A persistent and tricky to resolve BSOD

parvez · 22 Apr 2011

I´ve been getting BSOD´s when I start up a single program I´ve got to run for work.

The top of the blue screen displays "Bad_pool_header".

Although I´ve spent quite some time trying to figure out which update to Windows caused this, I´ve been unable to do so and also to analyse the minidump myself.

I´ve attached the required information.

Basic system specs:
Lenovo X200 w. intel i5 processor. (manufactured 2010)
4GB ram

Running Windows 7 Professional 32bit. OEM install originally, but has been resetup by myself in the last 6 weeks. All patches that have popped up in Lenovo Thinkvantage Software Update and Windows update have been applied.

CarlTR6 · 22 Apr 2011

Hi parvez and welcome to the forum. Please read this tutorial, follow the instructions and post back. We will be glad to help you.

https://www.sevenforums.com/crashes-d...tructions.html

parvez · 22 Apr 2011

CarlTR6 said:

Hi parvez and welcome to the forum. Please read this tutorial, follow the instructions and post back. We will be glad to help you.

Has been done and original post updated. Thanks for the guidance! :)

CarlTR6 · 22 Apr 2011

Good job on running the tools and uploading the files. Thanks much.

I looked at both dumps. One blames memory corruption and the other blames your Avira anti virus.

1. Completely uninstall Avira. I suggest the you download and install Revo Uninstaller (free) and use it to remove Avira. One of the drivers for your version of Avira is out of date. Download and install Microsoft Security Essentials in place of Avira: http://www.microsoft.com/security_essentials/. Once you know your system is stable, you can try a third party antivirus; but I don't recommend it. If you choose to try Avira again, make sure you get the latest version.

ssmdrv.sys Tue May 05 06:05:18 2009 - Avira anti-virus. Knowledgebase for Home

2. You have some other outdated drivers that have the potential to cause conflicts memory corruption and BSOD's. Try updating these drivers through the Lenovo website first. If that does not work, use the links below.

e1y6032.sys Fri Aug 22 18:09:12 2008 - Intel 82567V Gigabit Network driver. http://downloadcenter.intel.com/Sear...&FamilyId=2280

mdmxsdk.sys Mon Jun 19 17:26:59 2006 - Conexant Modem Diagnostic Interface x86 Driver. Conexant: Support

XAudio32.sys Wed Apr 29 14:20:55 2009 - Conexant SoftK56 Modem Audio Device Driver. Conexant: Support

3. Once you have updated the above drivers, let's see how your system does. If you get another BSOD, upload the dump file and enable Driver Verifier carefully following the instructions in this tutorial: Driver Verifier - Enable and Disable. If Verifier finds a faulty driver, it will trigger a BSOD. Upload any and all Verifier enabled dumps.

If you have any questions or need help with the drivers, please post.

Code:

Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x82e09000 PsLoadedModuleList = 0x82f53850
Debug session time: Fri Apr 22 10:07:53.531 2011 (GMT-4)
System Uptime: 0 days 2:03:57.402
Loading Kernel Symbols
...............................................................
................................................................
........................................................
Loading User Symbols
Loading unloaded module list
...........
0: kd> !Analyze
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, bf70f798, bf70f370, 82f2b87b}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+21b )

Followup: Pool_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 001904fb
Arg2: bf70f798
Arg3: bf70f370
Arg4: 82f2b87b

Debugging Details:
------------------


EXCEPTION_RECORD:  bf70f798 -- (.exr 0xffffffffbf70f798)
ExceptionAddress: 82f2b87b (nt!ExDeferredFreePool+0x0000021b)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 0000000b
Attempt to read from address 0000000b

CONTEXT:  bf70f370 -- (.cxr 0xffffffffbf70f370)
eax=dc788000 ebx=00000007 ecx=000001ff edx=00000000 esi=dc787e90 edi=dc787e98
eip=82f2b87b esp=bf70f860 ebp=bf70f898 iopl=0         nv up ei ng nz ac pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010297
nt!ExDeferredFreePool+0x21b:
82f2b87b 397b04          cmp     dword ptr [ebx+4],edi ds:0023:0000000b=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  msiexec.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  0000000b

READ_ADDRESS: GetPointerFromAddress: unable to read from 82f73718
Unable to read MiSystemVaType memory at 82f531a0
 0000000b 

FOLLOWUP_IP: 
nt!ExDeferredFreePool+21b
82f2b87b 397b04          cmp     dword ptr [ebx+4],edi

