Help
Hey guys my computer has been BSODing a lot for the last few days. The times are random as in sometimes I can go for 10 hours without a single one while other times I get one every 2 minutes.
Hopefully I can get some assistance here.
My Computer Keeps BSODing At Random Times.
#1
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 27 December 2011 - 06:23 AM
Back to top
#2
- Bleepin Madman
-
- Group: BC Advisor
- Posts: 18,394
- Joined: 08-September 08
- Gender:Male
- Location:Catonsville, Md
Posted 27 December 2011 - 07:07 AM
We need to know more about your BSODs...
Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program and When scanning is done, go to Edit > Select All.
Then go to File > Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.
Compliments of Broni
Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program and When scanning is done, go to Edit > Select All.
Then go to File > Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.
Compliments of Broni
My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.
#3
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 27 December 2011 - 09:36 AM
Oh Gosh I am stupid. I accidentally deleted the other 4 BSOD logs using CCleaner =[
I only have one of them left now, hopefully the reason was the same for all 4. If you need more, I can always repost in a couple of days =]
==================================================
Dump File : 122811-20904-01.dmp
Crash Time : 28/12/2011 12:23:08 AM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : fffff880`018efc08
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000008
Parameter 4 : fffff880`018efc08
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+efc08
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7cc40
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\122811-20904-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 412,648
==================================================
I only have one of them left now, hopefully the reason was the same for all 4. If you need more, I can always repost in a couple of days =]
==================================================
Dump File : 122811-20904-01.dmp
Crash Time : 28/12/2011 12:23:08 AM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : fffff880`018efc08
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000008
Parameter 4 : fffff880`018efc08
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+efc08
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7cc40
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\122811-20904-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 412,648
==================================================
#4
- Bleepin Madman
-
- Group: BC Advisor
- Posts: 18,394
- Joined: 08-September 08
- Gender:Male
- Location:Catonsville, Md
Posted 27 December 2011 - 02:06 PM
How to Test your RAM
Guide Overview
The purpose of this guide is to teach you how to check whether your system's RAM (Ramdom Access Memory) is working properly. Bad RAM can lead to a whole host of problems, often which do not appear to have a single cause -- appearing as systemwide glitches, blue screens, and other system trouble. MemTest86+ provides a very good detection mechanism for failed RAM, and is about as good a test you get short of actually replacing the module itself.
Tools Needed
Please perform these steps from a separate, working, machine.
If you didn't get an error screen, Congratulations!
Compliments of Billy O'Neal.
Guide Overview
The purpose of this guide is to teach you how to check whether your system's RAM (Ramdom Access Memory) is working properly. Bad RAM can lead to a whole host of problems, often which do not appear to have a single cause -- appearing as systemwide glitches, blue screens, and other system trouble. MemTest86+ provides a very good detection mechanism for failed RAM, and is about as good a test you get short of actually replacing the module itself.
Tools Needed
Please perform these steps from a separate, working, machine.
- Download MemTest86+, and unzip it to your desktop.
- Burn the image file to a CD, as an image file. If you're unsure how to do this, see the How to Burn an ISO File tutorial.
- Put your CD in the drive and configure your machine to boot to the CD. This is different on all machines, but it's usually by pressing F12 or F10 as your system boots, and selecting either "CDROM" or your cdrom drive. If you are unable to force a CDRom boot, reply with the make and model of your machine and I should be able to get you exact instructions.
- If you've done it correctly, MemTest86+ will start to run automaticly, as shown below:
- If you want to be reasonably your RAM is OK, then allow MemTest to run until you see this message:
On the other hand, if you want to be completely sure your RAM is OK, allow MemTest to run overnight. Memtest will run forever until power is pulled on the machine. - Check the MemTest screen for any reported errors. Errors will appear as RED warnings at the bottom of the screen, similar to the following screenshot:
- Hard-Reset the machine, removing the MemTest disk in the process.
If you didn't get an error screen, Congratulations!
Compliments of Billy O'Neal.
My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.
#5
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 27 December 2011 - 07:35 PM
Okay I ran Memtest+, no errors. =]
I just wanted to give you some extra infomation
- 2 Hours before BSODs started I used TFC.Exe cleaner which is a very old program I had from my Windows XP. Not sure if that program was meant to be used on Windows 7.
- There was also a blackout that day resulting in my computer suddenly shutting down while I was browsing the web.
- There was also an electrical storm, I at first also thought there might be RAM damage but checks out it's intact.
- The computer is brand new, got it 2 weeks ago.
The BSODs all started later that night after the blackout, storm, TFC cleaner =o.
I just wanted to give you some extra infomation
- 2 Hours before BSODs started I used TFC.Exe cleaner which is a very old program I had from my Windows XP. Not sure if that program was meant to be used on Windows 7.
- There was also a blackout that day resulting in my computer suddenly shutting down while I was browsing the web.
- There was also an electrical storm, I at first also thought there might be RAM damage but checks out it's intact.
- The computer is brand new, got it 2 weeks ago.
The BSODs all started later that night after the blackout, storm, TFC cleaner =o.
This post has been edited by kkkkasd: 27 December 2011 - 07:37 PM
#6
- Inquisitor
-
- Group: BC Advisor
- Posts: 4,713
- Joined: 15-July 09
- Gender:Male
- Location:Cowra NSW Australia
Posted 27 December 2011 - 07:44 PM
Re: memtest86+
A minimum test for any confidence in the result is at least 7 complete passes.
It is a pity that you deleted the previous minidumps, but we will have to work with what we have got.
Please zip up any/all minidumps and attach the resultant zip file to your next reply so I can have a closer look. There's a chance I might get some more useful info from them.
- How many passes were completed?
- How many hours did it run?
A minimum test for any confidence in the result is at least 7 complete passes.
It is a pity that you deleted the previous minidumps, but we will have to work with what we have got.
Please zip up any/all minidumps and attach the resultant zip file to your next reply so I can have a closer look. There's a chance I might get some more useful info from them.
- Navigate to C:\Windows\Minidump <<< folder
- Click on the first minidump file to select it.
- Hold down the <Shift> key, and click on the last minidump file to select all of the files.
- Release the <Shift> key.
- Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
The zip file will be located in the same place (the Minidump folder). - Attach the zip file to your next reply.
When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
AustrAlien
Google is my friend. Make Google your friend too.
Google is my friend. Make Google your friend too.
#7
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 27 December 2011 - 10:08 PM
I only ran 1 cycle and it took about 20-25 minutes.
Attached File(s)
-
122811-20904-01.zip (31.56K)
Number of downloads: 2
#8
- Bleepin Madman
-
- Group: BC Advisor
- Posts: 18,394
- Joined: 08-September 08
- Gender:Male
- Location:Catonsville, Md
Posted 27 December 2011 - 11:42 PM
If the computer is brand new, then it is still under warranty. I would return it for warranty work.
My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.
#9
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 28 December 2011 - 12:10 AM
cryptodan, on 27 December 2011 - 11:42 PM, said:
If the computer is brand new, then it is still under warranty. I would return it for warranty work.
The computer was bought from a private dealer which requires I send the parts myself because they can't confirm the warranty at the shop themselves, so I would need to know where the problem is first.
Plus it would just be more convenient to fix it here if say it's just a corrupt Windows or whatever =]
PS - Also do warranties normally cover surge damage?
#10
- Inquisitor
-
- Group: BC Advisor
- Posts: 4,713
- Joined: 15-July 09
- Gender:Male
- Location:Cowra NSW Australia
Posted 28 December 2011 - 01:46 AM
Re: memtest86+ result
A single pass counts for very little. A minimum test for any confidence in the result is at least 7 complete passes. To have any greater degree of confidence in the result, memtest86+ needs to run for 24 hours.
I see SuperAntispyware installed and running on the system, BUT ... I see no evidence of an antivirus application: Is that correct?
The above-mentioned file name does not return a single result in a google search: This is very suspicious!
It may or may not be related to the action of Daemon Tools (see the following).
Daemon Tools is installed on the system:
Daemon Tools OR Alcohol 120%'s sptd.sys has known issues with Win7: See http://www.sysnative.com/0x1/DriverReference.html#sptd.sys <<< UNINSTALL Daemon Tools. (This may not Remove the sptd.sys file from the computer.)
THEN REMOVE THE SPTD.SYS FILE:
Download SPTD setup file: http://www.duplexsecure.com/en/downloads >>> use to uninstall &/or install <<<
"To remove SPTD, simply download SPTD setup file ..... and execute it.
In dialog that appears press "Uninstall" button and then SPTD will remove itself from your Windows installation."
Restart the computer.
CHECK THAT THE SPTD.SYS FILE IS NO LONGER PRESENT in the drivers folder by doing the following ...
Please download SystemLook.exe and save it to your Desktop.
Note: The log, SystemLook.txt, is saved on your Desktop.
A single pass counts for very little. A minimum test for any confidence in the result is at least 7 complete passes. To have any greater degree of confidence in the result, memtest86+ needs to run for 24 hours.
I see SuperAntispyware installed and running on the system, BUT ... I see no evidence of an antivirus application: Is that correct?
Quote
aoky55yw.SYS Mar 29 2011
The above-mentioned file name does not return a single result in a google search: This is very suspicious!
It may or may not be related to the action of Daemon Tools (see the following).
Daemon Tools is installed on the system:
Quote
dtsoftbus01.sys Nov 11 2010
sptd.sys Feb 28 2011
sptd.sys Feb 28 2011
Daemon Tools OR Alcohol 120%'s sptd.sys has known issues with Win7: See http://www.sysnative.com/0x1/DriverReference.html#sptd.sys <<< UNINSTALL Daemon Tools. (This may not Remove the sptd.sys file from the computer.)
THEN REMOVE THE SPTD.SYS FILE:
Download SPTD setup file: http://www.duplexsecure.com/en/downloads >>> use to uninstall &/or install <<<
"To remove SPTD, simply download SPTD setup file ..... and execute it.
In dialog that appears press "Uninstall" button and then SPTD will remove itself from your Windows installation."
Restart the computer.
CHECK THAT THE SPTD.SYS FILE IS NO LONGER PRESENT in the drivers folder by doing the following ...
