Resolved Random crashes and BSODs driving me NUTS!

Hello everyone, I'm posting this because I'm at my wit's end trying to figure out what my problem is. I've been getting random crashes for a while now. Usually in games, sometimes not. Sometimes just the program will crash, sometimes it's my entire computer. I'll lay out some of the facts and what I've tried and the results as clearly as I can:

1. The program crashes seem to all be exception code 0xc0000005 according to AppCrashView, which as I understand it points to a memory issue. More on that later.

2. I used to use Comodo for my antivirus - I tried switching to MSE and the crashes seem to happen less frequently, and the BSODs and general system lockups MUCH less frequently.

3. I've tried updating all of my drivers, verifying my system files with sfc /scannow, and even reformatting. It still happens.

4. At this point I began to suspect a hardware (specifically RAM) issue. I ran every diagnostic tool I could think of. Furmark to test the video cards, Prime95 to test stability, Western Digital's hard drive diagnostic tools, and most importantly (since I suspected RAM was the culprit) memtest86+. No problems whatsoever. I ran memtest for over FIFTY HOURS TOTAL, and not one error. (The crashes happen a hell of a lot more frequently than just once every 50 hours.) I changed various ram settings including frequency and voltage, running memtest for ~10 hours after each change, no errors. Ever.

5. I tried adjusting (increasing) the size of my Windows page file. This seems to have greatly reduced the frequency, but has not solved the issue.

6. Whatever the problem is, it's not related to hardware stress, as I've had multiple crashes during Fallout and Fallout 2, which are ancient and could probably run on your average microwave oven nowadays.

7. Just to get it out of the way, it's not a heating issue. I've tested my thermals at max load. Graphics cards don't go above 65c and processor doesn't go above 55 iirc. I forget the exact numbers, but they were fine.

I'm losing my mind here, folks. I've tried doing everything I can possibly think of, and I've thoroughly tested each piece of hardware to no avail. I have no idea what more can be done. The only thing I know is that it's a memory error of some kind, and I can't pinpoint a specific file or piece of hardware to be at fault.

Here's the dump from my latest BSOD:










Microsoft (R) Windows Debugger Version 6.2.8229.0 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\041612-26629-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
Machine Name:
Kernel base = 0xfffff800`02e58000 PsLoadedModuleList = 0xfffff800`0309c650
Debug session time: Mon Apr 16 18:49:25.482 2012 (UTC - 4:00)
System Uptime: 0 days 10:48:44.637
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\oca.ini, error 2
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\winxp\triage.ini, error 2
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41284, 7641001, 252c, fffff70001080000}

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4ac3 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041284, A PTE or the working set list is corrupt.
Arg2: 0000000007641001
Arg3: 000000000000252c
Arg4: fffff70001080000

Debugging Details:
------------------

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2

BUGCHECK_STR: 0x1a_41284

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: plugin-contain

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80002f2b717 to fffff80002ed4c80

STACK_TEXT:
fffff880`0cb8c918 fffff800`02f2b717 : 00000000`0000001a 00000000`00041284 00000000`07641001 00000000`0000252c : nt!KeBugCheckEx
fffff880`0cb8c920 fffff800`02f060e0 : fffff700`01080000 d2c00001`7bbbd867 00000000`00000000 fffffa80`08c1a000 : nt! ?? ::FNODOBFM::`string'+0x4ac3
fffff880`0cb8c960 fffff800`02ec14bf : fffffa80`00000000 00000000`0775bfff 00000000`00000000 00000000`00000000 : nt!MiDeleteVirtualAddresses+0x4e8
fffff880`0cb8cb20 fffff800`02ed3f13 : ffffffff`ffffffff 00000000`0008e110 00000000`0008e108 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`0cb8cc20 00000000`76fd14fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008e0d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76fd14fa


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+4ac3
fffff800`02f2b717 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+4ac3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4f558b55

FAILURE_BUCKET_ID: X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ac3

BUCKET_ID: X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ac3

Followup: MachineOwner












This one happened while I was watching a youtube video (hence plugin container)

And here's the only other minidump I still have saved due to reformatting:





Microsoft (R) Windows Debugger Version 6.2.8229.0 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\040112-22386-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`02e62000 PsLoadedModuleList = 0xfffff800`030a6650
Debug session time: Sun Apr 1 06:30:47.898 2012 (UTC - 4:00)
System Uptime: 0 days 12:51:05.475
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
....
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\oca.ini, error 2
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\winxp\triage.ini, error 2
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff9600019882c, fffff8800d788040, 0}

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2
Probably caused by : win32k.sys ( win32k!XDCOBJ::bDeleteDC+84 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600019882c, Address of the instruction which caused the bugcheck
Arg3: fffff8800d788040, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
win32k!XDCOBJ::bDeleteDC+84
fffff960`0019882c 488b0f mov rcx,qword ptr [rdi]

CONTEXT: fffff8800d788040 -- (.cxr 0xfffff8800d788040)
rax=fffff8800d788a68 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=fffff8800d788af0 rdi=0004000000000000
rip=fffff9600019882c rsp=fffff8800d788a20 rbp=0000000008011553
r8=fffff900c0096010 r9=000000000000001f r10=fffffa80088bfb80
r11=fffff900c24f1010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000001 r15=0000000000000001
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
win32k!XDCOBJ::bDeleteDC+0x84:
fffff960`0019882c 488b0f mov rcx,qword ptr [rdi] ds:002b:00040000`00000000=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: winlogon.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff960002cff74 to fffff9600019882c

