[SOLVED] Random BSOD Need Help in the causes Reports/Zips - Windows 7 x64

[JasynVulgore]

Here are the files as requested.

The operating system is Windows 7 64 Bit
Video card is Nvideo GeForce GT 730
I have had this pc since 2011, and have only replace the video card and powersupply which is 500 watts.
This desktop pc was built and came barebones and the OS was purchased. I am not sure of the model numbver but the motherboard is manufactured by Biostar.

 

[Patrick]

1: kd> .bugcheck
Bugcheck code 00000050
Arguments ffffffff`fffffff7 00000000`00000000 fffff800`035f2123 00000000`00000000

Address ffffffff`fffffff7 was written to by the instruction at address fffff800`035f2123.

1: kd> r cr2
cr2=fffffffffffffff7

AFAIK the faulted address is stored by the processor in cr2 in x64 as well, not just x86. This confirms it, sort of.

1: kd> !pte fffffffffffffff7
                                           VA fffffffffffffff7
PXE at FFFFF6FB7DBEDFF8    PPE at FFFFF6FB7DBFFFF8    PDE at FFFFF6FB7FFFFFF8    PTE at FFFFF6FFFFFFFFF8
Unable to get PXE FFFFF6FB7DBEDFF8

Can't really do anything with a minidump in this case.

1: kd> kv
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`02fe1878 fffff800`0353cbf0 : 00000000`00000050 ffffffff`fffffff7 00000000`00000000 fffff880`02fe19e0 : nt!KeBugCheckEx
fffff880`02fe1880 fffff800`034bccee : 00000000`00000000 ffffffff`fffffff7 00000000`00000000 fffff8a0`02f0b380 : nt! ?? ::FNODOBFM::`string'+0x4518f
fffff880`02fe19e0 fffff800`035f2123 : fffffa80`05200040 fffff800`0348e44d fffff800`036c48a0 00000000`2ae0e07c : nt!KiPageFault+0x16e (TrapFrame @ fffff880`02fe19e0)
fffff880`02fe1b70 fffff800`037a453f : fffff800`036c4800 00000000`13c2c56a fffff8a0`01da4010 fffffa80`00000000 : nt!ExFreePoolWithTag+0x43
fffff880`02fe1c20 fffff800`037a311e : fffff8a0`02f0b380 00000000`7fd8c540 fffff8a0`01da4010 00000000`00000000 : nt!CmpFreeKeyControlBlock+0x123
fffff880`02fe1c50 fffff800`034c8261 : fffff800`036642d8 fffffa80`05200040 00000000`00000000 48000200`00000657 : nt!CmpDelayDerefKCBWorker+0x33e
fffff880`02fe1cb0 fffff800`0375a73a : ff772647`ffffff4f fffffa80`05200040 00000000`00000080 fffffa80`051f19e0 : nt!ExpWorkerThread+0x111
fffff880`02fe1d40 fffff800`034af8e6 : fffff880`009eb180 fffffa80`05200040 fffff880`009f5f40 fd951cb7`feff5d7d : nt!PspSystemThreadStartup+0x5a
fffff880`02fe1d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16

1: kd> .trap fffff880`02fe19e0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000007
rdx=00000000624e4d43 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800035f2123 rsp=fffff88002fe1b70 rbp=ffffffffffffffff
 r8=0000000000000002  r9=0000000008a33132 r10=fffff8a002f0b258
r11=fffffa8005200040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
nt!ExFreePoolWithTag+0x43:
fffff800`035f2123 418b45f0        mov     eax,dword ptr [r13-10h] ds:ffffffff`fffffff0=????????

Looking at the trapframe regarding the exception which inevitably threw the bug check, we can see r13 was dereferenced and is null (non-volatile register). Due to this, the write address turns out to be ffffffff`fffffff0.

Looks like RAM to me, but get rid of this driver first...

1: kd> lmvm bios64
start             end                 module name
fffff880`06cf8000 fffff880`06d00000   BIOS64     (deferred)             
    Image path: \??\C:\Windows\system32\drivers\BIOS64.sys
    Image name: BIOS64.sys
    Timestamp:        Sat Jun 07 20:12:00 2003

2003? LOL

Navigate to its path and rename it from .sys to .old, then restart to break it.

 

[JasynVulgore]

Will renaming this file corrupt the system in any kind of way?

 

[Patrick]

No.