Need BIOS help

Anyone who's been following my previous threads knows I've been having quite the battle with BSOD's (page fault in non paged area, usually). I've tried everything to fix this and am about ready to wipe the whole system out and start over. But before I do I thought I'd try one more thing. On the BSOD it says to remove bios memory caching or shadowing. Problem is I went into the bios and looked all around and couldn't find anything that said memory caching or shadowing. Hoping somebody out there can help me find this because I'd really like to feel like I've tried everything possible before I just nuke it and start over. Thanks for the help, Brian

 

Hi Brian, I see you are still being plagued with your BSOD. Please follow Evan's directions and I'm sure he will be able to sort things out if you provide the info he needs. Neil.

 

Hey Evan, thanks for the help. The BSOD's happen randomly, there doesn't seem to be anything in particular I can do to make it happen. It has occasionally happened during the boot up process before I could get to my desk top. I've had this problem for a long time only to a much, much, much more limited extent....maybe once every couple of months or so. I just ignored it and went on about my business. But over the past year the frequency has slowly gone up till now I get a blue screen virtually every time I turn my pc on (by the way, I have a dual boot system with Win 7 32 and Win 7 64....the 64bit version is rock solid stable). I have tried all the fixes I could come up with...re-setting paging files, testing ram both with built in software and with Memory 86 Ram Test....all good, done msconfig and shut down all but the most essential startup items. Also used task manager to hide Microsoft services and shutdown any others where I knew what they were...when in doubt I left it alone. Recently I have uninstalled about 1/3 of my installed programs, run disk check, defrag, registry repair, etc. etc. etc. It has been improving the stability but hasn't fixed it. I will do the dump data collection thing the next time it happens and post the results here. Brian
PS...I went and downloaded the current debugging tool from the Microsoft link, and the debugwiz.zip, do I need the debugwiz.zip? and how do I use it? Thanks

 

Well, this isn't going to work either. I just had two BSOD's in a row. The first one happened when I was downloading an update to Adobe Flash Player. The second one happened upon reboot within 30 seconds after getting to my desktop. So I tried to install the Microsoft debugging tool and everything was going as expected until it started downloading the files. When it finished it said installation failed. I tried two more times....same thing. I saved the failure log but it's 27 pages long. I'm about ready to nuke this thing. I will try the clean boot but it may or may not take some time to determine if I've been successful. I've already shut down a lot of services and uninstalled a lot of programs. And sorry about the stupid question about debugwiz.....I didn't read far enough down...it answers itself, although it looks like it's not going to help me. Other than doing the clean boot routine (which I'll do next), in the meantime what about on the BSOD where it says to remove bios memory caching or shadowing? In my bios I didn't see anything about caching or shadowing. Is this something I need to look into further? Thanks for the help, Brian

 

OK, several questions. One I don't need the Microsoft debugging tool or the debugwiz to do this? Will this file be in some sort of a text format? And what size dump file do you want, a mini dump or kernel? Right now I'm running with all services off except those pertaining to Zone Alarm and Mozilla Thunderbird, on startup all I'm running is ZA stuff. Thanks, Brian

 

Well then we have a problem, as I said in my earlier post the Microsoft debugging tool wouldn't install on my pc. I tried 3 times, and it failed 3 times. I even tried once with everything off including Zone Alarm....still no go. I did generate a nice 27 page report failure log though...so what now?

 

Progress!!! Maybe???

Finally some success! I figured out why I couldn't install the Microsoft debugging tool.....

CAUSE
This issue occurs when you install the Windows 7 SDK on a computer that has a newer version of the Visual C++ 2010 Redistributable installed. The Windows 7 SDK installs version 10.0.30319 of the Visual C++ 2010 Redistributable.

RESOLUTION
To resolve this issue, you must uninstall all versions of the Visual C++ 2010
Redistributable before installing the Windows 7 SDK. You may have one or more of the following products installed:
•Microsoft Visual C++ 2010 x86 Redistributable
•Microsoft Visual C++ 2010 x64 Redistributable

This fixed it for me tool downloaded fine and was able to get crash dump, here it is:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.19045.x86fre.win7sp1_gdr.151019-1254
Machine Name:
Kernel base = 0x83807000 PsLoadedModuleList = 0x83952e30
Debug session time: Fri Jan 1 03:07:23.686 2016 (UTC - 6:00)
System Uptime: 0 days 0:09:28.670
Loading Kernel Symbols
...............................................................
................................................................
................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd900c). Type ".hh dbgerr001" for details
Loading unloaded module list
......
5: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 8ba6a000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 83a74ada, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------

*** ERROR: Module load completed but symbols could not be loaded for FDCDNT.SYS
*** ERROR: Module load completed but symbols could not be loaded for tdrpm258.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for klhk.sys -

READ_ADDRESS: 8ba6a000 Paged pool

FAULTING_IP:
nt!RtlUpcaseUnicodeString+71
83a74ada 0fb70c51 movzx ecx,word ptr [ecx+edx*2]

