Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My Computer Keeps BSODing At Random Times.


  • Please log in to reply
31 replies to this topic

#1 kkkkasd

kkkkasd

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 27 December 2011 - 06:23 AM

Hey guys my computer has been BSODing a lot for the last few days. The times are random as in sometimes I can go for 10 hours without a single one while other times I get one every 2 minutes.

Hopefully I can get some assistance here.

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:44 AM

Posted 27 December 2011 - 07:07 AM

We need to know more about your BSODs...

Download BlueScreenView (in Zip file)

No installation required.

Unzip downloaded file and double click on BlueScreenView.exe file to run the program and When scanning is done, go to Edit > Select All.

Then go to File > Save Selected Items, and save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Compliments of Broni

#3 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 27 December 2011 - 09:36 AM

Oh Gosh I am stupid. I accidentally deleted the other 4 BSOD logs using CCleaner =[

I only have one of them left now, hopefully the reason was the same for all 4. If you need more, I can always repost in a couple of days =]

==================================================
Dump File : 122811-20904-01.dmp
Crash Time : 28/12/2011 12:23:08 AM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : fffff880`018efc08
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000008
Parameter 4 : fffff880`018efc08
Caused By Driver : Ntfs.sys
Caused By Address : Ntfs.sys+efc08
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+7cc40
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\122811-20904-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 412,648
==================================================

#4 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:44 AM

Posted 27 December 2011 - 02:06 PM

How to Test your RAM



Guide Overview

The purpose of this guide is to teach you how to check whether your system's RAM (Ramdom Access Memory) is working properly. Bad RAM can lead to a whole host of problems, often which do not appear to have a single cause -- appearing as systemwide glitches, blue screens, and other system trouble. MemTest86+ provides a very good detection mechanism for failed RAM, and is about as good a test you get short of actually replacing the module itself.

Tools Needed
Please perform these steps from a separate, working, machine.Perform these steps on the problem machine.
  • Put your CD in the drive and configure your machine to boot to the CD. This is different on all machines, but it's usually by pressing F12 or F10 as your system boots, and selecting either "CDROM" or your cdrom drive. If you are unable to force a CDRom boot, reply with the make and model of your machine and I should be able to get you exact instructions.
  • If you've done it correctly, MemTest86+ will start to run automaticly, as shown below:
    Posted Image
  • If you want to be reasonably your RAM is OK, then allow MemTest to run until you see this message:
    Posted Image

    On the other hand, if you want to be completely sure your RAM is OK, allow MemTest to run overnight. Memtest will run forever until power is pulled on the machine.
  • Check the MemTest screen for any reported errors. Errors will appear as RED warnings at the bottom of the screen, similar to the following screenshot:
    Posted Image
  • Hard-Reset the machine, removing the MemTest disk in the process.
If you didn't get an error screen, Congratulations! :)

Compliments of Billy O'Neal.

#5 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 27 December 2011 - 07:35 PM

Okay I ran Memtest+, no errors. =]

I just wanted to give you some extra infomation

- 2 Hours before BSODs started I used TFC.Exe cleaner which is a very old program I had from my Windows XP. Not sure if that program was meant to be used on Windows 7.

- There was also a blackout that day resulting in my computer suddenly shutting down while I was browsing the web.

- There was also an electrical storm, I at first also thought there might be RAM damage but checks out it's intact.

- The computer is brand new, got it 2 weeks ago.

The BSODs all started later that night after the blackout, storm, TFC cleaner =o.

Edited by kkkkasd, 27 December 2011 - 07:37 PM.


#6 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:06:44 PM

Posted 27 December 2011 - 07:44 PM

Re: memtest86+
  • How many passes were completed?
  • How many hours did it run?
A minimum test for any confidence in the result is at least 7 complete passes.

It is a pity that you deleted the previous minidumps, but we will have to work with what we have got.

Please zip up any/all minidumps and attach the resultant zip file to your next reply so I can have a closer look. There's a chance I might get some more useful info from them.
  • Navigate to C:\Windows\Minidump <<< folder
  • Click on the first minidump file to select it.
  • Hold down the <Shift> key, and click on the last minidump file to select all of the files.
  • Release the <Shift> key.
  • Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Minidump folder).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#7 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 27 December 2011 - 10:08 PM

I only ran 1 cycle and it took about 20-25 minutes.

Attached Files



#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:08:44 AM

Posted 27 December 2011 - 11:42 PM

If the computer is brand new, then it is still under warranty. I would return it for warranty work.

#9 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 12:10 AM

If the computer is brand new, then it is still under warranty. I would return it for warranty work.


The computer was bought from a private dealer which requires I send the parts myself because they can't confirm the warranty at the shop themselves, so I would need to know where the problem is first.

Plus it would just be more convenient to fix it here if say it's just a corrupt Windows or whatever =]

PS - Also do warranties normally cover surge damage?

#10 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 01:46 AM

Re: memtest86+ result
A single pass counts for very little. A minimum test for any confidence in the result is at least 7 complete passes. To have any greater degree of confidence in the result, memtest86+ needs to run for 24 hours.

I see SuperAntispyware installed and running on the system, BUT ... I see no evidence of an antivirus application: Is that correct?

aoky55yw.SYS Mar 29 2011


The above-mentioned file name does not return a single result in a google search: This is very suspicious!
It may or may not be related to the action of Daemon Tools (see the following).


Daemon Tools is installed on the system:

dtsoftbus01.sys Nov 11 2010
sptd.sys Feb 28 2011


Daemon Tools OR Alcohol 120%'s sptd.sys has known issues with Win7: See http://www.sysnative.com/0x1/DriverReference.html#sptd.sys <<< UNINSTALL Daemon Tools. (This may not Remove the sptd.sys file from the computer.)
THEN REMOVE THE SPTD.SYS FILE:
Download SPTD setup file: http://www.duplexsecure.com/en/downloads >>> use to uninstall &/or install <<<
"To remove SPTD, simply download SPTD setup file ..... and execute it.
In dialog that appears press "Uninstall" button and then SPTD will remove itself from your Windows installation."


Restart the computer.

CHECK THAT THE SPTD.SYS FILE IS NO LONGER PRESENT in the drivers folder by doing the following ...

Please download SystemLook.exe and save it to your Desktop.
  • alternate download link
    For users of Windows 64 bit systems: SystemLook (64-bit)
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following code box and paste into the main text field:
    :filefind
    aoky55yw.SYS
    dtsoftbus01.sys
    sptd.sys
    
  • Click the Look button to start the scan.
    Please be patient, as it may take a little time.
  • When finished, a Notepad window will open with the results of the scan.
  • Please copy & paste the entire content of this log in your next reply.
Note: The log, SystemLook.txt, is saved on your Desktop.

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\CactusIsland\kkkkasd_BC\122811-20904-01\122811-20904-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02c54000 PsLoadedModuleList = 0xfffff800`02e99670
Debug session time: Wed Dec 28 00:22:11.570 2011 (UTC + 11:00)
System Uptime: 0 days 0:53:52.975
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff880018efc08, 2, 8, fffff880018efc08}

Probably caused by : Ntfs.sys ( Ntfs! ?? ::NNGAKEGL::`string'+2bf0 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;!peb;!sysinfo cpuinfo;!sysinfo machineid; !sysinfo cpuspeed; !sysinfo smbios
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff880018efc08, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff880018efc08, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f03100
 fffff880018efc08 

CURRENT_IRQL:  2

FAULTING_IP: 
Ntfs! ?? ::NNGAKEGL::`string'+2bf0
fffff880`018efc08 55              push    rbp

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  mbam.exe

TRAP_FRAME:  fffff8800a77cfd0 -- (.trap 0xfffff8800a77cfd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880018efc08 rbx=0000000000000000 rcx=fffff8800a77d1a0
rdx=fffff8800a77e660 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880018efc08 rsp=fffff8800a77d168 rbp=fffff8800a77d2a0
 r8=fffff8800a77d920  r9=fffff8800a77d2a0 r10=fffff8800a77e840
r11=fffff8800a77d1d8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
Ntfs! ?? ::NNGAKEGL::`string'+0x2bf0:
fffff880`018efc08 55              push    rbp
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cd01e9 to fffff80002cd0c40

FAILED_INSTRUCTION_ADDRESS: 
Ntfs! ?? ::NNGAKEGL::`string'+2bf0
fffff880`018efc08 55              push    rbp

STACK_TEXT:  
fffff880`0a77ce88 fffff800`02cd01e9 : 00000000`0000000a fffff880`018efc08 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`0a77ce90 fffff800`02ccee60 : 00000000`00000000 fffff880`0a77d140 00000000`00000000 fffff880`01850810 : nt!KiBugCheckDispatch+0x69
fffff880`0a77cfd0 fffff880`018efc08 : fffff800`02cfca7c fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 : nt!KiPageFault+0x260
fffff880`0a77d168 fffff800`02cfca7c : fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 fffff880`00e4e40b : Ntfs! ?? ::NNGAKEGL::`string'+0x2bf0
fffff880`0a77d170 fffff800`02cfc4fd : fffff880`01850804 fffff880`0a77e660 00000000`00000000 fffff880`01800000 : nt!_C_specific_handler+0x8c
fffff880`0a77d1e0 fffff800`02cfb2d5 : fffff880`01850804 fffff880`0a77d258 fffff880`0a77e0c8 fffff880`01800000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0a77d210 fffff800`02d0c361 : fffff880`0a77e0c8 fffff880`0a77d920 fffff880`00000000 00000000`00000005 : nt!RtlDispatchException+0x415
fffff880`0a77d8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x135


