Windows 7 IN NEED OF HELP

Paul Wheelhouse

New Member
041011-21294-01.dmp 10/04/2011 19:21:57 MEMORY_MANAGEMENT 0x0000001a 00000000`00041287 00000000`00000030 00000000`00000000 00000000`00000000 ntoskrnl.exe ntoskrnl.exe+80640 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17514 (win7sp1_rtm.101119-1850) x64 C:\Windows\Minidump\041011-21294-01.dmp 2 15 7601 274,128
041011-20514-01.dmp 10/04/2011 12:40:26 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`04a52571 fffff880`023bf568 fffff880`023bedc0 atikmpag.sys atikmpag.sys+6664 x64 C:\Windows\Minidump\041011-20514-01.dmp 2 15 7601 278,256
040911-19843-01.dmp 09/04/2011 16:33:58 PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 fffff89f`870db0f3 00000000`00000001 fffff880`0413ce0a 00000000`00000005 dxgmms1.sys dxgmms1.sys+3a9a0 x64 C:\Windows\Minidump\040911-19843-01.dmp 2 15 7601 274,128
040711-21808-01.dmp 07/04/2011 18:03:39 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`0f2640d8 fffff880`04767388 fffff880`04766be0 nvlddmkm.sys nvlddmkm.sys+5688d x64 C:\Windows\Minidump\040711-21808-01.dmp 2 15 7601 289,376
040711-17971-01.dmp 07/04/2011 17:24:43 SYSTEM_SERVICE_EXCEPTION 0x0000003b 00000000`c0000005 fffff880`0f278ce2 fffff880`048d7c10 00000000`00000000 nvlddmkm.sys nvlddmkm.sys+1f3ce2 x64 C:\Windows\Minidump\040711-17971-01.dmp 2 15 7601 281,960
040511-19234-01.dmp 05/04/2011 18:42:37 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 ffffffff`800000b5 00000000`00000002 00000000`00000001 fffff880`04e0d312 atikmdag.sys atikmdag.sys+3dc312 x64 C:\Windows\Minidump\040511-19234-01.dmp 2 15 7601 278,256
040411-15568-01.dmp 04/04/2011 18:57:30 UNEXPECTED_KERNEL_MODE_TRAP 0x0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 fffff800`02aec73c ntoskrnl.exe ntoskrnl.exe+80640 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17514 (win7sp1_rtm.101119-1850) x64 C:\Windows\Minidump\040411-15568-01.dmp 2 15 7601 290,760
033111-20560-01.dmp 31/03/2011 20:02:01 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 fffff87f`ee69ffa5 00000000`00000002 00000000`00000008 fffff87f`ee69ffa5 ntoskrnl.exe ntoskrnl.exe+80640 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17514 (win7sp1_rtm.101119-1850) x64 C:\Windows\Minidump\033111-20560-01.dmp 2 15 7601 274,296
033111-26161-01.dmp 31/03/2011 19:31:55 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`048614c1 fffff880`02137568 fffff880`02136dc0 atikmpag.sys atikmpag.sys+6614 x64 C:\Windows\Minidump\033111-26161-01.dmp 2 15 7601 278,400
033111-23524-01.dmp 31/03/2011 19:07:53 PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 ffffffff`891bf4b2 00000000`00000001 fffff880`04c4b6c6 00000000`00000005 ntoskrnl.exe ntoskrnl.exe+80640 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17514 (win7sp1_rtm.101119-1850) x64 C:\Windows\Minidump\033111-23524-01.dmp 2 15 7601 274,296
033011-22479-01.dmp 30/03/2011 14:08:57 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`0487a33a fffff880`02137578 fffff880`02136dd0 atikmpag.sys atikmpag.sys+612f x64 C:\Windows\Minidump\033011-22479-01.dmp 2 15 7601 278,456
033011-23275-01.dmp 30/03/2011 00:39:41 PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 fffff87f`84f71491 00000000`00000001 fffff880`04e54842 00000000`00000005 atikmdag.sys atikmdag.sys+e7180 x64 C:\Windows\Minidump\033011-23275-01.dmp 2 15 7601 278,456
032911-23899-01.dmp 29/03/2011 13:20:38 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`048fc4c1 fffff880`02137568 fffff880`02136dc0 atikmpag.sys atikmpag.sys+6614 x64 C:\Windows\Minidump\032911-23899-01.dmp 2 15 7601 278,456
032811-22776-01.dmp 28/03/2011 15:04:55 PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 ffffffff`91888468 00000000`00000001 fffff880`04cc9e3f 00000000`00000005 ntoskrnl.exe ntoskrnl.exe+80640 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17514 (win7sp1_rtm.101119-1850) x64 C:\Windows\Minidump\032811-22776-01.dmp 2 15 7601 278,456
032711-20982-01.dmp 27/03/2011 12:25:57 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`048cb4c1 fffff880`02137568 fffff880`02136dc0 atikmpag.sys atikmpag.sys+6614 x64 C:\Windows\Minidump\032711-20982-01.dmp 2 15 7601 274,296
032511-18813-01.dmp 25/03/2011 18:58:10 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000005 fffff880`04ab14c1 fffff880`0235f568 fffff880`0235edc0 atikmpag.sys atikmpag.sys+6614 x64 C:\Windows\Minidump\032511-18813-01.dmp 2 15 7601 278,456
 
