Vista Ultimate 32bit Freezing - Multiple Symtoms

GreenFish · Dec 24, 2010

Hello,
I have a Dell XPS 1730 and the problem started about 2 months ago and while it is manageable it is somewhat annoying.

1. I have a wired mouse and the touchpad remains enabled.
The first sign of a problem was the mouse pointer jumping slightly this is soon followed by interruption of any audio and then later freezing of the display. I found that by waiting for several minutes the mouse pointer was unfrozen but could no longer select anything and no keyboard entries have any effect.

2. The collected symptoms associated with this problem are,
a. At some point during login a reboot can occur.
b. During the first login of the day the problem is most likely to be seen and after pressing and holding the Off button to force the shutdown a subsequent login seems to be Ok (for some time eg. hours).
c. I have tried in Safe Mode both with and without networking and the freezing can still happen.
d. sometimes I get a blue screen with a memory parity error message but running the Dell memory check sw confirms the RAM to be good.

3. I have tried a number of things to fix this with no success.
a. CHKDSK did find and correct some errors.
b. Using the Dell updates site I upgraded to the latest A011 BIOS and to the latest drivers that were suggested.
c. I checked through all the BIOS settings but all seemed OK.
d. I have used Spybot, IOBit, Ad-Aware, AVG Free to check the system and two minor things were reported and removed.
e. Yesterday I noticed my IPV6 status was shown as limited and when I checked the Service it was no longer in the list. I used sfc /scannow to find out the state of the OS files and there are a number of problem that could not be fixed.

4. I am stuck with trying to fix the sfc problems. By searching other posts I found reference to How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7 which was useful but the first problem in the sfc list is still there.
The factory image is on my D: drive so I copied the C_20105.NLS file to both locations of the log file but sfc still identified hash fail and library source file being corrupted.

The cutdown sfc log is included for info.

I am at a loss what to do next but believe I should be correcting the sfc errors first. Any Suggestions?

richc46 · Dec 24, 2010

Welcome
Run a full anti virus scan (seems that you did this already)
Dowload and run malwarebytes. Make a full scan and update first
Send us any mini dump reoprts that were generated from the BSOD
The fact that it happens in safe mode may indicate hardware problem
Run SFC 3 times to try to correct errors
If you have not used memtest86 for the memory test do so now
Guide to using Memtest86+
Run for 8 passes. Then test each slot with a know good stick of RAM
The most important thing is send us those dump reports (BSOD)
http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html

If you have a Vista DVD and you cannot solve the problems with an SFC scan do a repair install.
http://www.vistax64.com/tutorials/88236-repair-install-vista.html?filter[11]=Performance Maintenance

GreenFish · Dec 24, 2010

Richard,
thanks for the quick response.
MS updates are current although MSBA 2.1 always reports one update requiring a reboot to complete and I am unable to fix this.
I have already run sfc more than 3 times so this is done.
Now I will do as you suggest and run malwarebytes and then the memtest. Note, memtest 86+ does not indicate it applied to Vista so I did not try it but will now.
I have a Dell Vista DVD but am a little uneasy about choosing the "install" option as it is not like Xp which gives both install and repair choices.
I include the BSOD files while I get on with the other tasks.
Note: the OS is the original OEM factory install and I have had the laptop for 2 years.

richc46 · Dec 24, 2010

Ill check the BSOD reports. Dont do anything drastic until I get the results. Hopefully it will be the key to solve this.

richc46 · Dec 24, 2010

THE minidump is not there, follow directions
Usually in this situation the error is that you did not run as administrator.

GreenFish · Dec 24, 2010

Oops! I am sure I ran BSOD this time as Administrator + malwarebytes found 1 item with the fast scan - I will now try the full scan.

richc46 · Dec 24, 2010

Again no reports
WE need just one, so follow this
If we do not get it again, we will check to see if your computer is set up to make the reports
Dump files - Upload to Seven Forums - Windows 7 Forums

GreenFish · Dec 24, 2010

The minidump dir is empty so I checked the Startup and Recovery "system failure" settings.
"write an event to the system log" is not checked
"automatically restart" is checked
"write debugging info" is set to none

now changed to;
"write an event to the system log" is checked
"automatically restart" is checked
"write debugging info" is set to small memory dump

I will try a few restarts to see if the problem will reproduce.

richc46 · Dec 24, 2010

Your good, most dont know those things.

GreenFish · Dec 24, 2010

So, a little more is checked out.

malware bytes full scan completed, only the registry entry found and reported with the fast scan was found (as uploaded with earlier reply). I have taken no action on this entry so far.

memtest86+ 4.10 ran for 2 full passes with no errors displayed however I would not put money on it being correct as for me it did not seem to work right.

As the 2nd full pass completed the status bar stayed at 100% and did not update the results line even though the tests continued to cycle into a 3rd pass. Photo evidence attached.

When I rebooted the OS froze at the "Welcome" page. Using the Off button to reboot the logon beep was interrupted (choppy sound) - I have the startup beep disabled. When I checked the Minidump dir it was also empty.

I will look tomorrow for a minidump log.

GreenFish · Dec 25, 2010

Since yesterday, I have had 3 freeze occurences including (for the first time) a Black SOD but no minidump is created.

Some logs are reporting issues so I attach them for info.

richc46 · Dec 25, 2010

Since you are not generating MiniDumps any way, this is how to stop the reboots.
Automatic Restart Vista - How To Disable the Automatic Restart on System Failure in Windows Vista
This does not solve your problem, however. The reboots are an indication of a problem that has to be corrected.
I have to give you all the applicable BSOD tests, if you do not have those reports. This one will check for the second most likely, after memory, drivers

Driver Verifier Inst
Since the driver that crashed you has not been listed you should run driver verifier
Please run Verifier with these settings:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.
So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Windows 7 Startup Repair feature).
Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
NOTE: You can use Low Resource Simulation if you'd like. From my limited experimentation it makes the BSOD's come faster.
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.
Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out. If it doesn't crash for you, then let it run for at least 36 hours of continuous operation (an estimate on my part).
Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.
If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
Enable the driver verifier
www.sevenforums.com/crash-lockup-debug-how/65331-using-driver-verifier-identify-issues-drivers.html

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done:
http://www.duplexsecure.com/en/faq

GreenFish · Dec 25, 2010

I have turned off the auto restart on system error.

Driver verifier is running at the moment without Low Resource Simulation and I have had a crash however no minidump is created. I did notice 3 drivers marked as "unknown" and will try and find them on the web tomorrow.

Looking through the windows dir I came across the LiveKernelReports\WATCHDOG dir which contained some dmp files the last one coincides with the latest crash. I include this one for info - there are more.

richc46 · Dec 25, 2010

What you may want to do if you see unknown drivers is to run a FULL scan on the anti virus and download and run an updated FULL scan with malwarebytes.

Code:

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_WD-20101225-1947[1].zip\WD-20101225-1947.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x8263f000 PsLoadedModuleList = 0x82756c70
Debug session time: Sat Dec 25 13:47:26.853 2010 (GMT-5)
System Uptime: 0 days 0:07:13.638
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
Unable to load image dxgkrnl.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dxgkrnl.sys
*** ERROR: Module load completed but symbols could not be loaded for dxgkrnl.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 117, {898cc510, 8ccf2176, 0, 0}
Unable to load image nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+ee176 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
VIDEO_TDR_TIMEOUT_DETECTED (117)
The display driver failed to respond in timely fashion.
(This code can never be used for real bugcheck).
Arguments:
Arg1: 898cc510, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
Arg2: 8ccf2176, The pointer into responsible device driver module (e.g owner tag).
Arg3: 00000000, The secondary driver specific bucketing key.
Arg4: 00000000, Optional internal context dependent data.
Debugging Details:
------------------
 
FAULTING_IP: 
nvlddmkm+ee176
8ccf2176 ??              ???
DEFAULT_BUCKET_ID:  GRAPHICS_DRIVER_TDR_TIMEOUT
TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b
 
BUGCHECK_STR:  0x117
PROCESS_NAME:  System
CURRENT_IRQL:  0
STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
803c4b7c 8dc43029 00000000 8ccf2176 988518b8 dxgkrnl+0x3dd2e
803c4be8 8dc43759 00000800 00000001 898cc510 dxgkrnl+0x3e029
803c4c04 8dc1883f 00000000 00000102 988518b8 dxgkrnl+0x3e759
803c4c6c 8dc98453 988518b8 00006c10 00000000 dxgkrnl+0x1383f
803c4c98 8dc988a9 988518b8 00000000 00000000 dxgkrnl+0x93453
803c4cc4 8dc1e760 00000002 9b103950 a33c0008 dxgkrnl+0x938a9
803c4d54 8dc99647 988518b8 82683956 988518b8 dxgkrnl+0x19760
803c4d68 8dc996e6 988518b8 00000000 9a1f9a88 dxgkrnl+0x94647
803c4d7c 82814c42 988518b8 9728ae25 00000000 dxgkrnl+0x946e6
803c4dc0 8267df4e 8dc99684 988518b8 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
 
