[SSri09]

I am getting a few errors, which are listed below:

(1) BSOD......The debug shows bugcheck 9F (ntoskrnl.exe)...This occured at the time of shutting down....Please help....


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\052410-31247-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff800`02c1d000 PsLoadedModuleList = 0xfffff800`02e55e50
Debug session time: Mon May 24 22:02:07.207 2010 (GMT+1)
System Uptime: 0 days 15:22:05.692
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa8004779060, fffff80000b9c4d8, fffffa800755c7e0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IRP ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IRP ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_IRP ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Probably caused by : ntoskrnl.exe ( nt+68900 )


(2) SChannel - Error State 10

Log Name: System
Source: Schannel
Date: 24/05/2010 23:14:41
Event ID: 36888
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Sundars-PC
Description:
The following fatal alert was generated: 10. The internal error state is 10.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
<EventID>36888</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2010-05-24T22:14:41.184477400Z" />
<EventRecordID>110803</EventRecordID>
<Correlation />
<Execution ProcessID="648" ThreadID="712" />
<Channel>System</Channel>
<Computer>Sundars-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="AlertDesc">10</Data>
<Data Name="ErrorState">10</Data>
</EventData>
</Event>

(3) Kernel-EventTracing

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 24/05/2010 22:08:53
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: LOCAL SERVICE
Computer: Sundars-PC
Description:
Session "" failed to start with the following error: 0xC000000D
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2010-05-24T21:08:53.721800900Z" />
<EventRecordID>56</EventRecordID>
<Correlation />
<Execution ProcessID="472" ThreadID="2664" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Sundars-PC</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="SessionName">
</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225485</Data>
<Data Name="LoggingMode">285212677</Data>
</EventData>
</Event>

(4) NTFS error - the file system on the disk is corrupt and unusuable...please run chkdsk utility on volume win7_64bit © drive....I have a dual boot (XP pro 32 bit and win7 64bit)...I have checked the hard drive for errors; there was no problem. I also ran a memtest which does not show any problem.

Log Name: System
Source: Ntfs
Date: 21/05/2010 21:05:42
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: Sundars-PC
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume Win7_64bit.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-05-21T20:05:42.157844300Z" />
<EventRecordID>109268</EventRecordID>
<Channel>System</Channel>
<Computer>Sundars-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>Win7_64bit</Data>
<Binary>0D000C000200380002000000370004C000000000020100C000000000000000000000000000000
000BB0117006BF2000000006D01</Binary>
</EventData>
</Event>

Could you please advise?

Thanks
SSri

[Advertisements]

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

[Broni]

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

[SSri09]

Thank you for your help.....

The BSOD.txt is pasted here below:

==================================================
Filename : ntoskrnl.exe
Address In Stack : ntoskrnl.exe+da4c3
From Address : fffff800`02c1d000
To Address : fffff800`031f4000
Size : 0x005d7000
Time Stamp : 0x4b88cff0
Time String : 27/02/2010 08:55:28
Product Name : Microsoft® Windows® Operating System
File Description : NT Kernel & System
File Version : 6.1.7600.20655 (win7_ldr.100226-1909)
Company : Microsoft Corporation
Full Path : c:\windows\system32\ntoskrnl.exe
==================================================

==================================================
Filename : hal.dll
Address In Stack :
From Address : fffff800`031f4000
To Address : fffff800`0323d000
Size : 0x00049000
Time Stamp : 0x4a5bdf08
Time String : 14/07/2009 02:27:36
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : kdcom.dll
Address In Stack :
From Address : fffff800`00bcd000
To Address : fffff800`00bd7000
Size : 0x0000a000
Time Stamp : 0x4a5bdfdb
Time String : 14/07/2009 02:31:07
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mcupdate.dll
Address In Stack :
From Address : fffff880`00cd1000
To Address : fffff880`00d15000
Size : 0x00044000
Time Stamp : 0x4a5bdf66
Time String : 14/07/2009 02:29:10
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : PSHED.dll
Address In Stack :
From Address : fffff880`00d15000
To Address : fffff880`00d29000
Size : 0x00014000
Time Stamp : 0x4a5be027
Time String : 14/07/2009 02:32:23
Product Name : Microsoft® Windows® Operating System
File Description : Platform Specific Hardware Error Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : c:\windows\system32\PSHED.dll
==================================================

