Random yet recurring BSOD on Windows 8

bodhisurfs · Sep 7, 2013

Hello,
Within the past two or three weeks I have been receiving several BSOD with the same error stating "Attempted Write to Read Only Memory". I don't know of anything I'm doing on the computer that directly causes them, they have occurred when doing different things each time. I am worried that somehow my new HDD addition has somehow caused this in some creepy, chain reaction way? Prior to the clean install of W8 on this WD velociraptor I had never received any BSOD issues on the previous hard drive.
I have run an extended memory diagnostics through windows which came back with no issues, if that helps.
If I forgot something or if any other info or memory dumps are needed, please just let me know. Thank you for your time and your help!
-Bodhi

· OS - Windows 8 Pro
· x64
· Windows 8 Pro (clean install on new HDD)
· Full retail version
· custom built this myself last September, so about a year except for adding 2 additional hard drives
· Age of OS installation - performed clean install on (new) refurbished WD velociraptor HDD on 8/15/2013; previously ran a clean install of W8 from roughly january 2013 to 8/15 on old HDD. previous to that i had W7 Home Premium x64 installed. These BSOD issues are the first major problems of any kind I have had with this build.

· CPU - i5-3570k, no OC
· Video Card - GTX 560 Ti 448
· MotherBoard - Gigabyte Z77x-UD5h
· Power Supply - Seasonic 750W 80+ Gold

· System Manufacturer - me!
· Exact model number - custom built myself, so model #bodhi?

Patrick · Sep 8, 2013

Hi,

The attached DMP file is of the ATTEMPTED_WRITE_TO_READONLY_MEMORY (be) bugcheck.

A driver attempted to write to a read-only memory segment.

I'm not seeing a guilty driver on the call stack, so let's go ahead and enable Driver Verifier to search for possible device driver conflicts:

Driver Verifier:

What is Driver Verifier?

Driver Verifier is included in Windows 8, 7, Windows Server 2008 R2, Windows Vista, Windows Server 2008, Windows 2000, Windows XP, and Windows Server 2003 to promote stability and reliability; you can use this tool to troubleshoot driver issues. Windows kernel-mode components can cause system corruption or system failures as a result of an improperly written driver, such as an earlier version of a Windows Driver Model (WDM) driver.

Essentially, if there's a 3rd party driver believed to be at issue, enabling Driver Verifier will help flush out the rogue driver if it detects a violation.

Before enabling Driver Verifier, it is recommended to create a System Restore Point:

Vista - START | type rstrui - create a restore point
Windows 7 - START | type create | select "Create a Restore Point"
Windows 8 - Restore Point - Create in Windows 8

How to enable Driver Verifier:

Start > type "verifier" without the quotes > Select the following options -

1. Select - "Create custom settings (for code developers)"
2. Select - "Select individual settings from a full list"
3. Check the following boxes -
- Special Pool
- Pool Tracking
- Force IRQL Checking
- Deadlock Detection
- Security Checks (Windows 7)
- Concurrentcy Stress Test (Windows 8)
- DDI compliance checking (Windows 8)
- Miscellaneous Checks
4. Select - "Select driver names from a list"
5. Click on the "Provider" tab. This will sort all of the drivers by the provider.
6. Check EVERY box that is NOT provided by Microsoft / Microsoft Corporation.
7. Click on Finish.
8. Restart.

Important information regarding Driver Verifier:

- If Driver Verifier finds a violation, the system will BSOD.

- After enabling Driver Verifier and restarting the system, depending on the culprit, if for example the driver is on start-up, you may not be able to get back into normal Windows because Driver Verifier will flag it, and as stated above, that will cause / force a BSOD.

If this happens, do not panic, do the following:

- Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.

- Once in Safe Mode - Start > type "system restore" without the quotes.

- Choose the restore point you created earlier.
If you did not set up a restore point, do not worry, you can still disable Driver Verifier to get back into normal Windows:

- Start > Search > type "cmd" without the quotes.

- To turn off Driver Verifier, type in cmd "verifier /reset" without the quotes.
・ Restart and boot into normal Windows.

How long should I keep Driver Verifier enabled for?

It varies, many experts and analysts have different recommendations. Personally, I recommend keeping it enabled for at least 24 hours. If you don't BSOD by then, disable Driver Verifier.

My system BSOD'd, where can I find the crash dumps?

They will be located in %systemroot%\Minidump

Any other questions can most likely be answered by this article:
Using Driver Verifier to identify issues with Windows drivers for advanced users

Regards,

Patrick

jcgriff2 · Sep 8, 2013

bodhisurfs said:
. . .· Age of OS installation - performed clean install on (new) refurbished WD velociraptor HDD on 8/15/2013; previously ran a clean install of W8 from roughly january 2013 to 8/15 on old HDD.

