Windows 7 Persistent PFN List Corruption Causing BSOD: Need Help Analyzing Dump File

venax · Oct 27, 2012

Keep having this damn BSOD!!!!!! already checked my ram with memtest all night and 0 errors !
i leave you my dump hoping that you can help me

usasma · Oct 27, 2012

Please provide this information for a complete analysis: Link Removed

Please remove this older driver by un-installing it's program. DO NOT manually delete/rename the driver as it may make the system unbootable! :

RTCore64.sys Tue Sep 6 08:24:50 2011 (4E661112)
RivaTuner/EVGA Precision/MSI Afterburner (known BSOD issues w/Win7)
Link Removed - Invalid URL

If the BSOD's don't stop, please provide the info requested above. Then run Driver Verifier according to these instructions: Link Removed

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sat Oct 27 17:04:48.422 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102712-11341-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 1:51:26.296[/B]
BugCheck Code: [B]BugCheck 4E, {99, 1e3c41, 2, 204e40}[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck Info: [B]PFN_LIST_CORRUPT (4e)[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000001e3c41, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0000000000204e40, 0
BUGCHECK_STR:  0x4E_99
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]wmplayer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sat Oct 27 17:04:48.422 2012 (UTC - 4:00)**************************
GEARAspiWDM.sys    Mon May 18 08:17:04 2009 (4A1151C0)
intelppm.sys       Mon Jul 13 19:19:25 2009 (4A5BC0FD)
ISODrv64.sys       Thu Jan 28 22:39:02 2010 (4B625856)
amdxata.sys        Fri Mar 19 12:18:18 2010 (4BA3A3CA)
WmVirHid.sys       Tue Apr 27 16:08:53 2010 (4BD74455)
WmXlCore.sys       Tue Apr 27 16:09:26 2010 (4BD74476)
WmBEnum.sys        Tue Apr 27 16:10:19 2010 (4BD744AB)
Rt64win7.sys       Tue Aug 23 09:55:41 2011 (4E53B15D)
LHidFilt.Sys       Fri Sep  2 02:23:09 2011 (4E60764D)
LMouFilt.Sys       Fri Sep  2 02:23:15 2011 (4E607653)
[B]RTCore64.sys       Tue Sep  6 08:24:50 2011 (4E661112)[/B]
cpuz135_x64.sys    Wed Sep 21 04:23:41 2011 (4E799F0D)
ESLWireACD.sys     Wed Oct 26 07:14:34 2011 (4EA7EB9A)
MFWCtwl.sys        Fri Dec 23 08:13:58 2011 (4EF47E96)
HECIx64.sys        Mon Jul  2 18:14:58 2012 (4FF21D62)
nvhda64v.sys       Tue Jul  3 11:25:04 2012 (4FF30ED0)
EtronXHCI.sys      Fri Jul 20 03:15:46 2012 (500905A2)
EtronHub3.sys      Fri Jul 20 03:15:52 2012 (500905A8)
nvlddmkm.sys       Thu Aug 30 11:50:16 2012 (503F8BB8)
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed
Link Removed
MFWCtwl.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed

venax · Oct 28, 2012

Ok i unistalled msi afterburner , then i ran driver verifier anddddd i got a bsod, not pfn_list_corrupt, here the dump.

edit actualy i got 2 bsod I didn t even see the first one

usasma · Oct 29, 2012

Please provide this information for a complete analysis: Link Removed
. . . .
If the BSOD's don't stop, please provide the info requested above.

One of the memory dumps blames ESLWireACD.sys - a component of ESL Wire Anti-Cheat software.
Link Removed

Was Driver Verifier running when these errors occurred?
Please un-install the ESL Wire Anti-Cheat software to see if it stops the BSOD's

