Xp is crashing! BSOD

Hi, Rockster.

That "Important: " (as labeled at file.net) statement you quoted appears to be displayed for any file one gets information about at file.net (including OS files that are normally located in the system32 folder). It seems that statement is cleverly written and placed in the same paragraph as a link to the software being "recommended " just to generate interest/concern and sales. That statement followed by a recommendation to download a particular application borders on unethical IMHO (because I think it generates unwarranted alarm/concern among people seeking information about files). I suspect there is a commercial interest between file.net and the software they "recommend ".

Although file.net information is often useful for determining who a file name might belong to and non-Windows-OS files located in the Windows or system32 folders might be cause for further investigation, I take that quoted statement with a grain of salt.

In fact, some legitimate software applications place .EXE files in the Windows or system32 folders because I expect they can always be found by the OS when located there (similar to the PATH statement in the old DOS days where one could specify directories that the OS would search when an .EXE, .COM, or .BAT file name was typed at the DOS prompt...no matter what directory's DOS prompt one was typing the filename at).

An example of a legitimate non-OS file in the system32 folder is Webroot Window Washer's "Washer Security Service" (wwSecure.exe).

Me neither. Long ago I installed the application file.net "recommends" and I even paid for a license. It produced interesting information (at the time) but I do not currently have that software installed. (Haven't used it in years.) Read between the lines of this paragraph as you wish.

 

Well they did try another HD, but they tested it in front of me, but if you want I can do some tests too. I will download seagates tools. And I will try to install the modem again etc.. and do as you requested. Btw, after the removal of the modem it just crashed once!

 

All BSOD dump logs Tcm9669 has posted (so far) are linked below.

From Post #1:
PROCESS_NAME: System
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: NDIS.sys

From Post #4:
PROCESS_NAME: avgcc.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: win32k.sys

From Post #5:
PROCESS_NAME: explorer.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: ntkrnlmp.exe

From Post #34:
PROCESS_NAME: System
(No "EXCEPTION_CODE" listed.)
Probably caused by : memory_corruption ( nt!MmInPageKernelStack+11c )
IMAGE_NAME: memory_corruption

From Post #44:
PROCESS_NAME: firefox.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: hardware

From Post#49:
PROCESS_NAME: avgwb.dat
ExceptionCode: c0000005 (Access violation)
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: Ntfs.sys

From Post #60:
PROCESS_NAME: firefox.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: ati2cqag.dll

From Post #77:
PROCESS_NAME: explorer.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".
IMAGE_NAME: ntkrnlmp.exe

From Post #94 (first crash after dial-up modem was reported as physically removed):
PROCESS_NAME: firefox.exe
(No "EXCEPTION_CODE" listed.)
Probably caused by : CLASSPNP.SYS ( CLASSPNP!NewTransferPacket+6a ) <--I have no idea about this one at present.
IMAGE_NAME: CLASSPNP.SYS

===========

Could there be a correlation between the exceptions codes highlighted above and the following MS KB article?

• KB938828 - Error message when the Explorer.exe process crashes on a Windows XP SP2-based computer: "STOP 0xc0000005 "

The hotfix was pushed in this month's "Patch Tuesday" batch.

The KB article title and "SYMPTOMS" are unclear to me whether "0xc0000005" refers to the STOP code (first hexadecimal code displayed on a blue screen) or the first parameter of the STOP code. (The "SYMPTOMS" example lacks details IMHO.)

 

Well I have NO processes that make baloon tips, but still I downloaded the fix.

BTW, I tested the HD with the DOS tool from the deagate website, it has a short and long test, it passed from both tests, so there are no problems with the HD, later I will try to plug and unplug again the modem.

 

Here is another dump file, is this another one caused by the modem drivers? If yes i will plug it in and remove it again. Here is the dump, thanks.


Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini081707-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Fri Aug 17 19:52:23.359 2007 (GMT+2)
System Uptime: 0 days 7:47:16.055
Loading Kernel Symbols
.........................................................................................................................................
Loading User Symbols
Loading unloaded module list
...................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, f79f2c94, f7a2db70, 0}

Probably caused by : sysaudio.sys ( sysaudio!CStartNodeInstance::SetStateBottomUp+1b )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: f79f2c94, The address that the exception occurred at
Arg3: f7a2db70, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
sysaudio!CStartNodeInstance::SetStateBottomUp+1b
f79f2c94 8b4e10 mov ecx,dword ptr [esi+10h]

TRAP_FRAME: f7a2db70 -- (.trap 0xfffffffff7a2db70)
.trap 0xfffffffff7a2db70
ErrCode = 00000000
eax=00000000 ebx=e51527d4 ecx=00000002 edx=00000002 esi=1aea27d4 edi=e51527b8
eip=f79f2c94 esp=f7a2dbe4 ebp=f7a2dbf4 iopl=0 nv up ei pl nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
sysaudio!CStartNodeInstance::SetStateBottomUp+0x1b:
f79f2c94 8b4e10 mov ecx,dword ptr [esi+10h] ds:0023:1aea27e4=????????
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: wmplayer.exe

