Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Blue screen of death


  • Please log in to reply

#1
gavinwkelly

gavinwkelly

    Member

  • Member
  • PipPip
  • 25 posts
Hi,

My computer keeps restarting itself and refusing to boot. I got it working but I'm not confident itll stay on

The blue screen it gives me is as follows

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 2057

Additional information about the problem:
BCCode: c000021a
BCP1: 8B901670
BCP2: 00000000
BCP3: C0000001
BCP4: 00100450
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\Mini052510-01.dmp
C:\Users\gavin\AppData\Local\Temp\WER-37424-0.sysdata.xml
C:\Users\gavin\AppData\Local\Temp\WERE58D.tmp.version.txt


Can anybody tell me what this means, what is likely to be causing the problem?I suspect it may be overheating video card, would that sound right?

Thanks alot
  • 0

Advertisements


#2
Bing7

Bing7

    Member

  • Member
  • PipPip
  • 65 posts
  • MVP

Hi,

My computer keeps restarting itself and refusing to boot. I got it working but I'm not confident itll stay on

The blue screen it gives me is as follows



Can anybody tell me what this means, what is likely to be causing the problem?I suspect it may be overheating video card, would that sound right?

Thanks alot

hi ,download blue screen viewer ,link below
http://www.nirsoft.n...nview_setup.exe
install it and run it ,it will read the dump file on you your computer ,copy the results in you next post

Edited by Bing7, 25 May 2010 - 06:02 PM.

  • 0

#3
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
It says its caused by ntkrnlpa.exe - NT Kernel ^ System

There are a ton more results listed, but when I paste them they format really ugly, not sure how to paste it
  • 0

#4
Broni

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.
  • 0

#5
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
==================================================
Filename : ntkrnlpa.exe
Address In Stack : ntkrnlpa.exe+48f49
From Address : 0x8204a000
To Address : 0x82403000
Size : 0x003b9000
Time Stamp : 0x4b7d1e08
Time String : 18/02/2010 08:01:28
Product Name : Microsoft® Windows® Operating System
File Description : NT Kernel & System
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\ntkrnlpa.exe
==================================================

==================================================
Filename : hal.dll
Address In Stack :
From Address : 0x82017000
To Address : 0x8204a000
Size : 0x00033000
Time Stamp : 0x49e018d9
Time String : 11/04/2009 01:13:13
Product Name : Microsoft® Windows® Operating System
File Description : Hardware Abstraction Layer DLL
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\hal.dll
==================================================

==================================================
Filename : kdcom.dll
Address In Stack :
From Address : 0x80401000
To Address : 0x80408000
Size : 0x00007000
Time Stamp : 0x49e037d9
Time String : 11/04/2009 03:25:29
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Debugger HW Extension DLL
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\kdcom.dll
==================================================

==================================================
Filename : mcupdate_GenuineIntel.dll
Address In Stack :
From Address : 0x80408000
To Address : 0x80478000
Size : 0x00070000
Time Stamp : 0x49e03757
Time String : 11/04/2009 03:23:19
Product Name : Microsoft® Windows® Operating System
File Description : Intel Microcode Update Library
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\mcupdate_GenuineIntel.dll
==================================================

==================================================
Filename : PSHED.dll
Address In Stack :
From Address : 0x80478000
To Address : 0x80489000
Size : 0x00011000
Time Stamp : 0x49e037dc
Time String : 11/04/2009 03:25:32
Product Name : Microsoft® Windows® Operating System
File Description : Platform Specific Hardware Error Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\PSHED.dll
==================================================

==================================================
Filename : BOOTVID.dll
Address In Stack :
From Address : 0x80489000
To Address : 0x80491000
Size : 0x00008000
Time Stamp : 0x4791a653
Time String : 19/01/2008 04:27:15
Product Name : Microsoft® Windows® Operating System
File Description : VGA Boot Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\BOOTVID.dll
==================================================

==================================================
Filename : CLFS.SYS
Address In Stack :
From Address : 0x80491000
To Address : 0x804d2000
Size : 0x00041000
Time Stamp : 0x49e018ff
Time String : 11/04/2009 01:13:51
Product Name : Microsoft® Windows® Operating System
File Description : Common Log File System Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\CLFS.SYS
==================================================

==================================================
Filename : CI.dll
Address In Stack :
From Address : 0x804d2000
To Address : 0x805b2000
Size : 0x000e0000
Time Stamp : 0x49e037d2
Time String : 11/04/2009 03:25:22
Product Name : Microsoft® Windows® Operating System
File Description : Code Integrity Module
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\CI.dll
==================================================

==================================================
Filename : Wdf01000.sys
Address In Stack :
From Address : 0x8060e000
To Address : 0x8068a000
Size : 0x0007c000
Time Stamp : 0x47919015
Time String : 19/01/2008 02:52:21
Product Name : Microsoft® Windows® Operating System
File Description : WDF Dynamic
File Version : 1.7.6001.0 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Wdf01000.sys
==================================================

==================================================
Filename : WDFLDR.SYS
Address In Stack :
From Address : 0x8068a000
To Address : 0x80697000
Size : 0x0000d000
Time Stamp : 0x47919013
Time String : 19/01/2008 02:52:19
Product Name : Microsoft® Windows® Operating System
File Description : WDFLDR
File Version : 1.7.6001.0 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\WDFLDR.SYS
==================================================

==================================================
Filename : sptd.sys
Address In Stack :
From Address : 0x80697000
To Address : 0x8078a000
Size : 0x000f3000
Time Stamp : 0x4ad245ea
Time String : 11/10/2009 17:54:02
Product Name :
File Description :
File Version :
Company :
Full Path : C:\Windows\system32\drivers\sptd.sys
==================================================

==================================================
Filename : WMILIB.SYS
Address In Stack :
From Address : 0x8078a000
To Address : 0x80793000
Size : 0x00009000
Time Stamp : 0x47919044
Time String : 19/01/2008 02:53:08
Product Name : Microsoft® Windows® Operating System
File Description : WMILIB WMI support library Dll
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\WMILIB.SYS
==================================================

==================================================
Filename : SCSIPORT.SYS
Address In Stack :
From Address : 0x80793000
To Address : 0x807b9000
Size : 0x00026000
Time Stamp : 0x47918f78
Time String : 19/01/2008 02:49:44
Product Name : Microsoft® Windows® Operating System
File Description : SCSI Port Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\SCSIPORT.SYS
==================================================

==================================================
Filename : acpi.sys
Address In Stack :
From Address : 0x807b9000
To Address : 0x807ff000
Size : 0x00046000
Time Stamp : 0x49e01a37
Time String : 11/04/2009 01:19:03
Product Name : Microsoft® Windows® Operating System
File Description : ACPI Driver for NT
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\acpi.sys
==================================================

==================================================
Filename : msisadrv.sys
Address In Stack :
From Address : 0x80600000
To Address : 0x80608000
Size : 0x00008000
Time Stamp : 0x47918b83
Time String : 19/01/2008 02:32:51
Product Name : Microsoft® Windows® Operating System
File Description : ISA Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\msisadrv.sys
==================================================

==================================================
Filename : pci.sys
Address In Stack :
From Address : 0x805b2000
To Address : 0x805d9000
Size : 0x00027000
Time Stamp : 0x49e01a44
Time String : 11/04/2009 01:19:16
Product Name : Microsoft® Windows® Operating System
File Description : NT Plug and Play PCI Enumerator
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\pci.sys
==================================================

==================================================
Filename : partmgr.sys
Address In Stack :
From Address : 0x805d9000
To Address : 0x805e8000
Size : 0x0000f000
Time Stamp : 0x49e01ef7
Time String : 11/04/2009 01:39:19
Product Name : Microsoft® Windows® Operating System
File Description : Partition Management Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\partmgr.sys
==================================================

==================================================
Filename : volmgr.sys
Address In Stack :
From Address : 0x805e8000
To Address : 0x805f7000
Size : 0x0000f000
Time Stamp : 0x47918f7f
Time String : 19/01/2008 02:49:51
Product Name : Microsoft® Windows® Operating System
File Description : Volume Manager Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\volmgr.sys
==================================================

==================================================
Filename : volmgrx.sys
Address In Stack :
From Address : 0x8260c000
To Address : 0x82656000
Size : 0x0004a000
Time Stamp : 0x49e01efd
Time String : 11/04/2009 01:39:25
Product Name : Microsoft® Windows® Operating System
File Description : Volume Manager Extension Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\volmgrx.sys
==================================================

==================================================
Filename : mountmgr.sys
Address In Stack :
From Address : 0x82656000
To Address : 0x82666000
Size : 0x00010000
Time Stamp : 0x47918f59
Time String : 19/01/2008 02:49:13
Product Name : Microsoft® Windows® Operating System
File Description : Mount Point Manager
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mountmgr.sys
==================================================

==================================================
Filename : iastorv.sys
Address In Stack :
From Address : 0x82666000
To Address : 0x82707000
Size : 0x000a1000
Time Stamp : 0x46fd4537
Time String : 28/09/2007 15:17:27
Product Name : Intel Matrix Storage Manager driver (base)
File Description : Intel Matrix Storage Manager driver (base)
File Version : 6.2.0.1019
Company : Intel Corporation
Full Path : C:\Windows\system32\drivers\iastorv.sys
==================================================

==================================================
Filename : fltmgr.sys
Address In Stack :
From Address : 0x82707000
To Address : 0x82739000
Size : 0x00032000
Time Stamp : 0x49e01907
Time String : 11/04/2009 01:13:59
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Filesystem Filter Manager
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fltmgr.sys
==================================================

==================================================
Filename : fileinfo.sys
Address In Stack :
From Address : 0x82739000
To Address : 0x82749000
Size : 0x00010000
Time Stamp : 0x47918be3
Time String : 19/01/2008 02:34:27
Product Name : Microsoft® Windows® Operating System
File Description : FileInfo Filter Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fileinfo.sys
==================================================

==================================================
Filename : ksecdd.sys
Address In Stack :
From Address : 0x82749000
To Address : 0x827ba000
Size : 0x00071000
Time Stamp : 0x4a364335
Time String : 15/06/2009 09:48:53
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Security Support Provider Interface
File Version : 6.0.6002.18051 (vistasp2_gdr.090615-0258)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ksecdd.sys
==================================================

==================================================
Filename : ndis.sys
Address In Stack :
From Address : 0x8ac0a000
To Address : 0x8ad15000
Size : 0x0010b000
Time Stamp : 0x49e02080
Time String : 11/04/2009 01:45:52
Product Name : Microsoft® Windows® Operating System
File Description : NDIS 6.0 wrapper driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndis.sys
==================================================

==================================================
Filename : msrpc.sys
Address In Stack :
From Address : 0x8ad15000
To Address : 0x8ad40000
Size : 0x0002b000
Time Stamp : 0x49e01e8c
Time String : 11/04/2009 01:37:32
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Remote Procedure Call Provider
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\msrpc.sys
==================================================

==================================================
Filename : NETIO.SYS
Address In Stack :
From Address : 0x8ad40000
To Address : 0x8ad7b000
Size : 0x0003b000
Time Stamp : 0x49e0209d
Time String : 11/04/2009 01:46:21
Product Name : Microsoft® Windows® Operating System
File Description : Network I/O Subsystem
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\NETIO.SYS
==================================================

==================================================
Filename : tcpip.sys
Address In Stack :
From Address : 0x8ae09000
To Address : 0x8aef3000
Size : 0x000ea000
Time Stamp : 0x4b7d2476
Time String : 18/02/2010 08:28:54
Product Name : Microsoft® Windows® Operating System
File Description : TCP/IP Driver
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\tcpip.sys
==================================================

==================================================
Filename : fwpkclnt.sys
Address In Stack :
From Address : 0x8aef3000
To Address : 0x8af0e000
Size : 0x0001b000
Time Stamp : 0x49e02076
Time String : 11/04/2009 01:45:42
Product Name : Microsoft® Windows® Operating System
File Description : FWP/IPsec Kernel-Mode API
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fwpkclnt.sys
==================================================

==================================================
Filename : Ntfs.sys
Address In Stack :
From Address : 0x8b002000
To Address : 0x8b112000
Size : 0x00110000
Time Stamp : 0x49e0192a
Time String : 11/04/2009 01:14:34
Product Name : Microsoft® Windows® Operating System
File Description : NT File System Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Ntfs.sys
==================================================

==================================================
Filename : volsnap.sys
Address In Stack :
From Address : 0x8b112000
To Address : 0x8b14b000
Size : 0x00039000
Time Stamp : 0x49e01f09
Time String : 11/04/2009 01:39:37
Product Name : Microsoft® Windows® Operating System
File Description : Volume Shadow Copy Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\volsnap.sys
==================================================

==================================================
Filename : spldr.sys
Address In Stack :
From Address : 0x8b14b000
To Address : 0x8b153000
Size : 0x00008000
Time Stamp : 0x467b17dd
Time String : 21/06/2007 21:29:17
Product Name : Microsoft® Windows® Operating System
File Description : loader for security processor
File Version : 6.0.6001.16606 (lh_security(sepbld-s).070621-1657)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\spldr.sys
==================================================

==================================================
Filename : mup.sys
Address In Stack :
From Address : 0x8b153000
To Address : 0x8b162000
Size : 0x0000f000
Time Stamp : 0x49e01914
Time String : 11/04/2009 01:14:12
Product Name : Microsoft® Windows® Operating System
File Description : Multiple UNC Provider driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mup.sys
==================================================

==================================================
Filename : ecache.sys
Address In Stack :
From Address : 0x8b162000
To Address : 0x8b189000
Size : 0x00027000
Time Stamp : 0x49e01f2c
Time String : 11/04/2009 01:40:12
Product Name : Microsoft® Windows® Operating System
File Description : Special Memory Device Cache
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ecache.sys
==================================================

==================================================
Filename : disk.sys
Address In Stack :
From Address : 0x8b189000
To Address : 0x8b19a000
Size : 0x00011000
Time Stamp : 0x49e01ef2
Time String : 11/04/2009 01:39:14
Product Name : Microsoft® Windows® Operating System
File Description : PnP Disk Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\disk.sys
==================================================

==================================================
Filename : CLASSPNP.SYS
Address In Stack :
From Address : 0x8b19a000
To Address : 0x8b1bb000
Size : 0x00021000
Time Stamp : 0x49e01ee9
Time String : 11/04/2009 01:39:05
Product Name : Microsoft® Windows® Operating System
File Description : SCSI Class System Dll
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\CLASSPNP.SYS
==================================================

==================================================
Filename : crcdisk.sys
Address In Stack :
From Address : 0x8b1bb000
To Address : 0x8b1c4000
Size : 0x00009000
Time Stamp : 0x47918fa5
Time String : 19/01/2008 02:50:29
Product Name : Microsoft® Windows® Operating System
File Description : Disk Block Verification Filter Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\crcdisk.sys
==================================================

==================================================
Filename : tunmp.sys
Address In Stack :
From Address : 0x8b1d1000
To Address : 0x8b1da000
Size : 0x00009000
Time Stamp : 0x479190dc
Time String : 19/01/2008 02:55:40
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Tunnel Interface Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\tunmp.sys
==================================================

==================================================
Filename : intelppm.sys
Address In Stack :
From Address : 0x8b1da000
To Address : 0x8b1e9000
Size : 0x0000f000
Time Stamp : 0x47918a38
Time String : 19/01/2008 02:27:20
Product Name : Microsoft® Windows® Operating System
File Description : Processor Device Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\intelppm.sys
==================================================

==================================================
Filename : atikmdag.sys
Address In Stack :
From Address : 0x8e600000
To Address : 0x8eb13000
Size : 0x00513000
Time Stamp : 0x4844bf0f
Time String : 03/06/2008 00:48:31
Product Name : ATI Radeon Family
File Description : ATI Radeon Kernel Mode Driver
File Version : 8.01.01.1010
Company : ATI Technologies Inc.
Full Path : C:\Windows\system32\drivers\atikmdag.sys
==================================================

==================================================
Filename : dxgkrnl.sys
Address In Stack :
From Address : 0x8eb13000
To Address : 0x8ebb4000
Size : 0x000a1000
Time Stamp : 0x4abc1c72
Time String : 24/09/2009 22:27:14
Product Name : Microsoft® Windows® Operating System
File Description : DirectX Graphics Kernel
File Version : 7.0.6002.18107 (vistasp2_gdr_win7ip_dgt(wmbla).090924-1550)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\dxgkrnl.sys
==================================================

==================================================
Filename : watchdog.sys
Address In Stack :
From Address : 0x8ebb4000
To Address : 0x8ebc0000
Size : 0x0000c000
Time Stamp : 0x49e01b13
Time String : 11/04/2009 01:22:43
Product Name : Microsoft® Windows® Operating System
File Description : Watchdog Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\watchdog.sys
==================================================

==================================================
Filename : HDAudBus.sys
Address In Stack :
From Address : 0x8ec06000
To Address : 0x8ec93000
Size : 0x0008d000
Time Stamp : 0x49e01fc1
Time String : 11/04/2009 01:42:41
Product Name : Microsoft® Windows® Operating System
File Description : High Definition Audio Bus Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\HDAudBus.sys
==================================================

==================================================
Filename : e1e6032.sys
Address In Stack :
From Address : 0x8ec93000
To Address : 0x8eccd000
Size : 0x0003a000
Time Stamp : 0x47265414
Time String : 29/10/2007 18:43:48
Product Name : Intel® PRO/1000 Adapter
File Description : Intel® PRO/1000 Adapter NDIS 6 deserialized driver
File Version : 9.11.5.7 built by: WinDDK
Company : Intel Corporation
Full Path : C:\Windows\system32\drivers\e1e6032.sys
==================================================

==================================================
Filename : usbuhci.sys
Address In Stack :
From Address : 0x8eccd000
To Address : 0x8ecd8000
Size : 0x0000b000
Time Stamp : 0x47919050
Time String : 19/01/2008 02:53:20
Product Name : Microsoft® Windows® Operating System
File Description : UHCI USB Miniport Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\usbuhci.sys
==================================================

==================================================
Filename : USBPORT.SYS
Address In Stack :
From Address : 0x8ecd8000
To Address : 0x8ed16000
Size : 0x0003e000
Time Stamp : 0x49e01fcf
Time String : 11/04/2009 01:42:55
Product Name : Microsoft® Windows® Operating System
File Description : USB 1.1 & 2.0 Port Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\USBPORT.SYS
==================================================

==================================================
Filename : usbehci.sys
Address In Stack :
From Address : 0x8ed16000
To Address : 0x8ed25000
Size : 0x0000f000
Time Stamp : 0x49e01fcc
Time String : 11/04/2009 01:42:52
Product Name : Microsoft® Windows® Operating System
File Description : EHCI eUSB Miniport Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\usbehci.sys
==================================================

==================================================
Filename : bcmwl6.sys
Address In Stack :
From Address : 0x8ed25000
To Address : 0x8ed9a000
Size : 0x00075000
Time Stamp : 0x45231e90
Time String : 03/10/2006 23:38:08
Product Name : BCM 802.11g Network Adapter wireless driver
File Description : BCM 802.11g Network Adapter wireless driver
File Version : 4.82.28.56 built by: WinDDK
Company : Broadcom Corporation
Full Path : C:\Windows\system32\drivers\bcmwl6.sys
==================================================

==================================================
Filename : ohci1394.sys
Address In Stack :
From Address : 0x8ed9a000
To Address : 0x8eda9300
Size : 0x0000f300
Time Stamp : 0x49e01fd8
Time String : 11/04/2009 01:43:04
Product Name : Microsoft® Windows® Operating System
File Description : 1394 OpenHCI Port Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ohci1394.sys
==================================================

==================================================
Filename : 1394BUS.SYS
Address In Stack :
From Address : 0x8edaa000
To Address : 0x8edb7080
Size : 0x0000d080
Time Stamp : 0x47919057
Time String : 19/01/2008 02:53:27
Product Name : Microsoft® Windows® Operating System
File Description : 1394 Bus Device Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\1394BUS.SYS
==================================================

==================================================
Filename : cdrom.sys
Address In Stack :
From Address : 0x8edb8000
To Address : 0x8edd0000
Size : 0x00018000
Time Stamp : 0x49e01ef5
Time String : 11/04/2009 01:39:17
Product Name : Microsoft® Windows® Operating System
File Description : SCSI CD-ROM Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\cdrom.sys
==================================================

==================================================
Filename : GEARAspiWDM.sys
Address In Stack :
From Address : 0x8edd0000
To Address : 0x8edd5280
Size : 0x00005280
Time Stamp : 0x4a1151b5
Time String : 18/05/2009 09:16:53
Product Name : CD DVD Filter
File Description : CD DVD Filter
File Version : 2.02.00.01
Company : GEAR Software Inc.
Full Path : C:\Windows\system32\drivers\GEARAspiWDM.sys
==================================================

==================================================
Filename : msiscsi.sys
Address In Stack :
From Address : 0x8ebc0000
To Address : 0x8ebef000
Size : 0x0002f000
Time Stamp : 0x49e01f27
Time String : 11/04/2009 01:40:07
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft iSCSI Initiator Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\msiscsi.sys
==================================================

==================================================
Filename : storport.sys
Address In Stack :
From Address : 0x8afaf000
To Address : 0x8aff0000
Size : 0x00041000
Time Stamp : 0x49e01ef7
Time String : 11/04/2009 01:39:19
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Storage Port Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\storport.sys
==================================================

==================================================
Filename : TDI.SYS
Address In Stack :
From Address : 0x8edd6000
To Address : 0x8ede1000
Size : 0x0000b000
Time Stamp : 0x47919136
Time String : 19/01/2008 02:57:10
Product Name : Microsoft® Windows® Operating System
File Description : TDI Wrapper
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\TDI.SYS
==================================================

==================================================
Filename : rasl2tp.sys
Address In Stack :
From Address : 0x8ede1000
To Address : 0x8edf8000
Size : 0x00017000
Time Stamp : 0x47919111
Time String : 19/01/2008 02:56:33
Product Name : Microsoft® Windows® Operating System
File Description : RAS L2TP mini-port/call-manager driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rasl2tp.sys
==================================================

==================================================
Filename : ndistapi.sys
Address In Stack :
From Address : 0x8ebef000
To Address : 0x8ebfa000
Size : 0x0000b000
Time Stamp : 0x47919108
Time String : 19/01/2008 02:56:24
Product Name : Microsoft® Windows® Operating System
File Description : NDIS 3.0 connection wrapper driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndistapi.sys
==================================================

==================================================
Filename : ndiswan.sys
Address In Stack :
From Address : 0x8ad7b000
To Address : 0x8ad9e000
Size : 0x00023000
Time Stamp : 0x49e020a7
Time String : 11/04/2009 01:46:31
Product Name : Microsoft® Windows® Operating System
File Description : MS PPP Framing Driver (Strong Encryption)
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndiswan.sys
==================================================

==================================================
Filename : raspppoe.sys
Address In Stack :
From Address : 0x8b1e9000
To Address : 0x8b1f8000
Size : 0x0000f000
Time Stamp : 0x49e020a6
Time String : 11/04/2009 01:46:30
Product Name : Microsoft® Windows® Operating System
File Description : RAS PPPoE mini-port/call-manager driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\raspppoe.sys
==================================================

==================================================
Filename : raspptp.sys
Address In Stack :
From Address : 0x8ad9e000
To Address : 0x8adb2000
Size : 0x00014000
Time Stamp : 0x47919112
Time String : 19/01/2008 02:56:34
Product Name : Microsoft® Windows® Operating System
File Description : Peer-to-Peer Tunneling Protocol
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\raspptp.sys
==================================================

==================================================
Filename : rassstp.sys
Address In Stack :
From Address : 0x8adb2000
To Address : 0x8adc7000
Size : 0x00015000
Time Stamp : 0x49e020b0
Time String : 11/04/2009 01:46:40
Product Name : Microsoft® Windows® Operating System
File Description : RAS SSTP Miniport Call Manager
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rassstp.sys
==================================================

==================================================
Filename : termdd.sys
Address In Stack :
From Address : 0x8aff0000
To Address : 0x8b000000
Size : 0x00010000
Time Stamp : 0x49e021c2
Time String : 11/04/2009 01:51:14
Product Name : Microsoft® Windows® Operating System
File Description : Terminal Server Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\termdd.sys
==================================================

==================================================
Filename : kbdclass.sys
Address In Stack :
From Address : 0x8adc7000
To Address : 0x8add2000
Size : 0x0000b000
Time Stamp : 0x47918f5a
Time String : 19/01/2008 02:49:14
Product Name : Microsoft® Windows® Operating System
File Description : Keyboard Class Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\kbdclass.sys
==================================================

==================================================
Filename : mouclass.sys
Address In Stack :
From Address : 0x8add2000
To Address : 0x8addd000
Size : 0x0000b000
Time Stamp : 0x47918f5a
Time String : 19/01/2008 02:49:14
Product Name : Microsoft® Windows® Operating System
File Description : Mouse Class Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mouclass.sys
==================================================

==================================================
Filename : swenum.sys
Address In Stack :
From Address : 0x8edf8000
To Address : 0x8edf9380
Size : 0x00001380
Time Stamp : 0x47918f60
Time String : 19/01/2008 02:49:20
Product Name : Microsoft® Windows® Operating System
File Description : Plug and Play Software Device Enumerator
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\swenum.sys
==================================================

==================================================
Filename : ks.sys
Address In Stack :
From Address : 0x827ba000
To Address : 0x827e4000
Size : 0x0002a000
Time Stamp : 0x49e01ed7
Time String : 11/04/2009 01:38:47
Product Name : Microsoft® Windows® Operating System
File Description : Kernel CSA Library
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ks.sys
==================================================

==================================================
Filename : mssmbios.sys
Address In Stack :
From Address : 0x8addd000
To Address : 0x8ade7000
Size : 0x0000a000
Time Stamp : 0x47918b87
Time String : 19/01/2008 02:32:55
Product Name : Microsoft® Windows® Operating System
File Description : System Management BIOS Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mssmbios.sys
==================================================

==================================================
Filename : umbus.sys
Address In Stack :
From Address : 0x8ade7000
To Address : 0x8adf4000
Size : 0x0000d000
Time Stamp : 0x47919064
Time String : 19/01/2008 02:53:40
Product Name : Microsoft® Windows® Operating System
File Description : User-Mode Bus Enumerator
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\umbus.sys
==================================================

==================================================
Filename : usbhub.sys
Address In Stack :
From Address : 0x8f204000
To Address : 0x8f239000
Size : 0x00035000
Time Stamp : 0x49e01fe2
Time String : 11/04/2009 01:43:14
Product Name : Microsoft® Windows® Operating System
File Description : Default Hub Driver for USB
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\usbhub.sys
==================================================

==================================================
Filename : NDProxy.SYS
Address In Stack :
From Address : 0x8f239000
To Address : 0x8f24a000
Size : 0x00011000
Time Stamp : 0x4791910c
Time String : 19/01/2008 02:56:28
Product Name : Microsoft® Windows® Operating System
File Description : NDIS Proxy
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\NDProxy.SYS
==================================================

==================================================
Filename : HdAudio.sys
Address In Stack :
From Address : 0x8f24a000
To Address : 0x8f289000
Size : 0x0003f000
Time Stamp : 0x49e01fd5
Time String : 11/04/2009 01:43:01
Product Name : Microsoft® Windows® Operating System
File Description : High Definition Audio Function Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\HdAudio.sys
==================================================

==================================================
Filename : portcls.sys
Address In Stack :
From Address : 0x8f289000
To Address : 0x8f2b6000
Size : 0x0002d000
Time Stamp : 0x49e01fc8
Time String : 11/04/2009 01:42:48
Product Name : Microsoft® Windows® Operating System
File Description : Port Class (Class Driver for Port/Miniport Devices)
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\portcls.sys
==================================================

==================================================
Filename : drmk.sys
Address In Stack :
From Address : 0x8f2b6000
To Address : 0x8f2db000
Size : 0x00025000
Time Stamp : 0x47919e4e
Time String : 19/01/2008 03:53:02
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Kernel DRM Descrambler Filter
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\drmk.sys
==================================================

==================================================
Filename : Fs_Rec.SYS
Address In Stack :
From Address : 0x8f2db000
To Address : 0x8f2e4000
Size : 0x00009000
Time Stamp : 0x47918a5d
Time String : 19/01/2008 02:27:57
Product Name : Microsoft® Windows® Operating System
File Description : File System Recognizer Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Fs_Rec.SYS
==================================================

==================================================
Filename : Null.SYS
Address In Stack :
From Address : 0x8f2e4000
To Address : 0x8f2eb000
Size : 0x00007000
Time Stamp : 0x47918f58
Time String : 19/01/2008 02:49:12
Product Name : Microsoft® Windows® Operating System
File Description : NULL Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Null.SYS
==================================================

==================================================
Filename : HIDPARSE.SYS
Address In Stack :
From Address : 0x8f2f4000
To Address : 0x8f2fa380
Size : 0x00006380
Time Stamp : 0x4791904c
Time String : 19/01/2008 02:53:16
Product Name : Microsoft® Windows® Operating System
File Description : Hid Parsing Library
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\HIDPARSE.SYS
==================================================

==================================================
Filename : vga.sys
Address In Stack :
From Address : 0x8f2fb000
To Address : 0x8f307000
Size : 0x0000c000
Time Stamp : 0x47919006
Time String : 19/01/2008 02:52:06
Product Name : Microsoft® Windows® Operating System
File Description : VGA/Super VGA Video Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\vga.sys
==================================================

==================================================
Filename : VIDEOPRT.SYS
Address In Stack :
From Address : 0x8f307000
To Address : 0x8f328000
Size : 0x00021000
Time Stamp : 0x4791900a
Time String : 19/01/2008 02:52:10
Product Name : Microsoft® Windows® Operating System
File Description : Video Port Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\VIDEOPRT.SYS
==================================================

==================================================
Filename : RDPCDD.sys
Address In Stack :
From Address : 0x8f328000
To Address : 0x8f330000
Size : 0x00008000
Time Stamp : 0x47919224
Time String : 19/01/2008 03:01:08
Product Name : Microsoft® Windows® Operating System
File Description : RDP Miniport
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\RDPCDD.sys
==================================================

==================================================
Filename : rdpencdd.sys
Address In Stack :
From Address : 0x8f330000
To Address : 0x8f338000
Size : 0x00008000
Time Stamp : 0x47919225
Time String : 19/01/2008 03:01:09
Product Name : Microsoft® Windows® Operating System
File Description : RDP Miniport
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rdpencdd.sys
==================================================

==================================================
Filename : Msfs.SYS
Address In Stack :
From Address : 0x8f338000
To Address : 0x8f343000
Size : 0x0000b000
Time Stamp : 0x47918a68
Time String : 19/01/2008 02:28:08
Product Name : Microsoft® Windows® Operating System
File Description : Mailslot driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Msfs.SYS
==================================================

==================================================
Filename : Npfs.SYS
Address In Stack :
From Address : 0x8f343000
To Address : 0x8f351000
Size : 0x0000e000
Time Stamp : 0x49e01909
Time String : 11/04/2009 01:14:01
Product Name : Microsoft® Windows® Operating System
File Description : NPFS Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Npfs.SYS
==================================================

==================================================
Filename : rasacd.sys
Address In Stack :
From Address : 0x8f351000
To Address : 0x8f35a000
Size : 0x00009000
Time Stamp : 0x4791910f
Time String : 19/01/2008 02:56:31
Product Name : Microsoft® Windows® Operating System
File Description : RAS Automatic Connection Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rasacd.sys
==================================================

==================================================
Filename : tdx.sys
Address In Stack :
From Address : 0x8f35a000
To Address : 0x8f370000
Size : 0x00016000
Time Stamp : 0x49e02084
Time String : 11/04/2009 01:45:56
Product Name : Microsoft® Windows® Operating System
File Description : TDI Translation Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\tdx.sys
==================================================

==================================================
Filename : hidusb.sys
Address In Stack :
From Address : 0x8f370000
To Address : 0x8f379000
Size : 0x00009000
Time Stamp : 0x49e01fc8
Time String : 11/04/2009 01:42:48
Product Name : Microsoft® Windows® Operating System
File Description : USB Miniport Driver for Input Devices
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\hidusb.sys
==================================================

==================================================
Filename : HIDCLASS.SYS
Address In Stack :
From Address : 0x8f379000
To Address : 0x8f389000
Size : 0x00010000
Time Stamp : 0x49e01fc7
Time String : 11/04/2009 01:42:47
Product Name : Microsoft® Windows® Operating System
File Description : Hid Class Library
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\HIDCLASS.SYS
==================================================

==================================================
Filename : USBD.SYS
Address In Stack :
From Address : 0x8f389000
To Address : 0x8f38a700
Size : 0x00001700
Time Stamp : 0x4791904d
Time String : 19/01/2008 02:53:17
Product Name : Microsoft® Windows® Operating System
File Description : Universal Serial Bus Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\USBD.SYS
==================================================

==================================================
Filename : kbdhid.sys
Address In Stack :
From Address : 0x8f38b000
To Address : 0x8f394000
Size : 0x00009000
Time Stamp : 0x49e01ed0
Time String : 11/04/2009 01:38:40
Product Name : Microsoft® Windows® Operating System
File Description : HID Keyboard Filter Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\kbdhid.sys
==================================================

==================================================
Filename : USBSTOR.SYS
Address In Stack :
From Address : 0x8f3c3000
To Address : 0x8f3d8000
Size : 0x00015000
Time Stamp : 0x49e01fcf
Time String : 11/04/2009 01:42:55
Product Name : Microsoft® Windows® Operating System
File Description : USB Mass Storage Class Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\USBSTOR.SYS
==================================================

==================================================
Filename : mouhid.sys
Address In Stack :
From Address : 0x8f3d8000
To Address : 0x8f3e0000
Size : 0x00008000
Time Stamp : 0x47918f5c
Time String : 19/01/2008 02:49:16
Product Name : Microsoft® Windows® Operating System
File Description : HID Mouse Filter Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mouhid.sys
==================================================

==================================================
Filename : smb.sys
Address In Stack :
From Address : 0x8f3e0000
To Address : 0x8f3f4000
Size : 0x00014000
Time Stamp : 0x49e02062
Time String : 11/04/2009 01:45:22
Product Name : Microsoft® Windows® Operating System
File Description : SMB Transport driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\smb.sys
==================================================

==================================================
Filename : afd.sys
Address In Stack :
From Address : 0x8f80b000
To Address : 0x8f853000
Size : 0x00048000
Time Stamp : 0x49e020c5
Time String : 11/04/2009 01:47:01
Product Name : Microsoft® Windows® Operating System
File Description : Ancillary Function Driver for WinSock
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\afd.sys
==================================================

==================================================
Filename : netbt.sys
Address In Stack :
From Address : 0x8f853000
To Address : 0x8f885000
Size : 0x00032000
Time Stamp : 0x49e0206f
Time String : 11/04/2009 01:45:35
Product Name : Microsoft® Windows® Operating System
File Description : MBT Transport driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\netbt.sys
==================================================

==================================================
Filename : vsdatant.sys
Address In Stack :
From Address : 0x8f885000
To Address : 0x8f90c000
Size : 0x00087000
Time Stamp : 0x4b09cb11
Time String : 22/11/2009 20:36:49
Product Name : ZoneAlarm Firewalling Driver
File Description : ZoneAlarm Firewalling Driver
File Version : 9.1.007.002
Company : Check Point Software Technologies LTD
Full Path : C:\Windows\system32\drivers\vsdatant.sys
==================================================

==================================================
Filename : pacer.sys
Address In Stack :
From Address : 0x8f90c000
To Address : 0x8f922000
Size : 0x00016000
Time Stamp : 0x49e0207f
Time String : 11/04/2009 01:45:51
Product Name : Microsoft® Windows® Operating System
File Description : QoS Packet Scheduler
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\pacer.sys
==================================================

==================================================
Filename : netbios.sys
Address In Stack :
From Address : 0x8f922000
To Address : 0x8f930000
Size : 0x0000e000
Time Stamp : 0x479190e1
Time String : 19/01/2008 02:55:45
Product Name : Microsoft® Windows® Operating System
File Description : NetBIOS interface driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\netbios.sys
==================================================

==================================================
Filename : wanarp.sys
Address In Stack :
From Address : 0x8f930000
To Address : 0x8f943000
Size : 0x00013000
Time Stamp : 0x4791910f
Time String : 19/01/2008 02:56:31
Product Name : Microsoft® Windows® Operating System
File Description : MS Remote Access and Routing ARP Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\wanarp.sys
==================================================

==================================================
Filename : rdbss.sys
Address In Stack :
From Address : 0x8f943000
To Address : 0x8f97f000
Size : 0x0003c000
Time Stamp : 0x49e01922
Time String : 11/04/2009 01:14:26
Product Name : Microsoft® Windows® Operating System
File Description : Redirected Drive Buffering SubSystem Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rdbss.sys
==================================================

==================================================
Filename : nsiproxy.sys
Address In Stack :
From Address : 0x8f97f000
To Address : 0x8f989000
Size : 0x0000a000
Time Stamp : 0x479190e6
Time String : 19/01/2008 02:55:50
Product Name : Microsoft® Windows® Operating System
File Description : NSI Proxy
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\nsiproxy.sys
==================================================

==================================================
Filename : dfsc.sys
Address In Stack :
From Address : 0x8f989000
To Address : 0x8f9a0000
Size : 0x00017000
Time Stamp : 0x49e01914
Time String : 11/04/2009 01:14:12
Product Name : Microsoft® Windows® Operating System
File Description : DFS Namespace Client Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\dfsc.sys
==================================================

==================================================
Filename : crashdmp.sys
Address In Stack :
From Address : 0x8f9a0000
To Address : 0x8f9ad000
Size : 0x0000d000
Time Stamp : 0x49e01ef0
Time String : 11/04/2009 01:39:12
Product Name : Microsoft® Windows® Operating System
File Description : Crash Dump Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\crashdmp.sys
==================================================

==================================================
Filename : dump_iaStorV.sys
Address In Stack :
From Address : 0x8af0e000
To Address : 0x8afaf000
Size : 0x000a1000
Time Stamp : 0x46fd4537
Time String : 28/09/2007 15:17:27
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : win32k.sys
Address In Stack :
From Address : 0x964c0000
To Address : 0x966c2000
Size : 0x00202000
Time Stamp : 0x00000000
Time String :
Product Name : Microsoft® Windows® Operating System
File Description : Multi-User Win32 Driver
File Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\win32k.sys
==================================================

==================================================
Filename : Dxapi.sys
Address In Stack :
From Address : 0x8f9ad000
To Address : 0x8f9b7000
Size : 0x0000a000
Time Stamp : 0x47918c4c
Time String : 19/01/2008 02:36:12
Product Name : Microsoft® Windows® Operating System
File Description : DirectX API Driver
File Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Dxapi.sys
==================================================

==================================================
Filename : dxg.sys
Address In Stack :
From Address : 0x966d0000
To Address : 0x966e7000
Size : 0x00017000
Time Stamp : 0x00000000
Time String :
Product Name : Microsoft® Windows® Operating System
File Description : DirectX Graphics Driver
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\dxg.sys
==================================================
  • 0

#6
Broni

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
I think, you downloaded wrong file.
Let's try again.

Download BlueScreenView ((in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.
  • 0

#7
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
I think its the right file, but perhaps I provided the wrong info. did you want

==================================================
Dump File : Mini052510-01.dmp
Crash Time : 25/05/2010 17:07:51
Bug Check String :
Bug Check Code : 0xc000021a
Parameter 1 : 0x8b901670
Parameter 2 : 0x00000000
Parameter 3 : 0xc0000001
Parameter 4 : 0x00100450
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+cdb8d
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini052510-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini052010-01.dmp
Crash Time : 20/05/2010 07:18:30
Bug Check String :
Bug Check Code : 0xc000021a
Parameter 1 : 0x8b904c38
Parameter 2 : 0x00000000
Parameter 3 : 0xc0000001
Parameter 4 : 0x001003a0
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+cdb8d
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18209 (vistasp2_gdr.100218-0019)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini052010-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 6002
==================================================

==================================================
Dump File : Mini051810-01.dmp
Crash Time : 18/05/2010 08:01:15
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x82252317
Parameter 3 : 0x8dd57c0c
Parameter 4 : 0x00000000
Caused By Driver : hal.dll
Caused By Address : hal.dll+40b0
File Description : Hardware Abstraction Layer DLL
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18005 (lh_sp2rtm.090410-1830)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini051810-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 6002
==================================================
  • 0

#8
Broni

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
This is better :)

I can't be 100% sure, because we have only 3 dumps, but we better check...

I suggest that you start a new topic in the Malware Removal and Spyware Removal area.

Before you start a new topic click on this link --> Malware and Spyware Cleaning Guide, Please read before starting a new topic. This will give you a few preparations to make, as well as instruction for posting your OTListIt2 log.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).
  • 0

#9
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
Can it really be malware? Its a fresh install of windows
  • 0

#10
Broni

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
Did you reinstall Vista recently? Upgraded?
More info, please.
  • 0

Advertisements


#11
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
Yes, sorry, I havent given a complete picture

I was having similar problems...rebooting, giving blue screen, etc

Formatted and reinstalled last week. Been fine. Now exact same problem today]

I really struggle to believe its malware given that, it has to be a hardware problem?
  • 0

#12
Broni

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
In that case, disregard my previous advice (malware forum).
What did you use to reinstall Vista?

It won't hurt, if we run some hardware checks.

Run hard drive diagnostics: http://www.tacktech....ay.cfm?ttid=287 (or http://www.bleepingc...opic28744.html)
Make sure, you select tool, which is appropriate for the brand of your hard drive.
Depending on the program, it'll create bootable floppy, or bootable CD.
If downloaded file is of .iso type, use ImgBurn: http://www.imgburn.com/ to burn .iso file to a CD (select "Write image file to disc" option), and make the CD bootable.

NOTE. If your hard drive is made by Toshiba, unfortunately, you're out of luck, because Toshiba doesn't provide any diagnostic tool.

================================================================================
=======

A. If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...

1. Download - Pre-Compiled Bootable ISO (.zip)
2. Unzip downloaded memtest86+-....iso.zip file.
3. Inside, you'll find memtest86+-....iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:

Posted Image

8. Locate memtest86+-....iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:

Posted Image

10. Once the CD is created, boot from it, and memtest will automatically start to run.

The running program will look something like this depending on the size and number of ram modules installed:


Posted Image

It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.

Posted Image

The following image is the test results area:

Posted Image

The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.
  • 0

#13
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
I got a tech guy to reinstall it for me, what do you mean what did I use?

I ran remrest for like 8 hours before the format and it was all clean

The techguy also said my hard drives were working fine, he did some tests or whatever

Still worth running the above tests?
  • 0

#14
Broni

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts

what do you mean what did I use?

Recovery partition, your recovery DVDs, your Vista DVD?

I ran remrest for like 8 hours before the format and it was all clean.

A. If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A


  • 0

#15
gavinwkelly

gavinwkelly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
How do I know how many sticks of ram I have / start with only one?

I think he installed it with a vista home DVD he had
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP