Every once in a while (about 1 out of 4 times) I get a blue screen when quiting games (no matter the game).
Got Windows 7 Ultimate 32 bit, fresh install and the nvidia video driver was the one recommended on their site. Any ideas?
Attached the archived dump file, please tell me if you need anything else.
Hello,
I would first remove AVG. AVG is a known cause of BSOD and same as third-party anti-virus. Once you have removed AVG, use this removal tool: AVG - Download tools
Use Microsoft Security Essentials as replacement: http://www.microsoft.com/security_essentials/
Uninstall Daemon Tools/Alcohol 120%. They use a file sptd.sys, which is notorious for BSOD. Once you have removed it, use this SPTD uninstaller: http://www.duplexsecure.com/downloads. Select Uninstall, DO NOT SELECT REINSTALL.
Code:******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1000008E, {c0000005, 82ce0f21, ab840a7c, 0} *** WARNING: Unable to verify timestamp for AVGIDSShim.Sys *** ERROR: Module load completed but symbols could not be loaded for AVGIDSShim.Sys Probably caused by : cdd.dll ( cdd!CGuardMutex::Enter+d ) Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 82ce0f21, The address that the exception occurred at Arg3: ab840a7c, Trap Frame Arg4: 00000000 Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+1a 82ce0f21 f00fba3000 lock btr dword ptr [eax],0 TRAP_FRAME: ab840a7c -- (.trap 0xffffffffab840a7c) ErrCode = 00000002 eax=00000000 ebx=8a20107e ecx=00000000 edx=00000001 esi=00000000 edi=8560fd48 eip=82ce0f21 esp=ab840af0 ebp=ab840b10 iopl=0 nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a: 82ce0f21 f00fba3000 lock btr dword ptr [eax],0 ds:0023:00000000=???????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x8E PROCESS_NAME: SC2.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 960072c9 to 82ce0f21 STACK_TEXT: ab840af4 960072c9 fe3ffb20 9600a8d4 fe3ffb20 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a ab840afc 9600a8d4 fe3ffb20 00000000 00000000 cdd!CGuardMutex::Enter+0xd ab840b10 9600b7c7 0043bfef fe3ffb20 fe99e4d0 cdd!CddBitmap::RemoveFromCddBitmapList+0x28 ab840b44 96001753 fe3ffb20 ab840be4 9622d47c cdd!CddBitmapHw::Release+0x7d ab840b50 9622d47c fe3ffb20 00000002 ab840c08 cdd!DrvDeleteDeviceBitmapEx+0x39 ab840be4 9622e890 00000001 00000000 09050de1 win32k!SURFACE::bDeleteSurface+0x235 ab840bf8 96230d8d 00000001 00000001 fe99e4d0 win32k!SURFREF::bDeleteSurface+0x14 ab840c0c 9623052d 00000f78 00000001 00000f78 win32k!vCleanupSurfaces+0x43 ab840c2c 9622c1ca fe639008 00000000 00000000 win32k!NtGdiCloseProcess+0xc5 ab840c4c 9622eaaf fe639008 00000000 872a73e0 win32k!GdiProcessCallout+0x151 ab840c68 82e9eb98 87c82848 00000000 b5a30d07 win32k!W32pProcessCallout+0x5d ab840ce4 82eb7dc7 00000000 00000000 fffffff0 nt!PspExitThread+0x46d ab840d0c 997b08bc ffffffff 00000000 ffffffff nt!NtTerminateProcess+0x1fa WARNING: Stack unwind information not available. Following frames may be wrong. ab840d34 775e64f4 badb0d00 0012fe84 00000000 AVGIDSShim+0x28bc ab840d38 badb0d00 0012fe84 00000000 00000000 0x775e64f4 ab840d3c 0012fe84 00000000 00000000 00000000 0xbadb0d00 ab840d40 00000000 00000000 00000000 00000000 0x12fe84 STACK_COMMAND: kb FOLLOWUP_IP: cdd!CGuardMutex::Enter+d 960072c9 c7460401000000 mov dword ptr [esi+4],1 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: cdd!CGuardMutex::Enter+d FOLLOWUP_NAME: MachineOwner MODULE_NAME: cdd IMAGE_NAME: cdd.dll DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bd992 FAILURE_BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d Followup: MachineOwner --------- 1: kd> lmtsmn start end module name 83397000 833df000 ACPI ACPI.sys Tue Jul 14 11:11:11 2009 (4A5BBF0F) 8f845000 8f89f000 afd afd.sys Tue Jul 14 11:12:34 2009 (4A5BBF62) 902db000 902ed000 AgileVpn AgileVpn.sys Tue Jul 14 11:55:00 2009 (4A5BC954) 90283000 902bc000 ah2973ob ah2973ob.SYS Wed Jul 15 09:12:41 2009 (4A5CF4C9) 8a0ba000 8a0c3000 amdxata amdxata.sys Wed May 20 05:57:35 2009 (4A12F30F) 8a076000 8a07f000 atapi atapi.sys Tue Jul 14 11:11:15 2009 (4A5BBF13) 8a07f000 8a0a2000 ataport ataport.SYS Tue Jul 14 11:11:18 2009 (4A5BBF16) 91022000 911de000 athr athr.sys Fri May 07 11:56:08 2010 (4BE35718) 9bb55000 9bb7d000 AVGIDSDriver AVGIDSDriver.Sys Wed Aug 04 10:24:21 2010 (4C589715) 8a5d1000 8a5da000 AVGIDSEH AVGIDSEH.Sys Tue Sep 14 10:46:35 2010 (4C8EA9CB) 9bafc000 9bb06000 AVGIDSFilter AVGIDSFilter.Sys Wed Aug 04 10:23:18 2010 (4C5896D6) 997ae000 997b7000 AVGIDSShim AVGIDSShim.Sys Wed Aug 04 10:25:56 2010 (4C589774) 8fa36000 8fa71d00 avgldx86 avgldx86.sys Wed Dec 08 15:00:20 2010 (4CFEE6B4) 8a3bd000 8a3c9000 avgmfx86 avgmfx86.sys Tue Sep 07 12:48:01 2010 (4C858BC1) 8a7f9000 8a7fdb80 avgrkx86 avgrkx86.sys Tue Sep 07 12:48:16 2010 (4C858BD0) 8a195000 8a1dc980 avgtdix avgtdix.sys Sat Nov 13 00:05:58 2010 (4CDD1F96) 833df000 833ea000 BATTC BATTC.SYS Tue Jul 14 11:19:15 2009 (4A5BC0F3) 8a3c9000 8a3d0000 Beep Beep.SYS Tue Jul 14 11:45:00 2009 (4A5BC6FC) 8f9e4000 8f9f2000 blbdrive blbdrive.sys Tue Jul 14 11:23:04 2009 (4A5BC1D8) 832a2000 832aa000 BOOTVID BOOTVID.dll Tue Jul 14 13:04:34 2009 (4A5BD9A2) 996f2000 9970b000 bowser bowser.sys Tue Jul 14 11:14:21 2009 (4A5BBFCD) 96000000 9601e000 cdd cdd.dll Tue Jul 14 13:04:18 2009 (4A5BD992) 8a411000 8a430000 cdrom cdrom.sys Tue Jul 14 11:11:24 2009 (4A5BBF1C) 832ec000 83397000 CI CI.dll Tue Jul 14 13:09:28 2009 (4A5BDAC8) 8a5ac000 8a5d1000 CLASSPNP CLASSPNP.SYS Tue Jul 14 11:11:20 2009 (4A5BBF18) 832aa000 832ec000 CLFS CLFS.SYS Tue Jul 14 11:11:10 2009 (4A5BBF0E) 911e8000 911eb700 CmBatt CmBatt.sys Tue Jul 14 11:19:18 2009 (4A5BC0F6) 8a108000 8a165000 cng cng.sys Tue Jul 14 11:32:55 2009 (4A5BC427) 89e2a000 89e32000 compbatt compbatt.sys Tue Jul 14 11:19:18 2009 (4A5BC0F6) 902ce000 902db000 CompositeBus CompositeBus.sys Tue Jul 14 11:45:26 2009 (4A5BC716) 9159c000 915a9000 crashdmp crashdmp.sys Tue Jul 14 11:45:50 2009 (4A5BC72E) 8f968000 8f9cc000 csc csc.sys Tue Jul 14 11:15:08 2009 (4A5BBFFC) 8f9cc000 8f9e4000 dfsc dfsc.sys Tue Jul 14 11:14:16 2009 (4A5BBFC8) 8f95c000 8f968000 discache discache.sys Tue Jul 14 11:24:04 2009 (4A5BC214) 8a59b000 8a5ac000 disk disk.sys Tue Jul 14 11:11:28 2009 (4A5BBF20) 914c6000 914df000 drmk drmk.sys Tue Jul 14 12:36:05 2009 (4A5BD2F5) 915a9000 915b4000 dump_dumpata dump_dumpata.sys Tue Jul 14 11:11:16 2009 (4A5BBF14) 915be000 915cf000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:12:47 2009 (4A5BBF6F) 915b4000 915be000 dump_msahci dump_msahci.sys Tue Jul 14 11:45:50 2009 (4A5BC72E) 915cf000 915d9000 Dxapi Dxapi.sys Tue Jul 14 11:25:25 2009 (4A5BC265) 8fa93000 8fb4a000 dxgkrnl dxgkrnl.sys Fri Oct 02 13:48:33 2009 (4AC54DE1) 8fb4a000 8fb83000 dxgmms1 dxgmms1.sys Tue Jul 14 11:25:25 2009 (4A5BC265) 8a0f7000 8a108000 fileinfo fileinfo.sys Tue Jul 14 11:21:51 2009 (4A5BC18F) 8a0c3000 8a0f7000 fltmgr fltmgr.sys Tue Jul 14 11:11:13 2009 (4A5BBF11) 8a3b4000 8a3bd000 Fs_Rec Fs_Rec.sys Tue Jul 14 11:11:14 2009 (4A5BBF12) 8a569000 8a59b000 fvevol fvevol.sys Tue Jul 14 11:13:01 2009 (4A5BBF7D) 8a778000 8a7a9000 fwpkclnt fwpkclnt.sys Tue Jul 14 11:12:03 2009 (4A5BBF43) 82c1f000 82c56000 hal halmacpi.dll Tue Jul 14 11:11:03 2009 (4A5BBF07) 90fd2000 90ff1000 HDAudBus HDAudBus.sys Tue Jul 14 11:50:55 2009 (4A5BC85F) 914df000 9152f000 HdAudio HdAudio.sys Tue Jul 14 11:51:46 2009 (4A5BC892) 90ff1000 90ffb080 HECI HECI.sys Fri Sep 18 07:54:12 2009 (4AB293E4) 91577000 9158a000 HIDCLASS HIDCLASS.SYS Tue Jul 14 11:51:01 2009 (4A5BC865) 9158a000 91590480 HIDPARSE HIDPARSE.SYS Tue Jul 14 11:50:59 2009 (4A5BC863) 9156c000 91577000 hidusb hidusb.sys Tue Jul 14 11:51:04 2009 (4A5BC868) 9966d000 996f2000 HTTP HTTP.sys Tue Jul 14 11:12:53 2009 (4A5BBF75) 8a561000 8a569000 hwpolicy hwpolicy.sys Tue Jul 14 11:11:01 2009 (4A5BBF05) 91000000 91018000 i8042prt i8042prt.sys Tue Jul 14 11:11:23 2009 (4A5BBF1B) 902bc000 902ce000 intelppm intelppm.sys Tue Jul 14 11:11:03 2009 (4A5BBF07) 90224000 90276000 k57nd60x k57nd60x.sys Sun May 16 00:51:27 2010 (4BEE98CF) 911ec000 911f9000 kbdclass kbdclass.sys Tue Jul 14 11:11:15 2009 (4A5BBF13) 80b99000 80ba1000 kdcom kdcom.dll Tue Jul 14 13:08:58 2009 (4A5BDAAA) 90382000 903b6000 ks ks.sys Tue Jul 14 11:45:13 2009 (4A5BC709) 8a393000 8a3a6000 ksecdd ksecdd.sys Tue Jul 14 11:11:56 2009 (4A5BBF3C) 8a52c000 8a551000 ksecpkg ksecpkg.sys Fri Dec 11 17:04:22 2009 (4B21C4C6) 903c4000 903d4000 lltdio lltdio.sys Tue Jul 14 11:53:18 2009 (4A5BC8EE) 915e4000 915ff000 luafv luafv.sys Tue Jul 14 11:15:44 2009 (4A5BC020) 83219000 83291000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 13:06:41 2009 (4A5BDA21) 915d9000 915e4000 monitor monitor.sys Tue Jul 14 11:25:58 2009 (4A5BC286) 90276000 90283000 mouclass mouclass.sys Tue Jul 14 11:11:15 2009 (4A5BBF13) 91591000 9159c000 mouhid mouhid.sys Tue Jul 14 11:45:08 2009 (4A5BC704) 8a060000 8a076000 mountmgr mountmgr.sys Tue Jul 14 11:11:27 2009 (4A5BBF1F) 9970b000 9971d000 mpsdrv mpsdrv.sys Tue Jul 14 11:52:52 2009 (4A5BC8D4) 9971d000 99740000 mrxsmb mrxsmb.sys Sat Feb 27 20:32:02 2010 (4B88CA72) 99740000 9977b000 mrxsmb10 mrxsmb10.sys Sat Feb 27 20:32:21 2010 (4B88CA85) 9977b000 99796000 mrxsmb20 mrxsmb20.sys Sat Feb 27 20:32:11 2010 (4B88CA7B) 8a0a2000 8a0ac000 msahci msahci.sys Tue Jul 14 11:45:50 2009 (4A5BC72E) 8a225000 8a230000 Msfs Msfs.SYS Tue Jul 14 11:11:26 2009 (4A5BBF1E) 89fd5000 89fdd000 msisadrv msisadrv.sys Tue Jul 14 11:11:09 2009 (4A5BBF0D) 8a368000 8a393000 msrpc msrpc.sys Tue Jul 14 11:11:59 2009 (4A5BBF3F) 8f952000 8f95c000 mssmbios mssmbios.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD) 8a551000 8a561000 mup mup.sys Tue Jul 14 11:14:14 2009 (4A5BBFC6) 8a437000 8a4ee000 ndis ndis.sys Tue Jul 14 11:12:24 2009 (4A5BBF58) 90305000 90310000 ndistapi ndistapi.sys Tue Jul 14 11:54:24 2009 (4A5BC930) 9964a000 9965a000 ndisuio ndisuio.sys Tue Jul 14 11:53:51 2009 (4A5BC90F) 90310000 90332000 ndiswan ndiswan.sys Tue Jul 14 11:54:34 2009 (4A5BC93A) 91465000 91476000 NDProxy NDProxy.SYS Tue Jul 14 11:54:27 2009 (4A5BC933) 8f8d6000 8f8e4000 netbios netbios.sys Tue Jul 14 11:53:54 2009 (4A5BC912) 8f813000 8f845000 netbt netbt.sys Tue Jul 14 11:12:18 2009 (4A5BBF52) 8a4ee000 8a52c000 NETIO NETIO.SYS Tue Jul 14 11:12:35 2009 (4A5BBF63) 8a165000 8a173000 Npfs Npfs.SYS Tue Jul 14 11:11:31 2009 (4A5BBF23) 8f948000 8f952000 nsiproxy nsiproxy.sys Tue Jul 14 11:12:08 2009 (4A5BBF48) 82c56000 83066000 nt ntkrpamp.exe Sat Jun 19 15:55:24 2010 (4C1C3FAC) 8a239000 8a368000 Ntfs Ntfs.sys Tue Jul 14 11:12:05 2009 (4A5BBF45) 8a430000 8a437000 Null Null.SYS Tue Jul 14 11:11:12 2009 (4A5BBF10) 90fd0000 90fd1040 nvBridge nvBridge.kmd Sun Oct 17 06:04:23 2010 (4CB9DB17) 91476000 91497000 nvhda32v nvhda32v.sys Wed Sep 08 08:08:20 2010 (4C869BB4) 90633000 90fcf5a0 nvlddmkm nvlddmkm.sys Sun Oct 17 06:07:56 2010 (4CB9DBEC) 99604000 9964a000 nwifi nwifi.sys Tue Jul 14 11:51:59 2009 (4A5BC89F) 8f8a6000 8f8c5000 pacer pacer.sys Tue Jul 14 11:53:58 2009 (4A5BC916) 89fe8000 89ff9000 partmgr partmgr.sys Tue Jul 14 11:11:35 2009 (4A5BBF27) 89e00000 89e2a000 pci pci.sys Tue Jul 14 11:11:16 2009 (4A5BBF14) 8a0ac000 8a0ba000 PCIIDEX PCIIDEX.SYS Tue Jul 14 11:11:15 2009 (4A5BBF13) 8a3a6000 8a3b4000 pcw pcw.sys Tue Jul 14 11:11:10 2009 (4A5BBF0E) 9ba2d000 9bac4000 peauth peauth.sys Tue Jul 14 12:35:44 2009 (4A5BD2E0) 91497000 914c6000 portcls portcls.sys Tue Jul 14 11:51:00 2009 (4A5BC864) 83291000 832a2000 PSHED PSHED.dll Tue Jul 14 13:09:36 2009 (4A5BDAD0) 902ed000 90305000 rasl2tp rasl2tp.sys Tue Jul 14 11:54:33 2009 (4A5BC939) 90332000 9034a000 raspppoe raspppoe.sys Tue Jul 14 11:54:53 2009 (4A5BC94D) 9034a000 90361000 raspptp raspptp.sys Tue Jul 14 11:54:47 2009 (4A5BC947) 90361000 90378000 rassstp rassstp.sys Tue Jul 14 11:54:57 2009 (4A5BC951) 