Help... with blue screen

I own a Dell Inspiron 580.  Recently formatted my computer and now I get a random crash once a day.  This is the info that I can find in the event log if that helps.  Let me know if I can give you more information to solve this problem.  It's very frustrating.  It seems to happen when I alt tab of a game for a window.

The system has rebooted without judgment properly first. This error can be caused if the system unresponsive, crashed or unexpected power loss.

Log name: System
Source: Microsoft-Windows-Kernel-Power
Date: 06/11/2014-21:44:39
Event ID: 41
Task category: (63)
Level: critical
Key words: (2).
User: SYSTEM
Computer: Mike-PC
Description:
The system has rebooted without judgment properly first. This error can be caused if the system unresponsive, crashed or unexpected power loss.
The event XML:

 
   
    41
    2
    1
    63
    0
    0 x 8000000000000002
   
    6235
   
   
    System
    Mike-PC
   
 

 
    80
    0xfffff900c2400770
    0 x 0
    0xfffff96000606d15
    0 x 0
    fake
    0
 

Thank you.

PAGE_FAULT_IN_NONPAGED_AREA (50)

This indicates that invalid system memory was referenced.

2: kd > .trap 0xfffff880068cc960
NOTE: The frame trap does contain not all registers.
Some registry values can be set to zero or incorrect.
Rax = fffff96000606cc4 rbx = 0000000000000000 rcx = fffff900c2ff3ce8
RDX = 0000000040004740 rsi = 0000000000000000 rdi = 0000000000000000
RIP = fffff96000606d15 rsp = fffff880068ccaf0 rbp = fffff900c2ff3ce8
R8 = 0000000028120bd1 r9 = 0000000000000040 r10 = 00000000020ef5d0
R11 = fffff880068ccb48 r12 = 0000000000000000 r13 = 0000000000000000
R14 = 0000000000000000 r15 = 0000000000000000
iopl = 0 nv up ei pl zr po nc
CDD! DrvAssociateSharedSurface + 0 x 51:
fffff960'd 00606 15 399f50070000 cmp dword ptr [rdi + 750 h],ebx ds:00000000' 00000750 is?

Failing education, we were comparing with rdi ebx + 750. Because of the ISR be null (volatile register) and not having not as ebx, address it is not possible to see what was the real problem here.

System_service_exception (3B)

This indicates that an exception happened during execution of a routine that passes from non-preferred to the privileged code code.

Bugcheck 3B, {c0000005, fffff80002e868ae, fffff880096f5e40, 0}

0: kd > fffff80002e868ae ln
(fffff800'02e86888)   nt! ExEnterCriticalRegionAndAcquireFastMutexUnsafe + 0 x 26 |  (fffff800'02e868d0) nt! PsIsProtectedProcess

NT! ExEnterCriticalRegionAndAcquireFastMutexUnsafe caused the access violation.

-------------------------------

Possible bad RAM, run Memtest for not less than 8 passes:

Memtest86 +:

Download Memtest86 + here:

http://www.memtest.org/

Which should I download?

You can either download the pre-compiled. ISO you want to burn to a CD and then boot from the CD, or you can download the automatic installer of the USB. What this will do is format your USB drive, make a boot device and then install the necessary files. Both do the same job, it's just you that you choose, or you have available (be it CD or USB).

Note that some older generation motherboards do not support USB boot, your only option is CD (or floppy if you really wanted to).

How does Memtest (you don't need to read, it's only for those interested in the details):

Memtest uses algorithms (more precisely two), namely move reversal & what is considered Modulo-X. Essentially, the first algorithm filling memory with a pattern. From the address down, it checks to see if the model has been changed (it should not be), wrote the complement of bosses, increments the address and repeats. To from the highest address (as opposed to the lower), it follows the same checklist.

The second algorithm is due to some limitations, the first being that all adjacent cells are currently tested for interaction due to modern chips being from 4 to 16-bit wide on the storage of data. That said, bosses are used to move forward and ensure that all adjacent cells have at least been written with all the possible combinations of a and zero.

The second is that cache, buffer and disorderly execution implementation will interfere with the moving inversions algorithm. However, the second algorithm is not affected by this. For the offsets of 0-20 start, the algorithm will write every 20th location with a pattern, write all other locations with the addition of bosses, repeat the previous (or more) times and then check each location 20 for the reason mentioned previously.

Now that you know how Memtest actually works, it is important to know that tests it passes through all mean something different. It will test 0 through 12 trials, which many use one or the other algorithm discussed above, among many other things.

Other questions, they can most likely be answered by reading this excellent guide here:

http://Forum.canardpc.com/threads/28864-FAQ-please-read-before-posting

Kind regards

Patrick

Tags: Windows

Similar Questions

  • help with blue screen of the 0x1000007e

    Hi, can I get help with freezes my computer?

    View blue screen information:

    ==================================================
    Dump file: 121015-27421 - 01.dmp
    Crash time: 10/12/2015-20:41:47
    Bug Check String: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
    Bug check code: 0x1000007e
    Parameter 1: ffffffff "c0000005
    Parameter 2: fffff880'0463f0d2
    Parameter 3: fffff880'03b378d8
    Parameter 4: fffff880'03 b 37110
    Caused by the driver: rtbth.sys
    Caused by the address: rtbth.sys + 2185c
    Description of the file: Ralink Bluetooth adapter
    Product name: Ralink Bluetooth adapter
    Company: Ralink Technology, Corp..
    File version: 2.9.22.0 built by: WinDDK
    CPU: x 64
    Plant address: rtbth.sys + 130d2
    Stack address 1:
    The stack address 2:
    Address 3 the battery:
    Computer name:
    Full path: C:\Windows\Minidump\121015-27421-01.dmp
    Number of processors: 4
    Main version: 15
    Minor Version: 9200
    Empty the file size: 284.744
    Dump of file time: 10/12/2015-20:42:49
    ==================================================

    ==================================================
    Dump file: 120815-32078 - 01.dmp
    Crash time: 08/12/2015-11:38:26
    Bug Check String: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
    Bug check code: 0x1000007e
    Parameter 1: ffffffff "c0000005
    Parameter 2: fffff880'058d40d2
    Parameter 3: fffff880'033dd8d8
    Parameter 4: fffff880'033dd110
    Caused by the driver: rtbth.sys
    Caused by the address: rtbth.sys + 2185c
    Description of the file: Ralink Bluetooth adapter
    Product name: Ralink Bluetooth adapter
    Company: Ralink Technology, Corp..
    File version: 2.9.22.0 built by: WinDDK
    CPU: x 64
    Plant address: rtbth.sys + 130d2
    Stack address 1:
    The stack address 2:
    Address 3 the battery:
    Computer name:
    Full path: C:\Windows\Minidump\120815-32078-01.dmp
    Number of processors: 4
    Main version: 15
    Minor Version: 9200
    Size of the dump file: 284.800
    Dump of file time: 12/08/2015-11:39:44
    ==================================================

    ==================================================
    Dump file: 120515-23000 - 01.dmp
    Crash time: 12/05/2015 14:11:48
    Bug Check String: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
    Bug check code: 0x1000007e
    Parameter 1: ffffffff "c0000005
    Parameter 2: fffff880'058c00d2
    Parameter 3: fffff880'0609a8d8
    Parameter 4: fffff880'0609 has 110
    Caused by the driver: rtbth.sys
    Caused by the address: rtbth.sys + 2185c
    Description of the file: Ralink Bluetooth adapter
    Product name: Ralink Bluetooth adapter
    Company: Ralink Technology, Corp..
    File version: 2.9.22.0 built by: WinDDK
    CPU: x 64
    Plant address: rtbth.sys + 130d2
    Stack address 1:
    The stack address 2:
    Address 3 the battery:
    Computer name:
    Full path: C:\Windows\Minidump\120515-23000-01.dmp
    Number of processors: 4
    Main version: 15
    Minor Version: 9200
    Size of the dump file: 284.800
    Dump of file time: 12/05/2015 14:13:26
    ==================================================

    ==================================================
    Dump file: 120315-46625 - 01.dmp
    Crash time: 12/03/2015-21:46:50
    Bug Check String: PAGE_FAULT_IN_NONPAGED_AREA
    Bug check Code: 0 x 00000050
    Parameter 1: fffffa80'0f7e35b8
    Parameter 2: 00000000'00000000
    Parameter 3: fffff880'010985da
    Parameter 4: 00000000'00000000
    Caused by the driver: mpsdrv.sys
    Caused by the address: mpsdrv.sys + 88215 b 8
    Description of the file: Protection of Microsoft Service pilot
    Product name: Microsoft® Windows® Operating System
    Company: Microsoft Corporation
    File version: 6.2.9200.16753 (win8_gdr.131030 - 1505)
    CPU: x 64
    Plant address: ntoskrnl.exe + 5 has 540
    Stack address 1:
    The stack address 2:
    Address 3 the battery:
    Computer name:
    Full path: C:\Windows\Minidump\120315-46625-01.dmp
    Number of processors: 4
    Main version: 15
    Minor Version: 9200
    Size of the dump file: 284.800
    Dump of file time: 12/03/2015-21:48:50
    ==================================================

    Ntoskrnl.exe and rtbth.sys have been mentioned in the 3 last crashesmpsdrv.sys only in the first

    News of the event viewer:

    I saved a lot of event that happened in 08.12 accidents and 10.12, marked with red circles with white cross

    and some other events around them

    pastebin.com/xwU9pVf4

    (its in Spanish)

    I have not installed manually a new hardware or driver, the last accident occurred when I took the computer to sleep in airplane mode

    This phenomenon was related to adapter Bluetooth Ralink from Ralink Technology, Corp. rtbth.sys.