MM_INTERNAL_CODE: 0

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: vsmon.exe

CURRENT_IRQL: 0

TRAP_FRAME: af0b2f28 -- (.trap 0xffffffffaf0b2f28)
.trap 0xffffffffaf0b2f28
ErrCode = 00000000
eax=8f02064c ebx=88150fd4 ecx=8ba69c5e edx=000001d1 esi=af0b2ff0 edi=af0b2ff8
eip=83a74ada esp=af0b2f9c ebp=af0b2fd0 iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!RtlUpcaseUnicodeString+0x71:
83a74ada 0fb70c51 movzx ecx,word ptr [ecx+edx*2] ds:0023:8ba6a000=????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 83847be8 to 838953c1

STACK_TEXT:
af0b2f10 83847be8 00000000 8ba6a000 00000000 nt!MmAccessFault+0x104
af0b2f10 83a74ada 00000000 8ba6a000 00000000 nt!KiTrap0E+0xdc
af0b2fd0 927d2425 af0b2ff8 af0b2ff0 00000000 nt!RtlUpcaseUnicodeString+0x71
af0b301c 8387f933 88150bd4 86c8ace0 00000000 FDCDNT+0x2425
af0b3060 8ca3dd57 00000000 8eb49d08 86ca5600 nt!IopfCompleteRequest+0x128
af0b3078 8cabb72d 86ca5600 86c8ace0 00000000 Ntfs!NtfsExtendedCompleteRequestInternal+0x107
af0b3274 8cad6d87 86ca5600 86c8ace0 87a1b0d8 Ntfs!NtfsQueryDirectory+0xfb4
af0b32a8 8cad6ed0 86ca5600 bfa7f390 23ad5845 Ntfs!NtfsCommonDirectoryControl+0x21d
af0b3310 8383dd7d 87a1b020 86c8ace0 86c8ace0 Ntfs!NtfsFsdDirectoryControl+0xf7
af0b3328 84ad120c 87e40a68 86c8ace0 00000000 nt!IofCallDriver+0x63
af0b334c 84ad13cb af0b336c 87e40a68 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
af0b3384 8383dd7d 87e40a68 86c8ace0 8ced8628 fltmgr!FltpDispatch+0xc5
af0b339c 8cee11be 8cf0267c 87e40a68 86c8ace0 nt!IofCallDriver+0x63
WARNING: Stack unwind information not available. Following frames may be wrong.
af0b3430 84ad120c 87f7d120 86c8ace0 00000000 tdrpm258+0xa1be
af0b3454 84ad13cb af0b3474 87f7d120 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
af0b348c 8383dd7d 87f7d120 86c8ace0 86c8aff4 fltmgr!FltpDispatch+0xc5
af0b34a4 927d2ab7 87085478 8813f658 00000000 nt!IofCallDriver+0x63
af0b3504 927d2d76 00000000 86c8ace0 8383dd7d FDCDNT+0x2ab7
af0b3510 8383dd7d 8813f658 86c8ace0 86c8ace0 FDCDNT+0x2d76
af0b3528 83a352c4 af0b359c af0b3640 83a3f748 nt!IofCallDriver+0x63
af0b3548 83a3f7a3 8813f658 87085478 00000001 nt!IopSynchronousServiceTail+0x1f8
af0b3568 83844a06 80000a44 00000000 00000000 nt!NtQueryDirectoryFile+0x5b
af0b3568 838430dd 80000a44 00000000 00000000 nt!KiSystemServicePostCall
af0b360c 84aea787 80000a44 00000000 00000000 nt!ZwQueryDirectoryFile+0x11
af0b3680 84aeaabd 00000000 86af6368 af0b36bc fltmgr!FltpNormalizeNameComponent+0x155
af0b3690 84aeaeb6 86af6368 00000000 86af6368 fltmgr!FltpCallNormalizeNameComponentHandler+0x7f
af0b36bc 84aebdf4 00af6368 86af6368 86af6368 fltmgr!FltpExpandShortNames+0x138
af0b36d8 84aec505 86af0000 86af6368 87058d94 fltmgr!FltpGetNormalizedFileNameWorker+0xae
af0b36f0 84ae9765 86af6368 86af6368 87f45970 fltmgr!FltpGetNormalizedFileName+0x19
af0b3708 84ae98a8 86af6368 00000000 86af6368 fltmgr!FltpCreateFileNameInformation+0x81
af0b371c 84ad3e1e 86af6368 8d132bec 00000000 fltmgr!CreateTemporaryFileNameInformation+0x4e
af0b374c 84ae9cd9 86af6368 00000000 00000000 fltmgr!FltpGetFileNameInformation+0x61e
af0b3760 8d0e4973 870ac138 00000000 86af6368 fltmgr!FltGetFileNameInformationUnsafe+0x59
af0b3780 8d0ef514 870ac138 00000000 00000101 klif+0x15973
af0b3800 8d153e81 019e1d28 00000000 af0b381c klif+0x20514
af0b3828 8d0d82ec 8a7cc670 06e2a850 d09e1d28 klif+0x84e81
af0b39a8 8d17a61f 8d17a5c4 8d17a61f 8a4e4d90 klif+0x92ec
af0b39dc 84ad2ad1 00000004 06e2a850 00000056 klif+0xab61f
af0b3a28 84ae8641 87f39278 06e2a850 00000056 fltmgr!FltpFilterMessage+0x9d
af0b3a5c 84ae8a69 8a7cb500 00000000 06e2a850 fltmgr!FltpMsgDeviceControl+0xa9
af0b3aa0 84ad1339 87815f08 86a52f68 8a7cb5e8 fltmgr!FltpMsgDispatch+0x91
af0b3acc 8383dd7d 87815f08 86a52f68 86a52f68 fltmgr!FltpDispatch+0x33
af0b3ae4 83a352c4 00000056 86a52f68 86a52fd8 nt!IofCallDriver+0x63
af0b3b04 83a385ac 87815f08 8a7cb5e8 00000000 nt!IopSynchronousServiceTail+0x1f8
af0b3bd8 83a7f84d 87815f08 86a52f68 00000000 nt!IopXxxControlFile+0x7a9
af0b3c0c 8d0ee910 00000d54 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
af0b3c98 8d1c505a 00000d54 00000000 00000000 klif+0x1f910
af0b3cd0 8d1c6206 8d0ee4d6 af0b3d0c 00000028 klhk!Ordinal11+0x1a
af0b3cec 8d1c501f 87f5d940 af0b3d0c af0b3d00 klhk!Ordinal11+0x11c6
af0b3d04 83844a06 00000d54 00000000 00000000 klhk+0x101f
af0b3d04 773d71b4 00000d54 00000000 00000000 nt!KiSystemServicePostCall
1b69e74c 00000000 00000000 00000000 00000000 0x773d71b4


