Strange Problem [XP x64 - dump data posted]

Hey all, I have a strange problem with windows xp pro x64.

I have been running it for a while now and have had a few problems mainly blue screens, but the problem now is that some of windows had disappeared.
If I right click on my computer and got to properties some of the tabs have vanished from the window.


Also when I click on network connections nothing happens, and if I hover over wither the:
Administrative Tools
Network Connections
Scanners And Cameras
Scheduled Tasks
I get the windows error message beep.


I haven’t installed anything new and I use Avast Antivirus and Tiny Firewall, and the system is spyware free.
Does anyone have any idea what the crazy computer is doing?

Thanks Lee

 

Suspect something is chipping away at windows. Suggest you do one or two online scans; find good ones by clicking Links in my signature and paging down. Probably no connection, but not sure why you use Tiny firewall when XP has one. That combined with the added protection provided by the 64-bit athlon and a hardware firewall in my DSL modem has sufficed for me.

Blue SODs must be rare in x64; have never seen one. Think you may be headed for a reinstall, but would try to find the cause first. Check out the 'stickies' at the top of the general security forum.

 

The virus scans came back fine.

I could re instal windows but then i would have to re activate it, which is fine but i can only activate this version one more time is there any way to keep the activation when re installing?

 

Can you post the details on one of the blue screens? If necessary, go to start > my computer > properties > advanced tab > startup and recovery settings button > uncheck automatic restart. so it remains on your monitor.

One other thing would be to download hijackthis.exe and put it in its own folder, like c:\htj\ and run it to save a log and post it here so we can see what's running in the background.

 

Here is the log file

Logfile of HijackThis v1.99.1
Scan saved at 10:57:13, on 16/04/2006
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)

Running processes:
C:\Program Files (x86)\Common Files\PFShared\UmxCfg.exe
C:\Programs\Tiny Firewall Pro\UmxFwHlp.exe
C:\Program Files (x86)\Common Files\PFShared\UmxPol.exe
C:\Programs\Tiny Firewall Pro\UmxAgent.exe
C:\Programs\Tiny Firewall Pro\UmxTray.exe
E:\Programs\Apache Group\Apache2\bin\Apache.exe
C:\Programs\Avast4\aswUpdSv.exe
E:\Programs\Apache Group\Apache2\bin\Apache.exe
C:\Programs\Avast4\ashServ.exe
C:\Programs\Alias\Maya7.0\docs\wrapper.exe
C:\Programs\Alias\Maya7.0\docs\jre\bin\java.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
E:\Programs\Apache Group\mysql\bin\mysqld-nt.exe
C:\Programs\Avast4\ashMaiSv.exe
C:\Programs\Avast4\ashWebSv.exe
C:\Program Files (x86)\Google\Google Talk\googletalk.exe
C:\Program Files (x86)\MSN Messenger\MsnMsgr.Exe
C:\Programs\Audio Deck\EnMixCPL.exe
C:\Programs\DAEMON Tools\daemon.exe
C:\Program Files (x86)\Java\jre1.5.0_06\bin\jusched.exe
C:\Programs\Avast4\ashDisp.exe
C:\Programs\Logitech\SetPoint\x86\SetPoint32.exe
C:\WINDOWS\SysWOW64\svchost.exe
C:\Programs\Firefox\firefox.exe
C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\Programs\MediaMonkey\MediaMonkey (non-skinned).exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Administrator\Desktop\hijack this\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [EnvyHFCPL] C:\Programs\Audio Deck\EnMixCPL.exe 1
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programs\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.5.0_06\bin\jusched.exe "
O4 - HKLM\..\Run: [avast!] C:\Programs\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [PeerGuardian] C:\Programs\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [Skype] "C:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [googletalk] "C:\Program Files (x86)\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AMonitor] cmd.exe /C "CD "C:\Programs\Tiny Firewall Pro\" && START /D "C:\Programs\Tiny Firewall Pro\" amon.exe "
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: hamachi.lnk = C:\Programs\Hamachi\hamachi.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programs\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Programs\MICROS~2\OFFICE12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programs\MICROS~2\OFFICE12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143581410421
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1143581818156
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~2\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~2\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: talkto - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~2\MSNMES~1\msgrapp.dll" (file missing)
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: dimsntfy - C:\WINDOWS\SYSTEM32\dimsntfy.dll
O20 - Winlogon Notify: EFS - C:\WINDOWS\SYSTEM32\sclgntfy.dll
O20 - Winlogon Notify: PFW - C:\WINDOWS\SYSTEM32\UmxWnp.Dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - E:\Programs\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programs\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe (file missing)
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2saag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programs\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programs\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programs\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: Maya 7.0 Documentation Server (maya70docserver) - Unknown owner - C:\Programs\Alias\Maya7.0\docs\wrapper.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - E:\Programs\Apache.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: FW Event Manager (UmxAgent) - Computer Associates International, Inc. - C:\Programs\Tiny Firewall Pro\UmxAgent.exe
O23 - Service: FW Configuration Interpreter (UmxCfg) - Computer Associates International, Inc. - C:\Program Files (x86)\Common Files\PFShared\UmxCfg.exe
O23 - Service: FW user-mode helper (UmxFwHlp) - Computer Associates International, Inc. - C:\Programs\Tiny Firewall Pro\UmxFwHlp.exe
O23 - Service: FW Live Update (UmxLU) - Computer Associates International, Inc. - C:\Program Files (x86)\Common Files\PFShared\umxlu.exe
O23 - Service: FW Policy Manager (UmxPol) - Computer Associates International, Inc. - C:\Program Files (x86)\Common Files\PFShared\UmxPol.exe
O23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)