STACK_TEXT:
fffff880`0d788a20 fffff960`002cff74 : 00000000`00000000 00000000`00000004 00000000`00000000 00000000`08011553 : win32k!XDCOBJ::bDeleteDC+0x84
fffff880`0d788a70 fffff960`00198742 : fffff880`0d788af0 00000000`00000000 00000000`00000000 00000000`00000001 : win32k!bDeleteDCInternalWorker+0x20c
fffff880`0d788ad0 fffff960`0014f758 : fffff900`c2083d10 00000000`00000000 00000000`00000000 fffff960`00000001 : win32k!bDeleteDCInternal+0x56
fffff880`0d788b20 fffff960`001903cd : fffff900`c2083d10 00000000`00000000 fffff900`c0581e90 fffffa80`0a204b60 : win32k!DestroyCacheDC+0x120
fffff880`0d788b70 fffff960`000f44f0 : 00000000`08011553 00000000`08011553 00000000`00000000 00000000`00000000 : win32k!ReleaseCacheDC+0x8d
fffff880`0d788bb0 fffff960`00198784 : fffff880`0d788c00 00000000`00000000 00000000`00000000 fffffa80`00000020 : win32k!UserReleaseDC+0x20
fffff880`0d788be0 fffff960`00157564 : 00000000`08011553 fffff880`0d788ce0 00000000`00000000 00000000`00000000 : win32k!bDeleteDCInternal+0x98
fffff880`0d788c30 fffff800`02eddfd3 : fffffa80`0a204b60 fffff880`0d788ce0 00000000`0185000f 00000000`00000001 : win32k!NtGdiDeleteObjectApp+0x120
fffff880`0d788c60 000007fe`fef0108a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00ece1d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fef0108a


FOLLOWUP_IP:
win32k!XDCOBJ::bDeleteDC+84
fffff960`0019882c 488b0f mov rcx,qword ptr [rdi]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!XDCOBJ::bDeleteDC+84

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4f2b63bd

STACK_COMMAND: .cxr 0xfffff8800d788040 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!XDCOBJ::bDeleteDC+84

BUCKET_ID: X64_0x3B_win32k!XDCOBJ::bDeleteDC+84

Followup: MachineOwner
---------







Here are my specs, if it helps:

-ASUS M4A79T Deluxe AM3 DDR3 AMD 790FX ATX AMD Motherboard

-2 x SAPPHIRE 100283L Radeon HD 5770 (Juniper XT) 1GB 128-bit GDDR5 PCI Express 2.0 x16 HDCP Ready CrossFireX Support Video Card

-CORSAIR XMS3 8GB (2 x 4GB) 240-Pin DDR3 SDRAM DDR3 1333 (PC3 10600) Desktop Memory Model CMX8GX3M2A1333C9

-AMD Phenom II X4 965 Black Edition Deneb 3.4GHz Socket AM3 125W Quad-Core Processor HDZ965FBGMBOX

-CORSAIR HX Series CMPSU-1000HX 1000W ATX12V 2.2 / EPS12V 2.91 SLI Ready CrossFire Ready 80 PLUS Certified Modular Active PFC Compatible with Core i7 Power Supply


Any help you guys could give would be extremely appreciated. I'm pretty handy with computers but analyzing dump files is a bit out of my league.

Thanks for your time.

 

Alright, well I've run CHKDSK several times, but I just did it again and it seems to be fine (it just closes when it's finished, I'm assuming if there was a problem it'd stay up there long enough for me to read it.)

Here's the debug log for the latest crash as per your instructions:












Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.2.8229.0 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\041612-26629-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
Machine Name:
Kernel base = 0xfffff800`02e58000 PsLoadedModuleList = 0xfffff800`0309c650
Debug session time: Mon Apr 16 18:49:25.482 2012 (UTC - 4:00)
System Uptime: 0 days 10:48:44.637
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\oca.ini, error 2
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\winxp\triage.ini, error 2
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41284, 7641001, 252c, fffff70001080000}

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4ac3 )

Followup: MachineOwner
---------

3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041284, A PTE or the working set list is corrupt.
Arg2: 0000000007641001
Arg3: 000000000000252c
Arg4: fffff70001080000

Debugging Details:
------------------

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2

BUGCHECK_STR: 0x1a_41284

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: plugin-contain

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80002f2b717 to fffff80002ed4c80

STACK_TEXT:
fffff880`0cb8c918 fffff800`02f2b717 : 00000000`0000001a 00000000`00041284 00000000`07641001 00000000`0000252c : nt!KeBugCheckEx
fffff880`0cb8c920 fffff800`02f060e0 : fffff700`01080000 d2c00001`7bbbd867 00000000`00000000 fffffa80`08c1a000 : nt! ?? ::FNODOBFM::`string'+0x4ac3
fffff880`0cb8c960 fffff800`02ec14bf : fffffa80`00000000 00000000`0775bfff 00000000`00000000 00000000`00000000 : nt!MiDeleteVirtualAddresses+0x4e8
fffff880`0cb8cb20 fffff800`02ed3f13 : ffffffff`ffffffff 00000000`0008e110 00000000`0008e108 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`0cb8cc20 00000000`76fd14fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008e0d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76fd14fa


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+4ac3
fffff800`02f2b717 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+4ac3

