Windows 7 NTOSKRNL.EXE - Computer BSODs after two or three hours of use

dcebulsk

New Member
Joined
Oct 2, 2011
Hey all!

My computer has been afflicted with a weird problem recently. It runs for a few hours, then BSODs. In downloading bluescreenview and checking out the error messages, it always seems to happen when a file called ntoskrnl.exe is accessed.

Windows repair did not work, and I can't do a system restore (Don't have a restore point prior to this issue. I know, I know...)

Computer was recently outfitted with all new parts a few months ago aside from processor and PSU. Thoughts? minidump folder attached.
 

Attachments

  • DcebulskBSOD.rar
    141.9 KB · Views: 244
Hello and welcome


Analysis

Code:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d89a123732, b3b7465eec8f0698, fffff8000363b881, 1}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption

Followup: memory_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d89a123732, Reserved
Arg2: b3b7465eec8f0698, Reserved
Arg3: fffff8000363b881, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification

Debugging Details:
------------------


BUGCHECK_STR:  0x109

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff8000368bc40

STACK_TEXT:  
fffff880`033d95d8 00000000`00000000 : 00000000`00000109 a3a039d8`9a123732 b3b7465e`ec8f0698 fffff800`0363b881 : nt!KeBugCheckEx


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff8000363b965 - nt! ?? ::FNODOBFM::`string'+21a8c
    [ 0f:0b ]
1 error : !nt (fffff8000363b965)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption


Code:
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880091ec1c8, fffff880091eba20, fffff800039c7963}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880091ec1c8
Arg3: fffff880091eba20
Arg4: fffff800039c7963

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880091ec1c8 -- (.exr 0xfffff880091ec1c8)
ExceptionAddress: fffff800039c7963 (nt!MmCreateSection+0x0000000000000243)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000001
   Parameter[1]: 0000000000000025
Attempt to write to address 0000000000000025

CONTEXT:  fffff880091eba20 -- (.cxr 0xfffff880091eba20)
rax=0000000000000001 rbx=0000000000000001 rcx=fffff880091ec468
rdx=0000000000000000 rsi=0000000008000000 rdi=fffffa800695fb60
rip=fffff800039c7963 rsp=fffff880091ec400 rbp=0000000000000080
 r8=0000000000000000  r9=fffff880091ec520 r10=0000000000000000
r11=0000000000000000 r12=0000000000000004 r13=fffffa80046e4f20
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00210202
nt!MmCreateSection+0x243:
fffff800`039c7963 48894824        mov     qword ptr [rax+24h],rcx ds:002b:00000000`00000025=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000001

EXCEPTION_PARAMETER2:  0000000000000025

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800038fd100
 0000000000000025 

FOLLOWUP_IP: 
nt!MmCreateSection+243
fffff800`039c7963 48894824        mov     qword ptr [rax+24h],rcx

FAULTING_IP: 
nt!MmCreateSection+243
fffff800`039c7963 48894824        mov     qword ptr [rax+24h],rcx

BUGCHECK_STR:  0x24

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

DEVICE_OBJECT: fffffa8006788ff8

LAST_CONTROL_TRANSFER:  from fffff800036e3e96 to fffff800039c7963

STACK_TEXT:  
fffff880`091ec400 fffff800`036e3e96 : fffffa80`069f9438 00000000`00000000 00000000`00000000 fffff880`091ec668 : nt!MmCreateSection+0x243
fffff880`091ec600 fffff880`012587cc : fffff880`00000000 00000000`00000000 fffff8a0`0148d100 fffff880`0129f088 : nt!CcInitializeCacheMap+0x746
fffff880`091ec6e0 fffff880`012591a3 : fffffa80`065a0980 fffffa80`06788af0 fffff880`091ec801 fffff880`091ec800 : Ntfs!NtfsCommonWrite+0x2f68
fffff880`091ec890 fffff880`00c02bcf : fffffa80`06788fb0 fffffa80`06788af0 fffffa80`069cd010 00000000`00000001 : Ntfs!NtfsFsdWrite+0x1c3
fffff880`091ec950 fffff880`00c016df : fffffa80`064868e0 00000000`00000001 fffffa80`06486800 fffffa80`06788af0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`091ec9e0 fffff800`039d321b : 00000000`00000001 fffffa80`046e4f20 00000000`00000001 fffffa80`06788af0 : fltmgr!FltpDispatch+0xcf
fffff880`091eca40 fffff800`039ddc83 : fffffa80`06788ff8 00000000`00000000 fffffa80`046e4f20 fffff880`009e9180 : nt!IopSynchronousServiceTail+0xfb
fffff880`091ecab0 fffff800`036c9ed3 : fffffa80`03b5eb01 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWriteFile+0x7e2
fffff880`091ecbb0 00000000`73dd2e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0016e788 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73dd2e09


CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff800039c7965 - nt!MmCreateSection+245
    [ 4c:48 ]
1 error : !nt (fffff800039c7965)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

STACK_COMMAND:  .cxr 0xfffff880091eba20 ; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
DRIVERS

Code:
start             end                 module name
fffff800`00b9a000 fffff800`00ba4000   kdcom    kdcom.dll    Sat Feb 05 16:52:49 2011 (4D4D8061)
fffff800`0361b000 fffff800`03664000   hal      hal.dll      Sat Nov 20 13:00:25 2010 (4CE7C669)
fffff800`03664000 fffff800`03c4d000   nt       ntkrnlmp.exe Thu Jun 23 03:53:23 2011 (4E02AAA3)
fffff880`00c00000 fffff880`00c4c000   fltmgr   fltmgr.sys   Sat Nov 20 09:19:24 2010 (4CE7929C)
fffff880`00c4c000 fffff880`00c60000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`00c98000 fffff880`00ce7000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:03:51 2010 (4CE7C737)
fffff880`00ce7000 fffff880`00cfb000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`00cfb000 fffff880`00d59000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00d59000 fffff880`00db5000   volmgrx  volmgrx.sys  Sat Nov 20 09:20:43 2010 (4CE792EB)
fffff880`00db5000 fffff880`00ddf000   ataport  ataport.SYS  Sat Nov 20 09:19:15 2010 (4CE79293)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Sat Nov 20 09:19:11 2010 (4CE7928F)
fffff880`00e33000 fffff880`00e48000   volmgr   volmgr.sys   Sat Nov 20 09:19:28 2010 (4CE792A0)
fffff880`00e48000 fffff880`00e58000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`00e58000 fffff880`00e61000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00e61000 fffff880`00e6c000   amdxata  amdxata.sys  Fri Mar 19 16:18:18 2010 (4BA3A3CA)
fffff880`00e70000 fffff880`00f30000   CI       CI.dll       Sat Nov 20 13:12:36 2010 (4CE7C944)
fffff880`00f30000 fffff880`00fd4000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00fd4000 fffff880`00fe3000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00fe3000 fffff880`00ffd000   mountmgr mountmgr.sys Sat Nov 20 09:19:21 2010 (4CE79299)
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys     Sat Nov 20 09:19:16 2010 (4CE79294)
fffff880`01057000 fffff880`01060000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`01060000 fffff880`0106a000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`0106a000 fffff880`01077000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`01077000 fffff880`0108c000   partmgr  partmgr.sys  Sat Nov 20 09:20:00 2010 (4CE792C0)
fffff880`0108c000 fffff880`011f2000   sptd     sptd.sys     Sun Feb 27 19:29:52 2011 (4D6AA630)
fffff880`011f2000 fffff880`011fa000   intelide intelide.sys Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`01213000 fffff880`013b6000   Ntfs     Ntfs.sys     Fri Mar 11 03:39:39 2011 (4D79997B)
fffff880`013b6000 fffff880`013e0000   cdrom    cdrom.sys    Sat Nov 20 09:19:20 2010 (4CE79298)
fffff880`01400000 fffff880`01494000   tdrpman  tdrpman.sys  Mon Nov 12 13:36:33 2007 (473856E1)
fffff880`014d6000 fffff880`01534000   msrpc    msrpc.sys    Sat Nov 20 09:21:56 2010 (4CE79334)
fffff880`01534000 fffff880`0154f000   ksecdd   ksecdd.sys   Sat Nov 20 09:21:15 2010 (4CE7930B)
fffff880`0154f000 fffff880`015c1000   cng      cng.sys      Sat Nov 20 10:08:45 2010 (4CE79E2D)
fffff880`015c1000 fffff880`015d2000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`015d2000 fffff880`015dc000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Sat Nov 20 09:23:13 2010 (4CE79381)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Sat Nov 20 10:10:34 2010 (4CE79E9A)
fffff880`0168b000 fffff880`016c5000   fvevol   fvevol.sys   Sat Nov 20 09:24:06 2010 (4CE793B6)