8f907000 8f948000 rdbss rdbss.sys Tue Jul 14 11:14:26 2009 (4A5BBFD2) 90378000 90382000 rdpbus rdpbus.sys Tue Jul 14 12:02:40 2009 (4A5BCB20) 8a20d000 8a215000 RDPCDD RDPCDD.sys Tue Jul 14 12:01:40 2009 (4A5BCAE4) 8a215000 8a21d000 rdpencdd rdpencdd.sys Tue Jul 14 12:01:39 2009 (4A5BCAE3) 8a21d000 8a225000 rdprefmp rdprefmp.sys Tue Jul 14 12:01:41 2009 (4A5BCAE5) 8a600000 8a62d000 rdyboost rdyboost.sys Tue Jul 14 11:22:02 2009 (4A5BC19A) 9965a000 9966d000 rspndr rspndr.sys Tue Jul 14 11:53:20 2009 (4A5BC8F0) 89faf000 89fd5000 SCSIPORT SCSIPORT.SYS Tue Jul 14 11:45:55 2009 (4A5BC733) 9bac4000 9bace000 secdrv secdrv.SYS Thu Sep 14 01:18:32 2006 (45080528) 8a7f1000 8a7f9000 spldr spldr.sys Tue May 12 04:13:47 2009 (4A084EBB) 89eb3000 89fa6000 sptd sptd.sys Mon Oct 12 09:54:02 2009 (4AD245EA) 9bb7d000 9bbce000 srv srv.sys Fri Aug 27 15:31:26 2010 (4C77318E) 9bb06000 9bb55000 srv2 srv2.sys Fri Aug 27 15:30:45 2010 (4C773165) 9bace000 9baef000 srvnet srvnet.sys Fri Aug 27 15:30:39 2010 (4C77315F) 911f9000 911fa380 swenum swenum.sys Tue Jul 14 11:45:08 2009 (4A5BC704) 8a62f000 8a778000 tcpip tcpip.sys Mon Jun 14 15:36:59 2010 (4C15A3DB) 9baef000 9bafc000 tcpipreg tcpipreg.sys Tue Jul 14 11:54:14 2009 (4A5BC926) 8a18a000 8a195000 TDI TDI.SYS Tue Jul 14 11:12:12 2009 (4A5BBF4C) 8a173000 8a18a000 tdx tdx.sys Tue Jul 14 11:12:10 2009 (4A5BBF4A) 8f8f7000 8f907000 termdd termdd.sys Tue Jul 14 12:01:35 2009 (4A5BCADF) 963c0000 963c9000 TSDDD TSDDD.dll unavailable (00000000) 8fa72000 8fa93000 tunnel tunnel.sys Tue Jul 14 11:54:03 2009 (4A5BC91B) 903b6000 903c4000 umbus umbus.sys Tue Jul 14 11:51:38 2009 (4A5BC88A) 9152f000 91546000 usbccgp usbccgp.sys Tue Jul 14 11:51:31 2009 (4A5BC883) 91546000 91547700 USBD USBD.SYS Tue Jul 14 11:51:05 2009 (4A5BC869) 90600000 9060f000 usbehci usbehci.sys Tue Jul 14 11:51:14 2009 (4A5BC872) 91421000 91465000 usbhub usbhub.sys Tue Jul 14 11:52:06 2009 (4A5BC8A6) 8fb83000 8fbce000 USBPORT USBPORT.SYS Tue Jul 14 11:51:13 2009 (4A5BC871) 91548000 9156bb00 usbvideo usbvideo.sys Tue Jul 14 11:51:51 2009 (4A5BC897) 89fdd000 89fe8000 vdrvroot vdrvroot.sys Tue Jul 14 11:46:19 2009 (4A5BC74B) 8a3d0000 8a3dc000 vga vga.sys Tue Jul 14 11:25:50 2009 (4A5BC27E) 8a3dc000 8a3fd000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:25:49 2009 (4A5BC27D) 8a7a9000 8a7b1380 vmstorfl vmstorfl.sys Tue Jul 14 11:28:44 2009 (4A5BC32C) 833ea000 833fa000 volmgr volmgr.sys Tue Jul 14 11:11:25 2009 (4A5BBF1D) 8a015000 8a060000 volmgrx volmgrx.sys Tue Jul 14 11:11:41 2009 (4A5BBF2D) 8a7b2000 8a7f1000 volsnap volsnap.sys Tue Jul 14 11:11:34 2009 (4A5BBF26) 911de000 911e8000 vwifibus vwifibus.sys Tue Jul 14 11:52:02 2009 (4A5BC8A2) 8f8c5000 8f8d6000 vwififlt vwififlt.sys Tue Jul 14 11:52:03 2009 (4A5BC8A3) 8f8e4000 8f8f7000 wanarp wanarp.sys Tue Jul 14 11:55:02 2009 (4A5BC956) 8a200000 8a20d000 watchdog watchdog.sys Tue Jul 14 11:24:10 2009 (4A5BC21A) 89e34000 89ea5000 Wdf01000 Wdf01000.sys Tue Jul 14 11:11:36 2009 (4A5BBF28) 89ea5000 89eb3000 WDFLDR WDFLDR.SYS Tue Jul 14 11:11:25 2009 (4A5BBF1D) 8f89f000 8f8a6000 wfplwf wfplwf.sys Tue Jul 14 11:53:51 2009 (4A5BC90F) 96160000 963ab000 win32k win32k.sys Wed Oct 20 16:00:01 2010 (4CBE5B31) 91018000 91021000 wmiacpi wmiacpi.sys Tue Jul 14 11:19:16 2009 (4A5BC0F4) 89fa6000 89faf000 WMILIB WMILIB.SYS Tue Jul 14 11:11:22 2009 (4A5BBF1A) 91400000 9141a000 WudfPf WudfPf.sys Tue Jul 14 11:50:13 2009 (4A5BC835) Unloaded modules: a2621000 a268b000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0006A000 99796000 997ae000 parport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00018000 8a5da000 8a5e7000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000D000 8a5e7000 8a5f2000 dump_pciidex Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000B000 8a5f2000 8a5fc000 dump_msahci. Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000A000 8a400000 8a411000 dump_dumpfve Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00011000
Ok guys, so far so good, I uninstalled AVG with the uninstall tool and tried out about 10 times or so to quit games and no BSODs so far so I guess AVG really was the culprit here.
Later edit: it happened again, this time when updating a game (Heroes of Newerth). Must add that it never game me a blue screen before when updating it. I've attached the dump files, any ideas?
Last edited by televizor; 29 Jan 2011 at 12:02.
STOP 0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED (go to top of page)
Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint in startup without having a debugger attached, Hardware incompatibility, Faulty system service, 3rd party remote control, Memory.
spldr.sys Mon May 11 17:13:47 2009 Daemon Tools and SPTD.SYS are still installed.
The sptd.sys driver is notorious for causing BSOD's with Windows 7. It's used by Daemon Tools /Alcohol 120 which will also have to be uninstalled.
Then use the correct (either 32bit or 64bit) download from Duplex Secure to uninstall in Safe Mode.
Make sure to select uninstall!
Some alternatives to DT/Alcohol that do not use SPTD.SYS
DVDFab
MagicDisc
PowerISO (The program is a trial but the drive emulation is free forever).
nvlddmkm.sys Sat Oct 16 18:07:56 2010 Updates available for your nVidia Drivers
Also please see:Let us know how it goes. If you get further problems with blue screens, attach your new dump files and details and we'll move on from there.