Please download SystemLook.exe and save it to your Desktop.
- alternate download link
- Double-click SystemLook.exe to run it.
- Copy the content of the following code box and paste into the main text field:
:filefind aoky55yw.SYS dtsoftbus01.sys sptd.sys
- Click the Look button to start the scan.
Please be patient, as it may take a little time. - When finished, a Notepad window will open with the results of the scan.
- Please copy & paste the entire content of this log in your next reply.
For users of Windows 64 bit systems: SystemLook (64-bit)
Note: The log, SystemLook.txt, is saved on your Desktop.
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\CactusIsland\kkkkasd_BC\122811-20904-01\122811-20904-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c54000 PsLoadedModuleList = 0xfffff800`02e99670
Debug session time: Wed Dec 28 00:22:11.570 2011 (UTC + 11:00)
System Uptime: 0 days 0:53:52.975
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {fffff880018efc08, 2, 8, fffff880018efc08}
Probably caused by : Ntfs.sys ( Ntfs! ?? ::NNGAKEGL::`string'+2bf0 )
Followup: MachineOwner
---------
1: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;!peb;!sysinfo cpuinfo;!sysinfo machineid; !sysinfo cpuspeed; !sysinfo smbios
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff880018efc08, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff880018efc08, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f03100
fffff880018efc08
CURRENT_IRQL: 2
FAULTING_IP:
Ntfs! ?? ::NNGAKEGL::`string'+2bf0
fffff880`018efc08 55 push rbp
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: mbam.exe
TRAP_FRAME: fffff8800a77cfd0 -- (.trap 0xfffff8800a77cfd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880018efc08 rbx=0000000000000000 rcx=fffff8800a77d1a0
rdx=fffff8800a77e660 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880018efc08 rsp=fffff8800a77d168 rbp=fffff8800a77d2a0
r8=fffff8800a77d920 r9=fffff8800a77d2a0 r10=fffff8800a77e840
r11=fffff8800a77d1d8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
Ntfs! ?? ::NNGAKEGL::`string'+0x2bf0:
fffff880`018efc08 55 push rbp
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cd01e9 to fffff80002cd0c40
FAILED_INSTRUCTION_ADDRESS:
Ntfs! ?? ::NNGAKEGL::`string'+2bf0
fffff880`018efc08 55 push rbp
STACK_TEXT:
fffff880`0a77ce88 fffff800`02cd01e9 : 00000000`0000000a fffff880`018efc08 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`0a77ce90 fffff800`02ccee60 : 00000000`00000000 fffff880`0a77d140 00000000`00000000 fffff880`01850810 : nt!KiBugCheckDispatch+0x69
fffff880`0a77cfd0 fffff880`018efc08 : fffff800`02cfca7c fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 : nt!KiPageFault+0x260
fffff880`0a77d168 fffff800`02cfca7c : fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 fffff880`00e4e40b : Ntfs! ?? ::NNGAKEGL::`string'+0x2bf0
fffff880`0a77d170 fffff800`02cfc4fd : fffff880`01850804 fffff880`0a77e660 00000000`00000000 fffff880`01800000 : nt!_C_specific_handler+0x8c
fffff880`0a77d1e0 fffff800`02cfb2d5 : fffff880`01850804 fffff880`0a77d258 fffff880`0a77e0c8 fffff880`01800000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0a77d210 fffff800`02d0c361 : fffff880`0a77e0c8 fffff880`0a77d920 fffff880`00000000 00000000`00000005 : nt!RtlDispatchException+0x415
fffff880`0a77d8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x135
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs! ?? ::NNGAKEGL::`string'+2bf0
fffff880`018efc08 55 push rbp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs! ?? ::NNGAKEGL::`string'+2bf0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4d79997b
FAILURE_BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_Ntfs!_??_::NNGAKEGL::_string_+2bf0
BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_Ntfs!_??_::NNGAKEGL::_string_+2bf0
Followup: MachineOwner
---------
rax=fffff8800a77cf90 rbx=fffff88001850810 rcx=000000000000000a
rdx=fffff880018efc08 rsi=fffff8800a77e660 rdi=0000000000000000
rip=fffff80002cd0c40 rsp=fffff8800a77ce88 rbp=fffff8800a77d050
r8=0000000000000002 r9=0000000000000008 r10=fffff880018efc08
r11=0000000000000008 r12=fffff88001850804 r13=0000000000099f08
r14=fffff88001800000 r15=fffff8800a77e0c8
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000286
nt!KeBugCheckEx:
fffff800`02cd0c40 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`0a77ce90=000000000000000a
Child-SP RetAddr : Args to Child : Call Site
fffff880`0a77ce88 fffff800`02cd01e9 : 00000000`0000000a fffff880`018efc08 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`0a77ce90 fffff800`02ccee60 : 00000000`00000000 fffff880`0a77d140 00000000`00000000 fffff880`01850810 : nt!KiBugCheckDispatch+0x69
fffff880`0a77cfd0 fffff880`018efc08 : fffff800`02cfca7c fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 : nt!KiPageFault+0x260 (TrapFrame @ fffff880`0a77cfd0)
fffff880`0a77d168 fffff800`02cfca7c : fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 fffff880`00e4e40b : Ntfs! ?? ::NNGAKEGL::`string'+0x2bf0
fffff880`0a77d170 fffff800`02cfc4fd : fffff880`01850804 fffff880`0a77e660 00000000`00000000 fffff880`01800000 : nt!_C_specific_handler+0x8c
fffff880`0a77d1e0 fffff800`02cfb2d5 : fffff880`01850804 fffff880`0a77d258 fffff880`0a77e0c8 fffff880`01800000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0a77d210 fffff800`02d0c361 : fffff880`0a77e0c8 fffff880`0a77d920 fffff880`00000000 00000000`00000005 : nt!RtlDispatchException+0x415
fffff880`0a77d8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x135
start end module name
fffff800`00b9c000 fffff800`00ba6000 kdcom kdcom.dll Sun Feb 06 03:52:49 2011 (4D4D8061)
fffff800`02c0b000 fffff800`02c54000 hal hal.dll Sun Nov 21 00:00:25 2010 (4CE7C669)
fffff800`02c54000 fffff800`0323d000 nt ntkrnlmp.exe Thu Jun 23 12:53:23 2011 (4E02AAA3)
fffff880`00c00000 fffff880`00cc0000 CI CI.dll Sun Nov 21 00:12:36 2010 (4CE7C944)
fffff880`00cc0000 fffff880`00cda000 rassstp rassstp.sys Tue Jul 14 10:10:25 2009 (4A5BCCF1)
fffff880`00cda000 fffff880`00ce9000 mouclass mouclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`00cee000 fffff880`00d3d000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sun Nov 21 00:03:51 2010 (4CE7C737)
fffff880`00d3d000 fffff880`00d51000 PSHED PSHED.dll Tue Jul 14 11:32:23 2009 (4A5BE027)
fffff880`00d51000 fffff880`00daf000 CLFS CLFS.SYS Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`00daf000 fffff880`00df2000 ks ks.sys Sat Nov 20 21:33:23 2010 (4CE7A3F3)
fffff880`00e00000 fffff880`00e4c000 fltmgr fltmgr.sys Sat Nov 20 20:19:24 2010 (4CE7929C)
fffff880`00e4c000 fffff880`00e60000 fileinfo fileinfo.sys Tue Jul 14 09:34:25 2009 (4A5BC481)
fffff880`00e60000 fffff880`00e81000 raspptp raspptp.sys Sat Nov 20 21:52:31 2010 (4CE7A86F)
fffff880`00e81000 fffff880`00f25000 Wdf01000 Wdf01000.sys Tue Jul 14 09:22:07 2009 (4A5BC19F)
fffff880`00f25000 fffff880`00f34000 WDFLDR WDFLDR.SYS Tue Jul 14 09:19:54 2009 (4A5BC11A)
fffff880`00f34000 fffff880`00f67000 pci pci.sys Sat Nov 20 20:19:11 2010 (4CE7928F)
fffff880`00f67000 fffff880`00f7c000 volmgr volmgr.sys Sat Nov 20 20:19:28 2010 (4CE792A0)
fffff880`00f7c000 fffff880`00fd8000 volmgrx volmgrx.sys Sat Nov 20 20:20:43 2010 (4CE792EB)
fffff880`00fd8000 fffff880`00ff2000 mountmgr mountmgr.sys Sat Nov 20 20:19:21 2010 (4CE79299)