fffff880`016c5000 fffff880`016db000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`016dc000 fffff880`017cf000   ndis     ndis.sys     Sat Nov 20 09:23:30 2010 (4CE79392)
fffff880`017cf000 fffff880`017ff000   CLASSPNP CLASSPNP.SYS Sat Nov 20 09:19:23 2010 (4CE7929B)
fffff880`01800000 fffff880`0183a000   rdyboost rdyboost.sys Sat Nov 20 09:43:10 2010 (4CE7982E)
fffff880`0183a000 fffff880`0184c000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`0184c000 fffff880`01855000   hwpolicy hwpolicy.sys Sat Nov 20 09:18:54 2010 (4CE7927E)
fffff880`0185d000 fffff880`01a61000   tcpip    tcpip.sys    Tue Jun 21 04:33:55 2011 (4E001123)
fffff880`01a61000 fffff880`01aab000   fwpkclnt fwpkclnt.sys Sat Nov 20 09:21:37 2010 (4CE79321)
fffff880`01aab000 fffff880`01b5b000   timntr   timntr.sys   Wed Aug 29 13:38:23 2007 (46D568BF)
fffff880`01b5b000 fffff880`01b6b000   vmstorfl vmstorfl.sys Sat Nov 20 09:57:30 2010 (4CE79B8A)
fffff880`01b6b000 fffff880`01bb7000   volsnap  volsnap.sys  Sat Nov 20 09:20:08 2010 (4CE792C8)
fffff880`01bb7000 fffff880`01bbf000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`01bbf000 fffff880`01bfa000   snapman  snapman.sys  Thu Nov 22 08:19:33 2007 (47453B95)
fffff880`02e00000 fffff880`02e1b000   wanarp   wanarp.sys   Sat Nov 20 10:52:36 2010 (4CE7A874)
fffff880`02e1b000 fffff880`02e2f000   termdd   termdd.sys   Sat Nov 20 11:03:40 2010 (4CE7AB0C)
fffff880`02e2f000 fffff880`02e80000   rdbss    rdbss.sys    Sat Nov 20 09:27:51 2010 (4CE79497)
fffff880`02e80000 fffff880`02e8c000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff880`02e8c000 fffff880`02e97000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`02e97000 fffff880`02ea6000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`02ea6000 fffff880`02ee9000   ks       ks.sys       Sat Nov 20 10:33:23 2010 (4CE7A3F3)
fffff880`02eea000 fffff880`02f73000   afd      afd.sys      Mon Apr 25 03:33:58 2011 (4DB4DD96)
fffff880`02f73000 fffff880`02f80000   aswRdr   aswRdr.SYS   Tue Sep 06 21:36:39 2011 (4E668457)
fffff880`02f80000 fffff880`02f89000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02f89000 fffff880`02faf000   pacer    pacer.sys    Sat Nov 20 10:52:18 2010 (4CE7A862)
fffff880`02faf000 fffff880`02fc5000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
fffff880`02fc5000 fffff880`02fd4000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02fd4000 fffff880`02ff1000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`03c01000 fffff880`03c5b000   usbhub   usbhub.sys   Fri Mar 25 03:29:25 2011 (4D8C0C15)
fffff880`03c5b000 fffff880`03c70000   NDProxy  NDProxy.SYS  Sat Nov 20 10:52:20 2010 (4CE7A864)
fffff880`03c70000 fffff880`03ccc000   HdAudio  HdAudio.sys  Sat Nov 20 10:44:23 2010 (4CE7A687)
fffff880`03ccc000 fffff880`03d09000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`03d09000 fffff880`03d2b000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`03d2b000 fffff880`03d30200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`03d31000 fffff880`03d3d000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`03d3d000 fffff880`03d4b000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`03d4b000 fffff880`03d68000   usbccgp  usbccgp.sys  Fri Mar 25 03:29:14 2011 (4D8C0C0A)
fffff880`03d68000 fffff880`03d69f00   USBD     USBD.SYS     Fri Mar 25 03:28:59 2011 (4D8C0BFB)
fffff880`03d6a000 fffff880`03d78000   hidusb   hidusb.sys   Sat Nov 20 10:43:49 2010 (4CE7A665)
fffff880`03d78000 fffff880`03d91000   HIDCLASS HIDCLASS.SYS Sat Nov 20 10:43:49 2010 (4CE7A665)
fffff880`03d91000 fffff880`03d99080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`03d9a000 fffff880`03da8000   kbdhid   kbdhid.sys   Sat Nov 20 10:33:25 2010 (4CE7A3F5)