Bugcheck AnalysisDrivers:Code:Use !analyze -v to get detailed debugging information. BugCheck 1000008E, {c0000005, 82cd8f21, ad107a94, 0} Probably caused by : cdd.dll ( cdd!CGuardMutex::Enter+d ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 82cd8f21, The address that the exception occurred at Arg3: ad107a94, Trap Frame Arg4: 00000000Code:955b3000 955ec000 a1q36bnr a1q36bnr.SYS Tue Jul 14 22:12:41 2009 (4A5CF4C9) 89fa2000 89fea000 ACPI ACPI.sys Tue Jul 14 00:11:11 2009 (4A5BBF0F) 8e643000 8e69d000 afd afd.sys Tue Jul 14 00:12:34 2009 (4A5BBF62) 955ec000 955fe000 AgileVpn AgileVpn.sys Tue Jul 14 00:55:00 2009 (4A5BC954) 8a0ca000 8a0d3000 amdxata amdxata.sys Tue May 19 18:57:35 2009 (4A12F30F) 8a086000 8a08f000 atapi atapi.sys Tue Jul 14 00:11:15 2009 (4A5BBF13) 8a08f000 8a0b2000 ataport ataport.SYS Tue Jul 14 00:11:18 2009 (4A5BBF16) 9480c000 949c8000 athr athr.sys Fri May 07 00:56:08 2010 (4BE35718) 833f3000 833fe000 BATTC BATTC.SYS Tue Jul 14 00:19:15 2009 (4A5BC0F3) 8a786000 8a78d000 Beep Beep.SYS Tue Jul 14 00:45:00 2009 (4A5BC6FC) 8e7e2000 8e7f0000 blbdrive blbdrive.sys Tue Jul 14 00:23:04 2009 (4A5BC1D8) 832bb000 832c3000 BOOTVID BOOTVID.dll Tue Jul 14 02:04:34 2009 (4A5BD9A2) 95948000 95961000 bowser bowser.sys Tue Jul 14 00:14:21 2009 (4A5BBFCD) 828b0000 828ce000 cdd cdd.dll Tue Jul 14 02:04:18 2009 (4A5BD992) 8a760000 8a77f000 cdrom cdrom.sys Tue Jul 14 00:11:24 2009 (4A5BBF1C) 83305000 833b0000 CI CI.dll Tue Jul 14 02:09:28 2009 (4A5BDAC8) 8a708000 8a72d000 CLASSPNP CLASSPNP.SYS Tue Jul 14 00:11:20 2009 (4A5BBF18) 832c3000 83305000 CLFS CLFS.SYS Tue Jul 14 00:11:10 2009 (4A5BBF0E) 949d2000 949d5700 CmBatt CmBatt.sys Tue Jul 14 00:19:18 2009 (4A5BC0F6) 8a37c000 8a3d9000 cng cng.sys Tue Jul 14 00:32:55 2009 (4A5BC427) 833eb000 833f3000 compbatt compbatt.sys Tue Jul 14 00:19:18 2009 (4A5BC0F6) 94200000 9420d000 CompositeBus CompositeBus.sys Tue Jul 14 00:45:26 2009 (4A5BC716) 95dd8000 95de5000 crashdmp crashdmp.sys Tue Jul 14 00:45:50 2009 (4A5BC72E) 8e766000 8e7ca000 csc csc.sys Tue Jul 14 00:15:08 2009 (4A5BBFFC) 8e7ca000 8e7e2000 dfsc dfsc.sys Tue Jul 14 00:14:16 2009 (4A5BBFC8) 8e75a000 8e766000 discache discache.sys Tue Jul 14 00:24:04 2009 (4A5BC214) 8a6f7000 8a708000 disk disk.sys Tue Jul 14 00:11:28 2009 (4A5BBF20) 95d1d000 95d36000 drmk drmk.sys Tue Jul 14 01:36:05 2009 (4A5BD2F5) 95de5000 95df0000 dump_dumpata dump_dumpata.sys Tue Jul 14 00:11:16 2009 (4A5BBF14) 95c00000 95c11000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:12:47 2009 (4A5BBF6F) 95df0000 95dfa000 dump_msahci dump_msahci.sys Tue Jul 14 00:45:50 2009 (4A5BC72E) 95d86000 95d90000 Dxapi Dxapi.sys Tue Jul 14 00:25:25 2009 (4A5BC265) 94212000 942c9000 dxgkrnl dxgkrnl.sys Fri Oct 02 01:48:33 2009 (4AC54DE1) 942c9000 94302000 dxgmms1 dxgmms1.sys Tue Jul 14 00:25:25 2009 (4A5BC265) 8a107000 8a118000 fileinfo fileinfo.sys Tue Jul 14 00:21:51 2009 (4A5BC18F) 8a0d3000 8a107000 fltmgr fltmgr.sys Tue Jul 14 00:11:13 2009 (4A5BBF11) 8a3e7000 8a3f0000 Fs_Rec Fs_Rec.sys unavailable (00000000) 8a6c5000 8a6f7000 fvevol fvevol.sys Tue Jul 14 00:13:01 2009 (4A5BBF7D) 8a400000 8a431000 fwpkclnt fwpkclnt.sys Tue Jul 14 00:12:03 2009 (4A5BBF43) 82c17000 82c4e000 hal halmacpi.dll Tue Jul 14 00:11:03 2009 (4A5BBF07) 94302000 94321000 HDAudBus HDAudBus.sys Tue Jul 14 00:50:55 2009 (4A5BC85F) 95d36000 95d86000 HdAudio HdAudio.sys Tue Jul 14 00:51:46 2009 (4A5BC892) 94321000 9432b080 HECI HECI.sys Thu Sep 17 20:54:12 2009 (4AB293E4) 8a72d000 8a740000 HIDCLASS HIDCLASS.SYS Tue Jul 14 00:51:01 2009 (4A5BC865) 943f7000 943fd480 HIDPARSE HIDPARSE.SYS Tue Jul 14 00:50:59 2009 (4A5BC863) 8e7f0000 8e7fb000 hidusb hidusb.sys Tue Jul 14 00:51:04 2009 (4A5BC868) 958c3000 95948000 HTTP HTTP.sys Tue Jul 14 00:12:53 2009 (4A5BBF75) 8a6bd000 8a6c5000 hwpolicy hwpolicy.sys Tue Jul 14 00:11:01 2009 (4A5BBF05) 949d6000 949ee000 i8042prt i8042prt.sys Tue Jul 14 00:11:23 2009 (4A5BBF1B) 943e5000 943f7000 intelppm intelppm.sys Tue Jul 14 00:11:03 2009 (4A5BBF07) 94386000 943d8000 k57nd60x k57nd60x.sys Sat May 15 13:51:27 2010 (4BEE98CF) 949ee000 949fb000 kbdclass kbdclass.sys Tue Jul 14 00:11:15 2009 (4A5BBF13) 80bcd000 80bd5000 kdcom kdcom.dll Tue Jul 14 02:08:58 2009 (4A5BDAAA) 95c36000 95c6a000 ks ks.sys Tue Jul 14 00:45:13 2009 (4A5BC709) 8a369000 8a37c000 ksecdd ksecdd.sys Tue Jul 14 00:11:56 2009 (4A5BBF3C) 8a479000 8a49e000 ksecpkg ksecpkg.sys Fri Dec 11 04:04:22 2009 (4B21C4C6) 9584a000 9585a000 lltdio lltdio.sys Tue Jul 14 00:53:18 2009 (4A5BC8EE) 8a740000 8a75b000 luafv luafv.sys Tue Jul 14 00:15:44 2009 (4A5BC020) 83232000 832aa000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:06:41 2009 (4A5BDA21) 95d90000 95d9b000 monitor monitor.sys Tue Jul 14 00:25:58 2009 (4A5BC286) 943d8000 943e5000 mouclass mouclass.sys Tue Jul 14 00:11:15 2009 (4A5BBF13) 8e600000 8e60b000 mouhid mouhid.sys Tue Jul 14 00:45:08 2009 (4A5BC704) 8a070000 8a086000 mountmgr mountmgr.sys Tue Jul 14 00:11:27 2009 (4A5BBF1F) 95961000 95973000 mpsdrv mpsdrv.sys Tue Jul 14 00:52:52 2009 (4A5BC8D4) 95973000 95996000 mrxsmb mrxsmb.sys Sat Feb 27 07:32:02 2010 (4B88CA72) 95996000 959d1000 mrxsmb10 mrxsmb10.sys Sat Feb 27 07:32:21 2010 (4B88CA85) 959d1000 959ec000 mrxsmb20 mrxsmb20.sys Sat Feb 27 07:32:11 2010 (4B88CA7B) 8a0b2000 8a0bc000 msahci msahci.sys Tue Jul 14 00:45:50 2009 (4A5BC72E) 8a7df000 8a7ea000 Msfs Msfs.SYS Tue Jul 14 00:11:26 2009 (4A5BBF1E) 89fea000 89ff2000 msisadrv msisadrv.sys Tue Jul 14 00:11:09 2009 (4A5BBF0D) 8a33e000 8a369000 msrpc msrpc.sys unavailable (00000000) 8e750000 8e75a000 mssmbios mssmbios.