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Ntfs! ?? ::NNGAKEGL::`string'+2bf0
fffff880`018efc08 55              push    rbp

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  Ntfs! ?? ::NNGAKEGL::`string'+2bf0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d79997b

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_Ntfs!_??_::NNGAKEGL::_string_+2bf0

BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_Ntfs!_??_::NNGAKEGL::_string_+2bf0

Followup: MachineOwner
---------

rax=fffff8800a77cf90 rbx=fffff88001850810 rcx=000000000000000a
rdx=fffff880018efc08 rsi=fffff8800a77e660 rdi=0000000000000000
rip=fffff80002cd0c40 rsp=fffff8800a77ce88 rbp=fffff8800a77d050
 r8=0000000000000002  r9=0000000000000008 r10=fffff880018efc08
r11=0000000000000008 r12=fffff88001850804 r13=0000000000099f08
r14=fffff88001800000 r15=fffff8800a77e0c8
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`02cd0c40 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`0a77ce90=000000000000000a
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`0a77ce88 fffff800`02cd01e9 : 00000000`0000000a fffff880`018efc08 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`0a77ce90 fffff800`02ccee60 : 00000000`00000000 fffff880`0a77d140 00000000`00000000 fffff880`01850810 : nt!KiBugCheckDispatch+0x69
fffff880`0a77cfd0 fffff880`018efc08 : fffff800`02cfca7c fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 : nt!KiPageFault+0x260 (TrapFrame @ fffff880`0a77cfd0)
fffff880`0a77d168 fffff800`02cfca7c : fffffa80`0481fe40 00000000`00000000 fffff8a0`08376d10 fffff880`00e4e40b : Ntfs! ?? ::NNGAKEGL::`string'+0x2bf0
fffff880`0a77d170 fffff800`02cfc4fd : fffff880`01850804 fffff880`0a77e660 00000000`00000000 fffff880`01800000 : nt!_C_specific_handler+0x8c
fffff880`0a77d1e0 fffff800`02cfb2d5 : fffff880`01850804 fffff880`0a77d258 fffff880`0a77e0c8 fffff880`01800000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0a77d210 fffff800`02d0c361 : fffff880`0a77e0c8 fffff880`0a77d920 fffff880`00000000 00000000`00000005 : nt!RtlDispatchException+0x415
fffff880`0a77d8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x135
start             end                 module name
fffff800`00b9c000 fffff800`00ba6000   kdcom    kdcom.dll    Sun Feb 06 03:52:49 2011 (4D4D8061)
fffff800`02c0b000 fffff800`02c54000   hal      hal.dll      Sun Nov 21 00:00:25 2010 (4CE7C669)
fffff800`02c54000 fffff800`0323d000   nt       ntkrnlmp.exe Thu Jun 23 12:53:23 2011 (4E02AAA3)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sun Nov 21 00:12:36 2010 (4CE7C944)
fffff880`00cc0000 fffff880`00cda000   rassstp  rassstp.sys  Tue Jul 14 10:10:25 2009 (4A5BCCF1)
fffff880`00cda000 fffff880`00ce9000   mouclass mouclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`00cee000 fffff880`00d3d000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sun Nov 21 00:03:51 2010 (4CE7C737)
fffff880`00d3d000 fffff880`00d51000   PSHED    PSHED.dll    Tue Jul 14 11:32:23 2009 (4A5BE027)
fffff880`00d51000 fffff880`00daf000   CLFS     CLFS.SYS     Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`00daf000 fffff880`00df2000   ks       ks.sys       Sat Nov 20 21:33:23 2010 (4CE7A3F3)
fffff880`00e00000 fffff880`00e4c000   fltmgr   fltmgr.sys   Sat Nov 20 20:19:24 2010 (4CE7929C)
fffff880`00e4c000 fffff880`00e60000   fileinfo fileinfo.sys Tue Jul 14 09:34:25 2009 (4A5BC481)
fffff880`00e60000 fffff880`00e81000   raspptp  raspptp.sys  Sat Nov 20 21:52:31 2010 (4CE7A86F)
fffff880`00e81000 fffff880`00f25000   Wdf01000 Wdf01000.sys Tue Jul 14 09:22:07 2009 (4A5BC19F)
fffff880`00f25000 fffff880`00f34000   WDFLDR   WDFLDR.SYS   Tue Jul 14 09:19:54 2009 (4A5BC11A)
fffff880`00f34000 fffff880`00f67000   pci      pci.sys      Sat Nov 20 20:19:11 2010 (4CE7928F)
fffff880`00f67000 fffff880`00f7c000   volmgr   volmgr.sys   Sat Nov 20 20:19:28 2010 (4CE792A0)
fffff880`00f7c000 fffff880`00fd8000   volmgrx  volmgrx.sys  Sat Nov 20 20:20:43 2010 (4CE792EB)
fffff880`00fd8000 fffff880`00ff2000   mountmgr mountmgr.sys Sat Nov 20 20:19:21 2010 (4CE79299)
fffff880`01000000 fffff880`0100a000   msisadrv msisadrv.sys Tue Jul 14 09:19:26 2009 (4A5BC0FE)
fffff880`0100a000 fffff880`01017000   vdrvroot vdrvroot.sys Tue Jul 14 10:01:31 2009 (4A5BCADB)
fffff880`01017000 fffff880`0102c000   partmgr  partmgr.sys  Sat Nov 20 20:20:00 2010 (4CE792C0)
fffff880`01038000 fffff880`0119e000   sptd     sptd.sys     Mon Feb 28 06:29:52 2011 (4D6AA630)
fffff880`0119e000 fffff880`011f5000   ACPI     ACPI.sys     Sat Nov 20 20:19:16 2010 (4CE79294)
fffff880`011f5000 fffff880`011fe000   WMILIB   WMILIB.SYS   Tue Jul 14 09:19:51 2009 (4A5BC117)
fffff880`01200000 fffff880`0122a000   ataport  ataport.SYS  Sat Nov 20 20:19:15 2010 (4CE79293)
fffff880`0122a000 fffff880`01235000   msahci   msahci.sys   Sat Nov 20 21:33:58 2010 (4CE7A416)
fffff880`01240000 fffff880`015d8000   iaStor   iaStor.sys   Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`015d8000 fffff880`015e1000   atapi    atapi.sys    Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`015e1000 fffff880`015f1000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`015f1000 fffff880`015fc000   amdxata  amdxata.sys  Sat Mar 20 03:18:18 2010 (4BA3A3CA)
fffff880`01600000 fffff880`01672000   cng      cng.sys      Sat Nov 20 21:08:45 2010 (4CE79E2D)
fffff880`01672000 fffff880`01698000   tunnel   tunnel.sys   Sat Nov 20 21:51:50 2010 (4CE7A846)
fffff880`01698000 fffff880`016c7000   ndiswan  ndiswan.sys  Sat Nov 20 21:52:32 2010 (4CE7A870)
fffff880`016d0000 fffff880`01740000   bdfsfltr bdfsfltr.sys Thu Mar 24 00:52:33 2011 (4D89FB21)
fffff880`01740000 fffff880`0179e000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`0179e000 fffff880`017ec000   atikmpag atikmpag.sys Thu Jan 13 13:15:21 2011 (4D2E6039)
fffff880`017ec000 fffff880`017fb000   kbdclass kbdclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`01800000 fffff880`019a3000   Ntfs     Ntfs.sys     Fri Mar 11 14:39:39 2011 (4D79997B)
fffff880`019a3000 fffff880`019be000   ksecdd   ksecdd.sys   Sat Nov 20 20:21:15 2010 (4CE7930B)
fffff880`019be000 fffff880`019cf000   pcw      pcw.sys      Tue Jul 14 09:19:27 2009 (4A5BC0FF)
fffff880`019cf000 fffff880`019d9000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`019d9000 fffff880`01a00000   bdfwfpf  bdfwfpf.sys  Sat Aug 21 01:41:40 2010 (4C6EA234)
fffff880`01a00000 fffff880`01a60000   NETIO    NETIO.SYS    Sat Nov 20 20:23:13 2010 (4CE79381)
fffff880`01a60000 fffff880`01a8b000   ksecpkg  ksecpkg.sys  Sat Nov 20 21:10:34 2010 (4CE79E9A)
fffff880`01a8b000 fffff880`01aad000   tdx      tdx.sys      Sat Nov 20 20:21:54 2010 (4CE79332)
fffff880`01aad000 fffff880`01aba000   TDI      TDI.SYS      Sat Nov 20 20:22:06 2010 (4CE7933E)
fffff880`01aba000 fffff880`01ad5000   raspppoe raspppoe.sys Tue Jul 14 10:10:17 2009 (4A5BCCE9)
fffff880`01ad5000 fffff880`01bc8000   ndis     ndis.sys     Sat Nov 20 20:23:30 2010 (4CE79392)
fffff880`01bc8000 fffff880`01be6000   dfsc     dfsc.sys     Sat Nov 20 20:26:31 2010 (4CE79447)
fffff880`01be6000 fffff880`01bf7000   blbdrive blbdrive.sys Tue Jul 14 09:35:59 2009 (4A5BC4DF)
fffff880`01c00000 fffff880`01c3a000   fvevol   fvevol.sys   Sat Nov 20 20:24:06 2010 (4CE793B6)
fffff880`01c3a000 fffff880`01c50000   disk     disk.sys     Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`01c50000 fffff880`01c80000   CLASSPNP CLASSPNP.SYS Sat Nov 20 20:19:23 2010 (4CE7929B)
fffff880`01c8e000 fffff880`01cb3000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 09:38:51 2009 (4A5BC58B)
fffff880`01cb3000 fffff880`01cc3000   watchdog watchdog.sys Tue Jul 14 09:37:35 2009 (4A5BC53F)
fffff880`01cc3000 fffff880`01ccc000   rdpencdd rdpencdd.sys Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`01ccc000 fffff880`01cd5000   rdprefmp rdprefmp.sys Tue Jul 14 10:16:35 2009 (4A5BCE63)
fffff880`01cd8000 fffff880`01edc000   tcpip    tcpip.sys    Thu Sep 29 13:43:04 2011 (4E83E948)
fffff880`01edc000 fffff880`01f26000   fwpkclnt fwpkclnt.sys Sat Nov 20 20:21:37 2010 (4CE79321)
fffff880`01f26000 fffff880`01f30000   scmndisp scmndisp.sys Wed Jan 17 18:48:03 2007 (45ADD4B3)
fffff880`01f30000 fffff880`01f7c000   volsnap  volsnap.sys  Sat Nov 20 20:20:08 2010 (4CE792C8)
fffff880`01f7c000 fffff880`01f84000   spldr    spldr.sys    Tue May 12 02:56:27 2009 (4A0858BB)
fffff880`01f84000 fffff880`01fbe000   rdyboost rdyboost.sys Sat Nov 20 20:43:10 2010 (4CE7982E)
fffff880`01fbe000 fffff880`01fd0000   mup      mup.sys      Tue Jul 14 09:23:45 2009 (4A5BC201)
fffff880`01fd0000 fffff880`01fd9000   hwpolicy hwpolicy.sys Sat Nov 20 20:18:54 2010 (4CE7927E)
