1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved Bsod irql_not_less_or_equal

Discussion in 'Windows XP' started by klokslag, 2011/06/14.

  1. 2011/06/14
    klokslag

    klokslag Inactive Thread Starter

    Joined:
    2011/06/14
    Messages:
    3
    Likes Received:
    0
    I have some computers that crashed and they get the same dump log.
    The computers are DELL OptiPlex 755
    Who can help me to find the error and why.

    Here is the dump results:

    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\bjc\Bureaublad\Mini061411-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp3_gdr.101209-1647
    Machine Name:
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Tue Jun 14 09:17:56.170 2011 (UTC + 2:00)
    System Uptime: 0 days 1:02:04.743
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ................................................................

    Loading User Symbols
    Loading unloaded module list
    .............................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000000A, {a050013, 2, 0, 804e893f}

    Probably caused by : ntkrpamp.exe ( nt!CcGetVirtualAddress+87 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 0a050013, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: 804e893f, address which referenced memory

    Debugging Details:
    ------------------


    READ_ADDRESS: 0a050013

    CURRENT_IRQL: 2

    FAULTING_IP:
    nt!CcGetVirtualAddress+87
    804e893f 66837f0800 cmp word ptr [edi+8],0

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xA

    PROCESS_NAME: COH32.exe

    LAST_CONTROL_TRANSFER: from 8056a1a5 to 804e893f

    STACK_TEXT:
    a63fea60 8056a1a5 009b9ed0 00530000 00000000 nt!CcGetVirtualAddress+0x87
    a63feac8 8062cf5f 8a15d5e0 a63feaf4 fff97000 nt!CcMapData+0x8b
    a63feb2c 80637f67 e1037008 0053006c a63feb6c nt!CmpMapCmView+0x123
    a63feb8c 806302ef e1037008 0053006c a63fec40 nt!HvpGetCellMapped+0x79
    a63febdc 8064081a e1037008 e5d0c854 a63fec1c nt!CmpGetValueData+0x85
    a63fec08 80640ac0 e1037008 e14f45e8 e5d0c854 nt!CmpGetValueDataFromCache+0x116
    a63fec48 80631e5d e1037008 e14f45e8 00d0c854 nt!CmpQueryKeyValueData+0x292
    a63fecb4 80624d90 e5a8eb48 00000005 00000001 nt!CmEnumerateValueKey+0x113
    a63fed44 8054167c 000005d4 00000005 00000001 nt!NtEnumerateValueKey+0x1ea
    a63fed44 7c90e514 000005d4 00000005 00000001 nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    0012e548 00000000 00000000 00000000 00000000 0x7c90e514


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!CcGetVirtualAddress+87
    804e893f 66837f0800 cmp word ptr [edi+8],0

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!CcGetVirtualAddress+87

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntkrpamp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 4d00d46f