FAULTING_IP: 
nt!ExDeferredFreePool+21b
82f2b87b 397b04          cmp     dword ptr [ebx+4],edi

BUGCHECK_STR:  0x24

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from 82f2b35f to 82f2b87b

STACK_TEXT:  
bf70f898 82f2b35f 85500000 00000000 00000000 nt!ExDeferredFreePool+0x21b
bf70f900 83031f96 bb5d0ac0 00000000 866b17b0 nt!ExFreePoolWithTag+0x8a4
bf70f934 82e6b571 866b17b0 866b17d8 866b17b0 nt!MiSegmentDelete+0x1d8
bf70f960 82e6b2c8 82f75700 bf70f944 893c6ad8 nt!MiCleanSection+0x19a
bf70f980 82e6b99f 00000000 00000000 cce6798c nt!MiAttemptSectionDelete+0x97
bf70f9a0 8b6a6772 856c1ca8 00000001 3415b344 nt!MmFlushImageSection+0xeb
bf70f9dc 8b6c42aa 85a0fee0 86afa8e0 86afaadc Ntfs!NtfsOpenAttributeCheck+0x1f4
bf70fa0c 8b6c3be6 85a0fee0 86afa8e0 9d7f42a0 Ntfs!NtfsOpenExistingAttr+0x116
bf70faf4 8b6a7412 85a0fee0 86afa8e0 9d7f42a0 Ntfs!NtfsOpenAttributeInExistingFile+0x7a4
bf70fba0 8b6b5daa 85a0fee0 86afa8e0 9d7f42a0 Ntfs!NtfsOpenExistingPrefixFcb+0x26e
bf70fc00 8b6ab370 85a0fee0 86afa8e0 8c503bd8 Ntfs!NtfsFindStartingNode+0xb88
bf70fcdc 8b62f09c 85a0fee0 86afa8e0 cce67944 Ntfs!NtfsCommonCreate+0x65f
bf70fd1c 82e887ba cce678dc 000004f4 ffffffff Ntfs!NtfsCommonCreateCallout+0x20
bf70fd1c 82e888b1 cce678dc 000004f4 ffffffff nt!KiSwapKernelStackAndExit+0x15a
cce67840 00000000 00000000 00000000 00000000 nt!KiSwitchKernelStackAndCallout+0x31


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExDeferredFreePool+21b

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

STACK_COMMAND:  .cxr 0xffffffffbf70f370 ; kb

FAILURE_BUCKET_ID:  0x24_nt!ExDeferredFreePool+21b

BUCKET_ID:  0x24_nt!ExDeferredFreePool+21b

Followup: Pool_corruption
---------

Debug session time: Fri Apr 22 10:13:43.074 2011 (GMT-4)
System Uptime: 0 days 0:03:06.697
Loading Kernel Symbols
...............................................................
................................................................
........................................................
Loading User Symbols
Loading unloaded module list
.......
0: kd> !Analyze
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, bd5fc538, bd5fce50, b230297}

Probably caused by : avipbb.sys ( avipbb+5c8d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: bd5fc538, The pool entry we were looking for within the page.
Arg3: bd5fce50, The next pool entry.
Arg4: 0b230297, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 82fba718
Unable to read MiSystemVaType memory at 82f9a1a0
 bd5fc538 

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  ModelingTool.e

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 90ca7c8d to 82f71c6b

STACK_TEXT:  
9d4434e4 90ca7c8d bd5fc540 45305641 bd5fc540 nt!ExFreePoolWithTag+0x1b1
WARNING: Stack unwind information not available. Following frames may be wrong.
9d4434f8 90ca4916 bd5fc540 0d8fcea0 8576b698 avipbb+0x5c8d
9d44353c 830b876c 85760d40 00001454 9d443560 avipbb+0x2916
9d4435f4 830c0799 8576b698 01760d40 9d443650 nt!PspInsertThread+0x5c0
9d443d00 82e8e1ea 00227850 0022782c 02000000 nt!NtCreateUserProcess+0x742
9d443d00 772a70b4 00227850 0022782c 02000000 nt!KiFastCallEntry+0x12a
00227b70 00000000 00000000 00000000 00000000 0x772a70b4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
avipbb+5c8d
90ca7c8d ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  avipbb+5c8d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: avipbb

IMAGE_NAME:  avipbb.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d70fa1e

FAILURE_BUCKET_ID:  0x19_20_avipbb+5c8d

BUCKET_ID:  0x19_20_avipbb+5c8d

Followup: MachineOwner
---------

0: kd> lmtsmn
start    end        module name
8b287000 8b2cf000   ACPI     ACPI.sys     Sat Nov 20 03:37:52 2010 (4CE788E0)
8b553000 8b5ad000   afd      afd.sys      Sat Nov 20 03:40:00 2010 (4CE78960)
94bd8000 94bea000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
8b505000 8b50e000   amdxata  amdxata.sys  Fri Mar 19 12:19:01 2010 (4BA3A3F5)
8bbc3000 8bbcc000   ApsHM86  ApsHM86.sys  Wed Jan 12 23:18:08 2011 (4D2E7D00)
8bbd4000 8bbf6000   Apsx86   Apsx86.sys   Wed Jan 12 23:30:40 2011 (4D2E7FF0)
9db35000 9db3e000   asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
95a00000 95a4d000   ATMFD    ATMFD.DLL    Fri Feb 18 23:34:53 2011 (4D5F486D)
8c818000 8c8b8080   ATSwpWDF ATSwpWDF.sys Fri Jul 02 15:41:13 2010 (4C2E40D9)
8cb7b000 8cb90000   avgntflt avgntflt.sys Thu Nov 11 10:54:47 2010 (4CDC11C7)
90ca2000 90cc8000   avipbb   avipbb.sys   Fri Mar 04 09:41:34 2011 (4D70FA1E)
8b32e000 8b339000   BATTC    BATTC.SYS    Mon Jul 13 19:19:15 2009 (4A5BC0F3)
9053f000 90546000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
90c94000 90ca2000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8b0ac000 8b0b4000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
9a2a6000 9a2bf000   bowser   bowser.sys   Tue Feb 22 23:47:32 2011 (4D649164)
8c9bd000 8c9ca000   BthEnum  BthEnum.sys  Mon Jul 13 19:51:35 2009 (4A5BC887)
8c9ca000 8c9e5000   bthpan   bthpan.sys   Mon Jul 13 19:51:43 2009 (4A5BC88F)
8c935000 8c999000   bthport  bthport.sys  Sat Nov 20 05:00:21 2010 (4CE79C35)
8c923000 8c935000   BTHUSB   BTHUSB.sys   Sat Nov 20 05:00:21 2010 (4CE79C35)
8c919000 8c922880   btusbflt btusbflt.sys Thu Apr 08 21:11:21 2010 (4BBE7EB9)
8cae1000 8cb62000   btwaudio btwaudio.sys Tue Jan 12 16:43:44 2010 (4B4CED10)
8ca39000 8caac000   btwavdt  btwavdt.sys  Tue Jan 12 16:42:32 2010 (4B4CECC8)
8cb62000 8cb6d000   btwl2cap btwl2cap.sys Fri Apr 03 20:28:35 2009 (49D6A9B3)
8cb6d000 8cb6fe00   btwrchid btwrchid.sys Tue Jan 12 16:44:27 2010 (4B4CED3B)
95de0000 95dfe000   cdd      cdd.dll      Sat Nov 20 06:56:35 2010 (4CE7B773)
93ea5000 93f1a000   CHDRT32  CHDRT32.sys  Wed Jul 22 17:56:13 2009 (4A678AFD)
8b0f6000 8b1a1000   CI       CI.dll       Sat Nov 20 07:05:17 2010 (4CE7B97D)
8b9ba000 8b9df000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8b0b4000 8b0f6000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
94b2b000 94b2e700   CmBatt   CmBatt.sys   Mon Jul 13 19:19:18 2009 (4A5BC0F6)
8b79f000 8b7fc000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8b326000 8b32e000   compbatt compbatt.sys Mon Jul 13 19:19:18 2009 (4A5BC0F6)
94b3f000 94b4c000   CompositeBus CompositeBus.sys Sat Nov 20 04:50:21 2010 (4CE799DD)
94c00000 94c0d000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
90c18000 90c7c000   csc      csc.sys      Sat Nov 20 03:44:32 2010 (4CE78A70)
90c7c000 90c94000   dfsc     dfsc.sys     Sat Nov 20 03:42:32 2010 (4CE789F8)
8b626000 8b632000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8b9a9000 8b9ba000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
8b60e000 8b612b00   DozeHDD  DozeHDD.sys  Thu Oct 14 20:30:51 2010 (4CB7A0BB)
93f49000 93f62000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
94c0d000 94c1e000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
9042e000 90508000   dump_iaStor dump_iaStor.sys Fri Aug 07 08:16:56 2009 (4A7C1B38)
94c1e000 94c28000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
92324000 923db000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:08:14 2010 (4CE78FFE)
90cfb000 90d34000   dxgmms1  dxgmms1.sys  Wed Feb 02 22:45:05 2011 (4D4A24C1)
90d3e000 90d78000   e1y6032  e1y6032.sys  Fri Aug 22 18:09:12 2008 (48AF3908)
8b542000 8b553000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8b50e000 8b542000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8b613000 8b61c000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8b977000 8b9a9000   fvevol   fvevol.sys   Sat Nov 20 03:40:22 2010 (4CE78976)
8bb89000 8bbba000   fwpkclnt fwpkclnt.sys Sat Nov 20 03:39:08 2010 (4CE7892C)
82e19000 82e50000   hal      halmacpi.dll Sat Nov 20 03:37:38 2010 (4CE788D2)
90ddd000 90dfc000   HDAudBus HDAudBus.sys Sat Nov 20 04:59:28 2010 (4CE79C00)
923db000 923e4f80   HECI     HECI.sys     Tue Jun 23 15:49:57 2009 (4A4131E5)
8caac000 8cac7000   hidbth   hidbth.sys   Mon Jul 13 19:51:33 2009 (4A5BC885)
8cac7000 8cada000   HIDCLASS HIDCLASS.SYS Sat Nov 20 04:59:37 2010 (4CE79C09)
8cada000 8cae0480   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
94d3a000 94def000   HSX_CNXT HSX_CNXT.sys Fri Dec 03 15:31:44 2010 (4CF953B0)
94c38000 94d3a000   HSX_DPV  HSX_DPV.sys  Fri Dec 03 15:35:46 2010 (4CF954A2)
93f62000 93f9f000   HSXHWAZL HSXHWAZL.sys Fri Dec 03 15:32:54 2010 (4CF953F6)
9a221000 9a2a6000   HTTP     HTTP.sys     Sat Nov 20 03:40:17 2010 (4CE78971)
8bbf6000 8bbfe000   hwpolicy hwpolicy.sys Sat Nov 20 03:37:35 2010 (4CE788CF)
94ae3000 94afb000   i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
8b42b000 8b505000   iaStor   iaStor.sys   Fri Aug 07 08:16:56 2009 (4A7C1B38)
94b2f000 94b35280   ibmpmdrv ibmpmdrv.sys Wed Jan 19 00:09:16 2011 (4D3671FC)
91a05000 92324000   igdkmd32 igdkmd32.sys Sat Oct 16 01:24:51 2010 (4CB93723)
90ce9000 90cfb000   intelppm intelppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
94afb000 94b08000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
80b99000 80ba1000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
93e0e000 93e42000   ks       ks.sys       Sat Nov 20 04:50:17 2010 (4CE799D9)
8b78c000 8b79f000   ksecdd   ksecdd.sys   Sat Nov 20 03:38:54 2010 (4CE7891E)
8b915000 8b93a000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:34:00 2009 (4A5BC468)
8cbc5000 8cbd5000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
8cb90000 8cbab000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
8b016000 8b09b000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 07:00:54 2010 (4CE7B876)
9a362000 9a365180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:26:59 2006 (449716A3)
94def000 94dfc000   modem    modem.sys    Mon Jul 13 19:55:24 2009 (4A5BC96C)
8c8b9000 8c8c4000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
94b12000 94b1f000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8cb70000 8cb7b000   mouhid   mouhid.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8b394000 8b3aa000   mountmgr mountmgr.sys Sat Nov 20 03:38:09 2010 (4CE788F1)
9a2bf000 9a2d1000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
9a2d1000 9a2f4000   mrxsmb   mrxsmb.sys   Tue Feb 22 23:47:34 2011 (4D649166)
9a2f4000 9a32f000   mrxsmb10 mrxsmb10.sys Tue Feb 22 23:47:43 2011 (4D64916F)
9a32f000 9a34a000   mrxsmb20 mrxsmb20.sys Tue Feb 22 23:47:39 2011 (4D64916B)
90598000 905a3000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8b2d8000 8b2e0000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
94b54000 94b90000   msiscsi  msiscsi.sys  Sat Nov 20 04:51:40 2010 (4CE79A2C)
8b761000 8b78c000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
8b61c000 8b626000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8b967000 8b977000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8b820000 8b8d7000   ndis     ndis.sys     Sat Nov 20 03:39:19 2010 (4CE78937)
94bea000 94bf5000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
8cbd5000 8cbe5000   ndisuio  ndisuio.sys  Sat Nov 20 05:06:36 2010 (4CE79DAC)
8b400000 8b422000   ndiswan  ndiswan.sys  Sat Nov 20 05:07:48 2010 (4CE79DF4)