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4f558b55

FAILURE_BUCKET_ID: X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ac3

BUCKET_ID: X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ac3

Followup: MachineOwner
---------

rax=ffffffff0000e000 rbx=fffff7044001e904 rcx=000000000000001a
rdx=0000000000041284 rsi=d2c000017bbbd867 rdi=0000000000000002
rip=fffff80002ed4c80 rsp=fffff8800cb8c918 rbp=0000000007641000
r8=0000000007641001 r9=000000000000252c r10=fffff700010b9000
r11=fffff70001080000 r12=fffffa800773f5a8 r13=000000000000252c
r14=fffff6800003b180 r15=fffffa80038c2dd0
iopl=0 nv up ei pl nz ac pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000212
nt!KeBugCheckEx:
fffff800`02ed4c80 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`0cb8c920=000000000000001a
Child-SP RetAddr : Args to Child : Call Site
fffff880`0cb8c918 fffff800`02f2b717 : 00000000`0000001a 00000000`00041284 00000000`07641001 00000000`0000252c : nt!KeBugCheckEx
fffff880`0cb8c920 fffff800`02f060e0 : fffff700`01080000 d2c00001`7bbbd867 00000000`00000000 fffffa80`08c1a000 : nt! ?? ::FNODOBFM::`string'+0x4ac3
fffff880`0cb8c960 fffff800`02ec14bf : fffffa80`00000000 00000000`0775bfff 00000000`00000000 00000000`00000000 : nt!MiDeleteVirtualAddresses+0x4e8
fffff880`0cb8cb20 fffff800`02ed3f13 : ffffffff`ffffffff 00000000`0008e110 00000000`0008e108 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`0cb8cc20 00000000`76fd14fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0cb8cc20)
00000000`0008e0d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76fd14fa
start end module name
fffff800`00bbd000 fffff800`00bc7000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff800`02e0f000 fffff800`02e58000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff800`02e58000 fffff800`03440000 nt ntkrnlmp.exe Mon Mar 05 22:58:13 2012 (4F558B55)
fffff880`00c00000 fffff880`00cc0000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`00ccb000 fffff880`00cd8000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`00cd8000 fffff880`00cec000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00cec000 fffff880`00d4a000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d4a000 fffff880`00dee000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00dee000 fffff880`00dfd000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e0f000 fffff880`00e66000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`00e66000 fffff880`00e6f000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e6f000 fffff880`00e79000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00e79000 fffff880`00eac000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00eac000 fffff880`00eb9000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00eb9000 fffff880`00ece000 partmgr partmgr.sys Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00ece000 fffff880`00ee3000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00ee3000 fffff880`00f3f000 volmgrx volmgrx.sys Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`00f3f000 fffff880`00f46000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f46000 fffff880`00f56000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00f56000 fffff880`00f70000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`00f70000 fffff880`00f79000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f79000 fffff880`00fa3000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`00fa3000 fffff880`00fae000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`00fae000 fffff880`00ffa000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01000000 fffff880`01022000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`01022000 fffff880`0102f000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0102f000 fffff880`010b8000 afd afd.sys Tue Dec 27 22:59:20 2011 (4EFA9418)
fffff880`010b8000 fffff880`010de000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`010eb000 fffff880`010ff000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010ff000 fffff880`0115d000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0115d000 fffff880`011cf000 cng cng.sys Wed Nov 16 23:23:17 2011 (4EC48C35)
fffff880`011cf000 fffff880`011e0000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`011e0000 fffff880`011f5000 amdppm amdppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`01200000 fffff880`01225000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01225000 fffff880`013c8000 Ntfs Ntfs.sys Thu Mar 10 22:39:39 2011 (4D79997B)
fffff880`013c8000 fffff880`013e3000 ksecdd ksecdd.sys Wed Nov 16 22:48:13 2011 (4EC483FD)
fffff880`013e3000 fffff880`013f4000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`013f4000 fffff880`013fe000 Fs_Rec Fs_Rec.sys Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`01400000 fffff880`0142a000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`0142a000 fffff880`0145b000 MpFilter MpFilter.sys Wed Apr 06 16:07:29 2011 (4D9CC801)
fffff880`0145b000 fffff880`01464000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0146c000 fffff880`0155f000 ndis ndis.sys Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`0155f000 fffff880`015bf000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`015bf000 fffff880`015ea000 ksecpkg ksecpkg.sys Wed Nov 16 23:23:44 2011 (4EC48C50)
fffff880`015ea000 fffff880`015f5000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01600000 fffff880`01630000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`01630000 fffff880`01643000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01643000 fffff880`01660000 usbccgp usbccgp.sys Thu Mar 24 23:29:14 2011 (4D8C0C0A)
fffff880`01666000 fffff880`0166f000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0166f000 fffff880`01676000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01676000 fffff880`01684000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01686000 fffff880`0188a000 tcpip tcpip.sys Wed Sep 28 23:43:04 2011 (4E83E948)
fffff880`0188a000 fffff880`018d4000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`018d4000 fffff880`018e4000 vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`018e4000 fffff880`01930000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`01930000 fffff880`01938000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01938000 fffff880`01972000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`01972000 fffff880`01984000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01984000 fffff880`0198d000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`0198d000 fffff880`019c7000 fvevol fvevol.sys Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`019c7000 fffff880`019dd000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`019dd000 fffff880`019ed000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`019ed000 fffff880`019f6000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019f6000 fffff880`019ff000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c00000 fffff880`02c46000 dxgmms1 dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`02c46000 fffff880`02c6a000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`02c6a000 fffff880`02c9c000 Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`02c9c000 fffff880`02cda000 1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`02cda000 fffff880`02ce3000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`02ce4000 fffff880`02dd8000 dxgkrnl dxgkrnl.sys Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`02dd8000 fffff880`02de3000 usbohci usbohci.sys Thu Mar 24 23:29:03 2011 (4D8C0BFF)
fffff880`02de3000 fffff880`02df4000 usbehci usbehci.sys Thu Mar 24 23:29:04 2011 (4D8C0C00)
fffff880`02df4000 fffff880`02dfc000 ASACPI ASACPI.sys Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`02dfc000 fffff880`02dfd480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`03a00000 fffff880`03a24000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`03a24000 fffff880`03a55000 AODDriver2 AODDriver2.sys Mon Dec 19 02:30:03 2011 (4EEEE7FB)
fffff880`03a55000 fffff880`03a60000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03a60000 fffff880`03a72000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`03a72000 fffff880`03b3b000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`03b3b000 fffff880`03b59000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
fffff880`03b59000 fffff880`03b71000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03b71000 fffff880`03b9e000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`03b9e000 fffff880`03bec000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`03e00000 fffff880`03e5a000 usbhub usbhub.sys Thu Mar 24 23:29:25 2011 (4D8C0C15)
fffff880`03e5a000 fffff880`03e65000 flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`03e65000 fffff880`03e7a000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`03e7a000 fffff880`03e94000 AtihdW76 AtihdW76.sys Tue Dec 06 04:14:25 2011 (4EDDDCF1)
fffff880`03e94000 fffff880`03eb6000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`03ebb000 fffff880`03f10000 atikmpag atikmpag.sys Thu Mar 08 22:58:02 2012 (4F597FCA)
fffff880`03f10000 fffff880`03f2a000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03f2a000 fffff880`03f39000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03f39000 fffff880`03f48000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03f48000 fffff880`03f8b000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`03f8b000 fffff880`03f9f000 amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`03f9f000 fffff880`03fb1000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`03fb1000 fffff880`03fee000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`03fee000 fffff880`03ffa000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04000000 fffff880`04083000 csc csc.sys Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`04083000 fffff880`040a1000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`040a1000 fffff880`040e6000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`040e6000 fffff880`040ef000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`040ef000 fffff880`04115000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`04115000 fffff880`04124000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04124000 fffff880`04141000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`04141000 fffff880`0415c000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`0415c000 fffff880`04170000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`04170000 fffff880`041c1000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`041c1000 fffff880`041cd000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`041cd000 fffff880`041d8000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`041d8000 fffff880`041e7000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`041e7000 fffff880`041f8000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04800000 fffff880`0482f000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`0482f000 fffff880`0484a000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0484a000 fffff880`04855000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`04855000 fffff880`0485a200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0485b000 fffff880`0531a000 atikmdag atikmdag.sys Thu Mar 08 23:04:49 2012 (4F598161)
fffff880`0531a000 fffff880`05370000 USBPORT USBPORT.SYS Thu Mar 24 23:29:12 2011 (4D8C0C08)
fffff880`05370000 fffff880`0537c000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0537c000 fffff880`05389000 fdc fdc.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`05389000 fffff880`05399000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`05399000 fffff880`053af000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`053af000 fffff880`053d3000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`053d3000 fffff880`053df000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`053df000 fffff880`05400000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`06000000 fffff880`06031000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`0604c000 fffff880`06067000 USBSTOR USBSTOR.SYS Thu Mar 10 23:37:16 2011 (4D79A6FC)
fffff880`06067000 fffff880`06075000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`06075000 fffff880`0608e000 HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`0608e000 fffff880`06096080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06097000 fffff880`060a5000 kbdhid kbdhid.sys Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`060a5000 fffff880`060bfc80 usbaudio usbaudio.sys Sat Nov 20 05:43:52 2010 (4CE7A668)
fffff880`060c0000 fffff880`060cd000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`060cd000 fffff880`060db000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`060db000 fffff880`060fe000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`060fe000 fffff880`0611f000 WudfPf WudfPf.sys Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`0611f000 fffff880`06134000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06134000 fffff880`0614c000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0614c000 fffff880`061f2000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06271000 fffff880`06281000 MpNWMon MpNWMon.sys Wed Apr 06 16:07:23 2011 (4D9CC7FB)
fffff880`0628c000 fffff880`062f5000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`062f5000 fffff880`0638d000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0638d000 fffff880`063a5000 NisDrvWFP NisDrvWFP.sys Wed Apr 06 16:08:53 2011 (4D9CC855)
fffff880`063a5000 fffff880`063db000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`06400000 fffff880`0640e000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0640e000 fffff880`0641a000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06420000 fffff880`067f2b80 RTKVHD64 RTKVHD64.sys Tue Mar 27 05:01:50 2012 (4F7181FE)
fffff880`067f3000 fffff880`067fc000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`067fc000 fffff880`067fdf00 USBD USBD.SYS Thu Mar 24 23:28:59 2011 (4D8C0BFB)
fffff960`00000000 fffff960`00315000 win32k win32k.sys Thu Feb 02 23:34:05 2012 (4F2B63BD)
fffff960`004d0000 fffff960`004da000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`00790000 fffff960`007b7000 cdd cdd.dll Sat Nov 20 07:55:34 2010 (4CE7C546)

