BSOD tunnel.sys

bratic · 2012/07/27

OS Win7 Ultimate

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\072712-17768-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0x82c0c000 PsLoadedModuleList = 0x82d554d0
Debug session time: Fri Jul 27 10:47:17.823 2012 (UTC + 2:00)
System Uptime: 0 days 0:31:57.681
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
.........
0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 90000004, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 82c3495a, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from 82d75848
Unable to read MiSystemVaType memory at 82d54e20
90000004

FAULTING_IP:
nt!RealSuccessor+b
82c3495a 8b4804 mov ecx,dword ptr [eax+4]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: System

CURRENT_IRQL: 0

TRAP_FRAME: afc2398c -- (.trap 0xffffffffafc2398c)
.trap 0xffffffffafc2398c
ErrCode = 00000000
eax=90000000 ebx=00000000 ecx=90000000 edx=00000000 esi=85e6489c edi=82ca6d30
eip=82c3495a esp=afc23a00 ebp=afc23a08 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!RealSuccessor+0xb:
82c3495a 8b4804 mov ecx,dword ptr [eax+4] ds:0023:90000004=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 82c4d468 to 82c9a3bf

STACK_TEXT:
afc23974 82c4d468 00000000 90000004 00000000 nt!MmAccessFault+0x106
afc23974 82c3495a 00000000 90000004 00000000 nt!KiTrap0E+0xdc
afc239fc 82cc2760 85e648bc afc23a18 82cc2795 nt!RealSuccessor+0xb
afc23a08 82cc2795 85e6487c 85e6489c afc23a2c nt!RtlEnumerateGenericTableWithoutSplayingAvl+0x31
afc23a18 88fc0dcd 85e6487c 00000000 85e3a550 nt!RtlEnumerateGenericTableAvl+0x1c
afc23a2c 88fd70c7 85e6487c 00000000 273e7aaf volsnap!AvlEnumerateGenericTable+0x1f
afc23a80 88fd77b9 85e647b0 0000008d 00000000 volsnap!VspAddTableToBitmap+0x125
afc23ac8 88fe5b8d 0000000c 00000001 00000000 volsnap!VspComputeIgnorableProduct+0x58b
afc23d00 82c89a6b 851dfee0 00000000 852c3878 volsnap!VspAdjustBitmap+0x521
afc23d50 82e15056 80000001 8b0efa67 00000000 nt!ExpWorkerThread+0x10d
afc23d90 82cbd1a9 82c8995e 80000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

STACK_COMMAND: kb

FOLLOWUP_IP:
volsnap!AvlEnumerateGenericTable+1f
88fc0dcd 83c9ff or ecx,0FFFFFFFFh

SYMBOL_STACK_INDEX: 5

SYMBOL_NAME: volsnap!AvlEnumerateGenericTable+1f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: volsnap

IMAGE_NAME: volsnap.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ce788f5

FAILURE_BUCKET_ID: 0x50_volsnap!AvlEnumerateGenericTable+1f

BUCKET_ID: 0x50_volsnap!AvlEnumerateGenericTable+1f

Followup: MachineOwner
---------

eax=82d43f84 ebx=00000000 ecx=0000000b edx=00000000 esi=82d36d20 edi=00000000
eip=82c9a3bf esp=afc238f0 ebp=afc23974 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
nt!MmAccessFault+0x106:
82c9a3bf cc int 3
ChildEBP RetAddr Args to Child
afc23974 82c4d468 00000000 90000004 00000000 nt!MmAccessFault+0x106
afc23974 82c3495a 00000000 90000004 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ afc2398c)
afc239fc 82cc2760 85e648bc afc23a18 82cc2795 nt!RealSuccessor+0xb (FPO: [0,0,0])
afc23a08 82cc2795 85e6487c 85e6489c afc23a2c nt!RtlEnumerateGenericTableWithoutSplayingAvl+0x31
afc23a18 88fc0dcd 85e6487c 00000000 85e3a550 nt!RtlEnumerateGenericTableAvl+0x1c
afc23a2c 88fd70c7 85e6487c 00000000 273e7aaf volsnap!AvlEnumerateGenericTable+0x1f (FPO: [Non-Fpo])
afc23a80 88fd77b9 85e647b0 0000008d 00000000 volsnap!VspAddTableToBitmap+0x125 (FPO: [Non-Fpo])
afc23ac8 88fe5b8d 0000000c 00000001 00000000 volsnap!VspComputeIgnorableProduct+0x58b (FPO: [Non-Fpo])
afc23d00 82c89a6b 851dfee0 00000000 852c3878 volsnap!VspAdjustBitmap+0x521 (FPO: [Non-Fpo])
afc23d50 82e15056 80000001 8b0efa67 00000000 nt!ExpWorkerThread+0x10d
afc23d90 82cbd1a9 82c8995e 80000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
start end module name
80bba000 80bc2000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
82c0c000 8301e000 nt ntkrpamp.exe Sat Mar 31 04:24:37 2012 (4F766AE5)
8301e000 83055000 hal halmacpi.dll Sat Nov 20 09:37:38 2010 (4CE788D2)
83211000 8321e000 CompositeBus CompositeBus.sys Sat Nov 20 10:50:21 2010 (4CE799DD)
83221000 832a6000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:00:54 2010 (4CE7B876)
832a6000 832b7000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
832b7000 832bf000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
832bf000 83301000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
83301000 833ac000 CI CI.dll Sat Nov 20 13:05:17 2010 (4CE7B97D)
833ac000 833cf000 ataport ataport.SYS Sat Nov 20 09:38:00 2010 (4CE788E8)
833cf000 833f4000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
83800000 83829180 vmbus vmbus.sys Sat Nov 20 10:14:58 2010 (4CE79192)
8382a000 83833000 amdxata amdxata.sys Fri Mar 19 17:19:01 2010 (4BA3A3F5)
8383a000 838ab000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
838ab000 838b9000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
838b9000 83901000 ACPI ACPI.sys Sat Nov 20 09:37:52 2010 (4CE788E0)
83901000 8390a000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
8390a000 83912000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
83912000 8393c000 pci pci.sys Sat Nov 20 09:37:57 2010 (4CE788E5)
8393c000 83947000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
83947000 83958000 partmgr partmgr.sys Sat Mar 17 06:03:08 2012 (4F641B0C)
83958000 83968000 volmgr volmgr.sys Sat Nov 20 09:38:06 2010 (4CE788EE)
83968000 839b3000 volmgrx volmgrx.sys Tue Jul 14 01:11:41 2009 (4A5BBF2D)
839b3000 839ba000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
839ba000 839c8000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
839c8000 839de000 mountmgr mountmgr.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
839de000 839f0000 winhv winhv.sys Sat Nov 20 09:38:15 2010 (4CE788F7)
839f0000 839f9000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
83a17000 83a4b000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
83a4b000 83a5c000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
83a5c000 83a83d00 MpFilter MpFilter.sys Fri Mar 09 09:43:34 2012 (4F59C2B6)
83a84000 83a88bc0 PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
83a89000 83bb8000 Ntfs Ntfs.sys Fri Mar 11 04:21:11 2011 (4D799527)
83bb8000 83be3000 msrpc msrpc.sys Tue Jul 14 01:11:59 2009 (4A5BBF3F)
83be3000 83bf6000 ksecdd ksecdd.sys Thu Nov 17 04:15:56 2011 (4EC47C6C)
88c0d000 88c6a000 cng cng.sys Thu Nov 17 04:36:35 2011 (4EC48143)
88c6a000 88c78000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
88c78000 88c81000 Fs_Rec Fs_Rec.sys Thu Mar 01 04:21:26 2012 (4F4EEB36)
88c81000 88d38000 ndis ndis.sys Sat Nov 20 09:39:19 2010 (4CE78937)
88d38000 88d76000 NETIO NETIO.SYS Sat Nov 20 09:40:03 2010 (4CE78963)
88d76000 88d9b000 ksecpkg ksecpkg.sys Thu Nov 17 04:37:34 2011 (4EC4817E)
88d9b000 88dab000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
88dab000 88db3000 hwpolicy hwpolicy.sys Sat Nov 20 09:37:35 2010 (4CE788CF)
88db3000 88de5000 fvevol fvevol.sys Sat Nov 20 09:40:22 2010 (4CE78976)
88de5000 88df6000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
88e00000 88e08000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
88e08000 88e35000 rdyboost rdyboost.sys Sat Nov 20 10:00:07 2010 (4CE78E17)
88e36000 88f81000 tcpip tcpip.sys Fri Mar 30 10:08:52 2012 (4F756A14)
88f81000 88fb2000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:39:08 2010 (4CE7892C)
88fb2000 88fba380 vmstorfl vmstorfl.sys Sat Nov 20 10:14:37 2010 (4CE7917D)
88fbb000 88ffa000 volsnap volsnap.sys Sat Nov 20 09:38:13 2010 (4CE788F5)
8d200000 8d218000 i8042prt i8042prt.sys Tue Jul 14 01:11:23 2009 (4A5BBF1B)
8d218000 8d225000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8d22d000 8d24c000 cdrom cdrom.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
8d24c000 8d255000 WinFLAdrv WinFLAdrv.sys Thu Dec 01 05:52:28 2011 (4ED7080C)
8d255000 8d25c000 Null Null.SYS Tue Jul 14 01:11:12 2009 (4A5BBF10)
8d25c000 8d263000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
8d263000 8d26f000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
8d26f000 8d290000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8d290000 8d29d000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8d29d000 8d2a5000 RDPCDD RDPCDD.sys Sat Nov 20 11:22:19 2010 (4CE7A15B)
8d2a5000 8d2ad000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8d2ad000 8d2b5000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8d2b5000 8d2c0000 Msfs Msfs.SYS Tue Jul 14 01:11:26 2009 (4A5BBF1E)
8d2c0000 8d2ce000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
8d2ce000 8d2e5000 tdx tdx.sys Sat Nov 20 09:39:17 2010 (4CE78935)
8d2e5000 8d2f1000 TDI TDI.SYS Sat Nov 20 09:39:18 2010 (4CE78936)
8d2f1000 8d34b000 afd afd.sys Mon Apr 25 04:18:00 2011 (4DB4D9D8)
8d34b000 8d37d000 netbt netbt.sys Sat Nov 20 09:39:22 2010 (4CE7893A)
8d37d000 8d384000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
8d384000 8d3a3000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
8d3a3000 8d3b1000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
8d3b1000 8d3cb000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8d3cb000 8d3de000 wanarp wanarp.sys Sat Nov 20 11:07:45 2010 (4CE79DF1)
8d3de000 8d3ef000 termdd termdd.sys Sat Nov 20 11:21:10 2010 (4CE7A116)
8d3ef000 8d3fc000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8e20b000 8e24c000 rdbss rdbss.sys Sat Nov 20 09:42:44 2010 (4CE78A04)
8e24c000 8e256000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
8e256000 8e260000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8e260000 8e265d80 MpKsleec883f1 MpKsleec883f1.sys Fri Sep 16 23:34:23 2011 (4E73C0DF)
8e266000 8e272000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8e272000 8e2d6000 csc csc.sys Sat Nov 20 09:44:32 2010 (4CE78A70)
8e2d6000 8e2ee000 dfsc dfsc.sys Sat Nov 20 09:42:32 2010 (4CE789F8)
8e2ee000 8e2fc000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8e2fc000 8e31d000 tunnel tunnel.sys Sat Nov 20 11:06:40 2010 (4CE79DB0)
8e31d000 8e32f000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
8e32f000 8e368000 dxgmms1 dxgmms1.sys Thu Feb 03 04:45:05 2011 (4D4A24C1)
8e368000 8e387000 HDAudBus HDAudBus.sys Sat Nov 20 10:59:28 2010 (4CE79C00)
8e387000 8e3d2000 USBPORT USBPORT.SYS Fri Mar 25 03:58:05 2011 (4D8C04BD)
8e3d2000 8e3e1000 usbehci usbehci.sys Fri Mar 25 03:57:58 2011 (4D8C04B6)
8e3e1000 8e3f9000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
8ee00000 8ee0b000 usbuhci usbuhci.sys Fri Mar 25 03:57:56 2011 (4D8C04B4)
8ee0b000 8ee15000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
8ee17000 8f737000 igdkmd32 igdkmd32.sys Fri Jun 03 22:28:22 2011 (4DE943E6)
8f737000 8f7ee000 dxgkrnl dxgkrnl.sys Sat Nov 20 10:08:14 2010 (4CE78FFE)
8f7ee000 8f800000 L1C62x86 L1C62x86.sys Mon Sep 27 08:36:14 2010 (4CA03B5E)
9001b000 9002d000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
9002d000 90045000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
90045000 90050000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
90050000 90072000 ndiswan ndiswan.sys Sat Nov 20 11:07:48 2010 (4CE79DF4)
90072000 9008a000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
9008a000 900a1000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
900a1000 900b8000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
900b8000 900c2000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
900c2000 900c3380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
900c4000 900f8000 ks ks.sys Sat Nov 20 10:50:17 2010 (4CE799D9)
900f8000 90106000 umbus umbus.sys Sat Nov 20 11:00:23 2010 (4CE79C37)
90106000 9014a000 usbhub usbhub.sys Fri Mar 25 03:58:34 2011 (4D8C04DA)
9014a000 9015b000 NDProxy NDProxy.SYS Sat Nov 20 11:07:39 2010 (4CE79DEB)
95428000 9565a000 viahduaa viahduaa.sys Mon Mar 28 13:29:04 2011 (4D907100)
9565a000 95689000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
95689000 956a2000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
956a2000 956af000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
956af000 956ba000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
956ba000 956c3000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
956c3000 956d4000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
956d4000 956df000 lvusbsta lvusbsta.sys Wed Jan 19 20:11:16 2005 (41EEB0D4)
956df000 956e0700 USBD USBD.SYS Fri Mar 25 03:57:53 2011 (4D8C04B1)
956e1000 9574b000 spsys spsys.sys Mon May 11 18:37:10 2009 (4A085436)
96400000 9641b000 mrxsmb20 mrxsmb20.sys Wed Apr 27 04:17:26 2011 (4DB77CB6)
9641b000 96422000 parvdm parvdm.sys Tue Jul 14 01:45:29 2009 (4A5BC719)
96422000 9644df80 WinVDEdrv6 WinVDEdrv6.sys Wed Aug 03 06:37:23 2011 (4E38D083)
9644e000 964e5000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
964e5000 964ef000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
964ef000 96510000 srvnet srvnet.sys Fri Apr 29 04:46:08 2011 (4DBA2670)
96510000 9651d000 tcpipreg tcpipreg.sys Sat Nov 20 11:07:13 2010 (4CE79DD1)
9651d000 96552b80 WinVDEdrv WinVDEdrv.sys Fri Jul 15 13:23:55 2011 (4E20234B)
96553000 965a3000 srv2 srv2.sys Fri Apr 29 04:46:13 2011 (4DBA2675)
965a3000 965f5000 srv srv.sys Fri Apr 29 04:46:30 2011 (4DBA2686)
965f5000 965f5d00 TuneUpUtilitiesDriver32 TuneUpUtilitiesDriver32.sys Thu Sep 17 13:54:55 2009 (4AB2238F)
965f6000 965fbd80 MpKslc971c61d MpKslc971c61d.sys Fri Sep 16 23:34:23 2011 (4E73C0DF)
96630000 9663a000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
9663a000 9666db00 LV561AV LV561AV.SYS Wed Jan 19 20:14:37 2005 (41EEB19D)
9666e000 9667b180 STREAM STREAM.SYS Tue Jul 14 01:50:57 2009 (4A5BC861)
9667c000 96687000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
96687000 966a2000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
966a2000 966bc000 WudfPf WudfPf.sys Sat Nov 20 10:58:55 2010 (4CE79BDF)
966bc000 966cc000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
966cc000 966df000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
966df000 96764000 HTTP HTTP.sys Sat Nov 20 09:40:17 2010 (4CE78971)
96764000 9677d000 bowser bowser.sys Wed Feb 23 05:47:32 2011 (4D649164)
9677d000 9678f000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
9678f000 967b2000 mrxsmb mrxsmb.sys Wed Apr 27 04:17:20 2011 (4DB77CB0)
967b2000 967ed000 mrxsmb10 mrxsmb10.sys Sat Jul 09 04:29:57 2011 (4E17BD25)
974e0000 97730000 win32k win32k.sys unavailable (00000000)
97740000 97749000 TSDDD TSDDD.dll unavailable (00000000)
97770000 9778e000 cdd cdd.dll unavailable (00000000)