STACK_COMMAND: kb

FOLLOWUP_IP:
FDCDNT+2425
927d2425 85c0 test eax,eax

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: FDCDNT+2425

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: FDCDNT

IMAGE_NAME: FDCDNT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 478c8658

FAILURE_BUCKET_ID: 0x50_FDCDNT+2425

BUCKET_ID: 0x50_FDCDNT+2425

Followup: MachineOwner
---------

eax=8394108c ebx=881bf900 ecx=00000000 edx=00000000 esi=8eda2120 edi=00000000
eip=838953c1 esp=af0b2e98 ebp=af0b2f10 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000202
nt!MmAccessFault+0x104:
838953c1 cc int 3
ChildEBP RetAddr Args to Child
af0b2f10 83847be8 00000000 8ba6a000 00000000 nt!MmAccessFault+0x104
af0b2f10 83a74ada 00000000 8ba6a000 00000000 nt!KiTrap0E+0xdc (FPO: [0,0] TrapFrame @ af0b2f28)
af0b2fd0 927d2425 af0b2ff8 af0b2ff0 00000000 nt!RtlUpcaseUnicodeString+0x71
af0b301c 8387f933 88150bd4 86c8ace0 00000000 FDCDNT+0x2425 (FPO: [Non-Fpo])
af0b3060 8ca3dd57 00000000 8eb49d08 86ca5600 nt!IopfCompleteRequest+0x128
af0b3078 8cabb72d 86ca5600 86c8ace0 00000000 Ntfs!NtfsExtendedCompleteRequestInternal+0x107 (FPO: [Non-Fpo])
af0b3274 8cad6d87 86ca5600 86c8ace0 87a1b0d8 Ntfs!NtfsQueryDirectory+0xfb4 (FPO: [Non-Fpo])
af0b32a8 8cad6ed0 86ca5600 bfa7f390 23ad5845 Ntfs!NtfsCommonDirectoryControl+0x21d (FPO: [Non-Fpo])
af0b3310 8383dd7d 87a1b020 86c8ace0 86c8ace0 Ntfs!NtfsFsdDirectoryControl+0xf7 (FPO: [Non-Fpo])
af0b3328 84ad120c 87e40a68 86c8ace0 00000000 nt!IofCallDriver+0x63
af0b334c 84ad13cb af0b336c 87e40a68 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa (FPO: [Non-Fpo])
af0b3384 8383dd7d 87e40a68 86c8ace0 8ced8628 fltmgr!FltpDispatch+0xc5 (FPO: [Non-Fpo])
af0b339c 8cee11be 8cf0267c 87e40a68 86c8ace0 nt!IofCallDriver+0x63
WARNING: Stack unwind information not available. Following frames may be wrong.
af0b3430 84ad120c 87f7d120 86c8ace0 00000000 tdrpm258+0xa1be
af0b3454 84ad13cb af0b3474 87f7d120 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa (FPO: [Non-Fpo])
af0b348c 8383dd7d 87f7d120 86c8ace0 86c8aff4 fltmgr!FltpDispatch+0xc5 (FPO: [Non-Fpo])
af0b34a4 927d2ab7 87085478 8813f658 00000000 nt!IofCallDriver+0x63
af0b3504 927d2d76 00000000 86c8ace0 8383dd7d FDCDNT+0x2ab7 (FPO: [Non-Fpo])
af0b3510 8383dd7d 8813f658 86c8ace0 86c8ace0 FDCDNT+0x2d76 (FPO: [2,0,0])
af0b3528 83a352c4 af0b359c af0b3640 83a3f748 nt!IofCallDriver+0x63
af0b3548 83a3f7a3 8813f658 87085478 00000001 nt!IopSynchronousServiceTail+0x1f8
af0b3568 83844a06 80000a44 00000000 00000000 nt!NtQueryDirectoryFile+0x5b
af0b3568 838430dd 80000a44 00000000 00000000 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ af0b359c)
af0b360c 84aea787 80000a44 00000000 00000000 nt!ZwQueryDirectoryFile+0x11 (FPO: [11,0,0])
af0b3680 84aeaabd 00000000 86af6368 af0b36bc fltmgr!FltpNormalizeNameComponent+0x155 (FPO: [Non-Fpo])
af0b3690 84aeaeb6 86af6368 00000000 86af6368 fltmgr!FltpCallNormalizeNameComponentHandler+0x7f (FPO: [Non-Fpo])
af0b36bc 84aebdf4 00af6368 86af6368 86af6368 fltmgr!FltpExpandShortNames+0x138 (FPO: [Non-Fpo])
af0b36d8 84aec505 86af0000 86af6368 87058d94 fltmgr!FltpGetNormalizedFileNameWorker+0xae (FPO: [Non-Fpo])
af0b36f0 84ae9765 86af6368 86af6368 87f45970 fltmgr!FltpGetNormalizedFileName+0x19 (FPO: [Non-Fpo])
af0b3708 84ae98a8 86af6368 00000000 86af6368 fltmgr!FltpCreateFileNameInformation+0x81 (FPO: [Non-Fpo])
af0b371c 84ad3e1e 86af6368 8d132bec 00000000 fltmgr!CreateTemporaryFileNameInformation+0x4e (FPO: [Non-Fpo])
af0b374c 84ae9cd9 86af6368 00000000 00000000 fltmgr!FltpGetFileNameInformation+0x61e (FPO: [Non-Fpo])
af0b3760 8d0e4973 870ac138 00000000 86af6368 fltmgr!FltGetFileNameInformationUnsafe+0x59 (FPO: [Non-Fpo])
af0b3780 8d0ef514 870ac138 00000000 00000101 klif+0x15973
af0b3800 8d153e81 019e1d28 00000000 af0b381c klif+0x20514
af0b3828 8d0d82ec 8a7cc670 06e2a850 d09e1d28 klif+0x84e81
af0b39a8 8d17a61f 8d17a5c4 8d17a61f 8a4e4d90 klif+0x92ec
af0b39dc 84ad2ad1 00000004 06e2a850 00000056 klif+0xab61f
af0b3a28 84ae8641 87f39278 06e2a850 00000056 fltmgr!FltpFilterMessage+0x9d (FPO: [Non-Fpo])
af0b3a5c 84ae8a69 8a7cb500 00000000 06e2a850 fltmgr!FltpMsgDeviceControl+0xa9 (FPO: [Non-Fpo])
af0b3aa0 84ad1339 87815f08 86a52f68 8a7cb5e8 fltmgr!FltpMsgDispatch+0x91 (FPO: [Non-Fpo])
af0b3acc 8383dd7d 87815f08 86a52f68 86a52f68 fltmgr!FltpDispatch+0x33 (FPO: [Non-Fpo])
af0b3ae4 83a352c4 00000056 86a52f68 86a52fd8 nt!IofCallDriver+0x63
af0b3b04 83a385ac 87815f08 8a7cb5e8 00000000 nt!IopSynchronousServiceTail+0x1f8
af0b3bd8 83a7f84d 87815f08 86a52f68 00000000 nt!IopXxxControlFile+0x7a9
af0b3c0c 8d0ee910 00000d54 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
af0b3c98 8d1c505a 00000d54 00000000 00000000 klif+0x1f910
af0b3cd0 8d1c6206 8d0ee4d6 af0b3d0c 00000028 klhk!Ordinal11+0x1a
af0b3cec 8d1c501f 87f5d940 af0b3d0c af0b3d00 klhk!Ordinal11+0x11c6
af0b3d04 83844a06 00000d54 00000000 00000000 klhk+0x101f
af0b3d04 773d71b4 00000d54 00000000 00000000 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ af0b3d34)
1b69e74c 00000000 00000000 00000000 00000000 0x773d71b4
start end module name
80bb0000 80bb8000 kdcom kdcom.dll Mon Jul 13 20:08:58 2009 (4A5BDAAA)
83807000 83c20000 nt ntkrpamp.exe Mon Oct 19 18:40:04 2015 (56257F54)
83c20000 83c57000 hal halmacpi.dll Sat Nov 20 02:37:38 2010 (4CE788D2)
83e00000 83e17000 tdx tdx.sys Tue Oct 13 11:31:24 2015 (561D31DC)
83e1a000 83e9f000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 06:00:54 2010 (4CE7B876)
83e9f000 83eb0000 PSHED PSHED.dll Mon Jul 13 20:09:36 2009 (4A5BDAD0)
83eb0000 83eb8000 BOOTVID BOOTVID.dll Mon Jul 13 20:04:34 2009 (4A5BD9A2)
83eb8000 83efa000 CLFS CLFS.SYS Tue Mar 03 21:00:23 2015 (54F67547)
83efa000 83f61000 CI CI.dll Thu Jun 26 20:42:04 2014 (53ACCBEC)
83f61000 83fe2000 Wdf01000 Wdf01000.sys Fri Jun 21 21:29:37 2013 (51C50C11)
83fe2000 83ff0000 WDFLDR WDFLDR.SYS Wed Jul 25 21:36:38 2012 (5010AD36)
84a00000 84a0e000 Npfs Npfs.SYS Mon Jul 13 18:11:31 2009 (4A5BBF23)
84a0e000 84a20000 AgileVpn AgileVpn.sys Mon Jul 13 18:55:00 2009 (4A5BC954)
84a20000 84a6b000 volmgrx volmgrx.sys Mon Jul 13 18:11:41 2009 (4A5BBF2D)
84a6b000 84a72000 pciide pciide.sys Mon Jul 13 18:11:19 2009 (4A5BBF17)
84a72000 84a80000 PCIIDEX PCIIDEX.SYS Mon Jul 13 18:11:15 2009 (4A5BBF13)
84a80000 84a96000 mountmgr mountmgr.sys Wed Jul 15 11:34:19 2015 (55A68B8B)
84a96000 84a9f000 atapi atapi.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
84a9f000 84ac2000 ataport ataport.SYS Sun Aug 04 19:46:59 2013 (51FEF603)
84ac2000 84acb000 amdxata amdxata.sys Fri Mar 19 11:19:01 2010 (4BA3A3F5)
84acb000 84aff000 fltmgr fltmgr.sys Mon Jul 13 18:11:13 2009 (4A5BBF11)
84aff000 84b10000 fileinfo fileinfo.sys Mon Jul 13 18:21:51 2009 (4A5BC18F)
84b10000 84bc7000 ndis ndis.sys Mon Oct 12 22:32:54 2015 (561C7B66)
84bc7000 84bf8000 fwpkclnt fwpkclnt.sys Fri Apr 04 20:08:43 2014 (533F579B)
8c400000 8c926000 kl1 kl1.sys Thu Jun 18 13:58:40 2015 (558314E0)
8c926000 8c96e000 ACPI ACPI.sys Sat Nov 20 02:37:52 2010 (4CE788E0)
8c96e000 8c977000 WMILIB WMILIB.SYS Mon Jul 13 18:11:22 2009 (4A5BBF1A)
8c977000 8c97f000 msisadrv msisadrv.sys Mon Jul 13 18:11:09 2009 (4A5BBF0D)
8c97f000 8c9a9000 pci pci.sys Sat Nov 20 02:37:57 2010 (4CE788E5)
8c9a9000 8c9b4000 vdrvroot vdrvroot.sys Mon Jul 13 18:46:19 2009 (4A5BC74B)
8c9b4000 8c9c5000 partmgr partmgr.sys Sat Mar 17 00:03:08 2012 (4F641B0C)
8c9c5000 8c9d5000 volmgr volmgr.sys Sat Nov 20 02:38:06 2010 (4CE788EE)
8c9d5000 8ca00000 klflt klflt.sys Thu Sep 24 06:51:27 2015 (5603E3BF)
8ca00000 8ca09000 Fs_Rec Fs_Rec.sys Wed Feb 29 21:21:26 2012 (4F4EEB36)
8ca09000 8ca11000 rdprefmp rdprefmp.sys Mon Jul 13 19:01:41 2009 (4A5BCAE5)
8ca11000 8ca1c000 Msfs Msfs.SYS Mon Jul 13 18:11:26 2009 (4A5BBF1E)
8ca1c000 8ca28000 TDI TDI.SYS Sat Nov 20 02:39:18 2010 (4CE78936)
8ca28000 8cb57000 Ntfs Ntfs.sys Thu Jan 23 19:01:10 2014 (52E1BB56)
8cb57000 8cb82000 msrpc msrpc.sys Mon Jul 13 18:11:59 2009 (4A5BBF3F)
8cb82000 8cb95000 ksecdd ksecdd.sys Mon Oct 19 18:27:19 2015 (56257C57)
8cb95000 8cbf2000 cng cng.sys Mon Sep 21 21:54:46 2015 (5600C2F6)
8cbf2000 8cc00000 pcw pcw.sys Mon Jul 13 18:11:10 2009 (4A5BBF0E)
8cc00000 8cc2d000 rdyboost rdyboost.sys Sat Nov 20 03:00:07 2010 (4CE78E17)
8cc2e000 8cc6c000 NETIO NETIO.SYS Tue Nov 26 04:01:51 2013 (5294718F)
8cc6c000 8cc92000 ksecpkg ksecpkg.sys Mon Oct 19 18:42:51 2015 (56257FFB)
8cc92000 8cdde000 tcpip tcpip.sys Fri Apr 04 20:10:29 2014 (533F5805)
8cdde000 8cdff000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 18:25:49 2009 (4A5BC27D)
8ce00000 8ce08000 rdpencdd rdpencdd.sys Mon Jul 13 19:01:39 2009 (4A5BCAE3)
8ce0b000 8ce97700 timntr timntr.sys Tue Sep 29 08:37:45 2009 (4AC20DA9)
8ce98000 8ced7000 volsnap volsnap.sys Sat Nov 20 02:38:13 2010 (4CE788F5)
8ced7000 8cfb3ee0 tdrpm258 tdrpm258.sys Tue Oct 20 02:40:10 2009 (4ADD695A)
8cfb4000 8cfbc000 spldr spldr.sys Mon May 11 11:13:47 2009 (4A084EBB)
8cfbc000 8cfe0fe0 snapman snapman.sys Mon Oct 19 05:30:07 2009 (4ADC3FAF)
8cfe1000 8cff1000 mup mup.sys Mon Jul 13 18:14:14 2009 (4A5BBFC6)
8cff1000 8cff9000 hwpolicy hwpolicy.sys Sat Nov 20 02:37:35 2010 (4CE788CF)
8d000000 8d00d000 watchdog watchdog.sys Mon Jul 13 18:24:10 2009 (4A5BC21A)
8d00d000 8d015000 RDPCDD RDPCDD.sys Sat Nov 20 04:22:19 2010 (4CE7A15B)
8d016000 8d048000 fvevol fvevol.sys Wed Jan 23 20:41:37 2013 (51009F61)
8d048000 8d059000 disk disk.sys Mon Jul 13 18:11:28 2009 (4A5BBF20)
8d059000 8d07e000 CLASSPNP CLASSPNP.SYS Mon Jul 13 18:11:20 2009 (4A5BBF18)
8d0b0000 8d0cf000 cdrom cdrom.sys Sat Nov 20 02:38:09 2010 (4CE788F1)
8d0cf000 8d190000 klif klif.sys Tue Oct 20 05:24:22 2015 (56261656)
8d190000 8d1c4000 ks ks.sys Sat Nov 20 03:50:17 2010 (4CE799D9)
8d1c4000 8d1e0000 klhk klhk.sys Mon Jul 20 11:10:58 2015 (55AD1D92)
8d1e0000 8d1e7000 Null Null.SYS Mon Jul 13 18:11:12 2009 (4A5BBF10)
8d1e7000 8d1ee000 Beep Beep.SYS Mon Jul 13 18:45:00 2009 (4A5BC6FC)
8d1ee000 8d1fa000 vga vga.sys Mon Jul 13 18:25:50 2009 (4A5BC27E)
92600000 9260c000 ISWKL ISWKL.sys Thu Jul 17 05:58:22 2014 (53C7AC4E)
9260e000 92668000 afd afd.sys Tue Oct 13 11:31:51 2015 (561D31F7)
92668000 9269a000 netbt netbt.sys Sat Nov 20 02:39:22 2010 (4CE7893A)
9269a000 9270f000 vsdatant vsdatant.sys Mon Nov 02 22:53:24 2015 (56383DC4)
9270f000 92716000 wfplwf wfplwf.sys Mon Jul 13 18:53:51 2009 (4A5BC90F)
92716000 92735000 pacer pacer.sys Mon Jul 13 18:53:58 2009 (4A5BC916)
92735000 92749000 klwtp klwtp.sys Wed Jun 03 10:29:53 2015 (556F1D71)
92749000 92757000 netbios netbios.sys Mon Jul 13 18:53:54 2009 (4A5BC912)
92757000 9276a000 wanarp wanarp.sys Sat Nov 20 04:07:45 2010 (4CE79DF1)
9276a000 9277b000 termdd termdd.sys Sat Nov 20 04:21:10 2010 (4CE7A116)
9277b000 927bc000 rdbss rdbss.sys Sat Nov 20 02:42:44 2010 (4CE78A04)
927bc000 927c6000 nsiproxy nsiproxy.sys Mon Jul 13 18:12:08 2009 (4A5BBF48)
927c6000 927d0000 mssmbios mssmbios.sys Mon Jul 13 18:19:25 2009 (4A5BC0FD)
927d0000 927daf40 FDCDNT FDCDNT.SYS Tue Jan 15 04:09:28 2008 (478C8658)
927db000 927dfb00 ElRawDsk ElRawDsk.sys Tue Oct 26 04:34:08 2010 (4CC6A090)
927e0000 927ec000 discache discache.sys Mon Jul 13 18:24:04 2009 (4A5BC214)
927ec000 927f9000 CompositeBus CompositeBus.sys Sat Nov 20 03:50:21 2010 (4CE799DD)
92c00000 92c18000 i8042prt i8042prt.sys Mon Jul 13 18:11:23 2009 (4A5BBF1B)
92c18000 92c25000 kbdclass kbdclass.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
92c25000 92c2e000 wmiacpi wmiacpi.sys Mon Jul 13 18:19:16 2009 (4A5BC0F4)
92c38000 92c50000 dfsc dfsc.sys Sat Nov 20 02:42:32 2010 (4CE789F8)
92c50000 92c56000 CGKDarkWatcher CGKDarkWatcher.sys Tue Oct 20 08:23:29 2015 (56264051)
92c56000 92c64000 blbdrive blbdrive.sys Mon Jul 13 18:23:04 2009 (4A5BC1D8)
92c64000 92c85000 tunnel tunnel.sys Sat Nov 20 04:06:40 2010 (4CE79DB0)
92c85000 92c97000 intelppm intelppm.sys Mon Jul 13 18:11:03 2009 (4A5BBF07)
92c97000 92ce7000 yk62x86 yk62x86.sys Mon Jun 15 10:50:03 2009 (4A366DAB)
92ce7000 92d66580 ctaud2k ctaud2k.sys Fri Feb 28 10:55:44 2014 (5310BF90)
92d67000 92d96000 portcls portcls.sys Thu Oct 03 20:17:06 2013 (524E1712)
92d96000 92dcb000 ctoss2k ctoss2k.sys Fri Feb 28 10:54:36 2014 (5310BF4C)
92dcb000 92dd3000 ctprxy2k ctprxy2k.sys Fri Feb 28 10:55:49 2014 (5310BF95)
92dd3000 92e00000 1394ohci 1394ohci.sys Sat Nov 20 04:01:11 2010 (4CE79C67)
95400000 9541b000 luafv luafv.sys Mon Jul 13 18:15:44 2009 (4A5BC020)
9541b000 9542b000 lltdio lltdio.sys Mon Jul 13 18:53:18 2009 (4A5BC8EE)
9542b000 9543e000 rspndr rspndr.sys Mon Jul 13 18:53:20 2009 (4A5BC8F0)
9543f000 95457000 rasl2tp rasl2tp.sys Mon Jul 13 18:54:33 2009 (4A5BC939)
95457000 95462000 ndistapi ndistapi.sys Mon Jul 13 18:54:24 2009 (4A5BC930)
95462000 95484000 ndiswan ndiswan.sys Sat Nov 20 04:07:48 2010 (4CE79DF4)
95484000 9549c000 raspppoe raspppoe.sys Mon Jul 13 18:54:53 2009 (4A5BC94D)
9549c000 954b3000 raspptp raspptp.sys Mon Jul 13 18:54:47 2009 (4A5BC947)
954b3000 954ca000 rassstp rassstp.sys Mon Jul 13 18:54:57 2009 (4A5BC951)
954ca000 954d7000 mouclass mouclass.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
954d7000 954d8380 swenum swenum.sys Mon Jul 13 18:45:08 2009 (4A5BC704)
954d9000 954e7000 umbus umbus.sys Sat Nov 20 04:00:23 2010 (4CE79C37)
954e7000 954f3000 nvvad32v nvvad32v.sys Fri Mar 28 08:31:55 2014 (533579CB)
954f3000 95537000 usbhub usbhub.sys Tue Nov 26 19:14:23 2013 (5295476F)
95537000 955d3000 ctac32k ctac32k.sys Wed Jul 02 02:42:27 2008 (486B3163)
955d3000 955d9480 HIDPARSE HIDPARSE.SYS Tue Jul 02 22:36:22 2013 (51D39C36)
955da000 955e2000 LHidFilt LHidFilt.Sys Fri Sep 02 01:22:16 2011 (4E607618)
955e2000 955ed000 mouhid mouhid.sys Mon Jul 13 18:45:08 2009 (4A5BC704)
955ed000 955f4800 LMouFilt LMouFilt.Sys Fri Sep 02 01:22:22 2011 (4E60761E)
955f5000 95600000 monitor monitor.sys Mon Jul 13 18:25:58 2009 (4A5BC286)
95a00000 95a19000 drmk drmk.sys Thu Oct 03 20:47:02 2013 (524E1E16)
95a1a000 9648f000 nvlddmkm nvlddmkm.sys Wed Jul 02 12:42:25 2014 (53B44481)
9648f000 96547000 dxgkrnl dxgkrnl.sys Sun Jun 15 19:43:59 2014 (539E3DCF)
96547000 96580000 dxgmms1 dxgmms1.sys Sun Jun 15 19:42:07 2014 (539E3D5F)
96580000 9659f000 HDAudBus HDAudBus.sys Sat Nov 20 03:59:28 2010 (4CE79C00)
9659f000 965ae000 usbehci usbehci.sys Tue Nov 26 19:13:41 2013 (52954745)
965ae000 965f9000 USBPORT USBPORT.SYS Tue Nov 26 19:13:45 2013 (52954749)
965f9000 965fe300 GEARAspiWDM GEARAspiWDM.sys Thu May 03 14:55:59 2012 (4FA2E2CF)
96c00000 96c0b000 hidusb hidusb.sys Sat Nov 20 03:59:38 2010 (4CE79C0A)
96c0b000 96c1e000 HIDCLASS HIDCLASS.SYS Tue Jul 02 22:36:24 2013 (51D39C38)
96c22000 96d45000 ha20x2k ha20x2k.sys Fri Feb 28 10:55:04 2014 (5310BF68)
96d45000 96d75000 emupia2k emupia2k.sys Fri Feb 28 10:54:13 2014 (5310BF35)
96d75000 96d9e000 ctsfm2k ctsfm2k.sys Fri Feb 28 10:54:18 2014 (5310BF3A)
96d9e000 96daf000 NDProxy NDProxy.SYS Sat Nov 20 04:07:39 2010 (4CE79DEB)
96daf000 96dd9000 nvhda32v nvhda32v.sys Thu Nov 28 07:37:50 2013 (5297472E)
96dd9000 96dea000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 18:12:47 2009 (4A5BBF6F)
96dea000 96df4000 Dxapi Dxapi.sys Mon Jul 13 18:25:25 2009 (4A5BC265)
96df4000 96df9580 LUsbFilt LUsbFilt.Sys Fri Sep 02 01:22:25 2011 (4E607621)
96e00000 96e0d000 crashdmp crashdmp.sys Mon Jul 13 18:45:50 2009 (4A5BC72E)
96e0d000 96e18000 dump_dumpata dump_dumpata.sys Mon Jul 13 18:11:16 2009 (4A5BBF14)
96e1d000 96e6d000 HdAudio HdAudio.sys Sat Nov 20 04:00:19 2010 (4CE79C33)
96e6d000 96e82000 CTHWIUT CTHWIUT.SYS Fri Feb 28 11:04:17 2014 (5310C191)
96e82000 96eae000 CT20XUT CT20XUT.SYS Fri Feb 28 11:04:09 2014 (5310C189)
96eae000 96ff5000 CTEXFIFX CTEXFIFX.SYS Fri Feb 28 11:03:52 2014 (5310C178)
96ff5000 96ffe000 dump_atapi dump_atapi.sys Mon Jul 13 18:11:15 2009 (4A5BBF13)
96ffe000 96fff780 USBD USBD.SYS Tue Nov 26 19:13:33 2013 (5295473D)
a08c0000 a0b1a000 win32k win32k.sys Tue Nov 10 11:40:13 2015 (56422BFD)
a0b30000 a0b39000 TSDDD TSDDD.dll Mon Jul 13 19:01:40 2009 (4A5BCAE4)
a0b60000 a0b7e000 cdd cdd.dll Sun Jun 15 20:40:28 2014 (539E4B0C)
a0b80000 a0bce000 ATMFD ATMFD.DLL Tue Sep 01 20:33:48 2015 (55E651FC)
a7201000 a7287000 HTTP HTTP.sys Tue Feb 24 21:03:11 2015 (54ED3B6F)
a7287000 a72a0000 bowser bowser.sys Tue Feb 22 22:47:32 2011 (4D649164)
a72a0000 a72b2000 mpsdrv mpsdrv.sys Mon Jul 13 18:52:52 2009 (4A5BC8D4)
a72b2000 a72d5000 mrxsmb mrxsmb.sys Mon Oct 19 18:28:55 2015 (56257CB7)
a72d5000 a7311000 mrxsmb10 mrxsmb10.sys Mon Oct 19 18:29:19 2015 (56257CCF)
a7311000 a732d000 mrxsmb20 mrxsmb20.sys Mon Oct 19 18:28:55 2015 (56257CB7)
a732d000 a733a000 tcpipreg tcpipreg.sys Wed Oct 03 10:21:37 2012 (506C5801)
a7345000 a73dd000 peauth peauth.sys Mon Feb 02 20:58:08 2015 (54D03940)
a73dd000 a73fe000 srvnet srvnet.sys Thu Apr 28 21:46:08 2011 (4DBA2670)
a8004000 a8054000 srv2 srv2.sys Thu Apr 28 21:46:13 2011 (4DBA2675)
a8054000 a80a6000 srv srv.sys Thu Apr 28 21:46:30 2011 (4DBA2686)
a8110000 a8119000 asyncmac asyncmac.sys Mon Jul 13 18:54:46 2009 (4A5BC946)

Unloaded modules:
a80a6000 a8110000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0006A000
a732d000 a7345000 parport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00018000
8d07e000 8d08b000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
8d08b000 8d096000 dump_ataport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
8d096000 8d09f000 dump_atapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
8d09f000 8d0b0000 dump_dumpfve.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
Closing open log file c:debuglog.txt


Hope this helps figure out why I'm getting the constant BSOD's. Thanks, Brian

 

OK, it just BSOD'ed on me again. I am running a clean boot (see jpeg's), and all I was doing was checking my e-mail. It won't copy and paste jpeg so here's the list of all checked startup items: only 2 selected and they are both Zone Alarm. Here's all checked services: Zone Alarm anti keylogger, Mozilla maintenance service, True Vector internet monitor (ZA), Zone Alarm privacy service, and Zone Alarm anti theft.
I tried to get the dump file but even though the Microsoft degugging tools shows up on my installed programs list now debugwiz wouldn't work. It says debugging key not found, and when I click on the download tools button it sends me to the Microsoft website. So I guess I'd have to uninstall C++2010 again, uninstall debugging tools currently installed, re-download debugging tools, and then start the whole process over? That's a bit of a PITA, but I'll do it if you want the dump file again. I'm also going to shutdown ZA anti keylogger, and anti theft to see if that makes a difference. I would shut down anti privacy but I'm not sure what that does.....I don't want to do anything that would seriously weaken my security when online. So let me know if you want this latest dump file. We need an emoticon with someone holding a pistol to their head and blowing their brains out....that's how this darn thing makes me feel! Ok, that's hyperbola on my part....but still....
Brian

 

Thanks, I really appreciate the help. I will definitely do as you suggest. But I am pretty nervous about relying on Windows firewall. I'm paranoid about internet security and have always relied on and had good results with ZA. Brian

 

I like many others that I know have used the Windows firewall on Win 7, 8, 8.1 and 10 with no problems. It is better than it was in XP and Vista and before those versions of Windows.