jcgriff2
Account closed
So I ran Driver Verifier. I was one of those cases where it crashes before any information is given. I am using "System Restore" right now.
What was I trying to learn by running Driver Verifier, and was it a bad thing that I had to system restore?
I will continue looking for that driver update.
(Also, here is the minidump error file that I got, it was a "c4" error this time.)
Hi -
The bugcheck 0xc4 is a very good outcome when running the driver verifier. It is perfectly normal to have to use system restore to bring the system back up after the driver verifier flags a driver.
0xc4 = the driver verifier detected a violation - i.e., it flagged a problematic driver - none other than vsdatant.sys = Zone Alarm
Bugcheck = 0xc4 (0x121, 0x2, 0x880`02c904b0, 0x0)
0xc4 = DRIVER_VERIFIER_DETECTED_VIOLATION
0x121 = Waiting at DISPATCH_LEVEL, without a timeout (a potential LOCK situation)
0x2 = IRQL
0x880`02c904b0 = Object holding LOCK (exclusive access of an object)
0x0 = Timeout parm
The memory address in red is the address of the object holding the LOCK - it fits right in between the beginning and ending memory addresses for vsdatant.sys -
Code:
[FONT=lucida console] BEGINNING ENDING[/FONT]
[FONT=lucida console][COLOR=red] fffff880`02c904b0[/COLOR][/FONT]
[FONT=lucida console]fffff880`02c2a000 fffff880`02cba000 vsdatant vsdatant.sys Sat Oct 17 04:35:33 2009 (4AD981D5)[/FONT]
The specific frame in the stack of the current thread showing vsdatant -
Code:
[FONT=lucida console]0: kd> !for_each_frame !for_each_local dt @#Local[/FONT]
[FONT=lucida console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=lucida console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=lucida console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=lucida console]01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c[/FONT]
[FONT=lucida console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=lucida console]02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94[/FONT]
[FONT=lucida console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=lucida console]03 fffff880`009a92a0 fffff[COLOR=red]880`02c904b0 vsdatant[/COLOR]+0x19865[/FONT]
[FONT=lucida console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=lucida console]04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0[/FONT]
[FONT=lucida console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=lucida console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
Another issue sufaced in the dump - Address regions for 'netbt' and 'sptd.sys' overlap. Looking at the information compiled below, the unloaded Daemon/Alcohol driver sptd.sys and the Microsoft MBT transport driver netbt.sys do infact overlap -
Code:
[FONT=lucida console] BEGINNING ENDING[/FONT]
[FONT=lucida console]fffff880`01162000 [COLOR=blue]fffff880`011a7000[/COLOR] netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)[/FONT]
[FONT=lucida console][COLOR=blue]fffff880`01090000[/COLOR] fffff880`011c4000 sptd.sys UNLOADED [/FONT]
I would have to give the probable blame to sptd.sys here; however, there is another wildcard that I found in the dump - you also have KIS installed.
My suggestion to you is to rid your system of Zone Alarm, KIS and Daemon/Alcohol 120 and see if BSODs persist.
Use the respective removal tools for Z/A & KIS -
Zone Alarm --> Self-Service Support
KIS --> Kaspersky Americas Support and Services United States
Reset the Windows Firewall. Install the anti-virus of your choice. I prefer ESET NOD32 --> Free Antivirus Download from ESET
Good Luck to you.
Happy Holidays!
jcgriff2
.