==================================================
Filename : CLFS.SYS
Address In Stack :
From Address : fffff880`00d29000
To Address : fffff880`00d87000
Size : 0x0005e000
Time Stamp : 0x4a5bc11d
Time String : 14/07/2009 00:19:57
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CI.dll
Address In Stack :
From Address : fffff880`00c00000
To Address : fffff880`00cc0000
Size : 0x000c0000
Time Stamp : 0x4a5be01d
Time String : 14/07/2009 02:32:13
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Wdf01000.sys
Address In Stack :
From Address : fffff880`00e7f000
To Address : fffff880`00f23000
Size : 0x000a4000
Time Stamp : 0x4a5bc19f
Time String : 14/07/2009 00:22:07
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : WDFLDR.SYS
Address In Stack :
From Address : fffff880`00f23000
To Address : fffff880`00f32000
Size : 0x0000f000
Time Stamp : 0x4a5bc11a
Time String : 14/07/2009 00:19:54
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ACPI.sys
Address In Stack :
From Address : fffff880`00f32000
To Address : fffff880`00f89000
Size : 0x00057000
Time Stamp : 0x4a5bc106
Time String : 14/07/2009 00:19:34
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : WMILIB.SYS
Address In Stack :
From Address : fffff880`00f89000
To Address : fffff880`00f92000
Size : 0x00009000
Time Stamp : 0x4a5bc117
Time String : 14/07/2009 00:19:51
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msisadrv.sys
Address In Stack :
From Address : fffff880`00f92000
To Address : fffff880`00f9c000
Size : 0x0000a000
Time Stamp : 0x4a5bc0fe
Time String : 14/07/2009 00:19:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pci.sys
Address In Stack :
From Address : fffff880`00f9c000
To Address : fffff880`00fcf000
Size : 0x00033000
Time Stamp : 0x4a5bc117
Time String : 14/07/2009 00:19:51
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : vdrvroot.sys
Address In Stack :
From Address : fffff880`00fcf000
To Address : fffff880`00fdc000
Size : 0x0000d000
Time Stamp : 0x4a5bcadb
Time String : 14/07/2009 01:01:31
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : partmgr.sys
Address In Stack :
From Address : fffff880`00fdc000
To Address : fffff880`00ff1000
Size : 0x00015000
Time Stamp : 0x4a5bc11e
Time String : 14/07/2009 00:19:58
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : compbatt.sys
Address In Stack :
From Address : fffff880`00ff1000
To Address : fffff880`00ffa000
Size : 0x00009000
Time Stamp : 0x4a5bc3b6
Time String : 14/07/2009 00:31:02
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : BATTC.SYS
Address In Stack :
From Address : fffff880`00e00000
To Address : fffff880`00e0c000
Size : 0x0000c000
Time Stamp : 0x4a5bc3b5
Time String : 14/07/2009 00:31:01
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : volmgr.sys
Address In Stack :
From Address : fffff880`00e0c000
To Address : fffff880`00e21000
Size : 0x00015000
Time Stamp : 0x4a5bc11d
Time String : 14/07/2009 00:19:57
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : volmgrx.sys
Address In Stack :
From Address : fffff880`00e21000
To Address : fffff880`00e7d000
Size : 0x0005c000
Time Stamp : 0x4a5bc141
Time String : 14/07/2009 00:20:33
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pciide.sys
Address In Stack :
From Address : fffff880`00cc0000
To Address : fffff880`00cc7000
Size : 0x00007000
Time Stamp : 0x4a5bc115
Time String : 14/07/2009 00:19:49
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : PCIIDEX.SYS
Address In Stack :
From Address : fffff880`00d87000
To Address : fffff880`00d97000
Size : 0x00010000
Time Stamp : 0x4a5bc114
Time String : 14/07/2009 00:19:48
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mountmgr.sys
Address In Stack :
From Address : fffff880`00d97000
To Address : fffff880`00db1000
Size : 0x0001a000
Time Stamp : 0x4a5bc11a
Time String : 14/07/2009 00:19:54
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : iaStorV.sys
Address In Stack :
From Address : fffff880`010bd000
To Address : fffff880`011db000
Size : 0x0011e000
Time Stamp : 0x49dcd76d
Time String : 08/04/2009 17:57:17
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : atapi.sys
Address In Stack :
From Address : fffff880`011db000
To Address : fffff880`011e4000
Size : 0x00009000
Time Stamp : 0x4a5bc113
Time String : 14/07/2009 00:19:47
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ataport.SYS
Address In Stack :
From Address : fffff880`01000000
To Address : fffff880`0102a000
Size : 0x0002a000
Time Stamp : 0x4a5bc118
Time String : 14/07/2009 00:19:52
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lsi_sas.sys
Address In Stack :
From Address : fffff880`0102a000
To Address : fffff880`01047000
Size : 0x0001d000
Time Stamp : 0x4a11fb47
Time String : 19/05/2009 01:20:23
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : storport.sys
Address In Stack :
From Address : fffff880`01047000
To Address : fffff880`010a9000
Size : 0x00062000
Time Stamp : 0x4a5bcace
Time String : 14/07/2009 01:01:18
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : amdxata.sys
Address In Stack :
From Address : fffff880`010a9000
To Address : fffff880`010b4000
Size : 0x0000b000
Time Stamp : 0x4a12f2eb
Time String : 19/05/2009 18:56:59
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fltmgr.sys
Address In Stack :
From Address : fffff880`00db1000
To Address : fffff880`00dfd000
Size : 0x0004c000
Time Stamp : 0x4a5bc11f
Time String : 14/07/2009 00:19:59
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fileinfo.sys
Address In Stack :
From Address : fffff880`011e4000
To Address : fffff880`011f8000
Size : 0x00014000
Time Stamp : 0x4a5bc481
Time String : 14/07/2009 00:34:25
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Ntfs.sys
Address In Stack :
From Address : fffff880`01202000
To Address : fffff880`013a5000
Size : 0x001a3000
Time Stamp : 0x4a5bc14f
Time String : 14/07/2009 00:20:47
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : msrpc.sys
Address In Stack :
From Address : fffff880`014e8000
To Address : fffff880`01546000
Size : 0x0005e000
Time Stamp : 0x4a5bc17c
Time String : 14/07/2009 00:21:32
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ksecdd.sys
Address In Stack :
From Address : fffff880`01546000
To Address : fffff880`01560000
Size : 0x0001a000
Time Stamp : 0x4a5bc156
Time String : 14/07/2009 00:20:54
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cng.sys
Address In Stack :
From Address : fffff880`01560000
To Address : fffff880`015d3000
Size : 0x00073000
Time Stamp : 0x4a5bc814
Time String : 14/07/2009 00:49:40
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pcw.sys
Address In Stack :
From Address : fffff880`015d3000
To Address : fffff880`015e4000
Size : 0x00011000
Time Stamp : 0x4a5bc0ff
Time String : 14/07/2009 00:19:27
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Fs_Rec.sys
Address In Stack :
From Address : fffff880`015e4000
To Address : fffff880`015ee000
Size : 0x0000a000
Time Stamp : 0x4a5bc111
Time String : 14/07/2009 00:19:45
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndis.sys
Address In Stack :
From Address : fffff880`01621000
To Address : fffff880`01713000
Size : 0x000f2000
Time Stamp : 0x4a5bc184
Time String : 14/07/2009 00:21:40
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : NETIO.SYS
Address In Stack :
From Address : fffff880`01713000
To Address : fffff880`01773000
Size : 0x00060000
Time Stamp : 0x4a5bc18a
Time String : 14/07/2009 00:21:46
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ksecpkg.sys
Address In Stack :
From Address : fffff880`01773000
To Address : fffff880`0179e000
Size : 0x0002b000
Time Stamp : 0x4b21e0b4
Time String : 11/12/2009 07:03:32
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tcpip.sys
Address In Stack :
From Address : fffff880`01803000
To Address : fffff880`01a00000
Size : 0x001fd000
Time Stamp : 0x4a5bc26e
Time String : 14/07/2009 00:25:34
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fwpkclnt.sys
Address In Stack :
From Address : fffff880`0179e000
To Address : fffff880`017e8000
Size : 0x0004a000
Time Stamp : 0x4a5bc164
Time String : 14/07/2009 00:21:08
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : timntr.sys
Address In Stack :
From Address : fffff880`01400000
To Address : fffff880`014a8000
Size : 0x000a8000
Time Stamp : 0x4593f12e
Time String : 28/12/2006 17:30:38
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : vmstorfl.sys
Address In Stack :
From Address : fffff880`017e8000
To Address : fffff880`017f8000
Size : 0x00010000
Time Stamp : 0x4a5bc67e
Time String : 14/07/2009 00:42:54
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : volsnap.sys
Address In Stack :
From Address : fffff880`013a5000
To Address : fffff880`013f1000
Size : 0x0004c000
Time Stamp : 0x4a5bc128
Time String : 14/07/2009 00:20:08
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : spldr.sys
Address In Stack :
From Address : fffff880`017f8000
To Address : fffff880`01800000
Size : 0x00008000
Time Stamp : 0x4a0858bb
Time String : 11/05/2009 17:56:27
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : snapman.sys
Address In Stack :
From Address : fffff880`014a8000
To Address : fffff880`014db000
Size : 0x00033000
Time Stamp : 0x45265d99
Time String : 06/10/2006 14:43:53
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdyboost.sys
Address In Stack :
From Address : fffff880`01aa2000
To Address : fffff880`01adc000
Size : 0x0003a000
Time Stamp : 0x4a5bc48a
Time String : 14/07/2009 00:34:34
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mup.sys
Address In Stack :
From Address : fffff880`01adc000
To Address : fffff880`01aee000
Size : 0x00012000
Time Stamp : 0x4a5bc201
Time String : 14/07/2009 00:23:45
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hwpolicy.sys
Address In Stack :
From Address : fffff880`01aee000
To Address : fffff880`01af7000
Size : 0x00009000
Time Stamp : 0x4a5bc0fa
Time String : 14/07/2009 00:19:22
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fvevol.sys
Address In Stack :
From Address : fffff880`01af7000
To Address : fffff880`01b31000
Size : 0x0003a000
Time Stamp : 0x4abd7db2
Time String : 26/09/2009 03:34:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : disk.sys
Address In Stack :
From Address : fffff880`01b31000
To Address : fffff880`01b47000
Size : 0x00016000
Time Stamp : 0x4a5bc11d
Time String : 14/07/2009 00:19:57
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CLASSPNP.SYS
Address In Stack :
From Address : fffff880`01b47000
To Address : fffff880`01b77000
Size : 0x00030000
Time Stamp : 0x4a5bc11e
Time String : 14/07/2009 00:19:58
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cdrom.sys
Address In Stack :
From Address : fffff880`03d92000
To Address : fffff87f`03dbc000
Size : 0xffffffff0002a000
Time Stamp : 0x4a5bc11a
Time String : 14/07/2009 00:19:54
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : klif.sys
Address In Stack :
From Address : fffff880`03c00000
To Address : fffff880`03c5c000
Size : 0x0005c000
Time Stamp : 0x4ab8a777
Time String : 22/09/2009 11:31:19
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Null.SYS
Address In Stack :
From Address : fffff880`03dbc000
To Address : fffff300`03dc5000
Size : 0xfffffa8000009000
Time Stamp : 0x4a5bc109
Time String : 14/07/2009 00:19:37
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Beep.SYS
Address In Stack :
From Address : fffff880`03dc5000
To Address : fffff300`03dcc000
Size : 0xfffffa8000007000
Time Stamp : 0x4a5bca8d
Time String : 14/07/2009 01:00:13
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : vga.sys
Address In Stack :
From Address : fffff880`03dcc000
To Address : fffff880`03dda000
Size : 0x0000e000
Time Stamp : 0x4a5bc587
Time String : 14/07/2009 00:38:47
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : VIDEOPRT.SYS
Address In Stack :
From Address : fffff880`03dda000
To Address : fffff880`03dff000
Size : 0x00025000
Time Stamp : 0x4a5bc58b
Time String : 14/07/2009 00:38:51
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : watchdog.sys
Address In Stack :
From Address : fffff880`01b85000
To Address : fffff880`01b95000
Size : 0x00010000
Time Stamp : 0x4a5bc53f
Time String : 14/07/2009 00:37:35
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : RDPCDD.sys
Address In Stack :
From Address : fffff880`01b95000
To Address : fffff880`01b9e000
Size : 0x00009000
Time Stamp : 0x4a5bce62
Time String : 14/07/2009 01:16:34
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdpencdd.sys
Address In Stack :
From Address : fffff880`01b9e000
To Address : fffff880`01ba7000
Size : 0x00009000
Time Stamp : 0x4a5bce62
Time String : 14/07/2009 01:16:34
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdprefmp.sys
Address In Stack :
From Address : fffff880`01ba7000
To Address : fffff880`01bb0000
Size : 0x00009000
Time Stamp : 0x4a5bce63
Time String : 14/07/2009 01:16:35
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Msfs.SYS
Address In Stack :
From Address : fffff880`01bb0000
To Address : fffff880`01bbb000
Size : 0x0000b000
Time Stamp : 0x4a5bc113
Time String : 14/07/2009 00:19:47
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Npfs.SYS
Address In Stack :
From Address : fffff880`01bbb000
To Address : fffff880`01bcc000
Size : 0x00011000
Time Stamp : 0x4a5bc114
Time String : 14/07/2009 00:19:48
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tdx.sys
Address In Stack :
From Address : fffff880`01bcc000
To Address : fffff300`01bea000
Size : 0xfffffa800001e000
Time Stamp : 0x4a5bc16b
Time String : 14/07/2009 00:21:15
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : TDI.SYS
Address In Stack :
From Address : fffff880`01bea000
To Address : 644d65f3`01bf7000
Size : 0x644d6d730000d000
Time Stamp : 0x4a5bc16e
Time String : 14/07/2009 00:21:18
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : kl1.sys
Address In Stack :
From Address : fffff880`0429e000
To Address : fffff120`047c7000
Size : 0xfffff8a000529000
Time Stamp : 0x4abcccb1
Time String : 25/09/2009 14:59:13
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : afd.sys
Address In Stack :
From Address : fffff880`04200000
To Address : 41eff881`0428a000
Size : 0x41f000010008a000
Time Stamp : 0x4a5bc184
Time String : 14/07/2009 00:21:40
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : netbt.sys
Address In Stack :
From Address : fffff880`01a00000
To Address : fffff880`01a45000
Size : 0x00045000
Time Stamp : 0x4a5bc178
Time String : 14/07/2009 00:21:28
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : vsdatant.sys
Address In Stack :
From Address : fffff880`04cf3000
To Address : fffff300`04d86000
Size : 0xfffffa8000093000
Time Stamp : 0x4ba31cf1
Time String : 19/03/2010 07:42:57
Product Name : ZoneAlarm Firewalling Driver
File Description : ZoneAlarm Firewalling Driver
File Version : 9.1.503.000
Company : Check Point Software Technologies LTD
Full Path : c:\windows\system32\drivers\vsdatant.sys
==================================================

==================================================
Filename : wfplwf.sys
Address In Stack :
From Address : fffff880`04d86000
To Address : fffff300`04d8f000
Size : 0xfffffa8000009000
Time Stamp : 0x4a5bccb6
Time String : 14/07/2009 01:09:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : pacer.sys
Address In Stack :
From Address : fffff880`04d8f000
To Address : fffff300`04db5000
Size : 0xfffffa8000026000
Time Stamp : 0x4a5bccc5
Time String : 14/07/2009 01:09:41
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : netbios.sys
Address In Stack :
From Address : fffff880`04db5000
To Address : fffff300`04dc4000
Size : 0xfffffa800000f000
Time Stamp : 0x4a5bccb6
Time String : 14/07/2009 01:09:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : serial.sys
Address In Stack :
From Address : fffff880`04dc4000
To Address : fffff880`04de1000
Size : 0x0001d000
Time Stamp : 0x4a5bcaa8
Time String : 14/07/2009 01:00:40
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : wanarp.sys
Address In Stack :
From Address : fffff880`04de1000
To Address : fffff300`04dfc000
Size : 0xfffffa800001b000
Time Stamp : 0x4a5bcced
Time String : 14/07/2009 01:10:21
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : termdd.sys
Address In Stack :
From Address : fffff880`04c00000
To Address : fffff880`04c14000
Size : 0x00014000
Time Stamp : 0x4a5bce64
Time String : 14/07/2009 01:16:36
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdbss.sys
Address In Stack :
From Address : fffff880`04c14000
To Address : fffff300`04c65000
Size : 0xfffffa8000051000
Time Stamp : 0x4a5bc219
Time String : 14/07/2009 00:24:09
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nsiproxy.sys
Address In Stack :
From Address : fffff880`04c65000
To Address : fffff8e8`04c71000
Size : 0x000000680000c000
Time Stamp : 0x4a5bc15e
Time String : 14/07/2009 00:21:02
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mssmbios.sys
Address In Stack :
From Address : fffff880`04c71000
To Address : fffff880`04c7c000
Size : 0x0000b000
Time Stamp : 0x4a5bc3be
Time String : 14/07/2009 00:31:10
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : discache.sys
Address In Stack :
From Address : fffff880`04c7c000
To Address : fffff8bc`04c8b000
Size : 0x0000003c0000f000
Time Stamp : 0x4a5bc52e
Time String : 14/07/2009 00:37:18
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : csc.sys
Address In Stack :
From Address : fffff880`04adf000
To Address : fffff300`04b62000
Size : 0xfffffa8000083000
Time Stamp : 0x4a5bc22a
Time String : 14/07/2009 00:24:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dfsc.sys
Address In Stack :
From Address : fffff880`04b62000
To Address : fffff880`04b80000
Size : 0x0001e000
Time Stamp : 0x4a5bc200
Time String : 14/07/2009 00:23:44
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : blbdrive.sys
Address In Stack :
From Address : fffff880`04b80000
To Address : fffff880`04b91000
Size : 0x00011000
Time Stamp : 0x4a5bc4df
Time String : 14/07/2009 00:35:59
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nvlddmkm.sys
Address In Stack :
From Address : fffff880`058d4000
To Address : fffff880`063a2580
Size : 0x00ace580
Time Stamp : 0x4b5f7281
Time String : 26/01/2010 23:53:53
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : nvBridge.kmd
Address In Stack :
From Address : fffff880`063a3000
To Address : fffff880`063a4180
Size : 0x00001180
Time Stamp : 0x4b5f6d16
Time String : 26/01/2010 23:30:46
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dxgkrnl.sys
Address In Stack :
From Address : fffff880`0506b000
To Address : fffff880`0515f000
Size : 0x000f4000
Time Stamp : 0x4ac5509e
Time String : 02/10/2009 02:00:14
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dxgmms1.sys
Address In Stack :
From Address : fffff880`0515f000
To Address : fffff880`051a5000
Size : 0x00046000
Time Stamp : 0x4a5bc578
Time String : 14/07/2009 00:38:32
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HDAudBus.sys
Address In Stack :
From Address : fffff880`051a5000
To Address : fffff880`051c9000
Size : 0x00024000
Time Stamp : 0x4a5bcbf5
Time String : 14/07/2009 01:06:13
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : b57nd60a.sys
Address In Stack :
From Address : fffff880`05000000
To Address : fffff880`05048000
Size : 0x00048000
Time Stamp : 0x49f4422f
Time String : 26/04/2009 12:14:55
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbuhci.sys
Address In Stack :
From Address : fffff880`05048000
To Address : 789398bb`05055000
Size : 0x7893a03b0000d000
Time Stamp : 0x4a5bcc03
Time String : 14/07/2009 01:06:27
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : USBPORT.SYS
Address In Stack :
From Address : fffff880`063a5000
To Address : fffff880`063fb000
Size : 0x00056000
Time Stamp : 0x4a5bcc07
Time String : 14/07/2009 01:06:31
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbehci.sys
Address In Stack :
From Address : fffff880`05055000
To Address : fffff880`05066000
Size : 0x00011000
Time Stamp : 0x4a5bcc06
Time String : 14/07/2009 01:06:30
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : 1394ohci.sys
Address In Stack :
From Address : fffff880`05800000
To Address : fffff880`0583e000
Size : 0x0003e000
Time Stamp : 0x4a5bcc30
Time String : 14/07/2009 01:07:12
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : i8042prt.sys
Address In Stack :
From Address : fffff880`051c9000
To Address : fffff300`051e7000
Size : 0xfffffa800001e000
Time Stamp : 0x4a5bc11d
Time String : 14/07/2009 00:19:57
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mouclass.sys
Address In Stack :
From Address : fffff880`051e7000
To Address : 00012c85`051f6000
Size : 0x000134050000f000
Time Stamp : 0x4a5bc116
Time String : 14/07/2009 00:19:50
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : kbdclass.sys
Address In Stack :
From Address : fffff880`0583e000
To Address : fffff880`0584d000
Size : 0x0000f000
Time Stamp : 0x4a5bc116
Time String : 14/07/2009 00:19:50
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : serenum.sys
Address In Stack :
From Address : fffff880`0584d000
To Address : fffff880`05859000
Size : 0x0000c000
Time Stamp : 0x4a5bcaa1
Time String : 14/07/2009 01:00:33
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : fdc.sys
Address In Stack :
From Address : fffff880`05859000
To Address : fffff880`05866000
Size : 0x0000d000
Time Stamp : 0x4a5bcab6
Time String : 14/07/2009 01:00:54
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : GEARAspiWDM.sys
Address In Stack :
From Address : fffff880`05866000
To Address : fffff880`05873000
Size : 0x0000d000
Time Stamp : 0x4a1151c0
Time String : 18/05/2009 13:17:04
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : intelppm.sys
Address In Stack :
From Address : fffff880`05873000
To Address : 206459d6`05889000
Size : 0x2064615600016000
Time Stamp : 0x4a5bc0fd
Time String : 14/07/2009 00:19:25
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : wmiacpi.sys
Address In Stack :
From Address : fffff880`051f6000
To Address : 0d73f880`051ff000
Size : 0x0d74000000009000
Time Stamp : 0x4a5bc3b6
Time String : 14/07/2009 00:31:02
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : CompositeBus.sys
Address In Stack :
From Address : fffff880`05889000
To Address : fffff880`05899000
Size : 0x00010000
Time Stamp : 0x4a5bcaa1
Time String : 14/07/2009 01:00:33
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lmimirr.sys
Address In Stack :
From Address : fffff880`05899000
To Address : fffff880`058a0000
Size : 0x00007000
Time Stamp : 0x461c108d
Time String : 10/04/2007 23:32:45
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : AgileVpn.sys
Address In Stack :
From Address : fffff880`058a0000
To Address : fffff080`058b6000
Size : 0xfffff80000016000
Time Stamp : 0x4a5bccf0
Time String : 14/07/2009 01:10:24
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rasl2tp.sys
Address In Stack :
From Address : fffff880`04b91000
To Address : fffff300`04bb5000
Size : 0xfffffa8000024000
Time Stamp : 0x4a5bcce3
Time String : 14/07/2009 01:10:11
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndistapi.sys
Address In Stack :
From Address : fffff880`058b6000
To Address : fffff880`058c2000
Size : 0x0000c000
Time Stamp : 0x4a5bccd8
Time String : 14/07/2009 01:10:00
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ndiswan.sys
Address In Stack :
From Address : fffff880`04bb5000
To Address : 66e9c9c9`04be4000
Size : 0x66e9d1490002f000
Time Stamp : 0x4a5bcce3
Time String : 14/07/2009 01:10:11
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : raspppoe.sys
Address In Stack :
From Address : fffff880`04be4000
To Address : fffff300`04bff000
Size : 0xfffffa800001b000
Time Stamp : 0x4a5bcce9
Time String : 14/07/2009 01:10:17
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : raspptp.sys
Address In Stack :
From Address : fffff880`04a00000
To Address : 0013f995`04a21000
Size : 0x0014011500021000
Time Stamp : 0x4a5bccea
Time String : 14/07/2009 01:10:18
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rassstp.sys
Address In Stack :
From Address : fffff880`04a21000
To Address : fffff300`04a3b000
Size : 0xfffffa800001a000
Time Stamp : 0x4a5bccf1
Time String : 14/07/2009 01:10:25
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rdpbus.sys
Address In Stack :
From Address : fffff880`058c2000
To Address : 00080f81`058cd000
Size : 0x000817010000b000
Time Stamp : 0x4a5bceaa
Time String : 14/07/2009 01:17:46
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : swenum.sys
Address In Stack :
From Address : fffff880`05066000
To Address : fffff880`05067480
Size : 0x00001480
Time Stamp : 0x4a5bca92
Time String : 14/07/2009 01:00:18
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ks.sys
Address In Stack :
From Address : fffff880`04a3b000
To Address : fffff880`04a7e000
Size : 0x00043000
Time Stamp : 0x4a5bca9f
Time String : 14/07/2009 01:00:31
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : umbus.sys
Address In Stack :
From Address : fffff880`04a7e000
To Address : fffff880`04a90000
Size : 0x00012000
Time Stamp : 0x4a5bcc20
Time String : 14/07/2009 01:06:56
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : usbhub.sys
Address In Stack :
From Address : fffff880`04c8b000
To Address : fffff300`04ce5000
Size : 0xfffffa800005a000
Time Stamp : 0x4a5bcc2d
Time String : 14/07/2009 01:07:09
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : NDProxy.SYS
Address In Stack :
From Address : fffff880`04a90000
To Address : 0000810d`04aa5000
Size : 0x0000888d00015000
Time Stamp : 0x4a5bccdd
Time String : 14/07/2009 01:10:05
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : RTKVHD64.sys
Address In Stack :
From Address : fffff880`09855000
To Address : fffff880`099d7b80
Size : 0x00182b80
Time Stamp : 0x49633b08
Time String : 06/01/2009 12:05:44
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : portcls.sys
Address In Stack :
From Address : fffff880`09800000
To Address : 66495dd3`0983d000
Size : 0x664965530003d000
Time Stamp : 0x4a5bcc03
Time String : 14/07/2009 01:06:27
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : drmk.sys
Address In Stack :
From Address : fffff880`099d8000
To Address : fffff300`099fa000
Size : 0xfffffa8000022000
Time Stamp : 0x4a5bd8e5
Time String : 14/07/2009 02:01:25
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ksthunk.sys
Address In Stack :
From Address : fffff880`099fa000
To Address : 7ffff87f`099ff200
Size : 0x7fffffff00005200
Time Stamp : 0x4a5bca93
Time String : 14/07/2009 01:00:19
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : hidusb.sys
Address In Stack :
From Address : fffff880`0983d000
To Address : fffff300`0984b000
Size : 0xfffffa800000e000
Time Stamp : 0x4a5bcbfe
Time String : 14/07/2009 01:06:22
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HIDCLASS.SYS
Address In Stack :
From Address : fffff880`04aa5000
To Address : fffff880`04abe000
Size : 0x00019000
Time Stamp : 0x4a5bcbfd
Time String : 14/07/2009 01:06:21
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HIDPARSE.SYS
Address In Stack :
From Address : fffff880`0984b000
To Address : fffff880`09853080
Size : 0x00008080
Time Stamp : 0x4a5bcbf9
Time String : 14/07/2009 01:06:17
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : USBD.SYS
Address In Stack :
From Address : fffff880`05068000
To Address : fffff300`05069f00
Size : 0xfffffa8000001f00
Time Stamp : 0x4a5bcbff
Time String : 14/07/2009 01:06:23
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mouhid.sys
Address In Stack :
From Address : fffff880`04abe000
To Address : fffff880`04acb000
Size : 0x0000d000
Time Stamp : 0x4a5bca94
Time String : 14/07/2009 01:00:20
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : crashdmp.sys
Address In Stack :
From Address : fffff880`04acb000
To Address : fffff880`04ad9000
Size : 0x0000e000
Time Stamp : 0x4a5bcabd
Time String : 14/07/2009 01:01:01
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dump_iaStorV.sys
Address In Stack :
From Address : fffff880`03c5c000
To Address : fffff880`03d7a000
Size : 0x0011e000
Time Stamp : 0x49dcd76d
Time String : 08/04/2009 17:57:17
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dump_dumpfve.sys
Address In Stack :
From Address : fffff880`0428a000
To Address : fffff880`0429d000
Size : 0x00013000
Time Stamp : 0x4a5bc18f
Time String : 14/07/2009 00:21:51
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : win32k.sys
Address In Stack :
From Address : fffff960`00040000
To Address : fffff960`0034f000
Size : 0x0030f000
Time Stamp : 0x4a5bc5e0
Time String : 14/07/2009 00:40:16
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : Dxapi.sys
Address In Stack :
From Address : fffff880`04ce5000
To Address : fffff300`04cf1000
Size : 0xfffffa800000c000
Time Stamp : 0x4a5bc574
Time String : 14/07/2009 00:38:28
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HidBatt.sys
Address In Stack :
From Address : fffff880`047c7000
To Address : fffff300`047d2000
Size : 0xfffffa800000b000
Time Stamp : 0x4a5bc3ba
Time String : 14/07/2009 00:31:06
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : monitor.sys
Address In Stack :
From Address : fffff880`047d2000
To Address : fffff300`047e0000
Size : 0xfffffa800000e000
Time Stamp : 0x4a5bc58c
Time String : 14/07/2009 00:38:52
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : TSDDD.dll
Address In Stack :
From Address : fffff960`005f0000
To Address : fffff3e0`005fa000
Size : 0xfffffa800000a000
Time Stamp : 0x4a5bce62
Time String : 14/07/2009 01:16:34
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : cdd.dll
Address In Stack :
From Address : fffff960`007a0000
To Address : fffff960`007c7000
Size : 0x00027000
Time Stamp : 0x4a5bde94
Time String : 14/07/2009 02:25:40
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : luafv.sys
Address In Stack :
From Address : fffff880`01a45000
To Address : fffff300`01a68000
Size : 0xfffffa8000023000
Time Stamp : 0x4a5bc295
Time String : 14/07/2009 00:26:13
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tifsfilt.sys
Address In Stack :
From Address : fffff880`047e0000
To Address : fffff880`047f5000
Size : 0x00015000
Time Stamp : 0x45cc872b
Time String : 09/02/2007 15:37:31
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : WudfPf.sys
Address In Stack :
From Address : fffff880`01a68000
To Address : fffff880`01a89000
Size : 0x00021000
Time Stamp : 0x4a5bcbd1
Time String : 14/07/2009 01:05:37
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : lltdio.sys
Address In Stack :
From Address : fffff880`03d7a000
To Address : fffff880`03d8f000
Size : 0x00015000
Time Stamp : 0x4a5bcc92
Time String : 14/07/2009 01:08:50
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : rspndr.sys
Address In Stack :
From Address : fffff880`01a89000
To Address : 000011e4`01aa1000
Size : 0x0000196400018000
Time Stamp : 0x4a5bcc92
Time String : 14/07/2009 01:08:50
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : ISWKL.sys
Address In Stack :
From Address : fffff880`047f5000
To Address : fffff300`04800000
Size : 0xfffffa800000b000
Time Stamp : 0x4b9f3eb6
Time String : 16/03/2010 09:17:58
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : HTTP.sys
Address In Stack :
From Address : fffff880`06474000
To Address : 0043f8c5`0653c000
Size : 0x00440045000c8000
Time Stamp : 0x4a5bc1a8
Time String : 14/07/2009 00:22:16
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : bowser.sys
Address In Stack :
From Address : fffff880`0653c000
To Address : fffff880`0655a000
Size : 0x0001e000
Time Stamp : 0x4a5bc206
Time String : 14/07/2009 00:23:50
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxsmb.sys
Address In Stack :
From Address : fffff880`0655a000
To Address : fffff880`06587000
Size : 0x0002d000
Time Stamp : 0x4b88cf33
Time String : 27/02/2010 08:52:19
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxsmb10.sys
Address In Stack :
From Address : fffff880`06587000
To Address : 696c5af5`065d5000
Size : 0x696c62750004e000
Time Stamp : 0x4b88cf3c
Time String : 27/02/2010 08:52:28
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : mrxsmb20.sys
Address In Stack :
From Address : fffff880`065d5000
To Address : fffff880`065f8000
Size : 0x00023000
Time Stamp : 0x4b88cf3a
Time String : 27/02/2010 08:52:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : RaInfo.sys
Address In Stack :
From Address : fffff880`065f8000
To Address : 0040f8cd`065ff000
Size : 0x0041004d00007000
Time Stamp : 0x477e818a
Time String : 04/01/2008 19:57:14
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : LMIRfsDriver.sys
Address In Stack :
From Address : fffff880`06400000
To Address : 0053f8c6`06413000
Size : 0x0054004600013000
Time Stamp : 0x487b7e50
Time String : 14/07/2008 17:26:56
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : peauth.sys
Address In Stack :
From Address : fffff880`084be000
To Address : 67704bce`08564000
Size : 0x6770534e000a6000
Time Stamp : 0x4a5bd8df
Time String : 14/07/2009 02:01:19
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : secdrv.SYS
Address In Stack :
From Address : fffff880`08564000
To Address : fffff880`0856f000
Size : 0x0000b000
Time Stamp : 0x4508052e
Time String : 13/09/2006 14:18:38
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : srvnet.sys
Address In Stack :
From Address : fffff880`0856f000
To Address : fffff880`0859c000
Size : 0x0002d000
Time Stamp : 0x4b1e0f1a
Time String : 08/12/2009 09:32:26
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : tcpipreg.sys
Address In Stack :
From Address : fffff880`0859c000
To Address : 5b20bd03`085ae000
Size : 0x5b20c48300012000
Time Stamp : 0x4a5bcccd
Time String : 14/07/2009 01:09:49
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : asyncmac.sys
Address In Stack :
From Address : fffff880`08471000
To Address : fffff880`0847c000
Size : 0x0000b000
Time Stamp : 0x4a5bcce5
Time String : 14/07/2009 01:10:13
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : srv2.sys
Address In Stack :
From Address : fffff880`08829000
To Address : fffff880`08892000
Size : 0x00069000
Time Stamp : 0x4a5bc24e
Time String : 14/07/2009 00:25:02
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : srv.sys
Address In Stack :
From Address : fffff880`08892000
To Address : 70655bf8`0892a000
Size : 0x7065637800098000
Time Stamp : 0x4b1e0f37
Time String : 08/12/2009 09:32:55
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : icsak.sys
Address In Stack :
From Address : fffff880`0892a000
To Address : fffff300`08939000
Size : 0xfffffa800000f000
Time Stamp : 0x4b9f3ebb
Time String : 16/03/2010 09:18:03
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

[Broni]

I'm not sure why, but I don't see any recent BSOD reports in BlueScreenView log. The latest are from March 2010.

Make sure, your settings are correct...

1. Click Start, point to Settings, and then click Control Panel (Start>Control Panel in Vista).
2. Double-click System.
3. Click (Advanced system settings link in Vista, then --->)the Advanced tab, and then click Settings under Startup and Recovery.
4. Make sure, there is a checkmark in Write an event to the system log.
5. In the Write debugging information list, click Small memory dump (64k) (128K in Windows 7).

Edited by Broni, 25 May 2010 - 03:08 PM.

[SSri09]

New Member
*
Posts: 9
OS: Win 7 64 bit



Thanks Broni....

I find that bizzare! I checked the settings as advised by you. I can confirm they are correct. I checked the \windows\minidump directory. It did generate a minidump file (052410-31247-01.dmp) with a time stamp 24/05/2010 at 22:08 local time.

The bluescreen view application does capture the file and shows the crash time as above. I ran the dump file again and attaching it as a text file. The pdf file is a screenshot of the BS view showing the dump file. BTW, there are no other dump files in that directory as I routinely clear them off.

I look forward to your reply. The system was running into a similar issue last night at shut down. I decided to physically power off the system than waiting for it to crash. I know this is not safe but can't be asked!

Thank you
SSri

Attached Files

•  bsod.txt   1.72KB   111 downloads
•  bsod.pdf   174.8KB   148 downloads

Edited by SSri09, 26 May 2010 - 01:15 AM.

[SSri09]

Thanks Broni....

I find that bizzare! I checked the settings as advised by you. I can confirm they are correct. I checked the \windows\minidump directory. It did generate a minidump file (052410-31247-01.dmp) with a time stamp 24/05/2010 at 22:08 local time.

The bluescreen view application does capture the file and shows the crash time as above. I ran the dump file again and attaching it as a text file. The pdf file is a screenshot of the BS view showing the dump file. BTW, there are no other dump files in that directory as I routinely clear them off.

I look forward to your reply. The system was running into a similar issue last night at shut down. I decided to physically power off the system than waiting for it to crash. I know this is not safe but can't be asked!

Thank you
SSri

[Broni]

Now the report looks fine, however we have only 1 dump file, which is not enough to issue any diagnose.
Don't delete those .dmp files and when you have 3-4 more dump files, run BSV again and post its log.

[SSri09]

Thank you!

I just have one dump file at this juncture. I will run CSV to post the logs as and when I have 3-4 dmp files.

BTW, could you please look into the errors (2), (3) and (4) reported in the original post and advise me?

Many thanks
SSri

[Broni]

That original report is very inconclusive, so we better wait wait for a few new BSODs.

[SSri09]

Sure. Thank you.

[Broni]

I'll be around

[SSri09]

Many thanks. Really appreciate it.....

[SSri09]

Hi there,

Another one this morning. Strangely, when this dump was written, the other file got deleted automatically. I could not find the deleted file in the Recyle Bin.

The new dump file (bsod1.txt) is attached along with the previous dump (dsod.txt).

Thanks....SSri

Attached Files

•  bsod1.txt   1.73KB   175 downloads
•  bsod.txt   1.72KB   166 downloads

[Broni]

Yeah, both errors indicates ntoskrnl.exe file being at fault.
Unfortunately, it could be anything.
The other problem is, it doesn't happen often enough to get more logs.
Did it happen at the shutdown on both occasions?
Do you close all programs before shutting computer down, or you just shut it down with whatever is still open?

[SSri09]

After posting this report, the system was taking too long to shut. I decided to poweroff and boot again. The bsod (bsod1.txt) happened when (1) amibroker chart application (www.amibroker.com) was loading a realtime data plug-in to log-on to the real-time data server (www.dtniqfeed.com) and immeidately after (2) when I launched MS office 2007 word without waiting for amibroker to finish the logon process.

Today, a few minutes ago the BSOD happened; the following applications were running for well over 2 hours.

(i) Amibroker with real-time data streaming from DTN:IQFeed
(ii) Outlook 2007
(iii) MS Word 2007
(iv) a video in Youtube

In the background, (a) Zonealarm extreme security, (b) IQ Connection Manager for Amibroker, © Zonealarm IDrive online backup run all the time. The background applications (a) and © load at the startup itself. the application (b) launch auto when (i) is launched.

I am attaching the new bsod2.txt...It also points ntoskernel.exe

I use HP xw8600 x5450 quadcore xeon processor, 4 mb ram; 4 display. The system is hooked with an APS Back-UPS RS1500. All these uses just a third of the UPS load. The UPS is connected to the power supply all the time.

I had the ntoskernel bsod issue a few months ago. I talked to Microsoft. They gave me a 64-bit hotfix (windows KB79444-X64) in January. After this, the BSOD problem disappeared. I was using the applications (i) to (iv) and background applications (a) to © even before the installation of the hotfix. I have not installed any fresh applications since then.

I close all the applications I open. Background applications (a) and © close auto at shut down....

Thank you.

Attached Files

•  bsod2.txt   1.73KB   142 downloads

Edited by SSri09, 07 June 2010 - 02:15 AM.