetireDpcList+0x1bc
fffff800`00b9cd80 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ataport!IdeProcessCompletedRequests+a4
fffff880`00db33d4 884321          mov     byte ptr [rbx+21h],al

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  ataport!IdeProcessCompletedRequests+a4

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ataport

IMAGE_NAME:  ataport.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79293

FAILURE_BUCKET_ID:  X64_0xD1_ataport!IdeProcessCompletedRequests+a4

BUCKET_ID:  X64_0xD1_ataport!IdeProcessCompletedRequests+a4

Followup: MachineOwner
fffff880`04ba8000 fffff880`04be6000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00f81000 fffff880`00fd8000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`0329e000 fffff880`032b6000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`04451000 fffff880`044da000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`04a35000 fffff880`04a4b000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd1000 fffff880`00ddc000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`0774d000 fffff880`07750e00   ArvoFltr ArvoFltr.sys Wed May 06 04:01:11 2009 (4A0143C7)
fffff880`04be6000 fffff880`04bee000   ASACPI   ASACPI.sys   Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`00d9e000 fffff880`00da7000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00da7000 fffff880`00dd1000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`04c1f000 fffff880`04c3f000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`050f5000 fffff880`059f1000   atikmdag atikmdag.sys Wed Jan 26 17:48:28 2011 (4D40A4BC)
fffff880`01000000 fffff880`0104e000   atikmpag atikmpag.sys Wed Jan 26 17:13:33 2011 (4D409C8D)
fffff960`00800000 fffff960`00861000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`0169f000 fffff880`016a6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0442d000 fffff880`0443e000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`033bc000 fffff880`033da000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      unavailable (00000000)
fffff880`019bf000 fffff880`019e9000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01a16000 fffff880`01a46000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00d40000 fffff880`00d9e000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01136000 fffff880`011a8000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`04a00000 fffff880`04a10000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`076ea000 fffff880`076f8000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0440f000 fffff880`0442d000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04400000 fffff880`0440f000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01a00000 fffff880`01a16000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0104e000 fffff880`01070000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`07704000 fffff880`0770d000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`076f8000 fffff880`07704000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0770d000 fffff880`07720000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`076de000 fffff880`076ea000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`05000000 fffff880`050f4000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04a74000 fffff880`04aba000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`010c4000 fffff880`010d8000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01078000 fffff880`010c4000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`0122c000 fffff880`01236000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`021bc000 fffff880`021f6000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`018af000 fffff880`018f9000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`04bee000 fffff880`04bfb000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02ff1000 fffff800`0303a000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04aba000 fffff880`04ade000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`07682000 fffff880`076de000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`04a13000 fffff880`04a2c000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04a2c000 fffff880`04a34080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`07751000 fffff880`0775f000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`032f3000 fffff880`033bc000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`021b3000 fffff880`021bc000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`013e9000 fffff880`013ff000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04d1a000 fffff880`04d29000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0775f000 fffff880`0776d000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bb4000 fffff800`00bbe000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01a54000 fffff880`021b3000   kl1      kl1.sys      Wed Jun 09 09:34:19 2010 (4C0F985B)
fffff880`015f3000 fffff880`015fa000   kl2      kl2.sys      Wed Jun 09 09:24:47 2010 (4C0F961F)
fffff880`01600000 fffff880`01696000   klif     klif.sys     Fri Oct 01 03:28:56 2010 (4CA58DB8)
fffff880`0454e000 fffff880`04557000   klim6    klim6.sys    Thu Apr 22 11:07:24 2010 (4BD0662C)
fffff880`04c00000 fffff880`04c0a000   klmouflt klmouflt.sys Mon Nov 02 11:26:06 2009 (4AEF081E)
fffff880`04d3a000 fffff880`04d7d000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01200000 fffff880`0121b000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`015a3000 fffff880`015ce000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`04c7c000 fffff880`04c81200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`077b1000 fffff880`077c6000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0776d000 fffff880`07790000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cdd000 fffff880`00d2c000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`07720000 fffff880`0772e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04d29000 fffff880`04d38000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04de9000 fffff880`04df6000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00cc0000 fffff880`00cda000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`033da000 fffff880`033f2000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03200000 fffff880`0322d000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`0322d000 fffff880`0327a000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`0327a000 fffff880`0329e000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`01422000 fffff880`0142d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fe1000 fffff880`00feb000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010d8000 fffff880`01136000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`045f2000 fffff880`045fd000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0198e000 fffff880`019a0000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01450000 fffff880`01543000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`059f1000 fffff880`059fd000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04c95000 fffff880`04cc4000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`04c0a000 fffff880`04c1f000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`04557000 fffff880`04566000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`044da000 fffff880`0451f000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01543000 fffff880`015a3000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`0142d000 fffff880`0143e000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`045e6000 fffff880`045f2000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a07000 fffff800`02ff1000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01246000 fffff880`013e9000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01696000 fffff880`0169f000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04528000 fffff880`0454e000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00ec6000 fffff880`00ecd000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00feb000 fffff880`00ffb000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121b000 fffff880`0122c000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07811000 fffff880`078b7000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04c3f000 fffff880`04c7c000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d2c000 fffff880`00d40000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04a4b000 fffff880`04a6f000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04cc4000 fffff880`04cdf000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04cdf000 fffff880`04d00000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04d00000 fffff880`04d1a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04595000 fffff880`045e6000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`019f7000 fffff880`01a00000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01410000 fffff880`01419000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01419000 fffff880`01422000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01954000 fffff880`0198e000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`077c6000 fffff880`077de000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04b52000 fffff880`04ba8000   Rt64win7 Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)
fffff880`078b7000 fffff880`078c2000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0194d000 fffff880`01954000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffff880`01945000 fffff880`0194d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09256000 fffff880`092ef000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`07905000 fffff880`07970000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`078c2000 fffff880`078f3000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`04d38000 fffff880`04d39480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`016ab000 fffff880`018af000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`078f3000 fffff880`07905000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`0143e000 fffff880`0144b000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`011a8000 fffff880`011ca000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`04581000 fffff880`04595000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00580000 fffff960`0058a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`011ca000 fffff880`011f0000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`04d7d000 fffff880`04d8f000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0772e000 fffff880`0774b000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`0774b000 fffff880`0774cf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04b41000 fffff880`04b52000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04d8f000 fffff880`04de9000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`04aeb000 fffff880`04b41000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04ade000 fffff880`04aeb000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019e9000 fffff880`019f7000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`015ce000 fffff880`015f3000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`018f9000 fffff880`01945000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`04df6000 fffff880`04dfe000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
fffff880`04a10000 fffff880`04a12a00   wacomvhid wacomvhid.sys Mon Sep 21 19:29:14 2009 (4AB80C4A)
fffff880`04566000 fffff880`04581000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`01400000 fffff880`01410000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ece000 fffff880`00f72000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f72000 fffff880`00f81000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0451f000 fffff880`04528000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000c0000 fffff960`003d1000   win32k   win32k.sys   unavailable (00000000)
fffff880`00fd8000 fffff880`00fe1000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`07790000 fffff880`077b1000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`01a46000 fffff880`01a54000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`019a0000 fffff880`019ac000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`021f6000 fffff880`021ff000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`019ac000 fffff880`019bf000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

