Windows 7 BSOD nComputing

[cmb991]

We use software called nComputing. Ever since then, we are getting random blue screens. We have been arguing with the company over this. Can anyone tell me what is causing the issue? When we went through it a few months ago, we found the Intel HD Graphics card and the nComputing software were conflicting. Now we have replaced the graphics card and it just happened again twice.

 

[GeneralHiningII]

Hi, please use the W7F Tool Link Removed to post a BSOD report, minidumps are not conclusive.

 

[cmb991]

Here is the files.

 

[usasma]

Only 110 updates since SP1, most systems have 130 to 140. Please visit Windows Update and get ALL available updates.

These devices are disabled. Is this deliberate? If so, why?

PCI Simple Communications Controller PCI\VEN_8086&DEV_1C3A&SUBSYS_1494103C&REV_04\3&11583659&0&B0 This device is disabled.
PCI Serial Port PCI\VEN_8086&DEV_1C3D&SUBSYS_1494103C&REV_04\3&11583659&0&B3 This device is disabled.
ECP Printer Port (LPT1) ACPI\PNP0401\4&F054C7F&0 This device is disabled.
Communications Port (COM1) ACPI\PNP0501\1 This device is disabled.

Please enable each one of them, update their drivers, then disable them again if so desired.

Update your video drivers using this procedure to update the DRIVERS ONLY: Link Removed

Please replace your NComputing VSpace Mouse drivers with the latest version available from the manufacturer's website.

If the BSOD's continue, please run Driver Verifier according to these instructions: Link Removed

Analysis:
The following is for informational purposes only.

[font=lucida console]**************************Mon Nov 19 20:33:45.176 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\111912-24242-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 3:03:44.623[/B]
BugCheck Code: [B]BugCheck 3B, {c0000005, 0, fffff880092a3460, 0}[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]win32k.sys ( win32k+1c321b )[/B]
BugCheck Info: [B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the instruction which caused the bugcheck
Arg3: fffff880092a3460, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_win32k+1c321b[/B]
CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3093[/B]
  BIOS Version                  J01 v02.21
  BIOS Release Date             06/20/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  HP Compaq 8200 Elite CMT PC
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Nov 18 21:33:44.187 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\111812-28360-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]3 days 2:02:23.032[/B]
BugCheck Code: [B]BugCheck 3B, {c0000005, 0, fffff88003a64460, 0}[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]win32k.sys ( win32k+1c321b )[/B]
BugCheck Info: [B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the instruction which caused the bugcheck
Arg3: fffff88003a64460, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_win32k+1c321b[/B]
CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3093[/B]
  BIOS Version                  J01 v02.21
  BIOS Release Date             06/20/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  HP Compaq 8200 Elite CMT PC
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

[font=lucida console]**************************Mon Nov 19 20:33:45.176 2012 (UTC - 5:00)**************************
[COLOR=RED][B]atikmdag.sys                Fri Apr 24 06:51:57 2009 (49F199CD)[/B][/COLOR]
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
SYMNETS.SYS                 Tue Apr 19 18:33:31 2011 (4DAE0DBB)
Ironx64.SYS                 Mon Apr 25 18:07:08 2011 (4DB5F08C)
SYMDS64.SYS                 Thu Apr 28 18:42:29 2011 (4DB9ED55)
SYMEVENT64x86.SYS           Wed May  4 23:16:30 2011 (4DC2168E)
SYMEFA64.SYS                Tue May 17 18:29:43 2011 (4DD2F6D7)
SRTSP64.SYS                 Fri May 27 18:34:08 2011 (4DE026E0)
SRTSPX64.SYS                Fri May 27 18:34:14 2011 (4DE026E6)
NcKbdCls.sys                Tue Sep  6 11:54:30 2011 (4E664236)
NcMouCls.sys                Tue Sep  6 11:54:32 2011 (4E664238)
NCStore.sys                 Tue Sep  6 11:54:38 2011 (4E66423E)
X3HAudio.sys                Tue Sep  6 11:54:46 2011 (4E664246)
x300bus.sys                 Tue Sep  6 11:55:21 2011 (4E664269)
NcWpsMs.sys                 Tue Sep  6 11:55:29 2011 (4E664271)
X300M.sys                   Tue Sep  6 11:55:33 2011 (4E664275)
NcJBox.sys                  Tue Sep  6 11:57:15 2011 (4E6642DB)
e1c62x64.sys                Wed Jan 11 15:30:54 2012 (4F0DF17E)
EraserUtilRebootDrv.sys     Tue Jul 31 19:36:50 2012 (50186C12)
eeCtrl64.sys                Tue Jul 31 19:36:51 2012 (50186C13)
EX64.SYS                    Wed Sep  5 18:31:45 2012 (5047D2D1)
ENG64.SYS                   Wed Sep  5 18:33:39 2012 (5047D343)
BHDrvx64.sys                Fri Oct 19 00:40:41 2012 (5080D9C9)
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
NcKbdCls.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
NcMouCls.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
NCStore.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
X3HAudio.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
x300bus.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
NcWpsMs.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
X300M.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
NcJBox.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

 

[cmb991]

I have just did more windows updates. There was about 7 more and that is it.

I updated the graphics card as you said. I couldn't just get the drivers alone to install so I installed the Catalyst Software Suite itself.

The nComputing software is already on the latest version.


I have attached the W7F files again, thanks.

 

[usasma]

There are no memory dumps in this uploaded set of reports.
Wait until you get another BSOD and then zip up the contents of C:\Windows\Minidump and upload them with your next post.

 

[jameswilson7]

We use software called nComputing. Ever since then, we are getting random blue screens. We have been arguing with the company over this. Can anyone tell me what is causing the issue? When we went through it a few months ago, we found the Intel HD Graphics card and the nComputing software were conflicting. Now we have replaced the graphics card and it just happened again twice.

Log on to host and stations with same user ID can cause BSOD: on some systems if a user logs into the host session (directly connected to the host computer) with the same user ID as a user that has already logged into a X-series station, then the host system may lock up with a blue screen. Several workarounds are available including:
· Primary recommendation: use unique user login IDs for each station and the host
· Ensure that the host user logs in before any stations using the same user ID log in.
· Change the DirectX configuration by changing the following registry setting to 0: [HKEY LocalMachine > System > CurrentControlSet >Control > Multiuser > Disable DirectX]

Thanks,
James

 

[cmb991]

It just bluescreened again.


Everyone is logging in with a unique domain account. No one is logging in with the same account.
Two people maybe logged in at once but not with the same id.


Event Logs:

Fault bucket , type 0

Event Name: BlueScreen

Response: Not available

Cab Id: 0


Problem signature:

P1:

P2:

P3:

P4:

P5:

P6:

P7:

P8:

P9:

P10:


Attached files:

C:\Windows\Minidump\082412-33618-01.dmp

C:\Users\MyUsername\AppData\Local\Temp\WER-55398981-0.sysdata.xml

C:\Users\MyUsername\AppData\Local\Temp\WER8CB1.tmp.WERInternalMetadata.xml


These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_0e918cb5


Analysis symbol:

Rechecking for solution: 0

Report Id: 082412-33618-01

Report Status: 0

Fault bucket 13215452, type 4

Event Name: APPCRASH

Response: Not available

Cab Id: 0


Problem signature:

P1: Ati2evxx.exe

P2: 6.14.10.4222

P3: 4b7395b9

P4: Ati2evxx.exe

P5: 6.14.10.4222

P6: 4b7395b9

P7: c0000005

P8: 0000000000012e1b

P9:

P10:


Attached files:

C:\Windows\Temp\WERCCB1.tmp.appcompat.txt

C:\Windows\Temp\WERCD1F.tmp.WERInternalMetadata.xml

C:\Windows\Temp\WERCD2F.tmp.hdmp

C:\Windows\Temp\WERCDEC.tmp.mdmp


These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_Ati2evxx.exe_45548436e04822c2f03de2a25eec987d6b584a82_104e18ea


Analysis symbol:

Rechecking for solution: 0

Report Id: e551b122-332c-11e2-844a-3cd92b65b722

Report Status: 0

Fault bucket , type 0

Event Name: BlueScreen

Response: Not available

Cab Id: 0


Problem signature:

P1:

P2:

P3:

P4:

P5:

P6:

P7:

P8:

P9:

P10:


Attached files:

C:\Windows\Minidump\111512-37533-01.dmp

C:\Users\MyUsername\AppData\Local\Temp\WER-185422-0.sysdata.xml

C:\Users\MyUsername\AppData\Local\Temp\WER1C41.tmp.WERInternalMetadata.xml


These files may be available here:

C:\Users\MyUsername\AppData\Local\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_0e631c65


Analysis symbol:

Rechecking for solution: 0

Report Id: 111512-37533-01

Report Status: 0

Fault bucket , type 0

Event Name: BlueScreen

Response: Not available

Cab Id: 0


Problem signature:

P1:

P2:

P3:

P4:

P5:

P6:

P7:

P8:

P9:

P10:


Attached files:

C:\Windows\Minidump\101512-24195-01.dmp

C:\Users\MyUsername\AppData\Local\Temp\WER-92872371-0.sysdata.xml

C:\Users\MyUsername\AppData\Local\Temp\WERA423.tmp.WERInternalMetadata.xml


These files may be available here:

C:\Users\MyUsername\AppData\Local\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_0b8da437


Analysis symbol:

Rechecking for solution: 0

Report Id: 101512-24195-01

Report Status: 0

 

[usasma]

Since you're getting repeated BSOD's and are not getting memory dumps to go with them - we have to wonder what's causing the problem(s). In most cases you either get them or you don't - but in this case it's more random, which makes it more problematic to troubleshoot.

The majority of the 3rd party drivers showing in the memory dumps are either NComputing or Norton/Symantec.
I'd suggest this to test if Norton/Symantec is causing a problem:

Anti-Virus Removal:
Please do the following:
- download a free anti-virus for testing purposes: Link Removed
- un-install the Norton from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of Norton using this free tool: http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN
- IMMEDIATELY install and update the free anti-virus, then check to ensure that the Windows Firewall is turned on.
- check to see if this fixes the BSOD's
NOTE: NEVER run more than 1 anti-virus, firewall, Internet Security/Security Center application at the same time.

Then, update your chipset drivers from Intel: Link Removed
If you have difficulties with it, please post back and make sure that this is the correct make and model of your system:

Manufacturer Hewlett-Packard Product Name HP Compaq 8200 Elite CMT PC

If these 2 things don't stop the BSOD's, then please run DRIVER VERIFIER according to these instructions: Link Removed

Analysis:
The following is for informational purposes only.

[font=lucida console]**************************Wed Nov 21 09:41:25.342 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112112-30903-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 12:17:14.152[/B]
BugCheck Code: [B]BugCheck 3B, {c0000005, 0, fffff88007d58ab0, 0}[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )[/B]
BugCheck Info: [B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the instruction which caused the bugcheck
Arg3: fffff88007d58ab0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_nt!KiSystemServiceHandler+7c[/B]
CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3093[/B]
  BIOS Version                  J01 v02.21
  BIOS Release Date             06/20/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  HP Compaq 8200 Elite CMT PC
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

[font=lucida console]**************************Wed Nov 21 09:41:25.342 2012 (UTC - 5:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
atikmdag.sys                Thu Feb 11 00:47:46 2010 (4B739A02)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
HECIx64.sys                 Tue Oct 19 19:33:43 2010 (4CBE2AD7)
SYMNETS.SYS                 Tue Apr 19 18:33:31 2011 (4DAE0DBB)
Ironx64.SYS                 Mon Apr 25 18:07:08 2011 (4DB5F08C)
SYMDS64.SYS                 Thu Apr 28 18:42:29 2011 (4DB9ED55)
SYMEVENT64x86.SYS           Wed May  4 23:16:30 2011 (4DC2168E)
SYMEFA64.SYS                Tue May 17 18:29:43 2011 (4DD2F6D7)
SRTSP64.SYS                 Fri May 27 18:34:08 2011 (4DE026E0)
SRTSPX64.SYS                Fri May 27 18:34:14 2011 (4DE026E6)
NcKbdCls.sys                Tue Sep  6 11:54:30 2011 (4E664236)
NcMouCls.sys                Tue Sep  6 11:54:32 2011 (4E664238)
NCStore.sys                 Tue Sep  6 11:54:38 2011 (4E66423E)
x300bus.sys                 Tue Sep  6 11:55:21 2011 (4E664269)
NcWpsMs.sys                 Tue Sep  6 11:55:29 2011 (4E664271)
X300M.sys                   Tue Sep  6 11:55:33 2011 (4E664275)
NcJBox.sys                  Tue Sep  6 11:57:15 2011 (4E6642DB)
e1c62x64.sys                Wed Jan 11 15:30:54 2012 (4F0DF17E)
EraserUtilRebootDrv.sys     Tue Jul 31 19:36:50 2012 (50186C12)
eeCtrl64.sys                Tue Jul 31 19:36:51 2012 (50186C13)
EX64.SYS                    Wed Sep  5 18:31:45 2012 (5047D2D1)
ENG64.SYS                   Wed Sep  5 18:33:39 2012 (5047D343)
BHDrvx64.sys                Fri Oct 19 00:40:41 2012 (5080D9C9)
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

 

[cmb991]

There was a memory dump in the last blue screen. Here it is attached.


This is what I get when I try to update the chipset:
Product Detected: Intel Q67 Express Chipset Family
Version: 9.2.0.1015
This version is valid.


There was a newer ethernet driver so I updated that. I removed symantec and installed AVG.

 

[usasma]

Sorry for not being more specific - but I did analyze the lone memory dump in the uploaded files (that's how I got the suggestions for updating drivers)

Once that's done, we wait and see if there are further BSOD's
If there are:
- upload the memory dump files (they're in C:\Windows\Minidump)
- run Driver Verifier according to these directions: Link Removed

 

[cmb991]

I couldn't find a newer chipset, it says mine is the newest. I will wait till the new bsod and do what you said next.

 

[GeneralHiningII]

Try record all major events (downloads and installs mainly) that you've done to your computer from now on - when the BSOD happens, post back the list of all the stuff you did.

 

[cmb991]

It just had a bsod again. We switched the video cards back to Intel, can you check the dump files again to see if there is anything relating to the graphic driver and the ncomputing software?

 

[usasma]

All I saw was reference to the Hard Drive file system (NTFS.sys) and a reference to HAL.DLL (indicating a low-level problem, such as an incompatibility). This was in the extended stack text which is way too long to post here.

I strongly suggest running Driver Verifier according to these instructions: Link Removed
Let it BSOD several times so that we're sure there are some good memory dumps.

Analysis:
The following is for informational purposes only.

[FONT=lucida console]**************************Mon Nov 26 23:59:09.900 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112712-32323-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 2:05:45.281[/B]
BugCheck Code: [B]BugCheck 3B, {c0000005, 0, fffff88008464ab0, 0}[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )[/B]
BugCheck Info: [B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the instruction which caused the bugcheck
Arg3: fffff88008464ab0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_nt!KiSystemServiceHandler+7c[/B]
CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3093[/B]
  BIOS Version                  J01 v02.21
  BIOS Release Date             06/20/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  HP Compaq 8200 Elite CMT PC
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Nov 26 21:52:56.882 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112612-35724-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 4:36:58.918[/B]
BugCheck Code: [B]BugCheck 3B, {c0000005, 0, fffff880073a4ab0, 0}[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiSystemServiceHandler+7c )[/B]
BugCheck Info: [B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: 0000000000000000, Address of the instruction which caused the bugcheck
Arg3: fffff880073a4ab0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_nt!KiSystemServiceHandler+7c[/B]
CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3093[/B]
  BIOS Version                  J01 v02.21
  BIOS Release Date             06/20/2012
  Manufacturer                  Hewlett-Packard
  Product Name                  HP Compaq 8200 Elite CMT PC
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

[FONT=lucida console]**************************Mon Nov 26 23:59:09.900 2012 (UTC - 5:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
HECIx64.sys                 Tue Oct 19 19:33:43 2010 (4CBE2AD7)
SYMNETS.SYS                 Tue Apr 19 18:33:31 2011 (4DAE0DBB)
Ironx64.SYS                 Mon Apr 25 18:07:08 2011 (4DB5F08C)
SYMDS64.SYS                 Thu Apr 28 18:42:29 2011 (4DB9ED55)
SYMEVENT64x86.SYS           Wed May  4 23:16:30 2011 (4DC2168E)
SYMEFA64.SYS                Tue May 17 18:29:43 2011 (4DD2F6D7)
SRTSP64.SYS                 Fri May 27 18:34:08 2011 (4DE026E0)
SRTSPX64.SYS                Fri May 27 18:34:14 2011 (4DE026E6)
NcKbdCls.sys                Tue Sep  6 11:54:30 2011 (4E664236)
NcMouCls.sys                Tue Sep  6 11:54:32 2011 (4E664238)
NCStore.sys                 Tue Sep  6 11:54:38 2011 (4E66423E)
X3HAudio.sys                Tue Sep  6 11:54:46 2011 (4E664246)
x300bus.sys                 Tue Sep  6 11:55:21 2011 (4E664269)
NcWpsMs.sys                 Tue Sep  6 11:55:29 2011 (4E664271)
X300M.sys                   Tue Sep  6 11:55:33 2011 (4E664275)
NcJBox.sys                  Tue Sep  6 11:57:15 2011 (4E6642DB)
EraserUtilRebootDrv.sys     Tue Jul 31 19:36:50 2012 (50186C12)
eeCtrl64.sys                Tue Jul 31 19:36:51 2012 (50186C13)
e1c62x64.sys                Fri Aug 10 18:44:15 2012 (50258EBF)
EX64.SYS                    Wed Sep  5 18:31:45 2012 (5047D2D1)
ENG64.SYS                   Wed Sep  5 18:33:39 2012 (5047D343)
igdkmd64.sys                Wed Oct 17 15:12:29 2012 (507F031D)
BHDrvx64.sys                Fri Oct 19 00:40:41 2012 (5080D9C9)
[/FONT]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

 

[cmb991]

In the directions, it says "

Then select all drivers NOT provided by Microsoft and click "Next""

Every driver in the list has Microsoft Corporation listed.. ?

​

 

[usasma]

It appears that you did not select the "Select Driver Names from a List" setting in the previous screen.
There are, at a minimum, all the drivers listed in my analysis' that are not from Microsoft.
Here's the list from the last memory dump that aren't from Microsoft:

intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
HECIx64.sys Tue Oct 19 19:33:43 2010 (4CBE2AD7)
SYMNETS.SYS Tue Apr 19 18:33:31 2011 (4DAE0DBB)
Ironx64.SYS Mon Apr 25 18:07:08 2011 (4DB5F08C)
SYMDS64.SYS Thu Apr 28 18:42:29 2011 (4DB9ED55)
SYMEVENT64x86.SYS Wed May 4 23:16:30 2011 (4DC2168E)
SYMEFA64.SYS Tue May 17 18:29:43 2011 (4DD2F6D7)
SRTSP64.SYS Fri May 27 18:34:08 2011 (4DE026E0)
SRTSPX64.SYS Fri May 27 18:34:14 2011 (4DE026E6)
NcKbdCls.sys Tue Sep 6 11:54:30 2011 (4E664236)
NcMouCls.sys Tue Sep 6 11:54:32 2011 (4E664238)
NCStore.sys Tue Sep 6 11:54:38 2011 (4E66423E)
X3HAudio.sys Tue Sep 6 11:54:46 2011 (4E664246)
x300bus.sys Tue Sep 6 11:55:21 2011 (4E664269)
NcWpsMs.sys Tue Sep 6 11:55:29 2011 (4E664271)
X300M.sys Tue Sep 6 11:55:33 2011 (4E664275)
NcJBox.sys Tue Sep 6 11:57:15 2011 (4E6642DB)
EraserUtilRebootDrv.sys Tue Jul 31 19:36:50 2012 (50186C12)
eeCtrl64.sys Tue Jul 31 19:36:51 2012 (50186C13)
e1c62x64.sys Fri Aug 10 18:44:15 2012 (50258EBF)
EX64.SYS Wed Sep 5 18:31:45 2012 (5047D2D1)
ENG64.SYS Wed Sep 5 18:33:39 2012 (5047D343)
igdkmd64.sys Wed Oct 17 15:12:29 2012 (507F031D)
BHDrvx64.sys Fri Oct 19 00:40:41 2012 (5080D9C9)

 

[cmb991]

Yes I did pick that option. Its still now showing anything but Microsoft.
Link Removed
Link Removed
Link Removed

 

[cmb991]

I went ahead and manually added all of the ncomputing sys files. Then I started it up and it caused a bsod before getting the login screen. Attached is the w7f diag tool files.

 

[usasma]

Great work! Unfortunately, it does blame the nComputing driver NcWpsMs.sys

1) Ensure that you have all available Windows Updates
2) Run SFC.EXE /SCANNOW from an elevated (Run as administrator) Command Prompt (let us know if you get any error messages)
3) Ensure that your Intel video drivers are fully updated (it looks like they are to me)
4) Stress test your video card with these free tests: Link Removed
5) Remove Norton (this is a hunch on my part due to it's presence in the memory dumps) and replace temporarily with a free antivirus
6) If the BSOD's persist, you may want to reinstall Win7 on the system as a final test.

If, after all that, you still have BSOD's, then contact nComputing and show them the Driver Verifier memory dump (I'll include the full output at the bottom of the post).

Good luck!

Analysis:
The following is for informational purposes only.

[font=lucida console]**************************Tue Nov 27 18:31:38.174 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112712-14445-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 0:00:18.564[/B]
BugCheck Code: [B]BugCheck D5, {fffff98009230f50, 0, fffff88001a5cbfc, 0}[/B]
*** WARNING: Unable to verify timestamp for NcWpsMs.sys
*** ERROR: Module load completed but symbols could not be loaded for NcWpsMs.sys
*** WARNING: Unable to verify timestamp for igdkmd64.sys
*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
Probably caused by :[B]NcWpsMs.sys ( NcWpsMs+17bfc )[/B]
BugCheck Info: [B]DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)[/B]
Arguments: 
Arg1: fffff98009230f50, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff88001a5cbfc, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)
DEFAULT_BUCKET_ID: [B][COLOR=RED]VERIFIER_ENABLED_VISTA_MINIDUMP[/COLOR][/B]
BUGCHECK_STR:  0xD5
PROCESS_NAME: [B]System[/B]
FAILURE_BUCKET_ID: [B]X64_0xD5_VRF_NcWpsMs+17bfc[/B]
CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3093[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

[font=lucida console]**************************Tue Nov 27 18:31:38.174 2012 (UTC - 5:00)**************************
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
SYMNETS.SYS                 Tue Apr 19 18:33:31 2011 (4DAE0DBB)
Ironx64.SYS                 Mon Apr 25 18:07:08 2011 (4DB5F08C)
SYMDS64.SYS                 Thu Apr 28 18:42:29 2011 (4DB9ED55)
SYMEVENT64x86.SYS           Wed May  4 23:16:30 2011 (4DC2168E)
BHDrvx64.sys                Wed May 11 18:04:43 2011 (4DCB07FB)
SYMEFA64.SYS                Tue May 17 18:29:43 2011 (4DD2F6D7)
SRTSP64.SYS                 Fri May 27 18:34:08 2011 (4DE026E0)
SRTSPX64.SYS                Fri May 27 18:34:14 2011 (4DE026E6)
NcKbdCls.sys                Tue Sep  6 11:54:30 2011 (4E664236)
NcMouCls.sys                Tue Sep  6 11:54:32 2011 (4E664238)
NCStore.sys                 Tue Sep  6 11:54:38 2011 (4E66423E)
NcWpsMs.sys                 Tue Sep  6 11:55:29 2011 (4E664271)
eeCtrl64.sys                Tue Jul 31 19:36:51 2012 (50186C13)
EX64.SYS                    Wed Sep  5 18:31:45 2012 (5047D2D1)
ENG64.SYS                   Wed Sep  5 18:33:39 2012 (5047D343)
igdkmd64.sys                Wed Oct 17 15:12:29 2012 (507F031D)
[/font]

Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed

**********************************************************************
Full output of the Verifier Enabled Memory Dump:

**************************Tue Nov 27 18:31:38.174 2012 (UTC - 5:00)**************************

Microsoft (R) Windows Debugger Version 6.2.8400.0 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112712-14445-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: c:\symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`0521f000 PsLoadedModuleList = 0xfffff800`05463670
Debug session time: Tue Nov 27 18:31:38.174 2012 (UTC - 5:00)
System Uptime: 0 days 0:00:18.564
Loading Kernel Symbols
...............................................................
.................................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D5, {fffff98009230f50, 0, fffff88001a5cbfc, 0}

*** WARNING: Unable to verify timestamp for NcWpsMs.sys
*** ERROR: Module load completed but symbols could not be loaded for NcWpsMs.sys
*** WARNING: Unable to verify timestamp for igdkmd64.sys
*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys

Could not read faulting driver name
Probably caused by : NcWpsMs.sys ( NcWpsMs+17bfc )

Followup: MachineOwner
---------

2: kd> kd: Reading initial command '!analyze -v; !sysinfo cpuspeed; !sysinfo SMBIOS; lmtsmn; q'
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)
Memory was referenced after it was freed.
This cannot be protected by try-except.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff98009230f50, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff88001a5cbfc, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800054cd100
GetUlongFromAddress: unable to read from fffff800054cd1c0
 fffff98009230f50 

FAULTING_IP: 
NcWpsMs+17bfc
fffff880`01a5cbfc 488b5370        mov     rdx,qword ptr [rbx+70h]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD5

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880035ae830 -- (.trap 0xfffff880035ae830)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=28013f00de040000
rdx=0000000000000100 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001a5cbfc rsp=fffff880035ae9c0 rbp=fffffa800940db80
 r8=fffff88003342180  r9=fffff88003342180 r10=0000000000000100
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NcWpsMs+0x17bfc:
fffff880`01a5cbfc 488b5370        mov     rdx,qword ptr [rbx+70h] ds:00000000`00000070=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80005245eec to fffff8000529dfc0

STACK_TEXT:  
fffff880`035ae6c8 fffff800`05245eec : 00000000`00000050 fffff980`09230f50 00000000`00000000 fffff880`035ae830 : nt!KeBugCheckEx
fffff880`035ae6d0 fffff800`0529c0ee : 00000000`00000000 fffff980`09230f50 00000000`00000000 fffff980`09230ee0 : nt! ?? ::FNODOBFM::`string'+0x4514f
fffff880`035ae830 fffff880`01a5cbfc : fffffa80`0944b000 ffffffff`00000008 fffff980`09230ff8 fffffa80`08623e70 : nt!KiPageFault+0x16e
fffff880`035ae9c0 fffffa80`0944b000 : ffffffff`00000008 fffff980`09230ff8 fffffa80`08623e70 fffffa80`08623e70 : NcWpsMs+0x17bfc
fffff880`035ae9c8 ffffffff`00000008 : fffff980`09230ff8 fffffa80`08623e70 fffffa80`08623e70 fffff800`05740c16 : 0xfffffa80`0944b000
fffff880`035ae9d0 fffff980`09230ff8 : fffffa80`08623e70 fffffa80`08623e70 fffff800`05740c16 fffff980`09230ee0 : 0xffffffff`00000008
fffff880`035ae9d8 fffffa80`08623e70 : fffffa80`08623e70 fffff800`05740c16 fffff980`09230ee0 00000000`00000002 : 0xfffff980`09230ff8
fffff880`035ae9e0 fffffa80`08623e70 : fffff800`05740c16 fffff980`09230ee0 00000000`00000002 fffffa80`0940db80 : 0xfffffa80`08623e70
fffff880`035ae9e8 fffff800`05740c16 : fffff980`09230ee0 00000000`00000002 fffffa80`0940db80 00000000`00000001 : 0xfffffa80`08623e70
fffff880`035ae9f0 fffff880`053373a3 : 00000000`00000001 fffffa80`0940db80 00000000`0023003f fffffa80`08623e70 : nt!IovCallDriver+0x566
fffff880`035aea50 00000000`00000001 : fffffa80`0940db80 00000000`0023003f fffffa80`08623e70 fffff880`035aeb28 : igdkmd64+0x50b3a3
fffff880`035aea58 fffffa80`0940db80 : 00000000`0023003f fffffa80`08623e70 fffff880`035aeb28 fffff880`00000008 : 0x1
fffff880`035aea60 00000000`0023003f : fffffa80`08623e70 fffff880`035aeb28 fffff880`00000008 ffffffff`80000201 : 0xfffffa80`0940db80
fffff880`035aea68 fffffa80`08623e70 : fffff880`035aeb28 fffff880`00000008 ffffffff`80000201 fffff880`035aeab0 : 0x23003f
fffff880`035aea70 fffff880`035aeb28 : fffff880`00000008 ffffffff`80000201 fffff880`035aeab0 fffff880`035aeaa0 : 0xfffffa80`08623e70
fffff880`035aea78 fffff880`00000008 : ffffffff`80000201 fffff880`035aeab0 fffff880`035aeaa0 fffff880`035aebe0 : 0xfffff880`035aeb28
fffff880`035aea80 ffffffff`80000201 : fffff880`035aeab0 fffff880`035aeaa0 fffff880`035aebe0 00000000`00000000 : 0xfffff880`00000008
fffff880`035aea88 fffff880`035aeab0 : fffff880`035aeaa0 fffff880`035aebe0 00000000`00000000 00000000`00000008 : 0xffffffff`80000201
fffff880`035aea90 fffff880`035aeaa0 : fffff880`035aebe0 00000000`00000000 00000000`00000008 00000001`00060000 : 0xfffff880`035aeab0
fffff880`035aea98 fffff880`035aebe0 : 00000000`00000000 00000000`00000008 00000001`00060000 fffff880`035aeab8 : 0xfffff880`035aeaa0
fffff880`035aeaa0 00000000`00000000 : 00000000`00000008 00000001`00060000 fffff880`035aeab8 fffff880`035aeab8 : 0xfffff880`035aebe0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NcWpsMs+17bfc
fffff880`01a5cbfc 488b5370        mov     rdx,qword ptr [rbx+70h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NcWpsMs+17bfc

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NcWpsMs

IMAGE_NAME:  NcWpsMs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4e664271

FAILURE_BUCKET_ID:  X64_0xD5_VRF_NcWpsMs+17bfc

BUCKET_ID:  X64_0xD5_VRF_NcWpsMs+17bfc

Followup: MachineOwner
---------

CPUID:        "Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: 3093
sysinfo: could not find necessary interfaces.
sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
start             end                 module name
fffff880`00f5d000 fffff880`00fb4000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`04400000 fffff880`04489000   afd      afd.sys      Tue Dec 27 22:59:20 2011 (4EFA9418)
fffff880`0116d000 fffff880`01178000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`0111f000 fffff880`01128000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01128000 fffff880`01152000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`046b8000 fffff880`046bf000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03e18000 fffff880`03f32000   BHDrvx64 BHDrvx64.sys Wed May 11 18:04:43 2011 (4DCB07FB)
fffff880`049ee000 fffff880`049ff000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`01997000 fffff880`019c1000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01dcb000 fffff880`01dfb000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00d62000 fffff880`00dc0000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`016bd000 fffff880`0172f000   cng      cng.sys      Fri Aug 24 11:47:16 2012 (5037A204)
fffff880`01a00000 fffff880`01a0e000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0494d000 fffff880`049d0000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`049d0000 fffff880`049ee000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`0493e000 fffff880`0494d000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01db5000 fffff880`01dcb000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01a0e000 fffff880`01a1a000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01a25000 fffff880`01a38000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01a1a000 fffff880`01a25000   dump_msahci dump_msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`05469000 fffff880`0555d000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`0555d000 fffff880`055a3000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`048c4000 fffff880`0493e000   eeCtrl64 eeCtrl64.sys Tue Jul 31 19:36:51 2012 (50186C13)
fffff880`0468d000 fffff880`046af000   ENG64    ENG64.SYS    Wed Sep 05 18:33:39 2012 (5047D343)
fffff880`0448a000 fffff880`0468d000   EX64     EX64.SYS     Wed Sep 05 18:31:45 2012 (5047D2D1)
fffff880`05342000 fffff880`05378000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`01071000 fffff880`01085000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01178000 fffff880`011c4000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01740000 fffff880`0174a000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`01d7b000 fffff880`01db5000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01c78000 fffff880`01cc2000   fwpkclnt fwpkclnt.sys Wed Aug 22 11:10:49 2012 (5034F679)
fffff800`05807000 fffff800`05850000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`01d72000 fffff880`01d7b000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`04e2c000 fffff880`05341fa0   igdkmd64 igdkmd64.sys Wed Oct 17 15:12:29 2012 (507F031D)
fffff880`03155000 fffff880`03182000   Ironx64  Ironx64.SYS  Mon Apr 25 18:07:08 2011 (4DB5F08C)
fffff800`05c2e000 fffff800`05c38000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`01400000 fffff880`0141b000   ksecdd   ksecdd.sys   Fri Jun 01 22:50:23 2012 (4FC97F6F)
fffff880`0196c000 fffff880`01997000   ksecpkg  ksecpkg.sys  Fri Aug 24 11:48:29 2012 (5037A24D)
fffff880`00cff000 fffff880`00d4e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`01105000 fffff880`0111f000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`01152000 fffff880`0115d000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`04751000 fffff880`0475c000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fbd000 fffff880`00fc7000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01200000 fffff880`0125e000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`03058000 fffff880`03063000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01d60000 fffff880`01d72000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`046bf000 fffff880`046da000   NcKbdCls NcKbdCls.sys Tue Sep 06 11:54:30 2011 (4E664236)
fffff880`046da000 fffff880`046f3000   NcMouCls NcMouCls.sys Tue Sep 06 11:54:32 2011 (4E664238)
fffff880`01a38000 fffff880`01a45000   NCStore  NCStore.sys  Tue Sep 06 11:54:38 2011 (4E66423E)
fffff880`01a45000 fffff880`01a6f000   NcWpsMs  NcWpsMs.sys  Tue Sep 06 11:55:29 2011 (4E664271)
fffff880`0181a000 fffff880`0190c000   ndis     ndis.sys     Wed Aug 22 11:11:46 2012 (5034F6B2)
fffff880`047ea000 fffff880`047f9000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`0479c000 fffff880`047e1000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`0190c000 fffff880`0196c000   NETIO    NETIO.SYS    Wed Aug 22 11:11:28 2012 (5034F6A0)
fffff880`0475c000 fffff880`0476d000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0304c000 fffff880`03058000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`0521f000 fffff800`05807000   nt       ntkrnlmp.exe Thu Aug 30 11:11:58 2012 (503F82BE)
fffff880`01454000 fffff880`015f7000   Ntfs     Ntfs.sys     Fri Aug 31 11:14:14 2012 (5040D4C6)
fffff880`046af000 fffff880`046b8000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`031cf000 fffff880`031f5000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00e0d000 fffff880`00e22000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00fc7000 fffff880`00ffa000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`0115d000 fffff880`0116d000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0172f000 fffff880`01740000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`00d4e000 fffff880`00d62000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01600000 fffff880`01651000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04736000 fffff880`0473f000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0473f000 fffff880`04748000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04748000 fffff880`04751000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01d26000 fffff880`01d60000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`03000000 fffff880`0301d000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01d1e000 fffff880`01d26000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`03094000 fffff880`03155000   SRTSP64  SRTSP64.SYS  Fri May 27 18:34:08 2011 (4DE026E0)
fffff880`03182000 fffff880`03198000   SRTSPX64 SRTSPX64.SYS Fri May 27 18:34:14 2011 (4DE026E6)
fffff880`01000000 fffff880`01071000   SYMDS64  SYMDS64.SYS  Thu Apr 28 18:42:29 2011 (4DB9ED55)
fffff880`012cb000 fffff880`013b4000   SYMEFA64 SYMEFA64.SYS Tue May 17 18:29:43 2011 (4DD2F6D7)
fffff880`03198000 fffff880`031cf000   SYMEVENT64x86 SYMEVENT64x86.SYS Wed May 04 23:16:30 2011 (4DC2168E)
fffff880`0174a000 fffff880`017b1000   SYMNETS  SYMNETS.SYS  Tue Apr 19 18:33:31 2011 (4DAE0DBB)
fffff880`01a77000 fffff880`01c78000   tcpip    tcpip.sys    Wed Oct 03 11:09:34 2012 (506C552E)
fffff880`0478f000 fffff880`0479c000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0476d000 fffff880`0478f000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`03038000 fffff880`0304c000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`03f32000 fffff880`03f58000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`046f3000 fffff880`04701000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`04701000 fffff880`04726000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01cc2000 fffff880`01cd2000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00e22000 fffff880`00e37000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`010a9000 fffff880`01105000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01cd2000 fffff880`01d1e000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`0301d000 fffff880`03038000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`04726000 fffff880`04736000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e8b000 fffff880`00f4d000   Wdf01000 Wdf01000.sys Wed Jul 25 22:25:13 2012 (5010AA89)
fffff880`00f4d000 fffff880`00f5d000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`047e1000 fffff880`047ea000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`00fb4000 fffff880`00fbd000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
quit:
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``




   --- E O J ---   Wed 11/28/2012       8:06:34.30     _99-debug   Copyright 2012 Sysnative Forums
   --- E O J ---   Wed 11/28/2012       8:06:34.30     _99-debug   Copyright 2012 Sysnative Forums
   --- E O J ---   Wed 11/28/2012       8:06:34.30     _99-debug   Copyright 2012 Sysnative Forums