Unloaded modules:
fffff880`06200000 fffff880`06271000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`01630000 fffff880`0163e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`0163e000 fffff880`0164a000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`0164a000 fffff880`01653000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`01653000 fffff880`01666000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
Closing open log file c:debuglog.txt















And here's the log for the other one:














Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.2.8229.0 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\040112-22386-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`02e62000 PsLoadedModuleList = 0xfffff800`030a6650
Debug session time: Sun Apr 1 06:30:47.898 2012 (UTC - 4:00)
System Uptime: 0 days 12:51:05.475
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
....
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\oca.ini, error 2
TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\winxp\triage.ini, error 2
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff9600019882c, fffff8800d788040, 0}

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2
Probably caused by : win32k.sys ( win32k!XDCOBJ::bDeleteDC+84 )

Followup: MachineOwner
---------

2: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600019882c, Address of the instruction which caused the bugcheck
Arg3: fffff8800d788040, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

TRIAGER: Could not open triage file : C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x64\triage\modclass.ini, error 2

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
win32k!XDCOBJ::bDeleteDC+84
fffff960`0019882c 488b0f mov rcx,qword ptr [rdi]

CONTEXT: fffff8800d788040 -- (.cxr 0xfffff8800d788040)
.cxr 0xfffff8800d788040
rax=fffff8800d788a68 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=fffff8800d788af0 rdi=0004000000000000
rip=fffff9600019882c rsp=fffff8800d788a20 rbp=0000000008011553
r8=fffff900c0096010 r9=000000000000001f r10=fffffa80088bfb80
r11=fffff900c24f1010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000001 r15=0000000000000001
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
win32k!XDCOBJ::bDeleteDC+0x84:
fffff960`0019882c 488b0f mov rcx,qword ptr [rdi] ds:002b:00040000`00000000=????????????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: winlogon.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff960002cff74 to fffff9600019882c

STACK_TEXT:
fffff880`0d788a20 fffff960`002cff74 : 00000000`00000000 00000000`00000004 00000000`00000000 00000000`08011553 : win32k!XDCOBJ::bDeleteDC+0x84
fffff880`0d788a70 fffff960`00198742 : fffff880`0d788af0 00000000`00000000 00000000`00000000 00000000`00000001 : win32k!bDeleteDCInternalWorker+0x20c
fffff880`0d788ad0 fffff960`0014f758 : fffff900`c2083d10 00000000`00000000 00000000`00000000 fffff960`00000001 : win32k!bDeleteDCInternal+0x56
fffff880`0d788b20 fffff960`001903cd : fffff900`c2083d10 00000000`00000000 fffff900`c0581e90 fffffa80`0a204b60 : win32k!DestroyCacheDC+0x120
fffff880`0d788b70 fffff960`000f44f0 : 00000000`08011553 00000000`08011553 00000000`00000000 00000000`00000000 : win32k!ReleaseCacheDC+0x8d
fffff880`0d788bb0 fffff960`00198784 : fffff880`0d788c00 00000000`00000000 00000000`00000000 fffffa80`00000020 : win32k!UserReleaseDC+0x20
fffff880`0d788be0 fffff960`00157564 : 00000000`08011553 fffff880`0d788ce0 00000000`00000000 00000000`00000000 : win32k!bDeleteDCInternal+0x98
fffff880`0d788c30 fffff800`02eddfd3 : fffffa80`0a204b60 fffff880`0d788ce0 00000000`0185000f 00000000`00000001 : win32k!NtGdiDeleteObjectApp+0x120
fffff880`0d788c60 000007fe`fef0108a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00ece1d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fef0108a


FOLLOWUP_IP:
win32k!XDCOBJ::bDeleteDC+84
fffff960`0019882c 488b0f mov rcx,qword ptr [rdi]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!XDCOBJ::bDeleteDC+84

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4f2b63bd

STACK_COMMAND: .cxr 0xfffff8800d788040 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!XDCOBJ::bDeleteDC+84

