Jump to content

blue screen need some help

Darkk Abud
By Darkk Abud
in Troubleshooting
 Share
Posted

hi guys i really need help last week i get a blue screen of the death error 0x50,  i alredy clean the memory ram, didnt install new hardware i test the ram all ok but im keeping have the blue screen idk what else i need to do, i also format the hd new windows 7 sp1 ultimate instalation, install all new drivers windows update and i keep have the error, im searching on internet some answers but no 1 help me

 

 

my cpu

 

mother board gigabyte GA-P55-UD6

 

intel core i7 

 i7-800 series

 

hd 6870 amd ati radeon

 

6gb ram 1600 kingstom ddr3

 

500 gb hd

 

post-108099-0-83639100-1408730021_thumb.

Link to comment
https://linustechtips.com/topic/202164-blue-screen-need-some-help/
Share on other sites
Link to post
Share on other sites
Posted

Post the minidump. It is located under the directory "%SystemRoot%\Minidump." The dump file should have a similar syntax to: "mini022900-01.dmp". Any additional minidump files created will be given a distinct name, which contains the date of the crash in the filename.

Right click and send all the dmp files to the desktop, zip them, and attach it to your post.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted
  • Author

Post the minidump. It is located under the directory "%SystemRoot%\Minidump." The dump file should have a similar syntax to: "mini022900-01.dmp". Any additional minidump files created will be given a distinct name, which contains the date of the crash in the filename.

Right click and send all the dmp files to the desktop, zip them, and attach it to your post.

well i check the minidump and they have a 2 of red mark i unistall that drivers but im still have a problem now when i wanna play a game like LOL  they crash idk if its my video card or my mother board :(

Link to post
Share on other sites
Posted

well i check the minidump and they have a 2 of red mark i unistall that drivers but im still have a problem now when i wanna play a game like LOL  they crash idk if its my video card or my mother board :(

You weren't supposed to delete them. They contain information on why the BSOD occured. If you get a chance post them here please.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted

ya sure

Considering I wrote the BSOD guide here: http://linustechtips.com/main/topic/96083-how-to-diagnose-bsods-blue-screen/

Yes I am sure...

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted
  • Author

there is it the files, and yea i read that befor i post it but nathing help me no on my screen when i put a online video there apper some green lines gonna put a photo

 

mmm i cant upload the file says Error You aren't permitted to upload this kind of file and its a .rar

Link to post
Share on other sites
Posted

there is it the files, and yea i read that befor i post it but nathing help me no on my screen when i put a online video there apper some green lines gonna put a photo

 

mmm i cant upload the file says Error You aren't permitted to upload this kind of file and its a .rar

Use a ZIP archive, not a RAR file.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted

alredy try whit a zip and nathing gonna try again

Maybe try Google Drive, Dropbox, One Drive, or Mega.

 

PS: At the moment uploading archive files to the forum is disabled.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted

i up the link whit the files this link its an image of when i saw a video on full screen they apper idk y https://mega.co.nz/#!vZRSBSrS!vZM0184_aKCEwBxqKihMWZyQfcziM7zzEjuK11DXm20

Ahh. That would be do to the GPU drivers. Make sure you have the latest driver from: http://support.amd.com/en-us/download

Are you overclocking the GPU by any chance? 

 

Also, do you still have the dump files located under "%SystemRoot%\Minidump" ?

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted
  • Author

yes i still have the minidumps and its the latest driver i download from the amddriverdownloader automatic check the gpu and download the lates drivers 

 

and no i never overlock the gpu maybe the cpu but to low from 2.8 to 3.0 and today its on 2.8 cause i format the pc

Link to post
Share on other sites
Posted

yes i still have the minidumps and its the latest driver i download from the amddriverdownloader automatic check the gpu and download the lates drivers 

 

and no i never overlock the gpu maybe the cpu but to low from 2.8 to 3.0 and today its on 2.8 cause i format the pc

Can you please upload the minidumps? You can right click and send them to the desktop. Not you cannot zip them from System folder, you can do that once you copy them to your desktop.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted
  • Author

Can you please upload the minidumps? You can right click and send them to the desktop. Not you cannot zip them from System folder, you can do that once you copy them to your desktop.

on the link i posted on mega there is it the minidumps https://mega.co.nz/#!SJZD3aTT!tCyg-feCWJzZiiHcbjfEikF6aqp2tbqNSFk5_a8dL8Q

Link to post
Share on other sites
Posted

on the link i posted on mega there is it the minidumps https://mega.co.nz/#!SJZD3aTT!tCyg-feCWJzZiiHcbjfEikF6aqp2tbqNSFk5_a8dL8Q

Can you please re-upload the file. Mega states there was an error, your upload may have been interrupted.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted

Perfect give me 30 minutes to go through them, I'll post back with my findings.

