Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD immediately after Welcome screen in Normal mode


  • Please log in to reply
25 replies to this topic

#1 R.P.D.

R.P.D.

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 13 May 2012 - 08:36 AM

Hello,

I have a Vista Home Premium SP2 laptop that immediately gives a Blue Screen of Death just after the Welcome screen when booting into Normal mode. I can get into Safe mode OK. I suspected malware and was working with some folks on the malware forum on this site and they referred me here. We tried many things including sfc /scannow. The thread of all the things we tried is here:

http://www.bleepingcomputer.com/forums/topic453001.html

I have also tried a number of restore points, and they either don't eliminate the problem or the older restore points give a failure message.

Thanks for any help you can provide.

Rich

BC AdBot (Login to Remove)

 


#2 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 13 May 2012 - 06:32 PM

Let's start with a quick look at the crash dumps.

Please download BlueScreenView (in zip file)
  • Extract (right-click > Extract all) the contents of bluescreenview.zip.
  • Double-click on the BlueScreenView.exe file, to run the program. (No installation is required.)
  • When scanning is done (usually complete by the time the interface appears), go ...
    • Edit > Select All
    • File > Save Selected Items, and save the report to your Desktop as BSOD.txt.
    • Close the BlueScreenView window.
  • Open BSOD.txt using Notepad and go ...
    • Edit > Select All
    • Edit > Copy, and then paste the entire contents of the text file into your next reply.
    (Let us know if no information is reported in the BlueScreenView interface: This means that there are no minidumps saved in the default location.)

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#3 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 13 May 2012 - 07:56 PM

Hello,

Thanks for working with me.

Below is the BSOD.txt. Unfortunately, based on the time strings, it looks like all the dumps are very old and not related to the current problem :(

Do laptops have accelerometers? Weird.

Rich

----

==================================================
Filename : 000.fcl
Address In Stack :
From Address : fffffa60`013c4000
To Address : fffffa60`013ef000
Size : 0x0002b000
Time Stamp : 0x48dcdf7a
Time String : 9/26/2008 6:11:22 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Accelerometer.sys
Address In Stack :
From Address : fffffa60`037b5000
To Address : fffffa60`037c1000
Size : 0x0000c000
Time Stamp : 0x47e0334b
Time String : 3/18/2008 2:25:31 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : acpi.sys
Address In Stack :
From Address : fffffa60`008f1000
To Address : fffffa60`00947000
Size : 0x00056000
Time Stamp : 0x49e0249e
Time String : 4/10/2009 10:03:26 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : adp94xx.sys
Address In Stack :
From Address : fffffa60`00c0f000
To Address : fffffa60`00c88000
Size : 0x00079000
Time Stamp : 0x462e7278
Time String : 4/24/2007 2:11:20 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : adpahci.sys
Address In Stack :
From Address : fffffa60`00c88000
To Address : fffffa60`00cde000
Size : 0x00056000
Time Stamp : 0x46377921
Time String : 5/1/2007 10:30:09 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : adpu160m.sys
Address In Stack :
From Address : fffffa60`00cde000
To Address : fffffa60`00cff000
Size : 0x00021000
Time Stamp : 0x45dc94d1
Time String : 2/21/2007 11:52:01 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : adpu320.sys
Address In Stack :
From Address : fffffa60`00d2d000
To Address : fffffa60`00d5c000
Size : 0x0002f000
Time Stamp : 0x45e4c6ff
Time String : 2/27/2007 5:04:15 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Afc.sys
Address In Stack :
From Address : fffffa60`0377a000
To Address : fffffa60`03783000
Size : 0x00009000
Time Stamp : 0x44b48d24
Time String : 7/11/2006 10:48:20 PM
Product Name : Arcsoft® ASPI Shell
File Description : Arcsoft® ASPI Shell
File Version : 1, 0, 0, 2
Company : Arcsoft, Inc.
Full Path : C:\Windows\system32\drivers\Afc.sys
==================================================

