Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: blue screen windows 7 please help

06 Feb 2010   #1
ACT

win 7 ultimate
 
 
blue screen windows 7 please help

hi all i just work on ma pc by win 7 installed but suddenly blue screen came and i restarted.till that time im trying to turn on ma pc but in start up blue screen shows up and restart automatically.i try in safe mode pc comes up without any problem.note: I have win xp too please help dmp file attached


My System SpecsSystem Spec
.
06 Feb 2010   #2
jcgriff2

Windows 7 - Vista
 
 

The module ntkr128g.exe shows up in the dump as a patched Kernel.

Code:
 
82e14000 83224000   nt       ntkr128g.exe Mon Jul 13 19:15:19 2009 (4A5BC007)
You are running a cracked version of Windows 7. I suggest that you purchae a genuine Windows 7 DVD.

Rehards. . .

jcgriff2

.

Code:
 
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\PalmDesert7\_jcgriff2_\dbug\__Kernel__\020610-25662-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
 
Executable search path is: 
Unable to load image \SystemRoot\system32\ntkr128g.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkr128g.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkr128g.exe
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e14000 PsLoadedModuleList = 0x82f5c810
Debug session time: Fri Feb  5 18:55:01.984 2010 (GMT-5)
System Uptime: 0 days 0:00:11.467
Unable to load image \SystemRoot\system32\ntkr128g.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkr128g.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkr128g.exe
Loading Kernel Symbols
...............................................................
..................
Loading User Symbols
2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ffffffff, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 9239bed0, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for KGootkit.sys
*** ERROR: Module load completed but symbols could not be loaded for KGootkit.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!KPRCB                                      ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!KPRCB                                      ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
ADDITIONAL_DEBUG_TEXT:  
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
FAULTING_MODULE: 82e14000 nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4b6bf201
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
ffffffff 
FAULTING_IP: 
KGootkit+3ed0
9239bed0 6681384d5a      cmp     word ptr [eax],5A4Dh
MM_INTERNAL_CODE:  0
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x50
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 82e5a5f8 to 82e998e3
STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
8ff85c14 82e5a5f8 00000000 ffffffff 00000000 nt+0x858e3
8ff85c2c 9239bed0 badb0d00 82e573a9 00000008 nt+0x465f8
8ff85ca4 9239c7ff 9239c5a0 00000001 00000000 KGootkit+0x3ed0
8ff85ce0 9239cae7 82e5738f 82e5738f 82e81f03 KGootkit+0x47ff
8ff85d00 82e81f2b 86fc8000 00000000 85ec9020 KGootkit+0x4ae7
8ff85d50 8302266d 00000001 bac6ac56 00000000 nt+0x6df2b
8ff85d90 82ed40d9 82e81e1e 00000001 00000000 nt+0x20e66d
00000000 00000000 00000000 00000000 00000000 nt+0xc00d9
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
KGootkit+3ed0
9239bed0 6681384d5a      cmp     word ptr [eax],5A4Dh
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  KGootkit+3ed0
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: KGootkit
IMAGE_NAME:  KGootkit.sys
BUCKET_ID:  WRONG_SYMBOLS
Followup: MachineOwner
---------
2: kd> lmvm KGootkit
start    end        module name
92398000 923a0600   KGootkit T (no symbols)           
  Loaded symbol image file: KGootkit.sys
  Image path: \SystemRoot\System32\drivers\KGootkit.sys
  Image name: KGootkit.sys
  Timestamp:        Fri Feb 05 05:25:05 2010 (4B6BF201)
  CheckSum:         00017653
  ImageSize:        00008600
  Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
2: kd> k
ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
8ff85c14 82e5a5f8 nt+0x858e3
8ff85c2c 9239bed0 nt+0x465f8
8ff85ca4 9239c7ff KGootkit+0x3ed0
8ff85ce0 9239cae7 KGootkit+0x47ff
8ff85d00 82e81f2b KGootkit+0x4ae7
8ff85d50 8302266d nt+0x6df2b
8ff85d90 82ed40d9 nt+0x20e66d
00000000 00000000 nt+0xc00d9
2: kd> lmnt'
Unknown option '''
start    end        module name
80bc0000 80bc8000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
82e14000 83224000   nt       ntkr128g.exe Mon Jul 13 19:15:19 2009 (4A5BC007)
83224000 8325b000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
8da19000 8da91000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
8da91000 8daa2000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
8daa2000 8daaa000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
8daaa000 8daec000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8daec000 8db97000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8db97000 8dbcb000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8dbcb000 8dbea000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8dc04000 8dc75000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8dc75000 8dc83000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8dc83000 8dccb000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
8dccb000 8dcd4000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8dcd4000 8dcdc000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8dcdc000 8dd06000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
8dd06000 8dd11000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
8dd11000 8dd22000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8dd22000 8dd32000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8dd32000 8dd7d000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8dd7d000 8dd84000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
8dd84000 8dd92000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8dd92000 8dda8000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
8dda8000 8ddb1000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
8ddb1000 8ddd4000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
8ddd4000 8dddd000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
8dddd000 8ddee000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8ddee000 8ddf9000   klbg     klbg.sys     Mon Dec 15 11:41:09 2008 (494688A5)
8de00000 8de0e000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8de0e000 8de17000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8de2e000 8df5d000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
8df5d000 8df88000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
8df88000 8df9b000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8df9b000 8dff8000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8e01a000 8e0d1000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
8e0d1000 8e10f000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
8e10f000 8e134000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:34:00 2009 (4A5BC468)
8e134000 8e161000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
8e161000 8e193000   fvevol   fvevol.sys   Mon Jul 13 19:13:01 2009 (4A5BBF7D)
8e193000 8e1a4000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
8e1a4000 8e1c9000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8e1c9000 8e1d2000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8e1d2000 8e1e3000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
8e200000 8e20b000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8e20e000 8e357000   tcpip    tcpip.sys    Mon Jul 13 19:13:18 2009 (4A5BBF8E)
8e357000 8e388000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
8e388000 8e390380   vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8e391000 8e3d0000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
8e3d0000 8e3d8000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
8e3d8000 8e3e8000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8e3e8000 8e3f0000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
8e3f0000 8e3fd000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
92214000 9225d000   klif     klif.sys     Fri Jul 03 05:08:10 2009 (4A4DCA7A)
9225d000 92264000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
92264000 9226b000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
9226b000 92277000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
92277000 92298000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
92298000 922a5000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
922a5000 922ad000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
922ad000 922b5000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
922b5000 922bd000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
922bd000 922c8000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
922c8000 922d6000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
922d6000 922ed000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
922ed000 922f8000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
922f8000 92306000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
92306000 92320000   serial   serial.sys   Mon Jul 13 19:45:33 2009 (4A5BC71D)
92320000 92333000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
92333000 92343000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
92343000 92384000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
92384000 9238e000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
9238e000 92398000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
92398000 923a0600   KGootkit KGootkit.sys Fri Feb 05 05:25:05 2010 (4B6BF201)
95008000 95528000   kl1      kl1.sys      Mon Jun 15 06:00:15 2009 (4A361BAF)
95528000 95582000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
95582000 955b4000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
955b4000 955bb000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
955bb000 955da000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
955da000 955eb000   vwififlt vwififlt.sys Mon Jul 13 19:52:03 2009 (4A5BC8A3)
955eb000 955f2000   klim6    klim6.sys    Fri May 15 10:50:04 2009 (4A0D811C)
955f2000 955fa000   anodlwf  anodlwf.sys  Fri Mar 06 05:09:51 2009 (49B0F66F)
955fa000 955fc170   lixgax   lixgax.sys   Wed Jan 20 12:17:19 2010 (4B573A9F)
2: kd> lmntsm
start    end        module name
8dc83000 8dccb000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
95528000 95582000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
8ddd4000 8dddd000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
955f2000 955fa000   anodlwf  anodlwf.sys  Fri Mar 06 05:09:51 2009 (49B0F66F)
8dda8000 8ddb1000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
8ddb1000 8ddd4000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
92264000 9226b000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8daa2000 8daaa000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
8dbcb000 8dbea000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8daec000 8db97000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8e1a4000 8e1c9000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8daaa000 8daec000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8df9b000 8dff8000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8e3f0000 8e3fd000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8e193000 8e1a4000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
8e1c9000 8e1d2000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8e200000 8e20b000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8e1d2000 8e1e3000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
8dddd000 8ddee000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8db97000 8dbcb000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8de0e000 8de17000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8e161000 8e193000   fvevol   fvevol.sys   Mon Jul 13 19:13:01 2009 (4A5BBF7D)
8e357000 8e388000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
83224000 8325b000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
8e3e8000 8e3f0000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
80bc0000 80bc8000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
92398000 923a0600   KGootkit KGootkit.sys Fri Feb 05 05:25:05 2010 (4B6BF201)
95008000 95528000   kl1      kl1.sys      Mon Jun 15 06:00:15 2009 (4A361BAF)
8ddee000 8ddf9000   klbg     klbg.sys     Mon Dec 15 11:41:09 2008 (494688A5)
92214000 9225d000   klif     klif.sys     Fri Jul 03 05:08:10 2009 (4A4DCA7A)
955eb000 955f2000   klim6    klim6.sys    Fri May 15 10:50:04 2009 (4A0D811C)
8df88000 8df9b000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8e10f000 8e134000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:34:00 2009 (4A5BC468)
955fa000 955fc170   lixgax   lixgax.sys   Wed Jan 20 12:17:19 2010 (4B573A9F)
8da19000 8da91000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
8dd92000 8dda8000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
922bd000 922c8000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8dcd4000 8dcdc000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8df5d000 8df88000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
9238e000 92398000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8e3d8000 8e3e8000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8e01a000 8e0d1000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
922f8000 92306000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
95582000 955b4000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
8e0d1000 8e10f000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
922c8000 922d6000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
92384000 9238e000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82e14000 83224000   nt       ntkr128g.exe Mon Jul 13 19:15:19 2009 (4A5BC007)
8de2e000 8df5d000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
9225d000 92264000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
955bb000 955da000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8dd11000 8dd22000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8dcdc000 8dd06000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
8dd7d000 8dd84000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
8dd84000 8dd92000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8de00000 8de0e000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8da91000 8daa2000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
92343000 92384000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
922a5000 922ad000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
922ad000 922b5000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
922b5000 922bd000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8e134000 8e161000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
92306000 92320000   serial   serial.sys   Mon Jul 13 19:45:33 2009 (4A5BC71D)
8e3d0000 8e3d8000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
8e20e000 8e357000   tcpip    tcpip.sys    Mon Jul 13 19:13:18 2009 (4A5BBF8E)
922ed000 922f8000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
922d6000 922ed000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
92333000 92343000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
8dd06000 8dd11000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
9226b000 92277000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
92277000 92298000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8e388000 8e390380   vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8dd22000 8dd32000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8dd32000 8dd7d000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8e391000 8e3d0000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
955da000 955eb000   vwififlt vwififlt.sys Mon Jul 13 19:52:03 2009 (4A5BC8A3)
92320000 92333000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
92298000 922a5000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8dc04000 8dc75000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8dc75000 8dc83000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
955b4000 955bb000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
8dccb000 8dcd4000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
My System SpecsSystem Spec
Reply

 blue screen windows 7 please help




Thread Tools




Similar help and support threads
Thread Forum
Blue Screen Error but no actual blue screen pops up
While using my laptop, usually when trying to open some "windows" application such as task manager, wireless networks, documents, media player, windows updater etc. my laptop freezes or doesn't allow me to click on anything except the minus button on all my windows and the start button. I'll try to...
BSOD Help and Support
Windows 7: Blue Screen after loading screen
Hi, i joined this forum in hope to get this problem fixed. Okay i just started my computer today and it just dont want me in to windows 7 and after more than a minute on the windows 7 loading screen i get a blue screen with text inside, i have a picture of it in the attachments. Things i have...
BSOD Help and Support
Windows 7 Ultimate stuck at welcome screen & reboots with blue screen
Specifications: Intel Core 2 Duo 2.93 GHz 4GB DDR2 RAM 800GB WD HDD 7200rpm 64mb cache Windows 7 Ultimate 32bit ----------------------------------------------------------------------------------- I never had any problem with my desktop and it NEVER got stuck or anything. I've searched...
BSOD Help and Support
Blue Screen in windows 7 64 bit
Hello thanks in advance for your assistance and patience. Pls find uploaded my file zipped with system info & mini dump files as per your instructions made with Sf tool. awaiting yours eargly rgds.daxjedi
BSOD Help and Support
Windows 7 Blue Screen
Hello, When windows starts after a few seconds I'm getting a blue screen, yesterday worked fine. I have installed Windows 7 a few months ago but a I didn't had any problem with it. I've attached the minidump and a picture of blue screen. My computer details Intel Core Duo E7300 2.65GHz 4GB RAM...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 20:51.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App