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sun Oct 28 08:09:49.075 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102812-20623-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:12.949[/B]
BugCheck Code: [B]BugCheck 1E, {ffffffffc0000005, fffff800030c8356, 0, 0}[/B]
*** WARNING: Unable to verify timestamp for ESLWireACD.sys
*** ERROR: Module load completed but symbols could not be loaded for ESLWireACD.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]ESLWireACD.sys ( ESLWireACD+a688b )[/B]
BugCheck Info: [B]KMODE_EXCEPTION_NOT_HANDLED (1e)[/B]
Arguments: 
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800030c8356, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]System[/B]
FAILURE_BUCKET_ID: [B]X64_0x1E_c0000005_R_ESLWireACD+a688b[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Oct 27 17:28:31.072 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102812-90940-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:20:00.947[/B]
BugCheck Code: [B]BugCheck 4E, {99, 1537ea, 0, 14cbea}[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck Info: [B]PFN_LIST_CORRUPT (4e)[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000001537ea, page frame number
Arg3: 0000000000000000, current page state
Arg4: 000000000014cbea, 0
BUGCHECK_STR:  0x4E_99
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]firefox.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sun Oct 28 08:09:49.075 2012 (UTC - 4:00)**************************
GEARAspiWDM.sys    Mon May 18 08:17:04 2009 (4A1151C0)
intelppm.sys       Mon Jul 13 19:19:25 2009 (4A5BC0FD)
ISODrv64.sys       Thu Jan 28 22:39:02 2010 (4B625856)
amdxata.sys        Fri Mar 19 12:18:18 2010 (4BA3A3CA)
WmXlCore.sys       Tue Apr 27 16:09:26 2010 (4BD74476)
WmBEnum.sys        Tue Apr 27 16:10:19 2010 (4BD744AB)
Rt64win7.sys       Tue Aug 23 09:55:41 2011 (4E53B15D)
LHidFilt.Sys       Fri Sep  2 02:23:09 2011 (4E60764D)
LMouFilt.Sys       Fri Sep  2 02:23:15 2011 (4E607653)
cpuz135_x64.sys    Wed Sep 21 04:23:41 2011 (4E799F0D)
ESLWireACD.sys     Wed Oct 26 07:14:34 2011 (4EA7EB9A)
MFWCtwl.sys        Fri Dec 23 08:13:58 2011 (4EF47E96)
HECIx64.sys        Mon Jul  2 18:14:58 2012 (4FF21D62)
nvhda64v.sys       Tue Jul  3 11:25:04 2012 (4FF30ED0)
EtronXHCI.sys      Fri Jul 20 03:15:46 2012 (500905A2)
EtronHub3.sys      Fri Jul 20 03:15:52 2012 (500905A8)
nvlddmkm.sys       Thu Aug 30 11:50:16 2012 (503F8BB8)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Oct 27 17:28:31.072 2012 (UTC - 4:00)**************************
WmVirHid.sys       Tue Apr 27 16:08:53 2010 (4BD74455)
[B]RTCore64.sys       Tue Sep  6 08:24:50 2011 (4E661112)[/B]
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
MFWCtwl.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL

venax · Oct 29, 2012

yes i ran driver verifier the i restarted my computer and i got a bsod in the welcome screen. I will unistall esl wire

venax · Oct 29, 2012

ok the problem is not with wire i think . Got another 3 different BSOD

usasma · Oct 29, 2012

As I have stated twice before - please provide this info: Link Removed

venax · Oct 29, 2012

ok done . I hope is good

usasma · Oct 30, 2012

Thank you. I will get to it ASAP - but that may take a bit

We lost power at 5pm EDT yesterday and don't know when it'll be back on (it's about 5 am now). I'll reply back as soon as I am able. I am sending this from my phone.

venax · Oct 31, 2012

No problem

I hope you are OK

usasma · Nov 1, 2012

Only 70 updates since SP1 - most systems have 130 to 140. Please visit Windows Update and get ALL available updates.

Your C: drive only has 1.5 gB free - it should have about 6 gB free for optimum performance.

Please un-install MSI Afterburner. It (along with Riva Tuner and EVGA Precision) are known to cause BSOD's on some Win7 systems.

Also, if overclocking, please remove the overclock while we're troubleshooting. Feel free to resume any overclock once the BSOD's are stopped.

