Another BSOD

envy28 · 08 Feb 2011

Hi everyone

A BSOD has not happend for over a month but I just suffered one when turning on my computer. It happend immediatly after the main loading screen, before the part when you type in your password. It asked me if I wanted to do a system restore as it was unable to load windows. I did a system restore and everything seems to work fine... for now at least anyway.

I have attached the dmp file for the bsod i just got, hopefully I can solve this issue once and for all. I also have AVG as an antivirus, as ive heard its sometimes not compatiable with windoes 7. Does anyone reccommend any antivirus system, or is Windows Essentials good enough?

Thanks

fimble · 08 Feb 2011

Hi envy28 and Welcome.

STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED
Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

Your latest dump file blames ntkrnlmp.exe which is a Windows System file and is highly unlikely to be the cause.
Old and incompatible drivers can and do cause issues with Windows 7, often giving false error codes.

You're right about AVG as well. I'd uninstall it. Download the correct AVG Remover for your system (32 or 64 bit).
If you have AVG ID protection installed, download the AVGID Protection Remover from the above link as well (it wouldn't hurt to download and run it anyway). Download Microsoft Security Essentials as its replacement. Re-boot to Safe Mode. In Safe Mode run the AVG Removal tools. Re-boot to normal mode and install MSE. Make sure your Windows firewall is enabled!

Use MSE as it's fine for Windows 7. Paid for? I use ESET Nod32 AV with no problems. Kaspersky is good as well. You pays ya money.....

Outdated Drivers. Update:

Afc.sys Wed Jul 12 06:48:20 2006 Arcsoft(R) ASPI Shell (CD/DVD program). Update or uninstall.

Rt64win7.sys Fri May 22 15:52:30 2009 Realtek PCIe GBE Family Controller 7.037

RTKVHD64.sys Mon Jul 20 11:52:29 2009 Realtek HD Audio R2.57

Drivers with Updates:

iaStor.sys Fri Oct 02 20:58:50 2009 Intel Rapid Storage.

Bugcheck Analysis

Code:

Loading Dump File [C:\DUMPS\envy28\020811-40703-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c1d000 PsLoadedModuleList = 0xfffff800`02e5ae50
Debug session time: Tue Feb  8 19:59:53.859 2011 (UTC + 0:00)
System Uptime: 0 days 0:00:38.984
Loading Kernel Symbols
...............................................................
................................................................
........
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002dc190d, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+53d )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002dc190d, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExAllocatePoolWithTag+53d
fffff800`02dc190d 48895808        mov     qword ptr [rax+8],rbx

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec50e0
 ffffffffffffffff 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  LogonUI.exe

CURRENT_IRQL:  2

EXCEPTION_RECORD:  fffff88002daa1f8 -- (.exr 0xfffff88002daa1f8)
ExceptionAddress: fffff80002dc190d (nt!ExAllocatePoolWithTag+0x000000000000053d)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff88002daa2a0 -- (.trap 0xfffff88002daa2a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=04006555002b8ba0 rbx=0000000000000000 rcx=fffffa801262c880
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002dc190d rsp=fffff88002daa430 rbp=fffff80002e1c880
 r8=0000000000000000  r9=fffff80002e1c9e0 r10=fffff80002e1c888
r11=fffffa80126dad48 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ExAllocatePoolWithTag+0x53d:
fffff800`02dc190d 48895808        mov     qword ptr [rax+8],rbx ds:04006555`002b8ba8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cc7a39 to fffff80002c8d740

