ntoskrn.exe and ntfs.sys drivers causing crash?

Discussion in 'Windows 7 Blue Screen of Death (BSOD)' started by logrady, Feb 6, 2011.

  1. logrady

    logrady New Member

    Joined:
    Feb 6, 2011
    Messages:
    12
    Likes Received:
    0
    I've read through a few threads on this subject but it seems as though the solution is always specific to each computer. I'm experiencing BSOD on a Dell Adamo Laptop, 4GB RAM and Intel Core 2 Duo CPU L9600 @ 2.13 GHz. I have Norton Antivirus installed (upgraded when I thought older version was causing problem) and a Logitech mouse (Anywhere MX), changed when I though Logictech Bluetooth was causing the problem. I have all powersave modes shut off and screensaver shut off. I'm getting a consistent "sidebyside" error related Adobe incompatibility issue with 32 and 64 bit version (their error, no patch or workaround yet).

    I have checked the disk and the RAM. No problem.

    I used the BlueScreenView tool to look at some dump files (attached) and noted reference to ntoskrn.exe and ntfs.sys but can't find repair instructions specific to my situation.

    I've attached the dumps. Any help appreciated! Why does MS make everything so hard!!View attachment 120510-11044-01.zip
     
  2. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    The blue screens have been caused by hard disk and by memory corruption:

    0xF4_IOERR_C000000E_IMAGE_hardware_disk
    MEMORY_CORRUPTION_LARGE_4096



    1. http://windows7forums.com/blue-screen-death-bsod/54459-important-every-thread-starter-please-see.html

    SPD -> under each SLOT


    SMART report HDDScan




    2. Replace Symantec with MSE:

    Download and run the Norton Removal Tool to uninstall your Norton product | Norton Support


    https://www.microsoft.com/security_essentials/





    3. Update drivers:

    Broadcom NetLink Gigabit Ethernet
    k57nd60a.sys Sun Apr 26 07:23:05 2009

    Broadcom Bluetooth
    btwrchid.sys Thu Jun 25 01:51:37 2009

    Intel Wi-Fi
    netw5v64.sys Thu May 14 11:51:34 2009
    IntelĀ® Driver Update Utility

    Web cam/Video capturing device
    OA005Ufd.sys Thu Oct 16 06:02:13 2008
    OA005Vid.sys Tue Oct 21 05:45:01 2008


    IDT PC Audio
    stwrt64.sys Mon Jun 29 13:52:05 2009


    Touchpad
    SynTP.sys Fri Jun 26 14:35:47 2009






    Crash Dumps:

    Code:
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\010611-10171-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c01000 PsLoadedModuleList = 0xfffff800`02e3ee50
    Debug session time: Thu Jan  6 15:05:51.145 2011 (UTC - 5:00)
    System Uptime: 0 days 4:07:59.033
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ............................................
    Loading User Symbols
    Loading unloaded module list
    ..........
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck F4, {3, fffffa8005e6c660, fffffa8005e6c940, fffff80002f7c5d0}
    
    Probably caused by : hardware_disk
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 0000000000000003, Process
    Arg2: fffffa8005e6c660, Terminating object
    Arg3: fffffa8005e6c940, Process image file name
    Arg4: fffff80002f7c5d0, Explanatory message (ascii)
    
    Debugging Details:
    ------------------
    
    
    OVERLAPPED_MODULE: Address regions for 'ENG64' and 'ENG64.SYS' overlap
    
    PROCESS_OBJECT: fffffa8005e6c660
    
    IMAGE_NAME:  hardware_disk
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    FAULTING_MODULE: 0000000000000000 
    
    PROCESS_NAME:  csrss.exe
    
    EXCEPTION_RECORD:  fffff8800673fb38 -- (.exr 0xfffff8800673fb38)
    ExceptionAddress: 00000000771851df
       ExceptionCode: c0000006 (In-page I/O error)
      ExceptionFlags: 00000000
    NumberParameters: 3
       Parameter[0]: 0000000000000000
       Parameter[1]: 000007fefd0ed8a8
       Parameter[2]: 00000000c00000c0
    Inpage operation failed at 000007fefd0ed8a8, due to I/O error 00000000c00000c0
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    CURRENT_IRQL:  0
    
    ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
    
    EXCEPTION_PARAMETER1:  0000000000000000
    
    EXCEPTION_PARAMETER2:  000007fefd0ed8a8
    
    EXCEPTION_PARAMETER3:  00000000c00000c0
    
    IO_ERROR: (NTSTATUS) 0xc00000c0 - This device does not exist.
    
    EXCEPTION_STR:  0xc0000006_c00000c0
    
    FAULTING_IP: 
    +23a
    00000000`771851df ??              ???
    
    BUGCHECK_STR:  0xF4_IOERR_C00000C0
    
    FOLLOWUP_IP: 
    +23a
    000007fe`fd0ed8a8 ??              ???
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: hardware_disk
    
    STACK_COMMAND:  kb
    
    FAILURE_BUCKET_ID:  X64_0xF4_IOERR_C00000C0_IMAGE_hardware_disk
    
    BUCKET_ID:  X64_0xF4_IOERR_C00000C0_IMAGE_hardware_disk
    
    Followup: MachineOwner
    ---------
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\011111-11622-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c1e000 PsLoadedModuleList = 0xfffff800`02e5be50
    Debug session time: Tue Jan 11 12:40:53.665 2011 (UTC - 5:00)
    System Uptime: 0 days 1:15:03.464
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .............................................
    Loading User Symbols
    Loading unloaded module list
    ...........
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 7A, {fffff6fc40009bc8, ffffffffc000000e, 136f6e860, fffff880013791e0}
    
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    GetPointerFromAddress: unable to read from fffff80002ec6220
    Probably caused by : memory_corruption
    
    Followup: memory_corruption
    ---------
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    KERNEL_DATA_INPAGE_ERROR (7a)
    The requested page of kernel data could not be read in.  Typically caused by
    a bad block in the paging file or disk controller error. Also see
    KERNEL_STACK_INPAGE_ERROR.
    If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
    it means the disk subsystem has experienced a failure.
    If the error status is 0xC000009A, then it means the request failed because
    a filesystem failed to make forward progress.
    Arguments:
    Arg1: fffff6fc40009bc8, lock type that was held (value 1,2,3, or PTE address)
    Arg2: ffffffffc000000e, error status (normally i/o status code)
    Arg3: 0000000136f6e860, current process (virtual address for lock type 3, or PTE)
    Arg4: fffff880013791e0, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
    
    Debugging Details:
    ------------------
    
    
    ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
    
    DISK_HARDWARE_ERROR: There was error with disk hardware
    
    BUGCHECK_STR:  0x7a_c000000e
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  CODE_CORRUPTION
    