93e94000 93ea5000   NDProxy  NDProxy.SYS  Sat Nov 20 05:07:39 2010 (4CE79DEB)
9052a000 90538000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
8b5ad000 8b5df000   netbt    netbt.sys    Sat Nov 20 03:39:22 2010 (4CE7893A)
8b8d7000 8b915000   NETIO    NETIO.SYS    Sat Nov 20 03:40:03 2010 (4CE78963)
94404000 94ad9000   NETwNs32 NETwNs32.sys Mon Oct 18 05:20:44 2010 (4CBC116C)
905a3000 905b1000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
8b80e000 8b818000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82e50000 83262000   nt       ntkrpamp.exe Sat Nov 20 03:42:49 2010 (4CE78A09)
8b632000 8b761000   Ntfs     Ntfs.sys     Sat Nov 20 03:39:08 2010 (4CE7892C)
90538000 9053f000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
93f9f000 93fe5000   nwifi    nwifi.sys    Mon Jul 13 19:51:59 2009 (4A5BC89F)
90400000 9041f000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8b315000 8b326000   partmgr  partmgr.sys  Sat Nov 20 03:38:14 2010 (4CE788F6)
8b2e0000 8b30a000   pci      pci.sys      Sat Nov 20 03:37:57 2010 (4CE788E5)
8b600000 8b60e000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
9a366000 9a3fd000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
93f1a000 93f49000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
90427000 9042d700   psadd    psadd.sys    Wed Dec 02 02:32:15 2009 (4B1617FF)
8b09b000 8b0ac000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
90c00000 90c18000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
8b5df000 8b5f7000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
8b3e6000 8b3fd000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
8b1e2000 8b1f9000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
8c8dd000 8c90ad80   RCUVCMNP RCUVCMNP.sys Fri Oct 23 00:40:29 2009 (4AE133BD)
8b1a1000 8b1e2000   rdbss    rdbss.sys    Sat Nov 20 03:42:44 2010 (4CE78A04)
94bf5000 94bff000   rdpbus   rdpbus.sys   Mon Jul 13 20:02:40 2009 (4A5BCB20)
90580000 90588000   RDPCDD   RDPCDD.sys   Sat Nov 20 05:22:19 2010 (4CE7A15B)
90588000 90590000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
90590000 90598000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8b93a000 8b967000   rdyboost rdyboost.sys Sat Nov 20 04:00:07 2010 (4CE78E17)
8c999000 8c9bd000   rfcomm   rfcomm.sys   Mon Jul 13 19:51:41 2009 (4A5BC88D)
8cbe5000 8cbf8000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
8b800000 8b80da60   SCDEmu   SCDEmu.SYS   Mon Apr 12 04:44:34 2010 (4BC2DD72)
9a20b000 9a215000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
90d34000 90d3e000   serenum  serenum.sys  Mon Jul 13 19:45:27 2009 (4A5BC717)
923e5000 923ff000   serial   serial.sys   Mon Jul 13 19:45:33 2009 (4A5BC71D)
94b4c000 94b54000   serscan  serscan.sys  Mon Jul 13 20:14:46 2009 (4A5BCDF6)
90425000 90426b00   smiif32  smiif32.sys  Tue Sep 07 00:38:35 2010 (4C85C1CB)
8bbcc000 8bbd4000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
9dacb000 9db35000   spsys    spsys.sys    Mon May 11 12:37:10 2009 (4A085436)
9da79000 9dacb000   srv      srv.sys      Tue Feb 22 23:48:14 2011 (4D64918E)
9da29000 9da79000   srv2     srv2.sys     Tue Feb 22 23:47:58 2011 (4D64917E)
8ca00000 8ca21000   srvnet   srvnet.sys   Tue Feb 22 23:47:53 2011 (4D649179)
9041f000 90424a00   ssmdrv   ssmdrv.sys   Tue May 05 06:05:18 2009 (4A000F5E)
94b90000 94bd8000   storport storport.sys Sat Nov 20 04:50:58 2010 (4CE79A02)
8c90b000 8c918180   STREAM   STREAM.SYS   Mon Jul 13 19:50:57 2009 (4A5BC861)
94400000 94401380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8ba3f000 8bb89000   tcpip    tcpip.sys    Sat Nov 20 03:41:36 2010 (4CE789C0)
9a34a000 9a357000   tcpipreg tcpipreg.sys Sat Nov 20 05:07:13 2010 (4CE79DD1)
905c8000 905d4000   TDI      TDI.SYS      Sat Nov 20 03:39:18 2010 (4CE78936)
905b1000 905c8000   tdx      tdx.sys      Sat Nov 20 03:39:17 2010 (4CE78935)
8b9ec000 8b9fd000   termdd   termdd.sys   Sat Nov 20 05:21:10 2010 (4CE7A116)
94b08000 94b12000   tp4track tp4track.sys Fri Nov 20 04:04:47 2009 (4B065BAF)
94b1f000 94b2b000   tpm      tpm.sys      Mon Jul 13 19:12:52 2009 (4A5BBF74)
905f7000 905fe000   Tppwr32v Tppwr32v.sys Thu Nov 18 22:36:34 2010 (4CE5F0C2)
95db0000 95db9000   TSDDD    TSDDD.dll    unavailable (00000000)
90cc8000 90ce9000   tunnel   tunnel.sys   Sat Nov 20 05:06:40 2010 (4CE79DB0)
8b818000 8b81fb80   Tvti2c   Tvti2c.sys   Wed Jul 01 22:16:55 2009 (4A4C1897)
93e42000 93e50000   umbus    umbus.sys    Sat Nov 20 05:00:23 2010 (4CE79C37)
8c8c4000 8c8db000   usbccgp  usbccgp.sys  Sat Nov 20 05:00:08 2010 (4CE79C28)
8c8db000 8c8dc700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
90dce000 90ddd000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
93e50000 93e94000   usbhub   usbhub.sys   Sat Nov 20 05:00:34 2010 (4CE79C42)
90d83000 90dce000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
90d78000 90d83000   usbuhci  usbuhci.sys  Mon Jul 13 19:51:10 2009 (4A5BC86E)
8b30a000 8b315000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
90546000 90552000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
90552000 90573000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8b3aa000 8b3d3180   vmbus    vmbus.sys    Sat Nov 20 04:14:58 2010 (4CE79192)
8bbba000 8bbc2380   vmstorfl vmstorfl.sys Sat Nov 20 04:14:37 2010 (4CE7917D)
8b339000 8b349000   volmgr   volmgr.sys   Sat Nov 20 03:38:06 2010 (4CE788EE)
8b349000 8b394000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8ba00000 8ba3f000   volsnap  volsnap.sys  Sat Nov 20 03:38:13 2010 (4CE788F5)
94ad9000 94ae3000   vwifibus vwifibus.sys Mon Jul 13 19:52:02 2009 (4A5BC8A2)
90519000 9052a000   vwififlt vwififlt.sys Mon Jul 13 19:52:03 2009 (4A5BC8A3)
9a202000 9a20b000   vwifimp  vwifimp.sys  Mon Jul 13 19:52:09 2009 (4A5BC8A9)
905e4000 905f7000   wanarp   wanarp.sys   Sat Nov 20 05:07:45 2010 (4CE79DF1)
90573000 90580000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8b208000 8b279000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8b279000 8b287000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
905dd000 905e4000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
95b50000 95d9e000   win32k   win32k.sys   Wed Mar 02 22:42:10 2011 (4D6F0E12)
8b3d4000 8b3e6000   winhv    winhv.sys    Sat Nov 20 03:38:15 2010 (4CE788F7)
94b36000 94b3f000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:19:16 2009 (4A5BC0F4)
8b2cf000 8b2d8000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
905d4000 905dd000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 19:55:01 2009 (4A5BC955)
8cbab000 8cbc5000   WudfPf   WudfPf.sys   Sat Nov 20 04:58:55 2010 (4CE79BDF)
9a357000 9a35f000   XAudio32 XAudio32.sys Wed Apr 29 14:20:55 2009 (49F89A87)

Unloaded modules:
9a200000 9a202000   MSPCLOCK.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9a3fd000 9a3ff000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9a34a000 9a362000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8b9df000 8b9ec000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9042e000 90508000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
90508000 90519000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
90519000 90538000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

parvez · 25 Apr 2011

Thanks you solved my problem. It seems to have been Avira that was faulty. Never would´ve thought so as I´d had that installed since day 1, but I guess some update to Avira did it.

Thank you :)

CarlTR6 · 25 Apr 2011

You are very welcome; I'm glad I could help. Thank you for reporting back with the solution. Happy computing. :)