    FAILURE_BUCKET_ID: 0xA_nt!CcGetVirtualAddress+87

    BUCKET_ID: 0xA_nt!CcGetVirtualAddress+87

    Followup: MachineOwner
    ---------

    eax=00000014 ebx=899b9ed0 ecx=8a1b0c48 edx=00000000 esi=899b9fa0 edi=0a05000b
    eip=804e893f esp=a63fea50 ebp=a63fea60 iopl=0 nv up ei pl nz na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
    nt!CcGetVirtualAddress+0x87:
    804e893f 66837f0800 cmp word ptr [edi+8],0 ds:0023:0a050013=????
    ChildEBP RetAddr Args to Child
    a63fea60 8056a1a5 009b9ed0 00530000 00000000 nt!CcGetVirtualAddress+0x87 (FPO: [Non-Fpo])
    a63feac8 8062cf5f 8a15d5e0 a63feaf4 fff97000 nt!CcMapData+0x8b (FPO: [Non-Fpo])
    a63feb2c 80637f67 e1037008 0053006c a63feb6c nt!CmpMapCmView+0x123 (FPO: [Non-Fpo])
    a63feb8c 806302ef e1037008 0053006c a63fec40 nt!HvpGetCellMapped+0x79 (FPO: [Non-Fpo])
    a63febdc 8064081a e1037008 e5d0c854 a63fec1c nt!CmpGetValueData+0x85 (FPO: [Non-Fpo])
    a63fec08 80640ac0 e1037008 e14f45e8 e5d0c854 nt!CmpGetValueDataFromCache+0x116 (FPO: [Non-Fpo])
    a63fec48 80631e5d e1037008 e14f45e8 00d0c854 nt!CmpQueryKeyValueData+0x292 (FPO: [Non-Fpo])
    a63fecb4 80624d90 e5a8eb48 00000005 00000001 nt!CmEnumerateValueKey+0x113 (FPO: [Non-Fpo])
    a63fed44 8054167c 000005d4 00000005 00000001 nt!NtEnumerateValueKey+0x1ea (FPO: [Non-Fpo])
    a63fed44 7c90e514 000005d4 00000005 00000001 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a63fed64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    0012e548 00000000 00000000 00000000 00000000 0x7c90e514
    start end module name
    804d7000 806e6000 nt ntkrpamp.exe Thu Dec 09 14:06:55 2010 (4D00D46F)
    806e6000 80706d00 hal halmacpi.dll Sun Apr 13 20:31:27 2008 (4802517F)
    a5141000 a516b180 kmixer kmixer.sys Sun Apr 13 20:45:07 2008 (480254B3)
    a552c000 a5553a80 WpsHelper WpsHelper.sys Fri Sep 03 03:14:42 2010 (4C804C02)
    a5554000 a5567580 NAVENG NAVENG.SYS Thu May 12 22:37:22 2011 (4DCC4502)
    a5568000 a56dee80 NAVEX15 NAVEX15.SYS Thu May 12 22:35:45 2011 (4DCC44A1)
    a647f000 a64bfe00 HTTP HTTP.sys Tue Oct 20 18:20:15 2009 (4ADDE33F)
    a691e000 a6932480 wdmaud wdmaud.sys Sun Apr 13 21:17:18 2008 (48025C3E)
    a6ac3000 a6b1a600 srv srv.sys Thu Feb 17 14:18:01 2011 (4D5D2009)
    a6b63000 a6b71d80 sysaudio sysaudio.sys Sun Apr 13 21:15:55 2008 (48025BEB)
    a6c0b000 a6c37180 mrxdav mrxdav.sys Sun Apr 13 20:32:42 2008 (480251CA)
    a6d78000 a6dff580 nwfs nwfs.sys Tue Mar 24 16:34:27 2009 (49C8FD83)
    a6f20000 a6f22400 NWHOST NWHOST.sys Wed Oct 12 21:12:19 2005 (434D6013)
    a6f68000 a6f95380 srvloc srvloc.sys Tue Aug 05 01:17:15 2008 (48978DFB)
    a7166000 a716f000 COH_Mon COH_Mon.sys Sat Jan 12 18:56:54 2008 (4788FF66)
    a71d6000 a71d9900 ndisuio ndisuio.sys Sun Apr 13 20:55:57 2008 (4802573D)
    a73f6000 a740d900 dump_atapi dump_atapi.sys Sun Apr 13 20:40:29 2008 (4802539D)
    a740e000 a742c000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Tue May 03 06:23:34 2011 (4DBF8346)
    a742c000 a748a000 eeCtrl eeCtrl.sys Tue May 03 06:23:33 2011 (4DBF8345)
    a748a000 a74f9500 mrxsmb mrxsmb.sys Thu Feb 17 14:18:22 2011 (4D5D201E)
    a7522000 a754ce80 rdbss rdbss.sys Sun Apr 13 21:28:38 2008 (48025EE6)
    a754d000 a75b7000 SPBBCDrv SPBBCDrv.sys Tue Dec 15 05:39:00 2009 (4B2712E4)