Code:
[FONT=Lucida Console]Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64[/FONT]
[FONT=Lucida Console]Copyright (c) Microsoft Corporation. All rights reserved.[/FONT]
[FONT=Lucida Console]Loading Dump File [C:\Users\PalmDesert7\__jcgriff2__\121709-21668-01.dmp][/FONT]
[FONT=Lucida Console]Mini Kernel Dump File: Only registers and stack trace are available[/FONT]
[FONT=Lucida Console]WARNING: Whitespace at end of path element[/FONT]
[FONT=Lucida Console]Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols[/FONT]
[FONT=Lucida Console]Executable search path is: [/FONT]
[FONT=Lucida Console]Windows 7 Kernel Version 7600 MP (4 procs) Free x64[/FONT]
[FONT=Lucida Console]Product: WinNt, suite: TerminalServer SingleUserTS[/FONT]
[FONT=Lucida Console]Built by: 7600.16385.amd64fre.win7_rtm.090713-1255[/FONT]
[FONT=Lucida Console]Machine Name:[/FONT]
[FONT=Lucida Console]Kernel base = 0xfffff800`03018000 PsLoadedModuleList = 0xfffff800`03255e50[/FONT]
[FONT=Lucida Console]Debug session time: Thu Dec 17 14:23:59.123 2009 (GMT-5)[/FONT]
[FONT=Lucida Console]System Uptime: 0 days 0:00:12.168[/FONT]
[FONT=Lucida Console]Loading Kernel Symbols[/FONT]
[FONT=Lucida Console]...............................................................[/FONT]
[FONT=Lucida Console].....[/FONT]
[FONT=Lucida Console]Loading User Symbols[/FONT]
[FONT=Lucida Console]Loading unloaded module list[/FONT]
[FONT=Lucida Console].[/FONT]
[FONT=Lucida Console]*******************************************************************************[/FONT]
[FONT=Lucida Console]* *[/FONT]
[FONT=Lucida Console]* Bugcheck Analysis *[/FONT]
[FONT=Lucida Console]* *[/FONT]
[FONT=Lucida Console]*******************************************************************************[/FONT]
[FONT=Lucida Console]Use !analyze -v to get detailed debugging information.[/FONT]
[FONT=Lucida Console]BugCheck C4, {121, 2, fffff88002c904b0, 0}[/FONT]
[FONT=Lucida Console]Unable to load image \SystemRoot\system32\DRIVERS\vsdatant.sys, Win32 error 0n2[/FONT]
[FONT=Lucida Console]*** WARNING: Unable to verify timestamp for vsdatant.sys[/FONT]
[FONT=Lucida Console]*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys[/FONT]
[FONT=Lucida Console]Probably caused by : vsdatant.sys ( vsdatant+19865 )[/FONT]
[FONT=Lucida Console]Followup: MachineOwner[/FONT]
[FONT=Lucida Console]---------[/FONT]
[FONT=Lucida Console]0: kd> !analyze -v[/FONT]
[FONT=Lucida Console]*******************************************************************************[/FONT]
[FONT=Lucida Console]* *[/FONT]
[FONT=Lucida Console]* Bugcheck Analysis *[/FONT]
[FONT=Lucida Console]* *[/FONT]
[FONT=Lucida Console]*******************************************************************************[/FONT]
[FONT=Lucida Console]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/FONT]
[FONT=Lucida Console]A device driver attempting to corrupt the system has been caught. This is[/FONT]
[FONT=Lucida Console]because the driver was specified in the registry as being suspect (by the[/FONT]
[FONT=Lucida Console]administrator) and the kernel has enabled substantial checking of this driver.[/FONT]
[FONT=Lucida Console]If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will[/FONT]
[FONT=Lucida Console]be among the most commonly seen crashes.[/FONT]
[FONT=Lucida Console]Arguments:[/FONT]
[FONT=Lucida Console]Arg1: 0000000000000121, Waiting at DISPATCH_LEVEL, without a timeout.[/FONT]
[FONT=Lucida Console]Arg2: 0000000000000002, IRQL value.[/FONT]
[FONT=Lucida Console]Arg3: fffff88002c904b0, Object to wait on.[/FONT]
[FONT=Lucida Console]Arg4: 0000000000000000, Timeout parameter.[/FONT]
[FONT=Lucida Console]Debugging Details:[/FONT]
[FONT=Lucida Console]------------------[/FONT]
