New Hardware, Clean install

[Trinitrotoluene]

- x64
- Original installation
- Retail version
- All new hardware, 2 weeks old
- OS is 3 days old, thats when I reinstalled it to get rid of driver BSOD's

The crashes seem quite random, this is one of the first I had on this fresh OS install. I had 2 others, but I got cleaned by ccleaner.
The memory has been tested 16 hours/16passes by memtest, no errors. My first set of ram was corrupted, so I had those changed. I had memory_management BSOD's because of those faulty modules. Haven't seen that specific one yet with the new modules, so that should be O.K! All temperatures are OK.


Gigabyte X58A UD3R FB bios
Intel i7 930
OCZ Platinum 6GB 1333Mhz 7-7-7-20 specs/voltages set as recommended (screenshots first post, last bit of settings in the first reply) by guys from OCZ forum
Samsung Spinpoint F3 HD103SJ, two in RAID0 on which the OS is installed as well
X-Fi Titanium
Radeon 5870

All at default speeds, no overclocking. The only thing I changed were the memory timings and voltages. The BSOD that is attached happened when I was playing Medal of Honor. Yesterday I had a BSOD when the PC was idle in Windows. But as I said, the previous two errors were cleaned.

Thanks in advance, will post any other BSOD I get in the meanwhile as well!

 

[CarlTR6]

Welcome to the forum. Sorry you are having troubles.

Error code 3B, SYSTEM_SERVICE_EXCEPTION. Usual causes: System service, Device driver, graphics driver, ?memory.

Kernel base = 0xfffff800`02c04000 PsLoadedModuleList = 0xfffff800`02e41e50
Debug session time: Wed Oct 20 07:44:29.392 2010 (GMT-4)
System Uptime: 0 days 2:09:28.391
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002da890d, fffff88002d73750, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+53d )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002da890d, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88002d73750, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExAllocatePoolWithTag+53d
fffff800`02da890d 48895808        mov     qword ptr [rax+8],rbx

CONTEXT:  fffff88002d73750 -- (.cxr 0xfffff88002d73750)
rax=0001000100000000 rbx=fffffa8004e78430 rcx=fffff8a0025bcb30
rdx=0000000000000001 rsi=0000000000001000 rdi=0000000000000001
rip=fffff80002da890d rsp=fffff88002d74130 rbp=fffffa8004e78140
 r8=0000000000000001  r9=fffffa8004e78430 r10=fffffa8004e78148
r11=0000000000000001 r12=000000000000001c r13=0000000000000000
r14=fffffa80097cd650 r15=000000006d4d6956
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
nt!ExAllocatePoolWithTag+0x53d:
fffff800`02da890d 48895808        mov     qword ptr [rax+8],rbx ds:002b:00010001`00000008=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  moh.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002da890d

STACK_TEXT:  
fffff880`02d74130 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x53d


FOLLOWUP_IP: 
nt!ExAllocatePoolWithTag+53d
fffff800`02da890d 48895808        mov     qword ptr [rax+8],rbx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExAllocatePoolWithTag+53d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

STACK_COMMAND:  .cxr 0xfffff88002d73750 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+53d

BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+53d

Followup: MachineOwner
---------

7: kd> lmtsmn
start             end                 module name
fffff880`051bd000 fffff880`051fb000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`0422b000 fffff880`042b5000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`047de000 fffff880`047f4000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0447c000 fffff880`044c1000   almnqg94 almnqg94.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`013e4000 fffff880`013ef000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`013b1000 fffff880`013ba000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`013ba000 fffff880`013e4000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04a02000 fffff880`051bd000   atikmdag atikmdag.sys Wed Aug 25 21:47:22 2010 (4C75C7AA)
fffff880`04432000 fffff880`0447c000   atikmpag atikmpag.sys Wed Aug 25 21:20:56 2010 (4C75C178)
fffff880`02e33000 fffff880`02e3a000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04585000 fffff880`04596000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07aee000 fffff880`07b0c000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
fffff880`02e00000 fffff880`02e2a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cb8000 fffff880`00d78000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01600000 fffff880`01630000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c5a000 fffff880`00cb8000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0168a000 fffff880`016fd000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`053ea000 fffff880`053fa000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`075b3000 fffff880`075c1000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`044e4000 fffff880`04567000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`05ac2000 fffff880`05aff000   CT20XUT  CT20XUT.SYS  Wed Jul 07 09:44:15 2010 (4C3484AF)
fffff880`052e2000 fffff880`0538ab80   ctaud2k  ctaud2k.sys  Wed Jul 07 09:42:14 2010 (4C348436)
fffff880`07443000 fffff880`075a7000   CTEXFIFX CTEXFIFX.SYS Wed Jul 07 09:44:03 2010 (4C3484A3)
fffff880`0624a000 fffff880`06266000   CTHWIUT  CTHWIUT.SYS  Wed Jul 07 09:44:19 2010 (4C3484B3)
fffff880`05243000 fffff880`05274000   ctoss2k  ctoss2k.sys  Wed Jul 07 09:38:24 2010 (4C348350)
fffff880`05274000 fffff880`0527c000   ctprxy2k ctprxy2k.sys Wed Jul 07 09:42:17 2010 (4C348439)
fffff880`05a8a000 fffff880`05ac2000   ctsfm2k  ctsfm2k.sys  Wed Jul 07 09:38:10 2010 (4C348342)
fffff880`04567000 fffff880`04585000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`043cf000 fffff880`043de000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`017d8000 fffff880`017ee000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`053c8000 fffff880`053ea000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`075c1000 fffff880`075d4000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02ec8000 fffff880`02fe6000   dump_iaStorV dump_iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`075a7000 fffff880`075b3000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`046ea000 fffff880`047de000   dxgkrnl  dxgkrnl.sys  Mon Jul 13 19:38:56 2009 (4A5BC590)
fffff880`04600000 fffff880`04646000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02a14000 fffff880`02aeb000   eamonm   eamonm.sys   Wed Jul 14 04:13:43 2010 (4C3D71B7)
fffff880`02e3a000 fffff880`02e5f000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`06200000 fffff880`0624a000   emupia2k emupia2k.sys Wed Jul 07 09:38:03 2010 (4C34833B)
fffff880`07bd0000 fffff880`07bf1000   epfwwfpr epfwwfpr.sys Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`0124c000 fffff880`01260000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01200000 fffff880`0124c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0170e000 fffff880`01718000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0179e000 fffff880`017d8000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01800000 fffff880`0184a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`06271000 fffff880`063fe000   ha20x22k ha20x22k.sys Wed Jul 07 09:41:25 2010 (4C348405)
fffff800`031e1000 fffff800`0322a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04646000 fffff880`0466a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05b14000 fffff880`05b70000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`02b43000 fffff880`02b5c000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`02b5c000 fffff880`02b64080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`02b35000 fffff880`02b43000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07a26000 fffff880`07aee000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`019f4000 fffff880`019fd000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01293000 fffff880`013b1000   iaStorV  iaStorV.sys  Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`045bc000 fffff880`045d2000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0421a000 fffff880`04229000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02b7a000 fffff880`02b88000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbe000 fffff800`00bc8000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`05200000 fffff880`05243000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`01400000 fffff880`0141a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0199f000 fffff880`019ca000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0527c000 fffff880`05281200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02b65000 fffff880`02b7a000   LHidFilt LHidFilt.Sys Thu Mar 18 04:51:17 2010 (4BA1E985)
fffff880`02b08000 fffff880`02b1d000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02b95000 fffff880`02ba9000   LMouFilt LMouFilt.Sys Thu Mar 18 04:51:24 2010 (4BA1E98C)
fffff880`07400000 fffff880`07423000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c02000 fffff880`00c46000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`075d4000 fffff880`075e2000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0167a000 fffff880`01689000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02b88000 fffff880`02b95000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00f9a000 fffff880`00fb4000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`07b0c000 fffff880`07b24000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07b24000 fffff880`07b50000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`07b50000 fffff880`07b9d000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`07b9d000 fffff880`07bc0000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`02ebd000 fffff880`02ec8000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01057000 fffff880`01061000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00d78000 fffff880`00dd6000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`043c4000 fffff880`043cf000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`019e2000 fffff880`019f4000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0184d000 fffff880`0193f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`047f4000 fffff880`04800000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0141a000 fffff880`01449000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05aff000 fffff880`05b14000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`04329000 fffff880`04338000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`042b5000 fffff880`042fa000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0193f000 fffff880`0199f000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0163e000 fffff880`0164f000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`043b8000 fffff880`043c4000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c04000 fffff800`031e1000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01454000 fffff880`015f7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02e2a000 fffff880`02e33000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01260000 fffff880`01278000   nusb3hub nusb3hub.sys Thu Apr 22 21:34:35 2010 (4BD0F92B)
fffff880`04400000 fffff880`04430000   nusb3xhc nusb3xhc.sys Thu Apr 22 21:34:36 2010 (4BD0F92C)
fffff880`04303000 fffff880`04329000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`0106e000 fffff880`01083000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00efb000 fffff880`00f2e000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01083000 fffff880`0108a000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f8a000 fffff880`00f9a000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`016fd000 fffff880`0170e000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07ee0000 fffff880`07f86000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0538b000 fffff880`053c8000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c46000 fffff880`00c5a000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`045d2000 fffff880`045f6000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`044c1000 fffff880`044dc000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`043de000 fffff880`043ff000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04200000 fffff880`0421a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04367000 fffff880`043b8000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`046de000 fffff880`046e9000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02ea2000 fffff880`02eab000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02eab000 fffff880`02eb4000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02eb4000 fffff880`02ebd000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01764000 fffff880`0179e000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02b1d000 fffff880`02b35000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05282000 fffff880`052d9000   Rt64win7 Rt64win7.sys Mon Mar 22 05:57:14 2010 (4BA73EFA)
fffff880`011ba000 fffff880`011e9000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`07f86000 fffff880`07f91000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`019da000 fffff880`019e2000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0108b000 fffff880`011b1000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`08c84000 fffff880`08d1c000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`07e00000 fffff880`07e69000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`07f91000 fffff880`07fbe000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`07fbe000 fffff880`07fc6000   SSPORT   SSPORT.sys   Thu Aug 11 19:07:32 2005 (42FBDA34)
fffff880`053fa000 fffff880`053fb480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01a03000 fffff880`01c00000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`07fc6000 fffff880`07fd8000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0166d000 fffff880`0167a000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0164f000 fffff880`0166d000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`04353000 fffff880`04367000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005f0000 fffff960`005fa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04596000 fffff880`045bc000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`017ee000 fffff880`01800000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`02aeb000 fffff880`02b08000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04430000 fffff880`04431f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`046cd000 fffff880`046de000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05a30000 fffff880`05a8a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04677000 fffff880`046cd000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0466a000 fffff880`04677000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`01061000 fffff880`0106e000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02e5f000 fffff880`02e6d000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02e6d000 fffff880`02e92000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`019ca000 fffff880`019da000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`011e9000 fffff880`011fe000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f2e000 fffff880`00f8a000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01718000 fffff880`01764000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04338000 fffff880`04353000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02e92000 fffff880`02ea2000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e48000 fffff880`00eec000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eec000 fffff880`00efb000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`042fa000 fffff880`04303000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000c0000 fffff960`003cf000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff880`052d9000 fffff880`052e2000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`011b1000 fffff880`011ba000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`08d1c000 fffff880`08d8d000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07bc0000 fffff880`07bd0000   DgiVecp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01630000 fffff880`0163e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02ecb000 fffff880`02fe9000   dump_iaStorV
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02fe9000 fffff880`02ffc000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

This is a hardware/hardware related problem and the dump indicated corrupted memory.

You have an almost guaranteed BSOD maker on your system.

Please uninstall any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dump, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads. Select delete; do not select reinstall.

Here is an alternative virtualization program that does not user the sptd.sys driver:
Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) Overview

Out of date drivers can cause memory corruption and BSOD's. You have the following driver that needs updating. This driver was hown as an unloaded module in your dump. This means it was involved in the crash. It does not mean that it necessarily caused the crash.

iaStorV.sys Wed Apr 08 12:57:17 2009 - Intel Matrix Storage Manager driver (base)http://downloadcenter.intel.com/Default.aspx

You also have another unloaded driver, DgiVecp.sys. I cannot find the date of this driver; but I do not think it is updated for Win 7. Try to update it or the software it is associated with.

DgiVecp.sys - Windows NT 4.0 IEEE-1284 parallel class driver for ECP, Byte, and Nibble modes or Windows 2k,XP IEEE-1284 parallel class driver for ECP, Byte, and Nibble modes belongs to the software DeviceGuys, Inc. Team MFP for Windows NT, 9x, and or DgiVecp or Samsung Electronics Co., Ltd. VECP for Windows 2000, XP by DeviceGuys, Inc or Samsung Electronics Co., Ltd.

Uninstall Daemon Tools, update the above drivers, reboot and let's see how your system does. If you get another BSOD, upload it and we will go from there. Please let us know how your system is doing.

 

[Trinitrotoluene]

Appreciate that!

For what it's worth, the error I had yesterday was a "page fault in non paged area". I forgot to take a photo of it, or write down the rest. And unfortunately the dump got cleaned. But perhaps it's useful information!

 

[CarlTR6]

Appreciate that!

For what it's worth, the error I had yesterday was a "page fault in non paged area". I forgot to take a photo of it, or write down the rest. And unfortunately the dump got cleaned. But perhaps it's useful information!

That error is usually driver caused.

Just as a suggestion, whatever cleaning program you are using, adjust it so that it does not clean out your dump files or turn it off completely. The dump files are important.

 

[Trinitrotoluene]

Daemon tools has been uninstalled, SPTD deleted as well.

DgiVecp.sys probably belongs to my printer, ML-1640. I have downloaded the driver and installed it again, but I think I already had the latest one.

About the intel storage manager I'm not sure which one to download. Is it this one? I'm kind of spooked by that thing, since iastor.sys had me with a lot of blue screens in the past. So I'd like to check this with you first.

In the meanwhile, after uninstalling daemon tools (before reboot) I had an other bluescreen. So I did the whole procedure again (moved the old folder), I'm assuming both dumps will be registered in it. File is attached.

Thanks Carl, think I've tweaked ccleaner enough that it won't delete the dump files anymore. Glad to hear that BSOD is usually driver related, instead of hardware.

 

[CarlTR6]

I believe that is the right driver. To make sure copy your existing driver to another location such as your documents and save it there in case this new driver does not work. You can always go back to the old one. If the new one works, you can just delete the old one from where you saved it.

Good job on changing the settings in Ccleaner. I had to do that, too.

Both dumps came through.

Error code 3B, SYSTEM_SERVICE_EXCEPTION. Usual causes: System service, Device driver, graphics driver, ?memory.

Error code 4E, PFN_LIST_CORRUPT. Usual causes: Device driver, ?memory

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c5f000 PsLoadedModuleList = 0xfffff800`02e9ce50
Debug session time: Wed Oct 20 08:56:49.004 2010 (GMT-4)
System Uptime: 0 days 1:10:39.003
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 67f12, 0, 67912}

Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000067f12, page frame number
Arg3: 0000000000000000, current page state
Arg4: 0000000000067912, 0

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_99

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  audiodg.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002d5f32c to fffff80002cd0f00

STACK_TEXT:  
fffff880`07f57f88 fffff800`02d5f32c : 00000000`0000004e 00000000`00000099 00000000`00067f12 00000000`00000000 : nt!KeBugCheckEx
fffff880`07f57f90 fffff800`02c86557 : 00000000`00000000 fffff680`00000df0 00000000`00000002 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`07f57fd0 fffff800`02ca5493 : fffffa80`051bfb30 fffff700`00000ff5 0000007f`fffffff8 fffff8a0`001518e0 : nt! ?? ::FNODOBFM::`string'+0x322be
fffff880`07f58060 fffff800`02ca3eee : fffffa80`051bfb30 fffffa80`00000000 fffff8a0`00000a3a fffff880`00000507 : nt!MiDeleteAddressesInWorkingSet+0x307
fffff880`07f58910 fffff800`02fb37af : fffff8a0`0b4ee7a0 fffff880`07f58c20 00000000`00000000 fffffa80`08f65b60 : nt!MmCleanProcessAddressSpace+0x96
fffff880`07f58960 fffff800`02f8db3d : 00000000`c0000374 fffff8a0`08a34d01 000007ff`fffae000 fffffa80`050dfb60 : nt!PspExitThread+0x47f
fffff880`07f58a30 fffff800`02cada43 : 00000000`00000000 fffffa80`051183a0 00000000`00000000 00000000`00000000 : nt!PsExitSpecialApc+0x1d
fffff880`07f58a60 fffff800`02cade80 : 00000000`773d4298 fffff880`07f58ae0 fffff800`02f8e710 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`07f58ae0 fffff800`02cd01f7 : fffffa80`08f65b60 00000000`773d4270 00000000`000000c0 fffffa80`07326af0 : nt!KiInitiateUserApc+0x70
fffff880`07f58c20 00000000`773217ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`01e7f528 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773217ba


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`02d5f32c cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner
---------

7: kd> lmtsmn
start             end                 module name
fffff880`05350000 fffff880`0538e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`011a6000 fffff880`011fd000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03eac000 fffff880`03f36000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05200000 fffff880`05216000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0122a000 fffff880`01235000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`013f6000 fffff880`013ff000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`0122a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04a1c000 fffff880`051d7000   atikmdag atikmdag.sys Wed Aug 25 21:47:22 2010 (4C75C7AA)
fffff880`04096000 fffff880`040e0000   atikmpag atikmpag.sys Wed Aug 25 21:20:56 2010 (4C75C178)
fffff880`02fd1000 fffff880`02fd8000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03e95000 fffff880`03ea6000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`08333000 fffff880`08351000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007d0000 fffff960`007f7000   cdd      cdd.dll      unavailable (00000000)
fffff880`02f9e000 fffff880`02fc8000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d35000 fffff880`00df5000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01b01000 fffff880`01b31000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cd7000 fffff880`00d35000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c73000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`053dc000 fffff880`053ec000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`075cb000 fffff880`075d9000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01b7b000 fffff880`01bfe000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`05b33000 fffff880`05b70000   CT20XUT  CT20XUT.SYS  Wed Jul 07 09:44:15 2010 (4C3484AF)
fffff880`0469a000 fffff880`04742b80   ctaud2k  ctaud2k.sys  Wed Jul 07 09:42:14 2010 (4C348436)
fffff880`0745b000 fffff880`075bf000   CTEXFIFX CTEXFIFX.SYS Wed Jul 07 09:44:03 2010 (4C3484A3)
fffff880`05b17000 fffff880`05b33000   CTHWIUT  CTHWIUT.SYS  Wed Jul 07 09:44:19 2010 (4C3484B3)
fffff880`04600000 fffff880`04631000   ctoss2k  ctoss2k.sys  Wed Jul 07 09:38:24 2010 (4C348350)
fffff880`047e5000 fffff880`047ed000   ctprxy2k ctprxy2k.sys Wed Jul 07 09:42:17 2010 (4C348439)
fffff880`05adf000 fffff880`05b17000   ctsfm2k  ctsfm2k.sys  Wed Jul 07 09:38:10 2010 (4C348342)
fffff880`03e77000 fffff880`03e95000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03e68000 fffff880`03e77000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01aeb000 fffff880`01b01000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04780000 fffff880`047a2000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`075d9000 fffff880`075ec000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02e69000 fffff880`02f87000   dump_iaStorV dump_iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`075bf000 fffff880`075cb000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`040e0000 fffff880`041d4000   dxgkrnl  dxgkrnl.sys  Mon Jul 13 19:38:56 2009 (4A5BC590)
fffff880`04000000 fffff880`04046000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03ae1000 fffff880`03bb8000   eamonm   eamonm.sys   Wed Jul 14 04:13:43 2010 (4C3D71B7)
fffff880`02fd8000 fffff880`02ffd000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`063a8000 fffff880`063f2000   emupia2k emupia2k.sys Wed Jul 07 09:38:03 2010 (4C34833B)
fffff880`08233000 fffff880`08254000   epfwwfpr epfwwfpr.sys Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`01281000 fffff880`01295000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01235000 fffff880`01281000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01411000 fffff880`0141b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01ab1000 fffff880`01aeb000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`0168b000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`0621b000 fffff880`063a8000   ha20x22k ha20x22k.sys Wed Jul 07 09:41:25 2010 (4C348405)
fffff800`02c16000 fffff800`02c5f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`051d7000 fffff880`051fb000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05b70000 fffff880`05bcc000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`03be3000 fffff880`03bfc000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`03a00000 fffff880`03a08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`03bd5000 fffff880`03be3000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0826b000 fffff880`08333000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01aa8000 fffff880`01ab1000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`012d8000 fffff880`013f6000   iaStorV  iaStorV.sys  Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`03fe8000 fffff880`03ffe000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`052d6000 fffff880`052e5000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`086b1000 fffff880`086bf000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb7000 fffff800`00bc1000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`047a2000 fffff880`047e5000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`015dd000 fffff880`015f7000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`047ed000 fffff880`047f2200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03a36000 fffff880`03a4b000   LHidFilt LHidFilt.Sys Thu Mar 18 04:51:17 2010 (4BA1E985)
fffff880`03a09000 fffff880`03a1e000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03a58000 fffff880`03a6c000   LMouFilt LMouFilt.Sys Thu Mar 18 04:51:24 2010 (4BA1E98C)
fffff880`07400000 fffff880`07423000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c7f000 fffff880`00cc3000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`075ec000 fffff880`075fa000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`052e5000 fffff880`052f4000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03a4b000 fffff880`03a58000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00f7f000 fffff880`00f99000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`08351000 fffff880`08369000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`08369000 fffff880`08395000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`08395000 fffff880`083e2000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`08200000 fffff880`08223000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`02e5e000 fffff880`02e69000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`0100a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f99000 fffff880`00ff7000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03e5d000 fffff880`03e68000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01a96000 fffff880`01aa8000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016f8000 fffff880`017ea000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0523a000 fffff880`05246000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05246000 fffff880`05275000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`06200000 fffff880`06215000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03faa000 fffff880`03fb9000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03f36000 fffff880`03f7b000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01b3f000 fffff880`01b50000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e51000 fffff880`03e5d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c5f000 fffff800`0323c000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`0143a000 fffff880`015dd000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02fc8000 fffff880`02fd1000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04046000 fffff880`0405e000   nusb3hub nusb3hub.sys Thu Apr 22 21:34:35 2010 (4BD0F92B)
fffff880`04064000 fffff880`04094000   nusb3xhc nusb3xhc.sys Thu Apr 22 21:34:36 2010 (4BD0F92C)
fffff880`03f84000 fffff880`03faa000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`01017000 fffff880`0102c000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ee0000 fffff880`00f13000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01041000 fffff880`01048000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f6f000 fffff880`00f7f000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01400000 fffff880`01411000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`08463000 fffff880`08509000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04743000 fffff880`04780000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cc3000 fffff880`00cd7000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`05216000 fffff880`0523a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05275000 fffff880`05290000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`05290000 fffff880`052b1000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`052b1000 fffff880`052cb000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e00000 fffff880`03e51000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`052cb000 fffff880`052d6000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02e43000 fffff880`02e4c000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02e4c000 fffff880`02e55000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02e55000 fffff880`02e5e000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01a5c000 fffff880`01a96000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`03a1e000 fffff880`03a36000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`052f9000 fffff880`05350000   Rt64win7 Rt64win7.sys Mon Mar 22 05:57:14 2010 (4BA73EFA)
fffff880`01177000 fffff880`011a6000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`08509000 fffff880`08514000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01a54000 fffff880`01a5c000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01048000 fffff880`0116e000   sptd     sptd.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`08619000 fffff880`086b1000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`05a00000 fffff880`05a69000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`08514000 fffff880`08541000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`08541000 fffff880`08549000   SSPORT   SSPORT.sys   Thu Aug 11 19:07:32 2005 (42FBDA34)
fffff880`052f4000 fffff880`052f5480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`08549000 fffff880`0855b000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01b6e000 fffff880`01b7b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01b50000 fffff880`01b6e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03fd4000 fffff880`03fe8000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00470000 fffff960`0047a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01295000 fffff880`012bb000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`053ec000 fffff880`053fe000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`03bb8000 fffff880`03bd5000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04094000 fffff880`04095f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04689000 fffff880`0469a000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05a85000 fffff880`05adf000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04633000 fffff880`04689000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04a00000 fffff880`04a0d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`0100a000 fffff880`01017000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02e00000 fffff880`02e0e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02e0e000 fffff880`02e33000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`016d5000 fffff880`016e5000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`0102c000 fffff880`01041000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f13000 fffff880`00f6f000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01a08000 fffff880`01a54000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03fb9000 fffff880`03fd4000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02e33000 fffff880`02e43000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e2d000 fffff880`00ed1000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ed1000 fffff880`00ee0000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03f7b000 fffff880`03f84000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003af000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff880`053d3000 fffff880`053dc000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`0116e000 fffff880`01177000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`0538e000 fffff880`053d3000   a78f181v.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03a6c000 fffff880`03a7a000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0855b000 fffff880`085cc000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08223000 fffff880`08233000   DgiVecp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01b31000 fffff880`01b3f000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02e6d000 fffff880`02f8b000   dump_iaStorV
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02f8b000 fffff880`02f9e000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002da890d, fffff88002d73750, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+53d )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002da890d, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88002d73750, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExAllocatePoolWithTag+53d
fffff800`02da890d 48895808        mov     qword ptr [rax+8],rbx

CONTEXT:  fffff88002d73750 -- (.cxr 0xfffff88002d73750)
rax=0001000100000000 rbx=fffffa8004e78430 rcx=fffff8a0025bcb30
rdx=0000000000000001 rsi=0000000000001000 rdi=0000000000000001
rip=fffff80002da890d rsp=fffff88002d74130 rbp=fffffa8004e78140
 r8=0000000000000001  r9=fffffa8004e78430 r10=fffffa8004e78148
r11=0000000000000001 r12=000000000000001c r13=0000000000000000
r14=fffffa80097cd650 r15=000000006d4d6956
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
nt!ExAllocatePoolWithTag+0x53d:
fffff800`02da890d 48895808        mov     qword ptr [rax+8],rbx ds:002b:00010001`00000008=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  moh.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002da890d

STACK_TEXT:  
fffff880`02d74130 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExAllocatePoolWithTag+0x53d


FOLLOWUP_IP: 
nt!ExAllocatePoolWithTag+53d
fffff800`02da890d 48895808        mov     qword ptr [rax+8],rbx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExAllocatePoolWithTag+53d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

STACK_COMMAND:  .cxr 0xfffff88002d73750 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+53d

BUCKET_ID:  X64_0x3B_nt!ExAllocatePoolWithTag+53d

Followup: MachineOwner
---------

Both dumps indicate memory corruption. The 3B dump blames moh.exe for the crash. This is Modem On Hold application belongs to the software Dell Modem-On-Hold or MOH.exe by BVRP Software (www.bvrp.com/ENG). It may or may not be the real cause. The second dump, 4E, blames audiodg.exe. This is a Windows system file and not likely the real cause.

The big thing is I still see sptd.sys in your latest dump. Did you run this uninstall program? If you did did you select uninstall instead of reinstall? DuplexSecure - Downloads.

Again, iaStorV.sys, is shown as an unloaded module as is DgiVecp.sys. This does not necessarily mean either of these caused the crash. It means they were involved in the crash. We do know that iaStorV.sys is outdated. I do not have a date for DgiVecp.sys.

Make sure sptd.sys is gone from your system, reboot, and let's see what you have. At this point, I still think you have a driver issue causing the crashes.

 

[CarlTR6]

In addition to the above, I suggest that you uninstall Eset. Eset has been known to cause crashes on some, not all, Win 7 systems. At this point you are trying to eliminate any possible BSOD cause. Use this uninstall tool: Tool[FONT=&quot]. You can try it again after you get your system running smoothly; but I do not recommend doing so. Download and install Microsoft Security Essentials.

[/FONT]

 

[Trinitrotoluene]

sptd.sys really is gone. I downloaded and ran the DuplexSecure download again, "uninstall" is unselectable. So it is supposed to be gone!

NOD32 has been uninstalled with the tool you gave me, in safemodus. I have installed Microsoft security essentials afterwards.

Intel matrix storage driver has been installed as well. Can't really backup the previous version, I suppose that came with the platform chipset drivers I downloaded from the gigabyte site.

 

[CarlTR6]

Good work! You can navigate to C:\Windows\System32\Drivers and see if sptd.sy is there. If it is, rename it to sptd.old and do a search of your whole hard drive for other instances of sptd.sys. If you find any, rename or delete them.

You are correct, Intel storage driver is a chipset driver.

 

[Trinitrotoluene]

Alright, the one sptd.sys in system 32 has been renamed. No other files with the same name have been found in a full search in my computer (top right text field, right?)

 

[CarlTR6]

Yes, that is right; good work. For some reason, the uninstaller left that instance in the Driver folder - and that is where the system loads it from. Reboot and it should no longer be loaded into your system.

 

[Trinitrotoluene]

No crashes... Yet. I remember the system has been stable for some time before as well, until it went blue again. Lets see what happens, though so far good news of course. Appreciate all the help, Carl

Just want to know, how good is microsoft security essentials compared to nod32?

 

[CarlTR6]

MSE is just as good as NOD 32. It does not have the bells and whistles that NOD 32 has. The one thing that MSE lacks is an email scanner. Once you know your system is running smoothly, you could try Avast. Avast usually works very well with Win 7 and it has a good email scanner. In fact, it can run simultaneous with MSE without problems; it was designed to do so. I run Avast and I have tried many antivirus programs just to see how they did on my system. Avast and MSE work the best of all that I have tried. I am currently running Avast by itself.

You have done really well at following suggestions and reporting back. I thank you. Let us know in a few days how your system is running. Hopefully, the actions you have taken have solved the problem. That sptd.sys is a persistent bugger!

 

[Trinitrotoluene]

Unfortunately my screen just turned blue again. The dump is attached, I'll await your advice.

This time it is memory_management. Though do remember memtest did a 16hour 16pass run on all three modules and they were clean. Which should also rule out the chance of one module being faulty if you ask me. So hopefully it is still something software related!
The crash occurred during idle time in windows. I have spent quite some hours in games in the meanwhile without crashing.

 

[CarlTR6]

Error code 1A, MEMORY_MANAGEMENT. Usual causes: Device driver, memory, kernel

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c1b000 PsLoadedModuleList = 0xfffff800`02e58e50
Debug session time: Sat Oct 23 15:08:28.028 2010 (GMT-4)
System Uptime: 0 days 12:01:40.901
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41287, 0, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+42ba5 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041287, The subtype of the bugcheck.
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41287

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  Xfire.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880095362b0 -- (.trap 0xfffff880095362b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cd34e4 rsp=fffff88009536448 rbp=fffffa8000000000
 r8=0000000000000007  r9=0000000000000600 r10=0000000000000004
r11=0000000000000007 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MiPageMightBeZero+0x8:
fffff800`02cd34e4 f60220          test    byte ptr [rdx],20h ds:03fc:00000000`00000000=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c37b7a to fffff80002c8b740

STACK_TEXT:  
fffff880`09536148 fffff800`02c37b7a : 00000000`0000001a 00000000`00041287 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`09536150 fffff800`02c8982e : 00000000`00000000 00000000`00000200 00000000`00000000 00000000`7797ff0a : nt! ?? ::FNODOBFM::`string'+0x42ba5
fffff880`095362b0 fffff800`02cd34e4 : fffff800`02cd33ba fffffa80`028373a0 00000000`00000001 00000000`000d67be : nt!KiPageFault+0x16e
fffff880`09536448 fffff800`02cd33ba : fffffa80`028373a0 00000000`00000001 00000000`000d67be fffff8a0`088d4730 : nt!MiPageMightBeZero+0x8
fffff880`09536450 fffff800`02d9237a : fffffa80`0568b678 fffff880`09536660 00000000`00000001 fffffa80`00000007 : nt!MiFreeWsleList+0x43e
fffff880`09536640 fffff800`02ed34ad : fffffa80`05656870 00000000`00000001 ffffffff`ffffffff ffffffff`ffffffff : nt!MiEmptyWorkingSet+0x24a
fffff880`095366f0 fffff800`030dd0ed : 00000000`00000001 00000000`00000000 00000000`00000000 fffff8a0`01698800 : nt!MmAdjustWorkingSetSizeEx+0xad
fffff880`09536780 fffff800`02fe4bcb : 00000000`00000008 00000000`00000000 00000000`00000001 00000000`0008e200 : nt!PspSetQuotaLimits+0x32d
fffff880`095368d0 fffff800`02c8a993 : fffffa80`05656870 fffff880`09536ca0 00000000`7efdb000 00000000`7efdb000 : nt! ?? ::NNGAKEGL::`string'+0x49b60
fffff880`09536c20 00000000`7798007a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0008e1c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7798007a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+42ba5
fffff800`02c37b7a cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+42ba5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1a_41287_nt!_??_::FNODOBFM::_string_+42ba5

BUCKET_ID:  X64_0x1a_41287_nt!_??_::FNODOBFM::_string_+42ba5

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`05282000 fffff880`052c0000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f90000 fffff880`00fe7000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03ef0000 fffff880`03f7a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`053e3000 fffff880`053f9000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0122a000 fffff880`01235000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`013d8000 fffff880`013e1000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`0122a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04a23000 fffff880`051de000   atikmdag atikmdag.sys Wed Aug 25 21:47:22 2010 (4C75C7AA)
fffff880`04000000 fffff880`0404a000   atikmpag atikmpag.sys Wed Aug 25 21:20:56 2010 (4C75C178)
fffff960`008c0000 fffff960`00921000   ATMFD    ATMFD.DLL    Thu May 27 00:11:31 2010 (4BFDF0F3)
fffff880`02fa6000 fffff880`02fad000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0416e000 fffff880`0417f000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02bd8000 fffff880`02bf6000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00650000 fffff960`00677000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`08a7f000 fffff880`08a9c000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`02f46000 fffff880`02f70000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e1d000 fffff880`00edd000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01616000 fffff880`01646000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d00000 fffff880`00d5e000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`016a9000 fffff880`0171c000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`053d3000 fffff880`053e3000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`075d5000 fffff880`075e3000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`040cd000 fffff880`04150000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`05935000 fffff880`05972000   CT20XUT  CT20XUT.SYS  Wed Jul 07 09:44:15 2010 (4C3484AF)
fffff880`052cb000 fffff880`05373b80   ctaud2k  ctaud2k.sys  Wed Jul 07 09:42:14 2010 (4C348436)
fffff880`07465000 fffff880`075c9000   CTEXFIFX CTEXFIFX.SYS Wed Jul 07 09:44:03 2010 (4C3484A3)
fffff880`063ce000 fffff880`063ea000   CTHWIUT  CTHWIUT.SYS  Wed Jul 07 09:44:19 2010 (4C3484B3)
fffff880`05243000 fffff880`05274000   ctoss2k  ctoss2k.sys  Wed Jul 07 09:38:24 2010 (4C348350)
fffff880`05274000 fffff880`0527c000   ctprxy2k ctprxy2k.sys Wed Jul 07 09:42:17 2010 (4C348439)
fffff880`06200000 fffff880`06238000   ctsfm2k  ctsfm2k.sys  Wed Jul 07 09:38:10 2010 (4C348342)
fffff880`04150000 fffff880`0416e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03e97000 fffff880`03ea6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01600000 fffff880`01616000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`053b1000 fffff880`053d3000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`075e3000 fffff880`075f6000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02e12000 fffff880`02f2e000   dump_iaStor dump_iaStor.sys Thu Jun 04 21:53:40 2009 (4A287AA4)
fffff880`075c9000 fffff880`075d5000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`046bc000 fffff880`047b0000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`047b0000 fffff880`047f6000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02ad4000 fffff880`02bab000   eamonm   eamonm.sys   Wed Jul 14 04:13:43 2010 (4C3D71B7)
fffff880`058eb000 fffff880`05935000   emupia2k emupia2k.sys Wed Jul 07 09:38:03 2010 (4C34833B)
fffff880`01281000 fffff880`01295000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01235000 fffff880`01281000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0172d000 fffff880`01737000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`017bd000 fffff880`017f7000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01800000 fffff880`0184a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`06241000 fffff880`063ce000   ha20x22k ha20x22k.sys Wed Jul 07 09:41:25 2010 (4C348405)
fffff800`031f7000 fffff800`03240000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04600000 fffff880`04624000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`07400000 fffff880`0745c000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`059ab000 fffff880`059c4000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`075f6000 fffff880`075fe080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0599d000 fffff880`059ab000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02a00000 fffff880`02ac8000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`019f1000 fffff880`019fa000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`012bc000 fffff880`013d8000   iaStor   iaStor.sys   Thu Jun 04 21:53:40 2009 (4A287AA4)
fffff880`0109d000 fffff880`011bb000   iaStorV  iaStorV.sys  Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`041a5000 fffff880`041bb000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`041ed000 fffff880`041fc000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08a71000 fffff880`08a7f000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bc5000 fffff800`00bcf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`05200000 fffff880`05243000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`01400000 fffff880`0141a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`019b4000 fffff880`019df000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`0527c000 fffff880`05281200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`059c4000 fffff880`059d9000   LHidFilt LHidFilt.Sys Thu Mar 18 04:51:17 2010 (4BA1E985)
fffff880`02bab000 fffff880`02bc0000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`059e6000 fffff880`059fa000   LMouFilt LMouFilt.Sys Thu Mar 18 04:51:24 2010 (4BA1E98C)
fffff880`0580e000 fffff880`05831000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`0105e000 fffff880`0109a880   mcdbus   mcdbus.sys   Tue Feb 24 05:34:07 2009 (49A3CD1F)
fffff880`00ca8000 fffff880`00cec000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05972000 fffff880`05980000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0141a000 fffff880`01429000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`059d9000 fffff880`059e6000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c6c000 fffff880`00c86000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02f70000 fffff880`02f9d000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`08b93000 fffff880`08ba3000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`05831000 fffff880`05849000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05849000 fffff880`05876000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07a6f000 fffff880`07abd000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07abd000 fffff880`07ae0000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01654000 fffff880`0165f000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ff0000 fffff880`00ffa000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01000000 fffff880`0105e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03e8c000 fffff880`03e97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`019df000 fffff880`019f1000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01862000 fffff880`01954000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`051de000 fffff880`051ea000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03ea6000 fffff880`03ed5000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`063ea000 fffff880`063ff000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03fee000 fffff880`03ffd000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03f7a000 fffff880`03fbf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01954000 fffff880`019b4000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0165f000 fffff880`01670000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e80000 fffff880`03e8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c1b000 fffff800`031f7000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01448000 fffff880`015eb000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02f9d000 fffff880`02fa6000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01295000 fffff880`012ad000   nusb3hub nusb3hub.sys Thu Apr 22 21:34:35 2010 (4BD0F92B)
fffff880`041bb000 fffff880`041eb000   nusb3xhc nusb3xhc.sys Thu Apr 22 21:34:36 2010 (4BD0F92C)
fffff880`03fc8000 fffff880`03fee000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00d91000 fffff880`00da6000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d5e000 fffff880`00d91000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e0d000 fffff880`00e14000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0171c000 fffff880`0172d000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07af0000 fffff880`07b96000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05374000 fffff880`053b1000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cec000 fffff880`00d00000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04698000 fffff880`046bc000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04a00000 fffff880`04a1b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`040a1000 fffff880`040c2000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03ed5000 fffff880`03eef000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e2f000 fffff880`03e80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`051ea000 fffff880`051f5000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02ff0000 fffff880`02ff9000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02e00000 fffff880`02e09000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02e09000 fffff880`02e12000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01783000 fffff880`017bd000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02bc0000 fffff880`02bd8000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0404a000 fffff880`040a1000   Rt64win7 Rt64win7.sys Mon Mar 22 05:57:14 2010 (4BA73EFA)
fffff880`011bb000 fffff880`011ea000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`07b96000 fffff880`07ba1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0185a000 fffff880`01862000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08afd000 fffff880`08b93000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07f0e000 fffff880`07f75000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07ba1000 fffff880`07bce000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`07bce000 fffff880`07bd6000   SSPORT   SSPORT.sys   Thu Aug 11 19:07:32 2005 (42FBDA34)
fffff880`053f9000 fffff880`053fa480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01a01000 fffff880`01bfe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07efc000 fffff880`07f0e000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0168e000 fffff880`0169b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01670000 fffff880`0168e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03e1b000 fffff880`03e2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00420000 fffff960`0042a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`0417f000 fffff880`041a5000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`01429000 fffff880`0143b000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05980000 fffff880`0599d000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`041eb000 fffff880`041ecf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04687000 fffff880`04698000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05891000 fffff880`058eb000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04631000 fffff880`04687000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04624000 fffff880`04631000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02fad000 fffff880`02fbb000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02fbb000 fffff880`02fe0000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0184a000 fffff880`0185a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00da6000 fffff880`00dbb000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01737000 fffff880`01783000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03e00000 fffff880`03e1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02fe0000 fffff880`02ff0000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00edd000 fffff880`00f81000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f81000 fffff880`00f90000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03fbf000 fffff880`03fc8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00060000 fffff960`0036f000   win32k   win32k.sys   Tue Aug 31 22:58:04 2010 (4C7DC13C)
fffff880`052c0000 fffff880`052c9000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fe7000 fffff880`00ff0000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`08a9c000 fffff880`08aa3000   WinRing0x64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05800000 fffff880`0580e000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08a00000 fffff880`08a71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07e8b000 fffff880`07efc000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07ae0000 fffff880`07af0000   DgiVecp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01646000 fffff880`01654000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02e17000 fffff880`02f33000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02f33000 fffff880`02f46000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

I see that Eset is still installed on your system, at least it was when the crash occurred. Use this uninstall tool: Tool[FONT=&quot]. You can try it again after you get your system running smoothly; but I do not recommend doing so. Download and install Microsoft Security Essentials.

[/FONT]DgiVecp.sys was involved in this crash. The dump shows it as an unloaded module. This would not be the first time I have seen this driver cause trouble. I cannot find the date of this driver. Do a search of your C: drive (or the drive that contains your programs and OS) for this driver. See what its date is. It is apparently an XP driver belonging to DgiVecp or VECP. If this is a utility program, I suggest you uninstall it. This is the second dump that has indicated this driver.

I also see these outdated drivers;

iaStor.sys Thu Jun 04 21:53:40 2009 - Intel Storage drivers http://downloadcenter.intel.com/Default.aspx

iaStorV.sys Wed Apr 08 12:57:17 2009 - ntel Matrix Storage Manager driver (base)http://downloadcenter.intel.com/Default.aspx

SSPORT.sys Thu Aug 11 19:07:32 2005 - Samsung printer driver Samsung. This is an XP driver.

Update the above drivers and if DgiVecp.sys is not dated July 13, 2009 or later, uninstall the software. Uninstall Eset and let's see how your system does. With the outdated drivers, I lean toward this being a driver issue.

 

[Trinitrotoluene]

NOD32 and everything else of ESET should already be long gone. I have used the uninstall tool 4 days ago. Today I ran it again in safemode, no ESET software detected. I then followed the instructions quoted below (source)

• 1. Restart you PC and login to SAFE MODE.
• 2. Click on Start / Run and in the text box type in 'regedit' and hit the enter key
• 3. In the registry editor look for the following registry keys and delete them
• (HKEY_CURRENT_USER\Software\ESET)
• (HKEY_LOCAL_MACHINE\Software\ESET)
• (HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\eg ui)
• 5. Now Click on the START menu again and get in the Control Panel and then Folder Options then View and choose Show Hidden Files and Folders
• 6. Now go to C:\WINDOWS\inf which is a folder and then delete the INFCACHE.1 file
• 7. Restart your PC and when It loads up delete the following folders
  
• 8. C:\Program Files\ESET
• (C:\Document and Settings\All Users\Application Data\ESET)
• (C:\Documents and Settings\%USER%\Application Data\ESET)

If more manual deletion is required, please let me know.

DgiVecp.sys belongs to my printer. I have uninstalled the whole software and deleted all DgiVecp.sys files from windows. All pointed to a specific folder that carried my printer name. And of course the one in system32, also deleted. The weird thing is, I downloaded and installed the driver listed as Windows 7 compatible.
I have also reinstalled intel matrix storage manager (source)

The problem right now is that I'm kind of getting lost in Intels driver section. "Intel matrix storage manager driver" and "intel storage driver" respectively "iaStorV.sys" and "iaStor.sys" (your qoute) - are they not from the same driver? The one I reinstalled just now?

Also, do I need this driver as well? If I remember correctly, I had that one installed before. But then my PC turned into a BSOD party on drugs. So I am kind of reluctant to do anything on these Intel drivers without getting some advice from you first.



*Installed Avast 5.0 Free

*Opened thread on intel boards, here, about iastor(v).sys which drivers to pick

 

[Trinitrotoluene]

Newest BSOD. This is after uninstalling NOD32 as described above, after reinstalling the intel matrix storage manager, but I haven't yet touched iaStor(v).sys with updates.

dxgmms1.sys is involved in bad_pool_header, something about directx/graphics drivers on google. I noticed catalyst 10.10 is out, so I will fully uninstall 10.9, driver sweep it and install 10.10. Then see what happens and also await your answer on this one.

dump(s) attached.

*Have installed RST from intel, as recommended by user on their board (AFTER attached BSOD dump file)

 

[Trinitrotoluene]

Here's the latest BSOD, system service exception. Happened while I ran a full avast scan, it crashed the moment I started firefox. Don't know if that info is of any use...

NOD32 is totally gone, SPTD is gone, avast is installed, rapid storage technology is installed (means iastor(v).sys deal should be updated as well). I don't get it how one day the system is totally stable in demanding tasks like gaming. And now it drops out again. Is there still a chance a piece of hardware is broken in this scenario?

 

[CarlTR6]

I looked at your last two dumps.

Error code 19, BAD_POOL_HEADER. Usual causes: Device driver.

Error code 3B, SYSTEM_SERVICE_EXCEPTION. Usual causes: System service, Device driver, graphics driver, ?memory.

This driver is still loading on your system, eamonm.sys Wed Jul 14 04:13:43 2010 - This file is from ESET and belongs to ESET Smart Security, Amon monitor. Do a search for this file on your C: drive. Rename all instances of it from .sys to .bak. Reboot and it will not load.

The error code 19 dump, as you noticed, blames dxgmms1.sys. This is a Microsoft Direct X Driver and most likely not the the real cause.

"iaStorV.sys" and "iaStor.sys" - are they not from the same driver? The one I reinstalled just now?

No, they are two different drivers. You have updated the iaStor driver; iaStorV is still out of date: iaStorV.sys Wed Apr 08 2009. There is an update for this driver. Before you try to update it, make a copy of your iaStor.sys file; save in your documents or some place where you can find it. This is in case, during updating, it gets reverted back. If that happens you will have a copy of the latest one. The rest of your drivers appear to be up to date.

Because of the dump blaming Direct X, I suggest you test your video card with Furmark. Follow the instructions in this tutorial. Be sure to monitor your temps. http://www.sevenforums.com/tutorials/100356-video-card-stress-test-furmark.html. Post back with the results. If your video card passes, enable Driver Verifier following the instructions in this tutorial. Driver Verifier - Enable and Disable. Driver Verifier will cause BSOD's if it finds faulty drivers. Upload any and all Driver Verifier enabled dumps.

 

[Trinitrotoluene]

Thanks again Carl, though I have one question.

The iastorV.sys driver is just the default Intel packed driver that comes will windows so that when you install Windows you don't need to load any drivers. The iastor.sys is the newer driver that gets used over the iastorV.sys driver when you installed RST.

source


So I'm wondering if there is A) really an update for iastorV.sys, or B) if the person on the intel forum is right and we should assume that the iastor(v).sys deal is O.K now since the newest iastor.sys is now being used over iastorV.sys


Tomorrow I will get on with the eamonm.sys and do a furmark run. Sorry to have to get back to you once again before I can post more conclusive test results. But please do know I appreciate all your help here a lot.