usasma · Apr 4, 2011

Yes, this can cause BSOD's.

The MemTest screenshot shows an error. This was an error in pass 1 - and you've run 8 passes.
I liken these to errors in your checkbook. If they're in the "cent's" column, they don't really matter much - but if they're in the $'s columns, then they are something to be considered.

Since you can't tell when the error will show up, I'd suggest testing each stick individually - and replace the defective stick ASAP.

Good luck!

JoX · Apr 5, 2011

Mgorman87 and Usasma, Thank you for your advice!

The Synology NAS is a network backup-drive so it shouldn't interfere much with the PC, but I have shut it down anyway.

I have updated the drivers and will get back with further information as soon as I have had the time for the more time-consuming CPU and memtests.

Thanks again!

JoX · Apr 9, 2011

OK. Latest attempts to identify the problem :

- Ran memtest on each of the memory sticks separately. No memory faults appeared. Strange since I got one when running with the full set. Only one pass this time though. But I got the memfault at the first pass last time.

- Enabled Driver Verifier. Got a new BSOD (different wording) but I didn't have time to read it before it disappeared. Attached the resulting minidump.

Planning to run the CPU test tomorrow unless someone IDs the problem from the Minidump. Keeping my fingers crossed.

mgorman87 · Apr 9, 2011

Your last dump was a driver verified enabled dump. It pointed to your ROCCAT Arvo keyboard driver. Use a conventional keyboard for the time being. I would also like you to browse to c:\windows\system32\drivers and find ArvoFltr.sys and change it to ArvoFltr.bak.

