Windows 7 BSOD - Reference By Pointer

bahbahboom

New Member
Hi guys

I've tried debugging, but I'm not sure. I turned on my comp, typed in password, went to toilet, came back and it had already restarted. So I thought, fine. Continues to let it boot up again, typed in password, used it for a bit and it crashes again! This time I saw a BSOD. I've gotten the BlueScreenView app, but it says it's reference by pointer.

I've attached the .dmp file from C->Windows->Minidump.
thanks in advance guys :)
 

Attachments

  • 042111-20342-01.zip
    23.8 KB · Views: 525
Update Realtek LAN
Link Removed - Invalid URL



Replace AVG with MSE:

AVG Worldwide - Download tools

Link Removed due to 404 Error





CRASH DUMPS

Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\042111-20342-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02859000 PsLoadedModuleList = 0xfffff800`02a96e50
Debug session time: Thu Apr 21 10:11:21.954 2011 (UTC - 4:00)
System Uptime: 0 days 0:06:24.609
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 18, {0, fffffa8005ffe280, 2, fffff8a001c368cf}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+46411 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

REFERENCE_BY_POINTER (18)
Arguments:
Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
Arg2: fffffa8005ffe280, Object whose reference count is being lowered
Arg3: 0000000000000002, Reserved
Arg4: fffff8a001c368cf, Reserved
	The reference count of an object is illegal for the current state of the object.
	Each time a driver uses a pointer to an object the driver calls a kernel routine
	to increment the reference count of the object. When the driver is done with the
	pointer the driver calls another kernel routine to decrement the reference count.
	Drivers must match calls to the increment and decrement routines. This bugcheck
	can occur because an object's reference count goes to zero while there are still
	open handles to the object, in which case the fourth parameter indicates the number
	of opened handles. It may also occur when the object’s reference count drops below zero
	whether or not there are open handles to the object, and in that case the fourth parameter
	contains the actual value of the pointer references count.

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x18

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002860fdc to fffff800028c9740

STACK_TEXT:  
fffff880`04e543e8 fffff800`02860fdc : 00000000`00000018 00000000`00000000 fffffa80`05ffe280 00000000`00000002 : nt!KeBugCheckEx
fffff880`04e543f0 fffff800`02bc3029 : fffff880`04e54c60 fffff880`04e548c8 00000000`0000003d 00000000`00000006 : nt! ?? ::FNODOBFM::`string'+0x46411
fffff880`04e54450 fffff800`02bc38f2 : 00000000`00000001 00001f80`00000000 fffff8a0`00000001 00000000`00000001 : nt!ObpWaitForMultipleObjects+0x2d3
fffff880`04e54920 fffff800`028c8993 : fffffa80`05b66880 00000000`00c6fae8 fffff880`04e54b88 fffff880`04e54b00 : nt!NtWaitForMultipleObjects+0xe5
fffff880`04e54b70 00000000`7782fc6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00c6fac8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7782fc6a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+46411
fffff800`02860fdc cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+46411

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

FAILURE_BUCKET_ID:  X64_0x18_CORRUPT_REF_COUNT_nt!_??_::FNODOBFM::_string_+46411

BUCKET_ID:  X64_0x18_CORRUPT_REF_COUNT_nt!_??_::FNODOBFM::_string_+46411

Followup: MachineOwner
---------





DRIVERS

Code:
start             end                 module name
fffff880`00f96000 fffff880`00fed000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02cdf000 fffff880`02d69000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`10b8f000 fffff880`10ba5000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd4000 fffff880`00ddf000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00da1000 fffff880`00daa000   atapi    atapi.sys    unavailable (00000000)
fffff880`00daa000 fffff880`00dd4000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`05b38000 fffff880`05b6c000   AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:24:45 2010 (4C58972D)
fffff880`018e0000 fffff880`018ea000   AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:38 2010 (4C8EA9CE)
fffff880`057ed000 fffff880`057f9000   AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:21 2010 (4C5896D9)
fffff880`03c11000 fffff880`03c61000   avgldx64 avgldx64.sys Tue Dec 07 21:01:55 2010 (4CFEE713)
fffff880`0194a000 fffff880`01959000   avgmfx64 avgmfx64.sys Mon Sep 06 20:49:14 2010 (4C858C0A)
fffff880`018d6000 fffff880`018e0000   avgrkx64 avgrkx64.sys Mon Sep 06 20:49:37 2010 (4C858C21)
fffff880`02c39000 fffff880`02c9a000   avgtdia  avgtdia.sys  Fri Nov 12 06:08:42 2010 (4CDD203A)
fffff880`01962000 fffff880`01969000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03c00000 fffff880`03c11000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05719000 fffff880`05737000   bowser   bowser.sys   Wed Feb 23 00:15:06 2011 (4D6497DA)
fffff960`006b0000 fffff960`006d7000   cdd      cdd.dll      unavailable (00000000)
fffff880`01920000 fffff880`0194a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cc7000 fffff880`00d87000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018a6000 fffff880`018d6000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c69000 fffff880`00cc7000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      unavailable (00000000)
fffff880`03bed000 fffff880`03bfd000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03df0000 fffff880`03dfe000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03d4f000 fffff880`03dd2000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03dd2000 fffff880`03df0000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03d40000 fffff880`03d4f000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01890000 fffff880`018a6000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03fd5000 fffff880`03ff7000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`03af0000 fffff880`03af9000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0182b000 fffff880`01837000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01837000 fffff880`0184a000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0184a000 fffff880`01856000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03af9000 fffff880`03bed000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`03a00000 fffff880`03a46000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`05ebe000 fffff880`05ef4000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`03aba000 fffff880`03ac7000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01138000 fffff880`0114c000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`03f1c000 fffff880`03f27000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010ec000 fffff880`01138000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013f6000 fffff880`01400000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01856000 fffff880`01890000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02810000 fffff800`02859000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03a46000 fffff880`03a6a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03f3c000 fffff880`03f98000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`03c9d000 fffff880`03cb6000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`03e62000 fffff880`03e6a080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`03e54000 fffff880`03e62000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`05651000 fffff880`05719000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01200000 fffff880`01209000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`00ec6000 fffff880`00ece000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03c87000 fffff880`03c9d000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0feb5000 fffff880`0fec4000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03cb6000 fffff880`03cc4000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00b98000 fffff800`00ba2000   kdcom    kdcom.dll    Sat Feb 05 07:21:45 2011 (4D4D40D9)
fffff880`03e6d000 fffff880`03eb0000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cb000 fffff880`013e5000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015bb000 fffff880`015e6000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`03ff7000 fffff880`03ffc200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`019e3000 fffff880`019f8000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`018f8000 fffff880`0191b000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c11000 fffff880`00c55000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`018ea000 fffff880`018f8000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0fec4000 fffff880`0fed3000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03cc4000 fffff880`03cd1000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d87000 fffff880`00da1000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`05737000 fffff880`0574f000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0574f000 fffff880`0577c000   mrxsmb   mrxsmb.sys   Wed Feb 23 00:15:23 2011 (4D6497EB)
fffff880`0577c000 fffff880`057ca000   mrxsmb10 mrxsmb10.sys Wed Feb 23 00:15:14 2011 (4D6497E2)
fffff880`057ca000 fffff880`057ed000   mrxsmb20 mrxsmb20.sys Wed Feb 23 00:15:13 2011 (4D6497E1)
fffff880`019c7000 fffff880`019d2000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ff6000 fffff880`01000000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0114c000 fffff880`011aa000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03d35000 fffff880`03d40000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e6000 fffff880`015f8000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01469000 fffff880`0155b000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`10bc9000 fffff880`10bd5000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0fe00000 fffff880`0fe2f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f27000 fffff880`03f3c000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d98000 fffff880`02da7000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c9a000 fffff880`02cdf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0155b000 fffff880`015bb000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019d2000 fffff880`019e3000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03d29000 fffff880`03d35000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02859000 fffff800`02e36000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
fffff880`01228000 fffff880`013cb000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01959000 fffff880`01962000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10b37000 fffff880`10b38180   nvBridge nvBridge.kmd Fri Jan 07 20:57:22 2011 (4D27C482)
fffff880`0fedc000 fffff880`10b36d00   nvlddmkm nvlddmkm.sys Fri Jan 07 21:07:22 2011 (4D27C6DA)
fffff880`02d72000 fffff880`02d98000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03ad3000 fffff880`03af0000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      unavailable (00000000)
fffff880`00ece000 fffff880`00ede000   PCIIDEX  PCIIDEX.SYS  unavailable (00000000)
fffff880`013e5000 fffff880`013f6000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05a48000 fffff880`05aee000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03f98000 fffff880`03fd5000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c55000 fffff880`00c69000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`10ba5000 fffff880`10bc9000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0fe2f000 fffff880`0fe4a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0fe4a000 fffff880`0fe6b000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0fe6b000 fffff880`0fe85000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03cd8000 fffff880`03d29000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`0feaa000 fffff880`0feb5000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`019ac000 fffff880`019b5000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019b5000 fffff880`019be000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019be000 fffff880`019c7000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011aa000 fffff880`011e4000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01209000 fffff880`01221000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03a6a000 fffff880`03a9c000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`05aee000 fffff880`05af9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03ac7000 fffff880`03ad3000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02da7000 fffff880`02dc4000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0145a000 fffff880`01462000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`05ef4000 fffff880`05f65000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`05e29000 fffff880`05ebe000   srv      srv.sys      Wed Feb 23 00:16:24 2011 (4D649828)
fffff880`05b6c000 fffff880`05bd3000   srv2     srv2.sys     Wed Feb 23 00:15:59 2011 (4D64980F)
fffff880`05af9000 fffff880`05b26000   srvnet   srvnet.sys   Wed Feb 23 00:15:49 2011 (4D649805)
fffff880`03bfd000 fffff880`03bfe480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01600000 fffff880`017fd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`05b26000 fffff880`05b38000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0181e000 fffff880`0182b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01800000 fffff880`0181e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02deb000 fffff880`02dff000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00530000 fffff960`0053a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03c61000 fffff880`03c87000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03e00000 fffff880`03e54000   udfs     udfs.sys     Mon Jul 13 19:23:37 2009 (4A5BC1F9)
fffff880`03eb0000 fffff880`03ec2000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`03e6b000 fffff880`03e6cf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03aa9000 fffff880`03aba000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`03ec2000 fffff880`03f1c000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
fffff880`10b39000 fffff880`10b8f000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`03a9c000 fffff880`03aa9000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`02c00000 fffff880`02c35a80   VBoxDrv  VBoxDrv.sys  Thu Feb 17 11:21:07 2011 (4D5D4AF3)
fffff880`0fe85000 fffff880`0fea9080   VBoxNetAdp VBoxNetAdp.sys Thu Feb 17 11:21:07 2011 (4D5D4AF3)
fffff880`10bd5000 fffff880`10bfdd00   VBoxNetFlt VBoxNetFlt.sys Thu Feb 17 11:21:06 2011 (4D5D4AF2)
fffff880`02ddf000 fffff880`02deac40   VBoxUSBMon VBoxUSBMon.sys Thu Feb 17 11:21:07 2011 (4D5D4AF3)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01969000 fffff880`01977000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01977000 fffff880`0199c000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0144a000 fffff880`0145a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02dc4000 fffff880`02ddf000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0199c000 fffff880`019ac000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ee3000 fffff880`00f87000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f87000 fffff880`00f96000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d69000 fffff880`02d72000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`003a2000   win32k   win32k.sys   Wed Mar 02 22:58:01 2011 (4D6F11C9)
fffff880`00fed000 fffff880`00ff6000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`010bf000 fffff880`010e0000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`018ea000 fffff880`018f8000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`018f8000 fffff880`01904000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01904000 fffff880`0190d000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`0190d000 fffff880`01920000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
 
hi cybercore,

Thanks alot for your help. Just a quick question, why replace AVG with MSE?
And also I have gone to Device Manager and updated the drivers by right clicking -> update software driver. is that sufficient?

Thanks for your help :)
 
okay sure. in the device manager i saw that my realtek is RTL8168C (P) / 8111(P).

the site that you gave only shows:
RTL8110SC(L)
RTL8110S-32/RTL8110SB(L)/RTL8169SB(L)/RTL8169SC(L)
RTL8169 (RTL8110SC(L))

Are they compatible? I also found the following:

http://www.realtek.com/downloads/downloadsView.aspx?Langid=1&PNid=5&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false#RTL8111B/RTL8168B/RTL8111/RTL8168<br>RTL8111C/RTL8111CP/RTL8111D(L)<br>RTL8168C/RTL8111DP/RTL8111E<br>RTL8168E

and

GIGABYTE - Motherboard - Socket 775 - GA-EP41-UD3L (rev. 3.3)

oh and that is my motherboard that I'm using.
 
Hi cybercore, the realtek in my Device manager shows
Realtek RTL8168C(P)/8111C(P)

Should I use
http://152.104.125.41/downloads/downloadsView.aspx?Langid=1&PNid=5&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false#RTL8111B/RTL8168B/RTL8111/RTL8168<br>RTL8111C/RTL8111CP/RTL8111D(L)<br>RTL8168C/RTL8111DP/RTL8111E<br>RTL8168E

instead or should I continue using yours? i'm just worried of incompatibility.

And also I visited the motherboard website, and I found drivers for the lan ethernet as well,

GIGABYTE - Motherboard - Socket 775 - GA-EP41-UD3L (rev. 3.3)
 
Thank you so much cybercore for your assistance, I'll post back here to give an update :) sorry for asking so many questions!
 
Hi,
Today I experienced another BSOD, after about a week of stability or so. I've taken cybercore's advice, removed avg, installed MSE. Installed drivers for my realtek from my motherboard site. I think this is a different BSOD though. I have attached the minidump.
 

Attachments

  • 050111-15818-01.zip
    28.7 KB · Views: 384

050111-15818-01.dmp
BugCheck 24, {1904fb, fffff880067112e8, fffff88006710b50, fffff8000289f4fc}
ExceptionAddress: fffff8000289f4fc (nt!CcMapAndCopyInToCache+0x000000000000003c)
ExceptionCode: c0000005 (Access violation)
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonWrite+331d )



1. Command Prompt > chkdsk /f

2. HDDScan

3. Attach:

- CpU-Z MEMORY and CPU tab screenshots
- Passmark RAMMon HTML.zip




CRASH DUMPS

Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\050111-15818-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02803000 PsLoadedModuleList = 0xfffff800`02a40e50
Debug session time: Sun May  1 04:26:31.294 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:39.948
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880067112e8, fffff88006710b50, fffff8000289f4fc}

Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonWrite+331d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880067112e8
Arg3: fffff88006710b50
Arg4: fffff8000289f4fc

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880067112e8 -- (.exr 0xfffff880067112e8)
ExceptionAddress: fffff8000289f4fc (nt!CcMapAndCopyInToCache+0x000000000000003c)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 000000000000041e
Attempt to read from address 000000000000041e

CONTEXT:  fffff88006710b50 -- (.cxr 0xfffff88006710b50)
rax=fffff88006711658 rbx=0000000000000006 rcx=fffffa80038b8870
rdx=0000000003d60c40 rsi=00000000000003ce rdi=fffffa80037da4c0
rip=fffff8000289f4fc rsp=fffff88006711520 rbp=fffff88006711880
 r8=fffff88006711660  r9=00000000000003ce r10=fffffa80038b8870
r11=00000000000003ce r12=fffff88006711660 r13=0000000000000004
r14=fffffa80038b8870 r15=00000000000003ce
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!CcMapAndCopyInToCache+0x3c:
fffff800`0289f4fc 418b5350        mov     edx,dword ptr [r11+50h] ds:002b:00000000`0000041e=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  000000000000041e

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002aab0e0
 000000000000041e 

FOLLOWUP_IP: 
Ntfs!NtfsCommonWrite+331d
fffff880`01253237 84c0            test    al,al

FAULTING_IP: 
nt!CcMapAndCopyInToCache+3c
fffff800`0289f4fc 418b5350        mov     edx,dword ptr [r11+50h]

BUGCHECK_STR:  0x24

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

DEVICE_OBJECT: fffffa8003901a38

LAST_CONTROL_TRANSFER:  from fffff8000289f434 to fffff8000289f4fc

STACK_TEXT:  
fffff880`06711520 fffff800`0289f434 : fffffa80`038b8870 00000000`03d60c40 fffff880`06711660 00000000`000003ce : nt!CcMapAndCopyInToCache+0x3c
fffff880`06711610 fffff880`01253237 : 00000000`00000000 fffff880`06711880 fffffa80`05e8e010 00000000`00000000 : nt!CcCopyWrite+0x194
fffff880`067116a0 fffff880`01255663 : fffffa80`05e8e010 fffffa80`03901650 fffff880`06711801 fffff880`06711800 : Ntfs!NtfsCommonWrite+0x331d
fffff880`06711850 fffff880`0119823f : fffffa80`039019f0 fffffa80`03901650 fffffa80`037d3900 00000000`00000001 : Ntfs!NtfsFsdWrite+0x1c3
fffff880`06711910 fffff880`011966df : fffffa80`051b1790 00000000`00000000 fffffa80`051b1700 fffffa80`03901650 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`067119a0 fffff800`02b87ae9 : 00000000`00000001 fffff800`028828b1 fffffa80`051b1700 00000000`000003ce : fltmgr!FltpDispatch+0xcf
fffff880`06711a00 fffff800`02b88883 : fffffa80`03901a38 00000000`00000000 fffffa80`037da4c0 fffff800`00000000 : nt!IopSynchronousServiceTail+0xf9
fffff880`06711a70 fffff800`02872993 : 00000000`03d60301 00000000`00000000 00000000`00000000 00000000`03d604f8 : nt!NtWriteFile+0x7e2
fffff880`06711b70 00000000`7743f73a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0176f298 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7743f73a


SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  Ntfs!NtfsCommonWrite+331d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d79996d

STACK_COMMAND:  .cxr 0xfffff88006710b50 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonWrite+331d

BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonWrite+331d

Followup: MachineOwner
---------





DRIVERS

Code:
start             end                 module name
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02ccd000 fffff880`02d57000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03de7000 fffff880`03dfd000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0118a000 fffff880`01195000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`01157000 fffff880`01160000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01160000 fffff880`0118a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`01485000 fffff880`0148c000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03d9a000 fffff880`03dab000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0590c000 fffff880`0592a000   bowser   bowser.sys   Wed Feb 23 00:15:06 2011 (4D6497DA)
fffff960`00700000 fffff960`00727000   cdd      cdd.dll      unavailable (00000000)
fffff880`01200000 fffff880`0122a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cfd000 fffff880`00dbd000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01416000 fffff880`01446000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c9f000 fffff880`00cfd000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`014a1000 fffff880`01514000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03cda000 fffff880`03cea000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05278000 fffff880`05286000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03cf9000 fffff880`03d7c000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03d7c000 fffff880`03d9a000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02cb2000 fffff880`02cc1000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01400000 fffff880`01416000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05250000 fffff880`05272000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05292000 fffff880`0529b000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05286000 fffff880`05292000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0529b000 fffff880`052ae000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`052cb000 fffff880`052d7000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`10a9c000 fffff880`10b90000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`10b90000 fffff880`10bd6000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`053a1000 fffff880`053d7000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0fe1e000 fffff880`0fe2b000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`011e1000 fffff880`011f5000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`03bf5000 fffff880`03c00000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01195000 fffff880`011e1000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01525000 fffff880`0152f000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`015be000 fffff880`015f8000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0162b000 fffff880`01675000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02de0000 fffff800`02e29000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`10bd6000 fffff880`10bfa000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03a15000 fffff880`03a71000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`052e5000 fffff880`052fe000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`052fe000 fffff880`05306080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`052d7000 fffff880`052e5000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`05844000 fffff880`0590c000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015b5000 fffff880`015be000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01125000 fffff880`0112d000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03dd1000 fffff880`03de7000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03afd000 fffff880`03b0c000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05307000 fffff880`05315000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bc1000 fffff800`00bcb000   kdcom    kdcom.dll    Sat Feb 05 07:21:45 2011 (4D4D40D9)
fffff880`03b46000 fffff880`03b89000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013e0000 fffff880`013fa000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01600000 fffff880`0162b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05272000 fffff880`05277200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05374000 fffff880`05389000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05330000 fffff880`05353000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c47000 fffff880`00c8b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05322000 fffff880`05330000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03b0c000 fffff880`03b1b000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05315000 fffff880`05322000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`0113d000 fffff880`01157000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0105e000 fffff880`0108f000   MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`0592a000 fffff880`05942000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05942000 fffff880`0596f000   mrxsmb   mrxsmb.sys   Wed Feb 23 00:15:23 2011 (4D6497EB)
fffff880`0596f000 fffff880`059bd000   mrxsmb10 mrxsmb10.sys Wed Feb 23 00:15:14 2011 (4D6497E2)
fffff880`059bd000 fffff880`059e0000   mrxsmb20 mrxsmb20.sys Wed Feb 23 00:15:13 2011 (4D6497E1)
fffff880`00ed4000 fffff880`00edf000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01000000 fffff880`0105e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02ca7000 fffff880`02cb2000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e9000 fffff880`017fb000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01685000 fffff880`01777000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03cea000 fffff880`03cf6000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`00dbd000 fffff880`00dec000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03a00000 fffff880`03a15000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d86000 fffff880`02d95000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`00c00000 fffff880`00c45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01777000 fffff880`017d7000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`064d3000 fffff880`064e8000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`00edf000 fffff880`00ef0000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c9b000 fffff880`02ca7000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02803000 fffff800`02de0000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
fffff880`0123e000 fffff880`013e0000   Ntfs     Ntfs.sys     Thu Mar 10 22:39:25 2011 (4D79996D)
fffff880`0147c000 fffff880`01485000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10a9a000 fffff880`10a9b180   nvBridge nvBridge.kmd Fri Jan 07 20:57:22 2011 (4D27C482)
fffff880`0fe3f000 fffff880`10a99d00   nvlddmkm nvlddmkm.sys Fri Jan 07 21:07:22 2011 (4D27C6DA)
fffff880`02d60000 fffff880`02d86000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03cbd000 fffff880`03cda000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00eaa000 fffff880`00ebf000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e6a000 fffff880`00e9d000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0112d000 fffff880`0113d000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01514000 fffff880`01525000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05eae000 fffff880`05f54000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05213000 fffff880`05250000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c8b000 fffff880`00c9f000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`02dd9000 fffff880`02dfd000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`00fdd000 fffff880`00ff8000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03a92000 fffff880`03ab3000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03ab3000 fffff880`03acd000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c4a000 fffff880`02c9b000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03af2000 fffff880`03afd000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`010b4000 fffff880`010bd000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010bd000 fffff880`010c6000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011f5000 fffff880`011fe000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0157b000 fffff880`015b5000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`05389000 fffff880`053a1000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03c00000 fffff880`03c67000   Rt64win7 Rt64win7.sys Thu Jan 13 06:57:19 2011 (4D2EE89F)
fffff880`05f54000 fffff880`05f5f000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0fe2b000 fffff880`0fe37000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02d95000 fffff880`02db2000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`017df000 fffff880`017e9000   speedfan speedfan.sys Sat Dec 18 06:03:51 2010 (4D0C9517)
fffff880`017d7000 fffff880`017df000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0643e000 fffff880`064d3000   srv      srv.sys      Wed Feb 23 00:16:24 2011 (4D649828)
fffff880`05e00000 fffff880`05e67000   srv2     srv2.sys     Wed Feb 23 00:15:59 2011 (4D64980F)
fffff880`05f5f000 fffff880`05f8c000   srvnet   srvnet.sys   Wed Feb 23 00:15:49 2011 (4D649805)
fffff880`03b44000 fffff880`03b45480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01800000 fffff880`019fd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`05f8c000 fffff880`05f9e000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`00fd0000 fffff880`00fdd000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`00fb2000 fffff880`00fd0000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c36000 fffff880`02c4a000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00500000 fffff960`0050a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03dab000 fffff880`03dd1000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03b89000 fffff880`03b9b000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`052c9000 fffff880`052caf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0fe0d000 fffff880`0fe1e000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`03b9b000 fffff880`03bf5000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
fffff880`03c67000 fffff880`03cbd000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`052ae000 fffff880`052c9000   USBSTOR  USBSTOR.SYS  Thu Mar 10 23:31:17 2011 (4D79A595)
fffff880`0fe00000 fffff880`0fe0d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`02c00000 fffff880`02c35a80   VBoxDrv  VBoxDrv.sys  Thu Feb 17 11:21:07 2011 (4D5D4AF3)
fffff880`03acd000 fffff880`03af1080   VBoxNetAdp VBoxNetAdp.sys Thu Feb 17 11:21:07 2011 (4D5D4AF3)
fffff880`03b1b000 fffff880`03b43d00   VBoxNetFlt VBoxNetFlt.sys Thu Feb 17 11:21:06 2011 (4D5D4AF2)
fffff880`02dcd000 fffff880`02dd8c40   VBoxUSBMon VBoxUSBMon.sys Thu Feb 17 11:21:07 2011 (4D5D4AF3)
fffff880`00e9d000 fffff880`00eaa000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0148c000 fffff880`0149a000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0108f000 fffff880`010b4000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01675000 fffff880`01685000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00ebf000 fffff880`00ed4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010c9000 fffff880`01125000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0152f000 fffff880`0157b000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02db2000 fffff880`02dcd000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0122a000 fffff880`0123a000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00eff000 fffff880`00fa3000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00fa3000 fffff880`00fb2000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d57000 fffff880`02d60000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00322000   win32k   win32k.sys   Wed Mar 02 22:58:01 2011 (4D6F11C9)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05353000 fffff880`05374000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`064e8000 fffff880`06519000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`01446000 fffff880`01454000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01454000 fffff880`01460000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01460000 fffff880`01469000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01469000 fffff880`0147c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
 
Hi, what test should I run using HDDScan?

Meanwhile, I'm attaching some stuff here. I'll get the rest asap.
 

Attachments

  • memory-ss.PNG
    memory-ss.PNG
    51.2 KB · Views: 868
  • cpu-ss.PNG
    cpu-ss.PNG
    56.5 KB · Views: 910
  • RAMMon - SPD Info.zip
    2.9 KB · Views: 290

050111-15818-01.dmp
BugCheck 24, {1904fb, fffff880067112e8, fffff88006710b50, fffff8000289f4fc}
ExceptionAddress: fffff8000289f4fc (nt!CcMapAndCopyInToCache+0x000000000000003c)
ExceptionCode: c0000005 (Access violation)
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonWrite+331d )


Hi, what test should I run using HDDScan?


S.M.A.R.T.

Most likely it'll come up clean. Tell me the result.

~~~~~~~

Meanwhile, I'm attaching some stuff here. I'll get the rest asap.

Yea, thanks.

CPU - EIST should be on. The frequency should drop when idling.
So to point to it again, make sure EIST is on.

RAM looks right at first glance, 2xTeam Group Inc. DDR800 5 5 5 15 slot #1 & #3.

However, I see 1 difference in their operational rates:

Data Input Setup Time Before Strobe, tDS (ns) SLOT#1 0.050 SLOT#3 1.600


Load setup defaults for the bios.

If crashes persist, remove one of the RAM sticks.
 
Hi cybercore,

Attached are the S.M.A.R.T reports.

EIST? where do i turn it on? I'll go load bios defaults now.
 

Attachments

  • smart-1.PNG
    smart-1.PNG
    106 KB · Views: 873
  • smart-2.PNG
    smart-2.PNG
    121.6 KB · Views: 903
Hi cybercore,

Attached are the S.M.A.R.T reports.

EIST? where do i turn it on? I'll go load bios defaults now.


Yes, bios defaults will enable EIST.

Then, if crashes persist still, remove one of the RAM sticks - either one.

HDD - Reallocation Sector Count doesn't look serious in your case, additionally run chkdsk /f elevated command.
 
will do cybercore. I've also loaded default bios settings, and the discrepency pointed out by you with regards to the timing of the RAM using RAMMon still exists. So it's probably a RAM issue causing the BSODs?
 
I would try out with 1 stick, if this is an easy option for you to open up your case and take it out.


From what I see in your SMART report, you have only 1 yellow mark (which means not critical) next to Reallocation Sector Coun. From what I know, quite a few people have this error and it doesn't cause them blue screens - although anything is possible. Your crash dump doesn't look like a typical memory problem, but whenever I see access violation it always concentrates me, since many times it has turned out to be related to RAM.


What I would do is more HDD testing with different tools:

HD Tune website

PassMark DiskCheckup - SMART hard drive monitoring utility

Link Removed - Invalid URL

Then compare the results. Also, chkdsk /f + defragment the hard drive.


I would also try out with only 1 RAM stick. A good chance removing one of the sticks will fix you.
 
Back
Top