Unloaded modules:
9574b000 957b5000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0006A000
956e1000 9574b000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0006A000
96409000 96630000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00227000
88c00000 88c0d000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
83a00000 83a0b000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
88df6000 88dff000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
83200000 83211000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
90166000 90168000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9015b000 90166000 lvusbsta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
Closing open log file c:debuglog.txt

Arie · 2012/07/30

1st time error? Multiple errors? Please give some more information.

Your subject says BSOD tunnel.sys, but the error is showing volsnap.sys.

bratic · 2012/07/31

It is not for the first time...more often occurs when using Skype or you tube full screen. Restart occurs at least once a day.

Admin. · 2012/07/31

Post another 2 .dmp files. In the mean time, please enter your System Details. It helps us in answering your questions!

bratic · 2012/07/31

Machine: MSI-MS-7592
Memory (RAM): 2GB
Processor: Intel(R) Celeron(R) CPU E3400@2.60Hz
Video Cards: Intel(R) G41 Express Chipset
Monitors: Benq GL2240
HardDisc: Hitachi HDS721050CLA362 ATA Device
Network Card: Atheros AR8132 PCI-E Fast Ethernet Controller
Audio Card: VIA HDA
OS: Win7 Ultimate 32-bit SP1

How to post 2 dump?

PeteC · 2012/07/31

How to post 2 dump?
Click to expand...

Post each one in a separate post in this thread.

And please fill in your System details as posted by Arie - they will then appear in all threads you start/respond to - not just this one.

See My System in the left hand column of this post for end result of following the instructions.

bratic · 2012/08/01

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\072712-14055-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0x82c54000 PsLoadedModuleList = 0x82d9d4d0
Debug session time: Fri Jul 27 10:14:54.706 2012 (UTC + 2:00)
System Uptime: 0 days 1:18:21.548
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {c0000005, 8dae4464, 8aaf99cc, 8aaf95b0}

Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::EvictAllocation+3c )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8dae4464, The address that the exception occurred at
Arg3: 8aaf99cc, Exception Record Address
Arg4: 8aaf95b0, Context Record Address

Debugging Details:
------------------

OVERLAPPED_MODULE: Address regions for 'srv2' and 'LVMVDrv.sys' overlap

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
dxgmms1!VIDMM_GLOBAL::EvictAllocation+3c
8dae4464 8b5120 mov edx,dword ptr [ecx+20h]

EXCEPTION_RECORD: 8aaf99cc -- (.exr 0xffffffff8aaf99cc)
.exr 0xffffffff8aaf99cc
ExceptionAddress: 8dae4464 (dxgmms1!VIDMM_GLOBAL::EvictAllocation+0x0000003c)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 006f004e
Attempt to read from address 006f004e

CONTEXT: 8aaf95b0 -- (.cxr 0xffffffff8aaf95b0)
.cxr 0xffffffff8aaf95b0
eax=aff27198 ebx=006f0056 ecx=006f002e edx=00000004 esi=bd9f24b8 edi=bd9f2578
eip=8dae4464 esp=8aaf9a94 ebp=8aaf9aa4 iopl=0 nv up ei pl nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010217
dxgmms1!VIDMM_GLOBAL::EvictAllocation+0x3c:
8dae4464 8b5120 mov edx,dword ptr [ecx+20h] ds:0023:006f004e=????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: STRING_DEREFERENCE

PROCESS_NAME: System

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 006f004e

READ_ADDRESS: GetPointerFromAddress: unable to read from 82dbd848
Unable to read MiSystemVaType memory at 82d9ce20
006f004e

FOLLOWUP_IP:
dxgmms1!VIDMM_GLOBAL::EvictAllocation+3c
8dae4464 8b5120 mov edx,dword ptr [ecx+20h]

BUGCHECK_STR: 0x7E

LAST_CONTROL_TRANSFER: from 8dae5d65 to 8dae4464

STACK_TEXT:
8aaf9aa4 8dae5d65 aff27198 85694044 869f2000 dxgmms1!VIDMM_GLOBAL::EvictAllocation+0x3c
8aaf9abc 8dae924c 85184170 00000000 00000000 dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForPreparation+0x1c3
8aaf9bb8 8db00850 9951f288 00000000 86320528 dxgmms1!VIDMM_GLOBAL:repareDmaBuffer+0x2f6
8aaf9d18 8db01141 874e23f0 85476ab8 8aaf9d3c dxgmms1!VidSchiSubmitRenderCommand+0x1c0
8aaf9d28 8db013de 874e23f0 82c8b539 869c8008 dxgmms1!VidSchiSubmitQueueCommand+0x61
8aaf9d3c 8db01485 869c8008 00000000 869cd610 dxgmms1!VidSchiRun_PriorityTable+0x24
8aaf9d50 82e5d056 869c8008 ae6af926 00000000 dxgmms1!VidSchiWorkerThread+0x7f
8aaf9d90 82d051a9 8db01406 869c8008 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: dxgmms1!VIDMM_GLOBAL::EvictAllocation+3c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME: dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4d4a24c1

STACK_COMMAND: .cxr 0xffffffff8aaf95b0 ; kb

FAILURE_BUCKET_ID: 0x7E_dxgmms1!VIDMM_GLOBAL::EvictAllocation+3c

BUCKET_ID: 0x7E_dxgmms1!VIDMM_GLOBAL::EvictAllocation+3c

Followup: MachineOwner
---------

eax=aff27198 ebx=006f0056 ecx=006f002e edx=00000004 esi=bd9f24b8 edi=bd9f2578
eip=8dae4464 esp=8aaf9a94 ebp=8aaf9aa4 iopl=0 nv up ei pl nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010217
dxgmms1!VIDMM_GLOBAL::EvictAllocation+0x3c:
8dae4464 8b5120 mov edx,dword ptr [ecx+20h] ds:0023:006f004e=????????
ChildEBP RetAddr Args to Child
8aaf9aa4 8dae5d65 aff27198 85694044 869f2000 dxgmms1!VIDMM_GLOBAL::EvictAllocation+0x3c (FPO: [Non-Fpo])
8aaf9abc 8dae924c 85184170 00000000 00000000 dxgmms1!VIDMM_GLOBAL::ReferenceAllocationForPreparation+0x1c3 (FPO: [Non-Fpo])
8aaf9bb8 8db00850 9951f288 00000000 86320528 dxgmms1!VIDMM_GLOBAL:repareDmaBuffer+0x2f6 (FPO: [Non-Fpo])
8aaf9d18 8db01141 874e23f0 85476ab8 8aaf9d3c dxgmms1!VidSchiSubmitRenderCommand+0x1c0 (FPO: [Non-Fpo])
8aaf9d28 8db013de 874e23f0 82c8b539 869c8008 dxgmms1!VidSchiSubmitQueueCommand+0x61 (FPO: [Non-Fpo])
8aaf9d3c 8db01485 869c8008 00000000 869cd610 dxgmms1!VidSchiRun_PriorityTable+0x24 (FPO: [Non-Fpo])
8aaf9d50 82e5d056 869c8008 ae6af926 00000000 dxgmms1!VidSchiWorkerThread+0x7f (FPO: [Non-Fpo])
8aaf9d90 82d051a9 8db01406 869c8008 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
start end module name
80ba6000 80bae000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
82c1d000 82c54000 hal halmacpi.dll Sat Nov 20 09:37:38 2010 (4CE788D2)
82c54000 83066000 nt ntkrpamp.exe Sat Mar 31 04:24:37 2012 (4F766AE5)
83200000 83211000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
8321d000 832a2000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:00:54 2010 (4CE7B876)
832a2000 832b3000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
832b3000 832bb000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
832bb000 832fd000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
832fd000 833a8000 CI CI.dll Sat Nov 20 13:05:17 2010 (4CE7B97D)
833a8000 833cb000 ataport ataport.SYS Sat Nov 20 09:38:00 2010 (4CE788E8)
833cb000 833ff000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
83800000 83829180 vmbus vmbus.sys Sat Nov 20 10:14:58 2010 (4CE79192)
8382a000 8383c000 winhv winhv.sys Sat Nov 20 09:38:15 2010 (4CE788F7)
8383c000 838ad000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
838ad000 838bb000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
838bb000 83903000 ACPI ACPI.sys Sat Nov 20 09:37:52 2010 (4CE788E0)
83903000 8390c000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
8390c000 83914000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
83914000 8393e000 pci pci.sys Sat Nov 20 09:37:57 2010 (4CE788E5)
8393e000 83949000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
83949000 8395a000 partmgr partmgr.sys Sat Mar 17 06:03:08 2012 (4F641B0C)
8395a000 8396a000 volmgr volmgr.sys Sat Nov 20 09:38:06 2010 (4CE788EE)
8396a000 839b5000 volmgrx volmgrx.sys unavailable (00000000)
839b5000 839bc000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
839bc000 839ca000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
839ca000 839e0000 mountmgr mountmgr.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
839e0000 839e9000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
839e9000 839f2000 amdxata amdxata.sys Fri Mar 19 17:19:01 2010 (4BA3A3F5)
83a00000 83a1f000 cdrom cdrom.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
83a29000 83a50d00 MpFilter MpFilter.sys Fri Mar 09 09:43:34 2012 (4F59C2B6)
83a51000 83a55bc0 PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
83a56000 83b85000 Ntfs Ntfs.sys Fri Mar 11 04:21:11 2011 (4D799527)
83b85000 83bb0000 msrpc msrpc.sys unavailable (00000000)
83bb0000 83bc3000 ksecdd ksecdd.sys Thu Nov 17 04:15:56 2011 (4EC47C6C)
83bc3000 83bf5000 fvevol fvevol.sys Sat Nov 20 09:40:22 2010 (4CE78976)
88c00000 88c0c000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
88c0d000 88c6a000 cng cng.sys Thu Nov 17 04:36:35 2011 (4EC48143)
88c6a000 88c78000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
88c78000 88c81000 Fs_Rec Fs_Rec.sys unavailable (00000000)
88c81000 88d38000 ndis ndis.sys Sat Nov 20 09:39:19 2010 (4CE78937)
88d38000 88d76000 NETIO NETIO.SYS Sat Nov 20 09:40:03 2010 (4CE78963)
88d76000 88d9b000 ksecpkg ksecpkg.sys Thu Nov 17 04:37:34 2011 (4EC4817E)
88d9b000 88dda000 volsnap volsnap.sys Sat Nov 20 09:38:13 2010 (4CE788F5)
88dda000 88dff000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
88e00000 88e10000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
88e10000 88e18000 hwpolicy hwpolicy.sys Sat Nov 20 09:37:35 2010 (4CE788CF)
88e18000 88e29000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
88e29000 88e32000 WinFLAdrv WinFLAdrv.sys Thu Dec 01 05:52:28 2011 (4ED7080C)
88e32000 88e39000 Null Null.SYS unavailable (00000000)
88e3e000 88f89000 tcpip tcpip.sys Fri Mar 30 10:08:52 2012 (4F756A14)
88f89000 88fba000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:39:08 2010 (4CE7892C)
88fba000 88fc3000 vmstorfl vmstorfl.sys unavailable (00000000)
88fc3000 88fcb000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
88fcb000 88ff8000 rdyboost rdyboost.sys Sat Nov 20 10:00:07 2010 (4CE78E17)
88ff8000 88fff000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
8a400000 8a43b000 mrxsmb10 mrxsmb10.sys Sat Jul 09 04:29:57 2011 (4E17BD25)
8a43b000 8a456000 mrxsmb20 mrxsmb20.sys Wed Apr 27 04:17:26 2011 (4DB77CB6)
8a456000 8a45d000 parvdm parvdm.sys unavailable (00000000)
8a45d000 8a488f80 WinVDEdrv6 WinVDEdrv6.sys Wed Aug 03 06:37:23 2011 (4E38D083)
8a489000 8a520000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
8a520000 8a52a000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
8a52a000 8a54b000 srvnet srvnet.sys Fri Apr 29 04:46:08 2011 (4DBA2670)
8a54b000 8a558000 tcpipreg tcpipreg.sys Sat Nov 20 11:07:13 2010 (4CE79DD1)
8a558000 8a58db80 WinVDEdrv WinVDEdrv.sys Fri Jul 15 13:23:55 2011 (4E20234B)
8a58e000 8a5de000 srv2 srv2.sys Fri Apr 29 04:46:13 2011 (4DBA2675)
8a5de000 8a630000 srv srv.sys Fri Apr 29 04:46:30 2011 (4DBA2686)
8a630000 8a630d00 TuneUpUtilitiesDriver32 TuneUpUtilitiesDriver32.sys Thu Sep 17 13:54:55 2009 (4AB2238F)
8a631000 8a636d80 MpKsleec883f1 MpKsleec883f1.sys Fri Sep 16 23:34:23 2011 (4E73C0DF)
8a65b000 8a68eb00 LV561AV LV561AV.SYS Wed Jan 19 20:14:37 2005 (41EEB19D)
8a68f000 8a69c180 STREAM STREAM.SYS Tue Jul 14 01:50:57 2009 (4A5BC861)
8a69d000 8a6b8000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
8a6b8000 8a6d2000 WudfPf WudfPf.sys Sat Nov 20 10:58:55 2010 (4CE79BDF)
8a6d2000 8a6e2000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
8a6e2000 8a6f5000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
8a6f5000 8a77a000 HTTP HTTP.sys Sat Nov 20 09:40:17 2010 (4CE78971)
8a77a000 8a793000 bowser bowser.sys Wed Feb 23 05:47:32 2011 (4D649164)
8a793000 8a7a5000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
8a7a5000 8a7c8000 mrxsmb mrxsmb.sys Wed Apr 27 04:17:20 2011 (4DB77CB0)
8da12000 8da76000 csc csc.sys Sat Nov 20 09:44:32 2010 (4CE78A70)
8da76000 8da8e000 dfsc dfsc.sys Sat Nov 20 09:42:32 2010 (4CE789F8)
8da8e000 8da9c000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8da9c000 8dabd000 tunnel tunnel.sys Sat Nov 20 11:06:40 2010 (4CE79DB0)
8dabd000 8dacf000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
8dacf000 8db08000 dxgmms1 dxgmms1.sys Thu Feb 03 04:45:05 2011 (4D4A24C1)
8db08000 8db1a000 L1C62x86 L1C62x86.sys Mon Sep 27 08:36:14 2010 (4CA03B5E)
8db1a000 8db25000 usbuhci usbuhci.sys Fri Mar 25 03:57:56 2011 (4D8C04B4)
8db25000 8db70000 USBPORT USBPORT.SYS Fri Mar 25 03:58:05 2011 (4D8C04BD)
8db70000 8db7f000 usbehci usbehci.sys Fri Mar 25 03:57:58 2011 (4D8C04B6)
8db7f000 8db89000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
8db89000 8dba1000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
8dba1000 8dbb9000 i8042prt i8042prt.sys Tue Jul 14 01:11:23 2009 (4A5BBF1B)
8dbb9000 8dbc6000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8dbc6000 8dbd3000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8dbd3000 8dbe0000 CompositeBus CompositeBus.sys Sat Nov 20 10:50:21 2010 (4CE799DD)
8dbe0000 8dbf2000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
8dbf2000 8dbfd000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
8dc00000 8dc21000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8dc21000 8dc2e000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8dc2e000 8dc36000 RDPCDD RDPCDD.sys Sat Nov 20 11:22:19 2010 (4CE7A15B)
8dc36000 8dc3e000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8dc3e000 8dc46000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8dc46000 8dc51000 Msfs Msfs.SYS unavailable (00000000)
8dc51000 8dc5f000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
8dc5f000 8dc76000 tdx tdx.sys Sat Nov 20 09:39:17 2010 (4CE78935)
8dc76000 8dc82000 TDI TDI.SYS Sat Nov 20 09:39:18 2010 (4CE78936)
8dc82000 8dcdc000 afd afd.sys Mon Apr 25 04:18:00 2011 (4DB4D9D8)
8dcdc000 8dd0e000 netbt netbt.sys Sat Nov 20 09:39:22 2010 (4CE7893A)
8dd0e000 8dd15000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
8dd15000 8dd34000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
8dd34000 8dd42000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
8dd42000 8dd5c000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8dd5c000 8dd6f000 wanarp wanarp.sys Sat Nov 20 11:07:45 2010 (4CE79DF1)
8dd6f000 8dd80000 termdd termdd.sys Sat Nov 20 11:21:10 2010 (4CE7A116)
8dd80000 8ddc1000 rdbss rdbss.sys Sat Nov 20 09:42:44 2010 (4CE78A04)
8ddc1000 8ddcb000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
8ddcb000 8ddd5000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8ddd5000 8dde1000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8dde1000 8ddf9000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
8ee00000 8ee1f000 HDAudBus HDAudBus.sys Sat Nov 20 10:59:28 2010 (4CE79C00)
8ee27000 8f747000 igdkmd32 igdkmd32.sys Fri Jun 03 22:28:22 2011 (4DE943E6)
8f747000 8f7fe000 dxgkrnl dxgkrnl.sys Sat Nov 20 10:08:14 2010 (4CE78FFE)
9462a000 9464c000 ndiswan ndiswan.sys Sat Nov 20 11:07:48 2010 (4CE79DF4)
9464c000 94664000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
94664000 9467b000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
9467b000 94692000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
94692000 9469c000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
9469c000 9469d380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
9469e000 946d2000 ks ks.sys Sat Nov 20 10:50:17 2010 (4CE799D9)
946d2000 946e0000 umbus umbus.sys Sat Nov 20 11:00:23 2010 (4CE79C37)
946e0000 94724000 usbhub usbhub.sys Fri Mar 25 03:58:34 2011 (4D8C04DA)
94724000 94735000 NDProxy NDProxy.SYS Sat Nov 20 11:07:39 2010 (4CE79DEB)
95e10000 96042000 viahduaa viahduaa.sys Mon Mar 28 13:29:04 2011 (4D907100)
96042000 96071000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
96071000 9608a000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
9608a000 96094000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
96094000 960a1000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
960a1000 960ac000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
960ac000 960b5000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
960b5000 960c6000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
960c6000 960d1000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
960d1000 960dc000 lvusbsta lvusbsta.sys Wed Jan 19 20:11:16 2005 (41EEB0D4)
960dc000 960dd700 USBD USBD.SYS Fri Mar 25 03:57:53 2011 (4D8C04B1)
96200000 9621e000 cdd cdd.dll unavailable (00000000)
96360000 965b0000 win32k win32k.sys unavailable (00000000)
965c0000 965c9000 TSDDD TSDDD.dll unavailable (00000000)

