BSOD in random time

kosa1910 · 03 Feb 2011

hello,

im new to this forum. My friend has suffered BSOD today (frequently in random time). situations).

It has started today and earlier did not appeared.

I`m not aware how to solve it. Thats is why I would like you to help me

Here is message Windows 7 displays:

Podpis problemu:
Nazwa zdarzenia problemu: BlueScreen
Wersja systemu operacyjnego: 6.1.7600.2.0.0.256.4
Identyfikator ustawień regionalnych: 1045

Dodatkowe informacje o problemie:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF80002C80D45
BCP3: 0000000000000000
BCP4: FFFFFFFFFFFFFFFF
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Pliki pomagające opisać problem:
C:\Windows\Minidump\020311-19687-01.dmp
C:\Users\Dom\AppData\Local\Temp\WER-51308-0.sysdata.xml

I hope that Polish will not be a problem, as my friend is non English speaker.

Thank you very much for every help :)

CarlTR6 · 03 Feb 2011

Hi, kosa, and welcome to the forum. I will look at your dump; but we need more information. Please read this tutorial, follow the instructions and post back. We will be glad to help you.

https://www.sevenforums.com/crashes-d...tructions.html

Bugcheck 1E, MODE_EXCEPTION_NOT_HANDLED. Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

The dump blames ntkrnlmp.exe, which is a Windows system core file and very unlikely to be the real cause of the crash. The dump also indicates memory corruption.

Have your friend uninstall Daemon Tools, Alcohol 120% or whatever CD virtualization software he/she is running. It uses a driver, found in the dump, sptd.sys, that is notorious for causing BSODs. Have him/her use this SPTD uninstaller when done: DuplexSecure - Downloads. Select uninstall; do NOT select reinstall.

Here is a free alternative CD virtualization program that does not use the sptd.sys driver.
Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

Next have your friend uninstall Zone Alarm using this removal tool: http://download.zonealarm.com/bin/fr...cpes_clean.exe. Zone Alarm is notorious for causing BSOD's on some Win 7 systems. Make sure Windows Firewall is turned on.

As an alternative to uninstalling Zone Alarm, your friend can try this Microsoft hotfix: Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F"

Your friend should update the following outdated drivers. Out of date drivers can cause memory corruption and BSOD's.

athrx.sys Tue Jun 09 14:06:49 2009 - Atheros Extensible Wireless LAN driver for CB42/CB43/MB42/MB43 Network Adapter - D-Link AirPlus DWL-G520 Wireless PCI Adapter(rev.B) discontinued 2008. Atheros Communications.

IntcHdmi.sys Tue May 26 07:13:09 2009 - Intel High Definition Audio HDMI Driver. http://downloadcenter.intel.com/Default.aspx.

RTKVHD64.sys Tue Jun 16 06:12:51 2009 - Realtek High Definition Audio Function Driver. Realtek.

Code:

Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c5a000 PsLoadedModuleList = 0xfffff800`02e97e50
Debug session time: Thu Feb  3 11:25:55.740 2011 (GMT-5)
System Uptime: 0 days 0:00:36.519
Loading Kernel Symbols
...............................................................
................................................................
........
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002c80d45, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!KeFlushQueuedDpcs+1f9 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002c80d45, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KeFlushQueuedDpcs+1f9
fffff800`02c80d45 c3              ret

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f020e0
 ffffffffffffffff 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  slui.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002d0ba17 to fffff80002ccbf00

STACK_TEXT:  
fffff880`027f9cd8 fffff800`02d0ba17 : 00000000`0000001e ffffffff`c0000005 fffff800`02c80d45 00000000`00000000 : nt!KeBugCheckEx
fffff880`027f9ce0 fffff800`02ccb542 : fffff880`027fa4b8 00000000`00000000 fffff880`027fa560 fffffa80`03d18a50 : nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`027fa380 fffff800`02cc9e4a : fffffa80`06602b00 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`027fa560 fffff800`02c80d45 : 0050e0c2`4f000000 00000000`00000000 fffff8a0`00c70000 fffffa80`03d18a50 : nt!KiGeneralProtectionFault+0x10a
fffff880`027fa6f8 0050e0c2`4f000000 : 00000000`00000000 fffff8a0`00c70000 fffffa80`03d18a50 fffffa80`03d18a50 : nt!KeFlushQueuedDpcs+0x1f9
fffff880`027fa700 00000000`00000000 : fffff8a0`00c70000 fffffa80`03d18a50 fffffa80`03d18a50 fffffa80`06602b60 : 0x50e0c2`4f000000


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KeFlushQueuedDpcs+1f9
fffff800`02c80d45 c3              ret

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!KeFlushQueuedDpcs+1f9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_0x1E_nt!KeFlushQueuedDpcs+1f9

BUCKET_ID:  X64_0x1E_nt!KeFlushQueuedDpcs+1f9

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`04186000 fffff880`041c4000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`04f93000 fffff880`04fd8000   abkrcqa7 abkrcqa7.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`0102f000 fffff880`01086000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c00000 fffff880`02c8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e00000 fffff880`03e16000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00fe9000 fffff880`00ff4000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00ecd000 fffff880`00ed6000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dc8000 fffff880`00df2000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04021000 fffff880`04179000   athrx    athrx.sys    Tue Jun 09 14:06:49 2009 (4A2EA4B9)
fffff880`0121c000 fffff880`01223000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03d35000 fffff880`03d46000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff960`00720000 fffff960`00747000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
fffff880`00c60000 fffff880`00c8a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ede000 fffff880`00f9e000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`013c7000 fffff880`013f7000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d0e000 fffff880`00d6c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0150b000 fffff880`0157e000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0400f000 fffff880`0401f000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05dd3000 fffff880`05de1000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03c94000 fffff880`03d17000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03d17000 fffff880`03d35000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03bbc000 fffff880`03bcb000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01474000 fffff880`0148a000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03bcb000 fffff880`03bed000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05ded000 fffff880`05df6000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05de1000 fffff880`05ded000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05c00000 fffff880`05c13000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05c13000 fffff880`05c1f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03e38000 fffff880`03f2c000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`03f2c000 fffff880`03f72000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`041c4000 fffff880`041d1000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`00c4c000 fffff880`00c60000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`03e2d000 fffff880`03e38000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`00c00000 fffff880`00c4c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0158f000 fffff880`01599000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0143a000 fffff880`01474000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02c11000 fffff800`02c5a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03f72000 fffff880`03f96000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03a00000 fffff880`03a19000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05df6000 fffff880`05dfe080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`03bed000 fffff880`03bfb000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`017f2000 fffff880`017fb000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`041dd000 fffff880`041fb000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0483b000 fffff880`04f3c4c0   igdkmd64 igdkmd64.sys Tue Jul 21 18:32:45 2009 (4A66420D)
fffff880`03c6a000 fffff880`03c91000   IntcHdmi IntcHdmi.sys Tue May 26 07:13:09 2009 (4A1BCEC5)
fffff880`00fd1000 fffff880`00fd9000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03d46000 fffff880`03d5c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04000000 fffff880`0400f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bb1000 fffff800`00bb4000   kdcom    kdcom.dll    Fri Jan 21 08:17:13 2011 (4D398759)
fffff880`03c00000 fffff880`03c43000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`014f1000 fffff880`0150b000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0179d000 fffff880`017c8000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`03ff2000 fffff880`03ff7200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0227e000 fffff880`02293000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0223a000 fffff880`0225d000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cb6000 fffff880`00cfa000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`02ccf000 fffff880`02cdd000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03db2000 fffff880`03dc1000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02df0000 fffff880`02dfd000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00eb3000 fffff880`00ecd000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d4f000 fffff880`02d5a000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01086000 fffff880`01090000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01493000 fffff880`014f1000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03bb1000 fffff880`03bbc000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e0000 fffff880`017f2000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0164b000 fffff880`0173d000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e16000 fffff880`03e22000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`022e6000 fffff880`022f9000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04800000 fffff880`0482f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03c55000 fffff880`03c6a000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03af9000 fffff880`03b08000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c8a000 fffff880`02ccf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0173d000 fffff880`0179d000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`02d5a000 fffff880`02d6b000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03ba5000 fffff880`03bb1000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c5a000 fffff800`03237000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01224000 fffff880`013c7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01213000 fffff880`0121c000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02293000 fffff880`022e6000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03abd000 fffff880`03ae3000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`0109d000 fffff880`010b2000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f9e000 fffff880`00fd1000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fd9000 fffff880`00fe9000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0157e000 fffff880`0158f000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`03dc1000 fffff880`03dfe000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cfa000 fffff880`00d0e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04fd8000 fffff880`04ffc000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03d5c000 fffff880`03d77000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03d77000 fffff880`03d98000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03d98000 fffff880`03db2000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03b54000 fffff880`03ba5000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03e22000 fffff880`03e2d000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02d34000 fffff880`02d3d000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d3d000 fffff880`02d46000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d46000 fffff880`02d4f000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01400000 fffff880`0143a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`022f9000 fffff880`02311000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03f96000 fffff880`03fd4000   Rt64win7 Rt64win7.sys Thu Jul 30 07:58:43 2009 (4A718AF3)
fffff880`05c22000 fffff880`05dd2e80   RTKVHD64 RTKVHD64.sys Tue Jun 16 06:12:51 2009 (4A377023)
fffff880`01000000 fffff880`0102f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`041d1000 fffff880`041dd000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03b08000 fffff880`03b25000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`017d8000 fffff880`017e0000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`010cd000 fffff880`011f3000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`0401f000 fffff880`04020480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Thu Apr 08 22:45:54 2010 (4BBE94E2)
fffff880`02d89000 fffff880`02d96000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02d6b000 fffff880`02d89000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03b40000 fffff880`03b54000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005e0000 fffff960`005ea000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03c43000 fffff880`03c55000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05c1f000 fffff880`05c20f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03fe1000 fffff880`03ff2000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`02d96000 fffff880`02df0000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04f3d000 fffff880`04f93000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0482f000 fffff880`0483b000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`03fd4000 fffff880`03fe1000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`01090000 fffff880`0109d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00c8a000 fffff880`00c98000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02cff000 fffff880`02d24000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017c8000 fffff880`017d8000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`010b2000 fffff880`010c7000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d6c000 fffff880`00dc8000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01599000 fffff880`015e5000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03a1f000 fffff880`03ab4000   vsdatant vsdatant.sys Sun May 09 12:28:58 2010 (4BE6E2CA)
fffff880`04179000 fffff880`04186000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03ae3000 fffff880`03af9000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03b25000 fffff880`03b40000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02d24000 fffff880`02d34000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03ab4000 fffff880`03abd000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00060000 fffff960`0036f000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff880`011f3000 fffff880`011fc000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0225d000 fffff880`0227e000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`015e5000 fffff880`015f3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015f3000 fffff880`015ff000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0148a000 fffff880`01493000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01200000 fffff880`01213000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

kosa1910 · 11 Apr 2011

hello CarlTR6,

Thank you for your previous reply. The problem still exists.

I have visited instructions u have advised me to see and prepared report of crush dumps.

unfortunately i was not able to run "perfmon /report" as I received error that some error appeared.

I prepared downloads in safe mode of windows, as it is not starting now at all.

If u require any more information please let me know. I will try to deliver it to you.

many thanks in advance for help :)

CarlTR6 · 11 Apr 2011

Hi, Kosa. I looked at the five most recent dumps. The first thing I recommend is that your friend install SP1. Please have him/her visit this link: http://windows.microsoft.com/en-US/w...ice-pack-1-sp1. With SP! installed, we will be able to tell where we stand.

Bugcheck A (2 X), IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Bugcheck 3B (2 X), SYSTEM_SERVICE_EXCEPTION. Usual causes: System service, Device driver, graphics driver, ?memory.

I still see the following outdated drivers. Update them via the links provided.

athrx.sys Tue Jun 09 14:06:49 2009 - Atheros Extensible Wireless LAN driver for CB42/CB43/MB42/MB43 Network Adapter - D-Link AirPlus DWL-G520 Wireless PCI Adapter(rev.B) discontinued 2008. Atheros Communications.

IntcHdmi.sys Tue May 26 07:13:09 2009 - Intel High Definition Audio HDMI Driver. http://downloadcenter.intel.com/Default.aspx.

RTKVHD64.sys Tue Jun 16 06:12:51 2009 - Realtek High Definition Audio Function Driver. Realtek.

I also find this very out of date driver. Update this driver or uninstall InterVideo if there is no update for the driver.

regi.sys Mon Apr 16 11:19:10 2007 - InterVideo driver. Corel Software Support.

I still see Zone Alarm installed. Did you or your friend install this hot fix? Microsoft hotfix: Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F". If not, please do so or uninstall ZA. I do not see this hot fix installed.

Here are your priorities.

1. First and foremost, install SP1.
2. Install the hot fix for ZA.
3. Update the outdated drivers beginning with those having the oldest dates.

Reboot and let's see how the system does. Post back and let us know. If your friend gets another BSOD, run the tool again and upload the files.

How to find drivers -

- I have listed links to most of the drivers in the code box above. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Code:

Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02c1f000 PsLoadedModuleList = 0xfffff800`02e5ce50
Debug session time: Mon Apr 11 03:19:11.705 2011 (GMT-4)
System Uptime: 0 days 0:00:58.484
Loading Kernel Symbols
...............................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002c93cd8, fffff88002960a70, 0}

Probably caused by : ntkrnlmp.exe ( nt!KiTryUnwaitThread+28 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002c93cd8, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88002960a70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KiTryUnwaitThread+28
fffff800`02c93cd8 f0480fba6b4000  lock bts qword ptr [rbx+40h],0

CONTEXT:  fffff88002960a70 -- (.cxr 0xfffff88002960a70)
rax=fffff880029613e8 rbx=5f5c415d4120c483 rcx=fffff80002e09e80
rdx=fffff88000dcf719 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c93cd8 rsp=fffff88002961440 rbp=fffff880029615f0
 r8=0000000000000100  r9=0000000000000000 r10=0000000000000002
r11=fffffa8005da2010 r12=0000000000000000 r13=0000000000000000
r14=fffffa8005de6060 r15=fffff80002e09e80
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
nt!KiTryUnwaitThread+0x28:
fffff800`02c93cd8 f0480fba6b4000  lock bts qword ptr [rbx+40h],0 ds:002b:5f5c415d`4120c4c3=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  AtBroker.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002c93cd8

STACK_TEXT:  
fffff880`02961440 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiTryUnwaitThread+0x28


FOLLOWUP_IP: 
nt!KiTryUnwaitThread+28
fffff800`02c93cd8 f0480fba6b4000  lock bts qword ptr [rbx+40h],0

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!KiTryUnwaitThread+28

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

STACK_COMMAND:  .cxr 0xfffff88002960a70 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!KiTryUnwaitThread+28

BUCKET_ID:  X64_0x3B_nt!KiTryUnwaitThread+28

Followup: MachineOwner
---------

Debug session time: Mon Apr 11 03:22:13.954 2011 (GMT-4)
System Uptime: 0 days 0:01:47.733
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {67060009, 2, 1, fffff80002cf644b}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000067060009, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cf644b, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0e0e0
 0000000067060009 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopCompleteRequest+c88
fffff800`02cf644b 48894108        mov     qword ptr [rcx+8],rax

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  attrib.exe

IRP_ADDRESS:  000000006705ff89

TRAP_FRAME:  fffff880075a33d0 -- (.trap 0xfffff880075a33d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880075a3880 rbx=0000000000000000 rcx=0000000067060001
rdx=fffff880075a3878 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cf644b rsp=fffff880075a3560 rbp=fffff880075a36b0
 r8=fffffa800518cca0  r9=fffff880075a3660 r10=0000000000000002
r11=fffffa8005ff4ae0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!IopCompleteRequest+0xc88:
fffff800`02cf644b 48894108        mov     qword ptr [rcx+8],rax ds:0001:00000000`67060009=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cd5ca9 to fffff80002cd6740

STACK_TEXT:  
fffff880`075a3288 fffff800`02cd5ca9 : 00000000`0000000a 00000000`67060009 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`075a3290 fffff800`02cd4920 : fffff800`00000001 fffffa80`060f7990 fffff880`00c391a0 00000000`00000002 : nt!KiBugCheckDispatch+0x69
fffff880`075a33d0 fffff800`02cf644b : fffff880`075a3730 fffff800`02cdc7ef fffff800`02e50e80 fffffa80`05e30aa0 : nt!KiPageFault+0x260
fffff880`075a3560 fffff800`02cb30b7 : 00000000`67060001 00000000`00000000 fffffa80`05ff4a00 00000000`00000000 : nt!IopCompleteRequest+0xc88
fffff880`075a3630 fffff800`02cb3477 : 00000000`01000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1d7
fffff880`075a36b0 fffff800`02c8ce85 : 00000000`00000000 00000000`00000200 fffffa80`052294f0 fffffa80`05229420 : nt!KiApcInterrupt+0xd7
fffff880`075a3840 fffff800`02fb924c : 00000000`00000000 fffff880`075a3be0 00000000`00000000 00000000`00000000 : nt!ExfWaitForRundownProtectionRelease+0xb5
fffff880`075a38c0 fffff800`02f93735 : 00000000`00000000 fffffa80`060fa060 fffffa80`78457350 fffffa80`05229420 : nt!PspExitThread+0xbc
fffff880`075a3980 fffff800`02cb31cb : 00000000`00000000 00000000`00000000 fffffa80`052294f0 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`075a39b0 fffff800`02cb3610 : 00000000`003b4e80 fffff880`075a3a30 fffff800`02f9384c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`075a3a30 fffff800`02cd5a37 : ffffffff`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
fffff880`075a3b70 00000000`77b6f71a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`01ddee58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b6f71a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02cd4920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

FAILURE_BUCKET_ID:  X64_0xA_nt!KiPageFault+260

BUCKET_ID:  X64_0xA_nt!KiPageFault+260

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`03dba000 fffff880`03df8000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00ec5000 fffff880`00f1c000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c75000 fffff880`02cff000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03a00000 fffff880`03a16000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c4d000 fffff880`00c58000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00c1a000 fffff880`00c23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c23000 fffff880`00c4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`03c55000 fffff880`03dad000   athrx    athrx.sys    Tue Jun 09 14:06:49 2009 (4A2EA4B9)
fffff880`019e3000 fffff880`019ea000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b70000 fffff880`03b81000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0274b000 fffff880`02769000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007a0000 fffff960`007c7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`019b0000 fffff880`019da000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d2c000 fffff880`00dec000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0194a000 fffff880`0197a000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cce000 fffff880`00d2c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04811000 fffff880`04821000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`061bb000 fffff880`061c9000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03acf000 fffff880`03b52000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03b52000 fffff880`03b70000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03ac0000 fffff880`03acf000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01934000 fffff880`0194a000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04000000 fffff880`04022000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`061d5000 fffff880`061de000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`061c9000 fffff880`061d5000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`061de000 fffff880`061f1000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`061f1000 fffff880`061fd000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`05251000 fffff880`05345000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05345000 fffff880`0538b000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03c00000 fffff880`03c0d000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`0113c000 fffff880`01150000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0417a000 fffff880`04185000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010f0000 fffff880`0113c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013da000 fffff880`013e4000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`018fa000 fffff880`01934000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`07378000 fffff880`07381000   gdrv     gdrv.sys     Thu Mar 12 23:22:29 2009 (49B9D175)
fffff800`02c1d000 fffff800`02c66000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0538b000 fffff880`053af000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04036000 fffff880`0404f000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`06000000 fffff880`06008080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04028000 fffff880`04036000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02600000 fffff880`026c8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01474000 fffff880`0147d000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03c19000 fffff880`03c37000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04832000 fffff880`05250b60   igdkmd64 igdkmd64.sys Wed Aug 25 15:35:58 2010 (4C75709E)
fffff880`0419a000 fffff880`041c1000   IntcHdmi IntcHdmi.sys Tue May 26 07:13:09 2009 (4A1BCEC5)
fffff880`00ff5000 fffff880`00ffd000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03b81000 fffff880`03b97000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03c37000 fffff880`03c46000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00b9e000 fffff800`00ba1000   kdcom    kdcom.dll    Fri Jan 21 08:17:13 2011 (4D398759)
fffff880`040cb000 fffff880`0410e000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013af000 fffff880`013c9000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015d1000 fffff880`015fc000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04022000 fffff880`04027200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0197a000 fffff880`0198f000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04076000 fffff880`04099000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c76000 fffff880`00cba000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`04068000 fffff880`04076000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03bed000 fffff880`03bfc000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0404f000 fffff880`0405c000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02769000 fffff880`02781000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02781000 fffff880`027ae000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`027ae000 fffff880`027fc000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0468b000 fffff880`046ae000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01850000 fffff880`0185b000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f25000 fffff880`00f2f000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01150000 fffff880`011ae000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03ab5000 fffff880`03ac0000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01462000 fffff880`01474000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0147f000 fffff880`01571000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03c46000 fffff880`03c52000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02720000 fffff880`02733000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`018ab000 fffff880`018da000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04185000 fffff880`0419a000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c3c000 fffff880`02c4b000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cff000 fffff880`02d44000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01571000 fffff880`015d1000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`0185b000 fffff880`0186c000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03aa9000 fffff880`03ab5000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c66000 fffff800`03243000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
fffff880`0120c000 fffff880`013af000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`019da000 fffff880`019e3000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`026cd000 fffff880`02720000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02c00000 fffff880`02c26000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f6f000 fffff880`00f84000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f3c000 fffff880`00f6f000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013c9000 fffff880`013da000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`046ae000 fffff880`04754000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`041c1000 fffff880`041fe000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cba000 fffff880`00cce000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03a16000 fffff880`03a3a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03a3a000 fffff880`03a55000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`010bf000 fffff880`010e0000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`018da000 fffff880`018f4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a58000 fffff880`03aa9000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04821000 fffff880`0482c000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01835000 fffff880`0183e000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0183e000 fffff880`01847000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01847000 fffff880`01850000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011ae000 fffff880`011e8000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04754000 fffff880`0475c000   regi     regi.sys     Mon Apr 16 11:19:10 2007 (462393EE)
fffff880`02733000 fffff880`0274b000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`053af000 fffff880`053ed000   Rt64win7 Rt64win7.sys Thu Jul 30 07:58:43 2009 (4A718AF3)
fffff880`0600a000 fffff880`061bae80   RTKVHD64 RTKVHD64.sys Tue Jun 16 06:12:51 2009 (4A377023)
fffff880`0475c000 fffff880`04767000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03c0d000 fffff880`03c19000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c4b000 fffff880`02c68000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0145a000 fffff880`01462000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`072e2000 fffff880`07378000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`04600000 fffff880`04667000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`04767000 fffff880`04794000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`03c52000 fffff880`03c53480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`04794000 fffff880`047a6000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0188a000 fffff880`01897000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0186c000 fffff880`0188a000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`01897000 fffff880`018ab000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005f0000 fffff960`005fa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`0410e000 fffff880`04120000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`061fd000 fffff880`061fef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04800000 fffff880`04811000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04120000 fffff880`0417a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03b97000 fffff880`03bed000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0405c000 fffff880`04068000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`053ed000 fffff880`053fa000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00f2f000 fffff880`00f3c000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019ea000 fffff880`019f8000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01800000 fffff880`01825000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0144a000 fffff880`0145a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f84000 fffff880`00f99000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f99000 fffff880`00ff5000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d44000 fffff880`02dd7000   vsdatant vsdatant.sys Mon May 03 13:44:42 2010 (4BDF0B8A)
fffff880`03dad000 fffff880`03dba000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02c26000 fffff880`02c3c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02de0000 fffff880`02dfb000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01825000 fffff880`01835000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e12000 fffff880`00eb6000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb6000 fffff880`00ec5000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dd7000 fffff880`02de0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00040000 fffff960`00350000   win32k   win32k.sys   Tue Jan 04 22:59:44 2011 (4D23ECB0)
fffff880`00f1c000 fffff880`00f25000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04099000 fffff880`040ba000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`0197a000 fffff880`01988000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01988000 fffff880`01994000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01994000 fffff880`0199d000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0199d000 fffff880`019b0000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

kosa1910 · 14 Apr 2011

thank you for replies Carl.

I tried to install both SP and fix for Zone Alarm. Unfortunately I was not able to do it, as everytime i tried to enter Win7 just after welcome screen BSOD appears.
It happens everytime i try to run Win7.

I was not able to install SP and fix after running Win7 in safe mode, as this require to be logged in "normal mode".

Can you give me a clue how to start Win7? Maybe there is information in log I sent earlier about driver or other stuff causing BSOD everytime I run Win7 just after welcome screen.

Many thanks for help and reply!

CarlTR6 · 14 Apr 2011

You are very welcome for the help. You are correct; you do have to be in the normal mode to install updates. Can you boot in the Safe Mode without a BSOD? Have you been able to update any of the drivers that I listed? What I recommend next will be based on the answers to those questions.

There is something you can do in the meantime; you can test your RAM with Memtest. You will need to download Memtest on a different computer so you can create the CD without having a BSOD. Carefully follow the instructions in this tutorial: RAM - Test with Memtest86+. Let Memtest run for a least 7 passes. If you see any errors, you can stop the test. Post back with your results.

kosa1910 · 17 Apr 2011

hello Carl,

earlier windows 7 was starting in safe mode, but from today it is crushing even in safe mode.

It happens always in the same time - when "welcome" sign is displayed.

I did not managed to install any updates - as was not able to run even safe mode.

I will perform memory test today and post back

once again thank you for help

EDIT:

I have run memtest today at night. no errors found :).

I will try today for the last time to update drivers. If i still be no able to run Windows and update drivers/install fix for ZA, I will reinstall windows7 :)

Uploaded with ImageShack.us