BSODs

[Urosh92]

Is Vista . . .
- Microsoft Windows 7 Ultimate( x64)
- Microsoft Windows 7 Ultimate(x64)
- OEM
- OEM = came pre-installed on system
- Full Retail = you purchased it from retailer

- What is the age of system (hardware)? Around 1 year
- What is the age of OS installation (have you re-installed the OS?) Around 1 year(Never re-installed OS)

 

[richc46]

http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html

 

[Urosh92]

Sorry forgot attachment
Fixed


P.S. My crashes started yesterday after full system scan with Avira...Had problem with Drop Agent but now I removed all malwares with Malwarebytes' Anti-Malware and now its all okay with malewares and trojans...just have sometimes BSODs(think I got 2(or more) different problems that cause bsod)

 

[richc46]

You have given me a half a dozen reports, all with different results. One, howver, gave driver SPTD as the cause. This is a well known cause of BSOD
Let try the easy way first
Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs
http://www.duplexsecure.com/en/downloads
Use this SPTD uninstaller when you're done:

Let me know the results either way.

 

[Urosh92]

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: 3b
BCP1: 00000000C0000005
BCP2: FFFFF8800497F9D6
BCP3: FFFFF880096F0A60
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\021711-24133-01.dmp
C:\Users\Urosh\AppData\Local\Temp\WER-30388-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt




on BSOD there was 'System service exception'


Happened after I followed you instructions,after restart...Its always that 1 BSOD,then auto-restart then it work for some time...

 

[richc46]

Remove Daemon or Alchohol 120% or other Virtualization software with SPTD. Then if you get a new BSOD give me the file.

 

[Urosh92]

Here it is

 

[richc46]

SPTD is still installed.

 

[Urosh92]

Hmm,my mistake probably sorry.

here

 

[richc46]

STOP 0x0000003B: SYSTEM_SERVICE_EXCEPTION Usual causes: System service, Device driver, graphics driver, ?memory

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64

[B]Copyright (c) Microsoft Corporation. All rights reserved.[/B]
 
 
[B]Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_3[1].zip\Windows_NT6_BSOD_jcgriff2\021711-24133-01.dmp][/B]
[B]Mini Kernel Dump File: Only registers and stack trace are available[/B]
 
[B]Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols[/B]
[B]Executable search path is: [/B]
[B]Windows 7 Kernel Version 7600 MP (4 procs) Free x64[/B]
[B]Product: WinNt, suite: TerminalServer SingleUserTS[/B]
[B]Built by: 7600.16695.amd64fre.win7_gdr.101026-1503[/B]
[B]Machine Name:[/B]
[B]Kernel base = 0xfffff800`0305a000 PsLoadedModuleList = 0xfffff800`03297e50[/B]
[B]Debug session time: Thu Feb 17 12:51:21.468 2011 (GMT-5)[/B]
[B]System Uptime: 0 days 0:00:49.310[/B]
[B]Loading Kernel Symbols[/B]
[B]...............................................................[/B]
[B]................................................................[/B]
[B]....................[/B]
[B]Loading User Symbols[/B]
[B]Loading unloaded module list[/B]
[B]........[/B]
[B]*******************************************************************************[/B]
[B]*                                                                             *[/B]
[B]*                        Bugcheck Analysis                                    *[/B]
[B]*                                                                             *[/B]
[B]*******************************************************************************[/B]
 
[B]Use !analyze -v to get detailed debugging information.[/B]
 
[B]BugCheck 3B, {c0000005, fffff8800497f9d6, fffff880096f0a60, 0}[/B]
 
[B]Probably caused by : atikmdag.sys ( atikmdag+3789d6 )[/B]
 
[B]Followup: MachineOwner[/B]
[B]---------[/B]
 
[B]3: kd> !analyze -v[/B]
[B]*******************************************************************************[/B]
[B]*                                                                             *[/B]
[B]*                        Bugcheck Analysis                                    *[/B]
[B]*                                                                             *[/B]
[B]*******************************************************************************[/B]
 
[B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
[B]An exception happened while executing a system service routine.[/B]
[B]Arguments:[/B]
[B]Arg1: 00000000c0000005, Exception code that caused the bugcheck[/B]
[B]Arg2: fffff8800497f9d6, Address of the exception record for the exception that caused the bugcheck[/B]
[B]Arg3: fffff880096f0a60, Address of the context record for the exception that caused the bugcheck[/B]
[B]Arg4: 0000000000000000, zero.[/B]
 
