BSOD: I need some help!

silecchiad · 02-27-2011, 02:46 PM

I built this PC less than a month ago and have started experiencing BSOD. I have had 3 different errors (page fault in non paged area, memory management, and bad pool header) Specs: Amd Athlon x2 regor 3.2 ghz, Asus m4a79xtd evo motherboard, an asus Nvidia GTX 460 top graphics card, 8gb of ddr3 OCZ Reaper Ram all of the same type, western digital 750 gb cavier green hrd drive, a cd/dvd burner, and a rosewill wifi adapter. Ive ran windows memory diagnostics and results were clean, as well as a western digital extended test on my hrd drive which came back clean, virus scan came back clean so i have no clue what this could be. Im running windows 7 64 bit which i got from the MSDNA which provides free software for computer science majors so it is a legit copy of windows with a genuine product key that has been activated. I cant seem to figure out what is causing the bsod...maybe you guys can..thanks very much...I have attached the mini_dump requested in the posting instructions.

**usasma** · 02-27-2011, 05:29 PM

While waiting for the analysis' to run on the memory dumps, I've gotta say that USB wireless devices are responsible for many BSOD's on Win7 systems - and it's almost a certainty if using Vista drivers.

PCI/PCIe wireless cards (plugged into the motherboard) are much more powerful, reliable, and faster than the USB devices.

Also, you have the 2005 version of ASACPI.sys installed on your system - this is a known BSOD cause and must be fixed/updated.
So, go here: ASUSTeK Computer Inc.-Support- download_item_mkt
Then click on the Utilities category
Then scroll down 13 items and download the "ATK0110 driver for WindowsXP/Vista/Win7 32&64-bit"
Then install it.

Turn off Driver Verifier. It's not helping to identify anything, and it's causing your system to slow down.

There may be issues with your AVG - but this isn't certain. If you have the time, download a fresh copy of AVG - uninstall the current copy - then install the fresh copy.

OLDER DRIVERS PRESENT IN THE DUMP FILES
- Please update these drivers from the device manufacturer's website - or uninstall/remove them from your system. Reference links included below.
- DO NOT use Windows Update or the Update Drivers function of Device Manager.
- Windows Update exceptions may be noted below for Windows drivers:

Quote:

Code:


vmbus.sys        Sat Nov 20 04:57:29 2010 (4CE79B89)
winhv.sys        Sat Nov 20 04:20:02 2010 (4CE792C2)
amdxata.sys      Fri Mar 19 12:18:18 2010 (4BA3A3CA)
avgtdia.sys      Fri Nov 12 06:08:42 2010 (4CDD203A)
avgrkx64.sys     Mon Sep 06 20:49:37 2010 (4C858C21)
AVGIDSEH.Sys     Mon Sep 13 18:46:38 2010 (4C8EA9CE)
avgmfx64.sys     Mon Sep 06 20:49:14 2010 (4C858C0A)
avgldx64.sys     Tue Dec 07 21:01:55 2010 (4CFEE713)
Rt64win7.sys     Wed Jun 23 05:10:45 2010 (4C21CF95)
GEARAspiWDM.sys  Mon May 18 08:17:04 2009 (4A1151C0)
ASACPI.sys       Sun Mar 27 22:30:36 2005 (42476C4C)
nvhda64v.sys     Tue Mar 09 20:48:17 2010 (4B96FA61)
RTL8192su.sys    Thu Nov 25 01:13:42 2010 (4CEDFE96)
Sftvollh.sys     Fri Apr 23 15:20:08 2010 (4BD1F2E8)
AVGIDSFilter.Sys Tue Aug 03 18:23:21 2010 (4C5896D9)
AVGIDSDriver.Sys Tue Aug 03 18:24:45 2010 (4C58972D)
Sftfslh.sys      Fri Apr 23 15:20:30 2010 (4BD1F2FE)
Sftplaylh.sys    Fri Apr 23 15:20:28 2010 (4BD1F2FC)
Sftredirlh.sys   Fri Apr 23 15:20:39 2010 (4BD1F307)
AODDriver2.sys   Wed May 05 00:03:12 2010 (4BE0EE00)
nvlddmkm.sys     Fri Jul 09 17:15:58 2010 (4C37918E)
nvBridge.kmd     Fri Jul 09 17:07:54 2010 (4C378FAA)