fffff880`03da8000 fffff880`03db5000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`03e00000 fffff880`03e12000   aswTdi   aswTdi.SYS   Tue Sep 06 21:36:39 2011 (4E668457)
fffff880`03e12000 fffff880`03e57000   netbt    netbt.sys    Sat Nov 20 09:23:18 2010 (4CE79386)
fffff880`03ea6000 fffff880`03f3e000   aswSnx   aswSnx.SYS   Tue Sep 06 21:38:16 2011 (4E6684B8)
fffff880`03f3e000 fffff880`03f47000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`03f47000 fffff880`03f4e000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`03f4e000 fffff880`03f5c000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`03f5c000 fffff880`03f81000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`03f81000 fffff880`03f91000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`03f91000 fffff880`03f9a000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`03f9a000 fffff880`03fa3000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`03fa3000 fffff880`03fac000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`03fac000 fffff880`03fb7000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`03fb7000 fffff880`03fc8000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`03fc8000 fffff880`03fea000   tdx      tdx.sys      Sat Nov 20 09:21:54 2010 (4CE79332)
fffff880`03fea000 fffff880`03ff7000   TDI      TDI.SYS      Sat Nov 20 09:22:06 2010 (4CE7933E)
fffff880`04000000 fffff880`0400d000   vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
fffff880`0400d000 fffff880`0400e480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`04013000 fffff880`04107000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 09:50:50 2010 (4CE799FA)
fffff880`04107000 fffff880`0414d000   dxgmms1  dxgmms1.sys  Sat Nov 20 09:49:53 2010 (4CE799C1)
fffff880`0414d000 fffff880`04171000   HDAudBus HDAudBus.sys Sat Nov 20 10:43:42 2010 (4CE7A65E)
fffff880`04171000 fffff880`04183000   L1E62x64 L1E62x64.sys Thu Jun 11 07:45:22 2009 (4A30A802)
fffff880`04183000 fffff880`04190000   usbuhci  usbuhci.sys  Fri Mar 25 03:29:03 2011 (4D8C0BFF)
fffff880`04190000 fffff880`041e6000   USBPORT  USBPORT.SYS  Fri Mar 25 03:29:12 2011 (4D8C0C08)
fffff880`041e6000 fffff880`041f7000   usbehci  usbehci.sys  Fri Mar 25 03:29:04 2011 (4D8C0C00)
fffff880`041f7000 fffff880`041ff000   ASACPI   ASACPI.sys   Mon Mar 28 03:30:36 2005 (42476C4C)
fffff880`04227000 fffff880`042aa000   csc      csc.sys      Sat Nov 20 09:27:12 2010 (4CE79470)
fffff880`042aa000 fffff880`042c8000   dfsc     dfsc.sys     Sat Nov 20 09:26:31 2010 (4CE79447)
fffff880`042c8000 fffff880`042d9000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`042d9000 fffff880`04329000   aswSP    aswSP.SYS    Tue Sep 06 21:38:14 2011 (4E6684B6)
fffff880`04329000 fffff880`0434f000   tunnel   tunnel.sys   Sat Nov 20 10:51:50 2010 (4CE7A846)
fffff880`0434f000 fffff880`04365000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`04365000 fffff880`04380000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`04380000 fffff880`043a1000   raspptp  raspptp.sys  Sat Nov 20 10:52:31 2010 (4CE7A86F)
fffff880`043a1000 fffff880`043bb000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`043bb000 fffff880`043ca000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`043ca000 fffff880`043d9000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`043d9000 fffff880`043eb000   umbus    umbus.sys    Sat Nov 20 10:44:37 2010 (4CE7A695)
fffff880`05400000 fffff880`05421000   WudfPf   WudfPf.sys   Sat Nov 20 10:42:44 2010 (4CE7A624)
fffff880`05421000 fffff880`05436000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`05436000 fffff880`05489000   nwifi    nwifi.sys    Tue Jul 14 01:07:23 2009 (4A5BCC3B)
fffff880`05489000 fffff880`0549c000   ndisuio  ndisuio.sys  Sat Nov 20 10:50:08 2010 (4CE7A7E0)
fffff880`0549c000 fffff880`054b4000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`054dc000 fffff880`05531000   udfs     udfs.sys     Sat Nov 20 09:26:11 2010 (4CE79433)
fffff880`05531000 fffff880`0553f000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`0553f000 fffff880`0554b000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`0554b000 fffff880`05554000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`05554000 fffff880`05567000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`05567000 fffff880`0558a000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`0558a000 fffff880`055c4000   aswMonFlt aswMonFlt.sys Tue Sep 06 21:36:29 2011 (4E66844D)
fffff880`055c4000 fffff880`055cd000   aswFsBlk aswFsBlk.SYS Tue Sep 06 21:36:13 2011 (4E66843D)
fffff880`055cd000 fffff880`055e4000   tifsfilt tifsfilt.sys Wed Aug 29 13:37:29 2007 (46D56889)
fffff880`07400000 fffff880`0742d000   mrxsmb   mrxsmb.sys   Wed Apr 27 03:40:38 2011 (4DB78226)
fffff880`0742d000 fffff880`0747b000   mrxsmb10 mrxsmb10.sys Sat Jul 09 03:46:28 2011 (4E17C104)
fffff880`0747b000 fffff880`0749f000   mrxsmb20 mrxsmb20.sys Wed Apr 27 03:39:37 2011 (4DB781E9)
fffff880`074d8000 fffff880`075a1000   HTTP     HTTP.sys     Sat Nov 20 09:24:30 2010 (4CE793CE)
fffff880`075a1000 fffff880`075bf000   bowser   bowser.sys   Wed Feb 23 04:55:04 2011 (4D649328)
fffff880`075bf000 fffff880`075d7000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`08c8d000 fffff880`08d33000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`08d33000 fffff880`08d3e000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`08d3e000 fffff880`08d6f000   srvnet   srvnet.sys   Fri Apr 29 04:05:35 2011 (4DBA2AFF)
fffff880`08d6f000 fffff880`08d81000   tcpipreg tcpipreg.sys Sat Nov 20 10:51:48 2010 (4CE7A844)
fffff880`08d81000 fffff880`08dea000   srv2     srv2.sys     Fri Apr 29 04:05:46 2011 (4DBA2B0A)
fffff880`09031000 fffff880`090c9000   srv      srv.sys      Fri Apr 29 04:06:06 2011 (4DBA2B1E)
fffff880`090c9000 fffff880`090d1000   TuneUpUtilitiesDriver64 TuneUpUtilitiesDriver64.sys Thu Sep 17 12:54:52 2009 (4AB2238C)
fffff880`0914b000 fffff880`09154000   ALSysIO64 ALSysIO64.sys Sun Jul 10 01:27:45 2011 (4E18F201)
fffff880`0f200000 fffff880`0f210000   CompositeBus CompositeBus.sys Sat Nov 20 10:33:17 2010 (4CE7A3ED)
fffff880`0f210000 fffff880`0f226000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`0f226000 fffff880`0f24a000   rasl2tp  rasl2tp.sys  Sat Nov 20 10:52:34 2010 (4CE7A872)
fffff880`0f24a000 fffff880`0f256000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`0f256000 fffff880`0f285000   ndiswan  ndiswan.sys  Sat Nov 20 10:52:32 2010 (4CE7A870)
fffff880`0f285000 fffff880`0f290000   rdpbus   rdpbus.sys   Tue Jul 14 01:17:46 2009 (4A5BCEAA)
fffff880`0f29b000 fffff880`0ff49000   nvlddmkm nvlddmkm.sys Sat May 21 05:07:04 2011 (4DD73A68)
fffff880`0ff49000 fffff880`0ff4e000   nvBridge nvBridge.kmd Sat May 21 04:58:23 2011 (4DD7385F)
fffff880`0ff4e000 fffff880`0ffc1000   netr6164 netr6164.sys Fri Oct 16 04:15:23 2009 (4AD7E54B)
fffff880`0ffc1000 fffff880`0ffde000   parport  parport.sys  Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`0ffde000 fffff880`0ffea000   serenum  serenum.sys  Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`0ffea000 fffff880`0fff7000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:17:04 2009 (4A1151C0)
fffff960`00060000 fffff960`00373000   win32k   win32k.sys   unavailable (00000000)
fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`006a0000 fffff960`006c7000   cdd      cdd.dll      unavailable (00000000)

Unloaded modules:
fffff880`09142000 fffff880`0914b000   ALSysIO64.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`090d1000 fffff880`09142000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01494000 fffff880`014a2000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`014a2000 fffff880`014ae000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`014ae000 fffff880`014b7000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`014b7000 fffff880`014ca000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000



outdated drivers
tdrpman tdrpman.sys Mon Nov 12 13:36:33 2007 (473856E1)
Acronis Try&Decide and Restore Points Volume Filter Driver
also included in Seagate DiscWizard


timntr timntr.sys Wed Aug 29 13:38:23 2007
Acronis True Image Backup Archive Explorer
also included in Seagate DiscWizard


snapman.sys Thu Nov 22 08:19:33 2007
Acronis True Image Snapshot Manager driver
also included in Seagate DiscWizard

tifsfilt tifsfilt.sys Wed Aug 29 13:37:29 2007
Acronis True Image FS Filter
also included in Seagate DiscWizard


ASACPI ASACPI.sys Mon Mar 28 03:30:36 2005 - Well known for causing BSOD's


  • You can disable the ATK0110 ACPI Utility in the DeviceManager (under System Devices) with no apparent issues. OR (and if disabling does cause issues)
  • There is an update here: Asus ATK0110 . Look under the sub-heading: Utilities. 12th one down.
Install - Manual method

  1. Download the and extract it to a folder.
  2. Open the Device Manager.
  3. Right click the device you wish to change the for. You can select Properties > > Details to check you have the right device. In this case System Devices >> ATK0110 ACPI Utility
  4. Choose Update Software.
  5. Select Browse My Computer For Software.
  6. Select Let me pick from a list of device on my computer.
  7. Select Have disk...
  8. Select Browse..
  9. Navigate to the extracted folder and double click on the .inf file
  10. Hit OK, then Next and the (s) will then begin to install.
  11. After it has installed, GoTo C:\Windows\System32\. Locate the Asacpi.sys , right click it and check the dates under its properties. You're looking for a "Modified" date of 2009 or 2010. Occasionally it can be a bit stubborn to change.

Id like to thank Elmer for writing this fantastic guide on removing ASACPI.sys



Please update ALL of your current drivers

update things like your bios, graphics card etc ensuring all the latest drivers are on

your computer

make sure you have installed all microsoft updates including service packs

Run in command promt the following command

sfc /scannow

and then....

chkdsk /r

_______________________


download a program called CPU-Z

once installed please take pictures of each tab, CPU,MEMORY Etc, this is so we can look at the various setup i.e volatages,ram timings etc
 
AVG was the culprit here, it seems. It was getting so bad that it would BSOD during the windows splash screen. I managed to get the bluescreenviewer to look at at work and found a few AVG-related files. Uninstalled it, installed Avast, and it's working fine now. Thanks!
 
Back
Top Bottom