1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

BSOD with hiber_atapi.sys error

Discussion in 'Windows XP' started by extra1, 2010/01/06.

  1. 2010/01/06
    extra1

    extra1 Inactive Thread Starter

    Joined:
    2010/01/06
    Messages:
    11
    Likes Received:
    0
    Hi,

    I have a Toshiba Satellite Pro A210 with Xp. I've been having trouble recently with BSOD's, and they alternate between PAGE_FAULT_IN_NON_PAGED_AREA and DRIVER_IRQL_NOT_LESS_OR_EQUAL. The first also says something about an error with hiber_atapi.sys.
    I have tried the steps that the Microsoft website recommended, including updating drivers. I have not installed any new software.
    What can I do?
     
  2. 2010/01/06
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Follow these instructions to post a Dump Data Log.

    If you do not have a dump, ensure that your machine is configured to write out a dump by following the directions from microsoft

    Please note:
     

  3. to hide this advert.

  4. 2010/01/06
    extra1

    extra1 Inactive Thread Starter

    Joined:
    2010/01/06
    Messages:
    11
    Likes Received:
    0
    OK, here it is:

    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.6.0003.5
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini123009-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp3_gdr.090804-1435
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Wed Dec 30 10:25:01.921 2009 (GMT-5)
    System Uptime: 4 days 13:17:25.945
    Loading Kernel Symbols
    ............................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ..................................................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 804ef19b, bae59060, 0}

    *** ERROR: Module load completed but symbols could not be loaded for Mpfp.sys
    Probably caused by : memory_corruption

    Followup: memory_corruption
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 804ef19b, The address that the exception occurred at
    Arg3: bae59060, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

    FAULTING_IP:
    nt!IopfCallDriver+2d
    804ef19b ff548638 call dword ptr [esi+eax*4+0x38]

    TRAP_FRAME: bae59060 -- (.trap ffffffffbae59060)
    .trap ffffffffbae59060
    ErrCode = 00000000
    eax=00000005 ebx=80539d99 ecx=84912460 edx=8489d008 esi=00000000 edi=8489d954
    eip=804ef19b esp=bae590d4 ebp=bae59124 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
    nt!IopfCallDriver+0x2d:
    804ef19b ff548638 call dword ptr [esi+eax*4+0x38] ds:0023:0000004c=????????
    .trap
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: CODE_CORRUPTION

    BUGCHECK_STR: 0x8E

    LAST_CONTROL_TRANSFER: from 8057e826 to 804ef19b

    STACK_TEXT:
    bae59124 8057e826 848058e4 77e46288 84805850 nt!IopfCallDriver+0x2d
    bae59124 8057e826 848058e4 77e46288 84805850 nt!IopQueryXxxInformation+0x140
    bae59154 8057469b 008058f8 00000009 00000210 nt!IopQueryXxxInformation+0x140
    bae59174 edb1efbb 848058f8 00000009 00000210 nt!IoQueryFileInformation+0x1b
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    bae593c4 eda90692 00000000 00000000 84805850 0xedb1efbb
    bae593f0 804f16c0 8438f020 84323890 84805850 Mpfp+0x6692
    bae59420 edb1f047 842c75d8 805e53c3 e2a9b008 nt!IopfCompleteRequest+0xa2
    bae59654 edabb4a5 84323900 84260be0 8432e8f8 0xedb1f047
    bae59684 804ef19f 842c75d8 84323890 84323890 tcpip!TCPDispatch+0x11a
    bae596dc eda921d0 bae5974a edaa2212 e2561d00 nt!IopfCallDriver+0x31
    bae59710 eda8b196 8438f020 84323890 84323924 Mpfp+0x81d0
    bae59750 804ef19f 8438f020 84323890 84323890 Mpfp+0x1196
    bae597a8 805831fa 842c75c0 8430d6dc bae59940 nt!IopfCallDriver+0x31
    bae597a8 805831fa 842c75c0 8430d6dc bae59940 nt!IopParseDevice+0xa12
    bae59888 805bf452 842c75d8 00000000 8430d638 nt!IopParseDevice+0xa12
    bae59900 805bb9de 00000000 bae59940 00000240 nt!ObpLookupObjectName+0x53c
    bae59954 80576033 00000000 00000000 53919c00 nt!ObOpenObjectByName+0xea
    bae599d0 805769aa 84808b90 02000000 bae59b78 nt!IopCreateFile+0x407
    bae59a2c ed95665e 84808b90 02000000 bae59b78 nt!IoCreateFile+0x8e
    bae59be8 ed95d2d7 83aeeaac 842633b8 bae59c50 afd!AfdBind+0x34e
    bae59bf8 804ef19f 8527e9e0 83aee9d0 83aee9d0 afd!AfdDispatchDeviceControl+0x53
    bae59c38 804f0f44 8527e9e0 842e6e68 8527e9e0 nt!IopfCallDriver+0x31
    bae59c50 8057f982 83aeeaac 842e6e68 83aee9d0 nt!IopAllocateIrpPrivate+0x1da
    bae59c64 805807f7 8527e9e0 83aee9d0 842e6e68 nt!IopSynchronousServiceTail+0x70
    bae59d00 80579274 00001b24 000010a4 00000000 nt!IopXxxControlFile+0x5c5
    bae59d34 8054162c 00001b24 000010a4 00000000 nt!NtDeviceIoControlFile+0x2a
    bae59d34 7c90e514 00001b24 000010a4 00000000 nt!KiFastCallEntry+0xfc
    0362fea4 00000000 00000000 00000000 00000000 0x7c90e514


