Windows 7: Many BSOD on 4 month HP 8540w

Stinus · 01 Feb 2011

Hi,

since I bought my laptop (~ september 2010, HP Elitebook 8540w) I've been experiencing a lot of difficulties with it.

[problem history, may be not so important]
In the first week, when I was installing all my programs etc, my laptop screen sometimes went black, then the fan started to blow extremely loud and all the LEDs under my screen (like volume, wifi on/off, trackpad on/off, numlock, capslock) went on.

I called the servicedesk, and after running some diagnostic tests (by pressing F2 during start up, HP-only I think) it turned out there were some issues with my HDD. De repaircentre at my university replaced the HDD.
---
When I got my laptop back, it still wasn't working. This time in 9/10 startups the BSOD appeared. The laptop went back to the repaircentre, and they replaced the memory.
Now the laptop ran smooth, but Windows 7 32bit was installed (came pre-installed, was advised by the university because some programs run on 32bit).

So I downloaded a legal version of Windows 7 Professional 64bit (from a site, where only students get acces to, http://www.ma3d.com/), and installed it because otherwise I couldn't use the full hardware capacity of my laptop (32bit can't use 4Gb RAM).
[/history]

And now… I have BSOD, again! I’ve had it several times now, and tried to see some kind of pattern in the crashes (like running a specific program), but it seems to occur random.

Beside this problem, there are also some other problems which may relate to the BSOD:

I’ve already had some suggestions te replace my battery with a new one (after a month)
Sometimes windows freezes on startup (on this screen). Pressing the powerbutton shuts down the laptop immediately, instead of pressing for 5 sec.
When turning the laptop in Sleep, it sometimes freezes. The screen turns black, but the fan keeps running and all the lights burning. Only exit is to press the powerbutton for ~5 seconds.

SYSTEM INFORMATION
Is Windows 7 . . .

x86 (32-bit) or x64 ?
Windows 7 Professional 64bit
the original installed OS on the system?
No, downloaded an original version from http://www.ma3d.com/. The original was 32bit, which can’t use the full installed RAM capacity.
an OEM or full retail version?
Free retail
What is the age of system (hardware)?
Bought in start of September. Some components have been replaced (HDD & Memory).
What is the age of OS installation (have you re-installed the OS?)
Installed new Windows after the last repair, should be in October.

So, I hope you guys can give me some ammo for calling the Helpdesk or solving the problems. I’m really sick of all these problems, and I really want it to get fixed.

Thanks in advance!

P.s. the perfmon is in Dutch, hope this won't be a problem.

ttran · 01 Feb 2011

Hi Stinus and welcome to SF!

There are 2 things appeared to be the causes in all of your crashes. First of all, your F-Secure Distributed Firewall Driver was blamed. Please update it or remove it completely (I mean the F-Secure thing)

Try to update the following drivers:

Code:

btwl2cap btwl2cap.sys Fri Apr 03 18:28:45 2009 (49D6A9BD)

This is Broadcom Bluetooth L2CAP Service

Code:

rimspx64 rimspx64.sys Thu Jun 25 01:13:43 2009 (4A4323A7)
rimmpx64 rimmpx64.sys Thu Jun 25 02:04:18 2009 (4A432F82)

It is Ricoh Memory Card Reader driver, you can update this through your HP laptop support site

BUGCHECK SUMMARY:

Code:

BugCheck D1, {28, 2, 0, fffff880040edf7d}

Unable to load image \SystemRoot\System32\drivers\fsdfw.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for fsdfw.sys
*** ERROR: Module load completed but symbols could not be loaded for fsdfw.sys
Probably caused by : fsdfw.sys ( fsdfw+cf7d )

Followup: MachineOwner
---------
BugCheck 9F, {3, fffffa8004b37060, fffff80000b9c518, fffffa80096d1880}

Probably caused by : pci.sys

Followup: MachineOwner
---------

Then, please run system file check and let us know what it say:
System file checker

Best regard,

Tuan

CarlTR6 · 01 Feb 2011

Hi, Stinus. In addition to Tuan's good solid advice, I find some additional sources on conflicts on your system. Thank you for the Perfmon report. Even though it is Dutch, there is enough English in it to easily understand most of it.

It appears that you are running two antivirus programs and two firewalls. Either one of the two is almost guaranteed to cause problems. The rule of thumb is never run two antivirus programs simultaneously. There are a few exceptions to this - Avast and Microsoft Essentials run very well together on most Win 7 systems. Never run two firewalls simultaneously. YOu appear to be running F-Secure and Windows Defender as well as F-Secure firewall and and Windows Firewall.

Many third party antivirus programs and firewalls cause conflicts on Win 7 systems. I recommend that you completley uninstall F-Secure. It is a known cause of BSOD's on some Win 7 systems. Two of your three dumps I looked at directly blame F-Secure for the crash. Use this removal tool: Tool. Download and install Microsoft Security Essentials in its place. MSE superseded Windows Defender, offers superior protection and runs very smoothly with Win 7. Keep Windows Firewall running.

Follow these suggestions, reboot and see how your system runs. Post back and let us know. If you get another BSOD, upload the dumps to us and consider uninstalling Connectify. It has been know to cause BSOD's.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0300e000 PsLoadedModuleList = 0xfffff800`0324be50
Debug session time: Sat Nov  6 09:18:06.909 2010 (GMT-5)
System Uptime: 0 days 22:23:13.125
Loading Kernel Symbols
...............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
.....................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A0, {9, ffffffffc000009c, 1, 0}

Probably caused by : ntkrnlmp.exe ( nt!PopEndMirroring+145 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

INTERNAL_POWER_ERROR (a0)
The power policy manager experienced a fatal error.
Arguments:
Arg1: 0000000000000009, A fatal error occured while preparing the hibernate file.
Arg2: ffffffffc000009c, Status code
Arg3: 0000000000000001, Mirroring phase
Arg4: 0000000000000000

Debugging Details:
------------------


OVERLAPPED_MODULE: Address regions for 'hiber_iaStor' and 'hidusb.sys' overlap

BUGCHECK_STR:  0xA0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800032cb665 to fffff8000307e740

STACK_TEXT:  
fffff880`0a7efb08 fffff800`032cb665 : 00000000`000000a0 00000000`00000009 ffffffff`c000009c 00000000`00000001 : nt!KeBugCheckEx
fffff880`0a7efb10 fffff800`032c7464 : ffffffff`ffffffff ffffffff`ffffffff 00000000`0013b75b 00000000`00000000 : nt!PopEndMirroring+0x145
fffff880`0a7efbe0 fffff800`032cb925 : fffff880`0a7efd00 fffff880`00000007 00000000`00000000 fffffa80`00000007 : nt!MmDuplicateMemory+0xb64
fffff880`0a7efcd0 fffff800`03322c06 : fffffa80`047c5680 fffffa80`0416c530 00000000`00000000 fffff800`030765c7 : nt!PopTransitionToSleep+0xd5
fffff880`0a7efd40 fffff800`0305cc26 : fffff880`030f7180 fffffa80`047c5680 fffff880`031020c0 fffff880`0142da90 : nt!PspSystemThreadStartup+0x5a
fffff880`0a7efd80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!PopEndMirroring+145
fffff800`032cb665 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!PopEndMirroring+145

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA0_nt!PopEndMirroring+145

BUCKET_ID:  X64_0xA0_nt!PopEndMirroring+145

Followup: MachineOwner
---------

Debug session time: Sun Jan 30 17:02:55.355 2011 (GMT-5)
System Uptime: 0 days 0:11:16.682
Loading Kernel Symbols
...............................................................
................................................................
...............................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {28, 2, 0, fffff88000dedf7d}

Unable to load image \SystemRoot\System32\drivers\fsdfw.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for fsdfw.sys
*** ERROR: Module load completed but symbols could not be loaded for fsdfw.sys
Probably caused by : fsdfw.sys ( fsdfw+cf7d )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88000dedf7d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800036b80e0
 0000000000000028 

CURRENT_IRQL:  2

FAULTING_IP: 
fsdfw+cf7d
fffff880`00dedf7d 8b4628          mov     eax,dword ptr [rsi+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff88009532050 -- (.trap 0xfffff88009532050)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000528 rbx=0000000000000000 rcx=0000000000000056
rdx=0000000000000006 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000dedf7d rsp=fffff880095321e0 rbp=00000000fffffb36
 r8=0000000000000028  r9=fffff88009532288 r10=fffff88000dee51c
r11=fffff88009532258 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe nc
fsdfw+0xcf7d:
fffff880`00dedf7d 8b4628          mov     eax,dword ptr [rsi+28h] ds:ea20:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff8000347fca9 to fffff80003480740

STACK_TEXT:  
fffff880`09531f08 fffff800`0347fca9 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09531f10 fffff800`0347e920 : 00000000`00000000 fffff880`095327d0 00000001`00002c04 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`09532050 fffff880`00dedf7d : fffffa80`0867d8a0 fffffa80`08846560 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
fffff880`095321e0 fffffa80`0867d8a0 : fffffa80`08846560 00000000`00000000 00000000`00000000 fffff880`09532890 : fsdfw+0xcf7d
fffff880`095321e8 fffffa80`08846560 : 00000000`00000000 00000000`00000000 fffff880`09532890 fffff880`00dee363 : 0xfffffa80`0867d8a0
fffff880`095321f0 00000000`00000000 : 00000000`00000000 fffff880`09532890 fffff880`00dee363 fffff880`095327d0 : 0xfffffa80`08846560


STACK_COMMAND:  kb

FOLLOWUP_IP: 
fsdfw+cf7d
fffff880`00dedf7d 8b4628          mov     eax,dword ptr [rsi+28h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  fsdfw+cf7d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: fsdfw

IMAGE_NAME:  fsdfw.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4aed1d3e

FAILURE_BUCKET_ID:  X64_0xD1_fsdfw+cf7d

BUCKET_ID:  X64_0xD1_fsdfw+cf7d

Followup: MachineOwner
---------

4: kd> lmtsmn
start             end                 module name
fffff880`04a3f000 fffff880`04a7d000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`05200000 fffff880`0520c000   Accelerometer Accelerometer.sys Wed Jul 08 14:41:38 2009 (4A54E862)
fffff880`00eb7000 fffff880`00f0e000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`04096000 fffff880`04120000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0522a000 fffff880`05240000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011e7000 fffff880`011f2000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`075b8000 fffff880`075c3000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`01199000 fffff880`011a2000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`011a2000 fffff880`011cc000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00850000 fffff960`008b1000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`00f7f000 fffff880`00f8b000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`02d9f000 fffff880`02da6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04314000 fffff880`04325000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05552000 fffff880`05570000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00650000 fffff960`00677000   cdd      cdd.dll      unavailable (00000000)
fffff880`02d6c000 fffff880`02d96000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cce000 fffff880`00d8e000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`013c8000 fffff880`013f8000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c70000 fffff880`00cce000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0520c000 fffff880`05210500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`0147a000 fffff880`014ed000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00f76000 fffff880`00f7f000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`0521a000 fffff880`0522a000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`043f1000 fffff880`043fc000   connctfy connctfy.sys Thu May 27 05:19:35 2010 (4BFE3927)
fffff880`06b72000 fffff880`06b80000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04273000 fffff880`042f6000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`042f6000 fffff880`04314000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`0106c000 fffff880`0107b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`017d2000 fffff880`017e8000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`045a6000 fffff880`045c8000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06b80000 fffff880`06b93000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02c3d000 fffff880`02d59000   dump_iaStor dump_iaStor.sys Fri Aug 07 08:23:37 2009 (4A7C1CC9)
fffff880`06b66000 fffff880`06b72000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`048a1000 fffff880`04995000   dxgkrnl  dxgkrnl.sys  Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`04995000 fffff880`049db000   dxgmms1  dxgmms1.sys  Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`0481d000 fffff880`04866000   e1k62x64 e1k62x64.sys Thu Nov 05 20:36:23 2009 (4AF37D97)
fffff880`0104c000 fffff880`01060000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01000000 fffff880`0104c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`014fe000 fffff880`01508000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`00de1000 fffff880`00df5da0   fsdfw    fsdfw.sys    Sun Nov 01 01:31:42 2009 (4AED1D3E)
fffff880`04084000 fffff880`0408d3a0   fses     fses.sys     Tue Mar 09 06:37:48 2010 (4B96330C)
fffff880`074d6000 fffff880`0750a000   fsgk     fsgk.sys     Tue Sep 21 06:51:16 2010 (4C988E24)
fffff880`041f1000 fffff880`041fd7e0   fshs     fshs.sys     Wed Nov 04 06:34:54 2009 (4AF166DE)
fffff880`0407c000 fffff880`04084000   fsvista  fsvista.sys  Tue Mar 18 02:37:07 2008 (47DF6313)
fffff880`0165f000 fffff880`01699000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01724000 fffff880`0176e000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`053f3000 fffff880`05400000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`039ec000 fffff800`03a35000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`049db000 fffff880`049ff000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04800000 fffff880`04811000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`07518000 fffff880`07531000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`07531000 fffff880`07539080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0750a000 fffff880`07518000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`01655000 fffff880`0165f000   hpdskflt hpdskflt.sys Wed Jul 08 14:41:38 2009 (4A54E862)
fffff880`043d6000 fffff880`043e2000   HpqKbFiltr HpqKbFiltr.sys Wed Apr 29 09:48:30 2009 (49F85AAE)
fffff880`0548a000 fffff880`05552000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0164c000 fffff880`01655000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`043b8000 fffff880`043d6000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0107d000 fffff880`01199000   iaStor   iaStor.sys   Fri Aug 07 08:23:37 2009 (4A7C1CC9)
fffff880`0434b000 fffff880`04361000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`043e2000 fffff880`043f1000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bbc000 fffff800`00bc6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04475000 fffff880`044b8000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01460000 fffff880`0147a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`016f9000 fffff880`01724000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`045c8000 fffff880`045cd200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06a00000 fffff880`06a15000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06bb2000 fffff880`06bd5000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c18000 fffff880`00c5c000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`06b93000 fffff880`06ba1000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`053e4000 fffff880`053f3000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0753a000 fffff880`07547000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00dc7000 fffff880`00de1000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`05570000 fffff880`05588000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05588000 fffff880`055b5000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`05400000 fffff880`0544e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0544e000 fffff880`05471000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`011cc000 fffff880`011d7000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`02c09000 fffff880`02c14000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f17000 fffff880`00f21000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01402000 fffff880`01460000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04071000 fffff880`0407c000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0163a000 fffff880`0164c000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01508000 fffff880`015fa000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05264000 fffff880`05270000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06a68000 fffff880`06a7b000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04200000 fffff880`0422f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0453b000 fffff880`04550000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`041aa000 fffff880`041b9000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04120000 fffff880`04165000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01699000 fffff880`016f9000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`04a9f000 fffff880`051fe000   NETw5s64 NETw5s64.sys Wed Jan 13 11:37:13 2010 (4B4DF6B9)
fffff880`02c14000 fffff880`02c25000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04065000 fffff880`04071000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03410000 fffff800`039ec000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01225000 fffff880`013c8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02d96000 fffff880`02d9f000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04524000 fffff880`0453b000   nusb3hub nusb3hub.sys Fri Nov 20 05:15:57 2009 (4B066C5D)
fffff880`04a0d000 fffff880`04a3d000   nusb3xhc nusb3xhc.sys Fri Nov 20 05:16:01 2009 (4B066C61)
fffff880`10b44000 fffff880`10b45180   nvBridge nvBridge.kmd Thu Jun 03 20:46:40 2010 (4C084CF0)
fffff880`04550000 fffff880`04569000   nvhda64v nvhda64v.sys Thu Jan 28 09:24:54 2010 (4B619E36)
fffff880`0fe05000 fffff880`10b43580   nvlddmkm nvlddmkm.sys Thu Jun 03 21:03:58 2010 (4C0850FE)
fffff880`06a15000 fffff880`06a68000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`0416e000 fffff880`04194000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`10bdc000 fffff880`10bf9000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00f61000 fffff880`00f76000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f21000 fffff880`00f54000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`011d7000 fffff880`011e7000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00d8e000 fffff880`00dc7000   pcmcia   pcmcia.sys   Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`014ed000 fffff880`014fe000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06e7f000 fffff880`06f25000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04569000 fffff880`045a6000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c5c000 fffff880`00c70000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01060000 fffff880`0106be00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`05240000 fffff880`05264000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05270000 fffff880`0528b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0422f000 fffff880`04250000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04250000 fffff880`0426a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04014000 fffff880`04065000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02c32000 fffff880`02c3d000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02de9000 fffff880`02df2000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02df2000 fffff880`02dfb000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c00000 fffff880`02c09000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01600000 fffff880`0163a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04877000 fffff880`0488d000   rimmpx64 rimmpx64.sys Thu Jun 25 04:04:18 2009 (4A432F82)
fffff880`10b9c000 fffff880`10bb3000   rimspx64 rimspx64.sys Thu Jun 25 03:13:43 2009 (4A4323A7)
fffff880`0488d000 fffff880`0489b680   rismcx64 rismcx64.sys Mon Jul 20 05:30:52 2009 (4A64394C)
fffff880`04361000 fffff880`043b8000   rixdpx64 rixdpx64.sys Thu Jun 25 03:38:50 2009 (4A43298A)
fffff880`06a7b000 fffff880`06a93000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`10bbf000 fffff880`10bcd000   scfilter scfilter.sys Mon Jul 13 19:50:17 2009 (4A5BC839)
fffff880`04a7d000 fffff880`04a9d000   sdbus    sdbus.sys    Fri Oct 09 22:41:20 2009 (4ACFF450)
fffff880`06f25000 fffff880`06f30000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04811000 fffff880`0481d000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`041b9000 fffff880`041d6000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`10bb3000 fffff880`10bbf000   SMCLIB   SMCLIB.SYS   Mon Jul 13 20:00:35 2009 (4A5BCAA3)
fffff880`017ca000 fffff880`017d2000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07440000 fffff880`074d6000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06f6f000 fffff880`06fd6000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06f30000 fffff880`06f5d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`06ae4000 fffff880`06b66000   stwrt64  stwrt64.sys  Thu Sep 09 03:12:10 2010 (4C8888CA)
fffff880`0528b000 fffff880`0528c480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0528d000 fffff880`053e4000   SynTP    SynTP.sys    Thu Jun 03 21:27:13 2010 (4C085671)
fffff880`01800000 fffff880`019fd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06f5d000 fffff880`06f6f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02c25000 fffff880`02c32000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01200000 fffff880`0121e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`04000000 fffff880`04014000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`10bcd000 fffff880`10bdc000   tpm      tpm.sys      Mon Jul 13 19:21:48 2009 (4A5BC18C)
fffff960`005d0000 fffff960`005da000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04325000 fffff880`0434b000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`044b8000 fffff880`044ca000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04a3d000 fffff880`04a3ef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04866000 fffff880`04877000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`044ca000 fffff880`04524000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`10b46000 fffff880`10b9c000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00f54000 fffff880`00f61000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02da6000 fffff880`02db4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02db4000 fffff880`02dd9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0176e000 fffff880`0177e000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f8b000 fffff880`00fa0000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00fa0000 fffff880`00ffc000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0177e000 fffff880`017ca000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04a00000 fffff880`04a0d000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`04194000 fffff880`041aa000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`06a93000 fffff880`06a9d000   vwifimp  vwifimp.sys  Mon Jul 13 20:07:28 2009 (4A5BCC40)
fffff880`041d6000 fffff880`041f1000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02dd9000 fffff880`02de9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e04000 fffff880`00ea8000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea8000 fffff880`00eb7000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04165000 fffff880`0416e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00020000 fffff960`00330000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`06ba1000 fffff880`06bb2000   WinUSB   WinUSB.sys   Mon Jul 13 20:06:28 2009 (4A5BCC04)
fffff880`05211000 fffff880`0521a000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f0e000 fffff880`00f17000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06bd5000 fffff880`06bf6000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07547000 fffff880`075b8000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`017e8000 fffff880`017f6000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02c3d000 fffff880`02d59000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02d59000 fffff880`02d6c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Stinus · 01 Feb 2011

Hi ttran and CarlTR6!

First of all, thanks for your clear answers! I wasn't expecting such detailed and personal answers.

As ttran noticed; I've made some modifications to the F-secure Firewall. I don't know if your familiar with F-secure, but it blocks really everything, so I opened some ports so I could use the 'Apple Remote' app on my iPod for controlling iTunes.

I've done the system file check, with the following result:
"Er zijn geen schendingen van de integriteit gevonden."
It's Dutch, and it states something like; 'The integrity isn't corrupted'. So it's all ok!

So I've uninstalled F-secure (thanks for the tool) and installed 'Avira'. According to the 'Consumentenbond' (a dutch company which represents consumers, and tests all kind of products) is this the best free virusscanner (for december 2009, hope it still is and runs smooth with Win 7). Anyway, thanks for your advice, CarlTR6!

And one last question:
The other problems from the first post, do you think these are related to the problems with F-secure? Or do you have any idea what the cause could be?

ttran · 02 Feb 2011

Carl was absolutely right about the 3rd party antivirus and firewall. It's hard to know exactly why those thing is the cause since I'm not a specialist in analyzing that kind of detail.
Anyway, I hope after uninstalling F-secure, u will be fine

CarlTR6 · 02 Feb 2011

You are very welcome for the help. The extra files you uploaded help us to give you better detailed suggestions regarding your system.

Avira may be OK or it may give you trouble. Until you get your system stable and you know it is stable, I do not recommend any third party AV, not even Avast, which runs very well with Win 7. If you get further crashes, uninstall Avira and install Microsoft Security Essentials. Win 7's internal security coding is different than XP's or even Vista's; this causes many third party security programs to conflict.

As Tuan said, it is hard to tell the sources of problems. It usually ends up being a process of elimination. But to anser your question as best I can, it is certainly possible that F-Secure was causing or contributed to the freezes. I am pretty sure it caused some crashes since at least two of your dumps directly blame F-Secure.

Windows 7: Many BSOD on 4 month HP 8540w

Many BSOD on 4 month HP 8540w problems?