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD) 8a6ad000 8a6bd000 mup mup.sys Tue Jul 14 00:14:14 2009 (4A5BBFC6) 8a118000 8a1cf000 ndis ndis.sys Tue Jul 14 00:12:24 2009 (4A5BBF58) 94c00000 94c0b000 ndistapi ndistapi.sys Tue Jul 14 00:54:24 2009 (4A5BC930) 958a0000 958b0000 ndisuio ndisuio.sys Tue Jul 14 00:53:51 2009 (4A5BC90F) 8a000000 8a022000 ndiswan ndiswan.sys Tue Jul 14 00:54:34 2009 (4A5BC93A) 95cbc000 95ccd000 NDProxy NDProxy.SYS Tue Jul 14 00:54:27 2009 (4A5BC933) 8e6d4000 8e6e2000 netbios netbios.sys Tue Jul 14 00:53:54 2009 (4A5BC912) 8e611000 8e643000 netbt netbt.sys Tue Jul 14 00:12:18 2009 (4A5BBF52) 8a43b000 8a479000 NETIO NETIO.SYS Tue Jul 14 00:12:35 2009 (4A5BBF63) 8a7ea000 8a7f8000 Npfs Npfs.SYS Tue Jul 14 00:11:31 2009 (4A5BBF23) 8e746000 8e750000 nsiproxy nsiproxy.sys Tue Jul 14 00:12:08 2009 (4A5BBF48) 82c4e000 8305e000 nt ntkrpamp.exe Sat Jun 19 04:55:24 2010 (4C1C3FAC) 8a20f000 8a33e000 Ntfs Ntfs.sys Tue Jul 14 00:12:05 2009 (4A5BBF45) 8a77f000 8a786000 Null Null.SYS unavailable (00000000) 955b1000 955b2040 nvBridge nvBridge.kmd Sat Oct 16 18:04:23 2010 (4CB9DB17) 95ccd000 95cee000 nvhda32v nvhda32v.sys Tue Sep 07 21:08:20 2010 (4C869BB4) 94c14000 955b05a0 nvlddmkm nvlddmkm.sys Sat Oct 16 18:07:56 2010 (4CB9DBEC) 9585a000 958a0000 nwifi nwifi.sys Tue Jul 14 00:51:59 2009 (4A5BC89F) 8e6a4000 8e6c3000 pacer pacer.sys Tue Jul 14 00:53:58 2009 (4A5BC916) 833da000 833eb000 partmgr partmgr.sys Tue Jul 14 00:11:35 2009 (4A5BBF27) 833b0000 833da000 pci pci.sys Tue Jul 14 00:11:16 2009 (4A5BBF14) 8a0bc000 8a0ca000 PCIIDEX PCIIDEX.SYS Tue Jul 14 00:11:15 2009 (4A5BBF13) 8a3d9000 8a3e7000 pcw pcw.sys Tue Jul 14 00:11:10 2009 (4A5BBF0E) 97a38000 97acf000 peauth peauth.sys Tue Jul 14 01:35:44 2009 (4A5BD2E0) 95cee000 95d1d000 portcls portcls.sys Tue Jul 14 00:51:00 2009 (4A5BC864) 832aa000 832bb000 PSHED PSHED.dll Tue Jul 14 02:09:36 2009 (4A5BDAD0) 8a5e7000 8a5ff000 rasl2tp rasl2tp.sys Tue Jul 14 00:54:33 2009 (4A5BC939) 83210000 83228000 raspppoe raspppoe.sys Tue Jul 14 00:54:53 2009 (4A5BC94D) 8a622000 8a639000 raspptp raspptp.sys Tue Jul 14 00:54:47 2009 (4A5BC947) 95c13000 95c2a000 rassstp rassstp.sys Tue Jul 14 00:54:57 2009 (4A5BC951) 8e705000 8e746000 rdbss rdbss.sys Tue Jul 14 00:14:26 2009 (4A5BBFD2) 95c2a000 95c34000 rdpbus rdpbus.sys Tue Jul 14 01:02:40 2009 (4A5BCB20) 8a7c7000 8a7cf000 RDPCDD RDPCDD.sys Tue Jul 14 01:01:40 2009 (4A5BCAE4) 8a7cf000 8a7d7000 rdpencdd rdpencdd.sys Tue Jul 14 01:01:39 2009 (4A5BCAE3) 8a7d7000 8a7df000 rdprefmp rdprefmp.sys Tue Jul 14 01:01:41 2009 (4A5BCAE5) 8a680000 8a6ad000 rdyboost rdyboost.sys Tue Jul 14 00:22:02 2009 (4A5BC19A) 958b0000 958c3000 rspndr rspndr.sys Tue Jul 14 00:53:20 2009 (4A5BC8F0) 89f7c000 89fa2000 SCSIPORT SCSIPORT.SYS Tue Jul 14 00:45:55 2009 (4A5BC733) 97acf000 97ad9000 secdrv secdrv.SYS Wed Sep 13 14:18:32 2006 (45080528) 8a678000 8a680000 spldr spldr.sys Mon May 11 17:13:47 2009 (4A084EBB) 89e80000 89f73000 sptd sptd.sys Sun Oct 11 21:54:02 2009 (4AD245EA) 97b56000 97ba7000 srv srv.sys Fri Aug 27 04:31:26 2010 (4C77318E) 97b07000 97b56000 srv2 srv2.sys Fri Aug 27 04:30:45 2010 (4C773165) 97ad9000 97afa000 srvnet srvnet.sys Fri Aug 27 04:30:39 2010 (4C77315F) 95c34000 95c35380 swenum swenum.sys Tue Jul 14 00:45:08 2009 (4A5BC704) 8a49e000 8a5e7000 tcpip tcpip.sys Mon Jun 14 04:36:59 2010 (4C15A3DB) 97afa000 97b07000 tcpipreg tcpipreg.sys Tue Jul 14 00:54:14 2009 (4A5BC926) 8a617000 8a622000 TDI TDI.SYS Tue Jul 14 00:12:12 2009 (4A5BBF4C) 8a600000 8a617000 tdx tdx.sys Tue Jul 14 00:12:10 2009 (4A5BBF4A) 8e6f5000 8e705000 termdd termdd.sys Tue Jul 14 01:01:35 2009 (4A5BCADF) 82880000 82889000 TSDDD TSDDD.dll unavailable (00000000) 8a1cf000 8a1f0000 tunnel tunnel.sys Tue Jul 14 00:54:03 2009 (4A5BC91B) 95c6a000 95c78000 umbus umbus.sys Tue Jul 14 00:51:38 2009 (4A5BC88A) 95d9b000 95db2000 usbccgp usbccgp.sys Tue Jul 14 00:51:31 2009 (4A5BC883) 95db2000 95db3700 USBD USBD.SYS Tue Jul 14 00:51:05 2009 (4A5BC869) 9432c000 9433b000 usbehci usbehci.sys Tue Jul 14 00:51:14 2009 (4A5BC872) 95c78000 95cbc000 usbhub usbhub.sys Tue Jul 14 00:52:06 2009 (4A5BC8A6) 9433b000 94386000 USBPORT USBPORT.SYS Tue Jul 14 00:51:13 2009 (4A5BC871) 95db4000 95dd7b00 usbvideo usbvideo.sys Tue Jul 14 00:51:51 2009 (4A5BC897) 89ff2000 89ffd000 vdrvroot vdrvroot.sys Tue Jul 14 00:46:19 2009 (4A5BC74B) 8a78d000 8a799000 vga vga.sys Tue Jul 14 00:25:50 2009 (4A5BC27E) 8a799000 8a7ba000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:25:49 2009 (4A5BC27D) 8a431000 8a439380 vmstorfl vmstorfl.sys Tue Jul 14 00:28:44 2009 (4A5BC32C) 83200000 83210000 volmgr volmgr.sys Tue Jul 14 00:11:25 2009 (4A5BBF1D) 8a025000 8a070000 volmgrx volmgrx.sys unavailable (00000000) 8a639000 8a678000 volsnap volsnap.sys Tue Jul 14 00:11:34 2009 (4A5BBF26) 949c8000 949d2000 vwifibus vwifibus.sys Tue Jul 14 00:52:02 2009 (4A5BC8A2) 8e6c3000 8e6d4000 vwififlt vwififlt.sys Tue Jul 14 00:52:03 2009 (4A5BC8A3) 8e6e2000 8e6f5000 wanarp wanarp.sys Tue Jul 14 00:55:02 2009 (4A5BC956) 8a7ba000 8a7c7000 watchdog watchdog.sys Tue Jul 14 00:24:10 2009 (4A5BC21A) 89e01000 89e72000 Wdf01000 Wdf01000.sys Tue Jul 14 00:11:36 2009 (4A5BBF28) 89e72000 89e80000 WDFLDR WDFLDR.SYS Tue Jul 14 00:11:25 2009 (4A5BBF1D) 8e69d000 8e6a4000 wfplwf wfplwf.sys Tue Jul 14 00:53:51 2009 (4A5BC90F) 82620000 8286b000 win32k win32k.sys Wed Oct 20 04:00:01 2010 (4CBE5B31) 94800000 94809000 wmiacpi wmiacpi.sys Tue Jul 14 00:19:16 2009 (4A5BC0F4) 89f73000 89f7c000 WMILIB WMILIB.SYS Tue Jul 14 00:11:22 2009 (4A5BBF1A) 95830000 9584a000 WudfPf WudfPf.sys Tue Jul 14 00:50:13 2009 (4A5BC835)
Ok, it crashed with a BSOD again, this time when quiting Starcraft 2 after a multiplayer game.
What I did since the last time:
- Uninstalled Daemon Tools with the Duplex Secure uninstall tool. Wasn't able to run it in safe mode (the uninstall option was greyed out) as the driver's not used in safe mode (I think). It uninstalled ok (uninstalled the program from Control Panel afterwards) and I got PowerISO as a replacement.
- Upgraded the video drivers.
- Removed AVG and installed Avast Free edition instead.
- Installed the Rainmeter desktop customization tool (eats about 1% of the total RAM memory) and RocketDock (a taskbar, eats about 10 MB of RAM).
As a note, a friend took a look at the minidump and said that the culprit could be cdd.dll (\System32\cdd.dll) that belongs to IrfanView but I never installed it.
This last one was caused by a memory exception by cdd.dll which is the Canonical Display driver part of the OS
I would run a system file check to verify and repair it and other OS ifles.
SFC /SCANNOW Command - System File Checker
Code:Microsoft (R) Windows Debugger Version 6.11.0001.404 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Users\K\Desktop\013111-17472-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols *http://msdl.microsoft.com/download/symbols Executable search path is: Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7600.16617.x86fre.win7_gdr.100618-1621 Machine Name: Kernel base = 0x82c05000 PsLoadedModuleList = 0x82d4d810 Debug session time: Mon Jan 31 09:38:30.928 2011 (GMT-5) System Uptime: 0 days 3:32:14.130 Loading Kernel Symbols ............................................................... ................................................................ ........................ Loading User Symbols Loading unloaded module list ...... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1000008E, {c0000005, 82c8ff21, bafefa94, 0} Probably caused by : cdd.dll ( cdd!CGuardMutex::Enter+d ) Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 82c8ff21, The address that the exception occurred at Arg3: bafefa94, Trap Frame Arg4: 00000000 Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+1a 82c8ff21 f00fba3000 lock btr dword ptr [eax],0 TRAP_FRAME: bafefa94 -- (.trap 0xffffffffbafefa94) ErrCode = 00000002 eax=00000000 ebx=89e0a07e ecx=00000000 edx=00000001 esi=00000000 edi=854c2838 eip=82c8ff21 esp=bafefb08 ebp=bafefb28 iopl=0 nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a: 82c8ff21 f00fba3000 lock btr dword ptr [eax],0 ds:0023:00000000=???????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x8E PROCESS_NAME: SC2.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 968672c9 to 82c8ff21 STACK_TEXT: bafefb0c 968672c9 ff1be018 9686a8d4 ff1be018 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a bafefb14 9686a8d4 ff1be018 00000000 00000000 cdd!CGuardMutex::Enter+0xd bafefb28 9686b7c7 0043bfef ff1be018 fd61b288 cdd!CddBitmap::RemoveFromCddBitmapList+0x28 bafefb5c 96861753 ff1be018 bafefbfc 96a5d47c cdd!CddBitmapHw::Release+0x7d bafefb68 96a5d47c ff1be018 00000002 bafefc20 cdd!DrvDeleteDeviceBitmapEx+0x39 bafefbfc 96a5e890 00000001 00000000 8e051880 win32k!SURFACE::bDeleteSurface+0x235 bafefc10 96a60d8d 00000001 00000001 fd61b288 win32k!SURFREF::bDeleteSurface+0x14 bafefc24 96a6052d 0000080c 00000001 0000080c win32k!vCleanupSurfaces+0x43 bafefc44 96a5c1ca ff59b260 00000000 00000000 win32k!NtGdiCloseProcess+0xc5 bafefc64 96a5eaaf ff59b260 00000000 86f986b0 win32k!GdiProcessCallout+0x151 bafefc80 82e4db98 85618d40 00000000 a4db267d win32k!W32pProcessCallout+0x5d bafefcfc 82e66dc7 00000000 ffffffff 0012fe8c nt!PspExitThread+0x46d bafefd24 82c4844a ffffffff 00000000 0012fe98 nt!NtTerminateProcess+0x1fa bafefd24 77c764f4 ffffffff 00000000 0012fe98 nt!KiFastCallEntry+0x12a WARNING: Frame IP not in any known module. Following frames may be wrong. 0012fe98 00000000 00000000 00000000 00000000 0x77c764f4 STACK_COMMAND: kb FOLLOWUP_IP: cdd!CGuardMutex::Enter+d 968672c9 c7460401000000 mov dword ptr [esi+4],1 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: cdd!CGuardMutex::Enter+d FOLLOWUP_NAME: MachineOwner MODULE_NAME: cdd IMAGE_NAME: cdd.dll DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bd992 FAILURE_BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 82c8ff21, The address that the exception occurred at Arg3: bafefa94, Trap Frame Arg4: 00000000 Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+1a 82c8ff21 f00fba3000 lock btr dword ptr [eax],0 TRAP_FRAME: bafefa94 -- (.trap 0xffffffffbafefa94) ErrCode = 00000002 eax=00000000 ebx=89e0a07e ecx=00000000 edx=00000001 esi=00000000 edi=854c2838 eip=82c8ff21 esp=bafefb08 ebp=bafefb28 iopl=0 nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a: 82c8ff21 f00fba3000 lock btr dword ptr [eax],0 ds:0023:00000000=???????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x8E PROCESS_NAME: SC2.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 968672c9 to 82c8ff21 STACK_TEXT: bafefb0c 968672c9 ff1be018 9686a8d4 ff1be018 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a bafefb14 9686a8d4 ff1be018 00000000 00000000 cdd!CGuardMutex::Enter+0xd bafefb28 9686b7c7 0043bfef ff1be018 fd61b288 cdd!CddBitmap::RemoveFromCddBitmapList+0x28 bafefb5c 96861753 ff1be018 bafefbfc 96a5d47c cdd!CddBitmapHw::Release+0x7d bafefb68 96a5d47c ff1be018 00000002 bafefc20 cdd!DrvDeleteDeviceBitmapEx+0x39 bafefbfc 96a5e890 00000001 00000000 8e051880 win32k!SURFACE::bDeleteSurface+0x235 bafefc10 96a60d8d 00000001 00000001 fd61b288 win32k!SURFREF::bDeleteSurface+0x14 bafefc24 96a6052d 0000080c 00000001 0000080c win32k!vCleanupSurfaces+0x43 bafefc44 96a5c1ca ff59b260 00000000 00000000 win32k!NtGdiCloseProcess+0xc5 bafefc64 96a5eaaf ff59b260 00000000 86f986b0 win32k!GdiProcessCallout+0x151 bafefc80 82e4db98 85618d40 00000000 a4db267d win32k!W32pProcessCallout+0x5d bafefcfc 82e66dc7 00000000 ffffffff 0012fe8c nt!PspExitThread+0x46d bafefd24 82c4844a ffffffff 00000000 0012fe98 nt!NtTerminateProcess+0x1fa bafefd24 77c764f4 ffffffff 00000000 0012fe98 nt!KiFastCallEntry+0x12a WARNING: Frame IP not in any known module. Following frames may be wrong. 0012fe98 00000000 00000000 00000000 00000000 0x77c764f4 STACK_COMMAND: kb FOLLOWUP_IP: cdd!CGuardMutex::Enter+d 968672c9 c7460401000000 mov dword ptr [esi+4],1 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: cdd!CGuardMutex::Enter+d FOLLOWUP_NAME: MachineOwner MODULE_NAME: cdd IMAGE_NAME: cdd.dll DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bd992 FAILURE_BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d Followup: MachineOwner ---------
Ok, ran it, didn't find any errors.
Gonna do a lot of heavy testing, see if it occurs again and how often and trying to see if disabling desktop composition can have any effect.
As a side note, it happens less often then it did the first time I posted.
Will keep updated. Thanks.
Update: Ok, it did it again, this time I wasn't even running a game. Here's the mini dump attached.
Last edited by televizor; 10 Feb 2011 at 15:27.
It happened again, is there nobody that knows what the hell's wrong with it?
Read Zigzag3143's post - dump still blames Windows core file (very unlikely to be the cause).
Please run Driver Verifier (it will find the faulty driver) (see note below)...
Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.
So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).
In Windows 7 you can make a Startup Repair disk by going to Start....All Programs...Maintenance...Create a System Repair Disc - with Windows Vista you'll have to use your installation disk or the "Repair your computer" option at the top of the Safe Mode menu .
Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
NOTE: You can use Low Resource Simulation if you'd like. From my limited experimentation it makes the BSOD's come faster.
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.
Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out. If it doesn't crash for you, then let it run for at least 36 hours of continuous operation (an estimate on my part).
Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.
If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line:Code:Delete these registry keys (works in XP, Vista, Win7)Code:: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\VerifyDrivers HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\VerifyDriverLevel
More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users
Regards...
Code:******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 1000008E, {c0000005, 82e9cf21, a0e4ba94, 0} Probably caused by : cdd.dll ( cdd!CGuardMutex::Enter+d ) Followup: MachineOwner --------- 2: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: 82e9cf21, The address that the exception occurred at Arg3: a0e4ba94, Trap Frame Arg4: 00000000 Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+1a 82e9cf21 f00fba3000 lock btr dword ptr [eax],0 TRAP_FRAME: a0e4ba94 -- (.trap 0xffffffffa0e4ba94) ErrCode = 00000002 eax=00000000 ebx=8a1eb07e ecx=00000000 edx=00000001 esi=00000000 edi=85097d48 eip=82e9cf21 esp=a0e4bb08 ebp=a0e4bb28 iopl=0 nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a: 82e9cf21 f00fba3000 lock btr dword ptr [eax],0 ds:0023:00000000=???????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0x8E PROCESS_NAME: QuestViewer.ex CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 971d72c9 to 82e9cf21 STACK_TEXT: a0e4bb0c 971d72c9 fe3a6b20 971da8d4 fe3a6b20 nt!ExEnterCriticalRegionAndAcquireFastMutexUnsafe+0x1a a0e4bb14 971da8d4 fe3a6b20 00000000 00000000 cdd!CGuardMutex::Enter+0xd a0e4bb28 971db7c7 0043bfef fe3a6b20 ffa60b28 cdd!CddBitmap::RemoveFromCddBitmapList+0x28 a0e4bb5c 971d1753 fe3a6b20 a0e4bbfc 96f8d47c cdd!CddBitmapHw::Release+0x7d a0e4bb68 96f8d47c fe3a6b20 00000002 a0e4bc20 cdd!DrvDeleteDeviceBitmapEx+0x39 a0e4bbfc 96f8e890 00000001 00000000 0a051000 win32k!SURFACE::bDeleteSurface+0x235 a0e4bc10 96f90d8d 00000001 00000001 ffa60b28 win32k!SURFREF::bDeleteSurface+0x14 a0e4bc24 96f9052d 00001634 00000001 00001634 win32k!vCleanupSurfaces+0x43 a0e4bc44 96f8c1ca ff28b980 00000000 00000000 win32k!NtGdiCloseProcess+0xc5 a0e4bc64 96f8eaaf ff28b980 00000000 87913048 win32k!GdiProcessCallout+0x151 a0e4bc80 8305ab98 8523dc40 00000000 bec83e0e win32k!W32pProcessCallout+0x5d a0e4bcfc 83073dc7 00000000 ffffffff 00dafe28 nt!PspExitThread+0x46d a0e4bd24 82e5544a ffffffff 00000000 00dafe34 nt!NtTerminateProcess+0x1fa a0e4bd24 77cf64f4 ffffffff 00000000 00dafe34 nt!KiFastCallEntry+0x12a WARNING: Frame IP not in any known module. Following frames may be wrong. 00dafe34 00000000 00000000 00000000 00000000 0x77cf64f4 STACK_COMMAND: kb FOLLOWUP_IP: cdd!CGuardMutex::Enter+d 971d72c9 c7460401000000 mov dword ptr [esi+4],1 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: cdd!CGuardMutex::Enter+d FOLLOWUP_NAME: MachineOwner MODULE_NAME: cdd IMAGE_NAME: cdd.dll DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bd992 FAILURE_BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d BUCKET_ID: 0x8E_cdd!CGuardMutex::Enter+d Followup: MachineOwner --------- 2: kd> lmtsmn start end module name 89e82000 89eca000 ACPI ACPI.sys Tue Jul 14 11:11:11 2009 (4A5BBF0F) 8f0a7000 8f101000 afd afd.sys Tue Jul 14 11:12:34 2009 (4A5BBF62) 904f3000 90505000 AgileVpn AgileVpn.sys Tue Jul 14 11:55:00 2009 (4A5BC954) 89fe9000 89ff2000 amdxata amdxata.sys Wed May 20 05:57:35 2009 (4A12F30F) 8225d000 8225fb00 aswFsBlk aswFsBlk.SYS Thu Jan 13 21:37:07 2011 (4D2EB9B3) 82226000 8225d000 aswMonFlt aswMonFlt.sys Thu Jan 13 21:37:17 2011 (4D2EB9BD) 8f101000 8f105200 aswRdr aswRdr.SYS Thu Jan 13 21:37:29 2011 (4D2EB9C9) 8f2b4000 8f2fa480 aswSP aswSP.SYS Thu Jan 13 21:41:11 2011 (4D2EBAA7) 8f06b000 8f074f00 aswTdi aswTdi.SYS Thu Jan 13 21:40:14 2011 (4D2EBA6E) 89fa5000 89fae000 atapi atapi.sys Tue Jul 14 11:11:15 2009 (4A5BBF13) 89fae000 89fd1000 ataport ataport.SYS Tue Jul 14 11:11:18 2009 (4A5BBF16) 9081e000 909da000 athr athr.sys Fri May 07 11:56:08 2010 (4BE35718) 89f29000 89f34000 BATTC BATTC.SYS Tue Jul 14 11:19:15 2009 (4A5BC0F3) 8a026000 8a02d000 Beep Beep.SYS Tue Jul 14 11:45:00 2009 (4A5BC6FC) 8f2a6000 8f2b4000 blbdrive blbdrive.sys Tue Jul 14 11:23:04 2009 (4A5BC1D8) 89cbe000 89cc6000 BOOTVID BOOTVID.dll Tue Jul 14 13:04:34 2009 (4A5BD9A2) 82378000 82391000 bowser bowser.sys Tue Jul 14 11:14:21 2009 (4A5BBFCD) 971d0000 971ee000 cdd cdd.dll Tue Jul 14 13:04:18 2009 (4A5BD992) 8a000000 8a01f000 cdrom cdrom.sys Tue Jul 14 11:11:24 2009 (4A5BBF1C) 89d08000 89db3000 CI CI.dll Tue Jul 14 13:09:28 2009 (4A5BDAC8) 8a3d5000 8a3fa000 CLASSPNP CLASSPNP.SYS Tue Jul 14 11:11:20 2009 (4A5BBF18) 89cc6000 89d08000 CLFS CLFS.SYS Tue Jul 14 11:11:10 2009 (4A5BBF0E) 909e4000 909e7700 CmBatt CmBatt.sys Tue Jul 14 11:19:18 2009 (4A5BC0F6) 8a21a000 8a277000 cng cng.sys Tue Jul 14 11:32:55 2009 (4A5BC427) 89f21000 89f29000 compbatt compbatt.sys Tue Jul 14 11:19:18 2009 (4A5BC0F6) 904e6000 904f3000 CompositeBus CompositeBus.sys Tue Jul 14 11:45:26 2009 (4A5BC716) 91370000 9137d000 crashdmp crashdmp.sys Tue Jul 14 11:45:50 2009 (4A5BC72E) 8f22a000 8f28e000 csc csc.sys Tue Jul 14 11:15:08 2009 (4A5BBFFC) 8f28e000 8f2a6000 dfsc dfsc.sys Tue Jul 14 11:14:16 2009 (4A5BBFC8) 8f1d1000 8f1dd000 discache discache.sys Tue Jul 14 11:24:04 2009 (4A5BC214) 8a400000 8a411000 disk disk.sys Tue Jul 14 11:11:28 2009 (4A5BBF20) 912b5000 912ce000 drmk drmk.sys Tue Jul 14 12:36:05 2009 (4A5BD2F5) 9137d000 91388000 dump_dumpata dump_dumpata.sys Tue Jul 14 11:11:16 2009 (4A5BBF14) 91392000 913a3000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:12:47 2009 (4A5BBF6F) 91388000 91392000 dump_msahci dump_msahci.sys Tue Jul 14 11:45:50 2009 (4A5BC72E) 9131e000 91328000 Dxapi Dxapi.sys Tue Jul 14 11:25:25 2009 (4A5BC265) 8f31c000 8f3d3000 dxgkrnl dxgkrnl.sys Fri Oct 02 13:48:33 2009 (4AC54DE1) 8f000000 8f039000 dxgmms1 dxgmms1.sys Tue Jul 14 11:25:25 2009 (4A5BC265) 823c6000 823f0000 fastfat fastfat.SYS Tue Jul 14 11:14:01 2009 (4A5BBFB9) 89de7000 89df8000 fileinfo fileinfo.sys Tue Jul 14 11:21:51 2009 (4A5BC18F) 89db3000 89de7000 fltmgr fltmgr.sys Tue Jul 14 11:11:13 2009 (4A5BBF11) 8a285000 8a28e000 Fs_Rec Fs_Rec.sys Tue Jul 14 11:11:14 2009 (4A5BBF12) 8a1a7000 8a1d9000 fvevol fvevol.sys Tue Jul 14 11:13:01 2009 (4A5BBF7D) 8a564000 8a595000 fwpkclnt fwpkclnt.sys Tue Jul 14 11:12:03 2009 (4A5BBF43) 83222000 83259000 hal halmacpi.dll Tue Jul 14 11:11:03 2009 (4A5BBF07) 8f3d3000 8f3f2000 HDAudBus HDAudBus.sys Tue Jul 14 11:50:55 2009 (4A5BC85F) 912ce000 9131e000 HdAudio HdAudio.sys Tue Jul 14 11:51:46 2009 (4A5BC892) 8f3f2000 8f3fc080 HECI HECI.sys Fri Sep 18 07:54:12 2009 (4AB293E4) 913ae000 913c1000 HIDCLASS HIDCLASS.SYS Tue Jul 14 11:51:01 2009 (4A5BC865) 913c1000 913c7480 HIDPARSE HIDPARSE.SYS Tue Jul 14 11:50:59 2009 (4A5BC863) 913a3000 913ae000 hidusb hidusb.sys Tue Jul 14 11:51:04 2009 (4A5BC868) 822f3000 82378000 HTTP HTTP.sys Tue Jul 14 11:12:53 2009 (4A5BBF75) 8a5f5000 8a5fd000 hwpolicy hwpolicy.sys Tue Jul 14 11:11:01 2009 (4A5BBF05) 909e8000 90a00000 i8042prt i8042prt.sys Tue Jul 14 11:11:23 2009 (4A5BBF1B) 904d4000 904e6000 intelppm intelppm.sys Tue Jul 14 11:11:03 2009 (4A5BBF07) 90479000 904cb000 k57nd60x k57nd60x.sys Sun May 16 00:51:27 2010 (4BEE98CF) 90800000 9080d000 kbdclass kbdclass.sys Tue Jul 14 11:11:15 2009 (4A5BBF13) 80baa000 80bb2000 kdcom kdcom.dll Tue Jul 14 13:08:58 2009 (4A5BDAAA) 9059a000 905ce000 ks ks.sys Tue Jul 14 11:45:13 2009 (4A5BC709) 8a194000 8a1a7000 ksecdd ksecdd.sys Tue Jul 14 11:11:56 2009 (4A5BBF3C) 8a383000 8a3a8000 ksecpkg ksecpkg.sys Fri Dec 11 17:04:22 2009 (4B21C4C6) 8227a000 8228a000 lltdio lltdio.sys Tue Jul 14 11:53:18 2009 (4A5BC8EE) 913d3000 913ee000 luafv luafv.sys Tue Jul 14 11:15:44 2009 (4A5BC020) 89c35000 89cad000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 13:06:41 2009 (4A5BDA21) 91328000 91333000 monitor monitor.sys Tue Jul 14 11:25:58 2009 (4A5BC286) 9080d000 9081a000 mouclass mouclass.sys Tue Jul 14 11:11:15 2009 (4A5BBF13) 913c8000 913d3000 mouhid mouhid.sys Tue Jul 14 11:45:08 2009 (4A5BC704) 89f8f000 89fa5000 mountmgr mountmgr.sys Tue Jul 14 11:11:27 2009 (4A5BBF1F) 82391000 823a3000 mpsdrv mpsdrv.sys Tue Jul 14 11:52:52 2009 (4A5BC8D4) 823a3000 823c6000 mrxsmb mrxsmb.sys Sat Feb 27 20:32:02 2010 (4B88CA72) 9c01c000 9c057000 mrxsmb10 mrxsmb10.sys Sat Feb 27 20:32:21 2010 (4B88CA85) 9c057000 9c072000 mrxsmb20 mrxsmb20.sys Sat Feb 27 20:32:11 2010 (4B88CA7B) 89fd1000 89fdb000 msahci msahci.sys Tue Jul 14 11:45:50 2009 (4A5BC72E) 89c29000 89c34000 Msfs Msfs.SYS Tue Jul 14 11:11:26 2009 (4A5BBF1E) 89ed3000 89edb000 msisadrv msisadrv.sys Tue Jul 14 11:11:09 2009 (4A5BBF0D) 8a169000 8a194000 msrpc msrpc.sys Tue Jul 14 11:11:59 2009 (4A5BBF3F) 8f1c7000 8f1d1000 mssmbios mssmbios.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD) 8a5e5000 8a5f5000 mup mup.sys Tue Jul 14 11:14:14 2009 (4A5BBFC6) 8a28e000 8a345000 ndis ndis.sys Tue Jul 14 11:12:24 2009 (4A5BBF58) 9051d000 90528000 ndistapi ndistapi.sys Tue Jul 14 11:54:24 2009 (4A5BC930) 822d0000 822e0000 ndisuio ndisuio.sys Tue Jul 14 11:53:51 2009 (4A5BC90F) 90528000 9054a000 ndiswan ndiswan.sys Tue Jul 14 11:54:34 2009 (4A5BC93A) 91254000 91265000 NDProxy NDProxy.SYS Tue Jul 14 11:54:27 2009 (4A5BC933) 8f13d000 8f14b000 netbios netbios.sys Tue Jul 14 11:53:54 2009 (4A5BC912) 8f075000 8f0a7000 netbt netbt.sys Tue Jul 14 11:12:18 2009 (4A5BBF52) 8a345000 8a383000 NETIO NETIO.SYS Tue Jul 14 11:12:35 2009 (4A5BBF63) 8f03b000 8f049000 Npfs Npfs.SYS Tue Jul 14 11:11:31 2009 (4A5BBF23) 8f1bd000 8f1c7000 nsiproxy nsiproxy.sys Tue Jul 14 11:12:08 2009 (4A5BBF48) 82e12000 83222000 nt ntkrpamp.exe Sat Jun 19 15:55:24 2010 (4C1C3FAC) 8a03a000 8a169000 Ntfs Ntfs.sys Tue Jul 14 11:12:05 2009 (4A5BBF45) 8a01f000 8a026000 Null Null.SYS Tue Jul 14 11:11:12 2009 (4A5BBF10) 8f600000 8f601040 nvBridge nvBridge.kmd Sat Jan 08 14:57:19 2011 (4D27C47F) 91265000 91286000 nvhda32v nvhda32v.sys Fri Nov 12 12:10:19 2010 (4CDC77DB) 8f605000 8fffeee0 nvlddmkm nvlddmkm.sys Sat Jan 08 15:03:58 2011 (4D27C60E) 8228a000 822d0000 nwifi nwifi.sys Tue Jul 14 11:51:59 2009 (4A5BC89F) 8f10d000 8f12c000 pacer pacer.sys Tue Jul 14 11:53:58 2009 (4A5BC916) 89f10000 89f21000 partmgr partmgr.sys Tue Jul 14 11:11:35 2009 (4A5BBF27) 89ee6000 89f10000 pci pci.sys Tue Jul 14 11:11:16 2009 (4A5BBF14) 89fdb000 89fe9000 PCIIDEX PCIIDEX.SYS Tue Jul 14 11:11:15 2009 (4A5BBF13) 8a277000 8a285000 pcw pcw.sys Tue Jul 14 11:11:10 2009 (4A5BBF0E) 9c08a000 9c121000 peauth peauth.sys Tue Jul 14 12:35:44 2009 (4A5BD2E0) 91286000 912b5000 portcls portcls.sys Tue Jul 14 11:51:00 2009 (4A5BC864) 89cad000 89cbe000 PSHED PSHED.dll Tue Jul 14 13:09:36 2009 (4A5BDAD0) 90505000 9051d000 rasl2tp rasl2tp.sys Tue Jul 14 11:54:33 2009 (4A5BC939) 9054a000 90562000 raspppoe raspppoe.sys Tue Jul 14 11:54:53 2009 (4A5BC94D) 90562000 90579000 raspptp raspptp.sys Tue Jul 14 11:54:47 2009 (4A5BC947) 90579000 90590000 rassstp rassstp.sys Tue Jul 14 11:54:57 2009 (4A5BC951) 8f17c000 8f1bd000 rdbss rdbss.sys Tue Jul 14 11:14:26 2009 (4A5BBFD2) 90590000 9059a000 rdpbus rdpbus.sys Tue Jul 14 12:02:40 2009 (4A5BCB20) 8a1f7000 8a1ff000 RDPCDD RDPCDD.sys Tue Jul 14 12:01:40 2009 (4A5BCAE4) 89ff2000 89ffa000 rdpencdd rdpencdd.sys Tue Jul 14 12:01:39 2009 (4A5BCAE3) 89c21000 89c29000 rdprefmp rdprefmp.sys Tue Jul 14 12:01:41 2009 (4A5BCAE5) 8a3a8000 8a3d5000 rdyboost rdyboost.sys Tue Jul 14 11:22:02 2009 (4A5BC19A) 822e0000 822f3000 rspndr rspndr.sys Tue Jul 14 11:53:20 2009 (4A5BC8F0) 8f16e000 8f17ba60 SCDEmu SCDEmu.SYS Mon Apr 12 20:44:34 2010 (4BC2DD72) 9c121000 9c12b000 secdrv secdrv.SYS Thu Sep 14 01:18:32 2006 (45080528) 8a5dd000 8a5e5000 spldr spldr.sys Tue May 12 04:13:47 2009 (4A084EBB) 9c1a8000 9c1f9000 srv srv.sys Fri Aug 27 15:31:26 2010 (4C77318E) 9c159000 9c1a8000 srv2 srv2.sys Fri Aug 27 15:30:45 2010 (4C773165) 9c12b000 9c14c000 srvnet srvnet.sys Fri Aug 27 15:30:39 2010 (4C77315F) 9081a000 9081b380 swenum swenum.sys Tue Jul 14 11:45:08 2009 (4A5BC704) 8a41b000 8a564000 tcpip tcpip.sys Mon Jun 14 15:36:59 2010 (4C15A3DB) 9c14c000 9c159000 tcpipreg tcpipreg.sys Tue Jul 14 11:54:14 2009 (4A5BC926) 8f060000 8f06b000 TDI TDI.SYS Tue Jul 14 11:12:12 2009 (4A5BBF4C) 8f049000 8f060000 tdx tdx.sys Tue Jul 14 11:12:10 2009 (4A5BBF4A) 8f15e000 8f16e000 termdd termdd.sys Tue Jul 14 12:01:35 2009 (4A5BCADF) 97120000 97129000 TSDDD TSDDD.dll unavailable (00000000) 8f2fb000 8f31c000 tunnel tunnel.sys Tue Jul 14 11:54:03 2009 (4A5BC91B) 905ce000 905dc000 umbus umbus.sys Tue Jul 14 11:51:38 2009 (4A5BC88A) 91333000 9134a000 usbccgp usbccgp.sys Tue Jul 14 11:51:31 2009 (4A5BC883) 9134a000 9134b700 USBD USBD.SYS Tue Jul 14 11:51:05 2009 (4A5BC869) 8f200000 8f20f000 usbehci usbehci.sys Tue Jul 14 11:51:14 2009 (4A5BC872) 91210000 91254000 usbhub usbhub.sys Tue Jul 14 11:52:06 2009 (4A5BC8A6) 9042e000 90479000 USBPORT USBPORT.SYS Tue Jul 14 11:51:13 2009 (4A5BC871) 9134c000 9136fb00 usbvideo usbvideo.sys Tue Jul 14 11:51:51 2009 (4A5BC897) 89edb000 89ee6000 vdrvroot vdrvroot.sys Tue Jul 14 11:46:19 2009 (4A5BC74B) 8a02d000 8a039000 vga vga.sys Tue Jul 14 11:25:50 2009 (4A5BC27E) 89c00000 89c21000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:25:49 2009 (4A5BC27D) 8a595000 8a59d380 vmstorfl vmstorfl.sys Tue Jul 14 11:28:44 2009 (4A5BC32C) 89f34000 89f44000 volmgr volmgr.sys Tue Jul 14 11:11:25 2009 (4A5BBF1D) 89f44000 89f8f000 volmgrx volmgrx.sys Tue Jul 14 11:11:41 2009 (4A5BBF2D) 8a59e000 8a5dd000 volsnap volsnap.sys Tue Jul 14 11:11:34 2009 (4A5BBF26) 909da000 909e4000 vwifibus vwifibus.sys Tue Jul 14 11:52:02 2009 (4A5BC8A2) 8f12c000 8f13d000 vwififlt vwififlt.sys Tue Jul 14 11:52:03 2009 (4A5BC8A3) 8f14b000 8f15e000 wanarp wanarp.sys Tue Jul 14 11:55:02 2009 (4A5BC956) 8a1ea000 8a1f7000 watchdog watchdog.sys Tue Jul 14 11:24:10 2009 (4A5BC21A) 89e03000 89e74000 Wdf01000 Wdf01000.sys Tue Jul 14 11:11:36 2009 (4A5BBF28) 89e74000 89e82000 WDFLDR WDFLDR.SYS Tue Jul 14 11:11:25 2009 (4A5BBF1D) 8f106000 8f10d000 wfplwf wfplwf.sys Tue Jul 14 11:53:51 2009 (4A5BC90F) 96ec0000 9710b000 win32k win32k.sys Wed Oct 20 16:00:01 2010 (4CBE5B31) 904cb000 904d4000 wmiacpi wmiacpi.sys Tue Jul 14 11:19:16 2009 (4A5BC0F4) 89eca000 89ed3000 WMILIB WMILIB.SYS Tue Jul 14 11:11:22 2009 (4A5BBF1A) 82260000 8227a000 WudfPf WudfPf.sys Tue Jul 14 11:50:13 2009 (4A5BC835) Unloaded modules: 82200000 82221000 WUDFRd.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00021000 9c000000 9c017000 USBSTOR.SYS Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00017000 9c1f9000 9c1fb000 MSPQM.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00002000 a6202000 a626c000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0006A000 9c072000 9c08a000 parport.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00018000 8a200000 8a20d000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000D000 8a20d000 8a218000 dump_pciidex Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000B000 8a411000 8a41b000 dump_msahci. Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000A000 8a1d9000 8a1ea000 dump_dumpfve Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00011000
Quote