BUCKET_ID: X64_0x3B_win32k!XDCOBJ::bDeleteDC+84

Followup: MachineOwner
---------

rax=fffff8800d787880 rbx=fffff80003028638 rcx=000000000000003b
rdx=00000000c0000005 rsi=fffff80002e62000 rdi=0000000000000000
rip=fffff80002eded40 rsp=fffff8800d787778 rbp=0000000000000000
r8=fffff9600019882c r9=fffff8800d788040 r10=0000000000000000
r11=fffff8800d787978 r12=fffff80002eddfd3 r13=fffff800030e6eb8
r14=fffff80002eddbc0 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000282
nt!KeBugCheckEx:
fffff800`02eded40 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`0d787780=000000000000003b
Child-SP RetAddr : Args to Child : Call Site
fffff880`0d787778 fffff800`02ede2e9 : 00000000`0000003b 00000000`c0000005 fffff960`0019882c fffff880`0d788040 : nt!KeBugCheckEx
fffff880`0d787780 fffff800`02eddc3c : fffff880`0d7887e8 fffff880`0d788040 00000000`00000000 fffff960`00372170 : nt!KiBugCheckDispatch+0x69
fffff880`0d7878c0 fffff800`02f09a6d : fffff960`003b9c34 fffff960`00386580 fffff960`000d0000 fffff880`0d7887e8 : nt!KiSystemServiceHandler+0x7c
fffff880`0d787900 fffff800`02f08845 : fffff800`03028638 fffff880`0d787978 fffff880`0d7887e8 fffff800`02e62000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0d787930 fffff800`02f197c1 : fffff880`0d7887e8 fffff880`0d788040 fffff880`00000000 00040000`00000000 : nt!RtlDispatchException+0x415
fffff880`0d788010 fffff800`02ede3c2 : fffff880`0d7887e8 00000000`00000000 fffff880`0d788890 fffff880`0d788af0 : nt!KiDispatchException+0x135
fffff880`0d7886b0 fffff800`02edccca : 00000000`00000002 fffff900`c0106cc0 00000000`00000002 fffff960`001954bd : nt!KiExceptionDispatch+0xc2
fffff880`0d788890 fffff960`0019882c : 00000000`08011553 fffff960`001956f2 fffffa80`088bfb80 fffff960`00195ec6 : nt!KiGeneralProtectionFault+0x10a (TrapFrame @ fffff880`0d788890)
fffff880`0d788a20 fffff960`002cff74 : 00000000`00000000 00000000`00000004 00000000`00000000 00000000`08011553 : win32k!XDCOBJ::bDeleteDC+0x84
fffff880`0d788a70 fffff960`00198742 : fffff880`0d788af0 00000000`00000000 00000000`00000000 00000000`00000001 : win32k!bDeleteDCInternalWorker+0x20c
fffff880`0d788ad0 fffff960`0014f758 : fffff900`c2083d10 00000000`00000000 00000000`00000000 fffff960`00000001 : win32k!bDeleteDCInternal+0x56
fffff880`0d788b20 fffff960`001903cd : fffff900`c2083d10 00000000`00000000 fffff900`c0581e90 fffffa80`0a204b60 : win32k!DestroyCacheDC+0x120
fffff880`0d788b70 fffff960`000f44f0 : 00000000`08011553 00000000`08011553 00000000`00000000 00000000`00000000 : win32k!ReleaseCacheDC+0x8d
fffff880`0d788bb0 fffff960`00198784 : fffff880`0d788c00 00000000`00000000 00000000`00000000 fffffa80`00000020 : win32k!UserReleaseDC+0x20
fffff880`0d788be0 fffff960`00157564 : 00000000`08011553 fffff880`0d788ce0 00000000`00000000 00000000`00000000 : win32k!bDeleteDCInternal+0x98
fffff880`0d788c30 fffff800`02eddfd3 : fffffa80`0a204b60 fffff880`0d788ce0 00000000`0185000f 00000000`00000001 : win32k!NtGdiDeleteObjectApp+0x120
fffff880`0d788c60 000007fe`fef0108a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0d788c60)
00000000`00ece1d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fef0108a
start end module name
fffff800`00b9f000 fffff800`00ba9000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff800`02e19000 fffff800`02e62000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff800`02e62000 fffff800`0344a000 nt ntkrnlmp.exe Sat Nov 19 07:15:14 2011 (4EC79DD2)
fffff880`00c00000 fffff880`00cc0000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`00cc0000 fffff880`00cda000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`00cda000 fffff880`00ce3000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ce3000 fffff880`00cf7000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00cfb000 fffff880`00d08000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`00d08000 fffff880`00d1c000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00d1c000 fffff880`00d7a000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d7a000 fffff880`00da4000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`00da4000 fffff880`00daf000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`00daf000 fffff880`00dfb000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`00e01000 fffff880`00ea5000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea5000 fffff880`00eb4000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00eb4000 fffff880`00f0b000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`00f0b000 fffff880`00f14000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f14000 fffff880`00f1e000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f1e000 fffff880`00f51000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00f51000 fffff880`00f5e000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00f5e000 fffff880`00f73000 partmgr partmgr.sys Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f73000 fffff880`00f88000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00f88000 fffff880`00fe4000 volmgrx volmgrx.sys unavailable (00000000)
fffff880`00fe4000 fffff880`00feb000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00feb000 fffff880`00ffb000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01021000 fffff880`011c4000 Ntfs Ntfs.sys Thu Mar 10 22:39:39 2011 (4D79997B)
fffff880`01200000 fffff880`0120d000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0120d000 fffff880`01296000 afd afd.sys Tue Dec 27 22:59:20 2011 (4EFA9418)
fffff880`012a3000 fffff880`01301000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`01301000 fffff880`0131c000 ksecdd ksecdd.sys Wed Nov 16 22:48:13 2011 (4EC483FD)
fffff880`0131c000 fffff880`0138e000 cng cng.sys Wed Nov 16 23:23:17 2011 (4EC48C35)
fffff880`0138e000 fffff880`0139f000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0139f000 fffff880`013a9000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`013a9000 fffff880`013b2000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`013b2000 fffff880`013bb000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`013bb000 fffff880`013c6000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`013c6000 fffff880`013d7000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013d7000 fffff880`013f9000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`01460000 fffff880`0148b000 ksecpkg ksecpkg.sys Wed Nov 16 23:23:44 2011 (4EC48C50)
fffff880`0148b000 fffff880`014bc000 MpFilter MpFilter.sys Wed Apr 06 16:07:29 2011 (4D9CC801)
fffff880`014bc000 fffff880`014c5000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`014c6000 fffff880`015b9000 ndis ndis.sys Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`015b9000 fffff880`015c7000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`015c7000 fffff880`015ec000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015ec000 fffff880`015fc000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`01600000 fffff880`01616000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01616000 fffff880`01646000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`0167c000 fffff880`016a6000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`016a6000 fffff880`016af000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`016af000 fffff880`016b6000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`016bc000 fffff880`018c0000 tcpip tcpip.sys Wed Sep 28 23:43:04 2011 (4E83E948)
fffff880`018c0000 fffff880`0190a000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`0190a000 fffff880`0191a000 vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`0191a000 fffff880`01966000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`01966000 fffff880`0196e000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0196e000 fffff880`019a8000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`019a8000 fffff880`019ba000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`019ba000 fffff880`019c3000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`019c3000 fffff880`019fd000 fvevol fvevol.sys Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`04000000 fffff880`0401a000 AtihdW76 AtihdW76.sys Tue Dec 06 04:14:25 2011 (4EDDDCF1)
fffff880`0403c000 fffff880`04081000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`04081000 fffff880`0408a000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`0408a000 fffff880`040b0000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`040b0000 fffff880`040bf000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`040bf000 fffff880`040dc000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`040dc000 fffff880`040f7000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`040f7000 fffff880`0410b000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`0410b000 fffff880`0415c000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`0415c000 fffff880`04168000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`04168000 fffff880`04173000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`04173000 fffff880`04182000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`04182000 fffff880`041dc000 usbhub usbhub.sys Thu Mar 24 23:29:25 2011 (4D8C0C15)
fffff880`041dc000 fffff880`041f1000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`04200000 fffff880`04255000 atikmpag atikmpag.sys Thu Mar 08 22:58:02 2012 (4F597FCA)
fffff880`04255000 fffff880`0426f000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0426f000 fffff880`0427e000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0427e000 fffff880`0428d000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0428d000 fffff880`042a1000 amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`042a1000 fffff880`042b3000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`042b3000 fffff880`042be000 flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`042c7000 fffff880`0434a000 csc csc.sys Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`0434a000 fffff880`04368000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04368000 fffff880`04379000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04379000 fffff880`0439f000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`0439f000 fffff880`043b4000 amdppm amdppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`043b4000 fffff880`043f7000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`04400000 fffff880`04432000 Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`04432000 fffff880`04470000 1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`04470000 fffff880`0447b000 usbohci usbohci.sys Thu Mar 24 23:29:03 2011 (4D8C0BFF)
fffff880`0447b000 fffff880`04487000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04488000 fffff880`0457c000 dxgkrnl dxgkrnl.sys Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`0457c000 fffff880`045c2000 dxgmms1 dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`045c2000 fffff880`045e6000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`045e6000 fffff880`045f7000 usbehci usbehci.sys Thu Mar 24 23:29:04 2011 (4D8C0C00)
fffff880`045f7000 fffff880`045ff000 ASACPI ASACPI.sys Sun Mar 27 22:30:36 2005 (42476C4C)
fffff880`04623000 fffff880`046ec000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`046ec000 fffff880`0470a000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
fffff880`0470a000 fffff880`04722000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04722000 fffff880`0474f000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`0474f000 fffff880`0479d000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`0479d000 fffff880`047c1000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`047c1000 fffff880`047f2000 AODDriver2 AODDriver2.sys Mon Dec 19 02:30:03 2011 (4EEEE7FB)
fffff880`04800000 fffff880`04824000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04824000 fffff880`04830000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04830000 fffff880`0485f000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`0485f000 fffff880`0487a000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0487a000 fffff880`04885000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`04885000 fffff880`04886480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0488d000 fffff880`0534c000 atikmdag atikmdag.sys Thu Mar 08 23:04:49 2012 (4F598161)
fffff880`0534c000 fffff880`053a2000 USBPORT USBPORT.SYS Thu Mar 24 23:29:12 2011 (4D8C0C08)
fffff880`053a2000 fffff880`053af000 fdc fdc.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`053af000 fffff880`053b8000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`053b8000 fffff880`053c8000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`053c8000 fffff880`053de000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`053de000 fffff880`053ff000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0546d000 fffff880`05513000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05513000 fffff880`0551e000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0551e000 fffff880`0554f000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`0554f000 fffff880`05561000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`05561000 fffff880`055ca000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`0603f000 fffff880`0607c000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`0607c000 fffff880`0609e000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0609e000 fffff880`060a3200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`060a4000 fffff880`060c1000 usbccgp usbccgp.sys Thu Mar 24 23:29:14 2011 (4D8C0C0A)
fffff880`060c1000 fffff880`060dc000 USBSTOR USBSTOR.SYS Thu Mar 10 23:37:16 2011 (4D79A6FC)
fffff880`060dc000 fffff880`060f5000 HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`060f5000 fffff880`060fd080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`060fe000 fffff880`0610c000 kbdhid kbdhid.sys Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`0610c000 fffff880`06126c80 usbaudio usbaudio.sys Sat Nov 20 05:43:52 2010 (4CE7A668)
fffff880`06127000 fffff880`06134000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`06134000 fffff880`06142000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`06142000 fffff880`06165000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`06165000 fffff880`0617a000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0617a000 fffff880`06192000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06400000 fffff880`06409000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06409000 fffff880`0641c000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0641c000 fffff880`0641df00 USBD USBD.SYS Thu Mar 24 23:28:59 2011 (4D8C0BFB)
fffff880`0641e000 fffff880`0642c000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`0642d000 fffff880`065d9900 RTKVHD64 RTKVHD64.sys Fri May 22 14:04:20 2009 (4A16E924)
fffff880`065da000 fffff880`065e6000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`065e6000 fffff880`065f4000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`065f4000 fffff880`06600000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07039000 fffff880`070d1000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`070d1000 fffff880`070e1000 MpNWMon MpNWMon.sys Wed Apr 06 16:07:23 2011 (4D9CC7FB)
fffff880`070e1000 fffff880`070f9000 NisDrvWFP NisDrvWFP.sys Wed Apr 06 16:08:53 2011 (4D9CC855)
fffff880`070f9000 fffff880`0712f000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff960`000d0000 fffff960`003e5000 win32k win32k.sys Thu Feb 02 23:34:05 2012 (4F2B63BD)
fffff960`00580000 fffff960`0058a000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`007d0000 fffff960`007f7000 cdd cdd.dll Sat Nov 20 07:55:34 2010 (4CE7C546)