Paul Wheelhouse;
Hello and welcome to the forums.
Please read and do your best to comply with the following three sticky threads at the top of the BSOD sub-forum.
http://windows7forums.com/blue-scre...mportant-every-thread-starter-please-see.html
http://windows7forums.com/blue-screen-death-bsod/55603-sf-diagnostic-tool.html
http://windows7forums.com/blue-screen-death-bsod/38837-how-ask-help-bsod-problem.html
Accumulate the information requested, place in in a folder and zip it up and attach it to your next post.
 
spd.PNGcpu.PNGmemory.PNG
 

Attachments

  • cpu.zip
    151 KB · Views: 299
  • Seven Forums.zip
    889 bytes · Views: 263
  • dmp_files.zip
    389.4 KB · Views: 337
Last edited:

041011-21294-01.dmp
MEMORY_MANAGEMENT (1a)
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+46585 )

041111-20217-01.dmp
BugCheck 1000007E, {ffffffffc0000005, fffff880048fa571, fffff8800215f568, fffff8800215edc0}
Probably caused by : atikmdag.sys ( atikmdag+3a571 )
atikmpag.sys Tue Mar 08 23:17:42 2011


1. RAM is currently running 800Mhz 4-4-4-4. Verify its rates with the manufacturer, it looks like it should be 800Mhz 5-5-5-18 1.8v. Wrong memory settings can cause blue screens.

Also, you were supposed to attach RAMMon HTML report so I can see all slots not just Slot 1.


2. Update nForce drivers:
nvm62x64.sys Fri Oct 17 17:01:06 2008



3. Since one of your crashes was caused by the ATI driver, you may want to reinstall it with the use of the driver sweeper Guru3D - Driver Sweeper Also try a different version.

It looks like the real culprit is your wrong memory settings. Don't forget to attach RAMMon this time.



CRASH DUMPS

Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\041011-21294-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a56000 PsLoadedModuleList = 0xfffff800`02c9be90
Debug session time: Sun Apr 10 14:20:39.157 2011 (UTC - 4:00)
System Uptime: 0 days 0:06:30.968
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41287, 30, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+46585 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041287, The subtype of the bugcheck.
Arg2: 0000000000000030
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41287

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880091b0990 -- (.trap 0xfffff880091b0990)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880091b0ba8
rdx=fffffa800623ea98 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ac266f rsp=fffff880091b0b20 rbp=fffff880091b0ca0
 r8=fffffa800623eac1  r9=0000000000000000 r10=fffffffffffffffd
r11=fffff880091b0a60 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!NtWaitForWorkViaWorkerFactory+0x3ce:
fffff800`02ac266f 488907          mov     qword ptr [rdi],rax ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a6962e to fffff80002ad6640

