Windows 7 Random Blue Screens all pointing to ntkrnlmp.exe

Jeff Gedgaud · Jan 18, 2011

I have been getting random blue screens for a couple weeks and am having problems tracking down the source.

Windows 7 Home Premium 64 Bit
Asus M4N75TD Mobo
Athlon II X4 635 CPU
8 GB RAM OCZ & Crucial
Galaxy GTX 460 x2 in SLI
1000 watt PSU
Noctua NH-D14 cpu cooler
Kaspersky Internet Security Suite

I listed everything I think is relevant for system, this is a new computer build as of a month ago and for two weeks I did not have a problem. I know it could be a lot of different thing with new build but just wanted to try and troubleshoot this through the dumps and such to see if I can get a culprit.

I ran memtest and got a couple hours of good results, 2 passes with OCZ memory. I do have another set of crucial memory that5 I will switch out as soon as I am done posting this to remove that as a problem.

I ran driver verifier and did not receive a bsod with that running for all non microsoft drivers.

BSOD's have been 7F FC D1 OA but all have ntkrnlmp.exe as faulting problems in memory dumps. I have read dumps using Windows Debugging tools but cannot find any source other then the exe that it refers to but many say this is probably not the cause.

I do load a lot of various software as I review computer products but have never had the multitude of problems with BSOD's and not being able to pinpoint a single driver or hardware that I installed like this.

I have attached memory dump files in winrar. I have included four memory dumps, the others were erased while doing some troubleshooting last week.

cybercore · Jan 18, 2011

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)

Update:

Nvidia nVclock:

nvoclk64.sys Tue Sep 15 17:59:25 2009

nVidia nForce:

nvsmu.sys Thu Nov 12 09:43:42 2009
NVIDIA nForce(TM) SMU Microcontroller Driver

Uninstall Kaspersky and replace it with MSE:

klmouflt.sys Mon Nov 02 11:26:06 2009

Removal tool for Kaspersky Lab products

Link Removed due to 404 Error

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\011811-22963-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is...

cybercore · Jan 18, 2011

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)

Update:

Nvidia nVclock:

nvoclk64.sys Tue Sep 15 17:59:25 2009

nVidia nForce:

nvsmu.sys Thu Nov 12 09:43:42 2009
NVIDIA nForce(TM) SMU Microcontroller Driver

Uninstall Kaspersky and replace it with MSE:

klmouflt.sys Mon Nov 02 11:26:06 2009

Removal tool for Kaspersky Lab products

Link Removed due to 404 Error

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\011811-22963-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03e4f000 PsLoadedModuleList = 0xfffff800`0408ce50
Debug session time: Tue Jan 18 08:53:59.099 2011 (UTC - 5:00)
System Uptime: 0 days 0:19:53.003
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.......................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck FC, {fffff88007ff6c01, 80000001f04bc963, fffff88007ff6aa0, 2}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+42497 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory.  The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff88007ff6c01, Virtual address for the attempted execute.
Arg2: 80000001f04bc963, PTE contents.
Arg3: fffff88007ff6aa0, (reserved)
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xFC

PROCESS_NAME:  PnkBstrB.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88007ff6aa0 -- (.trap 0xfffff88007ff6aa0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffffffc0000005 rbx=0000000000000000 rcx=40304cd399640000
rdx=fffff88007ff7000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88007ff6c01 rsp=fffff88007ff6c30 rbp=fffff88007ff6ca0
 r8=fffff88007ff7000  r9=ffffffffc0000005 r10=0000000000000000
r11=fffff88007ff51a0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
fffff880`07ff6c01 0000            add     byte ptr [rax],al ds:ffffffff`c0000005=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003f3fbcf to fffff80003ebf740

STACK_TEXT:  
fffff880`07ff6938 fffff800`03f3fbcf : 00000000`000000fc fffff880`07ff6c01 80000001`f04bc963 fffff880`07ff6aa0 : nt!KeBugCheckEx
fffff880`07ff6940 fffff800`03ebd82e : 00000000`00000008 00000000`0042c65a fffffa80`0ab46000 fffff880`035d5180 : nt! ?? ::FNODOBFM::`string'+0x42497
fffff880`07ff6aa0 fffff880`07ff6c01 : ffffffff`ffffd8f0 00000000`7efad000 00000000`00000000 00001f80`02080000 : nt!KiPageFault+0x16e
fffff880`07ff6c30 ffffffff`ffffd8f0 : 00000000`7efad000 00000000`00000000 00001f80`02080000 00000000`ffffffb4 : 0xfffff880`07ff6c01
fffff880`07ff6c38 00000000`7efad000 : 00000000`00000000 00001f80`02080000 00000000`ffffffb4 00000000`00000001 : 0xffffffff`ffffd8f0
fffff880`07ff6c40 00000000`00000000 : 00001f80`02080000 00000000`ffffffb4 00000000`00000001 00000000`0101ff34 : 0x7efad000


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+42497
fffff800`03f3fbcf cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+42497

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+42497

BUCKET_ID:  X64_0xFC_nt!_??_::FNODOBFM::_string_+42497

Followup: MachineOwner
---------

Drivers:

Code:

fffff880`08198000 fffff880`081c3000   000      000.fcl      Fri Sep 26 09:11:22 2008 (48DCDF7A)
fffff880`04794000 fffff880`047d2000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f19000 fffff880`00f70000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03243000 fffff880`032cd000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04a5f000 fffff880`04a75000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`032cd000 fffff880`032e2000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00df4000 fffff880`00dff000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`047d2000 fffff880`047f5000   AnyDVD   AnyDVD.sys   Wed Dec 01 14:06:20 2010 (4CF69CAC)
fffff880`0401d000 fffff880`0406c000   ArcSec   ArcSec.sys   Mon Sep 20 20:38:32 2010 (4C97FE88)
fffff880`0406c000 fffff880`04074000   ASACPI   ASACPI.sys   Wed Jul 15 23:31:29 2009 (4A5E9F11)
fffff880`04017000 fffff880`0401d000   AsIO     AsIO.sys     Mon Aug 03 03:03:16 2009 (4A768BB4)
fffff880`04011000 fffff880`04017000   AsUpIO   AsUpIO.sys   Sun Jul 05 22:21:38 2009 (4A515FB2)
fffff880`09071000 fffff880`0907c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00db6000 fffff880`00dbf000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dbf000 fffff880`00de9000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00930000 fffff960`00991000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`0338f000 fffff880`03396000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04000000 fffff880`04011000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07b56000 fffff880`07b74000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007a0000 fffff960`007c7000   cdd      cdd.dll      unavailable (00000000)
fffff880`05cf4000 fffff880`05d11000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`01030000 fffff880`0105a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cdc000 fffff880`00d9c000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01000000 fffff880`01030000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c7e000 fffff880`00cdc000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010dc000 fffff880`0114f000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04a4f000 fffff880`04a5f000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03087000 fffff880`03095000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`041d9000 fffff880`041f7000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`041ca000 fffff880`041d9000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0183a000 fffff880`01850000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03024000 fffff880`0304c000   Dot4     Dot4.sys     Mon Jul 13 20:00:16 2009 (4A5BCA90)
fffff880`0304c000 fffff880`03056000   Dot4Prt  Dot4Prt.sys  Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04748000 fffff880`04758000   dot4usb  dot4usb.sys  Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`05dde000 fffff880`05e00000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`030a1000 fffff880`030aa000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`03095000 fffff880`030a1000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`030aa000 fffff880`030bd000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05c06000 fffff880`05c12000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04af7000 fffff880`04beb000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`041be000 fffff880`041ca000   ElbyCDIO ElbyCDIO.sys Thu Dec 16 17:58:13 2010 (4D0A9985)
fffff880`08072000 fffff880`080a8000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0105d000 fffff880`01071000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00c00000 fffff880`00c4c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01800000 fffff880`0183a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04600000 fffff880`0460d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`03e06000 fffff800`03e4f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04770000 fffff880`04794000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05d45000 fffff880`05da1000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`046af000 fffff880`046c8000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`05c86000 fffff880`05c8e080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05c12000 fffff880`05c20000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07a8e000 fffff880`07b56000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01fd5000 fffff880`01fde000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04beb000 fffff880`04bfa000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04723000 fffff880`04731000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00b9b000 fffff800`00ba5000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`01876000 fffff880`01fd5000   kl1      kl1.sys      Wed Jun 09 09:34:19 2010 (4C0F985B)
fffff880`0323c000 fffff880`03243000   kl2      kl2.sys      Wed Jun 09 09:24:47 2010 (4C0F961F)
fffff880`032f0000 fffff880`03386000   klif     klif.sys     Fri Oct 01 03:28:56 2010 (4CA58DB8)
fffff880`040f2000 fffff880`040fb000   klim6    klim6.sys    Thu Apr 22 11:07:24 2010 (4BD0662C)
fffff880`05c8f000 fffff880`05c99000   klmouflt klmouflt.sys Mon Nov 02 11:26:06 2009 (4AEF081E)
fffff880`05c21000 fffff880`05c64000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05c00000 fffff880`05c05200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03158000 fffff880`0316d000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03100000 fffff880`03123000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c5d000 fffff880`00c6a000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`03079000 fffff880`03087000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04683000 fffff880`04692000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05d11000 fffff880`05d1e000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d9c000 fffff880`00db6000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`07b74000 fffff880`07b8c000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07b8c000 fffff880`07bb9000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07a00000 fffff880`07a4e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07a4e000 fffff880`07a71000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00de9000 fffff880`00df4000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`033f4000 fffff880`033ff000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f79000 fffff880`00f83000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0107e000 fffff880`010dc000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`041b3000 fffff880`041be000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`014dd000 fffff880`014ef000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014f0000 fffff880`015e2000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04a99000 fffff880`04aa5000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`031c0000 fffff880`031d3000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04aa5000 fffff880`04ad4000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05d30000 fffff880`05d45000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`040fb000 fffff880`0410a000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`0407e000 fffff880`040c3000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`03200000 fffff880`03211000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`041a7000 fffff880`041b3000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03e4f000 fffff800`0442b000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01259000 fffff880`013fc000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`03386000 fffff880`0338f000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`059de000 fffff880`059df180   nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`04e04000 fffff880`059dda80   nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`0460d000 fffff880`04661080   nvmf6264 nvmf6264.sys Thu Aug 12 07:46:06 2010 (4C63DEFE)
fffff880`05c64000 fffff880`05c74000   nvoclk64 nvoclk64.sys Tue Sep 15 17:59:25 2009 (4AB00E3D)
fffff880`01ff1000 fffff880`01ffc000   nvsmu    nvsmu.sys    Thu Nov 12 09:43:42 2009 (4AFC1F1E)
fffff880`0316d000 fffff880`031c0000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`040cc000 fffff880`040f2000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fc3000 fffff880`00fd8000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f83000 fffff880`00fb6000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fed000 fffff880`00ffd000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`080a8000 fffff880`0814e000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05da1000 fffff880`05dde000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c6a000 fffff880`00c7e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01071000 fffff880`0107d040   PxHlpa64 PxHlpa64.sys Tue Oct 20 14:08:42 2009 (4ADDFCAA)
fffff880`04a75000 fffff880`04a99000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04ad4000 fffff880`04aef000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04662000 fffff880`04683000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`059e0000 fffff880`059fa000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04156000 fffff880`041a7000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`033d9000 fffff880`033e2000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`033e2000 fffff880`033eb000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`033eb000 fffff880`033f4000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0119b000 fffff880`011d5000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`031d3000 fffff880`031eb000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03056000 fffff880`03079000   RzSynapse RzSynapse.sys Thu Oct 14 03:42:17 2010 (4CB6B459)
fffff880`015e2000 fffff880`015ff000   sbp2port sbp2port.sys Mon Jul 13 19:19:53 2009 (4A5BC119)
fffff880`0814e000 fffff880`08159000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`032e2000 fffff880`032ee000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0410a000 fffff880`04127000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`014d5000 fffff880`014dd000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09000000 fffff880`09071000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`090cc000 fffff880`09162000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`08000000 fffff880`08067000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`08159000 fffff880`08186000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04bfa000 fffff880`04bfb480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`08186000 fffff880`08198000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0322f000 fffff880`0323c000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`03211000 fffff880`0322f000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`04142000 fffff880`04156000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004c0000 fffff960`004ca000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011d5000 fffff880`011fb000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`05c74000 fffff880`05c86000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`030d1000 fffff880`030ebc00   usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04692000 fffff880`046af000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05d25000 fffff880`05d26f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04737000 fffff880`04748000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
fffff880`05c9a000 fffff880`05cf4000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
fffff880`01249000 fffff880`01254000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`046cd000 fffff880`04723000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`01850000 fffff880`0185c000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`0475c000 fffff880`0476d000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`07bb9000 fffff880`07bd4000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00fb6000 fffff880`00fc3000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`03396000 fffff880`033a4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`033a4000 fffff880`033c9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00fd8000 fffff880`00fed000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0114f000 fffff880`0119b000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04127000 fffff880`04142000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`033c9000 fffff880`033d9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e66000 fffff880`00f0a000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f0a000 fffff880`00f19000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`040c3000 fffff880`040cc000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`003a0000   win32k   win32k.sys   Tue Oct 19 23:08:47 2010 (4CBE5D3F)
fffff880`04a46000 fffff880`04a4f000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f70000 fffff880`00f79000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`03123000 fffff880`03144000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`09162000 fffff880`09193000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`09000000 fffff880`09071000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`07a71000 fffff880`07a85000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`03144000 fffff880`03158000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`030ec000 fffff880`03100000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`030bd000 fffff880`030d1000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`0185c000 fffff880`01870000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`04748000 fffff880`0475c000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`04748000 fffff880`0475c000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`0475c000 fffff880`04770000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`04748000 fffff880`0475c000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`05d11000 fffff880`05d25000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`01850000 fffff880`0185e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0185e000 fffff880`0186a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0186a000 fffff880`01873000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01fde000 fffff880`01ff1000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`05d1c000 fffff880`05d30000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`05d08000 fffff880`05d1c000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`05cf4000 fffff880`05d08000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`05c86000 fffff880`05c9a000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`0475c000 fffff880`04770000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`04748000 fffff880`0475c000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`04723000 fffff880`04737000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000
fffff880`01235000 fffff880`01249000   WSR_USF.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00014000

Windows 7 Random Blue Screens all pointing to ntkrnlmp.exe

Jeff Gedgaud

New Member

Attachments

cybercore

cybercore

New Member

Similar threads