Unloaded modules:
fffff880`01646000 fffff880`01654000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`01654000 fffff880`01660000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`01660000 fffff880`01669000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`01669000 fffff880`0167c000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
Closing open log file c:debuglog.txt








That last one, as I've just remembered, actually happened while I was clicking my shutdown button. I don't know if that's relevant info, but I'm just putting it out there.

One last thing I forgot to mention is that as one of my efforts to fix the problem, I updated my BIOs. Didn't help. Again, unsure of the relevancy, but I'm trying to provide as much info as possible.

Thank you again so much for taking the time to help me, I don't know what else to do. They're not CONSTANT crashes, but they're definitely frequent enough to cause headaches.

 

Alright, I set up my system specs and enabled it in my profile, so you should be able to see it now.

I did notice something very odd regarding my RAM when I was going through SIW though- I'll paste it here for you.





Property Value
USER-PC
Memory Summary Wrong values reported by BIOS
Memory Type DDR3
Installed Memory 8192 MBytes
Available Memory 8191 MBytes
Channels Dual
Maximum Capacity 8192 MBytes
Maximum Memory Module Size [unknown]
Memory Slots 4
Error Correction None
Memory Timings
DRAM Frequency 668.9 MHz
CAS# Latency (CL) 9.0
RAS# to CAS# Delay (tRCD) 9
RAS# Prechange (tRP) 9
Cycle Time (tRAS) 25
Command Rate 1T


Device Locator Slot 1
Memory Type DDR3 [PC3-8500F]
Manufacturer Corsair
Model CMX8GX3M2A1333C9
Serial Number [unknown]
Capacity 4096 MBytes
Speed 533 MHz (533 x 2 = 1066)
Manufacturing Date [unknown]
EPP SPD Support No
XMP SPD Support Yes (Version 18)
Supported Frequencies 457 MHz, 533 MHz, 609 MHz, 685 MHz, 667 MHz
Memory Timings
JEDEC #1 6.0-6-6-18-24 at 457 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
JEDEC #2 7.0-7-7-20-27 at 533 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
JEDEC #3 8.0-8-8-23-31 at 609 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
JEDEC #4 9.0-9-9-26-35 at 685 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
XMP-1334 9.0-10-10-25- at 667 MHz, at 1.600 V Volts (CL-RCD-RP-RAS-RC)


Device Locator Slot 2
Memory Type DDR3 [PC3-8500F]
Manufacturer Corsair
Model CMX8GX3M2A1333C9
Serial Number [unknown]
Capacity 4096 MBytes
Speed 533 MHz (533 x 2 = 1066)
Manufacturing Date [unknown]
EPP SPD Support No
XMP SPD Support Yes (Version 18)
Supported Frequencies 457 MHz, 533 MHz, 609 MHz, 685 MHz, 667 MHz
Memory Timings
JEDEC #1 6.0-6-6-18-24 at 457 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
JEDEC #2 7.0-7-7-20-27 at 533 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
JEDEC #3 8.0-8-8-23-31 at 609 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
JEDEC #4 9.0-9-9-26-35 at 685 MHz, at 1.5 Volts (CL-RCD-RP-RAS-RC)
XMP-1334 9.0-10-10-25- at 667 MHz, at 1.600 V Volts (CL-RCD-RP-RAS-RC)





This seems...quite wrong. Well first of all there's the whole "wrong values reported by BIOs" thing...and then there's also the fact that the listed supported frequencies are well below what my ram actually is - 1333. What exactly is going on here? I had noticed this in memtest earlier (the slower frequency) but I chalked it up to just being the speed at which it was testing or something like that...Hmm...

 

Well I know I checked this before I bought the parts, but just to be sure, I went back and checked the RAM/mobo compatibility, and it should work fine.

From Asus's website's memory specs for my mobo:


4 x DIMM, Max. 16 GB, DDR3 1600(O.C.)/1333/1066 ECC,Non-ECC,Un-buffered Memory
Dual Channel memory architecture
*AMD AM3 100 and 200 series CPU support up to DDR3 1066MHz


and it's definitely dual channel 1333 RAM...

There shouldn't be any compatibility issues at all, unless I'm missing something here...


*Edit*

I decided to check Asus's QVL and corsair's configurator and I think you may be right - there may be a compatibility issue here, since my RAM isn't listed on either of them. Now I feel dumb...

The trick now would be finding compatible RAM that's actually in stock somewhere...sigh.

Thanks again for your help, I'll update the thread once I figure out what I'm going to do here.

 

Just a quick update - the new RAM I ordered arrived (and this time I checked for compatibility with my mobo on the manufacturer's site beforehand!)and so far, it seems to be fixed. SIW is still giving me "wrong values reported by BIOs" but the frequency and timing is correct now, and I haven't had a single problem all day. Time will tell, so fingers crossed.

Thanks again for the help.

 

I had already updated my BIOs when I was trying to figure out what was wrong, so it's up to date. I'm thinking it's just a quirk with SIW since google turns up a LOT of people getting the same thing. I'm going to ignore it for now.

Computer's been running perfectly for 2 days now, so I'm thinking it's fixed! I hope I didn't tempt fate by saying that though, haha.