1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Blue Screen STOP:0x000000BE id:1033

Discussion in 'Windows 7' started by fochi11, 2015/04/08.

  1. 2015/04/08
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Hi. First of all sorry about my english! I have the following error (can happen at any time.. maybe 5 minutes or 2 hours after windows started up..)

    I only installed Windows 7. NO drivers. NO software.

    Computer specs:

    Windows 7 Ultimate
    Intel Celeron CPU G1840 2.80GHZ
    2.00 GB RAM
    64-Bit Operating System

    Someone can help me please? Really don't know what to do.. :confused:

    Already Thanks.
     
  2. 2015/04/08
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #2

  3. to hide this advert.

  4. 2015/04/08
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Thanks Arie.. I have this problem when trying to install "Debugging Tools for Windows "..

    IMG: http://i.imgur.com/vObMnUm.jpg

    Can I upload the minidumpb file to a filehosting server? Already Thanks.
     
  5. 2015/04/08
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Thanks Arie..

    I've a New blue screen errçorr... STOP: 0x000000050 ataport.SYS...

    Can I upload the dump file to a file server hosting? Thanks.

    I don't know why I can't install the soft.. http://i.imgur.com/sEimqYL.jpg
     
  6. 2015/04/08
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Not for me, sorry.

    I'm way too busy, one day I look into it again, but have a look at the SDK install log. Usually you need to remove VC+
     
    Arie,
    #5
  7. 2015/04/08
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Ok, no problem! Now it's working fine for me...

    Here the 2 logs:

    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64a
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Users\Rodrigo\Desktop\040815-12417-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTSa
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Machine Name:
    Kernel base = 0xfffff800`0261d000 PsLoadedModuleList = 0xfffff800`0285ae50
    Debug session time: Wed Apr 8 17:11:47.616 2015 (UTC - 3:00)
    System Uptime: 0 days 0:51:59.896
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ..........
    Loading User Symbols
    Loading unloaded module list
    .............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck BE, {fffff8000278cca0, 278c121, fffff88002fdf5c0, b}

    Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4244e )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
    An attempt was made to write to readonly memory. The guilty driver is on the
    stack trace (and is typically the current instruction pointer).
    When possible, the guilty driver's name (Unicode string) is printed on
    the bugcheck screen and saved in KiBugCheckDriver.
    Arguments:
    Arg1: fffff8000278cca0, Virtual address for the attempted write.
    Arg2: 000000000278c121, PTE contents.
    Arg3: fffff88002fdf5c0, (reserved)
    Arg4: 000000000000000b, (reserved)

    Debugging Details:
    ------------------


    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    BUGCHECK_STR: 0xBE

    PROCESS_NAME: System

    CURRENT_IRQL: 0

    TRAP_FRAME: fffff88002fdf5c0 -- (.trap 0xfffff88002fdf5c0)
    .trap 0xfffff88002fdf5c0
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000000 rbx=0000000000000000 rcx=fffff8000278ccd0
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff8000269400c rsp=fffff88002fdf750 rbp=fffff88002fdf840
    r8=0000000000000000 r9=0000000000000000 r10=fffff8000281c888
    r11=00000382c4c9c0b8 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0 nv up ei ng nz na po nc
    nt!ObfDereferenceObject+0x2c:
    fffff800`0269400c f0480fc11f lock xadd qword ptr [rdi],rbx ds:00000000`00000000=????????????????
    .trap
    Resetting default scope

    LOCK_ADDRESS: fffff80002891400 -- (!locks fffff80002891400)
    !locks fffff80002891400

    Resource @ nt!PiEngineLock (0xfffff80002891400) Available

    WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


    WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

    1 total locks

    PNP_TRIAGE:
    Lock address : 0xfffff80002891400
    Thread Count : 0
    Thread address: 0x0000000000000000
    Thread wait : 0x0

    LAST_CONTROL_TRANSFER: from fffff8000270ddb2 to fffff8000268ef00

    STACK_TEXT:
    fffff880`02fdf458 fffff800`0270ddb2 : 00000000`000000be fffff800`0278cca0 00000000`0278c121 fffff880`02fdf5c0 : nt!KeBugCheckEx
    fffff880`02fdf460 fffff800`0268cfee : 00000000`00000001 ffffffff`ffffffff fffff880`02fdf600 fffff800`0268d0fd : nt! ?? ::FNODOBFM::`string'+0x4244e
    fffff880`02fdf5c0 fffff800`0269400c : 00000000`00000480 00000000`4c627249 fffff880`02fd0000 00000000`00000000 : nt!KiPageFault+0x16e
    fffff880`02fdf750 fffff800`02a4cbef : fffff880`02fdf840 00000000`00000000 fffff800`0278ccd0 fffff800`02807e80 : nt!ObfDereferenceObject+0x2c
    fffff880`02fdf7b0 fffff800`02a4cf4a : 00000000`00000000 fffffa80`04d3d0d0 fffff800`0278ccd0 00000000`00000000 : nt!PnpAsynchronousCall+0xdf
    fffff880`02fdf7f0 fffff800`02a4f237 : fffff800`028911c0 fffffa80`03a85a70 00000000`00000002 fffffa80`03a85a70 : nt!PnpQueryDeviceRelations+0xfa
    fffff880`02fdf8b0 fffff800`02a7ae2c : fffffa80`03a85a70 fffffa80`03a80020 fffffa80`03a85a70 00000000`00000002 : nt!PipEnumerateDevice+0x117
    fffff880`02fdf910 fffff800`02a7b438 : fffff800`0288ed80 00000000`00000000 00000000`00000001 fffff800`028fb71c : nt!PipProcessDevNodeTree+0x21c
    fffff880`02fdfb80 fffff800`0278f347 : 00000001`00000003 00000000`00000000 00000000`00000001 00000000`00000000 : nt!PiProcessReenumeration+0x98
    fffff880`02fdfbd0 fffff800`0269c161 : fffff800`0278f020 fffff800`0264d001 fffffa80`030fd600 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
    fffff880`02fdfc70 fffff800`02932166 : 00000000`00000000 fffffa80`030fd680 00000000`00000080 fffffa80`030e4040 : nt!ExpWorkerThread+0x111
    fffff880`02fdfd00 fffff800`0266d486 : fffff880`02f00180 fffffa80`030fd680 fffff880`02f0af40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`02fdfd40 00000000`00000000 : fffff880`02fe0000 fffff880`02fda000 fffff880`02fdf020 00000000`00000000 : nt!KxStartSystemThread+0x16


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt! ?? ::FNODOBFM::`string'+4244e
    fffff800`0270ddb2 cc int 3

    SYMBOL_STACK_INDEX: 1

    SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+4244e

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600

    FAILURE_BUCKET_ID: X64_0xBE_nt!_??_::FNODOBFM::_string_+4244e

    BUCKET_ID: X64_0xBE_nt!_??_::FNODOBFM::_string_+4244e

    Followup: MachineOwner
    ---------

    rax=0000000000000001 rbx=000000000278c121 rcx=00000000000000be
    rdx=fffff8000278cca0 rsi=0000000000000008 rdi=fffff8000278cca0
    rip=fffff8000268ef00 rsp=fffff88002fdf458 rbp=fffff88002fdf4c0
    r8=000000000278c121 r9=fffff88002fdf5c0 r10=00000000000001f0
    r11=fffff6fb7e000098 r12=fffffa80030fd680 r13=fffff8000278cca0
    r14=0000000000000000 r15=fffff8000281a440
    iopl=0 nv up ei pl zr na po nc
    cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00000246
    nt!KeBugCheckEx:
    fffff800`0268ef00 48894c2408 mov qword ptr [rsp+8],rcx ss:fffff880`02fdf460=00000000000000be
    Child-SP RetAddr : Args to Child : Call Site
    fffff880`02fdf458 fffff800`0270ddb2 : 00000000`000000be fffff800`0278cca0 00000000`0278c121 fffff880`02fdf5c0 : nt!KeBugCheckEx
    fffff880`02fdf460 fffff800`0268cfee : 00000000`00000001 ffffffff`ffffffff fffff880`02fdf600 fffff800`0268d0fd : nt! ?? ::FNODOBFM::`string'+0x4244e
    fffff880`02fdf5c0 fffff800`0269400c : 00000000`00000480 00000000`4c627249 fffff880`02fd0000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`02fdf5c0)
    fffff880`02fdf750 fffff800`02a4cbef : fffff880`02fdf840 00000000`00000000 fffff800`0278ccd0 fffff800`02807e80 : nt!ObfDereferenceObject+0x2c
    fffff880`02fdf7b0 fffff800`02a4cf4a : 00000000`00000000 fffffa80`04d3d0d0 fffff800`0278ccd0 00000000`00000000 : nt!PnpAsynchronousCall+0xdf
    fffff880`02fdf7f0 fffff800`02a4f237 : fffff800`028911c0 fffffa80`03a85a70 00000000`00000002 fffffa80`03a85a70 : nt!PnpQueryDeviceRelations+0xfa
    fffff880`02fdf8b0 fffff800`02a7ae2c : fffffa80`03a85a70 fffffa80`03a80020 fffffa80`03a85a70 00000000`00000002 : nt!PipEnumerateDevice+0x117
    fffff880`02fdf910 fffff800`02a7b438 : fffff800`0288ed80 00000000`00000000 00000000`00000001 fffff800`028fb71c : nt!PipProcessDevNodeTree+0x21c
    fffff880`02fdfb80 fffff800`0278f347 : 00000001`00000003 00000000`00000000 00000000`00000001 00000000`00000000 : nt!PiProcessReenumeration+0x98
    fffff880`02fdfbd0 fffff800`0269c161 : fffff800`0278f020 fffff800`0264d001 fffffa80`030fd600 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
    fffff880`02fdfc70 fffff800`02932166 : 00000000`00000000 fffffa80`030fd680 00000000`00000080 fffffa80`030e4040 : nt!ExpWorkerThread+0x111
    fffff880`02fdfd00 fffff800`0266d486 : fffff880`02f00180 fffffa80`030fd680 fffff880`02f0af40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`02fdfd40 00000000`00000000 : fffff880`02fe0000 fffff880`02fda000 fffff880`02fdf020 00000000`00000000 : nt!KxStartSystemThread+0x16
    start end module name
    fffff800`00bb9000 fffff800`00bc3000 kdcom kdcom.dll Mon Jul 13 22:31:07 2009 (4A5BDFDB)
    fffff800`0261d000 fffff800`02bfa000 nt ntkrnlmp.exe Mon Jul 13 20:40:48 2009 (4A5BC600)
    fffff800`02bfa000 fffff800`02c43000 hal hal.dll Mon Jul 13 22:27:36 2009 (4A5BDF08)
    fffff880`00c00000 fffff880`00cc0000 CI CI.dll Mon Jul 13 22:32:13 2009 (4A5BE01D)
    fffff880`00cc0000 fffff880`00cda000 rassstp rassstp.sys Mon Jul 13 21:10:25 2009 (4A5BCCF1)
    fffff880`00cda000 fffff880`00cec000 umbus umbus.sys Mon Jul 13 21:06:56 2009 (4A5BCC20)
    fffff880`00cf9000 fffff880`00d3d000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 22:29:10 2009 (4A5BDF66)
    fffff880`00d3d000 fffff880`00d51000 PSHED PSHED.dll Mon Jul 13 22:32:23 2009 (4A5BE027)
    fffff880`00d51000 fffff880`00daf000 CLFS CLFS.SYS Mon Jul 13 20:19:57 2009 (4A5BC11D)
    fffff880`00daf000 fffff880`00df2000 ks ks.sys Mon Jul 13 21:00:31 2009 (4A5BCA9F)
    fffff880`00e00000 fffff880`00e2f000 ndiswan ndiswan.sys Mon Jul 13 21:10:11 2009 (4A5BCCE3)
    fffff880`00e2f000 fffff880`00e50000 raspptp raspptp.sys Mon Jul 13 21:10:18 2009 (4A5BCCEA)
    fffff880`00e50000 fffff880`00ef4000 Wdf01000 Wdf01000.sys Mon Jul 13 20:22:07 2009 (4A5BC19F)
    fffff880`00ef4000 fffff880`00f03000 WDFLDR WDFLDR.SYS Mon Jul 13 20:19:54 2009 (4A5BC11A)
    fffff880`00f03000 fffff880`00f5a000 ACPI ACPI.sys Mon Jul 13 20:19:34 2009 (4A5BC106)
    fffff880`00f5a000 fffff880`00f63000 WMILIB WMILIB.SYS Mon Jul 13 20:19:51 2009 (4A5BC117)
    fffff880`00f63000 fffff880`00f6d000 msisadrv msisadrv.sys Mon Jul 13 20:19:26 2009 (4A5BC0FE)
    fffff880`00f6d000 fffff880`00fa0000 pci pci.sys Mon Jul 13 20:19:51 2009 (4A5BC117)
    fffff880`00fa0000 fffff880`00fad000 vdrvroot vdrvroot.sys Mon Jul 13 21:01:31 2009 (4A5BCADB)
    fffff880`00fad000 fffff880`00fc2000 partmgr partmgr.sys Mon Jul 13 20:19:58 2009 (4A5BC11E)
    fffff880`00fc2000 fffff880`00fd7000 volmgr volmgr.sys Mon Jul 13 20:19:57 2009 (4A5BC11D)
    fffff880`00fd7000 fffff880`00ff5000 tdx tdx.sys Mon Jul 13 20:21:15 2009 (4A5BC16B)
    fffff880`01000000 fffff880`01025000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 20:38:51 2009 (4A5BC58B)
    fffff880`01025000 fffff880`0102e000 rdprefmp rdprefmp.sys Mon Jul 13 21:16:35 2009 (4A5BCE63)
    fffff880`0102e000 fffff880`01039000 Msfs Msfs.SYS unavailable (00000000)
    fffff880`01039000 fffff880`0104a000 Npfs Npfs.SYS Mon Jul 13 20:19:48 2009 (4A5BC114)
    fffff880`0104a000 fffff880`01057000 TDI TDI.SYS Mon Jul 13 20:21:18 2009 (4A5BC16E)
    fffff880`0105f000 fffff880`010bb000 volmgrx volmgrx.sys unavailable (00000000)
    fffff880`010bb000 fffff880`010d5000 mountmgr mountmgr.sys Mon Jul 13 20:19:54 2009 (4A5BC11A)
    fffff880`010d5000 fffff880`010de000 atapi atapi.sys Mon Jul 13 20:19:47 2009 (4A5BC113)
    fffff880`010de000 fffff880`01108000 ataport ataport.SYS Mon Jul 13 20:19:52 2009 (4A5BC118)
    fffff880`01108000 fffff880`01113000 msahci msahci.sys Mon Jul 13 21:01:01 2009 (4A5BCABD)
    fffff880`01113000 fffff880`01123000 PCIIDEX PCIIDEX.SYS Mon Jul 13 20:19:48 2009 (4A5BC114)
    fffff880`01123000 fffff880`0112e000 amdxata amdxata.sys Tue May 19 14:56:59 2009 (4A12F2EB)
    fffff880`0112e000 fffff880`0117a000 fltmgr fltmgr.sys Mon Jul 13 20:19:59 2009 (4A5BC11F)
    fffff880`0117a000 fffff880`0118e000 fileinfo fileinfo.sys Mon Jul 13 20:34:25 2009 (4A5BC481)
    fffff880`0118e000 fffff880`011ec000 msrpc msrpc.sys unavailable (00000000)
    fffff880`011ec000 fffff880`011fb000 mouclass mouclass.sys Mon Jul 13 20:19:50 2009 (4A5BC116)
    fffff880`01200000 fffff880`01209000 rdpencdd rdpencdd.sys Mon Jul 13 21:16:34 2009 (4A5BCE62)
    fffff880`01211000 fffff880`013b4000 Ntfs Ntfs.sys Mon Jul 13 20:20:47 2009 (4A5BC14F)
    fffff880`013b4000 fffff880`013ce000 ksecdd ksecdd.sys Mon Jul 13 20:20:54 2009 (4A5BC156)
    fffff880`013ce000 fffff880`013d5000 Beep Beep.SYS Mon Jul 13 21:00:13 2009 (4A5BCA8D)
    fffff880`013d5000 fffff880`013e3000 vga vga.sys Mon Jul 13 20:38:47 2009 (4A5BC587)
    fffff880`013e3000 fffff880`013f3000 watchdog watchdog.sys Mon Jul 13 20:37:35 2009 (4A5BC53F)
    fffff880`013f3000 fffff880`013fc000 RDPCDD RDPCDD.sys Mon Jul 13 21:16:34 2009 (4A5BCE62)
    fffff880`01400000 fffff880`01416000 disk disk.sys Mon Jul 13 20:19:57 2009 (4A5BC11D)
    fffff880`01416000 fffff880`01446000 CLASSPNP CLASSPNP.SYS Mon Jul 13 20:19:58 2009 (4A5BC11E)
    fffff880`01446000 fffff880`01469000 luafv luafv.sys Mon Jul 13 20:26:13 2009 (4A5BC295)
    fffff880`0147e000 fffff880`014a8000 cdrom cdrom.sys Mon Jul 13 20:19:54 2009 (4A5BC11A)
    fffff880`014a9000 fffff880`0151c000 cng cng.sys Mon Jul 13 20:49:40 2009 (4A5BC814)
    fffff880`0151c000 fffff880`0152d000 pcw pcw.sys Mon Jul 13 20:19:27 2009 (4A5BC0FF)
    fffff880`0152d000 fffff880`01537000 Fs_Rec Fs_Rec.sys unavailable (00000000)
    fffff880`01537000 fffff880`01583000 volsnap volsnap.sys Mon Jul 13 20:20:08 2009 (4A5BC128)
    fffff880`01583000 fffff880`015bd000 rdyboost rdyboost.sys Mon Jul 13 20:34:34 2009 (4A5BC48A)
    fffff880`015bd000 fffff880`015f7000 fvevol fvevol.sys Mon Jul 13 20:22:15 2009 (4A5BC1A7)
    fffff880`015f7000 fffff880`01600000 Null Null.SYS unavailable (00000000)
    fffff880`01600000 fffff880`0164a000 fwpkclnt fwpkclnt.sys Mon Jul 13 20:21:08 2009 (4A5BC164)
    fffff880`0164a000 fffff880`0165a000 vmstorfl vmstorfl.sys unavailable (00000000)
    fffff880`0165a000 fffff880`01662000 spldr spldr.sys Mon May 11 13:56:27 2009 (4A0858BB)
    fffff880`01662000 fffff880`0166b000 hwpolicy hwpolicy.sys Mon Jul 13 20:19:22 2009 (4A5BC0FA)
    fffff880`0166b000 fffff880`0175d000 ndis ndis.sys Mon Jul 13 20:21:40 2009 (4A5BC184)
    fffff880`0175d000 fffff880`017bd000 NETIO NETIO.SYS Mon Jul 13 20:21:46 2009 (4A5BC18A)
    fffff880`017bd000 fffff880`017e8000 ksecpkg ksecpkg.sys Mon Jul 13 20:50:34 2009 (4A5BC84A)
    fffff880`017e8000 fffff880`017fa000 mup mup.sys Mon Jul 13 20:23:45 2009 (4A5BC201)
    fffff880`01802000 fffff880`019ff000 tcpip tcpip.sys Mon Jul 13 20:25:34 2009 (4A5BC26E)
    fffff880`0240d000 fffff880`02425000 rspndr rspndr.sys Mon Jul 13 21:08:50 2009 (4A5BCC92)
    fffff880`02425000 fffff880`024ed000 HTTP HTTP.sys Mon Jul 13 20:22:16 2009 (4A5BC1A8)
    fffff880`024ed000 fffff880`0250b000 bowser bowser.sys Mon Jul 13 20:23:50 2009 (4A5BC206)
    fffff880`0250b000 fffff880`02523000 mpsdrv mpsdrv.sys Mon Jul 13 21:08:25 2009 (4A5BCC79)
    fffff880`02523000 fffff880`0254f000 mrxsmb mrxsmb.sys Mon Jul 13 20:23:59 2009 (4A5BC20F)
    fffff880`0254f000 fffff880`0259c000 mrxsmb10 mrxsmb10.sys Mon Jul 13 20:24:08 2009 (4A5BC218)
    fffff880`0259c000 fffff880`025bf000 mrxsmb20 mrxsmb20.sys Mon Jul 13 20:24:05 2009 (4A5BC215)
    fffff880`0284b000 fffff880`028f1000 peauth peauth.sys Mon Jul 13 22:01:19 2009 (4A5BD8DF)
    fffff880`028f1000 fffff880`028fc000 secdrv secdrv.SYS Wed Sep 13 10:18:38 2006 (4508052E)
    fffff880`028fc000 fffff880`02929000 srvnet srvnet.sys Mon Jul 13 20:24:58 2009 (4A5BC24A)
    fffff880`02929000 fffff880`0293b000 tcpipreg tcpipreg.sys Mon Jul 13 21:09:49 2009 (4A5BCCCD)
    fffff880`0293b000 fffff880`029a4000 srv2 srv2.sys Mon Jul 13 20:25:02 2009 (4A5BC24E)
    fffff880`02a00000 fffff880`02a36000 fastfat fastfat.SYS Mon Jul 13 20:23:28 2009 (4A5BC1F0)
    fffff880`02a36000 fffff880`02a57000 WudfPf WudfPf.sys Mon Jul 13 21:05:37 2009 (4A5BCBD1)
    fffff880`02a57000 fffff880`02a88000 WUDFRd WUDFRd.sys Mon Jul 13 21:06:06 2009 (4A5BCBEE)
    fffff880`02a98000 fffff880`02b30000 srv srv.sys Mon Jul 13 20:25:11 2009 (4A5BC257)
    [/QUOTE]

    The second...

     
  8. 2015/04/08
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    You are running windows 7 RTM, so first priority would be to update to SP1 and get all the new security fixes from x number of years.

    Then update all your drivers.
     
    Arie,
    #7
  9. 2015/04/09
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Thanks! I updated Windows and now I have this Blue Screen:

    IMG: http://i.imgur.com/DiMDLI2.jpg

    LOG:

    Best Regards.
     
  10. 2015/04/09
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #9
  11. 2015/04/14
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Hi! I install SP1.. Now this is my log..

    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Users\Rodrigo\Desktop\041415-20264-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
    Machine Name:
    Kernel base = 0xfffff800`02a53000 PsLoadedModuleList = 0xfffff800`02c98e90
    Debug session time: Tue Apr 14 13:47:04.725 2015 (UTC - 3:00)
    System Uptime: 0 days 0:08:00.896
    Loading Kernel Symbols
    .

    Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
    Run !sym noisy before .reload to track down problems loading symbols.

    ..............................................................
    ................................................................
    ...................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1E, {ffffffffc0000005, fffff80002dab0e9, 0, 388}

    Probably caused by : memory_corruption ( nt!MiRelocateImagePfn+29 )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KMODE_EXCEPTION_NOT_HANDLED (1e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Arguments:
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff80002dab0e9, The address that the exception occurred at
    Arg3: 0000000000000000, Parameter 0 of the exception
    Arg4: 0000000000000388, Parameter 1 of the exception

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    FAULTING_IP:
    nt!MiRelocateImagePfn+29
    fffff800`02dab0e9 493902 cmp qword ptr [r10],rax

    EXCEPTION_PARAMETER1: 0000000000000000

    EXCEPTION_PARAMETER2: 0000000000000388

    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d040e8
    0000000000000388

    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    BUGCHECK_STR: 0x1E_c0000005

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    PROCESS_NAME: svchost.exe

    CURRENT_IRQL: 0

    TRAP_FRAME: fffff880069e06e0 -- (.trap 0xfffff880069e06e0)
    .trap 0xfffff880069e06e0
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8004b4bca0
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff80002dab0e9 rsp=fffff880069e0870 rbp=0000000000000071
    r8=0000000000000071 r9=0000000000000000 r10=0000000000000388
    r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0 nv up ei pl zr na po nc
    nt!MiRelocateImagePfn+0x29:
    fffff800`02dab0e9 493902 cmp qword ptr [r10],rax ds:9c20:00000000`00000388=????????????????
    .trap
    Resetting default scope

    LAST_CONTROL_TRANSFER: from fffff80002b1f028 to fffff80002ad3640

    STACK_TEXT:
    fffff880`069dfe58 fffff800`02b1f028 : 00000000`0000001e ffffffff`c0000005 fffff800`02dab0e9 00000000`00000000 : nt!KeBugCheckEx
    fffff880`069dfe60 fffff800`02ad2cc2 : fffff880`069e0638 00000000`000074c6 fffff880`069e06e0 fffff8a0`00e5e000 : nt! ?? ::FNODOBFM::`string'+0x4987d
    fffff880`069e0500 fffff800`02ad183a : 00000000`00000000 00000000`00000388 00000000`00000000 00000000`000074c6 : nt!KiExceptionDispatch+0xc2
    fffff880`069e06e0 fffff800`02dab0e9 : fffffa80`06297730 fffffa80`06297700 fffffa80`03cc0000 fffffa80`06294f21 : nt!KiPageFault+0x23a
    fffff880`069e0870 fffff800`02b0315b : fffffa80`03cc9c00 fffffa80`00000009 fffffa80`040b8800 fffffa80`05b36c00 : nt!MiRelocateImagePfn+0x29
    fffff880`069e08d0 fffff800`02afb13f : fffffa80`06297730 fffff880`069e0a40 fffffa80`061436a8 fffffa80`06297730 : nt!MiWaitForInPageComplete+0x7ef
    fffff880`069e09b0 fffff800`02ae1a8a : 00000000`00000000 00000000`00000000 ffffffff`ffffffff fffff680`00000000 : nt!MiIssueHardFault+0x28b
    fffff880`069e0a80 fffff800`02ad176e : 00000000`00000008 00000000`72991fa0 fffffa80`00000001 00000000`01ef4b70 : nt!MmAccessFault+0x146a
    fffff880`069e0be0 00000000`72991fa0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
    00000000`04f8daf0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72991fa0


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!MiRelocateImagePfn+29
    fffff800`02dab0e9 493902 cmp qword ptr [r10],rax

    SYMBOL_STACK_INDEX: 4

    SYMBOL_NAME: nt!MiRelocateImagePfn+29

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7951a

    IMAGE_NAME: memory_corruption

    FAILURE_BUCKET_ID: X64_0x1E_c0000005_nt!MiRelocateImagePfn+29

    BUCKET_ID: X64_0x1E_c0000005_nt!MiRelocateImagePfn+29

    Followup: MachineOwner
    ---------

    rax=0000000000000388 rbx=fffff880069e0638 rcx=000000000000001e
    rdx=ffffffffc0000005 rsi=fffff880069e06e0 rdi=ffffffffffffffff
    rip=fffff80002ad3640 rsp=fffff880069dfe58 rbp=fffff880069e0390
    r8=fffff80002dab0e9 r9=0000000000000000 r10=0000000000000000
    r11=fffffa8005a3e680 r12=fffff880069dfe90 r13=000000000010001f
    r14=fffff880069e0500 r15=0000000000008000
    iopl=0 nv up ei pl zr na po nc
    cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00000246
    nt!KeBugCheckEx:
    fffff800`02ad3640 48894c2408 mov qword ptr [rsp+8],rcx ss:fffff880`069dfe60=000000000000001e
    Child-SP RetAddr : Args to Child : Call Site
    fffff880`069dfe58 fffff800`02b1f028 : 00000000`0000001e ffffffff`c0000005 fffff800`02dab0e9 00000000`00000000 : nt!KeBugCheckEx
    fffff880`069dfe60 fffff800`02ad2cc2 : fffff880`069e0638 00000000`000074c6 fffff880`069e06e0 fffff8a0`00e5e000 : nt! ?? ::FNODOBFM::`string'+0x4987d
    fffff880`069e0500 fffff800`02ad183a : 00000000`00000000 00000000`00000388 00000000`00000000 00000000`000074c6 : nt!KiExceptionDispatch+0xc2
    fffff880`069e06e0 fffff800`02dab0e9 : fffffa80`06297730 fffffa80`06297700 fffffa80`03cc0000 fffffa80`06294f21 : nt!KiPageFault+0x23a (TrapFrame @ fffff880`069e06e0)
    fffff880`069e0870 fffff800`02b0315b : fffffa80`03cc9c00 fffffa80`00000009 fffffa80`040b8800 fffffa80`05b36c00 : nt!MiRelocateImagePfn+0x29
    fffff880`069e08d0 fffff800`02afb13f : fffffa80`06297730 fffff880`069e0a40 fffffa80`061436a8 fffffa80`06297730 : nt!MiWaitForInPageComplete+0x7ef
    fffff880`069e09b0 fffff800`02ae1a8a : 00000000`00000000 00000000`00000000 ffffffff`ffffffff fffff680`00000000 : nt!MiIssueHardFault+0x28b
    fffff880`069e0a80 fffff800`02ad176e : 00000000`00000008 00000000`72991fa0 fffffa80`00000001 00000000`01ef4b70 : nt!MmAccessFault+0x146a
    fffff880`069e0be0 00000000`72991fa0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`069e0be0)
    00000000`04f8daf0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72991fa0
    start end module name
    fffff800`00bbe000 fffff800`00bc8000 kdcom kdcom.dll Mon Jul 13 22:31:07 2009 (4A5BDFDB)
    fffff800`02a0a000 fffff800`02a53000 hal hal.dll Sat Nov 20 10:00:25 2010 (4CE7C669)
    fffff800`02a53000 fffff800`0303d000 nt ntkrnlmp.exe Sat Nov 20 06:30:02 2010 (4CE7951A)
    fffff880`00c45000 fffff880`00c94000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 10:03:51 2010 (4CE7C737)
    fffff880`00c94000 fffff880`00ca8000 PSHED PSHED.dll Mon Jul 13 22:32:23 2009 (4A5BE027)
    fffff880`00ca8000 fffff880`00d06000 CLFS CLFS.SYS Mon Jul 13 20:19:57 2009 (4A5BC11D)
    fffff880`00d06000 fffff880`00dc6000 CI CI.dll Sat Nov 20 10:12:36 2010 (4CE7C944)
    fffff880`00e00000 fffff880`00e33000 pci pci.sys Sat Nov 20 06:19:11 2010 (4CE7928F)
    fffff880`00e33000 fffff880`00e40000 vdrvroot vdrvroot.sys Mon Jul 13 21:01:31 2009 (4A5BCADB)
    fffff880`00e40000 fffff880`00e4a000 iusb3hcs iusb3hcs.sys Fri May 30 10:18:22 2014 (5388851E)
    fffff880`00e4a000 fffff880`00e5f000 partmgr partmgr.sys Sat Nov 20 06:20:00 2010 (4CE792C0)
    fffff880`00e5f000 fffff880`00e74000 volmgr volmgr.sys Sat Nov 20 06:19:28 2010 (4CE792A0)
    fffff880`00eb8000 fffff880`00f79000 Wdf01000 Wdf01000.sys Sat May 19 00:33:28 2012 (4FB71488)
    fffff880`00f79000 fffff880`00f89000 WDFLDR WDFLDR.SYS Sat May 19 00:36:29 2012 (4FB7153D)
    fffff880`00f89000 fffff880`00fe0000 ACPI ACPI.sys Sat Nov 20 06:19:16 2010 (4CE79294)
    fffff880`00fe0000 fffff880`00fe9000 WMILIB WMILIB.SYS Mon Jul 13 20:19:51 2009 (4A5BC117)
    fffff880`00fe9000 fffff880`00ff3000 msisadrv msisadrv.sys Mon Jul 13 20:19:26 2009 (4A5BC0FE)
    fffff880`01049000 fffff880`010a5000 volmgrx volmgrx.sys unavailable (00000000)
    fffff880`010a5000 fffff880`010ad000 intelide intelide.sys Mon Jul 13 20:19:48 2009 (4A5BC114)
    fffff880`010ad000 fffff880`010bd000 PCIIDEX PCIIDEX.SYS Mon Jul 13 20:19:48 2009 (4A5BC114)
    fffff880`010bd000 fffff880`010c4000 pciide pciide.sys Mon Jul 13 20:19:49 2009 (4A5BC115)
    fffff880`010c4000 fffff880`010de000 mountmgr mountmgr.sys Sat Nov 20 06:19:21 2010 (4CE79299)
    fffff880`010de000 fffff880`010e7000 atapi atapi.sys Mon Jul 13 20:19:47 2009 (4A5BC113)
    fffff880`010e7000 fffff880`01111000 ataport ataport.SYS Sat Nov 20 06:19:15 2010 (4CE79293)
    fffff880`01111000 fffff880`0111c000 amdxata amdxata.sys Fri Mar 19 13:18:18 2010 (4BA3A3CA)
    fffff880`0111c000 fffff880`01168000 fltmgr fltmgr.sys Sat Nov 20 06:19:24 2010 (4CE7929C)
    fffff880`01168000 fffff880`0117c000 fileinfo fileinfo.sys Mon Jul 13 20:34:25 2009 (4A5BC481)
    fffff880`0117c000 fffff880`011da000 msrpc msrpc.sys unavailable (00000000)
    fffff880`01200000 fffff880`0121b000 ksecdd ksecdd.sys Sat Nov 20 06:21:15 2010 (4CE7930B)
    fffff880`0121b000 fffff880`01236000 wanarp wanarp.sys Sat Nov 20 07:52:36 2010 (4CE7A874)
    fffff880`01257000 fffff880`013fa000 Ntfs Ntfs.sys Sat Nov 20 06:20:57 2010 (4CE792F9)
    fffff880`01400000 fffff880`01445000 netbt netbt.sys Sat Nov 20 06:23:18 2010 (4CE79386)
    fffff880`01445000 fffff880`0144e000 wfplwf wfplwf.sys Mon Jul 13 21:09:26 2009 (4A5BCCB6)
    fffff880`0144e000 fffff880`01474000 pacer pacer.sys Sat Nov 20 07:52:18 2010 (4CE7A862)
    fffff880`01474000 fffff880`01483000 netbios netbios.sys Mon Jul 13 21:09:26 2009 (4A5BCCB6)
    fffff880`01493000 fffff880`01505000 cng cng.sys Sat Nov 20 07:08:45 2010 (4CE79E2D)
    fffff880`01505000 fffff880`01516000 pcw pcw.sys Mon Jul 13 20:19:27 2009 (4A5BC0FF)
    fffff880`01516000 fffff880`01520000 Fs_Rec Fs_Rec.sys unavailable (00000000)
    fffff880`01520000 fffff880`01542000 tdx tdx.sys Sat Nov 20 06:21:54 2010 (4CE79332)
    fffff880`01542000 fffff880`015cb000 afd afd.sys Sat Nov 20 06:23:27 2010 (4CE7938F)
    fffff880`015cb000 fffff880`015e8000 serial serial.sys Mon Jul 13 21:00:40 2009 (4A5BCAA8)
    fffff880`015e8000 fffff880`015fc000 termdd termdd.sys Sat Nov 20 08:03:40 2010 (4CE7AB0C)
    fffff880`01600000 fffff880`01609000 RDPCDD RDPCDD.sys Mon Jul 13 21:16:34 2009 (4A5BCE62)
    fffff880`01609000 fffff880`01612000 rdpencdd rdpencdd.sys Mon Jul 13 21:16:34 2009 (4A5BCE62)
    fffff880`01612000 fffff880`0161b000 rdprefmp rdprefmp.sys Mon Jul 13 21:16:35 2009 (4A5BCE63)
    fffff880`0161b000 fffff880`01626000 Msfs Msfs.SYS unavailable (00000000)
    fffff880`01626000 fffff880`01637000 Npfs Npfs.SYS Mon Jul 13 20:19:48 2009 (4A5BC114)
    fffff880`01637000 fffff880`01644000 TDI TDI.SYS Sat Nov 20 06:22:06 2010 (4CE7933E)
    fffff880`01647000 fffff880`0173a000 ndis ndis.sys Sat Nov 20 06:23:30 2010 (4CE79392)
    fffff880`0173a000 fffff880`0179a000 NETIO NETIO.SYS Sat Nov 20 06:23:13 2010 (4CE79381)
    fffff880`0179a000 fffff880`017c5000 ksecpkg ksecpkg.sys Sat Nov 20 07:10:34 2010 (4CE79E9A)
    fffff880`017c5000 fffff880`017ea000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 20:38:51 2009 (4A5BC58B)
    fffff880`017ea000 fffff880`017fa000 watchdog watchdog.sys Mon Jul 13 20:37:35 2009 (4A5BC53F)
    fffff880`01800000 fffff880`0182a000 cdrom cdrom.sys Sat Nov 20 06:19:20 2010 (4CE79298)
    fffff880`01830000 fffff880`01a34000 tcpip tcpip.sys Sat Nov 20 06:25:52 2010 (4CE79420)
    fffff880`01a34000 fffff880`01a7e000 fwpkclnt fwpkclnt.sys Sat Nov 20 06:21:37 2010 (4CE79321)
    fffff880`01a7e000 fffff880`01aca000 volsnap volsnap.sys Sat Nov 20 06:20:08 2010 (4CE792C8)
    fffff880`01aca000 fffff880`01ad2000 spldr spldr.sys Mon May 11 13:56:27 2009 (4A0858BB)
    fffff880`01ad2000 fffff880`01b0c000 rdyboost rdyboost.sys Sat Nov 20 06:43:10 2010 (4CE7982E)
    fffff880`01b0c000 fffff880`01b1e000 mup mup.sys Mon Jul 13 20:23:45 2009 (4A5BC201)
    fffff880`01b1e000 fffff880`01b27000 hwpolicy hwpolicy.sys Sat Nov 20 06:18:54 2010 (4CE7927E)
    fffff880`01b27000 fffff880`01b61000 fvevol fvevol.sys Sat Nov 20 06:24:06 2010 (4CE793B6)
    fffff880`01b61000 fffff880`01b77000 disk disk.sys Mon Jul 13 20:19:57 2009 (4A5BC11D)
    fffff880`01b77000 fffff880`01ba7000 CLASSPNP CLASSPNP.SYS Sat Nov 20 06:19:23 2010 (4CE7929B)
    fffff880`01bdd000 fffff880`01be6000 Null Null.SYS unavailable (00000000)
    fffff880`01be6000 fffff880`01bed000 Beep Beep.SYS Mon Jul 13 21:00:13 2009 (4A5BCA8D)
    fffff880`01bed000 fffff880`01bfb000 vga vga.sys Mon Jul 13 20:38:47 2009 (4A5BC587)
    fffff880`02a00000 fffff880`02a31000 srvnet srvnet.sys Sat Nov 20 06:27:20 2010 (4CE79478)
    fffff880`02a31000 fffff880`02a43000 tcpipreg tcpipreg.sys Sat Nov 20 07:51:48 2010 (4CE7A844)
    fffff880`02a43000 fffff880`02aae000 srv2 srv2.sys Sat Nov 20 06:27:43 2010 (4CE7948F)
    fffff880`02abd000 fffff880`02b0a000 mrxsmb10 mrxsmb10.sys Sat Nov 20 06:26:53 2010 (4CE7945D)
    fffff880`02b0a000 fffff880`02b2e000 mrxsmb20 mrxsmb20.sys Sat Nov 20 06:26:47 2010 (4CE79457)
    fffff880`02b2e000 fffff880`02bd4000 peauth peauth.sys Mon Jul 13 22:01:19 2009 (4A5BD8DF)
    fffff880`02bd4000 fffff880`02bdf000 secdrv secdrv.SYS Wed Sep 13 10:18:38 2006 (4508052E)
    fffff880`02e00000 fffff880`02e46000 dxgmms1 dxgmms1.sys Sat Nov 20 06:49:53 2010 (4CE799C1)
    fffff880`02e46000 fffff880`02e89000 ks ks.sys Sat Nov 20 07:33:23 2010 (4CE7A3F3)
    fffff880`02e89000 fffff880`02ee3000 usbhub usbhub.sys Sat Nov 20 07:44:30 2010 (4CE7A68E)
    fffff880`02eed000 fffff880`02f3e000 rdbss rdbss.sys Sat Nov 20 06:27:51 2010 (4CE79497)
    fffff880`02f3e000 fffff880`02f4a000 nsiproxy nsiproxy.sys Mon Jul 13 20:21:02 2009 (4A5BC15E)
    fffff880`02f4a000 fffff880`02f55000 mssmbios mssmbios.sys Mon Jul 13 20:31:10 2009 (4A5BC3BE)
    fffff880`02f55000 fffff880`02f5f000 HWiNFO64A HWiNFO64A.SYS Sun Nov 23 13:24:07 2014 (54720A27)
    fffff880`02f5f000 fffff880`02f6e000 discache discache.sys Mon Jul 13 20:37:18 2009 (4A5BC52E)
    fffff880`02f6e000 fffff880`02f8c000 dfsc dfsc.sys Sat Nov 20 06:26:31 2010 (4CE79447)
    fffff880`02f8c000 fffff880`02f9d000 blbdrive blbdrive.sys Mon Jul 13 20:35:59 2009 (4A5BC4DF)
    fffff880`02f9d000 fffff880`02fc3000 tunnel tunnel.sys Sat Nov 20 07:51:50 2010 (4CE7A846)
    fffff880`04042000 fffff880`04504000 igdkmd64 igdkmd64.sys Tue Mar 03 14:29:44 2015 (54F5EF88)
    fffff880`04504000 fffff880`045f8000 dxgkrnl dxgkrnl.sys Sat Nov 20 06:50:50 2010 (4CE799FA)
    fffff880`04600000 fffff880`04624000 HDAudBus HDAudBus.sys Sat Nov 20 07:43:42 2010 (4CE7A65E)
    fffff880`04624000 fffff880`0463f000 raspppoe raspppoe.sys Mon Jul 13 21:10:17 2009 (4A5BCCE9)
    fffff880`0463f000 fffff880`04660000 raspptp raspptp.sys Sat Nov 20 07:52:31 2010 (4CE7A86F)
    fffff880`04660000 fffff880`0467a000 rassstp rassstp.sys Mon Jul 13 21:10:25 2009 (4A5BCCF1)
    fffff880`0467a000 fffff880`0468c000 umbus umbus.sys Sat Nov 20 07:44:37 2010 (4CE7A695)
    fffff880`04692000 fffff880`04759000 iusb3xhc iusb3xhc.sys Fri May 30 10:16:48 2014 (538884C0)
    fffff880`04759000 fffff880`0475af00 USBD USBD.SYS Mon Jul 13 21:06:23 2009 (4A5BCBFF)
    fffff880`0475b000 fffff880`0477e000 TeeDriverx64 TeeDriverx64.sys Tue Sep 23 17:01:14 2014 (5421D18A)
    fffff880`0477e000 fffff880`0478f000 usbehci usbehci.sys Sat Nov 20 07:43:54 2010 (4CE7A66A)
    fffff880`0478f000 fffff880`047e5000 USBPORT USBPORT.SYS Sat Nov 20 07:44:00 2010 (4CE7A670)
    fffff880`047e5000 fffff880`047fa000 NDProxy NDProxy.SYS Sat Nov 20 07:52:20 2010 (4CE7A864)
    fffff880`04881000 fffff880`0491a000 srv srv.sys Sat Nov 20 06:28:05 2010 (4CE794A5)
    fffff880`0491a000 fffff880`0494b000 WUDFRd WUDFRd.sys Sat Nov 20 07:43:32 2010 (4CE7A654)
    fffff880`0494b000 fffff880`04955000 INETMON INETMON.sys Thu Apr 03 13:50:43 2014 (533D9163)
    fffff880`04955000 fffff880`0495f000 speedfan speedfan.sys Sat Dec 29 17:59:35 2012 (50DF59B7)
    fffff880`0495f000 fffff880`049d0000 spsys spsys.sys Mon May 11 14:20:58 2009 (4A085E7A)
    fffff880`04a00000 fffff880`04a2f000 ndiswan ndiswan.sys Sat Nov 20 07:52:32 2010 (4CE7A870)
    fffff880`04a2f000 fffff880`04a3e000 mouclass mouclass.sys Mon Jul 13 20:19:50 2009 (4A5BC116)
    fffff880`04a3e000 fffff880`04a3f480 swenum swenum.sys Mon Jul 13 21:00:18 2009 (4A5BCA92)
    fffff880`04a42000 fffff880`04b34000 Rt64win7 Rt64win7.sys Thu Jan 15 03:06:44 2015 (54B758F4)
    fffff880`04b34000 fffff880`04b52000 i8042prt i8042prt.sys Mon Jul 13 20:19:57 2009 (4A5BC11D)
    fffff880`04b52000 fffff880`04b5b000 ikbevent ikbevent.sys Fri Jan 10 14:52:53 2014 (52D03375)
    fffff880`04b5b000 fffff880`04b6a000 kbdclass kbdclass.sys Mon Jul 13 20:19:50 2009 (4A5BC116)
    fffff880`04b6a000 fffff880`04b76000 serenum serenum.sys Mon Jul 13 21:00:33 2009 (4A5BCAA1)
    fffff880`04b76000 fffff880`04b7f000 wmiacpi wmiacpi.sys Mon Jul 13 20:31:02 2009 (4A5BC3B6)
    fffff880`04b7f000 fffff880`04b95000 intelppm intelppm.sys Mon Jul 13 20:19:25 2009 (4A5BC0FD)
    fffff880`04b95000 fffff880`04ba5000 ISCTD ISCTD.sys Wed Jan 22 16:37:35 2014 (52E01DFF)
    fffff880`04ba5000 fffff880`04bb5000 CompositeBus CompositeBus.sys Sat Nov 20 07:33:17 2010 (4CE7A3ED)
    fffff880`04bb5000 fffff880`04bcb000 AgileVpn AgileVpn.sys Mon Jul 13 21:10:24 2009 (4A5BCCF0)
    fffff880`04bcb000 fffff880`04bef000 rasl2tp rasl2tp.sys Sat Nov 20 07:52:34 2010 (4CE7A872)
    fffff880`04bef000 fffff880`04bfb000 ndistapi ndistapi.sys Mon Jul 13 21:10:00 2009 (4A5BCCD8)
    fffff880`04e3b000 fffff880`04e9d000 iusb3hub iusb3hub.sys Fri May 30 10:16:45 2014 (538884BD)
    fffff880`04e9d000 fffff880`04f66000 HTTP HTTP.sys Sat Nov 20 06:24:30 2010 (4CE793CE)
    fffff880`04f66000 fffff880`04f84000 bowser bowser.sys Mon Jul 13 20:23:50 2009 (4A5BC206)
    fffff880`04f84000 fffff880`04f9c000 mpsdrv mpsdrv.sys Mon Jul 13 21:08:25 2009 (4A5BCC79)
    fffff880`04f9c000 fffff880`04fc9000 mrxsmb mrxsmb.sys Sat Nov 20 06:27:41 2010 (4CE7948D)
    fffff880`05000000 fffff880`05013000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 20:21:51 2009 (4A5BC18F)
    fffff880`05013000 fffff880`05021000 monitor monitor.sys Mon Jul 13 20:38:52 2009 (4A5BC58C)
    fffff880`05021000 fffff880`05044000 luafv luafv.sys Mon Jul 13 20:26:13 2009 (4A5BC295)
    fffff880`05044000 fffff880`05065000 WudfPf WudfPf.sys Sat Nov 20 07:42:44 2010 (4CE7A624)
    fffff880`05065000 fffff880`0507a000 lltdio lltdio.sys Mon Jul 13 21:08:50 2009 (4A5BCC92)
    fffff880`0507a000 fffff880`05092000 rspndr rspndr.sys Mon Jul 13 21:08:50 2009 (4A5BCC92)
    fffff880`05093000 fffff880`054cad00 RTKVHD64 RTKVHD64.sys Tue Mar 10 07:19:23 2015 (54FEC52B)
    fffff880`054cb000 fffff880`05508000 portcls portcls.sys Mon Jul 13 21:06:27 2009 (4A5BCC03)
    fffff880`05508000 fffff880`0552a000 drmk drmk.sys Mon Jul 13 22:01:25 2009 (4A5BD8E5)
    fffff880`0552a000 fffff880`0552f200 ksthunk ksthunk.sys Mon Jul 13 21:00:19 2009 (4A5BCA93)
    fffff880`05530000 fffff880`0553e000 hidusb hidusb.sys Sat Nov 20 07:43:49 2010 (4CE7A665)
    fffff880`0553e000 fffff880`05557000 HIDCLASS HIDCLASS.SYS Sat Nov 20 07:43:49 2010 (4CE7A665)
    fffff880`05557000 fffff880`0555f080 HIDPARSE HIDPARSE.SYS Mon Jul 13 21:06:17 2009 (4A5BCBF9)
    fffff880`05560000 fffff880`0557b000 USBSTOR USBSTOR.SYS Sat Nov 20 07:44:05 2010 (4CE7A675)
    fffff880`0557b000 fffff880`05588000 mouhid mouhid.sys Mon Jul 13 21:00:20 2009 (4A5BCA94)
    fffff880`05588000 fffff880`05591000 imsevent imsevent.sys Fri Jan 10 14:52:53 2014 (52D03375)
    fffff880`05591000 fffff880`0559d000 Dxapi Dxapi.sys Mon Jul 13 20:38:28 2009 (4A5BC574)
    fffff880`0559d000 fffff880`055d3000 fastfat fastfat.SYS Mon Jul 13 20:23:28 2009 (4A5BC1F0)
    fffff880`055d3000 fffff880`055e1000 crashdmp crashdmp.sys Mon Jul 13 21:01:01 2009 (4A5BCABD)
    fffff880`055e1000 fffff880`055ed000 dump_dumpata dump_dumpata.sys Mon Jul 13 20:19:47 2009 (4A5BC113)
    fffff880`055ed000 fffff880`055f6000 dump_atapi dump_atapi.sys Mon Jul 13 20:19:47 2009 (4A5BC113)
    fffff960`000a0000 fffff960`003b0000 win32k win32k.sys unavailable (00000000)
    fffff960`00430000 fffff960`0043a000 TSDDD TSDDD.dll unavailable (00000000)
    fffff960`007a0000 fffff960`007c7000 cdd cdd.dll unavailable (00000000)

    Unloaded modules:
    fffff880`01ba7000 fffff880`01bb5000 crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    fffff880`01bb5000 fffff880`01bc1000 dump_ataport
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000C000
    fffff880`01bc1000 fffff880`01bca000 dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00009000
    fffff880`01bca000 fffff880`01bdd000 dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00013000
    Closing open log file c:debuglog.txt


    Already Thanks.. :)
     
  12. 2015/04/14
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Start by testing your memory. Run Memtest86.

    The Windows 7 DVD also includes a memory testing option called Windows Memory Diagnostic which can be accessed by booting off your Windows DVD, choosing your language/keyboard options, and clicking the link Repair your computer at the bottom left on the Install Now screen. When prompted select your Windows Installation and click Next, here you can select the Windows Memory Diagnostic option.

    *) Windows Memory Diagnostic Note: Windows Memory Diagnostic is limited to testing only the first 4 gigabytes (GB) of RAM. If you have more than 4 GB of RAM, the remaining RAM after the first 4 GB will not be tested by Windows Memory Diagnostic.


    Memory Testing Note:


    To work around the above, test the installed RAM in various configurations. If you have a single module, swap it around the slots. If you have a pair of modules, run each one singly, swapping between slots; and then run them in pairs swapping between pairs of slots. If you have 2 sets of matched modules do not get them mixed up.
     
  13. 2015/04/15
    fochi11

    fochi11 Inactive Thread Starter

    Joined:
    2015/04/08
    Messages:
    7
    Likes Received:
    0
    Hi! Thanks for the response. :)

    I test the only Mem Ram that I have with Windows Memory Diagnostic (no errors) and about 2 hours with MemTest, all test passed with no errors.. I really don't know what to think :confused: Any idea? Already thanks..
     
  14. 2015/04/16
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Post your malware logs like I mentioned earlier. You've been running a vulnerable system for a long time.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.