I have also noticed that i cannot double click on images and preview them i can only right click on them and go to "Open With -> Windows Picture And Fax Viewer "

And when i right click on files none of the context menu items are there only the default ones, i am missing winrar, photoshop, ultraedit on the menus



I dont have a blue screen report yet it hasnt crashed

Remote tab and automatic update are missing from my computer properties

 

The seccond image shows taht when i hover over the administrator tools menu nothing appears the same happens with network connections,scanners and cameras and scheduled tasks

 

It appears that you're doing graphics design and hosting a web site. You have good malware protection and a firewall.

You're way ahead of me in that I'm not familiar with a lot of the software you use. I hope someone more knowledgeable will take a look at you log.. I'll try to say a little from what strikes me. Your log indicates that a number of registry entries point to missing files. Those entries should be fixed by going to safe mode, checking their box in hijackthis, and selecting fix. But suggest you look it over and, for programs like Avast consider reinstalling them to be sure they're complete.

PS - The crashes (BSODs) are usually followed by scandisk, run behind the splash screen in XP. Often this results in damage to and loss of files, both parts of windows and parts of other software, and probably explains what's caused your trouble. The BSODs are often due to driver incompatabilities, so would like to see that solved before you reinstall everything.

 

I have used Hijackthis to try and fix the problems of the missing files.

I can now see the administrator tools menu and my network connections and the context mens have come back.

Another thing i have noticed, all the files which hitack this says are missing are there, like lass.exe its there, if it wasnt i wouldnt be able to log into my computer.

Also if i try to install any program which installs services the installers always fail like Diskeeper or O&O Defrag, when the installers get to the service install part they stop with errors like, "Unable to load resource dll "

 

I am running Windows XP Pro x64
Microsoft Windows [Version 5.2.3790]

I downloaded it from e Academy via my university

 

Please download hjt log from the computer running XP Pro x64 to be sure we're all ont the same topic . It will fit on a floppy.

 

Sorry i think you miss understand, i only have one computer, the log is from this computer

 

I have ran the System File Checker and all my menus have come back. But i have also recorded one of the blue screens

"Modification of system code or critical data structure was detected "

NDIS.SYS

It doesnt seem to be getting any better

 

Here is the dumplog

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Minidump\Mini042406-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
*** WARNING: Unable to verify checksum for ntkrnlmp.exe
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0xfffff800`01000000 PsLoadedModuleList = 0xfffff800`011ad0c0
Debug session time: Mon Apr 24 09:39:50.375 2006 (GMT+1)
System Uptime: 0 days 1:17:31.166
*** WARNING: Unable to verify checksum for ntkrnlmp.exe
Loading Kernel Symbols
..............................................................................................................................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff97fff07e53a, fffffadfdda43b30, 0}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff97fff07e53a, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffadfdda43b30, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
win32k!vSpUpdateSpriteVisRgn+702
fffff97f`ff07e53a ff8b4638443b dec qword ptr [rbx+0x3b443846]

CONTEXT: fffffadfdda43b30 -- (.cxr fffffadfdda43b30)
.cxr fffffadfdda43b30
rax=0000000000000000 rbx=0000000000000161 rcx=00000000000000f8
rdx=0000000000000318 rsi=fffffa80033f3560 rdi=fffffa8002d00670
rip=fffff97fff07e53a rsp=fffffadfdda44340 rbp=0000000000000280
r8=0000000000000161 r9=0000000000000277 r10=0000000000000280
r11=0000000000000277 r12=fffffa80006cb000 r13=fffffa8002280760
r14=0000000000000318 r15=0000000000000318
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
win32k!vSpUpdateSpriteVisRgn+0x702:
fffff97f`ff07e53a ff8b4638443b dec qword ptr [rbx+0x3b443846] ds:002b:00000000`3b4439a7=????????????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: CODE_CORRUPTION

