Thank you for the files.
The bugchecks are all over the map; bugcheck 0xC5, 0xD1, 0x19 and 0x1E (so far):
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Devin\AppData\Local\Temp\Rar$DI02.740\022110-54693-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c15000 PsLoadedModuleList = 0xfffff800`02e52e50
Debug session time: Sun Feb 21 12:35:40.089 2010 (GMT-5)
System Uptime: 1 days 15:23:04.008
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
..............................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff880089a1a40, 0, 0}
Unable to load image \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100210.001\IDSvia64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for IDSvia64.sys
*** ERROR: Module load completed but symbols could not be loaded for IDSvia64.sys
Probably caused by : IDSvia64.sys ( IDSvia64+31bb1 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff880089a1a40, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
+0
fffff880`089a1a40 68299a0880 push 0FFFFFFFF80089A29h
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ebd0e0
0000000000000000
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: System
CURRENT_IRQL: 2
EXCEPTION_RECORD: fffff880089a2968 -- (.exr 0xfffff880089a2968)
ExceptionAddress: fffff88004546bb1 (IDSvia64+0x0000000000031bb1)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: ffffffffffffffff
Parameter[1]: 0000000000000000
Attempt to execute non-executable address 0000000000000000
TRAP_FRAME: fffff880089a2a10 -- (.trap 0xfffff880089a2a10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8005b95804 rbx=0000000000000000 rcx=fffffa800889f104
rdx=fffffa8008313709 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88004546bb1 rsp=fffff880089a2ba0 rbp=ffff7a80097de0f4
r8=0000000000000000 r9=0000000000000000 r10=fffff80002e00820
r11=fffffa80083c41e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
IDSvia64+0x31bb1:
fffff880`04546bb1 ?? ???
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002d17b2b to fffff80002c86f00
STACK_TEXT:
fffff880`089a1988 fffff800`02d17b2b : 00000000`0000001e ffffffff`c0000005 fffff880`089a1a40 00000000`00000000 : nt!KeBugCheckEx
fffff880`089a1990 fffff800`02cda390 : fffff880`05b410a0 fffff880`021e0052 fffff880`089a1cf8 fffff880`089a1c88 : nt!KipFatalFilter+0x1b
fffff880`089a19d0 fffff800`02cb54dc : fffff880`089a1a40 fffff880`00000004 fffffa80`0724d290 fffff880`04c29493 : nt! ?? ::FNODOBFM::`string'+0x95d
fffff880`089a1a10 fffff800`02cacbed : fffff800`02dcd470 fffff880`089a45a0 00000000`00000000 fffff800`02c15000 : nt!_C_specific_handler+0x8c
fffff880`089a1a80 fffff800`02cb4250 : fffff800`02dcd470 fffff880`089a1af8 fffff880`089a2968 fffff800`02c15000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`089a1ab0 fffff800`02cc11b5 : fffff880`089a2968 fffff880`089a21c0 fffff880`00000000 fffffa80`00000005 : nt!RtlDispatchException+0x410
fffff880`089a2190 fffff800`02c86542 : fffff880`089a2968 ffffffff`ffffffff fffff880`089a2a10 fffffa80`0889f104 : nt!KiDispatchException+0x135
fffff880`089a2830 fffff800`02c84d12 : 00000000`00000001 fffffa80`05ffd060 00000000`00000001 fffffa80`05ffd060 : nt!KiExceptionDispatch+0xc2
fffff880`089a2a10 fffff880`04546bb1 : 00000000`00000000 00000000`00000000 00000000`00000020 ffff0000`0ccdf973 : nt!KiStackFault+0x112
fffff880`089a2ba0 00000000`00000000 : 00000000`00000000 00000000`00000020 ffff0000`0ccdf973 fffffa80`05ffd060 : IDSvia64+0x31bb1
STACK_COMMAND: kb
FOLLOWUP_IP:
IDSvia64+31bb1
fffff880`04546bb1 ?? ???
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: IDSvia64+31bb1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: IDSvia64
IMAGE_NAME: IDSvia64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ae76706
FAILURE_BUCKET_ID: X64_0x1E_IDSvia64+31bb1
BUCKET_ID: X64_0x1E_IDSvia64+31bb1
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff880089a1a40, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
+0
fffff880`089a1a40 68299a0880 push 0FFFFFFFF80089A29h
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
READ_ADDRESS: 0000000000000000
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: System
CURRENT_IRQL: 2
EXCEPTION_RECORD: fffff880089a2968 -- (.exr 0xfffff880089a2968)
ExceptionAddress: fffff88004546bb1 (IDSvia64+0x0000000000031bb1)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: ffffffffffffffff
Parameter[1]: 0000000000000000
Attempt to execute non-executable address 0000000000000000
TRAP_FRAME: fffff880089a2a10 -- (.trap 0xfffff880089a2a10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8005b95804 rbx=0000000000000000 rcx=fffffa800889f104
rdx=fffffa8008313709 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88004546bb1 rsp=fffff880089a2ba0 rbp=ffff7a80097de0f4
r8=0000000000000000 r9=0000000000000000 r10=fffff80002e00820
r11=fffffa80083c41e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
IDSvia64+0x31bb1:
fffff880`04546bb1 ?? ???
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002d17b2b to fffff80002c86f00
STACK_TEXT:
fffff880`089a1988 fffff800`02d17b2b : 00000000`0000001e ffffffff`c0000005 fffff880`089a1a40 00000000`00000000 : nt!KeBugCheckEx
fffff880`089a1990 fffff800`02cda390 : fffff880`05b410a0 fffff880`021e0052 fffff880`089a1cf8 fffff880`089a1c88 : nt!KipFatalFilter+0x1b
fffff880`089a19d0 fffff800`02cb54dc : fffff880`089a1a40 fffff880`00000004 fffffa80`0724d290 fffff880`04c29493 : nt! ?? ::FNODOBFM::`string'+0x95d
fffff880`089a1a10 fffff800`02cacbed : fffff800`02dcd470 fffff880`089a45a0 00000000`00000000 fffff800`02c15000 : nt!_C_specific_handler+0x8c
fffff880`089a1a80 fffff800`02cb4250 : fffff800`02dcd470 fffff880`089a1af8 fffff880`089a2968 fffff800`02c15000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`089a1ab0 fffff800`02cc11b5 : fffff880`089a2968 fffff880`089a21c0 fffff880`00000000 fffffa80`00000005 : nt!RtlDispatchException+0x410
fffff880`089a2190 fffff800`02c86542 : fffff880`089a2968 ffffffff`ffffffff fffff880`089a2a10 fffffa80`0889f104 : nt!KiDispatchException+0x135
fffff880`089a2830 fffff800`02c84d12 : 00000000`00000001 fffffa80`05ffd060 00000000`00000001 fffffa80`05ffd060 : nt!KiExceptionDispatch+0xc2
fffff880`089a2a10 fffff880`04546bb1 : 00000000`00000000 00000000`00000000 00000000`00000020 ffff0000`0ccdf973 : nt!KiStackFault+0x112
fffff880`089a2ba0 00000000`00000000 : 00000000`00000000 00000000`00000020 ffff0000`0ccdf973 fffffa80`05ffd060 : IDSvia64+0x31bb1
STACK_COMMAND: kb
FOLLOWUP_IP:
IDSvia64+31bb1
fffff880`04546bb1 ?? ???
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: IDSvia64+31bb1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: IDSvia64
IMAGE_NAME: IDSvia64.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ae76706
FAILURE_BUCKET_ID: X64_0x1E_IDSvia64+31bb1
BUCKET_ID: X64_0x1E_IDSvia64+31bb1
Followup: MachineOwner
---------
0: kd> lmvm IDSvia64
start end module name
fffff880`04515000 fffff880`0458c000 IDSvia64 T (no symbols)
Loaded symbol image file: IDSvia64.sys
Image path: \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100210.001\IDSvia64.sys
Image name: IDSvia64.sys
Timestamp: Tue Oct 27 17:32:54 2009 (4AE76706)
CheckSum: 00072557
ImageSize: 00077000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> r
rax=fffff880089a2968 rbx=fffff80002dcd47c rcx=000000000000001e
rdx=ffffffffc0000005 rsi=fffff880089a45a0 rdi=0000000000000000
rip=fffff80002c86f00 rsp=fffff880089a1988 rbp=fffff880089a45a0
r8=fffff880089a1a40 r9=0000000000000000 r10=fffff880089a4680
r11=fffff880089a1a78 r12=fffff80002dcd470 r13=000000000008164a
r14=fffff80002c15000 r15=fffff880089a2968
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000246
nt!KeBugCheckEx:
fffff800`02c86f00 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`089a1990=000000000000001e
0: kd> k
Child-SP RetAddr Call Site
fffff880`089a1988 fffff800`02d17b2b nt!KeBugCheckEx
fffff880`089a1990 fffff800`02cda390 nt!KipFatalFilter+0x1b
fffff880`089a19d0 fffff800`02cb54dc nt! ?? ::FNODOBFM::`string'+0x95d
fffff880`089a1a10 fffff800`02cacbed nt!_C_specific_handler+0x8c
fffff880`089a1a80 fffff800`02cb4250 nt!RtlpExecuteHandlerForException+0xd
fffff880`089a1ab0 fffff800`02cc11b5 nt!RtlDispatchException+0x410
fffff880`089a2190 fffff800`02c86542 nt!KiDispatchException+0x135
fffff880`089a2830 fffff800`02c84d12 nt!KiExceptionDispatch+0xc2
fffff880`089a2a10 fffff880`04546bb1 nt!KiStackFault+0x112
fffff880`089a2ba0 00000000`00000000 IDSvia64+0x31bb1
0: kd> kv
Child-SP RetAddr : Args to Child : Call Site
fffff880`089a1988 fffff800`02d17b2b : 00000000`0000001e ffffffff`c0000005 fffff880`089a1a40 00000000`00000000 : nt!KeBugCheckEx
fffff880`089a1990 fffff800`02cda390 : fffff880`05b410a0 fffff880`021e0052 fffff880`089a1cf8 fffff880`089a1c88 : nt!KipFatalFilter+0x1b
fffff880`089a19d0 fffff800`02cb54dc : fffff880`089a1a40 fffff880`00000004 fffffa80`0724d290 fffff880`04c29493 : nt! ?? ::FNODOBFM::`string'+0x95d
fffff880`089a1a10 fffff800`02cacbed : fffff800`02dcd470 fffff880`089a45a0 00000000`00000000 fffff800`02c15000 : nt!_C_specific_handler+0x8c
fffff880`089a1a80 fffff800`02cb4250 : fffff800`02dcd470 fffff880`089a1af8 fffff880`089a2968 fffff800`02c15000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`089a1ab0 fffff800`02cc11b5 : fffff880`089a2968 fffff880`089a21c0 fffff880`00000000 fffffa80`00000005 : nt!RtlDispatchException+0x410
fffff880`089a2190 fffff800`02c86542 : fffff880`089a2968 ffffffff`ffffffff fffff880`089a2a10 fffffa80`0889f104 : nt!KiDispatchException+0x135
fffff880`089a2830 fffff800`02c84d12 : 00000000`00000001 fffffa80`05ffd060 00000000`00000001 fffffa80`05ffd060 : nt!KiExceptionDispatch+0xc2
fffff880`089a2a10 fffff880`04546bb1 : 00000000`00000000 00000000`00000000 00000000`00000020 ffff0000`0ccdf973 : nt!KiStackFault+0x112 (TrapFrame @ fffff880`089a2a10)
fffff880`089a2ba0 00000000`00000000 : 00000000`00000000 00000000`00000020 ffff0000`0ccdf973 fffffa80`05ffd060 : IDSvia64+0x31bb1
0: kd> lmntsm
start end module name
fffff880`0498d000 fffff880`049cb000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00ec4000 fffff880`00f1b000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`04374000 fffff880`043fe000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04819000 fffff880`0482f000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0102a000 fffff880`01035000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`011f1000 fffff880`011fa000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`0102a000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00870000 fffff960`008d1000 ATMFD ATMFD.DLL unavailable (00000000)
fffff880`03fe1000 fffff880`03fe8000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`048fa000 fffff880`04951000 BHDrvx64 BHDrvx64.sys Wed Jul 29 21:07:44 2009 (4A70F260)
fffff880`048e9000 fffff880`048fa000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02352000 fffff880`02370000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`04856000 fffff880`048e9000 ccHPx64 ccHPx64.sys Fri Jun 19 19:28:39 2009 (4A3C1F27)
fffff960`006d0000 fffff960`006f7000 cdd cdd.dll unavailable (00000000)
fffff880`03fb7000 fffff880`03fe1000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01200000 fffff880`01230000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d39000 fffff880`00d97000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01519000 fffff880`0158c000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04809000 fffff880`04819000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0584f000 fffff880`0585d000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`059e8000 fffff880`059f4000 dc3d dc3d.sys Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`04485000 fffff880`044a3000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04476000 fffff880`04485000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01474000 fffff880`0148a000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05800000 fffff880`05822000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0585d000 fffff880`05870000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`03e87000 fffff880`03fa3000 dump_iaStor dump_iaStor.sys Thu Jun 04 21:53:40 2009 (4A287AA4)
fffff880`05870000 fffff880`0587c000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0525b000 fffff880`0534f000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`0534f000 fffff880`05395000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`05395000 fffff880`053de000 e1y60x64 e1y60x64.sys Mon Aug 18 17:45:05 2008 (48A9ED61)
fffff880`04400000 fffff880`04476000 eeCtrl64 eeCtrl64.sys Mon Aug 17 19:05:31 2009 (4A89E23B)
fffff880`069c6000 fffff880`069e6000 ENG64 ENG64.SYS Wed Jan 06 17:14:39 2010 (4B450B4F)
fffff880`06961000 fffff880`06986000 EraserUtilDrvI9 EraserUtilDrvI9.sys Mon Aug 17 19:05:31 2009 (4A89E23B)
fffff880`04014000 fffff880`041c1000 EX64 EX64.SYS Wed Jan 06 17:23:25 2010 (4B450D5D)
fffff880`01081000 fffff880`01095000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01035000 fffff880`01081000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0159d000 fffff880`015a7000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0143a000 fffff880`01474000 fvevol fvevol.sys Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01600000 fffff880`0164a000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`049f1000 fffff880`049fe000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`031f2000 fffff800`0323b000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04a00000 fffff880`04a24000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`058c2000 fffff880`058db000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`059df000 fffff880`059e7080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`058b4000 fffff880`058c2000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02200000 fffff880`022c8000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`017f1000 fffff880`017fa000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`049cb000 fffff880`049e9000 i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010d5000 fffff880`011f1000 iaStor iaStor.sys Thu Jun 04 21:53:40 2009 (4A287AA4)
fffff880`04515000 fffff880`0458c000 IDSvia64 IDSvia64.sys Tue Oct 27 17:32:54 2009 (4AE76706)
fffff880`04a3a000 fffff880`051e3840 igdkmd64 igdkmd64.sys Mon Dec 14 21:26:44 2009 (4B26F3E4)
fffff880`05828000 fffff880`0584f000 IntcHdmi IntcHdmi.sys Fri Jul 10 09:45:10 2009 (4A5745E6)
fffff880`04977000 fffff880`0498d000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04a24000 fffff880`04a33000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bba000 fffff800`00bc4000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0591b000 fffff880`0595e000 ks ks.sys Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`014ff000 fffff880`01519000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`017b4000 fffff880`017df000 ksecpkg ksecpkg.sys Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`05822000 fffff880`05827200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02325000 fffff880`0233a000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`022e1000 fffff880`02304000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00ce1000 fffff880`00d25000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`045ef000 fffff880`045fd000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`051e4000 fffff880`051f3000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`045e2000 fffff880`045ef000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00cc0000 fffff880`00cda000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02370000 fffff880`02388000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02388000 fffff880`023b5000 mrxsmb mrxsmb.sys Thu Jan 07 22:38:26 2010 (4B46A8B2)
fffff880`02885000 fffff880`028d2000 mrxsmb10 mrxsmb10.sys Thu Jan 07 22:38:32 2010 (4B46A8B8)
fffff880`028d2000 fffff880`028f5000 mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`010ba000 fffff880`010c5000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f24000 fffff880`00f2e000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`014a1000 fffff880`014ff000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`0450a000 fffff880`04515000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017df000 fffff880`017f1000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01662000 fffff880`01754000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0458c000 fffff880`04598000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04598000 fffff880`045c7000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`059ca000 fffff880`059df000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`0427f000 fffff880`0428e000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04200000 fffff880`04245000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01754000 fffff880`017b4000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`00e00000 fffff880`00e11000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`044fe000 fffff880`0450a000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c15000 fffff800`031f2000 nt ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`0125a000 fffff880`013fd000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`049e9000 fffff880`049f1000 NTIDrvr NTIDrvr.sys Tue Mar 24 23:09:39 2009 (49C9A073)
fffff880`059f4000 fffff880`059fd000 NuidFltr NuidFltr.sys Fri May 08 04:53:31 2009 (4A03F30B)
fffff880`03e7e000 fffff880`03e87000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0424e000 fffff880`04274000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f6e000 fffff880`00f83000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f2e000 fffff880`00f61000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0158c000 fffff880`0159d000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`028f5000 fffff880`0299b000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06600000 fffff880`0663d000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d25000 fffff880`00d39000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0482f000 fffff880`04853000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`045c7000 fffff880`045e2000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`058de000 fffff880`058ff000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`058ff000 fffff880`05919000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`044ad000 fffff880`044fe000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03ff6000 fffff880`03fff000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`015f3000 fffff880`015fc000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01250000 fffff880`01259000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01400000 fffff880`0143a000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0233a000 fffff880`02352000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06642000 fffff880`067ffa00 RTKVHD64 RTKVHD64.sys Mon Jul 20 06:52:29 2009 (4A644C6D)
fffff880`0299b000 fffff880`029a6000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0164a000 fffff880`01652000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`03e00000 fffff880`03e7e000 SRTSP64 SRTSP64.SYS Mon Jun 22 22:45:21 2009 (4A4041C1)
fffff880`04000000 fffff880`04014000 SRTSPX64 SRTSPX64.SYS Mon Jun 22 22:47:54 2009 (4A40425A)
fffff880`06827000 fffff880`068bf000 srv srv.sys Tue Dec 08 03:32:55 2009 (4B1E0F37)
fffff880`02800000 fffff880`02869000 srv2 srv2.sys Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`029a6000 fffff880`029d3000 srvnet srvnet.sys Tue Dec 08 03:32:26 2009 (4B1E0F1A)
fffff880`05919000 fffff880`0591a480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`00d97000 fffff880`00dfe000 SYMEFA64 SYMEFA64.SYS Tue Jun 23 17:52:39 2009 (4A414EA7)
fffff880`041c4000 fffff880`041fa000 SYMEVENT64x86 SYMEVENT64x86.SYS Wed Jun 24 16:19:12 2009 (4A428A40)
fffff880`04352000 fffff880`04374000 SYMFW SYMFW.SYS Mon Jul 06 20:29:22 2009 (4A5296E2)
fffff880`04274000 fffff880`0427f000 SymIMv SymIMv.sys Mon Jun 22 19:11:56 2009 (4A400FBC)
fffff880`04342000 fffff880`04352000 SYMNDISV SYMNDISV.SYS Mon Jul 06 20:33:26 2009 (4A5297D6)
fffff880`042f6000 fffff880`04342000 SYMTDI SYMTDI.SYS Mon Jul 06 20:28:48 2009 (4A5296C0)
fffff880`01800000 fffff880`019fd000 tcpip tcpip.sys Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`029d3000 fffff880`029e5000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`042e9000 fffff880`042f6000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`042cb000 fffff880`042e9000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`042a9000 fffff880`042bd000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004a0000 fffff960`004aa000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`04951000 fffff880`04977000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`051f3000 fffff880`051fb000 UBHelper UBHelper.sys Mon Apr 27 04:48:19 2009 (49F57153)
fffff880`0595e000 fffff880`05970000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0587c000 fffff880`05899000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0663d000 fffff880`0663ef00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`053eb000 fffff880`053fc000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05970000 fffff880`059ca000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`05200000 fffff880`05256000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05899000 fffff880`058b4000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`053de000 fffff880`053eb000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00f61000 fffff880`00f6e000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`03fe8000 fffff880`03ff6000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01095000 fffff880`010ba000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f83000 fffff880`00f98000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f98000 fffff880`00ff4000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`015a7000 fffff880`015f3000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0428e000 fffff880`042a9000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0148a000 fffff880`0149a000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e11000 fffff880`00eb5000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb5000 fffff880`00ec4000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04245000 fffff880`0424e000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003bf000 win32k win32k.sys unavailable (00000000)
fffff880`04800000 fffff880`04809000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f1b000 fffff880`00f24000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02304000 fffff880`02325000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`068bf000 fffff880`068f0000 WUDFRd WUDFRd.sys Mon Jul 13 20:06:06 2009 (4A5BCBEE)
Unloaded modules:
fffff880`069a6000 fffff880`069c6000 ENG64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`04014000 fffff880`041c1000 EX64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`094b0000 fffff880`095cc000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`095cc000 fffff880`095df000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`094d0000 fffff880`095ec000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`095ec000 fffff880`095ff000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09258000 fffff880`09374000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09374000 fffff880`09387000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`06986000 fffff880`069a6000 ENG64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`04014000 fffff880`041c1000 EX64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09278000 fffff880`09394000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09394000 fffff880`093a7000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09011000 fffff880`0912d000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0912d000 fffff880`09140000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`090cc000 fffff880`091e8000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`091e8000 fffff880`091fb000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01230000 fffff880`01250000 ENG64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`04017000 fffff880`041c4000 EX64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0904f000 fffff880`0916b000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0916b000 fffff880`0917e000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08cc4000 fffff880`08de0000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08de0000 fffff880`08df3000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08c52000 fffff880`08d6e000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08d6e000 fffff880`08d81000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08c0e000 fffff880`08d2a000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08d2a000 fffff880`08d3d000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`068f0000 fffff880`06961000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01652000 fffff880`01660000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`03e88000 fffff880`03fa4000 dump_iaStor.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`03fa4000 fffff880`03fb7000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
I'm particularly interested in this one. I've seen Norton cause a surprising amount of BSOD's for just an antivirus. Please uninstall it using the Norton Removal Tool: Download and run the Norton Removal Tool
Remove any Norton products and see if BSOD's persist.
EDIT: If that fails, we'll look into this taken from your system event log:
Code:
Event[1401]:
Log Name: System
Source: iaStor
Date: 2010-02-21T13:13:26.310
Event ID: 9
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Biznak-PC
Description:
The device, \Device\Ide\iaStor0, did not respond within the timeout period.