==================================================
Filename : afd.sys
Address In Stack :
From Address : fffffa60`04585000
To Address : fffffa60`045f0000
Size : 0x0006b000
Time Stamp : 0x4f030fcf
Time String : 1/3/2012 7:25:19 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : agrsm64.sys
Address In Stack :
From Address : fffffa60`0460a000
To Address : fffffa60`04746000
Size : 0x0013c000
Time Stamp : 0x492730a0
Time String : 11/21/2008 3:05:20 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : aliide.sys
Address In Stack : aliide.sys+1aa3da40
From Address : fffffa60`009f6000
To Address : fffffce6`009fd000
Size : 0x0000028600007000
Time Stamp : 0x4844a1a3
Time String : 6/2/2008 6:42:59 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : amdide.sys
Address In Stack :
From Address : fffffa60`00800000
To Address : fffff15b`00807000
Size : 0xfffff6fb00007000
Time Stamp : 0x4844a1a5
Time String : 6/2/2008 6:43:01 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : arc.sys
Address In Stack :
From Address : fffffa60`00d74000
To Address : fffffa60`00d8d000
Size : 0x00019000
Time Stamp : 0x4656035b
Time String : 5/24/2007 2:27:55 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : arcsas.sys
Address In Stack :
From Address : fffffa60`00d8d000
To Address : fffffa60`00da6000
Size : 0x00019000
Time Stamp : 0x465731fa
Time String : 5/25/2007 11:59:06 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : asyncmac.sys
Address In Stack :
From Address : fffffa60`01400000
To Address : fffffa60`0140b000
Size : 0x0000b000
Time Stamp : 0x47919aa7
Time String : 1/18/2008 11:37:27 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : atapi.sys
Address In Stack :
From Address : fffffa60`00b4f000
To Address : fffffa60`00b57000
Size : 0x00008000
Time Stamp : 0x49e02bdb
Time String : 4/10/2009 10:34:19 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ataport.SYS
Address In Stack :
From Address : fffffa60`00b57000
To Address : fffffa60`00b7b000
Size : 0x00024000
Time Stamp : 0x49e02be1
Time String : 4/10/2009 10:34:25 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : BATTC.SYS
Address In Stack :
From Address : fffffa60`009ce000
To Address : fffffa60`009da000
Size : 0x0000c000
Time Stamp : 0x4791927e
Time String : 1/18/2008 11:02:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : bcmwl664.sys
Address In Stack :
From Address : fffffa60`0340f000
To Address : fffffa60`036a2000
Size : 0x00293000
Time Stamp : 0x4a42eb4d
Time String : 6/24/2009 8:13:17 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : bowser.sys
Address In Stack :
From Address : fffffa60`167d2000
To Address : fffffa60`167f0000
Size : 0x0001e000
Time Stamp : 0x4d5e7f30
Time String : 2/18/2011 7:16:16 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cdd.dll
Address In Stack :
From Address : fffff960`00610000
To Address : fffff960`00621000
Size : 0x00011000
Time Stamp : 0x00000000
Time String :
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cdfs.sys
Address In Stack :
From Address : fffffa60`015dd000
To Address : fffffa60`015f9000
Size : 0x0001c000
Time Stamp : 0x47919069
Time String : 1/18/2008 10:53:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cdrom.sys
Address In Stack :
From Address : fffffa60`03783000
To Address : fffffa60`0379f000
Size : 0x0001c000
Time Stamp : 0x49e02bef
Time String : 4/10/2009 10:34:39 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cfwids.sys
Address In Stack :
From Address : fffffa60`04be9000
To Address : fffffa60`04bf6a80
Size : 0x0000da80
Time Stamp : 0x4d6e738b
Time String : 3/2/2011 9:42:51 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CI.dll
Address In Stack :
From Address : fffffa60`006b9000
To Address : fffffa60`0076b000
Size : 0x000b2000
Time Stamp : 0x49e041d9
Time String : 4/11/2009 12:08:09 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : circlass.sys
Address In Stack :
From Address : fffffa60`033ed000
To Address : fffffa60`033fe000
Size : 0x00011000
Time Stamp : 0x479199d8
Time String : 1/18/2008 11:34:00 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CLASSPNP.SYS
Address In Stack :
From Address : fffffa60`00a4d000
To Address : fffffa60`00a79000
Size : 0x0002c000
Time Stamp : 0x49e02bd7
Time String : 4/10/2009 10:34:15 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CLFS.SYS
Address In Stack :
From Address : fffffa60`0065c000
To Address : fffffa60`006b9000
Size : 0x0005d000
Time Stamp : 0x49e0227d
Time String : 4/10/2009 9:54:21 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CmBatt.sys
Address In Stack :
From Address : fffffa60`01800000
To Address : fffffa60`01804580
Size : 0x00004580
Time Stamp : 0x47919282
Time String : 1/18/2008 11:02:42 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cmdide.sys
Address In Stack :
From Address : fffffa60`007e1000
To Address : fffffa60`007e9000
Size : 0x00008000
Time Stamp : 0x4844a1a5
Time String : 6/2/2008 6:43:01 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : compbatt.sys
Address In Stack :
From Address : fffffa60`009ca000
To Address : fffffa60`009cd400
Size : 0x00003400
Time Stamp : 0x47919282
Time String : 1/18/2008 11:02:42 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : crashdmp.sys
Address In Stack :
From Address : fffffa60`04b84000
To Address : fffffa60`04b92000
Size : 0x0000e000
Time Stamp : 0x49e02be7
Time String : 4/10/2009 10:34:31 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : crcdisk.sys
Address In Stack :
From Address : fffffa60`017ee000
To Address : fffffa60`017f8000
Size : 0x0000a000
Time Stamp : 0x479198f4
Time String : 1/18/2008 11:30:12 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dfsc.sys
Address In Stack :
From Address : fffffa60`04a63000
To Address : fffffa60`04a80000
Size : 0x0001d000
Time Stamp : 0x4da70f4b
Time String : 4/14/2011 8:14:19 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : disk.sys
Address In Stack :
From Address : fffffa60`017da000
To Address : fffffa60`017ee000
Size : 0x00014000
Time Stamp : 0x49e02bee
Time String : 4/10/2009 10:34:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : djsvs.sys
Address In Stack :
From Address : fffffa60`00d5c000
To Address : fffffa60`00d74000
Size : 0x00018000
Time Stamp : 0x443c481c
Time String : 4/11/2006 5:21:48 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : drmk.sys
Address In Stack :
From Address : fffffa60`044b8000
To Address : fffffa60`044db000
Size : 0x00023000
Time Stamp : 0x4791a4a4
Time String : 1/19/2008 12:20:04 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dump_dumpata.sys
Address In Stack :
From Address : fffffa60`04b92000
To Address : fffffa60`04b9e000
Size : 0x0000c000
Time Stamp : 0x49e02bde
Time String : 4/10/2009 10:34:22 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dump_msahci.sys
Address In Stack :
From Address : fffffa60`04b9e000
To Address : fffffa60`04ba8000
Size : 0x0000a000
Time Stamp : 0x49e02be5
Time String : 4/10/2009 10:34:29 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Dxapi.sys
Address In Stack :
From Address : fffffa60`04ba8000
To Address : fffffa60`04bb4000
Size : 0x0000c000
Time Stamp : 0x479193c0
Time String : 1/18/2008 11:08:00 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dxgkrnl.sys
Address In Stack :
From Address : fffffa60`03003000
To Address : fffffa60`030e6000
Size : 0x000e3000
Time Stamp : 0x4d384226
Time String : 1/20/2011 7:09:42 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ecache.sys
Address In Stack :
From Address : fffffa60`0153b000
To Address : fffffa60`01567000
Size : 0x0002c000
Time Stamp : 0x49e02c52
Time String : 4/10/2009 10:36:18 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : elxstor.sys
Address In Stack :
From Address : fffffa60`00e09000
To Address : fffffa60`00eac000
Size : 0x000a3000
Time Stamp : 0x461d0650
Time String : 4/11/2007 9:01:20 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : enecir.sys
Address In Stack :
From Address : fffffa60`0375e000
To Address : fffffa60`0377a000
Size : 0x0001c000
Time Stamp : 0x48bfaece
Time String : 9/4/2008 2:47:58 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fileinfo.sys
Address In Stack :
From Address : fffffa60`01330000
To Address : fffffa60`01344000
Size : 0x00014000
Time Stamp : 0x47919323
Time String : 1/18/2008 11:05:23 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fltmgr.sys
Address In Stack :
From Address : fffffa60`012e9000
To Address : fffffa60`01330000
Size : 0x00047000
Time Stamp : 0x49e0228e
Time String : 4/10/2009 9:54:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Fs_Rec.SYS
Address In Stack :
From Address : fffffa60`047b4000
To Address : fffffa60`047be000
Size : 0x0000a000
Time Stamp : 0x00000000
Time String :
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fwpkclnt.sys
Address In Stack :
From Address : fffffa60`0497b000
To Address : fffffa60`049a7000
Size : 0x0002c000
Time Stamp : 0x49e02dd4
Time String : 4/10/2009 10:42:44 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : GEARAspiWDM.sys
Address In Stack :
From Address : fffffa60`0379f000
To Address : fffffa60`037ac000
Size : 0x0000d000
Time Stamp : 0x4a1151c0
Time String : 5/18/2009 5:17:04 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hal.dll
Address In Stack :
From Address : fffff800`02b37000
To Address : fffff800`02b7d000
Size : 0x00046000
Time Stamp : 0x49e04118
Time String : 4/11/2009 12:04:56 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HDAudBus.sys
Address In Stack :
From Address : fffffa60`0320b000
To Address : fffffa60`032f8000
Size : 0x000ed000
Time Stamp : 0x49e02d1a
Time String : 4/10/2009 10:39:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HIDCLASS.SYS
Address In Stack :
From Address : fffffa60`04784000
To Address : fffffa60`04796000
Size : 0x00012000
Time Stamp : 0x49e02d14
Time String : 4/10/2009 10:39:32 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hidir.sys
Address In Stack :
From Address : fffffa60`04779000
To Address : fffffa60`04784000
Size : 0x0000b000
Time Stamp : 0x479199d1
Time String : 1/18/2008 11:33:53 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HIDPARSE.SYS
Address In Stack :
From Address : fffffa60`04796000
To Address : fffffa60`0479db80
Size : 0x00007b80
Time Stamp : 0x479199cf
Time String : 1/18/2008 11:33:51 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hidusb.sys
Address In Stack :
From Address : fffffa60`16ff6000
To Address : fffffa60`16fff000
Size : 0x00009000
Time Stamp : 0x49e02d14
Time String : 4/10/2009 10:39:32 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hpcisss.sys
Address In Stack :
From Address : fffffa60`00c01000
To Address : fffffa60`00c0f000
Size : 0x0000e000
Time Stamp : 0x45f1c0e9
Time String : 3/9/2007 1:17:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hpdskflt.sys
Address In Stack :
From Address : fffffa60`019f2000
To Address : fffffa60`019fc000
Size : 0x0000a000
Time Stamp : 0x47e0334b
Time String : 3/18/2008 2:25:31 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HpqKbFiltr.sys
Address In Stack :
From Address : fffffa60`036f2000
To Address : fffffa60`036fe000
Size : 0x0000c000
Time Stamp : 0x46770377
Time String : 6/18/2007 3:13:11 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HTTP.sys
Address In Stack :
From Address : fffffa60`16706000
To Address : fffffa60`167a9000
Size : 0x000a3000
Time Stamp : 0x4b80545d
Time String : 2/20/2010 2:30:05 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : i2omp.sys
Address In Stack :
From Address : fffffa60`00eac000
To Address : fffffa60`00eb7000
Size : 0x0000b000
Time Stamp : 0x479198ab
Time String : 1/18/2008 11:28:59 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : i8042prt.sys
Address In Stack :
From Address : fffffa60`036dc000
To Address : fffffa60`036f2000
Size : 0x00016000
Time Stamp : 0x47919878
Time String : 1/18/2008 11:28:08 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : iastorv.sys
Address In Stack :
From Address : fffffa60`00a88000
To Address : fffffa60`00b4f000
Size : 0x000c7000
Time Stamp : 0x46fd48aa
Time String : 9/28/2007 11:32:10 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : igdkmd64.sys
Address In Stack :
From Address : fffffa60`0280a000
To Address : fffffa60`02fb4d80
Size : 0x007aad80
Time Stamp : 0x49073ed7
Time String : 10/28/2008 9:33:27 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : iirsp.sys
Address In Stack :
From Address : fffffa60`00eb7000
To Address : fffffa60`00ec8000
Size : 0x00011000
Time Stamp : 0x439f418a
Time String : 12/13/2005 2:47:54 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : IntcHdmi.sys
Address In Stack :
From Address : fffffa60`04755000
To Address : fffff4c0`04779000
Size : 0xfffffa6000024000
Time Stamp : 0x48d7a284
Time String : 9/22/2008 6:49:56 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : intelide.sys
Address In Stack :
From Address : fffffa60`009ee000
To Address : fffffa60`009f6000
Size : 0x00008000
Time Stamp : 0x4844a1a5
Time String : 6/2/2008 6:43:01 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : intelppm.sys
Address In Stack :
From Address : fffffa60`015a1000
To Address : fffffa60`015b4000
Size : 0x00013000
Time Stamp : 0x4791902d
Time String : 1/18/2008 10:52:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : isapnp.sys
Address In Stack :
From Address : fffffa60`0098a000
To Address : fffffa60`00993000
Size : 0x00009000
Time Stamp : 0x4791928b
Time String : 1/18/2008 11:02:51 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : iteatapi.sys
Address In Stack :
From Address : fffffa60`00ec8000
To Address : fffffa60`00ed5000
Size : 0x0000d000
Time Stamp : 0x44dbe759
Time String : 8/10/2006 7:11:37 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : iteraid.sys
Address In Stack :
From Address : fffffa60`00ed5000
To Address : fffffa60`00ee2000
Size : 0x0000d000
Time Stamp : 0x44dbdf6d
Time String : 8/10/2006 6:37:49 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : kbdclass.sys
Address In Stack :
From Address : fffffa60`036fe000
To Address : fffffa60`0370c000
Size : 0x0000e000
Time Stamp : 0x47919875
Time String : 1/18/2008 11:28:05 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : kbdhid.sys
Address In Stack :
From Address : fffffa60`0479e000
To Address : fffffa60`047a9000
Size : 0x0000b000
Time Stamp : 0x49e02bb4
Time String : 4/10/2009 10:33:40 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : kdcom.dll
Address In Stack :
From Address : fffffa60`0060a000
To Address : fffffa60`0060d000
Size : 0x00003000
Time Stamp : 0x4f175667
Time String : 1/18/2012 4:31:51 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ks.sys
Address In Stack :
From Address : fffffa60`033b9000
To Address : fffffa60`033ed000
Size : 0x00034000
Time Stamp : 0x49e02bbf
Time String : 4/10/2009 10:33:51 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ksecdd.sys
Address In Stack :
From Address : fffffa60`0140b000
To Address : fffffa60`01492000
Size : 0x00087000
Time Stamp : 0x4ec3ca10
Time String : 11/16/2011 7:34:56 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ksthunk.sys
Address In Stack :
From Address : fffffa60`037fa000
To Address : fffffa60`037ff180
Size : 0x00005180
Time Stamp : 0x4791987e
Time String : 1/18/2008 11:28:14 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lltdio.sys
Address In Stack :
From Address : fffffa60`1669b000
To Address : fffffa60`166af000
Size : 0x00014000
Time Stamp : 0x47919a44
Time String : 1/18/2008 11:35:48 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lsi_fc.sys
Address In Stack :
From Address : fffffa60`00ee2000
To Address : fffffa60`00f00000
Size : 0x0001e000
Time Stamp : 0x4685ab5c
Time String : 6/29/2007 6:01:16 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lsi_sas.sys
Address In Stack :
From Address : fffffa60`00f00000
To Address : fffffa60`00f1c000
Size : 0x0001c000
Time Stamp : 0x4685ab48
Time String : 6/29/2007 6:00:56 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lsi_scsi.sys
Address In Stack :
From Address : fffffa60`00b7b000
To Address : fffffa60`00b99000
Size : 0x0001e000
Time Stamp : 0x4685aa3a
Time String : 6/29/2007 5:56:26 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : luafv.sys
Address In Stack :
From Address : fffffa60`04bc7000
To Address : fffffa60`04be9000
Size : 0x00022000
Time Stamp : 0x479191aa
Time String : 1/18/2008 10:59:06 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mcupdate_GenuineIntel.dll
Address In Stack :
From Address : fffffa60`0060d000
To Address : fffffa60`00648000
Size : 0x0003b000
Time Stamp : 0x49e04145
Time String : 4/11/2009 12:05:41 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : megasas.sys
Address In Stack :
From Address : fffffa60`00f1c000
To Address : fffffa60`00f28000
Size : 0x0000c000
Time Stamp : 0x46576158
Time String : 5/25/2007 3:21:12 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : megasr.sys
Address In Stack :
From Address : fffffa60`00f28000
To Address : fffffa60`00fef000
Size : 0x000c7000
Time Stamp : 0x4689730b
Time String : 7/2/2007 2:50:03 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mfeapfk.sys
Address In Stack :
From Address : fffffa60`01567000
To Address : fffffa60`01582d00
Size : 0x0001bd00
Time Stamp : 0x4d6e728f
Time String : 3/2/2011 9:38:39 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mfeavfk.sys
Address In Stack :
From Address : fffffa60`04a80000
To Address : fffffa60`04aac980
Size : 0x0002c980
Time Stamp : 0x4d6e72a6
Time String : 3/2/2011 9:39:02 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mfefirek.sys
Address In Stack :
From Address : fffffa60`04aad000
To Address : fffffa60`04b16980
Size : 0x00069980
Time Stamp : 0x4d6e7359
Time String : 3/2/2011 9:42:01 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mfehidk.sys
Address In Stack :
From Address : fffffa60`01344000
To Address : fffffa60`013c3100
Size : 0x0007f100
Time Stamp : 0x4d6e726a
Time String : 3/2/2011 9:38:02 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mfenlfk.sys
Address In Stack :
From Address : fffffa60`049eb000
To Address : fffffa60`049fb980
Size : 0x00010980
Time Stamp : 0x4d6e7282
Time String : 3/2/2011 9:38:26 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mfewfpk.sys
Address In Stack :
From Address : fffffa60`049a7000
To Address : fffffa60`049ea380
Size : 0x00043380
Time Stamp : 0x4d6e7278
Time String : 3/2/2011 9:38:16 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : modem.sys
Address In Stack :
From Address : fffffa60`04746000
To Address : fffffa60`04755000
Size : 0x0000f000
Time Stamp : 0x47919ad9
Time String : 1/18/2008 11:38:17 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mouclass.sys
Address In Stack :
From Address : fffffa60`03752000
To Address : fffffa60`0375e000
Size : 0x0000c000
Time Stamp : 0x47919875
Time String : 1/18/2008 11:28:05 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mouhid.sys
Address In Stack :
From Address : fffffa60`047a9000
To Address : fffffa60`047b4000
Size : 0x0000b000
Time Stamp : 0x4791987a
Time String : 1/18/2008 11:28:10 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mountmgr.sys
Address In Stack :
From Address : fffffa60`007e9000
To Address : fffffa60`007fc000
Size : 0x00013000
Time Stamp : 0x47919871
Time String : 1/18/2008 11:28:01 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mpio.sys
Address In Stack :
From Address : fffffa60`00993000
To Address : fffffa60`009b5000
Size : 0x00022000
Time Stamp : 0x47919907
Time String : 1/18/2008 11:30:31 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mpsdrv.sys
Address In Stack :
From Address : fffffa60`02fb5000
To Address : fffffa60`02fcf000
Size : 0x0001a000
Time Stamp : 0x47919a30
Time String : 1/18/2008 11:35:28 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mraid35x.sys
Address In Stack :
From Address : fffffa60`00fef000
To Address : fffffa60`00ffc000
Size : 0x0000d000
Time Stamp : 0x4500c590
Time String : 9/7/2006 6:21:20 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxdav.sys
Address In Stack :
From Address : fffffa60`02fcf000
To Address : fffffa60`02ff6000
Size : 0x00027000
Time Stamp : 0x49e022ce
Time String : 4/10/2009 9:55:42 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxsmb.sys
Address In Stack :
From Address : fffffa60`015b4000
To Address : fffffa60`015dd000
Size : 0x00029000
Time Stamp : 0x4dbabf95
Time String : 4/29/2011 6:39:33 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxsmb10.sys
Address In Stack :
From Address : fffffa60`16e08000
To Address : fffffa60`16e51000
Size : 0x00049000
Time Stamp : 0x4e148403
Time String : 7/6/2011 8:49:23 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxsmb20.sys
Address In Stack :
From Address : fffffa60`16e51000
To Address : fffffa60`16e70000
Size : 0x0001f000
Time Stamp : 0x4dbabf93
Time String : 4/29/2011 6:39:31 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msahci.sys
Address In Stack :
From Address : fffffa60`00bf6000
To Address : fffffa60`00c00000
Size : 0x0000a000
Time Stamp : 0x49e02be5
Time String : 4/10/2009 10:34:29 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msdsm.sys
Address In Stack :
From Address : fffffa60`00a0c000
To Address : fffffa60`00a2a000
Size : 0x0001e000
Time Stamp : 0x4791990d
Time String : 1/18/2008 11:30:37 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Msfs.SYS
Address In Stack :
From Address : fffffa60`044e4000
To Address : fffffa60`044ef000
Size : 0x0000b000
Time Stamp : 0x00000000
Time String :
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msisadrv.sys
Address In Stack :
From Address : fffffa60`00950000
To Address : fffffa60`0095a000
Size : 0x0000a000
Time Stamp : 0x4791928a
Time String : 1/18/2008 11:02:50 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msiscsi.sys
Address In Stack :
From Address : fffffa60`037c1000
To Address : fffffa60`037fa000
Size : 0x00039000
Time Stamp : 0x49e02c49
Time String : 4/10/2009 10:36:09 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msrpc.sys
Address In Stack :
From Address : fffffa60`01492000
To Address : fffffa60`014e2000
Size : 0x00050000
Time Stamp : 0x00000000
Time String :
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mssmbios.sys
Address In Stack :
From Address : fffffa60`03200000
To Address : fffffa60`0320b000
Size : 0x0000b000
Time Stamp : 0x4791928e
Time String : 1/18/2008 11:02:54 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mup.sys
Address In Stack :
From Address : fffffa60`017c8000
To Address : fffffa60`017da000
Size : 0x00012000
Time Stamp : 0x49e02297
Time String : 4/10/2009 9:54:47 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndis.sys
Address In Stack :
From Address : fffffa60`01605000
To Address : fffffa60`017c8000
Size : 0x001c3000
Time Stamp : 0x49e02df3
Time String : 4/10/2009 10:43:15 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndistapi.sys
Address In Stack :
From Address : fffffa60`0331b000
To Address : fffffa60`03327000
Size : 0x0000c000
Time Stamp : 0x47919aa2
Time String : 1/18/2008 11:37:22 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndisuio.sys
Address In Stack :
From Address : fffffa60`166e3000
To Address : fffffa60`166ee000
Size : 0x0000b000
Time Stamp : 0x47919a6d
Time String : 1/18/2008 11:36:29 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndiswan.sys
Address In Stack :
From Address : fffffa60`03327000
To Address : fffffa60`03358000
Size : 0x00031000
Time Stamp : 0x49e02e0b
Time String : 4/10/2009 10:43:39 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : NDProxy.SYS
Address In Stack :
From Address : fffffa60`031b1000
To Address : fffffa60`031c5000
Size : 0x00014000
Time Stamp : 0x47919aa6
Time String : 1/18/2008 11:37:26 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : netbios.sys
Address In Stack :
From Address : fffffa60`045f0000
To Address : fffffa60`045ff000
Size : 0x0000f000
Time Stamp : 0x47919a73
Time String : 1/18/2008 11:36:35 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : netbt.sys
Address In Stack :
From Address : fffffa60`04541000
To Address : fffffa60`04585000
Size : 0x00044000
Time Stamp : 0x49e02dc7
Time String : 4/10/2009 10:42:31 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : NETIO.SYS
Address In Stack :
From Address : fffffa60`014e2000
To Address : fffffa60`0153b000
Size : 0x00059000
Time Stamp : 0x49e02e06
Time String : 4/10/2009 10:43:34 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nfrd960.sys
Address In Stack :
From Address : fffffa60`00da6000
To Address : fffffa60`00db6000
Size : 0x00010000
Time Stamp : 0x4485ef94
Time String : 6/6/2006 2:11:48 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Npfs.SYS
Address In Stack :
From Address : fffffa60`044ef000
To Address : fffffa60`04500000
Size : 0x00011000
Time Stamp : 0x49e0227e
Time String : 4/10/2009 9:54:22 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nsiproxy.sys
Address In Stack :
From Address : fffffa60`04a57000
To Address : fffffa60`04a63000
Size : 0x0000c000
Time Stamp : 0x47919a7d
Time String : 1/18/2008 11:36:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Ntfs.sys
Address In Stack :
From Address : fffffa60`01805000
To Address : fffffa60`01985000
Size : 0x00180000
Time Stamp : 0x49e022ca
Time String : 4/10/2009 9:55:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ntoskrnl.exe
Address In Stack : ntoskrnl.exe+5a22e
From Address : fffff800`0261f000
To Address : fffff800`02b37000
Size : 0x00518000
Time Stamp : 0x4dfb5a33
Time String : 6/17/2011 6:44:19 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : NuidFltr.sys
Address In Stack :
From Address : fffffa60`04bf7000
To Address : fffffa60`04c00000
Size : 0x00009000
Time Stamp : 0x4a03f30b
Time String : 5/8/2009 1:53:31 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Null.SYS
Address In Stack :
From Address : fffffa60`047be000
To Address : fffffa60`047c7000
Size : 0x00009000
Time Stamp : 0x00000000
Time String :
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nvraid.sys
Address In Stack :
From Address : fffffa60`00a2a000
To Address : fffffa60`00a4d000
Size : 0x00023000
Time Stamp : 0x46671a39
Time String : 6/6/2007 1:34:01 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nvstor.sys
Address In Stack :
From Address : fffffa60`00db6000
To Address : fffffa60`00dc6000
Size : 0x00010000
Time Stamp : 0x46671a38
Time String : 6/6/2007 1:34:00 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nwifi.sys
Address In Stack :
From Address : fffffa60`166af000
To Address : fffffa60`166e3000
Size : 0x00034000
Time Stamp : 0x49e02d43
Time String : 4/10/2009 10:40:19 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pacer.sys
Address In Stack :
From Address : fffffa60`031c5000
To Address : fffffa60`031e3000
Size : 0x0001e000
Time Stamp : 0x49e02de0
Time String : 4/10/2009 10:42:56 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : partmgr.sys
Address In Stack :
From Address : fffffa60`009b5000
To Address : fffffa60`009ca000
Size : 0x00015000
Time Stamp : 0x49e02bfb
Time String : 4/10/2009 10:34:51 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pci.sys
Address In Stack :
From Address : fffffa60`0095a000
To Address : fffffa60`0098a000
Size : 0x00030000
Time Stamp : 0x49e024a5
Time String : 4/10/2009 10:03:33 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pciide.sys
Address In Stack :
From Address : fffffa60`00a79000
To Address : fffffa60`00a80000
Size : 0x00007000
Time Stamp : 0x4844a1a6
Time String : 6/2/2008 6:43:02 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : PCIIDEX.SYS
Address In Stack :
From Address : fffffa60`007d1000
To Address : fffffa60`007e1000
Size : 0x00010000
Time Stamp : 0x49e02bde
Time String : 4/10/2009 10:34:22 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : peauth.sys
Address In Stack :
From Address : fffffa60`16f35000
To Address : fffffa60`16feb000
Size : 0x000b6000
Time Stamp : 0x453cae0c
Time String : 10/23/2006 4:57:00 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : portcls.sys
Address In Stack :
From Address : fffffa60`0447d000
To Address : fffffa60`044b8000
Size : 0x0003b000
Time Stamp : 0x49e02d18
Time String : 4/10/2009 10:39:36 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : PSHED.dll
Address In Stack :
From Address : fffffa60`00648000
To Address : fffff4e0`0065c000
Size : 0xfffffa8000014000
Time Stamp : 0x49e041e1
Time String : 4/11/2009 12:08:17 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ql2300.sys
Address In Stack :
From Address : fffffa60`01005000
To Address : fffffa60`01157000
Size : 0x00152000
Time Stamp : 0x45f1ee80
Time String : 3/9/2007 4:32:16 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ql40xx.sys
Address In Stack :
From Address : fffffa60`01157000
To Address : 000019e0`011b5000
Size : 0x00001f800005e000
Time Stamp : 0x44ad66a4
Time String : 7/6/2006 12:38:12 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rasacd.sys
Address In Stack :
From Address : fffffa60`04500000
To Address : fffffa60`04509000
Size : 0x00009000
Time Stamp : 0x47919aaa
Time String : 1/18/2008 11:37:30 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rasl2tp.sys
Address In Stack :
From Address : fffffa60`032f8000
To Address : fffffa60`0331b000
Size : 0x00023000
Time Stamp : 0x49e02e09
Time String : 4/10/2009 10:43:37 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : raspppoe.sys
Address In Stack :
From Address : fffffa60`03358000
To Address : fffffa5f`03368000
Size : 0xffffffff00010000
Time Stamp : 0x49e02e05
Time String : 4/10/2009 10:43:33 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : raspptp.sys
Address In Stack :
From Address : fffffa60`03368000
To Address : fffffa60`03386000
Size : 0x0001e000
Time Stamp : 0x49e02e0a
Time String : 4/10/2009 10:43:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rassstp.sys
Address In Stack :
From Address : fffffa60`03386000
To Address : fffffa60`0339e000
Size : 0x00018000
Time Stamp : 0x49e02e12
Time String : 4/10/2009 10:43:46 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdbss.sys
Address In Stack :
From Address : fffffa60`04a0a000
To Address : fffffa60`04a57000
Size : 0x0004d000
Time Stamp : 0x49e022b9
Time String : 4/10/2009 9:55:21 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : RDPCDD.sys
Address In Stack :
From Address : fffffa60`04600000
To Address : fffffa60`04609000
Size : 0x00009000
Time Stamp : 0x47919bbc
Time String : 1/18/2008 11:42:04 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdpencdd.sys
Address In Stack :
From Address : fffffa60`044db000
To Address : fffffa60`044e4000
Size : 0x00009000
Time Stamp : 0x47919bbb
Time String : 1/18/2008 11:42:03 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rspndr.sys
Address In Stack :
From Address : fffffa60`166ee000
To Address : fffffa60`16706000
Size : 0x00018000
Time Stamp : 0x47919a44
Time String : 1/18/2008 11:35:48 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Rtlh64.sys
Address In Stack :
From Address : fffffa60`036a2000
To Address : fffffa60`036dc000
Size : 0x0003a000
Time Stamp : 0x4a9de1ef
Time String : 9/1/2009 8:09:35 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : RTSTOR64.SYS
Address In Stack :
From Address : fffffa60`04b17000
To Address : fffffa60`04b2c000
Size : 0x00015000
Time Stamp : 0x48d3745d
Time String : 9/19/2008 2:43:57 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : sbp2port.sys
Address In Stack :
From Address : fffffa60`019d9000
To Address : fffffa60`019f2000
Size : 0x00019000
Time Stamp : 0x4549bc95
Time String : 11/2/2006 2:38:29 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : SCSIPORT.SYS
Address In Stack :
From Address : fffffa60`00cff000
To Address : fffffa60`00d2d000
Size : 0x0002e000
Time Stamp : 0x479198a4
Time String : 1/18/2008 11:28:52 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : secdrv.SYS
Address In Stack :
From Address : fffffa60`16feb000
To Address : fffffa60`16ff6000
Size : 0x0000b000
Time Stamp : 0x4508052e
Time String : 9/13/2006 6:18:38 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : serscan.sys
Address In Stack :
From Address : fffffa60`033b1000
To Address : fffffa60`033b9000
Size : 0x00008000
Time Stamp : 0x4791a244
Time String : 1/19/2008 12:09:56 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : sisraid2.sys
Address In Stack :
From Address : fffffa60`011b5000
To Address : fffffa60`011c3000
Size : 0x0000e000
Time Stamp : 0x46200585
Time String : 4/13/2007 3:34:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : sisraid4.sys
Address In Stack :
From Address : fffffa60`011c3000
To Address : fffffa60`011d9000
Size : 0x00016000
Time Stamp : 0x462ceedf
Time String : 4/23/2007 10:37:35 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : smb.sys
Address In Stack :
From Address : fffffa60`04526000
To Address : fffffa60`04541000
Size : 0x0001b000
Time Stamp : 0x49e02dbb
Time String : 4/10/2009 10:42:19 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : spldr.sys
Address In Stack :
From Address : fffffa60`019d1000
To Address : fffffa60`019d9000
Size : 0x00008000
Time Stamp : 0x496bbb61
Time String : 1/12/2009 2:51:29 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : spsys.sys
Address In Stack :
From Address : fffffa60`16601000
To Address : fffffa60`1669b000
Size : 0x0009a000
Time Stamp : 0x49b6a07b
Time String : 3/10/2009 10:16:43 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : srv.sys
Address In Stack :
From Address : fffffa60`16ea2000
To Address : fffffa60`16f35000
Size : 0x00093000
Time Stamp : 0x4d5e7fa4
Time String : 2/18/2011 7:18:12 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : srv2.sys
Address In Stack :
From Address : fffffa60`16e70000
To Address : fffffa60`16ea2000
Size : 0x00032000
Time Stamp : 0x4dbabfed
Time String : 4/29/2011 6:41:01 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : srvnet.sys
Address In Stack :
From Address : fffffa60`167a9000
To Address : fffffa60`167d2000
Size : 0x00029000
Time Stamp : 0x4dbabfe7
Time String : 4/29/2011 6:40:55 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : storport.sys
Address In Stack :
From Address : fffffa60`00b99000
To Address : fffffa60`00bf6000
Size : 0x0005d000
Time Stamp : 0x49e02bf5
Time String : 4/10/2009 10:34:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : stwrt64.sys
Address In Stack :
From Address : fffffa60`04402000
To Address : fffffa60`0447d000
Size : 0x0007b000
Time Stamp : 0x4a26e224
Time String : 6/3/2009 1:50:44 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : swenum.sys
Address In Stack :
From Address : fffffa60`0340d000
To Address : fffffa60`0340e480
Size : 0x00001480
Time Stamp : 0x4549bc5d
Time String : 11/2/2006 2:37:33 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : sym_hi.sys
Address In Stack :
From Address : fffffa60`011e7000
To Address : fffffa60`011f4000
Size : 0x0000d000
Time Stamp : 0x437507e1
Time String : 11/11/2005 2:06:41 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : sym_u3.sys
Address In Stack :
From Address : fffffa60`00dc6000
To Address : fffffa60`00dd4000
Size : 0x0000e000
Time Stamp : 0x43583294
Time String : 10/20/2005 5:13:08 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : symc8xx.sys
Address In Stack :
From Address : fffffa60`011d9000
To Address : fffffa60`011e7000
Size : 0x0000e000
Time Stamp : 0x437501a2
Time String : 11/11/2005 1:40:02 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : SynTP.sys
Address In Stack :
From Address : fffffa60`0370c000
To Address : fffffa60`03750000
Size : 0x00044000
Time Stamp : 0x48890be4
Time String : 7/24/2008 4:10:28 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tcpip.sys
Address In Stack :
From Address : fffffa60`04806000
To Address : fffffa60`0497b000
Size : 0x00175000
Time Stamp : 0x4e78a341
Time String : 9/20/2011 7:29:21 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tcpipreg.sys
Address In Stack :
From Address : fffffa60`167f0000
To Address : fffffa60`16800000
Size : 0x00010000
Time Stamp : 0x4b1e9314
Time String : 12/8/2009 10:55:32 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : TDI.SYS
Address In Stack :
From Address : fffffa60`03400000
To Address : fffffa60`0340d000
Size : 0x0000d000
Time Stamp : 0x49e02e2e
Time String : 4/10/2009 10:44:14 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tdx.sys
Address In Stack :
From Address : fffffa60`04509000
To Address : fffffa60`04526000
Size : 0x0001d000
Time Stamp : 0x49e02de4
Time String : 4/10/2009 10:43:00 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : termdd.sys
Address In Stack :
From Address : fffffa60`0339e000
To Address : fffffa60`033b1000
Size : 0x00013000
Time Stamp : 0x49e02f1d
Time String : 4/10/2009 10:48:13 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : TSDDD.dll
Address In Stack :
From Address : fffff960`004b0000
To Address : fffff960`004ba000
Size : 0x0000a000
Time Stamp : 0x00000000
Time String :
Product Name : Microsoft® Windows® Operating System
File Description : Framebuffer Display Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\TSDDD.dll
==================================================

==================================================
Filename : tunmp.sys
Address In Stack :
From Address : fffffa60`01598000
To Address : fffffa60`015a1000
Size : 0x00009000
Time Stamp : 0x47919a6e
Time String : 1/18/2008 11:36:30 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tunnel.sys
Address In Stack :
From Address : fffffa60`0158b000
To Address : fffffa60`01598000
Size : 0x0000d000
Time Stamp : 0x4b7d2bb2
Time String : 2/18/2010 4:59:46 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : uliahci.sys
Address In Stack :
From Address : fffffa60`01208000
To Address : fffffa60`01251000
Size : 0x00049000
Time Stamp : 0x463b608e
Time String : 5/4/2007 9:34:22 AM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ulsata.sys
Address In Stack :
From Address : fffffa60`01251000
To Address : fffffa60`01280000
Size : 0x0002f000
Time Stamp : 0x4510861d
Time String : 9/19/2006 5:06:53 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ulsata2.sys
Address In Stack :
From Address : fffffa60`01280000
To Address : fffffa60`012c2000
Size : 0x00042000
Time Stamp : 0x451088c3
Time String : 9/19/2006 5:18:11 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : umbus.sys
Address In Stack :
From Address : fffffa60`03159000
To Address : fffffa60`03169000
Size : 0x00010000
Time Stamp : 0x479199e8
Time String : 1/18/2008 11:34:16 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbccgp.sys
Address In Stack :
From Address : fffffa60`04b3e000
To Address : fffffa60`04b5a000
Size : 0x0001c000
Time Stamp : 0x479199dc
Time String : 1/18/2008 11:34:04 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : USBD.SYS
Address In Stack :
From Address : fffffa60`03750000
To Address : fffffa60`03751e00
Size : 0x00001e00
Time Stamp : 0x479199d1
Time String : 1/18/2008 11:33:53 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbehci.sys
Address In Stack :
From Address : fffffa60`03148000
To Address : fffffa60`03159000
Size : 0x00011000
Time Stamp : 0x49e02d18
Time String : 4/10/2009 10:39:36 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbhub.sys
Address In Stack :
From Address : fffffa60`03169000
To Address : fffffa60`031b1000
Size : 0x00048000
Time Stamp : 0x49e02d28
Time String : 4/10/2009 10:39:52 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : USBPORT.SYS
Address In Stack :
From Address : fffffa60`03102000
To Address : fffffa60`03148000
Size : 0x00046000
Time Stamp : 0x49e02d1b
Time String : 4/10/2009 10:39:39 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbuhci.sys
Address In Stack :
From Address : fffffa60`030f6000
To Address : fffffa60`03102000
Size : 0x0000c000
Time Stamp : 0x479199d4
Time String : 1/18/2008 11:33:56 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbvideo.sys
Address In Stack :
From Address : fffffa60`04b5a000
To Address : fffffa60`04b83300
Size : 0x00029300
Time Stamp : 0x479199e6
Time String : 1/18/2008 11:34:14 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : vga.sys
Address In Stack :
From Address : fffffa60`047c7000
To Address : fffffa60`047d5000
Size : 0x0000e000
Time Stamp : 0x47919975
Time String : 1/18/2008 11:32:21 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : viaide.sys
Address In Stack :
From Address : fffffa60`00a80000
To Address : fffffa60`00a88000
Size : 0x00008000
Time Stamp : 0x4844a1a6
Time String : 6/2/2008 6:43:02 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : VIDEOPRT.SYS
Address In Stack :
From Address : fffffa60`047d5000
To Address : fffffa60`047fa000
Size : 0x00025000
Time Stamp : 0x47919979
Time String : 1/18/2008 11:32:25 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : volmgr.sys
Address In Stack :
From Address : fffffa60`009da000
To Address : fffffa60`009ee000
Size : 0x00014000
Time Stamp : 0x49e02bf9
Time String : 4/10/2009 10:34:49 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : volmgrx.sys
Address In Stack :
From Address : fffffa60`0076b000
To Address : fffffa60`007d1000
Size : 0x00066000
Time Stamp : 0x49e02c12
Time String : 4/10/2009 10:35:14 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : volsnap.sys
Address In Stack :
From Address : fffffa60`0198d000
To Address : fffffa60`019d1000
Size : 0x00044000
Time Stamp : 0x49e02c25
Time String : 4/10/2009 10:35:33 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : vsmraid.sys
Address In Stack :
From Address : fffffa60`012c2000
To Address : fffffa60`012e9000
Size : 0x00027000
Time Stamp : 0x465de99b
Time String : 5/30/2007 2:16:11 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : wanarp.sys
Address In Stack :
From Address : fffffa60`031e3000
To Address : fffffa60`031fe000
Size : 0x0001b000
Time Stamp : 0x49e02e0a
Time String : 4/10/2009 10:43:38 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : watchdog.sys
Address In Stack :
From Address : fffffa60`030e6000
To Address : fffffa60`030f6000
Size : 0x00010000
Time Stamp : 0x49e025fc
Time String : 4/10/2009 10:09:16 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : wd.sys
Address In Stack :
From Address : fffffa60`01985000
To Address : fffffa60`0198d000
Size : 0x00008000
Time Stamp : 0x47919982
Time String : 1/18/2008 11:32:34 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Wdf01000.sys
Address In Stack :
From Address : fffffa60`00809000
To Address : fffffa60`008e3000
Size : 0x000da000
Time Stamp : 0x479199b7
Time String : 1/18/2008 11:33:27 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : WDFLDR.SYS
Address In Stack :
From Address : fffffa60`008e3000
To Address : fffffa60`008f1000
Size : 0x0000e000
Time Stamp : 0x47919981
Time String : 1/18/2008 11:32:33 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : win32k.sys
Address In Stack :
From Address : fffff960`00030000
To Address : fffff960`002e7000
Size : 0x002b7000
Time Stamp : 0x00000000
Time String :
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : wmiacpi.sys
Address In Stack :
From Address : fffffa60`037ac000
To Address : fffffa60`037b5000
Size : 0x00009000
Time Stamp : 0x47919282
Time String : 1/18/2008 11:02:42 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : WMILIB.SYS
Address In Stack :
From Address : fffffa60`00947000
To Address : fffffa60`00950000
Size : 0x00009000
Time Stamp : 0x479199c9
Time String : 1/18/2008 11:33:45 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

#4 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 13 May 2012 - 08:06 PM

You didn't get that quite right.

If you have not re-configured BlueScreenView previously ... meaning that you already had it on the computer ? .... then please try again. Otherwise we will need to change the settings in BSV to show what we want to see. I think the dump(s) are recent based on a March 2012 date on one of the drivers.

Otherwise ....

Please zip up the minidumps and attach the resultant zip file to your next reply so I can have a closer look. There's a chance I might get some more useful info from them.
  • Navigate to C:\Windows\Minidump <<< folder
  • Click on the first minidump file to select it.
  • Hold down the <Shift> key, and click on the last minidump file to select all of the files.
  • Release the <Shift> key.
  • Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Minidump folder).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 13 May 2012 - 11:01 PM

This was the first time, to my knowledge, that bluescreenview has ever been run on this machine. I downloaded it when you instructed, ran it, selected all dumps, saved the log and sent it. I ran it again just now and the log is attached below. This file only contains 2 dump records and they are more recent than the last batch I sent you, but they are still a few months old. The computer hasn't been booted since I sent the last batch or records, so I'm not sure why the number of records would have changed. And these records are still not as recent as I'd expect given that the machine BSOD'd at least 10 times in the last few days. What happened to the most recent crashes?

I also attached the .zip of all dumps from the \Windows\Minidump directory. There were only 2.

Thanks,
Rich

----
==================================================
Dump File : Mini032612-01.dmp
Crash Time : 3/26/2012 5:11:00 AM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 00000000`000000a1
Parameter 2 : 00000000`0000000c
Parameter 3 : 00000000`00000001
Parameter 4 : fffff800`0268da86
Caused By Driver : aliide.sys
Caused By Address : aliide.sys+1aa3da40
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+5a490
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\Mini032612-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 269,640
==================================================

==================================================
Dump File : Mini032412-01.dmp
Crash Time : 3/24/2012 9:53:38 AM
Bug Check String : KMODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x0000001e
Parameter 1 : ffffffff`c0000005
Parameter 2 : fffff800`029127d2
Parameter 3 : 00000000`00000001
Parameter 4 : 00000000`00000018
Caused By Driver : mup.sys
Caused By Address : mup.sys+340aa90
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+5a490
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\Mini032412-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 269,640
==================================================
----

Attached Files



#6 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 14 May 2012 - 08:51 AM

Since the system appears to be crashing regularly on normal startup, but you can use Safe Mode with no problems, let's try the following strategy.

Please try Step 1: Perform a clean boot as instructed in the following link:
How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

If you can then load Windows normally, continue with the steps provided in the link until you have determined exactly which item is causing the BSOD on normal startup.

Edit: The only two minidumps available are from March, and of no use to us.

Edited by AustrAlien, 14 May 2012 - 08:54 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#7 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 14 May 2012 - 09:09 AM

Went to msconfig and disabled all non-Microsoft services for a selective startup, clicked OK, rebooted. Same BSOD still occurred.

Rich

#8 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 15 May 2012 - 08:54 AM

Is there a way in Safe mode to force the machine to use a generic VGA driver when booted in Normal mode? Does this look like some bad driver?

I looked to see if I could do Windows Update in Safe mode and it didn't seem to want to load the dialog.

Rich

#9 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 16 May 2012 - 07:19 PM

Sorry about the delay getting back to you. I'll try again.

You wrote: "Went to msconfig and disabled all non-Microsoft services for a selective startup"
Did you also "click to clear the option Load startup items check box", as well as the non-Microsoft services, as per the instructions?

You asked: "Is there a way in Safe mode to force the machine to use a generic VGA driver when booted in Normal mode?"

Try the following:
  • At the Windows Advanced Boot Options menu, choose Enable VGA Mode.

If no success, then please select from the same menu Enable Boot Logging and press <ENTER> to record a boot log of a normal startup attempt.
  • Then start in Safe Mode and navigate to the file C:\Windows\ntbtlog.txt.
  • Zip up the ntbtlog.txt file and attach to a reply.
Please do the following:
(the screenshots are from Windows XP, but things will be essentially the same in Vista)

Get a look at the error message presented by the BSOD (blue screen of death) ....
  • Start tapping the F8 key after you press the ON button, and continue tapping until you are presented with the "Advanced Boot Options" menu screen.

    Posted Image
  • Use the UP/DOWN arrow keys to select "Disable automatic restart on system failure" and press the <ENTER> key.
  • Your system will attempt to restart normally, but when it crashes, it will not re-start: Instead, you will see a BSOD with error message.

    Posted Image
  • Record the error message details (contained in the areas outlined in red, in the above example image), and post in your reply.
Then do the following in Safe Mode, disable automatic restart so that you can record the BSOD error messages when you attempt to start Windows normally at any later time.

Edited by AustrAlien, 16 May 2012 - 07:28 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#10 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 16 May 2012 - 11:43 PM

1. Yes, I did clear the "Load startup items" box in the selective startup. (I retried it just now to be sure, and of course also disabled non-MS services as before.)

2. The equivalent option to Enable VGA Mode on this machine was called "Enable low resolution video" just after the Enable Boot Logging. I tried booting with low resolution mode and still got the BSOD on Normal startup, just after the Welcome screen.

3. I enabled boot logging, captured the log (verifying the date was from the most recent boot) and attached ntbootlog.zip.

4. I disabled reboot after crash and attached a picture of the screen.

Some other weird things about this machine:

1. I tried to add another user, several times, using both the Control Panel user accounts dialog and the command line way of invoking the same tool. In both cases the user appeared to add OK and I could go back into the dialog and see the new user there during that boot session, but upon reboot the user I added was always gone! I also tried to disable UAC in that dialog, and it appeared to accept that, but upon reboot UAC is always reeneabled!

2. The system has an animated martini glass mouse pointer which is annoying as hell. My friend installed this at some point presumably from some shady web page. I have tried a few things to get rid of this to no avail. When I go to Personalize from right-click on the desktop, and I click the mouse option, nothing happens! No further dialog appears. I mention this only because it may point to some larger issue, though the malware forum here did not see any signs of malware on this machine, apparently.

3. There is no Security tab in System Properties as there is on another Vista machine I have. That is, when I go to Control Panel->System->System Protection I get to the System Properties dialog with 4 tabs but no Security tab. The Control Panel seems to be pretty unpopulated compared to the other Vista machine I have (but the other one is Vista Ultimate).

Thanks again for your help.

Rich

Attached Files



#11 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 17 May 2012 - 07:20 AM

Thanks for all the info. Well done!

0x0000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
A system thread generated an exception which the error handler did not catch. There are numerous individual causes for this problem, including hardware incompatibility, a faulty device driver or system service, or some software issues.

Source: http://aumha.org/a/stop.htm

0x0000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control,


Source: http://www.carrona.org/bsodindx.html#0x0000007E


STOP 0x7E (0xC0000005,,,)
Bugcheck 0x7E >>> system thread exception generated exception 0xC0000005 >>> memory access violation.
  • This would normally prompt me to look firstly at the firewall/antivirus as the likely culprit, and suggest that we attempt to get rid of McAfee and check the result.
However, I was looking through the loaded drivers in the crash dumps from March, when I noticed:
NuidFltr.sys Fri May 08 18:53:31 2009
NuidFltr.sys >>> Microsoft Intellipoint mouse driver

I then checked and it is also present in the more recent TDSSKiller scan log (TDSS rootkit removing tool 2.7.34.0 May 2 2012 09:59:18):
09:14:05.0149 1896 NuidFltr (d4012918d3a3847b44b888d56bc095d6) C:\Windows\system32\DRIVERS\NuidFltr.sys
09:14:05.0149 1896 NuidFltr - ok
I was struck by the similarity of your issue with the following topic:
I had a look at the list of installed programs that you attached in the earlier topic, but there is no entry for "Microsoft Intellipoint". Please go to Control Panel > Programs and Features and check to see if it is there. If so, uninstall, and then attempt to start Windows normally.
  • Success?

Edited by AustrAlien, 17 May 2012 - 07:28 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#12 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 17 May 2012 - 09:24 AM

Hello,

I looked in Control Panel->Programs and Features and did not see any item like Microsoft Intellipoint. There was a Synaptics Pointing Device, which I uninstalled, and a Windows Driver Package ENE HID Class which was presumably some sort of human interface device so I uninstalled that too. While I was at it I thought it couldn't hurt to uninstall a few other things so I got rid of the HDA modem which nobody cares about and a "Motorola Driver" that didn't identify what what type it was and also the IDT sound chip driver. I also uninstalled DropBox just for fun. I tried to uninstall the Neat Mobile Scanner scanner driver, of which 3 of 4 different versions appeared to be installed, but that failed because "Windows Installer Service could not be accessed." The other uninstalls appeared to go OK. I was very hopeful this might have done it . . . but still got BSOD upon Normal boot.

After reboot into safe mode the trackpad no longer worked so I plugged in an external mouse. Curiously, the Synaptics Pointing Device entry still appears in the Programs and Features list even though it was apparently removed. A few of the other things also still appear in the list even though I removed them.

I believe MacAfee is long gone. Do you see any indication their daemons are running? I would like to get rid of it, if so. It does not appear in Start->All Programs list. Two MacAfee items do appear in the Programs and Features list but when I try to remove them I get a message like "cannot be removed, it appears to already be removed". Malwarebytes is still installed though and still reports suspicious registry keys. They never go away even when I told Malwarebytes to fix them a while back. Generally, a common symptom seems to be that changes made to the computer keep getting unchanged. For example when I try to add a new user, it appears to add OK but then the new user is gone upon reboot.

A few more things: I have booted with the WiFi disabled (via keypress during boot on keyboard special key) and still get BSOD too. And I know this doesn't mean much but the machine boots fine into Ubuntu Linux from a usb key and nothing seems to be wrong.

I would bet this is a software problem and it is frustrating that Windows can't tell us what is wrong. Windows is still pretty opaque to me. Any more ideas? I'm going to try sfc /scannow one more time in the meantime.

Rich

#13 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 17 May 2012 - 05:27 PM

In your earlier topic you wrote: "Data is safe but would like to avoid OS reinstall and I'm curious to see if that is necessary."
I am thinking a re-installation of Windows is your best option. However if you still wish to muck about and try and get the current system running, then keep reading ....

What makes you think that "MacAfee is long gone"?
It is still very much alive and well with all drivers shown as being loaded in the March crash dumps, and also present in the TDSSKiller scan log. However, I suspect that McAfee is not able to be uninstalled in the normal manner while in Safe Mode.

You wrote: "the machine boots fine into Ubuntu Linux from a usb key"
Good!!! Let's use Ubuntu.

Firstly, disable the Microsoft Intellipoint driver. Boot into Ubuntu and navigate to ...
  • C:\Windows\system32\DRIVERS\NuidFltr.sys
  • Re-name NuidFltr.sys to NuidFltr.OLD
  • Reboot the computer and attempt to load Windows normally. Success?
If that is not successful, I will post instructions on how to remove McAfee in Safe Mode.

Edited by AustrAlien, 17 May 2012 - 05:50 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#14 R.P.D.

R.P.D.
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 17 May 2012 - 08:37 PM

I renamed that .sys to .OLD and rebooted. Same BSOD.

I mentioned that Linux boots OK just to support the idea that the hardware is basically sound, though I recognize that doesn't prove anything in that regard.

I would try reinstalling Vista from the recovery partition, and you're probably right that it makes sense at this point. I hate to give up though and I'm always called in to fix friends and family computers so I tend to stick it out to the end just for future knowledge sake.

If you could tell me how to zap MacAfee in safe mode I'll definitely do that.

And can you suggest what would cause the behavior where I add a new user (in Safe mode), exit the dialog, go back in the dialog, see the user I created there, then reboot in safe mode and the user is gone? This also happens when I try to enable the Guest account . . . it just gets unenabled on reboot.

Thanks,
Rich

#15 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:03:55 AM

Posted 17 May 2012 - 08:55 PM

I renamed that .sys to .OLD and rebooted. Same BSOD.

Ah well! It was a long shot, but I thought it worth a try.

And can you suggest what would cause the behavior where . . . it just gets unenabled on reboot.

Vista's UAC is responsible for a lot of that type of behaviour, although there could well be another reason in this case, since there are a lot of things not working too well.

I hate to give up though ... so I tend to stick it out to the end just for future knowledge sake.

Me too!

I'll work on a means of removing McAfee and get back to you shortly.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users