BSOD Crash

EricMi · 03 Aug 2011

This is my bosses laptop, lastnight at 9:15-9:18PM (CST) he had a BSOD. He wanted me to take a look at it, but I am not seeing much in the event viewer, just that it happened, nothing as to why.

Here is the information on his laptop.
Windows 7 Professional x64 (OEM)
Toshiba Satellite A-505
Intel Core i3 M 330 2.13GHz
SIW states that the motherboard is a Toshiba Portable PC
Wireless: Realtek RTL8191SE Wireless LAN 802.11n
Wired LAN: Realtek PCIe FE Family Controller
Memory: 4.0 GB
Hard Drive: Hitachi 750GB (Replaced One Moneth Ago)
Video: NVIDIA GeForce 310M 512MB

Thank you for any help you can give me.

Also, what do you use to process the .dmp files?

-Eric

Maguscreed · 03 Aug 2011

go here and use their winfix (it would probably be best if you just followed instructions on the page if you don't know what you are messing with, you may want your network guy at the office to do it as you may be required to re-enter some settings I don't know for certain though.)
DNE Support - Deterministic Networks

pretty sure that's the problem you are suffering here.
It's a problem with either citrix or cisco software/drivers

The dump file seems to agree.

Code:

Probably caused by : dnelwf64.sys ( dnelwf64+3fd7 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_UNEXPECTED_VALUE (c8)
The processor's IRQL is not what it should be at this time.  This is
usually caused by a lower level routine changing IRQL for some period
and not restoring IRQL at the end of that period (eg acquires spinlock
but doesn't release it).
        if UniqueValue is 0 or 1
            2 = APC->KernelRoutine
            3 = APC
            4 = APC->NormalRoutine
Arguments:
Arg1: 0000000000000000, (Current IRQL << 16) | (Expected IRQL << 8) | UniqueValue
Arg2: 0000000000000002
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xC8

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80003737dcf to fffff800036d5d00

STACK_TEXT:  
fffff880`035cab58 fffff800`03737dcf : 00000000`000000c8 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`035cab60 fffff880`01a77bd2 : fffff880`01a77430 fffff880`015206ff fffffa80`0ab0d400 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x1f2a2
fffff880`035cac40 fffff880`019b10eb : fffffa80`04770010 00000000`00000000 fffffa80`07b961a0 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`035cacb0 fffff880`0199002c : fffffa80`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff880`035cad20 fffff880`01980586 : fffffa80`0a52b140 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisIndicateAllNetBufferLists+0x6c
fffff880`035cad80 fffff880`018fc9c4 : fffffa80`07b961a0 00000000`c0000034 00000000`00000001 fffff880`01517231 : ndis! ?? ::DKGKHJNI::`string'+0x4050
fffff880`035cb200 fffff880`018fc939 : fffffa80`069c9010 fffffa80`07b240c0 fffff880`014f7a00 00000000`c0000034 : ndis!ndisMTopReceiveNetBufferLists+0x24
fffff880`035cb240 fffff880`018fc8d0 : 00000000`00000000 fffff880`018cb28a fffffa80`03b68b60 00000000`00000000 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x29
fffff880`035cb280 fffff880`018c8fd7 : fffffa80`0adba090 00000000`00000003 00000000`00000000 fffffa80`093d1400 : ndis!NdisFIndicateReceiveNetBufferLists+0x50
fffff880`035cb2c0 fffffa80`0adba090 : 00000000`00000003 00000000`00000000 fffffa80`093d1400 fffffa80`00000003 : dnelwf64+0x3fd7
fffff880`035cb2c8 00000000`00000003 : 00000000`00000000 fffffa80`093d1400 fffffa80`00000003 fffff880`04cbeca5 : 0xfffffa80`0adba090
fffff880`035cb2d0 00000000`00000000 : fffffa80`093d1400 fffffa80`00000003 fffff880`04cbeca5 fffffa80`069e83b0 : 0x3


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dnelwf64+3fd7
fffff880`018c8fd7 ??              ???

SYMBOL_STACK_INDEX:  9

SYMBOL_NAME:  dnelwf64+3fd7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dnelwf64

IMAGE_NAME:  dnelwf64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4cfa5a0b

FAILURE_BUCKET_ID:  X64_0xC8_dnelwf64+3fd7

BUCKET_ID:  X64_0xC8_dnelwf64+3fd7

Followup: MachineOwner
---------

0: kd> lm t n
start             end                 module name
fffff800`00bae000 fffff800`00bb8000   kdcom    kdcom.dll    Sat Feb 05 10:52:49 2011 (4D4D8061)
fffff800`0360d000 fffff800`03656000   hal      hal.dll      Sat Nov 20 07:00:25 2010 (4CE7C669)
fffff800`03656000 fffff800`03c3f000   nt       ntkrnlmp.exe Fri Apr 08 23:15:23 2011 (4D9FDD5B)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 07:12:36 2010 (4CE7C944)
fffff880`00cd1000 fffff880`00d20000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 07:03:51 2010 (4CE7C737)
fffff880`00d20000 fffff880`00d34000   PSHED    PSHED.dll    Mon Jul 13 20:32:23 2009 (4A5BE027)
fffff880`00d34000 fffff880`00d92000   CLFS     CLFS.SYS     Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`00d92000 fffff880`00dee000   volmgrx  volmgrx.sys  Sat Nov 20 03:20:43 2010 (4CE792EB)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Sat Nov 20 03:19:11 2010 (4CE7928F)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 19:01:31 2009 (4A5BCADB)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Sat Nov 20 03:20:00 2010 (4CE792C0)
fffff880`00e55000 fffff880`00e5e000   compbatt compbatt.sys Mon Jul 13 18:31:02 2009 (4A5BC3B6)
fffff880`00e5e000 fffff880`00e6a000   BATTC    BATTC.SYS    Mon Jul 13 18:31:01 2009 (4A5BC3B5)
fffff880`00e6a000 fffff880`00e7f000   volmgr   volmgr.sys   Sat Nov 20 03:19:28 2010 (4CE792A0)
fffff880`00e7f000 fffff880`00e99000   mountmgr mountmgr.sys Sat Nov 20 03:19:21 2010 (4CE79299)
fffff880`00e99000 fffff880`00ea0000   pciide   pciide.sys   Mon Jul 13 18:19:49 2009 (4A5BC115)
fffff880`00ea0000 fffff880`00eb0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff880`00ec2000 fffff880`00f66000   Wdf01000 Wdf01000.sys Mon Jul 13 18:22:07 2009 (4A5BC19F)
fffff880`00f66000 fffff880`00f75000   WDFLDR   WDFLDR.SYS   Mon Jul 13 18:19:54 2009 (4A5BC11A)
fffff880`00f75000 fffff880`00fcc000   ACPI     ACPI.sys     Sat Nov 20 03:19:16 2010 (4CE79294)
fffff880`00fcc000 fffff880`00fd5000   WMILIB   WMILIB.SYS   Mon Jul 13 18:19:51 2009 (4A5BC117)
fffff880`00fd5000 fffff880`00fdf000   msisadrv msisadrv.sys Mon Jul 13 18:19:26 2009 (4A5BC0FE)
fffff880`01000000 fffff880`01083000   csc      csc.sys      Sat Nov 20 03:27:12 2010 (4CE79470)
fffff880`01083000 fffff880`01094000   blbdrive blbdrive.sys Mon Jul 13 18:35:59 2009 (4A5BC4DF)
fffff880`01094000 fffff880`010ba000   tunnel   tunnel.sys   Sat Nov 20 04:51:50 2010 (4CE7A846)
fffff880`010ba000 fffff880`010c2000   FwLnk    FwLnk.sys    Mon Jul 06 19:51:41 2009 (4A529C1D)
fffff880`010f1000 fffff880`0112d000   vmbus    vmbus.sys    Sat Nov 20 03:57:29 2010 (4CE79B89)
fffff880`0112d000 fffff880`01141000   winhv    winhv.sys    Sat Nov 20 03:20:02 2010 (4CE792C2)
fffff880`01141000 fffff880`01176000   tmlwf    tmlwf.sys    Sat Apr 24 09:34:50 2010 (4BD3018A)
fffff880`01176000 fffff880`011c7000   rdbss    rdbss.sys    Sat Nov 20 03:27:51 2010 (4CE79497)
fffff880`011c7000 fffff880`011f8000   srvnet   srvnet.sys   Thu Apr 28 22:05:35 2011 (4DBA2AFF)
fffff880`01200000 fffff880`01272000   cng      cng.sys      Sat Nov 20 04:08:45 2010 (4CE79E2D)
fffff880`01272000 fffff880`01290000   dfsc     dfsc.sys     Sat Nov 20 03:26:31 2010 (4CE79447)
fffff880`01293000 fffff880`0149b000   iaStor   iaStor.sys   Thu Dec 17 12:41:59 2009 (4B2A7B77)
fffff880`0149b000 fffff880`014a4000   atapi    atapi.sys    Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`014a4000 fffff880`014ce000   ataport  ataport.SYS  Sat Nov 20 03:19:15 2010 (4CE79293)
fffff880`014ce000 fffff880`014d9000   msahci   msahci.sys   Sat Nov 20 04:33:58 2010 (4CE7A416)
fffff880`014d9000 fffff880`014e4000   amdxata  amdxata.sys  Fri Mar 19 11:18:18 2010 (4BA3A3CA)
fffff880`014e4000 fffff880`01530000   fltmgr   fltmgr.sys   Sat Nov 20 03:19:24 2010 (4CE7929C)
fffff880`01530000 fffff880`01544000   fileinfo fileinfo.sys Mon Jul 13 18:34:25 2009 (4A5BC481)
fffff880`01544000 fffff880`0154fe00   PxHlpa64 PxHlpa64.sys Tue Jun 23 18:16:35 2009 (4A416253)
fffff880`01550000 fffff880`015ae000   msrpc    msrpc.sys    Sat Nov 20 03:21:56 2010 (4CE79334)
fffff880`015ae000 fffff880`015de000   CLASSPNP CLASSPNP.SYS Sat Nov 20 03:19:23 2010 (4CE7929B)
fffff880`015de000 fffff880`015fb000   tmtdi    tmtdi.sys    Sat Apr 24 09:35:13 2010 (4BD301A1)
fffff880`01600000 fffff880`0160f000   discache discache.sys Mon Jul 13 18:37:18 2009 (4A5BC52E)
fffff880`0160f000 fffff880`017b2000   Ntfs     Ntfs.sys     Thu Mar 10 21:39:39 2011 (4D79997B)
fffff880`017b2000 fffff880`017cd000   ksecdd   ksecdd.sys   Sat Nov 20 03:21:15 2010 (4CE7930B)
fffff880`017cd000 fffff880`017de000   pcw      pcw.sys      Mon Jul 13 18:19:27 2009 (4A5BC0FF)
fffff880`017de000 fffff880`017e8000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 18:19:45 2009 (4A5BC111)
fffff880`017e8000 fffff880`017f4000   nsiproxy nsiproxy.sys Mon Jul 13 18:21:02 2009 (4A5BC15E)
fffff880`017f4000 fffff880`017ff000   mssmbios mssmbios.sys Mon Jul 13 18:31:10 2009 (4A5BC3BE)
fffff880`01800000 fffff880`01860000   NETIO    NETIO.SYS    Sat Nov 20 03:23:13 2010 (4CE79381)
fffff880`01860000 fffff880`0188b000   ksecpkg  ksecpkg.sys  Sat Nov 20 04:10:34 2010 (4CE79E9A)
fffff880`0188b000 fffff880`018c5000   fvevol   fvevol.sys   Sat Nov 20 03:24:06 2010 (4CE793B6)
fffff880`018c5000 fffff880`018ea000   dnelwf64 dnelwf64.sys Sat Dec 04 09:11:07 2010 (4CFA5A0B)
fffff880`018ea000 fffff880`018f1000   TVALZFL  TVALZFL.sys  Fri Jun 19 05:05:44 2009 (4A3B62F8)
fffff880`018f2000 fffff880`019e5000   ndis     ndis.sys     Sat Nov 20 03:23:30 2010 (4CE79392)
fffff880`019e5000 fffff880`01a00000   wanarp   wanarp.sys   Sat Nov 20 04:52:36 2010 (4CE7A874)
fffff880`01a00000 fffff880`01a26000   pacer    pacer.sys    Sat Nov 20 04:52:18 2010 (4CE7A862)
fffff880`01a2b000 fffff880`01c2f000   tcpip    tcpip.sys    Sun Apr 24 21:37:30 2011 (4DB4DE6A)
fffff880`01c2f000 fffff880`01c79000   fwpkclnt fwpkclnt.sys Sat Nov 20 03:21:37 2010 (4CE79321)
fffff880`01c79000 fffff880`01c89000   vmstorfl vmstorfl.sys Sat Nov 20 03:57:30 2010 (4CE79B8A)
fffff880`01c89000 fffff880`01c91000   wd       wd.sys       Mon Jul 13 18:19:55 2009 (4A5BC11B)
fffff880`01c91000 fffff880`01cdd000   volsnap  volsnap.sys  Sat Nov 20 03:20:08 2010 (4CE792C8)
fffff880`01cdd000 fffff880`01ce1e00   TVALZ_O  TVALZ_O.SYS  Mon Jul 13 21:19:26 2009 (4A5BEB2E)
fffff880`01ce2000 fffff880`01d5c000   tos_sps64 tos_sps64.sys Wed Jun 24 00:31:09 2009 (4A41BA1D)
fffff880`01d5c000 fffff880`01d5df80   Thpevm   Thpevm.SYS   Mon Jun 29 03:15:37 2009 (4A487829)
fffff880`01d5e000 fffff880`01d6a000   thpdrv   thpdrv.sys   Sun Jun 28 21:02:56 2009 (4A4820D0)
fffff880`01d6a000 fffff880`01d72000   spldr    spldr.sys    Mon May 11 11:56:27 2009 (4A0858BB)
fffff880`01d72000 fffff880`01dac000   rdyboost rdyboost.sys Sat Nov 20 03:43:10 2010 (4CE7982E)
fffff880`01dac000 fffff880`01dbe000   mup      mup.sys      Mon Jul 13 18:23:45 2009 (4A5BC201)
fffff880`01dbe000 fffff880`01dc7000   hwpolicy hwpolicy.sys Sat Nov 20 03:18:54 2010 (4CE7927E)
fffff880`01dc7000 fffff880`01ddd000   disk     disk.sys     Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`01deb000 fffff880`01dff000   termdd   termdd.sys   Sat Nov 20 05:03:40 2010 (4CE7AB0C)
fffff880`02e15000 fffff880`02ffd000   VSApiNt  VSApiNt.sys  Wed Oct 20 05:41:23 2010 (4CBEC753)
fffff880`03e00000 fffff880`03ea6000   peauth   peauth.sys   Mon Jul 13 20:01:19 2009 (4A5BD8DF)
fffff880`03eaf000 fffff880`03f0e000   TmXPFlt  TmXPFlt.sys  Wed Oct 20 05:46:42 2010 (4CBEC892)
fffff880`03f0e000 fffff880`03f2f000   WudfPf   WudfPf.sys   Sat Nov 20 04:42:44 2010 (4CE7A624)
fffff880`03f2f000 fffff880`03f4b000   SWIPsec  SWIPsec.sys  Fri Jan 14 18:08:19 2011 (4D30E573)
fffff880`03f4b000 fffff880`03f60000   lltdio   lltdio.sys   Mon Jul 13 19:08:50 2009 (4A5BCC92)
fffff880`03f60000 fffff880`03fb3000   nwifi    nwifi.sys    Mon Jul 13 19:07:23 2009 (4A5BCC3B)
fffff880`03fb3000 fffff880`03fc6000   ndisuio  ndisuio.sys  Sat Nov 20 04:50:08 2010 (4CE7A7E0)
fffff880`03fc6000 fffff880`03fde000   rspndr   rspndr.sys   Mon Jul 13 19:08:50 2009 (4A5BCC92)
fffff880`04400000 fffff880`04608000   dump_iaStor dump_iaStor.sys Thu Dec 17 12:41:59 2009 (4B2A7B77)
fffff880`04621000 fffff880`0464b000   cdrom    cdrom.sys    Sat Nov 20 03:19:20 2010 (4CE79298)
fffff880`0464b000 fffff880`04654000   Null     Null.SYS     Mon Jul 13 18:19:37 2009 (4A5BC109)
fffff880`04654000 fffff880`0465b000   Beep     Beep.SYS     Mon Jul 13 19:00:13 2009 (4A5BCA8D)
fffff880`0465b000 fffff880`04669000   vga      vga.sys      Mon Jul 13 18:38:47 2009 (4A5BC587)
fffff880`04669000 fffff880`0468e000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 18:38:51 2009 (4A5BC58B)
fffff880`0468e000 fffff880`0469e000   watchdog watchdog.sys Mon Jul 13 18:37:35 2009 (4A5BC53F)
fffff880`0469e000 fffff880`046a7000   RDPCDD   RDPCDD.sys   Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`046a7000 fffff880`046b0000   rdpencdd rdpencdd.sys Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`046b0000 fffff880`046b9000   rdprefmp rdprefmp.sys Mon Jul 13 19:16:35 2009 (4A5BCE63)
fffff880`046b9000 fffff880`046c4000   Msfs     Msfs.SYS     Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`046c4000 fffff880`046d5000   Npfs     Npfs.SYS     Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff880`046d5000 fffff880`046f7000   tdx      tdx.sys      Sat Nov 20 03:21:54 2010 (4CE79332)
fffff880`046f7000 fffff880`04704000   TDI      TDI.SYS      Sat Nov 20 03:22:06 2010 (4CE7933E)
fffff880`04704000 fffff880`0478d000   afd      afd.sys      Sun Apr 24 21:33:58 2011 (4DB4DD96)
fffff880`0478d000 fffff880`047d2000   netbt    netbt.sys    Sat Nov 20 03:23:18 2010 (4CE79386)
fffff880`047d2000 fffff880`047db000   wfplwf   wfplwf.sys   Mon Jul 13 19:09:26 2009 (4A5BCCB6)
fffff880`047db000 fffff880`047f1000   vwififlt vwififlt.sys Mon Jul 13 19:07:22 2009 (4A5BCC3A)
fffff880`047f1000 fffff880`04800000   netbios  netbios.sys  Mon Jul 13 19:09:26 2009 (4A5BCCB6)
fffff880`04800000 fffff880`0481e000   i8042prt i8042prt.sys Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`0481e000 fffff880`04830000   umbus    umbus.sys    Sat Nov 20 04:44:37 2010 (4CE7A695)
fffff880`04830000 fffff880`04924000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 03:50:50 2010 (4CE799FA)
fffff880`04924000 fffff880`0496a000   dxgmms1  dxgmms1.sys  Sat Nov 20 03:49:53 2010 (4CE799C1)
fffff880`0496a000 fffff880`0498e000   HDAudBus HDAudBus.sys Sat Nov 20 04:43:42 2010 (4CE7A65E)
fffff880`0498e000 fffff880`0499f000   HECIx64  HECIx64.sys  Thu Sep 17 14:54:16 2009 (4AB293E8)
fffff880`0499f000 fffff880`049f5000   Rt64win7 Rt64win7.sys Wed Jun 23 04:10:45 2010 (4C21CF95)
fffff880`04c00000 fffff880`04c0f000   kbdclass kbdclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`04c1d000 fffff880`04d4a000   rtl8192se rtl8192se.sys Mon Apr 26 12:23:06 2010 (4BD5CBFA)
fffff880`04d4a000 fffff880`04d57000   vwifibus vwifibus.sys Mon Jul 13 19:07:21 2009 (4A5BCC39)
fffff880`04d57000 fffff880`04d70000   risdpe64 risdpe64.sys Tue Jul 28 04:24:10 2009 (4A6EC3BA)
fffff880`04d70000 fffff880`04d89000   rimspe64 rimspe64.sys Wed Jul 01 18:54:49 2009 (4A4BF749)
fffff880`04d89000 fffff880`04ddf000   rixdpe64 rixdpe64.sys Sat Jul 04 05:27:00 2009 (4A4F2E74)
fffff880`04ddf000 fffff880`04df0000   usbehci  usbehci.sys  Thu Mar 24 22:29:04 2011 (4D8C0C00)
fffff880`04df0000 fffff880`04df4500   CmBatt   CmBatt.sys   Mon Jul 13 18:31:03 2009 (4A5BC3B7)
fffff880`05000000 fffff880`05016000   AgileVpn AgileVpn.sys Mon Jul 13 19:10:24 2009 (4A5BCCF0)
fffff880`05016000 fffff880`0503a000   rasl2tp  rasl2tp.sys  Sat Nov 20 04:52:34 2010 (4CE7A872)
fffff880`0503a000 fffff880`05046000   ndistapi ndistapi.sys Mon Jul 13 19:10:00 2009 (4A5BCCD8)
fffff880`05046000 fffff880`05075000   ndiswan  ndiswan.sys  Sat Nov 20 04:52:32 2010 (4CE7A870)
fffff880`05075000 fffff880`05090000   raspppoe raspppoe.sys Mon Jul 13 19:10:17 2009 (4A5BCCE9)
fffff880`05090000 fffff880`050b1000   raspptp  raspptp.sys  Sat Nov 20 04:52:31 2010 (4CE7A86F)
fffff880`050b1000 fffff880`050cb000   rassstp  rassstp.sys  Mon Jul 13 19:10:25 2009 (4A5BCCF1)
fffff880`050cb000 fffff880`050d8000   tap0901  tap0901.sys  Fri Dec 11 17:48:03 2009 (4B22DA33)
fffff880`050d8000 fffff880`050ec380   pcouffin pcouffin.sys Tue Dec 05 08:39:30 2006 (457584A2)
fffff880`050f4000 fffff880`05145000   SynTP    SynTP.sys    Thu Oct 15 21:28:35 2009 (4AD7DA53)
fffff880`05145000 fffff880`05146f00   USBD     USBD.SYS     Thu Mar 24 22:28:59 2011 (4D8C0BFB)
fffff880`05147000 fffff880`05156000   mouclass mouclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`05156000 fffff880`05160000   tdcmdpst tdcmdpst.sys Thu Jul 30 03:39:35 2009 (4A715C47)
fffff880`05160000 fffff880`0516d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 07:17:04 2009 (4A1151C0)
fffff880`0516d000 fffff880`05183000   intelppm intelppm.sys Mon Jul 13 18:19:25 2009 (4A5BC0FD)
fffff880`05183000 fffff880`05193000   CompositeBus CompositeBus.sys Sat Nov 20 04:33:17 2010 (4CE7A3ED)
fffff880`05193000 fffff880`0519b000   serscan  serscan.sys  Mon Jul 13 19:35:32 2009 (4A5BD2D4)
fffff880`051a2000 fffff880`051a7200   ksthunk  ksthunk.sys  Mon Jul 13 19:00:19 2009 (4A5BCA93)
fffff880`051a8000 fffff880`051eb000   ks       ks.sys       Sat Nov 20 04:33:23 2010 (4CE7A3F3)
fffff880`051eb000 fffff880`051f6000   rdpbus   rdpbus.sys   Mon Jul 13 19:17:46 2009 (4A5BCEAA)
fffff880`051f6000 fffff880`051f7480   swenum   swenum.sys   Mon Jul 13 19:00:18 2009 (4A5BCA92)
fffff880`05a11000 fffff880`0653a080   nvlddmkm nvlddmkm.sys Fri Jan 15 14:45:08 2010 (4B50D3D4)
fffff880`0653b000 fffff880`0653c180   nvBridge nvBridge.kmd Fri Jan 15 14:15:31 2010 (4B50CCE3)
fffff880`0653d000 fffff880`0657b000   1394ohci 1394ohci.sys Sat Nov 20 04:44:56 2010 (4CE7A6A8)
fffff880`0657b000 fffff880`065d1000   USBPORT  USBPORT.SYS  Thu Mar 24 22:29:12 2011 (4D8C0C08)
fffff880`0682c000 fffff880`06886000   usbhub   usbhub.sys   Thu Mar 24 22:29:25 2011 (4D8C0C15)
fffff880`06886000 fffff880`0689b000   NDProxy  NDProxy.SYS  Sat Nov 20 04:52:20 2010 (4CE7A864)
fffff880`0689b000 fffff880`068b3000   nvhda64v nvhda64v.sys Fri Aug 21 15:23:50 2009 (4A8F0256)
fffff880`068b3000 fffff880`068f0000   portcls  portcls.sys  Mon Jul 13 19:06:27 2009 (4A5BCC03)
fffff880`068f0000 fffff880`06912000   drmk     drmk.sys     Mon Jul 13 20:01:25 2009 (4A5BD8E5)
fffff880`06912000 fffff880`06920000   crashdmp crashdmp.sys Mon Jul 13 19:01:01 2009 (4A5BCABD)
fffff880`06920000 fffff880`06933000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 18:21:51 2009 (4A5BC18F)
fffff880`06933000 fffff880`06941000   monitor  monitor.sys  Mon Jul 13 18:38:52 2009 (4A5BC58C)
fffff880`06941000 fffff880`0695e000   usbccgp  usbccgp.sys  Thu Mar 24 22:29:14 2011 (4D8C0C0A)
fffff880`0695e000 fffff880`06970000   dc3d     dc3d.sys     Thu Jul 01 05:07:45 2010 (4C2C68F1)
fffff880`06970000 fffff880`06978080   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:06:17 2009 (4A5BCBF9)
fffff880`06979000 fffff880`06987000   hidusb   hidusb.sys   Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`06987000 fffff880`069a0000   HIDCLASS HIDCLASS.SYS Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`069a0000 fffff880`069ae000   kbdhid   kbdhid.sys   Sat Nov 20 04:33:25 2010 (4CE7A3F5)
fffff880`069ae000 fffff880`069bb000   mouhid   mouhid.sys   Mon Jul 13 19:00:20 2009 (4A5BCA94)
fffff880`069bb000 fffff880`069c9000   point64k point64k.sys Fri May 08 03:53:29 2009 (4A03F309)
fffff880`069c9000 fffff880`069ec000   luafv    luafv.sys    Mon Jul 13 18:26:13 2009 (4A5BC295)
fffff880`069ec000 fffff880`069fb000   TmPreFlt TmPreFlt.sys Wed Oct 20 05:46:37 2010 (4CBEC88D)
fffff880`06a00000 fffff880`06a0c000   Dxapi    Dxapi.sys    Mon Jul 13 18:38:28 2009 (4A5BC574)
fffff880`06a0e000 fffff880`06bfa180   RTKVHD64 RTKVHD64.sys Mon Nov 02 04:44:45 2009 (4AEEB81D)
fffff880`07400000 fffff880`0742d000   mrxsmb   mrxsmb.sys   Tue Apr 26 21:40:38 2011 (4DB78226)
fffff880`0742d000 fffff880`0747b000   mrxsmb10 mrxsmb10.sys Tue Apr 26 21:39:40 2011 (4DB781EC)
fffff880`0747b000 fffff880`0749f000   mrxsmb20 mrxsmb20.sys Tue Apr 26 21:39:37 2011 (4DB781E9)
fffff880`0749f000 fffff880`074a9000   vwifimp  vwifimp.sys  Mon Jul 13 19:07:28 2009 (4A5BCC40)
fffff880`074a9000 fffff880`074cd000   ntk_dtv_64 ntk_dtv_64.sys Mon Apr 20 21:57:48 2009 (49ED362C)
fffff880`074cd000 fffff880`074d8000   secdrv   secdrv.SYS   Wed Sep 13 08:18:38 2006 (4508052E)
fffff880`074d8000 fffff880`074ea000   tcpipreg tcpipreg.sys Sat Nov 20 04:51:48 2010 (4CE7A844)
fffff880`074f2000 fffff880`075bb000   HTTP     HTTP.sys     Sat Nov 20 03:24:30 2010 (4CE793CE)
fffff880`075bb000 fffff880`075d9000   bowser   bowser.sys   Tue Feb 22 22:55:04 2011 (4D649328)
fffff880`075d9000 fffff880`075f1000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:08:25 2009 (4A5BCC79)
fffff880`0803a000 fffff880`081f9000   tmwfp    tmwfp.sys    Sat Apr 24 09:34:11 2010 (4BD30163)
fffff880`0881e000 fffff880`08887000   srv2     srv2.sys     Thu Apr 28 22:05:46 2011 (4DBA2B0A)
fffff880`08887000 fffff880`0891f000   srv      srv.sys      Thu Apr 28 22:06:06 2011 (4DBA2B1E)
fffff880`0891f000 fffff880`08947000   mrxdav   mrxdav.sys   Sat Nov 20 03:26:42 2010 (4CE79452)
fffff880`089b8000 fffff880`089c3000   asyncmac asyncmac.sys Mon Jul 13 19:10:13 2009 (4A5BCCE5)
fffff880`089e1000 fffff880`089eb000   swvnic   swvnic.sys   Sun Feb 22 21:04:50 2009 (49A21252)
fffff960`00060000 fffff960`00373000   win32k   win32k.sys   unavailable (00000000)
fffff960`004d0000 fffff960`004da000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`006a0000 fffff960`006c7000   cdd      cdd.dll      unavailable (00000000)
fffff960`00970000 fffff960`009d1000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff880`089d7000 fffff880`089e1000   swvnic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`089cd000 fffff880`089d7000   swvnic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`089c3000 fffff880`089cd000   swvnic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`08947000 fffff880`089b8000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01ddd000 fffff880`01deb000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`04406000 fffff880`0460e000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00208000
fffff880`0460e000 fffff880`04621000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`0519b000 fffff880`051a2000   pgeffect.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000

EricMi · 03 Aug 2011

That is quite odd, he does not have anything Citrix or Cisco on this laptop. He does have the software for the OpenVPN client and the SonicWALL Global VPN client. I wonder if either of those could use that driver?

His SonicWALL Global VPN Client seems to connect correctly....

I know he has told me that iTunes does not see his iPod Touch when it is plugged in.

Maguscreed · 03 Aug 2011

well the process described at the link is a repair process.
It's possible sonicwall... nay likely sonicwall is using a cisco foundation.

EricMi · 03 Aug 2011

When I ran the FixIt on the Citrix site it did say that the SonicWALL global VPN client was using that driver.

I am the network admin for this company, do you just use notepad to view those memory dumps?

When I went back to the user that had the issue to tell him that I upgraded the Cisco DNE driver as that was what the dump said was the cause of the BSOD, he did say then that the BSOD did say something about Cisco.

So I am going to mark this fixed... Thank you for your time.

Maguscreed · 03 Aug 2011

Reading dump files is a bit complicated actually.

If you are interested I would just google windbg
and start reading and downloading.