Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Random BSOD crashes and restarts

26 Nov 2009   #1

Windows 7
 
 
Random BSOD crashes and restarts

Hello,

Ive installed Windows 7 64 bits, and I'm getting crashes with BSOD, or just restarts, or sometimes the system just hangs and I have to force a hard reset of the system (i.e. shutdown and start again). They happen at the frequency of about 1 per hour on average, and completely randomly: listening to internet radios, watching youtube videos, playing some mp3, watching a movie, copying files..., even when the system has been completely idle.

I reinstalled the system 3 times. Right now I just got a new fresh installation, plus the Realtek audio drivers 6.0.1.5898 and the ATI Catalyst Control Center 9.11, plus the Adobe Flash Player. But as far as Ive seen, the problem still remains.

I also run the memory test of Windows 7, but the result was ok. On top of that I checked the temperatures of the system and the CPU and they've been always below 40C.

Im not very skilled at computers but in general I like to build my on equipments, and I always managed to figure out the typical problems. However, this time Im completely lost because of the complete random nature of the problem. Could you help me to find out which is the problem?

By the way, exactly the same machine has proven to work perfectly with Ubuntu 9.10. The main components of the hardware are:

i5-750 (LGA1156)
2x Corsair 2GB PC3-10666 XMS3
MSI P55-GD65
Gigabyte HD4850 1GB DDR3
2x 500GB Samsung HD502HI
Power Supply CoolerMaster SilentProM 700

I havent applied any kind of overclocking.

In case it may help, I attached the minidump files that I got since the last reinstallation (before that I collected many more...).

Thank you in advance for your help.

My System SpecsSystem Spec
.

26 Nov 2009   #2

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by sturm314 View Post
Hello,

Ive installed Windows 7 64 bits, and I'm getting crashes with BSOD, or just restarts, or sometimes the system just hangs and I have to force a hard reset of the system (i.e. shutdown and start again). They happen at the frequency of about 1 per hour on average, and completely randomly: listening to internet radios, watching youtube videos, playing some mp3, watching a movie, copying files..., even when the system has been completely idle.

I reinstalled the system 3 times. Right now I just got a new fresh installation, plus the Realtek audio drivers 6.0.1.5898 and the ATI Catalyst Control Center 9.11, plus the Adobe Flash Player. But as far as Ive seen, the problem still remains.

I also run the memory test of Windows 7, but the result was ok. On top of that I checked the temperatures of the system and the CPU and they've been always below 40C.

Im not very skilled at computers but in general I like to build my on equipments, and I always managed to figure out the typical problems. However, this time Im completely lost because of the complete random nature of the problem. Could you help me to find out which is the problem?

By the way, exactly the same machine has proven to work perfectly with Ubuntu 9.10. The main components of the hardware are:

i5-750 (LGA1156)
2x Corsair 2GB PC3-10666 XMS3
MSI P55-GD65
Gigabyte HD4850 1GB DDR3
2x 500GB Samsung HD502HI
Power Supply CoolerMaster SilentProM 700

I havent applied any kind of overclocking.

In case it may help, I attached the minidump files that I got since the last reinstallation (before that I collected many more...).

Thank you in advance for your help.
Hi sturm and welcome

I took a quick look at three of the dmps. all three were similar. All three pointed to memory mangement and corruption.

I would download and run memtestx86 overnight. If there is anything at all heat related in the memory problem it would show up then.

I would also run a system file check
type cmd in search>right click and run as admin> sfc /scannow

I hope this helps and as usual if you have any more upload them so we can narror our focus.


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\112609-17612-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*Symbol information
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a1e000 PsLoadedModuleList = 0xfffff800`02c5be50
Debug session time: Wed Nov 25 18:41:48.670 2009 (GMT-5)
System Uptime: 0 days 0:40:33.090
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050031, 6f8, fffff80002a82f40}

Probably caused by : memory_corruption

Followup: memory_corruption
---------


3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT

Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80002a82f40

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: CODE_CORRUPTION

PROCESS_NAME: explorer.exe

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from fffff80002a8f469 to fffff80002a8ff00

STACK_TEXT:
fffff880`02fd9ce8 fffff800`02a8f469 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff880`02fd9cf0 fffff800`02a8d932 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`02fd9e30 fffff800`02a82f40 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`07c2e000 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeInvalidAccessAllowed


STACK_COMMAND: kb

CHKIMG_EXTENSION: !chkimg -lo 50 -db !nt
16 errors : !nt (fffff80002a82f40-fffff80002a82ff8)
fffff80002a82f40 *54 85 c9 74 4b 0f b7 81 *9b 01 00 00 45 33 c0 48 T..tK.......E3.H
fffff80002a82f50 *84 d1 83 f8 10 74 27 83 *c5 23 74 2b 83 f8 33 75 .....t'..#t+..3u
fffff80002a82f60 *d5 48 8b 0d 78 35 24 00 *b0 39 8a 68 01 00 00 41 .H..x5$..9.h...A
fffff80002a82f70 *4a b6 c0 41 b8 01 00 00 *c3 41 0f 44 c0 c3 48 8b J..A.....A.D..H.
...
fffff80002a82fc0 *56 d9 45 8d 7e 01 48 8b *e0 d0 00 00 00 48 8b 8b V.E.~.H......H..
fffff80002a82fd0 *0e 00 00 00 41 8a d7 be *6b 00 00 00 ff 10 41 3a ....A...k.....A:
fffff80002a82fe0 *e1 0f 84 85 35 09 00 65 *cf 8b 3c 25 88 01 00 00 ....5..e..<%....
fffff80002a82ff0 *4b 88 b4 24 b0 00 00 00 *5c ff 8f c6 01 00 00 f0 K..$....\.......

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: STRIDE

FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_STRIDE

BUCKET_ID: X64_MEMORY_CORRUPTION_STRIDE


Followup: memory_corruption

Hope this helps


Kenn J++
---------
My System SpecsSystem Spec
27 Nov 2009   #3

Windows 7
 
 

Hello Zigzag3143,

First of all, thank you very much for your fast reply. I run memtest86+ overnight (about 7 hours and a half) without any reported error (see the attached screenshot).

After that, I also run a system file check which reported that "Windows Resource Protection did not find any integrity violations".

While runing the sfc for the first time it crashed once again, so I also attached the new minidump file.

Is there anything else that I can do?
My System SpecsSystem Spec
.


27 Nov 2009   #4
Microsoft MVP

 
 

The memory dumps don't have much to say, so I'd suggest running the Driver Verifier until you get a Driver Verifier crash dump that identifies the culprit. Here's the instructions:
Quote:
Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.


So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista Startup Repair feature).


Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Automatically select unsigned drivers" and click "Next"

If no drivers show up, then select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.


Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.


Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.


If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.


More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users
Second memory dump analysis (very similar to the first):
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR\TempDUMP\DATA\01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a4d000 PsLoadedModuleList = 0xfffff800`02c8ae50
Debug session time: Fri Nov 27 02:04:05.982 2009 (GMT-5)
System Uptime: 0 days 0:07:12.402
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 45c70, 2, 467ef}

Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )

Followup: MachineOwner
---------

2: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff80002cf5000
THREAD fffffa800602db60  Cid 0654.06d8  Teb: 000007fffffda000 Win32Thread: 0000000000000000 RUNNING on processor 2
Impersonation token:  fffff8a008a4fa70 (Level Impersonation)
GetUlongFromAddress: unable to read from fffff80002c33b74
Owning Process            fffffa80060f9b30       Image:         TrustedInstall
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      27716        
Context Switch Count      46697             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x0000000077c48f00
Stack Init fffff88003909db0 Current fffff88003908b80
Base fffff8800390a000 Limit fffff88003904000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`039098a8 fffff800`02b4d32c : 00000000`0000004e 00000000`00000099 00000000`00045c70 00000000`00000002 : nt!KeBugCheckEx
fffff880`039098b0 fffff800`02b1db82 : 00000000`00000002 00000000`00000000 fffffa80`00cbf0d0 00000000`00000080 : nt!MiBadShareCount+0x4c
fffff880`039098f0 fffff800`02b7e23d : fffffa80`00cbf0d0 fffff880`03909a40 00000000`00000080 00000000`000bc993 : nt! ?? ::FNODOBFM::`string'+0x11ae2
fffff880`03909950 fffff800`02b2e68e : 00000000`00000002 fffff880`03909a40 fffffa80`060f9ec8 00000000`00000002 : nt!MiRemoveLowestPriorityStandbyPage+0x2ad
fffff880`039099d0 fffff800`02ad91a6 : 00000000`00000001 00000000`031c2ff8 fffff880`03909c20 fffff680`00018e10 : nt! ?? ::FNODOBFM::`string'+0x29c37
fffff880`03909ac0 fffff800`02abcfee : 00000000`00000001 00000000`00010000 00000000`009ac901 00000000`009ac9d8 : nt!MmAccessFault+0x5c6
fffff880`03909c20 000007fe`fe121188 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`03909c20)
00000000`009ac948 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fe121188

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000045c70, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000000467ef, 0

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_99

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  TrustedInstall

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002b4d32c to fffff80002abef00

STACK_TEXT:  
fffff880`039098a8 fffff800`02b4d32c : 00000000`0000004e 00000000`00000099 00000000`00045c70 00000000`00000002 : nt!KeBugCheckEx
fffff880`039098b0 fffff800`02b1db82 : 00000000`00000002 00000000`00000000 fffffa80`00cbf0d0 00000000`00000080 : nt!MiBadShareCount+0x4c
fffff880`039098f0 fffff800`02b7e23d : fffffa80`00cbf0d0 fffff880`03909a40 00000000`00000080 00000000`000bc993 : nt! ?? ::FNODOBFM::`string'+0x11ae2
fffff880`03909950 fffff800`02b2e68e : 00000000`00000002 fffff880`03909a40 fffffa80`060f9ec8 00000000`00000002 : nt!MiRemoveLowestPriorityStandbyPage+0x2ad
fffff880`039099d0 fffff800`02ad91a6 : 00000000`00000001 00000000`031c2ff8 fffff880`03909c20 fffff680`00018e10 : nt! ?? ::FNODOBFM::`string'+0x29c37
fffff880`03909ac0 fffff800`02abcfee : 00000000`00000001 00000000`00010000 00000000`009ac901 00000000`009ac9d8 : nt!MmAccessFault+0x5c6
fffff880`03909c20 000007fe`fe121188 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`009ac948 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fe121188


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`02b4d32c cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner
---------

rax=00000000000467ef rbx=fffffa8000cbf0d0 rcx=000000000000004e
rdx=0000000000000099 rsi=0000000000000080 rdi=fffffa8000d15500
rip=fffff80002abef00 rsp=fffff880039098a8 rbp=0000000000000001
 r8=0000000000045c70  r9=0000000000000002 r10=0000000000000002
r11=0000000000000001 r12=0000000000000001 r13=0000000000000000
r14=0000058000000000 r15=2aaaaaaaaaaaaaab
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
nt!KeBugCheckEx:
fffff800`02abef00 48894c2408      mov     qword ptr [rsp+8],rcx ss:fffff880`039098b0=000000000000004e
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`039098a8 fffff800`02b4d32c : 00000000`0000004e 00000000`00000099 00000000`00045c70 00000000`00000002 : nt!KeBugCheckEx
fffff880`039098b0 fffff800`02b1db82 : 00000000`00000002 00000000`00000000 fffffa80`00cbf0d0 00000000`00000080 : nt!MiBadShareCount+0x4c
fffff880`039098f0 fffff800`02b7e23d : fffffa80`00cbf0d0 fffff880`03909a40 00000000`00000080 00000000`000bc993 : nt! ?? ::FNODOBFM::`string'+0x11ae2
fffff880`03909950 fffff800`02b2e68e : 00000000`00000002 fffff880`03909a40 fffffa80`060f9ec8 00000000`00000002 : nt!MiRemoveLowestPriorityStandbyPage+0x2ad
fffff880`039099d0 fffff800`02ad91a6 : 00000000`00000001 00000000`031c2ff8 fffff880`03909c20 fffff680`00018e10 : nt! ?? ::FNODOBFM::`string'+0x29c37
fffff880`03909ac0 fffff800`02abcfee : 00000000`00000001 00000000`00010000 00000000`009ac901 00000000`009ac9d8 : nt!MmAccessFault+0x5c6
fffff880`03909c20 000007fe`fe121188 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`03909c20)
00000000`009ac948 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fe121188
start             end                 module name
fffff800`00bb2000 fffff800`00bbc000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`02a04000 fffff800`02a4d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff800`02a4d000 fffff800`0302a000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`00c3e000 fffff880`00c82000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00c82000 fffff880`00c96000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00c96000 fffff880`00cf4000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00cf4000 fffff880`00db4000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00db4000 fffff880`00df7000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00e77000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`00eb7000 fffff880`00f5b000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f5b000 fffff880`00f6a000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f6a000 fffff880`00fc1000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00fc1000 fffff880`00fca000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fca000 fffff880`00fd4000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0100b000 fffff880`01067000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01067000 fffff880`0106e000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`0106e000 fffff880`0107e000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0107e000 fffff880`01098000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01098000 fffff880`010a1000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010a1000 fffff880`010cb000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`010cb000 fffff880`010d6000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`010d6000 fffff880`01122000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01122000 fffff880`01136000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01136000 fffff880`01194000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01194000 fffff880`011a4000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`011a4000 fffff880`011ad000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011ad000 fffff880`011b6000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011b6000 fffff880`011bf000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011bf000 fffff880`011ca000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`011ca000 fffff880`011db000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`011db000 fffff880`011f9000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`01200000 fffff880`01225000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01225000 fffff880`013c8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013c8000 fffff880`013e2000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`013e2000 fffff880`013eb000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`013eb000 fffff880`013f9000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01400000 fffff880`01430000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01430000 fffff880`01453000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`01466000 fffff880`01490000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01494000 fffff880`01507000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01507000 fffff880`01518000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`01518000 fffff880`01522000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01522000 fffff880`0156e000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0156e000 fffff880`015a8000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`015a8000 fffff880`015e2000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`015e2000 fffff880`015f8000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`015f8000 fffff880`015ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`0169b000 fffff880`016a3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`016a3000 fffff880`016b5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016b5000 fffff880`016be000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`016c0000 fffff880`017b2000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`017b2000 fffff880`017fc000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`02a00000 fffff880`02a2c000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`02a2c000 fffff880`02a79000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`02a81000 fffff880`02ad4000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02ad4000 fffff880`02ae7000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`02ae7000 fffff880`02aff000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02aff000 fffff880`02bc7000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`02bc7000 fffff880`02be5000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`02be5000 fffff880`02bfd000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`02c8c000 fffff880`02c97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`02c97000 fffff880`02ca6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`02cb2000 fffff880`02d3c000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02d3c000 fffff880`02d81000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`02d81000 fffff880`02d8a000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d8a000 fffff880`02db0000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`02db0000 fffff880`02dc6000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02dc6000 fffff880`02dd5000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02dd5000 fffff880`02df2000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`03e15000 fffff880`03e98000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03e98000 fffff880`03eb6000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03eb6000 fffff880`03ec7000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03ec7000 fffff880`03eed000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03eed000 fffff880`03f03000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03f03000 fffff880`03f35000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`03f35000 fffff880`03f73000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`03f73000 fffff880`03fa2000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03fa2000 fffff880`03fc3000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fc3000 fffff880`03fdd000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03fdd000 fffff880`03fec000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03fec000 fffff880`03ffe000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04200000 fffff880`0420c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0420c000 fffff880`04227000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04227000 fffff880`04232000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`04233000 fffff880`0438b000   athrx    athrx.sys    Tue Jun 09 14:06:49 2009 (4A2EA4B9)
fffff880`0438b000 fffff880`04398000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`04398000 fffff880`043a4000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`043a4000 fffff880`043ad000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`043ad000 fffff880`043bd000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`043bd000 fffff880`043d3000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`043d3000 fffff880`043f7000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`043f7000 fffff880`043f8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04800000 fffff880`04824000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04824000 fffff880`04835000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04835000 fffff880`0488b000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0488b000 fffff880`0489a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`048a1000 fffff880`04ec3000   atikmdag atikmdag.sys Wed Nov 04 11:11:41 2009 (4AF1A7BD)
fffff880`04ec3000 fffff880`04fb7000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04fb7000 fffff880`04ffd000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0500a000 fffff880`05064000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`05064000 fffff880`05079000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`05079000 fffff880`0509a000   AtiHdmi  AtiHdmi.sys  Wed Sep 30 09:54:46 2009 (4AC36326)
fffff880`0509a000 fffff880`050d7000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`050d7000 fffff880`050f9000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`050f9000 fffff880`050fe200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`050ff000 fffff880`05112000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05112000 fffff880`0511e000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0511e000 fffff880`0513b000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0513b000 fffff880`05149000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`05149000 fffff880`05162000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05162000 fffff880`05170000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`05170000 fffff880`0517d000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`0517d000 fffff880`0518b000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0518b000 fffff880`051ae000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`051ae000 fffff880`051c9000   avgntflt avgntflt.sys Tue Mar 24 10:00:46 2009 (49C8E78E)
fffff880`051c9000 fffff880`051de000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c00000 fffff880`05c08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05c0b000 fffff880`05dc8a00   RTKVHD64 RTKVHD64.sys Mon Jul 20 06:52:29 2009 (4A644C6D)
fffff880`05dc9000 fffff880`05dd7000   MBfilt64 MBfilt64.sys Mon Jun 01 06:22:24 2009 (4A23ABE0)
fffff880`05dd7000 fffff880`05de5000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`05de5000 fffff880`05df1000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05df1000 fffff880`05dfa000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05dfa000 fffff880`05dfbf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`05e59000 fffff880`05eff000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05eff000 fffff880`05f0a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`05f0a000 fffff880`05f37000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`05f37000 fffff880`05f49000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`05f49000 fffff880`05fb2000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`0620f000 fffff880`062a7000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`062a7000 fffff880`06318000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff960`000f0000 fffff960`003ff000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff960`00550000 fffff960`0055a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff960`00730000 fffff960`00757000   cdd      cdd.dll      unavailable (00000000)

Unloaded modules:
fffff880`01430000 fffff880`0143e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0143e000 fffff880`0144a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0144a000 fffff880`01453000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01453000 fffff880`01466000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`03f35000 fffff880`03f73000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f6a000 fffff880`00fc1000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02cb2000 fffff880`02d3c000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043bd000 fffff880`043d3000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`010cb000 fffff880`010d6000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`01098000 fffff880`010a1000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010a1000 fffff880`010cb000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04233000 fffff880`0438b000   athrx    athrx.sys    Tue Jun 09 14:06:49 2009 (4A2EA4B9)
fffff880`05079000 fffff880`0509a000   AtiHdmi  AtiHdmi.sys  Wed Sep 30 09:54:46 2009 (4AC36326)
fffff880`048a1000 fffff880`04ec3000   atikmdag atikmdag.sys Wed Nov 04 11:11:41 2009 (4AF1A7BD)
fffff880`051ae000 fffff880`051c9000   avgntflt avgntflt.sys Tue Mar 24 10:00:46 2009 (49C8E78E)
fffff880`015f8000 fffff880`015ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03eb6000 fffff880`03ec7000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02bc7000 fffff880`02be5000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00730000 fffff960`00757000   cdd      cdd.dll      unavailable (00000000)
fffff880`01466000 fffff880`01490000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cf4000 fffff880`00db4000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01400000 fffff880`01430000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c96000 fffff880`00cf4000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01494000 fffff880`01507000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`043ad000 fffff880`043bd000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05dd7000 fffff880`05de5000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e15000 fffff880`03e98000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03e98000 fffff880`03eb6000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c97000 fffff880`02ca6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`015e2000 fffff880`015f8000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`050d7000 fffff880`050f9000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05df1000 fffff880`05dfa000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05de5000 fffff880`05df1000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`050ff000 fffff880`05112000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05112000 fffff880`0511e000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04ec3000 fffff880`04fb7000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04fb7000 fffff880`04ffd000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`01122000 fffff880`01136000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010d6000 fffff880`01122000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01518000 fffff880`01522000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`015a8000 fffff880`015e2000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`017b2000 fffff880`017fc000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a04000 fffff800`02a4d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04800000 fffff880`04824000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05149000 fffff880`05162000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05c00000 fffff880`05c08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0513b000 fffff880`05149000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02aff000 fffff880`02bc7000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`016b5000 fffff880`016be000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03eed000 fffff880`03f03000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0488b000 fffff880`0489a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05162000 fffff880`05170000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb2000 fffff800`00bbc000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`00db4000 fffff880`00df7000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013c8000 fffff880`013e2000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`050f9000 fffff880`050fe200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`051c9000 fffff880`051de000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0518b000 fffff880`051ae000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`05dc9000 fffff880`05dd7000   MBfilt64 MBfilt64.sys Mon Jun 01 06:22:24 2009 (4A23ABE0)
fffff880`00c3e000 fffff880`00c82000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0517d000 fffff880`0518b000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03fdd000 fffff880`03fec000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05170000 fffff880`0517d000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`0107e000 fffff880`01098000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02be5000 fffff880`02bfd000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02a00000 fffff880`02a2c000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`02a2c000 fffff880`02a79000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`01430000 fffff880`01453000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`011bf000 fffff880`011ca000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fca000 fffff880`00fd4000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01136000 fffff880`01194000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c8c000 fffff880`02c97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`016a3000 fffff880`016b5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016c0000 fffff880`017b2000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04200000 fffff880`0420c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02ad4000 fffff880`02ae7000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`03f73000 fffff880`03fa2000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05064000 fffff880`05079000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02dc6000 fffff880`02dd5000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d3c000 fffff880`02d81000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`011ca000 fffff880`011db000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a4d000 fffff800`0302a000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01225000 fffff880`013c8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013e2000 fffff880`013eb000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02a81000 fffff880`02ad4000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02d8a000 fffff880`02db0000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01067000 fffff880`0106e000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`0106e000 fffff880`0107e000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01507000 fffff880`01518000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05e59000 fffff880`05eff000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0509a000 fffff880`050d7000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c82000 fffff880`00c96000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`043d3000 fffff880`043f7000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0420c000 fffff880`04227000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03fa2000 fffff880`03fc3000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fc3000 fffff880`03fdd000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04227000 fffff880`04232000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`011a4000 fffff880`011ad000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011ad000 fffff880`011b6000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011b6000 fffff880`011bf000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0156e000 fffff880`015a8000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02ae7000 fffff880`02aff000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03f03000 fffff880`03f35000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`05c0b000 fffff880`05dc8a00   RTKVHD64 RTKVHD64.sys Mon Jul 20 06:52:29 2009 (4A644C6D)
fffff880`05eff000 fffff880`05f0a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04398000 fffff880`043a4000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02dd5000 fffff880`02df2000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0169b000 fffff880`016a3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`062a7000 fffff880`06318000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`0620f000 fffff880`062a7000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`05f49000 fffff880`05fb2000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`05f0a000 fffff880`05f37000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`043f7000 fffff880`043f8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`05f37000 fffff880`05f49000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`00e6a000 fffff880`00e77000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`011db000 fffff880`011f9000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00550000 fffff960`0055a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03ec7000 fffff880`03eed000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03fec000 fffff880`03ffe000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0511e000 fffff880`0513b000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05dfa000 fffff880`05dfbf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04824000 fffff880`04835000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0500a000 fffff880`05064000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04835000 fffff880`0488b000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`013eb000 fffff880`013f9000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01200000 fffff880`01225000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0100b000 fffff880`01067000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01522000 fffff880`0156e000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0438b000 fffff880`04398000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02db0000 fffff880`02dc6000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01194000 fffff880`011a4000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00eb7000 fffff880`00f5b000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f5b000 fffff880`00f6a000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d81000 fffff880`02d8a000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000f0000 fffff960`003ff000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff880`043a4000 fffff880`043ad000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fc1000 fffff880`00fca000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`01430000 fffff880`0143e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0143e000 fffff880`0144a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0144a000 fffff880`01453000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01453000 fffff880`01466000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000004E
Arguments 00000000`00000099 00000000`00045c70 00000000`00000002 00000000`000467e
My System SpecsSystem Spec
27 Nov 2009   #5

Windows 7
 
 

Hello usasma,

I just run the Driver Verifier, following the procedure from your post. After setting it, I restart the computer and it crashed with a BSOD even before getting to the point where you can introduce your password. After that, it restart automatically and I could get into windows normally.

I repeat the whole procedure a second time, with exactly the same results.

Finally, having started windows normally I tried to play a video (without disabling the Driver Verifier), and after few minutes it crashed again (but this time without any BSOD, but with a quite annoying noise through the loudspeakers. Right now, while writing these lines I still havent disabled the Driver Verifier.

I attach also the 3 minidumps corresponding to all of this.

Thank you very much once again.
My System SpecsSystem Spec
28 Nov 2009   #6
Microsoft MVP

 
 

2 of the 3 minidumps are Verifier enabled minidumps and blame MBfilt64.sys
This driver seems to be associated with your Realtek HiDefinition Audio device - although there's a large number of torrent results in the Google searches that I've done (I don't know if this is significant or not).

I would suggest disabling Driver Verifier using the instructions above.
Then download the latest Audio drivers for your device from the Realtek support website or from the support website of your PC manufacturer.
Once that's done, uninstall the current software from Control Panel...Programs...Uninstall a program
Then install the freshly downloaded drivers and use the system to see if it BSOD's again.

Here's a summary of the 3 memory dumps:
Code:
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Fri Nov 27 21:05:04.128 2009 (GMT-5)
System Uptime: 0 days 0:02:43.580
BugCheck 7F, {8, 80050031, 6f8, fffff80002aa1be8}
Probably caused by : memory_corruption
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  wmplayer.exe
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Fri Nov 27 21:01:46.103 2009 (GMT-5)
System Uptime: 0 days 0:00:15.180
BugCheck A, {0, 2, 0, fffff80002acc0b6}
*** WARNING: Unable to verify timestamp for MBfilt64.sys
*** ERROR: Module load completed but symbols could not be loaded for MBfilt64.sys
Probably caused by : http://www.file.net/process/pd91agents1.exe.html ( MBfilt64+1807 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  System
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Fri Nov 27 20:56:19.087 2009 (GMT-5)
System Uptime: 0 days 0:00:14.539
BugCheck A, {0, 2, 0, fffff80002a830b6}
*** WARNING: Unable to verify timestamp for MBfilt64.sys
*** ERROR: Module load completed but symbols could not be loaded for MBfilt64.sys
Probably caused by : MBfilt64.sys ( MBfilt64+1807 )
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  System
My System SpecsSystem Spec
Reply

 Random BSOD crashes and restarts





Thread Tools



Similar help and support threads for2: Random BSOD crashes and restarts
Thread Forum
Solved (Seemingly) random BSOD crashes and restarts BSOD Help and Support
Random Crashes and Restarts BSOD Help and Support
BSOD and random crashes, restarts BSOD Help and Support
Multiple BSOD`s / Crashes / Unexpected Restarts BSOD Help and Support
Random crashes, restarts, BSODs help please BSOD Help and Support
Random restarts & crashes BSOD Help and Support
Random crashes, Blue Screens and restarts BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:32 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33