    a75b7000 a75d8d00 afd afd.sys Thu Oct 16 16:43:00 2008 (48F752F4)
    a75d9000 a7600c00 netbt netbt.sys Sun Apr 13 21:20:59 2008 (48025D1B)
    a7601000 a762d480 SYMTDI SYMTDI.SYS Wed Jun 17 23:11:02 2009 (4A395BE6)
    a762e000 a7686480 tcpip tcpip.sys Fri Jun 20 13:51:09 2008 (485B99AD)
    a7687000 a7699600 ipsec ipsec.sys Sun Apr 13 21:19:42 2008 (48025CCE)
    a76ce000 a76f3000 SYMEVENT SYMEVENT.SYS Fri Apr 16 03:31:23 2010 (4BC7BDEB)
    a7892000 a7896ea0 nwslp nwslp.sys Fri Apr 04 23:32:46 2008 (47F69E7E)
    a78aa000 a78b1300 resmgr resmgr.sys Mon Jul 21 21:47:04 2008 (4884E7B8)
    a78b2000 a78b6d00 SYMREDRV SYMREDRV.SYS Wed Jun 17 23:11:33 2009 (4A395C05)
    a78ba000 a7905000 SRTSP SRTSP.SYS Fri Mar 04 21:31:08 2011 (4D714C0C)
    a85e5000 a85e7280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
    a8646000 a86b7000 wdf01000 wdf01000.sys Tue Jul 14 01:11:36 2009 (4A5BBF28)
    a86b7000 a86bf3e0 nipplpt nipplpt.sys Thu Mar 24 04:53:26 2011 (4D8AC036)
    a86d7000 a86df780 netbios netbios.sys Sun Apr 13 20:56:01 2008 (48025741)
    a86f7000 a86ff700 wanarp wanarp.sys Sun Apr 13 20:57:20 2008 (48025790)
    a8717000 a8726000 wpsdrvnt wpsdrvnt.sys Mon Mar 07 20:34:32 2011 (4D753348)
    a878a000 a87ada80 portcls portcls.sys Sun Apr 13 21:19:40 2008 (48025CCC)
    a87ae000 a8c06000 RtkHDAud RtkHDAud.sys Tue Nov 21 10:35:02 2006 (4562C846)
    b8d0a000 b8d0c900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
    b8d26000 b8d29000 mouhid mouhid.sys Fri Aug 17 22:47:57 2001 (3B7D82FD)
    b8d2a000 b8d2c880 hidusb hidusb.sys Sun Apr 13 20:45:27 2008 (480254C7)
    b8d2e000 b8d41000 ZESNDISIM ZESNDISIM.sys Fri Nov 19 02:00:16 2010 (4CE5CC20)
    b8d5b000 b8db8f00 update update.sys Sun Apr 13 20:39:46 2008 (48025372)
    b8db9000 b8ddb700 ks ks.sys Sun Apr 13 21:16:34 2008 (48025C12)
    b8ddc000 b8dff000 teefer2 teefer2.sys Sat Dec 11 00:48:38 2010 (4D02BC56)
    b8dff000 b8e11b80 vdrv7000 vdrv7000.sys Mon Jan 31 12:54:48 2005 (41FE1C88)
    b8e12000 b8e41e80 rdpdr rdpdr.sys Sun Apr 13 20:32:50 2008 (480251D2)
    b8e42000 b8e52e00 psched psched.sys Sun Apr 13 20:56:36 2008 (48025764)
    b8f05000 b8f10300 nwdns nwdns.sys Mon Jul 21 21:39:21 2008 (4884E5E9)
    b8f25000 b8f2e000 HIDCLASS HIDCLASS.SYS Sun Apr 13 20:45:25 2008 (480254C5)
    b8f35000 b8f4b580 ndiswan ndiswan.sys Sun Apr 13 21:20:41 2008 (48025D09)
    b8f7b000 b8f8e980 parport parport.sys Sun Apr 13 20:40:09 2008 (48025389)
    b8f8f000 b8fb5c00 e100b325 e100b325.sys Tue Oct 31 23:13:21 2006 (4547CA81)
    b8fb6000 b8fd9200 USBPORT USBPORT.SYS Sun Apr 13 20:45:34 2008 (480254CE)
    b8fda000 b9002000 HDAudBus HDAudBus.sys Thu May 26 17:46:29 2005 (4295EF55)
    b9002000 b9015f00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 20:44:39 2008 (48025497)
    b9016000 b95d47a0 igxpmp32 igxpmp32.sys Fri Jun 27 17:46:47 2008 (48650B67)
    b9af3000 b9af6c80 mssmbios mssmbios.sys Sun Apr 13 20:36:45 2008 (480252BD)
    b9b0b000 b9b0d180 i2omgmt i2omgmt.SYS Sun Apr 13 20:41:22 2008 (480253D2)
    b9b3b000 b9b43900 msgpc msgpc.sys Sun Apr 13 20:56:32 2008 (48025760)
    b9b4b000 b9b56d00 raspptp raspptp.sys Sun Apr 13 21:19:47 2008 (48025CD3)
    b9b5b000 b9b65200 raspppoe raspppoe.sys Sun Apr 13 20:57:31 2008 (4802579B)