BSOD BUGCHECK SUMMARY

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Sun Feb 27 19:32:09.273 2011 (UTC - 5:00)
System Uptime: 0 days 0:01:27.553
Probably caused by : rdyboost.sys ( rdyboost!SmdMdlCleanup+16 )
BUGCHECK_STR:  0x4E_99
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  firefox.exe
FAILURE_BUCKET_ID:  X64_0x4E_99_VRF_rdyboost!SmdMdlCleanup+16
Bugcheck code 0000004E
Arguments 00000000`00000099 00000000`00000000 00000000`00000000 00000000`00000000
SystemManufacturer = System manufacturer
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Sun Feb 27 16:51:14.070 2011 (UTC - 5:00)
System Uptime: 0 days 0:03:47.334
BugCheck D1, {fffff8802106f1e8, 2, 8, fffff8802106f1e8}
Probably caused by : ataport.SYS ( ataport!IdeTranslateCompletedRequest+236 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_VRF_CODE_AV_BAD_IP_ataport!IdeTranslateCompletedRequest+236
Bugcheck code 000000D1
Arguments fffff880`2106f1e8 00000000`00000002 00000000`00000008 fffff880`2106f1e8
SystemManufacturer = System manufacturer
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Sun Feb 27 16:46:32.149 2011 (UTC - 5:00)
System Uptime: 0 days 0:10:44.328
*** WARNING: Unable to verify timestamp for avgmfx64.sys
*** ERROR: Module load completed but symbols could not be loaded for avgmfx64.sys
*** WARNING: Unable to verify timestamp for AVGIDSFilter.Sys
*** ERROR: Module load completed but symbols could not be loaded for AVGIDSFilter.Sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a53 )
BUGCHECK_STR:  0x19_3
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID:  X64_0x19_3_VRF_nt!ExDeferredFreePool+a53
Bugcheck code 00000019
Arguments 00000000`00000003 fffffa80`069b26c0 fffffa80`269b26c0 fffffa80`069b26c0
SystemManufacturer = System manufacturer
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

silecchiad · 02-27-2011, 06:27 PM

Alright so is the ASUS driver the only one that needs to be updated or is there more? Sorry I am a noob when it comes to reading dump files

silecchiad · 02-27-2011, 06:45 PM

Another question: when i download the asus driver you listed above it saves a file to my documents, ive gone into the file and opened the application itself but im not 100% that it installed...same thing with the rt64win7.sys..how do i know if they actually install or if its just saving the folder

jcgriff2 · 02-28-2011, 04:15 AM

Check the timestamp on the two drivers. Look in \windows\system32\drivers

silecchiad · 02-28-2011, 06:01 AM

ASACPI.SYS is still listed as an old driver. I downloaded it from the link your provided. Upon downloading the small file a folder was placed in my documents. Inside the folder are 64 AND 32 bit options..once you open the 64 bit folder what do you do?? there is a system file (which i assume is the driver itself) a security catalog, an application that you have to extract to open..which will pull up a small black window then it will close rapidly...I checked the date modified in system32 and it said 2009....any help would be greatly appreciated, also would it help if i re-posted the mini dumps?

silecchiad · 02-28-2011, 06:04 AM

Also I received 2 bsods this morning upon logging into windows...they were both page fault in non paged area...

**usasma** · 02-28-2011, 12:45 PM

Please zip up and upload the memory dump files from the new BSOD's - more data usually means more chances to find a pattern.

If your ASACPI.sys download file is like mine, you double click on the AsAcpiIns.exe file (inside the 64 folder) to install it. You have the 64 bit version on your computer.

Update all drivers that are listed - anything over 6 months old is suspect, but I'd update anything that has an update available. We don't know about any of the drivers directly - so that's why we ask that you update anything that's old.

silecchiad · 02-28-2011, 02:01 PM

Alright, I am collecting mini dumps right now...while it does its thing I am going to update every driver you listed previously..I am actually starting to think my hard drive may be at fault...but you guys are the experts Ill see what your conclusion is. Thanks

silecchiad · 02-28-2011, 02:07 PM

Alright here is the new dumps....I am also going to uninstall avg completely because I know it has been having some errors...I am going to go with a different antivirus for now.

silecchiad · 02-28-2011, 02:10 PM

Not sure if dumps attached to last post...here they are...

**usasma** · 02-28-2011, 02:46 PM

If you suspect your Hard Drive, try this procedure: HD Diagnostic (read the details at the link)

Also try this free test because of the first Verifier Enabled Memory Dump: Memory Diagnostics (read the details at the link)

Turn off Driver Verifier.

silecchiad · 02-28-2011, 03:01 PM

I will test out the hrd drive...did you find anything in the dump files?

jcgriff2 · 03-01-2011, 12:39 PM

Quote:

Originally Posted by usasma

If you suspect your Hard Drive, try this procedure: HD Diagnostic (read the details at the link)

Also try this free test because of the first Verifier Enabled Memory Dump: Memory Diagnostics (read the details at the link)

Turn off Driver Verifier.

I suggest you follow usasma's instructions.

The dumps have memory management related bugchecks; one names ntfs.sys = HDD.

Windbg Logs
--> http://sysnative.com/bsod2011/jcgrif..._jcgriff2_.txt
--> http://sysnative.com/bsod2011/jcgrif...riff2_.txt.zip

Regards. . .

jcgrifff2

`

BSOD BUGCHECK SUMMARY

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Mon Feb 28 17:35:35.574 2011 (GMT-5)
System Uptime: 0 days 0:01:38.885
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+2a80f )
BUGCHECK_STR:  0x1a_5003
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  WerFault.exe
FAILURE_BUCKET_ID:  X64_0x1a_5003_VRF_nt!_??_::FNODOBFM::_string_+2a80f
Bugcheck code 0000001A
Arguments 00000000`00005003 fffff700`01080000 00000000`000003d5 000003d7`200007aa
SystemManufacturer = System manufacturer
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Mon Feb 28 11:47:24.366 2011 (GMT-5)
System Uptime: 0 days 0:01:12.631
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+3fb97c )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0x50
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x50_VRF_nvlddmkm+3fb97c
Bugcheck code 00000050
Arguments fffff980`2e202fcc 00000000`00000000 fffff880`1340e97c 00000000`00000002
SystemManufacturer = System manufacturer
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Mon Feb 28 11:45:22.186 2011 (GMT-5)
System Uptime: 0 days 0:12:50.450
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Probably caused by : Ntfs.sys ( Ntfs+9f3bb )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
BUGCHECK_STR:  0x50
PROCESS_NAME:  avgchsva.exe
FAILURE_BUCKET_ID:  X64_0x50_VRF_Ntfs+9f3bb
Bugcheck code 00000050
Arguments fffff8a0`38ccf489 00000000`00000000 fffff880`012d73bb 00000000`00000002
SystemManufacturer = System manufacturer
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  

by jcgriff2     
             
         J. C. Griffith, Microsoft MVP   
             
           https://mvp.support.microsoft.com/profile/Griffith   


           www.sysnative.com
             
           www.jcgriff2.com 


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨

silecchiad · 03-02-2011, 11:02 AM

Alright, I have updated the Nvidia drivers as well as the Asus driver and a few of the others that werent windows updates. However some of the links on the driver reference website just take you to a microsoft website....Im not sure how to link to some of the drivers...When you say that the memory management issue....is that suggestive of a bad hard drive?

**VicS-MSFT** · 03-02-2011, 02:58 PM

I suggest that you do not run driver verifier unless you are specifically testing a driver for stability. It will cause more crashes in places where normally windows would not crash. It is a developer test tool.

As far as the potential problem, it was related to readyboost feature of vista/win7 being active and running at that time. The deugger also lists firefox.exe, but I am not sure why. User mode app cannot easily cause a BSOD except for rare (or malicious) situations.
If you have a USB 2 memory drive, the OS can try to use it for readyboost feature to improve performance. You can disable that feature or try to update your system to latest SP and patch level. I did not see any reported bugs around ready boost, so it is not likely to be a common problem and less likely to be fixed if it were a problem. (because of rarety)3

Hope that helps.