1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved Blue Screen BugCheck 19

Discussion in 'Windows 7' started by zhshqzyc, 2015/02/20.

  1. 2015/02/20
    zhshqzyc

    zhshqzyc Inactive Thread Starter

    Joined:
    2008/12/15
    Messages:
    140
    Likes Received:
    0
    My laptop: Dell Latitude | E6510. OS: Win 7 Ultimate. Recently I got a couple blue screen daily.
    Blue Screen error message: BAD-POOL-HEADER.

    The additional message:
    Code:
    Problem signature:
      Problem Event Name:	BlueScreen
      OS Version:	6.1.7601.2.1.0.256.1
      Locale ID:	1033
    
    Additional information about the problem:
      BCCode:	19
      BCP1:	0000000000000020
      BCP2:	FFFFFA800776F9C0
      BCP3:	FFFFFA800776F9E0
      BCP4:	000000000402000A
      OS Version:	6_1_7601
      Service Pack:	1_0
      Product:	256_1
    
    Thanks for help.
     
  2. 2015/02/20
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,899
    Likes Received:
    510
    Hi zhshqzyc. Do the blue screens happen randomly? Can you cause the computer to blue screen on demand?

    Follow these instructions to post a Dump Data Log.

    If you do not have a dump, ensure that your machine is configured to write out a dump by following the directions from microsoft.
     

  3. to hide this advert.

  4. 2015/02/21
    zhshqzyc

    zhshqzyc Inactive Thread Starter

    Joined:
    2008/12/15
    Messages:
    140
    Likes Received:
    0
  5. 2015/02/21
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,680
    Likes Received:
    104
  6. 2015/02/21
    zhshqzyc

    zhshqzyc Inactive Thread Starter

    Joined:
    2008/12/15
    Messages:
    140
    Likes Received:
    0
    The first software installation failed.

    10:44:55 AM Saturday, February 21, 2015: C:\Program Files\Microsoft SDKs\Windows\v7.1\Setup\SFX\vcredist_x64.exe installation failed with return code 5100
    10:45:12 AM Saturday, February 21, 2015: [SDKSetup:Error] Config_Products_Install: Installation of Product Microsoft Windows SDK for Windows 7 (failed): Please refer to Samples\Setup\HTML\ConfigDetails.htm document for further information. Stack: at SDKSetup.Product.ConfigureRelatedSfx() at SDKSetup.Product.ConfigureNewProduct(ManualResetEvent CancelEvent)
    10:45:12 AM Saturday, February 21, 2015: [SDKSetup:Info] Config_Products_InstallNew: End installation of new product: Microsoft Windows SDK for Windows 7
    10:45:12 AM Saturday, February 21, 2015: [SDKSetup:Error] Config_Products_Install: Windows SDK Setup (failed): Installation of the "Microsoft Windows SDK for Windows 7" product has reported the following error: Please refer to Samples\Setup\HTML\ConfigDetails.htm document for further information. Stack: at SDKSetup.Product.ConfigureNewProduct(ManualResetEvent CancelEvent) at SDKSetup.Product.SetupProduct(TaskMode taskMode, ManualResetEvent CancelEvent) at SDKSetup.ProductCollection.SetupProducts(TaskMode taskMode, DownloadManager downloadManager, ManualResetEvent cancelEvent) at SDKSetup.ConfigProducts.DoCurrentTask(TaskMode Task)


    The folder "C:\Program Files\Microsoft SDKs\Windows\v7.1" is not there. So I can't find the sample.
     

    Attached Files:

  7. 2015/02/22
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
  8. 2015/02/22
    zhshqzyc

    zhshqzyc Inactive Thread Starter

    Joined:
    2008/12/15
    Messages:
    140
    Likes Received:
    0
    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Windows\MEMORY.DMP]
    Kernel Summary Dump File: Only kernel address space is available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.18717.amd64fre.win7sp1_gdr.150113-1808
    Machine Name:
    Kernel base = 0xfffff800`02e1c000 PsLoadedModuleList = 0xfffff800`03060890
    Debug session time: Fri Feb 20 19:10:36.888 2015 (UTC - 5:00)
    System Uptime: 0 days 0:09:24.371
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...................................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
    Loading unloaded module list
    .......
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 19, {20, fffffa800776f9c0, fffffa800776f9e0, 402000a}

    *** ERROR: Module load completed but symbols could not be loaded for mwac.sys
     
  9. 2015/02/22
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Did you post the complete debuglog.txt contents?

    Seems rather incomplete to me.
     
    Arie,
    #8
  10. 2015/02/22
    zhshqzyc

    zhshqzyc Inactive Thread Starter

    Joined:
    2008/12/15
    Messages:
    140
    Likes Received:
    0
    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Windows\MEMORY.DMP]
    Kernel Summary Dump File: Only kernel address space is available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.18717.amd64fre.win7sp1_gdr.150113-1808
    Machine Name:
    Kernel base = 0xfffff800`02e1c000 PsLoadedModuleList = 0xfffff800`03060890
    Debug session time: Fri Feb 20 19:10:36.888 2015 (UTC - 5:00)
    System Uptime: 0 days 0:09:24.371
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...................................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
    Loading unloaded module list
    .......
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 19, {20, fffffa800776f9c0, fffffa800776f9e0, 402000a}

    *** ERROR: Module load completed but symbols could not be loaded for mwac.sys
    Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    BAD_POOL_HEADER (19)
    The pool is already corrupt at the time of the current request.
    This may or may not be due to the caller.
    The internal pool links must be walked to figure out a possible cause of
    the problem, and then special pool applied to the suspect tags or the driver
    verifier to a suspect driver.
    Arguments:
    Arg1: 0000000000000020, a pool block header size is corrupt.
    Arg2: fffffa800776f9c0, The pool entry we were looking for within the page.
    Arg3: fffffa800776f9e0, The next pool entry.
    Arg4: 000000000402000a, (reserved)

    Debugging Details:
    ------------------


    BUGCHECK_STR: 0x19_20

    POOL_ADDRESS: fffffa800776f9c0 Nonpaged pool

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    PROCESS_NAME: mbamservice.ex

    CURRENT_IRQL: 2

    LAST_CONTROL_TRANSFER: from fffff80002fc5cbe to fffff80002e90ec0

    STACK_TEXT:
    fffff880`072f9328 fffff800`02fc5cbe : 00000000`00000019 00000000`00000020 fffffa80`0776f9c0 fffffa80`0776f9e0 : nt!KeBugCheckEx
    fffff880`072f9330 fffff880`01927d2d : 00000000`00000008 00000000`0000000c 00000000`676e7049 fffffa80`06696900 : nt!ExFreePool+0xd8a
    fffff880`072f93e0 fffff880`017bf066 : 00000000`00000000 fffff880`017bb0c3 00000000`00000000 fffffa80`07f01ea0 : tcpip!IppInspectBuildHeaders+0x65d
    fffff880`072f96c0 fffff880`0770512d : 00000000`00000008 00000000`00000014 00000000`00000000 fffffa80`03b1ada0 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x20a
    fffff880`072f9760 fffff880`0770567b : fffffa80`03b64710 fffffa80`076294d0 fffffa80`07629400 fffffa80`03b1ada0 : mwac+0x612d
    fffff880`072f97f0 fffff880`077055b2 : fffffa80`07629401 fffffa80`00000002 fffffa80`076294d0 00000000`00000002 : mwac+0x667b
    fffff880`072f9840 fffff880`07705ec9 : fffffa80`076294d0 00000000`00000002 fffff880`0770c7c0 fffff880`0770c420 : mwac+0x65b2
    fffff880`072f9890 fffff880`0770294f : fffff880`0770cc80 fffff880`0770cc80 00000000`00000002 fffff880`0770c7c0 : mwac+0x6ec9
    fffff880`072f98c0 fffff880`07702233 : 00000000`00000000 00000000`00000000 fffff880`0770cca0 fffff880`07702315 : mwac+0x394f
    fffff880`072f98f0 fffff880`07701d16 : 00000000`00000000 00000000`00000002 fffff880`0770cca0 fffff800`02f44d00 : mwac+0x3233
    fffff880`072f9960 fffff880`077027a7 : fffff880`0770c7c0 00000000`00000000 fffffa80`05dec480 00000000`00000000 : mwac+0x2d16
    fffff880`072f9990 fffff880`077087fc : ffffffff`ffffffff 00000000`00000000 fffffa80`05dec480 fffffa80`03c9ede8 : mwac+0x37a7
    fffff880`072f99c0 fffff800`031b0b37 : fffffa80`06087f20 fffff880`072f9ca0 fffff880`072f9ca0 fffffa80`03c9ecd0 : mwac+0x97fc
    fffff880`072f9a10 fffff800`031b1396 : 00000000`00000684 00000000`00000644 00000000`00000001 00000000`2d2163cc : nt!IopXxxControlFile+0x607
    fffff880`072f9b40 fffff800`02e90153 : 00000000`2d2163cc fffff880`072f9ca0 00000000`00000000 fffff800`0317dadb : nt!NtDeviceIoControlFile+0x56
    fffff880`072f9bb0 00000000`73002e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`01f5e918 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73002e09


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
    fffff880`017bf066 85c0 test eax,eax

    SYMBOL_STACK_INDEX: 3

    SYMBOL_NAME: fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: fwpkclnt

    IMAGE_NAME: fwpkclnt.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 533f5b09

    FAILURE_BUCKET_ID: X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a

    BUCKET_ID: X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a

    Followup: MachineOwner
    ---------

    rax=000000000402000a rbx=fffffa800776f9c0 rcx=0000000000000019
    rdx=0000000000000020 rsi=0000000000000002 rdi=0000000000000000
    rip=fffff80002e90ec0 rsp=fffff880072f9328 rbp=00000000676e7049
    r8=fffffa800776f9c0 r9=fffffa800776f9e0 r10=fffffa800669690c
    r11=fffffa8006696900 r12=0000000000000002 r13=fffffa800776f9d0
    r14=0000000000000000 r15=0000000000000002
    iopl=0 nv up ei ng nz na po cy
    cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000287
    nt!KeBugCheckEx:
    fffff800`02e90ec0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`072f9330=0000000000000019
    Child-SP RetAddr : Args to Child : Call Site
    fffff880`072f9328 fffff800`02fc5cbe : 00000000`00000019 00000000`00000020 fffffa80`0776f9c0 fffffa80`0776f9e0 : nt!KeBugCheckEx
    fffff880`072f9330 fffff880`01927d2d : 00000000`00000008 00000000`0000000c 00000000`676e7049 fffffa80`06696900 : nt!ExFreePool+0xd8a
    fffff880`072f93e0 fffff880`017bf066 : 00000000`00000000 fffff880`017bb0c3 00000000`00000000 fffffa80`07f01ea0 : tcpip!IppInspectBuildHeaders+0x65d
    fffff880`072f96c0 fffff880`0770512d : 00000000`00000008 00000000`00000014 00000000`00000000 fffffa80`03b1ada0 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x20a
    fffff880`072f9760 fffff880`0770567b : fffffa80`03b64710 fffffa80`076294d0 fffffa80`07629400 fffffa80`03b1ada0 : mwac+0x612d
    fffff880`072f97f0 fffff880`077055b2 : fffffa80`07629401 fffffa80`00000002 fffffa80`076294d0 00000000`00000002 : mwac+0x667b
    fffff880`072f9840 fffff880`07705ec9 : fffffa80`076294d0 00000000`00000002 fffff880`0770c7c0 fffff880`0770c420 : mwac+0x65b2
    fffff880`072f9890 fffff880`0770294f : fffff880`0770cc80 fffff880`0770cc80 00000000`00000002 fffff880`0770c7c0 : mwac+0x6ec9
    fffff880`072f98c0 fffff880`07702233 : 00000000`00000000 00000000`00000000 fffff880`0770cca0 fffff880`07702315 : mwac+0x394f
    fffff880`072f98f0 fffff880`07701d16 : 00000000`00000000 00000000`00000002 fffff880`0770cca0 fffff800`02f44d00 : mwac+0x3233
    fffff880`072f9960 fffff880`077027a7 : fffff880`0770c7c0 00000000`00000000 fffffa80`05dec480 00000000`00000000 : mwac+0x2d16
    fffff880`072f9990 fffff880`077087fc : ffffffff`ffffffff 00000000`00000000 fffffa80`05dec480 fffffa80`03c9ede8 : mwac+0x37a7
    fffff880`072f99c0 fffff800`031b0b37 : fffffa80`06087f20 fffff880`072f9ca0 fffff880`072f9ca0 fffffa80`03c9ecd0 : mwac+0x97fc
    fffff880`072f9a10 fffff800`031b1396 : 00000000`00000684 00000000`00000644 00000000`00000001 00000000`2d2163cc : nt!IopXxxControlFile+0x607
    fffff880`072f9b40 fffff800`02e90153 : 00000000`2d2163cc fffff880`072f9ca0 00000000`00000000 fffff800`0317dadb : nt!NtDeviceIoControlFile+0x56
    fffff880`072f9bb0 00000000`73002e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`072f9c20)
    00000000`01f5e918 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73002e09
    start end module name
    fffff800`00bbd000 fffff800`00bc7000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
    fffff800`02e1c000 fffff800`03403000 nt ntkrnlmp.exe Tue Jan 13 23:56:31 2015 (54B5F6FF)
    fffff800`03403000 fffff800`0344c000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
    fffff880`00c22000 fffff880`00c71000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
    fffff880`00c71000 fffff880`00c85000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`00c85000 fffff880`00ce3000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`00ce3000 fffff880`00da3000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
    fffff880`00da3000 fffff880`00dff000 volmgrx volmgrx.sys unavailable (FFFFFFFE)
    fffff880`00e1c000 fffff880`00ede000 Wdf01000 Wdf01000.sys Fri Jun 21 23:13:05 2013 (51C51641)
    fffff880`00ede000 fffff880`00eee000 WDFLDR WDFLDR.SYS Wed Jul 25 22:29:04 2012 (5010AB70)
    fffff880`00eee000 fffff880`00f45000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
    fffff880`00f45000 fffff880`00f4e000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`00f4e000 fffff880`00f58000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`00f58000 fffff880`00f8b000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
    fffff880`00f8b000 fffff880`00f98000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`00f98000 fffff880`00fad000 partmgr partmgr.sys Sat Mar 17 01:06:09 2012 (4F641BC1)
    fffff880`00fad000 fffff880`00fb6000 compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`00fb6000 fffff880`00fc2000 BATTC BATTC.SYS Mon Jul 13 19:31:01 2009 (4A5BC3B5)
    fffff880`00fc2000 fffff880`00fd7000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
    fffff880`00fd7000 fffff880`00ff9000 tdx tdx.sys Mon Nov 10 20:46:26 2014 (54616A72)
    fffff880`01000000 fffff880`0104c000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
    fffff880`0104c000 fffff880`01086000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
    fffff880`01086000 fffff880`010c0000 fvevol fvevol.sys Wed Jan 23 22:11:24 2013 (5100A65C)
    fffff880`010dd000 fffff880`01116000 pcmcia pcmcia.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`01116000 fffff880`01130000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
    fffff880`01130000 fffff880`0118e000 msrpc msrpc.sys unavailable (FFFFFFFE)
    fffff880`0118e000 fffff880`01200000 cng cng.sys Wed Jan 14 00:00:25 2015 (54B5F7E9)
    fffff880`01200000 fffff880`0124c000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
    fffff880`0124c000 fffff880`01260000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`01260000 fffff880`012a3000 MpFilter MpFilter.sys Sat Nov 01 15:22:16 2014 (545532E8)
    fffff880`012a4000 fffff880`013c2000 iaStorV iaStorV.sys Thu Jun 10 20:46:19 2010 (4C11875B)
    fffff880`013c2000 fffff880`013cd000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
    fffff880`013cd000 fffff880`013fd000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
    fffff880`01403000 fffff880`015ac000 Ntfs Ntfs.sys Thu Jan 23 20:14:50 2014 (52E1BE8A)
    fffff880`015ac000 fffff880`015c7000 ksecdd ksecdd.sys Thu Jan 15 01:46:09 2015 (54B76231)
    fffff880`015c7000 fffff880`015d8000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`015d8000 fffff880`015e2000 Fs_Rec Fs_Rec.sys unavailable (FFFFFFFE)
    fffff880`015e2000 fffff880`015f8000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`01600000 fffff880`01660000 NETIO NETIO.SYS Tue Nov 26 05:21:01 2013 (5294760D)
    fffff880`01660000 fffff880`0168c000 ksecpkg ksecpkg.sys Thu Jan 15 02:04:35 2015 (54B76683)
    fffff880`0168c000 fffff880`0169c000 vmstorfl vmstorfl.sys unavailable (FFFFFFFE)
    fffff880`0169c000 fffff880`016a4000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`016a4000 fffff880`016b6000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`016b6000 fffff880`016bf000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
    fffff880`016c3000 fffff880`017b5000 ndis ndis.sys Wed Aug 22 11:11:46 2012 (5034F6B2)
    fffff880`017b5000 fffff880`017fe000 fwpkclnt fwpkclnt.sys Fri Apr 04 21:23:21 2014 (533F5B09)
    fffff880`01800000 fffff880`019ff000 tcpip tcpip.sys Fri Apr 04 21:26:44 2014 (533F5BD4)
    fffff880`02825000 fffff880`02943000 dump_iaStorV dump_iaStorV.sys Thu Jun 10 20:46:19 2010 (4C11875B)
    fffff880`02943000 fffff880`02956000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`02956000 fffff880`02979000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`02979000 fffff880`02983000 mbam mbam.sys Wed Sep 03 13:50:25 2014 (540754E1)
    fffff880`02983000 fffff880`0299f000 SWIPsec SWIPsec.sys Tue Apr 03 16:24:42 2012 (4F7B5C8A)
    fffff880`0299f000 fffff880`029b4000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`029b4000 fffff880`029c7000 ndisuio ndisuio.sys Sat Nov 20 05:50:08 2010 (4CE7A7E0)
    fffff880`029c7000 fffff880`029df000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`02e00000 fffff880`02e25000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`02e25000 fffff880`02e35000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`02e35000 fffff880`02e3e000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`02e3e000 fffff880`02e47000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`02e47000 fffff880`02e50000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`02e50000 fffff880`02e5b000 Msfs Msfs.SYS unavailable (FFFFFFFE)
    fffff880`02e5b000 fffff880`02e6c000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`02e6c000 fffff880`02e79000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
    fffff880`02eaf000 fffff880`02f04000 udfs udfs.sys Sat Nov 20 04:26:11 2010 (4CE79433)
    fffff880`02f04000 fffff880`02f57000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
    fffff880`02fad000 fffff880`02fd7000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
    fffff880`02fd7000 fffff880`02fe0000 Null Null.SYS unavailable (FFFFFFFE)
    fffff880`02fe0000 fffff880`02fe7000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`02fe7000 fffff880`02ff5000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`04000000 fffff880`0400b000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`0400b000 fffff880`04017000 ElbyCDIO ElbyCDIO.sys Thu Dec 16 17:58:13 2010 (4D0A9985)
    fffff880`04017000 fffff880`04026000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`04026000 fffff880`040af000 afd afd.sys Fri May 30 02:45:48 2014 (5388291C)
    fffff880`040af000 fffff880`040f4000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
    fffff880`040f4000 fffff880`040fd000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`040fd000 fffff880`04123000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
    fffff880`04123000 fffff880`04139000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
    fffff880`04139000 fffff880`0415e000 dnelwf64 dnelwf64.sys Thu Jul 28 02:36:44 2011 (4E31037C)
    fffff880`0415e000 fffff880`0416d000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`0416d000 fffff880`04188000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
    fffff880`04188000 fffff880`0419c000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
    fffff880`0419c000 fffff880`041ed000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
    fffff880`041ed000 fffff880`041f9000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff880`04200000 fffff880`04243000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
    fffff880`04249000 fffff880`042cc000 csc csc.sys Sat Nov 20 04:27:12 2010 (4CE79470)
    fffff880`042cc000 fffff880`042ea000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
    fffff880`042ea000 fffff880`042fb000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`042fb000 fffff880`04321000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
    fffff880`04321000 fffff880`0437f000 Apfiltr Apfiltr.sys Wed May 25 21:54:58 2011 (4DDDB2F2)
    fffff880`0437f000 fffff880`04399000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`04399000 fffff880`043a8000 VClone VClone.sys Sat Jan 15 11:21:04 2011 (4D31C970)
    fffff880`043a8000 fffff880`043d7000 SCSIPORT SCSIPORT.SYS Sat Nov 20 05:34:01 2010 (4CE7A419)
    fffff880`043d7000 fffff880`043e9000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
    fffff880`04400000 fffff880`04449000 e1k62x64 e1k62x64.sys Thu Nov 05 20:36:23 2009 (4AF37D97)
    fffff880`04449000 fffff880`0445b000 usbehci usbehci.sys Tue Nov 26 20:41:11 2013 (52954DB7)
    fffff880`0445b000 fffff880`04471000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`04471000 fffff880`04495000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
    fffff880`04495000 fffff880`04496480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`04499000 fffff880`0458e000 dxgkrnl dxgkrnl.sys Sun Jun 15 20:58:04 2014 (539E411C)
    fffff880`0458e000 fffff880`045d4000 dxgmms1 dxgmms1.sys Tue Apr 09 23:27:15 2013 (5164DC13)
    fffff880`045d4000 fffff880`045f8000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
    fffff880`04600000 fffff880`04608080 HIDPARSE HIDPARSE.SYS Wed Jul 03 00:05:04 2013 (51D3A2F0)
    fffff880`04609000 fffff880`04616000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`04627000 fffff880`04635000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`04635000 fffff880`04643000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`0464b000 fffff880`046a5000 usbhub usbhub.sys Tue Nov 26 20:41:36 2013 (52954DD0)
    fffff880`046a5000 fffff880`046ba000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
    fffff880`046ba000 fffff880`04716000 HdAudio HdAudio.sys Sat Nov 20 05:44:23 2010 (4CE7A687)
    fffff880`04716000 fffff880`04753000 portcls portcls.sys Thu Oct 03 21:36:02 2013 (524E1B82)
    fffff880`04753000 fffff880`04775000 drmk drmk.sys Thu Oct 03 22:16:30 2013 (524E24FE)
    fffff880`04775000 fffff880`0477a200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`0477b000 fffff880`04787000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`04787000 fffff880`047a4000 usbccgp usbccgp.sys Tue Nov 26 20:41:15 2013 (52954DBB)
    fffff880`047a4000 fffff880`047a5e80 USBD USBD.SYS Tue Nov 26 20:41:03 2013 (52954DAF)
    fffff880`047a6000 fffff880`047d3400 usbvideo usbvideo.sys Fri Jul 12 06:41:34 2013 (51DFDD5E)
    fffff880`047d4000 fffff880`047e2000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
    fffff880`047e2000 fffff880`047fb000 HIDCLASS HIDCLASS.SYS Wed Jul 03 00:05:05 2013 (51D3A2F1)
    fffff880`04a00000 fffff880`04cef000 bcmwl664 bcmwl664.sys Thu Jan 21 22:30:58 2010 (4B591BF2)
    fffff880`04cef000 fffff880`04cfc000 vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
    fffff880`04cfc000 fffff880`04d1c000 sdbus sdbus.sys Sat Nov 20 04:37:42 2010 (4CE796E6)
    fffff880`04d1c000 fffff880`04d5a000 1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
    fffff880`04d5a000 fffff880`04d78000 i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`04d78000 fffff880`04d87000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`04d87000 fffff880`04da4000 parport parport.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`04da4000 fffff880`04db3000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`04db3000 fffff880`04db9c00 GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
    fffff880`04dba000 fffff880`04dd0000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`04dd0000 fffff880`04dd4500 CmBatt CmBatt.sys Mon Jul 13 19:31:03 2009 (4A5BC3B7)
    fffff880`04dd5000 fffff880`04dde000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`04dde000 fffff880`04dee000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
    fffff880`04dee000 fffff880`04dfa000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`04dfa000 fffff880`04dfe480 NxDrv NxDrv.sys Wed Oct 21 14:22:42 2009 (4ADF5172)
    fffff880`05636000 fffff880`056ff000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
    fffff880`056ff000 fffff880`0571d000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
    fffff880`0571d000 fffff880`05735000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`05735000 fffff880`05762000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
    fffff880`05762000 fffff880`057b0000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
    fffff880`057b0000 fffff880`057d4000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
    fffff880`05800000 fffff880`05821000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
    fffff880`05822000 fffff880`0634dd00 nvlddmkm nvlddmkm.sys Sat Apr 17 00:01:25 2010 (4BC93295)
    fffff880`0634e000 fffff880`0634f180 nvBridge nvBridge.kmd Fri Apr 16 23:15:01 2010 (4BC927B5)
    fffff880`06350000 fffff880`063a6000 USBPORT USBPORT.SYS Tue Nov 26 20:41:11 2013 (52954DB7)
    fffff880`063a6000 fffff880`063d5000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
    fffff880`063d5000 fffff880`063f0000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`063f0000 fffff880`063fb000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
    fffff880`06e00000 fffff880`06e69000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
    fffff880`06eb5000 fffff880`06f5b000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`06f5b000 fffff880`06f66000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`06f66000 fffff880`06f97000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
    fffff880`06f97000 fffff880`06fa9000 tcpipreg tcpipreg.sys Wed Oct 03 12:07:26 2012 (506C62BE)
    fffff880`0765e000 fffff880`076f6000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
    fffff880`076f6000 fffff880`076ff000 BCM42RLY BCM42RLY.sys Thu Jan 21 22:28:23 2010 (4B591B57)
    fffff880`076ff000 fffff880`07711000 mwac mwac.sys Tue Jun 17 22:06:34 2014 (53A0F42A)
    fffff880`07711000 fffff880`0772a000 WudfPf WudfPf.sys Wed Jul 25 22:26:45 2012 (5010AAE5)
    fffff880`0772a000 fffff880`0773b000 WinUsb WinUsb.sys Sat Nov 20 05:43:56 2010 (4CE7A66C)
    fffff880`0773b000 fffff880`07771000 WUDFRd WUDFRd.sys Wed Jul 25 22:26:06 2012 (5010AABE)
    fffff880`07771000 fffff880`0777f000 scfilter scfilter.sys Sat Nov 20 05:09:59 2010 (4CE79E77)
    fffff880`0777f000 fffff880`077a2000 MBAMSwissArmy MBAMSwissArmy.sys Fri Sep 19 18:14:07 2014 (541CAAAF)
    fffff880`0b2a8000 fffff880`0b2b3000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
    fffff960`00020000 fffff960`00342000 win32k win32k.sys Thu Jan 08 21:02:38 2015 (54AF36BE)
    fffff960`004d0000 fffff960`004da000 TSDDD TSDDD.dll Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff960`006c0000 fffff960`006e7000 cdd cdd.dll Thu Feb 03 06:25:25 2011 (4D4A90A5)
    fffff960`00950000 fffff960`009b1000 ATMFD ATMFD.DLL Wed Jun 05 23:30:53 2013 (51B0026D)

    Unloaded modules:
    fffff880`0b237000 fffff880`0b2a8000 spsys.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    fffff880`057d4000 fffff880`057f3000 NisDrvWFP.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0001F000
    fffff880`04616000 fffff880`04627000 WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00011000
    fffff880`02e79000 fffff880`02eaf000 WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00036000
    fffff880`010c0000 fffff880`010ce000 crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    fffff880`02e7c000 fffff880`02f9a000 dump_iaStorV.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0011E000
    fffff880`02f9a000 fffff880`02fad000 dump_dumpfve.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00013000
    Closing open log file c:debuglog.txt
     

    Attached Files:

  11. 2015/02/25
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,899
    Likes Received:
    510
    Based on the log the blue screen is being caused by the fwpkclnt.sys file which is the Microsoft Windows IPsec Kernel-Mode API file. That doesn't really help us in solving the issue.

    Does the blue screen happen in Safe Mode? You also didn't answer my previous questions regarding if the blue screens happen randomly or if you can cause the computer to blue screen on demand. Did you make any recent changes before the computer started blue screening?
     
  12. 2015/02/26
    zhshqzyc

    zhshqzyc Inactive Thread Starter

    Joined:
    2008/12/15
    Messages:
    140
    Likes Received:
    0
    I haven't tested it in Safe Model because the fonts are too big. It happens randomly, say 2 or 3 times one week. Sometimes it happens 3 times a daily, but it is rarely. I don't make any recent changes before the computer started blue screening.

    Another issue is sometimes when I start the computer and type characters, it is wrong. For example, I type 1234 in notepad, it displays 3478. But after a while, it becomes normal and okay for all day.
     
  13. 2015/02/26
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,680
    Likes Received:
    104

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.