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted

Ok. So 7 out 8 of the BSODs were caused by your network driver. This driver is 'athurx.sys' and belongs from an Atheros network interface (most likely WiFi).

Can you go in device manager and post the Hardware ID of the Atheros network. Here is an example of what it should look like:

4Ad8YWp.png

 

 

081914-22666-01.dmp

081914-24991-01.dmp

082114-25209-01.dmp

082114-40591-01.dmp

082114-51308-01.dmp

082314-26317-01.dmp

082414-29998-01.dmp

082514-37502-01.dmp

Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`02a55000 PsLoadedModuleList = 0xfffff800`02c92e50Debug session time: Tue Aug 19 22:14:09.079 2014 (UTC - 4:00)System Uptime: 0 days 0:39:01.496********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cfd0e0GetUlongFromAddress: unable to read from fffff80002cfd198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880076659e0 -- (.trap 0xfffff880076659e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=000005f500000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88007665b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff80002a55000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff80002b461e4 to fffff80002ac6f00STACK_TEXT:  fffff880`07665878 fffff800`02b461e4 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`076659e0 : nt!KeBugCheckExfffff880`07665880 fffff800`02ac4fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`076659e0 fffff800`0000fb0f : 00000000`404e0089 fffff880`02eb73bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`07665b70 00000000`404e0089 : fffff880`02eb73bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fb0ffffff880`07665b78 fffff880`02eb73bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x404e0089fffff880`07665b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`07665b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`041b0030 : 0xfffffa80`00000000fffff880`07665b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`041b0030 00000000`00000001 : 0x4048fffff880`07665b98 00000000`00000000 : 00000000`00000000 fffffa80`041b0030 00000000`00000001 fffffa80`03711040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`02eb73bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`0284a000 PsLoadedModuleList = 0xfffff800`02a87e50Debug session time: Tue Aug 19 21:24:50.259 2014 (UTC - 4:00)System Uptime: 0 days 0:03:36.289********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff80000000000, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff80000000000, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002af20e0GetUlongFromAddress: unable to read from fffff80002af2198 fffff80000000000 Nonpaged poolFAULTING_IP: +0fffff800`00000000 ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880048f09e0 -- (.trap 0xfffff880048f09e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000008c00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff80000000000 rsp=fffff880048f0b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff8000284a000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`00000000 ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff8000293b1e4 to fffff800028bbf00STACK_TEXT:  fffff880`048f0878 fffff800`0293b1e4 : 00000000`00000050 fffff800`00000000 00000000`00000008 fffff880`048f09e0 : nt!KeBugCheckExfffff880`048f0880 fffff800`028b9fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`048f09e0 fffff800`00000000 : 000003a0`40280089 fffff880`02cb53bb fffffa80`00000000 0000001a`00004048 : nt!KiPageFault+0x16efffff880`048f0b70 000003a0`40280089 : fffff880`02cb53bb fffffa80`00000000 0000001a`00004048 fffff880`00000000 : 0xfffff800`00000000fffff880`048f0b78 fffff880`02cb53bb : fffffa80`00000000 0000001a`00004048 fffff880`00000000 00000000`00000000 : 0x3a0`40280089fffff880`048f0b80 fffffa80`00000000 : 0000001a`00004048 fffff880`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`048f0b88 0000001a`00004048 : fffff880`00000000 00000000`00000000 00000000`00000000 fffffa80`05809030 : 0xfffffa80`00000000fffff880`048f0b90 fffff880`00000000 : 00000000`00000000 00000000`00000000 fffffa80`05809030 00000000`00000001 : 0x1a`00004048fffff880`048f0b98 00000000`00000000 : 00000000`00000000 fffffa80`05809030 00000000`00000001 fffffa80`036cb040 : 0xfffff880`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`02cb53bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`03212000 PsLoadedModuleList = 0xfffff800`0344fe50Debug session time: Thu Aug 21 11:11:11.075 2014 (UTC - 4:00)System Uptime: 0 days 0:02:09.090********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fbcf, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fbcf, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034ba0e0GetUlongFromAddress: unable to read from fffff800034ba198 fffff8000000fbcf Nonpaged poolFAULTING_IP: +0fffff800`0000fbcf ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880078199e0 -- (.trap 0xfffff880078199e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000005400000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fbcf rsp=fffff88007819b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff80003212000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fbcf ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800033031e4 to fffff80003283f00STACK_TEXT:  fffff880`07819878 fffff800`033031e4 : 00000000`00000050 fffff800`0000fbcf 00000000`00000008 fffff880`078199e0 : nt!KeBugCheckExfffff880`07819880 fffff800`03281fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`078199e0 fffff800`0000fbcf : 00000000`40520089 fffff880`076c13bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`07819b70 00000000`40520089 : fffff880`076c13bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fbcffffff880`07819b78 