BSOD ATAPort.sys

KuroShinsei · 27 Mar 2011

Ok, so I know i'm using vista and this is a win 7 forum... but i am desperate you are guys are the only active people i can find regarding tech help in this matter so please humour me. I have followed the instructions on the forum asking for information, and attached the files requested. Also I am using vista home 32-bit OS, OEM. Pc is approx 3 years old and the OS has never been reinstalled.

I use spyware doctor with antivirus as well as registry mechanic, and i'm positive the problems i am having were caused by infections.

Here is the background. 2 days ago i was watching a show online, i got a popup from my SDwAV saying it detected a trojan, i clicked block and ran a scan, it removed said trojan. Computer was fine for approx 8 hours when all of a sudden i got a message stating "host process for windows services stopped working". Once this happened anything that required administrative privileges or had the security shield icon next to it would not work.

I ran SDwAV again, and blue screened part way through. I tried again in safe mode... same thing. Called PcTools tech support, followed instructions, was told to reinstall SDwAV, did so, part way through installation i blue screened. Windows then would no longer load. I grabbed my windows disk, ran a repair and voila, windows works again, but still same problem as before, getting bsod and the "host process for windows services stopped working" problem. The problem shows up after around 1-2 hrs on the computer and needs to be restarted for it to work again.

Also, when playing call of duty black ops after a while it starts to freeze up. I decided to run a driver utility to see what was out of date and what not hoping for an easy fix, updated my vid driver, no change. When I would blue screen my pc was set to restart itself so i could never see the message, but on the last blue screen i saw it say ATAPort.sys, though I missed the error code. Have since changed the settings so next time it happens i'll have more info, but i think that is plenty. I could use any help at all to resolve this problem. Thanks.

zigzag3143 · 27 Mar 2011

KuroShinsei said:

Ok, so I know i'm using vista and this is a win 7 forum... but i am desperate you are guys are the only active people i can find regarding tech help in this matter so please humour me. I have followed the instructions on the forum asking for information, and attached the files requested. Also I am using vista home 32-bit OS, OEM. Pc is approx 3 years old and the OS has never been reinstalled.

I use spyware doctor with antivirus as well as registry mechanic, and i'm positive the problems i am having were caused by infections.

Here is the background. 2 days ago i was watching a show online, i got a popup from my SDwAV saying it detected a trojan, i clicked block and ran a scan, it removed said trojan. Computer was fine for approx 8 hours when all of a sudden i got a message stating "host process for windows services stopped working". Once this happened anything that required administrative privileges or had the security shield icon next to it would not work.

I ran SDwAV again, and blue screened part way through. I tried again in safe mode... same thing. Called PcTools tech support, followed instructions, was told to reinstall SDwAV, did so, part way through installation i blue screened. Windows then would no longer load. I grabbed my windows disk, ran a repair and voila, windows works again, but still same problem as before, getting bsod and the "host process for windows services stopped working" problem. The problem shows up after around 1-2 hrs on the computer and needs to be restarted for it to work again.

Also, when playing call of duty black ops after a while it starts to freeze up. I decided to run a driver utility to see what was out of date and what not hoping for an easy fix, updated my vid driver, no change. When I would blue screen my pc was set to restart itself so i could never see the message, but on the last blue screen i saw it say ATAPort.sys, though I missed the error code. Have since changed the settings so next time it happens i'll have more info, but i think that is plenty. I could use any help at all to resolve this problem. Thanks.

This one wazs not caused by ataport.sys. It probably was caused by stpd.sys Sptd.sys, used by alcohol and daemon tools is a HUGE cause of BSOD's.

It is listed in this one. You have other software that can also cause them like PCTools.

I would

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%.

They use a driver, found in your dmp,sptd.sys, that is notorious for causing BSODs.

Use this SPTD uninstaller DuplexSecure - Downloads

when you're done you can use this Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) in its place.

Remove PCTools

Run a system file check to verify and repair your OS files.

Let us know the results

Code:

Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : ataport.SYS ( ataport!IdeLogCrbActive+7b )

mgorman87 · 27 Mar 2011

Welcome. Vista and 7 are almost identical when it comes to BSOD analysis.

Code:

sptd.sys     Wed Mar 05 19:32:57 2008 (47CF3BB9)

Please uninstall Daemon Tools. It is known to cause BSOD (as it did in your situation). You can use the removal tool found here

Code:

e1e6032.sys  Mon Oct 29 17:43:48 2007 (47265414)

Please update your Intel(R) 82566MM Gigabit Network Connection - here

Code:

bcmwl6.sys   Tue Oct 03 22:38:08 2006 (45231E90)

Update your Broadcom 802.11g Network Adapter driver - here

Code:

RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

Update your RIM product drivers - here

Code:

RTKVHDA.sys  Wed May 02 04:18:37 2007 (4638495D)

Update your Realtek HD Audio drivers - here

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Mike\Downloads\BSOD Prob files\Windows_NT6_BSOD_jcgriff2\Mini032711-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Machine Name:
Kernel base = 0x82a0c000 PsLoadedModuleList = 0x82b23c70
Debug session time: Sun Mar 27 19:48:24.623 2011 (UTC - 4:00)
System Uptime: 0 days 2:49:50.625
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {8ad25898, 2, 0, 830caddd}

Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : ataport.SYS ( ataport!IdeLogCrbActive+7b )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 8ad25898, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 830caddd, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82b43868
Unable to read MiSystemVaType memory at 82b23420
 8ad25898 

CURRENT_IRQL:  2

FAULTING_IP: 
ataport!IdeLogCrbActive+7b
830caddd a5              movs    dword ptr es:[edi],dword ptr [esi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  82b01abc -- (.trap 0xffffffff82b01abc)
ErrCode = 00000000
eax=85c98d10 ebx=86378320 ecx=8ad25868 edx=00000000 esi=8ad25898 edi=86378320
eip=830caddd esp=82b01b30 ebp=82b01b3c iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010282
ataport!IdeLogCrbActive+0x7b:
830caddd a5              movs    dword ptr es:[edi],dword ptr [esi] es:0023:86378320=???????? ds:0023:8ad25898=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 830caddd to 82a59fd9

STACK_TEXT:  
82b01abc 830caddd badb0d00 00000000 8637309c nt!KiTrap0E+0x2e1
82b01b3c 830d100d 85c98d10 88aa2d08 00000000 ataport!IdeLogCrbActive+0x7b
82b01b60 830a4074 85c98d10 82b01b98 82dcb1f4 ataport!IdeStartIoCallBack+0x59
82b01b6c 82dcb1f4 8636aba8 00000000 85c98d6c PCIIDEX!BmReceiveScatterGatherList+0x1e
82b01b98 830a4195 85c98d6c 8636aba8 88aa2ce8 hal!HalBuildScatterGatherList+0x1ba
82b01bd4 830d0863 8636ac60 85c98d10 85c98d00 PCIIDEX!BmSetup+0x3d
82b01bf0 830d0ce4 863730e0 85c98d00 85c98d10 ataport!IdePortSetupScatterGatherList+0x2d
82b01c08 830cfb14 863730e0 85c98d10 85b82724 ataport!IdeDispatchChannelRequest+0x6e
82b01c20 830cfc3e 863730e0 85c98d10 85b82480 ataport!IdeStartChannelRequest+0x6c
82b01c34 830d0ea8 863745e0 82b01cec 85b82480 ataport!IdeStartNextDeviceRequest+0x22
82b01c54 830d112d 863730e0 85b82480 8598f52c ataport!IdeProcessCompletedRequests+0xd6
82b01ca8 8069ad54 8637309c 86373028 00000000 ataport!IdePortCompletionDpc+0xab
WARNING: Stack unwind information not available. Following frames may be wrong.
82b01ce8 82ab66e2 8637309c 86373028 00000000 sptd+0x11d54
82b01d50 82ab489d 00000000 0000000e 00000000 nt!KiRetireDpcList+0x147
82b01d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ataport!IdeLogCrbActive+7b
830caddd a5              movs    dword ptr es:[edi],dword ptr [esi]

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  ataport!IdeLogCrbActive+7b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ataport

IMAGE_NAME:  ataport.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  49e01eee

FAILURE_BUCKET_ID:  0xD1_ataport!IdeLogCrbActive+7b

BUCKET_ID:  0xD1_ataport!IdeLogCrbActive+7b

Followup: MachineOwner
---------

Code:

start    end        module name
805b1000 805f7000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
93d10000 93d58000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
830c1000 830c9000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
830c9000 830e7000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
93bda000 93bf5000   AtihdLH3 AtihdLH3.sys Wed Nov 17 07:00:05 2010 (4CE3C3C5)
93005000 9378b000   atikmdag atikmdag.sys Wed Jan 26 17:42:31 2011 (4D40A357)
8b321000 8b360000   atikmpag atikmpag.sys Wed Jan 26 17:13:11 2011 (4D409C77)
833b3000 833ea000   avnbi4d8 avnbi4d8.SYS Sun Jul 20 20:16:38 2008 (4883D566)
8318b000 83200000   bcmwl6   bcmwl6.sys   Tue Oct 03 22:38:08 2006 (45231E90)
93fca000 93fd1000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
80488000 80490000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
a1493000 a14ac000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
9ba70000 9ba7e000   cdd      cdd.dll      unavailable (00000000)
a2908000 a291e000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
8b1bc000 8b1d4000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
804d1000 805b1000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
8b598000 8b5b9000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80490000 804d1000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
95249000 95256000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
8b5b9000 8b5c2000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
8b1d4000 8b1eb000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
8b587000 8b598000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
93c34000 93c59000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
95261000 95269000   dump_atapi dump_atapi.sys Sat Apr 11 00:39:09 2009 (49E01EED)
95256000 95261000   dump_dumpata dump_dumpata.sys Sat Apr 11 00:39:09 2009 (49E01EED)
95269000 95273000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8b360000 8b400000   dxgkrnl  dxgkrnl.sys  Thu Jan 20 08:50:57 2011 (4D383DC1)
93797000 937d1000   e1e6032  e1e6032.sys  Mon Oct 29 17:43:48 2007 (47265414)
8b560000 8b587000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
937f6000 937fcb00   ElbyCDFL ElbyCDFL.sys Thu Dec 14 16:22:33 2006 (4581C099)
93fd3000 93fd7680   ElbyCDIO ElbyCDIO.sys Tue Aug 07 15:48:32 2007 (46B8CC90)
a15c8000 a15f0000   fastfat  fastfat.SYS  Sat Apr 11 00:13:52 2009 (49E01900)
937eb000 937f6000   fdc      fdc.sys      unavailable (00000000)
830e7000 830f7000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
807b8000 807ea000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
93fba000 93fc3000   Fs_Rec   Fs_Rec.SYS   unavailable (00000000)
8b2f7000 8b312000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
8b5f6000 8b5fb280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
82dc6000 82df9000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
83326000 833b3000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
93c85000 93c95000   HIDCLASS HIDCLASS.SYS Sat Apr 11 00:42:47 2009 (49E01FC7)
93fda000 93fe0380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
93e00000 93e09000   hidusb   hidusb.sys   Sat Apr 11 00:42:48 2009 (49E01FC8)
a1409000 a1476000   HTTP     HTTP.sys     Tue Nov 03 14:41:42 2009 (4AF08776)
8b312000 8b321000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
93dd5000 93deb000   ISODrive ISODrive.sys Sat May 24 09:09:08 2008 (48381374)
93b3b000 93b46000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
93deb000 93df4000   kbdhid   kbdhid.sys   Sat Apr 11 00:38:40 2009 (49E01ED0)
8743f000 87446000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
93b53000 93b7d000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
832b5000 83326000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
9529d000 952ad000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
95282000 9529d000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
80407000 80477000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 02:23:19 2009 (49E03757)
93a8e000 93a9b000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
95273000 95282000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
93b46000 93b51000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
93cf4000 93cfc000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
830b1000 830c1000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
a14ac000 a14c1000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
a14c1000 a14e2000   mrxdav   mrxdav.sys   Sat Apr 11 00:14:39 2009 (49E0192F)
a14e2000 a1501000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
a1501000 a153a000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
a153a000 a1552000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
93c7a000 93c85000   Msfs     Msfs.SYS     unavailable (00000000)
807ea000 807f2000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
93a0b000 93a3a000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
8b118000 8b143000   msrpc    msrpc.sys    unavailable (00000000)
93b7d000 93b87000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8b551000 8b560000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
8b00d000 8b118000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
93ab2000 93abd000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
952d7000 952e1000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
93abd000 93ae0000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
93bc9000 93bda000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
93d6e000 93d7c000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
93cc2000 93cf4000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
8b143000 8b17e000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
93c95000 93ca3000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
93dcb000 93dd5000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
82a0c000 82dc6000   nt       ntkrpamp.exe Thu Oct 14 10:16:54 2010 (4CB710D6)
8b400000 8b510000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
93fc3000 93fca000   Null     Null.SYS     unavailable (00000000)
952ad000 952d7000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
93d58000 93d6e000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
83034000 83043000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
8300d000 83034000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
8309c000 830a3000   pciide   pciide.sys   Sat Apr 11 00:39:10 2009 (49E01EEE)
830a3000 830b1000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
93b18000 93b23900   Pcouffin Pcouffin.sys Tue Dec 05 09:39:53 2006 (457584B9)
830f7000 83134000   PCTCore  PCTCore.sys  Wed Dec 08 16:20:21 2010 (4CFFF695)
83134000 8318b000   pctDS    pctDS.sys    Thu Jun 03 22:06:26 2010 (4C085FA2)
83206000 832ab000   pctEFA   pctEFA.sys   Fri Jul 16 00:45:11 2010 (4C3FE3D7)
a28ff000 a2907260   PCTSDInj32 PCTSDInj32.sys Tue Aug 31 20:31:04 2010 (4C7D9EC8)
a280b000 a28e9000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
93c07000 93c34000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
80477000 80488000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
832ab000 832b44c0   PxHelp20 PxHelp20.sys Tue Oct 20 13:57:50 2009 (4ADDFA1E)
93ca3000 93cac000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
93a9b000 93ab2000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
93ae0000 93aef000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
93aef000 93b03000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
93b03000 93b18000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
93d8f000 93dcb000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
93fed000 93ff5000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
93ff5000 93ffd000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
93b24000 93b2a780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)
93a86000 93a8e000   RootMdm  RootMdm.sys  Sat Jan 19 00:57:14 2008 (4791913A)
952e1000 952f4000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
93e0a000 93fb99c0   RTKVHDA  RTKVHDA.sys  Wed May 02 04:18:37 2007 (4638495D)
80792000 807b8000   SCSIPORT SCSIPORT.SYS Sat Jan 19 00:49:44 2008 (47918F78)
a28e9000 a28f3000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
93cfc000 93d10000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
8b549000 8b551000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
952f4000 953a4000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
80689000 80789000   sptd     sptd.sys     Wed Mar 05 19:32:57 2008 (47CF3BB9)
a157a000 a15c8000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
a1552000 a157a000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
a1476000 a1493000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
93a3a000 93a7b000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
93b51000 93b52380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8b20d000 8b2f7000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
a28f3000 a28ff000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
93a7b000 93a86000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
93cac000 93cc2000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
93b2b000 93b3b000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
9ba50000 9ba59000   TSDDD    TSDDD.dll    unavailable (00000000)
8b5ed000 8b5f6000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
8b5e2000 8b5ed000   tunnel   tunnel.sys   Thu Feb 18 06:28:13 2010 (4B7D244D)
9520e000 95249000   udfs     udfs.sys     Sat Apr 11 00:13:59 2009 (49E01907)
93b87000 93b94000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
93fd1000 93fd2700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
937dc000 937eb000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
93b94000 93bc9000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8b17e000 8b1bc000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
937d1000 937dc000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
93fe1000 93fed000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
93c59000 93c7a000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
83043000 83052000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
83052000 8309c000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
8b510000 8b549000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
93d7c000 93d8f000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
9378b000 93797000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
80600000 8067c000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
8067c000 80689000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
9b830000 9ba33000   win32k   win32k.sys   unavailable (00000000)
80789000 80792000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)

Unloaded modules:
8b5c2000 8b5cf000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
8b5cf000 8b5da000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
8b5da000 8b5e2000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00008000
93fd1000 93fda000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000

KuroShinsei · 27 Mar 2011

Thanks for the quick reply. I have some questions, so please bear with me. First off I am curious why you say that PCTools is notorious for caused BSODs. I have never once had a problem with my computer since I started using PCTools.

Secondly, I have been doing more digging and I have noticed this as well in my problem reports:

Problem signature
Problem Event Name: APPCRASH
Application Name: svchost.exe
Application Version: 6.0.6001.18000
Application Timestamp: 47918b89
Fault Module Name: MSVCR71.dll
Fault Module Version: 7.10.3052.4
Fault Module Timestamp: 3e561eac
Exception Code: c0000005
Exception Offset: 00032e3f
OS Version: 6.0.6002.2.2.0.768.2
Locale ID: 4105
Additional Information 1: 3c04
Additional Information 2: 7f8a085c4e5875ea037589b22bfcd15b
Additional Information 3: 54a2
Additional Information 4: eaa80fe3818c3bd25548af1c9a4d6bae

Another report had this as the Fault Module Name: ntdll.dll

I am also curious as to why you say this might be STPD.sys. I did have problems with it before when I first loaded Daemon Tools, which yes I do still use, but it's never on. I'm just wondering why it would all of a sudden start causing this error and blue screens.

I'm thinking this "trojan" that was detected is the cause, I've also noticed every now and a again getting redirected to tanzinga, yet the tanzinga files are not on my computer, at least the ones all the fixes say are this particular virus. I've tried working with PCTools tech support, I have a callback scheduled with lvl 3 tech, but so far my SDwAV only detects minor threats and i'm still having problems.

Finally how do i run a system file check? Is that chkdsk?

I should also mention I did a memory test, and a chkdsk, both turned up no problems.

mgorman87 · 27 Mar 2011

The reason we said Daemon Tools is because it was listed as the cause of the crash in the BSOD. It was also loaded in your system at the time of the crash. Just because you don't have it running doesn't mean the drivers aren't getting loaded.

Here is the tutorial for the system file checker.
SFC /SCANNOW Command - System File Checker

zigzag3143 · 27 Mar 2011

You are obviously using something like who crashed, or blue screen view. We use a bit more accurate tools.

sptd.sys is one of the largest causes.

PCTools is also a frequent problem. I used to be a big fan till it started causing crashes.

We just recommend what we think. If you want to keep PCTools then by all means do. IF you crash again you will know the cause.

Ken

KuroShinsei · 27 Mar 2011

Thanks for the help, i'm in the process of updating all of those drivers. Also doing the system file check... I've actually done one earlier and it found nothing, but doing it again for good measure.

EDIT: BSOD when doing sfc.

KuroShinsei · 27 Mar 2011

Ok, so an update... the sfc turned up no "integrity violations". I've removed daemon tools and sptd.sys. Installed magic iso, updated Intel(R) 82566MM Gigabit Network Connection, and in the process of updating the rest of them. I have no idea if this has resolved anything, but I hope it has. Frankly I hope I never have to come back here again, but if i ever need help again i know where i'm going. You two were great, and I really appreciate your efforts. Thanks a lot.