BUGCHECK_STR: 0x3B

CURRENT_IRQL: 0

MISALIGNED_IP:
win32k!vSpUpdateSpriteVisRgn+702
fffff97f`ff07e53a ff8b4638443b dec qword ptr [rbx+0x3b443846]

LAST_CONTROL_TRANSFER: from fffff97fff087795 to fffff97fff07e53a

STACK_TEXT:
fffffadf`dda44340 fffff97f`ff087795 : fffffa80`006cb000 fffffa80`006cb000 00000000`00000000 00000000`00000e6a : win32k!vSpUpdateSpriteVisRgn+0x702
fffffadf`dda44850 fffff97f`ff07d9be : fffff97f`ff3b7b80 fffff97f`f7990000 00000000`00000e6a fffffa80`033ddcb8 : win32k!zzzInvalidateDCCache+0x1b9
fffffadf`dda448a0 fffff97f`ff07d1f8 : fffff97f`ff3b7b80 00000000`00000002 fffffa80`036de870 00000000`00000000 : win32k!zzzBltValidBits+0x277
fffffadf`dda44a00 fffff97f`ff07c618 : 00000000`00000000 00000000`ffffffff 00000000`00000000 fffff97f`f7c79c70 : win32k!xxxEndDeferWindowPosEx+0x1d4
fffffadf`dda44ac0 fffff97f`ff0675a3 : 00000000`00000014 00000000`000a04ce 00000000`ffffffff ffffffff`ffffffff : win32k!xxxSetWindowPos+0x13e
fffffadf`dda44b50 fffff800`0104fce2 : 00000000`78bac380 fffff800`01056e59 00000000`00000000 fffffadf`dda44cf0 : win32k!NtUserSetWindowPos+0x1dd
fffffadf`dda44c00 00000000`78bc5f9a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3
00000000`0012e4b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x78bc5f9a


STACK_COMMAND: .bugcheck ; kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32k
!chkimg -lo 50 -d !win32k
fffff97fff07e51b - win32k!vSpUpdateSpriteVisRgn+6e3
[ 1f:1e ]
1 error : !win32k (fffff97fff07e51b)

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

FOLLOWUP_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MEMORY_CORRUPTOR: ONE_BIT

FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

rax=fffffadfdda43280 rbx=fffffadfdda44c70 rcx=000000000000003b
rdx=00000000c0000005 rsi=0000000000000000 rdi=00000000dda44120
rip=fffff800010501d0 rsp=fffffadfdda43178 rbp=0000000000000000
r8=fffff97fff07e53a r9=fffffadfdda43b30 r10=0000000000000000
r11=fffffadfdda43440 r12=fffffadfdda44120 r13=fffff800011ce44c
r14=0000000000000000 r15=fffff8000104fce2
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000282
nt!KeBugCheckEx:
fffff800`010501d0 48894c2408 mov [rsp+0x8],rcx ss:0018:fffffadf`dda43180=000000000000003b
Child-SP RetAddr : Args to Child : Call Site
fffffadf`dda43178 fffff800`0104fef4 : 00000000`0000003b 00000000`c0000005 fffff97f`ff07e53a fffffadf`dda43b30 : nt!KeBugCheckEx
fffffadf`dda43180 fffff800`0104f9fb : 00000000`00000000 fffff800`01033445 fffffadf`dda43440 00000000`00000000 : nt!KiBugCheckDispatch+0x74
fffffadf`dda43300 fffff800`0105dc0d : fffffadf`dda44120 00000000`dda44120 00000000`00000000 fffffadf`dda44230 : nt!KiSystemServiceHandler+0x7b
fffffadf`dda43340 fffff800`01032b05 : fffffa80`03147bd8 fffffadf`dda44b50 00000000`00000000 00000000`dda44120 : nt!RtlpExecuteHandlerForException+0xd
fffffadf`dda43370 fffff800`01017baa : fffffadf`00000000 fffffadf`dda43b30 fffffadf`dda44120 fffffadf`dda44230 : nt!RtlDispatchException+0x2c0
fffffadf`dda43a30 fffff800`0104ffef : fffffadf`dda44120 fffff97f`ff4da534 fffffadf`dda441b0 fffffa80`03699628 : nt!KiDispatchException+0xd9
fffffadf`dda44030 fffff800`0104eee1 : 00000000`00000e3c fffff800`01183532 00000000`00000000 00000000`00000001 : nt!KiExceptionExit
fffffadf`dda441b0 fffff97f`ff07e53a : fffffa80`02528c60 fffffa80`02d00670 fffffa80`02056a40 fffffa80`02528c60 : nt!KiPageFault+0x1e1 (TrapFrame @ fffffadf`dda441b0)
fffffadf`dda44340 fffff97f`ff087795 : fffffa80`006cb000 fffffa80`006cb000 00000000`00000000 00000000`00000e6a : win32k!vSpUpdateSpriteVisRgn+0x702
fffffadf`dda44850 fffff97f`ff07d9be : fffff97f`ff3b7b80 fffff97f`f7990000 00000000`00000e6a fffffa80`033ddcb8 : win32k!zzzInvalidateDCCache+0x1b9
fffffadf`dda448a0 fffff97f`ff07d1f8 : fffff97f`ff3b7b80 00000000`00000002 fffffa80`036de870 00000000`00000000 : win32k!zzzBltValidBits+0x277
fffffadf`dda44a00 fffff97f`ff07c618 : 00000000`00000000 00000000`ffffffff 00000000`00000000 fffff97f`f7c79c70 : win32k!xxxEndDeferWindowPosEx+0x1d4
fffffadf`dda44ac0 fffff97f`ff0675a3 : 00000000`00000014 00000000`000a04ce 00000000`ffffffff ffffffff`ffffffff :

 

win32k!xxxSetWindowPos+0x13e
fffffadf`dda44b50 fffff800`0104fce2 : 00000000`78bac380 fffff800`01056e59 00000000`00000000 fffffadf`dda44cf0 : win32k!NtUserSetWindowPos+0x1dd
fffffadf`dda44c00 00000000`78bc5f9a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x3 (TrapFrame @ fffffadf`dda44c70)
00000000`0012e4b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x78bc5f9a
start end module name
fffff800`00800000 fffff800`0085e000 hal hal.dll Fri Mar 25 00:39:38 2005 (42435DCA)
fffff800`01000000 fffff800`0146e000 nt ntkrnlmp.exe Fri Mar 25 00:53:55 2005 (42436123)
fffff97f`ff000000 fffff97f`ff45d000 win32k win32k.sys Thu Oct 06 01:28:14 2005 (43446F9E)
fffff97f`ff45d000 fffff97f`ff484000 dxg dxg.sys Fri Mar 25 03:54:35 2005 (42438B7B)
fffff97f`ff484000 fffff97f`ff4ee000 ati2dvag ati2dvag.dll Wed Feb 22 03:47:39 2006 (43FBDEDB)
fffff97f`ff4ee000 fffff97f`ff54f000 ati2cqag ati2cqag.dll Wed Feb 22 03:06:26 2006 (43FBD532)
fffff97f`ff54f000 fffff97f`ff596000 atikvmag atikvmag.dll Wed Feb 22 03:11:21 2006 (43FBD659)
fffff97f`ff596000 fffff97f`ff921600 ati3duag ati3duag.dll Wed Feb 22 03:38:10 2006 (43FBDCA2)
fffff97f`ff922000 fffff97f`ff9ee900 ativvaxx ativvaxx.dll Wed Feb 22 03:24:54 2006 (43FBD986)
fffffadf`dd9c1000 fffffadf`dd9f9000 kmixer kmixer.sys Fri Mar 25 00:43:18 2005 (42435EA6)
fffffadf`ddd7d000 fffffadf`dddbb000 RDPWD RDPWD.SYS Wed Jun 15 01:20:27 2005 (42AF744B)
fffffadf`dde01000 fffffadf`dde15000 ipfltdrv ipfltdrv.sys Fri Mar 25 00:43:54 2005 (42435ECA)
fffffadf`dde62000 fffffadf`dde68000 pgfilter pgfilter.sys Mon Sep 19 02:02:21 2005 (432E0E1D)
fffffadf`de53e000 fffffadf`de54c000 TDTCP TDTCP.SYS Fri Mar 25 00:37:52 2005 (42435D60)
fffffadf`deb1a000 fffffadf`debe4000 srv srv.sys Wed May 04 03:44:13 2005 (427836FD)
fffffadf`df2a4000 fffffadf`df334000 HTTP HTTP.sys Fri Mar 25 00:52:42 2005 (424360DA)
fffffadf`dff46000 fffffadf`dff65000 aswMon2 aswMon2.SYS Fri Jan 27 23:05:26 2006 (43DAA736)
fffffadf`dfff1000 fffffadf`e003a000 mrxdav mrxdav.sys Fri Mar 25 00:40:14 2005 (42435DEE)
fffffadf`e0193000 fffffadf`e01be000 sysaudio sysaudio.sys Fri Mar 25 00:50:34 2005 (4243605A)
fffffadf`e01be000 fffffadf`e01f2000 wdmaud wdmaud.sys Fri Mar 25 00:50:50 2005 (4243606A)
fffffadf`e08aa000 fffffadf`e08c0000 KmxSbx KmxSbx.sys Wed Aug 24 03:51:52 2005 (430BE0C8)
fffffadf`e2b1e000 fffffadf`e2b48000 dump_nvata64 dump_nvata64.sys Fri Aug 19 01:54:11 2005 (43052DB3)
fffffadf`e2bc8000 fffffadf`e2bd3000 KmxBiG KmxBiG.sys Tue Jul 12 04:14:31 2005 (42D33597)
fffffadf`e2be8000 fffffadf`e2c09000 Cdfs Cdfs.SYS Fri Mar 25 00:50:49 2005 (42436069)
fffffadf`e2c09000 fffffadf`e2cd5000 mrxsmb mrxsmb.sys Fri Mar 25 00:52:07 2005 (424360B7)
fffffadf`e2cd5000 fffffadf`e2d26000 rdbss rdbss.sys Fri Mar 25 00:52:51 2005 (424360E3)
fffffadf`e2d26000 fffffadf`e2d74000 afd afd.sys Fri Mar 25 00:52:53 2005 (424360E5)