    STACK_COMMAND: kb

    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
    804ef1a6-804ef1aa 5 bytes - nt!IofCallDriver

    [ ff 25 80 57 55:e9 38 af bf 04 ]
    804ef236-804ef23a 5 bytes - nt!IofCompleteRequest (+0x90)

    [ ff 25 84 57 55:e9 70 df c2 04 ]
    10 errors : !nt (804ef1a6-804ef23a)

    MODULE_NAME: memory_corruption

    IMAGE_NAME: memory_corruption

    FOLLOWUP_NAME: memory_corruption

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    MEMORY_CORRUPTOR: LARGE

    FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE

    BUCKET_ID: MEMORY_CORRUPTION_LARGE

    Followup: memory_corruption
    ---------

    eax=00000005 ebx=80539d99 ecx=84912460 edx=8489d008 esi=00000000 edi=8489d954
    eip=804ef19b esp=bae590d4 ebp=bae59124 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
    nt!IopfCallDriver+0x2d:
    804ef19b ff548638 call dword ptr [esi+eax*4+0x38] ds:0023:0000004c=????????
    ChildEBP RetAddr Args to Child
    bae59124 8057e826 848058e4 77e46288 84805850 nt!IopfCallDriver+0x2d (FPO: [0,0,0])
    bae59124 8057e826 848058e4 77e46288 84805850 nt!IopQueryXxxInformation+0x140 (FPO: [Non-Fpo])
    bae59154 8057469b 008058f8 00000009 00000210 nt!IopQueryXxxInformation+0x140 (FPO: [Non-Fpo])
    bae59174 edb1efbb 848058f8 00000009 00000210 nt!IoQueryFileInformation+0x1b (FPO: [Non-Fpo])
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    bae593c4 eda90692 00000000 00000000 84805850 0xedb1efbb
    bae593f0 804f16c0 8438f020 84323890 84805850 Mpfp+0x6692
    bae59420 edb1f047 842c75d8 805e53c3 e2a9b008 nt!IopfCompleteRequest+0xa2 (FPO: [Non-Fpo])
    bae59654 edabb4a5 84323900 84260be0 8432e8f8 0xedb1f047
    bae59684 804ef19f 842c75d8 84323890 84323890 tcpip!TCPDispatch+0x11a (FPO: [Non-Fpo])
    bae596dc eda921d0 bae5974a edaa2212 e2561d00 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    bae59710 eda8b196 8438f020 84323890 84323924 Mpfp+0x81d0
    bae59750 804ef19f 8438f020 84323890 84323890 Mpfp+0x1196
    bae597a8 805831fa 842c75c0 8430d6dc bae59940 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    bae597a8 805831fa 842c75c0 8430d6dc bae59940 nt!IopParseDevice+0xa12 (FPO: [Non-Fpo])
    bae59888 805bf452 842c75d8 00000000 8430d638 nt!IopParseDevice+0xa12 (FPO: [Non-Fpo])
    bae59900 805bb9de 00000000 bae59940 00000240 nt!ObpLookupObjectName+0x53c (FPO: [Non-Fpo])
    bae59954 80576033 00000000 00000000 53919c00 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
    bae599d0 805769aa 84808b90 02000000 bae59b78 nt!IopCreateFile+0x407 (FPO: [Non-Fpo])
    bae59a2c ed95665e 84808b90 02000000 bae59b78 nt!IoCreateFile+0x8e (FPO: [Non-Fpo])
    bae59be8 ed95d2d7 83aeeaac 842633b8 bae59c50 afd!AfdBind+0x34e (FPO: [Non-Fpo])
    start end module name
    804d7000 806e4000 nt ntkrpamp.exe Tue Aug 04 10:20:04 2009 (4A784394)
    806e4000 80704d00 hal halmacpi.dll Sun Apr 13 14:31:27 2008 (4802517F)
    ba66c000 ba696180 kmixer kmixer.sys Sun Apr 13 14:45:07 2008 (480254B3)
    baac8000 baacb800 asyncmac asyncmac.sys Sun Apr 13 14:57:27 2008 (48025797)