[FONT=Lucida Console]OVERLAPPED_MODULE: Address regions for 'netbt' and 'sptd.sys' overlap[/FONT]
[FONT=Lucida Console]BUGCHECK_STR: 0xc4_121[/FONT]
[FONT=Lucida Console]CUSTOMER_CRASH_COUNT: 1[/FONT]
[FONT=Lucida Console]DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP[/FONT]
[FONT=Lucida Console]PROCESS_NAME: System[/FONT]
[FONT=Lucida Console]CURRENT_IRQL: 2[/FONT]
[FONT=Lucida Console]LAST_CONTROL_TRANSFER: from fffff800035133dc to fffff80003089f00[/FONT]
[FONT=Lucida Console]STACK_TEXT: [/FONT]
[FONT=Lucida Console]fffff880`009a91d8 fffff800`035133dc : 00000000`000000c4 00000000`00000121 00000000`00000002 fffff880`02c904b0 : nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]fffff880`009a91e0 fffff800`03526654 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`00000001 : nt!VerifierBugCheckIfAppropriate+0x3c[/FONT]
[FONT=Lucida Console]fffff880`009a9220 fffff880`02c43865 : fffff880`02c904b0 00000000`00000000 00000000`00000001 fffff880`02c6ec0e : nt!VerifierKeWaitForSingleObject+0x94[/FONT]
[FONT=Lucida Console]fffff880`009a92a0 fffff880`02c904b0 : 00000000`00000000 00000000`00000001 fffff880`02c6ec0e 00000000`00000000 : vsdatant+0x19865[/FONT]
[FONT=Lucida Console]fffff880`009a92a8 00000000`00000000 : 00000000`00000001 fffff880`02c6ec0e 00000000`00000000 fffffa80`03963878 : vsdatant+0x664b0[/FONT]
[FONT=Lucida Console]STACK_COMMAND: kb[/FONT]
[FONT=Lucida Console]FOLLOWUP_IP: [/FONT]
[FONT=Lucida Console]vsdatant+19865[/FONT]
[FONT=Lucida Console]fffff880`02c43865 ?? ???[/FONT]
[FONT=Lucida Console]SYMBOL_STACK_INDEX: 3[/FONT]
[FONT=Lucida Console]SYMBOL_NAME: vsdatant+19865[/FONT]
[FONT=Lucida Console]FOLLOWUP_NAME: MachineOwner[/FONT]
[FONT=Lucida Console]MODULE_NAME: vsdatant[/FONT]
[FONT=Lucida Console]IMAGE_NAME: vsdatant.sys[/FONT]
[FONT=Lucida Console]DEBUG_FLR_IMAGE_TIMESTAMP: 4ad981d5[/FONT]
[FONT=Lucida Console]FAILURE_BUCKET_ID: X64_0xc4_121_VRF_vsdatant+19865[/FONT]
[FONT=Lucida Console]BUCKET_ID: X64_0xc4_121_VRF_vsdatant+19865[/FONT]
[FONT=Lucida Console]Followup: MachineOwner[/FONT]
[FONT=Lucida Console]---------[/FONT]
[FONT=Lucida Console]0: kd> lmvm vsdatant[/FONT]
[FONT=Lucida Console]start end module name[/FONT]
[FONT=Lucida Console]fffff880`02c2a000 fffff880`02cba000 vsdatant T (no symbols) [/FONT]
[FONT=Lucida Console]Loaded symbol image file: vsdatant.sys[/FONT]
[FONT=Lucida Console]Image path: \SystemRoot\system32\DRIVERS\vsdatant.sys[/FONT]
[FONT=Lucida Console]Image name: vsdatant.sys[/FONT]
[FONT=Lucida Console]Timestamp: Sat Oct 17 04:35:33 2009 (4AD981D5)[/FONT]
[FONT=Lucida Console]CheckSum: 0006D11C[/FONT]
[FONT=Lucida Console]ImageSize: 00090000[/FONT]
[FONT=Lucida Console]Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/FONT]
[FONT=Lucida Console]0: kd> lmnt[/FONT]
[FONT=Lucida Console]start end module name[/FONT]
[FONT=Lucida Console]fffff800`00bc7000 fffff800`00bd1000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)[/FONT]
[FONT=Lucida Console]fffff800`03018000 fffff800`035f5000 nt ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)[/FONT]
[FONT=Lucida Console]fffff800`035f5000 fffff800`0363e000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)[/FONT]
[FONT=Lucida Console]fffff880`00c00000 fffff880`00ca4000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)[/FONT]
[FONT=Lucida Console]fffff880`00cb0000 fffff880`00cbd000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)[/FONT]
[FONT=Lucida Console]fffff880`00cbd000 fffff880`00cd1000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)[/FONT]
[FONT=Lucida Console]fffff880`00cd1000 fffff880`00d2f000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)[/FONT]
[FONT=Lucida Console]fffff880`00d2f000 fffff880`00def000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)[/FONT]