Just curious. . .

Did you test (run diags) on the "new" HDD?

- run chkdsk /r on refurbished HDD
- run - https://www.sysnative.com/forums/hardware-tutorials/4072-hard-drive-hdd-diagnostics.html

Did the old HDD fail?

Please follow the instructions per Patrick's post.

Regards. . .

jcgriff2

bodhisurfs · Sep 8, 2013

to jcgriff2 - I honestly do not remember if I did or did not, which probably means I didn't. The old HDD was from 2009, retrieved it from my sisters old laptop when i scrapped it. I was using it as a test drive for W8 then I ended up never switching back. The drive never failed. It was a 320gb WD scorpio blue 2.5" sata2 drive with 3+ years of daily use while she lived at college, so I wasn't too keen on waiting to see how long it took until something went wrong with it. Sorry for the backstory, its 1am and I ramble a lot.
I am going to run a chkdsk now and then run the Seagate tools which I already burned.

Patrick - I had actually followed jcgriff2's guide (which was what you pasted in there I believe) and already enabled driver verifier earlier this evening. About 25 minutes ago I got a BSOD with "Driver Verifier Detected Violation", and it was within a couple of seconds of launching SpeedFan, which I use to monitor my CPU temps as well as my HDDs and GPU. SpeedFan only partially started during the crash, it was still "initializing" when everything went blue. I'm wondering if that could be part of the issue somehow? I have only used Speedfan with this current installation of W8 and it does correspond with the start of the BSOD syndrome.

I have also attached the memory dump from the minidump folder in a zip from the BSOD roughly 30 minutes ago now. To both of you and anyone else who may drop in, thank you very much for helping me out with all this.

Thank You,
Bodhi

jcgriff2 · Sep 8, 2013

Hi -

Driver Verifier flagged MBAM -

Code:

mbam.sys                    Thu Feb 28 15:33:07 2013 (512FBF03)

http://www.sysnative.com/drivers/driver.php?id=mbam.sys

Remove MBAM for now.

More importantly, did you perform a low-level format on the HDD before installing the current version of Windows?

If not, please do so using KillDisk - https://www.sysnative.com/forums/hardware-tutorials/449-format-hdd-low-level-format-killdisk.html

Then reinstall Windows onto the refurbished HDD (after performing chkdsk + SeaTools).

Regards. . .

jcgriff2

`

Code:

**************************Sun Sep  8 00:56:23.045 2013 (UTC - 4:00)**************************
Opened log file 'C:\Users\jcgriff2\AppData\Local\Temp\SysnativeBSODApps\30395\dmps\outkdOutput1.txt'

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\jcgriff2\SysnativeBSODApps\090813-12328-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: c:\symbols
Executable search path is: 
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9200.16628.amd64fre.win8_gdr.130531-1504
Machine Name:
Kernel base = 0xfffff800`4d471000 PsLoadedModuleList = 0xfffff800`4d73da20
Debug session time: Sun Sep  8 00:56:23.045 2013 (UTC - 4:00)
System Uptime: 0 days 2:16:47.719
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {62, fffffa800b5b63a8, fffffa800bdfe9a0, 1}

*** ERROR: Module load completed but symbols could not be loaded for mbam.sys
Probably caused by : mbam.sys

Followup: MachineOwner
---------

3: kd> !analyze -v; !sysinfo cpuspeed; !sysinfo SMBIOS; lmtsmn; q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000062, A driver has forgotten to free its pool allocations prior to unloading.
Arg2: fffffa800b5b63a8, name of the driver having the issue.
Arg3: fffffa800bdfe9a0, verifier internal structure with driver information.
Arg4: 0000000000000001, total # of (paged+nonpaged) allocations that weren't freed.
	Type !verifier 3 drivername.sys for info on the allocations
	that were leaked that caused the bugcheck.

Debugging Details:
------------------


BUGCHECK_STR:  0xc4_62

IMAGE_NAME:  mbam.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  512fbf03

MODULE_NAME: mbam

FAULTING_MODULE: fffff88007278000 mbam

VERIFIER_DRIVER_ENTRY: dt nt!_MI_VERIFIER_DRIVER_ENTRY fffffa800bdfe9a0
dt nt!_MI_VERIFIER_DRIVER_ENTRY fffffa800bdfe9a0
Symbol nt!_MI_VERIFIER_DRIVER_ENTRY not found.

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  services.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff8004dabb19c to fffff8004d4cb440

STACK_TEXT:  
fffff880`0a7c72f8 fffff800`4dabb19c : 00000000`000000c4 00000000`00000062 fffffa80`0b5b63a8 fffffa80`0bdfe9a0 : nt!KeBugCheckEx
fffff880`0a7c7300 fffff800`4dac1806 : 0000007f`fffffff8 fffff880`07278000 00000000`00000000 00000000`ffffffff : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`0a7c7340 fffff800`4d66d03b : 00000000`00000000 00000000`000031f0 0000007f`00000001 fffffa80`0bdfe930 : nt!VfPoolCheckForLeaks+0x4a
fffff880`0a7c7380 fffff800`4daadf46 : fffffa80`0b5b62f0 00000000`00000001 fffffa80`0b5b62f0 00000000`ffffffff : nt! ?? ::FNODOBFM::`string'+0x48fa2
fffff880`0a7c7400 fffff800`4d99478e : 00000000`00000000 fffff880`0a7c7800 fffffa80`0a3e8080 fffff800`4d8265e6 : nt!VfDriverUnloadImage+0x26
fffff880`0a7c7430 fffff800`4d994b20 : 00000000`00000010 fffffa80`0b5b62f0 fffff880`0a7c7800 00000000`00000018 : nt!MiUnloadSystemImage+0x182
fffff880`0a7c7490 fffff800`4d976290 : fffffa80`0b5b7500 00000000`00000000 fffffa80`0b5b7530 00000000`00000001 : nt!MmUnloadSystemImage+0x20
fffff880`0a7c74c0 fffff800`4d8a4e51 : fffffa80`0b5b7500 00000000`00000000 fffffa80`0b5b7510 fffff800`4d8a419c : nt!IopDeleteDriver+0x40
fffff880`0a7c7500 fffff800`4d50fc09 : 00000000`00000000 00000000`00000000 fffff880`0a7c7800 fffffa80`0b5b7530 : nt!ObpRemoveObjectRoutine+0x61
fffff880`0a7c7560 fffff800`4d977263 : fffffa80`0b5b7530 fffff880`0a7c79a0 fffff880`0a7c79a0 00000000`00000000 : nt!ObfDereferenceObject+0x89
fffff880`0a7c75a0 fffff800`4d4ca453 : fffff880`0a7c7810 fffffa80`0a3e8080 0000009d`b90bec80 00000000`00000000 : nt!IopUnloadDriver+0x2b7
fffff880`0a7c7780 fffff800`4d4cf630 : fffff800`4da52ff3 fffffa80`0a3e8080 fffff880`0a7c7b80 0000009d`b90bec80 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0a7c7918 fffff800`4da52ff3 : fffffa80`0a3e8080 fffff880`0a7c7b80 0000009d`b90bec80 00000000`00000000 : nt!KiServiceLinkage
fffff880`0a7c7920 fffff800`4d4ca453 : fffffa80`0a3e8080 fffffa80`0a3e8080 0000009d`b920a9b0 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x1bd88
fffff880`0a7c7b00 000007f9`466345cb : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
0000009d`b90bec58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007f9`466345cb


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  0xc4_62_VRF_LEAKED_POOL_IMAGE_mbam.sys

BUCKET_ID:  0xc4_62_VRF_LEAKED_POOL_IMAGE_mbam.sys

Followup: MachineOwner
---------

sysinfo: could not find necessary interfaces.
sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
sysinfo: could not find necessary interfaces.
sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
start             end                 module name
fffff880`034db000 fffff880`03518000   1394ohci 1394ohci.sys Wed Jul 25 22:26:46 2012 (5010AAE6)
fffff880`01000000 fffff880`0106d000   ACPI     ACPI.sys     Thu Sep 20 02:09:16 2012 (505AB30C)
fffff880`011c3000 fffff880`011da000   acpiex   acpiex.sys   Wed Jul 25 22:25:57 2012 (5010AAB5)
fffff880`03f58000 fffff880`03fea000   afd      afd.sys      Mon Nov 05 22:53:42 2012 (509889C6)
fffff880`013b8000 fffff880`013d0000   AgileVpn AgileVpn.sys Wed Jul 25 22:23:11 2012 (5010AA0F)
fffff960`00a59000 fffff960`00ab9000   ATMFD    ATMFD.DLL    Sun Dec 16 03:08:33 2012 (50CD8181)
fffff880`03ea1000 fffff880`03eb2000   BasicDisplay BasicDisplay.sys Wed Jul 25 22:29:08 2012 (5010AB74)
fffff880`01f4f000 fffff880`01f5c000   BasicRender BasicRender.sys Wed Jul 25 22:28:51 2012 (5010AB63)
fffff880`01f47000 fffff880`01f4f000   Beep     Beep.SYS     Wed Jul 25 22:30:19 2012 (5010ABBB)
fffff880`00d01000 fffff880`00d0b000   BOOTVID  BOOTVID.dll  Wed Jul 25 22:30:22 2012 (5010ABBE)
fffff880`0a191000 fffff880`0a1b1000   bowser   bowser.sys   Wed Jul 25 22:28:01 2012 (5010AB31)
fffff880`04851000 fffff880`048ab000   cbfs3    cbfs3.sys    Mon Apr 09 09:21:46 2012 (4F82E26A)
fffff960`008da000 fffff960`00910000   cdd      cdd.dll      unavailable (00000000)
fffff880`01f0d000 fffff880`01f3e000   cdrom    cdrom.sys    Wed Jul 25 22:26:36 2012 (5010AADC)
fffff880`00d0b000 fffff880`00d8a000   CI       CI.dll       Wed Mar 27 23:30:42 2013 (5153B962)
fffff880`01e6e000 fffff880`01ec2000   CLASSPNP CLASSPNP.SYS Thu Feb 28 23:59:20 2013 (513035A8)
fffff880`00c6d000 fffff880`00cc9000   CLFS     CLFS.SYS     Wed Jul 25 22:29:39 2012 (5010AB93)
fffff880`0125a000 fffff880`012e6000   cng      cng.sys      Thu Oct 11 01:17:34 2012 (5076566E)
fffff880`019dc000 fffff880`019eb000   CompositeBus CompositeBus.sys Wed Jul 25 22:28:03 2012 (5010AB33)
fffff880`0a1c8000 fffff880`0a1d5000   condrv   condrv.sys   Wed Jul 25 22:30:08 2012 (5010ABB0)
fffff880`01ec2000 fffff880`01ed6000   crashdmp crashdmp.sys Sat Feb 02 02:26:00 2013 (510CBF88)
fffff880`01f5c000 fffff880`01fed000   csc      csc.sys      Thu Sep 20 02:08:29 2012 (505AB2DD)
fffff880`0499c000 fffff880`049d9000   CT20XUT  CT20XUT.SYS  Tue Dec 18 07:04:57 2012 (50D05BE9)
fffff880`04355000 fffff880`043fe700   ctaud2k  ctaud2k.sys  Tue Dec 18 07:02:52 2012 (50D05B6C)
fffff880`06e6b000 fffff880`06fcf000   CTEXFIFX CTEXFIFX.SYS Tue Dec 18 07:04:49 2012 (50D05BE1)
fffff880`04fe3000 fffff880`04fff000   CTHWIUT  CTHWIUT.SYS  Tue Dec 18 07:05:02 2012 (50D05BEE)
fffff880`0349c000 fffff880`034cd000   ctoss2k  ctoss2k.sys  Tue Dec 18 06:56:56 2012 (50D05A08)
fffff880`034cd000 fffff880`034d5000   ctprxy2k ctprxy2k.sys Tue Dec 18 07:02:56 2012 (50D05B70)
fffff880`04964000 fffff880`0499c000   ctsfm2k  ctsfm2k.sys  Tue Dec 18 06:56:34 2012 (50D059F2)
fffff880`01ddc000 fffff880`01dfd000   dfsc     dfsc.sys     Wed Jul 25 22:26:53 2012 (5010AAED)
fffff880`01fed000 fffff880`01ffe000   discache discache.sys Wed Jul 25 22:28:23 2012 (5010AB47)
fffff880`0162f000 fffff880`0164b000   disk     disk.sys     Wed Jul 25 22:29:25 2012 (5010AB85)
fffff880`01081000 fffff880`010a3000   drmk     drmk.sys     Thu Oct 11 01:18:59 2012 (507656C3)
fffff880`07358000 fffff880`07365000   dump_diskdump dump_diskdump.sys Wed Jul 25 22:29:58 2012 (5010ABA6)
fffff880`0737b000 fffff880`0738f000   dump_dumpfve dump_dumpfve.sys Thu Sep 20 02:09:30 2012 (505AB31A)
fffff880`07365000 fffff880`0737b000   dump_storahci dump_storahci.sys Fri Mar 01 21:15:44 2013 (513160D0)
fffff880`03cd9000 fffff880`03e42000   dxgkrnl  dxgkrnl.sys  Sat Apr 13 01:09:52 2013 (5168E8A0)
fffff880`03e53000 fffff880`03ea1000   dxgmms1  dxgmms1.sys  Tue Jan 08 22:58:58 2013 (50ECEB02)
fffff880`04250000 fffff880`042c4000   e1c63x64 e1c63x64.sys Thu Feb 21 00:31:49 2013 (5125B145)
fffff880`01597000 fffff880`015b1000   EhStorClass EhStorClass.sys Wed Jul 25 22:26:24 2012 (5010AAD0)
fffff880`04f99000 fffff880`04fe3000   emupia2k emupia2k.sys Tue Dec 18 06:56:26 2012 (50D059EA)
fffff880`01460000 fffff880`01474000   fileinfo fileinfo.sys Wed Jul 25 22:28:02 2012 (5010AB32)
fffff880`01400000 fffff880`01460000   fltmgr   fltmgr.sys   Wed Jul 25 22:30:09 2012 (5010ABB1)
fffff880`01868000 fffff880`01872000   Fs_Rec   Fs_Rec.sys   Wed Jul 25 22:30:08 2012 (5010ABB0)
fffff880`01d12000 fffff880`01d88000   fvevol   fvevol.sys   Thu Sep 20 02:08:15 2012 (505AB2CF)
fffff880`01c8f000 fffff880`01cf7000   fwpkclnt fwpkclnt.sys Thu Feb 28 23:55:54 2013 (513034DA)
fffff880`03536000 fffff880`0353cc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff880`04e0b000 fffff880`04f99000   ha20x22k ha20x22k.sys Tue Dec 18 07:00:49 2012 (50D05AF1)
fffff800`4d405000 fffff800`4d471000   hal      hal.dll      Tue Oct 23 23:03:21 2012 (50875A79)
fffff880`05af0000 fffff880`05b06000   HDAudBus HDAudBus.sys Thu Sep 20 02:08:43 2012 (505AB2EB)
fffff880`072f7000 fffff880`07350000   HdAudio  HdAudio.sys  Tue Jan 08 22:59:46 2013 (50ECEB32)
fffff880`05bd7000 fffff880`05bea000   HECIx64  HECIx64.sys  Mon Dec 17 14:32:21 2012 (50CF7345)
fffff880`073cd000 fffff880`073e8000   HIDCLASS HIDCLASS.SYS Mon Apr 08 22:34:48 2013 (51637E48)
fffff880`07350000 fffff880`07358000   HIDPARSE HIDPARSE.SYS Wed Jul 25 22:30:15 2012 (5010ABB7)
fffff880`073c0000 fffff880`073cd000   hidusb   hidusb.sys   Mon Apr 08 22:34:41 2013 (51637E41)
fffff880`0a000000 fffff880`0a0df000   HTTP     HTTP.sys     Thu Mar 14 20:17:15 2013 (5142688B)
fffff880`03547000 fffff880`03563000   intelppm intelppm.sys Mon Nov 05 22:55:02 2012 (50988A16)
fffff880`0729a000 fffff880`072f7000   iusb3hub iusb3hub.sys Thu Jul 18 04:40:28 2013 (51E7A9FC)
fffff880`05b06000 fffff880`05bcc000   iusb3xhc iusb3xhc.sys Thu Jul 18 04:40:32 2013 (51E7AA00)
fffff880`07241000 fffff880`07250000   kbdclass kbdclass.sys Wed Jul 25 22:28:47 2012 (5010AB5F)
fffff880`07234000 fffff880`07241000   kbdhid   kbdhid.sys   Wed Jul 25 22:28:49 2012 (5010AB61)
fffff800`4c646000 fffff800`4c64f000   kd       kd.dll       Wed Jul 25 22:30:34 2012 (5010ABCA)
fffff880`0164b000 fffff880`01656000   kdnic    kdnic.sys    Wed Jul 25 22:27:41 2012 (5010AB1D)
fffff880`0344d000 fffff880`0349c000   ks       ks.sys       Sat Feb 02 02:25:50 2013 (510CBF7E)
fffff880`0183c000 fffff880`01857000   ksecdd   ksecdd.sys   Thu Sep 20 02:09:16 2012 (505AB30C)
fffff880`01600000 fffff880`0162f000   ksecpkg  ksecpkg.sys  Thu Oct 11 01:16:46 2012 (5076563E)
fffff880`034d5000 fffff880`034da380   ksthunk  ksthunk.sys  Wed Jul 25 22:28:58 2012 (5010AB6A)
fffff880`03518000 fffff880`03536000   L1C63x64 L1C63x64.sys Wed Feb 15 01:55:09 2012 (4F3B56CD)
fffff880`07282000 fffff880`07296000   lltdio   lltdio.sys   Wed Jul 25 22:24:02 2012 (5010AA42)
fffff880`07250000 fffff880`07278000   luafv    luafv.sys    Wed Jul 25 22:29:13 2012 (5010AB79)
fffff880`07278000 fffff880`07282000   mbam     mbam.sys     Thu Feb 28 15:33:07 2013 (512FBF03)
fffff880`00c0e000 fffff880`00c6d000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Wed Jul 25 22:30:12 2012 (5010ABB4)
fffff880`0738f000 fffff880`0739d000   monitor  monitor.sys  Thu Feb 28 23:56:18 2013 (513034F2)
fffff880`07225000 fffff880`07234000   mouclass mouclass.sys Wed Jul 25 22:28:47 2012 (5010AB5F)
fffff880`073e8000 fffff880`073f4000   mouhid   mouhid.sys   Fri Mar 01 21:15:53 2013 (513160D9)
fffff880`01512000 fffff880`0152c000   mountmgr mountmgr.sys Wed Jul 25 22:29:33 2012 (5010AB8D)
fffff880`0a1b1000 fffff880`0a1c8000   mpsdrv   mpsdrv.sys   Thu Oct 11 01:15:15 2012 (507655E3)
fffff880`0acfd000 fffff880`0ad60000   mrxsmb   mrxsmb.sys   Tue Feb 05 17:29:08 2013 (511187B4)
fffff880`0ad60000 fffff880`0adab000   mrxsmb10 mrxsmb10.sys Wed Jul 25 22:23:06 2012 (5010AA0A)
fffff880`0adab000 fffff880`0ade6000   mrxsmb20 mrxsmb20.sys Tue Feb 05 17:28:36 2013 (51118794)
fffff880`03ec4000 fffff880`03ed0000   Msfs     Msfs.SYS     Wed Jul 25 22:30:24 2012 (5010ABC0)
fffff880`01077000 fffff880`01081000   msisadrv msisadrv.sys Wed Jul 25 22:28:02 2012 (5010AB32)
fffff880`0b3c7000 fffff880`0b3de000   mslldp   mslldp.sys   Wed Jul 25 22:23:53 2012 (5010AA39)
fffff880`00d8a000 fffff880`00ded000   msrpc    msrpc.sys    Wed Jul 25 22:28:37 2012 (5010AB55)
fffff880`01e5b000 fffff880`01e67000   mssmbios mssmbios.sys Wed Jul 25 22:29:19 2012 (5010AB7F)
fffff880`01a3b000 fffff880`01a52000   mup      mup.sys      Wed Jul 25 22:30:00 2012 (5010ABA8)
fffff880`01872000 fffff880`0196d000   ndis     ndis.sys     Sat Jun 15 01:11:35 2013 (51BBF787)
fffff880`019ee000 fffff880`019fa000   ndistapi ndistapi.sys Thu Sep 20 02:09:19 2012 (505AB30F)
fffff880`0a165000 fffff880`0a179000   ndisuio  ndisuio.sys  Wed Jul 25 22:26:21 2012 (5010AACD)
fffff880`015b1000 fffff880`015e0000   ndiswan  ndiswan.sys  Wed Jul 25 22:23:13 2012 (5010AA11)
fffff880`048d2000 fffff880`048e6000   NDProxy  NDProxy.SYS  Mon Apr 08 22:33:41 2013 (51637E05)
fffff880`0ac00000 fffff880`0ac1c000   Ndu      Ndu.sys      Wed Jul 25 22:23:41 2012 (5010AA2D)
fffff880`03c40000 fffff880`03c50000   netbios  netbios.sys  Wed Jul 25 22:28:19 2012 (5010AB43)
fffff880`03f00000 fffff880`03f58000   netbt    netbt.sys    Wed Jul 25 22:24:26 2012 (5010AA5A)
fffff880`0196d000 fffff880`019dc000   NETIO    NETIO.SYS    Thu Oct 11 01:16:20 2012 (50765624)
fffff880`03eb2000 fffff880`03ec4000   Npfs     Npfs.SYS     Wed Jul 25 22:30:26 2012 (5010ABC2)
fffff880`03fea000 fffff880`03ff6000   npsvctrig npsvctrig.sys Wed Jul 25 22:27:33 2012 (5010AB15)
fffff880`03cc3000 fffff880`03cd1000   nsiproxy nsiproxy.sys Wed Jul 25 22:25:00 2012 (5010AA7C)
fffff800`4d471000 fffff800`4dbbd000   nt       ntkrnlmp.exe Fri May 31 23:13:17 2013 (51A966CD)
fffff880`01659000 fffff880`0183c000   Ntfs     Ntfs.sys     Sat Feb 02 02:25:09 2013 (510CBF55)
fffff880`01f3e000 fffff880`01f47000   Null     Null.SYS     Wed Jul 25 22:30:16 2012 (5010ABB8)
fffff880`06e00000 fffff880`06e33000   nvhda64v nvhda64v.sys Mon Feb 25 00:27:35 2013 (512AF647)
fffff880`0500b000 fffff880`05af0000   nvlddmkm nvlddmkm.sys Fri Jun 21 05:06:16 2013 (51C41788)
fffff880`03584000 fffff880`03591000   nvvad64v nvvad64v.sys Tue Aug 20 07:29:10 2013 (52135306)
fffff880`0a0f7000 fffff880`0a165000   nwifi    nwifi.sys    Wed Jul 25 22:25:11 2012 (5010AA87)
fffff880`03c00000 fffff880`03c2a000   pacer    pacer.sys    Wed Jul 25 22:23:05 2012 (5010AA09)
fffff880`0133d000 fffff880`01357000   partmgr  partmgr.sys  Tue Jan 08 23:01:42 2013 (50ECEBA6)
fffff880`0121d000 fffff880`0125a000   pci      pci.sys      Wed Jul 25 22:27:43 2012 (5010AB1F)
fffff880`01857000 fffff880`01868000   pcw      pcw.sys      Wed Jul 25 22:28:44 2012 (5010AB5C)
fffff880`01326000 fffff880`0133d000   pdc      pdc.sys      Thu Feb 28 23:58:34 2013 (5130357A)
fffff880`0ac1c000 fffff880`0ace8000   peauth   peauth.sys   Mon Apr 08 22:32:01 2013 (51637DA1)
fffff880`04200000 fffff880`0424b000   portcls  portcls.sys  Thu Oct 11 01:16:51 2012 (50765643)
fffff880`00cec000 fffff880`00d01000   PSHED    PSHED.dll    Thu Jul 26 00:53:53 2012 (5010CD61)
fffff880`03591000 fffff880`035b6000   rasl2tp  rasl2tp.sys  Wed Jul 25 22:23:16 2012 (5010AA14)
fffff880`048ab000 fffff880`048c5000   raspppoe raspppoe.sys Wed Jul 25 22:24:55 2012 (5010AA77)
fffff880`03563000 fffff880`03584000   raspptp  raspptp.sys  Wed Jul 25 22:23:13 2012 (5010AA11)
fffff880`015e0000 fffff880`015fe000   rassstp  rassstp.sys  Wed Jul 25 22:23:59 2012 (5010AA3F)
fffff880`03c50000 fffff880`03cc3000   rdbss    rdbss.sys    Sat May 04 00:47:00 2013 (518492C4)
fffff880`048c7000 fffff880`048d2000   rdpbus   rdpbus.sys   Wed Jul 25 22:28:19 2012 (5010AB43)
fffff880`01a00000 fffff880`01a3b000   rdyboost rdyboost.sys Wed Jul 25 22:28:34 2012 (5010AB52)
fffff880`0a179000 fffff880`0a191000   rspndr   rspndr.sys   Wed Jul 25 22:24:06 2012 (5010AA46)
fffff880`07200000 fffff880`07225000   rzudd    rzudd.sys    Tue Jul 09 23:02:46 2013 (51DCCED6)
fffff880`0ace8000 fffff880`0acf3000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01357000 fffff880`013a0000   spaceport spaceport.sys Sat May 04 00:48:43 2013 (5184932B)
fffff880`0acf3000 fffff880`0acfd000   speedfan speedfan.sys Sat Dec 29 15:59:35 2012 (50DF59B7)
fffff880`0b33a000 fffff880`0b3c7000   srv      srv.sys      Wed Jul 25 22:25:28 2012 (5010AA98)
fffff880`0b299000 fffff880`0b33a000   srv2     srv2.sys     Mon Apr 08 22:33:02 2013 (51637DDE)
fffff880`04800000 fffff880`04844000   srvnet   srvnet.sys   Mon Apr 08 22:31:13 2013 (51637D71)
fffff880`0152c000 fffff880`01542000   storahci storahci.sys Fri Mar 01 21:15:44 2013 (513160D0)
fffff880`01542000 fffff880`01597000   storport storport.sys Thu Feb 28 23:58:51 2013 (5130358B)
fffff880`048c5000 fffff880`048c6480   swenum   swenum.sys   Wed Jul 25 22:28:53 2012 (5010AB65)
fffff880`01a56000 fffff880`01c8f000   tcpip    tcpip.sys    Mon Jul 08 18:24:46 2013 (51DB3C2E)
fffff880`0ade6000 fffff880`0adf8000   tcpipreg tcpipreg.sys Wed Jul 25 22:23:13 2012 (5010AA11)
fffff880`03ef2000 fffff880`03f00000   TDI      TDI.SYS      Wed Jul 25 22:27:59 2012 (5010AB2F)
fffff880`03ed0000 fffff880`03ef2000   tdx      tdx.sys      Wed Jul 25 22:24:58 2012 (5010AA7A)
fffff880`00cc9000 fffff880`00cec000   tm       tm.sys       Wed Jul 25 22:29:01 2012 (5010AB6D)
fffff880`012e6000 fffff880`0130e000   tpm      tpm.sys      Thu Feb 28 23:56:34 2013 (51303502)
fffff880`01e1a000 fffff880`01e5b000   truecrypt truecrypt.sys Tue Feb 07 04:09:36 2012 (4F30EA50)
fffff960`007ce000 fffff960`007d7000   TSDDD    TSDDD.dll    Wed Jul 25 22:30:25 2012 (5010ABC1)
fffff880`013d0000 fffff880`013fc000   tunnel   tunnel.sys   Wed Jul 25 22:23:04 2012 (5010AA08)
fffff880`01200000 fffff880`01212000   umbus    umbus.sys    Wed Jul 25 22:27:39 2012 (5010AB1B)
fffff880`0739d000 fffff880`073c0000   usbccgp  usbccgp.sys  Wed Jul 25 22:27:06 2012 (5010AAFA)
fffff880`05bcc000 fffff880`05bd7000   USBD     USBD.SYS     Thu Sep 20 02:10:20 2012 (505AB34C)
fffff880`042c4000 fffff880`042da000   usbehci  usbehci.sys  Thu Sep 20 02:09:27 2012 (505AB317)
fffff880`048e6000 fffff880`04964000   usbhub   usbhub.sys   Sat Feb 02 02:25:14 2013 (510CBF5A)
fffff880`042da000 fffff880`04355000   USBPORT  USBPORT.SYS  Thu Sep 20 02:09:39 2012 (505AB323)
fffff880`01319000 fffff880`01326000   vdrvroot vdrvroot.sys Wed Jul 25 22:27:29 2012 (5010AB11)
fffff880`010ab000 fffff880`010f1000   VerifierExt VerifierExt.sys Wed Jul 25 22:28:18 2012 (5010AB42)
fffff880`013a0000 fffff880`013b8000   volmgr   volmgr.sys   Wed Jul 25 22:29:22 2012 (5010AB82)
fffff880`014b2000 fffff880`01512000   volmgrx  volmgrx.sys  Wed Jul 25 22:29:59 2012 (5010ABA7)
fffff880`01d88000 fffff880`01ddc000   volsnap  volsnap.sys  Fri May 31 23:10:22 2013 (51A9661E)
fffff880`03c2a000 fffff880`03c40000   vwififlt vwififlt.sys Wed Jul 25 22:26:39 2012 (5010AADF)
fffff880`01e00000 fffff880`01e1a000   wanarp   wanarp.sys   Mon Apr 08 22:31:00 2013 (51637D64)
fffff880`03e42000 fffff880`03e53000   watchdog watchdog.sys Wed Jul 25 22:29:05 2012 (5010AB71)
fffff880`010f1000 fffff880`011b3000   Wdf01000 Wdf01000.sys Tue Jan 08 22:59:00 2013 (50ECEB04)
fffff880`01474000 fffff880`014b1000   WdFilter WdFilter.sys Thu Jun 20 23:24:09 2013 (51C3C759)
fffff880`011b3000 fffff880`011c3000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`01cf7000 fffff880`01d12000   wfplwfs  wfplwfs.sys  Wed Jul 25 22:23:58 2012 (5010AA3E)
fffff960`0018c000 fffff960`0057b000   win32k   win32k.sys   Thu May 30 19:14:01 2013 (51A7DD39)
fffff880`0353d000 fffff880`03547000   wmiacpi  wmiacpi.sys  Wed Jul 25 22:29:53 2012 (5010ABA1)
fffff880`0106d000 fffff880`01077000   WMILIB   WMILIB.SYS   Wed Jul 25 22:30:04 2012 (5010ABAC)
fffff880`011da000 fffff880`011e5000   WppRecorder WppRecorder.sys Wed Jul 25 22:29:07 2012 (5010AB73)

Unloaded modules:
fffff880`0b3de000 fffff880`0b3e0000   MSTEE.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`0b3e0000 fffff880`0b3e3000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00003000
fffff880`01ed6000 fffff880`01ee3000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`01ee3000 fffff880`01ef9000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff880`01ef9000 fffff880`01f0d000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`019dc000 fffff880`019ee000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00012000
fffff880`0130e000 fffff880`01319000   WdBoot.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`01ddc000 fffff880`01de8000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`00c01000 fffff880`00c0e000   ApiSetSchema
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
quit:
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``



   --- E O J ---   2013 Sep 08 01:57:28 AM    _99-debug   Copyright 2012 Sysnative Forums
   --- E O J ---   2013 Sep 08 01:57:28 AM    _99-debug   Copyright 2012 Sysnative Forums
   --- E O J ---   2013 Sep 08 01:57:28 AM    _99-debug   Copyright 2012 Sysnative Forums

Random yet recurring BSOD on Windows 8

bodhisurfs

New member

Attachments

Patrick

Sysnative Staff

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

bodhisurfs

New member

Attachments

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Random yet recurring BSOD on Windows 8

bodhisurfs

New member

Attachments

Patrick

Sysnative Staff

jcgriff2

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

bodhisurfs

New member

Attachments

jcgriff2

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)