Leave driver verifier running and upload any more crashes that you get

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Mike\AppData\Local\Temp\Rar$DI00.377\040911-16099-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a01000 PsLoadedModuleList = 0xfffff800`02c46e90
Debug session time: Sat Apr  9 15:06:12.446 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:10.461
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {f6, a5a5a5a50000019c, fffffa800cabd060, fffff88005eeb08e}

Unable to load image \SystemRoot\system32\drivers\ArvoFltr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ArvoFltr.sys
*** ERROR: Module load completed but symbols could not be loaded for ArvoFltr.sys
Probably caused by : ArvoFltr.sys ( ArvoFltr+108e )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: a5a5a5a50000019c, Handle value being referenced.
Arg3: fffffa800cabd060, Address of the current process.
Arg4: fffff88005eeb08e, Address inside the driver that is performing the incorrect reference.

Debugging Details:
------------------


BUGCHECK_STR:  0xc4_f6

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  ArvoHID.EXE

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002f083dc to fffff80002a81640

STACK_TEXT:  
fffff880`0a9bfb68 fffff800`02f083dc : 00000000`000000c4 00000000`000000f6 a5a5a5a5`0000019c fffffa80`0cabd060 : nt!KeBugCheckEx
fffff880`0a9bfb70 fffff800`02f1dae4 : fffffa80`0cabd060 a5a5a5a5`c0000022 fffffa80`00000000 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`0a9bfbb0 fffff800`02cd70c0 : fffff800`02d774e0 fffff880`0a9bfde0 00000000`00000000 fffffa80`0bbe3d00 : nt!VfCheckUserHandle+0x1b4
fffff880`0a9bfc90 fffff800`02d5b905 : fffffa80`0c419600 00000000`00100000 00000000`00000000 fffff800`02d5b800 : nt! ?? ::NNGAKEGL::`string'+0x2173e
fffff880`0a9bfd60 fffff800`02f1d878 : 00000000`00000000 fffff800`02a516ff 00000000`0000015a fffff6fc`00016b68 : nt!ObReferenceObjectByHandle+0x25
fffff880`0a9bfdb0 fffff880`05eeb08e : fffff980`31156ee0 00000000`00000002 fffffa80`0bbe3d10 fffff6fc`00016b68 : nt!VerifierObReferenceObjectByHandle+0x48
fffff880`0a9bfe00 fffff980`31156ee0 : 00000000`00000002 fffffa80`0bbe3d10 fffff6fc`00016b68 fffff880`05eec508 : ArvoFltr+0x108e
fffff880`0a9bfe08 00000000`00000002 : fffffa80`0bbe3d10 fffff6fc`00016b68 fffff880`05eec508 00000000`00000000 : 0xfffff980`31156ee0
fffff880`0a9bfe10 fffffa80`0bbe3d10 : fffff6fc`00016b68 fffff880`05eec508 00000000`00000000 15a00000`02d6d121 : 0x2
fffff880`0a9bfe18 fffff6fc`00016b68 : fffff880`05eec508 00000000`00000000 15a00000`02d6d121 00000000`00000000 : 0xfffffa80`0bbe3d10
fffff880`0a9bfe20 fffff880`05eec508 : 00000000`00000000 15a00000`02d6d121 00000000`00000000 fffff800`00000000 : 0xfffff6fc`00016b68
fffff880`0a9bfe28 00000000`00000000 : 15a00000`02d6d121 00000000`00000000 fffff800`00000000 fffff980`2cf72ff0 : ArvoFltr+0x2508


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ArvoFltr+108e
fffff880`05eeb08e 89842480000000  mov     dword ptr [rsp+80h],eax

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  ArvoFltr+108e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ArvoFltr

IMAGE_NAME:  ArvoFltr.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a0143c7

FAILURE_BUCKET_ID:  X64_0xc4_f6_VRF_ArvoFltr+108e

BUCKET_ID:  X64_0xc4_f6_VRF_ArvoFltr+108e

Followup: MachineOwner
---------

0: kd> lmntsm
start             end                 module name
fffff880`04cb9000 fffff880`04cf7000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00f18000 fffff880`00f6f000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`04600000 fffff880`04618000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`04489000 fffff880`04512000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`04d41000 fffff880`04d57000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c2a000 fffff880`00c35000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`05eea000 fffff880`05eede00   ArvoFltr ArvoFltr.sys Wed May 06 04:01:11 2009 (4A0143C7)
fffff880`04cf7000 fffff880`04cff000   ASACPI   ASACPI.sys   Wed May 13 21:25:17 2009 (4A0B72FD)
fffff880`00dd2000 fffff880`00ddb000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c00000 fffff880`00c2a000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`05f6b000 fffff880`05f8b000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`05033000 fffff880`0592f000   atikmdag atikmdag.sys Wed Jan 26 17:48:28 2011 (4D40A4BC)
fffff880`04a25000 fffff880`04a73000   atikmpag atikmpag.sys Wed Jan 26 17:13:33 2011 (4D409C8D)
fffff960`00840000 fffff960`008a1000   ATMFD    ATMFD.DLL    Fri Jan 07 04:20:44 2011 (4D26DAEC)
fffff880`019ba000 fffff880`019c1000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`045eb000 fffff880`045fc000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04727000 fffff880`04745000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      Sat Nov 20 07:55:34 2010 (4CE7C546)
fffff880`01990000 fffff880`019ba000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00cf8000 fffff880`00db8000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01960000 fffff880`01990000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c9a000 fffff880`00cf8000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010e3000 fffff880`01155000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`04d0c000 fffff880`04d1c000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`05e87000 fffff880`05e95000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`045cd000 fffff880`045eb000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04468000 fffff880`04477000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01a3a000 fffff880`01a50000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05fc8000 fffff880`05fea000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05ea1000 fffff880`05eaa000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05e95000 fffff880`05ea1000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05eaa000 fffff880`05ebd000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05e7b000 fffff880`05e87000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04a73000 fffff880`04b67000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`0592f000 fffff880`05975000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`01071000 fffff880`01085000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01025000 fffff880`01071000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`013d7000 fffff880`013e1000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01a00000 fffff880`01a3a000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`0186f000 fffff880`018b9000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`04cff000 fffff880`04d0c000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02feb000 fffff800`03034000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`05975000 fffff880`05999000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`05e00000 fffff880`05e5c000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`04d1f000 fffff880`04d38000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04d38000 fffff880`04d40080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05ebd000 fffff880`05ecb000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`0465e000 fffff880`04727000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`021ce000 fffff880`021d7000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`014be000 fffff880`014d4000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04c1a000 fffff880`04c29000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05eee000 fffff880`05efc000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bbc000 fffff800`00bc6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01a6f000 fffff880`021ce000   kl1      kl1.sys      Wed Jun 09 09:34:19 2010 (4C0F985B)
fffff880`019f4000 fffff880`019fb000   kl2      kl2.sys      Wed Jun 09 09:24:47 2010 (4C0F961F)
fffff880`01155000 fffff880`011eb000   klif     klif.sys     Fri Oct 01 03:28:56 2010 (4CA58DB8)
fffff880`04586000 fffff880`0458f000   klim6    klim6.sys    Thu Apr 22 11:07:24 2010 (4BD0662C)
fffff880`05e71000 fffff880`05e7b000   klmouflt klmouflt.sys Mon Nov 02 11:26:06 2009 (4AEF081E)
fffff880`04c3a000 fffff880`04c7d000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013ab000 fffff880`013c6000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`05fea000 fffff880`05fef200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`04bce000 fffff880`04be3000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04c8f000 fffff880`04cb2000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c37000 fffff880`00c86000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`05ff0000 fffff880`05ffe000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04c29000 fffff880`04c38000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05e5c000 fffff880`05e69000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00db8000 fffff880`00dd2000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`04745000 fffff880`0475d000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0475d000 fffff880`0478a000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`0478a000 fffff880`047d7000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`047d7000 fffff880`047fb000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`0162b000 fffff880`01636000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f78000 fffff880`00f82000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01085000 fffff880`010e3000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0445d000 fffff880`04468000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0194e000 fffff880`01960000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014f5000 fffff880`015e8000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`04d7b000 fffff880`04d87000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04d87000 fffff880`04db6000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`05f56000 fffff880`05f6b000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`0458f000 fffff880`0459e000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04512000 fffff880`04557000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`01636000 fffff880`01647000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04451000 fffff880`0445d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a01000 fffff800`02feb000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01208000 fffff880`013ab000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`021f3000 fffff880`021fc000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04560000 fffff880`04586000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00fc2000 fffff880`00fd7000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f82000 fffff880`00fb5000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fec000 fffff880`00ffc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013c6000 fffff880`013d7000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`09670000 fffff880`09716000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05f8b000 fffff880`05fc8000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c86000 fffff880`00c9a000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04d57000 fffff880`04d7b000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04db6000 fffff880`04dd1000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04dd1000 fffff880`04df2000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04c00000 fffff880`04c1a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04400000 fffff880`04451000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`01610000 fffff880`01619000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01619000 fffff880`01622000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01622000 fffff880`0162b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01914000 fffff880`0194e000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`04be3000 fffff880`04bfb000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04b67000 fffff880`04bce000   Rt64win7 Rt64win7.sys Fri Jan 21 02:34:00 2011 (4D3936E8)
fffff880`09716000 fffff880`09721000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0190d000 fffff880`01914000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffff880`01905000 fffff880`0190d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09a26000 fffff880`09abf000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`09764000 fffff880`097cf000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`09721000 fffff880`09752000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`04c38000 fffff880`04c39480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0166b000 fffff880`0186f000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`09752000 fffff880`09764000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`0148b000 fffff880`01498000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01647000 fffff880`01669000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`045b9000 fffff880`045cd000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00590000 fffff960`0059a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`01498000 fffff880`014be000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`04c7d000 fffff880`04c8f000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`05ecd000 fffff880`05eea000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`05ecb000 fffff880`05eccf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`05000000 fffff880`05011000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05efc000 fffff880`05f56000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`059a6000 fffff880`059fc000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05999000 fffff880`059a6000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fb5000 fffff880`00fc2000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019c1000 fffff880`019cf000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019cf000 fffff880`019f4000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00fd7000 fffff880`00fec000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`018b9000 fffff880`01905000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`05e69000 fffff880`05e71000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
fffff880`04d1c000 fffff880`04d1ea00   wacomvhid wacomvhid.sys Mon Sep 21 19:29:14 2009 (4AB80C4A)
fffff880`0459e000 fffff880`045b9000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`01600000 fffff880`01610000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e65000 fffff880`00f09000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f09000 fffff880`00f18000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04557000 fffff880`04560000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00381000   win32k   win32k.sys   Wed Jan 05 01:55:39 2011 (4D2415EB)
fffff880`00f6f000 fffff880`00f78000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05011000 fffff880`05032000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`01a50000 fffff880`01a5e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01a5e000 fffff880`01a6a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`021d7000 fffff880`021e0000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`021e0000 fffff880`021f3000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