fffff880`01fd9000 fffff880`01fe4000   Msfs     Msfs.SYS     Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`01fe4000 fffff880`01ff5000   Npfs     Npfs.SYS     Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`04400000 fffff880`0442a000   cdrom    cdrom.sys    Sat Nov 20 20:19:20 2010 (4CE79298)
fffff880`0442a000 fffff880`04433000   Null     Null.SYS     unavailable (00000000)
fffff880`04433000 fffff880`0443a000   Beep     Beep.SYS     Tue Jul 14 10:00:13 2009 (4A5BCA8D)
fffff880`0443a000 fffff880`04448000   vga      vga.sys      Tue Jul 14 09:38:47 2009 (4A5BC587)
fffff880`04448000 fffff880`047e0000   dump_iaStor dump_iaStor.sys Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`047f5000 fffff880`047fe000   RDPCDD   RDPCDD.sys   Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`04800000 fffff880`04846000   dxgmms1  dxgmms1.sys  Sat Nov 20 20:49:53 2010 (4CE799C1)
fffff880`04846000 fffff880`0486a000   HDAudBus HDAudBus.sys Sat Nov 20 21:43:42 2010 (4CE7A65E)
fffff880`0486a000 fffff880`0487b000   HECIx64  HECIx64.sys  Wed Oct 20 10:33:43 2010 (4CBE2AD7)
fffff880`0487b000 fffff880`0488c000   usbehci  usbehci.sys  Fri Mar 25 14:29:04 2011 (4D8C0C00)
fffff880`0488c000 fffff880`048e2000   USBPORT  USBPORT.SYS  Fri Mar 25 14:29:12 2011 (4D8C0C08)
fffff880`048e2000 fffff880`048ee000   serenum  serenum.sys  Tue Jul 14 10:00:33 2009 (4A5BCAA1)
fffff880`048ee000 fffff880`049e2000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 20:50:50 2010 (4CE799FA)
fffff880`049e2000 fffff880`049ff000   parport  parport.sys  Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`04a00000 fffff880`04a1d000   serial   serial.sys   Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`04a1d000 fffff880`04a38000   wanarp   wanarp.sys   Sat Nov 20 21:52:36 2010 (4CE7A874)
fffff880`04a38000 fffff880`04a4c000   termdd   termdd.sys   Sat Nov 20 22:03:40 2010 (4CE7AB0C)
fffff880`04a4c000 fffff880`04a56000   SASKUTIL64 SASKUTIL64.SYS Wed Jul 13 07:00:01 2011 (4E1CB5D1)
fffff880`04a56000 fffff880`04a60000   SASDIFSV64 SASDIFSV64.SYS Fri Jul 22 09:03:00 2011 (4E28B024)
fffff880`04a60000 fffff880`04ab1000   rdbss    rdbss.sys    Sat Nov 20 20:27:51 2010 (4CE79497)
fffff880`04ab1000 fffff880`04abd000   nsiproxy nsiproxy.sys Tue Jul 14 09:21:02 2009 (4A5BC15E)
fffff880`04abd000 fffff880`04ac8000   mssmbios mssmbios.sys Tue Jul 14 09:31:10 2009 (4A5BC3BE)
fffff880`04acb000 fffff880`04b54000   afd      afd.sys      Mon Apr 25 12:33:58 2011 (4DB4DD96)
fffff880`04b54000 fffff880`04b99000   netbt    netbt.sys    Sat Nov 20 20:23:18 2010 (4CE79386)
fffff880`04b99000 fffff880`04ba2000   wfplwf   wfplwf.sys   Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`04ba2000 fffff880`04bc8000   pacer    pacer.sys    Sat Nov 20 21:52:18 2010 (4CE7A862)
fffff880`04bc8000 fffff880`04bde000   vwififlt vwififlt.sys Tue Jul 14 10:07:22 2009 (4A5BCC3A)
fffff880`04bde000 fffff880`04bed000   netbios  netbios.sys  Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`04bed000 fffff880`04bfc000   discache discache.sys Tue Jul 14 09:37:18 2009 (4A5BC52E)
fffff880`04e00000 fffff880`04e24000   rasl2tp  rasl2tp.sys  Sat Nov 20 21:52:34 2010 (4CE7A872)
fffff880`04e24000 fffff880`04e30000   ndistapi ndistapi.sys Tue Jul 14 10:10:00 2009 (4A5BCCD8)
fffff880`04e30000 fffff880`04e31480   swenum   swenum.sys   Tue Jul 14 10:00:18 2009 (4A5BCA92)
fffff880`04e38000 fffff880`05734000   atikmdag atikmdag.sys Thu Jan 13 13:49:26 2011 (4D2E6836)
fffff880`05734000 fffff880`05741000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 22:17:04 2009 (4A1151C0)
fffff880`05741000 fffff880`0578e000   aoky55yw aoky55yw.SYS Tue Mar 29 02:41:57 2011 (4D90AC45)
fffff880`0578e000 fffff880`057bd000   SCSIPORT SCSIPORT.SYS Sat Nov 20 21:34:01 2010 (4CE7A419)
fffff880`057bd000 fffff880`057d3000   intelppm intelppm.sys Tue Jul 14 09:19:25 2009 (4A5BC0FD)
fffff880`057d3000 fffff880`057e3000   CompositeBus CompositeBus.sys Sat Nov 20 21:33:17 2010 (4CE7A3ED)
fffff880`057e3000 fffff880`057f9000   AgileVpn AgileVpn.sys Tue Jul 14 10:10:24 2009 (4A5BCCF0)
fffff880`0583e000 fffff880`05884000   dtsoftbus01 dtsoftbus01.sys Thu Jul 28 00:03:42 2011 (4E301ABE)
fffff880`05884000 fffff880`05896000   umbus    umbus.sys    Sat Nov 20 21:44:37 2010 (4CE7A695)
fffff880`05896000 fffff880`058f0000   usbhub   usbhub.sys   Fri Mar 25 14:29:25 2011 (4D8C0C15)
fffff880`058f0000 fffff880`05905000   NDProxy  NDProxy.SYS  Sat Nov 20 21:52:20 2010 (4CE7A864)
fffff880`05905000 fffff880`05925000   AtihdW76 AtihdW76.sys Wed Nov 17 23:02:04 2010 (4CE3C43C)
fffff880`05925000 fffff880`05962000   portcls  portcls.sys  Tue Jul 14 10:06:27 2009 (4A5BCC03)
fffff880`05962000 fffff880`05984000   drmk     drmk.sys     Tue Jul 14 11:01:25 2009 (4A5BD8E5)
fffff880`05984000 fffff880`05989200   ksthunk  ksthunk.sys  Tue Jul 14 10:00:19 2009 (4A5BCA93)
fffff880`0598a000 fffff880`059dd000   nwifi    nwifi.sys    Tue Jul 14 10:07:23 2009 (4A5BCC3B)
fffff880`059dd000 fffff880`059f5000   rspndr   rspndr.sys   Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`08a00000 fffff880`08a36000   fastfat  fastfat.SYS  Tue Jul 14 09:23:28 2009 (4A5BC1F0)
fffff880`08a36000 fffff880`08a4b000   lltdio   lltdio.sys   Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`08a4b000 fffff880`08a5e000   ndisuio  ndisuio.sys  Sat Nov 20 21:50:08 2010 (4CE7A7E0)
fffff880`08a69000 fffff880`08cf1000   viahduaa viahduaa.sys Mon Mar 28 22:27:35 2011 (4D9070A7)
fffff880`08cf1000 fffff880`08cff000   crashdmp crashdmp.sys Tue Jul 14 10:01:01 2009 (4A5BCABD)
fffff880`08cff000 fffff880`08d12000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 09:21:51 2009 (4A5BC18F)
fffff880`08d12000 fffff880`08d1e000   Dxapi    Dxapi.sys    Tue Jul 14 09:38:28 2009 (4A5BC574)
fffff880`08d1e000 fffff880`08d2c000   monitor  monitor.sys  Tue Jul 14 09:38:52 2009 (4A5BC58C)
fffff880`08d2c000 fffff880`08d3a000   hidusb   hidusb.sys   Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`08d3a000 fffff880`08d53000   HIDCLASS HIDCLASS.SYS Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`08d53000 fffff880`08d5b080   HIDPARSE HIDPARSE.SYS Tue Jul 14 10:06:17 2009 (4A5BCBF9)
fffff880`08d5c000 fffff880`08d5df00   USBD     USBD.SYS     Fri Mar 25 14:28:59 2011 (4D8C0BFB)
fffff880`08d5e000 fffff880`08d6b000   mouhid   mouhid.sys   Tue Jul 14 10:00:20 2009 (4A5BCA94)
fffff880`08d6b000 fffff880`08d88000   usbccgp  usbccgp.sys  Fri Mar 25 14:29:14 2011 (4D8C0C0A)
fffff880`08d88000 fffff880`08d96000   kbdhid   kbdhid.sys   Sat Nov 20 21:33:25 2010 (4CE7A3F5)
fffff880`08db1000 fffff880`08dd4000   luafv    luafv.sys    Tue Jul 14 09:26:13 2009 (4A5BC295)
fffff880`08dd4000 fffff880`08df5000   WudfPf   WudfPf.sys   Sat Nov 20 21:42:44 2010 (4CE7A624)
fffff880`09600000 fffff880`0964e000   mrxsmb10 mrxsmb10.sys Sat Jul 09 12:46:28 2011 (4E17C104)
fffff880`0964e000 fffff880`09672000   mrxsmb20 mrxsmb20.sys Wed Apr 27 12:39:37 2011 (4DB781E9)
fffff880`09689000 fffff880`09752000   HTTP     HTTP.sys     Sat Nov 20 20:24:30 2010 (4CE793CE)
fffff880`09752000 fffff880`09770000   bowser   bowser.sys   Wed Feb 23 15:55:04 2011 (4D649328)
fffff880`09770000 fffff880`09788000   mpsdrv   mpsdrv.sys   Tue Jul 14 10:08:25 2009 (4A5BCC79)
fffff880`09788000 fffff880`097b5000   mrxsmb   mrxsmb.sys   Wed Apr 27 12:40:38 2011 (4DB78226)
fffff880`09a00000 fffff880`09aa6000   peauth   peauth.sys   Tue Jul 14 11:01:19 2009 (4A5BD8DF)
fffff880`09aa6000 fffff880`09ab1000   secdrv   secdrv.SYS   Wed Sep 13 23:18:38 2006 (4508052E)
fffff880`09ac3000 fffff880`09b3b000   wg111v2  wg111v2.sys  Fri Apr 02 21:45:08 2010 (4BB5CAB4)
fffff880`09b3b000 fffff880`09b48000   vwifibus vwifibus.sys Tue Jul 14 10:07:21 2009 (4A5BCC39)
fffff880`09b48000 fffff880`09b6f000   idmwfp   idmwfp.sys   Thu Jul 07 00:37:41 2011 (4E147335)
fffff880`09b6f000 fffff880`09ba0000   srvnet   srvnet.sys   Fri Apr 29 13:05:35 2011 (4DBA2AFF)
fffff880`09ba0000 fffff880`09bb2000   tcpipreg tcpipreg.sys Sat Nov 20 21:51:48 2010 (4CE7A844)
fffff880`09bb2000 fffff880`09bb9000   WinRing0x64 WinRing0x64.sys Sat Jul 26 23:29:37 2008 (488B26C1)
fffff880`0a223000 fffff880`0a28c000   srv2     srv2.sys     Fri Apr 29 13:05:46 2011 (4DBA2B0A)
fffff880`0a28c000 fffff880`0a324000   srv      srv.sys      Fri Apr 29 13:06:06 2011 (4DBA2B1E)
fffff880`0a324000 fffff880`0a34e000   bdfm     bdfm.sys     Thu Apr 22 23:20:49 2010 (4BD04D31)
fffff880`0a34e000 fffff880`0a36d000   BDHV     BDHV.SYS     Thu Apr 22 23:20:29 2010 (4BD04D1D)
fffff880`0a3de000 fffff880`0a3e9000   asyncmac asyncmac.sys Tue Jul 14 10:10:13 2009 (4A5BCCE5)
fffff960`000b0000 fffff960`003c4000   win32k   win32k.sys   Thu Sep 29 14:03:02 2011 (4E83EDF6)
fffff960`004d0000 fffff960`004da000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00730000 fffff960`00757000   cdd      cdd.dll      unavailable (00000000)