    b9b6b000 b9b77880 rasl2tp rasl2tp.sys Sun Apr 13 21:19:43 2008 (48025CCF)
    b9b8b000 b9b97000 zestdi zestdi.sys Tue Mar 29 18:54:44 2011 (4D920ED4)
    b9b9b000 b9ba9880 usbhub usbhub.sys Sun Apr 13 20:45:36 2008 (480254D0)
    b9bab000 b9bb5e80 Fips Fips.SYS Sun Apr 13 20:33:27 2008 (480251F7)
    b9bbb000 b9bca900 Cdfs Cdfs.SYS Sun Apr 13 21:14:21 2008 (48025B8D)
    b9bcb000 b9bd7000 dfmirage dfmirage.sys Fri Nov 25 12:43:46 2005 (4386F8F2)
    b9bdb000 b9bf4b80 Mup Mup.sys Sun Apr 13 21:17:05 2008 (48025C31)
    b9bf5000 b9c21980 NDIS NDIS.sys Sun Apr 13 21:20:35 2008 (48025D03)
    b9c22000 b9cae600 Ntfs Ntfs.sys Sun Apr 13 21:15:49 2008 (48025BE5)
    b9caf000 b9cc5b00 KSecDD KSecDD.sys Wed Jun 24 13:18:40 2009 (4A420B90)
    b9cc6000 b9cd7f00 sr sr.sys Sun Apr 13 20:36:50 2008 (480252C2)
    b9cd8000 b9cf7b00 fltMgr fltMgr.sys Sun Apr 13 20:32:58 2008 (480251DA)
    b9cf8000 b9d23d80 dac2w2k dac2w2k.sys Fri Aug 17 22:52:13 2001 (3B7D83FD)
    b9d24000 b9d3ce00 adpu160m adpu160m.sys Wed May 30 11:18:22 2001 (3B14BADE)
    b9d3d000 b9d54900 atapi atapi.sys Sun Apr 13 20:40:29 2008 (4802539D)
    b9d55000 b9f0a000 iaStor iaStor.sys Thu Mar 04 03:30:51 2010 (4B8F1B5B)
    b9f0a000 b9f21880 SCSIPORT SCSIPORT.SYS Sun Apr 13 20:40:29 2008 (4802539D)
    b9f22000 b9f47900 dmio dmio.sys Sun Apr 13 20:44:45 2008 (4802549D)
    b9f48000 b9f66b00 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
    b9f67000 b9f77a80 pci pci.sys Sun Apr 13 20:36:43 2008 (480252BB)
    b9f78000 b9fa6080 ACPI ACPI.sys Sun Apr 13 20:36:33 2008 (480252B1)
    ba0a8000 ba0b1380 isapnp isapnp.sys Sun Apr 13 20:36:40 2008 (480252B8)
    ba0b8000 ba0c2580 MountMgr MountMgr.sys Sun Apr 13 20:39:45 2008 (48025371)
    ba0c8000 ba0d5100 VolSnap VolSnap.sys Sun Apr 13 20:41:00 2008 (480253BC)
    ba0d8000 ba0e5e80 aic78xx aic78xx.sys Thu May 10 22:23:40 2001 (3AFAF8CC)
    ba0e8000 ba0f0180 ql10wnt ql10wnt.sys Fri Aug 17 22:52:14 2001 (3B7D83FE)
    ba0f8000 ba101e00 ql1240 ql1240.sys Fri Aug 17 22:52:14 2001 (3B7D83FE)
    ba108000 ba115780 aic78u2 aic78u2.sys Thu May 10 22:23:41 2001 (3AFAF8CD)
    ba118000 ba120f80 ultra ultra.sys Fri Aug 17 22:52:19 2001 (3B7D8403)
    ba128000 ba131d80 ql1080 ql1080.sys Fri Aug 17 22:52:18 2001 (3B7D8402)
    ba138000 ba143f80 ql1280 ql1280.sys Fri Aug 17 22:52:16 2001 (3B7D8400)
    ba148000 ba153100 ql12160 ql12160.sys Fri Aug 17 22:52:18 2001 (3B7D8402)
    ba158000 ba160e00 disk disk.sys Sun Apr 13 20:40:46 2008 (480253AE)
    ba168000 ba174180 CLASSPNP CLASSPNP.SYS Sun Apr 13 21:16:21 2008 (48025C05)
    ba178000 ba188000 ZESFSFD ZESFSFD.sys Tue Mar 29 18:55:24 2011 (4D920EFC)
    ba188000 ba192000 zesdac zesdac.sys Tue Mar 29 18:54:20 2011 (4D920EBC)
    ba198000 ba1a2000 sisagp sisagp.sys Sun Apr 13 20:36:39 2008 (480252B7)
    ba1a8000 ba1b2500 viaagp viaagp.sys Sun Apr 13 20:36:39 2008 (480252B7)
    ba1b8000 ba1c1680 nicm nicm.sys Tue Jan 08 18:18:43 2008 (4783B073)
    ba1c8000 ba1d2580 agp440 agp440.sys Sun Apr 13 20:36:37 2008 (480252B5)
    ba1d8000 ba1e2700 alim1541 alim1541.sys Sun Apr 13 20:36:37 2008 (480252B5)
    ba1e8000 ba1f2800 amdagp amdagp.sys Sun Apr 13 20:36:39 2008 (480252B7)
    ba1f8000 ba202f80 agpCPQ agpCPQ.sys Sun Apr 13 20:36:39 2008 (480252B7)
    ba228000 ba231f00 termdd termdd.sys Sun Apr 13 20:38:36 2008 (4802532C)
    ba238000 ba242000 NDProxy NDProxy.SYS Tue Nov 02 16:17:02 2010 (4CD02B6E)
    ba258000 ba267600 cdrom cdrom.sys Sun Apr 13 20:40:45 2008 (480253AD)
    ba268000 ba276300 redbook redbook.sys Sun Apr 13 20:40:27 2008 (4802539B)
    ba2a8000 ba2b1080 SRTSPX SRTSPX.SYS Fri Mar 04 21:31:24 2011 (4D714C1C)
    ba2b8000 ba2c6b00 drmk drmk.sys Sun Apr 13 20:45:12 2008 (480254B8)
    ba2c8000 ba2d6000 WDFLDR WDFLDR.SYS Tue Jul 14 01:11:25 2009 (4A5BBF1D)
    ba2f8000 ba301e00 intelppm intelppm.sys Sun Apr 13 20:31:31 2008 (48025183)
    ba308000 ba318000 serial serial.sys Sun Apr 13 21:15:44 2008 (48025BE0)
    ba318000 ba325100 i8042prt i8042prt.sys Sun Apr 13 21:17:59 2008 (48025C67)
    ba328000 ba32e180 PCIIDEX PCIIDEX.SYS Sun Apr 13 20:40:29 2008 (4802539D)
    ba330000 ba334d00 PartMgr PartMgr.sys Sun Apr 13 20:40:48 2008 (480253B0)
    ba338000 ba33ca80 sparrow sparrow.sys Fri Dec 08 18:40:58 2000 (3A311D2A)
    ba340000 ba346780 asc asc.sys Fri Aug 17 22:51:58 2001 (3B7D83EE)
    ba348000 ba34c380 mraid35x mraid35x.sys Fri Aug 17 22:52:11 2001 (3B7D83FB)
    ba350000 ba354880 i2omp i2omp.sys Sun Apr 13 20:41:21 2008 (480253D1)
    ba358000 ba35ff80 symc8xx symc8xx.sys Fri Dec 08 18:40:59 2000 (3A311D2B)
    ba360000 ba366ee0 sym_hi sym_hi.sys Tue Mar 20 06:51:22 2001 (3AB6EFDA)
    ba368000 ba36f7e0 sym_u3 sym_u3.sys Tue Mar 20 06:36:17 2001 (3AB6EC51)
    ba370000 ba375c00 ABP480N5 ABP480N5.SYS Fri Aug 17 22:51:59 2001 (3B7D83EF)
    ba378000 ba37d780 asc3350p asc3350p.sys Fri Aug 17 22:52:01 2001 (3B7D83F1)
    ba380000 ba384ee0 dpti2o dpti2o.sys Tue Mar 20 20:07:16 2001 (3AB7AA64)
    ba388000 ba38eaa0 perc2 perc2.sys Mon Apr 23 12:51:37 2001 (3AE40939)
    ba390000 ba396560 hpn hpn.sys Mon Apr 23 12:51:37 2001 (3AE40939)
    ba398000 ba39c500 nwfilter nwfilter.sys Mon Jul 21 22:45:21 2008 (4884F561)
    ba3c8000 ba3cc760 nwdhcp nwdhcp.sys Tue Nov 22 17:51:21 2005 (43834C89)
    ba3d0000 ba3d4a80 TDI TDI.SYS Sun Apr 13 21:00:04 2008 (48025834)
    ba3d8000 ba3dc580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
    ba3e0000 ba3e4080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
    ba3e8000 ba3edc00 mouclass mouclass.sys Sun Apr 13 20:39:47 2008 (48025373)
    ba3f8000 ba3ffe00 nsafltr nsafltr.sys Tue Apr 20 14:51:27 2010 (4BCDA34F)
    ba400000 ba406180 HIDPARSE HIDPARSE.SYS Sun Apr 13 20:45:22 2008 (480254C2)
    ba418000 ba41d200 vga vga.sys Sun Apr 13 20:44:40 2008 (48025498)
    ba420000 ba428000 pcisys pcisys.sys Mon Sep 28 13:18:23 2009 (4AC09B7F)
    ba428000 ba42ca80 Msfs Msfs.SYS Sun Apr 13 20:32:38 2008 (480251C6)
    ba430000 ba437880 Npfs Npfs.SYS Sun Apr 13 20:32:38 2008 (480251C6)
    ba450000 ba454500 watchdog watchdog.sys Sun Apr 13 20:44:59 2008 (480254AB)
    ba468000 ba46d080 usbuhci usbuhci.sys Sun Apr 13 20:45:34 2008 (480254CE)
    ba470000 ba477600 usbehci usbehci.sys Sun Apr 13 20:45:34 2008 (480254CE)
    ba478000 ba47e200 kbdclass kbdclass.sys Sun Apr 13 20:39:46 2008 (48025372)
    ba480000 ba488000 uphcleanhlp uphcleanhlp.sys Tue Apr 04 20:08:46 2006 (4432B62E)
    ba488000 ba48e000 gdihook5 gdihook5.sys Mon Sep 28 13:18:29 2009 (4AC09B85)
    ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
    ba4bc000 ba4be800 compbatt compbatt.sys Sun Apr 13 20:36:36 2008 (480252B4)
    ba4c0000 ba4c3780 BATTC BATTC.SYS Sun Apr 13 20:36:32 2008 (480252B0)
    ba4c4000 ba4c7a80 cpqarray cpqarray.sys Fri Aug 17 22:52:05 2001 (3B7D83F5)
    ba4c8000 ba4cb200 aha154x aha154x.sys Fri Aug 17 22:51:59 2001 (3B7D83EF)
    ba4cc000 ba4cff80 symc810 symc810.sys Fri Dec 08 18:40:59 2000 (3A311D2B)
    ba4d0000 ba4d3980 dac960nt dac960nt.sys Fri Aug 17 22:52:13 2001 (3B7D83FD)
    ba4d4000 ba4d6f00 amsint amsint.sys Fri Aug 17 22:52:01 2001 (3B7D83F1)
    ba4d8000 ba4dba00 asc3550 asc3550.sys Fri Aug 17 22:51:56 2001 (3B7D83EC)
    ba4dc000 ba4dfe80 ini910u ini910u.sys Fri Aug 17 22:52:07 2001 (3B7D83F7)
    ba4e0000 ba4e3680 cbidf2k cbidf2k.sys Fri Aug 17 22:52:06 2001 (3B7D83F6)
    ba59c000 ba59fd80 serenum serenum.sys Sun Apr 13 20:40:12 2008 (4802538C)
    ba5a4000 ba5a6780 ndistapi ndistapi.sys Sun Apr 13 20:57:27 2008 (48025797)
    ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
    ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
    ba5ac000 ba5ad480 aliide aliide.sys Fri Aug 17 22:51:54 2001 (3B7D83EA)
    ba5ae000 ba5afa00 cmdide cmdide.sys Fri Aug 17 22:51:51 2001 (3B7D83E7)
    ba5b0000 ba5b1380 toside toside.sys Fri Aug 17 22:51:52 2001 (3B7D83E8)
    ba5b2000 ba5b3500 viaide viaide.sys Sun Apr 13 20:40:30 2008 (4802539E)
    ba5b4000 ba5b5580 intelide intelide.sys Sun Apr 13 20:40:29 2008 (4802539D)
    ba5b6000 ba5b7700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
    ba5b8000 ba5b9e00 cd20xrnt cd20xrnt.sys Fri Aug 17 22:52:04 2001 (3B7D83F4)
    ba5ba000 ba5bb580 perc2hib perc2hib.sys Mon Apr 23 12:51:37 2001 (3AE40939)
    ba5da000 ba5db680 WNTHW WNTHW.SYS Tue Mar 20 16:55:41 2001 (3AB77D7D)
    ba5de000 ba5df100 swenum swenum.sys Sun Apr 13 20:39:52 2008 (48025378)
    ba5e4000 ba5e5080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
    ba5e8000 ba5e9080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
    ba5ea000 ba5eb280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
    ba5f6000 ba5f7f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
    ba5f8000 ba5f9080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
    ba602000 ba603100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
    ba654000 ba6557a0 NWSNS NWSNS.sys Wed Oct 12 21:11:33 2005 (434D5FE5)
    ba670000 ba670d00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
    ba758000 ba758d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
    ba79d000 ba79dc00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
    ba7dc000 ba7dcb80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)
    bf000000 bf011600 dxg dxg.sys Sun Apr 13 20:38:27 2008 (48025323)
    bf012000 bf024000 igxprd32 igxprd32.dll Fri Jun 27 17:46:52 2008 (48650B6C)
    bf024000 bf04f000 igxpgd32 igxpgd32.dll Fri Jun 27 17:46:48 2008 (48650B68)
    bf04f000 bf25a860 igxpdv32 igxpdv32.DLL Fri Jun 27 17:48:32 2008 (48650BD0)
    bf25b000 bf562000 igxpdx32 igxpdx32.DLL Fri Jun 27 17:48:47 2008 (48650BDF)
    bf562000 bf5a8e80 ATMFD ATMFD.DLL Tue Feb 15 13:56:39 2011 (4D5A7807)
    bf800000 bf9c5a00 win32k win32k.sys Thu Mar 03 14:21:01 2011 (4D6F95BD)