fffff880`01000000 fffff880`0100a000 msisadrv msisadrv.sys Tue Jul 14 09:19:26 2009 (4A5BC0FE)
fffff880`0100a000 fffff880`01017000 vdrvroot vdrvroot.sys Tue Jul 14 10:01:31 2009 (4A5BCADB)
fffff880`01017000 fffff880`0102c000 partmgr partmgr.sys Sat Nov 20 20:20:00 2010 (4CE792C0)
fffff880`01038000 fffff880`0119e000 sptd sptd.sys Mon Feb 28 06:29:52 2011 (4D6AA630)
fffff880`0119e000 fffff880`011f5000 ACPI ACPI.sys Sat Nov 20 20:19:16 2010 (4CE79294)
fffff880`011f5000 fffff880`011fe000 WMILIB WMILIB.SYS Tue Jul 14 09:19:51 2009 (4A5BC117)
fffff880`01200000 fffff880`0122a000 ataport ataport.SYS Sat Nov 20 20:19:15 2010 (4CE79293)
fffff880`0122a000 fffff880`01235000 msahci msahci.sys Sat Nov 20 21:33:58 2010 (4CE7A416)
fffff880`01240000 fffff880`015d8000 iaStor iaStor.sys Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`015d8000 fffff880`015e1000 atapi atapi.sys Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`015e1000 fffff880`015f1000 PCIIDEX PCIIDEX.SYS Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`015f1000 fffff880`015fc000 amdxata amdxata.sys Sat Mar 20 03:18:18 2010 (4BA3A3CA)
fffff880`01600000 fffff880`01672000 cng cng.sys Sat Nov 20 21:08:45 2010 (4CE79E2D)
fffff880`01672000 fffff880`01698000 tunnel tunnel.sys Sat Nov 20 21:51:50 2010 (4CE7A846)
fffff880`01698000 fffff880`016c7000 ndiswan ndiswan.sys Sat Nov 20 21:52:32 2010 (4CE7A870)
fffff880`016d0000 fffff880`01740000 bdfsfltr bdfsfltr.sys Thu Mar 24 00:52:33 2011 (4D89FB21)
fffff880`01740000 fffff880`0179e000 msrpc msrpc.sys unavailable (00000000)
fffff880`0179e000 fffff880`017ec000 atikmpag atikmpag.sys Thu Jan 13 13:15:21 2011 (4D2E6039)
fffff880`017ec000 fffff880`017fb000 kbdclass kbdclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`01800000 fffff880`019a3000 Ntfs Ntfs.sys Fri Mar 11 14:39:39 2011 (4D79997B)
fffff880`019a3000 fffff880`019be000 ksecdd ksecdd.sys Sat Nov 20 20:21:15 2010 (4CE7930B)
fffff880`019be000 fffff880`019cf000 pcw pcw.sys Tue Jul 14 09:19:27 2009 (4A5BC0FF)
fffff880`019cf000 fffff880`019d9000 Fs_Rec Fs_Rec.sys unavailable (00000000)
fffff880`019d9000 fffff880`01a00000 bdfwfpf bdfwfpf.sys Sat Aug 21 01:41:40 2010 (4C6EA234)
fffff880`01a00000 fffff880`01a60000 NETIO NETIO.SYS Sat Nov 20 20:23:13 2010 (4CE79381)
fffff880`01a60000 fffff880`01a8b000 ksecpkg ksecpkg.sys Sat Nov 20 21:10:34 2010 (4CE79E9A)
fffff880`01a8b000 fffff880`01aad000 tdx tdx.sys Sat Nov 20 20:21:54 2010 (4CE79332)
fffff880`01aad000 fffff880`01aba000 TDI TDI.SYS Sat Nov 20 20:22:06 2010 (4CE7933E)
fffff880`01aba000 fffff880`01ad5000 raspppoe raspppoe.sys Tue Jul 14 10:10:17 2009 (4A5BCCE9)
fffff880`01ad5000 fffff880`01bc8000 ndis ndis.sys Sat Nov 20 20:23:30 2010 (4CE79392)
fffff880`01bc8000 fffff880`01be6000 dfsc dfsc.sys Sat Nov 20 20:26:31 2010 (4CE79447)
fffff880`01be6000 fffff880`01bf7000 blbdrive blbdrive.sys Tue Jul 14 09:35:59 2009 (4A5BC4DF)
fffff880`01c00000 fffff880`01c3a000 fvevol fvevol.sys Sat Nov 20 20:24:06 2010 (4CE793B6)
fffff880`01c3a000 fffff880`01c50000 disk disk.sys Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`01c50000 fffff880`01c80000 CLASSPNP CLASSPNP.SYS Sat Nov 20 20:19:23 2010 (4CE7929B)
fffff880`01c8e000 fffff880`01cb3000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 09:38:51 2009 (4A5BC58B)
fffff880`01cb3000 fffff880`01cc3000 watchdog watchdog.sys Tue Jul 14 09:37:35 2009 (4A5BC53F)
fffff880`01cc3000 fffff880`01ccc000 rdpencdd rdpencdd.sys Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`01ccc000 fffff880`01cd5000 rdprefmp rdprefmp.sys Tue Jul 14 10:16:35 2009 (4A5BCE63)
fffff880`01cd8000 fffff880`01edc000 tcpip tcpip.sys Thu Sep 29 13:43:04 2011 (4E83E948)
fffff880`01edc000 fffff880`01f26000 fwpkclnt fwpkclnt.sys Sat Nov 20 20:21:37 2010 (4CE79321)
fffff880`01f26000 fffff880`01f30000 scmndisp scmndisp.sys Wed Jan 17 18:48:03 2007 (45ADD4B3)
fffff880`01f30000 fffff880`01f7c000 volsnap volsnap.sys Sat Nov 20 20:20:08 2010 (4CE792C8)
fffff880`01f7c000 fffff880`01f84000 spldr spldr.sys Tue May 12 02:56:27 2009 (4A0858BB)
fffff880`01f84000 fffff880`01fbe000 rdyboost rdyboost.sys Sat Nov 20 20:43:10 2010 (4CE7982E)
fffff880`01fbe000 fffff880`01fd0000 mup mup.sys Tue Jul 14 09:23:45 2009 (4A5BC201)
fffff880`01fd0000 fffff880`01fd9000 hwpolicy hwpolicy.sys Sat Nov 20 20:18:54 2010 (4CE7927E)
fffff880`01fd9000 fffff880`01fe4000 Msfs Msfs.SYS Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`01fe4000 fffff880`01ff5000 Npfs Npfs.SYS Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`04400000 fffff880`0442a000 cdrom cdrom.sys Sat Nov 20 20:19:20 2010 (4CE79298)
fffff880`0442a000 fffff880`04433000 Null Null.SYS unavailable (00000000)
fffff880`04433000 fffff880`0443a000 Beep Beep.SYS Tue Jul 14 10:00:13 2009 (4A5BCA8D)
fffff880`0443a000 fffff880`04448000 vga vga.sys Tue Jul 14 09:38:47 2009 (4A5BC587)
fffff880`04448000 fffff880`047e0000 dump_iaStor dump_iaStor.sys Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`047f5000 fffff880`047fe000 RDPCDD RDPCDD.sys Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`04800000 fffff880`04846000 dxgmms1 dxgmms1.sys Sat Nov 20 20:49:53 2010 (4CE799C1)
fffff880`04846000 fffff880`0486a000 HDAudBus HDAudBus.sys Sat Nov 20 21:43:42 2010 (4CE7A65E)
fffff880`0486a000 fffff880`0487b000 HECIx64 HECIx64.sys Wed Oct 20 10:33:43 2010 (4CBE2AD7)
fffff880`0487b000 fffff880`0488c000 usbehci usbehci.sys Fri Mar 25 14:29:04 2011 (4D8C0C00)
fffff880`0488c000 fffff880`048e2000 USBPORT USBPORT.SYS Fri Mar 25 14:29:12 2011 (4D8C0C08)
fffff880`048e2000 fffff880`048ee000 serenum serenum.sys Tue Jul 14 10:00:33 2009 (4A5BCAA1)
fffff880`048ee000 fffff880`049e2000 dxgkrnl dxgkrnl.sys Sat Nov 20 20:50:50 2010 (4CE799FA)
fffff880`049e2000 fffff880`049ff000 parport parport.sys Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`04a00000 fffff880`04a1d000 serial serial.sys Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`04a1d000 fffff880`04a38000 wanarp wanarp.sys Sat Nov 20 21:52:36 2010 (4CE7A874)
fffff880`04a38000 fffff880`04a4c000 termdd termdd.sys Sat Nov 20 22:03:40 2010 (4CE7AB0C)
fffff880`04a4c000 fffff880`04a56000 SASKUTIL64 SASKUTIL64.SYS Wed Jul 13 07:00:01 2011 (4E1CB5D1)
fffff880`04a56000 fffff880`04a60000 SASDIFSV64 SASDIFSV64.SYS Fri Jul 22 09:03:00 2011 (4E28B024)
fffff880`04a60000 fffff880`04ab1000 rdbss rdbss.sys Sat Nov 20 20:27:51 2010 (4CE79497)
fffff880`04ab1000 fffff880`04abd000 nsiproxy nsiproxy.sys Tue Jul 14 09:21:02 2009 (4A5BC15E)
fffff880`04abd000 fffff880`04ac8000 mssmbios mssmbios.sys Tue Jul 14 09:31:10 2009 (4A5BC3BE)
fffff880`04acb000 fffff880`04b54000 afd afd.sys Mon Apr 25 12:33:58 2011 (4DB4DD96)
fffff880`04b54000 fffff880`04b99000 netbt netbt.sys Sat Nov 20 20:23:18 2010 (4CE79386)
fffff880`04b99000 fffff880`04ba2000 wfplwf wfplwf.sys Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`04ba2000 fffff880`04bc8000 pacer pacer.sys Sat Nov 20 21:52:18 2010 (4CE7A862)
fffff880`04bc8000 fffff880`04bde000 vwififlt vwififlt.sys Tue Jul 14 10:07:22 2009 (4A5BCC3A)
fffff880`04bde000 fffff880`04bed000 netbios netbios.sys Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`04bed000 fffff880`04bfc000 discache discache.sys Tue Jul 14 09:37:18 2009 (4A5BC52E)
fffff880`04e00000 fffff880`04e24000 rasl2tp rasl2tp.sys Sat Nov 20 21:52:34 2010 (4CE7A872)
fffff880`04e24000 fffff880`04e30000 ndistapi ndistapi.sys Tue Jul 14 10:10:00 2009 (4A5BCCD8)
fffff880`04e30000 fffff880`04e31480 swenum swenum.sys Tue Jul 14 10:00:18 2009 (4A5BCA92)
fffff880`04e38000 fffff880`05734000 atikmdag atikmdag.sys Thu Jan 13 13:49:26 2011 (4D2E6836)
fffff880`05734000 fffff880`05741000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 22:17:04 2009 (4A1151C0)
fffff880`05741000 fffff880`0578e000 aoky55yw aoky55yw.SYS Tue Mar 29 02:41:57 2011 (4D90AC45)
fffff880`0578e000 fffff880`057bd000 SCSIPORT SCSIPORT.SYS Sat Nov 20 21:34:01 2010 (4CE7A419)
fffff880`057bd000 fffff880`057d3000 intelppm intelppm.sys Tue Jul 14 09:19:25 2009 (4A5BC0FD)
fffff880`057d3000 fffff880`057e3000 CompositeBus CompositeBus.sys Sat Nov 20 21:33:17 2010 (4CE7A3ED)
fffff880`057e3000 fffff880`057f9000 AgileVpn AgileVpn.sys Tue Jul 14 10:10:24 2009 (4A5BCCF0)
fffff880`0583e000 fffff880`05884000 dtsoftbus01 dtsoftbus01.sys Thu Jul 28 00:03:42 2011 (4E301ABE)
fffff880`05884000 fffff880`05896000 umbus umbus.sys Sat Nov 20 21:44:37 2010 (4CE7A695)
fffff880`05896000 fffff880`058f0000 usbhub usbhub.sys Fri Mar 25 14:29:25 2011 (4D8C0C15)
fffff880`058f0000 fffff880`05905000 NDProxy NDProxy.SYS Sat Nov 20 21:52:20 2010 (4CE7A864)
fffff880`05905000 fffff880`05925000 AtihdW76 AtihdW76.sys Wed Nov 17 23:02:04 2010 (4CE3C43C)
fffff880`05925000 fffff880`05962000 portcls portcls.sys Tue Jul 14 10:06:27 2009 (4A5BCC03)
fffff880`05962000 fffff880`05984000 drmk drmk.sys Tue Jul 14 11:01:25 2009 (4A5BD8E5)
fffff880`05984000 fffff880`05989200 ksthunk ksthunk.sys Tue Jul 14 10:00:19 2009 (4A5BCA93)
fffff880`0598a000 fffff880`059dd000 nwifi nwifi.sys Tue Jul 14 10:07:23 2009 (4A5BCC3B)
fffff880`059dd000 fffff880`059f5000 rspndr rspndr.sys Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`08a00000 fffff880`08a36000 fastfat fastfat.SYS Tue Jul 14 09:23:28 2009 (4A5BC1F0)
fffff880`08a36000 fffff880`08a4b000 lltdio lltdio.sys Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`08a4b000 fffff880`08a5e000 ndisuio ndisuio.sys Sat Nov 20 21:50:08 2010 (4CE7A7E0)
fffff880`08a69000 fffff880`08cf1000 viahduaa viahduaa.sys Mon Mar 28 22:27:35 2011 (4D9070A7)
fffff880`08cf1000 fffff880`08cff000 crashdmp crashdmp.sys Tue Jul 14 10:01:01 2009 (4A5BCABD)
fffff880`08cff000 fffff880`08d12000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 09:21:51 2009 (4A5BC18F)
fffff880`08d12000 fffff880`08d1e000 Dxapi Dxapi.sys Tue Jul 14 09:38:28 2009 (4A5BC574)
fffff880`08d1e000 fffff880`08d2c000 monitor monitor.sys Tue Jul 14 09:38:52 2009 (4A5BC58C)
fffff880`08d2c000 fffff880`08d3a000 hidusb hidusb.sys Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`08d3a000 fffff880`08d53000 HIDCLASS HIDCLASS.SYS Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`08d53000 fffff880`08d5b080 HIDPARSE HIDPARSE.SYS Tue Jul 14 10:06:17 2009 (4A5BCBF9)
fffff880`08d5c000 fffff880`08d5df00 USBD USBD.SYS Fri Mar 25 14:28:59 2011 (4D8C0BFB)
fffff880`08d5e000 fffff880`08d6b000 mouhid mouhid.sys Tue Jul 14 10:00:20 2009 (4A5BCA94)
fffff880`08d6b000 fffff880`08d88000 usbccgp usbccgp.sys Fri Mar 25 14:29:14 2011 (4D8C0C0A)
fffff880`08d88000 fffff880`08d96000 kbdhid kbdhid.sys Sat Nov 20 21:33:25 2010 (4CE7A3F5)
fffff880`08db1000 fffff880`08dd4000 luafv luafv.sys Tue Jul 14 09:26:13 2009 (4A5BC295)
fffff880`08dd4000 fffff880`08df5000 WudfPf WudfPf.sys Sat Nov 20 21:42:44 2010 (4CE7A624)
fffff880`09600000 fffff880`0964e000 mrxsmb10 mrxsmb10.sys Sat Jul 09 12:46:28 2011 (4E17C104)
fffff880`0964e000 fffff880`09672000 mrxsmb20 mrxsmb20.sys Wed Apr 27 12:39:37 2011 (4DB781E9)
fffff880`09689000 fffff880`09752000 HTTP HTTP.sys Sat Nov 20 20:24:30 2010 (4CE793CE)
fffff880`09752000 fffff880`09770000 bowser bowser.sys Wed Feb 23 15:55:04 2011 (4D649328)
fffff880`09770000 fffff880`09788000 mpsdrv mpsdrv.sys Tue Jul 14 10:08:25 2009 (4A5BCC79)
fffff880`09788000 fffff880`097b5000 mrxsmb mrxsmb.sys Wed Apr 27 12:40:38 2011 (4DB78226)
fffff880`09a00000 fffff880`09aa6000 peauth peauth.sys Tue Jul 14 11:01:19 2009 (4A5BD8DF)
fffff880`09aa6000 fffff880`09ab1000 secdrv secdrv.SYS Wed Sep 13 23:18:38 2006 (4508052E)
fffff880`09ac3000 fffff880`09b3b000 wg111v2 wg111v2.sys Fri Apr 02 21:45:08 2010 (4BB5CAB4)
fffff880`09b3b000 fffff880`09b48000 vwifibus vwifibus.sys Tue Jul 14 10:07:21 2009 (4A5BCC39)
fffff880`09b48000 fffff880`09b6f000 idmwfp idmwfp.sys Thu Jul 07 00:37:41 2011 (4E147335)
fffff880`09b6f000 fffff880`09ba0000 srvnet srvnet.sys Fri Apr 29 13:05:35 2011 (4DBA2AFF)
fffff880`09ba0000 fffff880`09bb2000 tcpipreg tcpipreg.sys Sat Nov 20 21:51:48 2010 (4CE7A844)
fffff880`09bb2000 fffff880`09bb9000 WinRing0x64 WinRing0x64.sys Sat Jul 26 23:29:37 2008 (488B26C1)
fffff880`0a223000 fffff880`0a28c000 srv2 srv2.sys Fri Apr 29 13:05:46 2011 (4DBA2B0A)
fffff880`0a28c000 fffff880`0a324000 srv srv.sys Fri Apr 29 13:06:06 2011 (4DBA2B1E)
fffff880`0a324000 fffff880`0a34e000 bdfm bdfm.sys Thu Apr 22 23:20:49 2010 (4BD04D31)
fffff880`0a34e000 fffff880`0a36d000 BDHV BDHV.SYS Thu Apr 22 23:20:29 2010 (4BD04D1D)
fffff880`0a3de000 fffff880`0a3e9000 asyncmac asyncmac.sys Tue Jul 14 10:10:13 2009 (4A5BCCE5)
fffff960`000b0000 fffff960`003c4000 win32k win32k.sys Thu Sep 29 14:03:02 2011 (4E83EDF6)
fffff960`004d0000 fffff960`004da000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`00730000 fffff960`00757000 cdd cdd.dll unavailable (00000000)
Unloaded modules:
fffff880`08d96000 fffff880`08db1000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
fffff880`0a36d000 fffff880`0a3de000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`01c80000 fffff880`01c8e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`0444a000 fffff880`047e2000 dump_iaStor.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00398000
fffff880`047e2000 fffff880`047f5000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
start end module name
fffff880`0119e000 fffff880`011f5000 ACPI ACPI.sys Sat Nov 20 20:19:16 2010 (4CE79294)
fffff880`04acb000 fffff880`04b54000 afd afd.sys Mon Apr 25 12:33:58 2011 (4DB4DD96)
fffff880`057e3000 fffff880`057f9000 AgileVpn AgileVpn.sys Tue Jul 14 10:10:24 2009 (4A5BCCF0)
fffff880`015f1000 fffff880`015fc000 amdxata amdxata.sys Sat Mar 20 03:18:18 2010 (4BA3A3CA)
fffff880`05741000 fffff880`0578e000 aoky55yw aoky55yw.SYS Tue Mar 29 02:41:57 2011 (4D90AC45)
fffff880`0a3de000 fffff880`0a3e9000 asyncmac asyncmac.sys Tue Jul 14 10:10:13 2009 (4A5BCCE5)
fffff880`015d8000 fffff880`015e1000 atapi atapi.sys Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`0122a000 ataport ataport.SYS Sat Nov 20 20:19:15 2010 (4CE79293)
fffff880`05905000 fffff880`05925000 AtihdW76 AtihdW76.sys Wed Nov 17 23:02:04 2010 (4CE3C43C)
fffff880`04e38000 fffff880`05734000 atikmdag atikmdag.sys Thu Jan 13 13:49:26 2011 (4D2E6836)
fffff880`0179e000 fffff880`017ec000 atikmpag atikmpag.sys Thu Jan 13 13:15:21 2011 (4D2E6039)
fffff880`0a324000 fffff880`0a34e000 bdfm bdfm.sys Thu Apr 22 23:20:49 2010 (4BD04D31)
fffff880`016d0000 fffff880`01740000 bdfsfltr bdfsfltr.sys Thu Mar 24 00:52:33 2011 (4D89FB21)
fffff880`019d9000 fffff880`01a00000 bdfwfpf bdfwfpf.sys Sat Aug 21 01:41:40 2010 (4C6EA234)
fffff880`0a34e000 fffff880`0a36d000 BDHV BDHV.SYS Thu Apr 22 23:20:29 2010 (4BD04D1D)
fffff880`04433000 fffff880`0443a000 Beep Beep.SYS Tue Jul 14 10:00:13 2009 (4A5BCA8D)
fffff880`01be6000 fffff880`01bf7000 blbdrive blbdrive.sys Tue Jul 14 09:35:59 2009 (4A5BC4DF)
fffff880`09752000 fffff880`09770000 bowser bowser.sys Wed Feb 23 15:55:04 2011 (4D649328)
fffff960`00730000 fffff960`00757000 cdd cdd.dll unavailable (00000000)
fffff880`04400000 fffff880`0442a000 cdrom cdrom.sys Sat Nov 20 20:19:20 2010 (4CE79298)
fffff880`00c00000 fffff880`00cc0000 CI CI.dll Sun Nov 21 00:12:36 2010 (4CE7C944)
fffff880`01c50000 fffff880`01c80000 CLASSPNP CLASSPNP.SYS Sat Nov 20 20:19:23 2010 (4CE7929B)
fffff880`00d51000 fffff880`00daf000 CLFS CLFS.SYS Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`01600000 fffff880`01672000 cng cng.sys Sat Nov 20 21:08:45 2010 (4CE79E2D)
fffff880`057d3000 fffff880`057e3000 CompositeBus CompositeBus.sys Sat Nov 20 21:33:17 2010 (4CE7A3ED)
fffff880`08cf1000 fffff880`08cff000 crashdmp crashdmp.sys Tue Jul 14 10:01:01 2009 (4A5BCABD)
fffff880`01bc8000 fffff880`01be6000 dfsc dfsc.sys Sat Nov 20 20:26:31 2010 (4CE79447)
fffff880`04bed000 fffff880`04bfc000 discache discache.sys Tue Jul 14 09:37:18 2009 (4A5BC52E)
fffff880`01c3a000 fffff880`01c50000 disk disk.sys Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`05962000 fffff880`05984000 drmk drmk.sys Tue Jul 14 11:01:25 2009 (4A5BD8E5)
fffff880`0583e000 fffff880`05884000 dtsoftbus01 dtsoftbus01.sys Thu Jul 28 00:03:42 2011 (4E301ABE)
fffff880`08cff000 fffff880`08d12000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 09:21:51 2009 (4A5BC18F)
fffff880`04448000 fffff880`047e0000 dump_iaStor dump_iaStor.sys Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`08d12000 fffff880`08d1e000 Dxapi Dxapi.sys Tue Jul 14 09:38:28 2009 (4A5BC574)
fffff880`048ee000 fffff880`049e2000 dxgkrnl dxgkrnl.sys Sat Nov 20 20:50:50 2010 (4CE799FA)
fffff880`04800000 fffff880`04846000 dxgmms1 dxgmms1.sys Sat Nov 20 20:49:53 2010 (4CE799C1)
fffff880`08a00000 fffff880`08a36000 fastfat fastfat.SYS Tue Jul 14 09:23:28 2009 (4A5BC1F0)
fffff880`00e4c000 fffff880`00e60000 fileinfo fileinfo.sys Tue Jul 14 09:34:25 2009 (4A5BC481)
fffff880`00e00000 fffff880`00e4c000 fltmgr fltmgr.sys Sat Nov 20 20:19:24 2010 (4CE7929C)
fffff880`019cf000 fffff880`019d9000 Fs_Rec Fs_Rec.sys unavailable (00000000)
fffff880`01c00000 fffff880`01c3a000 fvevol fvevol.sys Sat Nov 20 20:24:06 2010 (4CE793B6)
fffff880`01edc000 fffff880`01f26000 fwpkclnt fwpkclnt.sys Sat Nov 20 20:21:37 2010 (4CE79321)
fffff880`05734000 fffff880`05741000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 22:17:04 2009 (4A1151C0)
fffff800`02c0b000 fffff800`02c54000 hal hal.dll Sun Nov 21 00:00:25 2010 (4CE7C669)
fffff880`04846000 fffff880`0486a000 HDAudBus HDAudBus.sys Sat Nov 20 21:43:42 2010 (4CE7A65E)
fffff880`0486a000 fffff880`0487b000 HECIx64 HECIx64.sys Wed Oct 20 10:33:43 2010 (4CBE2AD7)
fffff880`08d3a000 fffff880`08d53000 HIDCLASS HIDCLASS.SYS Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`08d53000 fffff880`08d5b080 HIDPARSE HIDPARSE.SYS Tue Jul 14 10:06:17 2009 (4A5BCBF9)
fffff880`08d2c000 fffff880`08d3a000 hidusb hidusb.sys Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`09689000 fffff880`09752000 HTTP HTTP.sys Sat Nov 20 20:24:30 2010 (4CE793CE)
fffff880`01fd0000 fffff880`01fd9000 hwpolicy hwpolicy.sys Sat Nov 20 20:18:54 2010 (4CE7927E)
fffff880`01240000 fffff880`015d8000 iaStor iaStor.sys Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`09b48000 fffff880`09b6f000 idmwfp idmwfp.sys Thu Jul 07 00:37:41 2011 (4E147335)
fffff880`057bd000 fffff880`057d3000 intelppm intelppm.sys Tue Jul 14 09:19:25 2009 (4A5BC0FD)
fffff880`017ec000 fffff880`017fb000 kbdclass kbdclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`08d88000 fffff880`08d96000 kbdhid kbdhid.sys Sat Nov 20 21:33:25 2010 (4CE7A3F5)
fffff800`00b9c000 fffff800`00ba6000 kdcom kdcom.dll Sun Feb 06 03:52:49 2011 (4D4D8061)
fffff880`00daf000 fffff880`00df2000 ks ks.sys Sat Nov 20 21:33:23 2010 (4CE7A3F3)
fffff880`019a3000 fffff880`019be000 ksecdd ksecdd.sys Sat Nov 20 20:21:15 2010 (4CE7930B)
fffff880`01a60000 fffff880`01a8b000 ksecpkg ksecpkg.sys Sat Nov 20 21:10:34 2010 (4CE79E9A)
fffff880`05984000 fffff880`05989200 ksthunk ksthunk.sys Tue Jul 14 10:00:19 2009 (4A5BCA93)
fffff880`08a36000 fffff880`08a4b000 lltdio lltdio.sys Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`08db1000 fffff880`08dd4000 luafv luafv.sys Tue Jul 14 09:26:13 2009 (4A5BC295)
fffff880`00cee000 fffff880`00d3d000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sun Nov 21 00:03:51 2010 (4CE7C737)
fffff880`08d1e000 fffff880`08d2c000 monitor monitor.sys Tue Jul 14 09:38:52 2009 (4A5BC58C)
fffff880`00cda000 fffff880`00ce9000 mouclass mouclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`08d5e000 fffff880`08d6b000 mouhid mouhid.sys Tue Jul 14 10:00:20 2009 (4A5BCA94)
fffff880`00fd8000 fffff880`00ff2000 mountmgr mountmgr.sys Sat Nov 20 20:19:21 2010 (4CE79299)
fffff880`09770000 fffff880`09788000 mpsdrv mpsdrv.sys Tue Jul 14 10:08:25 2009 (4A5BCC79)
fffff880`09788000 fffff880`097b5000 mrxsmb mrxsmb.sys Wed Apr 27 12:40:38 2011 (4DB78226)
fffff880`09600000 fffff880`0964e000 mrxsmb10 mrxsmb10.sys Sat Jul 09 12:46:28 2011 (4E17C104)
fffff880`0964e000 fffff880`09672000 mrxsmb20 mrxsmb20.sys Wed Apr 27 12:39:37 2011 (4DB781E9)
fffff880`0122a000 fffff880`01235000 msahci msahci.sys Sat Nov 20 21:33:58 2010 (4CE7A416)
fffff880`01fd9000 fffff880`01fe4000 Msfs Msfs.SYS Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`0100a000 msisadrv msisadrv.sys Tue Jul 14 09:19:26 2009 (4A5BC0FE)
fffff880`01740000 fffff880`0179e000 msrpc msrpc.sys unavailable (00000000)
fffff880`04abd000 fffff880`04ac8000 mssmbios mssmbios.sys Tue Jul 14 09:31:10 2009 (4A5BC3BE)
fffff880`01fbe000 fffff880`01fd0000 mup mup.sys Tue Jul 14 09:23:45 2009 (4A5BC201)
fffff880`01ad5000 fffff880`01bc8000 ndis ndis.sys Sat Nov 20 20:23:30 2010 (4CE79392)
fffff880`04e24000 fffff880`04e30000 ndistapi ndistapi.sys Tue Jul 14 10:10:00 2009 (4A5BCCD8)
fffff880`08a4b000 fffff880`08a5e000 ndisuio ndisuio.sys Sat Nov 20 21:50:08 2010 (4CE7A7E0)
fffff880`01698000 fffff880`016c7000 ndiswan ndiswan.sys Sat Nov 20 21:52:32 2010 (4CE7A870)
fffff880`058f0000 fffff880`05905000 NDProxy NDProxy.SYS Sat Nov 20 21:52:20 2010 (4CE7A864)
fffff880`04bde000 fffff880`04bed000 netbios netbios.sys Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`04b54000 fffff880`04b99000 netbt netbt.sys Sat Nov 20 20:23:18 2010 (4CE79386)
fffff880`01a00000 fffff880`01a60000 NETIO NETIO.SYS Sat Nov 20 20:23:13 2010 (4CE79381)
fffff880`01fe4000 fffff880`01ff5000 Npfs Npfs.SYS Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`04ab1000 fffff880`04abd000 nsiproxy nsiproxy.sys Tue Jul 14 09:21:02 2009 (4A5BC15E)
fffff800`02c54000 fffff800`0323d000 nt ntkrnlmp.exe Thu Jun 23 12:53:23 2011 (4E02AAA3)
fffff880`01800000 fffff880`019a3000 Ntfs Ntfs.sys Fri Mar 11 14:39:39 2011 (4D79997B)
fffff880`0442a000 fffff880`04433000 Null Null.SYS unavailable (00000000)
fffff880`0598a000 fffff880`059dd000 nwifi nwifi.sys Tue Jul 14 10:07:23 2009 (4A5BCC3B)
fffff880`04ba2000 fffff880`04bc8000 pacer pacer.sys Sat Nov 20 21:52:18 2010 (4CE7A862)
fffff880`049e2000 fffff880`049ff000 parport parport.sys Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`01017000 fffff880`0102c000 partmgr partmgr.sys Sat Nov 20 20:20:00 2010 (4CE792C0)
fffff880`00f34000 fffff880`00f67000 pci pci.sys Sat Nov 20 20:19:11 2010 (4CE7928F)
fffff880`015e1000 fffff880`015f1000 PCIIDEX PCIIDEX.SYS Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`019be000 fffff880`019cf000 pcw pcw.sys Tue Jul 14 09:19:27 2009 (4A5BC0FF)
fffff880`09a00000 fffff880`09aa6000 peauth peauth.sys Tue Jul 14 11:01:19 2009 (4A5BD8DF)
fffff880`05925000 fffff880`05962000 portcls portcls.sys Tue Jul 14 10:06:27 2009 (4A5BCC03)
fffff880`00d3d000 fffff880`00d51000 PSHED PSHED.dll Tue Jul 14 11:32:23 2009 (4A5BE027)
fffff880`04e00000 fffff880`04e24000 rasl2tp rasl2tp.sys Sat Nov 20 21:52:34 2010 (4CE7A872)
fffff880`01aba000 fffff880`01ad5000 raspppoe raspppoe.sys Tue Jul 14 10:10:17 2009 (4A5BCCE9)
fffff880`00e60000 fffff880`00e81000 raspptp raspptp.sys Sat Nov 20 21:52:31 2010 (4CE7A86F)
fffff880`00cc0000 fffff880`00cda000 rassstp rassstp.sys Tue Jul 14 10:10:25 2009 (4A5BCCF1)
fffff880`04a60000 fffff880`04ab1000 rdbss rdbss.sys Sat Nov 20 20:27:51 2010 (4CE79497)
fffff880`047f5000 fffff880`047fe000 RDPCDD RDPCDD.sys Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`01cc3000 fffff880`01ccc000 rdpencdd rdpencdd.sys Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`01ccc000 fffff880`01cd5000 rdprefmp rdprefmp.sys Tue Jul 14 10:16:35 2009 (4A5BCE63)
fffff880`01f84000 fffff880`01fbe000 rdyboost rdyboost.sys Sat Nov 20 20:43:10 2010 (4CE7982E)
fffff880`059dd000 fffff880`059f5000 rspndr rspndr.sys Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`04a56000 fffff880`04a60000 SASDIFSV64 SASDIFSV64.SYS Fri Jul 22 09:03:00 2011 (4E28B024)
fffff880`04a4c000 fffff880`04a56000 SASKUTIL64 SASKUTIL64.SYS Wed Jul 13 07:00:01 2011 (4E1CB5D1)
fffff880`01f26000 fffff880`01f30000 scmndisp scmndisp.sys Wed Jan 17 18:48:03 2007 (45ADD4B3)
fffff880`0578e000 fffff880`057bd000 SCSIPORT SCSIPORT.SYS Sat Nov 20 21:34:01 2010 (4CE7A419)
fffff880`09aa6000 fffff880`09ab1000 secdrv secdrv.SYS Wed Sep 13 23:18:38 2006 (4508052E)
fffff880`048e2000 fffff880`048ee000 serenum serenum.sys Tue Jul 14 10:00:33 2009 (4A5BCAA1)
fffff880`04a00000 fffff880`04a1d000 serial serial.sys Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`01f7c000 fffff880`01f84000 spldr spldr.sys Tue May 12 02:56:27 2009 (4A0858BB)
fffff880`01038000 fffff880`0119e000 sptd sptd.sys Mon Feb 28 06:29:52 2011 (4D6AA630)
fffff880`0a28c000 fffff880`0a324000 srv srv.sys Fri Apr 29 13:06:06 2011 (4DBA2B1E)
fffff880`0a223000 fffff880`0a28c000 srv2 srv2.sys Fri Apr 29 13:05:46 2011 (4DBA2B0A)
fffff880`09b6f000 fffff880`09ba0000 srvnet srvnet.sys Fri Apr 29 13:05:35 2011 (4DBA2AFF)
fffff880`04e30000 fffff880`04e31480 swenum swenum.sys Tue Jul 14 10:00:18 2009 (4A5BCA92)
fffff880`01cd8000 fffff880`01edc000 tcpip tcpip.sys Thu Sep 29 13:43:04 2011 (4E83E948)
fffff880`09ba0000 fffff880`09bb2000 tcpipreg tcpipreg.sys Sat Nov 20 21:51:48 2010 (4CE7A844)
fffff880`01aad000 fffff880`01aba000 TDI TDI.SYS Sat Nov 20 20:22:06 2010 (4CE7933E)
fffff880`01a8b000 fffff880`01aad000 tdx tdx.sys Sat Nov 20 20:21:54 2010 (4CE79332)
fffff880`04a38000 fffff880`04a4c000 termdd termdd.sys Sat Nov 20 22:03:40 2010 (4CE7AB0C)
fffff960`004d0000 fffff960`004da000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`01672000 fffff880`01698000 tunnel tunnel.sys Sat Nov 20 21:51:50 2010 (4CE7A846)
fffff880`05884000 fffff880`05896000 umbus umbus.sys Sat Nov 20 21:44:37 2010 (4CE7A695)
fffff880`08d6b000 fffff880`08d88000 usbccgp usbccgp.sys Fri Mar 25 14:29:14 2011 (4D8C0C0A)
fffff880`08d5c000 fffff880`08d5df00 USBD USBD.SYS Fri Mar 25 14:28:59 2011 (4D8C0BFB)
fffff880`0487b000 fffff880`0488c000 usbehci usbehci.sys Fri Mar 25 14:29:04 2011 (4D8C0C00)
fffff880`05896000 fffff880`058f0000 usbhub usbhub.sys Fri Mar 25 14:29:25 2011 (4D8C0C15)
fffff880`0488c000 fffff880`048e2000 USBPORT USBPORT.SYS Fri Mar 25 14:29:12 2011 (4D8C0C08)
fffff880`0100a000 fffff880`01017000 vdrvroot vdrvroot.sys Tue Jul 14 10:01:31 2009 (4A5BCADB)
fffff880`0443a000 fffff880`04448000 vga vga.sys Tue Jul 14 09:38:47 2009 (4A5BC587)
fffff880`08a69000 fffff880`08cf1000 viahduaa viahduaa.sys Mon Mar 28 22:27:35 2011 (4D9070A7)
fffff880`01c8e000 fffff880`01cb3000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 09:38:51 2009 (4A5BC58B)
fffff880`00f67000 fffff880`00f7c000 volmgr volmgr.sys Sat Nov 20 20:19:28 2010 (4CE792A0)
fffff880`00f7c000 fffff880`00fd8000 volmgrx volmgrx.sys Sat Nov 20 20:20:43 2010 (4CE792EB)
fffff880`01f30000 fffff880`01f7c000 volsnap volsnap.sys Sat Nov 20 20:20:08 2010 (4CE792C8)
fffff880`09b3b000 fffff880`09b48000 vwifibus vwifibus.sys Tue Jul 14 10:07:21 2009 (4A5BCC39)
fffff880`04bc8000 fffff880`04bde000 vwififlt vwififlt.sys Tue Jul 14 10:07:22 2009 (4A5BCC3A)
fffff880`04a1d000 fffff880`04a38000 wanarp wanarp.sys Sat Nov 20 21:52:36 2010 (4CE7A874)
fffff880`01cb3000 fffff880`01cc3000 watchdog watchdog.sys Tue Jul 14 09:37:35 2009 (4A5BC53F)
fffff880`00e81000 fffff880`00f25000 Wdf01000 Wdf01000.sys Tue Jul 14 09:22:07 2009 (4A5BC19F)
fffff880`00f25000 fffff880`00f34000 WDFLDR WDFLDR.SYS Tue Jul 14 09:19:54 2009 (4A5BC11A)
fffff880`04b99000 fffff880`04ba2000 wfplwf wfplwf.sys Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`09ac3000 fffff880`09b3b000 wg111v2 wg111v2.sys Fri Apr 02 21:45:08 2010 (4BB5CAB4)
fffff960`000b0000 fffff960`003c4000 win32k win32k.sys Thu Sep 29 14:03:02 2011 (4E83EDF6)
fffff880`09bb2000 fffff880`09bb9000 WinRing0x64 WinRing0x64.sys Sat Jul 26 23:29:37 2008 (488B26C1)
fffff880`011f5000 fffff880`011fe000 WMILIB WMILIB.SYS Tue Jul 14 09:19:51 2009 (4A5BC117)
fffff880`08dd4000 fffff880`08df5000 WudfPf WudfPf.sys Sat Nov 20 21:42:44 2010 (4CE7A624)
Unloaded modules:
fffff880`08d96000 fffff880`08db1000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
fffff880`0a36d000 fffff880`0a3de000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`01c80000 fffff880`01c8e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`0444a000 fffff880`047e2000 dump_iaStor.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00398000
fffff880`047e2000 fffff880`047f5000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
Bugcheck code 000000D1
Arguments fffff880`018efc08 00000000`00000002 00000000`00000008 fffff880`018efc08
PEB at 000000007efdf000
error 1 InitTypeRead( nt!_PEB at 000000007efdf000)...
[CPU Information]
~MHz = REG_DWORD 2993
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ Intel64 Family 6 Model 42 Stepping 7
ProcessorNameString = REG_SZ Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Update Signature = REG_BINARY 0,0,0,0,1a,0,0,0
Update Status = REG_DWORD 2
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD 1a00000000
Machine ID Information [From Smbios 2.7, DMIVersion 39, Size=3785]
BiosMajorRelease = 4
BiosMinorRelease = 6
BiosVendor = American Megatrends Inc.
BiosVersion = V17.3
BiosReleaseDate = 07/27/2011
SystemManufacturer = MSI
SystemProductName = MS-7680
SystemFamily = To be filled by O.E.M.
SystemVersion = 3.0
SystemSKU = To be filled by O.E.M.
BaseBoardManufacturer = MSI
BaseBoardProduct = H61M-P21 (MS-7680)
BaseBoardVersion = 3.0
CPUID: "Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz"
MaxSpeed: 3000
CurrentSpeed: 2993
[SMBIOS Data Tables v2.7]
[DMI Version - 39]
[2.0 Calling Convention - No]
[Table Size - 3785 bytes]
[BIOS Information (Type 0) - Length 24 - Handle 0000h]
Vendor American Megatrends Inc.
BIOS Version V17.3
BIOS Starting Address Segment f000
BIOS Release Date 07/27/2011
BIOS ROM Size 400000
BIOS Characteristics
07: - PCI Supported
11: - Upgradeable FLASH BIOS
12: - BIOS Shadowing Supported
15: - CD-Boot Supported
16: - Selectable Boot Supported
17: - BIOS ROM Socketed
19: - EDD Supported
23: - 1.2MB Floppy Supported
24: - 720KB Floppy Supported
25: - 2.88MB Floppy Supported
26: - Print Screen Device Supported
27: - Keyboard Services Supported
28: - Serial Services Supported
29: - Printer Services Supported
32: - BIOS Vendor Reserved
34: - BIOS Vendor Reserved
BIOS Characteristic Extensions
00: - ACPI Supported
01: - USB Legacy Supported
08: - BIOS Boot Specification Supported
10: - Specification Reserved
11: - Specification Reserved
BIOS Major Revision 4
BIOS Minor Revision 6
EC Firmware Major Revision 255
EC Firmware Minor Revision 255
[System Information (Type 1) - Length 27 - Handle 0001h]
Manufacturer MSI
Product Name MS-7680
Version 3.0
Serial Number
UUID 00000000-0000-0000-0000-000000000000
Wakeup Type Power Switch
SKUNumber To be filled by O.E.M.
Family To be filled by O.E.M.
[BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
Manufacturer MSI
Product H61M-P21 (MS-7680)
Version 3.0
Serial Number
Asset Tag
Feature Flags 09h
72760692: - `
72760652: - `
Location To be filled by O.E.M.
Chassis Handle 0003h
Board Type 0ah - Processor/Memory Module
Number of Child Handles 0
[System Enclosure (Type 3) - Length 22 - Handle 0003h]
Manufacturer MSI
Chassis Type Desktop
Version 3.0
Serial Number
Asset Tag Number
Bootup State Safe
Power Supply State Safe
Thermal State Safe
Security Status None
OEM Defined 0
Height 0U
Number of Power Cords 1
Number of Contained Elements 0
Contained Element Size 0
[Cache Information (Type 7) - Length 19 - Handle 0004h]
Socket Designation [String Not Specified]
Cache Configuration 0280h - Varies Enabled Int NonSocketed L1
Maximum Cache Size 0100h - 256K
Installed Size 0100h - 256K
Supported SRAM Type 0002h - Unknown
Current SRAM Type 0002h - Unknown
Cache Speed 0ns
Error Correction Type Unknown
System Cache Type Other
Associativity 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 0005h]
Socket Designation [String Not Specified]
Cache Configuration 0281h - Varies Enabled Int NonSocketed L2
Maximum Cache Size 0400h - 1024K
Installed Size 0400h - 1024K
Supported SRAM Type 0002h - Unknown
Current SRAM Type 0002h - Unknown
Cache Speed 0ns
Error Correction Type Unknown
System Cache Type Unified
Associativity 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 0006h]
Socket Designation [String Not Specified]
Cache Configuration 0282h - Varies Enabled Int NonSocketed L3
Maximum Cache Size 1800h - 6144K
Installed Size 1800h - 6144K
Supported SRAM Type 0002h - Unknown
Current SRAM Type 0002h - Unknown
Cache Speed 0ns
Error Correction Type Unknown
System Cache Type Unified
Associativity Other
[OEM Strings (Type 11) - Length 5 - Handle 0025h]
Number of Strings 1
1 To Be Filled By O.E.M.
[System Configuration Options (Type 12) - Length 5 - Handle 0026h]
[Physical Memory Array (Type 16) - Length 23 - Handle 0027h]
Location 03h - SystemBoard/Motherboard
Use 03h - System Memory
Memory Error Correction 03h - None
Maximum Capacity 33554432KB
Memory Error Inf Handle [No Errors]
Number of Memory Devices 4
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0028h]
[Memory Array Mapped Address (Type 19) - Length 31 - Handle 0029h]
Starting Address 00000000h
Ending Address 003fffffh
Memory Array Handle 0027h
Partition Width 01
[Memory Device (Type 17) - Length 34 - Handle 002ah]
Physical Memory Array Handle 0027h
Memory Error Info Handle [No Errors]
Total Width 64 bits
Data Width 64 bits
Size 4096MB
Form Factor 09h - DIMM
Device Set [None]
Device Locator A1_DIMM0
Bank Locator A1_BANK0
Memory Type 18h - Specification Reserved
Type Detail 0080h - Synchronous
Speed 1333MHz
Manufacturer Nanya
Serial Number
Asset Tag Number
Part Number M2F4G64CB8HB5N-CG
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 002bh]
[Memory Device Mapped Address (Type 20) - Length 35 - Handle 002ch]
Starting Address 00000000h
Ending Address 003fffffh
Memory Device Handle 002ah
Mem Array Mapped Adr Handle 0029h
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth [None]
[Memory Device (Type 17) - Length 34 - Handle 002dh]
Physical Memory Array Handle 0027h
Memory Error Info Handle [No Errors]
Total Width 64 bits
Data Width 64 bits
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator A1_DIMM1
Bank Locator A1_BANK1
Memory Type 02h - Unknown
Type Detail 0080h - Synchronous
Speed 0MHz
Manufacturer A1_Manufacturer1
Serial Number
Asset Tag Number
Part Number Array1_PartNumber1
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 002eh]
[Memory Device (Type 17) - Length 34 - Handle 0030h]
Physical Memory Array Handle 0027h
Memory Error Info Handle [No Errors]
Total Width 64 bits
Data Width 64 bits
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator A1_DIMM2
Bank Locator A1_BANK2
Memory Type 02h - Unknown
Type Detail 0080h - Synchronous
Speed 0MHz
Manufacturer A1_Manufacturer2
Serial Number
Asset Tag Number
Part Number Array1_PartNumber2
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0031h]
[Memory Device (Type 17) - Length 34 - Handle 0033h]
Physical Memory Array Handle 0027h
Memory Error Info Handle [No Errors]
Total Width 64 bits
Data Width 64 bits
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator A1_DIMM3
Bank Locator A1_BANK3
Memory Type 02h - Unknown
Type Detail 0080h - Synchronous
Speed 0MHz
Manufacturer A1_Manufacturer3
Serial Number
Asset Tag Number
Part Number Array1_PartNumber3
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0034h]
[Processor Information (Type 4) - Length 42 - Handle 0068h]
Socket Designation SOCKET 0
Processor Type Central Processor
Processor Family cdh - Specification Reserved
Processor Manufacturer Intel
Processor ID a7060200fffbebbf
Processor Version Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Processor Voltage 80h - 0.0V
External Clock 100MHz
Max Speed 3800MHz
Current Speed 1600MHz
Status Enabled Populated
Processor Upgrade Specification Reserved
L1 Cache Handle 0004h
L2 Cache Handle 0005h
L3 Cache Handle 0006h
Serial Number [String Not Specified]
Asset Tag Number [String Not Specified]
Part Number [String Not Specified]
This post has been edited by AustrAlien: 28 December 2011 - 02:28 AM
AustrAlien
Google is my friend. Make Google your friend too.
Google is my friend. Make Google your friend too.
#11
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 28 December 2011 - 04:20 AM
Here are the results from SystemLook
SystemLook 30.07.11 by jpshortstuff
Log created at 20:13 on 28/12/2011 by Rebecca Black
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
========== filefind ==========
Searching for "aoky55yw.SYS"
No files found.
Searching for "dtsoftbus01.sys"
C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_amd64_neutral_424e6ed8e8669959\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\Temp\{1660dd6c-4389-10d8-63d3-e11ee2275d0b}\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [02:35 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
Searching for "sptd.sys"
No files found.
-= EOF =-
MemTest+
I ran MemTest+ for another 2 hours and it didn't find any problems.
What's extremely strange though is, yesterday I ran Windows Memory Diagnostic and it told me I had "Hardware Problems".
Yet today I decided to run it again and it showed "No Problems" wtf? I am confused.
Hardware doesn't apply to drivers does it? It's also strange how today I haven't had any BSODs so far for around the last 8 hours. This is all extremely strange. I think I'm going to go run Windows Memory Diagnostic one more time and see what happens.
SystemLook 30.07.11 by jpshortstuff
Log created at 20:13 on 28/12/2011 by Rebecca Black
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
========== filefind ==========
Searching for "aoky55yw.SYS"
No files found.
Searching for "dtsoftbus01.sys"
C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_amd64_neutral_424e6ed8e8669959\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\Temp\{1660dd6c-4389-10d8-63d3-e11ee2275d0b}\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [02:35 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
Searching for "sptd.sys"
No files found.
-= EOF =-
MemTest+
I ran MemTest+ for another 2 hours and it didn't find any problems.
What's extremely strange though is, yesterday I ran Windows Memory Diagnostic and it told me I had "Hardware Problems".
Yet today I decided to run it again and it showed "No Problems" wtf? I am confused.
Hardware doesn't apply to drivers does it? It's also strange how today I haven't had any BSODs so far for around the last 8 hours. This is all extremely strange. I think I'm going to go run Windows Memory Diagnostic one more time and see what happens.
#12
- Inquisitor
-
- Group: BC Advisor
- Posts: 4,713
- Joined: 15-July 09
- Gender:Male
- Location:Cowra NSW Australia
Posted 28 December 2011 - 04:44 AM
kkkkasd, on 28 December 2011 - 04:20 AM, said:
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
I don't know whether or not it will make any difference, but given the above warning, could I suggest that you download and use the 64 bit version of SystemLook, and repeat the scan.
You asked: "Hardware doesn't apply to drivers does it?"
Drivers are what make hardware work ... so yes, a driver problem can be reported as a "hardware" problem.
You said: "I'm going to go run Windows Memory Diagnostic"
The reason we choose to use memtest86+ is because it is better than any other available option. So, although interesting perhaps, running Windows Memory Diagnostic is probably not as good an option as choosing to run memtest86+ for a longer time period to test RAM.
What has changed since yesterday?
What have you done perhaps/perhaps differently ... since yesterday?
Late edit1 ...
You said: "today I haven't had any BSODs so far for around the last 8 hours"
Don't worry about it: It won't last.
Late edit2 ...
TFC works just fine on 7: I don't expect that caused any problem.
This post has been edited by AustrAlien: 28 December 2011 - 05:29 AM
AustrAlien
Google is my friend. Make Google your friend too.
Google is my friend. Make Google your friend too.
#13
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 28 December 2011 - 05:35 AM
Hmmmm by the way, I am using BitDefender 2011.
I did turn my BitDefender Game Mode Off yesterday night. Could that have been causing all the BSODs?(It had been on "Game Mode" for 21 days).
But that would be a strange coincidence that all the BSODs started the same night I had a Blackout/Electrical Storm.
Results from 64 bit scan
SystemLook 30.07.11 by jpshortstuff
Log created at 21:29 on 28/12/2011 by Ben
Administrator - Elevation successful
========== filefind ==========
Searching for "aoky55yw.SYS"
No files found.
Searching for "dtsoftbus01.sys"
C:\Windows\System32\drivers\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_amd64_neutral_424e6ed8e8669959\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\Temp\{1660dd6c-4389-10d8-63d3-e11ee2275d0b}\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [02:35 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
Searching for "sptd.sys"
C:\Windows\System32\drivers\sptd.sys --a---- 526392 bytes [06:04 04/12/2011] [06:04 04/12/2011] (Unable to calculate MD5)
-= EOF =-
I did turn my BitDefender Game Mode Off yesterday night. Could that have been causing all the BSODs?(It had been on "Game Mode" for 21 days).
But that would be a strange coincidence that all the BSODs started the same night I had a Blackout/Electrical Storm.
Results from 64 bit scan
SystemLook 30.07.11 by jpshortstuff
Log created at 21:29 on 28/12/2011 by Ben
Administrator - Elevation successful
========== filefind ==========
Searching for "aoky55yw.SYS"
No files found.
Searching for "dtsoftbus01.sys"
C:\Windows\System32\drivers\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_amd64_neutral_424e6ed8e8669959\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\Temp\{1660dd6c-4389-10d8-63d3-e11ee2275d0b}\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [02:35 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
Searching for "sptd.sys"
C:\Windows\System32\drivers\sptd.sys --a---- 526392 bytes [06:04 04/12/2011] [06:04 04/12/2011] (Unable to calculate MD5)
-= EOF =-
This post has been edited by kkkkasd: 28 December 2011 - 05:36 AM
#14
- Inquisitor
-
- Group: BC Advisor
- Posts: 4,713
- Joined: 15-July 09
- Gender:Male
- Location:Cowra NSW Australia
Posted 28 December 2011 - 06:32 AM
The results of the SystemLook scan using the 64 bit version are different indeed!
Did you attempt to uninstall Daemon Tools and then download and run "sptd setup" to remove sptd.sys from the system as suggested in my earlier post?
(If you did do the above, the attempt has failed: dtsoftbus01.sys and sptd.sys are still present in the \system32\drivers folder.)
That's a definite possibility.
Do you have any reason to suspect that the system may be infected with malware?
After any untimely shutdown of the Windows system (eg. power failure), you should run chkdsk to repair possible disk file system errors. Use the Windows Error Checking utility (Check Disk), with the options to fix file system errors and scan the disk surface for errors, attempt recovery of data and repair the disk.
A log of the disk check is recorded only if the scheduled re-start is used, and only for drives on the same HDD as the Operating System.
To open Event Viewer and view the log:
Quote
C:\Windows\System32\drivers\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\drivers\sptd.sys --a---- 526392 bytes [06:04 04/12/2011] [06:04 04/12/2011] (Unable to calculate MD5)
C:\Windows\System32\drivers\sptd.sys --a---- 526392 bytes [06:04 04/12/2011] [06:04 04/12/2011] (Unable to calculate MD5)
Did you attempt to uninstall Daemon Tools and then download and run "sptd setup" to remove sptd.sys from the system as suggested in my earlier post?
(If you did do the above, the attempt has failed: dtsoftbus01.sys and sptd.sys are still present in the \system32\drivers folder.)
Quote
I am using BitDefender 2011.
I did turn my BitDefender Game Mode Off yesterday night. Could that have been causing all the BSODs?(It had been on "Game Mode" for 21 days).
I did turn my BitDefender Game Mode Off yesterday night. Could that have been causing all the BSODs?(It had been on "Game Mode" for 21 days).
That's a definite possibility.
Do you have any reason to suspect that the system may be infected with malware?
After any untimely shutdown of the Windows system (eg. power failure), you should run chkdsk to repair possible disk file system errors. Use the Windows Error Checking utility (Check Disk), with the options to fix file system errors and scan the disk surface for errors, attempt recovery of data and repair the disk.
- Go to Start > Computer.
- Right-click on the drive that you wish to check > Properties > Tools tab
- In the "Error checking" section, click on Check now.
- Place a checkmark in both boxes > Start.
- If the disk you have chosen is the Windows system disk:
- A message will notify you that a restart is necessary ask "Do you want to check for hard disk errors the next time you start your computer?".
- Click Schedule disk check > OK and close all windows.
- Re-start the computer. The disk will be checked when the system boots.
This will take some time to run and at times may appear stalled but just let it run.
When the disk check is complete, the system will re-start automatically and load Windows.
A log of the disk check is recorded only if the scheduled re-start is used, and only for drives on the same HDD as the Operating System.
To open Event Viewer and view the log:
- Go to Start > and type eventvwr and press the <ENTER> key.
The Event Viewer window will open. - In the left pane, expand "Windows Logs" and then click on Application.
- In the right pane, at the top, click on the column heading Source to sort the list alphabetically.
- Look in the Source column for "Wininit", with an entry corresponding to the date and time of the disk check.
- Click on that Wininit entry to select it.
- On the top main menu, click Action > Copy > Copy Details as Text.
- Paste the log text into your next reply.
AustrAlien
Google is my friend. Make Google your friend too.
Google is my friend. Make Google your friend too.
#15
- Member
-
- Group: Members
- Posts: 21
- Joined: 06-April 11
- Gender:Male
- Location:Australia
Posted 28 December 2011 - 08:48 AM
Ok I have uninstalled SPTD and Daemon Tools Pro.
Yes, it is possible my computer has been infected, although I scanned it today with BitDefender, Malwarbytes and SuperAntispyware and didn't find anything unusual.
Here is the log
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 29/12/2011 12:39:22 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Ben
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows Seven.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
117504 file records processed.
File verification completed.
110 large file records processed.
0 bad file records processed.
0 EA records processed.
44 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
159840 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
117504 file SDs/SIDs processed.
Cleaning up 148 unused index entries from index $SII of file 0x9.
Cleaning up 148 unused index entries from index $SDH of file 0x9.
Cleaning up 148 unused security descriptors.
Security descriptor verification completed.
21169 data files processed.
CHKDSK is verifying Usn Journal...
34947024 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
117488 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
90611986 free clusters processed.
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.
488282111 KB total disk space.
125547836 KB in 83168 files.
53012 KB in 21170 indexes.
0 KB in bad sectors.
233319 KB in use by the system.
65536 KB occupied by the log file.
362447944 KB available on disk.
4096 bytes in each allocation unit.
122070527 total allocation units on disk.
90611986 allocation units available on disk.
Internal Info:
00 cb 01 00 9e 97 01 00 5e fc 02 00 00 00 00 00 ........^.......
2c 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ,...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-12-28T13:39:22.000000000Z" />
<EventRecordID>1911</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Andy</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows Seven.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
117504 file records processed.
File verification completed.
110 large file records processed.
0 bad file records processed.
0 EA records processed.
44 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
159840 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
117504 file SDs/SIDs processed.
Cleaning up 148 unused index entries from index $SII of file 0x9.
Cleaning up 148 unused index entries from index $SDH of file 0x9.
Cleaning up 148 unused security descriptors.
Security descriptor verification completed.
21169 data files processed.
CHKDSK is verifying Usn Journal...
34947024 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
117488 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
90611986 free clusters processed.
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.
488282111 KB total disk space.
125547836 KB in 83168 files.
53012 KB in 21170 indexes.
0 KB in bad sectors.
233319 KB in use by the system.
65536 KB occupied by the log file.
362447944 KB available on disk.
4096 bytes in each allocation unit.
122070527 total allocation units on disk.
90611986 allocation units available on disk.
Internal Info:
00 cb 01 00 9e 97 01 00 5e fc 02 00 00 00 00 00 ........^.......
2c 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ,...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
Yes, it is possible my computer has been infected, although I scanned it today with BitDefender, Malwarbytes and SuperAntispyware and didn't find anything unusual.
Here is the log
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 29/12/2011 12:39:22 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Ben
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows Seven.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
117504 file records processed.
File verification completed.
110 large file records processed.
0 bad file records processed.
0 EA records processed.
44 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
159840 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
117504 file SDs/SIDs processed.
Cleaning up 148 unused index entries from index $SII of file 0x9.
Cleaning up 148 unused index entries from index $SDH of file 0x9.
Cleaning up 148 unused security descriptors.
Security descriptor verification completed.
21169 data files processed.
CHKDSK is verifying Usn Journal...
34947024 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
117488 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
90611986 free clusters processed.
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.
488282111 KB total disk space.
125547836 KB in 83168 files.
53012 KB in 21170 indexes.
0 KB in bad sectors.
233319 KB in use by the system.
65536 KB occupied by the log file.
362447944 KB available on disk.
4096 bytes in each allocation unit.
122070527 total allocation units on disk.
90611986 allocation units available on disk.
Internal Info:
00 cb 01 00 9e 97 01 00 5e fc 02 00 00 00 00 00 ........^.......
2c 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ,...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-12-28T13:39:22.000000000Z" />
<EventRecordID>1911</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Andy</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows Seven.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
117504 file records processed.
File verification completed.
110 large file records processed.
0 bad file records processed.
0 EA records processed.
44 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
159840 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
117504 file SDs/SIDs processed.
Cleaning up 148 unused index entries from index $SII of file 0x9.
Cleaning up 148 unused index entries from index $SDH of file 0x9.
Cleaning up 148 unused security descriptors.
Security descriptor verification completed.
21169 data files processed.
CHKDSK is verifying Usn Journal...
34947024 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
117488 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
90611986 free clusters processed.
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.
488282111 KB total disk space.
125547836 KB in 83168 files.
53012 KB in 21170 indexes.
0 KB in bad sectors.
233319 KB in use by the system.
65536 KB occupied by the log file.
362447944 KB available on disk.
4096 bytes in each allocation unit.
122070527 total allocation units on disk.
90611986 allocation units available on disk.
Internal Info:
00 cb 01 00 9e 97 01 00 5e fc 02 00 00 00 00 00 ........^.......
2c 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ,...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
