Windows 7 BSOD maybe random

mustash · Apr 21, 2011

ARRGH.

Tthe bsod's seem random. The latest one occured while I was watching a movie on VLC media player.

Unfortunately only the last 2 got captured as CC Cleaner wiped the earlier ones.
I captured the last two which are included in the rar file along with the output of BlueScreenView and a screenshot of a basic Everest output. A full Everest report can be generated if that's not sufficient.

I ran MemTest last night and it registered 1067 errors (more or less) in 3 runs.
MemTest won't log but it was a little alarming.

I'm pretty sure the rest is on the everest image. This is the memory. 1A-DATA 4GB (2 x 2GB) 240-Pin DDR2 SDRAM DDR2 800 (PC2 6400) Dual Channel Kit Desktop Memory Model AD2U800B2G5-DRH The system is OC to a hair over 3 GHz via the BIOS. This is a setting that other users mentioned was very stable with the same board/cpu combo. The RAM is compatable according to MSI as far as I know.

Hope I did this right. Please let me know what your thoughts are.
Thanks so much for your help!

cybercore · Apr 21, 2011

RAM is the causer of your sporadic crashes.

Attach CPUZ snips of memory and CPU tabs.
Attach PASSMARK RAMMon HTML.zip.

To be sure it's not the software bugging out somehow,

Uninstall:

PeerBlock
pbfilter.sys Sat Nov 06 22:23:54 2010

AVG
Link Removed
(Link Removed due to 404 Error)

Update drivers:

Realtek LAN
Rt64win7.sys Thu Feb 26 04:04:13 2009
Link Removed

Elaborate Bytes Virtual Clone
VClone.sys Sun Aug 09 17:25:45 2009

Intel GMA
Link Removed

Pcouffin diver, a part of many different CD/DVD burning programs
pcouffin.sys Tue Dec 05 09:39:30 2006

CRASH DUMPS

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\041811-62125-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a4a000 PsLoadedModuleList = 0xfffff800`02c87e50
Debug session time: Mon Apr 18 23:21:25.451 2011 (UTC - 4:00)
System Uptime: 0 days 12:45:47.029
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41790, fffffa8000250a70, ffff, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+339d6 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041790, The subtype of the bugcheck.
Arg2: fffffa8000250a70
Arg3: 000000000000ffff
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41790

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  SearchProtocol

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002b2e26e to fffff80002abbf00

STACK_TEXT:  
fffff880`079e5758 fffff800`02b2e26e : 00000000`0000001a 00000000`00041790 fffffa80`00250a70 00000000`0000ffff : nt!KeBugCheckEx
fffff880`079e5760 fffff800`02aef5d9 : fffffa80`00000000 000007fe`ee345fff 00000000`00000000 fffffa80`07f33d18 : nt! ?? ::FNODOBFM::`string'+0x339d6
fffff880`079e5920 fffff800`02a8f080 : ffffffff`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveMappedView+0xd9
fffff880`079e5a40 fffff800`02d9e7af : fffff8a0`0371a530 00000000`00000001 00000000`00000000 fffffa80`03f18a10 : nt!MmCleanProcessAddressSpace+0x228
fffff880`079e5a90 fffff800`02d77cb8 : 00000000`00000000 00000000`00000001 000007ff`fffde000 00000000`00000000 : nt!PspExitThread+0x47f
fffff880`079e5b60 fffff800`02abb153 : fffffa80`043adb30 00000000`00000000 fffffa80`03f18a10 fffffa80`07d65690 : nt!NtTerminateProcess+0x138
fffff880`079e5be0 00000000`776c15da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`000efac8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776c15da


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+339d6
fffff800`02b2e26e cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+339d6

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+339d6

BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+339d6

Followup: MachineOwner
---------



Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\042011-39593-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a12000 PsLoadedModuleList = 0xfffff800`02c4fe50
Debug session time: Wed Apr 20 22:59:15.021 2011 (UTC - 4:00)
System Uptime: 0 days 9:29:47.599
Loading Kernel Symbols
...............................................................
................................................................
...............................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 406f8, fffff80002a8a609}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000406f8
Arg4: fffff80002a8a609

Debugging Details:
------------------


BUGCHECK_STR:  0x7f_8

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  sidebar.exe

CURRENT_IRQL:  5c

LAST_CONTROL_TRANSFER:  from fffff80002a83469 to fffff80002a83f00

STACK_TEXT:  
fffff880`009efc68 fffff800`02a83469 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000406f8 : nt!KeBugCheckEx
fffff880`009efc70 fffff800`02a81932 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009efdb0 fffff800`02a8a609 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`02f1cfc0 fffff800`02a899e4 : 0020000a`000d003e fffff880`02f1d2e0 fffff880`02f1d2e0 00640061`003c0020 : nt!SepNormalAccessCheck+0x29
fffff880`02f1d050 fffff800`02a89410 : fffff880`02f1d2c0 00000000`00000000 fffff880`02f1d2c0 fffff880`02f1d2e0 : nt!SepAccessCheck+0x1d4
fffff880`02f1d180 fffff800`02a4c842 : fffffa80`0472df60 00000000`00000001 00000000`00000000 fffffa80`05ecc7c8 : nt!SeAccessCheckWithHint+0x180
fffff880`02f1d260 fffff880`01405a4a : 00200020`00200020 003c0020`00200020 00650072`00690064 006f0069`00740063 : nt!SeAccessCheckFromState+0x102
fffff880`02f1d950 fffff880`014052af : 00720070`00000000 0063006f`00000000 00760020`006c006f 00650075`006c0061 : NETIO!CompareSecurityContexts+0x6a
fffff880`02f1d9c0 fffff880`01405444 : 00200020`00200020 00200020`00200020 00700072`003c0020 fffff880`014c2999 : NETIO!MatchValues+0xef
fffff880`02f1da10 fffff880`014057c1 : fffffa80`07053270 fffffa80`076e35d0 fffff880`02f1e290 fffff880`02f1dc50 : NETIO!FilterMatch+0x94
fffff880`02f1da60 fffff880`014066fc : fffff880`02f10003 00000000`00000000 fffff880`02f1e290 fffff880`02f1dc50 : NETIO!IndexHashClassify+0x151
fffff880`02f1db10 fffff880`0173f819 : fffff880`02f1e290 fffff880`02f1dfc8 fffff880`02f1ede0 fffffa80`05158950 : NETIO!KfdClassify+0xa4e
fffff880`02f1de80 fffff880`017076f8 : fffffa80`053fe850 fffff880`02f1ed08 fffff880`018057a0 fffff880`02f1ede0 : tcpip!WfpAleClassify+0x49
fffff880`02f1ded0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeReceive+0x818


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff80002a8a105 - nt!SwapContext_PatchXSave+2
	[ 01:21 ]
    fffff80002a8a1e8 - nt!SwapContext_PatchXRstor+2 (+0xe3)
	[ 09:29 ]
    fffff80002a8a3a5 - nt!EnlightenedSwapContext_PatchXSave+2 (+0x1bd)
	[ 01:21 ]
    fffff80002a8a48a - nt!EnlightenedSwapContext_PatchXRstor+2 (+0xe5)
	[ 09:29 ]
4 errors : !nt (fffff80002a8a105-fffff80002a8a48a)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT_LARGE

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT_LARGE

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT_LARGE

Followup: memory_corruption
---------

DRIVERS

Code:

start             end                 module name
fffff880`00eb3000 fffff880`00f0a000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`02c91000 fffff880`02d1a000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`02c33000 fffff880`02c49000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0108a000 fffff880`01095000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`05583000 fffff880`0558e000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00ded000 fffff880`00df6000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01060000 fffff880`0108a000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff960`00940000 fffff960`009a1000   ATMFD    ATMFD.DLL    Sat Feb 19 04:00:32 2011 (4D5F86B0)
fffff880`01226000 fffff880`01231000   avgfwd6a avgfwd6a.sys Tue Oct 06 18:04:57 2009 (4ACBBF09)
fffff880`022f2000 fffff880`0231f000   AVGIDSDriver AVGIDSDriver.sys Tue May 11 20:49:44 2010 (4BE9FB28)
fffff880`022e6000 fffff880`022f2000   AVGIDSFilter AVGIDSFilter.sys Tue May 11 20:48:52 2010 (4BE9FAF4)
fffff880`0168d000 fffff880`01697000   AVGIDSwa AVGIDSwa.sys Tue May 11 20:50:03 2010 (4BE9FB3B)
fffff880`03b92000 fffff880`03bd9000   avgldx64 avgldx64.sys Thu Jun 03 17:06:48 2010 (4C081968)
fffff880`03b8a000 fffff880`03b91080   avgmfx64 avgmfx64.sys Sun Apr 25 17:06:15 2010 (4BD4AEC7)
fffff880`01680000 fffff880`0168c0c0   avgrkx64 avgrkx64.sys Wed Feb 10 22:52:44 2010 (4B737F0C)
fffff880`01000000 fffff880`01051000   avgtdia  avgtdia.sys  Thu Jun 03 17:09:57 2010 (4C081A25)
fffff880`019e5000 fffff880`019ec000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b79000 fffff880`03b8a000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03478000 fffff880`03496000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
fffff880`04c3e000 fffff880`04c59000   BrSerIb  BrSerIb.sys  Mon Nov 02 22:06:34 2009 (4AEF9E3A)
fffff880`04c3a000 fffff880`04c3d900   BrUsbSIb BrUsbSIb.sys Mon Nov 02 22:06:35 2009 (4AEF9E3B)
fffff960`00740000 fffff960`00767000   cdd      cdd.dll      Sat Nov 20 07:55:34 2010 (4CE7C546)
fffff880`04dcb000 fffff880`04de8000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`0148b000 fffff880`014b5000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00cd7000 fffff880`00d97000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01650000 fffff880`01680000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c79000 fffff880`00cd7000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01153000 fffff880`011c5000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`02c23000 fffff880`02c33000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`04c74000 fffff880`04c82000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03ad8000 fffff880`03b5b000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`019c9000 fffff880`019db000   dc3d     dc3d.sys     Thu Jul 01 06:07:45 2010 (4C2C68F1)
fffff880`03b5b000 fffff880`03b79000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`03ac9000 fffff880`03ad8000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0163a000 fffff880`01650000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04d97000 fffff880`04db9000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`04df6000 fffff880`04dff000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0443c000 fffff880`04448000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01697000 fffff880`016aa000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04dbf000 fffff880`04dcb000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04206000 fffff880`042fa000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`042fa000 fffff880`04340000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`03abe000 fffff880`03ac9000   ElbyCDIO ElbyCDIO.sys Thu Dec 17 17:25:16 2009 (4B2AAFCC)
fffff880`05400000 fffff880`05436000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`03a27000 fffff880`03a34000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010e1000 fffff880`010f5000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`04cde000 fffff880`04ce9000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01095000 fffff880`010e1000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01600000 fffff880`0163a000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`018bf000 fffff880`01909000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`02fef000 fffff800`03038000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04340000 fffff880`04364000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`04cfe000 fffff880`04d5a000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`02211000 fffff880`0222a000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`045f2000 fffff880`045fa080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`016aa000 fffff880`016b8000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`0231f000 fffff880`023e8000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`019c0000 fffff880`019c9000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`03a34000 fffff880`03a52000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03c0c000 fffff880`041f0fe0   igdkmd64 igdkmd64.sys Wed Sep 23 15:22:57 2009 (4ABA7591)
fffff880`00fe3000 fffff880`00feb000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03a00000 fffff880`03a16000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02c14000 fffff880`02c23000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bc4000 fffff800`00bce000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`0456f000 fffff880`045b2000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013d8000 fffff880`013f3000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`04db9000 fffff880`04dbe200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0228b000 fffff880`022a0000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02247000 fffff880`0226a000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`05436000 fffff880`05440000   mbam     mbam.sys     Thu Dec 16 15:53:16 2010 (4D0A7C3C)
fffff880`00c16000 fffff880`00c65000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`04de8000 fffff880`04df6000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04520000 fffff880`0452f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0222a000 fffff880`02237000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d97000 fffff880`00db1000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`03496000 fffff880`034ae000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0555b000 fffff880`05583000   mrxdav   mrxdav.sys   Sat Nov 20 04:26:42 2010 (4CE79452)
fffff880`034ae000 fffff880`034db000   mrxsmb   mrxsmb.sys   Tue Feb 22 23:56:22 2011 (4D649376)
fffff880`034db000 fffff880`03528000   mrxsmb10 mrxsmb10.sys Tue Feb 22 23:55:12 2011 (4D649330)
fffff880`03528000 fffff880`0354c000   mrxsmb20 mrxsmb20.sys Tue Feb 22 23:55:12 2011 (4D649330)
fffff880`0121b000 fffff880`01226000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f13000 fffff880`00f1d000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010f5000 fffff880`01153000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`03ab3000 fffff880`03abe000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`019ae000 fffff880`019c0000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014c0000 fffff880`015b3000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`0446f000 fffff880`0447b000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0447b000 fffff880`044aa000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`04ce9000 fffff880`04cfe000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`02d5d000 fffff880`02d6c000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c4c000 fffff880`02c91000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`011c5000 fffff880`011d6000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03aa7000 fffff880`03ab3000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a12000 fffff800`02fef000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01235000 fffff880`013d8000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`019dc000 fffff880`019e5000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02d23000 fffff880`02d49000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00f5d000 fffff880`00f72000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`05597000 fffff880`055a0000   pbfilter pbfilter.sys Sat Nov 06 22:23:54 2010 (4CD60DBA)
fffff880`00f1d000 fffff880`00f50000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00feb000 fffff880`00ffb000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04500000 fffff880`04514380   pcouffin pcouffin.sys Tue Dec 05 09:39:30 2006 (457584A2)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0354c000 fffff880`035f2000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`02237000 fffff880`02247000   point64  point64.sys  Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`04d5a000 fffff880`04d97000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c65000 fffff880`00c79000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0444b000 fffff880`0446f000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`044aa000 fffff880`044c5000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`044c5000 fffff880`044e6000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`044e6000 fffff880`04500000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a56000 fffff880`03aa7000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04515000 fffff880`04520000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`015e8000 fffff880`015f1000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`015f1000 fffff880`015fa000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`014b5000 fffff880`014be000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01974000 fffff880`019ae000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`022a0000 fffff880`022b8000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04364000 fffff880`04396000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`0453e000 fffff880`0456d000   SCSIPORT SCSIPORT.SYS Sat Nov 20 05:34:01 2010 (4CE7A419)
fffff880`035f2000 fffff880`035fd000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`041f1000 fffff880`041fd000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02d6c000 fffff880`02d89000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0196d000 fffff880`01974000   SmartDefragDriver SmartDefragDriver.sys Wed Feb 23 03:37:56 2011 (4D64C764)
fffff880`01965000 fffff880`0196d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`054c3000 fffff880`0555b000   srv      srv.sys      Tue Feb 22 23:56:21 2011 (4D649375)
fffff880`05459000 fffff880`054c3000   srv2     srv2.sys     Tue Feb 22 23:56:00 2011 (4D649360)
fffff880`03400000 fffff880`03431000   srvnet   srvnet.sys   Tue Feb 22 23:55:44 2011 (4D649350)
fffff880`0456d000 fffff880`0456e480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`016bb000 fffff880`018bf000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`03431000 fffff880`03443000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`013f3000 fffff880`01400000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`011d6000 fffff880`011f8000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`02c00000 fffff880`02c14000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03bd9000 fffff880`03bff000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`045b2000 fffff880`045c4000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0345d000 fffff880`03477c80   usbaudio usbaudio.sys Sat Nov 20 05:43:52 2010 (4CE7A668)
fffff880`04c00000 fffff880`04c1d000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`045f0000 fffff880`045f1f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03a16000 fffff880`03a27000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`04c84000 fffff880`04cde000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`043a3000 fffff880`043f9000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`04c1d000 fffff880`04c29000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`045e1000 fffff880`045f0000   usbrpm   usbrpm.sys   Sat Nov 20 06:37:19 2010 (4CE7B2EF)
fffff880`04c29000 fffff880`04c3a000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`04c59000 fffff880`04c74000   USBSTOR  USBSTOR.SYS  Sat Nov 20 05:44:05 2010 (4CE7A675)
fffff880`04396000 fffff880`043a3000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`022b8000 fffff880`022e5280   usbvideo usbvideo.sys Sat Nov 20 05:44:34 2010 (4CE7A692)
fffff880`0452f000 fffff880`0453e000   VClone   VClone.sys   Sun Aug 09 17:25:45 2009 (4A7F3ED9)
fffff880`00f50000 fffff880`00f5d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019ec000 fffff880`019fa000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`015b3000 fffff880`015d8000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00db1000 fffff880`00ded000   vmbus    vmbus.sys    Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`01909000 fffff880`01919000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00f72000 fffff880`00f87000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00f87000 fffff880`00fe3000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01919000 fffff880`01965000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`04400000 fffff880`0443c000   vpchbus  vpchbus.sys  Sat Nov 20 06:35:38 2010 (4CE7B28A)
fffff880`02d49000 fffff880`02d5d000   vpcnfltr vpcnfltr.sys Sat Nov 20 06:35:20 2010 (4CE7B278)
fffff880`045c4000 fffff880`045e1000   vpcusb   vpcusb.sys   Sat Nov 20 06:35:31 2010 (4CE7B283)
fffff880`02da4000 fffff880`02dfa600   vpcvmm   vpcvmm.sys   Sat Nov 20 06:35:48 2010 (4CE7B294)
fffff880`02d89000 fffff880`02da4000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`015d8000 fffff880`015e8000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d1a000 fffff880`02d23000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00080000 fffff960`00392000   win32k   win32k.sys   Wed Mar 02 22:51:40 2011 (4D6F104C)
fffff880`00c00000 fffff880`00c14000   winhv    winhv.sys    Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`00f0a000 fffff880`00f13000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0226a000 fffff880`0228b000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`055cc000 fffff880`055fd000   WUDFRd   WUDFRd.sys   Sat Nov 20 05:43:32 2010 (4CE7A654)

Unloaded modules:
fffff880`0558e000 fffff880`05597000   pbfilter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`0555b000 fffff880`055cc000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01697000 fffff880`016a5000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`016a5000 fffff880`016b1000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`016b1000 fffff880`016ba000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`019c9000 fffff880`019dc000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

mustash · Apr 25, 2011

Thanks for the reply Cybercore!

I lack your sophistication so please bear with me. I might need a little hand holding if I didn't understand your instructions completely.

It seems like you concluded that I probably have bad RAM.

I installed PeerBlock although that is only loaded with a BitTorrent client. They were probably both running along with VLC during my last BSOD

What about installing AVG? I'm running Pro 9.XX
Do you mean permanently or what? I've tried Avast, Bitdefender and a couple of others and was underwhelmed. I'll do as you suggest with some clarification but don't want to run with no AV entirely.

I was unable to find Security Essentials in Control Panel of Windows features but I know its running somewhere. That didn't get installed.

I also didn't find Pcouffin diver but reinstalled Elby virtual clone from their site.

One thing that I neglected to mention was that I did a clean install of Win 7 ultimate. I left an installation of XP pro 32 bit on a different partition of the same physical HD hoping to run some older peripherals. That didn't work quite right and my have "confused" things.

There is some discrepancy over which partition is the System and which is the local drive. What I did was flip some SATA cables around trying to achieve a dual boot system. Whereas after the install of Win7 it would only boot to Win7 after switching cables, it would only boot to XP even with changing the boot order in the BIOS.

I did a Repair install of 7 resulting in the system only booting to 7 now. After that I tried virtual xp. The software for the old neg/slide scanner still didn't function properly so I uninstalled it.Having said that, I have no idea if some of the files from the x86 XP ver are somehow still in use.

I can probably format the XP partition but I can't imagine how that would help.

I'm going to dump out of most everything and run the diagnostic software you suggested. I'll include the snippets in my next post later.

If you have any other sage advice, particularly if it has to do with AV, please let me know soonest.

One last thing (off topic) I had a lot of time registering with your CAPATCHA (random question) and finally registered through FB. That imported my real name. I would prefer to use another user nm. Is that possible?

Thanks for reading!

cybercore · Apr 25, 2011

Ok, let's go step by step. Attach this stuff:

CPUZ snips of memory and CPU tabs.
PASSMARK RAMMon HTML.zip.

This is to see what memory sticks you've got and what your current ram settings are.

mustash · Apr 26, 2011

I hope I got this right.
If I missed something lemme no.
Its interesting that Burning detected bad ram whereas Reimage saw naught but wanted to repair some things.
UniBlue product detected a boatload of registry errors but so does PC Tools product which it "repairs".
I don't mind telling you that I have despised uniBlu since they launched a malware campaign.
Clearly there's a issue with the RAM..ro maybe not.
AlData doesn't have a procedure to ship good ran & then ship the bad back. That will put me out of biz for about 2 weeks.

Oh BTW thanks your you're patience

cybercore · Apr 27, 2011

Hi Ed, thank you for the attachments and let's read my "sophisticated" post again:

cybercore said:
Ok, let's go step by step. Attach this stuff:

---> CPUZ snips of memory and CPU tabs.
---> PASSMARK RAMMon HTML.zip.

This is to see what memory sticks you've got and what your current ram settings are.

I see the CPU-Z shots but there's no RAMMon. Attach it kindly if you would because I'd like to look up your sticks model number to be sure your current settings (800 5 5 5 15) are correct.

Your Celeron E3300 @2,5Ghz is running 3012.5Mhz which means it is overclocked and the EIST (frequency throttle down) feature is off.

1. Set your hardware at stock, no overclocking even with the use of Intel Turbo Boost.
2. Enable EIST in the bios.

You can do 1 & 2 manually or you can load setup/fail-safe/optimized defaults.

Again:

1. Set hardware strictly at stock values, no overclocking
2. Enable the Enhanced Intel Speedstep Technology in the bios
3. Attach RAMMon HTML.zip

Do so and let's take it from there. When done, re-attach the MEMORY and CPU snips so I can see if your hardware is set right.

mustash · Apr 27, 2011

Told ya it was OC'd Was afraid you were going to suggest that.
OK then.

The RAM specs are available here Newegg.com - A-DATA 4GB (2 x 2GB) 240-Pin DDR2 SDRAM DDR2 800 (PC2 6400) Dual Channel Kit Desktop Memory Model AD2U800B2G5-DRH

It irks me that I paid so much more for it.

Couple of things. You wanted me to uninstall AVG which I have yet to do and am disinclined unless I have some manner of AV, AM strategy in place, Could you elaborate on that?

I'm not sure this BIOS has speedstep but will check, bring everything back to stock etc.

I had a couple of BSOD's since we last typed. One happened when running VLC The other I can't remember.

Running BurnIn with the default settings rested in choppy video & audio. Drove me crazy. You will notice that the results I sent were individual component tests.

Finally do you want me to run all the tests after setting everything to stock & attach 'em?

Thanks!

E

cybercore · Apr 27, 2011

Told ya it was OC'd Was afraid you were going to suggest that.
OK then.

Exactly, since it is in fact overclocked and your bsod's are related to hardware -- I had to mention to disable the overclocking. Set the hardware at stock. This is really step #1. Do as I ask and re-attach 1 screenshot of the CPU-Z CPU tab, alright?

~~~~~~~

Your RAM is alright, but since you're having blue screens related to memory management, disable the overclocking for now.

~~~~~~~

Step #2 will be to update drivers as in my 1st post.

Step #3, if blue screens persists after you have set the hardware at stock and updated the drivers, will be to uninstall AVG.

Sounds good ? Ed?

mustash · Apr 28, 2011

Well tis done Cybercore.

After some difficulty the scariest of which was the BIOS scrambling the boot directory with predictable results.
\
I UL'd 2 screenshots.
It seems like I had to validate some of the tabbed screens to generate an accurate result.

Link Removed - Invalid URL some reason subsequent posts to this forum are not making it to my email addy.
Checked you profile and all seems to be in order.
Mike changed my usernm but the issue preceded that.

Don't know how you can really glean much useful info from this other than to verify that I did what you suggested.

Looking forward to the next blast Mr. Core or can I call you Cyber?

Really,

Thanks a bunch!

cybercore · Apr 28, 2011

1. From what I see in your screenshot, CPU is at stock with EIST on.
Well done.

2. You have updated Realtek Lan, Intel GMA, and Virtual Clone, right?

3. Have you had any crashes so far?

mustash · Apr 28, 2011

Yup. All updated as far as I know

Ran Registry Mechanic & CC Cleaner Registry module.

Slowly I boot. Bit by Bit, Byte by Byte.
System is noticeably slower.

Not yet but a initial test tests indicate memory problem. I ran a quick BurnIn (RAM only) & Win7 native test which flashed by a bunch of stuff that couldn't be installed. It ran a test & indicated what sounded like a problem.

Windows suddenly has the urge to reactivate and reinstall SP1-64. I allowed it.

I ran a few tests that indicated that RAM is fried. I ran others that made no mention of RAM issues. I have the results.

I also ran a Windows reliability test. This test had a LOT of detail displayed graphically with links to detail and hyperlinks to MS solutions.
There was an XML export option but it opened in notepad at first.
I dl'ed a program that just might display the results in a more meaningful fashion. I imported the delimited data but haven't looked at it yet.
If this cooks so that it can be transmitted, it may be an invaluable tool.

I'd really like to avoid RMAing the RAM. I don't want to sink a Penny into legacy RAM as a temporary replacement.

Suggestions? Rants? Let me Know.

I'm up for any ideas or will test further at your behest Big Guy.

.

cybercore · Apr 29, 2011

I ran a few tests that indicated that RAM is fried.

I see. What I would do if this was my PC:

1. Load setup defaults in the bios - as you already did.
2. Format the partition and clean install the system.
3. Avoid old drivers and software.
4. Avoid all sorts of registry mechanics, boosters, and optimizers. Especially given that your hardware is quite powerful without a need for any of those tools.

You should be right. Of course if RAM is really "fried" you'll need to replace it, but before doing so the hardware must be set strictly at stock and the RAM should be given a good number of passes (10 +) with Memtest86+ - Advanced Memory Diagnostic Tool.

mustash · Apr 29, 2011

Thaks for all your help!

I have learned a bit about available tests. That's a good thing. I'll RMA the ram.
I stll want to know what AVG might have to do with all this.

Thaks again!

E

cybercore · Apr 29, 2011

AVG is almost always recommended to uninstall whenever someone has blue screens, including cases of memory management.
Combined with old drivers, AVG is a sure causer of BSOD, sooner or later.
However, if you know for sure your RAM is bad, uninstalling AVG will fix nothing. Before RMA'ing the RAM, follow my previous post.

Good luck.

Search

Navigation section

Windows 7 BSOD maybe random

mustash

New Member

Attachments

cybercore

cybercore

New Member

mustash

New Member

cybercore

New Member

mustash

New Member

Attachments

cybercore

New Member

mustash

New Member

Attachments

cybercore

New Member

mustash

New Member

Attachments

cybercore

New Member

mustash

New Member

cybercore

New Member

mustash

New Member

cybercore

New Member