sudden bsod's - x64 win32k.sys klif.sys ndis.sys

frazered · 15 Dec 2010

3 bsods today out of the blue

have scanned with MBAM and Kaspersky - all clear it seems

self built system that has been solid for over a year

recent new sound card - asus xonar dg in the last month - have updated drivers

rest of hardware is approx 2 years old

logs and stats below

many thanks in advance

cybercore · 15 Dec 2010

Remove Kasperky (which is resposnsible for your crashes) and install MSE:

Removal tool for Kaspersky Lab products

http://www.microsoft.com/security_essentials/

frazered · 15 Dec 2010

i have a fully paid up kaspersky account so not really wanting to get rid of it for a less superior antivirus product

or are you saying kaspersky is the root of the problems here and need reinstalling?

yowanvista · 15 Dec 2010

frazered said:

i have a fully paid up kaspersky account so not really wanting to get rid of it for a less superior antivirus product

or are you saying kaspersky is the root of the problems here and need reinstalling?

The kl1.sys and klif.sys BSODs were known issues in the older 11.0.1.xxx versions, update to 11.0.2.556(with patch b) by uninstalling the current version and download the latest one

-Uninstall completly Kaspersky
-Install new version
Product Updates

frazered · 15 Dec 2010

Thanks - will action those areas now

cybercore · 15 Dec 2010

1. Remove Kaspersky, you already have MSE installed which is the right AV now that you're sufferring from BSOD's. You will use your Kaspersky licence but later. For now - MSE please.

Removal tool for Kaspersky Lab products

2. Update drivers:

Tosrfhid.sys Tue May 19 21:23:51 2009
Bluetooth HID Driver from TOSHIBA

RivaTuner64.sys Tue Jul 17 15:13:42 2007
RivaTuner

ElbyDelay.sys Wed Dec 13 14:14:48 2006
Elaborate Bytes AG CDRTools

AnyDVD.sys Fri Sep S07 19:49:00 2007
slySoft ANYDVD

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\121510-21294-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0305f000 PsLoadedModuleList = 0xfffff800`0329ce50
Debug session time: Wed Dec 15 10:32:44.128 2010 (UTC - 5:00)
System Uptime: 0 days 0:10:00.626
Loading Kernel Symbols
...............................................................
................................................................
.........................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d89904296e, b3b7465eeb8207dc, fffff880016d1b60, 1}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d89904296e, Reserved
Arg2: b3b7465eeb8207dc, Reserved
Arg3: fffff880016d1b60, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
	0 : A generic data region
	1 : Modification of a function or .pdata
	2 : A processor IDT
	3 : A processor GDT
	4 : Type 1 process list corruption
	5 : Type 2 process list corruption
	6 : Debug routine modification
	7 : Critical MSR modification

Debugging Details:
------------------


BUGCHECK_STR:  0x109

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800030cf740

STACK_TEXT:  
fffff880`031b65d8 00000000`00000000 : 00000000`00000109 a3a039d8`9904296e b3b7465e`eb8207dc fffff880`016d1b60 : nt!KeBugCheckEx


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !ndis
    fffff880016d1bc7 - ndis!NdisGetThreadObjectCompartmentId+67
	[ c0:e0 ]
1 error : !ndis (fffff880016d1bc7)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

Drivers:

Code:

start             end                 module name
fffff880`03d3d000 fffff880`03d7b000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`06b6c000 fffff880`06b84000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`04800000 fffff880`0488a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04edc000 fffff880`04ef2000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0718a000 fffff880`07192000   ALSysIO64 ALSysIO64.sys Sun Apr 19 15:41:04 2009 (49EB7E50)
fffff880`00eb9000 fffff880`00ec4000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`03c00000 fffff880`03c1e000   AnyDVD   AnyDVD.sys   Fri Sep 07 19:49:00 2007 (46E1E36C)
fffff880`04e68000 fffff880`04ead000   arlxgl17 arlxgl17.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`00e86000 fffff880`00e8f000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e8f000 fffff880`00eb9000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00820000 fffff960`00881000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`0106e000 fffff880`0107a000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`02d23000 fffff880`02d2a000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b5a000 fffff880`03b6b000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03964000 fffff880`03982000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`00c4c000 fffff880`00c76000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d31000 fffff880`00df1000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`015cb000 fffff880`015fb000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cd3000 fffff880`00d31000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04224000 fffff880`043e9000   cmudaxp  cmudaxp.sys  Wed Sep 15 23:41:13 2010 (4C9191D9)
fffff880`0153d000 fffff880`015b0000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`011ed000 fffff880`011f6000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04ead000 fffff880`04ebd000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04e5a000 fffff880`04e68000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03ab9000 fffff880`03b3c000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03b3c000 fffff880`03b5a000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03aaa000 fffff880`03ab9000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0149f000 fffff880`014b5000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04200000 fffff880`04222000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`03c37000 fffff880`03c40000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`03c2b000 fffff880`03c37000   dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`03c40000 fffff880`03c53000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04fec000 fffff880`04ff8000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`10ac6000 fffff880`10bba000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`10bba000 fffff880`10c00000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03aa0000 fffff880`03aaa000   ElbyCDIO ElbyCDIO.sys Tue Feb 17 12:11:23 2009 (499AEFBB)
fffff880`03dde000 fffff880`03de5000   ElbyDelay ElbyDelay.sys Wed Dec 13 14:14:48 2006 (45805128)
fffff880`00ec4000 fffff880`00ed8000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00c00000 fffff880`00c4c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`015c1000 fffff880`015cb000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01200000 fffff880`0123a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`03c1e000 fffff880`03c2b000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`03016000 fffff800`0305f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0389c000 fffff880`03964000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01496000 fffff880`0149f000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03d98000 fffff880`03db6000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03b91000 fffff880`03ba7000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03dcf000 fffff880`03dde000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bbc000 fffff800`00bc6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0488c000 fffff880`04db5000   kl1      kl1.sys      Tue Sep 01 07:29:21 2009 (4A9D0591)
fffff880`016bc000 fffff880`016ca000   klbg     klbg.sys     Wed Oct 14 13:18:13 2009 (4AD607D5)
fffff880`02cbd000 fffff880`02d1a000   klif     klif.sys     Wed Nov 11 08:32:16 2009 (4AFABCE0)
fffff880`02c00000 fffff880`02c0a000   klim6    klim6.sys    Mon Sep 14 06:46:26 2009 (4AAE1F02)
fffff880`03db6000 fffff880`03dc0000   klmouflt klmouflt.sys Fri Oct 02 11:38:29 2009 (4AC61E75)
fffff880`03cfa000 fffff880`03d3d000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01523000 fffff880`0153d000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`043e9000 fffff880`043ee200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0386f000 fffff880`03884000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0382b000 fffff880`0384e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c7b000 fffff880`00cbf000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`04ecd000 fffff880`04edc000   modem    modem.sys    Mon Jul 13 20:10:48 2009 (4A5BCD08)
fffff880`0fe1e000 fffff880`0fe2c000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03dc0000 fffff880`03dcf000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00e6c000 fffff880`00e86000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02c90000 fffff880`02cbd000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`0717a000 fffff880`0718a000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`03982000 fffff880`0399a000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0399a000 fffff880`039c7000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06afb000 fffff880`06b49000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`06b49000 fffff880`06b6c000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02d88000 fffff880`02d93000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01057000 fffff880`01061000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`014c5000 fffff880`01523000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03a95000 fffff880`03aa0000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`016aa000 fffff880`016bc000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016d0000 fffff880`017c2000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04f16000 fffff880`04f22000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04f22000 fffff880`04f51000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04fc6000 fffff880`04fdb000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c0a000 fffff880`02c19000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04db5000 fffff880`04dfa000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`06b84000 fffff880`06b90000   npf_devolo npf_devolo.sys Fri Feb 02 04:24:05 2007 (45C30335)
fffff880`02d93000 fffff880`02da4000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03a89000 fffff880`03a95000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`0305f000 fffff800`0363b000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0124d000 fffff880`013f0000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02d1a000 fffff880`02d23000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10ac4000 fffff880`10ac5180   nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`0fe32000 fffff880`10ac3e00   nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`02dd8000 fffff880`02dfe000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03d7b000 fffff880`03d98000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`011d8000 fffff880`011ed000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f8f000 fffff880`00fc2000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`011f6000 fffff880`011fd000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e5c000 fffff880`00e6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015b0000 fffff880`015c1000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06a00000 fffff880`06aa6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03cbd000 fffff880`03cfa000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cbf000 fffff880`00cd3000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00fd7000 fffff880`00fe2ae0   PxHlpa64 PxHlpa64.sys Mon Dec 10 18:49:01 2007 (475DD06D)
fffff880`04ef2000 fffff880`04f16000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04f51000 fffff880`04f6c000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04f6c000 fffff880`04f8d000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04f8d000 fffff880`04fa7000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a38000 fffff880`03a89000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04fa7000 fffff880`04fb2000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02d6d000 fffff880`02d76000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d76000 fffff880`02d7f000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d7f000 fffff880`02d88000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`017c2000 fffff880`017fc000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`07192000 fffff880`07199000   RivaTuner64 RivaTuner64.sys Tue Jul 17 15:13:42 2007 (469D14E6)
fffff880`04ec5000 fffff880`04ecd000   RootMdm  RootMdm.sys  Mon Jul 13 20:10:47 2009 (4A5BCD07)
fffff880`03884000 fffff880`0389c000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03c67000 fffff880`03cbd000   Rt64win7 Rt64win7.sys Wed Jun 23 05:10:45 2010 (4C21CF95)
fffff880`011a9000 fffff880`011d8000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`06aa6000 fffff880`06ab1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`043ef000 fffff880`043fb000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c19000 fffff880`02c36000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`04ebd000 fffff880`04ec5000   serscan  serscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`0107a000 fffff880`011a0000   spaz     spaz.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`016a3000 fffff880`016aa000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffff880`0169b000 fffff880`016a3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`070e4000 fffff880`0717a000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`0707d000 fffff880`070e4000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06ab1000 fffff880`06ade000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04fb2000 fffff880`04fb3480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06ade000 fffff880`06af0000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02dc2000 fffff880`02dcf000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02da4000 fffff880`02dc2000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c64000 fffff880`02c78000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`04fdb000 fffff880`04fec000   tosporte tosporte.sys Tue Jun 16 06:48:47 2009 (4A37788F)
fffff880`03a00000 fffff880`03a32500   tosrfbd  tosrfbd.sys  Thu Aug 27 22:06:31 2009 (4A973BA7)
fffff880`02c36000 fffff880`02c48a00   tosrfcom tosrfcom.sys Tue Jul 28 06:18:20 2009 (4A6ED06C)
fffff880`03de5000 fffff880`03dfab00   Tosrfhid Tosrfhid.sys Tue May 19 21:23:51 2009 (4A135BA7)
fffff880`03c53000 fffff880`03c60000   tosrfusb tosrfusb.sys Wed Aug 05 01:00:20 2009 (4A7911E4)
fffff960`00480000 fffff960`0048a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03b6b000 fffff880`03b91000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04fb4000 fffff880`04fc6000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`00fe3000 fffff880`01000000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04ff8000 fffff880`04ff9f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0fe0d000 fffff880`0fe1e000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04e00000 fffff880`04e5a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03ba7000 fffff880`03bfd000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`02c78000 fffff880`02c84000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`0123a000 fffff880`0124b000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`03810000 fffff880`0382b000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`0fe00000 fffff880`0fe0d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`01061000 fffff880`0106e000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02d2a000 fffff880`02d38000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02d38000 fffff880`02d5d000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fc2000 fffff880`00fd7000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0144a000 fffff880`01496000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c49000 fffff880`02c64000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02d5d000 fffff880`02d6d000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00edc000 fffff880`00f80000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f80000 fffff880`00f8f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dcf000 fffff880`02dd8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`003a0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`011a0000 fffff880`011a9000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0384e000 fffff880`0386f000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`07199000 fffff880`071ca000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`0700c000 fffff880`0707d000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`071ca000 fffff880`071d6000   tosrfbnp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`071d6000 fffff880`071e0000   tosrfnds.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`014b5000 fffff880`014c3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0123a000 fffff880`01246000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`013f0000 fffff880`013f9000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`00fe3000 fffff880`00ff6000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

cybercore · 15 Dec 2010

frazered said:

i have a fully paid up kaspersky account so not really wanting to get rid of it for a less superior antivirus product

or are you saying kaspersky is the root of the problems here and need reinstalling?

Your 2009 Kaspersky caused one of your crashes. Besides that you have MSE installed too. This is what you have:

- MSE
MpFilter.sys Sat Mar 20 01:58:08 2010
MpNWMon.sys Sat Mar 20 01:58:00 2010

- Kaspersky
klif.sys Wed Nov 11 08:32:16 2009
klmouflt.sys Fri Oct 02 11:38:29 2009

Remove Kaspersky for now for sure: Removal tool for Kaspersky Lab products

frazered · 15 Dec 2010

cybercore said:

1. Remove Kaspersky, you already have MSE installed which is the right AV now that you're sufferring from BSOD's. You will use your Kaspersky licence but later. For now - MSE please.

Removal tool for Kaspersky Lab products

2. Update drivers:

Tosrfhid.sys Tue May 19 21:23:51 2009
Bluetooth HID Driver from TOSHIBA

RivaTuner64.sys Tue Jul 17 15:13:42 2007
RivaTuner

ElbyDelay.sys Wed Dec 13 14:14:48 2006
Elaborate Bytes AG CDRTools

AnyDVD.sys Fri Sep S07 19:49:00 2007
slySoft ANYDVD

ok have done so

not able to find any new updates to the bluetooth driver

have uninstalled the rest.

will see how this goes on - thanks