More to follow once I run the memory dumps.......

usasma · Nov 1, 2012

Turn off Driver Verifier

Update iTunes

Update Logitech WingMan software/drivers

Update ISODrive

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Mon Oct 29 12:33:23.070 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102912-20280-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:44.945[/B]
BugCheck Code: [B]BugCheck C9, {23b, fffff88001682710, fffff9800381ae50, 0}[/B]
Probably caused by :[B]HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )[/B]
BugCheck Info: [B]DRIVER_VERIFIER_IOMANAGER_VIOLATION (c9)[/B]
Arguments: 
Arg1: 000000000000023b, The caller has changed the status field of an IRP it does not understand.
Arg2: fffff88001682710, The address in the driver's code where the error was detected.
Arg3: fffff9800381ae50, IRP address.
Arg4: 0000000000000000
BUGCHECK_STR:  0xc9_23b
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]System[/B]
FAILURE_BUCKET_ID: [B]X64_0xc9_23b_HIDCLASS!HidpMajorHandler+0[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 29 12:29:24.460 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102912-20389-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:45.335[/B]
BugCheck Code: [B]BugCheck C9, {23b, fffff88005e2d710, fffff9800d760dc0, 0}[/B]
Probably caused by :[B]HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )[/B]
BugCheck Info: [B]DRIVER_VERIFIER_IOMANAGER_VIOLATION (c9)[/B]
Arguments: 
Arg1: 000000000000023b, The caller has changed the status field of an IRP it does not understand.
Arg2: fffff88005e2d710, The address in the driver's code where the error was detected.
Arg3: fffff9800d760dc0, IRP address.
Arg4: 0000000000000000
BUGCHECK_STR:  0xc9_23b
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]System[/B]
FAILURE_BUCKET_ID: [B]X64_0xc9_23b_HIDCLASS!HidpMajorHandler+0[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 29 12:23:10.629 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102912-20654-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:45.393[/B]
BugCheck Code: [B]BugCheck C9, {23b, fffff880019d2710, fffff98016beedc0, 0}[/B]
Probably caused by :[B]HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )[/B]
BugCheck Info: [B]DRIVER_VERIFIER_IOMANAGER_VIOLATION (c9)[/B]
Arguments: 
Arg1: 000000000000023b, The caller has changed the status field of an IRP it does not understand.
Arg2: fffff880019d2710, The address in the driver's code where the error was detected.
Arg3: fffff98016beedc0, IRP address.
Arg4: 0000000000000000
BUGCHECK_STR:  0xc9_23b
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]System[/B]
FAILURE_BUCKET_ID: [B]X64_0xc9_23b_HIDCLASS!HidpMajorHandler+0[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Mon Oct 29 12:33:23.070 2012 (UTC - 4:00)**************************
GEARAspiWDM.sys    Mon May 18 08:17:04 2009 (4A1151C0)
intelppm.sys       Mon Jul 13 19:19:25 2009 (4A5BC0FD)
ISODrv64.sys       Thu Jan 28 22:39:02 2010 (4B625856)
amdxata.sys        Fri Mar 19 12:18:18 2010 (4BA3A3CA)
WmVirHid.sys       Tue Apr 27 16:08:53 2010 (4BD74455)
WmXlCore.sys       Tue Apr 27 16:09:26 2010 (4BD74476)
WmBEnum.sys        Tue Apr 27 16:10:19 2010 (4BD744AB)
Rt64win7.sys       Tue Aug 23 09:55:41 2011 (4E53B15D)
LHidFilt.Sys       Fri Sep  2 02:23:09 2011 (4E60764D)
LMouFilt.Sys       Fri Sep  2 02:23:15 2011 (4E607653)
cpuz135_x64.sys    Wed Sep 21 04:23:41 2011 (4E799F0D)
MFWCtwl.sys        Fri Dec 23 08:13:58 2011 (4EF47E96)
HECIx64.sys        Mon Jul  2 18:14:58 2012 (4FF21D62)
nvhda64v.sys       Tue Jul  3 11:25:04 2012 (4FF30ED0)
EtronXHCI.sys      Fri Jul 20 03:15:46 2012 (500905A2)
EtronHub3.sys      Fri Jul 20 03:15:52 2012 (500905A8)
nvlddmkm.sys       Thu Aug 30 11:50:16 2012 (503F8BB8)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 29 12:23:10.629 2012 (UTC - 4:00)**************************
[B]RTCore64.sys       Tue Sep  6 08:24:50 2011 (4E661112)[/B]
[/FONT]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed
Link Removed
Link Removed
Link Removed
MFWCtwl.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed - Invalid URL
Link Removed - Invalid URL
Link Removed
Link Removed - Invalid URL

venax · Feb 7, 2013

Hello

after long time without BSOD the problem is back again

I used driververifier to found that logitech driver was causing me one of the BSOD (not pfn_list_corrupt) and so i removed it completly , but i m sure something else is causing the BSOD. I removed MSI AFTERBURNER (before the bsods in the attachement) but still bsod so i have it back , should i remove it again?

thank you

usasma · Feb 8, 2013

If you put MSI Afterburner back on and the BSOD's start again - it's likely that MSI Afterburner is the cause.

Please provide this information so we can provide a complete analysis: Link Removed

Please turn Driver Verifier off. To do this, open up verifier.exe and select "Delete existing settings". Click on "Finish" and reboot for the changes to take effect.

The only sure thing that I see here is MSI Afterburner. Please remove it and see if that stops the BSOD's.

If all of this doesn't stop the BSOD's, please run these free hardware diagnostics: Link Removed. Let us know the results and we can move on from there.

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Thu Feb  7 10:38:37.310 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020713-20342-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:45.184[/B]
Probably caused by :[B]HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )[/B]
BugCheck [B]C9, {23b, fffff88005802710, fffff9800e20cdc0, 0}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 000000000000023b, The caller has changed the status field of an IRP it does not understand.
Arg2: fffff88005802710, The address in the driver's code where the error was detected.
Arg3: fffff9800e20cdc0, IRP address.
Arg4: 0000000000000000
BUGCHECK_STR:  0xc9_23b
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0xc9_23b_HIDCLASS!HidpMajorHandler+0[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Feb  7 10:14:06.301 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020713-20202-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:45.176[/B]
Probably caused by :[B]HIDCLASS.SYS ( HIDCLASS!HidpMajorHandler+0 )[/B]
BugCheck [B]C9, {23b, fffff88005863710, fffff9800d692dc0, 0}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 000000000000023b, The caller has changed the status field of an IRP it does not understand.
Arg2: fffff88005863710, The address in the driver's code where the error was detected.
Arg3: fffff9800d692dc0, IRP address.
Arg4: 0000000000000000
BUGCHECK_STR:  0xc9_23b
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0xc9_23b_HIDCLASS!HidpMajorHandler+0[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Feb  7 10:05:46.608 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020713-20482-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:11.483[/B]
*** WARNING: Unable to verify timestamp for vrtaucbl.sys
*** ERROR: Module load completed but symbols could not be loaded for vrtaucbl.sys
Probably caused by :[B]portcls.sys ( portcls!GetMaxMapRegisters+5 )[/B]
BugCheck [B]D6, {fffff98002b93018, 0, fffff880043b7b15, 0}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: fffff98002b93018, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff880043b7b15, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR:  0xD6
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  audiodg.exe
FAILURE_BUCKET_ID: [B]X64_0xD6_portcls!GetMaxMapRegisters+5[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Feb  7 09:44:26.655 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020713-20498-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 0:00:11.530[/B]
*** WARNING: Unable to verify timestamp for vrtaucbl.sys
*** ERROR: Module load completed but symbols could not be loaded for vrtaucbl.sys
Probably caused by :[B]portcls.sys ( portcls!GetMaxMapRegisters+5 )[/B]
BugCheck [B]D6, {fffff9800a99f018, 0, fffff88004802b15, 0}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: fffff9800a99f018, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff88004802b15, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR:  0xD6
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  audiodg.exe
FAILURE_BUCKET_ID: [B]X64_0xD6_portcls!GetMaxMapRegisters+5[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Feb  6 03:03:42.856 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020613-10202-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 1:54:58.730[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck [B]4E, {99, 1d692e, 2, 1d69ad}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000001d692e, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000001d69ad, 0
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  Origin.exe
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Feb  5 11:56:20.548 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020513-10140-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 3:43:04.422[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadRefCount+4f )[/B]
BugCheck [B]4E, {9a, efb, 2, 0}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 000000000000009a, 
Arg2: 0000000000000efb
Arg3: 0000000000000002
Arg4: 0000000000000000
BUGCHECK_STR:  0x4E_9a
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0x4E_9a_nt!MiBadRefCount+4f[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Feb  4 12:46:23.657 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020413-9360-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 3:57:23.235[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck [B]4E, {99, cf886, 0, 7886}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000cf886, page frame number
Arg3: 0000000000000000, current page state
Arg4: 0000000000007886, 0
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Feb  2 13:37:21.903 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020213-10327-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17640.amd64fre.win7sp1_gdr.110622-1506
System Uptime:[B]0 days 8:27:47.651[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck [B]4E, {99, 213ae, 2, 74434}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000213ae, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0000000000074434, 0
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Thu Feb  7 10:38:37.310 2013 (UTC - 5:00)**************************
intelppm.sys       Mon Jul 13 19:19:25 2009 (4A5BC0FD)
ISODrv64.sys       Thu Jan 28 22:39:02 2010 (4B625856)
vrtaucbl.sys       Mon Feb 15 12:07:10 2010 (4B797F3E)
amdxata.sys        Fri Mar 19 12:18:18 2010 (4BA3A3CA)
WmVirHid.sys       Tue Apr 27 16:08:53 2010 (4BD74455)
WmXlCore.sys       Tue Apr 27 16:09:26 2010 (4BD74476)
WmBEnum.sys        Tue Apr 27 16:10:19 2010 (4BD744AB)
Rt64win7.sys       Tue Aug 23 09:55:41 2011 (4E53B15D)
LHidFilt.Sys       Fri Sep  2 02:23:09 2011 (4E60764D)
LMouFilt.Sys       Fri Sep  2 02:23:15 2011 (4E607653)
[B]RTCore64.sys       Tue Sep  6 08:24:50 2011 (4E661112)[/B]
cpuz135_x64.sys    Wed Sep 21 04:23:41 2011 (4E799F0D)
MFWCtwl.sys        Fri Dec 23 08:13:58 2011 (4EF47E96)
GEARAspiWDM.sys    Thu May  3 15:56:17 2012 (4FA2E2E1)
HECIx64.sys        Mon Jul  2 18:14:58 2012 (4FF21D62)
nvhda64v.sys       Tue Jul  3 11:25:04 2012 (4FF30ED0)
EtronXHCI.sys      Fri Jul 20 03:15:46 2012 (500905A2)
EtronHub3.sys      Fri Jul 20 03:15:52 2012 (500905A8)
nvlddmkm.sys       Fri Nov 30 22:24:02 2012 (50B97852)
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
MFWCtwl.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

venax · Feb 12, 2013

i unistalled msi aferburner , and after 3 days i got bsod , pfn_list_corrupt. But i don t know why no minidump

so i can t show it

usasma · Feb 12, 2013

Check in C:\Windows for a file named MEMORY.dmp - check the date to see if it's the one that wasn't captured as a minidump.
If so, zip it up and upload it to a free file-hosting service - and post a link to it here.

If not, then start with these free diagnostics: Link Removed

venax · Feb 16, 2013

i finaly managed to get a minidump file so here it is .
Thanks in advance

usasma · Feb 16, 2013

Unfortunately there isn't much in this memory dump. Please try running Driver Verifier according to these instructions: Link Removed

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sat Feb 16 10:48:34.200 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\021613-10062-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: [B]7601[/B].17857.amd64fre.win7sp1_gdr.120605-1503
System Uptime:[B]0 days 0:16:10.074[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4c )[/B]
BugCheck [B]4E, {99, b1cad, 0, adf2d}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000b1cad, page frame number
Arg3: 0000000000000000, current page state
Arg4: 00000000000adf2d, 0
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  FlashPlayerPlu
FAILURE_BUCKET_ID: [B]X64_0x4E_99_nt!MiBadShareCount+4c[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD4-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sat Feb 16 10:48:34.200 2013 (UTC - 5:00)**************************
intelppm.sys       Mon Jul 13 19:19:25 2009 (4A5BC0FD)
ISODrv64.sys       Thu Jan 28 22:39:02 2010 (4B625856)
vrtaucbl.sys       Mon Feb 15 12:07:10 2010 (4B797F3E)
amdxata.sys        Fri Mar 19 12:18:18 2010 (4BA3A3CA)
WmXlCore.sys       Tue Apr 27 16:09:26 2010 (4BD74476)
WmBEnum.sys        Tue Apr 27 16:10:19 2010 (4BD744AB)
Rt64win7.sys       Tue Aug 23 09:55:41 2011 (4E53B15D)
cpuz135_x64.sys    Wed Sep 21 04:23:41 2011 (4E799F0D)
MFWCtwl.sys        Fri Dec 23 08:13:58 2011 (4EF47E96)
GEARAspiWDM.sys    Thu May  3 15:56:17 2012 (4FA2E2E1)
HECIx64.sys        Mon Jul  2 18:14:58 2012 (4FF21D62)
nvhda64v.sys       Tue Jul  3 11:25:04 2012 (4FF30ED0)
EtronXHCI.sys      Fri Jul 20 03:15:46 2012 (500905A2)
EtronHub3.sys      Fri Jul 20 03:15:52 2012 (500905A8)
nvlddmkm.sys       Fri Nov 30 22:24:02 2012 (50B97852)
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
MFWCtwl.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