    PROCESS_NAME:  svchost.exe
    
    CURRENT_IRQL:  0
    
    TRAP_FRAME:  fffff880079c85c0 -- (.trap 0xfffff880079c85c0)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa800d541ee8 rbx=0000000000000000 rcx=fffffa800d541e40
    rdx=fffffa8004e34180 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff880013791e0 rsp=fffff880079c8758 rbp=fffff880079c8920
     r8=0000000000000000  r9=ffffffffc000000e r10=fffff880079c88e0
    r11=fffff880079c70e0 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    Ntfs!NtfsAbortTransaction:
    fffff880`013791e0 004031          add     byte ptr [rax+31h],al ds:0100:fffffa80`0d541f19=??
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002d03168 to fffff80002c8e740
    
    STACK_TEXT:  
    fffff880`079c82a8 fffff800`02d03168 : 00000000`0000007a fffff6fc`40009bc8 ffffffff`c000000e 00000001`36f6e860 : nt!KeBugCheckEx
    fffff880`079c82b0 fffff800`02c8052b : fffffa80`05252bd0 fffff880`079c8420 fffff800`02e1b440 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x34c0e
    fffff880`079c8390 fffff800`02ca95c4 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff8a0`0dd35640 : nt!MiIssueHardFault+0x28b
    fffff880`079c8460 fffff800`02c8c82e : 00000000`00000008 fffffa80`0d541e40 00000000`00000000 fffff880`000000e0 : nt!MmAccessFault+0x11c4
    fffff880`079c85c0 fffff880`013791e0 : fffff880`012473c5 fffffa80`0d541e40 fffffa80`0d10a001 fffff8a0`0dd35600 : nt!KiPageFault+0x16e
    fffff880`079c8758 fffff880`012473c5 : fffffa80`0d541e40 fffffa80`0d10a001 fffff8a0`0dd35600 fffff8a0`1032e530 : Ntfs!NtfsAbortTransaction
    fffff880`079c8760 fffff880`012ea47e : fffffa80`0d541e40 fffffa80`0d10a010 fffff880`c000000e 00000000`00000000 : Ntfs!NtfsProcessException+0x2c9
    fffff880`079c8840 fffff880`010e423f : fffff880`079c8990 fffffa80`0d10a010 fffff880`079c8901 fffffa80`0d541e40 : Ntfs!NtfsFsdFileSystemControl+0x2ce
    fffff880`079c88e0 fffff880`0110391e : fffffa80`04b54040 fffffa80`0cb0ecf0 fffffa80`04b54000 fffffa80`0d10a010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
    fffff880`079c8970 fffff800`02fa9707 : fffffa80`0cb0ecf0 fffff880`079c8c60 fffffa80`0d10a3b0 fffffa80`0d10a010 : fltmgr!FltpFsControl+0xee
    fffff880`079c89d0 fffff800`02f72b1a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
    fffff880`079c8b00 fffff800`02c8d993 : fffffa80`0cee25d0 00000000`00000001 fffffa80`0c52ba70 fffff800`02fa4414 : nt!NtFsControlFile+0x56
    fffff880`079c8b70 00000000`76fd00ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`014ce7f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76fd00ea
    
    
    STACK_COMMAND:  kb
    
    CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
        fffff88001379000-fffff88001379006  7 bytes - Ntfs!NtfsGlobalSdUpdate+310
    	[ ed ff c7 44 24 44 0d:e0 e0 9b 00 00 00 00 ]
        fffff88001379008-fffff8800137901a  19 bytes - Ntfs!NtfsGlobalSdUpdate+318 (+0x08)
    	[ 00 c0 eb 2a 8a 05 f7 37:90 df 9b 00 00 00 00 00 ]
        fffff8800137901d-fffff88001379025  9 bytes - Ntfs!NtfsGlobalSdUpdate+32d (+0x15)
    	[ 48 8d 15 5c 1f f6 ff b9:00 00 00 00 40 2f 5f 25 ]
        fffff88001379028-fffff88001379044  29 bytes - Ntfs!NtfsGlobalSdUpdate+338 (+0x0b)
    	[ c0 e8 22 53 ed ff c7 44:00 40 00 00 01 00 00 00 ]
        fffff88001379047-fffff8800137908a  68 bytes - Ntfs!NtfsGlobalSdUpdate+357 (+0x1f)
    	[ 48 8d 15 32 1f f6 ff 8b:00 00 00 00 00 00 00 00 ]
        fffff8800137908d-fffff880013790b7  43 bytes - Ntfs!NtfsGlobalSdUpdate+39d (+0x46)
    	[ 48 8d 15 ec 1e f6 ff 8b:00 00 00 00 c0 2f 5f 25 ]
        fffff880013790ba-fffff880013790c2  9 bytes - Ntfs!NtfsGlobalSdUpdate+3ca (+0x2d)
    	[ 48 8d 15 bf 1e f6 ff be:00 00 00 00 00 00 00 00 ]
        fffff880013790c5-fffff880013790d1  13 bytes - Ntfs!NtfsGlobalSdUpdate+3d5 (+0x0b)
    	[ c0 8b ce e8 83 52 ed ff:00 00 00 00 00 30 5f 25 ]
        fffff880013790d3-fffff880013790f8  38 bytes - Ntfs!NtfsGlobalSdUpdate+3e3 (+0x0e)
    	[ c0 89 7c 24 20 41 b1 01:00 01 00 00 00 00 00 80 ]
        fffff880013790fb-fffff8800137910e  20 bytes - Ntfs!NtfsGlobalSdUpdate+40b (+0x28)
    	[ 48 8d 15 7e 1e f6 ff 8b:00 00 00 00 00 00 40 30 ]
        fffff88001379111-fffff88001379132  34 bytes - Ntfs!NtfsGlobalSdUpdate+421 (+0x16)
    	[ 00 41 5e 41 5d 41 5c 5f:40 80 0c 2a 00 00 00 50 ]
        fffff88001379135-fffff8800137915c  40 bytes - Ntfs!NtfsGlobalSdUpdate+44a (+0x24)
    	[ 48 8d 8b 28 02 00 00 ff:00 00 00 00 80 30 5f 25 ]
        fffff8800137915e - Ntfs!NtfsGlobalSdUpdate+473 (+0x29)
    	[ 01:00 ]
        fffff88001379160-fffff8800137916e  15 bytes - Ntfs!NtfsGlobalSdUpdate+475 (+0x02)
    	[ 00 e8 da 9d f9 ff 39 7d:88 e1 9b 00 00 00 00 00 ]
        fffff88001379171-fffff88001379177  7 bytes - Ntfs!NtfsGlobalSdUpdate+486 (+0x11)
    	[ 74 34 48 8b 9d 08 01:c0 30 5f 25 00 00 00 ]
        fffff88001379179-fffff8800137918e  22 bytes - Ntfs!NtfsGlobalSdUpdate+48e (+0x08)
    	[ 00 48 8b 4b 18 c7 41 04:40 00 00 01 00 00 00 00 ]
        fffff88001379192-fffff88001379194  3 bytes - Ntfs!NtfsGlobalSdUpdate+4a7 (+0x19)
    	[ 41 b8 38:00 00 00 ]
        fffff88001379198-fffff880013791a1  10 bytes - Ntfs!NtfsGlobalSdUpdate+4ad (+0x06)
    	[ e8 f3 10 ec ff 48 c7 43:00 00 00 00 00 00 00 00 ]
        fffff880013791a5-fffff880013791ac  8 bytes - Ntfs!NtfsGlobalSdUpdate+4ba (+0x0d)
    	[ eb 0b 48 8b 85 08 01 00:00 00 00 00 00 31 5f 25 ]
        fffff880013791ae-fffff880013791fa  77 bytes - Ntfs!NtfsGlobalSdUpdate+4c3 (+0x09)
    	[ 48 89 78 38 48 8b 4d 70:00 00 00 40 00 00 01 00 ]
        fffff880013791fc-fffff8800137920b  16 bytes - Ntfs!NtfsAbortTransaction+1c (+0x4e)
    	[ 49 8b d8 4c 8b ea 4c 8b:00 00 00 00 00 00 00 00 ]
        fffff8800137920f-fffff88001379216  8 bytes - Ntfs!NtfsAbortTransaction+2f (+0x13)
    	[ 48 39 12 74 0b 41 b8 04:00 00 00 00 00 00 00 00 ]
        fffff88001379219-fffff8800137923e  38 bytes - Ntfs!NtfsAbortTransaction+39 (+0x0a)
    	[ 00 e8 d1 0d fd ff 45 33:80 31 5f 25 00 00 00 00 ]
        fffff88001379240-fffff8800137925e  31 bytes - Ntfs!NtfsAbortTransaction+60 (+0x27)
    	[ 00 33 f6 48 3b ce 74 0d:68 e2 9b 00 00 00 00 00 ]
        fffff88001379261-fffff8800137926d  13 bytes - Ntfs!NtfsAbortTransaction+81 (+0x21)
    	[ f6 40 06 01 74 20 8b c3:c0 81 0c 2a 00 00 00 30 ]
        fffff88001379270-fffff88001379277  8 bytes - Ntfs!NtfsAbortTransaction+90 (+0x0f)
    	[ 83 e8 18 49 8b 8d 70 04:00 00 00 00 00 00 00 00 ]
        fffff8800137927a-fffff8800137928d  20 bytes - Ntfs!NtfsAbortTransaction+9a (+0x0a)
    	[ 44 0f b7 01 33 d2 41 f7:00 00 00 00 00 00 00 00 ]
        fffff88001379290-fffff8800137929d  14 bytes - Ntfs!NtfsAbortTransaction+b0 (+0x16)
    	[ 41 89 44 24 14 48 8b 5b:00 40 00 00 01 00 00 00 ]
        fffff880013792a0-fffff880013792ab  12 bytes - Ntfs!NtfsAbortTransaction+c0 (+0x10)
    	[ 00 41 83 4c 24 04 20 49:80 e3 9b 00 00 00 00 00 ]
        fffff880013792ae-fffff880013792b5  8 bytes - Ntfs!NtfsAbortTransaction+ce (+0x0e)
    	[ 0f b7 08 89 8c 24 68 01:00 00 10 e3 9b 00 00 00 ]
        fffff880013792b8-fffff880013792cf  24 bytes - Ntfs!NtfsAbortTransaction+d8 (+0x0a)
    	[ 44 0f b7 78 06 44 89 bc:00 00 00 00 00 00 00 00 ]
        fffff880013792d1-fffff880013792e5  21 bytes - Ntfs!NtfsAbortTransaction+f1 (+0x19)
    	[ 00 b2 01 49 8d 8d 08 04:40 82 0c 2a 00 00 00 10 ]
        fffff880013792e8-fffff880013792ef  8 bytes - Ntfs!NtfsAbortTransaction+108 (+0x17)
    	[ 0f b7 08 89 8c 24 68 01:00 00 00 00 00 00 00 00 ]
        fffff880013792f2-fffff880013792fc  11 bytes - Ntfs!NtfsAbortTransaction+112 (+0x0a)
    	[ 44 0f b7 78 06 44 89 bc:00 00 00 00 00 00 00 80 ]
        fffff880013792ff-fffff8800137932c  46 bytes - Ntfs!NtfsAbortTransaction+11f (+0x0d)
    	[ 41 f6 c7 01 74 17 48 8b:00 00 40 00 00 01 00 00 ]
        fffff88001379330-fffff88001379334  5 bytes - Ntfs!NtfsAbortTransaction+150 (+0x31)
    	[ 49 8d 8d 08 04:00 c0 32 5f 25 ]
        fffff88001379337-fffff8800137934a  20 bytes - Ntfs!NtfsAbortTransaction+157 (+0x07)
    	[ ff 15 63 c9 ef ff 41 39:00 00 40 00 00 01 00 00 ]
        fffff8800137934c-fffff88001379352  7 bytes - Ntfs!NtfsAbortTransaction+16c (+0x15)
    	[ 48 3b de 0f 84 db 02:00 00 00 00 00 00 00 ]
        fffff88001379355-fffff88001379366  18 bytes - Ntfs!NtfsAbortTransaction+175 (+0x09)
    	[ 48 89 74 24 78 41 0f ba:00 00 00 00 00 00 00 00 ]
        fffff88001379369-fffff88001379372  10 bytes - Ntfs!NtfsAbortTransaction+189 (+0x14)
    	[ 48 89 44 24 20 4c 8d 8c:00 33 5f 25 00 00 00 00 ]
        fffff88001379374 - Ntfs!NtfsAbortTransaction+194 (+0x0b)
    	[ 00:01 ]
        fffff88001379376-fffff88001379378  3 bytes - Ntfs!NtfsAbortTransaction+196 (+0x02)
    	[ 41 b8 01:00 00 00 ]
        fffff8800137937a-fffff88001379382  9 bytes - Ntfs!NtfsAbortTransaction+19a (+0x04)
    	[ 00 00 48 8b d3 49 8b 8d:83 0c 2a 00 00 00 60 e4 ]
        fffff88001379386-fffff88001379392  13 bytes - Ntfs!NtfsAbortTransaction+1a6 (+0x0c)
    	[ e8 75 3e fc ff 90 4c 8b:00 00 a0 e2 9b 00 00 00 ]
        fffff88001379394-fffff88001379398  5 bytes - Ntfs!NtfsAbortTransaction+1b4 (+0x0e)
    	[ 4c 89 b4 24 a0:00 00 00 00 ff ]
        fffff8800137939c-fffff880013793bd  34 bytes - Ntfs!NtfsAbortTransaction+1bc (+0x08)
    	[ 49 8d 84 24 48 01 00 00:00 00 00 00 00 40 33 5f ]
        fffff880013793c1-fffff880013793c5  5 bytes - Ntfs!NtfsAbortTransaction+1e1 (+0x25)
    	[ 44 8b 84 24 f0:00 00 00 00 00 ]
        fffff880013793c9-fffff880013793e7  31 bytes - Ntfs!NtfsAbortTransaction+1e9 (+0x08)
    	[ 49 8b d6 49 8b cd e8 5c:00 00 00 00 00 00 00 00 ]
        fffff880013793e9-fffff880013793f2  10 bytes - Ntfs!NtfsAbortTransaction+209 (+0x20)
    	[ 00 48 8d 15 7f 1b f6 ff:80 83 0c 2a 00 00 00 80 ]
        fffff880013793f5-fffff8800137940a  22 bytes - Ntfs!NtfsAbortTransaction+215 (+0x0c)
    	[ c0 e8 55 4f ed ff c7 44:00 00 00 b8 e3 9b 00 00 ]
    WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
    3691 errors : !Ntfs (fffff88001379000-fffff88001379fff)
    