STACK_TEXT:  
fffff880`091b02e8 fffff800`02a6962e : 00000000`0000001a 00000000`00041287 00000000`00000030 00000000`00000000 : nt!KeBugCheckEx
fffff880`091b02f0 fffff800`02ad476e : 00000000`00000000 00000000`00000030 fffff8a0`08b02a00 00000000`800000aa : nt! ?? ::FNODOBFM::`string'+0x46585
fffff880`091b0450 fffff800`02bb0e85 : 00000000`0013334e 00000000`00000000 00000000`00000000 00000000`77044610 : nt!KiPageFault+0x16e
fffff880`091b05e0 fffff800`02b47530 : 00000000`03c7fde0 fffff680`0001e3f8 fffffa80`0653aec8 fffff800`02de7c11 : nt!MiResolvePageFileFault+0x1115
fffff880`091b0720 fffff800`02ae3979 : 00000000`00000000 ffffffff`ffffffff 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x399d4
fffff880`091b0830 fffff800`02ad476e : 00000000`00000001 00000000`03c7fde0 fffff880`091b0b00 fffffa80`0623ea20 : nt!MmAccessFault+0x359
fffff880`091b0990 fffff800`02ac266f : 000007fe`00000001 fffff880`091b0ba8 fffff880`091b0bc8 00000000`00000001 : nt!KiPageFault+0x16e
fffff880`091b0b20 fffff800`02ad58d3 : fffffa80`044f5a10 00000000`770445c0 fffff880`00000000 00000000`038106e0 : nt!NtWaitForWorkViaWorkerFactory+0x3ce
fffff880`091b0c20 00000000`76f92c1a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`03c7fbf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f92c1a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+46585
fffff800`02a6962e cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+46585

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

FAILURE_BUCKET_ID:  X64_0x1a_41287_nt!_??_::FNODOBFM::_string_+46585

BUCKET_ID:  X64_0x1a_41287_nt!_??_::FNODOBFM::_string_+46585

Followup: MachineOwner
---------




Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\041111-20217-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a5c000 PsLoadedModuleList = 0xfffff800`02ca1e90
Debug session time: Mon Apr 11 10:04:21.972 2011 (UTC - 4:00)
System Uptime: 0 days 1:45:16.782
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
....
Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff880048fa571, fffff8800215f568, fffff8800215edc0}

Probably caused by : atikmdag.sys ( atikmdag+3a571 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff880048fa571, The address that the exception occurred at
Arg3: fffff8800215f568, Exception Record Address
Arg4: fffff8800215edc0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
atikmdag+3a571
fffff880`048fa571 ff5228          call    qword ptr [rdx+28h]

EXCEPTION_RECORD:  fffff8800215f568 -- (.exr 0xfffff8800215f568)
ExceptionAddress: fffff880048fa571 (atikmdag+0x000000000003a571)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff8800215edc0 -- (.cxr 0xfffff8800215edc0)
rax=fffffa8005dad2a0 rbx=fffff8800215f830 rcx=fffffa8005dad2a0
rdx=800000b9800000b8 rsi=fffffa8005349c80 rdi=fffffa80065901e0
rip=fffff880048fa571 rsp=fffff8800215f7a0 rbp=fffffa8005349c80
 r8=0000000000005d00  r9=fffffa8005ef1020 r10=80000002800000fe
r11=fffff8800215f770 r12=0000000000000000 r13=0000000000000000
r14=fffffa8003fda3f0 r15=0000000000000001
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
atikmdag+0x3a571:
fffff880`048fa571 ff5228          call    qword ptr [rdx+28h] ds:002b:800000b9`800000e0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d0d0e8
 ffffffffffffffff 

FOLLOWUP_IP: 
atikmdag+3a571
fffff880`048fa571 ff5228          call    qword ptr [rdx+28h]

BUGCHECK_STR:  0x7E

LAST_CONTROL_TRANSFER:  from fffff8800215f830 to fffff880048fa571

STACK_TEXT:  
fffff880`0215f7a0 fffff880`0215f830 : fffffa80`05349c80 fffffa80`065901e0 fffff880`009eb180 fffffa80`05fd4b60 : atikmdag+0x3a571
fffff880`0215f7a8 fffffa80`05349c80 : fffffa80`065901e0 fffff880`009eb180 fffffa80`05fd4b60 fffff800`02c4ee80 : 0xfffff880`0215f830
fffff880`0215f7b0 fffffa80`065901e0 : fffff880`009eb180 fffffa80`05fd4b60 fffff800`02c4ee80 fffffa80`05fd4c20 : 0xfffffa80`05349c80
fffff880`0215f7b8 fffff880`009eb180 : fffffa80`05fd4b60 fffff800`02c4ee80 fffffa80`05fd4c20 00000000`00000000 : 0xfffffa80`065901e0
fffff880`0215f7c0 fffffa80`05fd4b60 : fffff800`02c4ee80 fffffa80`05fd4c20 00000000`00000000 00000000`00000000 : 0xfffff880`009eb180
fffff880`0215f7c8 fffff800`02c4ee80 : fffffa80`05fd4c20 00000000`00000000 00000000`00000000 fffffa80`053b7840 : 0xfffffa80`05fd4b60
fffff880`0215f7d0 fffffa80`05fd4c20 : 00000000`00000000 00000000`00000000 fffffa80`053b7840 fffffa80`053d4700 : nt!KiInitialPCR+0x180
fffff880`0215f7d8 00000000`00000000 : 00000000`00000000 fffffa80`053b7840 fffffa80`053d4700 fffff880`04376664 : 0xfffffa80`05fd4c20


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  atikmdag+3a571

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: atikmdag

IMAGE_NAME:  atikmdag.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d7702d1

STACK_COMMAND:  .cxr 0xfffff8800215edc0 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_atikmdag+3a571

BUCKET_ID:  X64_0x7E_atikmdag+3a571

Followup: MachineOwner
---------





DRIVERS

Code:
start             end                 module name
fffff880`04800000 fffff880`0483e000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00eeb000 fffff880`00f42000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`04000000 fffff880`04089000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`048a2000 fffff880`048b8000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`010da000 fffff880`010e5000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`00ff0000 fffff880`00ff9000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`056f2000 fffff880`05712000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`048c0000 fffff880`051e7000   atikmdag atikmdag.sys Tue Mar 08 23:32:17 2011 (4D7702D1)
fffff880`04370000 fffff880`043bf000   atikmpag atikmpag.sys Tue Mar 08 23:17:42 2011 (4D76FF66)
fffff880`0410c000 fffff880`04113000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04323000 fffff880`04334000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02a00000 fffff880`02a1e000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00730000 fffff960`00757000   cdd      cdd.dll      unavailable (00000000)
fffff880`019c8000 fffff880`019f2000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00cd6000 fffff880`00d96000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01650000 fffff880`01680000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c78000 fffff880`00cd6000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0147b000 fffff880`014ed000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`03fdf000 fffff880`03fef000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0612f000 fffff880`06138000   cpuz135_x64 cpuz135_x64.sys Wed Jan 19 11:42:06 2011 (4D37145E)
fffff880`057df000 fffff880`057ed000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04305000 fffff880`04323000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`042f6000 fffff880`04305000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0163a000 fffff880`01650000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0574f000 fffff880`05771000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`057ed000 fffff880`057f7000   dump_diskdump dump_diskdump.sys Sat Nov 20 05:33:56 2010 (4CE7A414)
fffff880`05600000 fffff880`05613000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`011a3000 fffff880`011e2000   dump_nvstor64 dump_nvstor64.sys Tue Aug 04 20:31:07 2009 (4A78D2CB)
fffff880`057d3000 fffff880`057df000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03e02000 fffff880`03ef6000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`03ef6000 fffff880`03f3c000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`03f60000 fffff880`03f6d000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01131000 fffff880`01145000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010e5000 fffff880`01131000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`014fe000 fffff880`01508000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01600000 fffff880`0163a000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`018d5000 fffff880`0191f000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`02a13000 fffff800`02a5c000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`03f3c000 fffff880`03f60000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`05777000 fffff880`057d3000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`02a6c000 fffff880`02a85000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02a85000 fffff880`02a8d080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0169d000 fffff880`016ab000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02b1a000 fffff880`02be3000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`019bf000 fffff880`019c8000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`0435a000 fffff880`04370000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`051e7000 fffff880`051f6000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02a9b000 fffff880`02aa9000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bd2000 fffff800`00bdc000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0562e000 fffff880`05671000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01200000 fffff880`0121b000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`0121b000 fffff880`01246000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`05771000 fffff880`05776200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02aed000 fffff880`02b02000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02aa9000 fffff880`02acc000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c15000 fffff880`00c64000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`043f2000 fffff880`04400000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`043e3000 fffff880`043f2000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02a8e000 fffff880`02a9b000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fd6000 fffff880`00ff0000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`040d2000 fffff880`04103000   MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`06f75000 fffff880`06f85000   MpNWMon  MpNWMon.sys  Tue Sep 14 20:19:30 2010 (4C901112)
fffff880`02a1e000 fffff880`02a36000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02a36000 fffff880`02a63000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`060be000 fffff880`0610b000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`0610b000 fffff880`0612f000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`04171000 fffff880`0417c000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f4b000 fffff880`00f55000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01145000 fffff880`011a3000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`042eb000 fffff880`042f6000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`019ad000 fffff880`019bf000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01508000 fffff880`015fb000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`03fef000 fffff880`03ffb000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04200000 fffff880`0422f000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`056dd000 fffff880`056f2000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`041eb000 fffff880`041fa000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04089000 fffff880`040ce000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`06f85000 fffff880`06f9a000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`0417c000 fffff880`0418d000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`042df000 fffff880`042eb000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a5c000 fffff800`03046000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`0125c000 fffff880`013ff000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`04103000 fffff880`0410c000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0483e000 fffff880`048a1d80   nvm62x64 nvm62x64.sys Fri Oct 17 17:01:06 2008 (48F8FD12)
fffff880`0100d000 fffff880`01038000   nvstor   nvstor.sys   Fri Mar 19 16:45:11 2010 (4BA3E257)
fffff880`0109b000 fffff880`010da000   nvstor64 nvstor64.sys Tue Aug 04 20:31:07 2009 (4A78D2CB)
fffff880`041c5000 fffff880`041eb000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00f95000 fffff880`00faa000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f55000 fffff880`00f88000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00fbf000 fffff880`00fc6000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fc6000 fffff880`00fd6000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`014ed000 fffff880`014fe000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06138000 fffff880`061de000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05712000 fffff880`0574f000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c64000 fffff880`00c78000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`043bf000 fffff880`043e3000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0422f000 fffff880`0424a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0424a000 fffff880`0426b000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0426b000 fffff880`04285000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0428e000 fffff880`042df000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04156000 fffff880`0415f000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0415f000 fffff880`04168000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04168000 fffff880`04171000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01973000 fffff880`019ad000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`02b02000 fffff880`02b1a000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`061de000 fffff880`061e9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0196b000 fffff880`01973000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06e00000 fffff880`06e71000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`06eab000 fffff880`06f44000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`06043000 fffff880`060ae000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`06000000 fffff880`06031000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`01038000 fffff880`0109b000   storport storport.sys Sat Nov 20 05:35:02 2010 (4CE7A456)
fffff880`03ffb000 fffff880`03ffc480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`016d1000 fffff880`018d5000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`06031000 fffff880`06043000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`041af000 fffff880`041bc000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0418d000 fffff880`041af000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`01460000 fffff880`01474000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`005a0000 fffff960`005aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04334000 fffff880`0435a000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`05671000 fffff880`05683000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`01680000 fffff880`0169d000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`05613000 fffff880`05614f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03fce000 fffff880`03fdf000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`05683000 fffff880`056dd000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`03f6d000 fffff880`03f78000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`03f78000 fffff880`03fce000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05615000 fffff880`05621000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`01246000 fffff880`01257000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`011e2000 fffff880`011fd000   USBSTOR  USBSTOR.SYS  Sat Nov 20 05:44:05 2010 (4CE7A675)
fffff880`00f88000 fffff880`00f95000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`04113000 fffff880`04121000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`04121000 fffff880`04146000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00faa000 fffff880`00fbf000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00d96000 fffff880`00df2000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`0191f000 fffff880`0196b000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`016ab000 fffff880`016c6000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`04146000 fffff880`04156000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e38000 fffff880`00edc000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00edc000 fffff880`00eeb000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`041bc000 fffff880`041c5000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00381000   win32k   win32k.sys   unavailable (00000000)
fffff880`00f42000 fffff880`00f4b000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02acc000 fffff880`02aed000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`06f44000 fffff880`06f75000   WUDFRd   WUDFRd.sys   Sat Nov 20 05:43:32 2010 (4CE7A654)

Unloaded modules:
fffff880`01680000 fffff880`0168e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0168e000 fffff880`01698000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`011a3000 fffff880`011e2000   dump_nvstor6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`01698000 fffff880`016ab000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
 
i have installed RAMMon but it dont want to work, what do i do ??

It should work fine in normal mode (as opposed to safe). Try running it as admin.

Set your memory 800MHz CAS 4-4-4-12, currently you have it 800MHz CAS 4-4-4-4. Really try to generate the RAMMon report.

If the sticks have any differencies in their rates such as the refresh cycles, that could be another problem causing your blue screens.
 
Back
Top