Unloaded modules:
fffff880`08d96000 fffff880`08db1000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`0a36d000 fffff880`0a3de000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01c80000 fffff880`01c8e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0444a000 fffff880`047e2000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00398000
fffff880`047e2000 fffff880`047f5000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
start             end                 module name
fffff880`0119e000 fffff880`011f5000   ACPI     ACPI.sys     Sat Nov 20 20:19:16 2010 (4CE79294)
fffff880`04acb000 fffff880`04b54000   afd      afd.sys      Mon Apr 25 12:33:58 2011 (4DB4DD96)
fffff880`057e3000 fffff880`057f9000   AgileVpn AgileVpn.sys Tue Jul 14 10:10:24 2009 (4A5BCCF0)
fffff880`015f1000 fffff880`015fc000   amdxata  amdxata.sys  Sat Mar 20 03:18:18 2010 (4BA3A3CA)
fffff880`05741000 fffff880`0578e000   aoky55yw aoky55yw.SYS Tue Mar 29 02:41:57 2011 (4D90AC45)
fffff880`0a3de000 fffff880`0a3e9000   asyncmac asyncmac.sys Tue Jul 14 10:10:13 2009 (4A5BCCE5)
fffff880`015d8000 fffff880`015e1000   atapi    atapi.sys    Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`0122a000   ataport  ataport.SYS  Sat Nov 20 20:19:15 2010 (4CE79293)
fffff880`05905000 fffff880`05925000   AtihdW76 AtihdW76.sys Wed Nov 17 23:02:04 2010 (4CE3C43C)
fffff880`04e38000 fffff880`05734000   atikmdag atikmdag.sys Thu Jan 13 13:49:26 2011 (4D2E6836)
fffff880`0179e000 fffff880`017ec000   atikmpag atikmpag.sys Thu Jan 13 13:15:21 2011 (4D2E6039)
fffff880`0a324000 fffff880`0a34e000   bdfm     bdfm.sys     Thu Apr 22 23:20:49 2010 (4BD04D31)
fffff880`016d0000 fffff880`01740000   bdfsfltr bdfsfltr.sys Thu Mar 24 00:52:33 2011 (4D89FB21)
fffff880`019d9000 fffff880`01a00000   bdfwfpf  bdfwfpf.sys  Sat Aug 21 01:41:40 2010 (4C6EA234)
fffff880`0a34e000 fffff880`0a36d000   BDHV     BDHV.SYS     Thu Apr 22 23:20:29 2010 (4BD04D1D)
fffff880`04433000 fffff880`0443a000   Beep     Beep.SYS     Tue Jul 14 10:00:13 2009 (4A5BCA8D)
fffff880`01be6000 fffff880`01bf7000   blbdrive blbdrive.sys Tue Jul 14 09:35:59 2009 (4A5BC4DF)
fffff880`09752000 fffff880`09770000   bowser   bowser.sys   Wed Feb 23 15:55:04 2011 (4D649328)
fffff960`00730000 fffff960`00757000   cdd      cdd.dll      unavailable (00000000)
fffff880`04400000 fffff880`0442a000   cdrom    cdrom.sys    Sat Nov 20 20:19:20 2010 (4CE79298)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sun Nov 21 00:12:36 2010 (4CE7C944)
fffff880`01c50000 fffff880`01c80000   CLASSPNP CLASSPNP.SYS Sat Nov 20 20:19:23 2010 (4CE7929B)
fffff880`00d51000 fffff880`00daf000   CLFS     CLFS.SYS     Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`01600000 fffff880`01672000   cng      cng.sys      Sat Nov 20 21:08:45 2010 (4CE79E2D)
fffff880`057d3000 fffff880`057e3000   CompositeBus CompositeBus.sys Sat Nov 20 21:33:17 2010 (4CE7A3ED)
fffff880`08cf1000 fffff880`08cff000   crashdmp crashdmp.sys Tue Jul 14 10:01:01 2009 (4A5BCABD)
fffff880`01bc8000 fffff880`01be6000   dfsc     dfsc.sys     Sat Nov 20 20:26:31 2010 (4CE79447)
fffff880`04bed000 fffff880`04bfc000   discache discache.sys Tue Jul 14 09:37:18 2009 (4A5BC52E)
fffff880`01c3a000 fffff880`01c50000   disk     disk.sys     Tue Jul 14 09:19:57 2009 (4A5BC11D)
fffff880`05962000 fffff880`05984000   drmk     drmk.sys     Tue Jul 14 11:01:25 2009 (4A5BD8E5)
fffff880`0583e000 fffff880`05884000   dtsoftbus01 dtsoftbus01.sys Thu Jul 28 00:03:42 2011 (4E301ABE)
fffff880`08cff000 fffff880`08d12000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 09:21:51 2009 (4A5BC18F)
fffff880`04448000 fffff880`047e0000   dump_iaStor dump_iaStor.sys Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`08d12000 fffff880`08d1e000   Dxapi    Dxapi.sys    Tue Jul 14 09:38:28 2009 (4A5BC574)
fffff880`048ee000 fffff880`049e2000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 20:50:50 2010 (4CE799FA)
fffff880`04800000 fffff880`04846000   dxgmms1  dxgmms1.sys  Sat Nov 20 20:49:53 2010 (4CE799C1)
fffff880`08a00000 fffff880`08a36000   fastfat  fastfat.SYS  Tue Jul 14 09:23:28 2009 (4A5BC1F0)
fffff880`00e4c000 fffff880`00e60000   fileinfo fileinfo.sys Tue Jul 14 09:34:25 2009 (4A5BC481)
fffff880`00e00000 fffff880`00e4c000   fltmgr   fltmgr.sys   Sat Nov 20 20:19:24 2010 (4CE7929C)
fffff880`019cf000 fffff880`019d9000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`01c00000 fffff880`01c3a000   fvevol   fvevol.sys   Sat Nov 20 20:24:06 2010 (4CE793B6)
fffff880`01edc000 fffff880`01f26000   fwpkclnt fwpkclnt.sys Sat Nov 20 20:21:37 2010 (4CE79321)
fffff880`05734000 fffff880`05741000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 22:17:04 2009 (4A1151C0)
fffff800`02c0b000 fffff800`02c54000   hal      hal.dll      Sun Nov 21 00:00:25 2010 (4CE7C669)
fffff880`04846000 fffff880`0486a000   HDAudBus HDAudBus.sys Sat Nov 20 21:43:42 2010 (4CE7A65E)
fffff880`0486a000 fffff880`0487b000   HECIx64  HECIx64.sys  Wed Oct 20 10:33:43 2010 (4CBE2AD7)
fffff880`08d3a000 fffff880`08d53000   HIDCLASS HIDCLASS.SYS Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`08d53000 fffff880`08d5b080   HIDPARSE HIDPARSE.SYS Tue Jul 14 10:06:17 2009 (4A5BCBF9)
fffff880`08d2c000 fffff880`08d3a000   hidusb   hidusb.sys   Sat Nov 20 21:43:49 2010 (4CE7A665)
fffff880`09689000 fffff880`09752000   HTTP     HTTP.sys     Sat Nov 20 20:24:30 2010 (4CE793CE)
fffff880`01fd0000 fffff880`01fd9000   hwpolicy hwpolicy.sys Sat Nov 20 20:18:54 2010 (4CE7927E)
fffff880`01240000 fffff880`015d8000   iaStor   iaStor.sys   Fri Nov 19 14:24:38 2010 (4CE5EDF6)
fffff880`09b48000 fffff880`09b6f000   idmwfp   idmwfp.sys   Thu Jul 07 00:37:41 2011 (4E147335)
fffff880`057bd000 fffff880`057d3000   intelppm intelppm.sys Tue Jul 14 09:19:25 2009 (4A5BC0FD)
fffff880`017ec000 fffff880`017fb000   kbdclass kbdclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`08d88000 fffff880`08d96000   kbdhid   kbdhid.sys   Sat Nov 20 21:33:25 2010 (4CE7A3F5)
fffff800`00b9c000 fffff800`00ba6000   kdcom    kdcom.dll    Sun Feb 06 03:52:49 2011 (4D4D8061)
fffff880`00daf000 fffff880`00df2000   ks       ks.sys       Sat Nov 20 21:33:23 2010 (4CE7A3F3)
fffff880`019a3000 fffff880`019be000   ksecdd   ksecdd.sys   Sat Nov 20 20:21:15 2010 (4CE7930B)
fffff880`01a60000 fffff880`01a8b000   ksecpkg  ksecpkg.sys  Sat Nov 20 21:10:34 2010 (4CE79E9A)
fffff880`05984000 fffff880`05989200   ksthunk  ksthunk.sys  Tue Jul 14 10:00:19 2009 (4A5BCA93)
fffff880`08a36000 fffff880`08a4b000   lltdio   lltdio.sys   Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`08db1000 fffff880`08dd4000   luafv    luafv.sys    Tue Jul 14 09:26:13 2009 (4A5BC295)
fffff880`00cee000 fffff880`00d3d000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sun Nov 21 00:03:51 2010 (4CE7C737)
fffff880`08d1e000 fffff880`08d2c000   monitor  monitor.sys  Tue Jul 14 09:38:52 2009 (4A5BC58C)
fffff880`00cda000 fffff880`00ce9000   mouclass mouclass.sys Tue Jul 14 09:19:50 2009 (4A5BC116)
fffff880`08d5e000 fffff880`08d6b000   mouhid   mouhid.sys   Tue Jul 14 10:00:20 2009 (4A5BCA94)
fffff880`00fd8000 fffff880`00ff2000   mountmgr mountmgr.sys Sat Nov 20 20:19:21 2010 (4CE79299)
fffff880`09770000 fffff880`09788000   mpsdrv   mpsdrv.sys   Tue Jul 14 10:08:25 2009 (4A5BCC79)
fffff880`09788000 fffff880`097b5000   mrxsmb   mrxsmb.sys   Wed Apr 27 12:40:38 2011 (4DB78226)
fffff880`09600000 fffff880`0964e000   mrxsmb10 mrxsmb10.sys Sat Jul 09 12:46:28 2011 (4E17C104)
fffff880`0964e000 fffff880`09672000   mrxsmb20 mrxsmb20.sys Wed Apr 27 12:39:37 2011 (4DB781E9)
fffff880`0122a000 fffff880`01235000   msahci   msahci.sys   Sat Nov 20 21:33:58 2010 (4CE7A416)
fffff880`01fd9000 fffff880`01fe4000   Msfs     Msfs.SYS     Tue Jul 14 09:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`0100a000   msisadrv msisadrv.sys Tue Jul 14 09:19:26 2009 (4A5BC0FE)
fffff880`01740000 fffff880`0179e000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`04abd000 fffff880`04ac8000   mssmbios mssmbios.sys Tue Jul 14 09:31:10 2009 (4A5BC3BE)
fffff880`01fbe000 fffff880`01fd0000   mup      mup.sys      Tue Jul 14 09:23:45 2009 (4A5BC201)
fffff880`01ad5000 fffff880`01bc8000   ndis     ndis.sys     Sat Nov 20 20:23:30 2010 (4CE79392)
fffff880`04e24000 fffff880`04e30000   ndistapi ndistapi.sys Tue Jul 14 10:10:00 2009 (4A5BCCD8)
fffff880`08a4b000 fffff880`08a5e000   ndisuio  ndisuio.sys  Sat Nov 20 21:50:08 2010 (4CE7A7E0)
fffff880`01698000 fffff880`016c7000   ndiswan  ndiswan.sys  Sat Nov 20 21:52:32 2010 (4CE7A870)
fffff880`058f0000 fffff880`05905000   NDProxy  NDProxy.SYS  Sat Nov 20 21:52:20 2010 (4CE7A864)
fffff880`04bde000 fffff880`04bed000   netbios  netbios.sys  Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`04b54000 fffff880`04b99000   netbt    netbt.sys    Sat Nov 20 20:23:18 2010 (4CE79386)
fffff880`01a00000 fffff880`01a60000   NETIO    NETIO.SYS    Sat Nov 20 20:23:13 2010 (4CE79381)
fffff880`01fe4000 fffff880`01ff5000   Npfs     Npfs.SYS     Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`04ab1000 fffff880`04abd000   nsiproxy nsiproxy.sys Tue Jul 14 09:21:02 2009 (4A5BC15E)
fffff800`02c54000 fffff800`0323d000   nt       ntkrnlmp.exe Thu Jun 23 12:53:23 2011 (4E02AAA3)
fffff880`01800000 fffff880`019a3000   Ntfs     Ntfs.sys     Fri Mar 11 14:39:39 2011 (4D79997B)
fffff880`0442a000 fffff880`04433000   Null     Null.SYS     unavailable (00000000)
fffff880`0598a000 fffff880`059dd000   nwifi    nwifi.sys    Tue Jul 14 10:07:23 2009 (4A5BCC3B)
fffff880`04ba2000 fffff880`04bc8000   pacer    pacer.sys    Sat Nov 20 21:52:18 2010 (4CE7A862)
fffff880`049e2000 fffff880`049ff000   parport  parport.sys  Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`01017000 fffff880`0102c000   partmgr  partmgr.sys  Sat Nov 20 20:20:00 2010 (4CE792C0)
fffff880`00f34000 fffff880`00f67000   pci      pci.sys      Sat Nov 20 20:19:11 2010 (4CE7928F)
fffff880`015e1000 fffff880`015f1000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 09:19:48 2009 (4A5BC114)
fffff880`019be000 fffff880`019cf000   pcw      pcw.sys      Tue Jul 14 09:19:27 2009 (4A5BC0FF)
fffff880`09a00000 fffff880`09aa6000   peauth   peauth.sys   Tue Jul 14 11:01:19 2009 (4A5BD8DF)
fffff880`05925000 fffff880`05962000   portcls  portcls.sys  Tue Jul 14 10:06:27 2009 (4A5BCC03)
fffff880`00d3d000 fffff880`00d51000   PSHED    PSHED.dll    Tue Jul 14 11:32:23 2009 (4A5BE027)
fffff880`04e00000 fffff880`04e24000   rasl2tp  rasl2tp.sys  Sat Nov 20 21:52:34 2010 (4CE7A872)
fffff880`01aba000 fffff880`01ad5000   raspppoe raspppoe.sys Tue Jul 14 10:10:17 2009 (4A5BCCE9)
fffff880`00e60000 fffff880`00e81000   raspptp  raspptp.sys  Sat Nov 20 21:52:31 2010 (4CE7A86F)
fffff880`00cc0000 fffff880`00cda000   rassstp  rassstp.sys  Tue Jul 14 10:10:25 2009 (4A5BCCF1)
fffff880`04a60000 fffff880`04ab1000   rdbss    rdbss.sys    Sat Nov 20 20:27:51 2010 (4CE79497)
fffff880`047f5000 fffff880`047fe000   RDPCDD   RDPCDD.sys   Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`01cc3000 fffff880`01ccc000   rdpencdd rdpencdd.sys Tue Jul 14 10:16:34 2009 (4A5BCE62)
fffff880`01ccc000 fffff880`01cd5000   rdprefmp rdprefmp.sys Tue Jul 14 10:16:35 2009 (4A5BCE63)
fffff880`01f84000 fffff880`01fbe000   rdyboost rdyboost.sys Sat Nov 20 20:43:10 2010 (4CE7982E)
fffff880`059dd000 fffff880`059f5000   rspndr   rspndr.sys   Tue Jul 14 10:08:50 2009 (4A5BCC92)
fffff880`04a56000 fffff880`04a60000   SASDIFSV64 SASDIFSV64.SYS Fri Jul 22 09:03:00 2011 (4E28B024)
fffff880`04a4c000 fffff880`04a56000   SASKUTIL64 SASKUTIL64.SYS Wed Jul 13 07:00:01 2011 (4E1CB5D1)
fffff880`01f26000 fffff880`01f30000   scmndisp scmndisp.sys Wed Jan 17 18:48:03 2007 (45ADD4B3)
fffff880`0578e000 fffff880`057bd000   SCSIPORT SCSIPORT.SYS Sat Nov 20 21:34:01 2010 (4CE7A419)
fffff880`09aa6000 fffff880`09ab1000   secdrv   secdrv.SYS   Wed Sep 13 23:18:38 2006 (4508052E)
fffff880`048e2000 fffff880`048ee000   serenum  serenum.sys  Tue Jul 14 10:00:33 2009 (4A5BCAA1)
fffff880`04a00000 fffff880`04a1d000   serial   serial.sys   Tue Jul 14 10:00:40 2009 (4A5BCAA8)
fffff880`01f7c000 fffff880`01f84000   spldr    spldr.sys    Tue May 12 02:56:27 2009 (4A0858BB)
fffff880`01038000 fffff880`0119e000   sptd     sptd.sys     Mon Feb 28 06:29:52 2011 (4D6AA630)
fffff880`0a28c000 fffff880`0a324000   srv      srv.sys      Fri Apr 29 13:06:06 2011 (4DBA2B1E)
fffff880`0a223000 fffff880`0a28c000   srv2     srv2.sys     Fri Apr 29 13:05:46 2011 (4DBA2B0A)
fffff880`09b6f000 fffff880`09ba0000   srvnet   srvnet.sys   Fri Apr 29 13:05:35 2011 (4DBA2AFF)
fffff880`04e30000 fffff880`04e31480   swenum   swenum.sys   Tue Jul 14 10:00:18 2009 (4A5BCA92)
fffff880`01cd8000 fffff880`01edc000   tcpip    tcpip.sys    Thu Sep 29 13:43:04 2011 (4E83E948)
fffff880`09ba0000 fffff880`09bb2000   tcpipreg tcpipreg.sys Sat Nov 20 21:51:48 2010 (4CE7A844)
fffff880`01aad000 fffff880`01aba000   TDI      TDI.SYS      Sat Nov 20 20:22:06 2010 (4CE7933E)
fffff880`01a8b000 fffff880`01aad000   tdx      tdx.sys      Sat Nov 20 20:21:54 2010 (4CE79332)
fffff880`04a38000 fffff880`04a4c000   termdd   termdd.sys   Sat Nov 20 22:03:40 2010 (4CE7AB0C)
fffff960`004d0000 fffff960`004da000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`01672000 fffff880`01698000   tunnel   tunnel.sys   Sat Nov 20 21:51:50 2010 (4CE7A846)
fffff880`05884000 fffff880`05896000   umbus    umbus.sys    Sat Nov 20 21:44:37 2010 (4CE7A695)
fffff880`08d6b000 fffff880`08d88000   usbccgp  usbccgp.sys  Fri Mar 25 14:29:14 2011 (4D8C0C0A)
fffff880`08d5c000 fffff880`08d5df00   USBD     USBD.SYS     Fri Mar 25 14:28:59 2011 (4D8C0BFB)
fffff880`0487b000 fffff880`0488c000   usbehci  usbehci.sys  Fri Mar 25 14:29:04 2011 (4D8C0C00)
fffff880`05896000 fffff880`058f0000   usbhub   usbhub.sys   Fri Mar 25 14:29:25 2011 (4D8C0C15)
fffff880`0488c000 fffff880`048e2000   USBPORT  USBPORT.SYS  Fri Mar 25 14:29:12 2011 (4D8C0C08)
fffff880`0100a000 fffff880`01017000   vdrvroot vdrvroot.sys Tue Jul 14 10:01:31 2009 (4A5BCADB)
fffff880`0443a000 fffff880`04448000   vga      vga.sys      Tue Jul 14 09:38:47 2009 (4A5BC587)
fffff880`08a69000 fffff880`08cf1000   viahduaa viahduaa.sys Mon Mar 28 22:27:35 2011 (4D9070A7)
fffff880`01c8e000 fffff880`01cb3000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 09:38:51 2009 (4A5BC58B)
fffff880`00f67000 fffff880`00f7c000   volmgr   volmgr.sys   Sat Nov 20 20:19:28 2010 (4CE792A0)
fffff880`00f7c000 fffff880`00fd8000   volmgrx  volmgrx.sys  Sat Nov 20 20:20:43 2010 (4CE792EB)
fffff880`01f30000 fffff880`01f7c000   volsnap  volsnap.sys  Sat Nov 20 20:20:08 2010 (4CE792C8)
fffff880`09b3b000 fffff880`09b48000   vwifibus vwifibus.sys Tue Jul 14 10:07:21 2009 (4A5BCC39)
fffff880`04bc8000 fffff880`04bde000   vwififlt vwififlt.sys Tue Jul 14 10:07:22 2009 (4A5BCC3A)
fffff880`04a1d000 fffff880`04a38000   wanarp   wanarp.sys   Sat Nov 20 21:52:36 2010 (4CE7A874)
fffff880`01cb3000 fffff880`01cc3000   watchdog watchdog.sys Tue Jul 14 09:37:35 2009 (4A5BC53F)
fffff880`00e81000 fffff880`00f25000   Wdf01000 Wdf01000.sys Tue Jul 14 09:22:07 2009 (4A5BC19F)
fffff880`00f25000 fffff880`00f34000   WDFLDR   WDFLDR.SYS   Tue Jul 14 09:19:54 2009 (4A5BC11A)
fffff880`04b99000 fffff880`04ba2000   wfplwf   wfplwf.sys   Tue Jul 14 10:09:26 2009 (4A5BCCB6)
fffff880`09ac3000 fffff880`09b3b000   wg111v2  wg111v2.sys  Fri Apr 02 21:45:08 2010 (4BB5CAB4)
fffff960`000b0000 fffff960`003c4000   win32k   win32k.sys   Thu Sep 29 14:03:02 2011 (4E83EDF6)
fffff880`09bb2000 fffff880`09bb9000   WinRing0x64 WinRing0x64.sys Sat Jul 26 23:29:37 2008 (488B26C1)
fffff880`011f5000 fffff880`011fe000   WMILIB   WMILIB.SYS   Tue Jul 14 09:19:51 2009 (4A5BC117)
fffff880`08dd4000 fffff880`08df5000   WudfPf   WudfPf.sys   Sat Nov 20 21:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`08d96000 fffff880`08db1000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`0a36d000 fffff880`0a3de000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01c80000 fffff880`01c8e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0444a000 fffff880`047e2000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00398000
fffff880`047e2000 fffff880`047f5000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
Bugcheck code 000000D1
Arguments fffff880`018efc08 00000000`00000002 00000000`00000008 fffff880`018efc08
PEB at 000000007efdf000
error 1 InitTypeRead( nt!_PEB at 000000007efdf000)...
[CPU Information]
~MHz = REG_DWORD 2993
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ Intel64 Family 6 Model 42 Stepping 7
ProcessorNameString = REG_SZ Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Update Signature = REG_BINARY 0,0,0,0,1a,0,0,0
Update Status = REG_DWORD 2
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD 1a00000000
Machine ID Information [From Smbios 2.7, DMIVersion 39, Size=3785]
BiosMajorRelease = 4
BiosMinorRelease = 6
BiosVendor = American Megatrends Inc.
BiosVersion = V17.3
BiosReleaseDate = 07/27/2011
SystemManufacturer = MSI
SystemProductName = MS-7680
SystemFamily = To be filled by O.E.M.
SystemVersion = 3.0
SystemSKU = To be filled by O.E.M.
BaseBoardManufacturer = MSI
BaseBoardProduct = H61M-P21 (MS-7680)
BaseBoardVersion = 3.0
CPUID:        "Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz"
MaxSpeed:     3000
CurrentSpeed: 2993
[SMBIOS Data Tables v2.7]
[DMI Version - 39]
[2.0 Calling Convention - No]
[Table Size - 3785 bytes]

[BIOS Information (Type 0) - Length 24 - Handle 0000h]
  Vendor                        American Megatrends Inc.
  BIOS Version                  V17.3
  BIOS Starting Address Segment f000
  BIOS Release Date             07/27/2011
  BIOS ROM Size                 400000
  BIOS Characteristics
       07: - PCI Supported
       11: - Upgradeable FLASH BIOS
       12: - BIOS Shadowing Supported
       15: - CD-Boot Supported
       16: - Selectable Boot Supported
       17: - BIOS ROM Socketed
       19: - EDD Supported
       23: - 1.2MB Floppy Supported
       24: - 720KB Floppy Supported
       25: - 2.88MB Floppy Supported
       26: - Print Screen Device Supported
       27: - Keyboard Services Supported
       28: - Serial Services Supported
       29: - Printer Services Supported
       32: - BIOS Vendor Reserved
       34: - BIOS Vendor Reserved
  BIOS Characteristic Extensions
       00: - ACPI Supported
       01: - USB Legacy Supported
       08: - BIOS Boot Specification Supported
       10: - Specification Reserved
       11: - Specification Reserved
  BIOS Major Revision           4
  BIOS Minor Revision           6
  EC Firmware Major Revision    255
  EC Firmware Minor Revision    255
[System Information (Type 1) - Length 27 - Handle 0001h]
  Manufacturer                  MSI
  Product Name                  MS-7680
  Version                       3.0
  Serial Number                                       
  UUID                          00000000-0000-0000-0000-000000000000
  Wakeup Type                   Power Switch
  SKUNumber                     To be filled by O.E.M.
  Family                        To be filled by O.E.M.
[BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  Manufacturer                  MSI
  Product                       H61M-P21 (MS-7680)
  Version                       3.0
  Serial Number                                       
  Asset Tag                                           
  Feature Flags                 09h
       72760692: - `

       72760652: - `

  Location                      To be filled by O.E.M.
  Chassis Handle                0003h
  Board Type                    0ah - Processor/Memory Module
  Number of Child Handles       0
[System Enclosure (Type 3) - Length 22 - Handle 0003h]
  Manufacturer                  MSI
  Chassis Type                  Desktop
  Version                       3.0
  Serial Number                                       
  Asset Tag Number                                    
  Bootup State                  Safe
  Power Supply State            Safe
  Thermal State                 Safe
  Security Status               None
  OEM Defined                   0
  Height                        0U
  Number of Power Cords         1
  Number of Contained Elements  0
  Contained Element Size        0
[Cache Information (Type 7) - Length 19 - Handle 0004h]
  Socket Designation            [String Not Specified]
  Cache Configuration           0280h - Varies Enabled Int NonSocketed L1
  Maximum Cache Size            0100h - 256K
  Installed Size                0100h - 256K
  Supported SRAM Type           0002h - Unknown 
  Current SRAM Type             0002h - Unknown 
  Cache Speed                   0ns
  Error Correction Type         Unknown
  System Cache Type             Other
  Associativity                 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 0005h]
  Socket Designation            [String Not Specified]
  Cache Configuration           0281h - Varies Enabled Int NonSocketed L2
  Maximum Cache Size            0400h - 1024K
  Installed Size                0400h - 1024K
  Supported SRAM Type           0002h - Unknown 
  Current SRAM Type             0002h - Unknown 
  Cache Speed                   0ns
  Error Correction Type         Unknown
  System Cache Type             Unified
  Associativity                 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 0006h]
  Socket Designation            [String Not Specified]
  Cache Configuration           0282h - Varies Enabled Int NonSocketed L3
  Maximum Cache Size            1800h - 6144K
  Installed Size                1800h - 6144K
  Supported SRAM Type           0002h - Unknown 
  Current SRAM Type             0002h - Unknown 
  Cache Speed                   0ns
  Error Correction Type         Unknown
  System Cache Type             Unified
  Associativity                 Other
[OEM Strings (Type 11) - Length 5 - Handle 0025h]
  Number of Strings             1
   1                            To Be Filled By O.E.M.
[System Configuration Options (Type 12) - Length 5 - Handle 0026h]
[Physical Memory Array (Type 16) - Length 23 - Handle 0027h]
  Location                      03h - SystemBoard/Motherboard
  Use                           03h - System Memory
  Memory Error Correction       03h - None
  Maximum Capacity              33554432KB
  Memory Error Inf Handle       [No Errors]
  Number of Memory Devices      4
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0028h]
[Memory Array Mapped Address (Type 19) - Length 31 - Handle 0029h]
  Starting Address              00000000h
  Ending Address                003fffffh
  Memory Array Handle           0027h
  Partition Width               01
[Memory Device (Type 17) - Length 34 - Handle 002ah]
  Physical Memory Array Handle  0027h
  Memory Error Info Handle      [No Errors]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          4096MB
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                A1_DIMM0
  Bank Locator                  A1_BANK0
  Memory Type                   18h - Specification Reserved
  Type Detail                   0080h - Synchronous
  Speed                         1333MHz
  Manufacturer                  Nanya           
  Serial Number                           
  Asset Tag Number                             
  Part Number                   M2F4G64CB8HB5N-CG 
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 002bh]
[Memory Device Mapped Address (Type 20) - Length 35 - Handle 002ch]
  Starting Address              00000000h
  Ending Address                003fffffh
  Memory Device Handle          002ah
  Mem Array Mapped Adr Handle   0029h
  Partition Row Position        01
  Interleave Position           [None]
  Interleave Data Depth         [None]
[Memory Device (Type 17) - Length 34 - Handle 002dh]
  Physical Memory Array Handle  0027h
  Memory Error Info Handle      [No Errors]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          [Not Populated]
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                A1_DIMM1
  Bank Locator                  A1_BANK1
  Memory Type                   02h - Unknown
  Type Detail                   0080h - Synchronous
  Speed                         0MHz
  Manufacturer                  A1_Manufacturer1
  Serial Number                           
  Asset Tag Number                             
  Part Number                   Array1_PartNumber1
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 002eh]
[Memory Device (Type 17) - Length 34 - Handle 0030h]
  Physical Memory Array Handle  0027h
  Memory Error Info Handle      [No Errors]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          [Not Populated]
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                A1_DIMM2
  Bank Locator                  A1_BANK2
  Memory Type                   02h - Unknown
  Type Detail                   0080h - Synchronous
  Speed                         0MHz
  Manufacturer                  A1_Manufacturer2
  Serial Number                           
  Asset Tag Number                             
  Part Number                   Array1_PartNumber2
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0031h]
[Memory Device (Type 17) - Length 34 - Handle 0033h]
  Physical Memory Array Handle  0027h
  Memory Error Info Handle      [No Errors]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          [Not Populated]
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                A1_DIMM3
  Bank Locator                  A1_BANK3
  Memory Type                   02h - Unknown
  Type Detail                   0080h - Synchronous
  Speed                         0MHz
  Manufacturer                  A1_Manufacturer3
  Serial Number                           
  Asset Tag Number                             
  Part Number                   Array1_PartNumber3
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0034h]
[Processor Information (Type 4) - Length 42 - Handle 0068h]
  Socket Designation            SOCKET 0
  Processor Type                Central Processor
  Processor Family              cdh - Specification Reserved
  Processor Manufacturer        Intel
  Processor ID                  a7060200fffbebbf
  Processor Version             Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
  Processor Voltage             80h - 0.0V
  External Clock                100MHz
  Max Speed                     3800MHz
  Current Speed                 1600MHz
  Status                        Enabled Populated
  Processor Upgrade             Specification Reserved
  L1 Cache Handle               0004h
  L2 Cache Handle               0005h
  L3 Cache Handle               0006h
  Serial Number                 [String Not Specified]
  Asset Tag Number              [String Not Specified]
  Part Number                   [String Not Specified]

Edited by AustrAlien, 28 December 2011 - 02:28 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#11 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 04:20 AM

Here are the results from SystemLook

SystemLook 30.07.11 by jpshortstuff
Log created at 20:13 on 28/12/2011 by Rebecca Black
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== filefind ==========

Searching for "aoky55yw.SYS"
No files found.

Searching for "dtsoftbus01.sys"
C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_amd64_neutral_424e6ed8e8669959\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\Temp\{1660dd6c-4389-10d8-63d3-e11ee2275d0b}\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [02:35 04/12/2011] 821BF177A24172F5F0EE9B322F58516C

Searching for "sptd.sys"
No files found.

-= EOF =-




MemTest+
I ran MemTest+ for another 2 hours and it didn't find any problems.



What's extremely strange though is, yesterday I ran Windows Memory Diagnostic and it told me I had "Hardware Problems".
Yet today I decided to run it again and it showed "No Problems" wtf? I am confused.


Hardware doesn't apply to drivers does it? It's also strange how today I haven't had any BSODs so far for around the last 8 hours. This is all extremely strange. I think I'm going to go run Windows Memory Diagnostic one more time and see what happens.

#12 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 04:44 AM

WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

I don't know whether or not it will make any difference, but given the above warning, could I suggest that you download and use the 64 bit version of SystemLook, and repeat the scan.

You asked: "Hardware doesn't apply to drivers does it?"
Drivers are what make hardware work ... so yes, a driver problem can be reported as a "hardware" problem.

You said: "I'm going to go run Windows Memory Diagnostic"
The reason we choose to use memtest86+ is because it is better than any other available option. So, although interesting perhaps, running Windows Memory Diagnostic is probably not as good an option as choosing to run memtest86+ for a longer time period to test RAM.

What has changed since yesterday?
What have you done perhaps/perhaps differently ... since yesterday?

Late edit1 ...
You said: "today I haven't had any BSODs so far for around the last 8 hours"
Don't worry about it: It won't last.
Late edit2 ...
TFC works just fine on 7: I don't expect that caused any problem.

Edited by AustrAlien, 28 December 2011 - 05:29 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#13 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 05:35 AM

Hmmmm by the way, I am using BitDefender 2011.

I did turn my BitDefender Game Mode Off yesterday night. Could that have been causing all the BSODs?(It had been on "Game Mode" for 21 days).

But that would be a strange coincidence that all the BSODs started the same night I had a Blackout/Electrical Storm.

Results from 64 bit scan

SystemLook 30.07.11 by jpshortstuff
Log created at 21:29 on 28/12/2011 by Ben
Administrator - Elevation successful

========== filefind ==========

Searching for "aoky55yw.SYS"
No files found.

Searching for "dtsoftbus01.sys"
C:\Windows\System32\drivers\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_amd64_neutral_424e6ed8e8669959\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\DriverStore\Temp\{1660dd6c-4389-10d8-63d3-e11ee2275d0b}\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [02:35 04/12/2011] 821BF177A24172F5F0EE9B322F58516C

Searching for "sptd.sys"
C:\Windows\System32\drivers\sptd.sys --a---- 526392 bytes [06:04 04/12/2011] [06:04 04/12/2011] (Unable to calculate MD5)

-= EOF =-

Edited by kkkkasd, 28 December 2011 - 05:36 AM.


#14 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 06:32 AM

The results of the SystemLook scan using the 64 bit version are different indeed!

C:\Windows\System32\drivers\dtsoftbus01.sys --a---- 271424 bytes [02:35 04/12/2011] [05:52 04/12/2011] 821BF177A24172F5F0EE9B322F58516C
C:\Windows\System32\drivers\sptd.sys --a---- 526392 bytes [06:04 04/12/2011] [06:04 04/12/2011] (Unable to calculate MD5)


Did you attempt to uninstall Daemon Tools and then download and run "sptd setup" to remove sptd.sys from the system as suggested in my earlier post?
(If you did do the above, the attempt has failed: dtsoftbus01.sys and sptd.sys are still present in the \system32\drivers folder.)


I am using BitDefender 2011.
I did turn my BitDefender Game Mode Off yesterday night. Could that have been causing all the BSODs?(It had been on "Game Mode" for 21 days).

That's a definite possibility.

Do you have any reason to suspect that the system may be infected with malware?

After any untimely shutdown of the Windows system (eg. power failure), you should run chkdsk to repair possible disk file system errors. Use the Windows Error Checking utility (Check Disk), with the options to fix file system errors and scan the disk surface for errors, attempt recovery of data and repair the disk.
  • Go to Start > Computer.
  • Right-click on the drive that you wish to check > Properties > Tools tab
  • In the "Error checking" section, click on Check now.
  • Place a checkmark in both boxes > Start.
  • If the disk you have chosen is the Windows system disk:

    A message will notify you that a restart is necessary ask "Do you want to check for hard disk errors the next time you start your computer?".
  • Click Schedule disk check > OK and close all windows.
  • Re-start the computer. The disk will be checked when the system boots.
    This will take some time to run and at times may appear stalled but just let it run.
    When the disk check is complete, the system will re-start automatically and load Windows.
A log of the disk check is recorded only if the scheduled re-start is used, and only for drives on the same HDD as the Operating System.
To open Event Viewer and view the log:
  • Go to Start > and type eventvwr and press the <ENTER> key.
    The Event Viewer window will open.
  • In the left pane, expand "Windows Logs" and then click on Application.
  • In the right pane, at the top, click on the column heading Source to sort the list alphabetically.
  • Look in the Source column for "Wininit", with an entry corresponding to the date and time of the disk check.
  • Click on that Wininit entry to select it.
  • On the top main menu, click Action > Copy > Copy Details as Text.
  • Paste the log text into your next reply.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#15 kkkkasd

kkkkasd
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Australia
  • Local time:06:44 PM

Posted 28 December 2011 - 08:48 AM

Ok I have uninstalled SPTD and Daemon Tools Pro.


Yes, it is possible my computer has been infected, although I scanned it today with BitDefender, Malwarbytes and SuperAntispyware and didn't find anything unusual.



Here is the log

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 29/12/2011 12:39:22 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Ben
Description:


Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows Seven.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
117504 file records processed.

File verification completed.
110 large file records processed.

0 bad file records processed.

0 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
159840 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
117504 file SDs/SIDs processed.

Cleaning up 148 unused index entries from index $SII of file 0x9.
Cleaning up 148 unused index entries from index $SDH of file 0x9.
Cleaning up 148 unused security descriptors.
Security descriptor verification completed.
21169 data files processed.

CHKDSK is verifying Usn Journal...
34947024 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
117488 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
90611986 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

488282111 KB total disk space.
125547836 KB in 83168 files.
53012 KB in 21170 indexes.
0 KB in bad sectors.
233319 KB in use by the system.
65536 KB occupied by the log file.
362447944 KB available on disk.

4096 bytes in each allocation unit.
122070527 total allocation units on disk.
90611986 allocation units available on disk.

Internal Info:
00 cb 01 00 9e 97 01 00 5e fc 02 00 00 00 00 00 ........^.......
2c 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ,...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-12-28T13:39:22.000000000Z" />
<EventRecordID>1911</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Andy</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows Seven.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
117504 file records processed.

File verification completed.
110 large file records processed.

0 bad file records processed.

0 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
159840 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
117504 file SDs/SIDs processed.

Cleaning up 148 unused index entries from index $SII of file 0x9.
Cleaning up 148 unused index entries from index $SDH of file 0x9.
Cleaning up 148 unused security descriptors.
Security descriptor verification completed.
21169 data files processed.

CHKDSK is verifying Usn Journal...
34947024 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
117488 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
90611986 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

488282111 KB total disk space.
125547836 KB in 83168 files.
53012 KB in 21170 indexes.
0 KB in bad sectors.
233319 KB in use by the system.
65536 KB occupied by the log file.
362447944 KB available on disk.

4096 bytes in each allocation unit.
122070527 total allocation units on disk.
90611986 allocation units available on disk.

Internal Info:
00 cb 01 00 9e 97 01 00 5e fc 02 00 00 00 00 00 ........^.......
2c 03 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ,...,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users