Windows 7 Unknown BSOD W7 x64

timvdb · Nov 13, 2010

Hello,

I get the following BSOD once or twice per week, I'm not sure why.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1043

Additional information about the problem:
BCCode: d1
BCP1: 0000000000000000
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF88004B7FAA4
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

I've attached the dump files.

View attachment bsod.zip

OS Windows 7 x64
CPU AMD Phenom X4 955
Motherboard ASRock 870 Extreme3
Graphics ATI RADEON HD 5500
4 GB RAM

Hope someone has an idea.

Thanks!

TorrentG · Nov 19, 2010

Your Realtek lan driver is bugging out:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\Temp\Rar$DI00.125\111910-18205-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c57000 PsLoadedModuleList = 0xfffff800`02e94e50
Debug session time: Fri Nov 19 05:11:30.850 2010 (UTC - 5:00)
System Uptime: 0 days 0:05:52.598...

TorrentG · Nov 27, 2010

Looks good to me. Nice.

Please keep us updated in any case, but the bsods should really be stopped now. On the plus side, your machine is now faster than it was too. Enjoy.

timvdb · Nov 27, 2010

Thanks! I really hope so. Some extra power is always nice, will keep you posted on the progress!

timvdb · Nov 28, 2010

Something did go wrong today, another bsod. I did install virtual clonedrive again, but I'm not sure that's the problem.

View attachment bsod7.zip

timvdb · Dec 10, 2010

Had another crash think it got something to do with my ati driver.

View attachment bsod8.zip

TorrentG · Dec 10, 2010

timvdb said:
Something did go wrong today, another bsod. I did install virtual clonedrive again, but I'm not sure that's the problem.

View attachment 9477

I hope you understand that this forum is not here for you to experiment and then put it off to us to figure out what may or may not be the problem, when you purposely choose not to follow previous advice.
We are not your personal service.

timvdb · Dec 27, 2010

Well, I do understand, but since the bsod seemed to be the result of faulty memory timing I assumed when the memory timing was corrected that Virtualclone had nothing to do with the crashes and was once again save to install. Since I'm still experiencing bsod after I removed it again, it obviously has nothing to do with Virtualclone. Having faith in a solution isn't purposely choosing not to follow previous advice. I'm sorry if this seemed to be the case.

TorrentG · Dec 27, 2010

Cool, fair enough...but it's also the reason why your issues have not been solved yet.

When I see a clean crash dump with no drivers I do not like, then I could tell you to go ahead and replace the RAM to fix the machine.

timvdb · Dec 27, 2010

As far as I know all drivers are the latest available versions. No virtualclone installed, but the last crash dump did say something about utorrent. Was thinking about new RAM, but since I did 7 passes of memory checking without any errors it should be ok.

View attachment bsod9.zip

TorrentG · Dec 27, 2010

Update PowerISO:

SCDEmu SCDEmu.SYS Sun Nov 08 22:27:29 2009

PowerISO - Create, Edit, Compress, Encrypt, Split, Mount, Extract ISO file, ISO/BIN converter, Virtual Drive

---------

To fix the machine though, must replace the memory entirely with new matching set.

Enjoy the new hardware after purchase or RMA.

timvdb · Jan 9, 2011

View attachment bsod11.zip
Ok, so I bought a new memory set, one that was listed on the motherboard site as compatible, even same model type etc. Went well for five days and now I've got the same problem again. Is there an easy way to check if all drivers are up to date or should I manually go by them one at a time? Or is it something completely different? And since I still have the problem would it be stupid to also put in my old set so I at least have double the RAM for the time when it doesn't crash?

PS I have updated poweriso

cybercore · Jan 9, 2011

Code:

BugCheck 1000007E, {ffffffffc0000005, fffff80003189c3f, fffff880031c4a38, fffff880031c42a0}
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
Probably caused by : hardware ( nt!IopProcessWorkItem+1f )
Probably caused by : hardware

Let's not lose hope of getting it fixed.

-> Uninstall Elaborate Bytes AG software:

Code:

ElbyCDIO.sys Thu Dec 17 17:25:16 2009
VClone.sys   Sun Aug 09 17:25:45 2009

-> Update Realtek 10/100 NIC :

Code:

Rtnic64.sys  Thu Jul 23 10:03:10 2009

Link Removed

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\112310-19890-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e1d000 PsLoadedModuleList = 0xfffff800`0305ae50
Debug session time: Mon Nov 22 17:32:36.834 2010 (UTC - 5:00)
System Uptime: 0 days 8:32:44.567
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff80003189c3f, fffff880031c4a38, fffff880031c42a0}

Probably caused by : hardware ( nt!IopProcessWorkItem+1f )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80003189c3f, The address that the exception occurred at
Arg3: fffff880031c4a38, Exception Record Address
Arg4: fffff880031c42a0, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!IopProcessWorkItem+1f
fffff800`03189c3f cb              retf

EXCEPTION_RECORD:  fffff880031c4a38 -- (.exr 0xfffff880031c4a38)
ExceptionAddress: fffff80003189c3f (nt!IopProcessWorkItem+0x000000000000001f)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff880031c42a0 -- (.cxr 0xfffff880031c42a0)
rax=fffffa800472de60 rbx=fffffa80045955e0 rcx=000000000472de60
rdx=fffff8800176e9a0 rsi=fffffa8003b64040 rdi=fffffa800472de60
rip=fffff80003189c3f rsp=fffff880031c4c78 rbp=fffff800030325f8
 r8=fffffa8003af4918  r9=0000000000000000 r10=fffffffffffffffb
r11=fffffa800472de60 r12=fffffa800472de60 r13=0000000000000001
r14=0000000000000000 r15=0000000000000001
iopl=0         nv up ei pl nz na po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
nt!IopProcessWorkItem+0x1f:
fffff800`03189c3f cb              retf
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030c50e0
 ffffffffffffffff 

FOLLOWUP_IP: 
nt!IopProcessWorkItem+1f
fffff800`03189c3f cb              retf

BUGCHECK_STR:  0x7E

MISALIGNED_IP: 
nt!IopProcessWorkItem+1f
fffff800`03189c3f cb              retf

LAST_CONTROL_TRANSFER:  from fffff80003189c1f to fffff80003189c3f

STACK_TEXT:  
fffff880`031c4c78 fffff800`03189c1f : fffff800`02e9a961 fffff800`03032500 fffff800`03189c20 fffffa80`03b64040 : nt!IopProcessWorkItem+0x1f
fffff880`031c4ca8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWaitForMultipleObjects+0x112


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!IopProcessWorkItem+1f

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  hardware

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  .cxr 0xfffff880031c42a0 ; kb

MODULE_NAME: hardware

FAILURE_BUCKET_ID:  X64_IP_MISALIGNED

BUCKET_ID:  X64_IP_MISALIGNED

Followup: MachineOwner
---------

Drivers:

Code:

start             end                 module name
fffff880`0181c000 fffff880`0185a000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00e46000 fffff880`00e9d000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c1d000 fffff880`02ca7000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0186a000 fffff880`01880000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03fd1000 fffff880`03fe6000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00fda000 fffff880`00fe5000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00fa7000 fffff880`00fb0000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fb0000 fffff880`00fda000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`045d3000 fffff880`045f3000   AtihdW76 AtihdW76.sys Mon Aug 16 06:41:02 2010 (4C6915BE)
fffff880`0480a000 fffff880`04fff000   atikmdag atikmdag.sys Tue Oct 26 22:29:53 2010 (4CC78EA1)
fffff880`03e00000 fffff880`03e4b000   atikmpag atikmpag.sys Tue Oct 26 22:14:23 2010 (4CC78AFF)
fffff880`018c2000 fffff880`018ca000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffff960`00960000 fffff960`009c1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`01960000 fffff880`01967000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03f9a000 fffff880`03fab000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04742000 fffff880`04760000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00750000 fffff960`00777000   cdd      cdd.dll      unavailable (00000000)
fffff880`01900000 fffff880`0192a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c98000 fffff880`00d58000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01892000 fffff880`018c2000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c3a000 fffff880`00c98000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01119000 fffff880`0118c000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0185a000 fffff880`0186a000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06552000 fffff880`06560000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03ef9000 fffff880`03f7c000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`074c6000 fffff880`07553000   CVPNDRVA CVPNDRVA.sys Tue Mar 23 15:16:37 2010 (4BA91395)
fffff880`03f7c000 fffff880`03f9a000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`0180d000 fffff880`0181c000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0103a000 fffff880`01050000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`02d1b000 fffff880`02d41000   dnelwf64 dnelwf64.sys Mon Jul 26 21:11:05 2010 (4C4E3229)
fffff880`064c2000 fffff880`064e4000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0656c000 fffff880`06575000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06560000 fffff880`0656c000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06575000 fffff880`06588000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06546000 fffff880`06552000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04052000 fffff880`04146000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04146000 fffff880`0418c000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02c0b000 fffff880`02c16000   ElbyCDIO ElbyCDIO.sys Thu Dec 17 17:25:16 2009 (4B2AAFCC)
fffff880`010a7000 fffff880`010bb000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0105b000 fffff880`010a7000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`00e00000 fffff880`00e3a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0142b000 fffff880`01475000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`033f9000 fffff800`03442000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0418c000 fffff880`041b0000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`064ea000 fffff880`06546000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`065a4000 fffff880`065bd000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`065bd000 fffff880`065c5080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06596000 fffff880`065a4000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0467a000 fffff880`04742000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f7000 fffff880`01600000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04011000 fffff880`0402f000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`07497000 fffff880`074c6000   ipnat    ipnat.sys    Mon Jul 13 20:10:03 2009 (4A5BCCDB)
fffff880`0402f000 fffff880`0403e000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bc4000 fffff800`00bce000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`044f7000 fffff880`0453a000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`064e4000 fffff880`064e9200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06444000 fffff880`06459000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06400000 fffff880`06423000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c19000 fffff880`00c26000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`06588000 fffff880`06596000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`044a8000 fffff880`044b7000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`065c6000 fffff880`065d3000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00f8d000 fffff880`00fa7000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0192a000 fffff880`01957000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`04623000 fffff880`04633000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`04760000 fffff880`04778000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04778000 fffff880`047a5000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`047a5000 fffff880`047f3000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`04600000 fffff880`04623000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`019c5000 fffff880`019d0000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ea6000 fffff880`00eb0000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010bb000 fffff880`01119000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c00000 fffff880`02c0b000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e5000 fffff880`015f7000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0148b000 fffff880`0157d000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01880000 fffff880`0188c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04418000 fffff880`04447000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`045be000 fffff880`045d3000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d41000 fffff880`02d50000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02ca7000 fffff880`02cec000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0157d000 fffff880`015dd000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019d0000 fffff880`019e1000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02ded000 fffff880`02df9000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e1d000 fffff800`033f9000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01249000 fffff880`013ec000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01957000 fffff880`01960000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0454c000 fffff880`04564000   nusb3hub nusb3hub.sys Thu Jan 21 22:22:18 2010 (4B5919EA)
fffff880`041b0000 fffff880`041e0000   nusb3xhc nusb3xhc.sys Thu Jan 21 22:22:21 2010 (4B5919ED)
fffff880`02cf5000 fffff880`02d1b000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00ef0000 fffff880`00f05000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00eb0000 fffff880`00ee3000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f76000 fffff880`00f7d000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f7d000 fffff880`00f8d000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06e0d000 fffff880`06eb3000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06485000 fffff880`064c2000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c26000 fffff880`00c3a000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`011d8000 fffff880`011fc000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04447000 fffff880`04462000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04462000 fffff880`04483000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04483000 fffff880`0449d000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d9c000 fffff880`02ded000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`0449d000 fffff880`044a8000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`019aa000 fffff880`019b3000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019b3000 fffff880`019bc000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019bc000 fffff880`019c5000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`06459000 fffff880`06471000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03e4b000 fffff880`03ea2000   Rt64win7 Rt64win7.sys Mon Sep 20 03:38:09 2010 (4C970F61)
fffff880`03fe6000 fffff880`03ff8000   Rtnic64  Rtnic64.sys  Thu Jul 23 10:03:10 2009 (4A686D9E)
fffff880`044c6000 fffff880`044f5000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`06eb3000 fffff880`06ebe000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0403e000 fffff880`0404a000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02d50000 fffff880`02d6d000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015dd000 fffff880`015e5000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06f64000 fffff880`06fd5000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`07401000 fffff880`07497000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06efd000 fffff880`06f64000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06ebe000 fffff880`06eeb000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`044f5000 fffff880`044f6480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06eeb000 fffff880`06efd000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01800000 fffff880`0180d000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019e1000 fffff880`019ff000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d88000 fffff880`02d9c000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005a0000 fffff960`005aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03fab000 fffff880`03fd1000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`0453a000 fffff880`0454c000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`041e0000 fffff880`041e1f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04000000 fffff880`04011000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`041e2000 fffff880`041ef000   usbfilter usbfilter.sys Tue Dec 22 03:26:22 2009 (4B3082AE)
fffff880`04564000 fffff880`045be000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`041ef000 fffff880`041fa000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`03ea2000 fffff880`03ef8000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`065d3000 fffff880`065df000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`044b7000 fffff880`044c6000   VClone   VClone.sys   Sun Aug 09 17:25:45 2009 (4A7F3ED9)
fffff880`00ee3000 fffff880`00ef0000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01967000 fffff880`01975000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01975000 fffff880`0199a000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01475000 fffff880`01485000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f05000 fffff880`00f1a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f1a000 fffff880`00f76000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0118c000 fffff880`011d8000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d6d000 fffff880`02d88000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0199a000 fffff880`019aa000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d58000 fffff880`00dfc000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00c00000 fffff880`00c0f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02cec000 fffff880`02cf5000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003df000   win32k   win32k.sys   unavailable (00000000)
fffff880`04800000 fffff880`04809000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00e9d000 fffff880`00ea6000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06423000 fffff880`06444000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`075a6000 fffff880`075d7000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07595000 fffff880`075a6000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`07564000 fffff880`07595000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07553000 fffff880`07564000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`018ca000 fffff880`018d8000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`018d8000 fffff880`018e4000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`018e4000 fffff880`018ed000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`018ed000 fffff880`01900000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

timvdb · Jan 9, 2011

Elaborate Bytes AG software was uninstalled already, removed the residual vclone.sys from harddisk and registry. Couldn't find ElbyCDIO.sys anywhere on the pc, not on hd or registry so I don't know why it pops up.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpLockdownFiles
%SystemPath%\system32\DRIVERS\VClone.sys remains in registry, I am not allowed to remove the entry with registry editor, is there any other way to do this?

Rtnic64.sys Thu Jul 23 10:03:10 2009 is the newest version available,
downloaded and installed the newest driver from ASRock > Producten > 870 Extreme3 > Download
and the provided realtek link and they're identical. In it is the above stated version.

Is there a way to force a crash because the next one could take a week or would it be an idea
to format and reinstall windows?

cybercore · Jan 9, 2011

If you have uninstalled Elaborate Bytes, then navigate to C:\Windows\system32\drivers and rename to .old these files:

ElbyCDIO.sys Thu Dec 17 17:25:16 2009
VClone.sys Sun Aug 09 17:25:45 2009

cybercore · Jan 9, 2011

As for Realtek NIC, I somewhat doubt that the driver is compatible with Windows 7:

Rtnic64.sys Thu Jul 23 10:03:10 2009

timvdb · Jan 9, 2011

When downloaded and extracted Rtnic64.sys is situated in the win7/64 folder so it should be a correct driver. It's found in the win7/64 driver package provided by both realtek and asrock as the driver for Gigabit lan. Don't think another driver will suffice.

Windows 7 Unknown BSOD W7 x64

timvdb

New Member

TorrentG

TorrentG

Banned

timvdb

New Member

timvdb

New Member

timvdb

New Member

TorrentG

Banned

timvdb

New Member

TorrentG

Banned

timvdb

New Member

TorrentG

Banned

timvdb

New Member

cybercore

New Member

timvdb

New Member

cybercore

New Member

cybercore

New Member

timvdb

New Member

Similar threads

Windows 7 Unknown BSOD W7 x64

New Member

Banned

New Member

New Member

New Member

Banned

New Member

Banned

New Member

Banned

New Member

New Member

New Member

New Member

New Member

New Member

Similar threads

Privacy & Transparency

Privacy & Transparency