[FONT=Lucida Console]fffff880`00def000 fffff880`00dfe000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)[/FONT]
[FONT=Lucida Console]fffff880`00e00000 fffff880`00e4c000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)[/FONT]
[FONT=Lucida Console]fffff880`00e4c000 fffff880`00e60000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)[/FONT]
[FONT=Lucida Console]fffff880`00e60000 fffff880`00ebe000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)[/FONT]
[FONT=Lucida Console]fffff880`00ecc000 fffff880`00f23000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)[/FONT]
[FONT=Lucida Console]fffff880`00f23000 fffff880`00f2c000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)[/FONT]
[FONT=Lucida Console]fffff880`00f2c000 fffff880`00f36000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)[/FONT]
[FONT=Lucida Console]fffff880`00f36000 fffff880`00f43000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)[/FONT]
[FONT=Lucida Console]fffff880`00f43000 fffff880`00f76000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)[/FONT]
[FONT=Lucida Console]fffff880`00f76000 fffff880`00f8b000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)[/FONT]
[FONT=Lucida Console]fffff880`00f8b000 fffff880`00fa5000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)[/FONT]
[FONT=Lucida Console]fffff880`00fa5000 fffff880`00fcf000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)[/FONT]
[FONT=Lucida Console]fffff880`00fcf000 fffff880`00fda000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)[/FONT]
[FONT=Lucida Console]fffff880`01000000 fffff880`01015000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)[/FONT]
[FONT=Lucida Console]fffff880`01015000 fffff880`01071000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)[/FONT]
[FONT=Lucida Console]fffff880`01071000 fffff880`01078000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)[/FONT]
[FONT=Lucida Console]fffff880`01078000 fffff880`01088000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)[/FONT]
[FONT=Lucida Console]fffff880`01088000 fffff880`010b2000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)[/FONT]
[FONT=Lucida Console]fffff880`010b2000 fffff880`0110e000 klif klif.sys Tue Sep 22 06:31:19 2009 (4AB8A777)[/FONT]
[FONT=Lucida Console]fffff880`0110e000 fffff880`01133000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)[/FONT]
[FONT=Lucida Console]fffff880`01133000 fffff880`01144000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)[/FONT]
[FONT=Lucida Console]fffff880`01144000 fffff880`01162000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)[/FONT]
[FONT=Lucida Console]fffff880`01162000 fffff880`011a7000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)[/FONT]
[FONT=Lucida Console]fffff880`011c4000 fffff880`011f3000 SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)[/FONT]
[FONT=Lucida Console]fffff880`011f3000 fffff880`011fc000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`01200000 fffff880`0121a000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)[/FONT]
[FONT=Lucida Console]fffff880`0121a000 fffff880`01245000 ksecpkg ksecpkg.sys Mon Jul 13 19:50:34 2009 (4A5BC84A)[/FONT]
[FONT=Lucida Console]fffff880`0124f000 fffff880`013f2000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)[/FONT]
[FONT=Lucida Console]fffff880`013f2000 fffff880`013ff000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)[/FONT]
[FONT=Lucida Console]fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)[/FONT]
[FONT=Lucida Console]fffff880`01460000 fffff880`01469000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)[/FONT]
[FONT=Lucida Console]fffff880`0146c000 fffff880`014df000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)[/FONT]
[FONT=Lucida Console]fffff880`014df000 fffff880`014f0000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)[/FONT]
[FONT=Lucida Console]fffff880`014f0000 fffff880`014fa000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)[/FONT]
[FONT=Lucida Console]fffff880`014fa000 fffff880`015ec000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)[/FONT]
[FONT=Lucida Console]fffff880`015ec000 fffff880`015f5000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)[/FONT]
[FONT=Lucida Console]fffff880`015f5000 fffff880`01600000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`01602000 fffff880`017ff000 tcpip tcpip.sys Mon Jul 13 19:25:34 2009 (4A5BC26E)[/FONT]
[FONT=Lucida Console]fffff880`01800000 fffff880`01830000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)[/FONT]
[FONT=Lucida Console]fffff880`01830000 fffff880`01838000 AtiPcie AtiPcie.sys Tue May 05 11:00:22 2009 (4A005486)[/FONT]
[FONT=Lucida Console]fffff880`01838000 fffff880`01846000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)[/FONT]
[FONT=Lucida Console]fffff880`01846000 fffff880`01852000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`01852000 fffff880`0185b000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`0185b000 fffff880`0186e000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)[/FONT]
[FONT=Lucida Console]fffff880`0186e000 fffff880`01877000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)[/FONT]
[FONT=Lucida Console]fffff880`01877000 fffff880`0187e000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)[/FONT]
[FONT=Lucida Console]fffff880`0187e000 fffff880`01887000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)[/FONT]
[FONT=Lucida Console]fffff880`01887000 fffff880`018d1000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)[/FONT]
[FONT=Lucida Console]fffff880`018d1000 fffff880`018e1000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)[/FONT]
[FONT=Lucida Console]fffff880`018e1000 fffff880`0192d000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)[/FONT]
[FONT=Lucida Console]fffff880`0192d000 fffff880`01935000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)[/FONT]
[FONT=Lucida Console]fffff880`01935000 fffff880`0196f000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)[/FONT]
[FONT=Lucida Console]fffff880`0196f000 fffff880`01981000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)[/FONT]
[FONT=Lucida Console]fffff880`01981000 fffff880`0198a000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)[/FONT]
[FONT=Lucida Console]fffff880`0198a000 fffff880`019c4000 fvevol fvevol.sys Mon Jul 13 19:22:15 2009 (4A5BC1A7)[/FONT]
[FONT=Lucida Console]fffff880`019c4000 fffff880`019da000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)[/FONT]
[FONT=Lucida Console]fffff880`019da000 fffff880`019e8000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)[/FONT]
[FONT=Lucida Console]fffff880`019e8000 fffff880`019f8000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)[/FONT]
[FONT=Lucida Console]fffff880`02c2a000 fffff880`02cba000 vsdatant vsdatant.sys Sat Oct 17 04:35:33 2009 (4AD981D5)[/FONT]
[FONT=Lucida Console]fffff880`03e00000 fffff880`03e8a000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)[/FONT]
[FONT=Lucida Console]fffff880`03e9d000 fffff880`043c6000 kl1 kl1.sys Fri Sep 25 09:59:13 2009 (4ABCCCB1)[/FONT]
[FONT=Lucida Console]Unloaded modules:[/FONT]
[FONT=Lucida Console]fffff880`01090000 fffff880`011c4000 sptd.sys[/FONT]
[FONT=Lucida Console]Timestamp: unavailable (00000000)[/FONT]
[FONT=Lucida Console]Checksum: 00000000[/FONT]
[FONT=Lucida Console]0: kd> lmntsm[/FONT]
[FONT=Lucida Console]start end module name[/FONT]
[FONT=Lucida Console]fffff880`00ecc000 fffff880`00f23000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)[/FONT]