fffff880`076c13bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x40520089fffff880`07819b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`07819b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`081ca030 : 0xfffffa80`00000000fffff880`07819b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`081ca030 00000000`00000001 : 0x4048fffff880`07819b98 00000000`00000000 : 00000000`00000000 fffffa80`081ca030 00000000`00000001 fffffa80`04ee8040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`076c13bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`0320e000 PsLoadedModuleList = 0xfffff800`0344be50Debug session time: Thu Aug 21 20:06:10.249 2014 (UTC - 4:00)System Uptime: 0 days 0:08:07.264********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b60e0GetUlongFromAddress: unable to read from fffff800034b6198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff88002f8e9e0 -- (.trap 0xfffff88002f8e9e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000013d00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88002f8eb70 rbp=0000000000000000 r8=000000000001b72c  r9=0000000000000000 r10=0000000000000000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800032ff1e4 to fffff8000327ff00STACK_TEXT:  fffff880`02f8e878 fffff800`032ff1e4 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`02f8e9e0 : nt!KeBugCheckExfffff880`02f8e880 fffff800`0327dfee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`02f8e9e0 fffff800`0000fb0f : 3eb0d462`40020089 fffff880`060a23bb fffffa80`00000000 fffff880`00004048 : nt!KiPageFault+0x16efffff880`02f8eb70 3eb0d462`40020089 : fffff880`060a23bb fffffa80`00000000 fffff880`00004048 fffff880`00000000 : 0xfffff800`0000fb0ffffff880`02f8eb78 fffff880`060a23bb : fffffa80`00000000 fffff880`00004048 fffff880`00000000 00000000`00000000 : 0x3eb0d462`40020089fffff880`02f8eb80 fffffa80`00000000 : fffff880`00004048 fffff880`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`02f8eb88 fffff880`00004048 : fffff880`00000000 00000000`00000000 00000000`00000000 fffffa80`072eb030 : 0xfffffa80`00000000fffff880`02f8eb90 fffff880`00000000 : 00000000`00000000 00000000`00000000 fffffa80`072eb030 00000000`00000001 : 0xfffff880`00004048fffff880`02f8eb98 00000000`00000000 : 00000000`00000000 fffffa80`072eb030 00000000`00000001 fffffa80`04ee8040 : 0xfffff880`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`060a23bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`03218000 PsLoadedModuleList = 0xfffff800`03455e50Debug session time: Thu Aug 21 20:27:36.905 2014 (UTC - 4:00)System Uptime: 0 days 0:19:57.919********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034c00e0GetUlongFromAddress: unable to read from fffff800034c0198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50CURRENT_IRQL:  0TRAP_FRAME:  fffff88007bf09e0 -- (.trap 0xfffff88007bf09e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000030c00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88007bf0b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff80003218000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800033091e4 to fffff80003289f00STACK_TEXT:  fffff880`07bf0878 fffff800`033091e4 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`07bf09e0 : nt!KeBugCheckExfffff880`07bf0880 fffff800`03287fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`07bf09e0 fffff800`0000fb0f : 4075f553`40f50089 fffff880`07cc03bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`07bf0b70 4075f553`40f50089 : fffff880`07cc03bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fb0ffffff880`07bf0b78 fffff880`07cc03bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x4075f553`40f50089fffff880`07bf0b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`07cc03bbfffff880`07bf0b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`085c5030 : 0xfffffa80`00000000fffff880`07bf0b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`085c5030 00000000`00000001 : 0x4048fffff880`07bf0b98 00000000`00000000 : 00000000`00000000 fffffa80`085c5030 00000000`00000001 fffffa80`04f02040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+42907fffff800`033091e4 cc              int     3SYMBOL_STACK_INDEX:  1SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+42907FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600FAILURE_BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+42907BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+42907Followup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.17273.amd64fre.win7_gdr.130318-1532Machine Name:Kernel base = 0xfffff800`0320d000 PsLoadedModuleList = 0xfffff800`03449e70Debug session time: Sat Aug 23 20:25:51.850 2014 (UTC - 4:00)System Uptime: 0 days 0:26:08.021********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b40e0GetUlongFromAddress: unable to read from fffff800034b4198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff88008dc79e0 -- (.trap 0xfffff88008dc79e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=000003fd00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88008dc7b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800032fc694 to fffff8000327c880STACK_TEXT:  fffff880`08dc7878 fffff800`032fc694 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`08dc79e0 : nt!KeBugCheckExfffff880`08dc7880 fffff800`0327a96e : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x41db7fffff880`08dc79e0 fffff800`0000fb0f : 00000000`40a10089 fffff880`092b03bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`08dc7b70 00000000`40a10089 : fffff880`092b03bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fb0ffffff880`08dc7b78 fffff880`092b03bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x40a10089fffff880`08dc7b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`08dc7b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`04241030 : 0xfffffa80`00000000fffff880`08dc7b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`04241030 00000000`00000001 : 0x4048fffff880`08dc7b98 00000000`00000000 : 00000000`00000000 fffffa80`04241030 00000000`00000001 fffffa80`036cc040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`092b03bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.17273.amd64fre.win7_gdr.130318-1532Machine Name:Kernel base = 0xfffff800`03253000 PsLoadedModuleList = 0xfffff800`0348fe70Debug session time: Sun Aug 24 16:11:51.408 2014 (UTC - 4:00)System Uptime: 0 days 0:04:37.589********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fbcf, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fbcf, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034fa0e0GetUlongFromAddress: unable to read from fffff800034fa198 fffff8000000fbcf Nonpaged poolFAULTING_IP: +0fffff800`0000fbcf ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880085149e0 -- (.trap 0xfffff880085149e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000000000187000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fbcf rsp=fffff88008514b70 rbp=0000000000000000 r8=fffffa80036cc0c8  r9=0000000000000000 r10=fffffffffffffffer11=fffffa8003c34660 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fbcf ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff80003342694 to fffff800032c2880STACK_TEXT:  fffff880`08514878 fffff800`03342694 : 00000000`00000050 fffff800`0000fbcf 00000000`00000008 fffff880`085149e0 : nt!KeBugCheckExfffff880`08514880 fffff800`032c096e : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x41db7fffff880`085149e0 fffff800`0000fbcf : 00000000`40820089 fffff880`086c13bb fffffa80`00000000 fffff880`00004048 : nt!KiPageFault+0x16efffff880`08514b70 00000000`40820089 : fffff880`086c13bb fffffa80`00000000 fffff880`00004048 fffff800`00000000 : 0xfffff800`0000fbcffffff880`08514b78 fffff880`086c13bb : fffffa80`00000000 fffff880`00004048 fffff800`00000000 00000000`00000000 : 0x40820089fffff880`08514b80 fffffa80`00000000 : fffff880`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`08514b88 fffff880`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`06bcd030 : 0xfffffa80`00000000fffff880`08514b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`06bcd030 00000000`00000001 : 0xfffff880`00004048fffff880`08514b98 00000000`00000000 : 00000000`00000000 fffffa80`06bcd030 00000000`00000001 fffffa80`036cc040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`086c13bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.17273.amd64fre.win7_gdr.130318-1532Machine Name:Kernel base = 0xfffff800`03205000 PsLoadedModuleList = 0xfffff800`03441e70Debug session time: Sun Aug 24 18:55:35.996 2014 (UTC - 4:00)System Uptime: 0 days 0:35:08.151********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)This is a very common bugcheck.  Usually the exception address pinpointsthe driver/function that caused the problem.  Always note this addressas well as the link date of the driver/image that contains this address.Some common problems are exception code 0x80000003.  This means a hardcoded breakpoint or assertion was hit, but this system was booted/NODEBUG.  This is not supposed to happen as developers should never havehardcoded breakpoints in retail code, but ...If this happens, make sure a debugger gets connected, and thesystem is booted /DEBUG.  This will let us see why this breakpoint ishappening.Arguments:Arg1: ffffffffc0000005, The exception code that was not handledArg2: fffff80005000008, The address that the exception occurred atArg3: fffff8800614a938, Exception Record AddressArg4: fffff8800614a1a0, Context Record AddressDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: +9f3bbfffff800`05000008 d04b0f          ror     byte ptr [rbx+0Fh],1EXCEPTION_RECORD:  fffff8800614a938 -- (.exr 0xfffff8800614a938)ExceptionAddress: fffff80005000008   ExceptionCode: c0000005 (Access violation)  ExceptionFlags: 00000000NumberParameters: 2   Parameter[0]: 0000000000000001   Parameter[1]: 00000000ffffffdcAttempt to write to address 00000000ffffffdcCONTEXT:  fffff8800614a1a0 -- (.cxr 0xfffff8800614a1a0)rax=0000000000000000 rbx=00000000ffffffcd rcx=0000000000000000rdx=0000000040e00089 rsi=fffff8800614ac40 rdi=fffffa80055ddb60rip=fffff80005000008 rsp=fffff8800614ab78 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000r11=0000000000000000 r12=0000000000000000 r13=fffff88002c0ceb0r14=0000000000000000 r15=fffffa80055ddc68iopl=0         nv up ei pl nz na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206fffff800`05000008 d04b0f          ror     byte ptr [rbx+0Fh],1 ds:002b:00000000`ffffffdc=??Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  0ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_PARAMETER1:  0000000000000001EXCEPTION_PARAMETER2:  00000000ffffffdcWRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034ac0e0GetUlongFromAddress: unable to read from fffff800034ac198 00000000ffffffdc Nonpaged poolFOLLOWUP_IP: athurx+9f3bbfffff880`02ca53bb ??              ???BUGCHECK_STR:  0x7ELAST_CONTROL_TRANSFER:  from fffff88002ca53bb to fffff80005000008STACK_TEXT:  fffff880`0614ab78 fffff880`02ca53bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0xfffff800`05000008fffff880`0614ab80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`0614ab88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`054f0030 : 0xfffffa80`00000000fffff880`0614ab90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`054f0030 00000000`00000001 : 0x4048fffff880`0614ab98 00000000`00000000 : 00000000`00000000 fffffa80`054f0030 00000000`00000001 fffffa80`036e7040 : 0xfffff800`00000000SYMBOL_STACK_INDEX:  1SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071STACK_COMMAND:  .cxr 0xfffff8800614a1a0 ; kbFAILURE_BUCKET_ID:  X64_0x7E_athurx+9f3bbBUCKET_ID:  X64_0x7E_athurx+9f3bbFollowup: MachineOwner 

▶ Learn from yesterday, live for today, hope for tomorrow. The important thing is not to stop questioning. - Einstein◀

Please remember to mark a thread as solved if your issue has been fixed, it helps other who may stumble across the thread at a later point in time.

Link to post
Share on other sites
Posted
  • Author

Ok. So 7 out 8 of the BSODs were caused by your network driver. This driver is 'athurx.sys' and belongs from an Atheros network interface (most likely WiFi).

Can you go in device manager and post the Hardware ID of the Atheros network. Here is an example of what it should look like:

4Ad8YWp.png

 

 

081914-22666-01.dmp

081914-24991-01.dmp

082114-25209-01.dmp

082114-40591-01.dmp

082114-51308-01.dmp

082314-26317-01.dmp

082414-29998-01.dmp

082514-37502-01.dmp

Posted A minute ago

actually i unistall that driver and ndsi or something like that from ethernet adapter i just have now 

 

and if u see there are the green lines that i told u before

Attached Thumbnails
  • post-108099-0-74029800-1409112537_thumb.
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`02a55000 PsLoadedModuleList = 0xfffff800`02c92e50Debug session time: Tue Aug 19 22:14:09.079 2014 (UTC - 4:00)System Uptime: 0 days 0:39:01.496********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cfd0e0GetUlongFromAddress: unable to read from fffff80002cfd198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880076659e0 -- (.trap 0xfffff880076659e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=000005f500000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88007665b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff80002a55000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff80002b461e4 to fffff80002ac6f00STACK_TEXT:  fffff880`07665878 fffff800`02b461e4 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`076659e0 : nt!KeBugCheckExfffff880`07665880 fffff800`02ac4fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`076659e0 fffff800`0000fb0f : 00000000`404e0089 fffff880`02eb73bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`07665b70 00000000`404e0089 : fffff880`02eb73bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fb0ffffff880`07665b78 fffff880`02eb73bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x404e0089fffff880`07665b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`07665b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`041b0030 : 0xfffffa80`00000000fffff880`07665b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`041b0030 00000000`00000001 : 0x4048fffff880`07665b98 00000000`00000000 : 00000000`00000000 fffffa80`041b0030 00000000`00000001 fffffa80`03711040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`02eb73bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`0284a000 PsLoadedModuleList = 0xfffff800`02a87e50Debug session time: Tue Aug 19 21:24:50.259 2014 (UTC - 4:00)System Uptime: 0 days 0:03:36.289********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff80000000000, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff80000000000, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002af20e0GetUlongFromAddress: unable to read from fffff80002af2198 fffff80000000000 Nonpaged poolFAULTING_IP: +0fffff800`00000000 ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880048f09e0 -- (.trap 0xfffff880048f09e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000008c00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff80000000000 rsp=fffff880048f0b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff8000284a000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`00000000 ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff8000293b1e4 to fffff800028bbf00STACK_TEXT:  fffff880`048f0878 fffff800`0293b1e4 : 00000000`00000050 fffff800`00000000 00000000`00000008 fffff880`048f09e0 : nt!KeBugCheckExfffff880`048f0880 fffff800`028b9fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`048f09e0 fffff800`00000000 : 000003a0`40280089 fffff880`02cb53bb fffffa80`00000000 0000001a`00004048 : nt!KiPageFault+0x16efffff880`048f0b70 000003a0`40280089 : fffff880`02cb53bb fffffa80`00000000 0000001a`00004048 fffff880`00000000 : 0xfffff800`00000000fffff880`048f0b78 fffff880`02cb53bb : fffffa80`00000000 0000001a`00004048 fffff880`00000000 00000000`00000000 : 0x3a0`40280089fffff880`048f0b80 fffffa80`00000000 : 0000001a`00004048 fffff880`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`048f0b88 0000001a`00004048 : fffff880`00000000 00000000`00000000 00000000`00000000 fffffa80`05809030 : 0xfffffa80`00000000fffff880`048f0b90 fffff880`00000000 : 00000000`00000000 00000000`00000000 fffffa80`05809030 00000000`00000001 : 0x1a`00004048fffff880`048f0b98 00000000`00000000 : 00000000`00000000 fffffa80`05809030 00000000`00000001 fffffa80`036cb040 : 0xfffff880`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`02cb53bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`03212000 PsLoadedModuleList = 0xfffff800`0344fe50Debug session time: Thu Aug 21 11:11:11.075 2014 (UTC - 4:00)System Uptime: 0 days 0:02:09.090********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fbcf, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fbcf, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034ba0e0GetUlongFromAddress: unable to read from fffff800034ba198 fffff8000000fbcf Nonpaged poolFAULTING_IP: +0fffff800`0000fbcf ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880078199e0 -- (.trap 0xfffff880078199e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000005400000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fbcf rsp=fffff88007819b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff80003212000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fbcf ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800033031e4 to fffff80003283f00STACK_TEXT:  fffff880`07819878 fffff800`033031e4 : 00000000`00000050 fffff800`0000fbcf 00000000`00000008 fffff880`078199e0 : nt!KeBugCheckExfffff880`07819880 fffff800`03281fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`078199e0 fffff800`0000fbcf : 00000000`40520089 fffff880`076c13bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`07819b70 00000000`40520089 : fffff880`076c13bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fbcffffff880`07819b78 fffff880`076c13bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x40520089fffff880`07819b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`07819b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`081ca030 : 0xfffffa80`00000000fffff880`07819b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`081ca030 00000000`00000001 : 0x4048fffff880`07819b98 00000000`00000000 : 00000000`00000000 fffffa80`081ca030 00000000`00000001 fffffa80`04ee8040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`076c13bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`0320e000 PsLoadedModuleList = 0xfffff800`0344be50Debug session time: Thu Aug 21 20:06:10.249 2014 (UTC - 4:00)System Uptime: 0 days 0:08:07.264********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b60e0GetUlongFromAddress: unable to read from fffff800034b6198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff88002f8e9e0 -- (.trap 0xfffff88002f8e9e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000013d00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88002f8eb70 rbp=0000000000000000 r8=000000000001b72c  r9=0000000000000000 r10=0000000000000000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800032ff1e4 to fffff8000327ff00STACK_TEXT:  fffff880`02f8e878 fffff800`032ff1e4 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`02f8e9e0 : nt!KeBugCheckExfffff880`02f8e880 fffff800`0327dfee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`02f8e9e0 fffff800`0000fb0f : 3eb0d462`40020089 fffff880`060a23bb fffffa80`00000000 fffff880`00004048 : nt!KiPageFault+0x16efffff880`02f8eb70 3eb0d462`40020089 : fffff880`060a23bb fffffa80`00000000 fffff880`00004048 fffff880`00000000 : 0xfffff800`0000fb0ffffff880`02f8eb78 fffff880`060a23bb : fffffa80`00000000 fffff880`00004048 fffff880`00000000 00000000`00000000 : 0x3eb0d462`40020089fffff880`02f8eb80 fffffa80`00000000 : fffff880`00004048 fffff880`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`02f8eb88 fffff880`00004048 : fffff880`00000000 00000000`00000000 00000000`00000000 fffffa80`072eb030 : 0xfffffa80`00000000fffff880`02f8eb90 fffff880`00000000 : 00000000`00000000 00000000`00000000 fffffa80`072eb030 00000000`00000001 : 0xfffff880`00004048fffff880`02f8eb98 00000000`00000000 : 00000000`00000000 fffffa80`072eb030 00000000`00000001 fffffa80`04ee8040 : 0xfffff880`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`060a23bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.16385.amd64fre.win7_rtm.090713-1255Machine Name:Kernel base = 0xfffff800`03218000 PsLoadedModuleList = 0xfffff800`03455e50Debug session time: Thu Aug 21 20:27:36.905 2014 (UTC - 4:00)System Uptime: 0 days 0:19:57.919********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034c00e0GetUlongFromAddress: unable to read from fffff800034c0198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50CURRENT_IRQL:  0TRAP_FRAME:  fffff88007bf09e0 -- (.trap 0xfffff88007bf09e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000030c00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88007bf0b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000f44 r10=fffff80003218000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800033091e4 to fffff80003289f00STACK_TEXT:  fffff880`07bf0878 fffff800`033091e4 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`07bf09e0 : nt!KeBugCheckExfffff880`07bf0880 fffff800`03287fee : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x42907fffff880`07bf09e0 fffff800`0000fb0f : 4075f553`40f50089 fffff880`07cc03bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`07bf0b70 4075f553`40f50089 : fffff880`07cc03bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fb0ffffff880`07bf0b78 fffff880`07cc03bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x4075f553`40f50089fffff880`07bf0b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`07cc03bbfffff880`07bf0b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`085c5030 : 0xfffffa80`00000000fffff880`07bf0b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`085c5030 00000000`00000001 : 0x4048fffff880`07bf0b98 00000000`00000000 : 00000000`00000000 fffffa80`085c5030 00000000`00000001 fffffa80`04f02040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+42907fffff800`033091e4 cc              int     3SYMBOL_STACK_INDEX:  1SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+42907FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600FAILURE_BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+42907BUCKET_ID:  X64_0x50_nt!_??_::FNODOBFM::_string_+42907Followup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.17273.amd64fre.win7_gdr.130318-1532Machine Name:Kernel base = 0xfffff800`0320d000 PsLoadedModuleList = 0xfffff800`03449e70Debug session time: Sat Aug 23 20:25:51.850 2014 (UTC - 4:00)System Uptime: 0 days 0:26:08.021********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fb0f, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fb0f, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b40e0GetUlongFromAddress: unable to read from fffff800034b4198 fffff8000000fb0f Nonpaged poolFAULTING_IP: +0fffff800`0000fb0f ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff88008dc79e0 -- (.trap 0xfffff88008dc79e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=000003fd00000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fb0f rsp=fffff88008dc7b70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000r11=0000000000000000 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fb0f ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800032fc694 to fffff8000327c880STACK_TEXT:  fffff880`08dc7878 fffff800`032fc694 : 00000000`00000050 fffff800`0000fb0f 00000000`00000008 fffff880`08dc79e0 : nt!KeBugCheckExfffff880`08dc7880 fffff800`0327a96e : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x41db7fffff880`08dc79e0 fffff800`0000fb0f : 00000000`40a10089 fffff880`092b03bb fffffa80`00000000 00000000`00004048 : nt!KiPageFault+0x16efffff880`08dc7b70 00000000`40a10089 : fffff880`092b03bb fffffa80`00000000 00000000`00004048 fffff800`00000000 : 0xfffff800`0000fb0ffffff880`08dc7b78 fffff880`092b03bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0x40a10089fffff880`08dc7b80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`08dc7b88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`04241030 : 0xfffffa80`00000000fffff880`08dc7b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`04241030 00000000`00000001 : 0x4048fffff880`08dc7b98 00000000`00000000 : 00000000`00000000 fffffa80`04241030 00000000`00000001 fffffa80`036cc040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`092b03bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.17273.amd64fre.win7_gdr.130318-1532Machine Name:Kernel base = 0xfffff800`03253000 PsLoadedModuleList = 0xfffff800`0348fe70Debug session time: Sun Aug 24 16:11:51.408 2014 (UTC - 4:00)System Uptime: 0 days 0:04:37.589********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: fffff8000000fbcf, memory referenced.Arg2: 0000000000000008, value 0 = read operation, 1 = write operation.Arg3: fffff8000000fbcf, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000000, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034fa0e0GetUlongFromAddress: unable to read from fffff800034fa198 fffff8000000fbcf Nonpaged poolFAULTING_IP: +0fffff800`0000fbcf ??              ???MM_INTERNAL_CODE:  0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTBUGCHECK_STR:  0x50PROCESS_NAME:  SystemCURRENT_IRQL:  0TRAP_FRAME:  fffff880085149e0 -- (.trap 0xfffff880085149e0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000rdx=0000000000187000 rsi=0000000000000000 rdi=0000000000000000rip=fffff8000000fbcf rsp=fffff88008514b70 rbp=0000000000000000 r8=fffffa80036cc0c8  r9=0000000000000000 r10=fffffffffffffffer11=fffffa8003c34660 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe ncfffff800`0000fbcf ??              ???Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff80003342694 to fffff800032c2880STACK_TEXT:  fffff880`08514878 fffff800`03342694 : 00000000`00000050 fffff800`0000fbcf 00000000`00000008 fffff880`085149e0 : nt!KeBugCheckExfffff880`08514880 fffff800`032c096e : 00000000`00000008 00000000`00000000 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x41db7fffff880`085149e0 fffff800`0000fbcf : 00000000`40820089 fffff880`086c13bb fffffa80`00000000 fffff880`00004048 : nt!KiPageFault+0x16efffff880`08514b70 00000000`40820089 : fffff880`086c13bb fffffa80`00000000 fffff880`00004048 fffff800`00000000 : 0xfffff800`0000fbcffffff880`08514b78 fffff880`086c13bb : fffffa80`00000000 fffff880`00004048 fffff800`00000000 00000000`00000000 : 0x40820089fffff880`08514b80 fffffa80`00000000 : fffff880`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`08514b88 fffff880`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`06bcd030 : 0xfffffa80`00000000fffff880`08514b90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`06bcd030 00000000`00000001 : 0xfffff880`00004048fffff880`08514b98 00000000`00000000 : 00000000`00000000 fffffa80`06bcd030 00000000`00000001 fffffa80`036cc040 : 0xfffff800`00000000STACK_COMMAND:  kbFOLLOWUP_IP: athurx+9f3bbfffff880`086c13bb ??              ???SYMBOL_STACK_INDEX:  5SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071FAILURE_BUCKET_ID:  X64_0x50_athurx+9f3bbBUCKET_ID:  X64_0x50_athurx+9f3bbFollowup: MachineOwner 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7600.17273.amd64fre.win7_gdr.130318-1532Machine Name:Kernel base = 0xfffff800`03205000 PsLoadedModuleList = 0xfffff800`03441e70Debug session time: Sun Aug 24 18:55:35.996 2014 (UTC - 4:00)System Uptime: 0 days 0:35:08.151********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)This is a very common bugcheck.  Usually the exception address pinpointsthe driver/function that caused the problem.  Always note this addressas well as the link date of the driver/image that contains this address.Some common problems are exception code 0x80000003.  This means a hardcoded breakpoint or assertion was hit, but this system was booted/NODEBUG.  This is not supposed to happen as developers should never havehardcoded breakpoints in retail code, but ...If this happens, make sure a debugger gets connected, and thesystem is booted /DEBUG.  This will let us see why this breakpoint ishappening.Arguments:Arg1: ffffffffc0000005, The exception code that was not handledArg2: fffff80005000008, The address that the exception occurred atArg3: fffff8800614a938, Exception Record AddressArg4: fffff8800614a1a0, Context Record AddressDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: +9f3bbfffff800`05000008 d04b0f          ror     byte ptr [rbx+0Fh],1EXCEPTION_RECORD:  fffff8800614a938 -- (.exr 0xfffff8800614a938)ExceptionAddress: fffff80005000008   ExceptionCode: c0000005 (Access violation)  ExceptionFlags: 00000000NumberParameters: 2   Parameter[0]: 0000000000000001   Parameter[1]: 00000000ffffffdcAttempt to write to address 00000000ffffffdcCONTEXT:  fffff8800614a1a0 -- (.cxr 0xfffff8800614a1a0)rax=0000000000000000 rbx=00000000ffffffcd rcx=0000000000000000rdx=0000000040e00089 rsi=fffff8800614ac40 rdi=fffffa80055ddb60rip=fffff80005000008 rsp=fffff8800614ab78 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000r11=0000000000000000 r12=0000000000000000 r13=fffff88002c0ceb0r14=0000000000000000 r15=fffffa80055ddc68iopl=0         nv up ei pl nz na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206fffff800`05000008 d04b0f          ror     byte ptr [rbx+0Fh],1 ds:002b:00000000`ffffffdc=??Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  0ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_PARAMETER1:  0000000000000001EXCEPTION_PARAMETER2:  00000000ffffffdcWRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800034ac0e0GetUlongFromAddress: unable to read from fffff800034ac198 00000000ffffffdc Nonpaged poolFOLLOWUP_IP: athurx+9f3bbfffff880`02ca53bb ??              ???BUGCHECK_STR:  0x7ELAST_CONTROL_TRANSFER:  from fffff88002ca53bb to fffff80005000008STACK_TEXT:  fffff880`0614ab78 fffff880`02ca53bb : fffffa80`00000000 00000000`00004048 fffff800`00000000 00000000`00000000 : 0xfffff800`05000008fffff880`0614ab80 fffffa80`00000000 : 00000000`00004048 fffff800`00000000 00000000`00000000 00000000`00000000 : athurx+0x9f3bbfffff880`0614ab88 00000000`00004048 : fffff800`00000000 00000000`00000000 00000000`00000000 fffffa80`054f0030 : 0xfffffa80`00000000fffff880`0614ab90 fffff800`00000000 : 00000000`00000000 00000000`00000000 fffffa80`054f0030 00000000`00000001 : 0x4048fffff880`0614ab98 00000000`00000000 : 00000000`00000000 fffffa80`054f0030 00000000`00000001 fffffa80`036e7040 : 0xfffff800`00000000SYMBOL_STACK_INDEX:  1SYMBOL_NAME:  athurx+9f3bbFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: athurxIMAGE_NAME:  athurx.sysDEBUG_FLR_IMAGE_TIMESTAMP:  4daeb071STACK_COMMAND:  .cxr 0xfffff8800614a1a0 ; kbFAILURE_BUCKET_ID:  X64_0x7E_athurx+9f3bbBUCKET_ID:  X64_0x7E_athurx+9f3bbFollowup: MachineOwner 
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing Troubleshooting

×