weird blue screen

KRB

KRB

KRB Tech Support
Member
on my freinds vista home premium x64 that i run tech support for he gets a blue screen every few days, below he took a picture of it with his digital camera
and once in a while his task manager wont open

attached is the most recent minidump

thanks in advance
 

Attachments

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
unforunatly it got worse now it freezes when the computer starts, and the blue screens apearing more often, need help please
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
STOP 0xF4: CRITICAL_OBJECT_TERMINATION: Bug Check 0xF4: CRITICAL_OBJECT_TERMINATION

Can be caused by malware or by a misbehaving service that terminates a critical system process.

Please zip up the entire contents of the C:\Windows\Minidump directory and upload the .zip file with your next post. Often analyzing multiple dump files will reveal a pattern that can't be seen in just one dump file. Also, is there any pattern to when the Blue Screens occur? Does the user recall anything about the system that may have seemed a bit different just prior to the BSOD's starting?

I'd suggest:
- visiting Windows Update and ensuring that you're current on updates
- scanning for malware with a reliable online scanner (I've had good success with the Panda scanner here: FREE ANTIVIRUS online: ActiveScan 2.0 - PANDA SECURITY )
- updating the older drivers on your system (listed below)

Older drivers:
Code: 
int15_64.sys Tue Dec 25 21:58:55 2007 [U][B]Acer Empowering eRecovery driver[/B][/U]
lmimirr.sys  Tue Apr 10 18:32:45 2007 [U][B]Remote Control software from Remotely Anywhere[/B][/U]

Memory dump logfile analysis:
Code: 
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR-RC1-Desktop\TempDUMP\DATA\01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18005.amd64fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0xfffff800`02048000 PsLoadedModuleList = 0xfffff800`0220cdd0
Debug session time: Sat Sep 12 21:54:44.112 2009 (GMT-4)
System Uptime: 0 days 0:05:54.912
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa800dcd3c10, fffffa800dcd3e48, fffff800023258d0}

Probably caused by : csrss.exe

Followup: MachineOwner
---------

2: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff8000226f000
THREAD fffffa800c1cdbb0  Cid 02b0.05d0  Teb: 000007fffffa8000 Win32Thread: fffff900c26ead50 RUNNING on processor 2
Not impersonating
GetUlongFromAddress: unable to read from fffff800021eec00
Owning Process            fffffa800dcd3c10       Image:         csrss.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      22750        
Context Switch Count      306                 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x000007fefdd55f20
Stack Init fffffa6008010db0 Current fffffa600800f550
Base fffffa6008011000 Limit fffffa6008009000 Call 0
Priority 14 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffffa60`0800fc68 fffff800`023a1353 : 00000000`000000f4 00000000`00000003 fffffa80`0dcd3c10 fffffa80`0dcd3e48 : nt!KeBugCheckEx
fffffa60`0800fc70 fffff800`022ba358 : fffffa80`0c1cdbb0 fffffa80`0c1cdbb0 fffffa60`08010c20 fffffa60`08010ae0 : nt!PspCatchCriticalBreak+0x93
fffffa60`0800fcb0 fffff800`022edf50 : fffffa80`0c1cdbb0 00000000`00000008 fffffa60`08010c20 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x110f6
fffffa60`0800fd00 fffff800`020a1ef3 : fffffa80`0dcd3c10 fffffa80`0c1cdbb0 fffffa60`0800fde0 fffffa60`08010c20 : nt!NtTerminateProcess+0xd8
fffffa60`0800fd60 fffff800`020a2400 : fffff800`021022cd fffffa60`08010540 fffffa60`08010ca0 fffffa60`08010c20 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`0800fd60)
fffffa60`0800fef8 fffff800`021022cd : fffffa60`08010540 fffffa60`08010ca0 fffffa60`08010c20 00000000`00000030 : nt!KiServiceLinkage
fffffa60`0800ff00 fffff800`02162fa1 : fffffa60`08010540 fffffa60`08010540 fffffa60`08010c20 000007fe`fdcffe01 : nt! ?? ::FNODOBFM::`string'+0x2935c
fffffa60`08010500 fffff800`020a4060 : fffffa60`08010540 fffffa60`080105e0 fffffa80`0c1cdbb0 00000000`00000000 : nt!KiRaiseException+0x141
fffffa60`08010ae0 fffff800`020a1ef3 : 00000000`00000008 fffffa60`08010ca0 00000000`09b8f701 00000000`00000000 : nt!NtRaiseException+0x80
fffffa60`08010c20 000007fe`fdcc1b30 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`08010c20)
00000000`09b8f6e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fdcc1b30

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa800dcd3c10, Terminating object
Arg3: fffffa800dcd3e48, Process image file name
Arg4: fffff800023258d0, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa800dcd3c10

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_CODE: (Win32) 0xc1cdbb0 (203217840) - <Unable to get error code text>

BUGCHECK_STR:  0xF4_C1CDBB0

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffffa60`0800fc68 fffff800`023a1353 : 00000000`000000f4 00000000`00000003 fffffa80`0dcd3c10 fffffa80`0dcd3e48 : nt!KeBugCheckEx
fffffa60`0800fc70 fffff800`022ba358 : fffffa80`0c1cdbb0 fffffa80`0c1cdbb0 fffffa60`08010c20 fffffa60`08010ae0 : nt!PspCatchCriticalBreak+0x93
fffffa60`0800fcb0 fffff800`022edf50 : fffffa80`0c1cdbb0 00000000`00000008 fffffa60`08010c20 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x110f6
fffffa60`0800fd00 fffff800`020a1ef3 : fffffa80`0dcd3c10 fffffa80`0c1cdbb0 fffffa60`0800fde0 fffffa60`08010c20 : nt!NtTerminateProcess+0xd8
fffffa60`0800fd60 fffff800`020a2400 : fffff800`021022cd fffffa60`08010540 fffffa60`08010ca0 fffffa60`08010c20 : nt!KiSystemServiceCopyEnd+0x13
fffffa60`0800fef8 fffff800`021022cd : fffffa60`08010540 fffffa60`08010ca0 fffffa60`08010c20 00000000`00000030 : nt!KiServiceLinkage
fffffa60`0800ff00 fffff800`02162fa1 : fffffa60`08010540 fffffa60`08010540 fffffa60`08010c20 000007fe`fdcffe01 : nt! ?? ::FNODOBFM::`string'+0x2935c
fffffa60`08010500 fffff800`020a4060 : fffffa60`08010540 fffffa60`080105e0 fffffa80`0c1cdbb0 00000000`00000000 : nt!KiRaiseException+0x141
fffffa60`08010ae0 fffff800`020a1ef3 : 00000000`00000008 fffffa60`08010ca0 00000000`09b8f701 00000000`00000000 : nt!NtRaiseException+0x80
fffffa60`08010c20 000007fe`fdcc1b30 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`09b8f6e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fdcc1b30


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_C1CDBB0_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_C1CDBB0_IMAGE_csrss.exe

Followup: MachineOwner
---------

rax=fffffa600800fcf8 rbx=fffffa800c1cdb00 rcx=00000000000000f4
rdx=0000000000000003 rsi=fffffa800dcd3e48 rdi=fffffa800dcd3c10
rip=fffff800020a2450 rsp=fffffa600800fc68 rbp=fffff800023258d0
 r8=fffffa800dcd3c10  r9=fffffa800dcd3e48 r10=fffff800022ede78
r11=000000000024ae78 r12=fffffa800dcd3c10 r13=00000000c0000005
r14=0000000000000008 r15=ffffffffffffffff
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff800`020a2450 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffffa60`0800fc70=00000000000000f4
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffffa60`0800fc68 fffff800`023a1353 : 00000000`000000f4 00000000`00000003 fffffa80`0dcd3c10 fffffa80`0dcd3e48 : nt!KeBugCheckEx
fffffa60`0800fc70 fffff800`022ba358 : fffffa80`0c1cdbb0 fffffa80`0c1cdbb0 fffffa60`08010c20 fffffa60`08010ae0 : nt!PspCatchCriticalBreak+0x93
fffffa60`0800fcb0 fffff800`022edf50 : fffffa80`0c1cdbb0 00000000`00000008 fffffa60`08010c20 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x110f6
fffffa60`0800fd00 fffff800`020a1ef3 : fffffa80`0dcd3c10 fffffa80`0c1cdbb0 fffffa60`0800fde0 fffffa60`08010c20 : nt!NtTerminateProcess+0xd8
fffffa60`0800fd60 fffff800`020a2400 : fffff800`021022cd fffffa60`08010540 fffffa60`08010ca0 fffffa60`08010c20 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`0800fd60)
fffffa60`0800fef8 fffff800`021022cd : fffffa60`08010540 fffffa60`08010ca0 fffffa60`08010c20 00000000`00000030 : nt!KiServiceLinkage
fffffa60`0800ff00 fffff800`02162fa1 : fffffa60`08010540 fffffa60`08010540 fffffa60`08010c20 000007fe`fdcffe01 : nt! ?? ::FNODOBFM::`string'+0x2935c
fffffa60`08010500 fffff800`020a4060 : fffffa60`08010540 fffffa60`080105e0 fffffa80`0c1cdbb0 00000000`00000000 : nt!KiRaiseException+0x141
fffffa60`08010ae0 fffff800`020a1ef3 : 00000000`00000008 fffffa60`08010ca0 00000000`09b8f701 00000000`00000000 : nt!NtRaiseException+0x80
fffffa60`08010c20 000007fe`fdcc1b30 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffffa60`08010c20)
00000000`09b8f6e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fdcc1b30
start             end                 module name
fffff800`02002000 fffff800`02048000   hal      hal.dll      Sat Apr 11 03:04:56 2009 (49E04118)
fffff800`02048000 fffff800`02560000   nt       ntkrnlmp.exe Sat Apr 11 00:58:39 2009 (49E0237F)
fffff960`00010000 fffff960`002c1000   win32k   win32k.sys   Tue Apr 21 08:03:41 2009 (49EDB61D)
fffff960`00460000 fffff960`0046a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00680000 fffff960`00691000   cdd      cdd.dll      Sat Apr 11 03:03:49 2009 (49E040D5)
fffffa60`0060f000 fffffa60`00619000   kdcom    kdcom.dll    Sat Apr 11 03:07:57 2009 (49E041CD)
fffffa60`00619000 fffffa60`00654000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 03:05:41 2009 (49E04145)
fffffa60`00654000 fffffa60`00668000   PSHED    PSHED.dll    Sat Apr 11 03:08:17 2009 (49E041E1)
fffffa60`00668000 fffffa60`006c5000   CLFS     CLFS.SYS     Sat Apr 11 00:54:21 2009 (49E0227D)
fffffa60`006c5000 fffffa60`00777000   CI       CI.dll       Sat Apr 11 03:08:09 2009 (49E041D9)
fffffa60`00777000 fffffa60`007fe000   ksecdd   ksecdd.sys   Mon Jun 15 09:15:18 2009 (4A364966)
fffffa60`00803000 fffffa60`008dd000   Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008dd000 fffffa60`008eb000   WDFLDR   WDFLDR.SYS   Sat Jan 19 01:32:33 2008 (47919981)
fffffa60`008eb000 fffffa60`0091b000   pci      pci.sys      Sat Apr 11 01:03:33 2009 (49E024A5)
fffffa60`0091b000 fffffa60`00981000   volmgrx  volmgrx.sys  Sat Apr 11 01:35:14 2009 (49E02C12)
fffffa60`00981000 fffffa60`00994000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`00994000 fffffa60`009e4000   msrpc    msrpc.sys    Sat Apr 11 01:32:13 2009 (49E02B5D)
fffffa60`00a00000 fffffa60`00a08000   UBHelper UBHelper.sys Wed Jan 30 20:30:03 2008 (47A1249B)
fffffa60`00a08000 fffffa60`00b3a000   sptd     sptd.sys     Wed Jan 02 11:37:26 2008 (477BBDC6)
fffffa60`00b3a000 fffffa60`00b43000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`00b43000 fffffa60`00b71000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`00b71000 fffffa60`00bc7000   acpi     acpi.sys     Sat Apr 11 01:03:26 2009 (49E0249E)
fffffa60`00bc7000 fffffa60`00bd1000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00bd1000 fffffa60`00be6000   partmgr  partmgr.sys  Sat Apr 11 01:34:51 2009 (49E02BFB)
fffffa60`00be6000 fffffa60`00bfa000   volmgr   volmgr.sys   Sat Apr 11 01:34:49 2009 (49E02BF9)
fffffa60`00c05000 fffffa60`00d1f000   iaStor   iaStor.sys   Sun Jul 20 20:29:34 2008 (4883D86E)
fffffa60`00d1f000 fffffa60`00d27000   atapi    atapi.sys    Sat Apr 11 01:34:19 2009 (49E02BDB)
fffffa60`00d27000 fffffa60`00d4b000   ataport  ataport.SYS  Sat Apr 11 01:34:25 2009 (49E02BE1)
fffffa60`00d4b000 fffffa60`00d55000   msahci   msahci.sys   Sat Apr 11 01:34:29 2009 (49E02BE5)
fffffa60`00d55000 fffffa60`00d65000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 01:34:22 2009 (49E02BDE)
fffffa60`00d65000 fffffa60`00dac000   fltmgr   fltmgr.sys   Sat Apr 11 00:54:38 2009 (49E0228E)
fffffa60`00dac000 fffffa60`00dc0000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`00dc0000 fffffa60`00dc9000   psdfilter psdfilter.sys Mon Feb 18 08:51:32 2008 (47B98D64)
fffffa60`00dc9000 fffffa60`00df5000   ecache   ecache.sys   Sat Apr 11 01:36:18 2009 (49E02C52)
fffffa60`00e03000 fffffa60`00fc6000   ndis     ndis.sys     Sat Apr 11 01:43:15 2009 (49E02DF3)
fffffa60`00fc6000 fffffa60`00ff2000   fwpkclnt fwpkclnt.sys Sat Apr 11 01:42:44 2009 (49E02DD4)
fffffa60`0100c000 fffffa60`01065000   NETIO    NETIO.SYS    Sat Apr 11 01:43:34 2009 (49E02E06)
fffffa60`01065000 fffffa60`011db000   tcpip    tcpip.sys    Fri Aug 14 10:10:32 2009 (4A857058)
fffffa60`01200000 fffffa60`01380000   Ntfs     Ntfs.sys     Sat Apr 11 00:55:38 2009 (49E022CA)
fffffa60`01380000 fffffa60`013c4000   volsnap  volsnap.sys  Sat Apr 11 01:35:33 2009 (49E02C25)
fffffa60`013c4000 fffffa60`013cc000   spldr    spldr.sys    Mon Jan 12 16:51:29 2009 (496BBB61)
fffffa60`013cc000 fffffa60`013d3000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffffa60`013d3000 fffffa60`013e5000   mup      mup.sys      Sat Apr 11 00:54:47 2009 (49E02297)
fffffa60`013e5000 fffffa60`013f9000   disk     disk.sys     Sat Apr 11 01:34:38 2009 (49E02BEE)
fffffa60`01407000 fffffa60`01433000   CLASSPNP CLASSPNP.SYS Sat Apr 11 01:34:15 2009 (49E02BD7)
fffffa60`01433000 fffffa60`0143d000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`0143d000 fffffa60`01444000   avgrkx64 avgrkx64.sys Tue Feb 24 04:31:25 2009 (49A3BE6D)
fffffa60`01444000 fffffa60`0155e000   dump_iaStor dump_iaStor.sys Sun Jul 20 20:29:34 2008 (4883D86E)
fffffa60`0156c000 fffffa60`01578000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`01578000 fffffa60`01581000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`01581000 fffffa60`01594000   intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`01594000 fffffa60`015a4000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`015a4000 fffffa60`015ec000   usbhub   usbhub.sys   Sat Apr 11 01:39:52 2009 (49E02D28)
fffffa60`02e00000 fffffa60`02e0b000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`02e0d000 fffffa60`0347a000   atikmdag atikmdag.sys Wed Sep 17 04:32:13 2008 (48D0C08D)
fffffa60`0347a000 fffffa60`0355b000   dxgkrnl  dxgkrnl.sys  Sat Apr 11 01:10:13 2009 (49E02635)
fffffa60`0355b000 fffffa60`0356b000   watchdog watchdog.sys Sat Apr 11 01:09:16 2009 (49E025FC)
fffffa60`0356b000 fffffa60`03588000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`03588000 fffffa60`035a4000   cdrom    cdrom.sys    Sat Apr 11 01:34:39 2009 (49E02BEF)
fffffa60`035a4000 fffffa60`035ac000   NTIDrvr  NTIDrvr.sys  Wed Jan 30 20:29:47 2008 (47A1248B)
fffffa60`035ac000 fffffa60`035b7000   GEARAspiWDM GEARAspiWDM.sys Thu Mar 19 11:34:13 2009 (49C265F5)
fffffa60`035b7000 fffffa60`035ca000   termdd   termdd.sys   Sat Apr 11 01:48:13 2009 (49E02F1D)
fffffa60`035ca000 fffffa60`035fe000   ks       ks.sys       Sat Apr 11 01:33:51 2009 (49E02BBF)
fffffa60`03601000 fffffa60`036ee000   HDAudBus HDAudBus.sys Sat Apr 11 01:39:38 2009 (49E02D1A)
fffffa60`036ee000 fffffa60`0373e000   e1y60x64 e1y60x64.sys Fri Jun 13 19:41:17 2008 (4853059D)
fffffa60`0373e000 fffffa60`0374a000   usbuhci  usbuhci.sys  Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`0374a000 fffffa60`03790000   USBPORT  USBPORT.SYS  Sat Apr 11 01:39:39 2009 (49E02D1B)
fffffa60`03790000 fffffa60`037a1000   usbehci  usbehci.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`037a1000 fffffa60`037b2b00   ohci1394 ohci1394.sys Sat Apr 11 01:39:49 2009 (49E02D25)
fffffa60`037b3000 fffffa60`037c2f00   1394BUS  1394BUS.SYS  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`037d9000 fffffa60`037e7000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`037e7000 fffffa60`037f3000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`037f3000 fffffa60`037ff000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`03806000 fffffa60`0387d000   asahxz4z asahxz4z.SYS Fri Jan 04 08:57:15 2008 (477E3B3B)
fffffa60`0387d000 fffffa60`03886000   wmiacpi  wmiacpi.sys  Sat Jan 19 01:02:42 2008 (47919282)
fffffa60`03886000 fffffa60`0388d000   lmimirr  lmimirr.sys  Tue Apr 10 18:32:45 2007 (461C108D)
fffffa60`0388d000 fffffa60`038b2000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`038b2000 fffffa60`038eb000   msiscsi  msiscsi.sys  Sat Apr 11 01:36:09 2009 (49E02C49)
fffffa60`038eb000 fffffa60`03948000   storport storport.sys Sat Apr 11 01:34:45 2009 (49E02BF5)
fffffa60`03948000 fffffa60`03955000   TDI      TDI.SYS      Sat Apr 11 01:44:14 2009 (49E02E2E)
fffffa60`03955000 fffffa60`03978000   rasl2tp  rasl2tp.sys  Sat Apr 11 01:43:37 2009 (49E02E09)
fffffa60`03978000 fffffa60`03984000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`03984000 fffffa60`039b5000   ndiswan  ndiswan.sys  Sat Apr 11 01:43:39 2009 (49E02E0B)
fffffa60`039b5000 fffffa60`039c5000   raspppoe raspppoe.sys Sat Apr 11 01:43:33 2009 (49E02E05)
fffffa60`039c5000 fffffa60`039e3000   raspptp  raspptp.sys  Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`039e3000 fffffa60`039fb000   rassstp  rassstp.sys  Sat Apr 11 01:43:46 2009 (49E02E12)
fffffa60`039fb000 fffffa60`039fc480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`04202000 fffffa60`0424b000   HdAudio  HdAudio.sys  Sat Apr 11 01:39:51 2009 (49E02D27)
fffffa60`0424b000 fffffa60`04286000   portcls  portcls.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`04286000 fffffa60`042a9000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`042a9000 fffffa60`042ae180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`042af000 fffffa60`042b8000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`042b8000 fffffa60`042c6000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`042c6000 fffffa60`042cf000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`042cf000 fffffa60`042d8000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`042d8000 fffffa60`042e3000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`042e3000 fffffa60`042f4000   Npfs     Npfs.SYS     Sat Apr 11 00:54:22 2009 (49E0227E)
fffffa60`042f4000 fffffa60`042fd000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`042fd000 fffffa60`0431a000   tdx      tdx.sys      Sat Apr 11 01:43:00 2009 (49E02DE4)
fffffa60`0431a000 fffffa60`04335000   smb      smb.sys      Sat Apr 11 01:42:19 2009 (49E02DBB)
fffffa60`04335000 fffffa60`04359000   avgtdia  avgtdia.sys  Mon Apr 06 09:43:58 2009 (49DA071E)
fffffa60`04359000 fffffa60`0439d000   netbt    netbt.sys    Sat Apr 11 01:42:31 2009 (49E02DC7)
fffffa60`0439d000 fffffa60`043a8000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`043a8000 fffffa60`043da000   srv2     srv2.sys     Sat Apr 11 00:57:35 2009 (49E0233F)
fffffa60`04400000 fffffa60`0456c300   RTKVHD64 RTKVHD64.sys Thu Sep 18 06:50:25 2008 (48D23271)
fffffa60`0456d000 fffffa60`0457b000   gwfilt64 gwfilt64.sys Thu Apr 10 04:20:29 2008 (47FDCDCD)
fffffa60`0457b000 fffffa60`0458f000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`0458f000 fffffa60`045ab000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`045ab000 fffffa60`045ace00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`045ad000 fffffa60`045c5000   USBSTOR  USBSTOR.SYS  Sat Apr 11 01:39:38 2009 (49E02D1A)
fffffa60`045c5000 fffffa60`045ce000   hidusb   hidusb.sys   Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`045ce000 fffffa60`045e0000   HIDCLASS HIDCLASS.SYS Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`045e0000 fffffa60`045e7b80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`045e8000 fffffa60`045f3000   kbdhid   kbdhid.sys   Sat Apr 11 01:33:40 2009 (49E02BB4)
fffffa60`045f3000 fffffa60`045fd000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`04600000 fffffa60`0466b000   afd      afd.sys      Sat Apr 11 01:44:21 2009 (49E02E35)
fffffa60`0466b000 fffffa60`04689000   pacer    pacer.sys    Sat Apr 11 01:42:56 2009 (49E02DE0)
fffffa60`04689000 fffffa60`04698000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`04698000 fffffa60`046b3000   wanarp   wanarp.sys   Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`046b3000 fffffa60`04700000   rdbss    rdbss.sys    Sat Apr 11 00:55:21 2009 (49E022B9)
fffffa60`04700000 fffffa60`0470c000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffffa60`0470c000 fffffa60`04729000   dfsc     dfsc.sys     Sat Apr 11 00:54:44 2009 (49E02294)
fffffa60`04729000 fffffa60`0472f880   avgmfx64 avgmfx64.sys Wed Jul 01 16:38:25 2009 (4A4BC941)
fffffa60`04730000 fffffa60`0479e000   avgldx64 avgldx64.sys Thu Jul 09 20:19:20 2009 (4A568908)
fffffa60`0479e000 fffffa60`047ae000   usbaapl64 usbaapl64.sys Wed Apr 15 14:58:13 2009 (49E62E45)
fffffa60`047ae000 fffffa60`047f7000   mrxsmb10 mrxsmb10.sys Sat Apr 11 00:55:23 2009 (49E022BB)
fffffa60`04804000 fffffa60`048e6000   xnacc    xnacc.sys    Sat Jan 19 01:30:06 2008 (479198EE)
fffffa60`048e6000 fffffa60`048fe280   usbaudio usbaudio.sys Sat Apr 11 01:39:34 2009 (49E02D16)
fffffa60`048ff000 fffffa60`04934000   fastfat  fastfat.SYS  Sat Apr 11 00:54:10 2009 (49E02272)
fffffa60`04934000 fffffa60`04950000   cdfs     cdfs.sys     Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`04950000 fffffa60`0495e000   crashdmp crashdmp.sys Sat Apr 11 01:34:31 2009 (49E02BE7)
fffffa60`0495e000 fffffa60`0496a000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`0496a000 fffffa60`0497d000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`0497d000 fffffa60`0499f000   luafv    luafv.sys    Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`0499f000 fffffa60`049c8000   mrxsmb   mrxsmb.sys   Sat Apr 11 00:55:33 2009 (49E022C5)
fffffa60`049c8000 fffffa60`049e7000   mrxsmb20 mrxsmb20.sys Sat Apr 11 00:55:26 2009 (49E022BE)
fffffa60`05c02000 fffffa60`05c9c000   spsys    spsys.sys    Tue Mar 10 13:16:43 2009 (49B6A07B)
fffffa60`05c9c000 fffffa60`05cb0000   lltdio   lltdio.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`05cb0000 fffffa60`05cc8000   rspndr   rspndr.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`05cc8000 fffffa60`05d67000   HTTP     HTTP.sys     Sat Apr 11 01:42:20 2009 (49E02DBC)
fffffa60`05d67000 fffffa60`05d90000   srvnet   srvnet.sys   Sat Apr 11 00:57:28 2009 (49E02338)
fffffa60`05d90000 fffffa60`05dae000   bowser   bowser.sys   Sat Jan 19 00:54:51 2008 (479190AB)
fffffa60`05dae000 fffffa60`05dc8000   mpsdrv   mpsdrv.sys   Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`05dc8000 fffffa60`05def000   mrxdav   mrxdav.sys   Sat Apr 11 00:55:42 2009 (49E022CE)
fffffa60`06208000 fffffa60`06299000   srv      srv.sys      Sat Apr 11 00:57:52 2009 (49E02350)
fffffa60`06299000 fffffa60`062b1000   int15_64 int15_64.sys Tue Dec 25 21:58:55 2007 (4771C36F)
fffffa60`062b1000 fffffa60`062b8000   RaInfo   RaInfo.sys   Fri Jan 04 13:57:14 2008 (477E818A)
fffffa60`062b8000 fffffa60`062cb000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:56 2008 (487B7E50)
fffffa60`062cb000 fffffa60`06381000   peauth   peauth.sys   Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`06381000 fffffa60`0638a000   PSDNServ PSDNServ.sys Mon Feb 18 08:51:40 2008 (47B98D6C)
fffffa60`0638a000 fffffa60`0639d000   PSDVdisk PSDVdisk.sys Mon Feb 18 08:51:49 2008 (47B98D75)
fffffa60`0639d000 fffffa60`063a8000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`063a8000 fffffa60`063b8000   tcpipreg tcpipreg.sys Fri Aug 14 10:09:29 2009 (4A857019)
fffffa60`063b8000 fffffa60`063d8000   WUDFRd   WUDFRd.sys   Sat Jan 19 01:33:43 2008 (479199C7)
fffffa60`063d8000 fffffa60`063ee000   WUDFPf   WUDFPf.sys   Sat Jan 19 01:33:22 2008 (479199B2)

Unloaded modules:
fffffa60`01444000 fffffa60`01452000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`01452000 fffffa60`0156c000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`037c3000 fffffa60`037d9000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffffa60`037b3000 fffffa60`037c2f00   1394BUS  1394BUS.SYS  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`00b71000 fffffa60`00bc7000   acpi     acpi.sys     Sat Apr 11 01:03:26 2009 (49E0249E)
fffffa60`04600000 fffffa60`0466b000   afd      afd.sys      Sat Apr 11 01:44:21 2009 (49E02E35)
fffffa60`03806000 fffffa60`0387d000   asahxz4z asahxz4z.SYS Fri Jan 04 08:57:15 2008 (477E3B3B)
fffffa60`00d1f000 fffffa60`00d27000   atapi    atapi.sys    Sat Apr 11 01:34:19 2009 (49E02BDB)
fffffa60`00d27000 fffffa60`00d4b000   ataport  ataport.SYS  Sat Apr 11 01:34:25 2009 (49E02BE1)
fffffa60`02e0d000 fffffa60`0347a000   atikmdag atikmdag.sys Wed Sep 17 04:32:13 2008 (48D0C08D)
fffffa60`04730000 fffffa60`0479e000   avgldx64 avgldx64.sys Thu Jul 09 20:19:20 2009 (4A568908)
fffffa60`04729000 fffffa60`0472f880   avgmfx64 avgmfx64.sys Wed Jul 01 16:38:25 2009 (4A4BC941)
fffffa60`0143d000 fffffa60`01444000   avgrkx64 avgrkx64.sys Tue Feb 24 04:31:25 2009 (49A3BE6D)
fffffa60`04335000 fffffa60`04359000   avgtdia  avgtdia.sys  Mon Apr 06 09:43:58 2009 (49DA071E)
fffffa60`05d90000 fffffa60`05dae000   bowser   bowser.sys   Sat Jan 19 00:54:51 2008 (479190AB)
fffff960`00680000 fffff960`00691000   cdd      cdd.dll      Sat Apr 11 03:03:49 2009 (49E040D5)
fffffa60`04934000 fffffa60`04950000   cdfs     cdfs.sys     Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`03588000 fffffa60`035a4000   cdrom    cdrom.sys    Sat Apr 11 01:34:39 2009 (49E02BEF)
fffffa60`006c5000 fffffa60`00777000   CI       CI.dll       Sat Apr 11 03:08:09 2009 (49E041D9)
fffffa60`01407000 fffffa60`01433000   CLASSPNP CLASSPNP.SYS Sat Apr 11 01:34:15 2009 (49E02BD7)
fffffa60`00668000 fffffa60`006c5000   CLFS     CLFS.SYS     Sat Apr 11 00:54:21 2009 (49E0227D)
fffffa60`04950000 fffffa60`0495e000   crashdmp crashdmp.sys Sat Apr 11 01:34:31 2009 (49E02BE7)
fffffa60`01433000 fffffa60`0143d000   crcdisk  crcdisk.sys  Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`0470c000 fffffa60`04729000   dfsc     dfsc.sys     Sat Apr 11 00:54:44 2009 (49E02294)
fffffa60`013e5000 fffffa60`013f9000   disk     disk.sys     Sat Apr 11 01:34:38 2009 (49E02BEE)
fffffa60`04286000 fffffa60`042a9000   drmk     drmk.sys     Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`01444000 fffffa60`0155e000   dump_iaStor dump_iaStor.sys Sun Jul 20 20:29:34 2008 (4883D86E)
fffffa60`0495e000 fffffa60`0496a000   Dxapi    Dxapi.sys    Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`0347a000 fffffa60`0355b000   dxgkrnl  dxgkrnl.sys  Sat Apr 11 01:10:13 2009 (49E02635)
fffffa60`036ee000 fffffa60`0373e000   e1y60x64 e1y60x64.sys Fri Jun 13 19:41:17 2008 (4853059D)
fffffa60`00dc9000 fffffa60`00df5000   ecache   ecache.sys   Sat Apr 11 01:36:18 2009 (49E02C52)
fffffa60`048ff000 fffffa60`04934000   fastfat  fastfat.SYS  Sat Apr 11 00:54:10 2009 (49E02272)
fffffa60`00dac000 fffffa60`00dc0000   fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`00d65000 fffffa60`00dac000   fltmgr   fltmgr.sys   Sat Apr 11 00:54:38 2009 (49E0228E)
fffffa60`045f3000 fffffa60`045fd000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:53:41 2008 (47919065)
fffffa60`00fc6000 fffffa60`00ff2000   fwpkclnt fwpkclnt.sys Sat Apr 11 01:42:44 2009 (49E02DD4)
fffffa60`035ac000 fffffa60`035b7000   GEARAspiWDM GEARAspiWDM.sys Thu Mar 19 11:34:13 2009 (49C265F5)
fffffa60`0456d000 fffffa60`0457b000   gwfilt64 gwfilt64.sys Thu Apr 10 04:20:29 2008 (47FDCDCD)
fffff800`02002000 fffff800`02048000   hal      hal.dll      Sat Apr 11 03:04:56 2009 (49E04118)
fffffa60`03601000 fffffa60`036ee000   HDAudBus HDAudBus.sys Sat Apr 11 01:39:38 2009 (49E02D1A)
fffffa60`04202000 fffffa60`0424b000   HdAudio  HdAudio.sys  Sat Apr 11 01:39:51 2009 (49E02D27)
fffffa60`045ce000 fffffa60`045e0000   HIDCLASS HIDCLASS.SYS Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`045e0000 fffffa60`045e7b80   HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`045c5000 fffffa60`045ce000   hidusb   hidusb.sys   Sat Apr 11 01:39:32 2009 (49E02D14)
fffffa60`05cc8000 fffffa60`05d67000   HTTP     HTTP.sys     Sat Apr 11 01:42:20 2009 (49E02DBC)
fffffa60`00c05000 fffffa60`00d1f000   iaStor   iaStor.sys   Sun Jul 20 20:29:34 2008 (4883D86E)
fffffa60`06299000 fffffa60`062b1000   int15_64 int15_64.sys Tue Dec 25 21:58:55 2007 (4771C36F)
fffffa60`01581000 fffffa60`01594000   intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`037d9000 fffffa60`037e7000   kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`045e8000 fffffa60`045f3000   kbdhid   kbdhid.sys   Sat Apr 11 01:33:40 2009 (49E02BB4)
fffffa60`0060f000 fffffa60`00619000   kdcom    kdcom.dll    Sat Apr 11 03:07:57 2009 (49E041CD)
fffffa60`035ca000 fffffa60`035fe000   ks       ks.sys       Sat Apr 11 01:33:51 2009 (49E02BBF)
fffffa60`00777000 fffffa60`007fe000   ksecdd   ksecdd.sys   Mon Jun 15 09:15:18 2009 (4A364966)
fffffa60`042a9000 fffffa60`042ae180   ksthunk  ksthunk.sys  Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`05c9c000 fffffa60`05cb0000   lltdio   lltdio.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`03886000 fffffa60`0388d000   lmimirr  lmimirr.sys  Tue Apr 10 18:32:45 2007 (461C108D)
fffffa60`062b8000 fffffa60`062cb000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:56 2008 (487B7E50)
fffffa60`0497d000 fffffa60`0499f000   luafv    luafv.sys    Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`00619000 fffffa60`00654000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 03:05:41 2009 (49E04145)
fffffa60`0496a000 fffffa60`0497d000   monitor  monitor.sys  Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`037e7000 fffffa60`037f3000   mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`0439d000 fffffa60`043a8000   mouhid   mouhid.sys   Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`00981000 fffffa60`00994000   mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`05dae000 fffffa60`05dc8000   mpsdrv   mpsdrv.sys   Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`05dc8000 fffffa60`05def000   mrxdav   mrxdav.sys   Sat Apr 11 00:55:42 2009 (49E022CE)
fffffa60`0499f000 fffffa60`049c8000   mrxsmb   mrxsmb.sys   Sat Apr 11 00:55:33 2009 (49E022C5)
fffffa60`047ae000 fffffa60`047f7000   mrxsmb10 mrxsmb10.sys Sat Apr 11 00:55:23 2009 (49E022BB)
fffffa60`049c8000 fffffa60`049e7000   mrxsmb20 mrxsmb20.sys Sat Apr 11 00:55:26 2009 (49E022BE)
fffffa60`00d4b000 fffffa60`00d55000   msahci   msahci.sys   Sat Apr 11 01:34:29 2009 (49E02BE5)
fffffa60`042d8000 fffffa60`042e3000   Msfs     Msfs.SYS     Sat Jan 19 00:53:55 2008 (47919073)
fffffa60`00bc7000 fffffa60`00bd1000   msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`038b2000 fffffa60`038eb000   msiscsi  msiscsi.sys  Sat Apr 11 01:36:09 2009 (49E02C49)
fffffa60`00994000 fffffa60`009e4000   msrpc    msrpc.sys    Sat Apr 11 01:32:13 2009 (49E02B5D)
fffffa60`02e00000 fffffa60`02e0b000   mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`013d3000 fffffa60`013e5000   mup      mup.sys      Sat Apr 11 00:54:47 2009 (49E02297)
fffffa60`00e03000 fffffa60`00fc6000   ndis     ndis.sys     Sat Apr 11 01:43:15 2009 (49E02DF3)
fffffa60`03978000 fffffa60`03984000   ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`03984000 fffffa60`039b5000   ndiswan  ndiswan.sys  Sat Apr 11 01:43:39 2009 (49E02E0B)
fffffa60`0457b000 fffffa60`0458f000   NDProxy  NDProxy.SYS  Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`04689000 fffffa60`04698000   netbios  netbios.sys  Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`04359000 fffffa60`0439d000   netbt    netbt.sys    Sat Apr 11 01:42:31 2009 (49E02DC7)
fffffa60`0100c000 fffffa60`01065000   NETIO    NETIO.SYS    Sat Apr 11 01:43:34 2009 (49E02E06)
fffffa60`042e3000 fffffa60`042f4000   Npfs     Npfs.SYS     Sat Apr 11 00:54:22 2009 (49E0227E)
fffffa60`04700000 fffffa60`0470c000   nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffff800`02048000 fffff800`02560000   nt       ntkrnlmp.exe Sat Apr 11 00:58:39 2009 (49E0237F)
fffffa60`01200000 fffffa60`01380000   Ntfs     Ntfs.sys     Sat Apr 11 00:55:38 2009 (49E022CA)
fffffa60`035a4000 fffffa60`035ac000   NTIDrvr  NTIDrvr.sys  Wed Jan 30 20:29:47 2008 (47A1248B)
fffffa60`042af000 fffffa60`042b8000   Null     Null.SYS     Thu Nov 02 05:37:15 2006 (4549BC4B)
fffffa60`037a1000 fffffa60`037b2b00   ohci1394 ohci1394.sys Sat Apr 11 01:39:49 2009 (49E02D25)
fffffa60`0466b000 fffffa60`04689000   pacer    pacer.sys    Sat Apr 11 01:42:56 2009 (49E02DE0)
fffffa60`00bd1000 fffffa60`00be6000   partmgr  partmgr.sys  Sat Apr 11 01:34:51 2009 (49E02BFB)
fffffa60`008eb000 fffffa60`0091b000   pci      pci.sys      Sat Apr 11 01:03:33 2009 (49E024A5)
fffffa60`00d55000 fffffa60`00d65000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 01:34:22 2009 (49E02BDE)
fffffa60`062cb000 fffffa60`06381000   peauth   peauth.sys   Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`0424b000 fffffa60`04286000   portcls  portcls.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`00dc0000 fffffa60`00dc9000   psdfilter psdfilter.sys Mon Feb 18 08:51:32 2008 (47B98D64)
fffffa60`06381000 fffffa60`0638a000   PSDNServ PSDNServ.sys Mon Feb 18 08:51:40 2008 (47B98D6C)
fffffa60`0638a000 fffffa60`0639d000   PSDVdisk PSDVdisk.sys Mon Feb 18 08:51:49 2008 (47B98D75)
fffffa60`00654000 fffffa60`00668000   PSHED    PSHED.dll    Sat Apr 11 03:08:17 2009 (49E041E1)
fffffa60`062b1000 fffffa60`062b8000   RaInfo   RaInfo.sys   Fri Jan 04 13:57:14 2008 (477E818A)
fffffa60`042f4000 fffffa60`042fd000   rasacd   rasacd.sys   Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`03955000 fffffa60`03978000   rasl2tp  rasl2tp.sys  Sat Apr 11 01:43:37 2009 (49E02E09)
fffffa60`039b5000 fffffa60`039c5000   raspppoe raspppoe.sys Sat Apr 11 01:43:33 2009 (49E02E05)
fffffa60`039c5000 fffffa60`039e3000   raspptp  raspptp.sys  Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`039e3000 fffffa60`039fb000   rassstp  rassstp.sys  Sat Apr 11 01:43:46 2009 (49E02E12)
fffffa60`046b3000 fffffa60`04700000   rdbss    rdbss.sys    Sat Apr 11 00:55:21 2009 (49E022B9)
fffffa60`042c6000 fffffa60`042cf000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`042cf000 fffffa60`042d8000   rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`05cb0000 fffffa60`05cc8000   rspndr   rspndr.sys   Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`04400000 fffffa60`0456c300   RTKVHD64 RTKVHD64.sys Thu Sep 18 06:50:25 2008 (48D23271)
fffffa60`00b43000 fffffa60`00b71000   SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`0639d000 fffffa60`063a8000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffffa60`037f3000 fffffa60`037ff000   serenum  serenum.sys  Sat Jan 19 01:28:36 2008 (47919894)
fffffa60`0356b000 fffffa60`03588000   serial   serial.sys   Sat Jan 19 01:28:41 2008 (47919899)
fffffa60`0431a000 fffffa60`04335000   smb      smb.sys      Sat Apr 11 01:42:19 2009 (49E02DBB)
fffffa60`013cc000 fffffa60`013d3000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffffa60`013c4000 fffffa60`013cc000   spldr    spldr.sys    Mon Jan 12 16:51:29 2009 (496BBB61)
fffffa60`05c02000 fffffa60`05c9c000   spsys    spsys.sys    Tue Mar 10 13:16:43 2009 (49B6A07B)
fffffa60`00a08000 fffffa60`00b3a000   sptd     sptd.sys     Wed Jan 02 11:37:26 2008 (477BBDC6)
fffffa60`06208000 fffffa60`06299000   srv      srv.sys      Sat Apr 11 00:57:52 2009 (49E02350)
fffffa60`043a8000 fffffa60`043da000   srv2     srv2.sys     Sat Apr 11 00:57:35 2009 (49E0233F)
fffffa60`05d67000 fffffa60`05d90000   srvnet   srvnet.sys   Sat Apr 11 00:57:28 2009 (49E02338)
fffffa60`038eb000 fffffa60`03948000   storport storport.sys Sat Apr 11 01:34:45 2009 (49E02BF5)
fffffa60`039fb000 fffffa60`039fc480   swenum   swenum.sys   Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`01065000 fffffa60`011db000   tcpip    tcpip.sys    Fri Aug 14 10:10:32 2009 (4A857058)
fffffa60`063a8000 fffffa60`063b8000   tcpipreg tcpipreg.sys Fri Aug 14 10:09:29 2009 (4A857019)
fffffa60`03948000 fffffa60`03955000   TDI      TDI.SYS      Sat Apr 11 01:44:14 2009 (49E02E2E)
fffffa60`042fd000 fffffa60`0431a000   tdx      tdx.sys      Sat Apr 11 01:43:00 2009 (49E02DE4)
fffffa60`035b7000 fffffa60`035ca000   termdd   termdd.sys   Sat Apr 11 01:48:13 2009 (49E02F1D)
fffff960`00460000 fffff960`0046a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffffa60`01578000 fffffa60`01581000   tunmp    tunmp.sys    Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`0156c000 fffffa60`01578000   tunnel   tunnel.sys   Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`00a00000 fffffa60`00a08000   UBHelper UBHelper.sys Wed Jan 30 20:30:03 2008 (47A1249B)
fffffa60`01594000 fffffa60`015a4000   umbus    umbus.sys    Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`0479e000 fffffa60`047ae000   usbaapl64 usbaapl64.sys Wed Apr 15 14:58:13 2009 (49E62E45)
fffffa60`048e6000 fffffa60`048fe280   usbaudio usbaudio.sys Sat Apr 11 01:39:34 2009 (49E02D16)
fffffa60`0458f000 fffffa60`045ab000   usbccgp  usbccgp.sys  Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`045ab000 fffffa60`045ace00   USBD     USBD.SYS     Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`03790000 fffffa60`037a1000   usbehci  usbehci.sys  Sat Apr 11 01:39:36 2009 (49E02D18)
fffffa60`015a4000 fffffa60`015ec000   usbhub   usbhub.sys   Sat Apr 11 01:39:52 2009 (49E02D28)
fffffa60`0374a000 fffffa60`03790000   USBPORT  USBPORT.SYS  Sat Apr 11 01:39:39 2009 (49E02D1B)
fffffa60`045ad000 fffffa60`045c5000   USBSTOR  USBSTOR.SYS  Sat Apr 11 01:39:38 2009 (49E02D1A)
fffffa60`0373e000 fffffa60`0374a000   usbuhci  usbuhci.sys  Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`042b8000 fffffa60`042c6000   vga      vga.sys      Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`0388d000 fffffa60`038b2000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`00be6000 fffffa60`00bfa000   volmgr   volmgr.sys   Sat Apr 11 01:34:49 2009 (49E02BF9)
fffffa60`0091b000 fffffa60`00981000   volmgrx  volmgrx.sys  Sat Apr 11 01:35:14 2009 (49E02C12)
fffffa60`01380000 fffffa60`013c4000   volsnap  volsnap.sys  Sat Apr 11 01:35:33 2009 (49E02C25)
fffffa60`04698000 fffffa60`046b3000   wanarp   wanarp.sys   Sat Apr 11 01:43:38 2009 (49E02E0A)
fffffa60`0355b000 fffffa60`0356b000   watchdog watchdog.sys Sat Apr 11 01:09:16 2009 (49E025FC)
fffffa60`00803000 fffffa60`008dd000   Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008dd000 fffffa60`008eb000   WDFLDR   WDFLDR.SYS   Sat Jan 19 01:32:33 2008 (47919981)
fffff960`00010000 fffff960`002c1000   win32k   win32k.sys   Tue Apr 21 08:03:41 2009 (49EDB61D)
fffffa60`0387d000 fffffa60`03886000   wmiacpi  wmiacpi.sys  Sat Jan 19 01:02:42 2008 (47919282)
fffffa60`00b3a000 fffffa60`00b43000   WMILIB   WMILIB.SYS   Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`063d8000 fffffa60`063ee000   WUDFPf   WUDFPf.sys   Sat Jan 19 01:33:22 2008 (479199B2)
fffffa60`063b8000 fffffa60`063d8000   WUDFRd   WUDFRd.sys   Sat Jan 19 01:33:43 2008 (479199C7)
fffffa60`04804000 fffffa60`048e6000   xnacc    xnacc.sys    Sat Jan 19 01:30:06 2008 (479198EE)

Unloaded modules:
fffffa60`01444000 fffffa60`01452000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`01452000 fffffa60`0156c000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`037c3000 fffffa60`037d9000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 000000F4
Arguments 00000000`00000003 fffffa80`0dcd3c10 fffffa80`0dcd3e48 fffff800`023258d0
 

My Computer

System One

dont think its memory issuse he has lots of memory

panda scans running, im working on updating the drivers now, the blue screens just apear once in a while, he thinking of ether taking it in to best buy or using the recorvery disks to go back to factory settings, i told him just wait to see what turns up from you guys first

heres the entire minidump folder

this is the computer he has
http://www.bestbuy.ca/catalog/proddetail.asp?logon=&langid=EN&sku_id=0926INGFS10126353&catid=20217
 

Attachments

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
Krb

I have taken a look at the oldest 3 dumps and the only comman thing in them is the atikmdag.sys. It was directly responsible for 1 posiible 2 dumps. its usually the ati utilites part of the driver that pukes and dies. I googled the problem and found a possibile cure here on viztax64. You may have an old version of the drviers, or if you are overclocking the gpu it could also be a problem.

Our real dump Guru has the tools and ecperience to get into it more deeply and I pm'ed him with the thread link. The possible solution can be found here
http://www.vistax64.com/vista-hardware-devices/3707-atikmdag-sys.html

Good luck and keep in touch

Ken
 

My Computer

System One

  • Manufacturer/Model
    Dell Inspiron E 1405
    CPU
    [email protected]
    Memory
    4 gigs
    Graphics card(s)
    integrated intel 945
    Sound Card
    integrated
    Screen Resolution
    1440x900
    Hard Drives
    300 gig internal
    Internet Speed
    10 down 1.5 up
zigzag3143 i looked at the thread and it privides mutiple possible solutions any idea which one works?

as far as my freind knows he hasnt clocked anything, i dont think hed even know how

oh and the panda scan has found 7 infected so far and its at 17%


-panda scan done
only found tracking cookies
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
Run an anti-rootkit scanner too. Sophos Anti-Rootkit is a good choice.
 

My Computer

System One

  • Manufacturer/Model
    Sony Vaio Z46GDU
    CPU
    [email protected] w/6MB L2 cache 1066MHz FSB
    Memory
    6GB DDR3 1066MHz SDRAM
    Graphics card(s)
    9300M GS 256MB + Intel Integrated 4500MHD
    Monitor(s) Displays
    13.1" WXGA True Colour Tough
    Screen Resolution
    1600x900
    Hard Drives
    320GB SATA 7200RPM
    Internet Speed
    1MB/s
Frostmourne said:
Run an anti-rootkit scanner too. Sophos Anti-Rootkit is a good choice.
Click to expand...


he has avg paid with root kit scanner and it hasnt found any thing, will sophos and avg interfere with each other? or can i run it to?
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
Sophos Anti-Rootkit is a scanner only. No real-time shield. You'll have no problems. I'd also recommend Kaspersky or Norton 360 if you want to pay for a commercial app. Better detetection rates. Take a look at the security guide in my sig.
 

My Computer

System One

  • Manufacturer/Model
    Sony Vaio Z46GDU
    CPU
    [email protected] w/6MB L2 cache 1066MHz FSB
    Memory
    6GB DDR3 1066MHz SDRAM
    Graphics card(s)
    9300M GS 256MB + Intel Integrated 4500MHD
    Monitor(s) Displays
    13.1" WXGA True Colour Tough
    Screen Resolution
    1600x900
    Hard Drives
    320GB SATA 7200RPM
    Internet Speed
    1MB/s
Frostmourne said:
Sophos Anti-Rootkit is a scanner only. No real-time shield. You'll have no problems. I'd also recommend Kaspersky or Norton 360 if you want to pay for a commercial app. Better detetection rates. Take a look at the security guide in my sig.
Click to expand...


ok ill try Sophos when i go back over tommorow, as for the AV suggestion thanks but my freind seems to only go for avg (he doesnt like norton)
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
KRB said:
Frostmourne said:
Sophos Anti-Rootkit is a scanner only. No real-time shield. You'll have no problems. I'd also recommend Kaspersky or Norton 360 if you want to pay for a commercial app. Better detetection rates. Take a look at the security guide in my sig.
Click to expand...


ok ill try Sophos when i go back over tommorow, as for the AV suggestion thanks but my freind seems to only go for avg (he doesnt like norton)
Click to expand...

Protection is what counts. Try out Kaspersky then. And yes, Norton has changed for the better.
 

My Computer

System One

  • Manufacturer/Model
    Sony Vaio Z46GDU
    CPU
    [email protected] w/6MB L2 cache 1066MHz FSB
    Memory
    6GB DDR3 1066MHz SDRAM
    Graphics card(s)
    9300M GS 256MB + Intel Integrated 4500MHD
    Monitor(s) Displays
    13.1" WXGA True Colour Tough
    Screen Resolution
    1600x900
    Hard Drives
    320GB SATA 7200RPM
    Internet Speed
    1MB/s
Frostmourne said:
KRB said:
Frostmourne said:
Sophos Anti-Rootkit is a scanner only. No real-time shield. You'll have no problems. I'd also recommend Kaspersky or Norton 360 if you want to pay for a commercial app. Better detetection rates. Take a look at the security guide in my sig.
Click to expand...


ok ill try Sophos when i go back over tommorow, as for the AV suggestion thanks but my freind seems to only go for avg (he doesnt like norton)
Click to expand...

Protection is what counts. Try out Kaspersky then. And yes, Norton has changed for the better.
Click to expand...

Ill talk to him about it thanks for the sugestion, but right now were trying to get the blue screen fixed
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
KRB said:
dont think its memory issuse he has lots of memory

panda scans running, im working on updating the drivers now, the blue screens just apear once in a while, he thinking of ether taking it in to best buy or using the recorvery disks to go back to factory settings, i told him just wait to see what turns up from you guys first
Click to expand...

To add to what the others have already said, I think it's entirely possible that your friend's machine has at least one hardware problem, and maybe more. Flicking through the minidumps, there appear to be 3 distinct types: the ones suggesting ATI driver involvement, at least one 0x124 which is always considered a hardware problem in the absence of very specific evidence to the contrary, and a bunch of crashes due to CSRSS.EXE termination during a syscall.

By themselves, the ATI-related crashes would normally be "troubleshot" as software problems, but the CSRSS terminations look potentially related to bad memory - not _insufficient_ memory but physically unreliable memory. Add the unequivocal stop 0x124, and I'd personally be tempted to take that thing back to the shop.

(Also, I don't think he's been pwned by malware. Although it's not definitive, the syscall table does not show any obvious signs of interference from AV or a rootkit.)
 

My Computer

System One

weve used the recovery disks to factory settings(im curently reinstalling programs), he got tired of waiting, if this doesnt work its going back he says
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
KRB said:
weve used the recovery disks to factory settings(im curently reinstalling programs), he got tired of waiting, if this doesnt work its going back he says
Click to expand...

What antivirus/protection?
 

My Computer

System One

  • Manufacturer/Model
    Sony Vaio Z46GDU
    CPU
    [email protected] w/6MB L2 cache 1066MHz FSB
    Memory
    6GB DDR3 1066MHz SDRAM
    Graphics card(s)
    9300M GS 256MB + Intel Integrated 4500MHD
    Monitor(s) Displays
    13.1" WXGA True Colour Tough
    Screen Resolution
    1600x900
    Hard Drives
    320GB SATA 7200RPM
    Internet Speed
    1MB/s
avg paid (he said hed think about changing when his licence is up), sophos, malwarebytes, ccleaner, plus the online panda scan
 

My Computer

System One

  • Manufacturer/Model
    Acer and Compaq
You must log in or register to reply here.
Back
Top