[lokilein]

Hi there,

a few days ago i started to get bluescreens like the one that is attached here (stop: 0x40000080 (0x89d8c410, 0x89328440, 0x89566f44, 0x00000001)



i ran through the forums and through http://www.jasik.de/shutdown/index.htm to find my problem. 0x40000080 seems to be a hardware problem, right?

i will start testing the ram and harddrive with software. but maybe someone knows the best steps to get rid of thoses bluescreens? it took me a [bleep] while to set up windows new because the recovery iso did not work properly with my netbook and i had to set it up new over bartpe. maybe with your help i can save some time here

minidump files attached here (was not allowed to upload .dmp files?)
 Minidump.zip   96.7KB   197 downloads
if you need any more information about my system let me know and i'll add asap.

thank you very much in advance,
loki

[Advertisements]

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

[Broni]

Download BlueScreenView (in Zip file)
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

[lokilein]

Hello Broni,

thanks for the quick answer and the good tip about bsv, NDIS driver seems to be the problem.

 bsvlog.txt   9.76KB   282 downloads

I'll look for a replacement, hope it works. any further advice from your side?

cheers,
loki

[Broni]

==================================================
Dump File : Mini053010-04.dmp
Crash Time : 30.05.2010 12:56:59
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89d5f6b0
Parameter 2 : 0x8932cf30
Parameter 3 : 0x8956af44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini053010-04.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini053010-03.dmp
Crash Time : 30.05.2010 12:40:13
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89e30590
Parameter 2 : 0x8932a378
Parameter 3 : 0x89568f44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini053010-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini053010-02.dmp
Crash Time : 30.05.2010 02:32:18
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89d5d2a8
Parameter 2 : 0x8932ada0
Parameter 3 : 0x89568f44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini053010-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini053010-01.dmp
Crash Time : 30.05.2010 02:20:37
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89df97a0
Parameter 2 : 0x8931ea80
Parameter 3 : 0x8955cf44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini053010-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini052910-02.dmp
Crash Time : 29.05.2010 16:10:02
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89da76d0
Parameter 2 : 0x8932fb48
Parameter 3 : 0x8956df44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052910-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

==================================================
Dump File : Mini052910-01.dmp
Crash Time : 29.05.2010 15:53:03
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89d8c410
Parameter 2 : 0x89328440
Parameter 3 : 0x89566f44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini052910-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

[Broni]

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Vista users:: Right click on SystemLook.exe, click Run As Administrator
• Copy the content of the following box into the main textfield:
  

  :filefind
  NDIS.sys

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[lokilein]

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 13:31 on 30/05/2010 by Max (Administrator - Elevation successful)

========== filefind ==========

Searching for "NDIS.sys"
C:\WINDOWS\system32\dllcache\ndis.sys --a--- 182656 bytes [17:47 29/05/2010] [12:00 14/04/2008] 1DF7F42665C94B825322FAE71721130D
C:\WINDOWS\system32\drivers\ndis.sys --a--- 182656 bytes [17:46 29/05/2010] [12:00 14/04/2008] 1DF7F42665C94B825322FAE71721130D

-=End Of File=-

[Broni]

Please download OTM

• Save it to your desktop.
• Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
• Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

:Processes

:Services

:Reg

:Files
C:\WINDOWS\system32\drivers\ndis.sys|C:\WINDOWS\system32\dllcache\ndis.sys /replace
	  
:Commands
[purity]
[emptytemp]
[Reboot]

• Return to OTM, right click in the Paste Instructions for Items to be Movedwindow (under the yellow bar) and choose Paste.
• Click the red Moveit! button.
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
• Close OTM and reboot your PC.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

[lokilein]

(thanks for your time broni. very much appreciated. little hint for you, my otm creates the folder c:\_otm\ not _otmoveit\ - just in case you want to edit your rutine)

log:

All processes killed
========== PROCESSES ==========
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File C:\WINDOWS\system32\drivers\ndis.sys successfully replaced with C:\WINDOWS\system32\dllcache\ndis.sys
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Max
->Temp folder emptied: 4051136 bytes
->Temporary Internet Files folder emptied: 5825781 bytes
->FireFox cache emptied: 25582501 bytes
->Flash cache emptied: 434 bytes

User: Max_2
->Temp folder emptied: 659731 bytes
->Temporary Internet Files folder emptied: 11519436 bytes
->FireFox cache emptied: 36455342 bytes
->Flash cache emptied: 629 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1045277 bytes
RecycleBin emptied: 334186 bytes

Total Files Cleaned = 82,00 mb


OTM by OldTimer - Version 3.1.12.1 log created on 05302010_133934

Files moved on Reboot...

Registry entries deleted on Reboot...

Edited by lokilein, 30 May 2010 - 02:47 PM.

[Broni]

Thanks

See, if this move will cure BSOD issue.

[lokilein]

1 min after the moving/reboot: (wireless stopped to work, tried to refresh page -> bluescreen, maybe a hint because its a problem with the landriver?)

==================================================
Dump File : Mini053010-05.dmp
Crash Time : 30.05.2010 13:59:47
Bug Check String : BUGCODE_ID_DRIVER
Bug Check Code : 0x40000080
Parameter 1 : 0x89dee590
Parameter 2 : 0x89326a80
Parameter 3 : 0x89564f44
Parameter 4 : 0x00000001
Caused By Driver : NDIS.sys
Caused By Address : NDIS.sys+23821
File Description : NDIS 5.1 wrapper driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.5512 (xpsp.080413-0852)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini053010-05.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
==================================================

[Broni]

Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to Show hidden files, and folders.
Upload following files to http://www.virustotal.com/ for security check:
C:\WINDOWS\system32\drivers\ndis.sys
IMPORTANT! If the file is listed as already analyzed, click on Reanalyse file now button.
Post scan results.

[Broni]

The date of your file looks suspicious - 29/05/2010
Let's see, what the scan will say.

[lokilein]

nothing detected.

additional information:

File size: 182656 bytes
MD5...: 1df7f42665c94b825322fae71721130d
SHA1..: b8e7cce36011313b3b908c7ebfa598057847d340
SHA256: fe0dcb728471465b39a42a7511f4133021fba5df88f88bcb5fe2ff34cfd713f9
ssdeep: 3072:5OEyDbo4nlAaz0FDUR0xwhY0Tj8qf9g7H/EOlvbdTBITTPDsxa6U:hSzkD+
0yK0Uqf2dBSEa
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x29105
timedatestamp.....: 0x48025d03 (Sun Apr 13 19:20:35 2008)
machinetype.......: 0x14c (I386)

( 16 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x480 0x56f9 0x5700 6.41 96ae3e7d4b54cdd29c0de009162eef7e
.rdata 0x5b80 0x504 0x580 5.20 041d70cc3aed48578be848dc47e39316
.data 0x6100 0xa78 0xa80 0.87 bac7845573b70c4539c4af447cb1bb75
PAGENPNP 0x6b80 0xec0b 0xec80 6.46 789cb7199349e9c83c0df68913fc68e4
PAGENDSP 0x15800 0x35bc 0x3600 6.37 db6587f00f71f77e939f18bfef43316f
PAGENDSM 0x18e00 0x5ccc 0x5d00 6.46 6d72571c2cc585816e8c40c7d955c3ba
PAGENDCO 0x1eb00 0x25dd 0x2600 6.37 488075e753b6887aa84713da3e15909a
PAGENDSF 0x21100 0x18da 0x1900 6.35 c353c4eca24461e7f063cc3ff2d42ddb
PAGENDSE 0x22a00 0x12a4 0x1300 6.27 98988eaa9cee24a419c2b2f3c43ab1ae
PAGENDST 0x23d00 0xd7d 0xd80 6.49 f984580405adf4a4bddefea5c5fa137b
PAGENDSA 0x24a80 0x10c6 0x1100 6.37 10d5f5ea54fc04f6ff9ad1f9fb7ec70a
.edata 0x25b80 0x2559 0x2580 5.52 4e9be9ea659f7cea15058825f12b52f8
PAGE 0x28100 0xf98 0x1000 5.35 e490c30bdc097229eb86dd0e1b45b3a0
INIT 0x29100 0x1d14 0x1d80 6.01 c9cd4b5a9abf37c2b10a60181a3f2e15
.rsrc 0x2ae80 0x3e0 0x400 3.36 031b20e15238ac104a8c5cf753f0522c
.reloc 0x2b280 0x16f0 0x1700 6.75 8d90c4c92326950ec06264028062bbc6

( 2 imports )
> HAL.dll: KeGetCurrentIrql, KfRaiseIrql, KfLowerIrql, READ_PORT_ULONG, READ_PORT_USHORT, READ_PORT_UCHAR, WRITE_PORT_ULONG, WRITE_PORT_USHORT, WRITE_PORT_UCHAR, HalTranslateBusAddress, KfAcquireSpinLock, KfReleaseSpinLock, KeRaiseIrqlToDpcLevel
> ntoskrnl.exe: IoWMIWriteEvent, ExNotifyCallback, RtlImageDirectoryEntryToData, KeReleaseMutex, KeInitializeEvent, KeWaitForSingleObject, RtlAppendUnicodeStringToString, RtlCopyUnicodeString, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, IofCompleteRequest, KeInitializeMutex, ZwPowerInformation, ExRegisterCallback, DbgPrint, ExCreateCallback, KeQuerySystemTime, KeInitializeQueue, ExInitializeResourceLite, KeQueryTimeIncrement, KeInitializeSpinLock, IoCreateSymbolicLink, IoCreateDevice, KeNumberProcessors, RtlWriteRegistryValue, ZwClose, ZwOpenKey, IoOpenDeviceRegistryKey, RtlCharToInteger, ZwEnumerateKey, RtlUnicodeStringToInteger, RtlEqualUnicodeString, RtlAppendUnicodeToString, IoGetDeviceProperty, IoSetDeviceInterfaceState, _alldiv, IoInvalidateDeviceState, MmUnlockPagableImageSection, MmLockPagableDataSection, MmLockPagableSectionByHandle, MmAllocateContiguousMemory, MmAllocateNonCachedMemory, MmFreeContiguousMemory, MmFreeNonCachedMemory, KeTickCount, InterlockedPushEntrySList, MmBuildMdlForNonPagedPool, IoAllocateMdl, IoBuildPartialMdl, MmMapLockedPages, MmMapIoSpace, MmUnmapIoSpace, ZwReadFile, ZwQueryInformationFile, ZwCreateFile, RtlExtendedIntegerMultiply, ExGetCurrentProcessorCpuUsage, ExGetCurrentProcessorCounts, KeResetEvent, _allmul, MmMapLockedPagesSpecifyCache, InterlockedPopEntrySList, RtlGetCallersAddress, ObfDereferenceObject, RtlFreeUnicodeString, IoUnregisterShutdownNotification, IoGetDriverObjectExtension, KeSetTimerEx, KeSetTimer, KeInitializeTimerEx, KeBugCheckEx, IoWMIRegistrationControl, KeInsertQueue, ExInterlockedAddLargeInteger, ExfInterlockedInsertHeadList, _except_handler3, memmove, KeSetEvent, RtlAnsiStringToUnicodeString, ExfInterlockedAddUlong, ExfInterlockedInsertTailList, ExfInterlockedRemoveHeadList, ExfInterlockedPushEntryList, ExfInterlockedPopEntryList, IoReleaseCancelSpinLock, IoAcquireCancelSpinLock, IoWriteErrorLogEntry, IoAllocateErrorLogEntry, KeInsertQueueDpc, IoDeleteSymbolicLink, IoRegisterDeviceInterface, KeInitializeDpc, KeSetImportanceDpc, KeInitializeTimer, KeCancelTimer, IoDeleteDevice, ExReleaseResourceLite, ExAcquireResourceExclusiveLite, IoGetDmaAdapter, KeRegisterBugCheckCallback, KeDeregisterBugCheckCallback, IofCallDriver, IoBuildSynchronousFsdRequest, IoCancelIrp, KeGetRecommendedSharedDataAlignment, ExDeleteNPagedLookasideList, IoDetachDevice, IoAttachDeviceToDeviceStack, MmIsDriverVerifying, IoAllocateDriverObjectExtension, IoFreeIrp, IoAllocateIrp, KeSynchronizeExecution, IoConnectInterrupt, KeSetTargetProcessorDpc, IoDisconnectInterrupt, ZwLoadDriver, PoRequestPowerIrp, PoStartNextPowerIrp, PoCallDriver, PoSetPowerState, SeSinglePrivilegeCheck, RtlInitAnsiString, MmAddVerifierThunks, MmIsVerifierEnabled, ExAllocatePoolWithTagPriority, ExInitializeNPagedLookasideList, RtlGetAce, RtlAddAccessAllowedAce, RtlCreateAcl, RtlLengthSid, RtlInitializeSid, RtlLengthRequiredSid, RtlMapGenericMask, IoGetFileObjectGenericMapping, ObReleaseObjectSecurity, ObSetSecurityObjectByPointer, RtlSetDaclSecurityDescriptor, RtlSelfRelativeToAbsoluteSD, RtlGetSaclSecurityDescriptor, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, RtlGetDaclSecurityDescriptor, ObGetObjectSecurity, SeExports, SeSetSecurityDescriptorInfo, RtlLengthSecurityDescriptor, RtlCreateSecurityDescriptor, SeUnlockSubjectContext, SeFreePrivileges, SeAppendPrivileges, SeAccessCheck, SeLockSubjectContext, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlQueryRegistryValues, RtlInitUnicodeString, RtlUpcaseUnicodeString, KefAcquireSpinLockAtDpcLevel, KefReleaseSpinLockFromDpcLevel, PsGetCurrentThread, ObfReferenceObject, KeRemoveQueue, PsCreateSystemThread, NtClose, ExQueueWorkItem, ExAllocatePoolWithTag, IoFreeMdl, ExFreePoolWithTag

( 276 exports )
ArcFilterDprIndicateReceive, ArcFilterDprIndicateReceiveComplete, EthFilterDprIndicateReceive, EthFilterDprIndicateReceiveComplete, FddiFilterDprIndicateReceive, FddiFilterDprIndicateReceiveComplete, NDIS_BUFFER_TO_SPAN_PAGES, NdisAcquireReadWriteLock, NdisAcquireSpinLock, NdisAdjustBufferLength, NdisAllocateBuffer, NdisAllocateBufferPool, NdisAllocateFromBlockPool, NdisAllocateMemory, NdisAllocateMemoryWithTag, NdisAllocatePacket, NdisAllocatePacketPool, NdisAllocatePacketPoolEx, NdisAllocateSpinLock, NdisAnsiStringToUnicodeString, NdisBufferLength, NdisBufferVirtualAddress, NdisCancelSendPackets, NdisCancelTimer, NdisClAddParty, NdisClCloseAddressFamily, NdisClCloseCall, NdisClDeregisterSap, NdisClDropParty, NdisClGetProtocolVcContextFromTapiCallId, NdisClIncomingCallComplete, NdisClMakeCall, NdisClModifyCallQoS, NdisClOpenAddressFamily, NdisClRegisterSap, NdisCloseAdapter, NdisCloseConfiguration, NdisCloseFile, NdisCmActivateVc, NdisCmAddPartyComplete, NdisCmCloseAddressFamilyComplete, NdisCmCloseCallComplete, NdisCmDeactivateVc, NdisCmDeregisterSapComplete, NdisCmDispatchCallConnected, NdisCmDispatchIncomingCall, NdisCmDispatchIncomingCallQoSChange, NdisCmDispatchIncomingCloseCall, NdisCmDispatchIncomingDropParty, NdisCmDropPartyComplete, NdisCmMakeCallComplete, NdisCmModifyCallQoSComplete, NdisCmOpenAddressFamilyComplete, NdisCmRegisterAddressFamily, NdisCmRegisterSapComplete, NdisCoAssignInstanceName, NdisCoCreateVc, NdisCoDeleteVc, NdisCoGetTapiCallId, NdisCoRequest, NdisCoRequestComplete, NdisCoSendPackets, NdisCompareAnsiString, NdisCompareUnicodeString, NdisCompleteBindAdapter, NdisCompleteDmaTransfer, NdisCompletePnPEvent, NdisCompleteUnbindAdapter, NdisConvertStringToAtmAddress, NdisCopyBuffer, NdisCopyFromPacketToPacket, NdisCopyFromPacketToPacketSafe, NdisCreateBlockPool, NdisDeregisterProtocol, NdisDeregisterTdiCallBack, NdisDestroyBlockPool, NdisDprAcquireSpinLock, NdisDprAllocatePacket, NdisDprAllocatePacketNonInterlocked, NdisDprFreePacket, NdisDprFreePacketNonInterlocked, NdisDprReleaseSpinLock, NdisEqualString, NdisFreeBuffer, NdisFreeBufferPool, NdisFreeMemory, NdisFreePacket, NdisFreePacketPool, NdisFreeSpinLock, NdisFreeToBlockPool, NdisGeneratePartialCancelId, NdisGetBufferPhysicalArraySize, NdisGetCurrentProcessorCounts, NdisGetCurrentProcessorCpuUsage, NdisGetCurrentSystemTime, NdisGetDriverHandle, NdisGetFirstBufferFromPacket, NdisGetFirstBufferFromPacketSafe, NdisGetPacketCancelId, NdisGetPoolFromPacket, NdisGetReceivedPacket, NdisGetRoutineAddress, NdisGetSharedDataAlignment, NdisGetSystemUpTime, NdisGetVersion, NdisIMAssociateMiniport, NdisIMCancelInitializeDeviceInstance, NdisIMCopySendCompletePerPacketInfo, NdisIMCopySendPerPacketInfo, NdisIMDeInitializeDeviceInstance, NdisIMDeregisterLayeredMiniport, NdisIMGetBindingContext, NdisIMGetCurrentPacketStack, NdisIMGetDeviceContext, NdisIMInitializeDeviceInstance, NdisIMInitializeDeviceInstanceEx, NdisIMNotifyPnPEvent, NdisIMQueueMiniportCallback, NdisIMRegisterLayeredMiniport, NdisIMRevertBack, NdisIMSwitchToMiniport, NdisImmediateReadPciSlotInformation, NdisImmediateReadPortUchar, NdisImmediateReadPortUlong, NdisImmediateReadPortUshort, NdisImmediateReadSharedMemory, NdisImmediateWritePciSlotInformation, NdisImmediateWritePortUchar, NdisImmediateWritePortUlong, NdisImmediateWritePortUshort, NdisImmediateWriteSharedMemory, NdisInitAnsiString, NdisInitUnicodeString, NdisInitializeEvent, NdisInitializeReadWriteLock, NdisInitializeString, NdisInitializeTimer, NdisInitializeWrapper, NdisInterlockedAddLargeInterger, NdisInterlockedAddUlong, NdisInterlockedDecrement, NdisInterlockedIncrement, NdisInterlockedInsertHeadList, NdisInterlockedInsertTailList, NdisInterlockedPopEntryList, NdisInterlockedPushEntryList, NdisInterlockedRemoveHeadList, NdisMAllocateMapRegisters, NdisMAllocateSharedMemory, NdisMAllocateSharedMemoryAsync, NdisMCancelTimer, NdisMCloseLog, NdisMCmActivateVc, NdisMCmCreateVc, NdisMCmDeactivateVc, NdisMCmDeleteVc, NdisMCmRegisterAddressFamily, NdisMCmRequest, NdisMCoActivateVcComplete, NdisMCoDeactivateVcComplete, NdisMCoIndicateReceivePacket, NdisMCoIndicateStatus, NdisMCoReceiveComplete, NdisMCoRequestComplete, NdisMCoSendComplete, NdisMCompleteBufferPhysicalMapping, NdisMCreateLog, NdisMDeregisterAdapterShutdownHandler, NdisMDeregisterDevice, NdisMDeregisterDmaChannel, NdisMDeregisterInterrupt, NdisMDeregisterIoPortRange, NdisMFlushLog, NdisMFreeMapRegisters, NdisMFreeSharedMemory, NdisMGetDeviceProperty, NdisMGetDmaAlignment, NdisMIndicateStatus, NdisMIndicateStatusComplete, NdisMInitializeScatterGatherDma, NdisMInitializeTimer, NdisMMapIoSpace, NdisMPciAssignResources, NdisMPromoteMiniport, NdisMQueryAdapterInstanceName, NdisMQueryAdapterResources, NdisMQueryInformationComplete, NdisMReadDmaCounter, NdisMRegisterAdapterShutdownHandler, NdisMRegisterDevice, NdisMRegisterDmaChannel, NdisMRegisterInterrupt, NdisMRegisterIoPortRange, NdisMRegisterMiniport, NdisMRegisterUnloadHandler, NdisMRemoveMiniport, NdisMResetComplete, NdisMSendComplete, NdisMSendResourcesAvailable, NdisMSetAttributes, NdisMSetAttributesEx, NdisMSetInformationComplete, NdisMSetMiniportSecondary, NdisMSetPeriodicTimer, NdisMSetTimer, NdisMSleep, NdisMStartBufferPhysicalMapping, NdisMSynchronizeWithInterrupt, NdisMTransferDataComplete, NdisMUnmapIoSpace, NdisMWanIndicateReceive, NdisMWanIndicateReceiveComplete, NdisMWanSendComplete, NdisMWriteLogData, NdisMapFile, NdisMatchPdoWithPacket, NdisOpenAdapter, NdisOpenConfiguration, NdisOpenConfigurationKeyByIndex, NdisOpenConfigurationKeyByName, NdisOpenFile, NdisOpenProtocolConfiguration, NdisOverrideBusNumber, NdisPacketPoolUsage, NdisPacketSize, NdisQueryAdapterInstanceName, NdisQueryBindInstanceName, NdisQueryBuffer, NdisQueryBufferOffset, NdisQueryBufferSafe, NdisQueryMapRegisterCount, NdisQueryPendingIOCount, NdisReEnumerateProtocolBindings, NdisReadConfiguration, NdisReadEisaSlotInformation, NdisReadEisaSlotInformationEx, NdisReadMcaPosInformation, NdisReadNetworkAddress, NdisReadPciSlotInformation, NdisReadPcmciaAttributeMemory, NdisRegisterProtocol, NdisRegisterTdiCallBack, NdisReleaseReadWriteLock, NdisReleaseSpinLock, NdisRequest, NdisReset, NdisResetEvent, NdisReturnPackets, NdisScheduleWorkItem, NdisSend, NdisSendPackets, NdisSetEvent, NdisSetPacketCancelId, NdisSetPacketPoolProtocolId, NdisSetPacketStatus, NdisSetProtocolFilter, NdisSetTimer, NdisSetTimerEx, NdisSetupDmaTransfer, NdisSystemProcessorCount, NdisTerminateWrapper, NdisTransferData, NdisUnchainBufferAtBack, NdisUnchainBufferAtFront, NdisUnicodeStringToAnsiString, NdisUnmapFile, NdisUpcaseUnicodeString, NdisUpdateSharedMemory, NdisWaitEvent, NdisWriteConfiguration, NdisWriteErrorLogEntry, NdisWriteEventLogEntry, NdisWritePciSlotInformation, NdisWritePcmciaAttributeMemory, TrFilterDprIndicateReceive, TrFilterDprIndicateReceiveComplete
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: © Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: NDIS 5.1 wrapper driver
original name: NDIS.SYS
internal name: NDIS.SYS
file version.: 5.1.2600.5512 (xpsp.080413-0852)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

[lokilein]

maybe looks suspicious because i reinstalled windows yesterday to see if it fixes the bsod

[Broni]

Ahhhh....that would explain.
The date from on-line scanner seems to be correct:

timedatestamp.....: 0x48025d03 (Sun Apr 13 19:20:35 2008)

Since it's a fresh install, you may as well go back to hardware checking.