Hello all. For some reason I have started to suffer random BSOD crashes. The last one I managed to catch a mention of memory management or something like that but I also think I have seen a page file related error previously. I noted these crashes have only started since I upgraded to firefox 11 and I thought that perhaps firefox is using an add on that isnt working correctly so I decided to try a new browser - opera at its default set up with no add ons or extensions and I still get BSOD's the only other thing I have recently updated is Yahoo Messenger. The only other thing I can think of is if its related to my RAM but the RAM is barely 6 months old (it was purchased with the motherboard and CPU from amazon and all was pre assembled - I just had to drop the board into my case). Any help you can provide me in troubleshooting will be greatly appreciated!It's only when things go wrong do we understand the true power of machines - Clive James

1. It does not hurt to start with hw testing, namely the memory test and hard disc. For memory use memtest and for disc use diagnostic tool from disc vendor. http://www.memtest86.com/download.html (at least 10 cycles or more) 2. If your computer suffer from BSOD, you should analyze memory dump. For memory dump use WinDBG or free diagnostic tool from Nirsoft: http://msdn.microsoft.com/en-us/windows/hardware/gg463009 http://www.nirsoft.net/utils/blue_screen_view.html If you feel like someone else would diagnose your problem, upload dump file in cloud repository (SkyDrive or similar) and publish here the path to uploaded dump file. This KN may help you resolve the problem http://support.microsoft.com/kb/315263/en-us Regards Milos PS: Remember that HW vendors are pushing price of their product by many ways, including "light" testing methods. This is a source of explanation, why there is larger incidence of faulty components, including hard discs and memories.

Hello Milos, Thanks for the reply. I will do a memtest86 a bit later but I would like to upload the dump files. however skydrive keeps telling me that it cant upload folders only files when I try to select them? any ideas?It's only when things go wrong do we understand the true power of machines - Clive James

Hello Milos, Thanks for the reply. I will do a memtest86 a bit later but I would like to upload the dump files. however skydrive keeps telling me that it cant upload folders only files when I try to select them? any ideas? It's only when things go wrong do we understand the true power of machines - Clive James You could compress the dump files in a ZIP file and upload it to your SkyDrive; but I think that the most recent dump file could be enough. Bye.Luigi Bruno - Microsoft Community Contributor 2011 Award

I actually tried that and it still saw the zip file as a folder. I will try compressing it as a 7zip file rather than a standard .zip see if that works any betterIt's only when things go wrong do we understand the true power of machines - Clive James

Oh weird! Today it accepted the .zip file. Hmm I wonder if it was because I was trying to do it through a different browser. Not to worry. Here are the dumps for the last week: https://skydrive.live.com/redir.aspx?cid=275b1cb515e15862&resid=275B1CB515E15862!263&parid=275B1CB515E15862!203&authkey=!AIgS3jvXocOEK0kIt's only when things go wrong do we understand the true power of machines - Clive James

1. Your dumps show multiple problems. 2. nvlddmkm.sys points to NVIDIA drive. Update your video driver. 3. MOBK.sys points to backup http://mozy.com/ Give try to their support/forum. 4. If you have AV, try to disable it for test. Regards Milos

Hello Milos, Thanks for the feedback. I have updated the nvidea driver and mobk.sys appears to be related to McAfee online back up storage space which I dont use anyway so hopefully all should be well unless you spotted other stuff in the logs. I will monitor for the next day or so and let you know if all is well. As you can see from the logs the crashes were pretty frequent so I will know in the next day and if all is well I will mark this as resolved. Many thanks!It's only when things go wrong do we understand the true power of machines - Clive James

If the changes you made don't resolve the issue, the next step will be to enable driver verifier and look at the dumps after the system crashes with it enabled: http://mikemstech.blogspot.com/2011/12/enable-driver-verifier-to-help-identify.html You have 1 dump showing IRQL_NOT_LESS_OR_EQUAL in the zip folder referencing the kernel http://mikemstech.blogspot.com/2011/11/how-to-troubleshoot-blue-screen-0xa.html 7 dumps showing MEMORY_MANAGEMENT which almost always reference the kernel and require hardware testing/driver verifier http://mikemstech.blogspot.com/2011/12/troubleshooting-0x1a-memorymanagement.html and 6 showing PAGE_FAULT_IN_NONPAGED_AREA. Of the ones I surveyed, they didn't point to a specific driver http://mikemstech.blogspot.com/2011/12/troubleshooting-0x50.html -- Mike Burr Enterprise High Availability, Disaster Recovery, and Business Continuity Planning Learn to Troubleshoot Windows BSODs

Thanks for the extra tips Mike. So far I have not had any further crashes (touch wood) so with any luck all is well. I will know for certain by the end of tomorrow.It's only when things go wrong do we understand the true power of machines - Clive James

Hello, If the issues persists then try that: Disable all security softwares you haveUninstall all unused programsPerform a clean boot: http://support.microsoft.com/kb/929135Run memtest86+ to check if all is okay with your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical SupportUpdate all possible drivers You can also contact Microsoft CSS for assistance. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* PAGE_FAULT_IN_NONPAGED_AREA (50) Invalid system memory was referenced. This cannot be protected by try-except, it must be protected by a Probe. Typically the address is just plain bad or it is pointing at freed memory. Arguments: Arg1: fffffac00a2b2018, memory referenced. Arg2: 0000000000000001, value 0 = read operation, 1 = write operation. Arg3: fffff88003e09756, If non-zero, the instruction address which referenced the bad memory address. Arg4: 0000000000000005, (reserved) Debugging Details: ------------------ Could not read faulting driver name WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff8000370b100 fffffac00a2b2018 FAULTING_IP: dxgkrnl!DXGADAPTER::ReleaseReference+16 fffff880`03e09756 f0480fc17918 lock xadd qword ptr [rcx+18h],rdi MM_INTERNAL_CODE: 5 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x50 PROCESS_NAME: VDeck.exe CURRENT_IRQL: 0 TRAP_FRAME: fffff880033904e0 -- (.trap 0xfffff880033904e0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffff8a01e400000 rbx=0000000000000000 rcx=fffffac00a2b2000 rdx=000000000000222e rsi=0000000000000000 rdi=0000000000000000 rip=fffff88003e09756 rsp=fffff88003390670 rbp=0000000000000001 r8=000000000000445c r9=fffff8a01e400000 r10=0000000000000011 r11=fffff88003e74578 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na po nc dxgkrnl!DXGADAPTER::ReleaseReference+0x16: fffff880`03e09756 f0480fc17918 lock xadd qword ptr [rcx+18h],rdi ds:2abf:fffffac0`0a2b2018=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff80003484c1f to fffff800034d9d40 STACK_TEXT: fffff880`03390378 fffff800`03484c1f : 00000000`00000050 fffffac0`0a2b2018 00000000`00000001 fffff880`033904e0 : nt!KeBugCheckEx fffff880`03390380 fffff800`034d7e6e : 00000000`00000001 fffffac0`0a2b2018 00000000`00002700 fffffac0`0a2b2000 : nt! ?? ::FNODOBFM::`string'+0x43d41 fffff880`033904e0 fffff880`03e09756 : 00000000`00000000 fffff880`03e66b41 00000000`00000010 00000000`00000287 : nt!KiPageFault+0x16e fffff880`03390670 fffff880`03e316fc : fffffac0`0a2b2000 fffffac0`0a2b2000 fffff8a0`05c40610 00000000`00000206 : dxgkrnl!DXGADAPTER::ReleaseReference+0x16 fffff880`033906a0 fffff880`03e750ea : 00000000`0000222e 00000000`0000222e 00000000`0000114c fffff800`034e2c9b : dxgkrnl!DXGADAPTER::DestroyHandle+0xac fffff880`033906d0 fffff880`03e747e0 : fffff900`c07a6c50 00000000`00000000 00000000`00000001 fffff900`c07a6c50 : dxgkrnl!DXGPROCESS::Destroy+0x35a fffff880`03390780 fffff960`001a5d5c : 00000000`0000114c fffff900`c07a6c50 00000000`00000000 fffff900`c07a6c50 : dxgkrnl!DxgkProcessCallout+0x268 fffff880`03390810 fffff960`001a544f : 00000000`00000000 fffff880`03390c20 fffffa80`0709e910 00000000`00000000 : win32k!GdiProcessCallout+0x244 fffff880`03390890 fffff800`037ae781 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`0709e900 : win32k!W32pProcessCallout+0x6b fffff880`033908c0 fffff800`03791cfd : 00000000`40010004 fffffa80`06cd5d01 00000000`78457300 fffffa80`07269b60 : nt!PspExitThread+0x4d1 fffff880`033909c0 fffff800`034cc7da : 00000000`00000001 00000000`00000000 00000000`00000000 fffff880`00961000 : nt!PsExitSpecialApc+0x1d fffff880`033909f0 fffff800`034ccb20 : 00000000`00000000 fffff880`03390a70 fffff800`03791c68 00000000`00000001 : nt!KiDeliverApc+0x2ca fffff880`03390a70 fffff800`034d9077 : fffffa80`0709e910 00000000`076dfcd8 fffff880`03390bc8 fffff880`03390c00 : nt!KiInitiateUserApc+0x70 fffff880`03390bb0 00000000`76f218ca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c 00000000`076dfcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f218ca STACK_COMMAND: kb FOLLOWUP_IP: dxgkrnl!DXGADAPTER::ReleaseReference+16 fffff880`03e09756 f0480fc17918 lock xadd qword ptr [rcx+18h],rdi SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: dxgkrnl!DXGADAPTER::ReleaseReference+16 FOLLOWUP_NAME: MachineOwner MODULE_NAME: dxgkrnl IMAGE_NAME: dxgkrnl.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4ce799fa FAILURE_BUCKET_ID: X64_0x50_dxgkrnl!DXGADAPTER::ReleaseReference+16 BUCKET_ID: X64_0x50_dxgkrnl!DXGADAPTER::ReleaseReference+16 Followup: MachineOwner --------- ---------------------------------------------------------- Bug Check Code 0x50: http://msdn.microsoft.com/en-us/library/windows/hardware/ff559023%28v=vs.85%29.aspx Start by updating your graphic card driver and check results. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* PAGE_FAULT_IN_NONPAGED_AREA (50) Invalid system memory was referenced. This cannot be protected by try-except, it must be protected by a Probe. Typically the address is just plain bad or it is pointing at freed memory. Arguments: Arg1: fffffac00a2b2018, memory referenced. Arg2: 0000000000000001, value 0 = read operation, 1 = write operation. Arg3: fffff88003e09756, If non-zero, the instruction address which referenced the bad memory address. Arg4: 0000000000000005, (reserved) Debugging Details: ------------------ Could not read faulting driver name WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff8000370b100 fffffac00a2b2018 FAULTING_IP: dxgkrnl!DXGADAPTER::ReleaseReference+16 fffff880`03e09756 f0480fc17918 lock xadd qword ptr [rcx+18h],rdi MM_INTERNAL_CODE: 5 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x50 PROCESS_NAME: VDeck.exe CURRENT_IRQL: 0 TRAP_FRAME: fffff880033904e0 -- (.trap 0xfffff880033904e0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffff8a01e400000 rbx=0000000000000000 rcx=fffffac00a2b2000 rdx=000000000000222e rsi=0000000000000000 rdi=0000000000000000 rip=fffff88003e09756 rsp=fffff88003390670 rbp=0000000000000001 r8=000000000000445c r9=fffff8a01e400000 r10=0000000000000011 r11=fffff88003e74578 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na po nc dxgkrnl!DXGADAPTER::ReleaseReference+0x16: fffff880`03e09756 f0480fc17918 lock xadd qword ptr [rcx+18h],rdi ds:2abf:fffffac0`0a2b2018=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff80003484c1f to fffff800034d9d40 STACK_TEXT: fffff880`03390378 fffff800`03484c1f : 00000000`00000050 fffffac0`0a2b2018 00000000`00000001 fffff880`033904e0 : nt!KeBugCheckEx fffff880`03390380 fffff800`034d7e6e : 00000000`00000001 fffffac0`0a2b2018 00000000`00002700 fffffac0`0a2b2000 : nt! ?? ::FNODOBFM::`string'+0x43d41 fffff880`033904e0 fffff880`03e09756 : 00000000`00000000 fffff880`03e66b41 00000000`00000010 00000000`00000287 : nt!KiPageFault+0x16e fffff880`03390670 fffff880`03e316fc : fffffac0`0a2b2000 fffffac0`0a2b2000 fffff8a0`05c40610 00000000`00000206 : dxgkrnl!DXGADAPTER::ReleaseReference+0x16 fffff880`033906a0 fffff880`03e750ea : 00000000`0000222e 00000000`0000222e 00000000`0000114c fffff800`034e2c9b : dxgkrnl!DXGADAPTER::DestroyHandle+0xac fffff880`033906d0 fffff880`03e747e0 : fffff900`c07a6c50 00000000`00000000 00000000`00000001 fffff900`c07a6c50 : dxgkrnl!DXGPROCESS::Destroy+0x35a fffff880`03390780 fffff960`001a5d5c : 00000000`0000114c fffff900`c07a6c50 00000000`00000000 fffff900`c07a6c50 : dxgkrnl!DxgkProcessCallout+0x268 fffff880`03390810 fffff960`001a544f : 00000000`00000000 fffff880`03390c20 fffffa80`0709e910 00000000`00000000 : win32k!GdiProcessCallout+0x244 fffff880`03390890 fffff800`037ae781 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`0709e900 : win32k!W32pProcessCallout+0x6b fffff880`033908c0 fffff800`03791cfd : 00000000`40010004 fffffa80`06cd5d01 00000000`78457300 fffffa80`07269b60 : nt!PspExitThread+0x4d1 fffff880`033909c0 fffff800`034cc7da : 00000000`00000001 00000000`00000000 00000000`00000000 fffff880`00961000 : nt!PsExitSpecialApc+0x1d fffff880`033909f0 fffff800`034ccb20 : 00000000`00000000 fffff880`03390a70 fffff800`03791c68 00000000`00000001 : nt!KiDeliverApc+0x2ca fffff880`03390a70 fffff800`034d9077 : fffffa80`0709e910 00000000`076dfcd8 fffff880`03390bc8 fffff880`03390c00 : nt!KiInitiateUserApc+0x70 fffff880`03390bb0 00000000`76f218ca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c 00000000`076dfcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f218ca STACK_COMMAND: kb FOLLOWUP_IP: dxgkrnl!DXGADAPTER::ReleaseReference+16 fffff880`03e09756 f0480fc17918 lock xadd qword ptr [rcx+18h],rdi SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: dxgkrnl!DXGADAPTER::ReleaseReference+16 FOLLOWUP_NAME: MachineOwner MODULE_NAME: dxgkrnl IMAGE_NAME: dxgkrnl.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4ce799fa FAILURE_BUCKET_ID: X64_0x50_dxgkrnl!DXGADAPTER::ReleaseReference+16 BUCKET_ID: X64_0x50_dxgkrnl!DXGADAPTER::ReleaseReference+16 Followup: MachineOwner --------- ---------------------------------------------------------- Bug Check Code 0x50: http://msdn.microsoft.com/en-us/library/windows/hardware/ff559023%28v=vs.85%29.aspx Start by updating your graphic card driver and check results. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

In addition to the directx, Vdeck.exe (circa 2010, update?) was running. Also of note your McAfee is from 2010 as well. McAfee, especially older versions, has problems on some systems.

In addition to the directx, Vdeck.exe (circa 2010, update?) was running. Also of note your McAfee is from 2010 as well. McAfee, especially older versions, has problems on some systems.

1. Older version of DirectX can be updated with dxwebsetup.exe Windows 7 is "equipted" with DirextX 11. You can test it from Command Prompt by command dxdiag: http://support.microsoft.com/kb/157730/en-us 2. VDeck.exe: The process VIA HD Audio CPL belongs to the software HDAudioCPL or Ivalice Launcher (version 16) by VIA (www.via.com.tw). However: Some malware camouflage themselves as VDeck.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the VDeck.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It was one of the Top Download Picks of The Washington Post and PC World. 3. If you have up to 10 computers, then you are eligible for Microsoft Security Essentials (MS SE) that is a good alternative. I have much less frequecy of problems with MS SE: http://windows.microsoft.com/en-US/windows/products/security-essentials Regards Milos

1. Older version of DirectX can be updated with dxwebsetup.exe Windows 7 is "equipted" with DirextX 11. You can test it from Command Prompt by command dxdiag: http://support.microsoft.com/kb/157730/en-us 2. VDeck.exe: The process VIA HD Audio CPL belongs to the software HDAudioCPL or Ivalice Launcher (version 16) by VIA (www.via.com.tw). However: Some malware camouflage themselves as VDeck.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the VDeck.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It was one of the Top Download Picks of The Washington Post and PC World. 3. If you have up to 10 computers, then you are eligible for Microsoft Security Essentials (MS SE) that is a good alternative. I have much less frequecy of problems with MS SE: http://windows.microsoft.com/en-US/windows/products/security-essentials Regards Milos

Hello all, Well the random BSODs seemed to have stopped after updating the driver however I now have a new one that I have not seen before. Also it ONLY occurs during shutdown. here are the last 2 memory dumps but the error that I spotted on screen said the same thing pretty much. something aboug a dxgkrnl.sys issue https://skydrive.live.com/redir.aspx?cid=275b1cb515e15862&resid=275B1CB515E15862!264&parid=275B1CB515E15862!203&authkey=!AA1V_Yl6s9uyCQY Any advice?It's only when things go wrong do we understand the true power of machines - Clive James