Please help diagnose Blue Screen

[johan851]

Ah - that makes more sense. I thought you were moving the pagefile TO the second drive, not from.

 

[TempliNocturnus]

That would confuse me. Why shouldn't the pagefile be on the system drive? If you put it on the other drive, now you have more things that can go wrong, not less. I really don't think that's it - I would look to the Intel RST and chipset drivers first. *shrug*

Yes and no....

My logic for moving the page file to a different drive lies in assuming that there may be issues with either the disk, controller, or file system on the primary hard drive. If the OP does not receive BSOD's when the page file is on a different drive, the problem still exists, however the symptoms have been eliminated. It's up the OP if he wants to dig deeper and find the root problem or just be content with the fact that he's no longer experiencing the undesirable symptoms of the root problem, for the time being.

Since the OP took multiple actions addressing his issue at the same time, there's no way of knowing whether the page file move or the driver update corrected/masked the issue. I would next advise the OP to move the page file back onto the primary drive, after another few days or so of no BSOD's, and see whether the BSOD's return. This way, we'll know whether the driver update corrected the issue or not.

There are some I/O benefits with having the page file on a separate hard drive though: the page file behaves and has a function similar to that of RAM. Having the page file on a separate drive allows data to be read from the primary drive and written to the other drive containing the page file simultaneously. The potential of having more issues increases only due to the fact that multiple hard drives are involved, which introduces more candidates prone to failure; you have a higher chance of encountering a bad hard drive in a pool of 2 as oppessed to one.

 

[johan851]

My logic for moving the page file to a different drive lies in assuming that there may be issues with either the disk, controller, or file system on the primary hard drive

And my logic is that if there are disk, controller, or file system issues on the primary hard drive, you're going to have more problems than just your pagefile.

I agree on the I/O benefits.

 

[big_mike]

Yes and no....
I would next advise the OP to move the page file back onto the primary drive, after another few days or so of no BSOD's, and see whether the BSOD's return. This way, we'll know whether the driver update corrected the issue or not.

Moved the pagefile back to the primary drive last night. So far still no BSOD I will give another update in few days, but since last weekend I haven't had any issues. The computer has been on almost the entire time this week. Had to reboot every time after changing the pagefile drive ofcourse.

I guess at this point it might be the driver update + not letting windows choose which drive(s) to use for pagefile that might have corrected the issue. Update coming sometime during this weekend.

Thank you guys!

 

[big_mike]

Ok, everything seems to be normal at this point. I think its safe to conclude that it was a driver issue.

Thank you all very much for the help and guidance on this issue.

Mike

 

[johan851]

Weird. But it's fixed!

 

[big_mike]

Started out the day with another blue screen. BCCode d1. I'll post more info when I get home tonight.

I am really getting ready to toss both WD drives if its them giving me all this trouble.

 

[johan851]

Boo. Can you download WD's drive diagnostic tools and give your drives a full pass? You might have bad sectors or some other drive issue.

 

[big_mike]

Yeah, I'll do the full pass on both drives tonight and post the results.

Thanks for the quick reply

 

[redduc900]

With 12GB of RAM installed, try bumping IOH Voltage from the default of 1.1V to 1.2V. And assuming your specific DRAM modules are HX3X12G1600C9 G, manually adjust the timings to 9-9-9-24 (all sub-timings left on Auto), and bump the DRAM voltage from the rated 1.60V to 1.65V.

 

[big_mike]

Thank you redduc900, I have adjusted the settings for the RAM. I only had 1.64 and 1.66 (no 1.65) setting for the DRAM. I left it at 1.64 for now.

The DMP file can be downloaded here

This is the message I got after reboot:

Problem signature:
  Problem Event Name:	BlueScreen
  OS Version:	6.1.7600.2.0.0.256.1
  Locale ID:	1033

Additional information about the problem:
  BCCode:	d1
  BCP1:	FFFFF8A0046E7298
  BCP2:	0000000000000002
  BCP3:	0000000000000000
  BCP4:	FFFFF8800105EFA9
  OS Version:	6_1_7600
  Service Pack:	0_0
  Product:	256_1

Files that help describe the problem:
  C:\Windows\Minidump\041511-34866-01.dmp
  C:\Users\Mihail\AppData\Local\Temp\WER-61994-0.sysdata.xml

Read our privacy statement online:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
  C:\Windows\system32\en-US\erofflps.txt

In few minutes I will run the WD diagnostics software. I will post the results once its done.

Thanks guys

 

[dan_ep82]

Hi,
Im looking at the DMP now but if you could follow this guide to provide with more info it will help a great deal
http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[dan_ep82]

Had a quick browse and it seems to point towards stflt.sys

Unable to load image \SystemRoot\system32\DRIVERS\stflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for stflt.sys
*** ERROR: Module load completed but symbols could not be loaded for stflt.sys
Probably caused by : stflt.sys ( stflt+1ed9 )

Its spyware terminator (don't have the correct files to check but I assume you have it installed) and has been know to casue some BSOD's

I'd suggest uninstalling it first off.

If the BSOD's persist try running driver verifier - Driver Verifier




I'd suggest updating to service Pack 1 also - Service Pack 1

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Dan\AppData\Local\Temp\041511-34866-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02e0f000 PsLoadedModuleList = 0xfffff800`0304ce50
Debug session time: Fri Apr 15 13:40:08.747 2011 (GMT+1)
System Uptime: 0 days 0:30:10.058
Loading Kernel Symbols
...............................................................
................................................................
.................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff8a0046e7298, 2, 0, fffff8800105efa9}

Unable to load image \SystemRoot\system32\DRIVERS\stflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for stflt.sys
*** ERROR: Module load completed but symbols could not be loaded for stflt.sys
Probably caused by : stflt.sys ( stflt+1ed9 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff8a0046e7298, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800105efa9, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030b70e0
 fffff8a0046e7298 

CURRENT_IRQL:  2

FAULTING_IP: 
fltmgr!GetContextFromStreamList+99
fffff880`0105efa9 488b4820        mov     rcx,qword ptr [rax+20h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88002f8c330 -- (.trap 0xfffff88002f8c330)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a0046e7278 rbx=0000000000000000 rcx=fffffa800cb1ec30
rdx=fffffa800d53e070 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800105efa9 rsp=fffff88002f8c4c0 rbp=fffffa8009c743c8
 r8=fffffa800d970010  r9=fffff88002f8c5d8 r10=fffffa800cb1ec38
r11=0000000000000011 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
fltmgr!GetContextFromStreamList+0x99:
fffff880`0105efa9 488b4820        mov     rcx,qword ptr [rax+20h] ds:c000:fffff8a0`046e7298=fffffa800d8bb220
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e80469 to fffff80002e80f00

STACK_TEXT:  
fffff880`02f8c1e8 fffff800`02e80469 : 00000000`0000000a fffff8a0`046e7298 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02f8c1f0 fffff800`02e7f0e0 : 00000000`00002710 00000000`00000000 fffff800`02e8dbac 00000000`00000011 : nt!KiBugCheckDispatch+0x69
fffff880`02f8c330 fffff880`0105efa9 : 00000000`00000000 00000000`00000000 fffff880`02f8c570 fffff880`0105e32e : nt!KiPageFault+0x260
fffff880`02f8c4c0 fffff880`0105e533 : fffffa80`0cb1ec30 fffffa80`0cb1ec30 fffffa80`0a8716a8 fffffa80`0d970010 : fltmgr!GetContextFromStreamList+0x99
fffff880`02f8c540 fffff880`06a84ed9 : fffffa80`0cb1ec30 00000000`00000000 fffff880`02f8c618 fffff880`06a41b9c : fltmgr!FltGetStreamHandleContext+0x43
fffff880`02f8c570 fffffa80`0cb1ec30 : 00000000`00000000 fffff880`02f8c618 fffff880`06a41b9c fffffa80`0a64af68 : stflt+0x1ed9
fffff880`02f8c578 00000000`00000000 : fffff880`02f8c618 fffff880`06a41b9c fffffa80`0a64af68 fffff880`0106331a : 0xfffffa80`0cb1ec30


STACK_COMMAND:  kb

FOLLOWUP_IP: 
stflt+1ed9
fffff880`06a84ed9 ??              ???

SYMBOL_STACK_INDEX:  5

SYMBOL_NAME:  stflt+1ed9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: stflt

IMAGE_NAME:  stflt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c2b57fc

FAILURE_BUCKET_ID:  X64_0xD1_stflt+1ed9

BUCKET_ID:  X64_0xD1_stflt+1ed9

Followup: MachineOwner
---------

2: kd> lmntsm
start             end                 module name
fffff880`04556000 fffff880`04594000   1394ohci 1394ohci.sys Tue Jul 14 01:07:12 2009 (4A5BCC30)
fffff880`00f32000 fffff880`00f89000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
fffff880`02d74000 fffff880`02dfe000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`045c1000 fffff880`045d7000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`00c2a000 fffff880`00c35000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
fffff880`04180000 fffff880`04188000   AppleCharger AppleCharger.sys Mon Jan 10 09:57:29 2011 (4D2AD809)
fffff880`06a7a000 fffff880`06a83000   aswFsBlk aswFsBlk.SYS Wed Feb 23 14:54:56 2011 (4D651FC0)
fffff880`06a40000 fffff880`06a7a000   aswMonFlt aswMonFlt.sys Wed Feb 23 14:55:04 2011 (4D651FC8)
fffff880`02c00000 fffff880`02c0a000   aswRdr   aswRdr.SYS   Wed Feb 23 14:55:11 2011 (4D651FCF)
fffff880`02c2f000 fffff880`02caf000   aswSnx   aswSnx.SYS   Wed Feb 23 14:56:59 2011 (4D65203B)
fffff880`04135000 fffff880`04180000   aswSP    aswSP.SYS    Wed Feb 23 14:57:02 2011 (4D65203E)
fffff880`02d64000 fffff880`02d74000   aswTdi   aswTdi.SYS   Wed Feb 23 14:55:51 2011 (4D651FF7)
fffff880`00ff1000 fffff880`00ffa000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00c00000 fffff880`00c2a000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
fffff960`00890000 fffff960`008f1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`02cb8000 fffff880`02cbf000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`04124000 fffff880`04135000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`07721000 fffff880`0773f000   bowser   bowser.sys   Tue Jul 14 00:23:50 2009 (4A5BC206)
fffff880`045d7000 fffff880`045f3000   bridge   bridge.sys   Tue Jul 14 02:01:48 2009 (4A5BD8FC)
fffff960`00770000 fffff960`00797000   cdd      cdd.dll      unavailable (00000000)
fffff880`01968000 fffff880`01992000   cdrom    cdrom.sys    Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00d04000 fffff880`00dc4000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
fffff880`01902000 fffff880`01932000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00ca6000 fffff880`00d04000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01124000 fffff880`01197000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
fffff880`045aa000 fffff880`045ba000   CompositeBus CompositeBus.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`06da1000 fffff880`06daf000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`04083000 fffff880`04106000   csc      csc.sys      Tue Jul 14 00:24:26 2009 (4A5BC22A)
fffff880`04106000 fffff880`04124000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
fffff880`04074000 fffff880`04083000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`018ec000 fffff880`01902000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`06d79000 fffff880`06d9b000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`06dbb000 fffff880`06dc4000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`06daf000 fffff880`06dbb000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`06dc4000 fffff880`06dd7000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`06dd7000 fffff880`06de3000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`10aaa000 fffff880`10b9e000   dxgkrnl  dxgkrnl.sys  Wed Jan 26 04:22:56 2011 (4D3FA1A0)
fffff880`10b9e000 fffff880`10be4000   dxgmms1  dxgmms1.sys  Wed Jan 26 04:22:12 2011 (4D3FA174)
fffff880`08000000 fffff880`08036000   fastfat  fastfat.SYS  Tue Jul 14 00:23:28 2009 (4A5BC1F0)
fffff880`04594000 fffff880`045a1000   fdc      fdc.sys      Tue Jul 14 01:00:54 2009 (4A5BCAB6)
fffff880`010a6000 fffff880`010ba000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`04b11000 fffff880`04b1c000   flpydisk flpydisk.sys Tue Jul 14 01:00:54 2009 (4A5BCAB6)
fffff880`0105a000 fffff880`010a6000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`018b2000 fffff880`018ec000   fvevol   fvevol.sys   Tue Jul 14 00:22:15 2009 (4A5BC1A7)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
fffff880`0813d000 fffff880`08146000   gdrv     gdrv.sys     Fri Mar 13 03:22:29 2009 (49B9D175)
fffff880`08146000 fffff880`08150000   GVTDrv64 GVTDrv64.sys Tue Sep 05 08:10:02 2006 (44FD22CA)
fffff800`033ec000 fffff800`03435000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
fffff880`077f3000 fffff880`077ff000   hcmon    hcmon.sys    Thu Nov 11 19:44:25 2010 (4CDC4799)
fffff880`044cb000 fffff880`044ef000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
fffff880`04bd6000 fffff880`04bef000   HIDCLASS HIDCLASS.SYS Tue Jul 14 01:06:21 2009 (4A5BCBFD)
fffff880`04bef000 fffff880`04bf7080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`04bc8000 fffff880`04bd6000   hidusb   hidusb.sys   Tue Jul 14 01:06:22 2009 (4A5BCBFE)
fffff880`07659000 fffff880`07721000   HTTP     HTTP.sys     Tue Jul 14 00:22:16 2009 (4A5BC1A8)
fffff880`018a9000 fffff880`018b2000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
fffff880`041ae000 fffff880`041c4000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`0fe3c000 fffff880`0fe4b000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`04a00000 fffff880`04a0e000   kbdhid   kbdhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff800`00b9f000 fffff800`00ba9000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
fffff880`08157000 fffff880`08161000   kerneld  kerneld.amd64 Sat Sep 05 18:27:16 2009 (4AA29F74)
fffff880`04a4c000 fffff880`04a8f000   ks       ks.sys       Tue Jul 14 01:00:31 2009 (4A5BCA9F)
fffff880`013dd000 fffff880`013f7000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
fffff880`015b1000 fffff880`015dc000   ksecpkg  ksecpkg.sys  Tue Jul 14 00:50:34 2009 (4A5BC84A)
fffff880`06d9b000 fffff880`06da0200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`04a8f000 fffff880`04a92d80   LGBusEnum LGBusEnum.sys Tue Jul 14 23:34:45 2009 (4A5D0805)
fffff880`04a19000 fffff880`04a2c000   LHidFilt LHidFilt.Sys Fri Sep 21 12:05:39 2007 (46F3A583)
fffff880`04b72000 fffff880`04b87000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`045ba000 fffff880`045c1000   lmimirr  lmimirr.sys  Tue Apr 10 23:32:45 2007 (461C108D)
fffff880`07d2b000 fffff880`07d3e000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 17:26:56 2008 (487B7E50)
fffff880`04a39000 fffff880`04a4c000   LMouFilt LMouFilt.Sys Fri Sep 21 12:05:43 2007 (46F3A587)
fffff880`06a1d000 fffff880`06a40000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`00c4e000 fffff880`00c92000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
fffff880`06de3000 fffff880`06df1000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`10bf1000 fffff880`10c00000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`04a2c000 fffff880`04a39000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`00dd4000 fffff880`00dee000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`0773f000 fffff880`07757000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`07757000 fffff880`07783000   mrxsmb   mrxsmb.sys   Tue Jul 14 00:23:59 2009 (4A5BC20F)
fffff880`07783000 fffff880`077d0000   mrxsmb10 mrxsmb10.sys Tue Jul 14 00:24:08 2009 (4A5BC218)
fffff880`077d0000 fffff880`077f3000   mrxsmb20 mrxsmb20.sys Tue Jul 14 00:24:05 2009 (4A5BC215)
fffff880`02d1d000 fffff880`02d28000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00f92000 fffff880`00f9c000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`010c6000 fffff880`01124000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
fffff880`04069000 fffff880`04074000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`01897000 fffff880`018a9000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`0145f000 fffff880`01551000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`04424000 fffff880`04430000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`04430000 fffff880`0445f000   ndiswan  ndiswan.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`04b1c000 fffff880`04b31000   NDProxy  NDProxy.SYS  Tue Jul 14 01:10:05 2009 (4A5BCCDD)
fffff880`02c1e000 fffff880`02c2d000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`01992000 fffff880`019d7000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
fffff880`01551000 fffff880`015b1000   NETIO    NETIO.SYS    Tue Jul 14 00:21:46 2009 (4A5BC18A)
fffff880`02d28000 fffff880`02d39000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`0405d000 fffff880`04069000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`02e0f000 fffff800`033ec000   nt       ntkrnlmp.exe Tue Jul 14 00:40:48 2009 (4A5BC600)
fffff880`0123a000 fffff880`013dd000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
fffff880`02caf000 fffff880`02cb8000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`10aa8000 fffff880`10aa9180   nvBridge nvBridge.kmd Sat Jan 08 01:57:22 2011 (4D27C482)
fffff880`0fe4d000 fffff880`10aa7d00   nvlddmkm nvlddmkm.sys Sat Jan 08 02:07:22 2011 (4D27C6DA)
fffff880`019d7000 fffff880`019fd000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
fffff880`00fdc000 fffff880`00ff1000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00f9c000 fffff880`00fcf000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`00e71000 fffff880`00e78000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
fffff880`00dc4000 fffff880`00dd4000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`07d3e000 fffff880`07de4000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`06d3c000 fffff880`06d79000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00c92000 fffff880`00ca6000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`010ba000 fffff880`010c5e00   PxHlpa64 PxHlpa64.sys Wed Jun 24 00:16:35 2009 (4A416253)
fffff880`07d24000 fffff880`07d2b000   RaInfo   RaInfo.sys   Fri Jan 04 18:57:14 2008 (477E818A)
fffff880`04400000 fffff880`04424000   rasl2tp  rasl2tp.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`0fe00000 fffff880`0fe1b000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`0fe1b000 fffff880`0fe3c000   raspptp  raspptp.sys  Tue Jul 14 01:10:18 2009 (4A5BCCEA)
fffff880`041c4000 fffff880`041de000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`0400c000 fffff880`0405d000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
fffff880`045f3000 fffff880`045fe000   rdpbus   rdpbus.sys   Tue Jul 14 01:17:46 2009 (4A5BCEAA)
fffff880`02d02000 fffff880`02d0b000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`02d0b000 fffff880`02d14000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`02d14000 fffff880`02d1d000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`0185d000 fffff880`01897000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
fffff880`04b87000 fffff880`04b9f000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`044ef000 fffff880`04556000   Rt64win7 Rt64win7.sys Thu Jan 13 11:57:19 2011 (4D2EE89F)
fffff880`06ad2000 fffff880`06d3b800   RTKVHD64 RTKVHD64.sys Tue Nov 02 11:25:59 2010 (4CCFF547)
fffff880`04b9f000 fffff880`04bab000   RtNdPt60 RtNdPt60.sys Mon Jul 20 03:27:32 2009 (4A63D614)
fffff880`0182f000 fffff880`01849000   SCDEmu   SCDEmu.SYS   Mon Apr 12 09:52:25 2010 (4BC2DF49)
fffff880`07de4000 fffff880`07def000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`06df1000 fffff880`06dfa000   sfloppy  sfloppy.sys  Tue Jul 14 01:01:02 2009 (4A5BCABE)
fffff880`01000000 fffff880`01046000   snapman  snapman.sys  Sat Apr 10 10:16:30 2010 (4BC041EE)
fffff880`015dc000 fffff880`015e4000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`080a5000 fffff880`0813d000   srv      srv.sys      Tue Jul 14 00:25:11 2009 (4A5BC257)
fffff880`0803c000 fffff880`080a5000   srv2     srv2.sys     Tue Jul 14 00:25:02 2009 (4A5BC24E)
fffff880`07c00000 fffff880`07c2d000   srvnet   srvnet.sys   Tue Jul 14 00:24:58 2009 (4A5BC24A)
fffff880`06a83000 fffff880`06aaf000   stflt    stflt.sys    Wed Jun 30 15:43:08 2010 (4C2B57FC)
fffff880`045fe000 fffff880`045ff480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Tue Jul 14 00:25:34 2009 (4A5BC26E)
fffff880`07c2d000 fffff880`07c3f000   tcpipreg tcpipreg.sys Tue Jul 14 01:09:49 2009 (4A5BCCCD)
fffff880`02d57000 fffff880`02d64000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
fffff880`02d39000 fffff880`02d57000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
fffff880`0181b000 fffff880`0182f000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
fffff960`00500000 fffff960`0050a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04188000 fffff880`041ae000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
fffff880`04a93000 fffff880`04aa5000   umbus    umbus.sys    Tue Jul 14 01:06:56 2009 (4A5BCC20)
fffff880`04bab000 fffff880`04bc8000   usbccgp  usbccgp.sys  Tue Jul 14 01:06:45 2009 (4A5BCC15)
fffff880`06a1b000 fffff880`06a1cf00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
fffff880`044ba000 fffff880`044cb000   usbehci  usbehci.sys  Tue Jul 14 01:06:30 2009 (4A5BCC06)
fffff880`04ab7000 fffff880`04b11000   usbhub   usbhub.sys   Tue Jul 14 01:07:09 2009 (4A5BCC2D)
fffff880`04464000 fffff880`044ba000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
fffff880`06a00000 fffff880`06a1b000   USBSTOR  USBSTOR.SYS  Tue Jul 14 01:06:34 2009 (4A5BCC0A)
fffff880`10be4000 fffff880`10bf1000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00fcf000 fffff880`00fdc000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`02cbf000 fffff880`02ccd000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`02ccd000 fffff880`02cf2000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`07600000 fffff880`07618000   vmci     vmci.sys     Thu Nov 11 19:11:58 2010 (4CDC3FFE)
fffff880`04a0e000 fffff880`04a19000   VMkbd    VMkbd.sys    Thu Nov 11 20:35:18 2010 (4CDC5386)
fffff880`04aad000 fffff880`04ab7000   VMNET    VMNET.SYS    Mon Aug 10 13:04:50 2009 (4A800CE2)
fffff880`04aa5000 fffff880`04aad000   vmnetadapter vmnetadapter.sys Mon Aug 10 13:04:53 2009 (4A800CE5)
fffff880`04b62000 fffff880`04b72000   vmnetbridge vmnetbridge.sys Mon Aug 10 13:05:58 2009 (4A800D26)
fffff880`07c3f000 fffff880`07c49000   vmnetuserif vmnetuserif.sys Thu Nov 11 19:59:16 2010 (4CDC4B14)
fffff880`0144a000 fffff880`0145a000   vmstorfl vmstorfl.sys Tue Jul 14 00:42:54 2009 (4A5BC67E)
fffff880`07c4e000 fffff880`07d24000   vmx86    vmx86.sys    Thu Nov 11 21:23:08 2010 (4CDC5EBC)
fffff880`00e00000 fffff880`00e15000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00e15000 fffff880`00e71000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
fffff880`01197000 fffff880`011e3000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
fffff880`07def000 fffff880`07dfb000   vstor2_ws60 vstor2-ws60.sys Thu Aug 19 21:28:39 2010 (4C6D93F7)
fffff880`01800000 fffff880`0181b000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
fffff880`02cf2000 fffff880`02d02000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00e7f000 fffff880`00f23000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00f23000 fffff880`00f32000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`02c15000 fffff880`02c1e000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff960`00080000 fffff960`0038f000   win32k   win32k.sys   unavailable (00000000)
fffff880`08150000 fffff880`08157000   WinRing0x64 WinRing0x64.sys Sat Jul 26 14:29:37 2008 (488B26C1)
fffff880`045a1000 fffff880`045aa000   wmiacpi  wmiacpi.sys  Tue Jul 14 00:31:02 2009 (4A5BC3B6)
fffff880`00f89000 fffff880`00f92000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`02c0a000 fffff880`02c15000   ws2ifsl  ws2ifsl.sys  Tue Jul 14 01:10:33 2009 (4A5BCCF9)
fffff880`06aaf000 fffff880`06ad0000   WudfPf   WudfPf.sys   Tue Jul 14 01:05:37 2009 (4A5BCBD1)
fffff880`04b31000 fffff880`04b62000   WUDFRd   WUDFRd.sys   Tue Jul 14 01:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`08161000 fffff880`081d2000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01932000 fffff880`01940000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01940000 fffff880`0194c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0194c000 fffff880`01955000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01955000 fffff880`01968000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04add000 fffff880`04b0e000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04a68000 fffff880`04a99000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

 

[big_mike]

Thank you very much dan_ep82

Yes I had Spyware Terminator installed, as soon as I read your post I uninstalled it.

I also ran the test from the sevenforums. I zipped the folder, it can be downloaded here (Windows_NT6_BSOD_jcgriff2).

Both hard drives passed the tests. Also after adjusting the ram settings as redduc900 suggested my computer seems to be running a bit faster, or it could be just my imagination lol.

Its interesting, I've been running this setup for some time now without any problems until last month.

SP1 upgrade coming later today

 

[johan851]

Both hard drives passed the tests. Also after adjusting the ram settings as redduc900 suggested my computer seems to be running a bit faster, or it could be just my imagination lol.

Very likely imagination.

If uninstalling that program doesn't fix it, we might try a clean install next.

 

[dan_ep82]

Thank you very much dan_ep82

Yes I had Spyware Terminator installed, as soon as I read your post I uninstalled it.

I also ran the test from the sevenforums. I zipped the folder, it can be downloaded here (Windows_NT6_BSOD_jcgriff2).

Both hard drives passed the tests. Also after adjusting the ram settings as redduc900 suggested my computer seems to be running a bit faster, or it could be just my imagination lol.

Its interesting, I've been running this setup for some time now without any problems until last month.

SP1 upgrade coming later today

Ill take a look now and get back to you

 

[dan_ep82]

Ok,just had a look through the DMPs and they are still blaming Spyware Terminator

Unable to load image \SystemRoot\system32\DRIVERS\stflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for stflt.sys
*** ERROR: Module load completed but symbols could not be loaded for stflt.sys
Probably caused by : stflt.sys ( stflt+1ed9 )

Unable to load image \SystemRoot\system32\DRIVERS\stflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for stflt.sys
*** ERROR: Module load completed but symbols could not be loaded for stflt.sys
Probably caused by : stflt.sys ( stflt+1ed9 )

You can see it triggered the BSOD from the stack

fffff880`02f8c1e8 fffff800`02ec7469 : 00000000`0000000a fffff8a0`04fed708 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02f8c1f0 fffff800`02ec60e0 : fffff880`02f8d000 00000000`00000000 00000000`00000000 fffff880`03704104 : nt!KiBugCheckDispatch+0x69
fffff880`02f8c330 fffff880`010a2fa9 : 00000000`00000000 00000000`00000000 fffff880`02f8c570 fffff880`010a232e : nt!KiPageFault+0x260
fffff880`02f8c4c0 fffff880`010a2533 : fffffa80`0c62e600 fffffa80`0c62e600 fffffa80`0a8526a8 fffffa80`0cf35010 : fltmgr!GetContextFromStreamList+0x99
fffff880`02f8c540 fffff880`04d9ced9 : fffffa80`0c62e600 00000000`00000000 fffff880`02f8c618 fffff880`04d62b9c : fltmgr!FltGetStreamHandleContext+0x43
fffff880`02f8c570 fffffa80`0c62e600 : 00000000`00000000 fffff880`02f8c618 fffff880`04d62b9c fffffa80`0e5bff68 :[B][COLOR="Red"] stflt+0x1ed9[/COLOR][/B]
fffff880`02f8c578 00000000`00000000 : fffff880`02f8c618 fffff880`04d62b9c fffffa80`0e5bff68 fffff880`010a731a : 0xfffffa80`0c62e600

Scroll Right.

So hopefully removing it will help.

Also found this in the $evtx_sys_dump

Event[1183]:
  Log Name: System
  Source: BridgeMP
  Date: 2011-04-15T19:47:42.997
  Event ID: 14702
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: CMI7920
  Description: 
Bridge [Adapter Realtek PCIe GBE Family Controller]:
The bridge could not modify the network adapter's packet filter. The network adapter will not function correctly.

Found your driver,but it's not severly out of date,not harm updating anyhow

 Rt64win7 Rt64win7.sys Thu Jan 13 11:57:19 2011 (4D2EE89F)

Realtek Ethernet Update Drivers
I'd guess that error had more to do with the ghost connections your VM software uses.

If the above and SP1 don't solve the problem you could try Driver Verifier and it may find the problem.
Driver Verifier

Dan

 

[big_mike]

Very likely imagination.

If uninstalling that program doesn't fix it, we might try a clean install next.

Hahaha, yeah its kind of what I was thinking.

I haven't had any issues since I uninstalled spyware terminator, but if anything else arises a clean install will be my next step.

 

[big_mike]

Thank you very much for investing some of your spare time to look into this issue.

Sorry for the delay in my reply, I was out of town for few days. I've upgraded to SP1 and uninstalled spyware teminator. To be honest I've never thought that it would be that program causing all the issues. I installed the latest drivers for gigabyte for their motherboard. I guess their realtek drivers are a bit out of date lol. I will most certainly update it as soon as i get home I will also run driver verifier to make sure there is no other problems, will post results.

Thank you once again!
Mike

 

[johan851]

Thank you very much for investing some of your spare time to look into this issue.

Sorry for the delay in my reply, I was out of town for few days. I've upgraded to SP1 and uninstalled spyware teminator. To be honest I've never thought that it would be that program causing all the issues. I installed the latest drivers for gigabyte for their motherboard. I guess their realtek drivers are a bit out of date lol. I will most certainly update it as soon as i get home I will also run driver verifier to make sure there is no other problems, will post results.

Thank you once again!
Mike

Cool. Good call, dan!