Irql Still Bad

ZacHolt · 08-03-2008, 04:51 AM

Hi i posted on here a week back regarding my BSOD problems, it was IRQL LESS OR EQUAL i ran memtests on my ram and it went fine with 1 stick in but when there where 2 sticks in, errors occured. i swaped the ram sticks at the shop where i bought the computer and ran tests again but errors occured again. i have flashed my bios and still the BSOD pops up unexpectedly i have attached my 5 recent minidumps which i hope you can help me with.

**jcgriff2** · 08-03-2008, 03:41 PM

Hi . . .

The STOP error (bugcheck) on the 1st dump was 7F, {8, 80050031, 6f8, fffff80001a7ed35}, probable cause = ntkrnlmp.exe and the process running at the time was BIOS.exe

Please run msinfo32 and save as an NFO file. Please attach to your next post.

Here is the output of the dbug:

Code:

Loading Dump File [D:\#Dumps\ZacHolt - Vista - 08-03-08\Mini080108-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18063.amd64fre.vistasp1_gdr.080425-1930
Kernel base = 0xfffff800`01a52000 PsLoadedModuleList = 0xfffff800`01c17db0
Debug session time: Fri Aug  1 09:14:44.118 2008 (GMT-4)
System Uptime: 0 days 0:09:54.850
Loading Kernel Symbols
............................................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 6f8, fffff80001a7ed35}

Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b8 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80001a7ed35

Debugging Details:
------------------


BUGCHECK_STR:  0x7f_8

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  BIOS.exe

CURRENT_IRQL:  1

EXCEPTION_RECORD:  fffffa600811e518 -- (.exr 0xfffffa600811e518)
ExceptionAddress: fffff80001aba2dd (nt!RtlVirtualUnwind+0x000000000000025d)
   ExceptionCode: 10000004
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 00000000534d49f4

TRAP_FRAME:  fffffa600811e5c0 -- (.trap 0xfffffa600811e5c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000050 rbx=fffff80001aad121 rcx=0000000000000004
rdx=00000000534d49f4 rsi=fffff80001aacfa7 rdi=0000000000000000
rip=fffff80001aba2dd rsp=fffffa600811e750 rbp=0000000000000233
 r8=0000000000000006  r9=fffff80001a52000 r10=00000000534d48a4
r11=fffff80001c51000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!RtlVirtualUnwind+0x25d:
fffff800`01aba2dd 488b02          mov     rax,qword ptr [rdx] ds:f6f9:00000000`534d49f4=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80001aa712e to fffff80001aa7390

STACK_TEXT:  
fffff800`02c1cd28 fffff800`01aa712e : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`02c1cd30 fffff800`01aa5978 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x6e
fffff800`02c1ce70 fffff800`01a7ed35 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb8
fffffa60`0811dde0 fffff800`01aa71e9 : fffffa60`0811e518 00000000`00000001 fffffa60`0811e5c0 fffffa60`0811e990 : nt!KiDispatchException+0x35
fffffa60`0811e3e0 fffff800`01aa5fe5 : 00000000`00000000 ffecf6f9`ffecf6f9 ffecf6f9`ffecf600 00000000`00000001 : nt!KiExceptionDispatch+0xa9
fffffa60`0811e5c0 fffff800`01aba2dd : fffffa60`0811f5e8 fffffa60`0811efc0 fffff800`01baadd8 fffff800`01a52000 : nt!KiPageFault+0x1e5
fffffa60`0811e750 fffff800`01ac1bc8 : fffffa60`00000001 00000000`00000000 ffecf6f9`00000000 00000000`534d48a4 : nt!RtlVirtualUnwind+0x25d
fffffa60`0811e7c0 fffff800`01a7edc3 : fffffa60`0811f5e8 fffffa60`0811efc0 00000000`00000000 fffffa60`0811f690 : nt!RtlDispatchException+0x118
fffffa60`0811eeb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0xc3


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiDoubleFaultAbort+b8
fffff800`01aa5978 90              nop

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiDoubleFaultAbort+b8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4812c3f7

FAILURE_BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b8

BUCKET_ID:  X64_0x7f_8_nt!KiDoubleFaultAbort+b8

Followup: MachineOwner
---------

rax=fffff80002c1ce30 rbx=fffffa600811e518 rcx=000000000000007f
rdx=0000000000000008 rsi=0000000000000000 rdi=fffffa600811e5c0
rip=fffff80001aa7390 rsp=fffff80002c1cd28 rbp=fffff80002c1cef0
 r8=0000000080050031  r9=00000000000006f8 r10=fffff80001a7ed35
r11=0000000000000000 r12=fffffa600811e3e0 r13=fffff80001aa6e33
r14=fffff80001a52000 r15=fffff80001c55df4
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`01aa7390 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff800`02c1cd30=000000000000007f
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff800`02c1cd28 fffff800`01aa712e : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`02c1cd30 fffff800`01aa5978 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x6e
fffff800`02c1ce70 fffff800`01a7ed35 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb8 (TrapFrame @ fffff800`02c1ce70)
fffffa60`0811dde0 fffff800`01aa71e9 : fffffa60`0811e518 00000000`00000001 fffffa60`0811e5c0 fffffa60`0811e990 : nt!KiDispatchException+0x35
fffffa60`0811e3e0 fffff800`01aa5fe5 : 00000000`00000000 ffecf6f9`ffecf6f9 ffecf6f9`ffecf600 00000000`00000001 : nt!KiExceptionDispatch+0xa9
fffffa60`0811e5c0 fffff800`01aba2dd : fffffa60`0811f5e8 fffffa60`0811efc0 fffff800`01baadd8 fffff800`01a52000 : nt!KiPageFault+0x1e5 (TrapFrame @ fffffa60`0811e5c0)
fffffa60`0811e750 fffff800`01ac1bc8 : fffffa60`00000001 00000000`00000000 ffecf6f9`00000000 00000000`534d48a4 : nt!RtlVirtualUnwind+0x25d
fffffa60`0811e7c0 fffff800`01a7edc3 : fffffa60`0811f5e8 fffffa60`0811efc0 00000000`00000000 fffffa60`0811f690 : nt!RtlDispatchException+0x118
fffffa60`0811eeb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0xc3
start             end                 module name
fffff800`01a0c000 fffff800`01a52000   hal      hal.dll      Sat Jan 19 02:55:25 2008 (4791ACED)
fffff800`01a52000 fffff800`01f6a000   nt       ntkrnlmp.exe Sat Apr 26 01:56:07 2008 (4812C3F7)
fffff960`000d0000 fffff960`00381000   win32k   win32k.sys   Thu Feb 28 23:46:45 2008 (47C78E35)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00630000 fffff960`00641000   cdd      cdd.dll      Sat Jan 19 02:54:15 2008 (4791ACA7)
fffff960`008b0000 fffff960`00911000   ATMFD    ATMFD.DLL    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`0060b000 fffffa60`00615000   kdcom    kdcom.dll    Sat Jan 19 02:58:25 2008 (4791ADA1)
fffffa60`00615000 fffffa60`00642000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Jan 19 02:56:17 2008 (4791AD21)
fffffa60`00642000 fffffa60`00656000   PSHED    PSHED.dll    Sat Jan 19 02:58:13 2008 (4791AD95)
fffffa60`00656000 fffffa60`006b3000   CLFS     CLFS.SYS     Sat Jan 19 00:53:58 2008 (47919076)
fffffa60`006b3000 fffffa60`00765000   CI       CI.dll       Fri Feb 22 00:20:54 2008 (47BE5BB6)
fffffa60`00765000 fffffa60`007ab000   fltmgr   fltmgr.sys   Sat Jan 19 00:54:10 2008 (47919082)
fffffa60`007ab000 fffffa60`007f1000   USBPORT  USBPORT.SYS  Sat Jan 19 01:34:00 2008 (479199D8)
fffffa60`00804000 fffffa60`008de000   Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008de000 fffffa60`008ec000   WDFLDR   WDFLDR.SYS   Sat Jan 19 01:32:33 2008 (47919981)
fffffa60`008ec000 fffffa60`00901000   partmgr  partmgr.sys  Sat Jan 19 01:29:14 2008 (479198BA)
fffffa60`00901000 fffffa60`00915000   volmgr   volmgr.sys   Sat Jan 19 01:29:12 2008 (479198B8)
fffffa60`00915000 fffffa60`0097b000   volmgrx  volmgrx.sys  Sat Jan 19 01:29:45 2008 (479198D9)
fffffa60`0097b000 fffffa60`00982000   pciide   pciide.sys   Thu Nov 02 05:38:14 2006 (4549BC86)
fffffa60`00982000 fffffa60`00992000   PCIIDEX  PCIIDEX.SYS  Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`00992000 fffffa60`009a5000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`009a5000 fffffa60`009ad000   atapi    atapi.sys    Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`009ad000 fffffa60`009d1000   ataport  ataport.SYS  Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`009d1000 fffffa60`009e5000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`00a04000 fffffa60`00b38000   sptd     sptd.sys     Wed Mar 05 19:34:27 2008 (47CF3C13)
fffffa60`00b38000 fffffa60`00b41000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`00b41000 fffffa60`00b6f000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`00b6f000 fffffa60`00bc5000   acpi     acpi.sys     Sat Jan 19 01:02:45 2008 (47919285)
fffffa60`00bc5000 fffffa60`00bcf000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00bcf000 fffffa60`00bff000   pci      pci.sys      Sat Jan 19 01:02:57 2008 (47919291)
fffffa60`00c03000 fffffa60`00c88000   ksecdd   ksecdd.sys   Sat Jan 19 01:16:38 2008 (479195C6)
fffffa60`00c88000 fffffa60`00cd8000   msrpc    msrpc.sys    Sat Jan 19 01:27:01 2008 (47919835)
fffffa60`00cd8000 fffffa60`00d30000   NETIO    NETIO.SYS    Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`00d30000 fffffa60`00d52000   luafv    luafv.sys    Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`00d5d000 fffffa60`00d69000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`00d69000 fffffa60`00d72000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`00d72000 fffffa60`00d85000   intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`00d85000 fffffa60`00d92000   fdc      fdc.sys      Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`00d92000 fffffa60`00daf000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`00daf000 fffffa60`00dbb000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`00dbb000 fffffa60`00dd7000   parport  parport.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`00dd7000 fffffa60`00de2000   usbohci  usbohci.sys  Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`00de2000 fffffa60`00df3000   usbehci  usbehci.sys  Sat Jan 19 01:33:57 2008 (479199D5)
fffffa60`00e06000 fffffa60`00fc9000   ndis     ndis.sys     Sat Jan 19 01:37:13 2008 (47919A99)
fffffa60`00fc9000 fffffa60`00ff5000   CLASSPNP CLASSPNP.SYS Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`01001000 fffffa60`01175000   tcpip    tcpip.sys    Sat Apr 26 02:33:23 2008 (4812CCB3)
fffffa60`01175000 fffffa60`011a1000   fwpkclnt fwpkclnt.sys Sat Jan 19 01:36:43 2008 (47919A7B)
fffffa60`011a1000 fffffa60`011cd000   ecache   ecache.sys   Sat Jan 19 01:30:39 2008 (4791990F)
fffffa60`011cd000 fffffa60`011f6000   fvevol   fvevol.sys   Sat Jan 19 00:52:29 2008 (4791901D)
fffffa60`011f6000 fffffa60`01200000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`01204000 fffffa60`01388000   Ntfs     Ntfs.sys     Sat Jan 19 00:55:29 2008 (479190D1)
fffffa60`01388000 fffffa60`013cc000   volsnap  volsnap.sys  Sat Jan 19 01:29:47 2008 (479198DB)
fffffa60`013cc000 fffffa60`013d4000   spldr    spldr.sys    Thu Jun 21 20:57:56 2007 (467B1E94)
fffffa60`013d4000 fffffa60`013e6000   mup      mup.sys      Sat Jan 19 00:54:18 2008 (4791908A)
fffffa60`013e6000 fffffa60`013fa000   disk     disk.sys     Sat Jan 19 01:29:02 2008 (479198AE)
fffffa60`02806000 fffffa60`02822000   cdrom    cdrom.sys    Sat Jan 19 01:29:04 2008 (479198B0)
fffffa60`02822000 fffffa60`02835000   HDAudBus HDAudBus.sys Tue Nov 27 18:24:06 2007 (474CA716)
fffffa60`02835000 fffffa60`02914000   dxgkrnl  dxgkrnl.sys  Sat Jan 19 01:08:38 2008 (479193E6)
fffffa60`02914000 fffffa60`02945000   ndiswan  ndiswan.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`02945000 fffffa60`02963000   raspptp  raspptp.sys  Sat Jan 19 01:37:34 2008 (47919AAE)
fffffa60`02963000 fffffa60`0297b000   rassstp  rassstp.sys  Sat Jan 19 01:37:42 2008 (47919AB6)
fffffa60`0297b000 fffffa60`029e8000   afd      afd.sys      Sat Jan 19 01:38:15 2008 (47919AD7)
fffffa60`029e8000 fffffa60`029fb000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`02a04000 fffffa60`0333ba80   nvlddmkm nvlddmkm.sys Wed Sep 12 02:27:05 2007 (46E786B9)
fffffa60`0333c000 fffffa60`0334b000   watchdog watchdog.sys Sat Jan 19 01:07:23 2008 (4791939B)
fffffa60`0334b000 fffffa60`033a8000   storport storport.sys Sat Jan 19 01:29:09 2008 (479198B5)
fffffa60`033a8000 fffffa60`033b5000   TDI      TDI.SYS      Sat Jan 19 01:38:11 2008 (47919AD3)
fffffa60`033b5000 fffffa60`033d8000   rasl2tp  rasl2tp.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`033d8000 fffffa60`033e4000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`033e4000 fffffa60`033f4000   raspppoe raspppoe.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`03407000 fffffa60`0356fc80   nvmfdx64 nvmfdx64.sys Sat Nov 17 18:47:57 2007 (473F7DAD)
fffffa60`03570000 fffffa60`035b4000   a6zhjx4d a6zhjx4d.SYS Sun Jul 20 20:17:14 2008 (4883D58A)
fffffa60`035b4000 fffffa60`035bd000   wmiacpi  wmiacpi.sys  Sat Jan 19 01:02:42 2008 (47919282)
fffffa60`035bd000 fffffa60`035f5000   msiscsi  msiscsi.sys  Sat Jan 19 01:30:31 2008 (47919907)
fffffa60`03607000 fffffa60`036a1000   rdpdr    rdpdr.sys    Sat Jan 19 01:43:38 2008 (47919C1A)
fffffa60`036a1000 fffffa60`036b3000   termdd   termdd.sys   Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`036b3000 fffffa60`036c1000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`036c1000 fffffa60`036cd000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`036cd000 fffffa60`036ce480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`036cf000 fffffa60`03703000   ks       ks.sys       Sat Jan 19 01:28:24 2008 (47919888)
fffffa60`03703000 fffffa60`0370e000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`0370e000 fffffa60`0371e000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`0371e000 fffffa60`03729000   flpydisk flpydisk.sys Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`03729000 fffffa60`03770000   usbhub   usbhub.sys   Sat Jan 19 01:34:13 2008 (479199E5)
fffffa60`03770000 fffffa60`03784000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`03784000 fffffa60`0378f000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`0378f000 fffffa60`037a0000   Npfs     Npfs.SYS     Sat Jan 19 00:53:57 2008 (47919075)
fffffa60`037a0000 fffffa60`037bd000   tdx      tdx.sys      Sat Jan 19 01:36:53 2008 (47919A85)
fffffa60`037bd000 fffffa60`037d8000   smb      smb.sys      Sat Jan 19 01:36:17 2008 (47919A61)
fffffa60`037d8000 fffffa60`037e0000   dump_atapi dump_atapi.sys Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`037e0000 fffffa60`037f3000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:52:25 2008 (47919019)
fffffa60`037f3000 fffffa60`037ff000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`03a00000 fffffa60`03a09000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`03a0c000 fffffa60`03b37380   RTKVHD64 RTKVHD64.sys Tue Oct 16 06:39:29 2007 (471494E1)
fffffa60`03b38000 fffffa60`03b73000   portcls  portcls.sys  Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`03b73000 fffffa60`03b96000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`03b96000 fffffa60`03b9b180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`03b9c000 fffffa60`03ba6000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`03ba6000 fffffa60`03baf000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`03baf000 fffffa60`03bb8000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`03bb9000 fffffa60`03bc0b80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`03bc1000 fffffa60`03bcf000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`03bcf000 fffffa60`03bf4000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`03bf4000 fffffa60`03bfd000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`03c00000 fffffa60`03c0c000   dump_dumpata dump_dumpata.sys Sat Jan 19 01:28:54 2008 (479198A6)
fffffa60`03c0c000 fffffa60`03c50000   netbt    netbt.sys    Sat Jan 19 01:36:24 2008 (47919A68)
fffffa60`03c50000 fffffa60`03c6e000   pacer    pacer.sys    Fri Apr 04 21:55:46 2008 (47F6DC22)
fffffa60`03c6e000 fffffa60`03c7d000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`03c7d000 fffffa60`03c98000   wanarp   wanarp.sys   Sat Jan 19 01:37:35 2008 (47919AAF)
fffffa60`03c98000 fffffa60`03ce6000   rdbss    rdbss.sys    Sat Jan 19 00:55:09 2008 (479190BD)
fffffa60`03ce6000 fffffa60`03cf2000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffffa60`03cf2000 fffffa60`03d68000   csc      csc.sys      Sat Jan 19 00:55:39 2008 (479190DB)
fffffa60`03d68000 fffffa60`03d85000   dfsc     dfsc.sys     Sat Jan 19 00:54:16 2008 (47919088)
fffffa60`03d85000 fffffa60`03d8d000   BIOS64   BIOS64.sys   Sat Jun 07 20:12:00 2003 (3EE27F50)
fffffa60`03d8d000 fffffa60`03da9000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`03da9000 fffffa60`03daae00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`03dab000 fffffa60`03db4000   hidusb   hidusb.sys   Sat Jan 19 01:33:54 2008 (479199D2)
fffffa60`03db4000 fffffa60`03dc6000   HIDCLASS HIDCLASS.SYS Sat Jan 19 01:33:52 2008 (479199D0)
fffffa60`03dc6000 fffffa60`03dd0000   kbdhid   kbdhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`03dd0000 fffffa60`03dd9000   NuidFltr NuidFltr.sys Wed Aug 15 04:45:30 2007 (46C2BD2A)
fffffa60`03dd9000 fffffa60`03de4000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`03de4000 fffffa60`03df2000   point64k point64k.sys Tue Aug 21 04:43:26 2007 (46CAA5AE)
fffffa60`03df2000 fffffa60`03e00000   crashdmp crashdmp.sys Sat Jan 19 01:28:59 2008 (479198AB)
fffffa60`08801000 fffffa60`0889b000   spsys    spsys.sys    Thu Jun 21 21:02:05 2007 (467B1F8D)
fffffa60`0889b000 fffffa60`088af000   lltdio   lltdio.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`088af000 fffffa60`088c7000   rspndr   rspndr.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`088c7000 fffffa60`08962000   HTTP     HTTP.sys     Sat Jan 19 01:36:22 2008 (47919A66)
fffffa60`08962000 fffffa60`0898a000   srvnet   srvnet.sys   Sat Jan 19 00:56:38 2008 (47919116)
fffffa60`0898a000 fffffa60`089a8000   bowser   bowser.sys   Sat Jan 19 00:54:51 2008 (479190AB)
fffffa60`089a8000 fffffa60`089c2000   mpsdrv   mpsdrv.sys   Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`089c2000 fffffa60`089e9000   mrxdav   mrxdav.sys   Sat Jan 19 00:55:28 2008 (479190D0)
fffffa60`08c09000 fffffa60`08c31000   mrxsmb   mrxsmb.sys   Sat Jan 19 00:55:21 2008 (479190C9)
fffffa60`08c31000 fffffa60`08c7a000   mrxsmb10 mrxsmb10.sys Sat Jan 19 00:55:07 2008 (479190BB)
fffffa60`08c7a000 fffffa60`08c99000   mrxsmb20 mrxsmb20.sys Sat Jan 19 00:55:19 2008 (479190C7)
fffffa60`08c99000 fffffa60`08cca000   srv2     srv2.sys     Sat Jan 19 00:56:40 2008 (47919118)
fffffa60`08cca000 fffffa60`08d5e000   srv      srv.sys      Sat Jan 19 00:57:09 2008 (47919135)
fffffa60`09c0f000 fffffa60`09cc5000   peauth   peauth.sys   Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`09cc5000 fffffa60`09cd0000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`09cd0000 fffffa60`09cdf000   tcpipreg tcpipreg.sys Sat Jan 19 01:37:01 2008 (47919A8D)
fffffa60`09cdf000 fffffa60`09cfb000   cdfs     cdfs.sys     Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`09cfb000 fffffa60`09d01000   BS_Flash64 BS_Flash64.sys Tue Aug 21 04:38:26 2007 (46CAA482)

Unloaded modules:
fffffa60`00d30000 fffffa60`00d3e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00d3e000 fffffa60`00d4a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00ff5000 fffffa60`00ffd000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00d4a000 fffffa60`00d5d000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`03baf000 fffffa60`03bb9000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Regards. . .

jcgriff2

.

ZacHolt · 08-08-2008, 03:40 AM

here we are

ZacHolt · 08-09-2008, 02:20 AM

anybody? ? ? ? please

ZacHolt · 08-09-2008, 03:33 AM

managed to get a picture of my latest bsod (the third today) it is blurred but you can make out what the error codes are.

**jcgriff2** · 08-09-2008, 11:53 AM

Hi Zac. . .

I picked up the most recent rar file earlier and just saw your screenshot. As you mentioned, a little blurred but I caould make out most of the STOP error - bugcheck = 0x0000000a (0x000000000000000a, 0x0000000000000002, 0x0000000000000000, 0xfffff80001f30e62). A 0xa = a Microsoft or kernel-mode driver accessed paged memory at a time when it should not have.

Please be sure to check the Event Viewer for events leading up to the time of the BSOD. Also check wercon (START | type wercon into the start search box | select wercon - start with "Look at problems to check".

Regards. ..

jcgriff2

.

bdesmondMVP · 08-10-2008, 01:32 AM

Yeah so buggy third party driver most likely. Driver verifier is our friend here:

Code:

Fire up driver verifier by going start>run>verifier.exe

1. Create Custom Settings
2. Select individual settings from list
3. Check Force IRQL Checking
4. Select drivers from a list
5. Click the provider heading to sort
6. Check everything that doesn't have Microsoft as the provider
7. Finish & reboot

Next time the box crashes, upload the dumps (zip c:\windows\minidumps). Driver verifier adds a bunch of checks to help us identify the culprit.

ZacHolt · 08-10-2008, 03:42 AM

ok so i have done the steps that you have told me too and i am still encountering these errors. what could it be then is it hardware or software side. NB i have reformatted my computer seveerall times only to see the BSOD again thanks

ZacHolt · 08-10-2008, 04:41 AM

wheyy we have crashed yet again. how can i fix this it is getting really annoying now. whenever i open the minidumps they say they are probably caused by ntoskrnl.exe attached is my latest minidump (after the driver check)

**jcgriff2** · 08-10-2008, 04:09 PM

Hi Zach. . .

Here is the output from your latest BSOD - post verifier:

Bugcheck =
0x0000000A, (fffff6fc00053700, 2, 0, fffff80001e3a8ba), process=wercon.exe

Code:

Microsoft (R) Windows Debugger Version 6.9.0003.113 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\#Dumps\ZacHolt--Vista--08-03-08\Mini081008-01-$ver.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18063.amd64fre.vistasp1_gdr.080425-1930
Kernel base = 0xfffff800`01e18000 PsLoadedModuleList = 0xfffff800`01fdddb0
Debug session time: Sun Aug 10 06:30:58.113 2008 (GMT-4)
System Uptime: 0 days 0:52:59.235
Loading Kernel Symbols
............................................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff6fc00053700, 2, 0, fffff80001e3a8ba}

Probably caused by : memory_corruption ( nt!MiRestoreTransitionPte+92 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff6fc00053700, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80001e3a8ba, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002041080
 fffff6fc00053700 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiRestoreTransitionPte+92
fffff800`01e3a8ba 42f6042801      test    byte ptr [rax+r13],1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xA

PROCESS_NAME:  WerFault.exe

TRAP_FRAME:  fffffa600bd5c140 -- (.trap 0xfffffa600bd5c140)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000007c00053700 rbx=0000000000008140 rcx=fffffa8000c0bbe0
rdx=0000000000000000 rsi=fffffa8007a52550 rdi=0000000000000000
rip=fffff80001e3a8ba rsp=fffffa600bd5c2d0 rbp=0000058000000000
 r8=02000000000bf0fa  r9=fffffa96ef714000 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!MiRestoreTransitionPte+0x92:
fffff800`01e3a8ba 42f6042801      test    byte ptr [rax+r13],1 ds:e220:0000007c`00053700=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80001e6d12e to fffff80001e6d390

STACK_TEXT:  
fffffa60`0bd5bff8 fffff800`01e6d12e : 00000000`0000000a fffff6fc`00053700 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffa60`0bd5c000 fffff800`01e6c00b : 00000000`00000000 00000000`0153b2a0 fffff800`01fdea00 fffffa80`00c0bbe0 : nt!KiBugCheckDispatch+0x6e
fffffa60`0bd5c140 fffff800`01e3a8ba : 38100001`2a43e900 38200001`1dbff963 00000014`00000000 38400001`26441963 : nt!KiPageFault+0x20b
fffffa60`0bd5c2d0 fffff800`01f0ed45 : fffffa80`00c0bbe0 00000000`00000000 00000000`000403ea 39000000`a9d8d963 : nt!MiRestoreTransitionPte+0x92
fffffa60`0bd5c330 fffff800`01f0f46c : 00000000`0000002e 00000000`0000002e fffffa80`014b3fb0 fffff6fc`c00b2468 : nt!MiRemoveStandbyPage+0xe5
fffffa60`0bd5c370 fffff800`01ec67d1 : 00000000`00000000 fffff800`01ea56e7 00000000`00000000 00000000`0810d000 : nt!MiRemoveLowestPriorityStandbyPage+0x2c
fffffa60`0bd5c3a0 fffff800`01e9da56 : ffffffff`ffffffff 000007a5`25c00867 00000000`00000000 ffffffff`ffffffff : nt! ?? ::FNODOBFM::`string'+0x114ce
fffffa60`0bd5c3f0 fffff800`01e9c083 : fffff980`1648e000 00000000`0333e040 00000000`00000000 00000000`00001000 : nt!MmCopyToCachedPage+0x396
fffffa60`0bd5c560 fffff800`01e45002 : fffffa80`07a6d650 00000000`0333e040 fffffa60`0bd5c6f8 fffffa80`00000000 : nt!CcMapAndCopy+0x3a3
fffffa60`0bd5c680 fffffa60`012b4067 : 00000000`08110000 00000000`08110000 fffffa80`055049a0 00000000`03330040 : nt!CcFastCopyWrite+0x162
fffffa60`0bd5c760 fffffa60`007622b2 : fffffa80`055049a0 fffffa80`0566f5e0 fffffa80`00010000 00000000`03330040 : Ntfs!NtfsCopyWriteA+0x217
fffffa60`0bd5c960 fffffa60`007651d5 : fffffa60`0bd5ca40 fffffa80`0566f578 fffffa80`05504904 00000000`00000000 : fltmgr!FltpPerformFastIoCall+0xf2
fffffa60`0bd5c9c0 fffffa60`0077f779 : 00000000`00000000 00000000`63694d46 00000000`00000000 00000000`00000000 : fltmgr!FltpPassThroughFastIo+0xb5
fffffa60`0bd5ca10 fffff800`020fb6fa : fffffa80`05504a14 fffffa60`00000002 fffffa80`039cd5b0 fffffa80`05504a14 : fltmgr!FltpFastIoWrite+0x1a9
fffffa60`0bd5cab0 fffff800`01e6ce33 : 00000000`00000001 00000000`0000018c 00000000`00000000 00000000`00403b80 : nt!NtWriteFile+0x599
fffffa60`0bd5cbb0 00000000`77025afa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0024b0b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77025afa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiRestoreTransitionPte+92
fffff800`01e3a8ba 42f6042801      test    byte ptr [rax+r13],1

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiRestoreTransitionPte+92

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4812c3f7

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_VRF_nt!MiRestoreTransitionPte+92

BUCKET_ID:  X64_0xA_VRF_nt!MiRestoreTransitionPte+92

Followup: MachineOwner
---------

rax=fffffa600bd5c100 rbx=fffffa8000c0bbe0 rcx=000000000000000a
rdx=fffff6fc00053700 rsi=0000000000000000 rdi=fffff8000a6e0208
rip=fffff80001e6d390 rsp=fffffa600bd5bff8 rbp=fffffa600bd5c1c0
 r8=0000000000000002  r9=0000000000000000 r10=fffff80001e3a8ba
r11=00000000000001ed r12=000fffffffffffff r13=fffff68000000000
r14=0000000000000fff r15=0000007ffffffff8
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`01e6d390 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffffa60`0bd5c000=000000000000000a
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffffa60`0bd5bff8 fffff800`01e6d12e : 00000000`0000000a fffff6fc`00053700 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffa60`0bd5c000 fffff800`01e6c00b : 00000000`00000000 00000000`0153b2a0 fffff800`01fdea00 fffffa80`00c0bbe0 : nt!KiBugCheckDispatch+0x6e
fffffa60`0bd5c140 fffff800`01e3a8ba : 38100001`2a43e900 38200001`1dbff963 00000014`00000000 38400001`26441963 : nt!KiPageFault+0x20b (TrapFrame @ fffffa60`0bd5c140)
fffffa60`0bd5c2d0 fffff800`01f0ed45 : fffffa80`00c0bbe0 00000000`00000000 00000000`000403ea 39000000`a9d8d963 : nt!MiRestoreTransitionPte+0x92
fffffa60`0bd5c330 fffff800`01f0f46c : 00000000`0000002e 00000000`0000002e fffffa80`014b3fb0 fffff6fc`c00b2468 : nt!MiRemoveStandbyPage+0xe5
fffffa60`0bd5c370 fffff800`01ec67d1 : 00000000`00000000 fffff800`01ea56e7 00000000`00000000 00000000`0810d000 : nt!MiRemoveLowestPriorityStandbyPage+0x2c
fffffa60`0bd5c3a0 fffff800`01e9da56 : ffffffff`ffffffff 000007a5`25c00867 00000000`00000000 ffffffff`ffffffff : nt! ?? ::FNODOBFM::`string'+0x114ce
fffffa60`0bd5c3f0 fffff800`01e9c083 : fffff980`1648e000 00000000`0333e040 00000000`00000000 00000000`00001000 : nt!MmCopyToCachedPage+0x396
fffffa60`0bd5c560 fffff800`01e45002 : fffffa80`07a6d650 00000000`0333e040 fffffa60`0bd5c6f8 fffffa80`00000000 : nt!CcMapAndCopy+0x3a3
fffffa60`0bd5c680 fffffa60`012b4067 : 00000000`08110000 00000000`08110000 fffffa80`055049a0 00000000`03330040 : nt!CcFastCopyWrite+0x162
fffffa60`0bd5c760 fffffa60`007622b2 : fffffa80`055049a0 fffffa80`0566f5e0 fffffa80`00010000 00000000`03330040 : Ntfs!NtfsCopyWriteA+0x217
fffffa60`0bd5c960 fffffa60`007651d5 : fffffa60`0bd5ca40 fffffa80`0566f578 fffffa80`05504904 00000000`00000000 : fltmgr!FltpPerformFastIoCall+0xf2
fffffa60`0bd5c9c0 fffffa60`0077f779 : 00000000`00000000 00000000`63694d46 00000000`00000000 00000000`00000000 : fltmgr!FltpPassThroughFastIo+0xb5
fffffa60`0bd5ca10 fffff800`020fb6fa : fffffa80`05504a14 fffffa60`00000002 fffffa80`039cd5b0 fffffa80`05504a14 : fltmgr!FltpFastIoWrite+0x1a9
fffffa60`0bd5cab0 fffff800`01e6ce33 : 00000000`00000001 00000000`0000018c 00000000`00000000 00000000`00403b80 : nt!NtWriteFile+0x599
fffffa60`0bd5cbb0 00000000`77025afa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`0bd5cc20)
00000000`0024b0b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77025afa
start             end                 module name
fffff800`01e18000 fffff800`02330000   nt       ntkrnlmp.exe Sat Apr 26 01:56:07 2008 (4812C3F7)
fffff800`02330000 fffff800`02376000   hal      hal.dll      Sat Jan 19 02:55:25 2008 (4791ACED)
fffff960`00040000 fffff960`002f1000   win32k   win32k.sys   Thu Feb 28 23:46:45 2008 (47C78E35)
fffff960`00480000 fffff960`0048a000   TSDDD    TSDDD.dll    Sat Jan 19 01:42:04 2008 (47919BBC)
fffff960`00690000 fffff960`006a1000   cdd      cdd.dll      unavailable (00000000)
fffff960`00840000 fffff960`008a1000   ATMFD    ATMFD.DLL    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`00607000 fffffa60`00611000   kdcom    kdcom.dll    Sat Jan 19 02:58:25 2008 (4791ADA1)
fffffa60`00611000 fffffa60`0063e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Jan 19 02:56:17 2008 (4791AD21)
fffffa60`0063e000 fffffa60`00652000   PSHED    PSHED.dll    Sat Jan 19 02:58:13 2008 (4791AD95)
fffffa60`00652000 fffffa60`006af000   CLFS     CLFS.SYS     Sat Jan 19 00:53:58 2008 (47919076)
fffffa60`006af000 fffffa60`00761000   CI       CI.dll       Fri Feb 22 00:20:54 2008 (47BE5BB6)
fffffa60`00761000 fffffa60`007a7000   fltmgr   fltmgr.sys   Sat Jan 19 00:54:10 2008 (47919082)
fffffa60`007a7000 fffffa60`007ed000   USBPORT  USBPORT.SYS  Sat Jan 19 01:34:00 2008 (479199D8)
fffffa60`007ed000 fffffa60`00800000   HDAudBus HDAudBus.sys Tue Nov 27 18:24:06 2007 (474CA716)
fffffa60`00802000 fffffa60`008dc000   Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008dc000 fffffa60`008ea000   WDFLDR   WDFLDR.SYS   Sat Jan 19 01:32:33 2008 (47919981)
fffffa60`008ea000 fffffa60`008ff000   partmgr  partmgr.sys  Sat Jan 19 01:29:14 2008 (479198BA)
fffffa60`008ff000 fffffa60`00913000   volmgr   volmgr.sys   Sat Jan 19 01:29:12 2008 (479198B8)
fffffa60`00913000 fffffa60`00979000   volmgrx  volmgrx.sys  Sat Jan 19 01:29:45 2008 (479198D9)
fffffa60`00979000 fffffa60`00980000   pciide   pciide.sys   Thu Nov 02 05:38:14 2006 (4549BC86)
fffffa60`00980000 fffffa60`00990000   PCIIDEX  PCIIDEX.SYS  Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`00990000 fffffa60`009a3000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`009a3000 fffffa60`009ab000   atapi    atapi.sys    Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`009ab000 fffffa60`009cf000   ataport  ataport.SYS  Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`009cf000 fffffa60`009e3000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`009e3000 fffffa60`009ff000   cdrom    cdrom.sys    Sat Jan 19 01:29:04 2008 (479198B0)
fffffa60`00a00000 fffffa60`00b34000   sptd     sptd.sys     Wed Mar 05 19:34:27 2008 (47CF3C13)
fffffa60`00b34000 fffffa60`00b3d000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`00b3d000 fffffa60`00b6b000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`00b6b000 fffffa60`00bc1000   acpi     acpi.sys     Sat Jan 19 01:02:45 2008 (47919285)
fffffa60`00bc1000 fffffa60`00bcb000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00bcb000 fffffa60`00bfb000   pci      pci.sys      Sat Jan 19 01:02:57 2008 (47919291)
fffffa60`00c0c000 fffffa60`00c91000   ksecdd   ksecdd.sys   Sat Jan 19 01:16:38 2008 (479195C6)
fffffa60`00c91000 fffffa60`00ce1000   msrpc    msrpc.sys    Sat Jan 19 01:27:01 2008 (47919835)
fffffa60`00ce1000 fffffa60`00d39000   NETIO    NETIO.SYS    Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`00d39000 fffffa60`00d65000   CLASSPNP CLASSPNP.SYS Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`00d78000 fffffa60`00d8b000   intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`00d8b000 fffffa60`00d98000   fdc      fdc.sys      Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`00d98000 fffffa60`00db5000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`00db5000 fffffa60`00dc1000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`00dc1000 fffffa60`00ddd000   parport  parport.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`00ddd000 fffffa60`00de8000   usbohci  usbohci.sys  Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`00de8000 fffffa60`00df9000   usbehci  usbehci.sys  Sat Jan 19 01:33:57 2008 (479199D5)
fffffa60`00e06000 fffffa60`00fc9000   ndis     ndis.sys     Sat Jan 19 01:37:13 2008 (47919A99)
fffffa60`00fc9000 fffffa60`00ff2000   fvevol   fvevol.sys   Sat Jan 19 00:52:29 2008 (4791901D)
fffffa60`00ff2000 fffffa60`00ffb000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`01000000 fffffa60`0100c000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`0100c000 fffffa60`01180000   tcpip    tcpip.sys    Sat Apr 26 02:33:23 2008 (4812CCB3)
fffffa60`01180000 fffffa60`011ac000   fwpkclnt fwpkclnt.sys Sat Jan 19 01:36:43 2008 (47919A7B)
fffffa60`011ac000 fffffa60`011d8000   ecache   ecache.sys   Sat Jan 19 01:30:39 2008 (4791990F)
fffffa60`011d8000 fffffa60`011e2000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`01202000 fffffa60`01386000   Ntfs     Ntfs.sys     Sat Jan 19 00:55:29 2008 (479190D1)
fffffa60`01386000 fffffa60`013ca000   volsnap  volsnap.sys  Sat Jan 19 01:29:47 2008 (479198DB)
fffffa60`013ca000 fffffa60`013d2000   spldr    spldr.sys    Thu Jun 21 20:57:56 2007 (467B1E94)
fffffa60`013d2000 fffffa60`013e4000   mup      mup.sys      Sat Jan 19 00:54:18 2008 (4791908A)
fffffa60`013e4000 fffffa60`013f8000   disk     disk.sys     Sat Jan 19 01:29:02 2008 (479198AE)
fffffa60`02400000 fffffa60`024df000   dxgkrnl  dxgkrnl.sys  Sat Jan 19 01:08:38 2008 (479193E6)
fffffa60`024df000 fffffa60`024ee000   watchdog watchdog.sys Sat Jan 19 01:07:23 2008 (4791939B)
fffffa60`024ee000 fffffa60`0254b000   storport storport.sys Sat Jan 19 01:29:09 2008 (479198B5)
fffffa60`0254b000 fffffa60`02558000   TDI      TDI.SYS      Sat Jan 19 01:38:11 2008 (47919AD3)
fffffa60`02558000 fffffa60`0257b000   rasl2tp  rasl2tp.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`0257b000 fffffa60`02587000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`02587000 fffffa60`025b8000   ndiswan  ndiswan.sys  Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`025b8000 fffffa60`025c8000   raspppoe raspppoe.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`025c8000 fffffa60`025e6000   raspptp  raspptp.sys  Sat Jan 19 01:37:34 2008 (47919AAE)
fffffa60`025e6000 fffffa60`025fe000   rassstp  rassstp.sys  Sat Jan 19 01:37:42 2008 (47919AB6)
fffffa60`02802000 fffffa60`03139a80   nvlddmkm nvlddmkm.sys Wed Sep 12 02:27:05 2007 (46E786B9)
fffffa60`0313a000 fffffa60`031d4000   rdpdr    rdpdr.sys    Sat Jan 19 01:43:38 2008 (47919C1A)
fffffa60`031d4000 fffffa60`031e6000   termdd   termdd.sys   Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`031e6000 fffffa60`031f4000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`031f4000 fffffa60`03200000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`0320a000 fffffa60`03372c80   nvmfdx64 nvmfdx64.sys Sat Nov 17 18:47:57 2007 (473F7DAD)
fffffa60`03373000 fffffa60`033b7000   ajmh996r ajmh996r.SYS Sun Jul 20 20:17:14 2008 (4883D58A)
fffffa60`033b7000 fffffa60`033c0000   wmiacpi  wmiacpi.sys  Sat Jan 19 01:02:42 2008 (47919282)
fffffa60`033c0000 fffffa60`033f8000   msiscsi  msiscsi.sys  Sat Jan 19 01:30:31 2008 (47919907)
fffffa60`033f8000 fffffa60`033f9480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`0340d000 fffffa60`03441000   ks       ks.sys       Sat Jan 19 01:28:24 2008 (47919888)
fffffa60`03441000 fffffa60`0344c000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`0344c000 fffffa60`0345c000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`0345c000 fffffa60`03467000   flpydisk flpydisk.sys Sat Jan 19 01:28:45 2008 (4791989D)
fffffa60`03467000 fffffa60`034ae000   usbhub   usbhub.sys   Sat Jan 19 01:34:13 2008 (479199E5)
fffffa60`034ae000 fffffa60`034c2000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`034c2000 fffffa60`035ed380   RTKVHD64 RTKVHD64.sys Tue Oct 16 06:39:29 2007 (471494E1)
fffffa60`035ee000 fffffa60`035fd000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`0420d000 fffffa60`04228000   wanarp   wanarp.sys   Sat Jan 19 01:37:35 2008 (47919AAF)
fffffa60`04228000 fffffa60`04241000   SCDEmu   SCDEmu.SYS   Mon Jul 07 03:58:16 2008 (4871CC98)
fffffa60`04241000 fffffa60`0428f000   rdbss    rdbss.sys    Sat Jan 19 00:55:09 2008 (479190BD)
fffffa60`0428f000 fffffa60`0429b000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffffa60`0429b000 fffffa60`04311000   csc      csc.sys      Sat Jan 19 00:55:39 2008 (479190DB)
fffffa60`04311000 fffffa60`0432d000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`0432d000 fffffa60`0432ee00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`0432f000 fffffa60`0434c000   dfsc     dfsc.sys     Sat Jan 19 00:54:16 2008 (47919088)
fffffa60`0434c000 fffffa60`04354000   BIOS64   BIOS64.sys   Sat Jun 07 20:12:00 2003 (3EE27F50)
fffffa60`04354000 fffffa60`0435d000   hidusb   hidusb.sys   Sat Jan 19 01:33:54 2008 (479199D2)
fffffa60`0435d000 fffffa60`0436f000   HIDCLASS HIDCLASS.SYS Sat Jan 19 01:33:52 2008 (479199D0)
fffffa60`0436f000 fffffa60`04379000   kbdhid   kbdhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`04379000 fffffa60`04382000   NuidFltr NuidFltr.sys Wed Aug 15 04:45:30 2007 (46C2BD2A)
fffffa60`04382000 fffffa60`0438d000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`0438d000 fffffa60`0439b000   point64k point64k.sys Tue Aug 21 04:43:26 2007 (46CAA5AE)
fffffa60`0439b000 fffffa60`043a9000   crashdmp crashdmp.sys Sat Jan 19 01:28:59 2008 (479198AB)
fffffa60`043a9000 fffffa60`043b5000   dump_dumpata dump_dumpata.sys Sat Jan 19 01:28:54 2008 (479198A6)
fffffa60`043b5000 fffffa60`043bd000   dump_atapi dump_atapi.sys Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`043bd000 fffffa60`043d0000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:52:25 2008 (47919019)
fffffa60`043d0000 fffffa60`043dc000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`043dc000 fffffa60`043ef000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`04406000 fffffa60`04441000   portcls  portcls.sys  Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`04441000 fffffa60`04464000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`04464000 fffffa60`04469180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`0446a000 fffffa60`04474000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`04474000 fffffa60`0447d000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`04487000 fffffa60`0448eb80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`0448f000 fffffa60`0449d000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`0449d000 fffffa60`044c2000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`044c2000 fffffa60`044cb000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`044cb000 fffffa60`044d4000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`044d4000 fffffa60`044df000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`044df000 fffffa60`044f0000   Npfs     Npfs.SYS     Sat Jan 19 00:53:57 2008 (47919075)
fffffa60`044f0000 fffffa60`044f9000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`044f9000 fffffa60`04516000   tdx      tdx.sys      Sat Jan 19 01:36:53 2008 (47919A85)
fffffa60`04516000 fffffa60`04531000   smb      smb.sys      Sat Jan 19 01:36:17 2008 (47919A61)
fffffa60`04531000 fffffa60`0459e000   afd      afd.sys      Sat Jan 19 01:38:15 2008 (47919AD7)
fffffa60`0459e000 fffffa60`045e2000   netbt    netbt.sys    Sat Jan 19 01:36:24 2008 (47919A68)
fffffa60`045e2000 fffffa60`04600000   pacer    pacer.sys    Fri Apr 04 21:55:46 2008 (47F6DC22)
fffffa60`08e0b000 fffffa60`08e2d000   luafv    luafv.sys    Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`08e2d000 fffffa60`08ec7000   spsys    spsys.sys    Thu Jun 21 21:02:05 2007 (467B1F8D)
fffffa60`08ec7000 fffffa60`08edb000   lltdio   lltdio.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`08edb000 fffffa60`08ef3000   rspndr   rspndr.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`08ef3000 fffffa60`08f8e000   HTTP     HTTP.sys     Sat Jan 19 01:36:22 2008 (47919A66)
fffffa60`08f8e000 fffffa60`08fb6000   srvnet   srvnet.sys   Sat Jan 19 00:56:38 2008 (47919116)
fffffa60`08fb6000 fffffa60`08fd4000   bowser   bowser.sys   Sat Jan 19 00:54:51 2008 (479190AB)
fffffa60`08fd4000 fffffa60`08fee000   mpsdrv   mpsdrv.sys   Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`09a0b000 fffffa60`09a32000   mrxdav   mrxdav.sys   Sat Jan 19 00:55:28 2008 (479190D0)
fffffa60`09a32000 fffffa60`09a5a000   mrxsmb   mrxsmb.sys   Sat Jan 19 00:55:21 2008 (479190C9)
fffffa60`09a5a000 fffffa60`09aa3000   mrxsmb10 mrxsmb10.sys Sat Jan 19 00:55:07 2008 (479190BB)
fffffa60`09aa3000 fffffa60`09ac2000   mrxsmb20 mrxsmb20.sys Sat Jan 19 00:55:19 2008 (479190C7)
fffffa60`09ac2000 fffffa60`09af3000   srv2     srv2.sys     Sat Jan 19 00:56:40 2008 (47919118)
fffffa60`09af3000 fffffa60`09b87000   srv      srv.sys      Sat Jan 19 00:57:09 2008 (47919135)
fffffa60`09b87000 fffffa60`09ba3000   cdfs     cdfs.sys     Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`0a802000 fffffa60`0a8b8000   peauth   peauth.sys   Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`0a8b8000 fffffa60`0a8c3000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`0a8c3000 fffffa60`0a8d2000   tcpipreg tcpipreg.sys Sat Jan 19 01:37:01 2008 (47919A8D)

Unloaded modules:
fffffa60`011e2000 fffffa60`011f0000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`011f0000 fffffa60`011fc000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`013f8000 fffffa60`01400000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00d65000 fffffa60`00d78000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`0447d000 fffffa60`04487000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

These latest results will be reviewed as soon as possible.

Regards. . .

jcgriff2

.

ZacHolt · 08-14-2008, 11:42 AM

anybody review it?

**jcgriff2** · 08-14-2008, 02:31 PM

Hi. . .

The WERCON portion of msinfo32 showed over 90 application crashes in the last 2 weeks, most of which listed the faulting driver as stsycod.sys. This lead me to several system services that you have running such as macidwe.exe, nobicyt.exe, perfs.exe, routing.exe, etc... Take a look for yourelf in Windows Problem Reports and Solutions (WERCON):
START | type wercon | select wercon.exe above under Programs.

I suggest that you proceed to our Security Center, HiJackThis forum for help with malware that may be present in your system. Be sure to follow THESE 5 STEPS before posting your HiJackThis log. Also, please be patient as the security analysts are busy and someone will respond as soon as possible.

Regards. . .

jcgriff2

.

08-09-2008, 02:20 AM	#4 (permalink)
ZacHolt Registered User Join Date: Jul 2008 Posts: 20 OS: Vista Ultimate 64 Bit	Re: Irql Still Bad anybody? ? ? ? please

08-09-2008, 11:53 AM	#6 (permalink)
jcgriff2 Moderator, Microsoft Supp Join Date: Sep 2007 Location: Palm Springs, California / Southern New Jersey Posts: 10,067 OS: Windows 7, Vista Ultimate My System	Re: Irql Still Bad Hi Zac. . . I picked up the most recent rar file earlier and just saw your screenshot. As you mentioned, a little blurred but I caould make out most of the STOP error - bugcheck = 0x0000000a (0x000000000000000a, 0x0000000000000002, 0x0000000000000000, 0xfffff80001f30e62). A 0xa = a Microsoft or kernel-mode driver accessed paged memory at a time when it should not have. Please be sure to check the Event Viewer for events leading up to the time of the BSOD. Also check wercon (START \| type wercon into the start search box \| select wercon - start with "Look at problems to check". Regards. .. jcgriff2 . __________________ . . . . . . . . BSOD Posting Instructions B Expecting a reply and waiting > 36 hours ? Send a PM to me containing a link to your thread My availability will be limited through ~ December 1, 2009

08-10-2008, 03:42 AM	#8 (permalink)
ZacHolt Registered User Join Date: Jul 2008 Posts: 20 OS: Vista Ultimate 64 Bit	Re: Irql Still Bad ok so i have done the steps that you have told me too and i am still encountering these errors. what could it be then is it hardware or software side. NB i have reformatted my computer seveerall times only to see the BSOD again thanks

08-14-2008, 11:42 AM	#11 (permalink)
ZacHolt Registered User Join Date: Jul 2008 Posts: 20 OS: Vista Ultimate 64 Bit	Re: Irql Still Bad anybody review it?

08-14-2008, 02:31 PM	#12 (permalink)
jcgriff2 Moderator, Microsoft Supp Join Date: Sep 2007 Location: Palm Springs, California / Southern New Jersey Posts: 10,067 OS: Windows 7, Vista Ultimate My System	Re: Irql Still Bad Hi. . . The WERCON portion of msinfo32 showed over 90 application crashes in the last 2 weeks, most of which listed the faulting driver as stsycod.sys. This lead me to several system services that you have running such as macidwe.exe, nobicyt.exe, perfs.exe, routing.exe, etc... Take a look for yourelf in Windows Problem Reports and Solutions (WERCON): START \| type wercon \| select wercon.exe above under Programs. I suggest that you proceed to our Security Center, HiJackThis forum for help with malware that may be present in your system. Be sure to follow THESE 5 STEPS before posting your HiJackThis log. Also, please be patient as the security analysts are busy and someone will respond as soon as possible. Regards. . . jcgriff2 . __________________ . . . . . . . . BSOD Posting Instructions B Expecting a reply and waiting > 36 hours ? Send a PM to me containing a link to your thread My availability will be limited through ~ December 1, 2009 Last edited by jcgriff2; 08-14-2008 at 02:35 PM.