JoX · Apr 10, 2011

Further work at finding the problem :

- Ran the memtest with a full set of 12 GB memory again. This time _no_ memory fault appeared, even after 5 passes. Huh? Perhaps one of the sticks wasn't quite fully seated last time ...?

- Changed ArvoFltr.sys to ArvoFltr.bak and re-enabled Driver Verifier. ran it for about six hours with some games, Photoshop etc. No BSOD due to verifier.

- Ran CPU tests with Prime95 (Driver verifier still active). Ran all three tests for approximately two hours each. No Prime95 Workers stopped. And no driver verifier BSODs.

I still (mostly) get the same BSOD on start of Windows though. Sometimes (for example after the night-long memtest) a restart will go through without the BSOD. <sigh>

I also seem to have problem uninstalling the Roccat (keyboard) program now (even after changing .bak back to .sys). It claims :
"An installation support file could not be installed.
The system cannot find the file specified."

Any ideas what to do next? :huh:

mgorman87 · Apr 10, 2011

JoX said:
Further work at finding the problem :

- Ran the memtest with a full set of 12 GB memory again. This time _no_ memory fault appeared, even after 5 passes. Huh? Perhaps one of the sticks wasn't quite fully seated last time ...?

- Changed ArvoFltr.sys to ArvoFltr.bak and re-enabled Driver Verifier. ran it for about six hours with some games, Photoshop etc. No BSOD due to verifier.

- Ran CPU tests with Prime95 (Driver verifier still active). Ran all three tests for approximately two hours each. No Prime95 Workers stopped. And no driver verifier BSODs.

I still (mostly) get the same BSOD on start of Windows though. Sometimes (for example after the night-long memtest) a restart will go through without the BSOD. <sigh>

I also seem to have problem uninstalling the Roccat (keyboard) program now (even after changing .bak back to .sys). It claims :
"An installation support file could not be installed.
The system cannot find the file specified."

Any ideas what to do next? :huh:

Try using Revo Uninstaller. Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

JoX · Apr 10, 2011

I tried using Revo Uninstaller previously (to get rid of the Synology SDR3 program which I also can't unsinstall). The problem is that Revo requires a restart, and most of the time a restart leads to a BSOD and I need to do a System Restore, i.e. erasing Revo ...