Unloaded modules:
8a434000 8a65b000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00227000
94740000 94742000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
94735000 94740000 lvusbsta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
Closing open log file c:debuglog.txt

bratic · 2012/08/01

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\072712-14835-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0x82c53000 PsLoadedModuleList = 0x82d9c4d0
Debug session time: Fri Jul 27 11:42:01.818 2012 (UTC + 2:00)
System Uptime: 0 days 0:12:09.660
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
.......
0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory. The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: 8e2c0d08, Virtual address for the attempted write.
Arg2: 79ddc121, PTE contents.
Arg3: 8078acc8, (reserved)
Arg4: 0000000a, (reserved)

Debugging Details:
------------------

*** ERROR: Module load completed but symbols could not be loaded for intelppm.sys

OVERLAPPED_MODULE: Address regions for 'srv2' and 'LVMVDrv.sys' overlap

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xBE

PROCESS_NAME: chrome.exe

CURRENT_IRQL: 2

TRAP_FRAME: 8078acc8 -- (.trap 0xffffffff8078acc8)
.trap 0xffffffff8078acc8
ErrCode = 00000003
eax=8e2c0d08 ebx=00000000 ecx=8078ad98 edx=86231b40 esi=8078ad98 edi=86231b40
eip=8e2b07cc esp=8078ad3c ebp=8078ad4c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210246
tunnel!TwKernelOffloadV4FlowParams+0x34c:
8e2b07cc ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 82c94468 to 82ce13bf

STACK_TEXT:
8078acb0 82c94468 00000001 8e2c0d08 00000000 nt!MmAccessFault+0x106
8078acb0 8e2b07cc 00000001 8e2c0d08 00000000 nt!KiTrap0E+0xdc
8078ad38 8e2c0d1b 00000000 82d7dd20 00000000 tunnel!TwKernelOffloadV4FlowParams+0x34c
WARNING: Stack unwind information not available. Following frames may be wrong.
8078ad4c 82d468fd 00000001 00000000 00000002 intelppm+0x2d1b
8078ada0 82d45d6b 8078ae70 00000000 869f1258 nt!PpmPerfRecordUtility+0x1b8
8078ade0 82d45c21 82c5d4a4 00000000 00000000 nt!PpmCheckRecordAllUtility+0xd2
8078ade4 82c5d4a4 00000000 00000000 00000000 nt!PpmCheckRun+0x5a
8078ae08 82ccd019 82d8ba58 00000000 12ee2958 nt!PpmCheckStart+0x4d
8078ae4c 82cccfbd 82d7dd20 8078af78 00000001 nt!KiProcessTimerDpcTable+0x50
8078af38 82ccce7a 82d7dd20 8078af78 00000000 nt!KiProcessExpiredTimerList+0x101
8078afac 82ccb00e 0000b6b4 b386fd34 00000000 nt!KiTimerExpiration+0x25c
8078aff4 82cca7dc b386fce4 00000000 00000000 nt!KiRetireDpcList+0xcb
8078aff8 b386fce4 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
82cca7dc 00000000 0000001a 00d6850f bb830000 0xb386fce4

STACK_COMMAND: kb

FOLLOWUP_IP:
tunnel!TwKernelOffloadV4FlowParams+34c
8e2b07cc ?? ???

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: tunnel!TwKernelOffloadV4FlowParams+34c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: tunnel

IMAGE_NAME: tunnel.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4ce79db0

FAILURE_BUCKET_ID: 0xBE_tunnel!TwKernelOffloadV4FlowParams+34c

BUCKET_ID: 0xBE_tunnel!TwKernelOffloadV4FlowParams+34c

Followup: MachineOwner
---------

eax=82d8af84 ebx=00000002 ecx=0000000b edx=00000000 esi=82d7dd20 edi=00000000
eip=82ce13bf esp=8078ac30 ebp=8078acb0 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200206
nt!MmAccessFault+0x106:
82ce13bf cc int 3
ChildEBP RetAddr Args to Child
8078acb0 82c94468 00000001 8e2c0d08 00000000 nt!MmAccessFault+0x106
8078acb0 8e2b07cc 00000001 8e2c0d08 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ 8078acc8)
8078ad38 8e2c0d1b 00000000 82d7dd20 00000000 tunnel!TwKernelOffloadV4FlowParams+0x34c
WARNING: Stack unwind information not available. Following frames may be wrong.
8078ad4c 82d468fd 00000001 00000000 00000002 intelppm+0x2d1b
8078ada0 82d45d6b 8078ae70 00000000 869f1258 nt!PpmPerfRecordUtility+0x1b8
8078ade0 82d45c21 82c5d4a4 00000000 00000000 nt!PpmCheckRecordAllUtility+0xd2
8078ade4 82c5d4a4 00000000 00000000 00000000 nt!PpmCheckRun+0x5a (FPO: [4,0,0])
8078ae08 82ccd019 82d8ba58 00000000 12ee2958 nt!PpmCheckStart+0x4d
8078ae4c 82cccfbd 82d7dd20 8078af78 00000001 nt!KiProcessTimerDpcTable+0x50
8078af38 82ccce7a 82d7dd20 8078af78 00000000 nt!KiProcessExpiredTimerList+0x101
8078afac 82ccb00e 0000b6b4 b386fd34 00000000 nt!KiTimerExpiration+0x25c
8078aff4 82cca7dc b386fce4 00000000 00000000 nt!KiRetireDpcList+0xcb
8078aff8 b386fce4 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c (FPO: [Uses EBP] [0,0,1])
82cca7dc 00000000 0000001a 00d6850f bb830000 0xb386fce4
start end module name
80bb0000 80bb8000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
81e00000 81e3b000 mrxsmb10 mrxsmb10.sys Sat Jul 09 04:29:57 2011 (4E17BD25)
81e3b000 81e56000 mrxsmb20 mrxsmb20.sys Wed Apr 27 04:17:26 2011 (4DB77CB6)
81e56000 81e5d000 parvdm parvdm.sys Tue Jul 14 01:45:29 2009 (4A5BC719)
81e5d000 81e88f80 WinVDEdrv6 WinVDEdrv6.sys Wed Aug 03 06:37:23 2011 (4E38D083)
81e89000 81f20000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
81f20000 81f2a000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
81f2a000 81f4b000 srvnet srvnet.sys Fri Apr 29 04:46:08 2011 (4DBA2670)
81f4b000 81f58000 tcpipreg tcpipreg.sys Sat Nov 20 11:07:13 2010 (4CE79DD1)
81f58000 81f8db80 WinVDEdrv WinVDEdrv.sys Fri Jul 15 13:23:55 2011 (4E20234B)
81f8e000 81fde000 srv2 srv2.sys Fri Apr 29 04:46:13 2011 (4DBA2675)
81fde000 82030000 srv srv.sys Fri Apr 29 04:46:30 2011 (4DBA2686)
82030000 82030d00 TuneUpUtilitiesDriver32 TuneUpUtilitiesDriver32.sys Thu Sep 17 13:54:55 2009 (4AB2238F)
82031000 82036d80 MpKsl54c4eaad MpKsl54c4eaad.sys Fri Sep 16 23:34:23 2011 (4E73C0DF)
82051000 82084b00 LV561AV LV561AV.SYS Wed Jan 19 20:14:37 2005 (41EEB19D)
82085000 82092180 STREAM STREAM.SYS Tue Jul 14 01:50:57 2009 (4A5BC861)
82093000 8209d000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
8209d000 820a8000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
820a8000 820c3000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
820c3000 820dd000 WudfPf WudfPf.sys Sat Nov 20 10:58:55 2010 (4CE79BDF)
820dd000 820ed000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
820ed000 82100000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
82100000 82185000 HTTP HTTP.sys Sat Nov 20 09:40:17 2010 (4CE78971)
82185000 8219e000 bowser bowser.sys Wed Feb 23 05:47:32 2011 (4D649164)
8219e000 821b0000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
821b0000 821d3000 mrxsmb mrxsmb.sys Wed Apr 27 04:17:20 2011 (4DB77CB0)
82c1c000 82c53000 hal halmacpi.dll Sat Nov 20 09:37:38 2010 (4CE788D2)
82c53000 83065000 nt ntkrpamp.exe Sat Mar 31 04:24:37 2012 (4F766AE5)
83200000 83232000 fvevol fvevol.sys Sat Nov 20 09:40:22 2010 (4CE78976)
83232000 832b7000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:00:54 2010 (4CE7B876)
832b7000 832c8000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
832c8000 832d0000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
832d0000 83312000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
83312000 833bd000 CI CI.dll Sat Nov 20 13:05:17 2010 (4CE7B97D)
833bd000 833e0000 ataport ataport.SYS Sat Nov 20 09:38:00 2010 (4CE788E8)
833e0000 833ff000 cdrom cdrom.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
83800000 83812000 winhv winhv.sys Sat Nov 20 09:38:15 2010 (4CE788F7)
83812000 8381b000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8381b000 83824000 amdxata amdxata.sys Fri Mar 19 17:19:01 2010 (4BA3A3F5)
83824000 8382b000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
8382e000 8389f000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
8389f000 838ad000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
838ad000 838f5000 ACPI ACPI.sys Sat Nov 20 09:37:52 2010 (4CE788E0)
838f5000 838fe000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
838fe000 83906000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
83906000 83930000 pci pci.sys Sat Nov 20 09:37:57 2010 (4CE788E5)
83930000 8393b000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
8393b000 8394c000 partmgr partmgr.sys Sat Mar 17 06:03:08 2012 (4F641B0C)
8394c000 8395c000 volmgr volmgr.sys Sat Nov 20 09:38:06 2010 (4CE788EE)
8395c000 839a7000 volmgrx volmgrx.sys Tue Jul 14 01:11:41 2009 (4A5BBF2D)
839a7000 839ae000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
839ae000 839bc000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
839bc000 839d2000 mountmgr mountmgr.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
839d2000 839fb180 vmbus vmbus.sys Sat Nov 20 10:14:58 2010 (4CE79192)
83a00000 83a2b000 msrpc msrpc.sys Tue Jul 14 01:11:59 2009 (4A5BBF3F)
83a2b000 83a3e000 ksecdd ksecdd.sys Sat Jun 02 04:25:35 2012 (4FC9799F)
83a3e000 83a72000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
83a72000 83a83000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
83a83000 83aaad00 MpFilter MpFilter.sys Fri Mar 09 09:43:34 2012 (4F59C2B6)
83aab000 83aafbc0 PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
83ab0000 83bdf000 Ntfs Ntfs.sys Fri Mar 11 04:21:11 2011 (4D799527)
88c0d000 88c16000 WinFLAdrv WinFLAdrv.sys Thu Dec 01 05:52:28 2011 (4ED7080C)
88c17000 88c74000 cng cng.sys Sat Jun 02 04:46:38 2012 (4FC97E8E)
88c74000 88c82000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
88c82000 88c8b000 Fs_Rec Fs_Rec.sys Thu Mar 01 04:21:26 2012 (4F4EEB36)
88c8b000 88d42000 ndis ndis.sys Sat Nov 20 09:39:19 2010 (4CE78937)
88d42000 88d80000 NETIO NETIO.SYS Sat Nov 20 09:40:03 2010 (4CE78963)
88d80000 88da5000 ksecpkg ksecpkg.sys Sat Jun 02 04:47:40 2012 (4FC97ECC)
88da5000 88dd2000 rdyboost rdyboost.sys Sat Nov 20 10:00:07 2010 (4CE78E17)
88dd2000 88df7000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
88df7000 88dfe000 Null Null.SYS Tue Jul 14 01:11:12 2009 (4A5BBF10)
88e0a000 88f55000 tcpip tcpip.sys Fri Mar 30 10:08:52 2012 (4F756A14)
88f55000 88f86000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:39:08 2010 (4CE7892C)
88f86000 88f8e380 vmstorfl vmstorfl.sys Sat Nov 20 10:14:37 2010 (4CE7917D)
88f8f000 88fce000 volsnap volsnap.sys Sat Nov 20 09:38:13 2010 (4CE788F5)
88fce000 88fd6000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
88fd6000 88fe6000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
88fe6000 88fee000 hwpolicy hwpolicy.sys Sat Nov 20 09:37:35 2010 (4CE788CF)
88fee000 88fff000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
8e00e000 8e01a000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
8e01a000 8e03b000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8e03b000 8e048000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8e048000 8e050000 RDPCDD RDPCDD.sys Sat Nov 20 11:22:19 2010 (4CE7A15B)
8e050000 8e058000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8e058000 8e060000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8e060000 8e06b000 Msfs Msfs.SYS Tue Jul 14 01:11:26 2009 (4A5BBF1E)
8e06b000 8e079000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
8e079000 8e090000 tdx tdx.sys Sat Nov 20 09:39:17 2010 (4CE78935)
8e090000 8e09c000 TDI TDI.SYS Sat Nov 20 09:39:18 2010 (4CE78936)
8e09c000 8e0f6000 afd afd.sys Mon Apr 25 04:18:00 2011 (4DB4D9D8)
8e0f6000 8e128000 netbt netbt.sys Sat Nov 20 09:39:22 2010 (4CE7893A)
8e128000 8e12f000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
8e12f000 8e14e000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
8e14e000 8e15c000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
8e15c000 8e176000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8e176000 8e189000 wanarp wanarp.sys Sat Nov 20 11:07:45 2010 (4CE79DF1)
8e189000 8e19a000 termdd termdd.sys Sat Nov 20 11:21:10 2010 (4CE7A116)
8e19a000 8e1db000 rdbss rdbss.sys Sat Nov 20 09:42:44 2010 (4CE78A04)
8e1db000 8e1e5000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
8e1e5000 8e1ef000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8e1ef000 8e1fb000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8e213000 8e277000 csc csc.sys Sat Nov 20 09:44:32 2010 (4CE78A70)
8e277000 8e28f000 dfsc dfsc.sys Sat Nov 20 09:42:32 2010 (4CE789F8)
8e28f000 8e29d000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8e29d000 8e2be000 tunnel tunnel.sys Sat Nov 20 11:06:40 2010 (4CE79DB0)
8e2be000 8e2d0000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
8e2d0000 8e309000 dxgmms1 dxgmms1.sys Thu Feb 03 04:45:05 2011 (4D4A24C1)
8e309000 8e31b000 L1C62x86 L1C62x86.sys Mon Sep 27 08:36:14 2010 (4CA03B5E)
8e31b000 8e326000 usbuhci usbuhci.sys Fri Mar 25 03:57:56 2011 (4D8C04B4)
8e326000 8e371000 USBPORT USBPORT.SYS Fri Mar 25 03:58:05 2011 (4D8C04BD)
8e371000 8e380000 usbehci usbehci.sys Fri Mar 25 03:57:58 2011 (4D8C04B6)
8e380000 8e38a000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
8e38a000 8e3a2000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
8e3a2000 8e3ba000 i8042prt i8042prt.sys Tue Jul 14 01:11:23 2009 (4A5BBF1B)
8e3ba000 8e3c7000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8e3c7000 8e3d4000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8e3d4000 8e3e1000 CompositeBus CompositeBus.sys Sat Nov 20 10:50:21 2010 (4CE799DD)
8e3e1000 8e3f3000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
8ee00000 8ee1f000 HDAudBus HDAudBus.sys Sat Nov 20 10:59:28 2010 (4CE79C00)
8ee23000 8f743000 igdkmd32 igdkmd32.sys Fri Jun 03 22:28:22 2011 (4DE943E6)
8f743000 8f7fa000 dxgkrnl dxgkrnl.sys Sat Nov 20 10:08:14 2010 (4CE78FFE)
9481d000 94835000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
94835000 94840000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
94840000 94862000 ndiswan ndiswan.sys Sat Nov 20 11:07:48 2010 (4CE79DF4)
94862000 9487a000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
9487a000 94891000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
94891000 948a8000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
948a8000 948b2000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
948b2000 948b3380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
948b4000 948e8000 ks ks.sys Sat Nov 20 10:50:17 2010 (4CE799D9)
948e8000 948f6000 umbus umbus.sys Sat Nov 20 11:00:23 2010 (4CE79C37)
948f6000 9493a000 usbhub usbhub.sys Fri Mar 25 03:58:34 2011 (4D8C04DA)
9493a000 9494b000 NDProxy NDProxy.SYS Sat Nov 20 11:07:39 2010 (4CE79DEB)
95e08000 9603a000 viahduaa viahduaa.sys Mon Mar 28 13:29:04 2011 (4D907100)
9603a000 96069000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
96069000 96082000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
96082000 9608f000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
9608f000 9609a000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
9609a000 960a3000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
960a3000 960b4000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
960b4000 960bf000 lvusbsta lvusbsta.sys Wed Jan 19 20:11:16 2005 (41EEB0D4)
960bf000 960c0700 USBD USBD.SYS Fri Mar 25 03:57:53 2011 (4D8C04B1)
96d30000 96f81000 win32k win32k.sys Tue Jun 12 04:40:25 2012 (4FD6AC19)
96fa0000 96fa9000 TSDDD TSDDD.dll unavailable (00000000)
96fd0000 96fee000 cdd cdd.dll Sat Nov 20 12:56:35 2010 (4CE7B773)

Unloaded modules:
81e2a000 82051000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00227000
88c00000 88c0d000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
83bdf000 83bea000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
88e00000 88e09000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
83bea000 83bfb000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
94956000 94958000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9494b000 94956000 lvusbsta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
Closing open log file c:debuglog.txt

Arie · 2012/08/01

Hi,

Read this post, then post the requested log(s) in the Malware and Virus Removal forum.

bratic · 2012/08/01

I had one mor BSOD, on the step 3 of your suggestion. This is the dump file:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\080112-18267-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0x82c43000 PsLoadedModuleList = 0x82d8c4d0
Debug session time: Wed Aug 1 14:19:12.110 2012 (UTC + 2:00)
System Uptime: 0 days 3:34:36.951
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {c03be320, 0, 0, 82ce40c6}

Probably caused by : memory_corruption ( nt!MiDeletePageTableHierarchy+4e )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: c03be320, memory referenced
Arg2: 00000000, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82ce40c6, address which referenced memory

Debugging Details:
------------------

OVERLAPPED_MODULE: Address regions for 'kgloypog' and 'mbamswissarm' overlap

READ_ADDRESS: GetPointerFromAddress: unable to read from 82dac848
Unable to read MiSystemVaType memory at 82d8be20
c03be320

CURRENT_IRQL: 0

FAULTING_IP:
nt!MiDeletePageTableHierarchy+4e
82ce40c6 8b06 mov eax,dword ptr [esi]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: chrome.exe

TRAP_FRAME: 9901f68c -- (.trap 0xffffffff9901f68c)
.trap 0xffffffff9901f68c
ErrCode = 00000000
eax=8c800000 ebx=77c64000 ecx=00000000 edx=00000000 esi=c03be320 edi=00000000
eip=82ce40c6 esp=9901f700 ebp=9901f7a8 iopl=0 nv up ei ng nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
nt!MiDeletePageTableHierarchy+0x4e:
82ce40c6 8b06 mov eax,dword ptr [esi] ds:0023:c03be320=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 82ce40c6 to 82c8465b

STACK_TEXT:
9901f68c 82ce40c6 badb0d00 00000000 00000001 nt!KiTrap0E+0x2cf
9901f7a8 82d029ed 85122d40 77c64000 85279d48 nt!MiDeletePageTableHierarchy+0x4e
9901fc14 82d013aa 85122d40 85122d40 00000000 nt!MiDeleteAddressesInWorkingSet+0x3b6
9901fc40 82eac937 bdd13a0e 85279d48 c0000005 nt!MmCleanProcessAddressSpace+0x8c
9901fcb4 82ec02a1 00000000 858a26b0 00000001 nt!PspExitThread+0x685
9901fccc 82cf4850 858a26b0 9901fcf8 9901fd04 nt!PsExitSpecialApc+0x22
9901fd1c 82c81334 00000001 00000000 9901fd34 nt!KiDeliverApc+0x28b
9901fd1c 77c67094 00000001 00000000 9901fd34 nt!KiServiceExit+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
039ef848 00000000 00000000 00000000 00000000 0x77c67094

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiDeletePageTableHierarchy+4e
82ce40c6 8b06 mov eax,dword ptr [esi]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiDeletePageTableHierarchy+4e

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4f766ae5

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_nt!MiDeletePageTableHierarchy+4e

BUCKET_ID: 0xA_nt!MiDeletePageTableHierarchy+4e

Followup: MachineOwner
---------

eax=82d7af84 ebx=9901f700 ecx=00000043 edx=00000000 esi=807c6120 edi=00000000
eip=82c8465b esp=9901f674 ebp=9901f68c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
nt!KiTrap0E+0x2cf:
82c8465b 833d4477da8200 cmp dword ptr [nt!KiFreezeFlag (82da7744)],0 ds:0023:82da7744=????????
ChildEBP RetAddr Args to Child
9901f68c 82ce40c6 badb0d00 00000000 00000001 nt!KiTrap0E+0x2cf (FPO: [0,0] TrapFrame @ 9901f68c)
9901f7a8 82d029ed 85122d40 77c64000 85279d48 nt!MiDeletePageTableHierarchy+0x4e
9901fc14 82d013aa 85122d40 85122d40 00000000 nt!MiDeleteAddressesInWorkingSet+0x3b6
9901fc40 82eac937 bdd13a0e 85279d48 c0000005 nt!MmCleanProcessAddressSpace+0x8c
9901fcb4 82ec02a1 00000000 858a26b0 00000001 nt!PspExitThread+0x685
9901fccc 82cf4850 858a26b0 9901fcf8 9901fd04 nt!PsExitSpecialApc+0x22
9901fd1c 82c81334 00000001 00000000 9901fd34 nt!KiDeliverApc+0x28b
9901fd1c 77c67094 00000001 00000000 9901fd34 nt!KiServiceExit+0x64 (FPO: [0,3] TrapFrame @ 9901fd34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
039ef848 00000000 00000000 00000000 00000000 0x77c67094
start end module name
80b9b000 80ba3000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
82c0c000 82c43000 hal halmacpi.dll Sat Nov 20 09:37:38 2010 (4CE788D2)
82c43000 83055000 nt ntkrpamp.exe Sat Mar 31 04:24:37 2012 (4F766AE5)
8320f000 83294000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:00:54 2010 (4CE7B876)
83294000 832a5000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
832a5000 832ad000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
832ad000 832ef000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
832ef000 8339a000 CI CI.dll Sat Nov 20 13:05:17 2010 (4CE7B97D)
8339a000 833bd000 ataport ataport.SYS Sat Nov 20 09:38:00 2010 (4CE788E8)
833bd000 833f1000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
833f1000 833fe000 CompositeBus CompositeBus.sys Sat Nov 20 10:50:21 2010 (4CE799DD)
83800000 83812000 winhv winhv.sys Sat Nov 20 09:38:15 2010 (4CE788F7)
83812000 8381b000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8381b000 83824000 amdxata amdxata.sys Fri Mar 19 17:19:01 2010 (4BA3A3F5)
8382f000 838a0000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
838a0000 838ae000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
838ae000 838f6000 ACPI ACPI.sys Sat Nov 20 09:37:52 2010 (4CE788E0)
838f6000 838ff000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
838ff000 83907000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
83907000 83931000 pci pci.sys Sat Nov 20 09:37:57 2010 (4CE788E5)
83931000 8393c000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
8393c000 8394d000 partmgr partmgr.sys Sat Mar 17 06:03:08 2012 (4F641B0C)
8394d000 8395d000 volmgr volmgr.sys Sat Nov 20 09:38:06 2010 (4CE788EE)
8395d000 839a8000 volmgrx volmgrx.sys unavailable (00000000)
839a8000 839af000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
839af000 839bd000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
839bd000 839d3000 mountmgr mountmgr.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
839d3000 839fc180 vmbus vmbus.sys Sat Nov 20 10:14:58 2010 (4CE79192)
83a06000 83a17000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
83a17000 83a1bbc0 PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
83a1c000 83b4b000 Ntfs Ntfs.sys Fri Mar 11 04:21:11 2011 (4D799527)
83b4b000 83b76000 msrpc msrpc.sys unavailable (00000000)
83b76000 83b89000 ksecdd ksecdd.sys Sat Jun 02 04:25:35 2012 (4FC9799F)
83b89000 83be6000 cng cng.sys Sat Jun 02 04:46:38 2012 (4FC97E8E)
83be6000 83bf4000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
83bf4000 83bfd000 Fs_Rec Fs_Rec.sys unavailable (00000000)
88c00000 88c0d000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
88c0d000 88c1a000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
88c1a000 88cd1000 ndis ndis.sys Sat Nov 20 09:39:19 2010 (4CE78937)
88cd1000 88d0f000 NETIO NETIO.SYS Sat Nov 20 09:40:03 2010 (4CE78963)
88d0f000 88d34000 ksecpkg ksecpkg.sys Sat Jun 02 04:47:40 2012 (4FC97ECC)
88d34000 88d61000 rdyboost rdyboost.sys Sat Nov 20 10:00:07 2010 (4CE78E17)
88d61000 88d93000 fvevol fvevol.sys Sat Nov 20 09:40:22 2010 (4CE78976)
88d93000 88da4000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
88da4000 88dc9000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
88de3000 88dfb000 i8042prt i8042prt.sys Tue Jul 14 01:11:23 2009 (4A5BBF1B)
88e10000 88f5b000 tcpip tcpip.sys Fri Mar 30 10:08:52 2012 (4F756A14)
88f5b000 88f8c000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:39:08 2010 (4CE7892C)
88f8c000 88f95000 vmstorfl vmstorfl.sys unavailable (00000000)
88f95000 88fd4000 volsnap volsnap.sys Sat Nov 20 09:38:13 2010 (4CE788F5)
88fd4000 88fdc000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
88fdc000 88fec000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
88fec000 88ff4000 hwpolicy hwpolicy.sys Sat Nov 20 09:37:35 2010 (4CE788CF)
8a400000 8a41b000 mrxsmb20 mrxsmb20.sys Wed Apr 27 04:17:26 2011 (4DB77CB6)
8a41b000 8a422000 parvdm parvdm.sys Tue Jul 14 01:45:29 2009 (4A5BC719)
8a422000 8a44df80 WinVDEdrv6 WinVDEdrv6.sys Wed Aug 03 06:37:23 2011 (4E38D083)
8a44e000 8a4e5000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
8a4e5000 8a4ef000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
8a4ef000 8a510000 srvnet srvnet.sys Fri Apr 29 04:46:08 2011 (4DBA2670)
8a510000 8a51d000 tcpipreg tcpipreg.sys Sat Nov 20 11:07:13 2010 (4CE79DD1)
8a51d000 8a552b80 WinVDEdrv WinVDEdrv.sys Fri Jul 15 13:23:55 2011 (4E20234B)
8a553000 8a5a3000 srv2 srv2.sys Fri Apr 29 04:46:13 2011 (4DBA2675)
8a5a3000 8a5f5000 srv srv.sys Fri Apr 29 04:46:30 2011 (4DBA2686)
8a5f5000 8a5f5d00 TuneUpUtilitiesDriver32 TuneUpUtilitiesDriver32.sys Thu Sep 17 13:54:55 2009 (4AB2238F)
8a5f6000 8a5fd000 NTIOLib NTIOLib.sys Wed Oct 20 08:43:05 2010 (4CBE8F79)
8a5fd000 8a608000 msibios32_100507 msibios32_100507.sys Fri May 07 11:22:21 2010 (4BE3DBCD)
8a608000 8a620a00 kgloypog kgloypog.sys Sat Jul 16 22:20:40 2011 (4E21F298)
8a62b000 8a65eb00 LV561AV LV561AV.SYS Wed Jan 19 20:14:37 2005 (41EEB19D)
8a65f000 8a66c180 STREAM STREAM.SYS Tue Jul 14 01:50:57 2009 (4A5BC861)
8a66d000 8a688000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
8a688000 8a6a3000 avgntflt avgntflt.sys Tue Apr 24 08:14:42 2012 (4F9644D2)
8a6a3000 8a6bd000 WudfPf WudfPf.sys Sat Nov 20 10:58:55 2010 (4CE79BDF)
8a6bd000 8a6cd000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
8a6cd000 8a6e0000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
8a6e0000 8a765000 HTTP HTTP.sys Sat Nov 20 09:40:17 2010 (4CE78971)
8a765000 8a77e000 bowser bowser.sys Wed Feb 23 05:47:32 2011 (4D649164)
8a77e000 8a790000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
8a790000 8a7b3000 mrxsmb mrxsmb.sys Wed Apr 27 04:17:20 2011 (4DB77CB0)
8a7b3000 8a7ee000 mrxsmb10 mrxsmb10.sys Sat Jul 09 04:29:57 2011 (4E17BD25)
8a7ee000 8a7f9700 aswMBR aswMBR.sys Wed Feb 15 22:13:05 2012 (4F3C1FE1)
8da05000 8da46000 rdbss rdbss.sys Sat Nov 20 09:42:44 2010 (4CE78A04)
8da46000 8da50000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
8da50000 8da5a000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8da5a000 8da66000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8da66000 8daca000 csc csc.sys Sat Nov 20 09:44:32 2010 (4CE78A70)
8daca000 8dae2000 dfsc dfsc.sys Sat Nov 20 09:42:32 2010 (4CE789F8)
8dae2000 8daf0000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8daf0000 8dafc000 avkmgr avkmgr.sys Sat Apr 14 21:49:56 2012 (4F89D4E4)
8dafc000 8db21000 avipbb avipbb.sys Thu Apr 26 12:13:30 2012 (4F991FCA)
8db21000 8db42000 tunnel tunnel.sys Sat Nov 20 11:06:40 2010 (4CE79DB0)
8db42000 8db54000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
8db54000 8db8d000 dxgmms1 dxgmms1.sys Thu Feb 03 04:45:05 2011 (4D4A24C1)
8db8d000 8db9f000 L1C62x86 L1C62x86.sys Mon Sep 27 08:36:14 2010 (4CA03B5E)
8db9f000 8dbaa000 usbuhci usbuhci.sys Fri Mar 25 03:57:56 2011 (4D8C04B4)
8dbaa000 8dbf5000 USBPORT USBPORT.SYS Fri Mar 25 03:58:05 2011 (4D8C04BD)
8dbf5000 8dbff000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
8dc0c000 8dc2b000 cdrom cdrom.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
8dc2b000 8dc34000 WinFLAdrv WinFLAdrv.sys Thu Dec 01 05:52:28 2011 (4ED7080C)
8dc34000 8dc3b000 Null Null.SYS unavailable (00000000)
8dc3b000 8dc42000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
8dc42000 8dc4e000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
8dc4e000 8dc6f000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8dc6f000 8dc7c000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8dc7c000 8dc84000 RDPCDD RDPCDD.sys Sat Nov 20 11:22:19 2010 (4CE7A15B)
8dc84000 8dc8c000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8dc8c000 8dc94000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8dc94000 8dc9f000 Msfs Msfs.SYS unavailable (00000000)
8dc9f000 8dcad000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
8dcad000 8dcc4000 tdx tdx.sys Sat Nov 20 09:39:17 2010 (4CE78935)
8dcc4000 8dcd0000 TDI TDI.SYS Sat Nov 20 09:39:18 2010 (4CE78936)
8dcd0000 8dd2a000 afd afd.sys Mon Apr 25 04:18:00 2011 (4DB4D9D8)
8dd2a000 8dd5c000 netbt netbt.sys Sat Nov 20 09:39:22 2010 (4CE7893A)
8dd5c000 8dd63000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
8dd63000 8dd82000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
8dd82000 8dd90000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
8dd90000 8ddaa000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8ddaa000 8ddbd000 wanarp wanarp.sys Sat Nov 20 11:07:45 2010 (4CE79DF1)
8ddbd000 8ddce000 termdd termdd.sys Sat Nov 20 11:21:10 2010 (4CE7A116)
8ddce000 8ddd3a00 ssmdrv ssmdrv.sys Tue May 05 12:05:18 2009 (4A000F5E)
8ddd4000 8dde3000 usbehci usbehci.sys Fri Mar 25 03:57:58 2011 (4D8C04B6)
8dde3000 8ddfb000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
8ee05000 8f725000 igdkmd32 igdkmd32.sys Fri Jun 03 22:28:22 2011 (4DE943E6)
8f725000 8f7dc000 dxgkrnl dxgkrnl.sys Sat Nov 20 10:08:14 2010 (4CE78FFE)
8f7dc000 8f7fb000 HDAudBus HDAudBus.sys Sat Nov 20 10:59:28 2010 (4CE79C00)
94c35000 94c47000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
94c47000 94c5f000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
94c5f000 94c6a000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
94c6a000 94c8c000 ndiswan ndiswan.sys Sat Nov 20 11:07:48 2010 (4CE79DF4)
94c8c000 94ca4000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
94ca4000 94cbb000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
94cbb000 94cd2000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
94cd2000 94cdc000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
94cdc000 94cdd380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
94cde000 94d12000 ks ks.sys Sat Nov 20 10:50:17 2010 (4CE799D9)
94d12000 94d20000 umbus umbus.sys Sat Nov 20 11:00:23 2010 (4CE79C37)
94d20000 94d64000 usbhub usbhub.sys Fri Mar 25 03:58:34 2011 (4D8C04DA)
94d64000 94d75000 NDProxy NDProxy.SYS Sat Nov 20 11:07:39 2010 (4CE79DEB)
95439000 9566b000 viahduaa viahduaa.sys Mon Mar 28 13:29:04 2011 (4D907100)
9566b000 9569a000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
9569a000 956b3000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
956b3000 956bd000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
956bd000 956ca000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
956ca000 956d5000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
956d5000 956de000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
956de000 956ef000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
956ef000 956fa000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
956fa000 95705000 lvusbsta lvusbsta.sys Wed Jan 19 20:11:16 2005 (41EEB0D4)
95705000 95706700 USBD USBD.SYS Fri Mar 25 03:57:53 2011 (4D8C04B1)
96c20000 96c3e000 cdd cdd.dll Sat Nov 20 12:56:35 2010 (4CE7B773)
96d70000 96fc1000 win32k win32k.sys Tue Jun 12 04:40:25 2012 (4FD6AC19)
96fe0000 96fe9000 TSDDD TSDDD.dll unavailable (00000000)

Unloaded modules:
8a618000 8a620000 mbamswissarm
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
8a610000 8a618000 mbamswissarm
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
8a608000 8a610000 mbamswissarm
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
8a404000 8a62b000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00227000
88e00000 88e0d000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
88ff4000 88fff000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
88dc9000 88dd2000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
88dd2000 88de3000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
94d80000 94d82000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
94d75000 94d80000 lvusbsta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
Closing open log file c:debuglog.txt

bratic · 2012/08/01

On the step 3 I had 2 times BSOD.
Dump file:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\080112-18891-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0x82c3b000 PsLoadedModuleList = 0x82d844d0
Debug session time: Wed Aug 1 15:35:06.326 2012 (UTC + 2:00)
System Uptime: 0 days 1:15:17.168
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {0, ff, 8, 0}

Unable to load image \??\C:\Users\Milos\AppData\Local\Temp\aswMBR.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMBR.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMBR.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for igdkmd32.sys -
Probably caused by : aswMBR.sys ( aswMBR+54b )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000008, value 0 = read operation, 1 = write operation
Arg4: 00000000, address which referenced memory

Debugging Details:
------------------

OVERLAPPED_MODULE: Address regions for 'srv2' and 'LVMVDrv.sys' overlap

READ_ADDRESS: GetPointerFromAddress: unable to read from 82da4848
Unable to read MiSystemVaType memory at 82d83e20
00000000

CURRENT_IRQL: 0

FAULTING_IP:
+62932faf000ad540
00000000 ?? ???

PROCESS_NAME: csrss.exe

ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.

BUGCHECK_STR: DISABLED_INTERRUPT_FAULT

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

TRAP_FRAME: 96e6f284 -- (.trap 0xffffffff96e6f284)
.trap 0xffffffff96e6f284
ErrCode = 00000010
eax=82c74eb8 ebx=86601000 ecx=86a6e5bc edx=00000078 esi=96e6f720 edi=86a6e5bc
eip=00000000 esp=96e6f2f8 ebp=96e6f30c iopl=0 nv up di pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010006
00000000 ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 00000000 to 82c7c65b

FAILED_INSTRUCTION_ADDRESS:
+62932faf000ad540
00000000 ?? ???

STACK_TEXT:
96e6f284 00000000 badb0d00 00000078 96e6f2fc nt!KiTrap0E+0x2cf
WARNING: Frame IP not in any known module. Following frames may be wrong.
96e6f2f4 8c43154b 82c74eb8 96e6f334 96e6f30c 0x0
96e6f338 8ee39b18 86a6e5bc 00000000 00000078 aswMBR+0x54b
96e6f388 8ee3a1be 86a6e5bc 96e6f720 c000000d igdkmd32!hybDriverEntry+0x7fe8
96e6f39c 8ee3a316 86a6d000 96e6f720 2da615ba igdkmd32!hybDriverEntry+0x868e
96e6f3f4 8e911934 86a6d000 96e6f720 00000000 igdkmd32!hybDriverEntry+0x87e6
96e6f420 8e910b1f 86a6d000 96e6f720 94bc6ac8 dxgkrnl!DXGADAPTER:diRenderKm+0x46
96e6f7c4 8e911601 8511d640 96e6f7e0 ffb88f80 dxgkrnl!DXGCONTEXT::Render+0x42d
96e6f804 97369027 96e6f81c 00000000 ffb88010 dxgkrnl!DxgkCddGdiCommand+0x183
96e6fab4 97367e90 00000010 00000000 86d628c0 cdd!CHwCommandBuffer::FlushGdiCommands+0x9f
96e6facc 973650ff 00000000 00000000 86e89978 cdd!CDDPDEV::FlushGdiOutput+0x78
96e6fd50 82e44056 ffb88010 b20b4a04 00000000 cdd!PresentWorkerThread+0x7b7
96e6fd90 82cec1a9 97364948 ffb88010 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

STACK_COMMAND: kb

FOLLOWUP_IP:
aswMBR+54b
8c43154b ?? ???

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: aswMBR+54b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: aswMBR

IMAGE_NAME: aswMBR.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4f3c1fe1

FAILURE_BUCKET_ID: DISABLED_INTERRUPT_FAULT_CODE_AV_NULL_IP_aswMBR+54b

BUCKET_ID: DISABLED_INTERRUPT_FAULT_CODE_AV_NULL_IP_aswMBR+54b

Followup: MachineOwner
---------

eax=82d72f84 ebx=96e6f300 ecx=00000017 edx=00000000 esi=807c6120 edi=00000000
eip=82c7c65b esp=96e6f26c ebp=96e6f284 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000206
nt!KiTrap0E+0x2cf:
82c7c65b 833d44f7d98200 cmp dword ptr [nt!KiFreezeFlag (82d9f744)],0 ds:0023:82d9f744=????????
ChildEBP RetAddr Args to Child
96e6f284 00000000 badb0d00 00000078 96e6f2fc nt!KiTrap0E+0x2cf (FPO: [0,0] TrapFrame @ 96e6f284)
WARNING: Frame IP not in any known module. Following frames may be wrong.
96e6f2f4 8c43154b 82c74eb8 96e6f334 96e6f30c 0x0
96e6f338 8ee39b18 86a6e5bc 00000000 00000078 aswMBR+0x54b
96e6f388 8ee3a1be 86a6e5bc 96e6f720 c000000d igdkmd32!hybDriverEntry+0x7fe8
96e6f39c 8ee3a316 86a6d000 96e6f720 2da615ba igdkmd32!hybDriverEntry+0x868e
96e6f3f4 8e911934 86a6d000 96e6f720 00000000 igdkmd32!hybDriverEntry+0x87e6
96e6f420 8e910b1f 86a6d000 96e6f720 94bc6ac8 dxgkrnl!DXGADAPTER:diRenderKm+0x46 (FPO: [Non-Fpo])
96e6f7c4 8e911601 8511d640 96e6f7e0 ffb88f80 dxgkrnl!DXGCONTEXT::Render+0x42d (FPO: [Non-Fpo])
96e6f804 97369027 96e6f81c 00000000 ffb88010 dxgkrnl!DxgkCddGdiCommand+0x183 (FPO: [Non-Fpo])
96e6fab4 97367e90 00000010 00000000 86d628c0 cdd!CHwCommandBuffer::FlushGdiCommands+0x9f (FPO: [Non-Fpo])
96e6facc 973650ff 00000000 00000000 86e89978 cdd!CDDPDEV::FlushGdiOutput+0x78 (FPO: [Non-Fpo])
96e6fd50 82e44056 ffb88010 b20b4a04 00000000 cdd!PresentWorkerThread+0x7b7 (FPO: [Non-Fpo])
96e6fd90 82cec1a9 97364948 ffb88010 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
start end module name
80bc0000 80bc8000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
82c04000 82c3b000 hal halmacpi.dll Sat Nov 20 09:37:38 2010 (4CE788D2)
82c3b000 8304d000 nt ntkrpamp.exe Sat Mar 31 04:24:37 2012 (4F766AE5)
83200000 83211000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
83211000 8321e000 CompositeBus CompositeBus.sys Sat Nov 20 10:50:21 2010 (4CE799DD)
8321e000 832a3000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:00:54 2010 (4CE7B876)
832a3000 832b4000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
832b4000 832bc000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
832bc000 832fe000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
832fe000 833a9000 CI CI.dll Sat Nov 20 13:05:17 2010 (4CE7B97D)
833a9000 833cc000 ataport ataport.SYS Sat Nov 20 09:38:00 2010 (4CE788E8)
833cc000 83400000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
83800000 83829180 vmbus vmbus.sys Sat Nov 20 10:14:58 2010 (4CE79192)
8382a000 8383c000 winhv winhv.sys Sat Nov 20 09:38:15 2010 (4CE788F7)
8383d000 838ae000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
838ae000 838bc000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
838bc000 83904000 ACPI ACPI.sys Sat Nov 20 09:37:52 2010 (4CE788E0)
83904000 8390d000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
8390d000 83915000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
83915000 8393f000 pci pci.sys Sat Nov 20 09:37:57 2010 (4CE788E5)
8393f000 8394a000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
8394a000 8395b000 partmgr partmgr.sys Sat Mar 17 06:03:08 2012 (4F641B0C)
8395b000 8396b000 volmgr volmgr.sys Sat Nov 20 09:38:06 2010 (4CE788EE)
8396b000 839b6000 volmgrx volmgrx.sys unavailable (00000000)
839b6000 839bd000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
839bd000 839cb000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
839cb000 839e1000 mountmgr mountmgr.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
839e1000 839ea000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
839ea000 839f3000 amdxata amdxata.sys Fri Mar 19 17:19:01 2010 (4BA3A3F5)
839f3000 839f7bc0 PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
83a00000 83a09000 Fs_Rec Fs_Rec.sys unavailable (00000000)
83a09000 83a10000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
83a10000 83a1c000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
83a28000 83b57000 Ntfs Ntfs.sys Fri Mar 11 04:21:11 2011 (4D799527)
83b57000 83b82000 msrpc msrpc.sys unavailable (00000000)
83b82000 83b95000 ksecdd ksecdd.sys Sat Jun 02 04:25:35 2012 (4FC9799F)
83b95000 83bf2000 cng cng.sys Sat Jun 02 04:46:38 2012 (4FC97E8E)
83bf2000 83c00000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
88c11000 88c30000 cdrom cdrom.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
88c30000 88c39000 WinFLAdrv WinFLAdrv.sys Thu Dec 01 05:52:28 2011 (4ED7080C)
88c3c000 88cf3000 ndis ndis.sys Sat Nov 20 09:39:19 2010 (4CE78937)
88cf3000 88d31000 NETIO NETIO.SYS Sat Nov 20 09:40:03 2010 (4CE78963)
88d31000 88d56000 ksecpkg ksecpkg.sys Sat Jun 02 04:47:40 2012 (4FC97ECC)
88d56000 88d66000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
88d66000 88d6e000 hwpolicy hwpolicy.sys Sat Nov 20 09:37:35 2010 (4CE788CF)
88d6e000 88da0000 fvevol fvevol.sys Sat Nov 20 09:40:22 2010 (4CE78976)
88da0000 88db1000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
88db1000 88dd6000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
88df7000 88dfe000 Null Null.SYS unavailable (00000000)
88e00000 88e2d000 rdyboost rdyboost.sys Sat Nov 20 10:00:07 2010 (4CE78E17)
88e31000 88f7c000 tcpip tcpip.sys Fri Mar 30 10:08:52 2012 (4F756A14)
88f7c000 88fad000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:39:08 2010 (4CE7892C)
88fad000 88fb6000 vmstorfl vmstorfl.sys unavailable (00000000)
88fb6000 88ff5000 volsnap volsnap.sys Sat Nov 20 09:38:13 2010 (4CE788F5)
88ff5000 88ffd000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
8c200000 8c23b000 mrxsmb10 mrxsmb10.sys Sat Jul 09 04:29:57 2011 (4E17BD25)
8c23b000 8c256000 mrxsmb20 mrxsmb20.sys Wed Apr 27 04:17:26 2011 (4DB77CB6)
8c256000 8c25d000 parvdm parvdm.sys unavailable (00000000)
8c25d000 8c288f80 WinVDEdrv6 WinVDEdrv6.sys Wed Aug 03 06:37:23 2011 (4E38D083)
8c289000 8c320000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
8c320000 8c32a000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
8c32a000 8c34b000 srvnet srvnet.sys Fri Apr 29 04:46:08 2011 (4DBA2670)
8c34b000 8c358000 tcpipreg tcpipreg.sys Sat Nov 20 11:07:13 2010 (4CE79DD1)
8c358000 8c38db80 WinVDEdrv WinVDEdrv.sys Fri Jul 15 13:23:55 2011 (4E20234B)
8c38e000 8c3de000 srv2 srv2.sys Fri Apr 29 04:46:13 2011 (4DBA2675)
8c3de000 8c430000 srv srv.sys Fri Apr 29 04:46:30 2011 (4DBA2686)
8c430000 8c430d00 TuneUpUtilitiesDriver32 TuneUpUtilitiesDriver32.sys Thu Sep 17 13:54:55 2009 (4AB2238F)
8c431000 8c43c700 aswMBR aswMBR.sys Wed Feb 15 22:13:05 2012 (4F3C1FE1)
8c45c000 8c48fb00 LV561AV LV561AV.SYS Wed Jan 19 20:14:37 2005 (41EEB19D)
8c490000 8c49d180 STREAM STREAM.SYS Tue Jul 14 01:50:57 2009 (4A5BC861)
8c49e000 8c4b9000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
8c4b9000 8c4d4000 avgntflt avgntflt.sys Tue Apr 24 08:14:42 2012 (4F9644D2)
8c4d4000 8c4ee000 WudfPf WudfPf.sys Sat Nov 20 10:58:55 2010 (4CE79BDF)
8c4ee000 8c4fe000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
8c4fe000 8c511000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
8c511000 8c596000 HTTP HTTP.sys Sat Nov 20 09:40:17 2010 (4CE78971)
8c596000 8c5af000 bowser bowser.sys Wed Feb 23 05:47:32 2011 (4D649164)
8c5af000 8c5c1000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
8c5c1000 8c5e4000 mrxsmb mrxsmb.sys Wed Apr 27 04:17:20 2011 (4DB77CB0)
8e60b000 8e62c000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8e62c000 8e639000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8e639000 8e641000 RDPCDD RDPCDD.sys Sat Nov 20 11:22:19 2010 (4CE7A15B)
8e641000 8e649000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8e649000 8e651000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8e651000 8e65c000 Msfs Msfs.SYS unavailable (00000000)
8e65c000 8e66a000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
8e66a000 8e681000 tdx tdx.sys Sat Nov 20 09:39:17 2010 (4CE78935)
8e681000 8e68d000 TDI TDI.SYS Sat Nov 20 09:39:18 2010 (4CE78936)
8e68d000 8e6e7000 afd afd.sys Mon Apr 25 04:18:00 2011 (4DB4D9D8)
8e6e7000 8e719000 netbt netbt.sys Sat Nov 20 09:39:22 2010 (4CE7893A)
8e719000 8e720000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
8e720000 8e73f000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
8e73f000 8e74d000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
8e74d000 8e767000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8e767000 8e77a000 wanarp wanarp.sys Sat Nov 20 11:07:45 2010 (4CE79DF1)
8e77a000 8e78b000 termdd termdd.sys Sat Nov 20 11:21:10 2010 (4CE7A116)
8e78b000 8e790a00 ssmdrv ssmdrv.sys Tue May 05 12:05:18 2009 (4A000F5E)
8e791000 8e7d2000 rdbss rdbss.sys Sat Nov 20 09:42:44 2010 (4CE78A04)
8e7d2000 8e7dc000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
8e7dc000 8e7e6000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8e7e6000 8e7f2000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8e7f2000 8e7ff000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8e806000 8e86a000 csc csc.sys Sat Nov 20 09:44:32 2010 (4CE78A70)
8e86a000 8e882000 dfsc dfsc.sys Sat Nov 20 09:42:32 2010 (4CE789F8)
8e882000 8e890000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8e890000 8e89c000 avkmgr avkmgr.sys Sat Apr 14 21:49:56 2012 (4F89D4E4)
8e89c000 8e8c1000 avipbb avipbb.sys Thu Apr 26 12:13:30 2012 (4F991FCA)
8e8c1000 8e8e2000 tunnel tunnel.sys Sat Nov 20 11:06:40 2010 (4CE79DB0)
8e8e2000 8e8f4000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
8e8f4000 8e9ab000 dxgkrnl dxgkrnl.sys Sat Nov 20 10:08:14 2010 (4CE78FFE)
8e9ab000 8e9f6000 USBPORT USBPORT.SYS Fri Mar 25 03:58:05 2011 (4D8C04BD)
8ee00000 8ee18000 i8042prt i8042prt.sys Tue Jul 14 01:11:23 2009 (4A5BBF1B)
8ee18000 8ee25000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8ee30000 8f750000 igdkmd32 igdkmd32.sys Fri Jun 03 22:28:22 2011 (4DE943E6)
8f750000 8f789000 dxgmms1 dxgmms1.sys Thu Feb 03 04:45:05 2011 (4D4A24C1)
8f789000 8f7a8000 HDAudBus HDAudBus.sys Sat Nov 20 10:59:28 2010 (4CE79C00)
8f7a8000 8f7ba000 L1C62x86 L1C62x86.sys Mon Sep 27 08:36:14 2010 (4CA03B5E)
8f7ba000 8f7c5000 usbuhci usbuhci.sys Fri Mar 25 03:57:56 2011 (4D8C04B4)
8f7c5000 8f7d4000 usbehci usbehci.sys Fri Mar 25 03:57:58 2011 (4D8C04B6)
8f7d4000 8f7de000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
8f7de000 8f7f6000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
95000000 95012000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
95012000 9502a000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
9502a000 95035000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
95035000 95057000 ndiswan ndiswan.sys Sat Nov 20 11:07:48 2010 (4CE79DF4)
95057000 9506f000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
9506f000 95086000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
95086000 9509d000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
9509d000 950a7000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
950a7000 950a8380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
950a9000 950dd000 ks ks.sys Sat Nov 20 10:50:17 2010 (4CE799D9)
950dd000 950eb000 umbus umbus.sys Sat Nov 20 11:00:23 2010 (4CE79C37)
950eb000 9512f000 usbhub usbhub.sys Fri Mar 25 03:58:34 2011 (4D8C04DA)
9512f000 95140000 NDProxy NDProxy.SYS Sat Nov 20 11:07:39 2010 (4CE79DEB)
95e1b000 9604d000 viahduaa viahduaa.sys Mon Mar 28 13:29:04 2011 (4D907100)
9604d000 9607c000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
9607c000 96095000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
96095000 9609f000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
9609f000 960ac000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
960ac000 960b7000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
960b7000 960c0000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
960c0000 960d1000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
960d1000 960dc000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
960dc000 960e7000 lvusbsta lvusbsta.sys Wed Jan 19 20:11:16 2005 (41EEB0D4)
960e7000 960e8700 USBD USBD.SYS Fri Mar 25 03:57:53 2011 (4D8C04B1)
970c0000 97311000 win32k win32k.sys Tue Jun 12 04:40:25 2012 (4FD6AC19)
97330000 97339000 TSDDD TSDDD.dll unavailable (00000000)
97360000 9737e000 cdd cdd.dll Sat Nov 20 12:56:35 2010 (4CE7B773)

Unloaded modules:
8c235000 8c45c000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00227000
88dd6000 88de3000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
88de3000 88dee000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
88dee000 88df7000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
88c00000 88c11000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
9514b000 9514d000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
95140000 9514b000 lvusbsta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
Closing open log file c:debuglog.txt

Arie · 2012/08/02

No point in posting more. I believe you are infected. Get that fixed, it'll most likely fix your problems.

bratic · 2012/08/02

I am redirected here again:
http://www.windowsbbs.com/malware-virus-removal/103278-inactive-bsod-because-virus.html#post592549
This is new BSOD dump:
Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\080212-16848-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.x86fre.win7sp1_gdr.120330-1504
Machine Name:
Kernel base = 0x82c3c000 PsLoadedModuleList = 0x82d854d0
Debug session time: Thu Aug 2 14:34:53.540 2012 (UTC + 2:00)
System Uptime: 0 days 5:18:34.382
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
...........
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8f773529, aa6dba1c, 0}

Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+57 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*************************************************************************** ****
* *
* Bugcheck Analysis *
* *
*************************************************************************** ****

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8f773529, The address that the exception occurred at
Arg3: aa6dba1c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+57
8f773529 8b480c mov ecx,dword ptr [eax+0Ch]

TRAP_FRAME: aa6dba1c -- (.trap 0xffffffffaa6dba1c)
.trap 0xffffffffaa6dba1c
ErrCode = 00000000
eax=00000000 ebx=872fcb48 ecx=ff8c89e8 edx=000f1af1 esi=abb58a48 edi=86999000
eip=8f773529 esp=aa6dba90 ebp=aa6dbab0 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+0x57:
8f773529 8b480c mov ecx,dword ptr [eax+0Ch] ds:0023:0000000c=????????
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: chrome.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8f773f0c to 8f773529

STACK_TEXT:
aa6dbab0 8f773f0c abb58a48 00000000 85b103d8 dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+0x57
aa6dbac8 8f7572f4 abb58b80 aa6dbae4 8cf1afaa dxgmms1!VIDMM_GLOBAL::TerminateAllocation+0x1e
aa6dbad4 8cf1afaa 86999000 abb58b80 aa6dbb08 dxgmms1!VidMmTerminateAllocation+0x10
aa6dbae4 8cf3fcd6 85e361e8 86999000 abb58b80 dxgkrnl!VIDSCH_EXPORT::VidSchSetQueuedPresentLimit+0x14
aa6dbb08 8cf3fbb8 00000000 00000000 b90b54d8 dxgkrnl!DXGDEVICE::TerminateAllocations+0x103
aa6dbb64 8cf40441 aa6dbb98 00000001 269e9cd7 dxgkrnl!DXGDEVICE:estroyAllocation+0x2d6
aa6dbd28 82c7a27a 001de7ac 001de7bc 77197094 dxgkrnl!DxgkDestroyAllocation+0x6d1
aa6dbd28 77197094 001de7ac 001de7bc 77197094 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
001de7bc 00000000 00000000 00000000 00000000 0x77197094

STACK_COMMAND: kb

FOLLOWUP_IP:
dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+57
8f773529 8b480c mov ecx,dword ptr [eax+0Ch]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+57

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME: dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4d4a24c1

FAILURE_BUCKET_ID: 0x8E_dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+57

BUCKET_ID: 0x8E_dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+57

Followup: MachineOwner
---------

eax=00000000 ebx=872fcb48 ecx=ff8c89e8 edx=000f1af1 esi=abb58a48 edi=86999000
eip=8f773529 esp=aa6dba90 ebp=aa6dbab0 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+0x57:
8f773529 8b480c mov ecx,dword ptr [eax+0Ch] ds:0023:0000000c=????????
ChildEBP RetAddr Args to Child
aa6dbab0 8f773f0c abb58a48 00000000 85b103d8 dxgmms1!VIDMM_GLOBAL::TerminateOneAllocation+0x57 (FPO: [Non-Fpo])
aa6dbac8 8f7572f4 abb58b80 aa6dbae4 8cf1afaa dxgmms1!VIDMM_GLOBAL::TerminateAllocation+0x1e (FPO: [Non-Fpo])
aa6dbad4 8cf1afaa 86999000 abb58b80 aa6dbb08 dxgmms1!VidMmTerminateAllocation+0x10 (FPO: [Non-Fpo])
aa6dbae4 8cf3fcd6 85e361e8 86999000 abb58b80 dxgkrnl!VIDSCH_EXPORT::VidSchSetQueuedPresentLimit+0x14 (FPO: [Non-Fpo])
aa6dbb08 8cf3fbb8 00000000 00000000 b90b54d8 dxgkrnl!DXGDEVICE::TerminateAllocations+0x103 (FPO: [Non-Fpo])
aa6dbb64 8cf40441 aa6dbb98 00000001 269e9cd7 dxgkrnl!DXGDEVICE:estroyAllocation+0x2d6 (FPO: [Non-Fpo])
aa6dbd28 82c7a27a 001de7ac 001de7bc 77197094 dxgkrnl!DxgkDestroyAllocation+0x6d1 (FPO: [Non-Fpo])
aa6dbd28 77197094 001de7ac 001de7bc 77197094 nt!KiFastCallEntry+0x12a (FPO: [0,3] TrapFrame @ aa6dbd34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
001de7bc 00000000 00000000 00000000 00000000 0x77197094
start end module name
80bbb000 80bc3000 kdcom kdcom.dll Tue Jul 14 03:08:58 2009 (4A5BDAAA)
82c05000 82c3c000 hal halmacpi.dll Sat Nov 20 09:37:38 2010 (4CE788D2)
82c3c000 8304e000 nt ntkrpamp.exe Sat Mar 31 04:24:37 2012 (4F766AE5)
83200000 83211000 fileinfo fileinfo.sys Tue Jul 14 01:21:51 2009 (4A5BC18F)
83214000 83299000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 13:00:54 2010 (4CE7B876)
83299000 832aa000 PSHED PSHED.dll Tue Jul 14 03:09:36 2009 (4A5BDAD0)
832aa000 832b2000 BOOTVID BOOTVID.dll Tue Jul 14 03:04:34 2009 (4A5BD9A2)
832b2000 832f4000 CLFS CLFS.SYS Tue Jul 14 01:11:10 2009 (4A5BBF0E)
832f4000 8339f000 CI CI.dll Sat Nov 20 13:05:17 2010 (4CE7B97D)
8339f000 833c2000 ataport ataport.SYS Sat Nov 20 09:38:00 2010 (4CE788E8)
833c2000 833f6000 fltmgr fltmgr.sys Tue Jul 14 01:11:13 2009 (4A5BBF11)
83800000 83829180 vmbus vmbus.sys Sat Nov 20 10:14:58 2010 (4CE79192)
8382a000 8382ebc0 PxHelp20 PxHelp20.sys Tue Oct 28 19:25:49 2003 (3F9EB4AD)
83834000 838a5000 Wdf01000 Wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
838a5000 838b3000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
838b3000 838fb000 ACPI ACPI.sys Sat Nov 20 09:37:52 2010 (4CE788E0)
838fb000 83904000 WMILIB WMILIB.SYS Tue Jul 14 01:11:22 2009 (4A5BBF1A)
83904000 8390c000 msisadrv msisadrv.sys Tue Jul 14 01:11:09 2009 (4A5BBF0D)
8390c000 83936000 pci pci.sys Sat Nov 20 09:37:57 2010 (4CE788E5)
83936000 83941000 vdrvroot vdrvroot.sys Tue Jul 14 01:46:19 2009 (4A5BC74B)
83941000 83952000 partmgr partmgr.sys Sat Mar 17 06:03:08 2012 (4F641B0C)
83952000 83962000 volmgr volmgr.sys Sat Nov 20 09:38:06 2010 (4CE788EE)
83962000 839ad000 volmgrx volmgrx.sys unavailable (00000000)
839ad000 839b4000 intelide intelide.sys Tue Jul 14 01:11:19 2009 (4A5BBF17)
839b4000 839c2000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01:11:15 2009 (4A5BBF13)
839c2000 839d8000 mountmgr mountmgr.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
839d8000 839ea000 winhv winhv.sys Sat Nov 20 09:38:15 2010 (4CE788F7)
839ea000 839f3000 atapi atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
839f3000 839fc000 amdxata amdxata.sys Fri Mar 19 17:19:01 2010 (4BA3A3F5)
83a00000 83a09000 Fs_Rec Fs_Rec.sys unavailable (00000000)
83a09000 83a15000 vga vga.sys Tue Jul 14 01:25:50 2009 (4A5BC27E)
83a26000 83b55000 Ntfs Ntfs.sys Fri Mar 11 04:21:11 2011 (4D799527)
83b55000 83b80000 msrpc msrpc.sys unavailable (00000000)
83b80000 83b93000 ksecdd ksecdd.sys Sat Jun 02 04:25:35 2012 (4FC9799F)
83b93000 83bf0000 cng cng.sys Sat Jun 02 04:46:38 2012 (4FC97E8E)
83bf0000 83bfe000 pcw pcw.sys Tue Jul 14 01:11:10 2009 (4A5BBF0E)
88c00000 88cb7000 ndis ndis.sys Sat Nov 20 09:39:19 2010 (4CE78937)
88cb7000 88cf5000 NETIO NETIO.SYS Sat Nov 20 09:40:03 2010 (4CE78963)
88cf5000 88d1a000 ksecpkg ksecpkg.sys Sat Jun 02 04:47:40 2012 (4FC97ECC)
88d1a000 88d2a000 mup mup.sys Tue Jul 14 01:14:14 2009 (4A5BBFC6)
88d2a000 88d32000 hwpolicy hwpolicy.sys Sat Nov 20 09:37:35 2010 (4CE788CF)
88d32000 88d64000 fvevol fvevol.sys Sat Nov 20 09:40:22 2010 (4CE78976)
88d64000 88d75000 disk disk.sys Tue Jul 14 01:11:28 2009 (4A5BBF20)
88d75000 88d9a000 CLASSPNP CLASSPNP.SYS Tue Jul 14 01:11:20 2009 (4A5BBF18)
88dcc000 88deb000 cdrom cdrom.sys Sat Nov 20 09:38:09 2010 (4CE788F1)
88deb000 88df4000 WinFLAdrv WinFLAdrv.sys Thu Dec 01 05:52:28 2011 (4ED7080C)
88df4000 88dfb000 Beep Beep.SYS Tue Jul 14 01:45:00 2009 (4A5BC6FC)
88e00000 88e08000 spldr spldr.sys Mon May 11 18:13:47 2009 (4A084EBB)
88e08000 88e35000 rdyboost rdyboost.sys Sat Nov 20 10:00:07 2010 (4CE78E17)
88e35000 88e3c000 Null Null.SYS unavailable (00000000)
88e3c000 88f87000 tcpip tcpip.sys Fri Mar 30 10:08:52 2012 (4F756A14)
88f87000 88fb8000 fwpkclnt fwpkclnt.sys Sat Nov 20 09:39:08 2010 (4CE7892C)
88fb8000 88fc1000 vmstorfl vmstorfl.sys unavailable (00000000)
88fc1000 89000000 volsnap volsnap.sys Sat Nov 20 09:38:13 2010 (4CE788F5)
8c200000 8c23b000 mrxsmb10 mrxsmb10.sys Sat Jul 09 04:29:57 2011 (4E17BD25)
8c23b000 8c256000 mrxsmb20 mrxsmb20.sys Wed Apr 27 04:17:26 2011 (4DB77CB6)
8c256000 8c25d000 parvdm parvdm.sys unavailable (00000000)
8c25d000 8c288f80 WinVDEdrv6 WinVDEdrv6.sys Wed Aug 03 06:37:23 2011 (4E38D083)
8c289000 8c320000 peauth peauth.sys Tue Jul 14 02:35:44 2009 (4A5BD2E0)
8c320000 8c32a000 secdrv secdrv.SYS Wed Sep 13 15:18:32 2006 (45080528)
8c32a000 8c34b000 srvnet srvnet.sys Fri Apr 29 04:46:08 2011 (4DBA2670)
8c34b000 8c358000 tcpipreg tcpipreg.sys Sat Nov 20 11:07:13 2010 (4CE79DD1)
8c358000 8c38db80 WinVDEdrv WinVDEdrv.sys Fri Jul 15 13:23:55 2011 (4E20234B)
8c38e000 8c3de000 srv2 srv2.sys Fri Apr 29 04:46:13 2011 (4DBA2675)
8c3de000 8c430000 srv srv.sys Fri Apr 29 04:46:30 2011 (4DBA2686)
8c430000 8c430d00 TuneUpUtilitiesDriver32 TuneUpUtilitiesDriver32.sys Thu Sep 17 13:54:55 2009 (4AB2238F)
8c431000 8c432ec0 PROCEXP113 PROCEXP113.SYS Mon Nov 03 22:14:25 2008 (490F69B1)
8c433000 8c43ac00 catchme catchme.sys Wed Apr 01 13:00:45 2009 (49D3495D)
8c442000 8c475b00 LV561AV LV561AV.SYS Wed Jan 19 20:14:37 2005 (41EEB19D)
8c476000 8c483180 STREAM STREAM.SYS Tue Jul 14 01:50:57 2009 (4A5BC861)
8c484000 8c49f000 luafv luafv.sys Tue Jul 14 01:15:44 2009 (4A5BC020)
8c49f000 8c4ba000 avgntflt avgntflt.sys Tue Apr 24 08:14:42 2012 (4F9644D2)
8c4ba000 8c4d4000 WudfPf WudfPf.sys Sat Nov 20 10:58:55 2010 (4CE79BDF)
8c4d4000 8c4e4000 lltdio lltdio.sys Tue Jul 14 01:53:18 2009 (4A5BC8EE)
8c4e4000 8c4f7000 rspndr rspndr.sys Tue Jul 14 01:53:20 2009 (4A5BC8F0)
8c4f7000 8c57c000 HTTP HTTP.sys Sat Nov 20 09:40:17 2010 (4CE78971)
8c57c000 8c595000 bowser bowser.sys Wed Feb 23 05:47:32 2011 (4D649164)
8c595000 8c5a7000 mpsdrv mpsdrv.sys Tue Jul 14 01:52:52 2009 (4A5BC8D4)
8c5a7000 8c5ca000 mrxsmb mrxsmb.sys Wed Apr 27 04:17:20 2011 (4DB77CB0)
8ce2a000 8ce8e000 csc csc.sys Sat Nov 20 09:44:32 2010 (4CE78A70)
8ce8e000 8cea6000 dfsc dfsc.sys Sat Nov 20 09:42:32 2010 (4CE789F8)
8cea6000 8ceb4000 blbdrive blbdrive.sys Tue Jul 14 01:23:04 2009 (4A5BC1D8)
8ceb4000 8cec0000 avkmgr avkmgr.sys Sat Apr 14 21:49:56 2012 (4F89D4E4)
8cec0000 8cee5000 avipbb avipbb.sys Thu Apr 26 12:13:30 2012 (4F991FCA)
8cee5000 8cf06000 tunnel tunnel.sys Sat Nov 20 11:06:40 2010 (4CE79DB0)
8cf06000 8cf18000 intelppm intelppm.sys Tue Jul 14 01:11:03 2009 (4A5BBF07)
8cf18000 8cfcf000 dxgkrnl dxgkrnl.sys Sat Nov 20 10:08:14 2010 (4CE78FFE)
8e400000 8e40c000 discache discache.sys Tue Jul 14 01:24:04 2009 (4A5BC214)
8e411000 8e432000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01:25:49 2009 (4A5BC27D)
8e432000 8e43f000 watchdog watchdog.sys Tue Jul 14 01:24:10 2009 (4A5BC21A)
8e43f000 8e447000 RDPCDD RDPCDD.sys Sat Nov 20 11:22:19 2010 (4CE7A15B)
8e447000 8e44f000 rdpencdd rdpencdd.sys Tue Jul 14 02:01:39 2009 (4A5BCAE3)
8e44f000 8e457000 rdprefmp rdprefmp.sys Tue Jul 14 02:01:41 2009 (4A5BCAE5)
8e457000 8e462000 Msfs Msfs.SYS unavailable (00000000)
8e462000 8e470000 Npfs Npfs.SYS Tue Jul 14 01:11:31 2009 (4A5BBF23)
8e470000 8e487000 tdx tdx.sys Sat Nov 20 09:39:17 2010 (4CE78935)
8e487000 8e493000 TDI TDI.SYS Sat Nov 20 09:39:18 2010 (4CE78936)
8e493000 8e4ed000 afd afd.sys Mon Apr 25 04:18:00 2011 (4DB4D9D8)
8e4ed000 8e51f000 netbt netbt.sys Sat Nov 20 09:39:22 2010 (4CE7893A)
8e51f000 8e528000 ws2ifsl ws2ifsl.sys Tue Jul 14 01:55:01 2009 (4A5BC955)
8e528000 8e52f000 wfplwf wfplwf.sys Tue Jul 14 01:53:51 2009 (4A5BC90F)
8e52f000 8e54e000 pacer pacer.sys Tue Jul 14 01:53:58 2009 (4A5BC916)
8e54e000 8e55c000 netbios netbios.sys Tue Jul 14 01:53:54 2009 (4A5BC912)
8e55c000 8e576000 serial serial.sys Tue Jul 14 01:45:33 2009 (4A5BC71D)
8e576000 8e589000 wanarp wanarp.sys Sat Nov 20 11:07:45 2010 (4CE79DF1)
8e589000 8e59a000 termdd termdd.sys Sat Nov 20 11:21:10 2010 (4CE7A116)
8e59a000 8e59fa00 ssmdrv ssmdrv.sys Tue May 05 12:05:18 2009 (4A000F5E)
8e5a0000 8e5e1000 rdbss rdbss.sys Sat Nov 20 09:42:44 2010 (4CE78A04)
8e5e1000 8e5eb000 nsiproxy nsiproxy.sys Tue Jul 14 01:12:08 2009 (4A5BBF48)
8e5eb000 8e5f5000 mssmbios mssmbios.sys Tue Jul 14 01:19:25 2009 (4A5BC0FD)
8ee36000 8f756000 igdkmd32 igdkmd32.sys Fri Jun 03 22:28:22 2011 (4DE943E6)
8f756000 8f78f000 dxgmms1 dxgmms1.sys Thu Feb 03 04:45:05 2011 (4D4A24C1)
8f78f000 8f7ae000 HDAudBus HDAudBus.sys Sat Nov 20 10:59:28 2010 (4CE79C00)
8f7ae000 8f7c0000 L1C62x86 L1C62x86.sys Mon Sep 27 08:36:14 2010 (4CA03B5E)
8f7c0000 8f7cb000 usbuhci usbuhci.sys Fri Mar 25 03:57:56 2011 (4D8C04B4)
8f82f000 8f87a000 USBPORT USBPORT.SYS Fri Mar 25 03:58:05 2011 (4D8C04BD)
8f87a000 8f889000 usbehci usbehci.sys Fri Mar 25 03:57:58 2011 (4D8C04B6)
8f889000 8f893000 serenum serenum.sys Tue Jul 14 01:45:27 2009 (4A5BC717)
8f893000 8f8ab000 parport parport.sys Tue Jul 14 01:45:34 2009 (4A5BC71E)
8f8ab000 8f8c3000 i8042prt i8042prt.sys Tue Jul 14 01:11:23 2009 (4A5BBF1B)
8f8c3000 8f8d0000 kbdclass kbdclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8f8d0000 8f8dd000 mouclass mouclass.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
8f8dd000 8f8ea000 CompositeBus CompositeBus.sys Sat Nov 20 10:50:21 2010 (4CE799DD)
8f8ea000 8f8fc000 AgileVpn AgileVpn.sys Tue Jul 14 01:55:00 2009 (4A5BC954)
8f8fc000 8f914000 rasl2tp rasl2tp.sys Tue Jul 14 01:54:33 2009 (4A5BC939)
8f914000 8f91f000 ndistapi ndistapi.sys Tue Jul 14 01:54:24 2009 (4A5BC930)
8f91f000 8f941000 ndiswan ndiswan.sys Sat Nov 20 11:07:48 2010 (4CE79DF4)
8f941000 8f959000 raspppoe raspppoe.sys Tue Jul 14 01:54:53 2009 (4A5BC94D)
8f959000 8f970000 raspptp raspptp.sys Tue Jul 14 01:54:47 2009 (4A5BC947)
8f970000 8f987000 rassstp rassstp.sys Tue Jul 14 01:54:57 2009 (4A5BC951)
8f987000 8f991000 rdpbus rdpbus.sys Tue Jul 14 02:02:40 2009 (4A5BCB20)
8f991000 8f992380 swenum swenum.sys Tue Jul 14 01:45:08 2009 (4A5BC704)
8f993000 8f9c7000 ks ks.sys Sat Nov 20 10:50:17 2010 (4CE799D9)
8f9c7000 8f9d5000 umbus umbus.sys Sat Nov 20 11:00:23 2010 (4CE79C37)
9503f000 95083000 usbhub usbhub.sys Fri Mar 25 03:58:34 2011 (4D8C04DA)
95083000 95094000 NDProxy NDProxy.SYS Sat Nov 20 11:07:39 2010 (4CE79DEB)
95817000 95a49000 viahduaa viahduaa.sys Mon Mar 28 13:29:04 2011 (4D907100)
95a49000 95a78000 portcls portcls.sys Tue Jul 14 01:51:00 2009 (4A5BC864)
95a78000 95a91000 drmk drmk.sys Tue Jul 14 02:36:05 2009 (4A5BD2F5)
95a91000 95a9b000 Dxapi Dxapi.sys Tue Jul 14 01:25:25 2009 (4A5BC265)
95a9b000 95aa8000 crashdmp crashdmp.sys Tue Jul 14 01:45:50 2009 (4A5BC72E)
95aa8000 95ab3000 dump_dumpata dump_dumpata.sys Tue Jul 14 01:11:16 2009 (4A5BBF14)
95ab3000 95abc000 dump_atapi dump_atapi.sys Tue Jul 14 01:11:15 2009 (4A5BBF13)
95abc000 95acd000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01:12:47 2009 (4A5BBF6F)
95acd000 95ad8000 monitor monitor.sys Tue Jul 14 01:25:58 2009 (4A5BC286)
95ad8000 95ae3000 lvusbsta lvusbsta.sys Wed Jan 19 20:11:16 2005 (41EEB0D4)
95ae3000 95ae4700 USBD USBD.SYS Fri Mar 25 03:57:53 2011 (4D8C04B1)
95b4f000 95b79000 fastfat fastfat.SYS Tue Jul 14 01:14:01 2009 (4A5BBFB9)
96e00000 96e1e000 cdd cdd.dll Sat Nov 20 12:56:35 2010 (4CE7B773)
96f60000 971b1000 win32k win32k.sys Tue Jun 12 04:40:25 2012 (4FD6AC19)
971d0000 971d9000 TSDDD TSDDD.dll unavailable (00000000)

Unloaded modules:
95b79000 95b9a000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00021000
8c5ca000 8c5e1000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00017000
95ae5000 95b4f000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0006A000
8c43b000 8c442000 mbr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00007000
8c21b000 8c442000 LVMVDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00227000
88d9a000 88da7000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
88da7000 88db2000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
88db2000 88dbb000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
88dbb000 88dcc000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
9509f000 950a1000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
95094000 9509f000 lvusbsta.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
Closing open log file c:debuglog.txt

Arie · 2012/08/03

Seeing errors "all over the place ", ie different drivers/software indicates a hardware problem.

Start by testing your memory. Run Memtest86 or Windows Memory Diagnostic.

Windows 7 DVD also includes a memory testing option called Windows Memory Diagnostic which can be accessed by booting off your Windows DVD, choosing your language/keyboard options, and clicking the link Repair your computer at the bottom left on the Install Now screen. When prompted select your Windows Installation and click Next, here you can select the Windows Memory Diagnostic option.

Please note:

Memory checking programs are not adequate because they don't test the memory the way that Windows uses it. Most, if not all, memory checkers use read/write cycles when scanning memory. Since Windows is executing code from the memory, it uses execute cycles. Execute cycles are physically different from read/write cycles and are more vulnerable to parity errors. It is possible for memory checking programs to find parity errors if the memory is extremely faulty.
Click to expand...

To work around the above, test the installed RAM in various configurations. If you have a single module, swap it around the slots. If you have a pair of modules, run each one singly, swapping between slots; and then run them in pairs swapping between pairs of slots. If you have 2 sets of matched modules do not get them mixed up.

SpywareDr · 2012/08/03

Note: Windows Memory Diagnostic

Windows Memory Diagnostic is limited to testing only the first 4 gigabytes (GB) of RAM. If you have more than 4 GB of RAM, the remaining RAM after the first 4 GB will not be tested by Windows Memory Diagnostic.
Click to expand...

bratic · 2012/08/03

Before I asked for help on this forum, I did repair as you described. So, it's already done before.

Admin. · 2012/08/03

I didn't describe any repair...

bratic · 2012/08/03

I thought on "repair Windows with dvd disc ". Ok. I will perform diagnostic.

Log in or Sign up

BSOD tunnel.sys

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

bratic Inactive Thread Starter

Admin. Administrator Administrator Staff

bratic Inactive Thread Starter

PeteC SuperGeek Staff

bratic Inactive Thread Starter

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

bratic Inactive Thread Starter

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

SpywareDr SuperGeek WindowsBBS Team Member

bratic Inactive Thread Starter

Admin. Administrator Administrator Staff

bratic Inactive Thread Starter

Share This Page

Log in or Sign up

BSOD tunnel.sys

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

bratic Inactive Thread Starter

Admin. Administrator Administrator Staff

bratic Inactive Thread Starter

PeteC SuperGeek Staff

bratic Inactive Thread Starter

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

bratic Inactive Thread Starter

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

bratic Inactive Thread Starter

Arie Administrator Administrator Staff

SpywareDr SuperGeek WindowsBBS Team Member

bratic Inactive Thread Starter

Admin. Administrator Administrator Staff

bratic Inactive Thread Starter

Share This Page

Useful Searches