Solved BSOD query

nicado · Jun 23, 2011

Having a problem with recurring random BSODs, hoping for some assistance with diagnosis please.

See attached for Windows_NT6_BSOD_jcgriff2 folder and perfmon report. Note that the perfmon report was created after removing (what I think was) a defective RAM module, so it will show the system being low on memory. The BSOD error was for page fault in nonpaged area.

I suspect it's a defective RAM module, because the mobo has a memory check feature (flashing red LED on boot if memory problems) that showed an error after one of the BSODs - could have been present for all of them, but I only noticed on the last one. Anyway, I tested each of the two RAM modules and removed one that returned the error. The system seems more stable now and has been free of BSODs, but if there's a way to diagnose it then I'd like to be sure that it was the RAM - the main hardware is relatively new, so I wasn't expecting problems there.

System details:
- Vista Ultimate x64, reinstalled OS, full retail version
- age of hardware varies - mobo, CPU and RAM are about 9 months old. HDDs, graphics card and others are older.
- age of OS installation is about 8 months.
- everything else is probably in the attached Windows_NT6_BSOD_jcgriff2 folder, but I can send more details if needed.

Any help is very much appreciated.

richc46 · Jun 23, 2011

Code:

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Windows_NT6_BSOD_jcgriff2 (1).zip\Windows_NT6_BSOD_jcgriff2\Mini052711-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18327.amd64fre.vistasp2_gdr.101014-0432
Machine Name:
Kernel base = 0xfffff800`02a53000 PsLoadedModuleList = 0xfffff800`02c17dd0
Debug session time: Thu May 26 18:47:59.399 2011 (GMT-4)
System Uptime: 0 days 0:00:35.070
Loading Kernel Symbols
...............................................................
................................................................
....
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1, {77876cba, 0, fffe, fffffa60063c8ca0}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+209 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them.  A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 0000000077876cba, address of system function (system call)
Arg2: 0000000000000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 000000000000fffe, Thread->KernelApcDisable
Arg4: fffffa60063c8ca0, Previous KernelApcDisable
Debugging Details:
------------------
 
FAULTING_IP: 
+0
00000000`77876cba ??              ???
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x1
PROCESS_NAME:  services.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff80002aad22e to fffff80002aad490
STACK_TEXT:  
fffffa60`063c8ad8 fffff800`02aad22e : 00000000`00000001 00000000`77876cba 00000000`00000000 00000000`0000fffe : nt!KeBugCheckEx
fffffa60`063c8ae0 fffff800`02aad144 : 00000000`0031f388 fffffa60`00080000 00000000`0031f430 00000000`00000000 : nt!KiBugCheckDispatch+0x6e
fffffa60`063c8c20 00000000`77876cba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x209
00000000`0031f348 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77876cba
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!KiSystemServiceExit+209
fffff800`02aad144 4883ec50        sub     rsp,50h
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  nt!KiSystemServiceExit+209
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4cb7275f
FAILURE_BUCKET_ID:  X64_0x1_nt!KiSystemServiceExit+209
BUCKET_ID:  X64_0x1_nt!KiSystemServiceExit+209
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them.  A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 0000000077876cba, address of system function (system call)
Arg2: 0000000000000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 000000000000fffe, Thread->KernelApcDisable
Arg4: fffffa60063c8ca0, Previous KernelApcDisable
Debugging Details:
------------------
 
FAULTING_IP: 
+0
00000000`77876cba ??              ???
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x1
PROCESS_NAME:  services.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff80002aad22e to fffff80002aad490
STACK_TEXT:  
fffffa60`063c8ad8 fffff800`02aad22e : 00000000`00000001 00000000`77876cba 00000000`00000000 00000000`0000fffe : nt!KeBugCheckEx
fffffa60`063c8ae0 fffff800`02aad144 : 00000000`0031f388 fffffa60`00080000 00000000`0031f430 00000000`00000000 : nt!KiBugCheckDispatch+0x6e
fffffa60`063c8c20 00000000`77876cba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x209
00000000`0031f348 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77876cba
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!KiSystemServiceExit+209
fffff800`02aad144 4883ec50        sub     rsp,50h
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  nt!KiSystemServiceExit+209
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4cb7275f
FAILURE_BUCKET_ID:  X64_0x1_nt!KiSystemServiceExit+209
BUCKET_ID:  X64_0x1_nt!KiSystemServiceExit+209
Followup: MachineOwner
---------
1: kd> lmtsmn
start             end                 module name
fffffa60`04b82000 fffffa60`04b91f00   1394BUS  1394BUS.SYS  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`0080c000 fffffa60`00862000   acpi     acpi.sys     Sat Apr 11 01:03:26 2009 (49E0249E)
fffffa60`07205000 fffffa60`07270000   afd      afd.sys      Sat Apr 11 01:44:21 2009 (49E02E35)
fffffa60`05842000 fffffa60`05856000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffffa60`055f6000 fffffa60`055fe000   [B]ASACPI   ASACPI.sys   Mon Oct 30 22:09:12 2006[/B] (4546B048)
fffffa60`07270000 fffffa60`0727a000   aswRdr   aswRdr.SYS   Thu Jan 13 03:37:32 2011 (4D2EB9CC)
fffffa60`0599e000 fffffa60`059e7000   aswSP    aswSP.SYS    Thu Jan 13 03:41:42 2011 (4D2EBAC6)
fffffa60`06ddb000 fffffa60`06deb000   aswTdi   aswTdi.SYS   Thu Jan 13 03:40:19 2011 (4D2EBA73)
fffffa60`009ac000 fffffa60`009b4000   atapi    atapi.sys    Sat Apr 11 01:34:19 2009 (49E02BDB)
fffffa60`009b4000 fffffa60`009d8000   ataport  ataport.SYS  Sat Apr 11 01:34:25 2009 (49E02BE1)
fffffa60`058f2000 fffffa60`05912000   AtihdLH6 AtihdLH6.sys Wed Nov 17 07:01:27 2010 (4CE3C417)
fffffa60`04c02000 fffffa60`05439000   atikmdag atikmdag.sys Tue Jan 04 21:48:52 2011 (4D23DC14)
fffffa60`04a0d000 fffffa60`04a5a000   atikmpag atikmpag.sys Tue Jan 04 21:19:38 2011 (4D23D53A)
fffffa60`011f7000 fffffa60`011ff000   AtiPcie  AtiPcie.sys  Tue May 05 11:00:22 2009 (4A005486)
fffffa60`06c07000 fffffa60`06ceea00   CamDrL64 CamDrL64.sys Sat Feb 03 13:17:27 2007 (45C4D1B7)
fffff960`00650000 fffff960`00661000   cdd      cdd.dll      unavailable (00000000)
fffffa60`055cd000 fffffa60`055e9000   cdrom    cdrom.sys    Sat Apr 11 01:34:39 2009 (49E02BEF)
fffffa60`0067b000 fffffa60`0072d000   CI       CI.dll       Sat Apr 11 03:08:09 2009 (49E041D9)
fffffa60`00dcf000 fffffa60`00dfb000   CLASSPNP CLASSPNP.SYS Sat Apr 11 01:34:15 2009 (49E02BD7)
fffffa60`0061e000 fffffa60`0067b000   CLFS     CLFS.SYS     Sat Apr 11 00:54:21 2009 (49E0227D)
fffffa60`0744f000 fffffa60`0745d000   crashdmp crashdmp.sys Sat Apr 11 01:34:31 2009 (49E02BE7)
fffffa60`00c00000 fffffa60`00c0a000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`0735f000 fffffa60`073d5000   csc      csc.sys      Sat Apr 11 00:56:24 2009 (49E022F8)
fffffa60`073d5000 fffffa60`073f2000   dfsc     dfsc.sys     Sat Apr 11 00:54:44 2009 (49E02294)
fffffa60`011e3000 fffffa60`011f7000   disk     disk.sys     Sat Apr 11 01:34:38 2009 (49E02BEE)
fffffa60`0594d000 fffffa60`05970000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`07469000 fffffa60`07471000   dump_atapi dump_atapi.sys Sat Apr 11 01:34:19 2009 (49E02BDB)
fffffa60`0745d000 fffffa60`07469000   dump_dumpata dump_dumpata.sys Sat Apr 11 01:34:22 2009 (49E02BDE)
fffffa60`07471000 fffffa60`07484000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:52:25 2008 (47919019)
fffffa60`07484000 fffffa60`07490000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`05439000 fffffa60`0551c000   dxgkrnl  dxgkrnl.sys  Thu Jan 20 09:09:42 2011 (4D384226)
fffffa60`00fa5000 fffffa60`00fd1000   ecache   ecache.sys   Sat Apr 11 01:36:18 2009 (49E02C52)
fffffa60`00a4d000 fffffa60`00a61000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`00a06000 fffffa60`00a4d000   fltmgr   fltmgr.sys   Sat Apr 11 00:54:38 2009 (49E0228E)
fffffa60`06d41000 fffffa60`06d4b000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`00fd1000 fffffa60`00ffa000   fvevol   fvevol.sys   Sat Apr 11 00:52:54 2009 (49E02226)
fffffa60`00f79000 fffffa60`00fa5000   fwpkclnt fwpkclnt.sys Sat Apr 11 01:42:44 2009 (49E02DD4)
fffffa60`055e9000 fffffa60`055f6000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02a0d000 fffff800`02a53000   hal      hal.dll      Sat Apr 11 03:04:56 2009 (49E04118)
fffffa60`04a5a000 fffffa60`04b47000   HDAudBus HDAudBus.sys Sat Apr 11 01:39:38 2009 (49E02D1A)
fffffa60`06d11000 fffffa60`06d23000   HIDCLASS HIDCLASS.SYS Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`06d23000 fffffa60`06d2ab80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`06d08000 fffffa60`06d11000   hidusb   hidusb.sys   Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`0094b000 fffffa60`0096b000   jraid    jraid.sys    Mon Jan 11 06:28:18 2010 (4B4B0B52)
fffffa60`057f0000 fffffa60`057fe000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`06d2b000 fffffa60`06d36000   kbdhid   kbdhid.sys   Sat Apr 11 01:33:40 2009 (49E02BB4)
fffffa60`00600000 fffffa60`0060a000   kdcom    kdcom.dll    Thu Feb 24 11:04:07 2011 (4D668177)
fffffa60`0580e000 fffffa60`05842000   ks       ks.sys       Sat Apr 11 01:33:51 2009 (49E02BBF)
fffffa60`00a61000 fffffa60`00ae8000   ksecdd   ksecdd.sys   Mon Jun 15 09:15:18 2009 (4A364966)
fffffa60`05970000 fffffa60`05975180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`06be8000 fffffa60`06bf4980   LVUSBS64 LVUSBS64.sys Sat Feb 03 13:05:16 2007 (45C4CEDC)
fffffa60`07490000 fffffa60`074a3000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`05600000 fffffa60`0560c000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`06d36000 fffffa60`06d41000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`00999000 fffffa60`009ac000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`06d99000 fffffa60`06da4000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`0086b000 fffffa60`00875000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`0560d000 fffffa60`05646000   msiscsi  msiscsi.sys  Sat Apr 11 01:36:09 2009 (49E02C49)
fffffa60`00ae8000 fffffa60`00b38000   msrpc    msrpc.sys    Sat Apr 11 01:32:13 2009 (49E02B5D)
fffffa60`05856000 fffffa60`05861000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`011d1000 fffffa60`011e3000   mup      mup.sys      Sat Apr 11 00:54:47 2009 (49E02297)
fffffa60`00c0c000 fffffa60`00dcf000   ndis     ndis.sys     Sat Apr 11 01:43:15 2009 (49E02DF3)
fffffa60`056d3000 fffffa60`056df000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`056df000 fffffa60`05710000   ndiswan  ndiswan.sys  Sat Apr 11 01:43:39 2009 (49E02E0B)
fffffa60`058d1000 fffffa60`058e5000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`072dc000 fffffa60`072eb000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`0727a000 fffffa60`072be000   netbt    netbt.sys    Sat Apr 11 01:42:31 2009 (49E02DC7)
fffffa60`00b38000 fffffa60`00b91000   NETIO    NETIO.SYS    Sat Apr 11 01:43:34 2009 (49E02E06)
fffffa60`06da4000 fffffa60`06db5000   Npfs     Npfs.SYS     Sat Apr 11 00:54:22 2009 (49E0227E)
fffffa60`07353000 fffffa60`0735f000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffff800`02a53000 fffff800`02f6b000   nt       ntkrnlmp.exe Thu Oct 14 11:53:03 2010 (4CB7275F)
fffffa60`01005000 fffffa60`01185000   Ntfs     Ntfs.sys     Sat Apr 11 00:55:38 2009 (49E022CA)
fffffa60`06d4b000 fffffa60`06d54000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`05871000 fffffa60`05889000   nusb3hub nusb3hub.sys Thu Jan 21 22:22:18 2010 (4B5919EA)
fffffa60`0552c000 fffffa60`0555c000   nusb3xhc nusb3xhc.sys Thu Jan 21 22:22:21 2010 (4B5919ED)
fffffa60`04b70000 fffffa60`04b81b00   ohci1394 ohci1394.sys Sat Apr 11 01:39:49 2009 (49E02D25)
fffffa60`072be000 fffffa60`072dc000   pacer    pacer.sys    Sat Apr 11 01:42:56 2009 (49E02DE0)
fffffa60`008a5000 fffffa60`008ba000   partmgr  partmgr.sys  Sat Apr 11 01:34:51 2009 (49E02BFB)
fffffa60`00875000 fffffa60`008a5000   pci      pci.sys      Sat Apr 11 01:03:33 2009 (49E024A5)
fffffa60`00934000 fffffa60`0093b000   pciide   pciide.sys   Sat Apr 11 01:34:28 2009 (49E02BE4)
fffffa60`0093b000 fffffa60`0094b000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 01:34:22 2009 (49E02BDE)
fffffa60`05912000 fffffa60`0594d000   portcls  portcls.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`00bdb000 fffffa60`00bee000   processr processr.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`0060a000 fffffa60`0061e000   PSHED    PSHED.dll    Sat Apr 11 03:08:17 2009 (49E041E1)
fffffa60`06db5000 fffffa60`06dbe000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`056b0000 fffffa60`056d3000   rasl2tp  rasl2tp.sys  Sat Apr 11 01:43:37 2009 (49E02E09)
fffffa60`05710000 fffffa60`05720000   raspppoe raspppoe.sys Sat Apr 11 01:43:33 2009 (49E02E05)
fffffa60`05720000 fffffa60`0573e000   raspptp  raspptp.sys  Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`0573e000 fffffa60`05756000   rassstp  rassstp.sys  Sat Apr 11 01:43:46 2009 (49E02E12)
fffffa60`07306000 fffffa60`07353000   rdbss    rdbss.sys    Sat Apr 11 00:55:21 2009 (49E022B9)
fffffa60`06d87000 fffffa60`06d90000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`05756000 fffffa60`057f0000   rdpdr    rdpdr.sys    Sat Apr 11 01:49:54 2009 (49E02F82)
fffffa60`06d90000 fffffa60`06d99000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`04b92000 fffffa60`04bde000   Rtlh64   Rtlh64.sys   Mon Feb 08 22:53:28 2010 (4B70DC38)
fffffa60`0096b000 fffffa60`00999000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`04b64000 fffffa60`04b70000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`04b47000 fffffa60`04b64000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`05983000 fffffa60`0599e000   smb      smb.sys      Sat Apr 11 01:42:19 2009 (49E02DBB)
fffffa60`011c9000 fffffa60`011d1000   spldr    spldr.sys    Mon Jan 12 16:51:29 2009 (496BBB61)
fffffa60`05646000 fffffa60`056a3000   storport storport.sys Sat Apr 11 01:34:45 2009 (49E02BF5)
fffffa60`057fe000 fffffa60`057ff480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`00e03000 fffffa60`00f79000   tcpip    tcpip.sys    Wed Jun 16 10:51:56 2010 (4C18E50C)
fffffa60`056a3000 fffffa60`056b0000   TDI      TDI.SYS      Sat Apr 11 01:44:14 2009 (49E02E2E)
fffffa60`06dbe000 fffffa60`06ddb000   tdx      tdx.sys      Sat Apr 11 01:43:00 2009 (49E02DE4)
fffffa60`04be7000 fffffa60`04bfa000   termdd   termdd.sys   Sat Apr 11 01:48:13 2009 (49E02F1D)
fffff960`00480000 fffff960`0048a000   TSDDD    TSDDD.dll    Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`00bd2000 fffffa60`00bdb000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`00bc6000 fffffa60`00bd2000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`07401000 fffffa60`0744f000   udfs     udfs.sys     Sat Apr 11 00:54:21 2009 (49E0227D)
fffffa60`05861000 fffffa60`05871000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`06cef000 fffffa60`06d07280   usbaudio usbaudio.sys Sat Apr 11 01:39:34 2009 (49E02D16)
fffffa60`06bb4000 fffffa60`06bd0000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`0555c000 fffffa60`0555de00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`055bc000 fffffa60`055cd000   usbehci  usbehci.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`0555e000 fffffa60`0556b000   usbfilter usbfilter.sys Wed Oct 07 03:44:08 2009 (4ACC46C8)
fffffa60`05889000 fffffa60`058d1000   usbhub   usbhub.sys   Sat Apr 11 01:39:52 2009 (49E02D28)
fffffa60`0556b000 fffffa60`05576000   usbohci  usbohci.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`05576000 fffffa60`055bc000   USBPORT  USBPORT.SYS  Sat Apr 11 01:39:39 2009 (49E02D1B)
fffffa60`06bd0000 fffffa60`06be8000   USBSTOR  USBSTOR.SYS  Sat Apr 11 01:39:38 2009 (49E02D1A)
fffffa60`06d54000 fffffa60`06d62000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`06a03000 fffffa60`06bb4000   viahduaa viahduaa.sys Tue Mar 02 06:30:18 2010 (4B8CF6CA)
fffffa60`06d62000 fffffa60`06d87000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`008ba000 fffffa60`008ce000   volmgr   volmgr.sys   Sat Apr 11 01:34:49 2009 (49E02BF9)
fffffa60`008ce000 fffffa60`00934000   volmgrx  volmgrx.sys  Sat Apr 11 01:35:14 2009 (49E02C12)
fffffa60`01185000 fffffa60`011c9000   volsnap  volsnap.sys  Sat Apr 11 01:35:33 2009 (49E02C25)
fffffa60`072eb000 fffffa60`07306000   wanarp   wanarp.sys   Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`0551c000 fffffa60`0552c000   watchdog watchdog.sys Sat Apr 11 01:09:16 2009 (49E025FC)
fffffa60`0072d000 fffffa60`007d1000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffffa60`007d1000 fffffa60`007e0000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff960`000b0000 fffff960`00366000   win32k   win32k.sys   Thu Mar 03 08:46:14 2011 (4D6F9BA6)
fffffa60`04bde000 fffffa60`04be7000   wmiacpi  wmiacpi.sys  Sat Jan 19 01:02:42 2008 (47919282)
fffffa60`00862000 fffffa60`0086b000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)

I will start off by saying the cause of your BSOD is rare, to say the least. It has a code of 00000000001, which I have not seen before. There is very little written on it.
I do know that the most common cause is a driver and we can give you a test for that. The test is a "pain". It can, also be memory. Here is the memory test that you requested.
Guide to using Memtest86+ - Geeks to Go Forums

I have included one of your dump reports. One of the drivers shown is known to cause BSODs, I have bolded it.

Please visit thislink: ASUSTeK Computer Inc.-Support- Drivers and Download P7P55D LE
Scroll down to the Utilities category, then scroll down to the "ATK0110driver for WindowsXP/Vista/Windows 7 32&64-bit" (it's about the12th item down).
Download and install it.
Go to C:\Windows\System32\drivers to check and make sure that the ASACPI.sysfile is date stamped from 2009 or 2010 (NOT 2005).

nicado · Jun 27, 2011

Thanks very much Richard. I'll run Memtest86+ in a few days and report back (too many family users to tie it up right now). Funny, more PCs in the house than people, but this is the one that causes distress when it's off.

Is the driver "ATK0110driver for WindowsXP/Vista/Windows 7 32&64-bit" to be additional or does it replace another driver that I should uninstall first?

Also, just to be sure, my motherboard is ASUS model M4A87TD EVO, but the driver you suggested is for model P7P55D LE. Still go ahead?

Thanks again for your time and your help. Much appreciated.

richc46 · Jun 27, 2011

It replaces an old driver that you have, that is known to cause BSODs. If you update, the old one should automatically be replaced.
Right now go to search by the go button
type cmd
in cmd type driverquery. You should be able to see that driver and the date. After you update, check again, the date should be current. The date,now is 2006.

Download the driver that is correct for you model.

nicado · Jul 13, 2011

OK some updates:

Got another BSOD on 12th July: Windows_NT6_BSOD_jcgriff2 dump and perfmon report attached.

I had already updated the ATK0110 driver and ran Memtest86+, which reported no errors, so it's probably not the RAM chip like first suspected.

Now I think it might be something to do with the memory controller on the mobo/CPU or possibly just with DIMM slot DIMM_A1. I Purchased new memory anyway (always nice to have more) and got the same mobo memory test error with the brand new RAM installed (flashing red light on boot). I moved the two new RAM chips to channel B and left channel A empty and it has been OK since then, except for the BSOD. The mobo error has only ever been observed with DIMM_A1 occupied, error-free when empty, so maybe a problem there?

The mobo, RAM and CPU are less than a year old and still under warranty, so I'd like to be able to send one/all back if they can be confirmed as the source of the problems.

Please can you check the latest BSOD dump attached and shed some light?

Thanks again.

richc46 · Jul 13, 2011

Sorry the latest BSOD is of no help as no additional information was given.
A this point new BSODs are of little value. Based upon our tests we know that there is a memory problem. There can ony be two sources of the problem. It can be the sticks or the slots. Your tests, seem to point to the slots. This can be caused by bad mother board, necessary bios adjustments (such as memory remapping the bios, bios updates etc.) or possibly other reasons. BSOD reports do not go any further than to say its memory.
You could download and try cpu-z for timing and clocking issues, but basically the most I can do is answer questions at this point.

nicado · Aug 28, 2011

OK just wrapping this one up. The problem was with the motherboard.

Same error repeated with all DIMMs, but I couldn't diagnose further. Could have been the mobo or the memory controller on the CPU. I sent both back to the retailer (by the way, excellent service from mwave.com.au). I never found out what was the actual problem, but they confirmed the CPU was OK and sent back a new motherboard, so back in action.

Solved BSOD query

nicado

New Member

My Computer

System One

richc46

My Computer

System One

nicado

New Member

My Computer

System One

richc46

My Computer

System One

nicado

New Member

My Computer

System One

richc46

My Computer

System One

nicado

New Member

My Computer

System One