BSOD-Almost a year-Need help

maryneedshelp · 21 Feb 2011

Note:Could only get PERFMON to upload, I tried to zip the other requested files jcrgriff2 files but get upload failed message. I will try again.
Hoping you can help-have been working on this alot since December although the problems have been going on almost since we purchased.

Have a Dell Inspiron 580 with Intel Core i3 CPU 530 @2.93GHZ
6GB Ram
64 bit operating system (attempted reinstall 12/28/10 don't know if it took)
Windows 7 came installed when purchased computer
Purchased computer 2/2010
Have had BSOD since about a month after purchase. Have tried to use Event Viewer to figure out causes and deleted things that appeared in error messages such as uninstalling and removing McAfee (then downloading from website), removed Nikon files, updated BIOS, checked all drivers for new software,

Have tried working with Dell service, they had us "reseat" the fan/heat sink, and run diagnostics with no error messages. Ran memory diagnostics today however can't find the results (screen flashed so fast didn't catch it)

Thank you in advance for any help!

fimble · 21 Feb 2011

For your Memory Diagnostics Results open Event Viewer >> System r-click and select Find... Enter MemoryDiagnostics-Results in the Find what: box and select Find Next

maryneedshelp · 21 Feb 2011

I was unable to load the entire zipfile as instructed but
I was able to upload the files by sending each individually zipped.

Thank you again to anyone who can help me.

maryneedshelp · 21 Feb 2011

fimble said:

For your Memory Diagnostics Results open Event Viewer >> System r-click and select Find... Enter MemoryDiagnostics-Results in the Find what: box and select Find Next

I did do this and found a no error result from2/6/11 but not from today.
Thank you.

CarlTR6 · 21 Feb 2011

Good job on uploading the files. Thanks much.

Begin your troubleshooting by uninstalling McAfee using this removal tool: Tool. McAfee is a known cause of BSOD's on some Win 7 systems. Your dump indicates McAfee was involved in the crash. Download and install Microsoft Security Essentials in its place and make sure Windows Firewall is turned on.

Bugcheck 24, NTFS_FILE_SYSTEM. Usual causes: Disk corruption, insufficient physical memory, Device driver, Indexing, Resident antivirus, backup, defrag programs, Disk/Drive failing/failure.

Since the dump blames NTFS.sys, which is your file system, I suggest that you run Check Disk.

Run CHKDSK /R /F from an elevated (Run as adminstrator) Command Prompt. Please do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Windows 7).

Copy/paste the results into your next post.

I hope that simply uninstalling McAfee will solve the problem. Post back and let us know.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03265000 PsLoadedModuleList = 0xfffff800`034a2e50
Debug session time: Mon Feb 21 14:39:26.008 2011 (GMT-5)
System Uptime: 0 days 0:00:34.647
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff88002263238, fffff88002262aa0, fffff800032eaf39}

Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonRead+836 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88002263238
Arg3: fffff88002262aa0
Arg4: fffff800032eaf39

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff88002263238 -- (.exr 0xfffff88002263238)
ExceptionAddress: fffff800032eaf39 (nt!ExIsResourceAcquiredSharedLite+0x0000000000000079)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 00000000001a6f0c
Attempt to read from address 00000000001a6f0c

CONTEXT:  fffff88002262aa0 -- (.cxr 0xfffff88002262aa0)
rax=00000000001a6f04 rbx=fffffa80061afe48 rcx=fffffa80061afe48
rdx=fffffa8006b43180 rsi=fffffa80085e3b60 rdi=0000000000000000
rip=fffff800032eaf39 rsp=fffff88002263470 rbp=0000000000000003
 r8=0000000000000000  r9=0000000000076000 r10=fffffa80091c03f8
r11=fffff88002263678 r12=0000000000060001 r13=0000000000000001
r14=fffff880022636e8 r15=fffff88002263670
iopl=0         nv up di pl nz na pe nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010002
nt!ExIsResourceAcquiredSharedLite+0x79:
fffff800`032eaf39 8b5008          mov     edx,dword ptr [rax+8] ds:002b:00000000`001a6f0c=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  audiodg.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  00000000001a6f0c

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000350d0e0
 00000000001a6f0c 

FOLLOWUP_IP: 
Ntfs!NtfsCommonRead+836
fffff880`0122c5b6 85c0            test    eax,eax

FAULTING_IP: 
nt!ExIsResourceAcquiredSharedLite+79
fffff800`032eaf39 8b5008          mov     edx,dword ptr [rax+8]

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff8800122c5b6 to fffff800032eaf39

STACK_TEXT:  
fffff880`02263470 fffff880`0122c5b6 : fffff8a0`02196140 fffff880`022637c0 fffff8a0`021a10a0 fffff8a0`02196010 : nt!ExIsResourceAcquiredSharedLite+0x79
fffff880`022634a0 fffff880`0122ef78 : fffff880`02263670 fffffa80`091c0010 fffff880`02263701 fffffa80`07127201 : Ntfs!NtfsCommonRead+0x836
fffff880`02263640 fffff880`0100a23f : fffffa80`091c03f8 fffffa80`091c0010 fffffa80`07127220 00000000`00000000 : Ntfs!NtfsFsdRead+0x1b8
fffff880`02263840 fffff880`010086df : fffffa80`079ae040 fffffa80`091c0010 fffffa80`079ae000 fffffa80`091c0010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`022638d0 fffff880`010af204 : fffffa80`091c0010 fffffa80`0741e300 fffffa80`091c0010 00000000`00000043 : fltmgr!FltpDispatch+0xcf
fffff880`02263930 fffffa80`091c0010 : fffffa80`0741e300 fffffa80`091c0010 00000000`00000043 fa80091b`66680420 : mfehidk+0x48204
fffff880`02263938 fffffa80`0741e300 : fffffa80`091c0010 00000000`00000043 fa80091b`66680420 00000000`000007ff : 0xfffffa80`091c0010
fffff880`02263940 fffffa80`091c0010 : 00000000`00000043 fa80091b`66680420 00000000`000007ff fffffa80`079c0640 : 0xfffffa80`0741e300
fffff880`02263948 00000000`00000043 : fa80091b`66680420 00000000`000007ff fffffa80`079c0640 fffffa80`079ae040 : 0xfffffa80`091c0010
fffff880`02263950 fa80091b`66680420 : 00000000`000007ff fffffa80`079c0640 fffffa80`079ae040 fffffa80`091c0010 : 0x43
fffff880`02263958 00000000`000007ff : fffffa80`079c0640 fffffa80`079ae040 fffffa80`091c0010 fffffa80`091c03f8 : 0xfa80091b`66680420
fffff880`02263960 fffffa80`079c0640 : fffffa80`079ae040 fffffa80`091c0010 fffffa80`091c03f8 ff0c0101`55555555 : 0x7ff
fffff880`02263968 fffffa80`079ae040 : fffffa80`091c0010 fffffa80`091c03f8 ff0c0101`55555555 fffffa80`0741e3e0 : 0xfffffa80`079c0640
fffff880`02263970 fffffa80`091c0010 : fffffa80`091c03f8 ff0c0101`55555555 fffffa80`0741e3e0 fffffa80`0741e3e0 : 0xfffffa80`079ae040
fffff880`02263978 fffffa80`091c03f8 : ff0c0101`55555555 fffffa80`0741e3e0 fffffa80`0741e3e0 fffff800`032c71f2 : 0xfffffa80`091c0010
fffff880`02263980 ff0c0101`55555555 : fffffa80`0741e3e0 fffffa80`0741e3e0 fffff800`032c71f2 fffffa80`091c0030 : 0xfffffa80`091c03f8
fffff880`02263988 fffffa80`0741e3e0 : fffffa80`0741e3e0 fffff800`032c71f2 fffffa80`091c0030 fffffa80`091c0b20 : 0xff0c0101`55555555
fffff880`02263990 fffffa80`0741e3e0 : fffff800`032c71f2 fffffa80`091c0030 fffffa80`091c0b20 00000000`00000043 : 0xfffffa80`0741e3e0
fffff880`02263998 fffff800`032c71f2 : fffffa80`091c0030 fffffa80`091c0b20 00000000`00000043 fffff800`032a6e1a : 0xfffffa80`0741e3e0
fffff880`022639a0 fffff800`032c74f5 : 00000000`00000001 00000000`00000001 fffff880`02263a60 00000000`00000021 : nt!IoPageRead+0x252
fffff880`02263a30 fffff800`032f08bb : 00000000`00000000 00000000`00000000 ffffffff`ffffffff 00000000`00000000 : nt!MiIssueHardFault+0x255
fffff880`02263ac0 fffff800`032d382e : 00000000`00000000 00000000`0001759c 00000000`00ddc201 00000000`00ddc220 : nt!MmAccessFault+0x14bb
fffff880`02263c20 00000000`773851df : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`00ddb640 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773851df


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  Ntfs!NtfsCommonRead+836

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff88002262aa0 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonRead+836

BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonRead+836

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`00ec1000 fffff880`00f18000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03cca000 fffff880`03d54000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03fa2000 fffff880`03fb8000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dda000 fffff880`00de5000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00e00000 fffff880`00e09000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00db0000 fffff880`00dda000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`017d5000 fffff880`017dc000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03ee0000 fffff880`03ef1000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03702000 fffff880`03720000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00680000 fffff960`006a7000   cdd      cdd.dll      unavailable (00000000)
fffff880`0539a000 fffff880`053b7000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`017a2000 fffff880`017cc000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`06361000 fffff880`0636e980   cfwids   cfwids.sys   Wed Oct 06 16:00:36 2010 (4CACD564)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0173c000 fffff880`0176c000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d38000 fffff880`00d96000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01150000 fffff880`011c3000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`051df000 fffff880`051ef000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`053b7000 fffff880`053c5000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03ec2000 fffff880`03ee0000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03eb3000 fffff880`03ec2000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01726000 fffff880`0173c000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04000000 fffff880`04022000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`053d1000 fffff880`053da000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`053c5000 fffff880`053d1000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`053da000 fffff880`053ed000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`058b6000 fffff880`058c2000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0502d000 fffff880`05121000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05121000 fffff880`05167000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`01053000 fffff880`01067000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01007000 fffff880`01053000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013eb000 fffff880`013f5000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`016ec000 fffff880`01726000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0166c000 fffff880`016b6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`0321c000 fffff800`03265000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03f2d000 fffff880`03f51000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05167000 fffff880`05178000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`058d0000 fffff880`058e9000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`058e9000 fffff880`058f1080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`058c2000 fffff880`058d0000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0363a000 fffff880`03702000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01491000 fffff880`0149a000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0460e000 fffff880`0502cb60   igdkmd64 igdkmd64.sys Wed Aug 25 15:35:58 2010 (4C75709E)
fffff880`04022000 fffff880`04060000   IntcDAud IntcDAud.sys Sat Sep 26 10:42:55 2009 (4ABE286F)
fffff880`03f17000 fffff880`03f2d000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03f51000 fffff880`03fa2000   k57nd60a k57nd60a.sys Fri Oct 16 06:29:38 2009 (4AD84B12)
fffff880`03dec000 fffff880`03dfb000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`058f2000 fffff880`05900000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bd5000 fffff800`00bdf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`040de000 fffff880`04121000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013c0000 fffff880`013da000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05600000 fffff880`05605200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`059d1000 fffff880`059e6000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05920000 fffff880`05943000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`0591b000 fffff880`0591f380   lvbflt64 lvbflt64.sys Tue Nov 09 21:36:25 2010 (4CDA0529)
fffff880`06326000 fffff880`06330000   LVPr2M64 LVPr2M64.sys Fri May 07 21:38:16 2010 (4BE4C088)
fffff880`0597f000 fffff880`059d0d00   lvrs64   lvrs64.sys   Tue Nov 09 21:36:46 2010 (4CDA053E)
fffff880`02404000 fffff880`027faa80   lvuvc64  lvuvc64.sys  Tue Nov 09 21:37:14 2010 (4CDA055A)
fffff880`00ce0000 fffff880`00d24000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`040a4000 fffff880`040d0800   mfeavfk  mfeavfk.sys  Wed Oct 06 15:56:49 2010 (4CACD481)
fffff880`0584c000 fffff880`058b5780   mfefirek mfefirek.sys Wed Oct 06 15:59:47 2010 (4CACD533)
fffff880`01067000 fffff880`010e5c80   mfehidk  mfehidk.sys  Wed Oct 06 15:55:49 2010 (4CACD445)
fffff880`03d83000 fffff880`03d93900   mfenlfk  mfenlfk.sys  Wed Oct 06 15:56:13 2010 (4CACD45D)
fffff880`03c16000 fffff880`03c59200   mfewfpk  mfewfpk.sys  Wed Oct 06 15:56:04 2010 (4CACD454)
fffff880`0590d000 fffff880`0591b000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03c00000 fffff880`03c0f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05900000 fffff880`0590d000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d96000 fffff880`00db0000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03720000 fffff880`03738000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03738000 fffff880`03765000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`03765000 fffff880`037b3000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`037b3000 fffff880`037d6000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01650000 fffff880`0165b000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f21000 fffff880`00f2b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010f2000 fffff880`01150000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03ea8000 fffff880`03eb3000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0147f000 fffff880`01491000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014ad000 fffff880`0159f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`051ef000 fffff880`051fb000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03e00000 fffff880`03e2f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0418d000 fffff880`041a2000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03d94000 fffff880`03da3000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03c85000 fffff880`03cca000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0159f000 fffff880`015ff000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0165b000 fffff880`0166c000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e9c000 fffff880`03ea8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03265000 fffff800`03841000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0121d000 fffff880`013c0000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`017cc000 fffff880`017d5000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`03d5d000 fffff880`03d83000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f6b000 fffff880`00f80000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f2b000 fffff880`00f5e000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ff1000 fffff880`00ff8000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00cc0000 fffff880`00cd0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013da000 fffff880`013eb000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`052f4000 fffff880`0539a000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`041a2000 fffff880`041df000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d24000 fffff880`00d38000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`010e6000 fffff880`010f1e00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
fffff880`03fb8000 fffff880`03fdc000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03e2f000 fffff880`03e4a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03fdc000 fffff880`03ffd000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03dd2000 fffff880`03dec000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e4b000 fffff880`03e9c000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`01635000 fffff880`0163e000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0163e000 fffff880`01647000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01647000 fffff880`01650000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011c3000 fffff880`011fd000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`059e6000 fffff880`059fe000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0561c000 fffff880`057fe900   RTKVHD64 RTKVHD64.sys Tue Aug 18 05:29:10 2009 (4A8A7466)
fffff880`053ed000 fffff880`053f8000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01477000 fffff880`0147f000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06290000 fffff880`06326000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`0523f000 fffff880`052a6000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`05200000 fffff880`0522d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`051fb000 fffff880`051fc480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`02a03000 fffff880`02c00000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0522d000 fffff880`0523f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`03c5a000 fffff880`03c67000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`03c67000 fffff880`03c85000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03dbe000 fffff880`03dd2000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00500000 fffff960`0050a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03ef1000 fffff880`03f17000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04121000 fffff880`04133000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05964000 fffff880`0597ec00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04060000 fffff880`0407d000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05606000 fffff880`05607f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`05178000 fffff880`05189000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04133000 fffff880`0418d000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`05189000 fffff880`051df000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0407d000 fffff880`04089000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`05608000 fffff880`05619000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`04089000 fffff880`040a4000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00f5e000 fffff880`00f6b000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`017dc000 fffff880`017ea000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01600000 fffff880`01625000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f80000 fffff880`00f95000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f95000 fffff880`00ff1000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0142b000 fffff880`01477000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03da3000 fffff880`03dbe000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01625000 fffff880`01635000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e0e000 fffff880`00eb2000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb2000 fffff880`00ec1000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03d54000 fffff880`03d5d000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000e0000 fffff960`003ef000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`00f18000 fffff880`00f21000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`05943000 fffff880`05964000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`06330000 fffff880`06361000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`0176c000 fffff880`0177a000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0177a000 fffff880`01786000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01786000 fffff880`0178f000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0178f000 fffff880`017a2000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

maryneedshelp · 22 Feb 2011

That took awhile!
I did the mcafee removal and installed the microsoft one.
Ran chkdsk
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 2/22/2011 12:18:52 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer:mynamewasherePC
Description:

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
266240 file records processed.
File verification completed.
384 large file records processed.
0 bad file records processed.
0 EA records processed.
60 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
320402 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
266240 file SDs/SIDs processed.
Cleaning up 78 unused index entries from index $SII of file 0x9.
Cleaning up 78 unused index entries from index $SDH of file 0x9.
Cleaning up 78 unused security descriptors.
Security descriptor verification completed.
27082 data files processed.
CHKDSK is verifying Usn Journal...
36406840 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
266224 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
211263388 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
961360599 KB total disk space.
115808432 KB in 143338 files.
98780 KB in 27083 indexes.
0 KB in bad sectors.
399835 KB in use by the system.
65536 KB occupied by the log file.
845053552 KB available on disk.
4096 bytes in each allocation unit.
240340149 total allocation units on disk.
211263388 allocation units available on disk.
Internal Info:
00 10 04 00 c1 99 02 00 2b cb 04 00 00 00 00 00 ........+.......
37 2c 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 7,..<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-22T05:18:52.000000000Z" />
<EventRecordID>246355</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>mynamewashere-PC</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
266240 file records processed.
File verification completed.
384 large file records processed.
0 bad file records processed.
0 EA records processed.
60 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
320402 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
266240 file SDs/SIDs processed.
Cleaning up 78 unused index entries from index $SII of file 0x9.
Cleaning up 78 unused index entries from index $SDH of file 0x9.
Cleaning up 78 unused security descriptors.
Security descriptor verification completed.
27082 data files processed.
CHKDSK is verifying Usn Journal...
36406840 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
266224 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
211263388 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
961360599 KB total disk space.
115808432 KB in 143338 files.
98780 KB in 27083 indexes.
0 KB in bad sectors.
399835 KB in use by the system.
65536 KB occupied by the log file.
845053552 KB available on disk.
4096 bytes in each allocation unit.
240340149 total allocation units on disk.
211263388 allocation units available on disk.
Internal Info:
00 10 04 00 c1 99 02 00 2b cb 04 00 00 00 00 00 ........+.......
37 2c 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 7,..<...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

Here is a warning that was rec'd:
Log Name: System
Source: Microsoft-Windows-Kernel-PnP
Date: 2/22/2011 12:17:01 AM
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: SYSTEM
Computer: mynamewashere-PC
Description:
The driver \Driver\usbccgp failed to load for the device USB\VID_03F0&PID_5211\MY5CDB31XY045M.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-02-22T05:17:01.909630500Z" />
<EventRecordID>597105</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="388" />
<Channel>System</Channel>
<Computer>mynamewashere</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriverNameLength">36</Data>
<Data Name="DriverName">USB\VID_03F0&PID_5211\MY5CDB31XY045M</Data>
<Data Name="Status">3221226092</Data>
<Data Name="FailureNameLength">15</Data>
<Data Name="FailureName">\Driver\usbccgp</Data>
<Data Name="Version">0</Data>
</EventData>
</Event>
AND here is one after the second restart
Log Name: System
Source: Microsoft Antimalware
Date: 2/22/2011 12:18:36 AM
Event ID: 3002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: mynamewashere-PC
Description:
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
Feature: Network Inspection System
Error Code: 0x8007042c
Error description: The dependency service or group failed to start.
Reason: The system is missing updates that are required for running Network Inspection System. Install the required updates and restart the computer.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Microsoft Antimalware" />
<EventID Qualifiers="0">3002</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-22T05:18:36.000000000Z" />
<EventRecordID>597245</EventRecordID>
<Channel>System</Channel>
<Computer>mynamewashere-PC</Computer>
<Security />
</System>
<EventData>
<Data>%%860</Data>
<Data>3.0.8107.0</Data>
<Data>%%886</Data>
<Data>%%892</Data>
<Data>0x8007042c</Data>
<Data>The dependency service or group failed to start. </Data>
<Data>9</Data>
</EventData>
</Event>

maryneedshelp · 22 Feb 2011

Shut down for 6 hours including disconecting DSL box, still crashes within minutes of startup. Before shutdown I tried to install new HP Driver for printer however rec'd fatal error during installation and downloaded their hp installation solution. I have yet to tell if driver was updated.

This mornings Error Messages in Event Veiwer include 2
Date: 2/22/2011 9:14:48 AM
Event ID: 3002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: myname-PC
Description:
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.
Feature: Network Inspection System
Error Code: 0x8007042c
Error description: The dependency service or group failed to start.
Reason: The system is missing updates that are required for running Network Inspection System. Install the required updates and restart the computer.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Antimalware" />
<EventID Qualifiers="0">3002</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-02-22T14:14:48.000000000Z" />
<EventRecordID>597874</EventRecordID>
<Channel>System</Channel>
<Computer>myname-PC</Computer>
<Security />
</System>
<EventData>
<Data>%%860</Data>
<Data>3.0.8107.0</Data>
<Data>%%886</Data>
<Data>%%892</Data>
<Data>0x8007042c</Data>
<Data>The dependency service or group failed to start. </Data>
<Data>9</Data>
</EventData>
</Event>
However also a warning was rec'd before the critical error of 41
probably because I was disconnected from dsl still
Log Name: System
Source: Microsoft-Windows-DNS-Client
Date: 2/22/2011 9:15:02 AM
Event ID: 1014
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: myname-PC
Description:
Name resolution for the name cr-tools.clients.google.com timed out after none of the configured DNS servers responded.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
<EventID>1014</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2011-02-22T14:15:02.320859600Z" />
<EventRecordID>597894</EventRecordID>
<Correlation />
<Execution ProcessID="1144" ThreadID="1188" />
<Channel>System</Channel>
<Computer>myname</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="QueryName">cr-tools.clients.google.com</Data>
<Data Name="AddressLength">16</Data>
<Data Name="Address">020000350A0000010000000000000000</Data>
</EventData>
</Event>

CarlTR6 · 22 Feb 2011

Your file system looks fine and you have no bad sectors on your hard drive.

Have you rebooted since you connected back to ADSL and did you get another BSOD?

Having only one dump to work from makes it a little more difficult as we cannot see trends. If you could zip your most recent six dumps it may help us. The dump you supplied shows an uptime of only 34 seconds. If this is a trend, it can indicate a hardware problem such as a faulty power supply or faulty RAM. Can you run in the Safe mode without BSOD's or crashes?

I suggest your test your RAM with Memtest86. This runs outside of Windows so any Windows related problems will not affect it. Follow the instructions in this tutorial: RAM - Test with Memtest86+. Run Memtest from a cold boot after your computer has been off of at least an hour. Let it run for a minimum of seven passes. This will take six to eight hours. Any errors will show on your screen in red. If you see errors you can stop the test. Post back with your results.

maryneedshelp · 22 Feb 2011

Haven't had as many crashes today however new types seem to pop up, here is the latest minidump. If someone would be able to translate it into something I could understand, I'd appreciate it!
Also Still getting the error message about
Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Network Inspection System
I've googled that and see mention a KB981889 from microsoft to be installed, i am trying to see if i can figure out how to do that.
And the printer-I removed it and reinstalled it. It seems like I have two drivers for the printer (including the newer one I was trying for). Printer works and haven't seen any event viewer events regarding the printer since last night.

maryneedshelp · 22 Feb 2011

Did that minidump attach?

BSOD-Almost a year-Need help

BSOD-Almost a year-Need help

Uploaded individual files since couldn't do the folder

To fimble

CHKDSK results & errors from the restart crash

Crashing at startup, Microsoft Antimalware?

Latest crashes