BSOD: ataport.sys was running fine

reo

New member
Member
Local time
12:07 AM
Messages
47
BSOD here. File attached.

Left the house yesterday and the computer was fine. Came back and it was BSODing and re-booting showing ataport.sys in the bsod. I've tried a system restore, no luck.

Boots in safe mode. Checked drivers, no apparent conflict, but I think if may be a driver problem as it crashes at the same time during boot up.

computer is a laptop. Originally with XP and then I installed Win 7.

Ran diagnostics tool built into the BIOS/Boot option, found no problems.

This is a 2nd computer without many programs installed. Thinking it may easier to just re-install the OS.

Definitely stumped.....

Thanks,

Reid
 

My Computer My Computer

OS
vista x64
Love these! They are so easy.

You are infected with a rootkit

Run the rootkit scan - How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)?

BSOD BUGCHECK SUMMARY
Code:
[font=lucida console]
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:54:06.480 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:39.992
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:44:22.994 2012 (UTC - 5:00)
System Uptime: 0 days 0:09:20.631
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:34:04.094 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:45.731
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:24:13.724 2012 (UTC - 5:00)
System Uptime: 0 days 0:09:01.362
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:14:09.391 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:01.028
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:05:11.100 2012 (UTC - 5:00)
System Uptime: 0 days 0:03:35.737
Probably caused by : ntkrpamp.exe ( nt!KiSignalNotificationObject+13 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xA_nt!KiSignalNotificationObject+13
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 09:00:33.319 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:17.831
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:52:13.235 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:09.872
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:44:05.197 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:05.834
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:35:56.186 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:11.823
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:27:40.955 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:12.592
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:19:30.952 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:02.464
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:10:25.669 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:29.307
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 08:01:52.876 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:08.513
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 07:53:46.304 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:10.941
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 07:45:31.902 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:09.540
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 07:37:20.042 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:09.679
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 07:29:13.215 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:26.853
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 07:20:42.574 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:36.211
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 07:12:05.843 2012 (UTC - 5:00)
System Uptime: 0 days 0:34:20.480
Probably caused by : ntkrpamp.exe ( nt!KiSignalNotificationObject+13 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xA_nt!KiSignalNotificationObject+13
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 06:36:46.900 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:48.413
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 06:26:54.263 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:52.900
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 06:16:57.016 2012 (UTC - 5:00)
System Uptime: 0 days 0:08:49.653
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 06:07:08.076 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:30.713
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 05:58:33.895 2012 (UTC - 5:00)
System Uptime: 0 days 0:07:09.532
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 05:50:22.430 2012 (UTC - 5:00)
System Uptime: 0 days 0:05:38.067
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 05:43:46.321 2012 (UTC - 5:00)
System Uptime: 0 days 0:06:48.958
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 05:35:54.080 2012 (UTC - 5:00)
System Uptime: 0 days 0:05:05.717
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Debug session time: Thu Feb  9 00:35:02.034 2012 (UTC - 5:00)
System Uptime: 0 days 0:03:24.671
*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys
Probably caused by : ataport.SYS ( ataport!IdePortDispatchDeviceControl+b )
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID:  0x8E_ataport!IdePortDispatchDeviceControl+b
BiosReleaseDate = 02/02/2008
SystemManufacturer = Dell Inc.
SystemProductName = Latitude D420                   
CPUID:        "Genuine Intel(R) CPU           U2500  @ 1.20GHz"
MaxSpeed:     1200
CurrentSpeed: 1197
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]
 

My Computer My Computer

Computer Manufacturer/Model Number
Self Built
OS
Windows 7 Home Premium 64bit
CPU
Intel Core i5-2500 @ 3.8GHz
Motherboard
MSI P67A-GD65
Memory
G.SKILL Ripjaws Series 8GB (2 x 4GB) DDR3 1600
Graphics Card(s)
NVIDIA GTX 550Ti
Sound Card
On Board
Monitor(s) Displays
ASUS 23"
Hard Drives
OCZ Vertex 3 VTX3-25SAT3-60G
Keyboard
Wireless
Mouse
Wireless
Damn your good!

Questions: How did I get it?

What did you read in the file that told you it was a rootkit?

Thanks,

Reid
 
Last edited:

My Computer My Computer

OS
vista x64
When ataport.sys is blamed along with MpFilter.sys (or another AV driver), which is your AV, it is rootkit. I don't know how you got it but running that scan should clean it up.
 

My Computer My Computer

Computer Manufacturer/Model Number
Self Built
OS
Windows 7 Home Premium 64bit
CPU
Intel Core i5-2500 @ 3.8GHz
Motherboard
MSI P67A-GD65
Memory
G.SKILL Ripjaws Series 8GB (2 x 4GB) DDR3 1600
Graphics Card(s)
NVIDIA GTX 550Ti
Sound Card
On Board
Monitor(s) Displays
ASUS 23"
Hard Drives
OCZ Vertex 3 VTX3-25SAT3-60G
Keyboard
Wireless
Mouse
Wireless
Hmmm...

I'm not out of the woods. My computer isn't crashing, but Firefox browser is being highjacked.

I ran TDSSkiller but it didn't find anything. I'm also running MS Security Essentials.

Looks like MS SE found something.

I'm not in safe mode, so I may have to do so.

Any other suggestions?

Thanks!

Reid
 
Last edited:

My Computer My Computer

OS
vista x64

My Computer My Computer

Computer Manufacturer/Model Number
Self Built
OS
Windows 7 Home Premium 64bit
CPU
Intel Core i5-2500 @ 3.8GHz
Motherboard
MSI P67A-GD65
Memory
G.SKILL Ripjaws Series 8GB (2 x 4GB) DDR3 1600
Graphics Card(s)
NVIDIA GTX 550Ti
Sound Card
On Board
Monitor(s) Displays
ASUS 23"
Hard Drives
OCZ Vertex 3 VTX3-25SAT3-60G
Keyboard
Wireless
Mouse
Wireless
Back
Top