    Unloaded modules:
    a577f000 a57aa000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0002B000
    a76ba000 a76ce000 NAVENG.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00014000
    a76f3000 a786a000 NAVEX15.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00177000
    a6c60000 a6c88000 WpsHelper.sy
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00028000
    a5f2c000 a5f57000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0002B000
    ba7f0000 ba7f1000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00001000
    a68a8000 a68d3000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0002B000
    a6e60000 a6e6d000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000D000
    a68d3000 a68f6000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00023000
    a6ea0000 a6eae000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    ba66c000 ba66e000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00002000
    ba2e8000 ba2f3000 imapi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000B000
    ba410000 ba415000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00005000
    b9b0f000 b9b12000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00003000
    b9b7b000 b9b89000 WDFLDR.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    ba3a8000 ba3b0000 nsafltr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00008000
    b8ef9000 b8f6a000 wdf01000.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    b9b8b000 b9b99000 WDFLDR.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    ba4b0000 ba4b8000 nsafltr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00008000
    b8ef9000 b8f6a000 wdf01000.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    b9b9b000 b9ba9000 WDFLDR.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    ba4a8000 ba4b0000 nsafltr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00008000
    b8f0a000 b8f7b000 wdf01000.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    b9bab000 b9bb9000 WDFLDR.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    ba4a0000 ba4a8000 nsafltr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00008000
    b8f0a000 b8f7b000 wdf01000.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    b9bbb000 b9bc9000 WDFLDR.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    ba490000 ba498000 nsafltr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00008000
    b8f0a000 b8f7b000 wdf01000.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    Closing open log file c:debuglog.txt
     
  2. 2011/06/14
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #2

  3. to hide this advert.

  4. 2011/06/14
    klokslag

    klokslag Inactive Thread Starter

    Joined:
    2011/06/14
    Messages:
    3
    Likes Received:
    0
    Hello Arie,

    Thanks for your quick reply, but NAVENG.SYS is part of our vrius scanner.
    Something els must do it.
     
  5. 2011/06/14
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,076
    Likes Received:
    178
    Why don't you submit the file NAVENG.SYS to VirusTotal. Let them have a look.

    More info about the file here if its indeed a valid Norton file.
     
  6. 2011/06/14
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    You want more?

    Cloaked Malware

    Not a single hit on Google... that suggests malware too

    Worm

    That's all I want to do. I'm sure I can find more if I want... what you do about it is your choice...
     
    Arie,
    #5
  7. 2011/07/21
    klokslag

    klokslag Inactive Thread Starter

    Joined:
    2011/06/14
    Messages:
    3
    Likes Received:
    0
    Resolved

    Last week i found the failure.

    It was a combination of our virus scanner and a program we use called Zenworks. The virus scanner thought it was a trojan horse and stopped this service which created a BSOD.
     
  8. 2011/07/21
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Thanks for the update - glad to hear you found the cause of the BSOD :)

    Please mark this thread as 'Resolved', see .....
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.