BSOD windows 7 Help

[carolvk]

Hi I am having problems with the blue screen. before this I would have some freezing of my mouse or lagginginmy computer. i was trying to update adobe reader when this happened this time, Dont know if it is a fluke from that or not.
I have a dell inspiron 1545 laptop
with Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
Pentium(R) dual core processor [email protected],2000mhz
mother board Dell Inc. 0G848F serial number .4DX9XJ1.CN7016698S045Q.
memory is DDR 3 gig
The laptop came with windows vista and a upgrade to windows 7
I believe win 7 has been installed since begininng this year
computer will be 2 years old this november

Ps I did system restore 3 to 4 hours ago to aabout 2 weeks ago if that matters.
any help would be greatly appreciated..I am goin to bed now but will check in the am.Thanks so much

 

[zigzag3143]

Hi I am having problems with the blue screen. before this I would have some freezing of my mouse or lagginginmy computer. i was trying to update adobe reader when this happened this time, Dont know if it is a fluke from that or not.
I have a dell inspiron 1545 laptop
with Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
Pentium(R) dual core processor [email protected],2000mhz
mother board Dell Inc. 0G848F serial number .4DX9XJ1.CN7016698S045Q.
memory is DDR 3 gig
The laptop came with windows vista and a upgrade to windows 7
I believe win 7 has been installed since begininng this year
computer will be 2 years old this november

Ps I did system restore 3 to 4 hours ago to aabout 2 weeks ago if that matters.
any help would be greatly appreciated..I am goin to bed now but will check in the am.Thanks so much

No DMP files included in upload. Try this method

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.


To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

 

[seth500]

Hi carol and welcome unfortunately your zip didn't contain all necessary files please read this:

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.


To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

Thank you

Seth

 

[carolvk]

Was it suppose to be in one of the things you asked to do before posting and just didnt show up?

 

[seth500]

Was it suppose to be in one of the things you asked to do before posting and just didnt show up?

Correct so check those settings and places we asked of you and well go from there... thanks

 

[carolvk]

This folder says it is empty also. Is it because I did a system restore back to 2 weeks ago? when i looked in the event viewer filer it showed i had 14,000 things.. geesh maybe i need to put it back to yesterday? or if you know another way ?

 

[seth500]

This folder says it is empty also. Is it because I did a system restore back to 2 weeks ago? when i looked in the event viewer filer it showed i had 14,000 things.. geesh maybe i need to put it back to yesterday? or if you know another way ?

Hi Carol,

Don't do that, I have been looking through your event logs and come up with many error instances not liking the Apple software that is installed so please uninstall Itunes and see if the problem persists.

Event[10618]:
Log Name: Application
Source: Bonjour Service
Date: 2011-02-28T00:17:53.000
Event ID: 100
Task: N/A
Level: Error
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Carol-PC
Description:
Task Scheduling Error: m->NextScheduledEvent 3135

Also noticing some HP Software is also causing errors as well please uninstall/reinstall the software/drivers for your printer.

Problem signature:
P1: hpqddsvc
P2: hpqddsvc.dll
P3: 100.0.190.0
P4: 20
P5: 2
P6:
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_hpqddsvc_a6f121c83dded3627eb065cae3e3fc6dd735017_0cff48d2

Analysis symbol:
Rechecking for solution: 0
Report Id: a74c159f-dd90-11e0-8ee6-002564554864
Report Status: 0

Then I also see warnings with McAfee is the systems logs that can be potentially harmful.

Event[40]:
Log Name: System
Source: mfehidk
Date: 2011-09-12T19:19:32.500
Event ID: 516
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Carol-PC
Description:
Process **\mcupdmgr.exe pid (1916) contains signed but untrusted code, but was allowed to perform a privileged operation with a McAfee driver.

Another system error with the computer browser:

Event[851]:
Log Name: System
Source: Service Control Manager
Date: 2011-09-12T16:48:32.025
Event ID: 7001
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Carol-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

 

[carolvk]

Ok Seth i removed the itunes and my printer software and everything involved with it. need to find disk to reinstall that
what should I do about these two things you mentioned?
Then I also see warnings with McAfee is the systems logs that can be potentially harmful.

Event[40]:
Log Name: System
Source: mfehidk
Date: 2011-09-12T19:19:32.500
Event ID: 516
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Carol-PC
Description:
Process **\mcupdmgr.exe pid (1916) contains signed but untrusted code, but was allowed to perform a privileged operation with a McAfee driver.

Another system error with the computer browser:

Event[851]:
Log Name: System
Source: Service Control Manager
Date: 2011-09-12T16:48:32.025
Event ID: 7001
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Carol-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

I havent had the blue screen since i did system restore whether thats good or bad for you to help diagnose or not i just no that i have had several problems before. And apprecitae all the help you can give me. One thing that I know happenes is when adobe i believe flash player wants to up date it crashes Ive tried numerous times when the box appears on my screen but i give up updating that

 

[seth500]

Well that a good thing if system restore fixed it and if flash player crashes the system then it's a good idea like you said just to forget updating it it could very well be buggy. Or maybe just go to the website and download it yourself and uninstall the version you have and then install it. If it's not giving you issues though my opinion is don't fix if it's not broken.

 

[carolvk]

Thanks so do nothing about the mcaffe and browser things that looked bad?

 

[carolvk]

heres new files to look at seth

SEth, Ok computer did it again.. It was in sleep mode normally I open top and press button and screen comes on. It wouldnt do nothing I had to push button down to restart and bsod .

 

[carolvk]

or anyone

anyone care to look?

 

[carolvk]

Please can some one look it keeps doing bsod

 

[carolvk]

not fixed but started new thread

 

[seth500]

Hi Carol let me look at the other thread as well so we don't repeat what we've already tried. If you would uninstall adaware and install MSE for the remainder of the testing that would help. To uninstall lavasoft product completely and correctly please follow this thread advice: http://www.lavasoftsupport.com/index.php?showtopic=28
Then after you have done that please install MSE immediately using this link: http://mse.dlservice.microsoft.com/...4-AF60-E44F6DC28BD8/enus/amd64/mseinstall.exe

The dump file isn't really pointing to anything specific so after you have done the above my suggestion is to enable Driver Verifier following this guide and letting your computer bsod a couple more times while it's enabled. Guide= http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html after the computer bsods at least twice disable driver verifier by opening the program again and deleting the settings either in normal mode or safe mode if you can't in normal mode.

One thing of advice is the farther we get away from software and stuff that hasn't been Microsoft basically approved it tends to start causing more issues than we would like, that why I'm having you uninstall the lavasoft software for now anyway to see if the problem is alleviated, usually when we have a dump file that is pointing to the ntkrnlmp.exe it's usually corrupt and is caused mostly by malware program vendors for the most part and then old drivers and bios and possible virus on the computer. So we have to do a little testing in each area to narrow the playing field sort of speak.
So please bear that in mind as we try to get this fixed for you.

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Downloads\carolvk\Windows_NT6_BSOD_jcgriff2\092311-20841-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*F:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`03249000 PsLoadedModuleList = 0xfffff800`0348e670
Debug session time: Fri Sep 23 08:15:39.264 2011 (UTC - 6:00)
System Uptime: 3 days 6:44:12.059
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c000001d, fffff88000000000, fffff88007e72150, 0}

Probably caused by : ntkrnlmp.exe ( nt!IoCancelIrp+60 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c000001d, Exception code that caused the bugcheck
Arg2: fffff88000000000, Address of the instruction which caused the bugcheck
Arg3: fffff88007e72150, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.

FAULTING_IP: 
+13
fffff880`00000000 ff              ???

CONTEXT:  fffff88007e72150 -- (.cxr 0xfffff88007e72150)
rax=000000000000000a rbx=fffffa80081a1900 rcx=fffffa8006611560
rdx=fffffa80081a1900 rsi=fffffa8006b5c001 rdi=fffff88000000000
rip=fffff88000000000 rsp=fffff88007e72b38 rbp=fffff88007e72c60
 r8=fffff8a0021fd000  r9=0000000000000000 r10=fffffa8002453c90
r11=0000000000100080 r12=00000000052bf400 r13=0000000000000001
r14=0000000000000000 r15=0000000000000001
iopl=0         nv up ei ng nz ac pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010293
fffff880`00000000 ff              ???
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800032726f0 to fffff88000000000

STACK_TEXT:  
fffff880`07e72b38 fffff800`032726f0 : fffffa80`02453c90 fffffa80`081a1900 fffff880`07e72c60 fffff880`07e72bf0 : 0xfffff880`00000000
fffff880`07e72b40 fffff800`036daac6 : fffff880`07e72b01 fffffa80`081a1920 fffffa80`06b5c070 fffff880`07e72bf8 : nt!IoCancelIrp+0x60
fffff880`07e72b80 fffff800`032c4ed3 : fffffa80`07e0b060 000007fe`f6e836c0 fffffa80`06b5c070 fffffa80`06af1d10 : nt!NtCancelIoFile+0xd6
fffff880`07e72be0 00000000`776a18ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`052bf3d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776a18ea


FOLLOWUP_IP: 
nt!IoCancelIrp+60
fffff800`032726f0 450f20c3        mov     r11,cr8

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!IoCancelIrp+60

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff88007e72150 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!IoCancelIrp+60

BUCKET_ID:  X64_0x3B_nt!IoCancelIrp+60

Followup: MachineOwner
---------

1: kd> lmnsmt
start             end                 module name
fffff880`03bb3000 fffff880`03bde000   000      000.fcl      Fri Sep 26 07:11:22 2008 (48DCDF7A)
fffff880`00ed4000 fffff880`00f2b000   ACPI     ACPI.sys     Sat Nov 20 02:19:16 2010 (4CE79294)
fffff880`03e95000 fffff880`03f1e000   afd      afd.sys      Sun Apr 24 20:33:58 2011 (4DB4DD96)
fffff880`045e4000 fffff880`045fa000   AgileVpn AgileVpn.sys Mon Jul 13 18:10:24 2009 (4A5BCCF0)
fffff880`0118f000 fffff880`0119a000   amdxata  amdxata.sys  Fri Mar 19 10:18:18 2010 (4BA3A3CA)
fffff880`04200000 fffff880`0424f000   Apfiltr  Apfiltr.sys  Wed Apr 14 22:40:07 2010 (4BC698A7)
fffff880`08965000 fffff880`08970000   asyncmac asyncmac.sys Mon Jul 13 18:10:13 2009 (4A5BCCE5)
fffff960`00940000 fffff960`009a1000   ATMFD    ATMFD.DLL    Sat Feb 19 02:00:32 2011 (4D5F86B0)
fffff880`00fb1000 fffff880`00fbd000   BATTC    BATTC.SYS    Mon Jul 13 17:31:01 2009 (4A5BC3B5)
fffff880`04286000 fffff880`0452e000   bcmwl664 bcmwl664.sys Tue Jul 07 18:45:04 2009 (4A53EC10)
fffff880`02f6d000 fffff880`02f74000   Beep     Beep.SYS     Mon Jul 13 18:00:13 2009 (4A5BCA8D)
fffff880`03fc6000 fffff880`03fd7000   blbdrive blbdrive.sys Mon Jul 13 17:35:59 2009 (4A5BC4DF)
fffff880`02800000 fffff880`0281e000   bowser   bowser.sys   Tue Feb 22 21:55:04 2011 (4D649328)
fffff960`00780000 fffff960`007a7000   cdd      cdd.dll      unavailable (00000000)
fffff880`02f3a000 fffff880`02f64000   cdrom    cdrom.sys    Sat Nov 20 02:19:20 2010 (4CE79298)
fffff880`06ddf000 fffff880`06ded280   cfwids   cfwids.sys   Thu Aug 04 12:46:11 2011 (4E3AE8F3)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 06:12:36 2010 (4CE7C944)
fffff880`01850000 fffff880`01880000   CLASSPNP CLASSPNP.SYS Sat Nov 20 02:19:23 2010 (4CE7929B)
fffff880`00d25000 fffff880`00d83000   CLFS     CLFS.SYS     Mon Jul 13 17:19:57 2009 (4A5BC11D)
fffff880`0426d000 fffff880`04271500   CmBatt   CmBatt.sys   Mon Jul 13 17:31:03 2009 (4A5BC3B7)
fffff880`01200000 fffff880`01272000   cng      cng.sys      Sat Nov 20 03:08:45 2010 (4CE79E2D)
fffff880`00fa8000 fffff880`00fb1000   compbatt compbatt.sys Mon Jul 13 17:31:02 2009 (4A5BC3B6)
fffff880`045d4000 fffff880`045e4000   CompositeBus CompositeBus.sys Sat Nov 20 03:33:17 2010 (4CE7A3ED)
fffff880`0580c000 fffff880`0581a000   crashdmp crashdmp.sys Mon Jul 13 18:01:01 2009 (4A5BCABD)
fffff880`059ce000 fffff880`059f82a0   CtClsFlt CtClsFlt.sys Sun Jun 14 23:06:41 2009 (4A35D6E1)
fffff880`03e77000 fffff880`03e95000   dfsc     dfsc.sys     Sat Nov 20 02:26:31 2010 (4CE79447)
fffff880`03e68000 fffff880`03e77000   discache discache.sys Mon Jul 13 17:37:18 2009 (4A5BC52E)
fffff880`0183a000 fffff880`01850000   disk     disk.sys     Mon Jul 13 17:19:57 2009 (4A5BC11D)
fffff880`01670000 fffff880`01692000   drmk     drmk.sys     Mon Jul 13 19:01:25 2009 (4A5BD8E5)
fffff880`0581a000 fffff880`0582d000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 17:21:51 2009 (4A5BC18F)
fffff880`02e0d000 fffff880`02f1d000   dump_iaStor dump_iaStor.sys Sun Jun 15 06:57:38 2008 (485511C2)
fffff880`05800000 fffff880`0580c000   Dxapi    Dxapi.sys    Mon Jul 13 17:38:28 2009 (4A5BC574)
fffff880`03c2f000 fffff880`03d23000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 02:50:50 2010 (4CE799FA)
fffff880`03d23000 fffff880`03d69000   dxgmms1  dxgmms1.sys  Sat Nov 20 02:49:53 2010 (4CE799C1)
fffff880`06c00000 fffff880`06c36000   fastfat  fastfat.SYS  Mon Jul 13 17:23:28 2009 (4A5BC1F0)
fffff880`011e6000 fffff880`011fa000   fileinfo fileinfo.sys Mon Jul 13 17:34:25 2009 (4A5BC481)
fffff880`0119a000 fffff880`011e6000   fltmgr   fltmgr.sys   Sat Nov 20 02:19:24 2010 (4CE7929C)
fffff880`0142c000 fffff880`01436000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`01800000 fffff880`0183a000   fvevol   fvevol.sys   Sat Nov 20 02:24:06 2010 (4CE793B6)
fffff880`01ab4000 fffff880`01afe000   fwpkclnt fwpkclnt.sys Sat Nov 20 02:21:37 2010 (4CE79321)
fffff800`03200000 fffff800`03249000   hal      hal.dll      Sat Nov 20 06:00:25 2010 (4CE7C669)
fffff880`03c00000 fffff880`03c24000   HDAudBus HDAudBus.sys Sat Nov 20 03:43:42 2010 (4CE7A65E)
fffff880`0292c000 fffff880`029f5000   HTTP     HTTP.sys     Sat Nov 20 02:24:30 2010 (4CE793CE)
fffff880`01be2000 fffff880`01beb000   hwpolicy hwpolicy.sys Sat Nov 20 02:18:54 2010 (4CE7927E)
fffff880`045a0000 fffff880`045be000   i8042prt i8042prt.sys Mon Jul 13 17:19:57 2009 (4A5BC11D)
fffff880`0107f000 fffff880`0118f000   iaStor   iaStor.sys   Sun Jun 15 06:57:38 2008 (485511C2)
fffff880`04aea000 fffff880`0550ce20   igdkmd64 igdkmd64.sys Fri Feb 11 12:16:32 2011 (4D558B10)
fffff880`045be000 fffff880`045d4000   intelppm intelppm.sys Mon Jul 13 17:19:25 2009 (4A5BC0FD)
fffff880`0425e000 fffff880`0426d000   kbdclass kbdclass.sys Mon Jul 13 17:19:50 2009 (4A5BC116)
fffff800`00b99000 fffff800`00ba3000   kdcom    kdcom.dll    Sat Feb 05 09:52:49 2011 (4D4D8061)
fffff880`08882000 fffff880`08889000   KernExplorer64 KernExplorer64.sys Thu Feb 03 07:28:26 2011 (4D4ABB8A)
fffff880`055b6000 fffff880`055f9000   ks       ks.sys       Sat Nov 20 03:33:23 2010 (4CE7A3F3)
fffff880`01400000 fffff880`0141b000   ksecdd   ksecdd.sys   Sat Nov 20 02:21:15 2010 (4CE7930B)
fffff880`01600000 fffff880`0162b000   ksecpkg  ksecpkg.sys  Sat Nov 20 03:10:34 2010 (4CE79E9A)
fffff880`0427b000 fffff880`04280200   ksthunk  ksthunk.sys  Mon Jul 13 18:00:19 2009 (4A5BCA93)
fffff880`01327000 fffff880`0133c000   Lbd      Lbd.sys      Thu Feb 03 07:23:53 2011 (4D4ABA79)
fffff880`05871000 fffff880`05886000   lltdio   lltdio.sys   Mon Jul 13 18:08:50 2009 (4A5BCC92)
fffff880`0582d000 fffff880`05850000   luafv    luafv.sys    Mon Jul 13 17:26:13 2009 (4A5BC295)
fffff880`00cc2000 fffff880`00d11000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 06:03:51 2010 (4CE7C737)
fffff880`08970000 fffff880`08994d80   mfeapfk  mfeapfk.sys  Thu Aug 04 12:42:18 2011 (4E3AE80A)
fffff880`01000000 fffff880`01035e00   mfeavfk  mfeavfk.sys  Thu Aug 04 12:42:44 2011 (4E3AE824)
fffff880`058b2000 fffff880`05925380   mfefirek mfefirek.sys Thu Aug 04 12:45:22 2011 (4E3AE8C2)
fffff880`0128c000 fffff880`01326600   mfehidk  mfehidk.sys  Thu Aug 04 12:41:31 2011 (4E3AE7DB)
fffff880`03f4d000 fffff880`03f5db80   mfenlfk  mfenlfk.sys  Thu Aug 04 12:42:02 2011 (4E3AE7FA)
fffff880`01afe000 fffff880`01b41380   mfewfpk  mfewfpk.sys  Thu Aug 04 12:41:46 2011 (4E3AE7EA)
fffff880`0424f000 fffff880`0425e000   mouclass mouclass.sys Mon Jul 13 17:19:50 2009 (4A5BC116)
fffff880`00fbd000 fffff880`00fd7000   mountmgr mountmgr.sys Sat Nov 20 02:19:21 2010 (4CE79299)
fffff880`0281e000 fffff880`02836000   mpsdrv   mpsdrv.sys   Mon Jul 13 18:08:25 2009 (4A5BCC79)
fffff880`02836000 fffff880`02863000   mrxsmb   mrxsmb.sys   Tue Apr 26 20:40:38 2011 (4DB78226)
fffff880`03a4d000 fffff880`03a9b000   mrxsmb10 mrxsmb10.sys Fri Jul 08 20:46:28 2011 (4E17C104)
fffff880`03a9b000 fffff880`03abf000   mrxsmb20 mrxsmb20.sys Tue Apr 26 20:39:37 2011 (4DB781E9)
fffff880`02fe2000 fffff880`02fed000   Msfs     Msfs.SYS     Mon Jul 13 17:19:47 2009 (4A5BC113)
fffff880`00f34000 fffff880`00f3e000   msisadrv msisadrv.sys Mon Jul 13 17:19:26 2009 (4A5BC0FE)
fffff880`01348000 fffff880`013a6000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`03e5d000 fffff880`03e68000   mssmbios mssmbios.sys Mon Jul 13 17:31:10 2009 (4A5BC3BE)
fffff880`01bd0000 fffff880`01be2000   mup      mup.sys      Mon Jul 13 17:23:45 2009 (4A5BC201)
fffff880`01692000 fffff880`01785000   ndis     ndis.sys     Sat Nov 20 02:23:30 2010 (4CE79392)
fffff880`03ddd000 fffff880`03de9000   ndistapi ndistapi.sys Mon Jul 13 18:10:00 2009 (4A5BCCD8)
fffff880`02901000 fffff880`02914000   ndisuio  ndisuio.sys  Sat Nov 20 03:50:08 2010 (4CE7A7E0)
fffff880`05531000 fffff880`05560000   ndiswan  ndiswan.sys  Sat Nov 20 03:52:32 2010 (4CE7A870)
fffff880`04a5a000 fffff880`04a6f000   NDProxy  NDProxy.SYS  Sat Nov 20 03:52:20 2010 (4CE7A864)
fffff880`03f74000 fffff880`03f83000   netbios  netbios.sys  Mon Jul 13 18:09:26 2009 (4A5BCCB6)
fffff880`0162b000 fffff880`01670000   netbt    netbt.sys    Sat Nov 20 02:23:18 2010 (4CE79386)
fffff880`01785000 fffff880`017e5000   NETIO    NETIO.SYS    Sat Nov 20 02:23:13 2010 (4CE79381)
fffff880`02fed000 fffff880`02ffe000   Npfs     Npfs.SYS     Mon Jul 13 17:19:48 2009 (4A5BC114)
fffff880`03e51000 fffff880`03e5d000   nsiproxy nsiproxy.sys Mon Jul 13 17:21:02 2009 (4A5BC15E)
fffff800`03249000 fffff800`03832000   nt       ntkrnlmp.exe Wed Jun 22 20:53:23 2011 (4E02AAA3)
fffff880`0145a000 fffff880`015fd000   Ntfs     Ntfs.sys     Thu Mar 10 20:39:39 2011 (4D79997B)
fffff880`02f64000 fffff880`02f6d000   Null     Null.SYS     unavailable (00000000)
fffff880`028ae000 fffff880`02901000   nwifi    nwifi.sys    Mon Jul 13 18:07:23 2009 (4A5BCC3B)
fffff880`059a6000 fffff880`059cd060   OA009Ufd OA009Ufd.sys Fri Mar 06 00:33:57 2009 (49B0D1E5)
fffff880`0595a000 fffff880`059a6000   OA009Vid OA009Vid.sys Thu Mar 19 23:00:05 2009 (49C322D5)
fffff880`03f27000 fffff880`03f4d000   pacer    pacer.sys    Sat Nov 20 03:52:18 2010 (4CE7A862)
fffff880`00f7e000 fffff880`00f93000   partmgr  partmgr.sys  Sat Nov 20 02:20:00 2010 (4CE792C0)
fffff880`00f3e000 fffff880`00f71000   pci      pci.sys      Sat Nov 20 02:19:11 2010 (4CE7928F)
fffff880`0141b000 fffff880`0142c000   pcw      pcw.sys      Mon Jul 13 17:19:27 2009 (4A5BC0FF)
fffff880`03abf000 fffff880`03b65000   peauth   peauth.sys   Mon Jul 13 19:01:19 2009 (4A5BD8DF)
fffff880`013a6000 fffff880`013e3000   portcls  portcls.sys  Mon Jul 13 18:06:27 2009 (4A5BCC03)
fffff880`00d11000 fffff880`00d25000   PSHED    PSHED.dll    Mon Jul 13 19:32:23 2009 (4A5BE027)
fffff880`0133c000 fffff880`01347700   PxHlpa64 PxHlpa64.sys Wed Oct 17 12:25:02 2007 (4716537E)
fffff880`0550d000 fffff880`05531000   rasl2tp  rasl2tp.sys  Sat Nov 20 03:52:34 2010 (4CE7A872)
fffff880`05560000 fffff880`0557b000   raspppoe raspppoe.sys Mon Jul 13 18:10:17 2009 (4A5BCCE9)
fffff880`0557b000 fffff880`0559c000   raspptp  raspptp.sys  Sat Nov 20 03:52:31 2010 (4CE7A86F)
fffff880`0559c000 fffff880`055b6000   rassstp  rassstp.sys  Mon Jul 13 18:10:25 2009 (4A5BCCF1)
fffff880`03e00000 fffff880`03e51000   rdbss    rdbss.sys    Sat Nov 20 02:27:51 2010 (4CE79497)
fffff880`02fc7000 fffff880`02fd0000   RDPCDD   RDPCDD.sys   Mon Jul 13 18:16:34 2009 (4A5BCE62)
fffff880`02fd0000 fffff880`02fd9000   rdpencdd rdpencdd.sys Mon Jul 13 18:16:34 2009 (4A5BCE62)
fffff880`02fd9000 fffff880`02fe2000   rdprefmp rdprefmp.sys Mon Jul 13 18:16:35 2009 (4A5BCE63)
fffff880`01b96000 fffff880`01bd0000   rdyboost rdyboost.sys Sat Nov 20 02:43:10 2010 (4CE7982E)
fffff880`02914000 fffff880`0292c000   rspndr   rspndr.sys   Mon Jul 13 18:08:50 2009 (4A5BCC92)
fffff880`05926000 fffff880`0593b000   RTSTOR64 RTSTOR64.SYS Mon Feb 23 01:18:57 2009 (49A25BF1)
fffff880`03fbc000 fffff880`03fc6000   SASDIFSV64 SASDIFSV64.SYS Mon Feb 08 17:11:52 2010 (4B70A848)
fffff880`03fb2000 fffff880`03fbc000   SASKUTIL64 SASKUTIL64.SYS Tue Feb 09 15:27:34 2010 (4B71E156)
fffff880`02f74000 fffff880`02f84000   SBREdrv  SBREdrv.sys  Fri Apr 29 09:51:13 2011 (4DBADE71)
fffff880`03b65000 fffff880`03b70000   secdrv   secdrv.SYS   Wed Sep 13 07:18:38 2006 (4508052E)
fffff880`01b8e000 fffff880`01b96000   spldr    spldr.sys    Mon May 11 10:56:27 2009 (4A0858BB)
fffff880`06d22000 fffff880`06dba000   srv      srv.sys      Thu Apr 28 21:06:06 2011 (4DBA2B1E)
fffff880`06c83000 fffff880`06cec000   srv2     srv2.sys     Thu Apr 28 21:05:46 2011 (4DBA2B0A)
fffff880`03b70000 fffff880`03ba1000   srvnet   srvnet.sys   Thu Apr 28 21:05:35 2011 (4DBA2AFF)
fffff880`04a6f000 fffff880`04aea000   stwrt64  stwrt64.sys  Mon Jun 29 11:52:05 2009 (4A48FF45)
fffff880`045fa000 fffff880`045fb480   swenum   swenum.sys   Mon Jul 13 18:00:18 2009 (4A5BCA92)
fffff880`018b0000 fffff880`01ab4000   tcpip    tcpip.sys    Mon Jun 20 21:33:55 2011 (4E001123)
fffff880`03ba1000 fffff880`03bb3000   tcpipreg tcpipreg.sys Sat Nov 20 03:51:48 2010 (4CE7A844)
fffff880`02e00000 fffff880`02e0d000   TDI      TDI.SYS      Sat Nov 20 02:22:06 2010 (4CE7933E)
fffff880`0188e000 fffff880`018b0000   tdx      tdx.sys      Sat Nov 20 02:21:54 2010 (4CE79332)
fffff880`03f9e000 fffff880`03fb2000   termdd   termdd.sys   Sat Nov 20 04:03:40 2010 (4CE7AB0C)
fffff960`00410000 fffff960`0041a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03fd7000 fffff880`03ffd000   tunnel   tunnel.sys   Sat Nov 20 03:51:50 2010 (4CE7A846)
fffff880`03de9000 fffff880`03dfb000   umbus    umbus.sys    Sat Nov 20 03:44:37 2010 (4CE7A695)
fffff880`0593d000 fffff880`0595a000   usbccgp  usbccgp.sys  Thu Mar 24 21:29:14 2011 (4D8C0C0A)
fffff880`0593b000 fffff880`0593cf00   USBD     USBD.SYS     Thu Mar 24 21:28:59 2011 (4D8C0BFB)
fffff880`03dcc000 fffff880`03ddd000   usbehci  usbehci.sys  Thu Mar 24 21:29:04 2011 (4D8C0C00)
fffff880`04a00000 fffff880`04a5a000   usbhub   usbhub.sys   Thu Mar 24 21:29:25 2011 (4D8C0C15)
fffff880`03d76000 fffff880`03dcc000   USBPORT  USBPORT.SYS  Thu Mar 24 21:29:12 2011 (4D8C0C08)
fffff880`03d69000 fffff880`03d76000   usbuhci  usbuhci.sys  Thu Mar 24 21:29:03 2011 (4D8C0BFF)
fffff880`00f71000 fffff880`00f7e000   vdrvroot vdrvroot.sys Mon Jul 13 18:01:31 2009 (4A5BCADB)
fffff880`02f84000 fffff880`02f92000   vga      vga.sys      Mon Jul 13 17:38:47 2009 (4A5BC587)
fffff880`02f92000 fffff880`02fb7000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 17:38:51 2009 (4A5BC58B)
fffff880`00f93000 fffff880`00fa8000   volmgr   volmgr.sys   Sat Nov 20 02:19:28 2010 (4CE792A0)
fffff880`00d83000 fffff880`00ddf000   volmgrx  volmgrx.sys  Sat Nov 20 02:20:43 2010 (4CE792EB)
fffff880`01b42000 fffff880`01b8e000   volsnap  volsnap.sys  Sat Nov 20 02:20:08 2010 (4CE792C8)
fffff880`0452e000 fffff880`0453b000   vwifibus vwifibus.sys Mon Jul 13 18:07:21 2009 (4A5BCC39)
fffff880`03f5e000 fffff880`03f74000   vwififlt vwififlt.sys Mon Jul 13 18:07:22 2009 (4A5BCC3A)
fffff880`03f83000 fffff880`03f9e000   wanarp   wanarp.sys   Sat Nov 20 03:52:36 2010 (4CE7A874)
fffff880`02fb7000 fffff880`02fc7000   watchdog watchdog.sys Mon Jul 13 17:37:35 2009 (4A5BC53F)
fffff880`00e21000 fffff880`00ec5000   Wdf01000 Wdf01000.sys Mon Jul 13 17:22:07 2009 (4A5BC19F)
fffff880`00ec5000 fffff880`00ed4000   WDFLDR   WDFLDR.SYS   Mon Jul 13 17:19:54 2009 (4A5BC11A)
fffff880`03f1e000 fffff880`03f27000   wfplwf   wfplwf.sys   Mon Jul 13 18:09:26 2009 (4A5BCCB6)
fffff960`000c0000 fffff960`003d3000   win32k   win32k.sys   Fri Jun 10 21:06:57 2011 (4DF2DBD1)
fffff880`04272000 fffff880`0427b000   wmiacpi  wmiacpi.sys  Mon Jul 13 17:31:02 2009 (4A5BC3B6)
fffff880`00f2b000 fffff880`00f34000   WMILIB   WMILIB.SYS   Mon Jul 13 17:19:51 2009 (4A5BC117)
fffff880`05850000 fffff880`05871000   WudfPf   WudfPf.sys   Sat Nov 20 03:42:44 2010 (4CE7A624)
fffff880`089a3000 fffff880`089d4000   WUDFRd   WUDFRd.sys   Sat Nov 20 03:43:32 2010 (4CE7A654)
fffff880`0453b000 fffff880`045a0000   yk62x64  yk62x64.sys  Mon Sep 28 02:19:31 2009 (4AC07193)

Thanks Carol,

Seth

 

[carolvk]

can i do this in safe mode? also when i do safe mode mcafee wont turn on is this right?

 

[seth500]

can i do this in safe mode? also when i do safe mode mcafee wont turn on is this right?

Right it won't start but if it is causing the issue you could start in safe mode and type msconfig in the start>search bar and hit return go to the services tab and click the box that says hide all microsoft services and then turn off all the mcafee services and lavasoft for that matter. Then reboot into normal mode and it won't be running. I don't think the uninstaller will run in safe mode. The computer will run in normal mode if those components are turned off and if they are causing a conflict try and see. I know it's kind of a pain but bear with me..

 

[carolvk]

ok I clicked the hide all didnt see where to shut of mcafee I believe I got it uninstalled now( I dont see it in my programslist) .i deleted lavasoft I am using a differnt puter to talk to u . I have the MSE installed now and I have to go away for a few Ill let it run and see what I get when I get back in a hour. I have the driver verifier running also..

ps I have spybot and superantispyware still on here If that matters plus i think there is still apple software from my itunes and bonjour when i was looking in add and remove programs i noticed those. be back and hopefully you will be still here THANKS

 

[seth500]

OK Carol it could be those programs but we need to rule out the virus software first usually I would see if those program were affecting anything cause it would specifically be pointing to them, but you still could very much be right because I can't tell until whatever is corrupting the dump is removed it won't point to the true cause :/

 

[carolvk]

ok this sucks ok so i had everything taken off and did what u said and i got blue screen and i believe windows restored me to another point . i had the mse installed dont see it any wheres now i need to try to load it but i need to be in safe mode for this to work. I was restarted after the last thing he driver verifier and it blue screened. I dont know if it is enabled now or not.
I dont have mse installed even though the exe is there and I did it. wont go in safe mode I guess ill see if it lets me boot normal
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: c9
BCP1: 000000000000024C
BCP2: FFFFF88005708088
BCP3: FFFFF980058C4CA0
BCP4: 0000000000000103
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

OH Seth here is the blue screen error
IO manager detected a violation by driver thats being verified faulty driver must be debugged and replaced with working versian..
Tech RTSTOR64.Sys
adress FFFFF8805AA3088 base at FFFFF88005AA20000,datastamp 49a25bf1

I cannot start in normal mode. and i have no virus protection cuz i cant get mse installed