fffffadf`e2d74000 fffffadf`e2d9a000 LMouKE LMouKE.Sys Thu Nov 03 22:24:08 2005 (436A8E08)
fffffadf`e2d9a000 fffffadf`e2dfd000 netbt netbt.sys Fri Mar 25 00:53:49 2005 (4243611D)
fffffadf`e2dfd000 fffffadf`e2e35000 ipnat ipnat.sys Fri Mar 25 00:43:59 2005 (42435ECF)
fffffadf`e2e35000 fffffadf`e2ef6000 tcpip tcpip.sys Fri Jan 13 02:00:08 2006 (43C709A8)
fffffadf`e2ef6000 fffffadf`e2f21000 ipsec ipsec.sys Fri Mar 25 00:55:00 2005 (42436164)
fffffadf`e2f67000 fffffadf`e2f7b000 Npfs Npfs.SYS Fri Mar 25 00:40:08 2005 (42435DE8)
fffffadf`e2f7b000 fffffadf`e2f90000 HIDCLASS HIDCLASS.SYS Fri Mar 25 00:43:28 2005 (42435EB0)
fffffadf`e2f90000 fffffadf`e2fa5000 LHidUsbK LHidUsbK.Sys Thu Nov 03 22:23:05 2005 (436A8DC9)
fffffadf`e2ff5000 fffffadf`e2ffe000 dump_WMILIB dump_WMILIB.SYS Fri Mar 25 00:43:56 2005 (42435ECC)
fffffadf`e3065000 fffffadf`e308f800 kmxids kmxids.sys Thu Aug 11 14:31:15 2005 (42FB5323)
fffffadf`e3090000 fffffadf`e30b1000 kmxcfg kmxcfg.sys Tue Aug 23 17:41:01 2005 (430B519D)
fffffadf`e30b1000 fffffadf`e30c6000 kmxagent kmxagent.sys Fri Jul 01 15:17:44 2005 (42C55088)
fffffadf`e30c6000 fffffadf`e30e5100 kmxfw kmxfw.sys Tue Aug 16 11:42:31 2005 (4301C317)
fffffadf`e314c000 fffffadf`e3160000 NDProxy NDProxy.SYS Fri Mar 25 00:44:07 2005 (42435ED7)
fffffadf`e3160000 fffffadf`e3180000 usbhub usbhub.sys Fri Mar 25 00:43:35 2005 (42435EB7)
fffffadf`e3180000 fffffadf`e3196000 termdd termdd.sys Fri Mar 25 00:37:51 2005 (42435D5F)
fffffadf`e3196000 fffffadf`e31ec000 rdpdr rdpdr.sys Fri Mar 25 00:40:26 2005 (42435DFA)
fffffadf`e321c000 fffffadf`e3227000 Aavmker4 Aavmker4.SYS Fri Jan 27 23:00:48 2006 (43DAA620)
fffffadf`e323c000 fffffadf`e3246000 mouhid mouhid.sys Fri Mar 25 00:38:12 2005 (42435D74)
fffffadf`e324c000 fffffadf`e325a000 aswTdi aswTdi.SYS Fri Jan 27 23:02:42 2006 (43DAA692)
fffffadf`e325c000 fffffadf`e3268000 kbdhid kbdhid.sys Fri Mar 25 00:38:12 2005 (42435D74)
fffffadf`e326c000 fffffadf`e3276000 rasacd rasacd.sys Fri Mar 25 00:44:16 2005 (42435EE0)
fffffadf`e327c000 fffffadf`e3289000 Msfs Msfs.SYS Fri Mar 25 00:40:07 2005 (42435DE7)
fffffadf`e328c000 fffffadf`e32a2000 msgpc msgpc.sys Fri Mar 25 00:43:36 2005 (42435EB8)
fffffadf`e32a2000 fffffadf`e32c2000 psched psched.sys Fri Mar 25 00:43:39 2005 (42435EBB)
fffffadf`e32c2000 fffffadf`e32e5000 raspptp raspptp.sys Fri Mar 25 00:54:55 2005 (4243615F)
fffffadf`e32e5000 fffffadf`e32f9000 raspppoe raspppoe.sys Fri Mar 25 00:44:12 2005 (42435EDC)
fffffadf`e32f9000 fffffadf`e3325000 ndiswan ndiswan.sys Fri Mar 25 00:54:57 2005 (42436161)
fffffadf`e3325000 fffffadf`e334b000 rasl2tp rasl2tp.sys Fri Mar 25 00:54:11 2005 (42436133)
fffffadf`e334b000 fffffadf`e3370000 parport parport.sys Fri Mar 25 00:38:46 2005 (42435D96)
fffffadf`e3370000 fffffadf`e3393000 serial serial.sys Fri Mar 25 00:38:54 2005 (42435D9E)
fffffadf`e3393000 fffffadf`e33c4000 SCSIPORT SCSIPORT.SYS Fri Mar 25 00:50:37 2005 (4243605D)
