Windows 7 BSOD on Windows 7 x64 and Windows XP x32 - need help

mailinator · Mar 5, 2011

Hello people,

I'm getting BSOD randomly. I have tried different versions of Windows, including Windows XP, Windows Vista and of course Windows 7. All of them have caused BSOD, even after clean install. I'm not expert in this field, but most of them have reported ntsokrnl.exe or something..

What I have tried so far without effect:
- Clean install Windows XP and Windows 7
- Remove RAM sticks one by one (2x2GB)
- Test ram memory with memtest86+ - no errors
- Test HDD with Western Digital tool - no errors
- Test graphic card with various benchmark programs - no errors

Sometimes I have up to seven BSOD's per day, sometimes I don't have them for a one week. BSOD's are happening randomly, when I work, play game or even when computer is idle..

In attachment you may find minidumps from twelve hours ago

cybercore · Mar 5, 2011

BugCheck 1E, {ffffffffc0000005, fffff80002fa8aab, 1, 1e6}
Probably caused by : memory_corruption ( nt!MiUnmapViewOfSection+52b )

BugCheck 50, {fffff3000dae4138, 0, fffff80002aa0ef5, 7}
Probably caused by : ntkrnlmp.exe ( nt!FsFilterPerformCallbacks+105 )

What I have tried so far without effect:
- Clean install Windows XP and Windows 7
- Remove RAM sticks one by one (2x2GB)
- Test ram memory with memtest86+ - no errors
- Test HDD with Western Digital tool - no errors
- Test graphic card with various benchmark programs - no errors

1. Let's see if your RAM is set right, just in case if it's not:

- CPU-Z memory tab
- RamMon report saved as txt

Link Removed

2. Uninstall Mebius Privacy Box.

3. Uninstall COMODO Firewall

4. Uninstall BitDefender Antivirus.
Replace all with MSE for now.

5. Update Realtek 10/100 NIC
Rtnic64.sys Fri May 30 11:12:23 2008

6. Update ATI video driver
atikmdag.sys Thu Jun 25 19:18:11 2009

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\030411-29905-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a00000 PsLoadedModuleList = 0xfffff800`02c45e90
Debug session time: Fri Mar  4 14:05:01.301 2011 (UTC - 5:00)
System Uptime: 0 days 0:47:42.503
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff3000dae4138, 0, fffff80002aa0ef5, 7}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!FsFilterPerformCallbacks+105 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff3000dae4138, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80002aa0ef5, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000007, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cb10e8
 fffff3000dae4138 

FAULTING_IP: 
nt!FsFilterPerformCallbacks+105
fffff800`02aa0ef5 488b5c2468      mov     rbx,qword ptr [rsp+68h]

MM_INTERNAL_CODE:  7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88008dc7f40 -- (.trap 0xfffff88008dc7f40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8003a901b0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002aa0ef5 rsp=fffff88008dc80d0 rbp=fffffa8004d1c000
 r8=0000000000000000  r9=fffff88008dc8130 r10=fffffa8003a90af0
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!FsFilterPerformCallbacks+0x105:
fffff800`02aa0ef5 488b5c2468      mov     rbx,qword ptr [rsp+68h] ss:0018:fffff880`08dc8138=0000000000000000
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a2abf7 to fffff80002a80640

STACK_TEXT:  
fffff880`08dc7dd8 fffff800`02a2abf7 : 00000000`00000050 fffff300`0dae4138 00000000`00000000 fffff880`08dc7f40 : nt!KeBugCheckEx
fffff880`08dc7de0 fffff800`02a7e76e : 00000000`00000000 fffff300`0dae4138 fffff880`009e9100 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x44811
fffff880`08dc7f40 fffff800`02aa0ef5 : 00000000`00000000 00000000`000007ff 00000000`00000000 00000000`00000009 : nt!KiPageFault+0x16e
fffff880`08dc80d0 fffff800`02d56654 : 00000000`00000000 00000000`00000000 fffffa80`04d1c030 00000000`00000000 : nt!FsFilterPerformCallbacks+0x105
fffff880`08dc8130 fffff800`02ac2d07 : fffff880`08dc86c0 fffff880`08dc8600 fffffa80`04d2bf10 00000000`00000000 : nt!FsRtlAcquireFileForCcFlushEx+0xd0
fffff880`08dc83d0 fffff800`02ac20c9 : fffffa80`04d294b8 00000000`00000000 00000000`00001000 fffff880`08dc8680 : nt!MmFlushSection+0x1c3
fffff880`08dc8490 fffff880`010d66e1 : fffffa80`04d294b8 fffff800`00000000 fffff8a0`00001000 fffff880`00001000 : nt!CcFlushCache+0x5e9
fffff880`08dc8590 fffff880`010d98db : fffff880`08dc8ab0 fffffa80`04d1c180 00000000`00000000 fffff880`08dc8c00 : Ntfs!NtfsCheckpointVolume+0xbc1
fffff880`08dc8990 fffff880`010d827b : fffff880`08dc8ab0 fffffa80`04d1c180 fffffa80`04d1c188 fffffa80`048df188 : Ntfs!NtfsCheckpointAllVolumesWorker+0x4b
fffff880`08dc89e0 fffff880`010da398 : fffff880`08dc8ab0 00000000`00000000 fffff880`010d9890 fffff880`08dc8cb8 : Ntfs!NtfsForEachVcb+0x167
fffff880`08dc8a80 fffff800`02a8aa21 : 00000000`00000000 fffff800`02d76f01 fffff800`02c7f100 fffffa80`00000002 : Ntfs!NtfsCheckpointAllVolumes+0xb8
fffff880`08dc8cb0 fffff800`02d1dcce : fffff880`0334cdf8 fffffa80`03c09570 00000000`00000080 fffffa80`039d4b30 : nt!ExpWorkerThread+0x111
fffff880`08dc8d40 fffff800`02a71fe6 : fffff880`009e9180 fffffa80`03c09570 fffffa80`03ad0040 fffff880`01024384 : nt!PspSystemThreadStartup+0x5a
fffff880`08dc8d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!FsFilterPerformCallbacks+105
fffff800`02aa0ef5 488b5c2468      mov     rbx,qword ptr [rsp+68h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!FsFilterPerformCallbacks+105

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

FAILURE_BUCKET_ID:  X64_0x50_nt!FsFilterPerformCallbacks+105

BUCKET_ID:  X64_0x50_nt!FsFilterPerformCallbacks+105

Followup: MachineOwner
---------























Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\030511-30232-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02c11000 PsLoadedModuleList = 0xfffff800`02e56e90
Debug session time: Fri Mar  4 18:52:57.092 2011 (UTC - 5:00)
System Uptime: 0 days 4:02:44.294
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002fa8aab, 1, 1e6}

Probably caused by : memory_corruption ( nt!MiUnmapViewOfSection+52b )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002fa8aab, The address that the exception occurred at
Arg3: 0000000000000001, Parameter 0 of the exception
Arg4: 00000000000001e6, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!MiUnmapViewOfSection+52b
fffff800`02fa8aab 6601afc6010000  add     word ptr [rdi+1C6h],bp

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  00000000000001e6

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec20e8
 00000000000001e6 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  TrustedInstall

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88009726910 -- (.trap 0xfffff88009726910)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000005580000 rbx=0000000000000000 rcx=00000000058e0500
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002fa8aab rsp=fffff88009726aa0 rbp=000000000000002c
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=fffff7000108002c r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!MiUnmapViewOfSection+0x52b:
fffff800`02fa8aab 6601afc6010000  add     word ptr [rdi+1C6h],bp ds:e230:00000000`000001c6=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cdd028 to fffff80002c91640

STACK_TEXT:  
fffff880`09726088 fffff800`02cdd028 : 00000000`0000001e ffffffff`c0000005 fffff800`02fa8aab 00000000`00000001 : nt!KeBugCheckEx
fffff880`09726090 fffff800`02c90cc2 : fffff880`09726868 00000000`0000058e fffff880`09726910 00000000`0000002c : nt! ?? ::FNODOBFM::`string'+0x4987d
fffff880`09726730 fffff800`02c8f83a : 00000000`00000001 00000000`000001e6 fffff680`0002d000 00000000`0000058e : nt!KiExceptionDispatch+0xc2
fffff880`09726910 fffff800`02fa8aab : 00000000`0000058e 00000000`0000002c 00000000`0000002c fffff800`02c80b84 : nt!KiPageFault+0x23a
fffff880`09726aa0 fffffa80`06a903f8 : fffffa80`050780d0 00000000`00000000 fffffa80`04980950 00000000`00000000 : nt!MiUnmapViewOfSection+0x52b
fffff880`09726b60 fffffa80`050780d0 : 00000000`00000000 fffffa80`04980950 00000000`00000000 00000000`058e0000 : 0xfffffa80`06a903f8
fffff880`09726b68 00000000`00000000 : fffffa80`04980950 00000000`00000000 00000000`058e0000 00000000`058e0000 : 0xfffffa80`050780d0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiUnmapViewOfSection+52b
fffff800`02fa8aab 6601afc6010000  add     word ptr [rdi+1C6h],bp

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!MiUnmapViewOfSection+52b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!MiUnmapViewOfSection+52b

BUCKET_ID:  X64_0x1E_c0000005_nt!MiUnmapViewOfSection+52b

Followup: MachineOwner
---------

Drivers:

Code:

start             end                 module name
fffff880`04056000 fffff880`04094000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00e03000 fffff880`00e5a000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`06600000 fffff880`06648000   afcdp    afcdp.sys    Thu Nov 18 11:20:02 2010 (4CE55232)
fffff880`038a4000 fffff880`0392d000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`04094000 fffff880`040aa000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`041ae000 fffff880`041c3000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00f97000 fffff880`00fa2000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`00f64000 fffff880`00f6d000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f6d000 fffff880`00f97000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`04ac8000 fffff880`050df000   atikmdag atikmdag.sys Thu Jun 25 19:18:11 2009 (4A4405B3)
fffff880`01bf3000 fffff880`01bfb000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff960`00860000 fffff960`008c1000   ATMFD    ATMFD.DLL    Sat Nov 20 04:49:28 2010 (4CE799A8)
fffff880`06648000 fffff880`06672000   bdfm     bdfm.sys     Thu Apr 22 09:20:49 2010 (4BD04D31)
fffff880`06064000 fffff880`060c9000   bdfsfltr bdfsfltr.sys Fri Jun 25 09:41:26 2010 (4C24B206)
fffff880`01225000 fffff880`0124c000   bdfwfpf  bdfwfpf.sys  Fri Aug 20 11:41:40 2010 (4C6EA234)
fffff880`06672000 fffff880`06691000   BDHV     BDHV.SYS     Thu Apr 22 09:20:29 2010 (4BD04D1D)
fffff880`019f8000 fffff880`019ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04177000 fffff880`04188000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0490e000 fffff880`0492c000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00750000 fffff960`00777000   cdd      cdd.dll      unavailable (00000000)
fffff880`0146e000 fffff880`01498000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`0142b000 fffff880`0145b000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00ce6000 fffff880`00d44000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01371000 fffff880`013b3000   cmdguard cmdguard.sys Wed Jan 05 12:10:43 2011 (4D24A613)
fffff880`01259000 fffff880`01265000   cmdhlp   cmdhlp.sys   Wed Jan 05 12:09:59 2011 (4D24A5E7)
fffff880`012e4000 fffff880`01356000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`051ee000 fffff880`051fe000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`05ef7000 fffff880`05f05000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`040d6000 fffff880`04159000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`04159000 fffff880`04177000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`03868000 fffff880`03877000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01a55000 fffff880`01a6b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`047ca000 fffff880`047ec000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05f11000 fffff880`05f1a000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05f05000 fffff880`05f11000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05f1a000 fffff880`05f2d000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05eeb000 fffff880`05ef7000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`050df000 fffff880`051d3000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`01003000 fffff880`01017000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00fa2000 fffff880`00fee000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01367000 fffff880`01371000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01600000 fffff880`0163a000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`0184d000 fffff880`01897000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`031fb000 fffff800`03244000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04a46000 fffff880`04a6a000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`04731000 fffff880`0478d000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`05f7d000 fffff880`05f96000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`05f96000 fffff880`05f9e080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05f6f000 fffff880`05f7d000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04845000 fffff880`0490e000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01a4c000 fffff880`01a55000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`04a92000 fffff880`04ab0000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`039a1000 fffff880`039b9000   inspect  inspect.sys  Wed Jan 05 12:09:49 2011 (4D24A5DD)
fffff880`04ab0000 fffff880`04abf000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00ba5000 fffff800`00baf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0466d000 fffff880`046b0000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`012c9000 fffff880`012e4000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`047ec000 fffff880`047f1200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05f2d000 fffff880`05f42000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05fbc000 fffff880`05fdf000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cc5000 fffff880`00cd2000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`05fae000 fffff880`05fbc000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0465c000 fffff880`0466b000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05fa1000 fffff880`05fae000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00f4a000 fffff880`00f64000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`0492c000 fffff880`04944000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04944000 fffff880`04971000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`04971000 fffff880`049be000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`049be000 fffff880`049e2000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`01209000 fffff880`01214000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e63000 fffff880`00e6d000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0126b000 fffff880`012c9000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0385d000 fffff880`03868000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01a3a000 fffff880`01a4c000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014ad000 fffff880`015a0000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`041c3000 fffff880`041cf000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`041cf000 fffff880`041fe000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`0471c000 fffff880`04731000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`039b9000 fffff880`039c8000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`0392d000 fffff880`03972000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`015a0000 fffff880`01600000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`01214000 fffff880`01225000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03851000 fffff880`0385d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c11000 fffff800`031fb000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01017000 fffff880`011ba000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01498000 fffff880`014a1000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0397b000 fffff880`039a1000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00ead000 fffff880`00ec2000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00e6d000 fffff880`00ea0000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00f33000 fffff880`00f3a000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f3a000 fffff880`00f4a000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01356000 fffff880`01367000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`060c9000 fffff880`0616f000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0478d000 fffff880`047ca000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cd2000 fffff880`00ce6000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`040aa000 fffff880`040ce000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`03877000 fffff880`03892000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`011dc000 fffff880`011fd000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04637000 fffff880`04651000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03800000 fffff880`03851000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04651000 fffff880`0465c000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`014a1000 fffff880`014aa000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`013f6000 fffff880`013ff000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01200000 fffff880`01209000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01a00000 fffff880`01a3a000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`05f42000 fffff880`05f5a000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c52000 fffff880`05eea580   RTKVHD64 RTKVHD64.sys Tue Jan 25 05:38:43 2011 (4D3EA833)
fffff880`051d3000 fffff880`051e5000   Rtnic64  Rtnic64.sys  Fri May 30 11:12:23 2008 (48401957)
fffff880`05c42000 fffff880`05c50000   scfilter scfilter.sys Sat Nov 20 05:09:59 2010 (4CE79E77)
fffff880`0616f000 fffff880`0617a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01bad000 fffff880`01bf3000   snapman  snapman.sys  Thu Nov 11 06:05:10 2010 (4CDBCDE6)
fffff880`01ba5000 fffff880`01bad000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`094b8000 fffff880`09529000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`06753000 fffff880`067ec000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`066e8000 fffff880`06753000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`0617a000 fffff880`061ab000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`0466b000 fffff880`0466c480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01649000 fffff880`0184d000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`061ab000 fffff880`061bd000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`0124c000 fffff880`01259000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01a6e000 fffff880`01ba5000   tdrpm273 tdrpm273.sys Tue Aug 10 05:54:18 2010 (4C6121CA)
fffff880`011ba000 fffff880`011dc000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`039e3000 fffff880`039f7000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`01897000 fffff880`01987000   timntr   timntr.sys   Wed Jun 02 08:56:47 2010 (4C06550F)
fffff960`00450000 fffff960`0045a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04188000 fffff880`041ae000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`046b0000 fffff880`046c2000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`05f9f000 fffff880`05fa0f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04a81000 fffff880`04a92000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`04a75000 fffff880`04a81000   usbfilter usbfilter.sys Fri Apr 03 07:39:51 2009 (49D5F587)
fffff880`046c2000 fffff880`0471c000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`04a6a000 fffff880`04a75000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04000000 fffff880`04056000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`00ea0000 fffff880`00ead000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`013b3000 fffff880`013c1000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`013c1000 fffff880`013e6000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01987000 fffff880`01997000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00ec2000 fffff880`00ed7000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00ed7000 fffff880`00f33000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01997000 fffff880`019e3000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`039c8000 fffff880`039e3000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`013e6000 fffff880`013f6000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d44000 fffff880`00de8000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00de8000 fffff880`00df7000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03972000 fffff880`0397b000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00320000   win32k   win32k.sys   Sat Nov 20 04:52:51 2010 (4CE79A73)
fffff880`05c00000 fffff880`05c11000   WinUSB   WinUSB.sys   Sat Nov 20 05:43:56 2010 (4CE7A66C)
fffff880`051e5000 fffff880`051ee000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00e5a000 fffff880`00e63000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05fdf000 fffff880`06000000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`05c11000 fffff880`05c42000   WUDFRd   WUDFRd.sys   Sat Nov 20 05:43:32 2010 (4CE7A654)

Unloaded modules:
fffff880`05f2d000 fffff880`05f3e000   WinUSB.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`05f3e000 fffff880`05f6f000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`0163a000 fffff880`01648000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`019e3000 fffff880`019ef000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`019ef000 fffff880`019f8000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`0145b000 fffff880`0146e000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

mailinator · Mar 5, 2011

Thank you for replaying to my thread.

1. See attachment :redface:

2. Mebius Privacy Box. I have no idea what this is. From what I see from Google, this is something connected to card reader. If so, it should not cause BSOD, as I receive BSOD even without card reader installed.

3-4. I believe that this have nothing to do with BSOD's, as I was getting them even after clean install when none of these programs have been installed. However they ll be uninstalled as you said.

5. Yesterday I have disabled Realtek 10/100 NIC in BIOS, its no longer visible in Device Manager

6. ATI driver ll be updated. Again I think this is not the case, as before this clean install, I have updated every driver and still received BSOD's.

cybercore · Mar 5, 2011

5. Yesterday I have disabled Realtek 10/100 NIC in BIOS, its no longer visible in Device Manager

Its driver is loaded, and it's incompatible with windows 7:
Rtnic64.sys Fri May 30 11:12:23 2008

And so is the ATI driver:

6. Update ATI video driver
atikmdag.sys Thu Jun 25 19:18:11 2009

3. Uninstall COMODO Firewall

4. Uninstall BitDefender Antivirus.
Replace all with MSE for now.

3-4. I believe that this have nothing to do with BSOD's, as I was getting them even after clean install when none of these programs have been installed. However they ll be uninstalled as you said.

And how did you arrive at this logical conclusion?

mailinator · Mar 5, 2011

Because this is probably the 20th time that I have formatted HDD and installed Windows 7 or XP, with same results.
To sum up:
* clean install, no programs installed expect the Windows default ones - BSOD
* clean install, programs installed - BSOD
* clean install, Windows 7 default drivers - BSOD
* clean install, all new drivers installed - BSOD
* whatever I try, I receive BSOD

That how I arrive with logical conclusion, hope you understand me now

Anyway, Comodo and Bitdefender are removed, ATI and Realtek drivers are updated.

cybercore · Mar 5, 2011

I've seen bitdeffender running alongside other brands security systems which would almost always result in a bsod.

Anyway, Comodo and Bitdefender are removed, ATI and Realtek drivers are updated.

To sum up:
* clean install, no programs installed expect the Windows default ones - BSOD
* clean install, programs installed - BSOD

If so, this means hardware - RAM, PSU, motherboard. But before you disassemble parts or send your PC to the repairs shop, let's see your updated drivers list,
DriverView: Loaded Windows Drivers List

mailinator · Mar 5, 2011

Report by DriverView is attached. I had to archive it, because forum doesn't allow me to upload html file.

cybercore · Mar 5, 2011

The drivers are all good except for Realtek NIC:

Code:

Rtnic64.sys	0xfffff880055e9000	Network Driver	Realtek 10/100 X64 Driver	6,109,0530,2008 built by: WinDDK	Realtek Semiconductor Corporation	Realtek 10/100 NIC Family all in one NDIS Driver	10.06.2009 21:35:53	10.06.2009 21:35:53	C:\Windows\system32\DRIVERS\Rtnic64.sys

There's not enough grounds to think it may have been involved in your crashes, yet if you get another bsod then disable it in device manager and reboot. So its driver doesn't get loaded.

Consider bios upgrade too. Load setup defaults in the bios.

If the system still crashes, then it's something with your hardware. So far you have:

- reinstalled the system.
- memtested per stick. (It is also worth testing the good one in different RAM slots, if you haven't.)
- have run GPU tests and all passed good.

~~~~~

Now, is your GEIL DDR1333 or is it actually GEIL DDR1600 ??
Does your motherboard support DDR1333/1600?

Could you give a link to your RAM sticks and one to your motherboard maker's description pages, to verify the specs?

mailinator · Mar 5, 2011

For Realtek NIC I have installed latest drivers what i have found on motherboard manufactures site.
That Realtek is integrated and I have disabled it in bios. Now i ll enable it and disable in device manager

.

BIOS is upgraded to the latest version. Default (optimal) settings are already loaded.

I done memory testing with two sticks inserted.
Shall I test memory with one stick per test and then same stick insert in other memory slots?

Link to memory specification: Link Removed due to 404 Error
My memory is 1333MHz, model number GV34GB1333C9DC

Link to mathboard specification: Link Removed
Motherboard support both 1333 and 1600 DDR3

In one of your previous posts you said that problem might be with PSU. If ll be from some help, I have LC6600GP2.

cybercore · Mar 5, 2011

For Realtek NIC I have installed latest drivers what i have found on motherboard manufactures site.
That Realtek is integrated and I have disabled it in bios. Now i ll enable it and disable in device manager

The reason I asked to disable it in the device manager is to prevent its driver from loading in memory, because right now I can tell it is.

Rtnic64.sys Fri May 30 11:12:23 2008

Shall I test memory with one stick per test and then same stick insert in other memory slots?

Would be good, by doing that you could find which slots are faulty.

In one of your previous posts you said that problem might be with PSU. If ll be from some help, I have LC6600GP2.

The way to test PSU and motherboad is simply to replace them, you can't do it with a program like memtest. So far it looks like you've tried everything, and the culprit can be fairly narrowed down to either motherboard or the power supply.

mailinator · Mar 5, 2011

I was going to disable Realtek NIC in device manager and bang, another BSOD

Since I live on 13th floor, I'm thinking to throw computer from here right to trash below the building..

cybercore · Mar 5, 2011

Since I live on 13th floor, I'm thinking to throw computer from here right to trash below the building..

Don't even try, that won't help.

Bad ram or bad motherboard:

BugCheck 1E, {ffffffffc0000005, fffff80002ff4aab, 1, 1c8}
KMODE_EXCEPTION_NOT_HANDLED (1e)
Probably caused by : memory_corruption ( nt!MiUnmapViewOfSection+52b )
Stack nt nt nt nt nt nt nt nt

kd> ln fffff80002ff4aab
(fffff800`02ff4580) nt!MiUnmapViewOfSection+0x52b | (fffff800`02ff4ad4) nt!NtUnmapViewOfSection

I was going to disable Realtek NIC in device manager and bang, another BSOD

Have you tried in safe mode?

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\030511-24772-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02c5d000 PsLoadedModuleList = 0xfffff800`02ea2e90
Debug session time: Sat Mar  5 12:50:07.852 2011 (UTC - 5:00)
System Uptime: 0 days 4:15:51.304
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002ff4aab, 1, 1c8}

Probably caused by : memory_corruption ( nt!MiUnmapViewOfSection+52b )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002ff4aab, The address that the exception occurred at
Arg3: 0000000000000001, Parameter 0 of the exception
Arg4: 00000000000001c8, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!MiUnmapViewOfSection+52b
fffff800`02ff4aab 6601afc6010000  add     word ptr [rdi+1C6h],bp

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  00000000000001c8

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0e0e8
 00000000000001c8 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  Skype.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88006d22900 -- (.trap 0xfffff88006d22900)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000006cf30000 rbx=0000000000000000 rcx=000000006cfd6c00
rdx=0000000000000005 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ff4aab rsp=fffff88006d22a90 rbp=0000000000000367
 r8=0000000000000002  r9=fffff80002c5d000 r10=0000000000000001
r11=fffff7000108002c r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!MiUnmapViewOfSection+0x52b:
fffff800`02ff4aab 6601afc6010000  add     word ptr [rdi+1C6h],bp ds:2a90:00000000`000001c6=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002d29028 to fffff80002cdd640

STACK_TEXT:  
fffff880`06d22078 fffff800`02d29028 : 00000000`0000001e ffffffff`c0000005 fffff800`02ff4aab 00000000`00000001 : nt!KeBugCheckEx
fffff880`06d22080 fffff800`02cdccc2 : fffff880`06d22858 00000000`00006cfd fffff880`06d22900 00000000`00000368 : nt! ?? ::FNODOBFM::`string'+0x4987d
fffff880`06d22720 fffff800`02cdb83a : 00000000`00000001 00000000`000001c8 00000000`00000000 00000000`00006cfd : nt!KiExceptionDispatch+0xc2
fffff880`06d22900 fffff800`02ff4aab : 00000000`6cfd0000 00000000`00013000 00000000`00000368 00000000`4a5bd994 : nt!KiPageFault+0x23a
fffff880`06d22a90 fffffa80`0588f980 : fffffa80`040c3600 fffffa80`03b91590 00000000`00000000 fffff880`06d22c20 : nt!MiUnmapViewOfSection+0x52b
fffff880`06d22b50 fffffa80`040c3600 : fffffa80`03b91590 00000000`00000000 fffff880`06d22c20 fffff880`06d22ca0 : 0xfffffa80`0588f980
fffff880`06d22b58 fffffa80`03b91590 : 00000000`00000000 fffff880`06d22c20 fffff880`06d22ca0 fffffa80`04c23b30 : 0xfffffa80`040c3600
fffff880`06d22b60 00000000`00000000 : fffff880`06d22c20 fffff880`06d22ca0 fffffa80`04c23b30 00000000`00000000 : 0xfffffa80`03b91590


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiUnmapViewOfSection+52b
fffff800`02ff4aab 6601afc6010000  add     word ptr [rdi+1C6h],bp

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!MiUnmapViewOfSection+52b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!MiUnmapViewOfSection+52b

BUCKET_ID:  X64_0x1E_c0000005_nt!MiUnmapViewOfSection+52b

Followup: MachineOwner
---------

Drivers:

Code:

start             end                 module name
fffff880`04c00000 fffff880`04c3e000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00f8a000 fffff880`00fe1000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`0653e000 fffff880`06586000   afcdp    afcdp.sys    Thu Nov 18 11:20:02 2010 (4CE55232)
fffff880`0160d000 fffff880`01696000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`04c4e000 fffff880`04c64000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`042b3000 fffff880`042c7000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`043aa000 fffff880`043bf000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00ff4000 fffff880`00fff000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`06400000 fffff880`0640b000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00ecd000 fffff880`00ed6000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00db3000 fffff880`00ddd000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`04897000 fffff880`048b7000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`04ccf000 fffff880`055cb000   atikmdag atikmdag.sys Wed Jan 26 17:48:28 2011 (4D40A4BC)
fffff880`04200000 fffff880`0424e000   atikmpag atikmpag.sys Wed Jan 26 17:13:33 2011 (4D409C8D)
fffff880`01df2000 fffff880`01dfa000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff960`00970000 fffff960`009d1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`01bf9000 fffff880`01c00000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04373000 fffff880`04384000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04800000 fffff880`0481e000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00640000 fffff960`00667000   cdd      cdd.dll      unavailable (00000000)
fffff880`01930000 fffff880`0195a000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00cc9000 fffff880`00d89000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01baf000 fffff880`01bdf000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c6b000 fffff880`00cc9000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01121000 fffff880`01193000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`04c3e000 fffff880`04c4e000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`03e90000 fffff880`03e99000   cpuz135_x64 cpuz135_x64.sys Wed Jan 19 11:42:06 2011 (4D37145E)
fffff880`06399000 fffff880`063a7000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`042d2000 fffff880`04355000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`04355000 fffff880`04373000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`01215000 fffff880`01224000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01ddc000 fffff880`01df2000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`048f4000 fffff880`04916000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`063b3000 fffff880`063bc000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`063a7000 fffff880`063b3000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`063bc000 fffff880`063cf000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0638d000 fffff880`06399000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0445e000 fffff880`04552000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04552000 fffff880`04598000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`06436000 fffff880`0646c000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`010af000 fffff880`010c3000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01063000 fffff880`010af000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01b75000 fffff880`01baf000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`018e6000 fffff880`01930000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`02c14000 fffff800`02c5d000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04598000 fffff880`045bc000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`0603f000 fffff880`06058000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`06058000 fffff880`06060080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06031000 fffff880`0603f000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`0491c000 fffff880`049e5000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01c4c000 fffff880`01c55000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`055cb000 fffff880`055e9000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03e00000 fffff880`03e1e000   ISODrv64 ISODrv64.sys Thu Jan 28 22:39:02 2010 (4B625856)
fffff880`045e4000 fffff880`045f3000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00baa000 fffff800`00bb4000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01000000 fffff880`01043000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013d4000 fffff880`013ef000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01568000 fffff880`01593000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`04916000 fffff880`0491b200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0600e000 fffff880`06023000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0607e000 fffff880`060a1000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c4a000 fffff880`00c57000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`06070000 fffff880`0607e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`042a4000 fffff880`042b3000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06063000 fffff880`06070000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d99000 fffff880`00db3000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`049e5000 fffff880`049fd000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`043d1000 fffff880`043fe000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`03e1f000 fffff880`03e6c000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`03e6c000 fffff880`03e90000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`019b8000 fffff880`019c3000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fea000 fffff880`00ff4000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010c3000 fffff880`01121000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0120a000 fffff880`01215000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01c3a000 fffff880`01c4c000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01415000 fffff880`01508000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`04c88000 fffff880`04c94000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04c94000 fffff880`04cc3000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`04882000 fffff880`04897000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`015b9000 fffff880`015c8000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`01696000 fffff880`016db000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01508000 fffff880`01568000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`019c3000 fffff880`019d4000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01400000 fffff880`0140c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c5d000 fffff800`03247000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01231000 fffff880`013d4000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01a1c000 fffff880`01a25000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01593000 fffff880`015b9000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00ec6000 fffff880`00ecd000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00d89000 fffff880`00d99000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013ef000 fffff880`01400000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`03e99000 fffff880`03f3f000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`048b7000 fffff880`048f4000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c57000 fffff880`00c6b000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04c64000 fffff880`04c88000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0424e000 fffff880`04269000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04269000 fffff880`0428a000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0428a000 fffff880`042a4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`01193000 fffff880`011e4000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04cc3000 fffff880`04cce000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0199d000 fffff880`019a6000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019a6000 fffff880`019af000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019af000 fffff880`019b8000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01c00000 fffff880`01c3a000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`060d3000 fffff880`060eb000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`060f4000 fffff880`0638c580   RTKVHD64 RTKVHD64.sys Tue Jan 25 05:38:43 2011 (4D3EA833)
fffff880`055e9000 fffff880`055fb000   Rtnic64  Rtnic64.sys  Fri May 30 11:12:23 2008 (48401957)
fffff880`03f3f000 fffff880`03f4a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01d96000 fffff880`01ddc000   snapman  snapman.sys  Thu Nov 11 06:05:10 2010 (4CDBCDE6)
fffff880`01d8e000 fffff880`01d96000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06586000 fffff880`065f7000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`064a5000 fffff880`0653e000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`03f8d000 fffff880`03ff8000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`03f4a000 fffff880`03f7b000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`045fc000 fffff880`045fd480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`016e2000 fffff880`018e6000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`03f7b000 fffff880`03f8d000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`01600000 fffff880`0160d000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01c57000 fffff880`01d8e000   tdrpm273 tdrpm273.sys Tue Aug 10 05:54:18 2010 (4C6121CA)
fffff880`019d4000 fffff880`019f6000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`015e3000 fffff880`015f7000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`01a29000 fffff880`01b19000   timntr   timntr.sys   Wed Jun 02 08:56:47 2010 (4C06550F)
fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04384000 fffff880`043aa000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`043bf000 fffff880`043d1000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`06061000 fffff880`06062f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`045d3000 fffff880`045e4000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`045c7000 fffff880`045d3000   usbfilter usbfilter.sys Fri Apr 03 07:39:51 2009 (49D5F587)
fffff880`04828000 fffff880`04882000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`045bc000 fffff880`045c7000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04400000 fffff880`04456000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0195a000 fffff880`01968000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01968000 fffff880`0198d000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01b19000 fffff880`01b29000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01b29000 fffff880`01b75000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`015c8000 fffff880`015e3000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`0198d000 fffff880`0199d000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ed7000 fffff880`00f7b000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f7b000 fffff880`00f8a000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`019f6000 fffff880`019ff000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003e1000   win32k   win32k.sys   Wed Jan 05 01:55:38 2011 (4D2415EA)
fffff880`045f3000 fffff880`045fc000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fe1000 fffff880`00fea000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`060a1000 fffff880`060c2000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`0646c000 fffff880`0649d000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`0641b000 fffff880`06436000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`0640b000 fffff880`06417000   hiber_atapor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`065f7000 fffff880`06600000   hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`063cf000 fffff880`063e2000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`063cf000 fffff880`06400000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`06400000 fffff880`0641b000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`06000000 fffff880`0600e000   scfilter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`060c2000 fffff880`060d3000   WinUSB.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`063cf000 fffff880`063e0000   WinUSB.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`06000000 fffff880`06031000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`01bdf000 fffff880`01bed000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01bed000 fffff880`01bf9000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01a00000 fffff880`01a09000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01a09000 fffff880`01a1c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

mailinator · Mar 5, 2011

After second try, I have first disabled Realtek NIC in device manager and then in BIOS. However still I can see Rtnic64.sys in DriverView report..
Ohh something new happen.. Another BSOD

Is there some competition in BSOD's? I would win the first place without doubt..

After last BSOD, I have removed one memory stick, and second I have moved to the 4th slot on motherboard. Will see what ll happen now..

cybercore · Mar 6, 2011

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:

--> 1) A driver has inadvertently or deliberately modified critical kernel code
or data.

--> 2) A developer attempted to set a normal kernel breakpoint using a kernel
debugger that was not attached when the system was booted.

--> 3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.

Rtnic64.sys Fri May 30 11:12:23 2008
Navigate to C:\Windows\system32\drivers and rename Rtnic64.sys to .bak.

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\030511-15506-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02c0c000 PsLoadedModuleList = 0xfffff800`02e51e90
Debug session time: Sat Mar  5 16:19:44.438 2011 (UTC - 5:00)
System Uptime: 0 days 3:25:23.890
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d8964d351f, b3b7465ee8ca0475, fffff80002c36734, 1}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d8964d351f, Reserved
Arg2: b3b7465ee8ca0475, Reserved
Arg3: fffff80002c36734, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
	0 : A generic data region
	1 : Modification of a function or .pdata
	2 : A processor IDT
	3 : A processor GDT
	4 : Type 1 process list corruption
	5 : Type 2 process list corruption
	6 : Debug routine modification
	7 : Critical MSR modification

Debugging Details:
------------------


BUGCHECK_STR:  0x109

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002c8c640

STACK_TEXT:  
fffff880`033775d8 00000000`00000000 : 00000000`00000109 a3a039d8`964d351f b3b7465e`e8ca0475 fffff800`02c36734 : nt!KeBugCheckEx


STACK_COMMAND:  kb

SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

BUCKET_ID:  BAD_STACK

Followup: MachineOwner
---------

Drivers:

Code:

start             end                 module name
fffff880`00ec7000 fffff880`00f1e000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`064e3000 fffff880`0652b000   afcdp    afcdp.sys    Thu Nov 18 11:20:02 2010 (4CE55232)
fffff880`03858000 fffff880`038e1000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`04a2b000 fffff880`04a41000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`04043000 fffff880`04057000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`0416c000 fffff880`04181000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e5d000 fffff880`00e68000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`0659c000 fffff880`065a7000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00e2a000 fffff880`00e33000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e33000 fffff880`00e5d000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`046fe000 fffff880`0471e000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`04af2000 fffff880`053ee000   atikmdag atikmdag.sys Wed Jan 26 17:48:28 2011 (4D40A4BC)
fffff880`04181000 fffff880`041cf000   atikmpag atikmpag.sys Wed Jan 26 17:13:33 2011 (4D409C8D)
fffff880`01b28000 fffff880`01b30000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff960`00890000 fffff960`008f1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`01b99000 fffff880`01ba0000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04135000 fffff880`04146000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02d19000 fffff880`02d37000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00730000 fffff960`00757000   cdd      cdd.dll      unavailable (00000000)
fffff880`01b66000 fffff880`01b90000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00c83000 fffff880`00d43000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01af8000 fffff880`01b28000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c25000 fffff880`00c83000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01165000 fffff880`011d7000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`04a1b000 fffff880`04a2b000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`02ded000 fffff880`02df6000   cpuz135_x64 cpuz135_x64.sys Wed Jan 19 11:42:06 2011 (4D37145E)
fffff880`060e8000 fffff880`060f6000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04094000 fffff880`04117000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`04117000 fffff880`04135000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`0381e000 fffff880`0382d000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01ae2000 fffff880`01af8000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0475b000 fffff880`0477d000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06102000 fffff880`0610b000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`060f6000 fffff880`06102000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0610b000 fffff880`0611e000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`060dc000 fffff880`060e8000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0443e000 fffff880`04532000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04532000 fffff880`04578000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`010f3000 fffff880`01107000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00e68000 fffff880`00eb4000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`0122c000 fffff880`01236000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01aa8000 fffff880`01ae2000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01866000 fffff880`018b0000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`031f6000 fffff800`0323f000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04578000 fffff880`0459c000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`0612c000 fffff880`06145000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`06145000 fffff880`0614d080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0611e000 fffff880`0612c000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02c50000 fffff880`02d19000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01a9f000 fffff880`01aa8000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`0441d000 fffff880`0443b000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03800000 fffff880`0381e000   ISODrv64 ISODrv64.sys Thu Jan 28 22:39:02 2010 (4B625856)
fffff880`053ee000 fffff880`053fd000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bbb000 fffff800`00bc5000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04000000 fffff880`04043000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01200000 fffff880`0121b000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01466000 fffff880`01491000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`0477d000 fffff880`04782200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`061af000 fffff880`061c4000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0616b000 fffff880`0618e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c04000 fffff880`00c11000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`0615d000 fffff880`0616b000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`041e9000 fffff880`041f8000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06150000 fffff880`0615d000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e10000 fffff880`00e2a000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`02d37000 fffff880`02d4f000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02d4f000 fffff880`02d7c000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`02d7c000 fffff880`02dc9000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`02dc9000 fffff880`02ded000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`01a00000 fffff880`01a0b000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f27000 fffff880`00f31000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01107000 fffff880`01165000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`039f0000 fffff880`039fb000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01a8d000 fffff880`01a9f000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01000000 fffff880`010f3000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`04a65000 fffff880`04a71000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04a71000 fffff880`04aa0000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`046e9000 fffff880`046fe000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`03955000 fffff880`03964000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`038e1000 fffff880`03926000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01406000 fffff880`01466000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`01a0b000 fffff880`01a1c000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`039e4000 fffff880`039f0000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c0c000 fffff800`031f6000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`0125c000 fffff880`013ff000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01b90000 fffff880`01b99000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0392f000 fffff880`03955000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00f71000 fffff880`00f86000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f31000 fffff880`00f64000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00ff7000 fffff880`00ffe000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121b000 fffff880`0122c000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`062bf000 fffff880`06365000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0471e000 fffff880`0475b000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c11000 fffff880`00c25000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04a41000 fffff880`04a65000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04aa0000 fffff880`04abb000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04abb000 fffff880`04adc000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`041cf000 fffff880`041e9000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03993000 fffff880`039e4000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04adc000 fffff880`04ae7000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01be3000 fffff880`01bec000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01bec000 fffff880`01bf5000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01bf5000 fffff880`01bfe000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01a53000 fffff880`01a8d000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`061c4000 fffff880`061dc000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05e43000 fffff880`060db580   RTKVHD64 RTKVHD64.sys Tue Jan 25 05:38:43 2011 (4D3EA833)
fffff880`04a00000 fffff880`04a12000   Rtnic64  Rtnic64.sys  Fri May 30 11:12:23 2008 (48401957)
fffff880`06365000 fffff880`06370000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01608000 fffff880`0164e000   snapman  snapman.sys  Thu Nov 11 06:05:10 2010 (4CDBCDE6)
fffff880`01600000 fffff880`01608000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0652b000 fffff880`0659c000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`0644a000 fffff880`064e3000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`06200000 fffff880`0626b000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`06370000 fffff880`063a1000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`0443b000 fffff880`0443c480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01662000 fffff880`01866000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`063a1000 fffff880`063b3000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`01a3e000 fffff880`01a4b000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01491000 fffff880`015c8000   tdrpm273 tdrpm273.sys Tue Aug 10 05:54:18 2010 (4C6121CA)
fffff880`01a1c000 fffff880`01a3e000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`0397f000 fffff880`03993000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`018b0000 fffff880`019a0000   timntr   timntr.sys   Wed Jun 02 08:56:47 2010 (4C06550F)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04146000 fffff880`0416c000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`04057000 fffff880`04069000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0614e000 fffff880`0614ff00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0440c000 fffff880`0441d000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`04400000 fffff880`0440c000   usbfilter usbfilter.sys Fri Apr 03 07:39:51 2009 (49D5F587)
fffff880`0468f000 fffff880`046e9000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`0459c000 fffff880`045a7000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`045a7000 fffff880`045fd000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`00f64000 fffff880`00f71000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01ba0000 fffff880`01bae000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01bae000 fffff880`01bd3000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`019a0000 fffff880`019b0000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00f86000 fffff880`00f9b000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00f9b000 fffff880`00ff7000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`019b0000 fffff880`019fc000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`03964000 fffff880`0397f000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`01bd3000 fffff880`01be3000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d43000 fffff880`00de7000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00de7000 fffff880`00df6000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03926000 fffff880`0392f000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`00361000   win32k   win32k.sys   unavailable (00000000)
fffff880`04a12000 fffff880`04a1b000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f1e000 fffff880`00f27000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0618e000 fffff880`061af000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`01b30000 fffff880`01b3e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01b3e000 fffff880`01b4a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01b4a000 fffff880`01b53000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01b53000 fffff880`01b66000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

mailinator · Mar 6, 2011

I pulled all two sticks from motherboard and the inserted only one memory stick it fourth slot. So far, for 24h, I didn't have BSOD. Will wait and ll see what ll be in next few days.

I ll rename Rtnic64.sys also and will report back if is any progress.

mailinator · Mar 7, 2011

Update:
When I rename Rtnic64.sys to Rtnic64.sys.bak then I dont have LAN connection at all. Network connections are empty, as you can see in attachment.. I have second LAN card and it is also no longer visible after renaming Rtnic64.sys.
Note: BSOD's were happining also before and after inserting second LAN card.

cybercore · Mar 7, 2011

Rtnic64.sys.
Note: BSOD's were happining also before and after inserting second LAN card.

It won't make a difference as long as a buggy old driver is running alongside.

When I rename Rtnic64.sys to Rtnic64.sys.bak then I dont have LAN connection at all.

True, the whole idea was to prevent this driver from loading in order to test the system for BSOD's without it.

I pulled all two sticks from motherboard and the inserted only one memory stick it fourth slot. So far, for 24h, I didn't have BSOD. Will wait and ll see what ll be in next few days.

Good idea. : )

mailinator · Mar 22, 2011

Well, two weeks passed and no BSOD's, so probably was problem with memory slots on motherboard.

Will post again if BSOD happen

cybercore · Mar 22, 2011

Sounds good. : )

Attach those snips if you wish and I'll take a look:

- CPU-Z MEMORY
- RAMMON

Navigation section

Windows 7 BSOD on Windows 7 x64 and Windows XP x32 - need help

New Member

Attachments

New Member

New Member

Attachments

New Member

New Member

New Member

New Member

Attachments

New Member

New Member

New Member

New Member

Attachments

New Member

New Member

Attachments

New Member

New Member

New Member

Attachments

New Member

New Member

New Member

Similar threads