[FONT=Lucida Console]fffff880`03e00000 fffff880`03e8a000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)[/FONT]
[FONT=Lucida Console]fffff880`00fcf000 fffff880`00fda000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)[/FONT]
[FONT=Lucida Console]fffff880`011f3000 fffff880`011fc000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`00fa5000 fffff880`00fcf000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)[/FONT]
[FONT=Lucida Console]fffff880`01830000 fffff880`01838000 AtiPcie AtiPcie.sys Tue May 05 11:00:22 2009 (4A005486)[/FONT]
[FONT=Lucida Console]fffff880`01877000 fffff880`0187e000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)[/FONT]
[FONT=Lucida Console]fffff880`01088000 fffff880`010b2000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)[/FONT]
[FONT=Lucida Console]fffff880`00d2f000 fffff880`00def000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)[/FONT]
[FONT=Lucida Console]fffff880`01800000 fffff880`01830000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)[/FONT]
[FONT=Lucida Console]fffff880`00cd1000 fffff880`00d2f000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)[/FONT]
[FONT=Lucida Console]fffff880`0146c000 fffff880`014df000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)[/FONT]
[FONT=Lucida Console]fffff880`01838000 fffff880`01846000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)[/FONT]
[FONT=Lucida Console]fffff880`019c4000 fffff880`019da000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)[/FONT]
[FONT=Lucida Console]fffff880`01852000 fffff880`0185b000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`01846000 fffff880`01852000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`0185b000 fffff880`0186e000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)[/FONT]
[FONT=Lucida Console]fffff880`00e4c000 fffff880`00e60000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)[/FONT]
[FONT=Lucida Console]fffff880`00e00000 fffff880`00e4c000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)[/FONT]
[FONT=Lucida Console]fffff880`014f0000 fffff880`014fa000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)[/FONT]
[FONT=Lucida Console]fffff880`0198a000 fffff880`019c4000 fvevol fvevol.sys Mon Jul 13 19:22:15 2009 (4A5BC1A7)[/FONT]
[FONT=Lucida Console]fffff880`01887000 fffff880`018d1000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)[/FONT]
[FONT=Lucida Console]fffff800`035f5000 fffff800`0363e000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)[/FONT]
[FONT=Lucida Console]fffff880`01981000 fffff880`0198a000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)[/FONT]
[FONT=Lucida Console]fffff800`00bc7000 fffff800`00bd1000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)[/FONT]
[FONT=Lucida Console]fffff880`03e9d000 fffff880`043c6000 kl1 kl1.sys Fri Sep 25 09:59:13 2009 (4ABCCCB1)[/FONT]
[FONT=Lucida Console]fffff880`010b2000 fffff880`0110e000 klif klif.sys Tue Sep 22 06:31:19 2009 (4AB8A777)[/FONT]
[FONT=Lucida Console]fffff880`01200000 fffff880`0121a000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)[/FONT]
[FONT=Lucida Console]fffff880`0121a000 fffff880`01245000 ksecpkg ksecpkg.sys Mon Jul 13 19:50:34 2009 (4A5BC84A)[/FONT]
[FONT=Lucida Console]fffff880`00cb0000 fffff880`00cbd000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)[/FONT]
[FONT=Lucida Console]fffff880`00f8b000 fffff880`00fa5000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)[/FONT]
[FONT=Lucida Console]fffff880`015f5000 fffff880`01600000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)[/FONT]
[FONT=Lucida Console]fffff880`00f2c000 fffff880`00f36000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)[/FONT]
[FONT=Lucida Console]fffff880`00e60000 fffff880`00ebe000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)[/FONT]
[FONT=Lucida Console]fffff880`0196f000 fffff880`01981000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)[/FONT]
[FONT=Lucida Console]fffff880`014fa000 fffff880`015ec000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)[/FONT]
[FONT=Lucida Console]fffff880`01162000 fffff880`011a7000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)[/FONT]
[FONT=Lucida Console]fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)[/FONT]
[FONT=Lucida Console]fffff880`01133000 fffff880`01144000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)[/FONT]
[FONT=Lucida Console]fffff800`03018000 fffff800`035f5000 nt ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)[/FONT]
[FONT=Lucida Console]fffff880`0124f000 fffff880`013f2000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)[/FONT]
[FONT=Lucida Console]fffff880`0186e000 fffff880`01877000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)[/FONT]
[FONT=Lucida Console]fffff880`00f76000 fffff880`00f8b000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)[/FONT]
[FONT=Lucida Console]fffff880`00f43000 fffff880`00f76000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)[/FONT]
[FONT=Lucida Console]fffff880`01071000 fffff880`01078000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)[/FONT]
[FONT=Lucida Console]fffff880`01078000 fffff880`01088000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)[/FONT]
[FONT=Lucida Console]fffff880`014df000 fffff880`014f0000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)[/FONT]
[FONT=Lucida Console]fffff880`00cbd000 fffff880`00cd1000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)[/FONT]
[FONT=Lucida Console]fffff880`0187e000 fffff880`01887000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)[/FONT]
[FONT=Lucida Console]fffff880`01460000 fffff880`01469000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)[/FONT]
[FONT=Lucida Console]fffff880`015ec000 fffff880`015f5000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)[/FONT]
[FONT=Lucida Console]fffff880`01935000 fffff880`0196f000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)[/FONT]
[FONT=Lucida Console]fffff880`011c4000 fffff880`011f3000 SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)[/FONT]
[FONT=Lucida Console]fffff880`0192d000 fffff880`01935000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)[/FONT]
[FONT=Lucida Console]fffff880`01602000 fffff880`017ff000 tcpip tcpip.sys Mon Jul 13 19:25:34 2009 (4A5BC26E)[/FONT]
[FONT=Lucida Console]fffff880`013f2000 fffff880`013ff000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)[/FONT]
[FONT=Lucida Console]fffff880`01144000 fffff880`01162000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)[/FONT]
[FONT=Lucida Console]fffff880`00f36000 fffff880`00f43000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)[/FONT]
[FONT=Lucida Console]fffff880`019da000 fffff880`019e8000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)[/FONT]
[FONT=Lucida Console]fffff880`0110e000 fffff880`01133000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)[/FONT]
[FONT=Lucida Console]fffff880`018d1000 fffff880`018e1000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)[/FONT]
[FONT=Lucida Console]fffff880`01000000 fffff880`01015000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)[/FONT]
[FONT=Lucida Console]fffff880`01015000 fffff880`01071000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)[/FONT]
[FONT=Lucida Console]fffff880`018e1000 fffff880`0192d000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)[/FONT]
[FONT=Lucida Console]fffff880`02c2a000 fffff880`02cba000 vsdatant vsdatant.sys Sat Oct 17 04:35:33 2009 (4AD981D5)[/FONT]
[FONT=Lucida Console]fffff880`019e8000 fffff880`019f8000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)[/FONT]
[FONT=Lucida Console]fffff880`00c00000 fffff880`00ca4000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)[/FONT]
[FONT=Lucida Console]fffff880`00def000 fffff880`00dfe000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)[/FONT]
[FONT=Lucida Console]fffff880`00f23000 fffff880`00f2c000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)[/FONT]
[FONT=Lucida Console]Unloaded modules:[/FONT]
[FONT=Lucida Console]fffff880`01090000 fffff880`011c4000 sptd.sys[/FONT]
[FONT=Lucida Console]Timestamp: unavailable (00000000)[/FONT]
[FONT=Lucida Console]Checksum: 00000000[/FONT]
[FONT=Lucida Console]0: kd> .bugcheck[/FONT]
[FONT=Lucida Console]Bugcheck code 000000C4[/FONT]
[FONT=Lucida Console]Arguments 00000000`00000121 00000000`00000002 fffff880`02c904b0 00000000`00000000[/FONT]
[FONT=Lucida Console]windbg> .hh [/FONT]
[FONT=Lucida Console]0: kd> !for_each_frame !for_each_local dt @#Local[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]0: kd> !for_each_frame !for_each_local dt @#Local[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]0: kd> !for_each_frame !for_each_local dt @#Local[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]01 fffff880`009a91e0 fffff800`03526654 nt!VerifierBugCheckIfAppropriate+0x3c[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]02 fffff880`009a9220 fffff880`02c43865 nt!VerifierKeWaitForSingleObject+0x94[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]03 fffff880`009a92a0 fffff880`02c904b0 vsdatant+0x19865[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]04 fffff880`009a92a8 00000000`00000000 vsdatant+0x664b0[/FONT]
[FONT=Lucida Console]_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _[/FONT]
[FONT=Lucida Console]00 fffff880`009a91d8 fffff800`035133dc nt!KeBugCheckEx[/FONT]
[FONT=Lucida Console]0: kd> lmvm netbt[/FONT]
[FONT=Lucida Console]start end module name[/FONT]
[FONT=Lucida Console]fffff880`01162000 fffff880`011a7000 netbt (deferred) [/FONT]
[FONT=Lucida Console]Mapped memory image file: C:\symbols\netbt.sys\4A5BC17845000\netbt.sys[/FONT]
[FONT=Lucida Console]Image path: \SystemRoot\System32\DRIVERS\netbt.sys[/FONT]
[FONT=Lucida Console]Image name: netbt.sys[/FONT]
[FONT=Lucida Console]Timestamp: Mon Jul 13 19:21:28 2009 (4A5BC178)[/FONT]
[FONT=Lucida Console]CheckSum: 0004A6B3[/FONT]
[FONT=Lucida Console]ImageSize: 00045000[/FONT]
[FONT=Lucida Console]File version: 6.1.7600.16385[/FONT]
[FONT=Lucida Console]Product version: 6.1.7600.16385[/FONT]
[FONT=Lucida Console]File flags: 0 (Mask 3F)[/FONT]
[FONT=Lucida Console]File OS: 40004 NT Win32[/FONT]
[FONT=Lucida Console]File type: 3.7 Driver[/FONT]
[FONT=Lucida Console]File date: 00000000.00000000[/FONT]
[FONT=Lucida Console]Translations: 0409.04b0[/FONT]
[FONT=Lucida Console]CompanyName: Microsoft Corporation[/FONT]
[FONT=Lucida Console]ProductName: Microsoft® Windows® Operating System[/FONT]
[FONT=Lucida Console]InternalName: netbt.sys[/FONT]
[FONT=Lucida Console]OriginalFilename: netbt.sys[/FONT]
[FONT=Lucida Console]ProductVersion: 6.1.7600.16385[/FONT]
[FONT=Lucida Console]FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)[/FONT]
[FONT=Lucida Console]FileDescription: MBT Transport driver[/FONT]
[FONT=Lucida Console]LegalCopyright: © Microsoft Corporation. All rights reserved.[/FONT]
[FONT=Lucida Console]__________________________________[/FONT]
[FONT=lucinda console][SIZE=3][COLOR=red]by jcgriff2[/COLOR][/SIZE][/FONT]
[FONT=lucinda console][SIZE=3][COLOR=red]J. C. Griffith [MVP][/COLOR][/SIZE][/FONT]
[URL="http://www.jcgriff2.com"][COLOR=red]www.jcgriff2.com[/COLOR][/URL]
My Computer
- OS
- Windows 7 - Vista