Hello and welcome
Analysis
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 109, {a3a039d89a123732, b3b7465eec8f0698, fffff8000363b881, 1}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption
Followup: memory_corruption
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
2) A developer attempted to set a normal kernel breakpoint using a kernel
debugger that was not attached when the system was booted. Normal breakpoints,
"bp", can only be set if the debugger is attached at boot time. Hardware
breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a039d89a123732, Reserved
Arg2: b3b7465eec8f0698, Reserved
Arg3: fffff8000363b881, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
0 : A generic data region
1 : Modification of a function or .pdata
2 : A processor IDT
3 : A processor GDT
4 : Type 1 process list corruption
5 : Type 2 process list corruption
6 : Debug routine modification
7 : Critical MSR modification
Debugging Details:
------------------
BUGCHECK_STR: 0x109
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff8000368bc40
STACK_TEXT:
fffff880`033d95d8 00000000`00000000 : 00000000`00000109 a3a039d8`9a123732 b3b7465e`ec8f0698 fffff800`0363b881 : nt!KeBugCheckEx
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff8000363b965 - nt! ?? ::FNODOBFM::`string'+21a8c
[ 0f:0b ]
1 error : !nt (fffff8000363b965)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BIT
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
Code:
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff880091ec1c8, fffff880091eba20, fffff800039c7963}
Probably caused by : memory_corruption
Followup: memory_corruption
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880091ec1c8
Arg3: fffff880091eba20
Arg4: fffff800039c7963
Debugging Details:
------------------
EXCEPTION_RECORD: fffff880091ec1c8 -- (.exr 0xfffff880091ec1c8)
ExceptionAddress: fffff800039c7963 (nt!MmCreateSection+0x0000000000000243)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000001
Parameter[1]: 0000000000000025
Attempt to write to address 0000000000000025
CONTEXT: fffff880091eba20 -- (.cxr 0xfffff880091eba20)
rax=0000000000000001 rbx=0000000000000001 rcx=fffff880091ec468
rdx=0000000000000000 rsi=0000000008000000 rdi=fffffa800695fb60
rip=fffff800039c7963 rsp=fffff880091ec400 rbp=0000000000000080
r8=0000000000000000 r9=fffff880091ec520 r10=0000000000000000
r11=0000000000000000 r12=0000000000000004 r13=fffffa80046e4f20
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00210202
nt!MmCreateSection+0x243:
fffff800`039c7963 48894824 mov qword ptr [rax+24h],rcx ds:002b:00000000`00000025=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: firefox.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000001
EXCEPTION_PARAMETER2: 0000000000000025
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800038fd100
0000000000000025
FOLLOWUP_IP:
nt!MmCreateSection+243
fffff800`039c7963 48894824 mov qword ptr [rax+24h],rcx
FAULTING_IP:
nt!MmCreateSection+243
fffff800`039c7963 48894824 mov qword ptr [rax+24h],rcx
BUGCHECK_STR: 0x24
DEFAULT_BUCKET_ID: CODE_CORRUPTION
DEVICE_OBJECT: fffffa8006788ff8
LAST_CONTROL_TRANSFER: from fffff800036e3e96 to fffff800039c7963
STACK_TEXT:
fffff880`091ec400 fffff800`036e3e96 : fffffa80`069f9438 00000000`00000000 00000000`00000000 fffff880`091ec668 : nt!MmCreateSection+0x243
fffff880`091ec600 fffff880`012587cc : fffff880`00000000 00000000`00000000 fffff8a0`0148d100 fffff880`0129f088 : nt!CcInitializeCacheMap+0x746
fffff880`091ec6e0 fffff880`012591a3 : fffffa80`065a0980 fffffa80`06788af0 fffff880`091ec801 fffff880`091ec800 : Ntfs!NtfsCommonWrite+0x2f68
fffff880`091ec890 fffff880`00c02bcf : fffffa80`06788fb0 fffffa80`06788af0 fffffa80`069cd010 00000000`00000001 : Ntfs!NtfsFsdWrite+0x1c3
fffff880`091ec950 fffff880`00c016df : fffffa80`064868e0 00000000`00000001 fffffa80`06486800 fffffa80`06788af0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`091ec9e0 fffff800`039d321b : 00000000`00000001 fffffa80`046e4f20 00000000`00000001 fffffa80`06788af0 : fltmgr!FltpDispatch+0xcf
fffff880`091eca40 fffff800`039ddc83 : fffffa80`06788ff8 00000000`00000000 fffffa80`046e4f20 fffff880`009e9180 : nt!IopSynchronousServiceTail+0xfb
fffff880`091ecab0 fffff800`036c9ed3 : fffffa80`03b5eb01 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWriteFile+0x7e2
fffff880`091ecbb0 00000000`73dd2e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0016e788 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73dd2e09
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff800039c7965 - nt!MmCreateSection+245
[ 4c:48 ]
1 error : !nt (fffff800039c7965)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BIT
STACK_COMMAND: .cxr 0xfffff880091eba20 ; kb
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
DRIVERS
Code:
start end module name
fffff800`00b9a000 fffff800`00ba4000 kdcom kdcom.dll Sat Feb 05 16:52:49 2011 (4D4D8061)
fffff800`0361b000 fffff800`03664000 hal hal.dll Sat Nov 20 13:00:25 2010 (4CE7C669)
fffff800`03664000 fffff800`03c4d000 nt ntkrnlmp.exe Thu Jun 23 03:53:23 2011 (4E02AAA3)
fffff880`00c00000 fffff880`00c4c000 fltmgr fltmgr.sys Sat Nov 20 09:19:24 2010 (4CE7929C)
fffff880`00c4c000 fffff880`00c60000 fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
fffff880`00c98000 fffff880`00ce7000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:03:51 2010 (4CE7C737)
fffff880`00ce7000 fffff880`00cfb000 PSHED PSHED.dll Tue Jul 14 02:32:23 2009 (4A5BE027)
fffff880`00cfb000 fffff880`00d59000 CLFS CLFS.SYS Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`00d59000 fffff880`00db5000 volmgrx volmgrx.sys Sat Nov 20 09:20:43 2010 (4CE792EB)
fffff880`00db5000 fffff880`00ddf000 ataport ataport.SYS Sat Nov 20 09:19:15 2010 (4CE79293)
fffff880`00e00000 fffff880`00e33000 pci pci.sys Sat Nov 20 09:19:11 2010 (4CE7928F)
fffff880`00e33000 fffff880`00e48000 volmgr volmgr.sys Sat Nov 20 09:19:28 2010 (4CE792A0)
fffff880`00e48000 fffff880`00e58000 PCIIDEX PCIIDEX.SYS Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`00e58000 fffff880`00e61000 atapi atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`00e61000 fffff880`00e6c000 amdxata amdxata.sys Fri Mar 19 16:18:18 2010 (4BA3A3CA)
fffff880`00e70000 fffff880`00f30000 CI CI.dll Sat Nov 20 13:12:36 2010 (4CE7C944)
fffff880`00f30000 fffff880`00fd4000 Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
fffff880`00fd4000 fffff880`00fe3000 WDFLDR WDFLDR.SYS Tue Jul 14 00:19:54 2009 (4A5BC11A)
fffff880`00fe3000 fffff880`00ffd000 mountmgr mountmgr.sys Sat Nov 20 09:19:21 2010 (4CE79299)
fffff880`01000000 fffff880`01057000 ACPI ACPI.sys Sat Nov 20 09:19:16 2010 (4CE79294)
fffff880`01057000 fffff880`01060000 WMILIB WMILIB.SYS Tue Jul 14 00:19:51 2009 (4A5BC117)
fffff880`01060000 fffff880`0106a000 msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
fffff880`0106a000 fffff880`01077000 vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
fffff880`01077000 fffff880`0108c000 partmgr partmgr.sys Sat Nov 20 09:20:00 2010 (4CE792C0)
fffff880`0108c000 fffff880`011f2000 sptd sptd.sys Sun Feb 27 19:29:52 2011 (4D6AA630)
fffff880`011f2000 fffff880`011fa000 intelide intelide.sys Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`01213000 fffff880`013b6000 Ntfs Ntfs.sys Fri Mar 11 03:39:39 2011 (4D79997B)
fffff880`013b6000 fffff880`013e0000 cdrom cdrom.sys Sat Nov 20 09:19:20 2010 (4CE79298)
fffff880`01400000 fffff880`01494000 tdrpman tdrpman.sys Mon Nov 12 13:36:33 2007 (473856E1)
fffff880`014d6000 fffff880`01534000 msrpc msrpc.sys Sat Nov 20 09:21:56 2010 (4CE79334)
fffff880`01534000 fffff880`0154f000 ksecdd ksecdd.sys Sat Nov 20 09:21:15 2010 (4CE7930B)
fffff880`0154f000 fffff880`015c1000 cng cng.sys Sat Nov 20 10:08:45 2010 (4CE79E2D)
fffff880`015c1000 fffff880`015d2000 pcw pcw.sys Tue Jul 14 00:19:27 2009 (4A5BC0FF)
fffff880`015d2000 fffff880`015dc000 Fs_Rec Fs_Rec.sys Tue Jul 14 00:19:45 2009 (4A5BC111)
fffff880`01600000 fffff880`01660000 NETIO NETIO.SYS Sat Nov 20 09:23:13 2010 (4CE79381)
fffff880`01660000 fffff880`0168b000 ksecpkg ksecpkg.sys Sat Nov 20 10:10:34 2010 (4CE79E9A)
fffff880`0168b000 fffff880`016c5000 fvevol fvevol.sys Sat Nov 20 09:24:06 2010 (4CE793B6)
fffff880`016c5000 fffff880`016db000 disk disk.sys Tue Jul 14 00:19:57 2009 (4A5BC11D)
fffff880`016dc000 fffff880`017cf000 ndis ndis.sys Sat Nov 20 09:23:30 2010 (4CE79392)
fffff880`017cf000 fffff880`017ff000 CLASSPNP CLASSPNP.SYS Sat Nov 20 09:19:23 2010 (4CE7929B)
fffff880`01800000 fffff880`0183a000 rdyboost rdyboost.sys Sat Nov 20 09:43:10 2010 (4CE7982E)
fffff880`0183a000 fffff880`0184c000 mup mup.sys Tue Jul 14 00:23:45 2009 (4A5BC201)
fffff880`0184c000 fffff880`01855000 hwpolicy hwpolicy.sys Sat Nov 20 09:18:54 2010 (4CE7927E)
fffff880`0185d000 fffff880`01a61000 tcpip tcpip.sys Tue Jun 21 04:33:55 2011 (4E001123)
fffff880`01a61000 fffff880`01aab000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:21:37 2010 (4CE79321)
fffff880`01aab000 fffff880`01b5b000 timntr timntr.sys Wed Aug 29 13:38:23 2007 (46D568BF)
fffff880`01b5b000 fffff880`01b6b000 vmstorfl vmstorfl.sys Sat Nov 20 09:57:30 2010 (4CE79B8A)
fffff880`01b6b000 fffff880`01bb7000 volsnap volsnap.sys Sat Nov 20 09:20:08 2010 (4CE792C8)
fffff880`01bb7000 fffff880`01bbf000 spldr spldr.sys Mon May 11 17:56:27 2009 (4A0858BB)
fffff880`01bbf000 fffff880`01bfa000 snapman snapman.sys Thu Nov 22 08:19:33 2007 (47453B95)
fffff880`02e00000 fffff880`02e1b000 wanarp wanarp.sys Sat Nov 20 10:52:36 2010 (4CE7A874)
fffff880`02e1b000 fffff880`02e2f000 termdd termdd.sys Sat Nov 20 11:03:40 2010 (4CE7AB0C)
fffff880`02e2f000 fffff880`02e80000 rdbss rdbss.sys Sat Nov 20 09:27:51 2010 (4CE79497)
fffff880`02e80000 fffff880`02e8c000 nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
fffff880`02e8c000 fffff880`02e97000 mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
fffff880`02e97000 fffff880`02ea6000 discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
fffff880`02ea6000 fffff880`02ee9000 ks ks.sys Sat Nov 20 10:33:23 2010 (4CE7A3F3)
fffff880`02eea000 fffff880`02f73000 afd afd.sys Mon Apr 25 03:33:58 2011 (4DB4DD96)
fffff880`02f73000 fffff880`02f80000 aswRdr aswRdr.SYS Tue Sep 06 21:36:39 2011 (4E668457)
fffff880`02f80000 fffff880`02f89000 wfplwf wfplwf.sys Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02f89000 fffff880`02faf000 pacer pacer.sys Sat Nov 20 10:52:18 2010 (4CE7A862)
fffff880`02faf000 fffff880`02fc5000 vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
fffff880`02fc5000 fffff880`02fd4000 netbios netbios.sys Tue Jul 14 01:09:26 2009 (4A5BCCB6)
fffff880`02fd4000 fffff880`02ff1000 serial serial.sys Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`03c01000 fffff880`03c5b000 usbhub usbhub.sys Fri Mar 25 03:29:25 2011 (4D8C0C15)
fffff880`03c5b000 fffff880`03c70000 NDProxy NDProxy.SYS Sat Nov 20 10:52:20 2010 (4CE7A864)
fffff880`03c70000 fffff880`03ccc000 HdAudio HdAudio.sys Sat Nov 20 10:44:23 2010 (4CE7A687)
fffff880`03ccc000 fffff880`03d09000 portcls portcls.sys Tue Jul 14 01:06:27 2009 (4A5BCC03)
fffff880`03d09000 fffff880`03d2b000 drmk drmk.sys Tue Jul 14 02:01:25 2009 (4A5BD8E5)
fffff880`03d2b000 fffff880`03d30200 ksthunk ksthunk.sys Tue Jul 14 01:00:19 2009 (4A5BCA93)
fffff880`03d31000 fffff880`03d3d000 Dxapi Dxapi.sys Tue Jul 14 00:38:28 2009 (4A5BC574)
fffff880`03d3d000 fffff880`03d4b000 monitor monitor.sys Tue Jul 14 00:38:52 2009 (4A5BC58C)
fffff880`03d4b000 fffff880`03d68000 usbccgp usbccgp.sys Fri Mar 25 03:29:14 2011 (4D8C0C0A)
fffff880`03d68000 fffff880`03d69f00 USBD USBD.SYS Fri Mar 25 03:28:59 2011 (4D8C0BFB)
fffff880`03d6a000 fffff880`03d78000 hidusb hidusb.sys Sat Nov 20 10:43:49 2010 (4CE7A665)
fffff880`03d78000 fffff880`03d91000 HIDCLASS HIDCLASS.SYS Sat Nov 20 10:43:49 2010 (4CE7A665)
fffff880`03d91000 fffff880`03d99080 HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
fffff880`03d9a000 fffff880`03da8000 kbdhid kbdhid.sys Sat Nov 20 10:33:25 2010 (4CE7A3F5)
fffff880`03da8000 fffff880`03db5000 mouhid mouhid.sys Tue Jul 14 01:00:20 2009 (4A5BCA94)
fffff880`03e00000 fffff880`03e12000 aswTdi aswTdi.SYS Tue Sep 06 21:36:39 2011 (4E668457)
fffff880`03e12000 fffff880`03e57000 netbt netbt.sys Sat Nov 20 09:23:18 2010 (4CE79386)
fffff880`03ea6000 fffff880`03f3e000 aswSnx aswSnx.SYS Tue Sep 06 21:38:16 2011 (4E6684B8)
fffff880`03f3e000 fffff880`03f47000 Null Null.SYS Tue Jul 14 00:19:37 2009 (4A5BC109)
fffff880`03f47000 fffff880`03f4e000 Beep Beep.SYS Tue Jul 14 01:00:13 2009 (4A5BCA8D)
fffff880`03f4e000 fffff880`03f5c000 vga vga.sys Tue Jul 14 00:38:47 2009 (4A5BC587)
fffff880`03f5c000 fffff880`03f81000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
fffff880`03f81000 fffff880`03f91000 watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
fffff880`03f91000 fffff880`03f9a000 RDPCDD RDPCDD.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`03f9a000 fffff880`03fa3000 rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
fffff880`03fa3000 fffff880`03fac000 rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
fffff880`03fac000 fffff880`03fb7000 Msfs Msfs.SYS Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`03fb7000 fffff880`03fc8000 Npfs Npfs.SYS Tue Jul 14 00:19:48 2009 (4A5BC114)
fffff880`03fc8000 fffff880`03fea000 tdx tdx.sys Sat Nov 20 09:21:54 2010 (4CE79332)
fffff880`03fea000 fffff880`03ff7000 TDI TDI.SYS Sat Nov 20 09:22:06 2010 (4CE7933E)
fffff880`04000000 fffff880`0400d000 vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
fffff880`0400d000 fffff880`0400e480 swenum swenum.sys Tue Jul 14 01:00:18 2009 (4A5BCA92)
fffff880`04013000 fffff880`04107000 dxgkrnl dxgkrnl.sys Sat Nov 20 09:50:50 2010 (4CE799FA)
fffff880`04107000 fffff880`0414d000 dxgmms1 dxgmms1.sys Sat Nov 20 09:49:53 2010 (4CE799C1)
fffff880`0414d000 fffff880`04171000 HDAudBus HDAudBus.sys Sat Nov 20 10:43:42 2010 (4CE7A65E)
fffff880`04171000 fffff880`04183000 L1E62x64 L1E62x64.sys Thu Jun 11 07:45:22 2009 (4A30A802)
fffff880`04183000 fffff880`04190000 usbuhci usbuhci.sys Fri Mar 25 03:29:03 2011 (4D8C0BFF)
fffff880`04190000 fffff880`041e6000 USBPORT USBPORT.SYS Fri Mar 25 03:29:12 2011 (4D8C0C08)
fffff880`041e6000 fffff880`041f7000 usbehci usbehci.sys Fri Mar 25 03:29:04 2011 (4D8C0C00)
fffff880`041f7000 fffff880`041ff000 ASACPI ASACPI.sys Mon Mar 28 03:30:36 2005 (42476C4C)
fffff880`04227000 fffff880`042aa000 csc csc.sys Sat Nov 20 09:27:12 2010 (4CE79470)
fffff880`042aa000 fffff880`042c8000 dfsc dfsc.sys Sat Nov 20 09:26:31 2010 (4CE79447)
fffff880`042c8000 fffff880`042d9000 blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
fffff880`042d9000 fffff880`04329000 aswSP aswSP.SYS Tue Sep 06 21:38:14 2011 (4E6684B6)
fffff880`04329000 fffff880`0434f000 tunnel tunnel.sys Sat Nov 20 10:51:50 2010 (4CE7A846)
fffff880`0434f000 fffff880`04365000 intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
fffff880`04365000 fffff880`04380000 raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
fffff880`04380000 fffff880`043a1000 raspptp raspptp.sys Sat Nov 20 10:52:31 2010 (4CE7A86F)
fffff880`043a1000 fffff880`043bb000 rassstp rassstp.sys Tue Jul 14 01:10:25 2009 (4A5BCCF1)
fffff880`043bb000 fffff880`043ca000 kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`043ca000 fffff880`043d9000 mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
fffff880`043d9000 fffff880`043eb000 umbus umbus.sys Sat Nov 20 10:44:37 2010 (4CE7A695)
fffff880`05400000 fffff880`05421000 WudfPf WudfPf.sys Sat Nov 20 10:42:44 2010 (4CE7A624)
fffff880`05421000 fffff880`05436000 lltdio lltdio.sys Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`05436000 fffff880`05489000 nwifi nwifi.sys Tue Jul 14 01:07:23 2009 (4A5BCC3B)
fffff880`05489000 fffff880`0549c000 ndisuio ndisuio.sys Sat Nov 20 10:50:08 2010 (4CE7A7E0)
fffff880`0549c000 fffff880`054b4000 rspndr rspndr.sys Tue Jul 14 01:08:50 2009 (4A5BCC92)
fffff880`054dc000 fffff880`05531000 udfs udfs.sys Sat Nov 20 09:26:11 2010 (4CE79433)
fffff880`05531000 fffff880`0553f000 crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
fffff880`0553f000 fffff880`0554b000 dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`0554b000 fffff880`05554000 dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
fffff880`05554000 fffff880`05567000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
fffff880`05567000 fffff880`0558a000 luafv luafv.sys Tue Jul 14 00:26:13 2009 (4A5BC295)
fffff880`0558a000 fffff880`055c4000 aswMonFlt aswMonFlt.sys Tue Sep 06 21:36:29 2011 (4E66844D)
fffff880`055c4000 fffff880`055cd000 aswFsBlk aswFsBlk.SYS Tue Sep 06 21:36:13 2011 (4E66843D)
fffff880`055cd000 fffff880`055e4000 tifsfilt tifsfilt.sys Wed Aug 29 13:37:29 2007 (46D56889)
fffff880`07400000 fffff880`0742d000 mrxsmb mrxsmb.sys Wed Apr 27 03:40:38 2011 (4DB78226)
fffff880`0742d000 fffff880`0747b000 mrxsmb10 mrxsmb10.sys Sat Jul 09 03:46:28 2011 (4E17C104)
fffff880`0747b000 fffff880`0749f000 mrxsmb20 mrxsmb20.sys Wed Apr 27 03:39:37 2011 (4DB781E9)
fffff880`074d8000 fffff880`075a1000 HTTP HTTP.sys Sat Nov 20 09:24:30 2010 (4CE793CE)
fffff880`075a1000 fffff880`075bf000 bowser bowser.sys Wed Feb 23 04:55:04 2011 (4D649328)
fffff880`075bf000 fffff880`075d7000 mpsdrv mpsdrv.sys Tue Jul 14 01:08:25 2009 (4A5BCC79)
fffff880`08c8d000 fffff880`08d33000 peauth peauth.sys Tue Jul 14 02:01:19 2009 (4A5BD8DF)
fffff880`08d33000 fffff880`08d3e000 secdrv secdrv.SYS Wed Sep 13 14:18:38 2006 (4508052E)
fffff880`08d3e000 fffff880`08d6f000 srvnet srvnet.sys Fri Apr 29 04:05:35 2011 (4DBA2AFF)
fffff880`08d6f000 fffff880`08d81000 tcpipreg tcpipreg.sys Sat Nov 20 10:51:48 2010 (4CE7A844)
fffff880`08d81000 fffff880`08dea000 srv2 srv2.sys Fri Apr 29 04:05:46 2011 (4DBA2B0A)
fffff880`09031000 fffff880`090c9000 srv srv.sys Fri Apr 29 04:06:06 2011 (4DBA2B1E)
fffff880`090c9000 fffff880`090d1000 TuneUpUtilitiesDriver64 TuneUpUtilitiesDriver64.sys Thu Sep 17 12:54:52 2009 (4AB2238C)
fffff880`0914b000 fffff880`09154000 ALSysIO64 ALSysIO64.sys Sun Jul 10 01:27:45 2011 (4E18F201)
fffff880`0f200000 fffff880`0f210000 CompositeBus CompositeBus.sys Sat Nov 20 10:33:17 2010 (4CE7A3ED)
fffff880`0f210000 fffff880`0f226000 AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
fffff880`0f226000 fffff880`0f24a000 rasl2tp rasl2tp.sys Sat Nov 20 10:52:34 2010 (4CE7A872)
fffff880`0f24a000 fffff880`0f256000 ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
fffff880`0f256000 fffff880`0f285000 ndiswan ndiswan.sys Sat Nov 20 10:52:32 2010 (4CE7A870)
fffff880`0f285000 fffff880`0f290000 rdpbus rdpbus.sys Tue Jul 14 01:17:46 2009 (4A5BCEAA)
fffff880`0f29b000 fffff880`0ff49000 nvlddmkm nvlddmkm.sys Sat May 21 05:07:04 2011 (4DD73A68)
fffff880`0ff49000 fffff880`0ff4e000 nvBridge nvBridge.kmd Sat May 21 04:58:23 2011 (4DD7385F)
fffff880`0ff4e000 fffff880`0ffc1000 netr6164 netr6164.sys Fri Oct 16 04:15:23 2009 (4AD7E54B)
fffff880`0ffc1000 fffff880`0ffde000 parport parport.sys Tue Jul 14 01:00:40 2009 (4A5BCAA8)
fffff880`0ffde000 fffff880`0ffea000 serenum serenum.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
fffff880`0ffea000 fffff880`0fff7000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:17:04 2009 (4A1151C0)
fffff960`00060000 fffff960`00373000 win32k win32k.sys unavailable (00000000)
fffff960`00540000 fffff960`0054a000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`006a0000 fffff960`006c7000 cdd cdd.dll unavailable (00000000)
Unloaded modules:
fffff880`09142000 fffff880`0914b000 ALSysIO64.sy
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`090d1000 fffff880`09142000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`01494000 fffff880`014a2000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`014a2000 fffff880`014ae000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`014ae000 fffff880`014b7000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`014b7000 fffff880`014ca000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
outdated drivers
tdrpman tdrpman.sys Mon Nov 12 13:36:33 2007 (473856E1)
Acronis Try&Decide and Restore Points Volume Filter Driver
also included in Seagate DiscWizard
timntr timntr.sys Wed Aug 29 13:38:23 2007
Acronis True Image Backup Archive Explorer
also included in Seagate DiscWizard
snapman.sys Thu Nov 22 08:19:33 2007
Acronis True Image Snapshot Manager driver
also included in Seagate DiscWizard
tifsfilt tifsfilt.sys Wed Aug 29 13:37:29 2007
Acronis True Image FS Filter
also included in Seagate DiscWizard
ASACPI ASACPI.sys Mon Mar 28 03:30:36 2005 - Well known for causing BSOD's
- You can disable the ATK0110 ACPI Utility in the DeviceManager (under System Devices) with no apparent issues. OR (and if disabling does cause issues)
- There is an update here: Asus ATK0110 . Look under the sub-heading: Utilities. 12th one down.
Install - Manual method - Download the and extract it to a folder.
- Open the Device Manager.
- Right click the device you wish to change the for. You can select Properties > > Details to check you have the right device. In this case System Devices >> ATK0110 ACPI Utility
- Choose Update Software.
- Select Browse My Computer For Software.
- Select Let me pick from a list of device on my computer.
- Select Have disk...
- Select Browse..
- Navigate to the extracted folder and double click on the .inf file
- Hit OK, then Next and the (s) will then begin to install.
- After it has installed, GoTo C:\Windows\System32\. Locate the Asacpi.sys , right click it and check the dates under its properties. You're looking for a "Modified" date of 2009 or 2010. Occasionally it can be a bit stubborn to change.
Id like to thank Elmer for writing this fantastic guide on removing ASACPI.sys Please update ALL of your current drivers
update things like your bios, graphics card etc ensuring all the latest drivers are on
your computer
make sure you have installed all microsoft updates including service packs
Run in command promt the following command
sfc /scannow
and then....
chkdsk /r
_______________________
download a program called CPU-Z
once installed please take pictures of each tab, CPU,MEMORY Etc, this is so we can look at the various setup i.e volatages,ram timings etc