STACK_TEXT:  
fffff880`02da9a28 fffff800`02cc7a39 : 00000000`0000001e ffffffff`c0000005 fffff800`02dc190d 00000000`00000000 : nt!KeBugCheckEx
fffff880`02da9a30 fffff800`02c8cd82 : fffff880`02daa1f8 fffff800`02e1c9e0 fffff880`02daa2a0 00000000`00001000 : nt!KiDispatchException+0x1b9
fffff880`02daa0c0 fffff800`02c8b68a : fffff880`02daa380 00000000`00000000 fffff880`02daa9a0 fffff6fb`7e0000b8 : nt!KiExceptionDispatch+0xc2
fffff880`02daa2a0 fffff800`02dc190d : 00000000`00000000 00000000`00000000 fffff880`00961000 fffff6fb`40000028 : nt!KiGeneralProtectionFault+0x10a
fffff880`02daa430 fffff800`02c6b47d : fffff800`00000000 fffffa80`11f8a060 00000000`00000000 fffff880`00000000 : nt!ExAllocatePoolWithTag+0x53d
fffff880`02daa520 fffff800`02fa9b40 : fffffa80`11fa5ce0 ffffffff`ffffffff 00000000`00a7dfff fffff880`00000014 : nt!MiProtectPrivateMemory+0xcd
fffff880`02daa690 fffff800`02fa9e20 : fffffa80`126dab30 fffff880`02daa7b8 fffff880`02daa7b0 00000000`00000104 : nt!MiProtectVirtualMemory+0x370
fffff880`02daa760 fffff800`02c8c993 : fffff880`02daaa28 fffff880`02daa818 00000000`00005000 00000000`00000001 : nt!NtProtectVirtualMemory+0x13c
fffff880`02daa800 fffff800`02c88f30 : fffff800`02f59cd8 00000000`00000020 fffffa80`125e3170 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
fffff880`02daaa08 fffff800`02f59cd8 : 00000000`00000020 fffffa80`125e3170 00000000`00000000 fffff8a0`00004ef0 : nt!KiServiceLinkage
fffff880`02daaa10 fffff800`02f583f6 : 00000000`00002000 00000000`00080000 00000000`00000000 00000000`00001000 : nt!RtlCreateUserStack+0x1e4
fffff880`02daab00 fffff800`02f5bd12 : fffffa80`126dab30 fffff880`02dab968 fffffa80`0cd35800 fffff880`02dab550 : nt!PspAllocateThread+0x29e
fffff880`02daad20 fffff800`02f5c08b : 00000000`00000000 00000000`00000000 00000000`00000001 fffff880`02dab550 : nt!PspCreateThread+0x1d2
fffff880`02daafa0 fffff800`02c8c993 : fffffa80`11f8a060 00000000`00000001 00000000`00000008 fffff880`02dab780 : nt!NtCreateThreadEx+0x243
fffff880`02dab6f0 fffff800`02c88f30 : fffff800`02f7a3dc 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
fffff880`02dab8f8 fffff800`02f7a3dc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiServiceLinkage
fffff880`02dab900 fffff800`02c759fd : fffff800`02f7006a fffff880`02dabbd0 00000000`000007ff 00000000`00474fd0 : nt!RtlpCreateUserThreadEx+0x138
fffff880`02daba20 fffff800`02c9df10 : 00000000`00000000 fffff880`02dabbd0 fffff880`02dabc00 fffff980`0b2d8ff0 : nt!ExpWorkerFactoryCreateThread+0x8d
fffff880`02dabae0 fffff800`02ccddd8 : fffff880`02dabb00 00000000`00000003 fffff880`02dabca0 00000000`00000000 : nt!ExpWorkerFactoryCheckCreate+0x180
fffff880`02dabb60 fffff800`02c8c993 : fffffa80`11f8a060 fffff880`00000000 00000000`00000110 00000000`00475ea8 : nt!NtSetInformationWorkerFactory+0x6f5
fffff880`02dabc20 00000000`76dd139a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0025e1f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76dd139a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExAllocatePoolWithTag+53d
fffff800`02dc190d 48895808        mov     qword ptr [rax+8],rbx

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!ExAllocatePoolWithTag+53d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!ExAllocatePoolWithTag+53d

BUCKET_ID:  X64_0x1E_c0000005_nt!ExAllocatePoolWithTag+53d

Followup: MachineOwner

Drivers:

Code:

fffff880`02f25000 fffff880`02f63000   1394ohci 1394ohci.sys Tue Jul 14 01:07:12 2009 (4A5BCC30)
fffff880`00fa6000 fffff880`00ffd000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
fffff880`04a39000 fffff880`04a42000   Afc      Afc.sys      Wed Jul 12 06:48:20 2006 (44B48D24)
fffff880`01ab2000 fffff880`01b3c000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`02fa9000 fffff880`02fbf000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`012f4000 fffff880`012ff000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
fffff880`012b6000 fffff880`012bf000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`012bf000 fffff880`012e9000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
fffff880`05200000 fffff880`05221000   AtiHdmi  AtiHdmi.sys  Wed Sep 30 14:54:46 2009 (4AC36326)
fffff880`04a44000 fffff880`05080000   atikmdag atikmdag.sys Fri Oct 02 05:05:13 2009 (4AC57BF9)
fffff960`00930000 fffff960`00991000   ATMFD    ATMFD.DLL    Wed Oct 20 04:05:45 2010 (4CBE5C89)
fffff880`045b8000 fffff880`045c9000   avgfwd6a avgfwd6a.sys Mon Jul 12 02:38:24 2010 (4C3A7210)
fffff880`01a9a000 fffff880`01aa4000   AVGIDSEH AVGIDSEH.Sys Mon Sep 13 23:46:38 2010 (4C8EA9CE)
fffff880`02e43000 fffff880`02e93000   avgldx64 avgldx64.sys Wed Dec 08 02:01:55 2010 (4CFEE713)
fffff880`0450c000 fffff880`0451b000   avgmfx64 avgmfx64.sys Tue Sep 07 01:49:14 2010 (4C858C0A)
fffff880`01a90000 fffff880`01a9a000   avgrkx64 avgrkx64.sys Tue Sep 07 01:49:37 2010 (4C858C21)
fffff880`04200000 fffff880`04261000   avgtdia  avgtdia.sys  Fri Nov 12 11:08:42 2010 (4CDD203A)
fffff880`04537000 fffff880`0453e000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`02e32000 fffff880`02e43000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff960`006e0000 fffff960`00707000   cdd      cdd.dll      Wed May 19 20:48:26 2010 (4BF4408A)
fffff880`044e2000 fffff880`0450c000   cdrom    cdrom.sys    Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00d1d000 fffff880`00ddd000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
fffff880`01a60000 fffff880`01a90000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00cbf000 fffff880`00d1d000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
fffff880`02f99000 fffff880`02fa9000   CompositeBus CompositeBus.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`06720000 fffff880`0672e000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`02e14000 fffff880`02e32000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
fffff880`01bdb000 fffff880`01bea000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`015e7000 fffff880`015fd000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`066c4000 fffff880`066e6000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`0672e000 fffff880`06741000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`042c5000 fffff880`044cd000   dump_iaStor dump_iaStor.sys Fri Oct 02 20:58:50 2009 (4AC65B7A)
fffff880`06741000 fffff880`0674d000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`05080000 fffff880`05174000   dxgkrnl  dxgkrnl.sys  Fri Oct 02 02:00:14 2009 (4AC5509E)
fffff880`05174000 fffff880`051ba000   dxgmms1  dxgmms1.sys  Tue Jul 14 00:38:32 2009 (4A5BC578)
fffff880`0134b000 fffff880`0135f000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`012ff000 fffff880`0134b000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
fffff880`015d4000 fffff880`015de000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`013bd000 fffff880`013f7000   fvevol   fvevol.sys   Sat Sep 26 03:34:26 2009 (4ABD7DB2)
fffff880`0168b000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
fffff880`02f8c000 fffff880`02f99000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:17:04 2009 (4A1151C0)
fffff800`031f9000 fffff800`03242000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
fffff880`051ba000 fffff880`051de000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
fffff880`066ec000 fffff880`06705000   HIDCLASS HIDCLASS.SYS Tue Jul 14 01:06:21 2009 (4A5BCBFD)
fffff880`0680e000 fffff880`06816080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`06800000 fffff880`0680e000   hidusb   hidusb.sys   Tue Jul 14 01:06:22 2009 (4A5BCBFE)
fffff880`015de000 fffff880`015e7000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
fffff880`010ae000 fffff880`012b6000   iaStor   iaStor.sys   Fri Oct 02 20:58:50 2009 (4AC65B7A)
fffff880`02eb9000 fffff880`02ecf000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`05302000 fffff880`05311000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`06705000 fffff880`06713000   kbdhid   kbdhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff800`00ba9000 fffff800`00bb3000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
fffff880`05322000 fffff880`05365000   ks       ks.sys       Thu Mar 04 04:32:25 2010 (4B8F37D9)
fffff880`015a9000 fffff880`015c3000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 06:03:32 2009 (4B21E0B4)
fffff880`066e6000 fffff880`066eb200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`0675b000 fffff880`0677e000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`00c67000 fffff880`00cab000   mcupdate mcupdate.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
fffff880`0674d000 fffff880`0675b000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`05311000 fffff880`05320000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`06713000 fffff880`06720000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`00ddd000 fffff880`00df7000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`012e9000 fffff880`012f4000   msahci   msahci.sys   Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`0459c000 fffff880`045a7000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00e09000 fffff880`00e13000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`0135f000 fffff880`013bd000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
fffff880`01bd0000 fffff880`01bdb000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`017e7000 fffff880`017f9000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`016e2000 fffff880`017d4000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
fffff880`02fe3000 fffff880`02fef000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`0527d000 fffff880`052ac000   ndiswan  ndiswan.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`053d1000 fffff880`053e6000   NDProxy  NDProxy.SYS  Tue Jul 14 01:10:05 2009 (4A5BCCDD)
fffff880`01b62000 fffff880`01b71000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`04261000 fffff880`042a6000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Tue Jul 14 00:21:46 2009 (4A5BC18A)
fffff880`045a7000 fffff880`045b8000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`045f4000 fffff880`04600000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff800`02c1d000 fffff800`031f9000   nt       ntkrnlmp.exe Sat Jun 19 05:16:41 2010 (4C1C44A9)
fffff880`01406000 fffff880`015a9000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
fffff880`0452e000 fffff880`04537000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`01b3c000 fffff880`01b62000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
fffff880`02f6f000 fffff880`02f8c000   parport  parport.sys  Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`00e53000 fffff880`00e68000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
fffff880`00e13000 fffff880`00e46000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`00ed9000 fffff880`00ee0000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
fffff880`00ee0000 fffff880`00ef0000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`015c3000 fffff880`015d4000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`05221000 fffff880`0525e000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00cab000 fffff880`00cbf000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`01bbd000 fffff880`01bd0000   RapportEI64 RapportEI64.sys Wed Jan 12 21:27:17 2011 (4D2E1CB5)
fffff880`017d4000 fffff880`017e7000   RapportKE64 RapportKE64.sys Wed Jan 12 21:26:55 2011 (4D2E1C9F)
fffff880`0451b000 fffff880`0452e000   RapportPG64 RapportPG64.sys Wed Jan 12 21:27:03 2011 (4D2E1CA7)
fffff880`02fbf000 fffff880`02fe3000   rasl2tp  rasl2tp.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
fffff880`052ac000 fffff880`052c7000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`052c7000 fffff880`052e8000   raspptp  raspptp.sys  Tue Jul 14 01:10:18 2009 (4A5BCCEA)
fffff880`052e8000 fffff880`05302000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`01a00000 fffff880`01a51000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
fffff880`04581000 fffff880`0458a000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`0458a000 fffff880`04593000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`04593000 fffff880`0459c000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`01073000 fffff880`010ad000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
fffff880`04a00000 fffff880`04a39000   Rt64win7 Rt64win7.sys Fri May 22 15:52:30 2009 (4A16BC2E)
fffff880`0681e000 fffff880`069dba00   RTKVHD64 RTKVHD64.sys Mon Jul 20 11:52:29 2009 (4A644C6D)
fffff880`02f63000 fffff880`02f6f000   serenum  serenum.sys  Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`01b71000 fffff880`01b8e000   serial   serial.sys   Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`016d5000 fffff880`016dd000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`05320000 fffff880`05321480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Mon Jun 14 04:39:04 2010 (4C15A458)
fffff880`045e7000 fffff880`045f4000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
fffff880`045c9000 fffff880`045e7000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
fffff880`01ba9000 fffff880`01bbd000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`02e93000 fffff880`02eb9000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
fffff880`05365000 fffff880`05377000   umbus    umbus.sys    Tue Jul 14 01:06:56 2009 (4A5BCC20)
fffff880`069dc000 fffff880`069f9000   usbccgp  usbccgp.sys  Tue Jul 14 01:06:45 2009 (4A5BCC15)
fffff880`069f9000 fffff880`069faf00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
fffff880`051de000 fffff880`051ef000   usbehci  usbehci.sys  Tue Jul 14 01:06:30 2009 (4A5BCC06)
fffff880`05377000 fffff880`053d1000   usbhub   usbhub.sys   Tue Jul 14 01:07:09 2009 (4A5BCC2D)
fffff880`02ecf000 fffff880`02f25000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
fffff880`051ef000 fffff880`051fc000   usbuhci  usbuhci.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`00e46000 fffff880`00e53000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`0453e000 fffff880`0454c000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`0454c000 fffff880`04571000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`00e68000 fffff880`00e7d000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00e7d000 fffff880`00ed9000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
fffff880`00c00000 fffff880`00c4c000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
fffff880`042af000 fffff880`042c5000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
fffff880`01b8e000 fffff880`01ba9000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
fffff880`04571000 fffff880`04581000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`00ef3000 fffff880`00f97000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00f97000 fffff880`00fa6000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`042a6000 fffff880`042af000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff960`00000000 fffff960`00310000   win32k   win32k.sys   Wed Oct 20 04:08:46 2010 (4CBE5D3E)
fffff880`00e00000 fffff880`00e09000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`0677e000 fffff880`0679f000   WudfPf   WudfPf.sys   Tue Jul 14 01:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`01aa4000 fffff880`01ab2000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`042c7000 fffff880`044cf000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00208000
fffff880`044cf000 fffff880`044e2000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

Trusteer Rapport is a security program that is known to cause BSOD's on some Windows 7 systems. Some banks are pushing this software but you should completely uninstall it. See: Windows 7 BSODs & RapportPG64.sys

Let us know how it goes. If you get further problems with blue screens, attach your new dump files and details and we'll move on from there.

envy28 · 09 Feb 2011

Hey, thanks for the reply

Well I did what you suggested and uninstalled AVG and one of the other programs and got a trial version of ESET Smart Security.

Just one problem, last night I put my computer to hibernate, when I turned my computer on today, it said something like unable to start windows from hibernate cause a file could not be found, or something like that.

Anyway Ive just done a virus scan using ESET and under the error logs it says:

c:\hiberfil.sys and C:\pagefile.sys - error opening

I believe when i turned my computer on it said hiberfil.sys could not be found or something simular. Is this a major problem as my computer was not able to start up again from hibernation?

Thanks