fffffadf`e33c4000 fffffadf`e341b000 dtscsi dtscsi.sys Sat Dec 10 15:06:04 2005 (439AEEDC)
fffffadf`e341b000 fffffadf`e343e000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 00:42:27 2005 (42435E73)
fffffadf`e343e000 fffffadf`e366c000 ati2mtag ati2mtag.sys Wed Feb 22 03:47:13 2006 (43FBDEC1)
fffffadf`e366c000 fffffadf`e36b6000 NVSNPU NVSNPU.SYS Wed Apr 06 11:24:21 2005 (4253B8D5)
fffffadf`e36b6000 fffffadf`e3712b80 NVNRM NVNRM.SYS Wed Apr 06 11:24:30 2005 (4253B8DE)
fffffadf`e3713000 fffffadf`e3753000 portcls portcls.sys Fri Mar 25 00:50:48 2005 (42436068)
fffffadf`e3753000 fffffadf`e377a500 Envy24HF Envy24HF.sys Wed Apr 06 11:07:18 2005 (4253B4D6)
fffffadf`e37c1000 fffffadf`e380a000 ks ks.sys Fri Mar 25 00:51:08 2005 (4243607C)
fffffadf`e380a000 fffffadf`e3820000 redbook redbook.sys Fri Mar 25 00:39:21 2005 (42435DB9)
fffffadf`e3820000 fffffadf`e383b000 cdrom cdrom.sys Fri Mar 25 00:39:39 2005 (42435DCB)
fffffadf`e383b000 fffffadf`e3852000 imapi imapi.sys Fri Mar 25 00:40:04 2005 (42435DE4)
fffffadf`e3852000 fffffadf`e388c000 USBPORT USBPORT.SYS Fri Mar 25 00:43:32 2005 (42435EB4)
fffffadf`e398f000 fffffadf`e3995800 LUsbKbd LUsbKbd.Sys Thu Nov 03 22:23:13 2005 (436A8DD1)
fffffadf`e39c7000 fffffadf`e39ce000 Beep Beep.SYS Fri Mar 25 00:38:06 2005 (42435D6E)
fffffadf`e3c23000 fffffadf`e3c3df00 kmxndis kmxndis.sys Tue Aug 16 11:42:52 2005 (4301C32C)
fffffadf`e3c3e000 fffffadf`e3c74000 Mup Mup.sys Fri Mar 25 00:52:51 2005 (424360E3)
fffffadf`e3c74000 fffffadf`e3c8c000 sfdrv01 sfdrv01.sys Wed Aug 10 13:46:19 2005 (42F9F71B)
fffffadf`e3c8c000 fffffadf`e3ca7000 sfvfs02 sfvfs02.sys Thu Sep 29 18:02:39 2005 (433C1E2F)
fffffadf`e3ca7000 fffffadf`e3d02000 NDIS NDIS.sys Fri Mar 25 00:53:38 2005 (42436112)
fffffadf`e3d02000 fffffadf`e3e1a000 Ntfs Ntfs.sys Fri Mar 25 00:51:14 2005 (42436082)
fffffadf`e3e1a000 fffffadf`e3e4d000 KSecDD KSecDD.sys Fri Mar 25 00:40:20 2005 (42435DF4)
fffffadf`e3e4d000 fffffadf`e3e8a000 fltMgr fltMgr.sys Fri Mar 25 00:40:28 2005 (42435DFC)
fffffadf`e3e8a000 fffffadf`e3ea9000 CLASSPNP CLASSPNP.SYS Fri Mar 25 00:50:34 2005 (4243605A)
fffffadf`e3ea9000 fffffadf`e3ebe000 disk disk.sys Fri Mar 25 00:39:36 2005 (42435DC8)
fffffadf`e3ebe000 fffffadf`e3ee8000 nvata64 nvata64.sys Fri Aug 19 01:54:11 2005 (43052DB3)
fffffadf`e3ee8000 fffffadf`e3f15000 atapi atapi.sys Fri Mar 25 00:39:30 2005 (42435DC2)
fffffadf`e3f15000 fffffadf`e3f60000 volsnap volsnap.sys Fri Mar 25 00:40:09 2005 (42435DE9)
fffffadf`e3f60000 fffffadf`e3fa6000 dmio dmio.sys Fri Mar 25 00:42:32 2005 (42435E78)
fffffadf`e3fa6000 fffffadf`e3fe6000 ftdisk ftdisk.sys Fri Mar 25 00:39:53 2005 (42435DD9)
fffffadf`e3fe6000 fffffadf`e3ffc000 MountMgr MountMgr.sys Fri Mar 25 00:38:07 2005 (42435D6F)
fffffadf`e3ffc000 fffffadf`e400fa00 1394BUS 1394BUS.SYS Fri Mar 25 00:43:44 2005 (42435EC0)
fffffadf`e4010000 fffffadf`e4026c80 ohci1394 ohci1394.sys Fri Mar 25 00:43:44 2005 (42435EC0)
fffffadf`e4027000 fffffadf`e4048000 pci pci.sys Fri Mar 25 00:43:33 2005 (42435EB5)
fffffadf`e4048000 fffffadf`e409c000 ACPI ACPI.sys Fri Mar 25 00:43:26 2005 (42435EAE)
fffffadf`e409c000 fffffadf`e40cd000 SPTD1093 SPTD1093.SYS Fri Mar 25 00:50:37 2005 (4243605D)
fffffadf`e40cd000 fffffadf`e41f2000 sptd sptd.sys Sat Dec 03 13:31:46 2005 (43919E42)
fffffadf`e42f3000 fffffadf`e4304000 processr processr.sys Fri Mar 25 00:39:37 2005 (42435DC9)
fffffadf`e4306000 fffffadf`e4318000 LHidKE LHidKE.Sys Thu Nov 03 22:24:23 2005 (436A8E17)
fffffadf`e4319000 fffffadf`e432b000 wanarp wanarp.sys Fri Mar 25 00:44:05 2005 (42435ED5)
fffffadf`e432c000 fffffadf`e433e000 netbios netbios.sys Fri Mar 25 00:43:27 2005 (42435EAF)
fffffadf`e433f000 fffffadf`e4351000 KmxFile KmxFile.sys Tue Jul 12 04:15:10 2005 (42D335BE)
fffffadf`e4352000 fffffadf`e4364000 Fips Fips.SYS Fri Mar 25 00:43:13 2005 (42435EA1)
fffffadf`e45fb000 fffffadf`e4605000 kdcom kdcom.dll Fri Mar 25 03:54:15 2005 (42438B67)
fffffadf`e460b000 fffffadf`e4614000 BOOTVID BOOTVID.dll Fri Mar 25 03:54:04 2005 (42438B5C)
fffffadf`e461b000 fffffadf`e4624000 WMILIB WMILIB.SYS Fri Mar 25 00:43:56 2005 (42435ECC)
fffffadf`e462b000 fffffadf`e4634000 isapnp isapnp.sys Fri Mar 25 00:43:32 2005 (42435EB4)
fffffadf`e463b000 fffffadf`e464b000 PCIIDEX PCIIDEX.SYS Fri Mar 25 00:39:25 2005 (42435DBD)
fffffadf`e464b000 fffffadf`e465b000 PartMgr PartMgr.sys Fri Mar 25 00:50:42 2005 (42436062)
fffffadf`e465b000 fffffadf`e4665000 sfsync02 sfsync02.sys Wed Aug 10 15:07:22 2005 (42FA0A1A)
fffffadf`e466b000 fffffadf`e4676000 crcdisk crcdisk.sys Fri Mar 25 00:42:06 2005 (42435E5E)
fffffadf`e468b000 fffffadf`e4699000 fdc fdc.sys Fri Mar 25 00:39:10 2005 (42435DAE)
fffffadf`e46bb000 fffffadf`e46c7000 serenum serenum.sys Fri Mar 25 00:38:50 2005 (42435D9A)
fffffadf`e46cb000 fffffadf`e46d5000 ndistapi ndistapi.sys Fri Mar 25 00:44:06 2005 (42435ED6)
fffffadf`e46db000 fffffadf`e46ea000 TDI TDI.SYS Fri Mar 25 00:46:57 2005 (42435F81)
fffffadf`e46eb000 fffffadf`e46f8000 ptilink ptilink.sys Fri Mar 25 00:38:44 2005 (42435D94)
fffffadf`e46fb000 fffffadf`e4706000 raspti raspti.sys Fri Mar 25 00:44:11 2005 (42435EDB)
fffffadf`e470b000 fffffadf`e4719000 kbdclass kbdclass.sys Fri Mar 25 00:38:09 2005 (42435D71)
fffffadf`e471b000 fffffadf`e4728000 mouclass mouclass.sys Fri Mar 25 00:38:09 2005 (42435D71)
fffffadf`e472b000 fffffadf`e473b000 update update.sys Fri Mar 25 00:38:07 2005 (42435D6F)
fffffadf`e473b000 fffffadf`e4748000 mssmbios mssmbios.sys Fri Mar 25 00:43:35 2005 (42435EB7)
fffffadf`e474b000 fffffadf`e4757a00 NVENETFD NVENETFD.sys Wed Apr 06 11:24:41 2005 (4253B8E9)
fffffadf`e477b000 fffffadf`e4787000 flpydisk flpydisk.sys Fri Mar 25 00:39:10 2005 (42435DAE)
fffffadf`e47bb000 fffffadf`e47c5000 Fs_Rec Fs_Rec.SYS Fri Mar 25 00:39:42 2005 (42435DCE)
fffffadf`e47cb000 fffffadf`e47d6000 ndisuio ndisuio.sys Fri Mar 25 00:43:19 2005 (42435EA7)
fffffadf`e47db000 fffffadf`e47e5600 usbccgp usbccgp.sys Fri Mar 25 00:43:37 2005 (42435EB9)
fffffadf`e47eb000 fffffadf`e47f7000 Dxapi Dxapi.sys Fri Mar 25 00:39:08 2005 (42435DAC)
fffffadf`e47fb000 fffffadf`e4805200 HIDPARSE HIDPARSE.SYS Fri Mar 25 00:43:26 2005 (42435EAE)
fffffadf`e480b000 fffffadf`e4819000 vga vga.sys Fri Mar 25 00:42:24 2005 (42435E70)
fffffadf`e481b000 fffffadf`e4825000 mnmdd mnmdd.SYS Fri Mar 25 00:42:22 2005 (42435E6E)
fffffadf`e482b000 fffffadf`e4835000 RDPCDD RDPCDD.sys Fri Mar 25 00:38:04 2005 (42435D6C)
fffffadf`e483b000 fffffadf`e4845980 usbehci usbehci.sys Fri Mar 25 00:43:31 2005 (42435EB3)
fffffadf`e484b000 fffffadf`e4856000 nvnetbus nvnetbus.sys Wed Apr 06 11:24:43 2005 (4253B8EB)
fffffadf`e485b000 fffffadf`e4864000 watchdog watchdog.sys Fri Mar 25 00:43:05 2005 (42435E99)
fffffadf`e486b000 fffffadf`e4873000 sfhlp02 sfhlp02.sys Mon May 16 14:21:16 2005 (42889E4C)
fffffadf`e48b3000 fffffadf`e48bb000 CdaD10BA CdaD10BA.sys Wed Dec 10 15:11:51 2003 (3FD737B7)
fffffadf`e4933000 fffffadf`e493b000 secdrv secdrv.sys Thu Apr 01 12:26:05 2004 (406BFC4D)
fffffadf`e497b000 fffffadf`e4983000 Null Null.SYS Fri Mar 25 00:38:07 2005 (42435D6F)
fffffadf`e49db000 fffffadf`e49e3000 audstub audstub.sys Fri Mar 25 00:43:08 2005 (42435E9C)
fffffadf`e49fb000 fffffadf`e4a02000 pciide pciide.sys Fri Mar 25 00:39:26 2005 (42435DBE)
fffffadf`e4a02000 fffffadf`e4a09000 dmload dmload.sys Fri Mar 25 00:42:29 2005 (42435E75)
fffffadf`e4b7c000 fffffadf`e4b82700 usbohci usbohci.sys Fri Mar 25 00:43:33 2005 (42435EB5)
fffffadf`e4bc9000 fffffadf`e4bcee80 ksthunk ksthunk.sys Fri Mar 25 00:38:16 2005 (42435D78)
fffffadf`e4e09000 fffffadf`e4e0a400 swenum swenum.sys Fri Mar 25 00:38:18 2005 (42435D7A)
fffffadf`e4e11000 fffffadf`e4e12d80 USBD USBD.SYS Fri Mar 25 00:43:30 2005 (42435EB2)

Unloaded modules:
fffffadf`dd9c1000 fffffadf`dd9f9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`de328000 fffffadf`de32b000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`dda7f000 fffffadf`ddab7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e4993000 fffffadf`e499b000 hamachi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e010c000 fffffadf`e0144000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e0144000 fffffadf`e015e000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e015e000 fffffadf`e0193000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e4cfb000 fffffadf`e4cfe000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e47eb000 fffffadf`e47f7000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e2fa8000 fffffadf`e2fc5000 i8042prt.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffadf`e478b000 fffffadf`e4794000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt