At least I can run in safe mode :)

MountainKing · 24 Mar 2011

Hello Forum, I hope you guys can help me out, I have been having endless BSoD's whenever I boot outside of safemode.

Right now I am in Safemode with networking.

Windows 7 Pro 64bit OEM Version
I installed it myself about 6 weeks ago on a brandnew Seagate HDD (1TB)

Right before the BSoD's started I got messages on bootup that the following .dlls could not be found: ewitaped.dll, pm6gehqi.dll and bbaf27v.dll

I googled these and found nothing, not a single reference to any of those .dll's (that made me nervous).

Then the Blue screens started, I have tried restoring to an earlier point (went back a week) but that didn't help. I have tried using DeviceDoctor to update drivers, at this point those scans tell me two drivers are out of date, no matter how many times I update them (PS/2 Keyboard and Realtek PCIe Controller).

I have attached my dump report as described, and I have tried to run perfmon /report but I get an error and no report from that (The system cannot find the path specified.)

Thanks for reading.

***EDIT***
I forgot to mention, the BSoD error messages vary between, IRQ LESS Not Equal, neto.sys and System Sevice Exception, but that is probably in the dump files

Jonathan_King · 24 Mar 2011

Hello,

Please start with a Malwarebytes scan: Malwarebytes Anti-Malware - Reviews and free Malwarebytes Anti-Malware downloads at Download.com

The Realtek ethernet driver is outdated:

Code:

Rt64win7.sys  Fri May 22 10:52:30 2009 (4A16BC2E)

Manually download the driver from here: Realtek

Install it using these directions: Driver Install - Device Manager

Install updated nVidia drivers from here: Drivers - Download NVIDIA Drivers

Code:

nvlddmkm.sys  Sun Sep 27 20:12:06 2009 (4ABFFF56)

Be sure to install the ATK0110 driver from the Utilities section here: http://support.asus.com/download/download.aspx?model=P7P55D LE&os=30&SLanguage=en-us

Code:

ASACPI.sys    Sun Mar 27 22:30:36 2005 (42476C4C)

Finally, run a hard drive diagnostic using SeaTools for DOS.

...Summary of the dumps:

Code:


Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 17:29:53.524 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:32.537
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 17:18:34.264 2011 (UTC - 4:00)
System Uptime: 0 days 0:05:45.388
Probably caused by : memory_corruption ( nt!MmUnlockPages+41d )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!MmUnlockPages+41d
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 17:04:00.054 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:59.178
Probably caused by : ntkrnlmp.exe ( nt!IopCloseFile+19a )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  wmpnscfg.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!IopCloseFile+19a
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 16:54:45.793 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:42.293
Probably caused by : ntkrnlmp.exe ( nt!KiApcInterrupt+1f1 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  AtBroker.exe
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!KiApcInterrupt+1f1
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 16:53:02.389 2011 (UTC - 4:00)
System Uptime: 0 days 0:08:02.889
Probably caused by : ntkrnlmp.exe ( nt!KiApcInterrupt+1f1 )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  msiexec.exe
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!KiApcInterrupt+1f1
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 16:17:59.994 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:25.118
Probably caused by : ntkrnlmp.exe ( nt!IopCloseFile+19a )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  dllhost.exe
FAILURE_BUCKET_ID:  X64_0x3B_nt!IopCloseFile+19a
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Debug session time: Thu Mar 24 15:52:50.248 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:33.261
Probably caused by : ataport.SYS ( ataport!IdeCompleteScsiIrp+62 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xA_ataport!IdeCompleteScsiIrp+62
SystemProductName = System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

MountainKing · 24 Mar 2011

Thank you so much for the easy to follow instructions.

I have done the first 4 steps (everything but run SeaTools) and just a moment ago I booted out of safemode and got another BSoD (the message was "IRQ Less than or equal")

I am going to run SeaTools now and report back.

Thanks again!

mgorman87 · 24 Mar 2011

Please upload a new report so we can analyze your new dump

MountainKing · 24 Mar 2011

Here is my latest dump file, note that last time I tried to boot into safe mode with networking I bluescreened again. So I had to grab this from plain safemode, transfer it to a USB drive and upload from my laptop.

DeanP · 24 Mar 2011

Install SP1 ----> Learn how to install Windows 7 Service Pack 1 (SP1)

Run Driver Verifier: Driver Verifier - Enable and Disable

Dean

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002067591, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!KiApcInterrupt+1f1 )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002067591, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!KiApcInterrupt+1f1
fffff800`02067591 48cf            iretq

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800022c20e0
 ffffffffffffffff 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  WerFault.exe

CURRENT_IRQL:  0

EXCEPTION_RECORD:  fffff88005f784b8 -- (.exr 0xfffff88005f784b8)
ExceptionAddress: fffff80002067591 (nt!KiApcInterrupt+0x00000000000001f1)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000008
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME:  fffff88005f78560 -- (.trap 0xfffff88005f78560)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000000f7 rbx=0000000000000000 rcx=0000000000000091
rdx=00000000000000f6 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002067591 rsp=fffff88005f786f8 rbp=fffffa80065be617
 r8=0000000000000088  r9=00000000000000f7 r10=00000000000000f7
r11=0000000000000200 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di ng nz na pe nc
nt!KiApcInterrupt+0x1f1:
fffff800`02067591 48cf            iretq
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800020c4a39 to fffff8000208a740

STACK_TEXT:  
fffff880`05f77ce8 fffff800`020c4a39 : 00000000`0000001e ffffffff`c0000005 fffff800`02067591 00000000`00000000 : nt!KeBugCheckEx
fffff880`05f77cf0 fffff800`02089d82 : fffff880`05f784b8 00000000`000000f7 fffff880`05f78560 00000000`000000de : nt!KiDispatchException+0x1b9
fffff880`05f78380 fffff800`0208868a : 00000000`00000000 fffffa80`065be670 fffffa80`065bf990 00000000`000000de : nt!KiExceptionDispatch+0xc2
fffff880`05f78560 fffff800`02067591 : fffffa80`065b7151 00000000`00000000 00000000`00000200 00000001`05f78720 : nt!KiGeneralProtectionFault+0x10a
fffff880`05f786f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiApcInterrupt+0x1f1


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiApcInterrupt+1f1
fffff800`02067591 48cf            iretq

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!KiApcInterrupt+1f1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!KiApcInterrupt+1f1

BUCKET_ID:  X64_0x1E_c0000005_nt!KiApcInterrupt+1f1

Followup: MachineOwner
---------

7: kd> lmtsmn
start             end                 module name
fffff880`02b9d000 fffff880`02bdb000   1394ohci 1394ohci.sys Tue Jul 14 12:07:12 2009 (4A5BCC30)
fffff880`00ec4000 fffff880`00f1b000   ACPI     ACPI.sys     Tue Jul 14 11:19:34 2009 (4A5BC106)
fffff880`02a33000 fffff880`02abd000   afd      afd.sys      Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`01073000 fffff880`01089000   AgileVpn AgileVpn.sys Tue Jul 14 12:10:24 2009 (4A5BCCF0)
fffff880`010ed000 fffff880`010f8000   amdxata  amdxata.sys  Wed May 20 05:56:59 2009 (4A12F2EB)
fffff880`02df8000 fffff880`02e00000   ASACPI   ASACPI.sys   Thu May 14 13:25:17 2009 (4A0B72FD)
fffff880`00c1a000 fffff880`00c23000   atapi    atapi.sys    Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00c23000 fffff880`00c4d000   ataport  ataport.SYS  Tue Jul 14 11:19:52 2009 (4A5BC118)
fffff960`00a90000 fffff960`00af1000   ATMFD    ATMFD.DLL    Fri Jan 07 18:49:20 2011 (4D26A960)
fffff880`0181c000 fffff880`01823000   Beep     Beep.SYS     Tue Jul 14 12:00:13 2009 (4A5BCA8D)
fffff880`02be6000 fffff880`02bf7000   blbdrive blbdrive.sys Tue Jul 14 11:35:59 2009 (4A5BC4DF)
fffff880`05a53000 fffff880`05a71000   bowser   bowser.sys   Tue Jul 14 11:23:50 2009 (4A5BC206)
fffff880`02dce000 fffff880`02df8000   cdrom    cdrom.sys    Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`00d33000 fffff880`00df3000   CI       CI.dll       Tue Jul 14 13:32:13 2009 (4A5BE01D)
fffff880`019ab000 fffff880`019db000   CLASSPNP CLASSPNP.SYS Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00cd5000 fffff880`00d33000   CLFS     CLFS.SYS     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Tue Jul 14 11:49:40 2009 (4A5BC814)
fffff880`015eb000 fffff880`015fb000   CompositeBus CompositeBus.sys Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`03600000 fffff880`0360e000   crashdmp crashdmp.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`02c05000 fffff880`02c88000   csc      csc.sys      Tue Jul 14 11:24:26 2009 (4A5BC22A)
fffff880`02c88000 fffff880`02ca6000   dfsc     dfsc.sys     Tue Jul 14 11:23:44 2009 (4A5BC200)
fffff880`01995000 fffff880`019ab000   disk     disk.sys     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`0361a000 fffff880`03623000   dump_atapi dump_atapi.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`0360e000 fffff880`0361a000   dump_dumpata dump_dumpata.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`03623000 fffff880`03636000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:21:51 2009 (4A5BC18F)
fffff880`03636000 fffff880`03642000   Dxapi    Dxapi.sys    Tue Jul 14 11:38:28 2009 (4A5BC574)
fffff960`00580000 fffff960`0059e000   dxg      dxg.sys      Tue Jul 14 11:38:28 2009 (4A5BC574)
fffff880`01144000 fffff880`01158000   fileinfo fileinfo.sys Tue Jul 14 11:34:25 2009 (4A5BC481)
fffff880`010f8000 fffff880`01144000   fltmgr   fltmgr.sys   Tue Jul 14 11:19:59 2009 (4A5BC11F)
fffff960`009c0000 fffff960`009c9000   framebuf framebuf.dll Tue Jul 14 11:38:47 2009 (4A5BC587)
fffff880`013db000 fffff880`013e5000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 11:19:45 2009 (4A5BC111)
fffff880`0195b000 fffff880`01995000   fvevol   fvevol.sys   Sat Sep 26 14:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Tue Jul 14 11:21:08 2009 (4A5BC164)
fffff800`025f7000 fffff800`02640000   hal      hal.dll      Tue Jul 14 13:27:36 2009 (4A5BDF08)
fffff880`02d40000 fffff880`02d64000   HDAudBus HDAudBus.sys Tue Jul 14 12:06:13 2009 (4A5BCBF5)
fffff880`0368a000 fffff880`036a3000   HIDCLASS HIDCLASS.SYS Tue Jul 14 12:06:21 2009 (4A5BCBFD)
fffff880`02bf7000 fffff880`02bff080   HIDPARSE HIDPARSE.SYS Tue Jul 14 12:06:17 2009 (4A5BCBF9)
fffff880`0367c000 fffff880`0368a000   hidusb   hidusb.sys   Tue Jul 14 12:06:22 2009 (4A5BCBFE)
fffff880`01952000 fffff880`0195b000   hwpolicy hwpolicy.sys Tue Jul 14 11:19:22 2009 (4A5BC0FA)
fffff880`02a00000 fffff880`02a1e000   i8042prt i8042prt.sys Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00c4d000 fffff880`00c6b000   jraid    jraid.sys    Sat Jul 18 03:31:50 2009 (4A609966)
fffff880`02a1e000 fffff880`02a2d000   kbdclass kbdclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`019e8000 fffff880`019f6000   kbdhid   kbdhid.sys   Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff800`00bd2000 fffff800`00bd5000   kdcom    kdcom.dll    Tue Mar 15 00:05:09 2011 (4D7DF665)
fffff880`03737000 fffff880`0377a000   ks       ks.sys       Thu Mar 04 17:32:25 2010 (4B8F37D9)
fffff880`013b0000 fffff880`013ca000   ksecdd   ksecdd.sys   Tue Jul 14 11:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 19:03:32 2009 (4B21E0B4)
fffff880`00c7d000 fffff880`00cc1000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 13:29:10 2009 (4A5BDF66)
fffff880`03726000 fffff880`03735000   mouclass mouclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`019db000 fffff880`019e8000   mouhid   mouhid.sys   Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000   mountmgr mountmgr.sys Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`05a71000 fffff880`05a89000   mpsdrv   mpsdrv.sys   Tue Jul 14 12:08:25 2009 (4A5BCC79)
fffff880`05a89000 fffff880`05ab6000   mrxsmb   mrxsmb.sys   Sat Feb 27 20:52:19 2010 (4B88CF33)
fffff880`05ab6000 fffff880`05b04000   mrxsmb10 mrxsmb10.sys Sat Feb 27 20:52:28 2010 (4B88CF3C)
fffff880`05b04000 fffff880`05b27000   mrxsmb20 mrxsmb20.sys Sat Feb 27 20:52:26 2010 (4B88CF3A)
fffff880`0186f000 fffff880`0187a000   Msfs     Msfs.SYS     Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00f24000 fffff880`00f2e000   msisadrv msisadrv.sys Tue Jul 14 11:19:26 2009 (4A5BC0FE)
fffff880`01164000 fffff880`011c2000   msrpc    msrpc.sys    Tue Jul 14 11:21:32 2009 (4A5BC17C)
fffff880`013e5000 fffff880`013f0000   mssmbios mssmbios.sys Tue Jul 14 11:31:10 2009 (4A5BC3BE)
fffff880`01940000 fffff880`01952000   mup      mup.sys      Tue Jul 14 11:23:45 2009 (4A5BC201)
fffff880`014f9000 fffff880`015eb000   ndis     ndis.sys     Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`013f0000 fffff880`013fc000   ndistapi ndistapi.sys Tue Jul 14 12:10:00 2009 (4A5BCCD8)
fffff880`011c2000 fffff880`011f1000   ndiswan  ndiswan.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`037e6000 fffff880`037fb000   NDProxy  NDProxy.SYS  Tue Jul 14 12:10:05 2009 (4A5BCCDD)
fffff880`02b31000 fffff880`02b40000   netbios  netbios.sys  Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff880`02abd000 fffff880`02b02000   netbt    netbt.sys    Tue Jul 14 11:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Tue Jul 14 11:21:46 2009 (4A5BC18A)
fffff880`0187a000 fffff880`0188b000   Npfs     Npfs.SYS     Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`02b91000 fffff880`02b9d000   nsiproxy nsiproxy.sys Tue Jul 14 11:21:02 2009 (4A5BC15E)
fffff800`0201a000 fffff800`025f7000   nt       ntkrnlmp.exe Wed Oct 27 15:43:09 2010 (4CC791BD)
fffff880`0120d000 fffff880`013b0000   Ntfs     Ntfs.sys     Tue Jul 14 11:20:47 2009 (4A5BC14F)
fffff880`01813000 fffff880`0181c000   Null     Null.SYS     Tue Jul 14 11:19:37 2009 (4A5BC109)
fffff880`02b0b000 fffff880`02b31000   pacer    pacer.sys    Tue Jul 14 12:09:41 2009 (4A5BCCC5)
fffff880`00f6e000 fffff880`00f83000   partmgr  partmgr.sys  Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00f2e000 fffff880`00f61000   pci      pci.sys      Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`00ff4000 fffff880`00ffb000   pciide   pciide.sys   Tue Jul 14 11:19:49 2009 (4A5BC115)
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`013ca000 fffff880`013db000   pcw      pcw.sys      Tue Jul 14 11:19:27 2009 (4A5BC0FF)
fffff880`00cc1000 fffff880`00cd5000   PSHED    PSHED.dll    Tue Jul 14 13:32:23 2009 (4A5BE027)
fffff880`01158000 fffff880`01163e00   PxHlpa64 PxHlpa64.sys Wed Jun 24 11:16:35 2009 (4A416253)
fffff880`01089000 fffff880`010ad000   rasl2tp  rasl2tp.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`036a4000 fffff880`036bf000   raspppoe raspppoe.sys Tue Jul 14 12:10:17 2009 (4A5BCCE9)
fffff880`036bf000 fffff880`036e0000   raspptp  raspptp.sys  Tue Jul 14 12:10:18 2009 (4A5BCCEA)
fffff880`036e0000 fffff880`036fa000   rassstp  rassstp.sys  Tue Jul 14 12:10:25 2009 (4A5BCCF1)
fffff880`02b40000 fffff880`02b91000   rdbss    rdbss.sys    Tue Jul 14 11:24:09 2009 (4A5BC219)
fffff880`03707000 fffff880`03712000   rdpbus   rdpbus.sys   Tue Jul 14 12:17:46 2009 (4A5BCEAA)
fffff880`01866000 fffff880`0186f000   rdpencdd rdpencdd.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`01906000 fffff880`01940000   rdyboost rdyboost.sys Tue Jul 14 11:34:34 2009 (4A5BC48A)
fffff880`02d64000 fffff880`02dce000   Rt64win7 Rt64win7.sys Wed Feb 16 22:03:57 2011 (4D5B92FD)
fffff880`010be000 fffff880`010ed000   SCSIPORT SCSIPORT.SYS Tue Jul 14 12:01:04 2009 (4A5BCAC0)
fffff880`03735000 fffff880`03736480   swenum   swenum.sys   Tue Jul 14 12:00:18 2009 (4A5BCA92)
fffff880`036fa000 fffff880`03707000   tap0901  tap0901.sys  Sat Dec 12 12:48:03 2009 (4B22DA33)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Mon Jun 14 15:39:04 2010 (4C15A458)
fffff880`014e5000 fffff880`014f2000   TDI      TDI.SYS      Tue Jul 14 11:21:18 2009 (4A5BC16E)
fffff880`0188b000 fffff880`018a9000   tdx      tdx.sys      Tue Jul 14 11:21:15 2009 (4A5BC16B)
fffff880`03712000 fffff880`03726000   termdd   termdd.sys   Tue Jul 14 12:16:36 2009 (4A5BCE64)
fffff960`007a0000 fffff960`007aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`02ca6000 fffff880`02ccc000   tunnel   tunnel.sys   Tue Jul 14 12:09:37 2009 (4A5BCCC1)
fffff880`0377a000 fffff880`0378c000   umbus    umbus.sys    Tue Jul 14 12:06:56 2009 (4A5BCC20)
fffff880`0365f000 fffff880`0367c000   usbccgp  usbccgp.sys  Tue Jul 14 12:06:45 2009 (4A5BCC15)
fffff880`0365d000 fffff880`0365ef00   USBD     USBD.SYS     Tue Jul 14 12:06:23 2009 (4A5BCBFF)
fffff880`02d2f000 fffff880`02d40000   usbehci  usbehci.sys  Tue Jul 14 12:06:30 2009 (4A5BCC06)
fffff880`0378c000 fffff880`037e6000   usbhub   usbhub.sys   Tue Jul 14 12:07:09 2009 (4A5BCC2D)
fffff880`02bdb000 fffff880`02be6000   usbohci  usbohci.sys  Tue Jul 14 12:06:30 2009 (4A5BCC06)
fffff880`02cd9000 fffff880`02d2f000   USBPORT  USBPORT.SYS  Tue Jul 14 12:06:31 2009 (4A5BCC07)
fffff880`01800000 fffff880`0180c000   usbprint usbprint.sys Tue Jul 14 12:38:18 2009 (4A5BD37A)
fffff880`03642000 fffff880`0365d000   USBSTOR  USBSTOR.SYS  Tue Jul 14 12:06:34 2009 (4A5BCC0A)
fffff880`02ccc000 fffff880`02cd9000   usbuhci  usbuhci.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00f61000 fffff880`00f6e000   vdrvroot vdrvroot.sys Tue Jul 14 12:01:31 2009 (4A5BCADB)
fffff880`01823000 fffff880`01831000   vga      vga.sys      Tue Jul 14 11:38:47 2009 (4A5BC587)
fffff880`01831000 fffff880`01856000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:38:51 2009 (4A5BC58B)
fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Tue Jul 14 11:42:54 2009 (4A5BC67E)
fffff880`00f83000 fffff880`00f98000   volmgr   volmgr.sys   Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00f98000 fffff880`00ff4000   volmgrx  volmgrx.sys  Tue Jul 14 11:20:33 2009 (4A5BC141)
fffff880`018b2000 fffff880`018fe000   volsnap  volsnap.sys  Tue Jul 14 11:20:08 2009 (4A5BC128)
fffff880`01856000 fffff880`01866000   watchdog watchdog.sys Tue Jul 14 11:37:35 2009 (4A5BC53F)
fffff880`00e11000 fffff880`00eb5000   Wdf01000 Wdf01000.sys Tue Jul 14 11:22:07 2009 (4A5BC19F)
fffff880`00eb5000 fffff880`00ec4000   WDFLDR   WDFLDR.SYS   Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`02b02000 fffff880`02b0b000   wfplwf   wfplwf.sys   Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00320000   win32k   win32k.sys   Wed Jan 05 16:59:44 2011 (4D23ECB0)
fffff880`00f1b000 fffff880`00f24000   WMILIB   WMILIB.SYS   Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`05a32000 fffff880`05a53000   WudfPf   WudfPf.sys   Tue Jul 14 12:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`019db000 fffff880`019e9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`019e9000 fffff880`019f5000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`019f5000 fffff880`019fe000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01800000 fffff880`01813000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`018fe000 fffff880`01906000   spldr.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00008000

mgorman87 · 24 Mar 2011

Dean, he cannot boot into windows, only into safe mode. I don't think he can install sp1

DeanP · 24 Mar 2011

My apologies - I haven't fully read the whole story/problem.

EDIT: Run Startup Repair

MountainKing · 24 Mar 2011

Startup repair wasn't able to detect any problems.

DeanP · 25 Mar 2011

Run Verifier.