    Remove the driver current completely and install the latest driver available.  For instructions on how to do read everything to update the drivers of my partner JMH3143 http://answers.microsoft.com/en-us/windows/wiki/windows_other-hardware/updating-a-driver/a5e6345e-af9b-4099-bef0-8d22254aa1c1?tm=1436753520149 here
  • Help with blue screens of 500-125 a windows 8

    Hi, I bought my product last year and using it I got the bluescreens (3 exactly)

    Can you help me please?

    KMODE_EXCEPTION_NOT_HANDLED caused by ntoskrnl.exe code: 0x0000001e

    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED caused by hal.dll code: 0x1000007e

    CACHE_MANAGER caused by fltmgr.sys code: 0 x 00000034

    Really not happy with my product had to replace fans, failed hard drive had to be replaced and now this!

    The error code 87 you got you try to run the command DISM was due to your missing spaces, copy and paste the command I gave you.

    A short beep means that the CD/DVD drive not detected, reinstall your driver.

    Suggest that to make a backup of your data on an external hard drive if you have fear, you have to do this on a regular basis.

    Perform diagnostics of material from BIOS

  • Greetings! Need urgent help with BLUE screen, I HAVE MY FINAL COMING towards the TOP AND NEED to WORK!

    Hi, this is the 8th time, I have the blue screem of death and I am unable to find specific solutions for my case is the following:

    Signature of the problem
    Problem event name: BlueScreen
    The system version: 6.0.6002.2.2.0.768.3
    Locale ID: 2057

    Files helping to describe the problem (some files may be is no longer available)
    Mini041511 - 05.dmp
    SysData. XML
    Version.txt

    See a temporary copy of these files
    WARNING: If a virus or other security threat caused the problem, open a copy of file can harm your computer.

    Additional information about the problem
    BCCode: 24
    BCP1: 00000000001904AA
    BCP2: FFFFFA600AE74D58
    BCP3: FFFFFA600AE74730
    BCP4: FFFFF800028F0EDD
    OS version: 6_0_6002
    Service Pack: 2_0
    Product: 768_1

    I would be really grateful to those that could help because my final exams are around the corner and I do most of my studies online...

    Hi axmankay,

    Method 1: you can see the steps in the link below by Diana d.
    http://answers.Microsoft.com/en-us/Windows/Forum/windows_vista-system/BCCode-24/adfa4cc3-CF61-4797-a7de-1f15323b3f01

    Method 2: See the steps mentioned in the link below

    Pick up the pieces after a computer crash
    http://Windows.Microsoft.com/en-us/Windows-Vista/picking-up-the-pieces-after-a-computer-crash

  • Need help with blue screen

    Hello!

    My PC crashes every day after I start it. Reboot usually helps during some time, and then it happens again. I ran the tool to check the pilot and collected the .dmp system information and files, the links are below:

    http://1drv.Ms/13CRdK4

    http://1drv.Ms/13CRooU

    http://1drv.Ms/1EaQUHg

    Thank you very much

    Alex

    Alex

    It was, but did not 'take' the at-fault driver.  I can tell you that the pilot which was ongoing at the time of the accident was mchost.exe which is part of McAfee.  If I were you I remove McAfee (her inclined to that sort of thing), and use Microsoft Security essentials instead.

    I keep perform auditor for a bit just to make sure.

    McAffe often contributes to BSOD

    I remove and replace it with Microsoft Security Essentials

  • Satellite L650 - frequent restarting with blue screen

    Hi, I bought a L650 on 2 months ago so it is still under warranty.
    Recently (maybe last 2 weeks), she continued to end with blue screen of death. It seems to happen more if I open multiple tabs in internet and I thought it might be adobe flash but no longer believe.
    It is said if there is no new hardware or software installed try to reinstall but I do not know what software and there is no new material.

    "a problem has been detected and windows has been shyt down to protect your computer.
    A process or thread crucial to system operation has unexpectedly left or terminated.
    ...
    technical information:
    STOP: 0x000000F4 (0 X 00000000000003, OxFFFFFFFFAB007A4B30, 0xFFFFFFFFFA (rest off the screen of the camera)
    xFFFF800035C #1EO

    Something like above, although his little video on my camera so some numbers can be wrong.

    Can someone tell if it is a hardware malfunction or my fault somehow?
    Is this a warranty issue, or what should I do?
    I've never done any windows CD or anything when I bought laptop unfortunately so don't know not if I reformat the hard drive?

    Thank you.

    Kadın

    Hello

    It's worse than at the beginning with STOP: 0x000000F4 error message. It is still problematic to help this kind of problems, because your laptop configuration, preinstalled software and activity is not known to us.

    In my opinion you should backup all of your important data, install the OS by using HARD drive recovery option and test functionality with original operating system without any additional software installation.

    If the BSOD happen again and again that I recommend you contact the closest service Toshiba and ask for help. I have two laptops Toshiba and so far I didn t notice BSOD at all.

  • HP ProBook G2 450: get crash with blue screen ((rtwlane.sys) driver_irql_not_less_or_equal message

    When I use internet through Wi - Fi some message crash put in time with blue screen (driver_irql_not_less_or_equal (rtwlane.sys), my adapter Wi - Fi is Realtek RTL8723BE 802.11bgn (new version) how can I solve this problem? please help me...)

    Wireless 802.11b/g/n Realtek RTL8723BE/RTL8188EE LAN drivers

    By downloading, you accept the terms and conditions of the license agreement for the HP software.
    Note: Some software requires a valid warranty, current support contract HP or a fee.

    Type: Driver - network
    Version: 2023.9.401.2015 Rev.A (21 may 2015)
    System:
    Microsoft Windows 8.1 (64-bit) | See all
    Name of the file: sp71432.exe (35 MB)
  • Get the IRQL_NOT_LESS_OR_EQUAL Error with blue screen

    Hello

    I get the IRQL_NOT_LESS_OR_EQUAL Error with blue screen when I start the machine.
    STOP: 0X0000000A (0X00000000, 0X804DC11D, 0X00000001, 0 X 000000002)

    I can't connect in Debug Mode. I tried winDBG, but cannot interpret the output (output is attached below). There was no new HW SW or recently installed or when this error occurred.

    I also tried to run Verifier.exe with the option "Select all drivers installed automatically on this computer" and as soon as I chose this option, another mistake (and cannot change this option), DRIVER_IRQL_NOT_LESS_OR_EQUAL
    STOP: 0x000000D1(0x8068329C,0x00000002,0x00000000,0x89E4460A)

    Thanks in advance,
    SRSK

    output in winDbg:

    Debug version of Microsoft Windows (R) 6.11.0001.404 X 86

    Copyright (c) Microsoft Corporation. All rights reserved.

    Loading dump file [C:\WINDOWS\Minidump\Mini102109-01.dmp]

    The mini kernel dump file: only registers and the trace of the stack are available

    Symbol search path is: * invalid *.

    ****************************************************************************

    * Loading of the symbol may be unreliable without a symbol search path.           *

    * Use .symfix to get the debugger to choose a symbol path.                   *

    * After adjusting your path to symbols, use .reload to refresh the locations of symbols. *

    ****************************************************************************

    Executable search path is:

    *********************************************************************

    * Symbols cannot be loaded because the path is not initialized. *

    *                                                                   *

    * The symbol path can be defined: *.

    * using the _NT_SYMBOL_PATH environment variable.                 *

    * with the help of the there when you start the debugger argument. *.

    * using the .sympath and .sympath + *.

    *********************************************************************

    Could not load the ntoskrnl.exe, 0n2 error Win32 image

    WARNING: Unable to verify timestamp for ntoskrnl.exe

    ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe

    Windows XP Kernel Version 2600 (Service Pack 3) PUTS free x 86 compatible

    Product: WinNt, suite: TerminalServer SingleUserTS

    Computer name:

    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0

    The debugging session: 23:57:36.015 Tue Oct 20, 2009 (GMT-4)

    System Uptime: 0 days 9:05:10.605

    *********************************************************************

    * Symbols cannot be loaded because the path is not initialized. *

    *                                                                   *

    * The symbol path can be defined: *.

    * using the _NT_SYMBOL_PATH environment variable.                 *

    * with the help of the there when you start the debugger argument. *.

    * using the .sympath and .sympath + *.

    *********************************************************************

    Could not load the ntoskrnl.exe, 0n2 error Win32 image

    WARNING: Unable to verify timestamp for ntoskrnl.exe

    ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe

    Loading the kernel symbols

    ...............................................................

    ................................................................

    .......

    Loading user symbols

    Loading unloaded module list

    ..................

    *******************************************************************************

    *                                                                             *

    * Bugcheck analysis *.

    *                                                                             *

    *******************************************************************************

    Use! analyze - v to obtain detailed debugging information.

    Bugcheck 1000007E, {c0000005, 8736d01a, f78d9ec4, f78d9bc0}

    The kernel symbols are FALSE. Correct symbols to do the analysis.

    *************************************************************************

    ***                                                                   ***

    ***                                                                   ***

    Your debugger is not using the appropriate symbols *.

    ***                                                                   ***

    In order for this command works correctly, your symbol path *.

    should point to .pdb files have the type information complete.      ***

    ***                                                                   ***

    Some (such as the public OS symbols) .pdb files are not *.

    contain the required information.  The contact group that *.

    you provided with these symbols, if you need this command for *.

    work.                                                          ***

    ***                                                                   ***

    Type referenced: nt! _KPRCB *.

    *

    Type referenced: nt! KPRCB                                      ***

    Type referenced: nt! _KPRCB *.

    *

    Type referenced: nt! _KPRCB *.

    *************************************************************************

    WARNING: Unable to verify timestamp for Ntfs.sys

    ERROR: Module load completed but symbols can be loaded for Ntfs.sys

    Could not load the PxHelp20.sys, 0n2 error Win32 image

    WARNING: Unable to verify timestamp for PxHelp20.sys

    ERROR: Module load completed but symbols can be loaded for PxHelp20.sys

    Type referenced: nt! _KPRCB *.

    *                                                                  ***

    Type referenced: nt! _KPRCB *.

    * Symbols cannot be loaded because the path is not initialized. *

    *                                                                   *

    * The symbol path can be defined: *.

    * using the _NT_SYMBOL_PATH environment variable.                 *

    * with the help of the there when you start the debugger argument. *.

    * using the .sympath and .sympath + *.

    *********************************************************************

    *********************************************************************

    * Symbols cannot be loaded because the path is not initialized. *

    *                                                                   *

    * The symbol path can be defined: *.

    * using the _NT_SYMBOL_PATH environment variable.                 *

    * with the help of the there when you start the debugger argument. *.

    * using the .sympath and .sympath + *.

    *********************************************************************

    Probably caused by: PxHelp20.sys (PxHelp20 + 59b 7)

    Follow-up: MachineOwner

    ---------

    KD > .symfix

    KD > .reload

    Could not load the ntoskrnl.exe, 0n2 error Win32 image

    WARNING: Unable to verify timestamp for ntoskrnl.exe

    ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe

    Loading the kernel symbols

    ...............................................................

    ................................................................

    .......

    Loading user symbols

    Loading unloaded module list

    ..................

    KD > kb

    ChildEBP RetAddr Args to child

    WARNING: Frame IP not in any known module. Sequence of images may be wrong.

    68772073 20657265 20657261 3f756f79 0x8736d01a f78da54c

    20657265 20657261 3f756f79 6d6f4820 f78da550 0 x 68772073

    f78da554 20657261 3f756f79 6d6f4820 63207265 0 x 20657265

    f78da558 3f756f79 6d6f4820 63207265 736c6c61 0 x 20657261

    f78da55c 6d6f4820 63207265 736c6c61 62654 has 20 0x3f756f79

    f78da560 63207265 62654a 20 00217375 0x6d6f4820 736c6c61

    f78da564 736c6c61 62654a 20 00217375 666e6f63 0 x 63207265

    62654a 20 00217375 666e6f63 692e6769 0x736c6c61 f78da568

    f78da56c 00217375 666e6f63 692e6769 0000696e 0x62654a20

    f78da570 666e6f63 692e6769 0000696e 73726576 0 x 217375

    f78da574 0000696e 692e6769 73726576 006e6f69 0x666e6f63

    00000000 73726576 006e6f69 746f7571 0x692e6769 f78da578

    KD > lmv

    start end module name

    804 d 7000 806ed700 nt T (no symbol)

    Loaded symbol image file: ntoskrnl.exe

    Image path: ntoskrnl.exe

    Image name: ntoskrnl.exe

    Timestamp: Fri Feb 06 06:08:08 2009 (498C1A18)

    CheckSum: 002197F5

    ImageSize: 00216700

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    806ee000 8070e300 hal (postponed)

    Image path: hal.dll

    Image name: hal.dll

    Timestamp: Sun Apr 13 14:31:27 2008 (4802517F)

    CheckSum: 00024F17

    ImageSize: 00020300

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    951ba180 95190000 kmixer (postponed)

    Image path: c:\windows\system32\drivers\kmixer.sys

    Image name: c:\windows\system32\drivers\kmixer.sys

    Timestamp: Sun Apr 13 14:45:07 2008 (480254B 3)

    CheckSum: 0002F580

    ImageSize: 0002A 180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    953c 6000 953d 2000 1 (postponed)

    Image path: 1C.tmp

    Image name: 1C.tmp

    Timestamp: Sat Oct 17 23:21:43 2009 (4ADA89C7)

    CheckSum: 00007E35

    ImageSize: 0000-000 C

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    98528000 98579880 srv (postponed)

    Image path: srv.sys

    Image name: srv.sys

    Timestamp: Thu Dec 11 05:57:07 2008 (4940F203)

    CheckSum: 0005EF30

    ImageSize: 00051880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    985f5000 98609480 wdmaud (postponed)

    Image path: wdmaud.sys

    Image name: wdmaud.sys

    Timestamp: Sun Apr 13 15:17:18 2008 (48025C3E)

    CheckSum: 00018CBD

    ImageSize: 00014480

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9865 to 000 9869aa80 HTTP (postponed)

    Image path: HTTP.sys

    Image name: HTTP.sys

    Timestamp: Sun Apr 13 14:53:48 2008 (480256BC)

    Checksum: 00046D 31

    ImageSize: 00040A 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9870e000 9873 has 180 mrxdav (postponed)

    Image path: c:\windows\system32\drivers\mrxdav.sys

    Image name: c:\windows\system32\drivers\mrxdav.sys

    Timestamp: Sun Apr 13 14:32:42 2008 (480251CA)

    Sum: 0002C 564

    ImageSize: 0002C 180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a7b3000 9a 825100 dump_iastor (postponed)

    Image path: dump_iastor.sys

    Image name: dump_iastor.sys

    Timestamp: Tue Mar 23 15:13:55 2004 (40608 C 73)

    CheckSum: 00072C3C

    ImageSize: 00072100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a 826000 9 has 876380 avgldx86 (postponed)

    Image path: avgldx86.sys

    Image name: avgldx86.sys

    Timestamp: Thu Jul 09 20:17:49 2009 (4A5688AD)

    Sum: 0005C 506

    ImageSize: 00050380

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a 877000 9a89c500 ipnat (postponed)

    Image path: ipnat.sys

    Image name: ipnat.sys

    Timestamp: Sun Apr 13 14:57:10 2008 (48025786)

    CheckSum: 0002AF4A

    ImageSize: 00025500

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a89d000 9a90c280 mrxsmb (postponed)

    Image path: mrxsmb.sys

    Image name: mrxsmb.sys

    Timestamp: Fri Oct 24 07:21:07 2008 (4901AFA3)

    CheckSum: 0007CB15

    ImageSize: 0006F280

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a90d000 9a937e80 rdbss (postponed)

    Image path: rdbss.sys

    Image name: rdbss.sys

    Timestamp: Sun Apr 13 15:28:38 2008 (48025EE6)

    CheckSum: 0002F906

    ImageSize: 0002AE80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a 938000 9a959d00 afd (postponed)

    Image path: afd.sys

    Image name: afd.sys

    Timestamp: Thu Aug 14 06:04:35 2008 (48A 40333)

    CheckSum: 000292E0

    ImageSize: 00021D 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a95a000 9a981c00 netbt (postponed)

    Image path: netbt.sys

    Image name: netbt.sys

    Timestamp: Sun Apr 13 15:20:59 2008 (48025D1B)

    CheckSum: 0002FE7A

    ImageSize: 00027C 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a 982000 9a99ae00 avgtdix (postponed)

    Image path: c:\windows\system32\drivers\avgtdix.sys Device

    Image name: c:\windows\system32\drivers\avgtdix.sys Device

    Timestamp: My Apr 06 09:42:27 2009 (49DA06C3)

    CheckSum: 00029806

    ImageSize: 00018E00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a99b000 9a9f3480 tcpip (postponed)

    Image path: tcpip.sys

    Image name: tcpip.sys

    Timestamp: Fri Jun 20 07:51:09 2008 (485B99AD)

    CheckSum: 0005ED6B

    ImageSize: 00058480

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9a9f4000 9aa06600 ipsec (postponed)

    Image path: ipsec.sys

    Image name: ipsec.sys

    Timestamp: Sun Apr 13 15:19:42 2008 (48025CCE)

    CheckSum: 00016389

    ImageSize: 00012600

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9aa27000 9aac3000 ctac32k (postponed)

    Image path: ctac32k.sys

    Image name: ctac32k.sys

    Timestamp: Fri Aug 11 02:45:14 2006 (44DC277A)

    CheckSum: 00081570

    ImageSize: 0009C 000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9aac3000 9aaea000 ctsfm2k (postponed)

    Image path: ctsfm2k.sys

    Image name: ctsfm2k.sys

    Timestamp: Fri Aug 11 02:45:18 2006 (44DC277E)

    Checksum: 000275C 8

    ImageSize: 00027000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9aaea000 9ab17000 emupia2k (postponed)

    Image path: emupia2k.sys

    Image name: emupia2k.sys

    Timestamp: Fri Aug 11 02:45:17 2006 (44DC277D)

    CheckSum: 00013B 96

    ImageSize: 0002D 000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9ab17000 9ac1b000 ha10kx2k (postponed)

    Image path: ha10kx2k.sys

    Image name: ha10kx2k.sys

    Timestamp: Fri Aug 11 02:45:24 2006 (44DC2784)

    CheckSum: 000BD2C0

    ImageSize: 00104000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9ac1b000 9ac45000 hap16v2k (postponed)

    Image path: hap16v2k.sys

    Image name: hap16v2k.sys

    Timestamp: Fri Aug 11 02:45:26 2006 (44DC2786)

    Checksum: 0002D 547

    ImageSize: 0002A, 000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b20b000 9b219a80 usbaudio (postponed)

    Image path: usbaudio.sys

    Image name: usbaudio.sys

    Timestamp: Sun Apr 13 14:45:11 2008 (480254B 7)

    CheckSum: 0001D8AC

    ImageSize: 0000EA80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b2bb000 9b2be900 o ndisuio (postponed)

    Image path: ndisuio.sys

    Image name: ndisuio.sys

    Timestamp: Sun Apr 13 14:55:57 2008 (4802573D)

    CheckSum: 00008481

    ImageSize: 00003900

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b2dc000 9b2dcb80 Null (postponed)

    Image path: Null.SYS

    Image name: Null.SYS

    Timestamp: Fri Aug 17 16:47:39 2001 (3B7D82EB)

    CheckSum: 00008483

    ImageSize: 00000B 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b 964000 9b972d80 arp1394 (postponed)

    Image path: arp1394.sys

    Image name: arp1394.sys

    Timestamp: Sun Apr 13 14:51:22 2008 (4802562A)

    CheckSum: 0000EE1E

    ImageSize: 0000ED80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b 974000 9b97c700 wanarp (postponed)

    Image path: wanarp.sys

    Image name: wanarp.sys

    Timestamp: Sun Apr 13 14:57:20 2008 (48025790)

    CheckSum: 00009785

    ImageSize: 00008700

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b 994000 9b99ee00 Fips (postponed)

    Image path: Fips.SYS

    Image name: Fips.SYS

    Timestamp: Sun Apr 13 14:33:27 2008 (480251F7)

    CheckSum: 0001559A

    ImageSize: 0000AE00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9b9b4000 9b9bc780 netbios (postponed)

    Image path: netbios.sys

    Image name: netbios.sys

    Timestamp: Sun Apr 13 14:56:01 2008 (48025741)

    CheckSum: 00010B5E

    ImageSize: 00008780

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9bd09000 9bd0c240 OMCI (postponed)

    Image path: OMCI. SYS

    Image name: OMCI. SYS

    Timestamp: Sea Aug 22 12:42:57 2001 (3B83E111)

    CheckSum: 0000FDD9

    ImageSize: 00003240

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    9ca 75000 9 ca 77280 Rdbss (postponed)

    Image path: rasacd.sys

    Image name: rasacd.sys

    Timestamp: Fri Aug 17 16:55:39 2001 (3B7D84CB)

    CheckSum: 0000B2E7

    ImageSize: 00002280

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    a6782000 dog guard a6786500 (postponed)

    Image path: watchdog.sys

    Image name: watchdog.sys

    Timestamp: Sun Apr 13 14:44:59 2008 (480254AB)

    CheckSum: 000078B 2

    ImageSize: 00004500

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    a6870000 a687f900 Cdfs (postponed)

    Image path: Cdfs.SYS

    Image name: Cdfs.SYS

    Timestamp: Sun Apr 13 15:14:21 2008 (48025B8D)

    CheckSum: 000127A 4

    ImageSize: 0000F900

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    a7027000 a7029900 Dxapi (postponed)

    Image path: Dxapi.sys

    Image name: Dxapi.sys

    Timestamp: Fri Aug 17 16:53:19 2001 (3B7D843F)

    CheckSum: 0000ACC2

    ImageSize: 00002900

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    aa431000 aa437700 USBSTOR (postponed)

    Image path: USBSTOR. SYS

    Image name: USBSTOR. SYS

    Timestamp: Sun Apr 13 14:45:37 (1 480254) 2008

    CheckSum: 00011541

    ImageSize: 00006700

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ad66c000 ad673d80 usbccgp (postponed)

    Image path: usbccgp.sys

    Image name: usbccgp.sys

    Timestamp: Sun Apr 13 14:45:38 2008 (480254 2)

    CheckSum: 000100CC

    ImageSize: 00007D 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ad684000 ad689280 avgmfx86 (postponed)

    Image path: avgmfx86.sys

    Image name: avgmfx86.sys

    Timestamp: Wed Jul 01 16:37:21 2009 (4A4BC901)

    CheckSum: 0000B17B

    ImageSize: 00005280

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ad68c000 ad693880 NPH (postponed)

    Image path: Npfs.SYS

    Image name: Npfs.SYS

    Timestamp: Sun Apr 13 14:32:38 2008 (6 480251)

    CheckSum: 0000C3AB

    ImageSize: 00007880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ad694000 ad698a80 Msfs (postponed)

    Image path: Msfs.SYS

    Image name: Msfs.SYS

    Timestamp: Sun Apr 13 14:32:38 2008 (6 480251)

    CheckSum: 00005BB8

    ImageSize: 00004A 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ad69c000 ad6a1200 vga (postponed)

    Image path: vga.sys

    Image name: vga.sys

    Timestamp: Sun Apr 13 14:44:40 2008 (48025498)

    Checksum: 0001170C

    ImageSize: 00005200

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ad6a4000 ad6aa180 HIDPARSE (postponed)

    Image path: HIDPARSE. SYS

    Image name: HIDPARSE. SYS

    Timestamp: Sun Apr 13 14:45:22 2008 (480254 2)

    CheckSum: 00008E19

    ImageSize: 00006180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b03d8000 b03d8d00 dxgthk (postponed)

    Image path: dxgthk.sys

    Image name: dxgthk.sys

    Timestamp: Fri Aug 17 16:53:12 2001 (3B7D8438)

    CheckSum: 000035E7

    ImageSize: 00000D 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9722000 b977ff00 update (postponed)

    Image path: update.sys

    Image name: update.sys

    Timestamp: Sun Apr 13 14:39:46 2008 (48025372)

    CheckSum: 0006CBBF

    ImageSize: 0005DF00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9780000 b97afe80 rdpdr (postponed)

    Image path: rdpdr.sys

    Image name: rdpdr.sys

    Timestamp: Sun Apr 13 14:32:50 (480251 2) 2008

    CheckSum: 00039B0C

    ImageSize: 0002FE80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b97b0000 b97c0e00 psched (postponed)

    Image path: psched.sys

    Image name: psched.sys

    Timestamp: Sun Apr 13 14:56:36 2008 (48025764)

    CheckSum: 0001E655

    ImageSize: 00010E00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b97c1000 b97d7580 ndiswan (postponed)

    Image path: ndiswan.sys

    Image name: ndiswan.sys

    Timestamp: Sun Apr 13 15:20:41 2008 (48025-09)

    CheckSum: 00018B 10

    ImageSize: 00016580

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b97d8000 b9826500 luipsec (postponed)

    Image path: luipsec.sys

    Image name: luipsec.sys

    Timestamp: Fri Feb 20 14:55:19 2008 (47BC85A7)

    CheckSum: 0005082D

    ImageSize: 0004E500

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9827000 b9860000 arkzlin6 (postponed)

    Image path: arkzlin6. SYS

    Image name: arkzlin6. SYS

    Timestamp: Sun Jul 13 18:54 2008 (487A 8788)

    CheckSum: 00042E1D

    ImageSize: 00039000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9860000 b9873900 parport (postponed)

    Image path: parport.sys

    Image name: parport.sys

    Timestamp: Sun Apr 13 14:40:09 2008 (48025389)

    CheckSum: 00018D4E

    ImageSize: 00013900

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9874000 b98a7000 ctoss2k (postponed)

    Image path: ctoss2k.sys

    Image name: ctoss2k.sys

    Timestamp: Fri Aug 11 02:45:23 2006 (44DC2783)

    CheckSum: 000299B 7

    ImageSize: 00033000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b98a7000 b98caa80 portcls (postponed)

    Image path: portcls.sys

    Image name: portcls.sys

    Timestamp: Sun Apr 13 15:19:40 2008 (48025CCC)

    CheckSum: 00030B 59

    ImageSize: 00023A 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b98cb000 b9944f80 ctaud2k (postponed)

    Image path: ctaud2k.sys don't

    Image name: ctaud2k.sys don't

    Timestamp: Fri Aug 11 02:45:37 2006 (44DC2791)

    CheckSum: 00084619

    ImageSize: 00079F80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9945000 b9967700 ks (deferred)

    Image path: ks.sys

    Image name: ks.sys

    Timestamp: Sun Apr 13 15:16:34 (48025 12) 2008

    CheckSum: 000326F0

    ImageSize: 00022700

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9968000 b99dea00 atinewp2 (postponed)

    Image path: atinewp2.sys

    Image name: atinewp2.sys

    Timestamp: Kills Jul 27 21:43:40 2004 (410704CC)

    CheckSum: 00083DD5

    ImageSize: 00076A 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b99df000 b9a02200 USBPORT (postponed)

    Image path: USBPORT. SYS

    Image name: USBPORT. SYS

    Timestamp: Sun Apr 13 14:45:34 2008 (480254CE)

    CheckSum: 0002AAEC

    ImageSize: 00023200

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9a03000 b9a20a80 b57xp32 (postponed)

    Image path: b57xp32.sys

    Image name: b57xp32.sys

    Timestamp: Mon August 23 at 17:49:29 2004 (412A 6669)

    CheckSum: 00028D3C

    ImageSize: 0001DA80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9a21000 b9a34f00 VIDEOPRT (postponed)

    Image path: VIDEOPRT. SYS

    Image name: VIDEOPRT. SYS

    Timestamp: Sun Apr 13 14:44:39 2008 (48025497)

    CheckSum: 000142CF

    ImageSize: 00013F00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9a35000 b9bb2000 ati2mtag (postponed)

    Image path: ati2mtag.sys

    Image name: ati2mtag.sys

    Timestamp: Thu Feb 09 21:57:44 2006 (43EC0128)

    CheckSum: 00179501

    ImageSize: 0017D 000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9cd6000 b9cda580 ptilink (postponed)

    Image path: ptilink.sys

    Image name: ptilink.sys

    Timestamp: Fri Aug 17 16:49:53 2001 (3B7D8371)

    Sum: 0000648C

    ImageSize: 00004580

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    b9cde000 b9ce2a80 TDI (postponed)

    Image path: TDI. SYS

    Image name: TDI. SYS

    Timestamp: Sun Apr 13 15:00:04 2008 (48025834)

    CheckSum: 0000649E

    ImageSize: 00004A 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba0a0000 ba0a9f00 termdd (postponed)

    Image path: termdd.sys

    Image name: termdd.sys

    Timestamp: Sun Apr 13 14:38:36 2008 (4802532 C)

    CheckSum: 0000DEB5

    ImageSize: 00009F00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba0b0000 ba0b8900 msgpc (postponed)

    Image path: msgpc.sys

    Image name: msgpc.sys

    Timestamp: Sun Apr 13 14:56:32 2008 (48025760)

    CheckSum: 0000DE60

    ImageSize: 00008900

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba0c0000 ba0cbd00 raspptp (postponed)

    Image path: raspptp.sys

    Image name: raspptp.sys

    Timestamp: Sun Apr 13 15:19:47 2008 (48025 CD 3)

    CheckSum: 000188A 6

    ImageSize: 0000BD00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba0d0000 ba0da200 raspppoe (postponed)

    Image path: raspppoe.sys

    Image name: raspppoe.sys

    Timestamp: Sun Apr 13 14:57:31 2008 (4802579B)

    Sum: 0000D 695

    ImageSize: 0000A 200

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba0e0000 ba0ec880 rasl2tp (postponed)

    Image path: rasl2tp.sys

    Image name: rasl2tp.sys

    Timestamp: Sun Apr 13 15:19:43 2008 (48025CCF)

    CheckSum: 0000FAE5

    ImageSize: 0000C 880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba0f0000 ba0fa480 imapi (postponed)

    Image path: imapi.sys

    Image name: imapi.sys

    Timestamp: Sun Apr 13 14:40:57 2008 (B 480253, 9)

    CheckSum: 00014A 61

    ImageSize: 0000A 480

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba100000 ba10e100 redbook (postponed)

    Image path: redbook.sys

    Image name: redbook.sys

    Timestamp: Sun Apr 13 14:40:27 2008 (4802539B)

    CheckSum: 0001462F

    ImageSize: 0000E100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba63d000 ba64c600 cdrom (postponed)

    Image path: cdrom.sys

    Image name: cdrom.sys

    Timestamp: Sun Apr 13 14:40:45 2008 (480253AD)

    CheckSum: 00018524

    ImageSize: 0000F600

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba64d000 ba65cc00 series (postponed)

    Image path: serial.sys

    Image name: serial.sys

    Timestamp: Sun Apr 13 15:15:44 2008 (48025BE0)

    CheckSum: 00014865

    ImageSize: 0000 00 FC

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba65d000 ba669d00 i8042prt (postponed)

    Image path: i8042prt.sys

    Image name: i8042prt.sys

    Timestamp: Sun Apr 13 15:17:59 2008 (48025 C 67)

    Checksum: 0001918C

    ImageSize: 0000CD 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba66d000 ba67bb00 drmk (postponed)

    Image path: drmk.sys

    Image name: drmk.sys

    Timestamp: Sun Apr 13 14:45:12 2008 (480254B 8)

    CheckSum: 0001 B 540

    ImageSize: 0000EB00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba67d000 ba689100 STREAM (postponed)

    Image path: streams. SYS

    Image name: streams. SYS

    Timestamp: Sun Apr 13 14:45:14 2008 (480254BA)

    CheckSum: 0001B4AB

    ImageSize: 0000C 100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    ba68d000 ba695e00 intelppm (postponed)

    Image path: intelppm.sys

    Image name: intelppm.sys

    Timestamp: Sun Apr 13 14:31:31 2008 (48025183)

    Sum: 0000C 894

    ImageSize: 00008E00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    badd2000 badd5c80 mssmbios (postponed)

    Image path: mssmbios.sys

    Image name: mssmbios.sys

    Timestamp: Sun Apr 13 14:36:45 2008 (480252BD)

    CheckSum: 0000FC8F

    ImageSize: 00003C 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    badfb000 badfd780 ndistapi (postponed)

    Image path: ndistapi.sys

    Image name: ndistapi.sys

    Timestamp: Sun Apr 13 14:57:27 2008 (48025797)

    CheckSum: 0000A1B3

    ImageSize: 00002780

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bae17000 bae1ad80 serenum (postponed)

    Image path: serenum.sys

    Image name: serenum.sys

    Timestamp: Sun Apr 13 14:40:12 2008 (4802538 C)

    CheckSum: 0001290A

    ImageSize: 00003D 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bae43000 bae5cb80 Mup (postponed)

    Image path: Mup.sys

    Image name: Mup.sys

    Timestamp: Sun Apr 13 15:17:05 (48025 31) 2008

    CheckSum: 0001AB3E

    ImageSize: 00019B 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bae5d000 bae89980 NDIS (postponed)

    Image path: NDIS.sys

    Image name: NDIS.sys

    Timestamp: Sun Apr 13 15:20:35 (48025 03) 2008

    CheckSum: 0002E181

    ImageSize: 0002C 980

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bae8a000 baf16600 Ntfs (postponed)

    Image path: Ntfs.sys

    Image name: Ntfs.sys

    Timestamp: Sun Apr 13 15:15:49 2008 (48025BE5)

    CheckSum: 0009586B

    ImageSize: 0008C 600

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    baf17000 baf2d880 KSecDD (postponed)

    Image path: KSecDD.sys

    Image name: KSecDD.sys

    Timestamp: Sun Apr 13 14:31:40 2008 (4802518 C)

    CheckSum: 00025D4C

    ImageSize: 00016880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    baf3e000 baf47e80 NDProxy (postponed)

    Image path: NDProxy.SYS

    Image name: NDProxy.SYS

    Timestamp: Sun Apr 13 14:57:28 2008 (48025798)

    CheckSum: 00011DE5

    ImageSize: 00009E80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bafce000 bafdff00 sr (postponed)

    Image path: sr.sys

    Image name: sr.sys

    Timestamp: Sun Apr 13 14:36:50 2008 (480252 2)

    CheckSum: 00012604

    ImageSize: 00011F00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bafe0000 bafffb00 fltmgr (postponed)

    Image path: fltmgr.sys

    Image name: fltmgr.sys

    Timestamp: Sun Apr 13 14:32:58 2008 (480251DA)

    CheckSum: 000251BB

    ImageSize: 0001FB00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    BF800000 bf9c2f80 win32k (postponed)

    Image path: win32k.sys

    Image name: win32k.sys

    Timestamp: Fri Apr 17 08:26:26 2009 (49E87572)

    CheckSum: 001C50F1

    ImageSize: 001C2F80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bf9c3000 bf9d4600 dxg (postponed)

    Image path: dxg.sys

    Image name: dxg.sys

    Timestamp: Sun Apr 13 14:38:27 2008 (48025323)

    Sum: 0001313C

    ImageSize: 00011600

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    BF9D5000 bfa17000 ati2dvag (postponed)

    Image path: ati2dvag.dll

    Image name: ati2dvag.dll

    Timestamp: Thu Feb 09 21:58:02 2006 (43EC013A)

    CheckSum: 000493AB

    ImageSize: 00042000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bfa17000 bfa56000 ati2cqag (postponed)

    Image path: ati2cqag.dll

    Image name: ati2cqag.dll

    Timestamp: Thu Feb 09 21:22:39 2006 (43EBF8EF)

    CheckSum: 00044F2F

    ImageSize: 0003F000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bfa56000 bfa8c000 atikvmag (postponed)

    Image path: c:\windows\system32\atikvmag.dll

    Image name: c:\windows\system32\atikvmag.dll

    Timestamp: Thu Feb 09 21:27:47 2006 (43EBFA23)

    Checksum: 000317C 3

    ImageSize: 00036000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bfa8c000 bfd0f940 ati3duag (postponed)

    Image path: ati3duag.dll

    Image name: ati3duag.dll

    Timestamp: Thu Feb 09 21:44:39 2006 (43EBFE17)

    CheckSum: 0028EAA1

    ImageSize: 00283940

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bfd10000 bfde20c0 ativvaxx (postponed)

    Image path: ativvaxx.dll

    Image name: ativvaxx.dll

    Timestamp: Thu Feb 09 21:39:23 2006 (43EBFCDB)

    CheckSum: 000D58AB

    ImageSize: 000D20C0

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bff50000 bff52f00 TSDDD (postponed)

    Image path: TSDDD.dll

    Image name: TSDDD.dll

    Timestamp: Sun Apr 13 20:11:25 2008 (4802A12D)

    CheckSum: 0000E39C

    ImageSize: 00002F00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    bffa0000 bffe5c00 ATMFD (postponed)

    Image path: ATMFD. DLL

    Image name: ATMFD. DLL

    Timestamp: Sun Apr 13 20:09:55 2008 (4802A0D3)

    CheckSum: 0004BE90

    ImageSize: 00045C 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f747f000 f748fa80 pci (postponed)

    Image path: pci.sys

    Image name: pci.sys

    Timestamp: Sun Apr 13 14:36:43 2008 (480252BB)

    CheckSum: 00015F46

    ImageSize: 00010A 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7490000 f74bdd80 ACPI (postponed)

    Image path: ACPI.sys

    Image name: ACPI.sys

    Timestamp: Sun Apr 13 14:36:33 2008 (480252B 1)

    CheckSum: 00038955

    ImageSize: 0002DD80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f74be000 f74d5880 SCSIPORT (postponed)

    Image path: SCSIPORT. SYS

    Image name: SCSIPORT. SYS

    Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)

    CheckSum: 00021101

    ImageSize: 00017880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f74d6000 f75d6000 DTAS (postponed)

    Image path: c:\windows\system32\drivers\sptd.sys

    Image name: c:\windows\system32\drivers\sptd.sys

    Timestamp: Wed Mar 05 19:32:57 2008 (47CF3BB9)

    CheckSum: 000 B 4211

    ImageSize: 00100000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f75f7000 f7606100 ohci1394 (postponed)

    Image path: ohci1394.sys

    Image name: ohci1394.sys

    Timestamp: Sun Apr 13 14:46:18 2008 (480254FA)

    CheckSum: 000151B 2

    ImageSize: 0000F100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7607000 f7614080 1394BUS (postponed)

    Image path: 1394BUS. SYS

    Image name: 1394BUS. SYS

    Timestamp: Sun Apr 13 14:46:18 2008 (480254FA)

    CheckSum: 0000F247

    ImageSize: 0000D 080

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7617000 f7620180 isapnp (postponed)

    Image path: isapnp.sys

    Image name: isapnp.sys

    Timestamp: Sun Apr 13 14:36:40 2008 (480252B 8)

    Sum: 0000D 074

    ImageSize: 00009180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7627000 f7631580 MountMgr (postponed)

    Image path: MountMgr.sys

    Image name: MountMgr.sys

    Timestamp: Sun Apr 13 14:39:45 2008 (48025371)

    CheckSum: 0000E3AA

    ImageSize: 0000A 580

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7637000 f7643c80 VolSnap (postponed)

    Image path: VolSnap.sys

    Image name: VolSnap.sys

    Timestamp: Sun Apr 13 14:41 2008 (480253BC)

    CheckSum: 00019063

    ImageSize: 0000CC80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7647000 f764fe00 drive (postponed)

    Image path: disk.sys

    Image name: disk.sys

    Timestamp: Sun Apr 13 14:40:46 2008 (480253AE)

    Checksum: 00014C 02

    ImageSize: 00008E00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7657000 f7663180 CLASSPNP (postponed)

    Image path: CLASSPNP. SYS

    Image name: CLASSPNP. SYS

    Timestamp: Sun Apr 13 15:16:21 2008 (48025-05)

    CheckSum: 0000CA8C

    ImageSize: 0000C 180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7667000 f766fde0 PxHelp20 (postponed)

    Image path: PxHelp20.sys

    Image name: PxHelp20.sys

    Timestamp: Wed Jun 20 18:26 2007 (4679A 978)

    CheckSum: 00015660

    ImageSize: 00008DE0

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7687000 f7696180 nic1394 (postponed)

    Image path: nic1394.sys

    Image name: nic1394.sys

    Timestamp: Sun Apr 13 14:51:22 2008 (4802562A)

    CheckSum: 0000F8AC

    ImageSize: 0000F180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f76b7000 f76c5880 usbhub (postponed)

    Image path: usbhub.sys

    Image name: usbhub.sys

    Timestamp: Sun Apr 13 14:45:36 2008 (480254 D 0)

    CheckSum: 0000FBBC

    ImageSize: 0000E880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7707000 f770d180 PCIIDEX (postponed)

    Image path: PCIIDEX. SYS

    Image name: PCIIDEX. SYS

    Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)

    CheckSum: 00009319

    ImageSize: 00006180

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f770f000 f7713d00 PartMgr (postponed)

    Image path: PartMgr.sys

    Image name: PartMgr.sys

    Timestamp: Sun Apr 13 14:40:48 2008 (B 480253, 0)

    CheckSum: 0000C1F3

    ImageSize: 00004D 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f77b7000 f77bc080 usbuhci (postponed)

    Image path: usbuhci.sys

    Image name: usbuhci.sys

    Timestamp: Sun Apr 13 14:45:34 2008 (480254CE)

    CheckSum: 0000DB34

    ImageSize: 00005080

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f77bf000 f77c6600 usbehci (postponed)

    Image path: usbehci.sys

    Image name: usbehci.sys

    Timestamp: Sun Apr 13 14:45:34 2008 (480254CE)

    Checksum: 000099D 5

    ImageSize: 00007600

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f77c7000 f77cf000 ctprxy2k (postponed)

    Image path: ctprxy2k.sys

    Image name: ctprxy2k.sys

    Timestamp: Fri Aug 11 02:45:39 2006 (44DC2793)

    CheckSum: 00005746

    ImageSize: 00008000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f77cf000 f77d5000 kbdclass (postponed)

    Image path: kbdclass.sys

    Image name: kbdclass.sys

    Timestamp: Sun Apr 13 14:39:46 2008 (48025372)

    CheckSum: 00011FF4

    ImageSize: 00006000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f77d7000 f77dca00 mouclass (postponed)

    Image path: mouclass.sys

    Image name: mouclass.sys

    Timestamp: Sun Apr 13 14:39:47 2008 (48025373)

    CheckSum: 00014EAB

    ImageSize: 00005A 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f77ff000 f7803080 raspti (postponed)

    Image path: raspti.sys

    Image name: raspti.sys

    Timestamp: Fri Aug 17 16:55:32 2001 (3B7D84C4)

    CheckSum: 000114B 1

    ImageSize: 00004080

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7832000 f7857700 dmio (postponed)

    Image path: dmio.sys

    Image name: dmio.sys

    Timestamp: Sun Apr 13 14:44:45 2008 (4802549 D)

    CheckSum: 00034FCE

    ImageSize: 00025700

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7858000 f7876880 ftdisk (postponed)

    Image path: ftdisk.sys

    Image name: ftdisk.sys

    Timestamp: Fri August 17 16:52:41 2001 (3B7D8419)

    CheckSum: 00021032

    ImageSize: 0001E880

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7877000 f7885d80 sysaudio (postponed)

    Image path: sysaudio.sys

    Image name: sysaudio.sys

    Timestamp: Sun Apr 13 15:15:55 2008 (48025BEB)

    CheckSum: 0001C7CE

    ImageSize: 0000ED80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7897000 f789a000 BOOTVID (postponed)

    Image path: BOOTVID.dll

    Image name: BOOTVID.dll

    Timestamp: Fri Aug 17 16:49:09 2001 (3B7D8345)

    CheckSum: 0000A36C

    ImageSize: 00003000

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f796f000 f7986900 atapi (postponed)

    Image path: atapi.sys

    Image name: atapi.sys

    Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)

    Sum: 0001CD 25

    ImageSize: 00017900

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7987000 f7988b80 kdcom (postponed)

    Image path: kdcom.dll

    Image name: kdcom.dll

    Timestamp: Fri Aug 17 16:49:10 2001 (3B7D8346)

    CheckSum: 00008311

    ImageSize: 00001 B 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7989000 f798a100 WMILIB (postponed)

    Image path: WMILIB. SYS

    Image name: WMILIB. SYS

    Timestamp: Fri 17 August 17:07:23 2001 (3B7D878B)

    Sum: 0000D 600

    ImageSize: 00001100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f798b000 f798c580 intelide (postponed)

    Image path: intelide.sys

    Image name: intelide.sys

    Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)

    CheckSum: 0000E81D

    ImageSize: 00001580

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f798d000 f798e700 dmload (postponed)

    Image path: system32\drivers\dmload.sys

    Image name: system32\drivers\dmload.sys

    Timestamp: Fri Aug 17 16:58:15 2001 (3B7D8567)

    CheckSum: 0000DC8A

    ImageSize: 00001700

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79b7000 f79b8a80 ParVdm (postponed)

    Image path: ParVdm.SYS

    Image name: ParVdm.SYS

    Timestamp: Fri Aug 17 16:49:49 2001 (3B7D836D)

    CheckSum: 0000A 855

    ImageSize: 00001 has 80

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79c1000 f79c2f00 Fs_Rec (postponed)

    Image path: Fs_Rec.SYS

    Image name: Fs_Rec.SYS

    Timestamp: Fri Aug 17 16:49:37 2001 (3B7D8361)

    CheckSum: 000079A 7

    ImageSize: 00001F00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79c3000 f79c4080 beep (postponed)

    Image path: c:\windows\system32\drivers\beep.sys

    Image name: c:\windows\system32\drivers\beep.sys

    Timestamp: Fri Aug 17 16:47:33 2001 (3B7D82E5)

    CheckSum: 0000C82C

    ImageSize: 00001080

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79c5000 f79c6080 mnmdd (postponed)

    Image path: mnmdd. SYS

    Image name: mnmdd. SYS

    Timestamp: Fri Aug 17 16:57:28 2001 (3B7D8538)

    CheckSum: 0000F3F7

    ImageSize: 00001080

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79c7000 f79c8080 RDPCDD (postponed)

    Image path: system32\drivers\rdpcdd.sys

    Image name: system32\drivers\rdpcdd.sys

    Timestamp: Fri Aug 17 16:46:56 2001 (3B7D82C0)

    CheckSum: 0000E2B7

    ImageSize: 00001080

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79d3000 f79d4100 swenum (postponed)

    Image path: swenum.sys

    Image name: swenum.sys

    Timestamp: Sun Apr 13 14:39:52 2008 (48025378)

    CheckSum: 0000383A

    ImageSize: 00001100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79d9000 f79da380 MSPQM (postponed)

    Image path: MSPQM.sys

    Image name: MSPQM.sys

    Timestamp: Sun Apr 13 14:39:51 2008 (48025377)

    Checksum: 00006D 54

    ImageSize: 00001380

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f79df000 f79e0280 USBD (postponed)

    Image path: USBD. SYS

    Image name: USBD. SYS

    Timestamp: Fri Aug 17 17:02:58 2001 (3B7D8682)

    CheckSum: 000040AF

    ImageSize: 00001280

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7a4f000 f7a4fd00 pciide (postponed)

    Image path: system32\drivers\pciide.sys

    Image name: system32\drivers\pciide.sys

    Timestamp: Fri Aug 17 16:51:49 2001 (3B7D83E5)

    CheckSum: 0000213E

    ImageSize: 00000D 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7a73000 f7a73c00 audstub (postponed)

    Image path: audstub.sys

    Image name: audstub.sys

    Timestamp: Fri Aug 17 16:59:40 2001 (3B7D85BC)

    CheckSum: 000105B 1

    ImageSize: 00000C 00

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    f7b6c000 f7bde100 iaStor (postponed)

    Image path: iaStor.sys

    Image name: iaStor.sys

    Timestamp: Tue Mar 23 15:13:55 2004 (40608 C 73)

    CheckSum: 00072C3C

    ImageSize: 00072100

    Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

    Unloaded modules:

    9525b 000 95286000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    955e4000 9560f000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    975e4000 9760f000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    975e4000 9760f000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    975e4000 9760f000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    975e0000 b 9760, 000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    979c 6000 979f1000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ca 985 000 985f5000 c:\windows\system32\drivers\kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    b03da000 b03db000 drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    b0ffe000 b100b000 DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ba6bd000 ba6cb000 c:\windows\system32\drivers\swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ad4ab000 ad4ad000 splitter.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    9869b 000 986be000 aec.sys

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ca 9, 79000 kbdhid.sys 9ca7d000

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ad6ac000 ad6b1000 Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    9ca7d000 ca 9, 80000 Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ad6b4000 ad6b9000 Flpydisk.SYS

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    ae12a000 ae131000 Fdc.SYS

    Timestamp: unavailable (00000000)

    Checksum: 00000000

    Hello

    Bluescreens can certainly be triggered by malware.

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone. (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Malicious removal tool from Microsoft
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
    a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
    http://www.prevx.com/

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    Also do to the General corruption of cleaning.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    I hope this helps.

    Rob - bicycle - Mark Twain said it is good.

  • HP CORE i3: help! Blue screen that says: enter the password administrator or power on password

    Help! Blue screen that says enter password administrator or power on password. It never imagined before, and I can't go to any other screen. It gives me a disabled system number 50986581?

    Enter 45684507

    Kind regards

    DP - K

  • need help with my screen has been using mouse and the screen is smaller and smaller

    need help with my screen has been using the mouse and the screen is smaller and smaller, so can't see

    Try to hold the 'ctrl' key and turn the wheel of scrolling the mouse forward to zoom, turning the scroll wheel to the rear is to zoom out.

  • Constant rebooting with blue screen - Satellite A60 332

    I have a Satellite A60-332 for topic a little more than two years now, recently, I noticed two major problems which I did not have time to run to the top:

    1. sometimes the laptop restarts just by itself for no reason. When I'm working, a blue screen with white text pops up for half a second and restart the system. Rarely another question occurs after that it will not restart but will be beep like crazy.

    2. I've had this problem since I bought my laptop; Sometimes the laptop won't play audio. What happens is after turning on the system; If the audio does not work: all the 'switches' in the volume control window will be present (wave, cd player, to the, telephone line, etc.). But sometimes when the audio does not work it just shows three switches, not more.

    I've had these two problems for a while now, and I've reformatted my computer at least 5 times since I bought it, these problems never go away.

    I also had another question; my hard drive is the 30 GB supplied with Toshiba. I tried to upgrade, but heard that most laptops, including Toshiba, have a hidden partition on the hard disk called a tatoo, that is when some of the system files are stored so that when you run the recovery discs, they function properly. Can anyone confirm this because, of course, is not a pull & pop work to install a new hard drive, because I won't be able to copy this tatoo.

    Many thanks for any help in advance.

    Hello

    1.) BSOD appears mainly due to the failure of the serious software or hardware failure. The laptop could also automatically stopped due to overheating. In this case, you should check your fans and clean if possible with the vacuum cleaner. But be careful. If it won't work not then test the operating system with the new installation of the OS. Perhaps a 3rd party software is a bad influence.
    In addition, check if the device uses the latest version of the BIOS. If this is not the case, the update.

    2.) don t know why this happens but maybe due to overheating mentioned.
    However, you could try reinstalling the audio driver.

    3.) sometimes laptops come with the Qosmio player or express media player. These players are installed on the hidden partition. I don t think that there could be another reason for hidden partitions.

  • Satellite M30x - bootsequence Windows XP with blue screen

    I have the following problem: I have 2 different Satellite M Series notebooks of performance!

    The problem, that I wonder happens 100% of the tests, but after turning on the computer laptop and after the bootsequence - at the present time, that the windows XP logo appears - the system halts with a blue screen. Turn to restart and falls into the next blue screen.

    The only thing I discovered is that XP regularly also begins long switch WLAN hardware is turned OFF as soon as I turn this switch with Windows, the blue screen occurs immediately and the system runs out of oil.

    is that what is anyone able to help? -new review of pilots or any other solution to the problem would be appreciated!

    Hansjoerg

    Hey,.

    Congratulations, you have already found the problem! :)

    From my own experience, I can tell you that the same thing happened to a friend of mine. So he replaced the WLAN card with a new one and the problem has been resolved! Windows starts with WLAN turn on () correctly!

    What WLAN card is installed on your laptop?
    In Satellite M30x of my friend a WLAN Wireless Intel 2200 card has been installed. He bought a new one for little money on eBay and replaced it yourself because it s not very delicate.

    So take a look on eBay or other places. You can also ask a maintainer approved assistance if you are not familiar with the disassembly of the laptop.

  • Problems with "BLUE SCREEN" on Satellite A300D-205

    Please help me find a solution for my laptop. When editing Windows 7 Ultimate 64 bit he works 2 or 3 days then appear the ugly 'blue screen '. I instaled Windows several times but every time that he do this 2hit.
    When I instaled to time windows 7 first, it works fine.

    I have the same problem of PADI. A driver problem, I think. What can I do?
    With the original Windows Vista Home Premium 32 fine little, work, but is slower than windows 7

    SORRY for my English language, but I'm from Romania and I don't speak very well.

    Post edited by: zerothebrave

    Did you test with Win7 32-bit?
    I use Win7 32 bit on my Satellite A300 and it works perfectly.

  • My Satellite closing with blue screen

    When I tried to turn off my computer 10 hours ago it took a long time, I pressed the characteristic "ctrl-alt-delete" but that doesn't seem to help. He was finally assigned through the ritual of saying "windows disconnects" but then I found myself with a blue screen where it says "closing windows" and my computer stayed like that for the last 10 hours.
    Is it possible manually to replace the system and turn it off?

    Hello

    As has been suggested by Red hawk you can stop the laptop by pressing the power button for 3-4 sec. Then the laptop must stop down.
    If this error appears for several times, I think it would be a good idea to reinstall the OS.

  • Qosimio G30-116 with blue screen at startup

    I have a bunch of dule Qosmio-Qosmio G30-116 of the start-up in windows generates a blue screen of death, which is quickly erased before I can read what is displayed.
    It starts in windows safe mode results in a long list of files displayed the last being Mup.sys

    Boot Linux and execution of everything I can think off generate no error.

    Connecting the edge dignostics Toshiba BIOS does not generate an error.

    Runs the check memory linux does not generate an error.

    Display of the file system does not generate an error.

    So I don't think I have a hardware problem, I think that something comes with windows

    Does anyone have an idea how to stop my erasing of the screen so I could real know what the problem is?

    There are a lot of valuable software on this machine, I didn't want to trash the entire disk to try to repair what seems to be a specific windows problem.

    Hello

    I think that the BSOD screen information would be very useful for you. The BSOD shows above all a memory dump that is not obvious to a common user.

    Another user has already proposed the question could be linked to the installed windows OS.
    I think he do not since then to study for a long time, who knows what unique application or which parts of Windows cause this problem

    You can try to use the freeware application called CCleaner which may help you clean up the operating system and the registry. This tool helped me in different cases

    But if the BSODS persist then a new install of Windows can help.

  • I have the error 0x0000008e (0xc0000005 0x833de487 0xb8bff73c 0x00000000) with blue screen

    Please help me with this...

    Hello

    What version of Windows?

    Please ask to the repair of the appropriate system of responses - Windows (corresponding to your version)-
    and recovery Forum.

    Answers - Windows Forums
    http://answers.Microsoft.com/en-us/Windows

    =================================================================

    Methods of troubleshooting for help - these can be used for XP, Vista or Windows 7.

    Check this thread for more information using BlueScreenView, MyEventViewer and other methods
    to troubleshoot the BlueScreens - top 3 responses (+ 1 other).

    http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-system/sometimes-i-get-a-blue-screen-when-using-IE-8/c675b7b8-795f-474d-a1c4-6b77b3fcd990

    We can analyze the minidumps if make you it available to the SkyDrive or another file
    sharing sites (such as MediaFire). If you have problems to download the copy of minidumps
    for the office or in the Documents folder and download them from there.

    ZIP or download the content of the C:\Windows\minidump

    Use SkyDrive to upload collected files
    http://social.technet.Microsoft.com/forums/en-us/w7itproui/thread/4fc10639-02dB-4665-993a-08d865088d65

    -------------------------------------------------------------------------

    Also this, so you can see the probable bluescreens.

    Windows Vista restarts automatically if your computer encounters an error that requires him to plant.
    (also Windows 7)
    http://www.winvistatips.com/disable-automatic-restart-T84.html

    ===========================================================

    Check out these utilities to see if information may be collected:

    It is an excellent tool for displaying the blue screen error information

    -Free - BlueScreenView scans all your minidump files created during 'blue screen of death '.
    hangs and displays information about all accidents of a table.
    http://www.NirSoft.NET/utils/blue_screen_view.html

    -------------

    MyEventViewer can be verified at the time of the blue screen (BSOD) within a second or
    so time of the BSOD for more information on the possible cause - see TIP.

    MyEventViewer - free - a simple alternative in the standard Windows Event Viewer.
    TIP - Options - Advanced filter allows you to see a period of time instead of the whole of the record-
    Set it for a bit before and after the time of the BSOD.
    http://www.NirSoft.NET/utils/my_event_viewer.html

    ------------

    AppCrashView - free - a small utility for Windows Vista and Windows 7 which shows the
    Details of all application crashes occurred in your system. The information of the plant are extracted
    the .wer files created by the Windows Error Reporting (WER) of exploitation component
    system each time that an accident has occurred. AppCrashView also allows you to easily record the
    list of accidents to the text/html/csv/xml file.
    http://www.NirSoft.NET/utils/app_crash_view.html

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle=""><- mark="" twain="" said="" it="">

Maybe you are looking for