    MODULE_NAME: memory_corruption
    
    IMAGE_NAME:  memory_corruption
    
    FOLLOWUP_NAME:  memory_corruption
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    MEMORY_CORRUPTOR:  LARGE_4096
    
    FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096
    
    BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096
    
    Followup: memory_corruption
    ---------
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\020611-10623-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c13000 PsLoadedModuleList = 0xfffff800`02e50e50
    Debug session time: Sun Feb  6 00:12:32.141 2011 (UTC - 5:00)
    System Uptime: 0 days 1:56:07.013
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...........................................
    Loading User Symbols
    Loading unloaded module list
    ...........
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck F4, {3, fffffa8006fde060, fffffa8006fde340, fffff80002f8e5d0}
    
    Probably caused by : hardware_disk
    
    Followup: MachineOwner
    ---------
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 0000000000000003, Process
    Arg2: fffffa8006fde060, Terminating object
    Arg3: fffffa8006fde340, Process image file name
    Arg4: fffff80002f8e5d0, Explanatory message (ascii)
    
    Debugging Details:
    ------------------
    
    
    PROCESS_OBJECT: fffffa8006fde060
    
    IMAGE_NAME:  hardware_disk
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    FAULTING_MODULE: 0000000000000000 
    
    PROCESS_NAME:  csrss.exe
    
    EXCEPTION_RECORD:  fffff88006513b38 -- (.exr 0xfffff88006513b38)
    ExceptionAddress: 0000000076cf51df
       ExceptionCode: c0000006 (In-page I/O error)
      ExceptionFlags: 00000000
    NumberParameters: 3
       Parameter[0]: 0000000000000000
       Parameter[1]: 000007fefcc5d8a8
       Parameter[2]: 00000000c000000e
    Inpage operation failed at 000007fefcc5d8a8, due to I/O error 00000000c000000e
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    CURRENT_IRQL:  0
    
    ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
    
    EXCEPTION_PARAMETER1:  0000000000000000
    
    EXCEPTION_PARAMETER2:  000007fefcc5d8a8
    
    EXCEPTION_PARAMETER3:  00000000c000000e
    
    IO_ERROR: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
    
    EXCEPTION_STR:  0xc0000006_c000000e
    
    FAULTING_IP: 
    +23a
    00000000`76cf51df ??              ???
    
    BUGCHECK_STR:  0xF4_IOERR_C000000E
    
    FOLLOWUP_IP: 
    +23a
    000007fe`fcc5d8a8 ??              ???
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: hardware_disk
    
    STACK_COMMAND:  kb
    
    FAILURE_BUCKET_ID:  X64_0xF4_IOERR_C000000E_IMAGE_hardware_disk
    
    BUCKET_ID:  X64_0xF4_IOERR_C000000E_IMAGE_hardware_disk
    
    Followup: MachineOwner
    ---------
    
    
    
    



    Drivers:

    Code:
    start             end                 module name
    fffff880`00ec4000 fffff880`00f1b000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
    fffff880`021b5000 fffff880`021bf000   acpials  acpials.sys  Mon Jul 13 20:00:24 2009 (4A5BCA98)
    fffff880`05be9000 fffff880`05bf3000   ACPIKeyLight ACPIKeyLight.sys Thu Jul 16 17:43:48 2009 (4A5F9F14)
    fffff880`02c00000 fffff880`02c8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`04067000 fffff880`0407d000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`01196000 fffff880`011a1000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
    fffff880`09620000 fffff880`0962b000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
    fffff880`01148000 fffff880`01151000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`01151000 fffff880`0117b000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
    fffff880`00f8c000 fffff880`00f98000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
    fffff880`015f8000 fffff880`015ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`03e75000 fffff880`03f62000   BHDrvx64 BHDrvx64.sys Mon Nov 15 18:11:35 2010 (4CE1BE27)
    fffff880`03d67000 fffff880`03d78000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`0235c000 fffff880`0237a000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
    fffff880`05574000 fffff880`05584000   BthEnum  BthEnum.sys  Mon Jul 13 20:06:52 2009 (4A5BCC1C)
    fffff880`05584000 fffff880`055a4000   bthpan   bthpan.sys   Mon Jul 13 20:07:00 2009 (4A5BCC24)
    fffff880`05426000 fffff880`054b2000   bthport  bthport.sys  Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`03478000 fffff880`03490000   BTHUSB   BTHUSB.sys   Mon Jul 13 20:06:52 2009 (4A5BCC1C)
    fffff880`03467000 fffff880`03478000   btusbflt btusbflt.sys Thu Apr 08 21:11:36 2010 (4BBE7EC8)
    fffff880`062a2000 fffff880`06328000   btwaudio btwaudio.sys Wed Jul 01 09:54:56 2009 (4A4B6AB0)
    fffff880`06227000 fffff880`062a2000   btwavdt  btwavdt.sys  Thu Jun 25 01:50:13 2009 (4A431015)
    fffff880`06328000 fffff880`06334000   btwl2cap btwl2cap.sys Fri Apr 03 20:28:45 2009 (49D6A9BD)
    fffff880`06334000 fffff880`06337880   btwrchid btwrchid.sys Thu Jun 25 01:51:37 2009 (4A431069)
    fffff880`03ccb000 fffff880`03d67000   ccHPx64  ccHPx64.sys  Fri Feb 05 16:05:45 2010 (4B6C8829)
    fffff960`00610000 fffff960`00637000   cdd      cdd.dll      unavailable (00000000)
    fffff880`00d04000 fffff880`00dc4000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
    fffff880`00ca6000 fffff880`00d04000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`0561e000 fffff880`05622500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
    fffff880`014b7000 fffff880`0152a000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
    fffff880`00f83000 fffff880`00f8c000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`041eb000 fffff880`041fb000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`03ff1000 fffff880`03fff000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`03a52000 fffff880`03a6d000   ctxusbm  ctxusbm.sys  Mon Sep 07 14:09:28 2009 (4AA54C58)
    fffff880`03a34000 fffff880`03a52000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
    fffff880`03a25000 fffff880`03a34000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`03c3d000 fffff880`03c5f000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`03c86000 fffff880`03c92000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`03c9d000 fffff880`03cb0000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`03c92000 fffff880`03c9d000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`03fe5000 fffff880`03ff1000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`04080000 fffff880`04174000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
    fffff880`04174000 fffff880`041ba000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
    fffff880`03b86000 fffff880`03bfc000   eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
    fffff880`09600000 fffff880`09620000   ENG64    ENG64.SYS    Mon Dec 13 20:47:30 2010 (4D06CCB2)
    fffff880`03a00000 fffff880`03a25000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:45 2010 (4BF6FECD)
    fffff880`0962b000 fffff880`097e5000   EX64     EX64.SYS     Mon Dec 13 20:55:48 2010 (4D06CEA4)
    fffff880`063be000 fffff880`063f4000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
    fffff880`0106e000 fffff880`01082000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`011a1000 fffff880`011ed000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
    fffff880`0153b000 fffff880`01545000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
    fffff880`01400000 fffff880`0143a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
    fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
    fffff800`031ef000 fffff800`03238000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
    fffff880`041c7000 fffff880`041eb000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
    fffff880`020bf000 fffff880`020d8000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
    fffff880`020d8000 fffff880`020e0080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`03a8a000 fffff880`03a98000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
    fffff880`02294000 fffff880`0235c000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
    fffff880`01664000 fffff880`0166d000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
    fffff880`05600000 fffff880`0561e000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`03b0b000 fffff880`03b86000   IDSvia64 IDSvia64.sys Fri Nov 05 17:13:11 2010 (4CD47367)
    fffff880`04854000 fffff880`04f54960   igdkmd64 igdkmd64.sys Fri Jul 03 12:42:03 2009 (4A4E34DB)
    fffff880`03c5f000 fffff880`03c86000   IntcHdmi IntcHdmi.sys Tue May 26 07:13:09 2009 (4A1BCEC5)
    fffff880`05bce000 fffff880`05be4000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`00c00000 fffff880`00c27000   Ironx64  Ironx64.SYS  Tue Apr 27 20:48:23 2010 (4BD785D7)
    fffff880`05b66000 fffff880`05bae000   k57nd60a k57nd60a.sys Sun Apr 26 07:23:05 2009 (49F44419)
    fffff880`05bae000 fffff880`05bbd000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`020e1000 fffff880`020ef000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff800`00bd0000 fffff800`00bda000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
    fffff880`03fa2000 fffff880`03fe5000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
    fffff880`0149d000 fffff880`014b7000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
    fffff880`017c5000 fffff880`017f0000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
    fffff880`05625000 fffff880`0562a200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`02000000 fffff880`02015000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`020ef000 fffff880`02112000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`00c4e000 fffff880`00c92000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
    fffff880`03cb0000 fffff880`03cbe000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`05bbf000 fffff880`05bce000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`02112000 fffff880`0211f000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`0112e000 fffff880`01148000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`0237a000 fffff880`02392000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`02392000 fffff880`023bf000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
    fffff880`02200000 fffff880`0224e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
    fffff880`0224e000 fffff880`02271000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
    fffff880`0117b000 fffff880`01186000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`00fb6000 fffff880`00fc1000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00f24000 fffff880`00f2e000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`0143f000 fffff880`0149d000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
    fffff880`03b00000 fffff880`03b0b000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`01652000 fffff880`01664000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`01673000 fffff880`01765000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`04fc2000 fffff880`04fce000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`02068000 fffff880`0207b000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
    fffff880`04fce000 fffff880`04ffd000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`03e5a000 fffff880`03e6f000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
    fffff880`02dbb000 fffff880`02dca000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`02c8a000 fffff880`02ccf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
    fffff880`01765000 fffff880`017c5000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
    fffff880`0562b000 fffff880`05b66000   netw5v64 netw5v64.sys Thu May 14 11:51:34 2009 (4A0C3E06)
    fffff880`00fc1000 fffff880`00fd2000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`03af4000 fffff880`03b00000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff800`02c13000 fffff800`031ef000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
    fffff880`01235000 fffff880`013d8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
    fffff880`013eb000 fffff880`013f4000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`02015000 fffff880`02068000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
    fffff880`0218c000 fffff880`021b4da0   OA005Ufd OA005Ufd.sys Thu Oct 16 06:02:13 2008 (48F71125)
    fffff880`02140000 fffff880`0218b1e0   OA005Vid OA005Vid.sys Tue Oct 21 05:45:01 2008 (48FDA49D)
    fffff880`02d95000 fffff880`02dbb000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
    fffff880`00f6e000 fffff880`00f83000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00f2e000 fffff880`00f61000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`01186000 fffff880`01196000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`0152a000 fffff880`0153b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`034e5000 fffff880`0358b000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`03c00000 fffff880`03c3d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00c92000 fffff880`00ca6000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`010bd000 fffff880`010c8e00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
    fffff880`04f9e000 fffff880`04fc2000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`04800000 fffff880`0481b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`0481b000 fffff880`0483c000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
    fffff880`03f88000 fffff880`03fa2000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`03aa3000 fffff880`03af4000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
    fffff880`013f4000 fffff880`013fd000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`010c9000 fffff880`010d2000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`00fad000 fffff880`00fb6000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`01591000 fffff880`015cb000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
    fffff880`05548000 fffff880`05574000   rfcomm   rfcomm.sys   Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`0207b000 fffff880`02093000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`0358b000 fffff880`03596000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`0164a000 fffff880`01652000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`06338000 fffff880`063be000   SRTSP64  SRTSP64.SYS  Wed Feb 24 18:59:29 2010 (4B85BD61)
    fffff880`00c27000 fffff880`00c3b000   SRTSPX64 SRTSPX64.SYS Wed Feb 24 18:59:48 2010 (4B85BD74)
    fffff880`054b2000 fffff880`05548000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
    fffff880`03400000 fffff880`03467000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
    fffff880`03596000 fffff880`035c3000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
    fffff880`03d78000 fffff880`03df3000   stwrt64  stwrt64.sys  Mon Jun 29 13:52:05 2009 (4A48FF45)
    fffff880`05623000 fffff880`05624480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`01000000 fffff880`0106e000   SYMDS64  SYMDS64.SYS  Mon Aug 17 19:35:30 2009 (4A89E942)
    fffff880`01082000 fffff880`010bd000   SYMEFA64 SYMEFA64.SYS Wed Apr 21 17:47:39 2010 (4BCF727B)
    fffff880`02d5f000 fffff880`02d95000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Aug 13 18:28:21 2009 (4A849385)
    fffff880`02ce9000 fffff880`02d5f000   SYMTDIV  SYMTDIV.SYS  Tue May 04 00:38:27 2010 (4BDFA4C3)
    fffff880`04f55000 fffff880`04f9e000   SynTP    SynTP.sys    Fri Jun 26 14:35:47 2009 (4A451503)
    fffff880`01801000 fffff880`019fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
    fffff880`035c3000 fffff880`035d5000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
    fffff880`00de2000 fffff880`00def000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
    fffff880`00dc4000 fffff880`00de2000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
    fffff880`02de5000 fffff880`02df9000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
    fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`03f62000 fffff880`03f88000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
    fffff880`0483c000 fffff880`0484e000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`03a6d000 fffff880`03a8a000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
    fffff880`05bbd000 fffff880`05bbef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`04056000 fffff880`04067000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
    fffff880`03e00000 fffff880`03e5a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
    fffff880`04000000 fffff880`04056000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
    fffff880`041ba000 fffff880`041c7000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00f61000 fffff880`00f6e000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`011ed000 fffff880`011fb000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`00fd7000 fffff880`00ffc000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`00f98000 fffff880`00fad000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`010d2000 fffff880`0112e000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
    fffff880`01545000 fffff880`01591000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
    fffff880`02dca000 fffff880`02de5000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
    fffff880`00e00000 fffff880`00e10000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`00e11000 fffff880`00eb5000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00eb5000 fffff880`00ec4000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`02ccf000 fffff880`02cd8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff960`00060000 fffff960`00370000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
    fffff880`05bf3000 fffff880`05bfc000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`00f1b000 fffff880`00f24000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`0211f000 fffff880`02140000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
    fffff880`021bf000 fffff880`021f0000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)
    
    Unloaded modules:
    fffff880`01200000 fffff880`01230000   CLASSPNP.SYS
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00030000
    fffff880`015cb000 fffff880`015e1000   disk.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00016000
    fffff880`097e5000 fffff880`09800000   USBSTOR.SYS
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0001B000
    fffff880`0a6c7000 fffff880`0a738000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`017f0000 fffff880`017fe000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`015e1000 fffff880`015ed000   dump_pciidex
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`015ed000 fffff880`015f8000   dump_msahci.
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000B000
    fffff880`013d8000 fffff880`013eb000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`05bae000 fffff880`05bb8000   acpials.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000A000
    fffff880`05bb8000 fffff880`05be9000   WUDFRd.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00031000
    fffff880`00fad000 fffff880`00fd7000   cdrom.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0002A000
    
    
     
  3. logrady

    logrady New Member

    Joined:
    Feb 6, 2011
    Messages:
    12
    Likes Received:
    0
     

    Attached Files:

  4. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    Sounds good. Should crashes reoccur, attach CPU-Z memory tab too.
     
  5. logrady

    logrady New Member

    Joined:
    Feb 6, 2011
    Messages:
    12
    Likes Received:
    0
    I'm hoping it was the virus scanner. I also had problems with Ad-Aware when I first got the machine and took that off immediately. I had the SSD replaced by Dell while it was still under warranty. Not surprisingly the problems started all over again. It seems like the Dell techs only know how to troubleshoot by re-installing the OS and/or replacing the hard drive.

    I've attached the CPU-Z memory tab that was taken before I made the changes for reference. Will follow-up with it a fresh version if I start experiencing problems. Thanks again for your help.
     

    Attached Files:

  6. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    You didn't attach the memory tab, the one you did is CPU, not memory. Should a bsod happen again, attach the tab.
     
  7. logrady

    logrady New Member

    Joined:
    Feb 6, 2011
    Messages:
    12
    Likes Received:
    0
    My mistake. I think this is the correct one, which was created before the changes were completed.
     

    Attached Files:

  8. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    Set right, 1066Mhz 7-7-7-20.
     
  9. logrady

    logrady New Member

    Joined:
    Feb 6, 2011
    Messages:
    12
    Likes Received:
    0
    Sorry, I don't know how to do that. I tried making a change in the CPU-Z interface, replacing the 533.3 MHz with the value above but it will not allow me to edit. Is there another tool to do this? Do I need to make this change in the BIOS? Thanks.
     
  10. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    Lol, by "Set right, 1066Mhz 7-7-7-20." I mean your RAM is currently set right, do not change anything. : )
     
  11. logrady

    logrady New Member

    Joined:
    Feb 6, 2011
    Messages:
    12
    Likes Received:
    0
    Unfortunately it has crashed again. Find enclosed the dump file as well as the memory tab from CPU-Z.View attachment 020911-12277-01.dmp memory_feb9.JPG

    Thanks for any suggestions.
     
  12. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    It is not unusual for a system with so many outdated drivers as in your case.



    020911-12277-01.dmp
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    PROCESS_NAME: csrss.exe
    c0000006 (In-page I/O error)
    Probably caused by : hardware_disk



    The problem comes from outdated drivers:

    ACPI driver for your motherboard
    ACPIKeyLight.sys Thu Jul 16 17:43:48 2009

    Broadcom Bluetooth
    btwavdt.sys Thu Jun 25 01:50:13 2009
    btwaudio.sys Wed Jul 01 09:54:56 2009
    btwavdt.sys Thu Jun 25 01:50:13 2009
    btwl2cap.sys Fri Apr 03 20:28:45 2009
    btwrchid.sys Thu Jun 25 01:51:37 2009


    Citrix
    ctxusbm.sys Mon Sep 07 14:09:28 2009


    Intel GMA
    igdkmd64.sys Fri Jul 03 12:42:03 2009


    Webcam
    OA005Ufd.sys Thu Oct 16 06:02:13 2008
    OA005Vid.sys Tue Oct 21 05:45:01 2008

    IDT PC Audio
    stwrt64.sys Mon Jun 29 13:52:05 2009






    Crash Dumps:

    Code:
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\020911-12277-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c0d000 PsLoadedModuleList = 0xfffff800`02e4ae50
    Debug session time: Wed Feb  9 19:27:51.130 2011 (UTC - 5:00)
    System Uptime: 0 days 6:27:09.019
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .................................
    Loading User Symbols
    Loading unloaded module list
    .........
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck F4, {3, fffffa8006046b30, fffffa8006046e10, fffff80002f885d0}
    
    Probably caused by : hardware_disk
    
    Followup: MachineOwner
    ---------
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    CRITICAL_OBJECT_TERMINATION (f4)
    A process or thread crucial to system operation has unexpectedly exited or been
    terminated.
    Several processes and threads are necessary for the operation of the
    system; when they are terminated (for any reason), the system can no
    longer function.
    Arguments:
    Arg1: 0000000000000003, Process
    Arg2: fffffa8006046b30, Terminating object
    Arg3: fffffa8006046e10, Process image file name
    Arg4: fffff80002f885d0, Explanatory message (ascii)
    
    Debugging Details:
    ------------------
    
    
    PROCESS_OBJECT: fffffa8006046b30
    
    IMAGE_NAME:  hardware_disk
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    FAULTING_MODULE: 0000000000000000 
    
    PROCESS_NAME:  csrss.exe
    
    EXCEPTION_RECORD:  fffff88005ff5b38 -- (.exr 0xfffff88005ff5b38)
    ExceptionAddress: 0000000076fa51df
       ExceptionCode: c0000006 (In-page I/O error)
      ExceptionFlags: 00000000
    NumberParameters: 3
       Parameter[0]: 0000000000000000
       Parameter[1]: 000007fefcf0d8a8
       Parameter[2]: 00000000c000000e
    Inpage operation failed at 000007fefcf0d8a8, due to I/O error 00000000c000000e
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    CURRENT_IRQL:  0
    
    ERROR_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
    
    EXCEPTION_PARAMETER1:  0000000000000000
    
    EXCEPTION_PARAMETER2:  000007fefcf0d8a8
    
    EXCEPTION_PARAMETER3:  00000000c000000e
    
    IO_ERROR: (NTSTATUS) 0xc000000e - A device which does not exist was specified.
    
    EXCEPTION_STR:  0xc0000006_c000000e
    
    FAULTING_IP: 
    +23a
    00000000`76fa51df ??              ???
    
    BUGCHECK_STR:  0xF4_IOERR_C000000E
    
    FOLLOWUP_IP: 
    +23a
    000007fe`fcf0d8a8 ??              ???
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: hardware_disk
    
    STACK_COMMAND:  kb
    
    FAILURE_BUCKET_ID:  X64_0xF4_IOERR_C000000E_IMAGE_hardware_disk
    
    BUCKET_ID:  X64_0xF4_IOERR_C000000E_IMAGE_hardware_disk
    
    Followup: MachineOwner
    ---------
    
    
    
    



    Drivers:

    Code:
    start             end                 module name
    fffff880`00f88000 fffff880`00fdf000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
    fffff880`04fe7000 fffff880`04ff1000   ACPIKeyLight ACPIKeyLight.sys Thu Jul 16 17:43:48 2009 (4A5F9F14)
    fffff880`02c99000 fffff880`02d23000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`041ae000 fffff880`041c4000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`00de8000 fffff880`00df3000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
    fffff880`063b3000 fffff880`063be000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
    fffff880`00e99000 fffff880`00ea2000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00ea2000 fffff880`00ecc000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
    fffff880`00e5e000 fffff880`00e6a000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
    fffff880`0196f000 fffff880`01976000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`02deb000 fffff880`02dfc000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`02776000 fffff880`02794000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
    fffff880`0462c000 fffff880`0463c000   BthEnum  BthEnum.sys  Mon Jul 13 20:06:52 2009 (4A5BCC1C)
    fffff880`0463c000 fffff880`0465c000   bthpan   bthpan.sys   Mon Jul 13 20:07:00 2009 (4A5BCC24)
    fffff880`04749000 fffff880`047d5000   bthport  bthport.sys  Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`04731000 fffff880`04749000   BTHUSB   BTHUSB.sys   Mon Jul 13 20:06:52 2009 (4A5BCC1C)
    fffff880`04720000 fffff880`04731000   btusbflt btusbflt.sys Thu Apr 08 21:11:36 2010 (4BBE7EC8)
    fffff880`06287000 fffff880`0630d000   btwaudio btwaudio.sys Wed Jul 01 09:54:56 2009 (4A4B6AB0)
    fffff880`0620c000 fffff880`06287000   btwavdt  btwavdt.sys  Thu Jun 25 01:50:13 2009 (4A431015)
    fffff880`0630d000 fffff880`06319000   btwl2cap btwl2cap.sys Fri Apr 03 20:28:45 2009 (49D6A9BD)
    fffff880`06319000 fffff880`0631c880   btwrchid btwrchid.sys Thu Jun 25 01:51:37 2009 (4A431069)
    fffff960`00710000 fffff960`00737000   cdd      cdd.dll      unavailable (00000000)
    fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
    fffff880`00d1e000 fffff880`00d7c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`04800000 fffff880`04804500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
    fffff880`01109000 fffff880`0117c000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
    fffff880`00e55000 fffff880`00e5e000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`03a8b000 fffff880`03a9b000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`0354d000 fffff880`03556000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
    fffff880`06c9a000 fffff880`06ca8000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`0182b000 fffff880`01846000   ctxusbm  ctxusbm.sys  Mon Sep 07 14:09:28 2009 (4AA54C58)
    fffff880`02c77000 fffff880`02c95000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
    fffff880`02c68000 fffff880`02c77000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`0443d000 fffff880`0445f000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`06ca8000 fffff880`06cb4000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`06cbf000 fffff880`06cd2000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`06cb4000 fffff880`06cbf000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`06cd2000 fffff880`06cde000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`04248000 fffff880`0433c000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
    fffff880`0433c000 fffff880`04382000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
    fffff880`06342000 fffff880`06378000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
    fffff880`0108b000 fffff880`0109f000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`0103f000 fffff880`0108b000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
    fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
    fffff880`01853000 fffff880`0188d000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
    fffff880`015b0000 fffff880`015fa000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
    fffff800`031e9000 fffff800`03232000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
    fffff880`04200000 fffff880`04224000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
    fffff880`06d19000 fffff880`06d32000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
    fffff880`06d32000 fffff880`06d3a080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`06d0b000 fffff880`06d19000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
    fffff880`026ae000 fffff880`02776000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
    fffff880`0141a000 fffff880`01423000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
    fffff880`04224000 fffff880`04242000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`03aad000 fffff880`041ad960   igdkmd64 igdkmd64.sys Fri Jul 03 12:42:03 2009 (4A4E34DB)
    fffff880`06c73000 fffff880`06c9a000   IntcHdmi IntcHdmi.sys Tue May 26 07:13:09 2009 (4A1BCEC5)
    fffff880`03a75000 fffff880`03a8b000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`03a00000 fffff880`03a66000   k57nd60a k57nd60a.sys Tue Jun 08 07:40:13 2010 (4C0E2C1D)
    fffff880`04ff1000 fffff880`05000000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`06d3b000 fffff880`06d49000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff800`00bc7000 fffff800`00bd1000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
    fffff880`044be000 fffff880`04501000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
    fffff880`013dd000 fffff880`013f7000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
    fffff880`01585000 fffff880`015b0000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
    fffff880`0445f000 fffff880`04464200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`06c29000 fffff880`06c3e000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`06d56000 fffff880`06d79000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`00cc6000 fffff880`00d0a000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
    fffff880`06cde000 fffff880`06cec000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`03a66000 fffff880`03a75000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`06d49000 fffff880`06d56000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`00e7f000 fffff880`00e99000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`01935000 fffff880`01966000   MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
    fffff880`0631d000 fffff880`0632d000   MpNWMon  MpNWMon.sys  Tue Sep 14 20:19:30 2010 (4C901112)
    fffff880`02794000 fffff880`027ac000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`027ac000 fffff880`027d9000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
    fffff880`034dc000 fffff880`0352a000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
    fffff880`0352a000 fffff880`0354d000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
    fffff880`00ff2000 fffff880`00ffd000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`019d4000 fffff880`019df000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00fe8000 fffff880`00ff2000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`010ab000 fffff880`01109000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
    fffff880`02c5d000 fffff880`02c68000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`01408000 fffff880`0141a000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`01433000 fffff880`01525000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`041e8000 fffff880`041f4000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`02679000 fffff880`0268c000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
    fffff880`011c8000 fffff880`011f7000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`0456d000 fffff880`04582000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
    fffff880`02dad000 fffff880`02dbc000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`02d23000 fffff880`02d68000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
    fffff880`01525000 fffff880`01585000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
    fffff880`04807000 fffff880`04fda000   NETwNs64 NETwNs64.sys Mon Oct 18 05:21:28 2010 (4CBC1198)
    fffff880`0632d000 fffff880`06342000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
    fffff880`019df000 fffff880`019f0000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`02c51000 fffff880`02c5d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff800`02c0d000 fffff800`031e9000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
    fffff880`0123a000 fffff880`013dd000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
    fffff880`01966000 fffff880`0196f000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`02626000 fffff880`02679000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
    fffff880`06c00000 fffff880`06c28da0   OA005Ufd OA005Ufd.sys Thu Oct 16 06:02:13 2008 (48F71125)
    fffff880`06d9a000 fffff880`06de51e0   OA005Vid OA005Vid.sys Tue Oct 21 05:45:01 2008 (48FDA49D)
    fffff880`02d71000 fffff880`02d97000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
    fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`00dd8000 fffff880`00de8000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`03556000 fffff880`035fc000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`04400000 fffff880`0443d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00d0a000 fffff880`00d1e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`0109f000 fffff880`010aae00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
    fffff880`041c4000 fffff880`041e8000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`0121b000 fffff880`01236000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`04481000 fffff880`044a2000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
    fffff880`044a2000 fffff880`044bc000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`02c00000 fffff880`02c51000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
    fffff880`019b9000 fffff880`019c2000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`019c2000 fffff880`019cb000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`019cb000 fffff880`019d4000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
    fffff880`04600000 fffff880`0462c000   rfcomm   rfcomm.sys   Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`0268c000 fffff880`026a4000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`03400000 fffff880`0340b000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`01400000 fffff880`01408000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`0468a000 fffff880`04720000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
    fffff880`0344a000 fffff880`034b1000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
    fffff880`0340b000 fffff880`03438000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
    fffff880`04582000 fffff880`045fd000   stwrt64  stwrt64.sys  Mon Jun 29 13:52:05 2009 (4A48FF45)
    fffff880`044bc000 fffff880`044bd480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
    fffff880`03438000 fffff880`0344a000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
    fffff880`0181e000 fffff880`0182b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
    fffff880`01800000 fffff880`0181e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
    fffff880`02dd7000 fffff880`02deb000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
    fffff960`00450000 fffff960`0045a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`0190b000 fffff880`01931000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
    fffff880`04501000 fffff880`04513000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`06cec000 fffff880`06d09000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
    fffff880`06d09000 fffff880`06d0af00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`043e5000 fffff880`043f6000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
    fffff880`04513000 fffff880`0456d000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
    fffff880`0438f000 fffff880`043e5000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
    fffff880`04382000 fffff880`0438f000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`01976000 fffff880`01984000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`01984000 fffff880`019a9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`00e6a000 fffff880`00e7f000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`00d7c000 fffff880`00dd8000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
    fffff880`0117c000 fffff880`011c8000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
    fffff880`04fda000 fffff880`04fe7000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
    fffff880`02d97000 fffff880`02dad000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
    fffff880`026a4000 fffff880`026ae000   vwifimp  vwifimp.sys  Mon Jul 13 20:07:28 2009 (4A5BCC40)
    fffff880`02dbc000 fffff880`02dd7000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
    fffff880`019a9000 fffff880`019b9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`00ed5000 fffff880`00f79000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00f79000 fffff880`00f88000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`02d68000 fffff880`02d71000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff960`00080000 fffff960`00390000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
    fffff880`043f6000 fffff880`043ff000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`00fdf000 fffff880`00fe8000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`06d79000 fffff880`06d9a000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
    
    Unloaded modules:
    fffff880`018a3000 fffff880`018d3000   CLASSPNP.SYS
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00030000
    fffff880`0188d000 fffff880`018a3000   disk.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00016000
    fffff880`063be000 fffff880`063d9000   USBSTOR.SYS
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0001B000
    fffff880`06342000 fffff880`063b3000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`018d3000 fffff880`018e1000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`018e1000 fffff880`018ed000   dump_pciidex
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`018ed000 fffff880`018f8000   dump_msahci.
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000B000
    fffff880`018f8000 fffff880`0190b000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0190b000 fffff880`01935000   cdrom.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0002A000
    
    
     
    #12 cybercore, Feb 10, 2011
    Last edited: Feb 10, 2011

Share This Page

Loading...