venax · Feb 17, 2013

ok done .....

usasma · Feb 18, 2013

Looks like this to me: Vrtaucbl.sys with description vrtaucbl.sys is a driver file from company Eugene V. Muzychenko belonging to product Virtual Audio Cable. Try uninstalling that and see if that stops the BSOD's.

Debug session time: Sun Feb 17 05:10:55.655 2013 (UTC - 8:00)
Loading Dump File [C:\Users\John\SysnativeBSODApps\021713-10998-01.dmp]
Built by: 7601.17857.amd64fre.win7sp1_gdr.120605-1503
System Uptime: 0 days 0:00:11.530
*** WARNING: Unable to verify timestamp for vrtaucbl.sys
*** ERROR: Module load completed but symbols could not be loaded for vrtaucbl.sys
Probably caused by : portcls.sys ( portcls!GetMaxMapRegisters+5 )
BugCheck D6, {fffff9800a9af018, 0, fffff880057adb15, 0}
BugCheck Info: Link Removed
Bugcheck code 000000d6
Arguments:
Arg1: fffff9800a9af018, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff880057adb15, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR: 0xD6
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: audiodg.exe
FAILURE_BUCKET_ID: X64_0xD6_portcls!GetMaxMapRegisters+5
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

*** 3rd PARTY DRIVER LIST ***
*** 3rd PARTY DRIVER LIST ***

EtronHub3.sys Fri Jul 20 00:15:52 2012 (500905A8)
EtronXHCI.sys Fri Jul 20 00:15:46 2012 (500905A2)
GEARAspiWDM.sys Thu May 3 12:56:17 2012 (4FA2E2E1)
HECIx64.sys Mon Jul 2 15:14:58 2012 (4FF21D62)
ISODrv64.sys Thu Jan 28 19:39:02 2010 (4B625856)
MFWCtwl.sys Fri Dec 23 05:13:58 2011 (4EF47E96)
Rt64win7.sys Tue Aug 23 06:55:41 2011 (4E53B15D)
WmBEnum.sys Tue Apr 27 13:10:19 2010 (4BD744AB)
WmXlCore.sys Tue Apr 27 13:09:26 2010 (4BD74476)
amdxata.sys Fri Mar 19 09:18:18 2010 (4BA3A3CA)
intelppm.sys Mon Jul 13 16:19:25 2009 (4A5BC0FD)
nvhda64v.sys Tue Jul 3 08:25:04 2012 (4FF30ED0)
nvlddmkm.sys Fri Nov 30 19:24:02 2012 (50B97852)
vrtaucbl.sys Mon Feb 15 09:07:10 2010 (4B797F3E)

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
MFWCtwl.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

Navigation section

Windows 7 Persistent PFN List Corruption Causing BSOD: Need Help Analyzing Dump File

Well-Known Member

Fantastic Member

Well-Known Member

Fantastic Member

Well-Known Member

Well-Known Member

Attachments

Fantastic Member

Well-Known Member

Attachments

Fantastic Member

Well-Known Member

Fantastic Member

Fantastic Member

Well-Known Member

Attachments

Fantastic Member

Well-Known Member

Fantastic Member

Well-Known Member

Attachments

Fantastic Member

Well-Known Member

Attachments

Fantastic Member

Similar threads