[B]Debugging Details:[/B]
[B]------------------[/B]
 
 
[B]EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.[/B]
 
[B]FAULTING_IP: [/B]
[B]atikmdag+3789d6[/B]
[B]fffff880`0497f9d6 c3              ret[/B]
 
[B]CONTEXT:  fffff880096f0a60 -- (.cxr 0xfffff880096f0a60)[/B]
[B]rax=0000000000000000 rbx=fffffa8005130000 rcx=fffffa8004f73fe0[/B]
[B]rdx=0000000000001a66 rsi=0000000000000000 rdi=0000000000000000[/B]
[B]rip=fffff8800497f9d6 rsp=fffff880096f1438 rbp=fffffa80048eee40[/B]
[B]r8=0000000004000201  r9=fffff88004aaab50 r10=0000000003480000[/B]
[B]r11=fffff88004aaab50 r12=0000000000000000 r13=00000000c0000001[/B]
[B]r14=0000000000000345 r15=fffff900c00b92f0[/B]
[B]iopl=0         nv up ei ng nz na po nc[/B]
[B]cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286[/B]
[B]atikmdag+0x3789d6:[/B]
[B]fffff880`0497f9d6 c3              ret[/B]
[B]Resetting default scope[/B]
 
[B]CUSTOMER_CRASH_COUNT:  1[/B]
 
[B]DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT[/B]
 
[B]BUGCHECK_STR:  0x3B[/B]
 
[B]PROCESS_NAME:  LVPrcSrv.exe[/B]
 
[B]CURRENT_IRQL:  0[/B]
 
[B]LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff8800497f9d6[/B]
 
[B]STACK_TEXT:  [/B]
[B]fffff880`096f1438 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : atikmdag+0x3789d6[/B]
 
 
[B]FOLLOWUP_IP: [/B]
[B]atikmdag+3789d6[/B]
[B]fffff880`0497f9d6 c3              ret[/B]
 
[B]SYMBOL_STACK_INDEX:  0[/B]
 
[B]SYMBOL_NAME:  atikmdag+3789d6[/B]
 
[B]FOLLOWUP_NAME:  MachineOwner[/B]
 
[B]MODULE_NAME: atikmdag[/B]
 
[B]IMAGE_NAME:  atikmdag.sys[/B]
 
[B]DEBUG_FLR_IMAGE_TIMESTAMP:  4cc78ea1[/B]
 
[B]STACK_COMMAND:  .cxr 0xfffff880096f0a60 ; kb[/B]
 
[B]FAILURE_BUCKET_ID:  X64_0x3B_atikmdag+3789d6[/B]
 
[B]BUCKET_ID:  X64_0x3B_atikmdag+3789d6[/B]
 
[B]Followup: MachineOwner[/B]
[B]---------[/B]
 
[B]3: kd> lmtsmn[/B]
[B]start             end                 module name[/B]
[B]fffff880`06200000 fffff880`06225000   000      000.fcl      Thu Oct 04 22:47:54 2007 (4705A5DA)[/B]
[B]fffff880`040b5000 fffff880`040f3000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)[/B]
[B]fffff880`00ec0000 fffff880`00f17000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)[/B]
[B]fffff880`02b0a000 fffff880`02b94000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)[/B]
[B]fffff880`04168000 fffff880`0417e000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)[/B]
[B]fffff880`03c77000 fffff880`03c8c000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)[/B]
[B]fffff880`00e00000 fffff880`00e0b000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)[/B]
[B]fffff880`00ff7000 fffff880`01000000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)[/B]
[B]fffff880`00c00000 fffff880`00c2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)[/B]
[B]fffff880`04ed3000 fffff880`04ef4000   AtiHdmi  AtiHdmi.sys  Sun Aug 23 08:35:11 2009 (4A91377F)[/B]
[B]fffff880`04607000 fffff880`04dfc000   atikmdag atikmdag.sys Tue Oct 26 22:29:53 2010 (4CC78EA1)[/B]
[B]fffff880`03e7a000 fffff880`03ec5000   atikmpag atikmpag.sys Tue Oct 26 22:14:23 2010 (4CC78AFF)[/B]
[B]fffff880`0658d000 fffff880`065aa000   avgntflt avgntflt.sys Thu Nov 11 10:59:48 2010 (4CDC12F4)[/B]
[B]fffff880`03c2f000 fffff880`03c51000   avipbb   avipbb.sys   Mon Feb 22 05:08:50 2010 (4B8257B2)[/B]
[B]fffff880`02a5e000 fffff880`02a65000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)[/B]
[B]fffff880`03c1e000 fffff880`03c2f000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)[/B]
[B]fffff880`071bb000 fffff880`071d9000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)[/B]
[B]fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)[/B]
[B]fffff880`02a2b000 fffff880`02a55000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)[/B]
[B]fffff880`00d00000 fffff880`00dc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)[/B]
[B]fffff880`01000000 fffff880`01030000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)[/B]
[B]fffff880`00ca2000 fffff880`00d00000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)[/B]
[B]fffff880`0131f000 fffff880`01392000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)[/B]
[B]fffff880`04158000 fffff880`04168000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)[/B]
[B]fffff880`0648a000 fffff880`06498000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)[/B]
[B]fffff880`03d7a000 fffff880`03dfd000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)[/B]
[B]fffff880`03c00000 fffff880`03c1e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)[/B]
[B]fffff880`03d6b000 fffff880`03d7a000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)[/B]
[B]fffff880`01274000 fffff880`0128a000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)[/B]
[B]fffff880`04f31000 fffff880`04f53000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)[/B]
[B]fffff880`064a4000 fffff880`064ad000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/B]
[B]fffff880`06498000 fffff880`064a4000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)[/B]
[B]fffff880`064ad000 fffff880`064c0000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)[/B]
[B]fffff880`0647e000 fffff880`0648a000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)[/B]
[B]fffff880`03ec5000 fffff880`03fb9000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)[/B]
[B]fffff880`03fb9000 fffff880`03fff000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)[/B]
[B]fffff880`00dea000 fffff880`00dfe000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)[/B]
[B]fffff880`00c2a000 fffff880`00c76000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)[/B]
[B]fffff880`013a3000 fffff880`013ad000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)[/B]
[B]fffff880`0123a000 fffff880`01274000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)[/B]
[B]fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)[/B]
[B]fffff880`091c6000 fffff880`091cf000   gdrv     gdrv.sys     Fri Dec 05 19:57:14 2008 (4939CDEA)[/B]
[B]fffff800`03011000 fffff800`0305a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)[/B]
[B]fffff880`03e00000 fffff880`03e24000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)[/B]
[B]fffff880`070f3000 fffff880`071bb000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)[/B]
[B]fffff880`015f6000 fffff880`015ff000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)[/B]
[B]fffff880`0411c000 fffff880`0413a000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)[/B]
[B]fffff880`04149000 fffff880`04158000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)[/B]
[B]fffff800`00b9d000 fffff800`00ba0000   kdcom    kdcom.dll    Fri Jan 21 08:17:13 2011 (4D398759)[/B]
[B]fffff880`04e02000 fffff880`04e45000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)[/B]
[B]fffff880`01305000 fffff880`0131f000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)[/B]
[B]fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)[/B]
[B]fffff880`04f53000 fffff880`04f58200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)[/B]
[B]fffff880`065cb000 fffff880`065e0000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)[/B]
[B]fffff880`0656a000 fffff880`0658d000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)[/B]
[B]fffff880`064cd000 fffff880`0655b280   LV561V64 LV561V64.SYS Thu Apr 30 18:43:07 2009 (49FA297B)[/B]
[B]fffff880`091cf000 fffff880`091d9000   LVPr2M64 LVPr2M64.sys Wed Oct 07 04:26:50 2009 (4ACC50CA)[/B]
[B]fffff880`064c0000 fffff880`064ca980   LVUSBS64 LVUSBS64.sys Thu Oct 11 21:39:40 2007 (470ED05C)[/B]
[B]fffff880`00c81000 fffff880`00c8e000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)[/B]
[B]fffff880`0655c000 fffff880`0656a000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)[/B]
[B]fffff880`0413a000 fffff880`04149000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)[/B]
[B]fffff880`00dd0000 fffff880`00dea000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)[/B]
[B]fffff880`071d9000 fffff880`071f1000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)[/B]
[B]fffff880`07000000 fffff880`0702d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)[/B]
[B]fffff880`0702d000 fffff880`0707b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)[/B]
[B]fffff880`0707b000 fffff880`0709e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)[/B]
[B]fffff880`02ac3000 fffff880`02ace000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)[/B]
[B]fffff880`00f20000 fffff880`00f2a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)[/B]
[B]fffff880`012a7000 fffff880`01305000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)[/B]
[B]fffff880`03d60000 fffff880`03d6b000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)[/B]
[B]fffff880`015e4000 fffff880`015f6000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)[/B]
[B]fffff880`014ea000 fffff880`015dc000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)[/B]
[B]fffff880`041a2000 fffff880`041ae000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)[/B]
[B]fffff880`041ae000 fffff880`041dd000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)[/B]
[B]fffff880`04eb1000 fffff880`04ec6000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)[/B]
[B]fffff880`02be2000 fffff880`02bf1000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)[/B]
[B]fffff880`02b94000 fffff880`02bd9000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)[/B]
[B]fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)[/B]
[B]fffff880`02ace000 fffff880`02adf000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)[/B]
[B]fffff880`03d54000 fffff880`03d60000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)[/B]
[B]fffff800`0305a000 fffff800`03637000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)[/B]
[B]fffff880`0104f000 fffff880`011f2000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)[/B]
[B]fffff880`02a55000 fffff880`02a5e000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)[/B]
[B]fffff880`02a00000 fffff880`02a26000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)[/B]
[B]fffff880`040ff000 fffff880`0411c000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)[/B]
[B]fffff880`00f6a000 fffff880`00f7f000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)[/B]
[B]fffff880`00f37000 fffff880`00f6a000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)[/B]
[B]fffff880`00ff0000 fffff880`00ff7000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)[/B]
[B]fffff880`00dc0000 fffff880`00dd0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)[/B]
[B]fffff880`01392000 fffff880`013a3000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)[/B]
[B]fffff880`04f59000 fffff880`04fff000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)[/B]
[B]fffff880`04ef4000 fffff880`04f31000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)[/B]
[B]fffff880`00c8e000 fffff880`00ca2000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)[/B]
[B]fffff880`0417e000 fffff880`041a2000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)[/B]
[B]fffff880`041dd000 fffff880`041f8000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)[/B]
[B]fffff880`04000000 fffff880`04021000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)[/B]
[B]fffff880`04021000 fffff880`0403b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)[/B]
[B]fffff880`03d03000 fffff880`03d54000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)[/B]
[B]fffff880`0403b000 fffff880`04046000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)[/B]
[B]fffff880`02aa8000 fffff880`02ab1000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)[/B]
[B]fffff880`09000000 fffff880`0902e000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)[/B]
[B]fffff880`02ab1000 fffff880`02aba000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)[/B]
[B]fffff880`02aba000 fffff880`02ac3000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)[/B]
[B]fffff880`094c7000 fffff880`094ff000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)[/B]
[B]fffff880`01200000 fffff880`0123a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)[/B]
[B]fffff880`065e0000 fffff880`065f8000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)[/B]
[B]fffff880`03e24000 fffff880`03e56000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)[/B]
[B]fffff880`06244000 fffff880`0647d080   RTKVHD64 RTKVHD64.sys Tue Apr 06 06:17:30 2010 (4BBB0A3A)[/B]
[B]fffff880`0709e000 fffff880`070a9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)[/B]
[B]fffff880`040f3000 fffff880`040ff000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)[/B]
[B]fffff880`03cb7000 fffff880`03cd4000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)[/B]
[B]fffff880`015dc000 fffff880`015e4000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)[/B]
[B]fffff880`090bf000 fffff880`09130000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)[/B]
[B]fffff880`09130000 fffff880`091c6000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)[/B]
[B]fffff880`09058000 fffff880`090bf000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)[/B]
[B]fffff880`070a9000 fffff880`070d6000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)[/B]
[B]fffff880`04046000 fffff880`04047480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)[/B]
[B]fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)[/B]
[B]fffff880`070d6000 fffff880`070e8000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)[/B]
[B]fffff880`02afd000 fffff880`02b0a000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)[/B]
[B]fffff880`0902e000 fffff880`09039000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)[/B]
[B]fffff880`02adf000 fffff880`02afd000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)[/B]
[B]fffff880`03cef000 fffff880`03d03000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)[/B]
[B]fffff960`005b0000 fffff960`005ba000   TSDDD    TSDDD.dll    unavailable (00000000)[/B]
[B]fffff880`09039000 fffff880`09048000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)[/B]
[B]fffff880`03c51000 fffff880`03c77000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)[/B]
[B]fffff880`04e45000 fffff880`04e57000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)[/B]
[B]fffff880`064cb000 fffff880`064ccf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)[/B]
[B]fffff880`040a4000 fffff880`040b5000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)[/B]
[B]fffff880`04e57000 fffff880`04eb1000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)[/B]
[B]fffff880`03e56000 fffff880`03e61000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)[/B]
[B]fffff880`0404e000 fffff880`040a4000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)[/B]
[B]fffff880`00f2a000 fffff880`00f37000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)[/B]
[B]fffff880`02a65000 fffff880`02a73000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)[/B]
[B]fffff880`02a73000 fffff880`02a98000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)[/B]
[B]fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)[/B]
[B]fffff880`00f7f000 fffff880`00f94000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)[/B]
[B]fffff880`00f94000 fffff880`00ff0000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)[/B]
[B]fffff880`013ad000 fffff880`013f9000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)[/B]
[B]fffff880`03cd4000 fffff880`03cef000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)[/B]
[B]fffff880`02a98000 fffff880`02aa8000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)[/B]
[B]fffff880`00e0d000 fffff880`00eb1000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)[/B]
[B]fffff880`00eb1000 fffff880`00ec0000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)[/B]
[B]fffff880`02bd9000 fffff880`02be2000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)[/B]
[B]fffff960`00090000 fffff960`003a0000   win32k   win32k.sys   Tue Jan 04 22:59:44 2011 (4D23ECB0)[/B]
[B]fffff880`03c8c000 fffff880`03c95000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)[/B]
[B]fffff880`00f17000 fffff880`00f20000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)[/B]
[B]fffff880`065aa000 fffff880`065cb000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)[/B]
 
[B]Unloaded modules:[/B]
[B]fffff880`0128a000 fffff880`01298000   crashdmp.sys[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`01298000 fffff880`012a4000   dump_ataport[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`01030000 fffff880`01039000   dump_atapi.s[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`01039000 fffff880`0104c000   dump_dumpfve[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`04f64000 fffff880`04f66000   USBD.SYS[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`04f59000 fffff880`04f64000   LVUSBS64.sys[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`04ed1000 fffff880`04ed3000   USBD.SYS[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]fffff880`04ec6000 fffff880`04ed1000   LVUSBS64.sys[/B]
[B]Timestamp: unavailable (00000000)[/B]
[B]Checksum:  00000000[/B]
[B]3: kd> !analyze -v[/B]
[B]*******************************************************************************[/B]
[B]*                                                                             *[/B]
[B]*                        Bugcheck Analysis                                    *[/B]
[B]*                                                                             *[/B]
[B]*******************************************************************************[/B]
 
[B]SYSTEM_SERVICE_EXCEPTION (3b)[/B]
[B]An exception happened while executing a system service routine.[/B]
[B]Arguments:[/B]
[B]Arg1: 00000000c0000005, Exception code that caused the bugcheck[/B]
[B]Arg2: fffff8800497f9d6, Address of the exception record for the exception that caused the bugcheck[/B]
[B]Arg3: fffff880096f0a60, Address of the context record for the exception that caused the bugcheck[/B]
[B]Arg4: 0000000000000000, zero.[/B]
 
[B]Debugging Details:[/B]
[B]------------------[/B]
 
 
[B]EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.[/B]
 
[B]FAULTING_IP: [/B]
[B]atikmdag+3789d6[/B]
[B]fffff880`0497f9d6 c3              ret[/B]
 
[B]CONTEXT:  fffff880096f0a60 -- (.cxr 0xfffff880096f0a60)[/B]
[B]rax=0000000000000000 rbx=fffffa8005130000 rcx=fffffa8004f73fe0[/B]
[B]rdx=0000000000001a66 rsi=0000000000000000 rdi=0000000000000000[/B]
[B]rip=fffff8800497f9d6 rsp=fffff880096f1438 rbp=fffffa80048eee40[/B]
[B]r8=0000000004000201  r9=fffff88004aaab50 r10=0000000003480000[/B]
[B]r11=fffff88004aaab50 r12=0000000000000000 r13=00000000c0000001[/B]
[B]r14=0000000000000345 r15=fffff900c00b92f0[/B]
[B]iopl=0         nv up ei ng nz na po nc[/B]
[B]cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286[/B]
[B]atikmdag+0x3789d6:[/B]
[B]fffff880`0497f9d6 c3              ret[/B]
[B]Resetting default scope[/B]
 
[B]CUSTOMER_CRASH_COUNT:  1[/B]
 
[B]DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT[/B]
 
[B]BUGCHECK_STR:  0x3B[/B]
 
[B]PROCESS_NAME:  LVPrcSrv.exe[/B]
 
[B]CURRENT_IRQL:  0[/B]
 
[B]LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff8800497f9d6[/B]
 
[B]STACK_TEXT:  [/B]
[B]fffff880`096f1438 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : atikmdag+0x3789d6[/B]
 
 
[B]FOLLOWUP_IP: [/B]
[B]atikmdag+3789d6[/B]
[B]fffff880`0497f9d6 c3              ret[/B]
 
[B]SYMBOL_STACK_INDEX:  0[/B]
 
[B]SYMBOL_NAME:  atikmdag+3789d6[/B]
 
[B]FOLLOWUP_NAME:  MachineOwner[/B]
 
[B]MODULE_NAME: atikmdag[/B]
 
[B]IMAGE_NAME:  atikmdag.sys[/B]
 
[B]DEBUG_FLR_IMAGE_TIMESTAMP:  4cc78ea1[/B]
 
[B]STACK_COMMAND:  .cxr 0xfffff880096f0a60 ; kb[/B]
 
[B]FAILURE_BUCKET_ID:  X64_0x3B_atikmdag+3789d6[/B]
 
[B]BUCKET_ID:  X64_0x3B_atikmdag+3789d6[/B]
 
[B]Followup: MachineOwner[/B]
[B]---------[/B]

I have ignored all the other reports and will concentrate only on the ones that have SPTD removed.
The reports are not always definitive, but rather give clues. The clues in this report are clear. It is either memory or your graphics driver
Atikmdag should be updated. If it is the most up to date, roll back to prior version.
Atikmdag.sys file description
Productname: ATI Radeon
Family Description: ATI Radeon Kernel Mode Driver
Company: ATI Technologies Inc.
http://support.amd.com/us/gpudownload/Pages/index.aspx

If you still do not work properly, take the memory test.

If overclocking restore normal settings

SFC /scannow
System Files - SFC Command


Scan with your Anti Virus

I
Download memtest86 and test RAM
www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
Run for 8 passes
If passes try a good stick in each slot for 3 passes
If fails do the same for 8 passes.

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs
http://www.duplexsecure.com/en/downloads
Use this SPTD uninstaller when you're done:

 

[Urosh92]

While waited for Catalyst Software Suite(93.5 MB)to install on half got BSOD again and computer restarted,then when windows came up had new BSOD with IRQ NOT LESS OR EQUAL(maybe it was IRQL )...Will try to install cataclyst software suite again now...

 

[Urosh92]

Got 4+ IREQL NOT LESS OR EQUAL bsods
and one System service exception

now I'm in safe mode with networking,still didn't install cataclyst software suite,what should I do?



EDIT: Doing SFC system scan now

 

[Urosh92]

Cannot repair member file [l:28{14}]"iassdo.dll.mui" of Microsoft-Windows-Networking-Internet_Authentication_Service_Iassdo.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch


000002f9 [SR] This component was referenced by [l:266{133}]"Microsoft-Windows-WindowsFoundation-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.Windows Foundation Language Pack"


CSI 000002fc [SR] Could not reproject corrupted file [ml:60{30},l:58{29}]"\??\C:\Windows\SysWOW64\en-US"\[l:28{14}]"iassdo.dll.mui"; source file in store is also corrupted



Found just this one as corrupted with SFC systemscan.Friend uploaded to me his working version of this file should I replace it?

 

[richc46]

Upload the file to us and someone will take a look at it.
C:\Windows\Logs\CBS\CBS.log is a massive file of approximately 5MB and if you care to see it all, you must send CBS.log to one of your own folders or the desktop from where you can double click on it. It will then open with Notepad. Note: You cannot open it inside the CBS folder. You will get an Access denied message.
But most likely you are only interested in the part that shows the corrupted files that were fixed – or not fixed. For that you need a significant data reduction. You do that as follows:
Open another elevated Command Prompt and paste this command into it:

findstr /c:"[SR]" %windir%\logs\cbs\cbs.log

This will show all the files you want to see in the Command Prompt window.
Since that window is not very practical for a detailed study, you want to paste the content into a Notepad, Wordpad or Word file.
For that you right click on the Command Prompt window (any place is good) and click Select All. Then you right click anywhere in the window. Now this whole text is stored on the clipboard and you can paste it into a document file (e.g. Notepad) where you can analyze it.

Source: My own blog
PER WHS

 

[Urosh92]

The one with" - Shortcut" is my corrupted file that I wanted to replace with that other one from .zip

 

[richc46]

I have given the file to one of the experts on the log. Please be patient. He is in another time zone and should be here by tomorrow morning.

 

[Urosh92]

Sure,not problem I'm not in hurry as long as my machine work:D

Thanks for your time by the way

 

[richc46]

You are very welcome. Everyone at the forum volunteers their time to help others. Its due to a combination of our passion for computers and helping others. After your CBS log is analyzed, the problems shown will be corrected or they will be too small to worry about, but I will probably be back.

 

[niemiro]

Hello!

Since we are fixing an issue (for I am going to try to fix it), I need a few more reports. That parsed log is really only for initial analysis. It is not safe to perform a fix off just that parsed log. Three steps:

1) Where did you get that file from your friend's machine? Was it C:\Windows\SysWOW64\en-US? Please put your friend's file on your Desktop now. Put it straight on your Desktop, and not zipped up or anything like that. The next steps wil determine whether it will be compatible for your computer.

2:

OTL - Download or alternative link here and here

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Under the Custom Scan box paste this in

/md5start
iassdo.dll.mui
/md5stop

• Click the None button, followed by Scan button. The scan wont take long.
• When the scan completes, it will open one notepad window. OTL.Txt. This is saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of this file, and post it here.

3) Please navigate to, and copy to your Desktop C:\Windows\Logs\CBS\CBS.log

Now right click on the CBS.log on your Desktop > Send to > Compressed (zipped) folder, and upload that zip file as an attachment here.

Thanks!

Richard

 

[Urosh92]

OTL logfile created on: 2/18/2011 4:48:13 PM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Urosh\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 73.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.66 Gb Total Space | 10.99 Gb Free Space | 2.36% Space Free | Partition Type: NTFS

Computer Name: UROSH-PC | User Name: Urosh | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========



< MD5 for: IASSDO.DLL.MUI >
[2009/06/10 21:44:37 | 000,005,115 | ---- | M] () MD5=2C8E4B5C21697CC270C2024064C4EB93 -- C:\Windows\SysWOW64\en-US\iassdo.dll.mui
[2009/06/10 21:44:37 | 000,005,115 | ---- | M] () MD5=2C8E4B5C21697CC270C2024064C4EB93 -- C:\Windows\winsxs\x86_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e86c80b89a3f77b7\iassdo.dll.mui
[2011/02/18 01:43:17 | 000,047,104 | ---- | M] (Microsoft Corporation) MD5=3688F5BF18C25B0207AF3C259E29D75B -- C:\Users\Urosh\Desktop\iassdo.dll.mui
[2009/07/14 03:30:24 | 000,047,104 | ---- | M] (Microsoft Corporation) MD5=67EB435469C55E82551257C4AAF38AB0 -- C:\Windows\SysNative\en-US\iassdo.dll.mui
[2009/07/14 03:30:24 | 000,047,104 | ---- | M] (Microsoft Corporation) MD5=67EB435469C55E82551257C4AAF38AB0 -- C:\Windows\winsxs\amd64_microsoft-windows-n..ce_iassdo.resources_31bf3856ad364e35_6.1.7600.16385_en-us_448b1c3c529ce8ed\iassdo.dll.mui

< End of report >




P.S. CBS.log is the one from yesterday...

P.S.2 in meantime my anti virus found 'TR/Crypt.ZPACK.Gen [trojan]'s...uploaded report from anti-vir too