    bab5c000 bab6dd80 mfeavfk mfeavfk.sys Fri Jul 31 18:02:34 2009 (4A7369FA)
    bad41000 bad81e00 HTTP HTTP.sys Tue Oct 20 12:20:15 2009 (4ADDE33F)
    bafce000 bafd6420 mfesmfk mfesmfk.sys Fri Jul 31 18:05:29 2009 (4A736AA9)
    bf800000 bf9c3d00 win32k win32k.sys Fri Aug 14 09:21:11 2009 (4A8564C7)
    bf9c4000 bf9d5600 dxg dxg.sys Sun Apr 13 14:38:27 2008 (48025323)
    bf9d6000 bfa1c000 ati2dvag ati2dvag.dll Fri Jul 27 23:30:44 2007 (46AAB864)
    bfa1c000 bfa8a000 ati2cqag ati2cqag.dll Fri Jul 27 22:40:24 2007 (46AAAC98)
    bfa8a000 bfadb000 atikvmag atikvmag.dll Fri Jul 27 22:47:54 2007 (46AAAE5A)
    bfadb000 bfb06000 atiok3x2 atiok3x2.dll Fri Jul 27 23:06:32 2007 (46AAB2B8)
    bfb06000 bfdf2f40 ati3duag ati3duag.dll Fri Jul 27 23:12:19 2007 (46AAB413)
    bfdf3000 bff6d780 ativvaxx ativvaxx.dll Fri Jul 27 23:01:36 2007 (46AAB190)
    bffa0000 bffe5c00 ATMFD ATMFD.DLL Sun Apr 13 20:09:55 2008 (4802A0D3)
    eb093000 eb0bf180 mrxdav mrxdav.sys Sun Apr 13 14:32:42 2008 (480251CA)
    eb3dc000 eb3def00 netdevio netdevio.sys Wed Jan 29 00:34:59 2003 (3E376803)
    eb3e0000 eb400b80 trudf trudf.sys Sun Feb 18 22:15:30 2007 (45D91652)
    eb401000 eb411200 Udfs Udfs.SYS Sun Apr 13 14:32:35 2008 (480251C3)
    eb412000 eb42bd80 tdudf tdudf.sys Sun Mar 25 23:22:16 2007 (46073C68)
    eb434000 eb437900 ndisuio ndisuio.sys Sun Apr 13 14:55:57 2008 (4802573D)
    ed86c000 ed883900 dump_atapi dump_atapi.sys Sun Apr 13 14:40:29 2008 (4802539D)
    ed884000 ed8b6c40 mfehidk mfehidk.sys Fri Jul 31 17:59:40 2009 (4A73694C)
    ed8b7000 ed926280 mrxsmb mrxsmb.sys Fri Oct 24 07:21:07 2008 (4901AFA3)
    ed927000 ed951e80 rdbss rdbss.sys Sun Apr 13 15:28:38 2008 (48025EE6)
    ed952000 ed973d00 afd afd.sys Thu Aug 14 06:04:35 2008 (48A40333)
    ed974000 ed99bc00 netbt netbt.sys Sun Apr 13 15:20:59 2008 (48025D1B)
    eda64000 eda89500 ipnat ipnat.sys Sun Apr 13 14:57:10 2008 (48025786)
    eda8a000 edab1000 Mpfp Mpfp.sys Thu Apr 09 14:21:32 2009 (49DE3CAC)
    edab1000 edb09480 tcpip tcpip.sys Fri Jun 20 07:51:09 2008 (485B99AD)
    edb0a000 edb1c600 ipsec ipsec.sys Sun Apr 13 15:19:42 2008 (48025CCE)
    edb7a000 edb9da80 portcls portcls.sys Sun Apr 13 15:19:40 2008 (48025CCC)
    edb9e000 ee028000 RtkHDAud RtkHDAud.sys Wed Sep 05 05:31:25 2007 (46DE776D)
    ee028000 ee02a280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    ee050000 ee16baa0 AGRSM AGRSM.sys Tue Nov 28 15:10:55 2006 (456C97CF)
    ee46a000 ee47e480 wdmaud wdmaud.sys Sun Apr 13 15:17:18 2008 (48025C3E)
    ee597000 ee5e8880 srv srv.sys Thu Dec 11 05:57:07 2008 (4940F203)
    ee641000 ee64fd80 sysaudio sysaudio.sys Sun Apr 13 15:15:55 2008 (48025BEB)
    f688f000 f6891900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    f68ab000 f6908f00 update update.sys Sun Apr 13 14:39:46 2008 (48025372)
    f6989000 f6993e00 Fips Fips.SYS Sun Apr 13 14:33:27 2008 (480251F7)
    f69d1000 f6a00e80 rdpdr rdpdr.sys Sun Apr 13 14:32:50 2008 (480251D2)
    f6a01000 f6a11e00 psched psched.sys Sun Apr 13 14:56:36 2008 (48025764)
    f6a12000 f6a28580 ndiswan ndiswan.sys Sun Apr 13 15:20:41 2008 (48025D09)
    f6a29000 f6a7a000 rixdptsk rixdptsk.sys Wed Mar 21 09:02:02 2007 (46012CCA)
    f6a7a000 f6a8e000 rimsptsk rimsptsk.sys Tue Jan 23 02:40:19 2007 (45B5BBE3)
    f6a8e000 f6aa1580 sdbus sdbus.sys Sun Apr 13 14:36:44 2008 (480252BC)
    f6aa2000 f6ada800 SynTP SynTP.sys Thu Aug 14 22:01:06 2008 (48A4E362)
    f6adb000 f6b03000 HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
    f6b03000 f6b25700 ks ks.sys Sun Apr 13 15:16:34 2008 (48025C12)
    f6b26000 f6b49200 USBPORT USBPORT.SYS Sun Apr 13 14:45:34 2008 (480254CE)
    f6b4a000 f6bcfc40 ar5211 ar5211.sys Thu Jul 26 16:19:22 2007 (46A901CA)
    f6bd0000 f6bf3000 Rtenicxp Rtenicxp.sys Tue Jul 28 04:55:00 2009 (4A6EBCE4)
    f6bf3000 f6c06f00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
    f6c07000 f6e7d000 ati2mtag ati2mtag.sys Fri Jul 27 23:30:26 2007 (46AAB852)
    f6e95000 f6e97740 awlegacy awlegacy.sys Mon Sep 11 18:19:37 2000 (39BD5A79)
    f6ea1000 f6ea4c80 mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
    f724e000 f7250780 ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
    f7252000 f7255680 CmBatt CmBatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
    f7266000 f7268500 GEARAspiWDM GEARAspiWDM.sys Tue Jan 29 12:00:57 2008 (479F5BC9)
    f728a000 f72a3b80 Mup Mup.sys Sun Apr 13 15:17:05 2008 (48025C31)
    f72a4000 f72d0980 NDIS NDIS.sys Sun Apr 13 15:20:35 2008 (48025D03)
    f72d1000 f735d600 Ntfs Ntfs.sys Sun Apr 13 15:15:49 2008 (48025BE5)
    f735e000 f7374b00 KSecDD KSecDD.sys Wed Jun 24 07:18:40 2009 (4A420B90)
    f7375000 f7386f00 sr sr.sys Sun Apr 13 14:36:50 2008 (480252C2)
    f7387000 f73a6b00 fltmgr fltmgr.sys Sun Apr 13 14:32:58 2008 (480251DA)
    f73a7000 f73be900 atapi atapi.sys Sun Apr 13 14:40:29 2008 (4802539D)
    f73bf000 f73e4700 dmio dmio.sys Sun Apr 13 14:44:45 2008 (4802549D)
    f73e5000 f7403880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    f7404000 f7414a80 pci pci.sys Sun Apr 13 14:36:43 2008 (480252BB)
    f7415000 f7442d80 ACPI ACPI.sys Sun Apr 13 14:36:33 2008 (480252B1)
    f7544000 f754d180 isapnp isapnp.sys Sun Apr 13 14:36:40 2008 (480252B8)
    f7554000 f7563100 ohci1394 ohci1394.sys Sun Apr 13 14:46:18 2008 (480254FA)
    f7564000 f7571080 1394BUS 1394BUS.SYS Sun Apr 13 14:46:18 2008 (480254FA)
    f7574000 f757e580 MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
    f7584000 f7590c80 VolSnap VolSnap.sys Sun Apr 13 14:41:00 2008 (480253BC)
    f7594000 f759ce00 disk disk.sys Sun Apr 13 14:40:46 2008 (480253AE)
    f75a4000 f75b0180 CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
    f75c4000 f75ce200 raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
    f75d4000 f75dfd00 raspptp raspptp.sys Sun Apr 13 15:19:47 2008 (48025CD3)
    f75e4000 f75ec900 msgpc msgpc.sys Sun Apr 13 14:56:32 2008 (48025760)
    f75f4000 f75fdf00 termdd termdd.sys Sun Apr 13 14:38:36 2008 (4802532C)
    f7604000 f7612000 wsimd wsimd.sys Tue Jul 03 22:46:22 2007 (468B09FE)
    f7614000 f761de80 NDProxy NDProxy.SYS Sun Apr 13 14:57:28 2008 (48025798)
    f7654000 f7662880 usbhub usbhub.sys Sun Apr 13 14:45:36 2008 (480254D0)
    f7664000 f7672b00 drmk drmk.sys Sun Apr 13 14:45:12 2008 (480254B8)
    f7684000 f7693900 Cdfs Cdfs.SYS Sun Apr 13 15:14:21 2008 (48025B8D)
    f76f4000 f76fc080 ipfltdrv ipfltdrv.sys Fri Aug 17 16:55:07 2001 (3B7D84AB)
    f7704000 f770c700 wanarp wanarp.sys Sun Apr 13 14:57:20 2008 (48025790)
    f7714000 f7722d80 arp1394 arp1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
    f7724000 f772c780 netbios netbios.sys Sun Apr 13 14:56:01 2008 (48025741)
    f7734000 f7742000 AmdK8 AmdK8.sys Sun Jul 02 01:39:38 2006 (44A75C1A)
    f7744000 f774e480 imapi imapi.sys Sun Apr 13 14:40:57 2008 (480253B9)
    f7754000 f7763600 cdrom cdrom.sys Sun Apr 13 14:40:45 2008 (480253AD)
    f7764000 f7772100 redbook redbook.sys Sun Apr 13 14:40:27 2008 (4802539B)
    f7774000 f7780d00 i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
    f7784000 f7793180 nic1394 nic1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
    f7794000 f77a3000 rimmptsk rimmptsk.sys Sat Feb 24 00:42:21 2007 (45DFD03D)
    f77a4000 f77af000 dsNcAdpt dsNcAdpt.sys Mon Mar 30 22:39:02 2009 (49D18246)
    f77b4000 f77c0880 rasl2tp rasl2tp.sys Sun Apr 13 15:19:43 2008 (48025CCF)
    f77c4000 f77ca180 PCIIDEX PCIIDEX.SYS Sun Apr 13 14:40:29 2008 (4802539D)
    f77cc000 f77d0d00 PartMgr PartMgr.sys Sun Apr 13 14:40:48 2008 (480253B0)
    f7844000 f7848500 watchdog watchdog.sys Sun Apr 13 14:44:59 2008 (480254AB)
    f7864000 f786a440 windrvNT windrvNT.sys Mon May 10 04:42:04 2004 (409F405C)
    f787c000 f7882f80 mfebopk mfebopk.sys Fri Jul 31 18:03:24 2009 (4A736A2C)
    f78b4000 f78bbb60 aw_host5 aw_host5.sys Mon Feb 11 14:06:39 2002 (3C68163F)
    f78bc000 f78c0300 usbohci usbohci.sys Sun Apr 13 14:45:34 2008 (480254CE)
    f78c4000 f78cb600 usbehci usbehci.sys Sun Apr 13 14:45:34 2008 (480254CE)
    f78cc000 f78d2000 kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
    f78d4000 f78d9a00 mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
    f78dc000 f78e0a80 TDI TDI.SYS Sun Apr 13 15:00:04 2008 (48025834)
    f78e4000 f78e8580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    f78ec000 f78f0080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    f78fc000 f7903580 Modem Modem.SYS Sun Apr 13 15:00:18 2008 (48025842)
    f791c000 f7921200 vga vga.sys Sun Apr 13 14:44:40 2008 (48025498)
    f7924000 f7928a80 Msfs Msfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
    f7934000 f793b880 Npfs Npfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
    f7954000 f7957000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    f7958000 f795a800 compbatt compbatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
    f795c000 f795f780 BATTC BATTC.SYS Sun Apr 13 14:36:32 2008 (480252B0)
    f7960000 f7962d80 ACPIEC ACPIEC.sys Fri Aug 17 16:57:55 2001 (3B7D8553)
    f7964000 f7967780 Gernuwa Gernuwa.sys Tue Oct 09 16:14:34 2001 (3BC35AAA)
    f7a40000 f7a43f00 tdcmdpst tdcmdpst.sys Thu Feb 22 01:10:28 2007 (45DD33D4)
    f7a44000 f7a45b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    f7a46000 f7a47100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7a48000 f7a49700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
    f7a74000 f7a75100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7a9a000 f7a9b700 FwLnk FwLnk.sys Tue Apr 03 05:56:47 2007 (461224DF)
    f7a9c000 f7a9d280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    f7aa4000 f7aa5100 swenum swenum.sys Sun Apr 13 14:39:52 2008 (48025378)
    f7ab2000 f7ab3f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
    f7ab4000 f7ab5080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    f7ab6000 f7ab7080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    f7ab8000 f7ab9080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    f7abe000 f7abf100 hiber_WMILIB hiber_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    f7b0c000 f7b0cd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    f7b0d000 f7b0dd80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
    f7bb2000 f7bb2b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
    f7c20000 f7c20d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    f7c74000 f7c74c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)

    Unloaded modules:
    ba654000 ba66c000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba95e000 ba96c000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bacc1000 baccf000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba654000 ba66c000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba654000 ba66c000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba654000 ba66c000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba654000 ba66c000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba76a000 ba778000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba66c000 ba697000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba654000 ba66c000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba67f000 ba697000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6a7000 ba6bf000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6d2000 ba6ea000 hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ba6bf000 ba6ea000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:debuglog.txt
     
  5. 2010/01/06
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
  6. 2010/01/07
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    OTOH it may simply be a case of bad RAM as indicated several times in the log - memory corruption. Test your memory, noting .....
    The only satisfactory way of testing RAM is to test the installed RAM in various configurations. If you have a single module swap it around the slots. If you have a pair of modules run each one singly, swapping between slots; then run them in pairs swapping between pairs of slots. If you have 2 sets of matched modules do not get them mixed up.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.