Okay, I set up WinDbg and checked out the minidump logs. I was incorrect in saying that it crashed twice yesterday night, as it actually crashed three times. Here is the dump log from last night's three BSODs:
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00041790, The subtype of the bugcheck.
Arg2: c08020d8
Arg3: 0000ffff
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_41790
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 822e4434 to 820df0e3
STACK_TEXT:
9de45ac4 822e4434 0000001a 00041790 c08020d8 nt!KeBugCheckEx+0x1e
9de45bac 8209ea51 08053000 85336be4 990afcb8 nt!MiUnmapLockedPagesInUserSpace+0x315
9de45be0 819155d5 07f50020 87756aa8 81120018 nt!MmUnmapLockedPages+0x22
9de45c2c 81913203 00958ad8 00000050 00000000 WUDFRd!RdFdoDevice::RdIoReply+0x179
9de45c6c 81925c1d 85336be4 86958ad8 81120018 WUDFRd!RdFdoDevice::RdReply+0x1b9
9de45c90 81928fd5 81120018 00000008 00000000 WUDFPf!WudfLpcMessage::ReplyMessage+0x87
9de45ccc 8192830a 00120000 9e3ffcb8 99175b78 WUDFPf!WdfLpcPort:
![:p :p]()
rocessMessage+0x266
9de45cec 819270c9 81120000 9e3ffcb8 00000000 WUDFPf!WdfLpcCommPort:
![:p :p]()
rocessMessage+0x1a4
9de45d68 819274a7 011875b0 819238d9 991cf808 WUDFPf!WdfLpc::WorkerThread+0x122
9de45d70 819238d9 991cf808 9de45dc0 821e7b18 WUDFPf!WdfWorkerThread::WorkerThread+0xc
9de45d7c 821e7b18 991875b0 d08dc537 00000000 WUDFPf!WdfLpc::s_WorkerThread+0x11
9de45dc0 82040a2e 819238c8 991875b0 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
WUDFRd!RdFdoDevice::RdIoReply+179
819155d5 807d0b00 cmp byte ptr [ebp+0Bh],0
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: WUDFRd!RdFdoDevice::RdIoReply+179
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: WUDFRd
IMAGE_NAME: WUDFRd.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 47919040
FAILURE_BUCKET_ID: 0x1a_41790_WUDFRd!RdFdoDevice::RdIoReply+179
BUCKET_ID: 0x1a_41790_WUDFRd!RdFdoDevice::RdIoReply+179
Followup: MachineOwner
=====================================================
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00041790, The subtype of the bugcheck.
Arg2: c0802080
Arg3: 0000ffff
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_41790
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: taskeng.exe
CURRENT_IRQL: 0
BAD_PAGES_DETECTED: 10
LAST_CONTROL_TRANSFER: from 8209730e to 820434d9
STACK_TEXT:
9f674c20 8209730e 029d0000 02ad0fff 04a608da nt!MiDeleteVirtualAddresses+0x7ce
9f674d4c 8205ca1a ffffffff 023af740 023af734 nt!NtFreeVirtualMemory+0x652
9f674d4c 00000023 ffffffff 023af740 023af734 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 00000000 00000000 00000000 0x23
STACK_COMMAND: kb
SYMBOL_NAME: PAGE_NOT_ZERO
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID: PAGE_NOT_ZERO
Followup: MachineOwner
---------
*** Memory manager detected 16 instance(s) of page corruption, target is likely to have memory corruption.
===================================================
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: c032a9b0, memory referenced
Arg2: 00000000, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82069de1, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 82139868
Unable to read MiSystemVaType memory at 82119420
c032a9b0
CURRENT_IRQL: 0
FAULTING_IP:
nt!MmProtectSystemCacheView+94
82069de1 8b1e mov ebx,dword ptr [esi]
CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
BAD_PAGES_DETECTED: 1
TRAP_FRAME: 8b36bae4 -- (.trap 0xffffffff8b36bae4)
ErrCode = 00000000
eax=8211a820 ebx=99d319b0 ecx=8211a820 edx=96d42d60 esi=c032a9b0 edi=84983580
eip=82069de1 esp=8b36bb58 ebp=8b36bc2c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MmProtectSystemCacheView+0x94:
82069de1 8b1e mov ebx,dword ptr [esi] ds:0023:c032a9b0=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82069de1 to 8205cd24
STACK_TEXT:
8b36bae4 82069de1 badb0d00 96d42d60 820fa920 nt!KiTrap0E+0x2ac
8b36bc2c 821f31b0 00000002 96d42a20 00000000 nt!MmProtectSystemCacheView+0x94
8b36bc48 821f2e3b 4ba648d4 00000000 96d42a20 nt!HvpReleaseFlushedViews+0x6a
8b36bcd0 821f2061 96d42a20 8b36bcf0 96d42d48 nt!HvWriteHive+0x377
8b36bcf8 821f36de 82101e10 82137ea8 00000000 nt!HvSyncHive+0xa8
8b36bd14 821f3554 82104100 8b36bd36 8b36bd3c nt!CmpDoFlushNextHive+0xdc
8b36bd44 8203a445 00000000 00000000 84983580 nt!CmpLazyFlushWorker+0x9a
8b36bd7c 821d7b18 00000000 4ba649c4 00000000 nt!ExpWorkerThread+0xfd
8b36bdc0 82030a2e 8203a348 00000001 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
SYMBOL_NAME: PAGE_NOT_ZERO
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID: PAGE_NOT_ZERO
Followup: MachineOwner
---------
*** Memory manager detected 1 instance(s) of page corruption, target is likely to have memory corruption.