LAST_CONTROL_TRANSFER: from f79f2ec6 to f79f2c94

STACK_TEXT:
f7a2dbf4 f79f2ec6 00000001 00000002 00000007 sysaudio!CStartNodeInstance::SetStateBottomUp+0x1b
f7a2dc14 f79f2e33 00000000 00000007 e51527b8 sysaudio!CStartNodeInstance::SetState+0x6b
f7a2dc24 f79ee63d e5037dd0 f7a2dc48 f79f0bea sysaudio!CStartNodeInstance::~CStartNodeInstance+0x21
f7a2dc30 f79f0bea 00000001 e5037dd0 f79f0ba2 sysaudio!CStartNodeInstance::`scalar deleting destructor'+0xd
f7a2dc3c f79f0ba2 8652a770 f7a2dc58 f79f135c sysaudio!CPinInstance::~CPinInstance+0x2f
f7a2dc48 f79f135c 00000001 8615d4f8 f7a2dc68 sysaudio!CPinInstance::`scalar deleting destructor'+0xd
f7a2dc58 f743f737 86450a38 8652a770 f7a2dcb0 sysaudio!CPinInstance:inDispatchClose+0x26
f7a2dc68 804e19ee 86450a38 8652a770 8652a770 ks!DispatchClose+0x32
f7a2dc78 8057e648 8617ff38 00000000 00000000 nt!IopfCallDriver+0x31
f7a2dcb0 8056e78f 0017ff50 00000000 8617ff38 nt!IopDeleteFile+0x132
f7a2dccc 804e1f77 8617ff50 00000000 00000538 nt!ObpRemoveObjectRoutine+0xdf
f7a2dce4 80570dde 86169370 e5021880 86117898 nt!ObfDereferenceObject+0x4c
f7a2dcfc 80570cfc e5021880 8617ff50 00000538 nt!ObpCloseHandleTableEntry+0x155
f7a2dd44 80570d46 00000538 00000001 00000000 nt!ObpCloseHandle+0x87
f7a2dd58 804ddf0f 00000538 0006deb0 7c90eb94 nt!NtClose+0x1d
f7a2dd58 7c90eb94 00000538 0006deb0 7c90eb94 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006deb0 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
sysaudio!CStartNodeInstance::SetStateBottomUp+1b
f79f2c94 8b4e10 mov ecx,dword ptr [esi+10h]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: sysaudio

IMAGE_NAME: sysaudio.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107f1a

SYMBOL_NAME: sysaudio!CStartNodeInstance::SetStateBottomUp+1b

FAILURE_BUCKET_ID: 0x8E_sysaudio!CStartNodeInstance::SetStateBottomUp+1b

BUCKET_ID: 0x8E_sysaudio!CStartNodeInstance::SetStateBottomUp+1b

Followup: MachineOwner
---------

eax=00000000 ebx=e51527d4 ecx=00000002 edx=00000002 esi=1aea27d4 edi=e51527b8
eip=f79f2c94 esp=f7a2dbe4 ebp=f7a2dbf4 iopl=0 nv up ei pl nz na pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
sysaudio!CStartNodeInstance::SetStateBottomUp+0x1b:
f79f2c94 8b4e10 mov ecx,dword ptr [esi+10h] ds:0023:1aea27e4=????????
ChildEBP RetAddr Args to Child
f7a2dbf4 f79f2ec6 00000001 00000002 00000007 sysaudio!CStartNodeInstance::SetStateBottomUp+0x1b (FPO: [Non-Fpo])
f7a2dc14 f79f2e33 00000000 00000007 e51527b8 sysaudio!CStartNodeInstance::SetState+0x6b (FPO: [Non-Fpo])
f7a2dc24 f79ee63d e5037dd0 f7a2dc48 f79f0bea sysaudio!CStartNodeInstance::~CStartNodeInstance+0x21 (FPO: [0,0,0])
f7a2dc30 f79f0bea 00000001 e5037dd0 f79f0ba2 sysaudio!CStartNodeInstance::`scalar deleting destructor'+0xd (FPO: [Non-Fpo])
f7a2dc3c f79f0ba2 8652a770 f7a2dc58 f79f135c sysaudio!CPinInstance::~CPinInstance+0x2f (FPO: [0,0,0])
f7a2dc48 f79f135c 00000001 8615d4f8 f7a2dc68 sysaudio!CPinInstance::`scalar deleting destructor'+0xd (FPO: [Non-Fpo])
f7a2dc58 f743f737 86450a38 8652a770 f7a2dcb0 sysaudio!CPinInstance:inDispatchClose+0x26 (FPO: [Non-Fpo])
f7a2dc68 804e19ee 86450a38 8652a770 8652a770 ks!DispatchClose+0x32 (FPO: [Non-Fpo])
f7a2dc78 8057e648 8617ff38 00000000 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f7a2dcb0 8056e78f 0017ff50 00000000 8617ff38 nt!IopDeleteFile+0x132 (FPO: [Non-Fpo])
f7a2dccc 804e1f77 8617ff50 00000000 00000538 nt!ObpRemoveObjectRoutine+0xdf (FPO: [Non-Fpo])
f7a2dce4 80570dde 86169370 e5021880 86117898 nt!ObfDereferenceObject+0x4c (FPO: [0,0,0])
f7a2dcfc 80570cfc e5021880 8617ff50 00000538 nt!ObpCloseHandleTableEntry+0x155 (FPO: [Non-Fpo])
f7a2dd44 80570d46 00000538 00000001 00000000 nt!ObpCloseHandle+0x87 (FPO: [Non-Fpo])
f7a2dd58 804ddf0f 00000538 0006deb0 7c90eb94 nt!NtClose+0x1d (FPO: [Non-Fpo])
f7a2dd58 7c90eb94 00000538 0006deb0 7c90eb94 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f7a2dd64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006deb0 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 80704000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)
80704000 80724d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)
aad0c000 aad35f00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)
ab11e000 ab15e380 HTTP HTTP.sys Wed Aug 04 08:00:09 2004 (41107B69)
ab2c7000 ab319180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
ab342000 ab3b93a0 HSF_V124 HSF_V124.sys Tue May 29 18:05:40 2001 (3B13C8D4)
ab482000 ab4b2c00 HSF_FAXX HSF_FAXX.sys Tue May 29 18:09:54 2001 (3B13C9D2)
ab4b3000 ab512800 HSF_K56K HSF_K56K.sys Tue May 29 18:11:09 2001 (3B13CA1D)
ab513000 ab52f440 HSF_FSKS HSF_FSKS.sys Tue May 29 18:10:42 2001 (3B13CA02)
ab530000 ab576c40 HSF_FALL HSF_FALL.sys Tue May 29 18:08:30 2001 (3B13C97E)
ab687000 ab689e40 mdmxsdk mdmxsdk.sys Wed Mar 17 20:04:10 2004 (4058A12A)
ab6df000 ab70b400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
ab9a9000 ab9bd400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
adce9000 add0c000 Fastfat Fastfat.SYS Wed Aug 04 08:14:15 2004 (41107EB7)
add46000 add55900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
b2970000 b297ed00 dump_viamraid dump_viamraid.sys Mon Jul 05 03:52:59 2004 (40E8B47B)
b2ccf000 b2d97920 avg7core avg7core.sys Mon Aug 13 16:38:39 2007 (46C06CEF)
b3493000 b3495900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
b34af000 b34b2780 dump_scsiport dump_scsiport.sys Wed Aug 04 07:59:51 2004 (41107B57)
b36bd000 b36bea80 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
b393a000 b3960bc0 omcamvid omcamvid.sys Fri Sep 07 23:28:12 2001 (3B993BEC)
b5144000 b514fe00 STREAM STREAM.SYS Wed Aug 04 08:07:58 2004 (41107D3E)
b5635000 b5638280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
b58e9000 b58ee820 OVTCAMD OVTCAMD.SYS Fri Aug 31 19:56:07 2001 (3B8FCFB7)
b5909000 b590d500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
b67cf000 b683d380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)
b683e000 b6869180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)
b68a9000 b68cad00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
b68f3000 b691ac00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
b691b000 b693bf00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)
b693c000 b6993a80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
b6994000 b69a6400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
b71f4000 b71fac80 avg7rsxp avg7rsxp.sys Tue Jan 30 16:08:42 2007 (45BF5F7A)
b8bef000 b8bf6880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
b8bf7000 b8bfba80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
b8bff000 b8c04200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
b8c27000 b8c2c000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
b9115000 b911d880 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
b9135000 b913d700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
b9145000 b914d700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
ba133000 ba135280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
baca4000 bacb0620 HSF_TONE HSF_TONE.sys Tue May 29 18:08:53 2001 (3B13C995)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf9d3000 bfa16000 ati2dvag ati2dvag.dll Wed May 03 18:51:00 2006 (4458DF74)
bfa16000 bfa5b000 ati2cqag ati2cqag.dll Wed May 03 18:09:20 2006 (4458D5B0)
bfa5b000 bfa91000 atikvmag atikvmag.dll Wed May 03 18:15:58 2006 (4458D73E)
bfa91000 bfd228a0 ati3duag ati3duag.dll Wed May 03 18:35:24 2006 (4458DBCC)
bfd23000 bfe7ac00 ativvaxx ativvaxx.dll Wed May 03 18:29:13 2006 (4458DA59)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 09:56:56 2004 (411096C8)
f7263000 f7296200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7297000 f72c7100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f72f0000 f7300e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f7311000 f731f100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f73a1000 f73b7680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f73b8000 f73db980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
f73dc000 f73fe980 viaudios viaudios.sys Mon May 24 08:11:06 2004 (40B191FA)
f73ff000 f7412900 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f7413000 f7435e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7436000 f7458680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7459000 f746c780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f746d000 f75f4000 ati2mtag ati2mtag.sys Wed May 03 18:50:42 2006 (4458DF62)
f760c000 f760fc80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f763c000 f7656580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7657000 f7683a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f7684000 f7710480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f7711000 f7727780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f7728000 f7739f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f773a000 f7758780 fltmgr fltmgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f7759000 f7770800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
f7771000 f7788480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f7789000 f77ae700 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f77af000 f77cd880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f77ce000 f77dea80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f77df000 f780cd80 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f782e000 f7836c00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f783e000 f7848500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f784e000 f785ac80 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f785e000 f786cd00 viamraid viamraid.sys Mon Jul 05 03:52:59 2004 (40E8B47B)
f786e000 f7876e00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f787e000 f788a200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f788e000 f7896b80 PxHelp20 PxHelp20.sys Fri Feb 02 22:23:57 2007 (45C3ABED)
f789e000 f78a8e80 uagp35 uagp35.sys Wed Aug 04 08:07:43 2004 (41107D2F)
f78ce000 f78d6d00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f78de000 f78e8380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f78ee000 f78fa180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f78fe000 f790c080 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f790e000 f791ae00 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f791e000 f792dd80 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f794e000 f7956080 ipfltdrv ipfltdrv.sys Fri Aug 17 22:55:07 2001 (3B7D84AB)
f795e000 f796cb80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
f796e000 f7978600 fetnd5bv fetnd5bv.sys Tue Apr 17 05:59:43 2007 (4624462F)
f797e000 f7987200 VcommMgr VcommMgr.sys Mon Mar 05 13:17:39 2007 (45EC0A63)
f798e000 f799a880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f799e000 f79a8200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f79ae000 f79b9d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f79be000 f79c6900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f79ce000 f79d7f00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f79ee000 f79fcd80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
f7a3e000 f7a47480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f7aae000 f7ab4200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f7ab6000 f7aba900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f7abe000 f7ac6000 videX32 videX32.sys Tue Oct 17 14:22:24 2006 (4534CB00)
f7ac6000 f7acd000 BTHidMgr BTHidMgr.sys Mon Mar 05 13:17:09 2007 (45EC0A45)
f7b6e000 f7b73000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b76000 f7b7c800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b7e000 f7b83a00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b86000 f7b8c000 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b8e000 f7b8f000 fdc fdc.sys unavailable (00000000)
f7b9e000 f7ba4c00 blueletaudio blueletaudio.sys Mon Mar 05 13:16:00 2007 (45EC0A00)
f7ba6000 f7bab180 BlueletSCOAudio BlueletSCOAudio.sys Mon Mar 05 13:16:16 2007 (45EC0A10)
f7bae000 f7bb5580 Modem Modem.SYS Wed Aug 04 08:08:04 2004 (41107D44)
f7bb6000 f7bba880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f7bbe000 f7bc2580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f7bc6000 f7bca080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f7bce000 f7bd4b80 VComm VComm.sys Mon Mar 05 13:17:23 2007 (45EC0A53)
f7c3e000 f7c41000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f7c42000 f7c45680 vbtenum vbtenum.sys Mon Mar 05 13:16:57 2007 (45EC0A39)
f7d0e000 f7d11c80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f7d1a000 f7d1c580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7d26000 f7d28c80 btnetdrv btnetdrv.sys Mon Mar 05 13:18:00 2007 (45EC0A78)
f7d2e000 f7d2fb80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7d30000 f7d31100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d32000 f7d33500 viaide viaide.sys Wed Aug 04 07:59:42 2004 (41107B4E)
f7d34000 f7d35700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7d5c000 f7d5d700 RootMdm RootMdm.sys Fri Aug 17 22:57:36 2001 (3B7D8540)
f7d5e000 f7d5f100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7d72000 f7d73280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7d96000 f7d97080 avg7rsw avg7rsw.sys Tue Jul 26 14:10:51 2005 (42E6284B)
f7dac000 f7dad360 avgtdi avgtdi.sys Thu Aug 25 11:59:58 2005 (430D969E)
f7dca000 f7dcbf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7dcc000 f7dcd080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7dce000 f7dcf080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7dd0000 f7dd1080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7e25000 f7e25d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f7ee2000 f7ee2c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7f7c000 f7f7cb80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)
f7f7d000 f7f7df80 avgclean avgclean.sys Tue Aug 22 00:55:15 2006 (44EA39D3)

Unloaded modules:
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
aad0c000 aad36000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ab95c000 ab986000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ae3c2000 ae3c3000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a1e000 f7a2b000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ab986000 ab9a9000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a0e000 f7a1c000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b69f6000 b69f8000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9125000 b912e000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b8c07000 b8c0c000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba137000 ba13a000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

I don't know that the modem is behind the crashes, as I stated before, but once again, the modem drivers loaded immediately prior to the crash. Do the RegSeeker search for those drivers please.

 

Tcm9669:

As Dave just clarified again, although it can't be said with certainty that this is the direct cause of your crashes it certainly appears to be a common thread that is evident in all of your logs. Personally, I don't know and I am not qualified to interpret these logs. However, if I had a device that was not being used and its drivers were still being loaded and they appeared just before every crash, I would want to remove them if for no other reason, just to eliminate the possibility that they are somehow contributing to the problem.

The safest way for one who is not an expert to do this is to put the modem back in, thereby letting windows redetect it and then removing it properly to permit windows to unload the drivers. Instructions were previously given for this procedure but the drivers were not removed so one of two conclusions can be drawn. The first is that the instructions were not followed in the specific sequence given and the second is that your machine behaved differently than a normal computer would. What did or didn't happen is now somewhat irrelevent - stuff happens.

There is another alternative beyond repeating the step by step procedure that was originally suggested or using RegSeeker as Dave just suggested. I suggest it with a cautionary note as improper usage could trash your computer. This utility will also do the trick re: permitting one to remove troublesome drivers but be very careful how you use it.



edit: edited tense, repeated changed to repeating

 

RE: the utility Rockster linked to;
While it may come in handy, without knowing exactly what to look for, will not easily point you to the drivers in question. It will create a list of driver related entries and give details of it's current state, but you would need to check the properties of the listed items to find the drivers themelves.

I've put together a little compilation that I named enumeratePCIDevices to help us begin to identify lingering registry entries related to the modem. I would like for you to download it and save it to a new folder on your desktop. Open the folder and double click the file to start it. Press any key at the opening screen and wait. When it finishes gathering information, it will close and open a report. Please post the contents of that report and we can move forward from there.

 

Rockster I tried that but I couldn't find the modem drivers.


Well that is a cool program It seems that it detected the drivers. Anyways here is the report.. btw today I'm planning to plug in the modem and remove it again.

"Abiosdsk "
"abp480n5 "
"ACPI "
"ACPIEC "
"adpu160m "
"aec "
"AFD "
"Aha154x "
"aic78u2 "
"aic78xx "
"AliIde "
"amsint "
"asc "
"asc3350p "
"asc3550 "
"AsyncMac "
"atapi "
"Atdisk "
"ati2mtag "
"Atmarpc "
"audstub "
"Avg7Core "
"Avg7RsW "
"Avg7RsXP "
"AvgClean "
"AvgTdi "
"basic2 "
"Beep "
"BlueletAudio "
"BlueletSCOAudio "
"BT "
"Btcsrusb "
"BTHidEnum "
"BTHidMgr "
"BTNetFilter "
"cbidf2k "
"CCDECODE "
"cd20xrnt "
"Cdaudio "
"Cdfs "
"Cdrom "
"Changer "
"CmdIde "
"Cpqarray "
"dac960nt "
"Disk "
"dmboot "
"dmio "
"dmload "
"DMusic "
"dpti2o "
"drmkaud "
"Fallback "
"Fastfat "
"Fdc "
"FET5X86V "
"FETNDIS "
"Fips "
"Flpydisk "
"FltMgr "
"Fsks "
"Ftdisk "
"GMSIPCI "
"Gpc "
"hpn "
"HSFHWBS2 "
"HSF_DP "
"hsf_msft "
"HTTP "
"HwIOctl "
"i2omgmt "
"i2omp "
"i8042prt "
"Imapi "
"ini910u "
"IntelIde "
"intelppm "
"ip6fw "
"IpFilterDriver "
"IpInIp "
"IpNat "
"IPSec "
"IRENUM "
"isapnp "
"K56 "
"Kbdclass "
"kmixer "
"KSecDD "
"lbrtfdc "
"mdmxsdk "
"Memctl "
"mnmdd "
"Modem "
"Mouclass "
"MountMgr "
"mraid35x "
"MRxDAV "
"MRxSmb "
"Msfs "
"MSKSSRV "
"MSPCLOCK "
"MSPQM "
"mssmbios "
"MSTEE "
"Mup "
"NABTSFEC "
"NDIS "
"NdisIP "
"NdisTapi "
"Ndisuio "
"NdisWan "
"NDProxy "
"NetBIOS "
"NetBT "
"Npfs "
"Ntfs "
"Null "
"NwlnkFlt "
"NwlnkFwd "
"OMSCAN "
"OVT511Plus "
"Parport "
"PartMgr "
"ParVdm "
"PCI "
"PCIDump "
"PCIIde "
"Pcmcia "
"PDCOMP "
"PDFRAME "
"PDRELI "
"PDRFRAME "
"perc2 "
"perc2hib "
"PptpMiniport "
"Processor "
"PSched "
"Ptilink "
"PxHelp20 "
"ql1080 "
"Ql10wnt "
"ql12160 "
"ql1240 "
"ql1280 "
"RasAcd "
"Rasl2tp "
"RasPppoe "
"Raspti "
"Rdbss "
"RDPCDD "
"rdpdr "
"RDPWD "
"redbook "
"Rksample "
"ROOTMODEM "
"Secdrv "
"serenum "
"Serial "
"Sfloppy "
"Simbad "
"SLIP "
"SoftFax "
"Sparrow "
"splitter "
"sr "
"Srv "
"streamip "
"swenum "
"swmidi "
"symc810 "
"symc8xx "
"sym_hi "
"sym_u3 "
"sysaudio "
"Tcpip "
"TDPIPE "
"TDTCP "
"TermDD "
"Tones "
"TosIde "
"uagp35 "
"Udfs "
"ultra "
"Update "
"usbehci "
"usbhub "
"usbprint "
"USBSTOR "
"usbuhci "
"V124 "
"VComm "
"VcommMgr "
"VgaSave "
"ViaIde "
"viamraid "
"VIAudio "
"videX32 "
"VolSnap "
"Wanarp "
"wceusbsh "
"WDICA "
"wdmaud "
"winachsf "
"WSTCODEC "
"WudfPf "
"WudfRd "

Win32_SoundDevice.DeviceID= "PCI\\VEN_1106&DEV_3059&SUBSYS_04301462&REV_60\\3&61AAA01&0&8D "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_0258&SUBSYS_00000000&REV_00\\3&61AAA01&0&00 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_1258&SUBSYS_00000000&REV_00\\3&61AAA01&0&01 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_2258&SUBSYS_00000000&REV_00\\3&61AAA01&0&02 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3258&SUBSYS_00000000&REV_00\\3&61AAA01&0&03 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_4258&SUBSYS_00000000&REV_00\\3&61AAA01&0&04 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_7258&SUBSYS_00000000&REV_00\\3&61AAA01&0&07 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_B198&SUBSYS_00000000&REV_00\\3&61AAA01&0&08 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1002&DEV_5960&SUBSYS_59601FD3&REV_01\\4&1FEB96E4&0&0008 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1002&DEV_5940&SUBSYS_59611FD3&REV_01\\4&1FEB96E4&0&0108 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3149&SUBSYS_04301462&REV_80\\3&61AAA01&0&78 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_0571&SUBSYS_05711106&REV_06\\3&61AAA01&0&79 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&80 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&81 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&82 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&83 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3104&SUBSYS_31041106&REV_86\\3&61AAA01&0&84 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3227&SUBSYS_00000000&REV_00\\3&61AAA01&0&88 "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3059&SUBSYS_04301462&REV_60\\3&61AAA01&0&8D "
Win32_PnPEntity.DeviceID= "PCI\\VEN_1106&DEV_3065&SUBSYS_043C1462&REV_78\\3&61AAA01&0&90 "
Win32_PnPEntity.DeviceID= "ROOT\\LEGACY_GMSIPCI\\0000 "
Win32_PnPEntity.DeviceID= "ROOT\\MODEM\\0000 "
Win32_PnPEntity.DeviceID= "ROOT\\MODEM\\0001 "
Win32_IDEController.DeviceID= "PCI\\VEN_1106&DEV_0571&SUBSYS_05711106&REV_06\\3&61AAA01&0&79 "
Win32_POTSModem.DeviceID= "ROOT\\MODEM\\0000 "
Win32_POTSModem.DeviceID= "ROOT\\MODEM\\0001 "
Win32_SCSIController.DeviceID= "PCI\\VEN_1106&DEV_3149&SUBSYS_04301462&REV_80\\3&61AAA01&0&78 "
Win32_USBController.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&80 "
Win32_USBController.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&81 "
Win32_USBController.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&82 "
Win32_USBController.DeviceID= "PCI\\VEN_1106&DEV_3038&SUBSYS_30381106&REV_81\\3&61AAA01&0&83 "
Win32_USBController.DeviceID= "PCI\\VEN_1106&DEV_3104&SUBSYS_31041106&REV_86\\3&61AAA01&0&84 "


 

Another dump file

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini081907-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Sun Aug 19 11:26:13.765 2007 (GMT+2)
System Uptime: 0 days 1:28:15.317
Loading Kernel Symbols
.........................................................................................................................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf926069, f6bf3a28, 0}

Probably caused by : win32k.sys ( win32k!AdjustPushStateForKL+23 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf926069, The address that the exception occurred at
Arg3: f6bf3a28, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
win32k!AdjustPushStateForKL+23
bf926069 8b00 mov eax,dword ptr [eax]

TRAP_FRAME: f6bf3a28 -- (.trap 0xfffffffff6bf3a28)
.trap 0xfffffffff6bf3a28
ErrCode = 00000000
eax=00000000 ebx=e23ac6d0 ecx=e17dbaf8 edx=e1781304 esi=e17dbaf8 edi=f6bf3ae8
eip=bf926069 esp=f6bf3a9c ebp=f6bf3a9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!AdjustPushStateForKL+0x23:
bf926069 8b00 mov eax,dword ptr [eax] ds:0023:00000000=????????
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from bf9261b9 to bf926069

STACK_TEXT:
f6bf3a9c bf9261b9 e23ac6d0 f6bf3ac8 e17dbae8 win32k!AdjustPushStateForKL+0x23
f6bf3aec bf87ecb9 e17dbaf8 e17dbae8 e17dbae8 win32k!ManageKeyboardModifiers+0x53
f6bf3b04 bf82f04e e17dbaf8 e17dbae8 e2880af8 win32k!ChangeForegroundKeyboardTable+0x4c
f6bf3b18 bf87f122 e2880af8 bc6aa410 e23ac6d0 win32k!SetForegroundThread+0x73
f6bf3b74 bf87f903 bc6aa410 e23ac6d0 00000000 win32k!xxxSetForegroundWindow2+0xb5
f6bf3ba4 bf8fc7cd bc6aa410 00000001 e23ac6d0 win32k!xxxSetForegroundWindow+0x164
f6bf3bd0 bf82ef7d 00000000 00000001 bc6506e8 win32k!xxxActivateWindow+0x1a0
f6bf3be4 bf81f456 bc6aa410 00000000 00000001 win32k!xxxSwpActivate+0x41
f6bf3c3c bf8dce86 00000001 00000000 00000000 win32k!xxxEndDeferWindowPosEx+0x22e
f6bf3d0c bf82fde7 e23ac6d0 00000003 00010000 win32k!xxxMinMaximize+0x62a
f6bf3d30 bf82fed4 00000000 00010009 f6bf3d64 win32k!xxxShowWindow+0x19c
f6bf3d54 804ddf0f 000e0262 00000009 0125f604 win32k!NtUserShowWindow+0xa1
f6bf3d54 7c90eb94 000e0262 00000009 0125f604 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0125f604 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!AdjustPushStateForKL+23
bf926069 8b00 mov eax,dword ptr [eax]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!AdjustPushStateForKL+23

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107f7a

FAILURE_BUCKET_ID: 0x8E_win32k!AdjustPushStateForKL+23

BUCKET_ID: 0x8E_win32k!AdjustPushStateForKL+23

Followup: MachineOwner
---------

eax=00000000 ebx=e23ac6d0 ecx=e17dbaf8 edx=e1781304 esi=e17dbaf8 edi=f6bf3ae8
eip=bf926069 esp=f6bf3a9c ebp=f6bf3a9c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!AdjustPushStateForKL+0x23:
bf926069 8b00 mov eax,dword ptr [eax] ds:0023:00000000=????????
ChildEBP RetAddr Args to Child
f6bf3a9c bf9261b9 e23ac6d0 f6bf3ac8 e17dbae8 win32k!AdjustPushStateForKL+0x23 (FPO: [Non-Fpo])
f6bf3aec bf87ecb9 e17dbaf8 e17dbae8 e17dbae8 win32k!ManageKeyboardModifiers+0x53 (FPO: [Non-Fpo])
f6bf3b04 bf82f04e e17dbaf8 e17dbae8 e2880af8 win32k!ChangeForegroundKeyboardTable+0x4c (FPO: [Non-Fpo])
f6bf3b18 bf87f122 e2880af8 bc6aa410 e23ac6d0 win32k!SetForegroundThread+0x73 (FPO: [Non-Fpo])
f6bf3b74 bf87f903 bc6aa410 e23ac6d0 00000000 win32k!xxxSetForegroundWindow2+0xb5 (FPO: [Non-Fpo])
f6bf3ba4 bf8fc7cd bc6aa410 00000001 e23ac6d0 win32k!xxxSetForegroundWindow+0x164 (FPO: [Non-Fpo])
f6bf3bd0 bf82ef7d 00000000 00000001 bc6506e8 win32k!xxxActivateWindow+0x1a0 (FPO: [Non-Fpo])
f6bf3be4 bf81f456 bc6aa410 00000000 00000001 win32k!xxxSwpActivate+0x41 (FPO: [Non-Fpo])
f6bf3c3c bf8dce86 00000001 00000000 00000000 win32k!xxxEndDeferWindowPosEx+0x22e (FPO: [Non-Fpo])
f6bf3d0c bf82fde7 e23ac6d0 00000003 00010000 win32k!xxxMinMaximize+0x62a (FPO: [Non-Fpo])
f6bf3d30 bf82fed4 00000000 00010009 f6bf3d64 win32k!xxxShowWindow+0x19c (FPO: [Non-Fpo])
f6bf3d54 804ddf0f 000e0262 00000009 0125f604 win32k!NtUserShowWindow+0xa1 (FPO: [Non-Fpo])
f6bf3d54 7c90eb94 000e0262 00000009 0125f604 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f6bf3d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0125f604 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 80704000 nt ntkrnlmp.exe Wed Aug 04 08:18:18 2004 (41107FAA)
80704000 80724d00 hal halmacpi.dll Wed Aug 04 07:59:09 2004 (41107B2D)
ad2ef000 ad318f00 kmixer kmixer.sys Wed Aug 04 08:07:46 2004 (41107D32)
ad599000 ad5d9380 HTTP HTTP.sys Wed Aug 04 08:00:09 2004 (41107B69)
ad8e0000 ad9573a0 HSF_V124 HSF_V124.sys Tue May 29 18:05:40 2001 (3B13C8D4)
ada70000 adaa0c00 HSF_FAXX HSF_FAXX.sys Tue May 29 18:09:54 2001 (3B13C9D2)
adaa1000 adaf3180 srv srv.sys Wed Aug 04 08:14:44 2004 (41107ED4)
adb44000 adba3800 HSF_K56K HSF_K56K.sys Tue May 29 18:11:09 2001 (3B13CA1D)
adba4000 adbc0440 HSF_FSKS HSF_FSKS.sys Tue May 29 18:10:42 2001 (3B13CA02)
adbc1000 adc07c40 HSF_FALL HSF_FALL.sys Tue May 29 18:08:30 2001 (3B13C97E)
add0c000 add0ee40 mdmxsdk mdmxsdk.sys Wed Mar 17 20:04:10 2004 (4058A12A)
add70000 add9c400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
adfea000 adffe400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
b14cf000 b14f2000 Fastfat Fastfat.SYS Wed Aug 04 08:14:15 2004 (41107EB7)
b37f9000 b381fbc0 omcamvid omcamvid.sys Fri Sep 07 23:28:12 2001 (3B993BEC)
b3b65000 b3b71620 HSF_TONE HSF_TONE.sys Tue May 29 18:08:53 2001 (3B13C995)
b3c4e000 b3d16920 avg7core avg7core.sys Mon Aug 13 16:38:39 2007 (46C06CEF)
b45df000 b45eae00 STREAM STREAM.SYS Wed Aug 04 08:07:58 2004 (41107D3E)
b4728000 b472b780 dump_scsiport dump_scsiport.sys Wed Aug 04 07:59:51 2004 (41107B57)
b568a000 b568b080 avg7rsw avg7rsw.sys Tue Jul 26 14:10:51 2005 (42E6284B)
b5a64000 b5a68500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
b6702000 b6703a80 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
b687f000 b68ed380 mrxsmb mrxsmb.sys Wed Aug 04 08:15:14 2004 (41107EF2)
b6916000 b6941180 rdbss rdbss.sys Wed Aug 04 08:20:05 2004 (41108015)
b69fa000 b6a1bd00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
b6a1c000 b6a3cf00 ipnat ipnat.sys Wed Aug 04 08:04:48 2004 (41107C80)
b6a3d000 b6a64c00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
b6a76000 b6acda80 tcpip tcpip.sys Wed Aug 04 08:14:39 2004 (41107ECF)
b6ace000 b6ae0400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
b7382000 b7387820 OVTCAMD OVTCAMD.SYS Fri Aug 31 19:56:07 2001 (3B8FCFB7)
b84d1000 b84d9880 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
b84f1000 b84f9700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
b8a30000 b8a37880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
b8ac9000 b8ad1700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
b8af9000 b8b01080 ipfltdrv ipfltdrv.sys Fri Aug 17 22:55:07 2001 (3B7D84AB)
b917a000 b917c280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
b94be000 b94c2a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
b94c6000 b94cb200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
b9e82000 b9e90d80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
b9ec2000 b9ed1900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
babcb000 babd0000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 08:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bf9d3000 bfa16000 ati2dvag ati2dvag.dll Wed May 03 18:51:00 2006 (4458DF74)
bfa16000 bfa5b000 ati2cqag ati2cqag.dll Wed May 03 18:09:20 2006 (4458D5B0)
bfa5b000 bfa91000 atikvmag atikvmag.dll Wed May 03 18:15:58 2006 (4458D73E)
bfa91000 bfd228a0 ati3duag ati3duag.dll Wed May 03 18:35:24 2006 (4458DBCC)
bfd23000 bfe7ac00 ativvaxx ativvaxx.dll Wed May 03 18:29:13 2006 (4458DA59)
f6c44000 f6c52100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f6ddf000 f6e12200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f6e4c000 f6e7c100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f6eb8000 f6ec8e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f6f69000 f6f7f680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f6f80000 f6fa3980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
f6fa4000 f6fc6980 viaudios viaudios.sys Mon May 24 08:11:06 2004 (40B191FA)
f6fc7000 f6fda900 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f6fdb000 f6ffde80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f6ffe000 f7020680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7021000 f7034780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f7035000 f71bc000 ati2mtag ati2mtag.sys Wed May 03 18:50:42 2006 (4458DF62)
f7614000 f7617c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f763c000 f7656580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7657000 f7683a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f7684000 f7710480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f7711000 f7727780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f7728000 f7739f00 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f773a000 f7758780 fltmgr fltmgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f7759000 f7770800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
f7771000 f7788480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f7789000 f77ae700 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f77af000 f77cd880 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f77ce000 f77dea80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f77df000 f780cd80 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f782e000 f7836c00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f783e000 f7848500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f784e000 f785ac80 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f785e000 f786cd00 viamraid viamraid.sys Mon Jul 05 03:52:59 2004 (40E8B47B)
f786e000 f7876e00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f787e000 f788a200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f788e000 f7896b80 PxHelp20 PxHelp20.sys Fri Feb 02 22:23:57 2007 (45C3ABED)
f789e000 f78a8e80 uagp35 uagp35.sys Wed Aug 04 08:07:43 2004 (41107D2F)
f78fe000 f790cd00 dump_viamraid dump_viamraid.sys Mon Jul 05 03:52:59 2004 (40E8B47B)
f791e000 f7926d00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f792e000 f7938380 imapi imapi.sys Wed Aug 04 08:00:12 2004 (41107B6C)
f793e000 f794a180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f794e000 f795c080 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f795e000 f796ae00 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f796e000 f797dd80 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f798e000 f799cb80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
f799e000 f79a8600 fetnd5bv fetnd5bv.sys Tue Apr 17 05:59:43 2007 (4624462F)
f79ae000 f79b7200 VcommMgr VcommMgr.sys Mon Mar 05 13:17:39 2007 (45EC0A63)
f79be000 f79ca880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f79ce000 f79d8200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f79de000 f79e9d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f79ee000 f79f6900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f7a1e000 f7a27f00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f7a7e000 f7a87480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f7aae000 f7ab4200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f7ab6000 f7aba900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f7abe000 f7ac6000 videX32 videX32.sys Tue Oct 17 14:22:24 2006 (4534CB00)
f7ac6000 f7acd000 BTHidMgr BTHidMgr.sys Mon Mar 05 13:17:09 2007 (45EC0A45)
f7b46000 f7b4b000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b4e000 f7b54800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f7b56000 f7b5ba00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b5e000 f7b64000 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f7b66000 f7b67000 fdc fdc.sys unavailable (00000000)
f7b6e000 f7b74c00 blueletaudio blueletaudio.sys Mon Mar 05 13:16:00 2007 (45EC0A00)
f7b76000 f7b7b180 BlueletSCOAudio BlueletSCOAudio.sys Mon Mar 05 13:16:16 2007 (45EC0A10)
f7b7e000 f7b85580 Modem Modem.SYS Wed Aug 04 08:08:04 2004 (41107D44)
f7b86000 f7b8a880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f7b8e000 f7b92580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f7b96000 f7b9a080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f7b9e000 f7ba4b80 VComm VComm.sys Mon Mar 05 13:17:23 2007 (45EC0A53)
f7ba6000 f7bacc80 avg7rsxp avg7rsxp.sys Tue Jan 30 16:08:42 2007 (45BF5F7A)
f7c0e000 f7c14500 usbprint usbprint.sys Wed Aug 04 08:01:23 2004 (41107BB3)
f7c3e000 f7c41000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f7c42000 f7c45680 vbtenum vbtenum.sys Mon Mar 05 13:16:57 2007 (45EC0A39)
f7cd2000 f7cd4900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f7cea000 f7ced280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
f7d0a000 f7d0dc80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f7d0e000 f7d10580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7d1a000 f7d1cc80 btnetdrv btnetdrv.sys Mon Mar 05 13:18:00 2007 (45EC0A78)
f7d2e000 f7d2fb80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7d30000 f7d31100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7d32000 f7d33500 viaide viaide.sys Wed Aug 04 07:59:42 2004 (41107B4E)
f7d34000 f7d35700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7d54000 f7d55700 RootMdm RootMdm.sys Fri Aug 17 22:57:36 2001 (3B7D8540)
f7d58000 f7d59100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7d6a000 f7d6b280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7d8a000 f7d8b360 avgtdi avgtdi.sys Thu Aug 25 11:59:58 2005 (430D969E)
f7db4000 f7db5f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7db6000 f7db7080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7dba000 f7dbb080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7dbc000 f7dbd080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7e5a000 f7e5ac00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7e80000 f7e80d00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)
f7eec000 f7eecb80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)
f7eed000 f7eedf80 avgclean avgclean.sys Tue Aug 22 00:55:15 2006 (44EA39D3)

Unloaded modules:
adf9d000 adfc7000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7ee8000 f7ee9000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9f02000 b9f0f000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b937f000 b938d000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
adfc7000 adfea000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7d46000 f7d48000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b84e1000 b84ea000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b94ce000 b94d3000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b918a000 b918d000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


I'm going to plug in and out the modem again as soon as I post this message. Thanks.

 

Well I made as noahdfear suggested me in post 100. Now I'm going to search the registry.

EDIT:- Here are the registry entries you requested. I searched and exported them.

Searched For >> [HSF_V124.sys]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_V124.sys "= "HSF_V124.sys "

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_V124.sys "= "HSF_V124.sys "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\V124]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,56,31,32,34,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\V124\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\V124\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\V124]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,56,31,32,34,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\V124\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\V124]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,56,31,32,34,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\V124\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\V124\Enum]


Searched For >> [HSF_TONE.sys]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_TONE.sys "= "HSF_TONE.sys "

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_TONE.sys "= "HSF_TONE.sys "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tones]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,54,4f,4e,45,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tones\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tones\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tones]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,54,4f,4e,45,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tones\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tones]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,54,4f,4e,45,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tones\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tones\Enum]

Searched For >> [HSF_FAXX.sys]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_FAXX.sys "= "HSF_FAXX.sys "

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_FAXX.sys "= "HSF_FAXX.sys "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SoftFax]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,41,58,58,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SoftFax\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SoftFax\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SoftFax]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,41,58,58,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SoftFax\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftFax]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,41,58,58,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftFax\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftFax\Enum]

Searched For >> [HSF_K56K.sys]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_K56K.sys "= "HSF_K56K.sys "

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_K56K.sys "= "HSF_K56K.sys "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\K56]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,4b,35,36,4b,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\K56\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\K56\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\K56]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,4b,35,36,4b,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\K56\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\K56]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,4b,35,36,4b,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\K56\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\K56\Enum]

Searched For >> [HSF_FSKS.sys]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_FSKS.sys "= "HSF_FSKS.sys "

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_FSKS.sys "= "HSF_FSKS.sys "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fsks]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,53,4b,53,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fsks\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fsks\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Fsks]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,53,4b,53,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Fsks\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fsks]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,53,4b,53,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fsks\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fsks\Enum]

Searched For >> [HSF_FALL.sys]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_FALL.sys "= "HSF_FALL.sys "

[HKEY_LOCAL_MACHINE\SOFTWARE\Generic\Generic Conexant SoftK56 Modem\Files\SYS]
"HSF_FALL.sys "= "HSF_FALL.sys "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fallback]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,41,4c,4c,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fallback\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fallback\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Fallback]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,41,4c,4c,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Fallback\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fallback]
"ImagePath "=hex(2):53,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,48,53,46,5f,46,41,4c,4c,\
2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fallback\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fallback\Enum]


Hope this helps you to help me Thanks!!

 

That will help!
Highlight and copy the contents of the quote box below. Open a blank notepad and paste the information in. Close and select Yes to saving the changes. Save it to your desktop as;

Filename: hsf.bat
Save as type: All Files (*.*)

It should now have an icon that is a command window with a gear in it. Double click it to run. It will produce and open hsf.txt
Post that please.

I may get more later. Do try the install/uninstall again. No need to secure it into place, so it won't take long to do really.

 

What install/uninstall? And what not to secure? you mean the modem?

And here is the produced notepad:


! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\V124
Type REG_DWORD 0x1
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_V124.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\V124\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\V124\Enum
0 REG_SZ Root\LEGACY_V124\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tones
Type REG_DWORD 0x1
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_TONE.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tones\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tones\Enum
0 REG_SZ Root\LEGACY_TONES\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftFax
Type REG_DWORD 0x1
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_FAXX.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftFax\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftFax\Enum
0 REG_SZ Root\LEGACY_SOFTFAX\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\K56
Type REG_DWORD 0x1
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_K56K.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\K56\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\K56\Enum
0 REG_SZ Root\LEGACY_K56\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fsks
Type REG_DWORD 0x1
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_FSKS.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fsks\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fsks\Enum
0 REG_SZ Root\LEGACY_FSKS\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fallback
Type REG_DWORD 0x1
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_FALL.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fallback\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fallback\Enum
0 REG_SZ Root\LEGACY_FALLBACK\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HSFHWBS2
Type REG_DWORD 0x1
Start REG_DWORD 0x3
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSFBS2S2.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HSFHWBS2\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HSF_DP
Type REG_DWORD 0x1
Start REG_DWORD 0x3
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSFDPSP2.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HSF_DP\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hsf_msft
Type REG_DWORD 0x1
Start REG_DWORD 0x3
ErrorControl REG_DWORD 0x0
ImagePath REG_EXPAND_SZ System32\DRIVERS\HSF_MSFT.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hsf_msft\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000

 

Yes, I was referrring to putting the modem back in, boot up, remove it via Phone and Modem Options, then in Device Manager if present. No need to bolt (can't use the scre_ word here) it in.

Thanks for the log.

 

Well I already did that before I posted the registry log file (the first one).

 

I compiled another little utility to set all those modem driver services to disabled. Save it to your desktop and run it, reboot and wait for the next crash. If/when it crashes again, post the dump.

The tool will create a directory with backups of the current registry values. It will be located at C:\modembackups
It will contain 9 reg files and 1 batch file. Should a problem arise from disabling the services, just double click the enable.bat and reboot when it closes.

 

So now these driver modems are disabled? and should not be loaded, right? Ok, If I will let you know how it goes. Thanks a lot!!

 

Well so far still no crashes, I left it on all night too, it didn't crash.. But let's wait a few more days!

 

That's encouraging! Thanks for the update. We'll be anxiously waiting for another follow-up post from you after a few/several days (and hoping it won't be another BSOD report).

(I crossed my fingers for you.)