STACK_COMMAND:  .bugcheck ; kb
FOLLOWUP_IP: 
nvlddmkm+ee176
8ccf2176 ??              ???
SYMBOL_NAME:  nvlddmkm+ee176
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nvlddmkm
IMAGE_NAME:  nvlddmkm.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4cb9dbec
FAILURE_BUCKET_ID:  0x117_IMAGE_nvlddmkm.sys
BUCKET_ID:  0x117_IMAGE_nvlddmkm.sys
Followup: MachineOwner
---------
1: kd> lmtsmn
start    end        module name
c9901000 c992d000   000      000.fcl      Fri Sep 26 09:11:12 2008 (48DCDF70)
8dd97000 8dda4080   1394BUS  1394BUS.SYS  Sat Jan 19 00:53:27 2008 (47919057)
8068b000 806d1000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
9be8e000 9bed6000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
84d66000 84d6e000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
84d6e000 84d8c000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
8e417000 8e54db00   AVerBDA716x AVerBDA716x.sys Fri Nov 27 04:50:42 2009 (4B0FA0F2)
c9937000 c995f000   AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:23:31 2010 (4C5896E3)
853f7000 85400000   AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:29 2010 (4C8EA9C5)
c992d000 c9937000   AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:08 2010 (4C5896CC)
c65ca000 c65d5000   AVGIDSShim AVGIDSShim.Sys Tue Aug 03 18:25:55 2010 (4C589773)
9c209000 9c244400   avgldx86 avgldx86.sys Mon Sep 06 20:48:07 2010 (4C858BC7)
98ad4000 98ae0000   avgmfx86 avgmfx86.sys Mon Sep 06 20:48:01 2010 (4C858BC1)
853f2000 853f6b80   avgrkx86 avgrkx86.sys Mon Sep 06 20:48:16 2010 (4C858BD0)
9be00000 9be47980   avgtdix  avgtdix.sys  Tue Nov 09 15:11:29 2010 (4CD9AAF1)
8e598000 8e5ea000   b57nd60x b57nd60x.sys Tue Feb 09 08:05:57 2010 (4B715DB5)
8071b000 80725000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
8e578000 8e57b000   BdaSup   BdaSup.SYS   Sat Jan 19 00:53:30 2008 (4791905A)
98af0000 98af7000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
80489000 80491000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
c648a000 c64a3000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
b4460000 b446e000   cdd      cdd.dll      Thu Sep 24 21:27:02 2009 (4ABC1C66)
c995f000 c9975000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
84de7000 84dff000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
804d2000 805b2000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
853c8000 853e9000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80491000 804d2000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
8e5fc000 8e5ff780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
80718000 8071a900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
9c245000 9c252000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
853e9000 853f2000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
9bf62000 9bfbd000   csc      csc.sys      Sat Apr 11 00:14:49 2009 (49E01939)
9bed6000 9bedb400   CSN5PDTS82 CSN5PDTS82.sys Wed Apr 22 06:37:57 2009 (49EEF385)
9bfbd000 9bfd4000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
853b7000 853c8000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
98a8f000 98ab4000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
9c310000 9c321000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:27:05 2008 (47918A29)
9c252000 9c310000   dump_iaStor dump_iaStor.sys Mon Feb 12 15:46:47 2007 (45D0D237)
9c321000 9c32b000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8dc05000 8dca6000   dxgkrnl  dxgkrnl.sys  Thu Sep 24 21:27:14 2009 (4ABC1C72)
8536c000 85393000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
c65d5000 c65fd000   fastfat  fastfat.SYS  Sat Apr 11 00:13:52 2009 (49E01900)
84dbe000 84dce000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
84d8c000 84dbe000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
98ae0000 98ae9000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
85393000 853b7000   fvevol   fvevol.sys   Sat Apr 11 00:13:03 2009 (49E018CF)
850f2000 8510d000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
8d5f4000 8d5f9280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
8260c000 8263f000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
8dd0a000 8dd97000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
98abd000 98acd000   HIDCLASS HIDCLASS.SYS Sat Apr 11 00:42:47 2009 (49E01FC7)
98acd000 98ad3380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
98ab4000 98abd000   hidusb   hidusb.sys   Sat Apr 11 00:42:48 2009 (49E01FC8)
c6400000 c646d000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
8ddd7000 8ddea000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
84ca8000 84d66000   iastor   iastor.sys   Mon Feb 12 15:46:47 2007 (45D0D237)
84c07000 84ca8000   iastorv  iastorv.sys  Fri Sep 28 14:17:27 2007 (46FD4537)
8077e000 80785000   intelide intelide.sys Sat Jan 19 00:49:42 2008 (47918F76)
851e9000 851f8000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
8ddf5000 8de00000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
80401000 80408000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
8e54e000 8e578000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
84e0a000 84e7b000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
84dce000 84ddc100   Lbd      Lbd.sys      Tue May 25 03:45:27 2010 (4BFB8017)
9c355000 9c365000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
9c33a000 9c355000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
8ed69000 8ed85800   mcdbus   mcdbus.sys   Mon Jul 28 05:19:27 2008 (488D8F1F)
80408000 80478000   mcupdate mcupdate.dll Sat Apr 11 02:23:19 2009 (49E03757)
9c32b000 9c33a000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8ddea000 8ddf5000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
98b7f000 98b87000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
8079a000 807aa000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
c64a3000 c64b8000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
c64b8000 c64d7000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
c64d7000 c6510000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
c6510000 c6528000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
98b47000 98b52000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
806da000 806e2000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
805b2000 805e1000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
c9975000 c9976580   MSPQM    MSPQM.sys    Sat Jan 19 00:49:18 2008 (47918F5E)
84f86000 84fb1000   msrpc    msrpc.sys    Sat Apr 11 00:37:32 2009 (49E01E8C)
8edae000 8edb8000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8535d000 8536c000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
84e7b000 84f86000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
8ec6a000 8ec75000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
9c38f000 9c399000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
8ec75000 8ec98000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
807d8000 807e9000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
9befb000 9bf09000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
9be48000 9be7a000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
84fb1000 84fec000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
8e001000 8e417000   NETw5v32 NETw5v32.sys Mon Oct 26 09:47:30 2009 (4AE5A872)
98b52000 98b60000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
9bf58000 9bf62000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
8263f000 829f8000   nt       ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
8520c000 8531c000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
98ae9000 98af0000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
8d5a1000 8d5a2040   nvBridge nvBridge.kmd Sat Oct 16 13:04:23 2010 (4CB9DB17)
8cc04000 8d5a05a0   nvlddmkm nvlddmkm.sys Sat Oct 16 13:07:56 2010 (4CB9DBEC)
9c365000 9c38f000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
98b9e000 98bd7880   OEM02Dev OEM02Dev.sys Wed Oct 10 22:29:05 2007 (470D8A71)
98bd8000 98bd9d00   OEM02Vfx OEM02Vfx.sys Mon Mar 05 05:45:03 2007 (45EBF4AF)
8e5ea000 8e5f9300   ohci1394 ohci1394.sys Sat Apr 11 00:43:04 2009 (49E01FD8)
9bee5000 9befb000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
80709000 80718000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
806e2000 80709000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
80793000 8079a000   pciide   pciide.sys   Sat Apr 11 00:39:10 2009 (49E01EEE)
80785000 80793000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
c980d000 c98eb000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
98b00000 98b0a000   pelmouse pelmouse.sys Thu Jun 07 04:37:22 2007 (4667C3C2)
8e57b000 8e597c80   physX32  physX32.sys  Fri Jun 22 10:53:17 2007 (467BE25D)
98a62000 98a8f000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
80478000 80489000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
84ddd000 84de6200   PxHelp20 PxHelp20.sys Wed Mar 12 21:57:44 2008 (47D88A18)
98b60000 98b69000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8ec53000 8ec6a000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
8ec98000 8eca7000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
8eca7000 8ecbb000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8ecbb000 8ecd0000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
9bf1c000 9bf58000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
98b37000 98b3f000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8ecd0000 8ed59000   rdpdr    rdpdr.sys    Sat Apr 11 00:52:32 2009 (49E02210)
98b3f000 98b47000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
8ddb4000 8ddc3000   rimmptsk rimmptsk.sys Sat Feb 24 00:42:21 2007 (45DFD03D)
8ddc3000 8ddd7000   rimsptsk rimsptsk.sys Tue Dec 19 22:42:01 2006 (4588B109)
8dda5000 8ddb4000   risdptsk risdptsk.sys Tue Dec 19 22:26:21 2006 (4588AD5D)
8d5a3000 8d5f4000   rixdptsk rixdptsk.sys Tue Dec 19 23:57:38 2006 (4588C2C2)
9c399000 9c3ac000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
8ed86000 8edac000   SCSIPORT SCSIPORT.SYS Sat Jan 19 00:49:44 2008 (47918F78)
c98eb000 c98f5000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
9be7a000 9be8e000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
85355000 8535d000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
8510d000 851bd000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
c6550000 c659e000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
c6528000 c6550000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
c646d000 c648a000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
8ec07000 8ec48000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
98a0d000 98a62000   stwrt    stwrt.sys    Fri Feb 15 17:36:49 2008 (47B61401)
8edac000 8edad380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
807aa000 807d7980   SynTP    SynTP.sys    Fri Oct 26 16:58:09 2007 (472254E1)
85008000 850f2000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
c98f5000 c9901000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
8ec48000 8ec53000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
98b69000 98b7f000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
8ed59000 8ed69000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
b4440000 b4449000   TSDDD    TSDDD.dll    Sat Jan 19 01:01:09 2008 (47919225)
85200000 85209000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
8edb8000 8edc5000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
98b87000 98b9e000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
8e5fa000 8e5fb700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8dcfb000 8dd0a000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8edc5000 8edfa000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8dcbd000 8dcfb000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
8dcb2000 8dcbd000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
98b0a000 98b16000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
98b16000 98b37000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
80725000 80734000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
80734000 8077e000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
8531c000 85355000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
9bf09000 9bf1c000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8dca6000 8dcb2000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
80602000 8067e000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
8067e000 8068b000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
b4220000 b4423000   win32k   win32k.sys   Mon Oct 18 09:31:09 2010 (4CBC4C1D)
84fec000 84ff5000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
806d1000 806da000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
9bedc000 9bee5000   ws2ifsl  ws2ifsl.sys  Sat Jan 19 00:56:49 2008 (47919121)
Mini Kernel Dump does not contain unloaded driver list

Update this driver
Nvlddmkm.sys file description
Productname: NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 175.30 Description: NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 175.30 Company: NVIDIA Corporation

The reports that you have submitted reveal clues to the cause of your problem. They do not give a definitive answer. The more reports that we receive the more clues are made available improving our chances of finding a solution to your problem. You may have to experience several more BSODs until the final answer is discovered.

If overclocking restore normal settings

SFC /scannow
System Files - SFC Command

Scan with your Anti Virus

Update outdated listed drivers. If I have inadvertently listed any Microsoft Drivers, they can be ignored. If the list is extensive I have included the driver verifier test so that you may determine which drivers are in need of immediate attention.

How to Find Drivers
search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone - will help you search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- - if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.
- The most common drivers are listed on this page: http://www.carrona.org/dvrref.html
- - Driver manufacturer links are on this page: http://www.carrona.org/drvrdown.html
and here
http://www.edbott.com/weblog/the-vista-master-driver-list/
To remove any left over driver remnants, especially from graphics cards, use driver sweeper
www.guru3d.com/category/driversweeper/
You can also locate information about your driver using this information
http://www.sevenforums.com/tutorials/96442-device-manager-finding-unknown-devices.html
faq

GreenFish · Dec 26, 2010

The good news is I have now had a driver crash and a minidump is created. Info/dmp attached.

richc46 · Dec 26, 2010

That was a Microsoft driver, which is rarely the cause, run the verifier for at least 24 hours.

GreenFish · Dec 31, 2010

So, I have let the system run for a while an 4 crashes occured including 2 IRQ less than or equal zero. from this I have 3 minidumps (one was overwritten). I have them on my desktop but when I try to zip them I get access denied. Somehow I think it is an ownership issue but dont know how to fix just now.

A little info regarding your suggestions in previous posts,
1. Using AVG free, No-Adware, spybot and Malwarebytes I find nothing suspicious reported.
2. I updated the NVidia driver as suggested but soon reversed the change via a restore point as it made the mouse pointer too jumpy to be usable.
3. The unknown drivers are;
000.fcl - This is used by the Dell MediaDirect software
dump_dumpfve.sys and dump_iastor.sys - according to the web these are part of Vista but for me I would expect them to be identified as MS.
4. I have now stopped the verify process to see what normal behaviour is like again. One interesting point is that shortly after I noticed all my restore points are gone and I seemed to have gained about 22Gb of disk space so I manually created a restore point.

GreenFish · Jan 1, 2011

After sorting out ownership issues here are the 3 minidumps.

I hope they provide a clue to the problem.

richc46 · Jan 1, 2011

Three reports two pointed to AVG. Uninstall your avg with the uninstall tool
AVG - Download tools
Replace with Microsoft Security Essentials and Malwarebytes for total protection.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_3_Minidumps[1].zip\3_Minidumps\new2 Mini122810-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x8264a000 PsLoadedModuleList = 0x82761c70
Debug session time: Tue Dec 28 08:07:11.976 2010 (GMT-5)
System Uptime: 0 days 0:12:56.858
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000000A, {c69daf74, 2, 1, 8261aede}
*** WARNING: Unable to verify timestamp for avgtdix.sys
*** ERROR: Module load completed but symbols could not be loaded for avgtdix.sys
[B]Probably caused by : avgtdix.sys ( avgtdix+5fdd )[/B]
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: c69daf74, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8261aede, address which referenced memory
Debugging Details:
------------------

WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82781868
Unable to read MiSystemVaType memory at 82761420
 c69daf74 
CURRENT_IRQL:  2
FAULTING_IP: 
hal!KeAcquireSpinLockRaiseToSynch+e
8261aede f00fba2900      lock bts dword ptr [ecx],0
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
LAST_CONTROL_TRANSFER:  from 82938edd to 8261aede
STACK_TEXT:  
86161c70 82938edd c69daf74 00000000 c69daf74 hal!KeAcquireSpinLockRaiseToSynch+0xe
86161c88 9a408fdd 8261af60 a27a5470 a30e3de0 nt!VerifierKfAcquireSpinLock+0x4f
WARNING: Stack unwind information not available. Following frames may be wrong.
86161ca8 97567903 c69daf30 a5c01ef0 00000000 avgtdix+0x5fdd
86161cf0 85047860 9a408f90 00000000 850dba80 tdx!TdxCloseConnectionEndpointTlRequestComplete+0x199
86161d08 84fb3915 88b00134 8274c13c 8910d720 tcpip!TcpCleanupTcbWorkQueueRoutine+0xbd
86161d2c 82857923 8910d720 850dba80 8917cb40 NETIO!NetiopIoWorkItemRoutine+0x2f
86161d44 826efe22 8917cb40 00000000 84be1580 nt!IopProcessWorkItem+0x2d
86161d7c 8281fc42 8917cb40 cdf20397 00000000 nt!ExpWorkerThread+0xfd
86161dc0 82688f4e 826efd25 00000001 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

STACK_COMMAND:  kb
FOLLOWUP_IP: 
avgtdix+5fdd
9a408fdd ??              ???
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  avgtdix+5fdd
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: avgtdix
IMAGE_NAME:  avgtdix.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4cd9aaf1
FAILURE_BUCKET_ID:  0xA_avgtdix+5fdd
BUCKET_ID:  0xA_avgtdix+5fdd
Followup: MachineOwner
---------
0: kd> lmtsmn
start    end        module name
c98fe000 c992a000   000      000.fcl      Fri Sep 26 09:11:12 2008 (48DCDF70)
8d7af000 8d7bc080   1394BUS  1394BUS.SYS  Sat Jan 19 00:53:27 2008 (47919057)
80696000 806dc000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
9a491000 9a4d9000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
84d63000 84d6b000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
84d6b000 84d89000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
8dc22000 8dd58b00   AVerBDA716x AVerBDA716x.sys Fri Nov 27 04:50:42 2009 (4B0FA0F2)
c9934000 c995c000   AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:23:31 2010 (4C5896E3)
853f0000 853f9000   AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:29 2010 (4C8EA9C5)
c992a000 c9934000   AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:08 2010 (4C5896CC)
c2b1e000 c2b29000   AVGIDSShim AVGIDSShim.Sys Tue Aug 03 18:25:55 2010 (4C589773)
9ac01000 9ac3c400   avgldx86 avgldx86.sys Mon Sep 06 20:48:07 2010 (4C858BC7)
974cd000 974d9000   avgmfx86 avgmfx86.sys Mon Sep 06 20:48:01 2010 (4C858BC1)
853eb000 853efb80   avgrkx86 avgrkx86.sys Mon Sep 06 20:48:16 2010 (4C858BD0)
9a403000 9a44a980   avgtdix  avgtdix.sys  Tue Nov 09 15:11:29 2010 (4CD9AAF1)
8dda3000 8ddf5000   b57nd60x b57nd60x.sys Tue Feb 09 08:05:57 2010 (4B715DB5)
80726000 80730000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
8dd83000 8dd86000   BdaSup   BdaSup.SYS   Sat Jan 19 00:53:30 2008 (4791905A)
974e9000 974f0000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
80490000 80498000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
851a7000 851c0000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
b3e60000 b3e6e000   cdd      cdd.dll      Thu Sep 24 21:27:02 2009 (4ABC1C66)
c995c000 c9972000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
84de4000 84dfc000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
804d9000 805b9000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
853c1000 853e2000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80498000 804d9000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
8d7fa000 8d7fd780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
80723000 80725900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
9ac3d000 9ac4a000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
853e2000 853eb000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
9a565000 9a5c0000   csc      csc.sys      Sat Apr 11 00:14:49 2009 (49E01939)
9a4d9000 9a4de400   CSN5PDTS82 CSN5PDTS82.sys Wed Apr 22 06:37:57 2009 (49EEF385)
9a5c0000 9a5d7000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
853b0000 853c1000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
97488000 974ad000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
9ad08000 9ad19000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:27:05 2008 (47918A29)
9ac4a000 9ad08000   dump_iaStor dump_iaStor.sys Mon Feb 12 15:46:47 2007 (45D0D237)
9ad19000 9ad23000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8d60d000 8d6ae000   dxgkrnl  dxgkrnl.sys  Thu Sep 24 21:27:14 2009 (4ABC1C72)
85365000 8538c000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
c2b29000 c2b51000   fastfat  fastfat.SYS  Sat Apr 11 00:13:52 2009 (49E01900)
84dbb000 84dcb000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
84d89000 84dbb000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
974d9000 974e2000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
8538c000 853b0000   fvevol   fvevol.sys   Sat Apr 11 00:13:03 2009 (49E018CF)
850ef000 8510a000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
8ddf7000 8ddfc280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
82617000 8264a000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
8d712000 8d79f000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
974b6000 974c6000   HIDCLASS HIDCLASS.SYS Sat Apr 11 00:42:47 2009 (49E01FC7)
974c6000 974cc380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
974ad000 974b6000   hidusb   hidusb.sys   Sat Apr 11 00:42:48 2009 (49E01FC8)
8511d000 8518a000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
84fe8000 84ffb000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
84ca5000 84d63000   iastor   iastor.sys   Mon Feb 12 15:46:47 2007 (45D0D237)
84c04000 84ca5000   iastorv  iastorv.sys  Fri Sep 28 14:17:27 2007 (46FD4537)
80789000 80790000   intelide intelide.sys Sat Jan 19 00:49:42 2008 (47918F76)
851ef000 851fe000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
8d7ef000 8d7fa000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
80408000 8040f000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
8dd59000 8dd83000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
84e06000 84e77000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
84dcb000 84dd9100   Lbd      Lbd.sys      Tue May 25 03:45:27 2010 (4BFB8017)
9a5d7000 9a5e7000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
9ad32000 9ad4d000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
8ed6a000 8ed86800   mcdbus   mcdbus.sys   Mon Jul 28 05:19:27 2008 (488D8F1F)
8040f000 8047f000   mcupdate mcupdate.dll Sat Apr 11 02:23:19 2009 (49E03757)
9ad23000 9ad32000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8d800000 8d80b000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
97578000 97580000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
807a5000 807b5000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
851c0000 851d5000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
c2a0c000 c2a2b000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
c2a2b000 c2a64000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
c2a64000 c2a7c000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
97540000 9754b000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
806e5000 806ed000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
805b9000 805e8000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
c9972000 c9973580   MSPQM    MSPQM.sys    Sat Jan 19 00:49:18 2008 (47918F5E)
84f82000 84fad000   msrpc    msrpc.sys    Sat Apr 11 00:37:32 2009 (49E01E8C)
8edaf000 8edb9000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
85356000 85365000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
84e77000 84f82000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
8ec6b000 8ec76000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
9a5e7000 9a5f1000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
8ec76000 8ec99000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
807e3000 807f4000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
9a4fe000 9a50c000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
9a44b000 9a47d000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
84fad000 84fe8000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
8d80c000 8dc22000   NETw5v32 NETw5v32.sys Mon Oct 26 09:47:30 2009 (4AE5A872)
9754b000 97559000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
9a55b000 9a565000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
8264a000 82a03000   nt       ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
85205000 85315000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
974e2000 974e9000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
8e9ac000 8e9ad040   nvBridge nvBridge.kmd Sat Oct 16 13:04:23 2010 (4CB9DB17)
8e00f000 8e9ab5a0   nvlddmkm nvlddmkm.sys Sat Oct 16 13:07:56 2010 (4CB9DBEC)
975d3000 975fd000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
97597000 975d0880   OEM02Dev OEM02Dev.sys Wed Oct 10 22:29:05 2007 (470D8A71)
975d1000 975d2d00   OEM02Vfx OEM02Vfx.sys Mon Mar 05 05:45:03 2007 (45EBF4AF)
8d79f000 8d7ae300   ohci1394 ohci1394.sys Sat Apr 11 00:43:04 2009 (49E01FD8)
9a4e8000 9a4fe000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
80714000 80723000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
806ed000 80714000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
8079e000 807a5000   pciide   pciide.sys   Sat Apr 11 00:39:10 2009 (49E01EEE)
80790000 8079e000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
c980a000 c98e8000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
974f9000 97503000   pelmouse pelmouse.sys Thu Jun 07 04:37:22 2007 (4667C3C2)
8dd86000 8dda2c80   physX32  physX32.sys  Fri Jun 22 10:53:17 2007 (467BE25D)
9745b000 97488000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
8047f000 80490000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
84dda000 84de3200   PxHelp20 PxHelp20.sys Wed Mar 12 21:57:44 2008 (47D88A18)
97559000 97562000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8ec54000 8ec6b000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
8ec99000 8eca8000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
8eca8000 8ecbc000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8ecbc000 8ecd1000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
9a51f000 9a55b000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
97530000 97538000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8ecd1000 8ed5a000   rdpdr    rdpdr.sys    Sat Apr 11 00:52:32 2009 (49E02210)
97538000 97540000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
8d7cc000 8d7db000   rimmptsk rimmptsk.sys Sat Feb 24 00:42:21 2007 (45DFD03D)
8d7db000 8d7ef000   rimsptsk rimsptsk.sys Tue Dec 19 22:42:01 2006 (4588B109)
8d7bd000 8d7cc000   risdptsk risdptsk.sys Tue Dec 19 22:26:21 2006 (4588AD5D)
8e9ae000 8e9ff000   rixdptsk rixdptsk.sys Tue Dec 19 23:57:38 2006 (4588C2C2)
8510a000 8511d000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
8ed87000 8edad000   SCSIPORT SCSIPORT.SYS Sat Jan 19 00:49:44 2008 (47918F78)
c98e8000 c98f2000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
9a47d000 9a491000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
8534e000 85356000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
9ad4d000 9adfd000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
c2aa4000 c2af2000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
c2a7c000 c2aa4000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
8518a000 851a7000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
8ec08000 8ec49000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
97406000 9745b000   stwrt    stwrt.sys    Fri Feb 15 17:36:49 2008 (47B61401)
8edad000 8edae380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
807b5000 807e2980   SynTP    SynTP.sys    Fri Oct 26 16:58:09 2007 (472254E1)
85005000 850ef000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
c98f2000 c98fe000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
8ec49000 8ec54000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
97562000 97578000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
8ed5a000 8ed6a000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
b3e40000 b3e49000   TSDDD    TSDDD.dll    Sat Jan 19 01:01:09 2008 (47919225)
851e6000 851ef000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
8edb9000 8edc6000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
97580000 97597000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
8ddf5000 8ddf6700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8d703000 8d712000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8edc6000 8edfb000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8d6c5000 8d703000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
8d6ba000 8d6c5000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
97503000 9750f000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
9750f000 97530000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
80730000 8073f000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
8073f000 80789000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
85315000 8534e000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
9a50c000 9a51f000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8d6ae000 8d6ba000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
8060d000 80689000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
80689000 80696000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
b3c20000 b3e23000   win32k   win32k.sys   Mon Oct 18 09:31:09 2010 (4CBC4C1D)
8d600000 8d609000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
806dc000 806e5000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
9a4df000 9a4e8000   ws2ifsl  ws2ifsl.sys  Sat Jan 19 00:56:49 2008 (47919121)
Unloaded modules:
c2b0a000 c2b1e000   SENTINEL.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
c2af2000 c2b0a000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8510a000 85117000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
85117000 851d5000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
851d5000 851e6000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
974f0000 974f9000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

GreenFish · Jan 3, 2011

Removal of AVG completed (+ also removed ad-aware and spybot - to stop any potential conflicts).

Microsoft Security Essentials installed and updated. Set default options for all levels to Quarantine + selected create restore point before any changes are made. Complete scan took 3.5 hours - nothing found.
Performed another complete scan with malwarebytes one registry entry reported as malware.trace.
"Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully."

I have had one freeze in 3 power cycles (days of use) so there is still a problem there but I notice the start up is much faster to reach a low % processor usage.

So I will again return to running the verifier to locate more failures.

Vista Ultimate 32bit Freezing - Multiple Symtoms

Attachments

My Computer

My Computer

My Computer

My Computer

My Computer

Attachments

My Computer

My Computer

My Computer

My Computer

Attachments

My Computer

Attachments

My Computer

My Computer

Attachments

My Computer

My Computer

Attachments

My Computer

My Computer

My Computer

Attachments

My Computer

My Computer

My Computer