Do you think it may be related to the BSODs?
In such case I may try to persist and hope to get the Revo install through some restart ...

mgorman87 · Apr 10, 2011

JoX said:
I tried using Revo Uninstaller previously (to get rid of the Synology SDR3 program which I also can't unsinstall). The problem is that Revo requires a restart, and most of the time a restart leads to a BSOD and I need to do a System Restore, i.e. erasing Revo ...

Do you think it may be related to the BSODs?
In such case I may try to persist and hope to get the Revo install through some restart ...

You can try a system file check to see if any windows files are corrupt http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html.

You had also stated previously that you ran each RAM stick for only one pass. You need to run each stick for at least 7-8 passes to yield any results. One pass does not suffice.

So you are now only getting a BSOD upon reboot? Once your in Windows you aren't experiencing any BSOD?

JoX · Apr 10, 2011

Thanks for you quick responses!

I ran a system file check with sfc /verifyonly. It found no corruptions.

I figured that since I got a memfault at the first pass when running all of them together I would find any such fault during the first pass of the single sticks. I stand corrected.

Actually I've never got a BSOD after the initial startup of Windows. I get the BSOD either late in the "Starting Windows" screen, or almost immediately after I see my desktop. If it get past that point the system is stable.

mgorman87 · Apr 10, 2011

JoX said:
Thanks for you quick responses!

I ran a system file check with sfc /verifyonly. It found no corruptions.

I figured that since I got a memfault at the first pass when running all of them together I would find any such fault during the first pass of the single sticks. I stand corrected.

Actually I've never got a BSOD after the initial startup of Windows. I get the BSOD either late in the "Starting Windows" screen, or almost immediately after I see my desktop. If it get past that point the system is stable.

So that would lead me to believe that some driver is loading and is causing the computer to BSOD. Have you tried booting into safe mode? Does it crash while doing that?

There are two things I would like you to try.
First, I would like you to leave only two sticks of memory in the computer (i assume you have 4 right now) and see if you experience any issues. If you still have issues swap the sticks and try again. If the problem still persists then I would like you to put all the memory back in and go to my next test.

I would like you to do a selective start-up and see if the BSOD continues. To do a selective start-up you need to load up windows and type in the start search MSCONFIG and hit enter. When it pops up choose the selective startup button and uncheck "load startup items". Hit apply and then ok. reboot the computer. Does the computer BSOD?

Let me know.

JoX · Apr 10, 2011

Booting into Safe Mode seems to work fine, which is the main way I'm using to then do the System Restore's. Strangely enough the reboot into a System Restore work most of the time, though not always. Do the restore bypass some drivers?

I will try the memory-swaps and the Selective Start-ups you advice, though it may take a day or three as it is getting very late here now and I'll be at work all day tomorrow.

I'll get back to you with what I find.

And once again, many thanks for your advice.

JoX · Apr 12, 2011

Today's checks :

- I have six memory sticks (à 2GB/each) so I remove three of them and restart. Same BSOD. I swap them for the three previously removed sticks and restart. Same BSOD. Probably not the memory then, unless I have double-faults or it's a fault in the memory-holders. I put in all the sticks again.

- I start up MSCONFIG and uncheck the "Load startup items" and reboot. Same BSOD appears,

- I check the "Load startup items" box in MSCONFIG and look around a bit. Hmm, there's a bunch of services that load at startup. I might as well try around a bit with the ones that aren't really necessary before I give up and reinstall Windows so I uncheck TabletServiceWacom and reboot. No BSOD!

Now, I've avoided the BSOD once or twice before when restarting the PC after extended active periods (like after my 17 hour memtest) so I'm not quite in the clear yet but maybe there is hope. I'll get back to you after restarting tomorrow.

Meanwhile, are there anything else that I should check in case this is just a coincidence?

JoX · Apr 13, 2011

Still no BSOD when restarting the system today.

I guess that TabletServiceWacom may be the culprit then, though I'll give it a day or two more before declaring it A-OK.

Even then I'll run some further memtests, and I'm still thinking about perhaps doing a clean reinstall of Windows 7 just to make sure nothing is still messed up.

Many thanks for your help!

Yet another BSOD ... at startup.

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Squad

My Computer My Computer

At a glance

Mr. Cranky Pants

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Squad

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Squad

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Squad

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Squad

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer