BSOD IRQL_NOT_LESS_OR_EQUAL (ntoskrnl.exe (nt+0x70710))

Jaywils23 · 04 Jan 2011

Hello, i've been having a BSOD problem for a fair while. I'm not very good at debugging thse things and was wondering if anyone can help:

Most of the time the crash seems to be caused by ntoskrnl.exe program, with various errors such as: IRQL NOT LESS OR EQUAL, KMODE EXCEPTION NOT HANDLED & CLOCK WATCHDOG TIMEOUT.

My system runs on Home Premium x64 (OEM,Original OS)
The system is around 10months old.

Thank You for your time.

Jay

CarlTR6 · 04 Jan 2011

Hi, Jay, and welcome to the forum. While I am looking at your files, here is some reading on your bugcheck 101 error.

https://www.sevenforums.com/crash-loc...tml#post567135

https://www.sevenforums.com/crashes-d...tml#post356791

I looked at your three latest dumps. One is bugcheck 1E and the other two are bugcheck A. One directly blames hardware; the other two blame a Windows system core file, which is highly unlikely to be the real cause.
both of these reference memory.

Since no specific cause is given, you are going to have to troubleshoot. I suggest you start this process by downloading and installing Revo Uninstaller (free). Use Revo to uninstall Trusteer Rapport. Rapport is known to cause BSOD's on many Win 7 systems. Here is some reading on this subject:

Online Banking Security | Trusteer,

MPECS Inc. Blog: Windows 7 BSODs – RapportPG64.sys is the Culprit

Next, I recommend that you download and install Microsoft Security Essentials. MSE supersedes Windows Defender. It offers better protection and runs well with Win 7. Defender is known to cause conflicts with Win 7. MSE will turn off Defender; you don't need to do anything other than install MSE.

You have three out of date drivers loaded on your system. Outdated drivers can and do cause memory corruption and BSOD's. Update these drivers through the links provided.

ahcix64s.sys Tue Mar 17 02:38:19 2009 - AHCI driver (chipset), Global Provider of Innovative Graphics, Processors and Media Solutions | AMD.

amdsbs.sys Fri Mar 20 14:36:03 2009 - AMD AHCI Compatible Controller driver. AMD.com | Support & Downloads.

usbfilter.sys Fri Apr 03 07:39:51 2009 - AMD USB Filter Driver (likely part of the chipset drivers). AMD.com | Support & Downloads.

Uninstall Rapport, install MSE and update the drivers. Reboot and see if this helps your system. Post back and let us know. If you get another BSOD, upload it and we will go from there.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c5b000 PsLoadedModuleList = 0xfffff800`02e98e50
Debug session time: Fri Dec 31 09:33:36.994 2010 (GMT-5)
System Uptime: 0 days 4:14:52.069
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : hardware ( amdppm!C1Halt+2 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

FAULTING_IP: 
+558952f0228df38
00000000`00000000 ??              ???

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  System

CURRENT_IRQL:  d

EXCEPTION_RECORD:  fffff88002ffb8c8 -- (.exr 0xfffff88002ffb8c8)
ExceptionAddress: fffff80002cd83a8 (nt!KiSecondaryClockInterrupt+0x0000000000000138)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff88002ffb970 -- (.trap 0xfffff88002ffb970)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0f78b39b1738c600 rbx=0000000000000000 rcx=0101000300001f80
rdx=0000000000012eac rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cd83a8 rsp=fffff88002ffbb00 rbp=fffff88002ffbb80
 r8=000000000001683d  r9=0000000000000000 r10=000000000000f2b3
r11=00000000002f9d00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl nz ac pe cy
nt!KiSecondaryClockInterrupt+0x138:
fffff800`02cd83a8 1200            adc     al,byte ptr [rax] ds:bd00:0f78b39b`1738c600=??
Resetting default scope

MISALIGNED_IP: 
nt!KiSecondaryClockInterrupt+138
fffff800`02cd83a8 1200            adc     al,byte ptr [rax]

LAST_CONTROL_TRANSFER:  from fffff80002cc346e to fffff80002ccb710

STACK_TEXT:  
fffff880`02ffa9b8 fffff800`02cc346e : fffffa80`057ea7e0 00000000`00000000 fffff880`02ffb130 fffff800`02cf8668 : nt!KeBugCheck
fffff880`02ffa9c0 fffff800`02cf140d : fffff800`02ed9edc fffff800`02e12dac fffff800`02c5b000 fffff880`02ffb8c8 : nt!KiKernelCalloutExceptionHandler+0xe
fffff880`02ffa9f0 fffff800`02cf8a90 : fffff800`02e1ab14 fffff880`02ffaa68 fffff880`02ffb8c8 fffff800`02c5b000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02ffaa20 fffff800`02d059ef : fffff880`02ffb8c8 fffff880`02ffb130 fffff880`00000000 00000000`00000001 : nt!RtlDispatchException+0x410
fffff880`02ffb100 fffff800`02ccad82 : fffff880`02ffb8c8 00000000`00000000 fffff880`02ffb970 fffff880`02fd3180 : nt!KiDispatchException+0x16f
fffff880`02ffb790 fffff800`02cc968a : fffffa80`0617a7b0 00000000`00000004 fffffa80`06b5e000 fffffa80`061738d0 : nt!KiExceptionDispatch+0xc2
fffff880`02ffb970 fffff800`02cd83a8 : 00000000`00000000 fffff880`02ffbb80 fffff880`02fd3180 00000000`00000001 : nt!KiGeneralProtectionFault+0x10a
fffff880`02ffbb00 fffff880`04b257f2 : fffff800`02cd924a 00000000`003436f7 fffffa80`0569bdd8 fffff880`02fddfc0 : nt!KiSecondaryClockInterrupt+0x138
fffff880`02ffbc98 fffff800`02cd924a : 00000000`003436f7 fffffa80`0569bdd8 fffff880`02fddfc0 00000000`00000001 : amdppm!C1Halt+0x2
fffff880`02ffbca0 fffff800`02cd3ebc : fffff880`02fd3180 fffff880`00000000 00000000`00000000 fffff880`04895588 : nt!PoIdle+0x53a
fffff880`02ffbd80 00000000`00000000 : fffff880`02ffc000 fffff880`02ff6000 fffff880`02ffbd40 00000000`00000000 : nt!KiIdleLoop+0x2c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
amdppm!C1Halt+2
fffff880`04b257f2 c3              ret

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  amdppm!C1Halt+2

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  hardware

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: hardware

FAILURE_BUCKET_ID:  X64_IP_MISALIGNED

BUCKET_ID:  X64_IP_MISALIGNED

Followup: MachineOwner
---------

Debug session time: Tue Jan  4 08:45:28.840 2011 (GMT-5)
System Uptime: 0 days 3:02:12.915
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {80000000, 2, 0, fffff80002cd8d82}

Probably caused by : ntkrnlmp.exe ( nt!KiProcessExpiredTimerList+72 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000080000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cd8d82, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f050e0
 0000000080000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KiProcessExpiredTimerList+72
fffff800`02cd8d82 803818          cmp     byte ptr [rax],18h

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  Wow.exe

TRAP_FRAME:  fffff880009b0680 -- (.trap 0xfffff880009b0680)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000080000000 rbx=0000000000000000 rcx=fffffa8006739100
rdx=0000000000000102 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cd8d82 rsp=fffff880009b0810 rbp=00000000000ab197
 r8=fffff88002fd5301  r9=0000000000000003 r10=0000000000000097
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!KiProcessExpiredTimerList+0x72:
fffff800`02cd8d82 803818          cmp     byte ptr [rax],18h ds:a400:00000000`80000000=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cccca9 to fffff80002ccd740

STACK_TEXT:  
fffff880`009b0538 fffff800`02cccca9 : 00000000`0000000a 00000000`80000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`009b0540 fffff800`02ccb920 : fffffa80`05eb52a8 fffffa80`06739120 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009b0680 fffff800`02cd8d82 : fffffa80`06739120 fffffa80`05474c68 fffffa80`05474c68 00000000`00000102 : nt!KiPageFault+0x260
fffff880`009b0810 fffff800`02cd94be : 00000019`74868a62 fffff880`009b0e88 00000000`000ab197 fffff880`02fd6868 : nt!KiProcessExpiredTimerList+0x72
fffff880`009b0e60 fffff800`02cd8cb7 : fffff880`02fd31c2 fffffa80`000ab197 fffffa80`0589cd38 00000000`00000097 : nt!KiTimerExpiration+0x1be
fffff880`009b0f00 fffff800`02cd3865 : 000004d8`00000000 fffffa80`065946b0 00000000`00000000 fffff880`05298588 : nt!KiRetireDpcList+0x277
fffff880`009b0fb0 fffff800`02cd367c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxRetireDpcList+0x5
fffff880`0aebf060 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiProcessExpiredTimerList+72
fffff800`02cd8d82 803818          cmp     byte ptr [rax],18h

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KiProcessExpiredTimerList+72

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiProcessExpiredTimerList+72

BUCKET_ID:  X64_0xA_nt!KiProcessExpiredTimerList+72

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`056db000 fffff880`05719000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00eb3000 fffff880`00f0a000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d5b000 fffff880`02de5000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05752000 fffff880`05768000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0197d000 fffff880`019cd000   ahcix64s ahcix64s.sys Tue Mar 17 02:38:19 2009 (49BF455B)
fffff880`049a8000 fffff880`049bd000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e4d000 fffff880`00e94000   amdsbs   amdsbs.sys   Fri Mar 20 14:36:03 2009 (49C3E213)
fffff880`010d7000 fffff880`010e2000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07b2f000 fffff880`07b3a000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00e1a000 fffff880`00e23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e23000 fffff880`00e4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`064f2000 fffff880`06514000   AtiHdmi  AtiHdmi.sys  Thu Jan 28 20:03:36 2010 (4B6233E8)
fffff880`04a05000 fffff880`051fa000   atikmdag atikmdag.sys Tue Oct 26 22:29:53 2010 (4CC78EA1)
fffff880`04800000 fffff880`0484b000   atikmpag atikmpag.sys Tue Oct 26 22:14:23 2010 (4CC78AFF)
fffff880`019e5000 fffff880`019ec000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04971000 fffff880`04982000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04701000 fffff880`0471f000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007c0000 fffff960`007e7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`01863000 fffff880`0188d000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d3f000 fffff880`00dff000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0194d000 fffff880`0197d000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ce1000 fffff880`00d3f000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`05742000 fffff880`05752000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06c00000 fffff880`06c0e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04953000 fffff880`04971000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04944000 fffff880`04953000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01937000 fffff880`0194d000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`06551000 fffff880`06573000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06579000 fffff880`065c9000   dump_ahcix64s dump_ahcix64s.sys Tue Mar 17 02:38:19 2009 (49BF455B)
fffff880`06c0e000 fffff880`06c18000   dump_diskdump dump_diskdump.sys Mon Jul 12 23:32:05 2010 (4C3BDE35)
fffff880`065c9000 fffff880`065dc000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`065dc000 fffff880`065e8000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0528f000 fffff880`05383000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05383000 fffff880`053c9000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0112e000 fffff880`01142000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010e2000 fffff880`0112e000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`018fd000 fffff880`01937000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02c14000 fffff800`02c5d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`053c9000 fffff880`053ed000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`06400000 fffff880`06419000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`06419000 fffff880`06421080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`065e8000 fffff880`065f6000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`04639000 fffff880`04701000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`018f4000 fffff880`018fd000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0563b000 fffff880`0564a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06467000 fffff880`06475000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb2000 fffff800`00bbc000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`05249000 fffff880`0528c000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015b9000 fffff880`015e4000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`06573000 fffff880`06578200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`049e7000 fffff880`049fc000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0484b000 fffff880`0486e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cc0000 fffff880`00ccd000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`06475000 fffff880`06483000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0564a000 fffff880`05659000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06422000 fffff880`0642f000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e00000 fffff880`00e1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0471f000 fffff880`04737000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04737000 fffff880`04764000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04764000 fffff880`047b2000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`047b2000 fffff880`047d5000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02d14000 fffff880`02d1f000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f13000 fffff880`00f1d000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01142000 fffff880`011a0000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04939000 fffff880`04944000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`018e2000 fffff880`018f4000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01467000 fffff880`01559000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0578c000 fffff880`05798000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05798000 fffff880`057c7000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`064dd000 fffff880`064f2000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c74000 fffff880`02c83000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c00000 fffff880`02c45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01559000 fffff880`015b9000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02d1f000 fffff880`02d30000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0492d000 fffff880`04939000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c5d000 fffff800`03239000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01249000 fffff880`013ec000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0189f000 fffff880`018a8000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02c4e000 fffff880`02c74000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`05725000 fffff880`05742000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00f5d000 fffff880`00f72000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f1d000 fffff880`00f50000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fe3000 fffff880`00fea000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fea000 fffff880`00ffa000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07069000 fffff880`0710f000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06514000 fffff880`06551000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ccd000 fffff880`00ce1000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0188d000 fffff880`0189f000   RapportPG64 RapportPG64.sys Sun Oct 03 17:40:07 2010 (4CA8F837)
fffff880`05768000 fffff880`0578c000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`057c7000 fffff880`057e2000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`05600000 fffff880`05621000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`05621000 fffff880`0563b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`048dc000 fffff880`0492d000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02cf9000 fffff880`02d02000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d02000 fffff880`02d0b000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d0b000 fffff880`02d14000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`018a8000 fffff880`018e2000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0486e000 fffff880`04886000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05200000 fffff880`0523e000   Rt64win7 Rt64win7.sys Thu Jul 30 07:58:43 2009 (4A718AF3)
fffff880`06c1d000 fffff880`06dff900   RTKVHD64 RTKVHD64.sys Tue Aug 18 05:29:10 2009 (4A8A7466)
fffff880`0710f000 fffff880`0711a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`05719000 fffff880`05725000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c83000 fffff880`02ca0000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0144a000 fffff880`01452000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07a28000 fffff880`07abe000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07159000 fffff880`071c0000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`0711a000 fffff880`07147000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`01075000 fffff880`010d7000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`05659000 fffff880`0565a480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07147000 fffff880`07159000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02d4e000 fffff880`02d5b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02d30000 fffff880`02d4e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`048c8000 fffff880`048dc000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`04887000 fffff880`048c8000   truecrypt truecrypt.sys Sun Sep 05 10:23:16 2010 (4C83A7D4)
fffff960`00430000 fffff960`0043a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04982000 fffff880`049a8000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`057e2000 fffff880`057f4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0644c000 fffff880`06466c00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0642f000 fffff880`0644c000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`06c18000 fffff880`06c19f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`056ca000 fffff880`056db000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`056be000 fffff880`056ca000   usbfilter usbfilter.sys Fri Apr 03 07:39:51 2009 (49D5F587)
fffff880`06483000 fffff880`064dd000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0523e000 fffff880`05249000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05668000 fffff880`056be000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00f50000 fffff880`00f5d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019ec000 fffff880`019fa000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02cc4000 fffff880`02ce9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f72000 fffff880`00f87000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f87000 fffff880`00fe3000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`011a0000 fffff880`011ec000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02ca0000 fffff880`02cbb000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02ce9000 fffff880`02cf9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00c00000 fffff880`00ca4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ca4000 fffff880`00cb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02c45000 fffff880`02c4e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00380000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`049bd000 fffff880`049c6000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f0a000 fffff880`00f13000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`049c6000 fffff880`049e7000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07abe000 fffff880`07b2f000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019cd000 fffff880`019db000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019db000 fffff880`019e5000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01800000 fffff880`01850000   dump_ahcix64
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01850000 fffff880`01863000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Jaywils23 · 05 Jan 2011

Hi, i uninstalled Rapport with Revo & downloaded the latest Catalyst/Driver packs from AMD. Waiting to see if BSOD persists.

Also installed MSE as suggested.

Thanks

CarlTR6 · 05 Jan 2011

Very good. Please let us know how your system is doing. And you are very welcome.

Jaywils23 · 06 Jan 2011

Seems to be alot more stable now, ran for 8 hours (unheard of lately) but got 1 BSOD. Not the IRQL this time though, a 1E.

CarlTR6 · 06 Jan 2011

Glad to hear that your system is more stable now. That is good news and progress.

Bugcheck 1E, KMODE_EXCEPTION_NOT_HANDLED. Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS.

The dump blames hardware; but gives no specific cause. It does show ahcix64s.sys as an unloaded module. This means it was involved in the crash, but not necessarily the cause. This driver is still out of date. I also still see a Rapport driver loaded on your system - RapportPG64.sys. The dump I looked at is the latest you uploaded and dated Jan 5th. Is this before you uninstalled Rapport? Your uploaded $system_list.txt file shows Rapport still on your system.

I also see these outdated drivers loaded on your system. Update these drivers through the links provided.

ahcix64s.sys Tue Mar 17 02:38:19 2009 - AHCI driver (chipset), Global Provider of Innovative Graphics, Processors and Media Solutions | AMD.

amdsbs.sys Fri Mar 20 14:36:03 2009 - AMD AHCI Compatible Controller driver. AMD.com | Support & Downloads.

usbfilter.sys Fri Apr 03 07:39:51 2009 - AMD USB Filter Driver (likely part of the chipset drivers). AMD.com | Support & Downloads.

How to find drivers -

- I have listed links to most of the drivers in the code box above. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

To update a driver, find the driver on the manufacturer's website and download it to your desktop. Unzip the folder to a folder on your desktop. Open the new folder. If there is an .exe file, click on it and it will install the driver. if there is no .exe file, you will have to use Device Manager. Open Device Manager and locate the device associated with the driver you are updating. Right click on that device and click on Properties. Now click on the Driver tab. Click on the Update driver button and select Browse my computer for driver software. Using Browse, navigate to the appropriate folder on your desktop.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c03000 PsLoadedModuleList = 0xfffff800`02e40e50
Debug session time: Wed Jan  5 15:11:13.921 2011 (GMT-5)
System Uptime: 0 days 0:35:06.996
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : hardware ( nt!KiKernelCalloutExceptionHandler+e )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

FAULTING_IP: 
+536d952f019bd828
00000000`00000000 ??              ???

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000000

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  System

CURRENT_IRQL:  2

EXCEPTION_RECORD:  fffff88002ffb3a8 -- (.exr 0xfffff88002ffb3a8)
ExceptionAddress: fffff80002c7ee64 (nt!KiProcessExpiredTimerList+0x0000000000000154)
   ExceptionCode: c000001d (Illegal instruction)
  ExceptionFlags: 00000000
NumberParameters: 0

TRAP_FRAME:  fffff88002ffb450 -- (.trap 0xfffff88002ffb450)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000003 rbx=0000000000000000 rcx=fffffa800720259f
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c7ee64 rsp=fffff88002ffb5e0 rbp=fffffa80072026a8
 r8=fffff88002fd5301  r9=0000000000000002 r10=0000000000000097
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!KiProcessExpiredTimerList+0x154:
fffff800`02c7ee64 06              ???
Resetting default scope

MISALIGNED_IP: 
nt!KiProcessExpiredTimerList+154
fffff800`02c7ee64 06              ???

LAST_CONTROL_TRANSFER:  from fffff80002c6b46e to fffff80002c73710

STACK_TEXT:  
fffff880`02ffa498 fffff800`02c6b46e : fffffa80`04d7d290 fffffa80`04d7d160 fffff880`02ffac10 fffff800`02ca0668 : nt!KeBugCheck
fffff880`02ffa4a0 fffff800`02c9940d : fffff800`02e81b7c fffff800`02dbbe84 fffff800`02c03000 fffff880`02ffb3a8 : nt!KiKernelCalloutExceptionHandler+0xe
fffff880`02ffa4d0 fffff800`02ca0a90 : fffff800`02dc2b14 fffff880`02ffa548 fffff880`02ffb3a8 fffff800`02c03000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`02ffa500 fffff800`02cad9ef : fffff880`02ffb3a8 fffff880`02ffac10 fffff880`00000000 fffff880`02ffb608 : nt!RtlDispatchException+0x410
fffff880`02ffabe0 fffff800`02c72d82 : fffff880`02ffb3a8 fffffa80`072026a8 fffff880`02ffb450 00000000`00000000 : nt!KiDispatchException+0x16f
fffff880`02ffb270 fffff800`02c70edf : fffff880`02ffb450 fffff880`05f74f02 fffffa80`00160300 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`02ffb450 fffff800`02c7ee64 : fffffa80`07202660 fffffa80`0617c168 fffffa80`0617c168 00000000`00000102 : nt!KiInvalidOpcodeFault+0x11f
fffff880`02ffb5e0 fffff800`02c7f4be : 00000004`e7de329e fffff880`02ffbc58 00000000`00020f97 fffff880`02fd6868 : nt!KiProcessExpiredTimerList+0x154
fffff880`02ffbc30 fffff800`02c7ecb7 : 00000001`adcd84c1 00000001`00020f97 00000001`adcd8486 00000000`00000097 : nt!KiTimerExpiration+0x1be
fffff880`02ffbcd0 fffff800`02c7beea : fffff880`02fd3180 fffff880`02fddfc0 00000000`00000000 fffff880`05e82588 : nt!KiRetireDpcList+0x277
fffff880`02ffbd80 00000000`00000000 : fffff880`02ffc000 fffff880`02ff6000 fffff880`02ffbd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiKernelCalloutExceptionHandler+e
fffff800`02c6b46e 90              nop

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!KiKernelCalloutExceptionHandler+e

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  hardware

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: hardware

FAILURE_BUCKET_ID:  X64_IP_MISALIGNED

BUCKET_ID:  X64_IP_MISALIGNED

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`04d04000 fffff880`04d42000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f6f000 fffff880`00fc6000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02caa000 fffff880`02d34000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04d52000 fffff880`04d68000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01430000 fffff880`01480000   ahcix64s ahcix64s.sys Tue Mar 17 02:38:19 2009 (49BF455B)
fffff880`0121a000 fffff880`0122f000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`010a8000 fffff880`010ef000   amdsbs   amdsbs.sys   Fri Mar 20 14:36:03 2009 (49C3E213)
fffff880`01151000 fffff880`0115c000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`0c34c000 fffff880`0c357000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00e9b000 fffff880`00ea4000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dc1000 fffff880`00deb000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`064ee000 fffff880`0650e000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`05668000 fffff880`05e79000   atikmdag atikmdag.sys Thu Nov 25 21:46:44 2010 (4CEF1F94)
fffff880`04c62000 fffff880`04cae000   atikmpag atikmpag.sys Thu Nov 25 21:16:47 2010 (4CEF188F)
fffff880`049a9000 fffff880`049b0000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04891000 fffff880`048a2000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07cd5000 fffff880`07cf3000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006e0000 fffff960`00707000   cdd      cdd.dll      unavailable (00000000)
fffff880`06444000 fffff880`06461000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`04937000 fffff880`04961000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d01000 fffff880`00dc1000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01400000 fffff880`01430000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ca3000 fffff880`00d01000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01490000 fffff880`01503000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04d42000 fffff880`04d52000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06461000 fffff880`0646f000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04873000 fffff880`04891000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04864000 fffff880`04873000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`015de000 fffff880`015f4000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0654b000 fffff880`0656d000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`048d1000 fffff880`04921000   dump_ahcix64s dump_ahcix64s.sys Tue Mar 17 02:38:19 2009 (49BF455B)
fffff880`0646f000 fffff880`06479000   dump_diskdump dump_diskdump.sys Mon Jul 12 23:32:05 2010 (4C3BDE35)
fffff880`04921000 fffff880`04934000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06c00000 fffff880`06c0c000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`05e79000 fffff880`05f6d000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05f6d000 fffff880`05fb3000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`011a8000 fffff880`011bc000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0115c000 fffff880`011a8000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01514000 fffff880`0151e000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`015a4000 fffff880`015de000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`017a6000 fffff880`017f0000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`031df000 fffff800`03228000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`05fb3000 fffff880`05fd7000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`06573000 fffff880`0658c000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0658c000 fffff880`06594080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06c0c000 fffff880`06c1a000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07c0d000 fffff880`07cd5000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01612000 fffff880`0161b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04c3b000 fffff880`04c4a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`065bf000 fffff880`065cd000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb1000 fffff800`00bbb000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0105e000 fffff880`010a1000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0177b000 fffff880`017a6000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`0656d000 fffff880`06572200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0122f000 fffff880`01244000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06400000 fffff880`06423000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c82000 fffff880`00c8f000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`065cd000 fffff880`065db000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04c4a000 fffff880`04c59000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06595000 fffff880`065a2000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e81000 fffff880`00e9b000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04961000 fffff880`0498e000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`07cf3000 fffff880`07d0b000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07d0b000 fffff880`07d38000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07d38000 fffff880`07d86000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07d86000 fffff880`07da9000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`04812000 fffff880`0481d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fcf000 fffff880`00fd9000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01000000 fffff880`0105e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04859000 fffff880`04864000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01600000 fffff880`01612000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01629000 fffff880`0171b000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04d8c000 fffff880`04d98000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04d98000 fffff880`04dc7000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`064d9000 fffff880`064ee000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02da8000 fffff880`02db7000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d34000 fffff880`02d79000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0171b000 fffff880`0177b000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0481d000 fffff880`0482e000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02def000 fffff880`02dfb000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c03000 fffff800`031df000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01258000 fffff880`013fb000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`049a0000 fffff880`049a9000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02d82000 fffff880`02da8000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`05fe3000 fffff880`06000000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e6a000 fffff880`00e71000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e71000 fffff880`00e81000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01503000 fffff880`01514000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0800d000 fffff880`080b3000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0650e000 fffff880`0654b000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c8f000 fffff880`00ca3000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0498e000 fffff880`049a0000   RapportPG64 RapportPG64.sys Sun Oct 03 17:40:07 2010 (4CA8F837)
fffff880`04d68000 fffff880`04d8c000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04dc7000 fffff880`04de2000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04c00000 fffff880`04c21000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04c21000 fffff880`04c3b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c55000 fffff880`02ca6000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`049f3000 fffff880`049fc000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04800000 fffff880`04809000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04809000 fffff880`04812000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0156a000 fffff880`015a4000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`011bc000 fffff880`011d4000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05600000 fffff880`0563e000   Rt64win7 Rt64win7.sys Thu Jul 30 07:58:43 2009 (4A718AF3)
fffff880`06c1d000 fffff880`06dff900   RTKVHD64 RTKVHD64.sys Tue Aug 18 05:29:10 2009 (4A8A7466)
fffff880`080b3000 fffff880`080be000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`05fd7000 fffff880`05fe3000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02db7000 fffff880`02dd4000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`017f0000 fffff880`017f8000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08164000 fffff880`081fa000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`080fd000 fffff880`08164000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`080be000 fffff880`080eb000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`010ef000 fffff880`01151000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`05666000 fffff880`05667480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`080eb000 fffff880`080fd000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0484c000 fffff880`04859000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0482e000 fffff880`0484c000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c41000 fffff880`02c55000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02c00000 fffff880`02c41000   truecrypt truecrypt.sys Sun Sep 05 10:23:16 2010 (4C83A7D4)
fffff960`00400000 fffff960`0040a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`048a2000 fffff880`048c8000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04de2000 fffff880`04df4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`065db000 fffff880`065f5c00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`065a2000 fffff880`065bf000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`06c1a000 fffff880`06c1bf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`05655000 fffff880`05666000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05649000 fffff880`05655000   usbfilter usbfilter.sys Fri Apr 03 07:39:51 2009 (49D5F587)
fffff880`0647f000 fffff880`064d9000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0563e000 fffff880`05649000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04cae000 fffff880`04d04000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`049b0000 fffff880`049be000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`049be000 fffff880`049e3000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0151e000 fffff880`0156a000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02dd4000 fffff880`02def000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`049e3000 fffff880`049f3000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ebc000 fffff880`00f60000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f60000 fffff880`00f6f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d79000 fffff880`02d82000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00030000 fffff960`00340000   win32k   win32k.sys   unavailable (00000000)
fffff880`048c8000 fffff880`048d1000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fc6000 fffff880`00fcf000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06423000 fffff880`06444000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`0c2db000 fffff880`0c34c000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0161b000 fffff880`01629000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01480000 fffff880`0148a000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`048d4000 fffff880`04924000   dump_ahcix64
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04924000 fffff880`04937000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Jaywils23 · 06 Jan 2011

The dump was from after i uninstalled Rapport. Rapport program isn't listed on the uninstall software lists on Revo or in Control Panel, but i still have the rapport icon on my IE. Maybe a plugin survived the uninstall.

I will have another go at finding those 2 drivers too.

CarlTR6 · 06 Jan 2011

Try having Revo look for Trusteer. If that does not work, download and install Ccleaner (free). Ccleaner is a well written cleaning utility and it runs very well in Win 7. If you use the file cleaning portion of Ccleaner - and it is a good idea to clean the useless stuff from your system - make sure that Dump files is NOT checked. I don't recommend this often because there is risk. Use the registry cleaner portion of Ccleaner to find any registry keys related to Trusteer of Rapport. Use Ccleaner's option to back up the registry. Delete any keys that you are positive belong to Rapport.

Using Windows Explorer, navigate to the following locations and delete the drivers. If fact, you can delete all of the Trusteer folders.

C:\Program Files (x86)\Trusteer\Rapport\bin\RapportKE64.sys
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportPG64.sys
C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\19917\RapportCerberus_19917.sys
C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\19514\RapportIaso.sys
C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\21923\RapportIaso.sys
C:\Users\All Users\Trusteer\Rapport\store\exts\RapportCerberus\19917\RapportCerberus_19917.sys
C:\Users\All Users\Trusteer\Rapport\store\exts\RapportMS\19514\RapportIaso.sys
C:\Users\All Users\Trusteer\Rapport\store\exts\RapportMS\21923\RapportIaso.sys

As you can see, Trusteer Rapport entangles well into your system.

Jaywils23 · 06 Jan 2011

I think CCleaner did the trick. I can no longer find any of the files you listed and the IE icon has gone.

Still trying on those 3 drivers but can't same too find any for my chipset (AMD 770). The AMD site itself offers no downloads for 770, maybe too old for support.

CarlTR6 · 06 Jan 2011

Good job on getting rid of Rapport. Ccleaner is a very good utility.

Did you try searching for those specific drivers on the AMD site. I know there is an updated version of usbfilter.sys. Those three drivers are Vista drivers and they may work OK. You might try asking AMD support about updates.