Need help with blue screen
Hello!
My PC crashes every day after I start it. Reboot usually helps during some time, and then it happens again. I ran the tool to check the pilot and collected the .dmp system information and files, the links are below:
http://1drv.Ms/13CRdK4
http://1drv.Ms/13CRooU
http://1drv.Ms/1EaQUHg
Thank you very much
Alex
Alex
It was, but did not 'take' the at-fault driver. I can tell you that the pilot which was ongoing at the time of the accident was mchost.exe which is part of McAfee. If I were you I remove McAfee (her inclined to that sort of thing), and use Microsoft Security essentials instead.
I keep perform auditor for a bit just to make sure.
Tags: Windows
Similar Questions
-
need help with my screen has been using mouse and the screen is smaller and smaller
need help with my screen has been using the mouse and the screen is smaller and smaller, so can't see
Try to hold the 'ctrl' key and turn the wheel of scrolling the mouse forward to zoom, turning the scroll wheel to the rear is to zoom out.
-
Need help, troubleshoot blue screen Windows 7 Ultimate.
I downloaded my bluescreen here DMP files. Could someone please take a look and tell me which driver is the cause? I rebuilt this laptop several times now (complete reformat I mean) and I still get the same errors. Take a look and see what you think.
https://SkyDrive.live.com/redir?RESID=36FE5573C311A3B5! 114
Windows 7 Ultimate
Laptop MSI GT780DX
Intel I7 2670QM
12 GB OF DDR3 MEMORY
NVIDIA GTX 570M 1.5 GB
Double 750GB WD Scorpions running RAID 0
Blue mouse (haha)
No viruses, malware, bonnefin
Thanks in advance for any help.
These accidents were caused by the corruption of memory (probably a driver).
Run these two tests to check your memory and find which driver is causing the problem.* Don't forget to download any other DMP files (especially those running auditor)
1 - Memtest.* Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. http://www.memtest.org
* Boot from the CD and let it run at least 5 or 6 passes.
* Don't forget, anytime Memtest reports errors, it can be bad RAM or a bad motherboard slot.
* Test the sticks individually and if you find a good, test it in all slots.
Any error is indicative of a memory problem.
If a well-known stick fails in a slot of motherboard, it's probably the slot.
2. Driver VerifierUsing Driver Verifier is a dubious proposition. Most of the time it will crash and it will tell you what is the driver.
* But sometimes it will crash and will not tell you the driver.
* At other times it will crash until you can connect to Windows. If you can't mode without failure, then you will have to resort to editing the registry offline to disable driver verifier.
* I would suggest that you first back up your data and make sure that you have access to another computer so you can contact us in case of problems.
* Then do a system restore point (so you can restore the system using the functionality of Vista/Win7 Startup Repair).
* Under Windows 7, you can do a startup repair disk by clicking Start... All programs... Maintenance... Create a system - with Windows Vista repair disc, you need to use your drive installation or from the "Repair your computer" option at the top of the Safe Mode menu.
So, here is the procedure:
-Go to start and type "auditor" (without the quotes) and press enter
-Select 'Create a custom settings (for code developers)' and click 'Next '.
-Select "Select individual settings from the list complete" and click "Next".
-Select the entire document except for "Low resource Simulation" and click "next".
-Select "Select driver names from a list", then click "next".
* Select all drivers that are NOT supplied by Microsoft and click on "Next".
-On the next page, select "Finish".* Restart the system and wait as he crashed to blue screen.
* Continue to use your system normally and if you know what are the causes of the crash, do it several times. The objective here is to get the system crash because Driver Verifier is stressing out the drivers. If it is not planted for you, then let it run for at least 36 hours of continuous operation.
* If you are unable to Windows because it crashes too early, try safe mode.
* If you can't mode without fail, try to use the system from the installation DVD restore to bring the system back to the previous point of restoration that you created.* Further reading
'http://support.microsoft.com/kb/244617 '.Using Driver Verifier to identify issues with Windows drivers for users advanced
-
help with blue screen of the 0x1000007e
Hi, can I get help with freezes my computer?
View blue screen information:
==================================================
Dump file: 121015-27421 - 01.dmp
Crash time: 10/12/2015-20:41:47
Bug Check String: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug check code: 0x1000007e
Parameter 1: ffffffff "c0000005
Parameter 2: fffff880'0463f0d2
Parameter 3: fffff880'03b378d8
Parameter 4: fffff880'03 b 37110
Caused by the driver: rtbth.sys
Caused by the address: rtbth.sys + 2185c
Description of the file: Ralink Bluetooth adapter
Product name: Ralink Bluetooth adapter
Company: Ralink Technology, Corp..
File version: 2.9.22.0 built by: WinDDK
CPU: x 64
Plant address: rtbth.sys + 130d2
Stack address 1:
The stack address 2:
Address 3 the battery:
Computer name:
Full path: C:\Windows\Minidump\121015-27421-01.dmp
Number of processors: 4
Main version: 15
Minor Version: 9200
Empty the file size: 284.744
Dump of file time: 10/12/2015-20:42:49
====================================================================================================
Dump file: 120815-32078 - 01.dmp
Crash time: 08/12/2015-11:38:26
Bug Check String: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug check code: 0x1000007e
Parameter 1: ffffffff "c0000005
Parameter 2: fffff880'058d40d2
Parameter 3: fffff880'033dd8d8
Parameter 4: fffff880'033dd110
Caused by the driver: rtbth.sys
Caused by the address: rtbth.sys + 2185c
Description of the file: Ralink Bluetooth adapter
Product name: Ralink Bluetooth adapter
Company: Ralink Technology, Corp..
File version: 2.9.22.0 built by: WinDDK
CPU: x 64
Plant address: rtbth.sys + 130d2
Stack address 1:
The stack address 2:
Address 3 the battery:
Computer name:
Full path: C:\Windows\Minidump\120815-32078-01.dmp
Number of processors: 4
Main version: 15
Minor Version: 9200
Size of the dump file: 284.800
Dump of file time: 12/08/2015-11:39:44
====================================================================================================
Dump file: 120515-23000 - 01.dmp
Crash time: 12/05/2015 14:11:48
Bug Check String: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
Bug check code: 0x1000007e
Parameter 1: ffffffff "c0000005
Parameter 2: fffff880'058c00d2
Parameter 3: fffff880'0609a8d8
Parameter 4: fffff880'0609 has 110
Caused by the driver: rtbth.sys
Caused by the address: rtbth.sys + 2185c
Description of the file: Ralink Bluetooth adapter
Product name: Ralink Bluetooth adapter
Company: Ralink Technology, Corp..
File version: 2.9.22.0 built by: WinDDK
CPU: x 64
Plant address: rtbth.sys + 130d2
Stack address 1:
The stack address 2:
Address 3 the battery:
Computer name:
Full path: C:\Windows\Minidump\120515-23000-01.dmp
Number of processors: 4
Main version: 15
Minor Version: 9200
Size of the dump file: 284.800
Dump of file time: 12/05/2015 14:13:26
====================================================================================================
Dump file: 120315-46625 - 01.dmp
Crash time: 12/03/2015-21:46:50
Bug Check String: PAGE_FAULT_IN_NONPAGED_AREA
Bug check Code: 0 x 00000050
Parameter 1: fffffa80'0f7e35b8
Parameter 2: 00000000'00000000
Parameter 3: fffff880'010985da
Parameter 4: 00000000'00000000
Caused by the driver: mpsdrv.sys
Caused by the address: mpsdrv.sys + 88215 b 8
Description of the file: Protection of Microsoft Service pilot
Product name: Microsoft® Windows® Operating System
Company: Microsoft Corporation
File version: 6.2.9200.16753 (win8_gdr.131030 - 1505)
CPU: x 64
Plant address: ntoskrnl.exe + 5 has 540
Stack address 1:
The stack address 2:
Address 3 the battery:
Computer name:
Full path: C:\Windows\Minidump\120315-46625-01.dmp
Number of processors: 4
Main version: 15
Minor Version: 9200
Size of the dump file: 284.800
Dump of file time: 12/03/2015-21:48:50
==================================================Ntoskrnl.exe and rtbth.sys have been mentioned in the 3 last crashesmpsdrv.sys only in the first
News of the event viewer:
I saved a lot of event that happened in 08.12 accidents and 10.12, marked with red circles with white cross
and some other events around them
pastebin.com/xwU9pVf4
(its in Spanish)
I have not installed manually a new hardware or driver, the last accident occurred when I took the computer to sleep in airplane mode
This phenomenon was related to adapter Bluetooth Ralink from Ralink Technology, Corp. rtbth.sys.
Remove the driver current completely and install the latest driver available. For instructions on how to do read everything to update the drivers of my partner JMH3143 http://answers.microsoft.com/en-us/windows/wiki/windows_other-hardware/updating-a-driver/a5e6345e-af9b-4099-bef0-8d22254aa1c1?tm=1436753520149 here -
Hi, this is the 8th time, I have the blue screem of death and I am unable to find specific solutions for my case is the following:
Signature of the problem
Problem event name: BlueScreen
The system version: 6.0.6002.2.2.0.768.3
Locale ID: 2057Files helping to describe the problem (some files may be is no longer available)
Mini041511 - 05.dmp
SysData. XML
Version.txtSee a temporary copy of these files
WARNING: If a virus or other security threat caused the problem, open a copy of file can harm your computer.Additional information about the problem
BCCode: 24
BCP1: 00000000001904AA
BCP2: FFFFFA600AE74D58
BCP3: FFFFFA600AE74730
BCP4: FFFFF800028F0EDD
OS version: 6_0_6002
Service Pack: 2_0
Product: 768_1I would be really grateful to those that could help because my final exams are around the corner and I do most of my studies online...
Hi axmankay,
Method 1: you can see the steps in the link below by Diana d.
http://answers.Microsoft.com/en-us/Windows/Forum/windows_vista-system/BCCode-24/adfa4cc3-CF61-4797-a7de-1f15323b3f01Method 2: See the steps mentioned in the link below
Pick up the pieces after a computer crash
http://Windows.Microsoft.com/en-us/Windows-Vista/picking-up-the-pieces-after-a-computer-crash -
I hope someone can help me. I have a HP Altec running windows 7 and I have the following problem...
My computer screen goes white bright, and there are also lines that sometimes appear. I have to close the cover and try to connect to my office. And there, he just can't be all the time. My computer is about 1.5 years old? I'm doing something wrong? Any help would be great. Thank you
Looks like you may have a defective display unit. You can read other messages about similar problems with display.
If the display driver update does not solve the problem, I would recommend that you bring your laptop to an HP repair center authorized nearest you for further assessment.
-
Need help with W510 screen resolution 1920 x 1200
Hello
I have a new Lenovo W510, and I want the resolution screen 1920 x 1200. I seem to be able to force it to this resolution, but the screen is larger than the physical screen, and I have to actually move the image of the desktop to get to everything. My T61p supports this resolution without any problem.
Can I do this with my W510?
Thank you!
Mark
Looks like you can hang one out of eBay for about $140:
http://shop.eBay.ca/i.html?_trkparms=65%253A12%257C66%253A2%257C39%253A1%257C72%253A4194&RT=NC&_nkw=... -
Help with blue screens of 500-125 a windows 8
Hi, I bought my product last year and using it I got the bluescreens (3 exactly)
Can you help me please?
KMODE_EXCEPTION_NOT_HANDLED caused by ntoskrnl.exe code: 0x0000001e
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED caused by hal.dll code: 0x1000007e
CACHE_MANAGER caused by fltmgr.sys code: 0 x 00000034
Really not happy with my product had to replace fans, failed hard drive had to be replaced and now this!
The error code 87 you got you try to run the command DISM was due to your missing spaces, copy and paste the command I gave you.
A short beep means that the CD/DVD drive not detected, reinstall your driver.
Suggest that to make a backup of your data on an external hard drive if you have fear, you have to do this on a regular basis.
Perform diagnostics of material from BIOS
-
need help with the screen flashing flicker
While in some applications, I get a flicker of the screen fast, can't find the problem / source.
Hello
1. don't you make changes to the computer until the problem occurred?
I suggest you to set up your computer in a clean boot state, and check to see if the same problem happens.
By setting your boot system minimum state helps determine if third-party applications or startup items are causing the problem.
How to troubleshoot a problem by performing a clean boot in Windows Vista or Windows 7:
http://support.Microsoft.com/kb/929135Note: After the boot minimum troubleshooting step, follow step 7 in the link provided to return the computer to a Normal startup mode.
Follow these steps to reset the computer to start as usual:
(a) click on start toreduce this top that i, type msconfig.exe in the Start Search box and press ENTER.
If you are prompted for an administrator password or for confirmation, type your password, or click continue.
(b) under the general tab, click the Normal startup option, and then click OK.
(c) when you are prompted to restart the computer, click restart.
Hope this information is useful.
-
Need help with full screen layout...
I create a logon screen for an application that has several RichTextFields and two ButtonFields. The fields are all arranged vertically.
I use a table of HorizontalFieldManagers to center the vertical fields horizontally within the VerticalFieldManager. The problem is that the centering work for the ButtonFields, but not the RichTextFields.
Here is the screen on the Simulator:
Here's what the code looks like the VerticalFieldManager for full screen:
public tumblingIntroScreen(String appTitle, String description) { super(new VerticalFieldManager(Manager.FIELD_VCENTER), Screen.DEFAULT_CLOSE | Manager.FIELD_VCENTER);
Here is the code for the table HorizontalFieldManager.
// set up the array HorizontalFieldManager hfmTitle, hfmDesc, hfmBOne, hfmBTwo, hfmThree, hfmFour; HorizontalFieldManager[] hfm = {hfmTitle, hfmDesc, hfmBOne, hfmBTwo, hfmThree, hfmFour}; ...... // initialize each HorizontalFieldManager for(int j=0;j
The following code adds the HorizontalFieldManagers to the full screen
// add fields to screen add(new LabelField()); // this and next are for spacing add(new LabelField()); add(new LabelField()); // this and next are for spacing add(new LabelField()); hfm[0].add(firstLine); add(hfm[0]); add(new LabelField()); // for spacing hfm[1].add(secondLine); add(hfm[1]); add(new LabelField()); // this and next are for spacing add(new LabelField()); hfm[4].add(thirdLine); add(hfm[4]); add(new LabelField()); hfm[2].add(authenticate); add(hfm[2]); add(new LabelField()); // more spacing add(new LabelField()); hfm[5].add(fourthLine); add(hfm[5]); add(new LabelField()); // more spacing hfm[3].add(signUp); add(hfm[3]);
no idea why the Manager is only the ButtonFields centering?
Solved.
Fact the first field I added to the VerticalFieldManager a RichTextField (Field.USE_ALL_WIDTH). That fixed the problem of centering.
-
Original title: need help with the blue screen issue
My computer turns saying a blue screen: a problem has been detected and windows were shut down to prevent damage. The problem seems to be caused by the following file: NAVEXI5. SYS PAGE_FAULT_IN_NONPAGED_AREA he seems to have a different error whenever he turns to a blue screen. Can someone help me please.Hello
1. Since when are you facing this problem?
2. you remember to make changes to the system?
3. do you get an error with this error code?I suggest to unplug external devices such as printer, scanner, etc. that are plugged into the system, and then restart the system and check if the problem persists.
Method 1.
I suggest you to do a check disk from the recovery console and check if the problem is resolved. Follow the steps mentioned below.
a. start into the recovery console using the XP CD. Follow the steps mentioned in the article below.
Description of the Windows XP Recovery Console for advanced users
http://support.Microsoft.com/kb/314058
b. perform a disk check.
How to perform disk error checking in Windows XP
http://support.Microsoft.com/kb/315265Method 2.
I suggest you to start with the XP CD and then do a system restore. Follow the steps mentioned in the article below.
How do I recover from a corrupted registry that prevents Windows XP startup
http://support.Microsoft.com/kb/307545I hope this helps.
-
Need help with screen Blus of death (BSOD) on my computer toshiba laptop
Hello all, Ive had a little last week, or problems with my laptop. While playing a game (minecraft), I would randomly have a BSOD error and my laptop will re-start. Initially, I gave it no thought, but when it happened again, I decided to try to do a little research, but I'm not terrible with technology and other then I'm neither the case with my own research.
If someone could point me in the direction of a few possible ways to get this problem.
guys do you propose I make to the store and see if they can check it out, what would I need if I did.
I got a program to read some sort of file "dump" made when occurs a BSOD, I publish what this program here says? the program is BlueScreenView, if yes, what I have post the spectator thing? There are has 2 main screens on it, SDO as Sho different dump files (which is on the top) and on the bottom, it lists the names of different files for each dump file I think that some of them highlighted.
im not this product with tech so I don't know much but I need to post anything on my laptop or any information of the dumpfile and would have this info help in any way to determine the problem? just tell me what I have to post and ill get the information displayed in a response, thank you.
-leoknighted
PS: I don't think that playing minecraft is the cause of the BSOD and crashing, but I only get it when playing minecraft, so I don't know if minecraft is causing accidents and others. I watch videos and this all the time and I never have an accident. I'll try and play a different game and see if this causes my laptop down and the cause is perhaps high usuage to my laptop, as I've said games require a lot of power of a laptop/computer, if they are not the 'best' laptop for games. but yh, if someone thinks they can help me and need some information please tell me so I can get it for you. If you guys think it would be best to get a professional to look just mylaptop say, however im save as a last resort.
Hello
I suggest you to refer to this article to check if this help.
Resolve stop (blue screen) error in Windows 7
http://Windows.Microsoft.com/en-us/Windows7/resolving-stop-blue-screen-errors-in-Windows-7Important: System Restore will return all system files not as documents, email, music, etc., to a previous state. These files of types are completely affected by the restoration of the system. If it was your intention with this tool to recover a deleted file to non-system, try using a file instead of system restore recovery program.
Important: while performing the check disk on the hard disk, if bad sectors can be found, then check disk will try to repair this sector. All the data available in this area may be lost.
Custom installation WARNING: If you format the hard disk during the installation, the data files are saved in a Windows.old folder on the partition you installed Windows 7. However, you should always back up the files. If you have encrypted data files, you may not be able to access them after installing Windows 7. If you have backed up your data files and then restored after Windows 7 is installed, you can delete the Windows.old folder.
Let us know if you need help with this question, we will be happy to offer you our help.
-
NEED HELP WITH SERVICE PACK 3. After downloading and the computer goes into rebooting mode I get the screen to restart with three options, network security safe mode and the other thing. , but it of although he gets, he keeps countdown to restart and reboots and restarts, over and over again, never reboots, same screen. my computer won't let me out this screen even after I turned off the computer and turn it back on, I get the same screen. the only way I can get out of this is to erase my computer everything and bring it back to factory, right out of the box, this big headaches. Thanks for anyone who can help me. PS. Keep the answers in simple terms please.
Hi BSRC$, in stock
- You have security software installed on the computer?
- You receive an error message when you restart the computer?
Reinstalling Windows XP to the factory setting would not be the first option.
It is possible that some third-party programs or the services installed on the computer interfere with the installation of service pack 3.
I suggest that you try to uninstall service pack 3 from the computer by using the recovery console and subsequently ask the article below for what to do before installing the service pack 3on the computer.
How to remove Windows XP Service Pack 3 from your computer
http://support.Microsoft.com/kb/950249
Steps to take before you install Windows XP Service Pack 3
-
Need help with windows defender. all my files folders pictures everythiing disappeared and I find myself with this black screen and it is not all good: o)
I don't know why vista windows no longer charge, or when the files and folders disappeared
How Windows Defender is on this problem?
Follow these steps to try to solve your problems of boot.
Restore point:
Try typing F8 at startup and in the list of Boot selections, select Mode safe using ARROW top to go there > and then press ENTER.
Try a restore of the system once, to choose a Restore Point prior to your problem...
Click Start > programs > Accessories > system tools > system restore > choose another time > next > etc.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
If restore work not and you do not have a Vista DVD from Microsoft, do a repair disc to do a Startup Repair:
Download the ISO on the link provided and make a record of repair time it starts.
Go to your Bios/Setup, or the Boot Menu at startup and change the Boot order to make the DVD/CD drive 1st in the boot order, then reboot with the disk in the drive.
At the startup/power on you should see at the bottom of the screen either F2 or DELETE, go to Setup/Bios or F12 for the Boot Menu.
When you have changed that, insert the Bootable disk you did in the drive and reboot.
http://www.bleepingcomputer.com/tutorials/tutorial148.html
Link above shows what the process looks like and a manual, it load the repair options.
NeoSmart containing the content of the Windows Vista DVD 'Recovery Centre', as we refer to him. It cannot be used to install or reinstall Windows Vista, and is just a Windows PE interface to recovering your PC. Technically, we could re-create this installation with downloadable media media freely from Microsoft (namely the Microsoft WAIK, several gigabyte download); but it is pretty darn decent of Microsoft to present Windows users who might not be able to create such a thing on their own.
Read all the info on the website on how to create and use:
http://NeoSmart.net/blog/2008/Windows-Vista-recovery-disc-download/
ISO Burner:http://www.snapfiles.com/get/active-isoburner.html
It's a very good Vista startup repair disk.
You can do a system restart tool, system, etc it restore.
It is NOT a disc of resettlement.
And the 32-bit is what normally comes on a computer, unless 64-bit.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Data recovery:
1. slave of your hard drive in another computer and read/save your data out there.
2. put your Hard drive in a USB hard drive case, plug it into another computer and read/save from there.
3 Alternatively, use Knoppix Live CD to recover data:
http://www.Knopper.NET/Knoppix/index-en.html
Download/save the file Knoppix Live CD ISO above.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://isorecorder.alexfeinman.com/isorecorder.htm
Download the Vista software from the link above.
After installing above ISO burning software, right click on the Knoppix ISO file > copy the Image to a CD.
Knoppix is not installed on your PC; use only the resources of your PC, RAM, graphics etc.
Change the boot order in YOUR computer/laptop to the CD/DVD Drive 1st in the boot order.
Plug a Flash Drive/Memory Stick, BOOT with the Live CD, and you should be able to read the hard drive.
When the desktop loads, you will see at least two drive hard icons on the desktop (one for your hard drive) and one for the USB key.
Click on the icons of hard drive to open and to understand which drive is which.
Click the icon for the USB drive and click on "Actions > Change the read/write mode" so you can write to disk (it is read-only by default for security reasons).
Now to find the files you want to back up, just drag and drop them on the USB. When you're done, shut down the system and remove the USB key.
See you soon.
Mick Murphy - Microsoft partner
-
Get the IRQL_NOT_LESS_OR_EQUAL Error with blue screen
Hello
I get the IRQL_NOT_LESS_OR_EQUAL Error with blue screen when I start the machine.
STOP: 0X0000000A (0X00000000, 0X804DC11D, 0X00000001, 0 X 000000002)I can't connect in Debug Mode. I tried winDBG, but cannot interpret the output (output is attached below). There was no new HW SW or recently installed or when this error occurred.
I also tried to run Verifier.exe with the option "Select all drivers installed automatically on this computer" and as soon as I chose this option, another mistake (and cannot change this option), DRIVER_IRQL_NOT_LESS_OR_EQUAL
STOP: 0x000000D1(0x8068329C,0x00000002,0x00000000,0x89E4460A)Thanks in advance,
SRSKoutput in winDbg:
Debug version of Microsoft Windows (R) 6.11.0001.404 X 86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading dump file [C:\WINDOWS\Minidump\Mini102109-01.dmp]
The mini kernel dump file: only registers and the trace of the stack are available
Symbol search path is: * invalid *.
****************************************************************************
* Loading of the symbol may be unreliable without a symbol search path. *
* Use .symfix to get the debugger to choose a symbol path. *
* After adjusting your path to symbols, use .reload to refresh the locations of symbols. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols cannot be loaded because the path is not initialized. *
* *
* The symbol path can be defined: *.
* using the _NT_SYMBOL_PATH environment variable. *
* with the help of the
there when you start the debugger argument. *. * using the .sympath and .sympath + *.
*********************************************************************
Could not load the ntoskrnl.exe, 0n2 error Win32 image
WARNING: Unable to verify timestamp for ntoskrnl.exe
ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) PUTS free x 86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Computer name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
The debugging session: 23:57:36.015 Tue Oct 20, 2009 (GMT-4)
System Uptime: 0 days 9:05:10.605
*********************************************************************
* Symbols cannot be loaded because the path is not initialized. *
* *
* The symbol path can be defined: *.
* using the _NT_SYMBOL_PATH environment variable. *
* with the help of the
there when you start the debugger argument. *. * using the .sympath and .sympath + *.
*********************************************************************
Could not load the ntoskrnl.exe, 0n2 error Win32 image
WARNING: Unable to verify timestamp for ntoskrnl.exe
ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe
Loading the kernel symbols
...............................................................
................................................................
.......
Loading user symbols
Loading unloaded module list
..................
*******************************************************************************
* *
* Bugcheck analysis *.
* *
*******************************************************************************
Use! analyze - v to obtain detailed debugging information.
Bugcheck 1000007E, {c0000005, 8736d01a, f78d9ec4, f78d9bc0}
The kernel symbols are FALSE. Correct symbols to do the analysis.
*************************************************************************
*** ***
*** ***
Your debugger is not using the appropriate symbols *.
*** ***
In order for this command works correctly, your symbol path *.
should point to .pdb files have the type information complete. ***
*** ***
Some (such as the public OS symbols) .pdb files are not *.
contain the required information. The contact group that *.
you provided with these symbols, if you need this command for *.
work. ***
*** ***
Type referenced: nt! _KPRCB *.
*
Type referenced: nt! KPRCB ***
Type referenced: nt! _KPRCB *.
*
Type referenced: nt! _KPRCB *.
*************************************************************************
WARNING: Unable to verify timestamp for Ntfs.sys
ERROR: Module load completed but symbols can be loaded for Ntfs.sys
Could not load the PxHelp20.sys, 0n2 error Win32 image
WARNING: Unable to verify timestamp for PxHelp20.sys
ERROR: Module load completed but symbols can be loaded for PxHelp20.sys
Type referenced: nt! _KPRCB *.
* ***
Type referenced: nt! _KPRCB *.
* Symbols cannot be loaded because the path is not initialized. *
* *
* The symbol path can be defined: *.
* using the _NT_SYMBOL_PATH environment variable. *
* with the help of the
there when you start the debugger argument. *. * using the .sympath and .sympath + *.
*********************************************************************
*********************************************************************
* Symbols cannot be loaded because the path is not initialized. *
* *
* The symbol path can be defined: *.
* using the _NT_SYMBOL_PATH environment variable. *
* with the help of the
there when you start the debugger argument. *. * using the .sympath and .sympath + *.
*********************************************************************
Probably caused by: PxHelp20.sys (PxHelp20 + 59b 7)
Follow-up: MachineOwner
---------
KD > .symfix
KD > .reload
Could not load the ntoskrnl.exe, 0n2 error Win32 image
WARNING: Unable to verify timestamp for ntoskrnl.exe
ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe
Loading the kernel symbols
...............................................................
................................................................
.......
Loading user symbols
Loading unloaded module list
..................
KD > kb
ChildEBP RetAddr Args to child
WARNING: Frame IP not in any known module. Sequence of images may be wrong.
68772073 20657265 20657261 3f756f79 0x8736d01a f78da54c
20657265 20657261 3f756f79 6d6f4820 f78da550 0 x 68772073
f78da554 20657261 3f756f79 6d6f4820 63207265 0 x 20657265
f78da558 3f756f79 6d6f4820 63207265 736c6c61 0 x 20657261
f78da55c 6d6f4820 63207265 736c6c61 62654 has 20 0x3f756f79
f78da560 63207265 62654a 20 00217375 0x6d6f4820 736c6c61
f78da564 736c6c61 62654a 20 00217375 666e6f63 0 x 63207265
62654a 20 00217375 666e6f63 692e6769 0x736c6c61 f78da568
f78da56c 00217375 666e6f63 692e6769 0000696e 0x62654a20
f78da570 666e6f63 692e6769 0000696e 73726576 0 x 217375
f78da574 0000696e 692e6769 73726576 006e6f69 0x666e6f63
00000000 73726576 006e6f69 746f7571 0x692e6769 f78da578
KD > lmv
start end module name
804 d 7000 806ed700 nt T (no symbol)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Fri Feb 06 06:08:08 2009 (498C1A18)
CheckSum: 002197F5
ImageSize: 00216700
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
806ee000 8070e300 hal (postponed)
Image path: hal.dll
Image name: hal.dll
Timestamp: Sun Apr 13 14:31:27 2008 (4802517F)
CheckSum: 00024F17
ImageSize: 00020300
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
951ba180 95190000 kmixer (postponed)
Image path: c:\windows\system32\drivers\kmixer.sys
Image name: c:\windows\system32\drivers\kmixer.sys
Timestamp: Sun Apr 13 14:45:07 2008 (480254B 3)
CheckSum: 0002F580
ImageSize: 0002A 180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
953c 6000 953d 2000 1 (postponed)
Image path: 1C.tmp
Image name: 1C.tmp
Timestamp: Sat Oct 17 23:21:43 2009 (4ADA89C7)
CheckSum: 00007E35
ImageSize: 0000-000 C
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
98528000 98579880 srv (postponed)
Image path: srv.sys
Image name: srv.sys
Timestamp: Thu Dec 11 05:57:07 2008 (4940F203)
CheckSum: 0005EF30
ImageSize: 00051880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
985f5000 98609480 wdmaud (postponed)
Image path: wdmaud.sys
Image name: wdmaud.sys
Timestamp: Sun Apr 13 15:17:18 2008 (48025C3E)
CheckSum: 00018CBD
ImageSize: 00014480
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9865 to 000 9869aa80 HTTP (postponed)
Image path: HTTP.sys
Image name: HTTP.sys
Timestamp: Sun Apr 13 14:53:48 2008 (480256BC)
Checksum: 00046D 31
ImageSize: 00040A 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9870e000 9873 has 180 mrxdav (postponed)
Image path: c:\windows\system32\drivers\mrxdav.sys
Image name: c:\windows\system32\drivers\mrxdav.sys
Timestamp: Sun Apr 13 14:32:42 2008 (480251CA)
Sum: 0002C 564
ImageSize: 0002C 180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a7b3000 9a 825100 dump_iastor (postponed)
Image path: dump_iastor.sys
Image name: dump_iastor.sys
Timestamp: Tue Mar 23 15:13:55 2004 (40608 C 73)
CheckSum: 00072C3C
ImageSize: 00072100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a 826000 9 has 876380 avgldx86 (postponed)
Image path: avgldx86.sys
Image name: avgldx86.sys
Timestamp: Thu Jul 09 20:17:49 2009 (4A5688AD)
Sum: 0005C 506
ImageSize: 00050380
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a 877000 9a89c500 ipnat (postponed)
Image path: ipnat.sys
Image name: ipnat.sys
Timestamp: Sun Apr 13 14:57:10 2008 (48025786)
CheckSum: 0002AF4A
ImageSize: 00025500
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a89d000 9a90c280 mrxsmb (postponed)
Image path: mrxsmb.sys
Image name: mrxsmb.sys
Timestamp: Fri Oct 24 07:21:07 2008 (4901AFA3)
CheckSum: 0007CB15
ImageSize: 0006F280
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a90d000 9a937e80 rdbss (postponed)
Image path: rdbss.sys
Image name: rdbss.sys
Timestamp: Sun Apr 13 15:28:38 2008 (48025EE6)
CheckSum: 0002F906
ImageSize: 0002AE80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a 938000 9a959d00 afd (postponed)
Image path: afd.sys
Image name: afd.sys
Timestamp: Thu Aug 14 06:04:35 2008 (48A 40333)
CheckSum: 000292E0
ImageSize: 00021D 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a95a000 9a981c00 netbt (postponed)
Image path: netbt.sys
Image name: netbt.sys
Timestamp: Sun Apr 13 15:20:59 2008 (48025D1B)
CheckSum: 0002FE7A
ImageSize: 00027C 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a 982000 9a99ae00 avgtdix (postponed)
Image path: c:\windows\system32\drivers\avgtdix.sys Device
Image name: c:\windows\system32\drivers\avgtdix.sys Device
Timestamp: My Apr 06 09:42:27 2009 (49DA06C3)
CheckSum: 00029806
ImageSize: 00018E00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a99b000 9a9f3480 tcpip (postponed)
Image path: tcpip.sys
Image name: tcpip.sys
Timestamp: Fri Jun 20 07:51:09 2008 (485B99AD)
CheckSum: 0005ED6B
ImageSize: 00058480
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9a9f4000 9aa06600 ipsec (postponed)
Image path: ipsec.sys
Image name: ipsec.sys
Timestamp: Sun Apr 13 15:19:42 2008 (48025CCE)
CheckSum: 00016389
ImageSize: 00012600
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9aa27000 9aac3000 ctac32k (postponed)
Image path: ctac32k.sys
Image name: ctac32k.sys
Timestamp: Fri Aug 11 02:45:14 2006 (44DC277A)
CheckSum: 00081570
ImageSize: 0009C 000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9aac3000 9aaea000 ctsfm2k (postponed)
Image path: ctsfm2k.sys
Image name: ctsfm2k.sys
Timestamp: Fri Aug 11 02:45:18 2006 (44DC277E)
Checksum: 000275C 8
ImageSize: 00027000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9aaea000 9ab17000 emupia2k (postponed)
Image path: emupia2k.sys
Image name: emupia2k.sys
Timestamp: Fri Aug 11 02:45:17 2006 (44DC277D)
CheckSum: 00013B 96
ImageSize: 0002D 000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9ab17000 9ac1b000 ha10kx2k (postponed)
Image path: ha10kx2k.sys
Image name: ha10kx2k.sys
Timestamp: Fri Aug 11 02:45:24 2006 (44DC2784)
CheckSum: 000BD2C0
ImageSize: 00104000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9ac1b000 9ac45000 hap16v2k (postponed)
Image path: hap16v2k.sys
Image name: hap16v2k.sys
Timestamp: Fri Aug 11 02:45:26 2006 (44DC2786)
Checksum: 0002D 547
ImageSize: 0002A, 000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b20b000 9b219a80 usbaudio (postponed)
Image path: usbaudio.sys
Image name: usbaudio.sys
Timestamp: Sun Apr 13 14:45:11 2008 (480254B 7)
CheckSum: 0001D8AC
ImageSize: 0000EA80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b2bb000 9b2be900 o ndisuio (postponed)
Image path: ndisuio.sys
Image name: ndisuio.sys
Timestamp: Sun Apr 13 14:55:57 2008 (4802573D)
CheckSum: 00008481
ImageSize: 00003900
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b2dc000 9b2dcb80 Null (postponed)
Image path: Null.SYS
Image name: Null.SYS
Timestamp: Fri Aug 17 16:47:39 2001 (3B7D82EB)
CheckSum: 00008483
ImageSize: 00000B 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b 964000 9b972d80 arp1394 (postponed)
Image path: arp1394.sys
Image name: arp1394.sys
Timestamp: Sun Apr 13 14:51:22 2008 (4802562A)
CheckSum: 0000EE1E
ImageSize: 0000ED80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b 974000 9b97c700 wanarp (postponed)
Image path: wanarp.sys
Image name: wanarp.sys
Timestamp: Sun Apr 13 14:57:20 2008 (48025790)
CheckSum: 00009785
ImageSize: 00008700
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b 994000 9b99ee00 Fips (postponed)
Image path: Fips.SYS
Image name: Fips.SYS
Timestamp: Sun Apr 13 14:33:27 2008 (480251F7)
CheckSum: 0001559A
ImageSize: 0000AE00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9b9b4000 9b9bc780 netbios (postponed)
Image path: netbios.sys
Image name: netbios.sys
Timestamp: Sun Apr 13 14:56:01 2008 (48025741)
CheckSum: 00010B5E
ImageSize: 00008780
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9bd09000 9bd0c240 OMCI (postponed)
Image path: OMCI. SYS
Image name: OMCI. SYS
Timestamp: Sea Aug 22 12:42:57 2001 (3B83E111)
CheckSum: 0000FDD9
ImageSize: 00003240
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
9ca 75000 9 ca 77280 Rdbss (postponed)
Image path: rasacd.sys
Image name: rasacd.sys
Timestamp: Fri Aug 17 16:55:39 2001 (3B7D84CB)
CheckSum: 0000B2E7
ImageSize: 00002280
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
a6782000 dog guard a6786500 (postponed)
Image path: watchdog.sys
Image name: watchdog.sys
Timestamp: Sun Apr 13 14:44:59 2008 (480254AB)
CheckSum: 000078B 2
ImageSize: 00004500
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
a6870000 a687f900 Cdfs (postponed)
Image path: Cdfs.SYS
Image name: Cdfs.SYS
Timestamp: Sun Apr 13 15:14:21 2008 (48025B8D)
CheckSum: 000127A 4
ImageSize: 0000F900
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
a7027000 a7029900 Dxapi (postponed)
Image path: Dxapi.sys
Image name: Dxapi.sys
Timestamp: Fri Aug 17 16:53:19 2001 (3B7D843F)
CheckSum: 0000ACC2
ImageSize: 00002900
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
aa431000 aa437700 USBSTOR (postponed)
Image path: USBSTOR. SYS
Image name: USBSTOR. SYS
Timestamp: Sun Apr 13 14:45:37 (1 480254) 2008
CheckSum: 00011541
ImageSize: 00006700
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ad66c000 ad673d80 usbccgp (postponed)
Image path: usbccgp.sys
Image name: usbccgp.sys
Timestamp: Sun Apr 13 14:45:38 2008 (480254 2)
CheckSum: 000100CC
ImageSize: 00007D 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ad684000 ad689280 avgmfx86 (postponed)
Image path: avgmfx86.sys
Image name: avgmfx86.sys
Timestamp: Wed Jul 01 16:37:21 2009 (4A4BC901)
CheckSum: 0000B17B
ImageSize: 00005280
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ad68c000 ad693880 NPH (postponed)
Image path: Npfs.SYS
Image name: Npfs.SYS
Timestamp: Sun Apr 13 14:32:38 2008 (6 480251)
CheckSum: 0000C3AB
ImageSize: 00007880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ad694000 ad698a80 Msfs (postponed)
Image path: Msfs.SYS
Image name: Msfs.SYS
Timestamp: Sun Apr 13 14:32:38 2008 (6 480251)
CheckSum: 00005BB8
ImageSize: 00004A 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ad69c000 ad6a1200 vga (postponed)
Image path: vga.sys
Image name: vga.sys
Timestamp: Sun Apr 13 14:44:40 2008 (48025498)
Checksum: 0001170C
ImageSize: 00005200
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ad6a4000 ad6aa180 HIDPARSE (postponed)
Image path: HIDPARSE. SYS
Image name: HIDPARSE. SYS
Timestamp: Sun Apr 13 14:45:22 2008 (480254 2)
CheckSum: 00008E19
ImageSize: 00006180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b03d8000 b03d8d00 dxgthk (postponed)
Image path: dxgthk.sys
Image name: dxgthk.sys
Timestamp: Fri Aug 17 16:53:12 2001 (3B7D8438)
CheckSum: 000035E7
ImageSize: 00000D 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9722000 b977ff00 update (postponed)
Image path: update.sys
Image name: update.sys
Timestamp: Sun Apr 13 14:39:46 2008 (48025372)
CheckSum: 0006CBBF
ImageSize: 0005DF00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9780000 b97afe80 rdpdr (postponed)
Image path: rdpdr.sys
Image name: rdpdr.sys
Timestamp: Sun Apr 13 14:32:50 (480251 2) 2008
CheckSum: 00039B0C
ImageSize: 0002FE80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b97b0000 b97c0e00 psched (postponed)
Image path: psched.sys
Image name: psched.sys
Timestamp: Sun Apr 13 14:56:36 2008 (48025764)
CheckSum: 0001E655
ImageSize: 00010E00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b97c1000 b97d7580 ndiswan (postponed)
Image path: ndiswan.sys
Image name: ndiswan.sys
Timestamp: Sun Apr 13 15:20:41 2008 (48025-09)
CheckSum: 00018B 10
ImageSize: 00016580
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b97d8000 b9826500 luipsec (postponed)
Image path: luipsec.sys
Image name: luipsec.sys
Timestamp: Fri Feb 20 14:55:19 2008 (47BC85A7)
CheckSum: 0005082D
ImageSize: 0004E500
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9827000 b9860000 arkzlin6 (postponed)
Image path: arkzlin6. SYS
Image name: arkzlin6. SYS
Timestamp: Sun Jul 13 18:54 2008 (487A 8788)
CheckSum: 00042E1D
ImageSize: 00039000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9860000 b9873900 parport (postponed)
Image path: parport.sys
Image name: parport.sys
Timestamp: Sun Apr 13 14:40:09 2008 (48025389)
CheckSum: 00018D4E
ImageSize: 00013900
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9874000 b98a7000 ctoss2k (postponed)
Image path: ctoss2k.sys
Image name: ctoss2k.sys
Timestamp: Fri Aug 11 02:45:23 2006 (44DC2783)
CheckSum: 000299B 7
ImageSize: 00033000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b98a7000 b98caa80 portcls (postponed)
Image path: portcls.sys
Image name: portcls.sys
Timestamp: Sun Apr 13 15:19:40 2008 (48025CCC)
CheckSum: 00030B 59
ImageSize: 00023A 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b98cb000 b9944f80 ctaud2k (postponed)
Image path: ctaud2k.sys don't
Image name: ctaud2k.sys don't
Timestamp: Fri Aug 11 02:45:37 2006 (44DC2791)
CheckSum: 00084619
ImageSize: 00079F80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9945000 b9967700 ks (deferred)
Image path: ks.sys
Image name: ks.sys
Timestamp: Sun Apr 13 15:16:34 (48025 12) 2008
CheckSum: 000326F0
ImageSize: 00022700
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9968000 b99dea00 atinewp2 (postponed)
Image path: atinewp2.sys
Image name: atinewp2.sys
Timestamp: Kills Jul 27 21:43:40 2004 (410704CC)
CheckSum: 00083DD5
ImageSize: 00076A 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b99df000 b9a02200 USBPORT (postponed)
Image path: USBPORT. SYS
Image name: USBPORT. SYS
Timestamp: Sun Apr 13 14:45:34 2008 (480254CE)
CheckSum: 0002AAEC
ImageSize: 00023200
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9a03000 b9a20a80 b57xp32 (postponed)
Image path: b57xp32.sys
Image name: b57xp32.sys
Timestamp: Mon August 23 at 17:49:29 2004 (412A 6669)
CheckSum: 00028D3C
ImageSize: 0001DA80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9a21000 b9a34f00 VIDEOPRT (postponed)
Image path: VIDEOPRT. SYS
Image name: VIDEOPRT. SYS
Timestamp: Sun Apr 13 14:44:39 2008 (48025497)
CheckSum: 000142CF
ImageSize: 00013F00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9a35000 b9bb2000 ati2mtag (postponed)
Image path: ati2mtag.sys
Image name: ati2mtag.sys
Timestamp: Thu Feb 09 21:57:44 2006 (43EC0128)
CheckSum: 00179501
ImageSize: 0017D 000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9cd6000 b9cda580 ptilink (postponed)
Image path: ptilink.sys
Image name: ptilink.sys
Timestamp: Fri Aug 17 16:49:53 2001 (3B7D8371)
Sum: 0000648C
ImageSize: 00004580
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
b9cde000 b9ce2a80 TDI (postponed)
Image path: TDI. SYS
Image name: TDI. SYS
Timestamp: Sun Apr 13 15:00:04 2008 (48025834)
CheckSum: 0000649E
ImageSize: 00004A 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba0a0000 ba0a9f00 termdd (postponed)
Image path: termdd.sys
Image name: termdd.sys
Timestamp: Sun Apr 13 14:38:36 2008 (4802532 C)
CheckSum: 0000DEB5
ImageSize: 00009F00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba0b0000 ba0b8900 msgpc (postponed)
Image path: msgpc.sys
Image name: msgpc.sys
Timestamp: Sun Apr 13 14:56:32 2008 (48025760)
CheckSum: 0000DE60
ImageSize: 00008900
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba0c0000 ba0cbd00 raspptp (postponed)
Image path: raspptp.sys
Image name: raspptp.sys
Timestamp: Sun Apr 13 15:19:47 2008 (48025 CD 3)
CheckSum: 000188A 6
ImageSize: 0000BD00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba0d0000 ba0da200 raspppoe (postponed)
Image path: raspppoe.sys
Image name: raspppoe.sys
Timestamp: Sun Apr 13 14:57:31 2008 (4802579B)
Sum: 0000D 695
ImageSize: 0000A 200
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba0e0000 ba0ec880 rasl2tp (postponed)
Image path: rasl2tp.sys
Image name: rasl2tp.sys
Timestamp: Sun Apr 13 15:19:43 2008 (48025CCF)
CheckSum: 0000FAE5
ImageSize: 0000C 880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba0f0000 ba0fa480 imapi (postponed)
Image path: imapi.sys
Image name: imapi.sys
Timestamp: Sun Apr 13 14:40:57 2008 (B 480253, 9)
CheckSum: 00014A 61
ImageSize: 0000A 480
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba100000 ba10e100 redbook (postponed)
Image path: redbook.sys
Image name: redbook.sys
Timestamp: Sun Apr 13 14:40:27 2008 (4802539B)
CheckSum: 0001462F
ImageSize: 0000E100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba63d000 ba64c600 cdrom (postponed)
Image path: cdrom.sys
Image name: cdrom.sys
Timestamp: Sun Apr 13 14:40:45 2008 (480253AD)
CheckSum: 00018524
ImageSize: 0000F600
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba64d000 ba65cc00 series (postponed)
Image path: serial.sys
Image name: serial.sys
Timestamp: Sun Apr 13 15:15:44 2008 (48025BE0)
CheckSum: 00014865
ImageSize: 0000 00 FC
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba65d000 ba669d00 i8042prt (postponed)
Image path: i8042prt.sys
Image name: i8042prt.sys
Timestamp: Sun Apr 13 15:17:59 2008 (48025 C 67)
Checksum: 0001918C
ImageSize: 0000CD 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba66d000 ba67bb00 drmk (postponed)
Image path: drmk.sys
Image name: drmk.sys
Timestamp: Sun Apr 13 14:45:12 2008 (480254B 8)
CheckSum: 0001 B 540
ImageSize: 0000EB00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba67d000 ba689100 STREAM (postponed)
Image path: streams. SYS
Image name: streams. SYS
Timestamp: Sun Apr 13 14:45:14 2008 (480254BA)
CheckSum: 0001B4AB
ImageSize: 0000C 100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
ba68d000 ba695e00 intelppm (postponed)
Image path: intelppm.sys
Image name: intelppm.sys
Timestamp: Sun Apr 13 14:31:31 2008 (48025183)
Sum: 0000C 894
ImageSize: 00008E00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
badd2000 badd5c80 mssmbios (postponed)
Image path: mssmbios.sys
Image name: mssmbios.sys
Timestamp: Sun Apr 13 14:36:45 2008 (480252BD)
CheckSum: 0000FC8F
ImageSize: 00003C 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
badfb000 badfd780 ndistapi (postponed)
Image path: ndistapi.sys
Image name: ndistapi.sys
Timestamp: Sun Apr 13 14:57:27 2008 (48025797)
CheckSum: 0000A1B3
ImageSize: 00002780
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bae17000 bae1ad80 serenum (postponed)
Image path: serenum.sys
Image name: serenum.sys
Timestamp: Sun Apr 13 14:40:12 2008 (4802538 C)
CheckSum: 0001290A
ImageSize: 00003D 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bae43000 bae5cb80 Mup (postponed)
Image path: Mup.sys
Image name: Mup.sys
Timestamp: Sun Apr 13 15:17:05 (48025 31) 2008
CheckSum: 0001AB3E
ImageSize: 00019B 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bae5d000 bae89980 NDIS (postponed)
Image path: NDIS.sys
Image name: NDIS.sys
Timestamp: Sun Apr 13 15:20:35 (48025 03) 2008
CheckSum: 0002E181
ImageSize: 0002C 980
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bae8a000 baf16600 Ntfs (postponed)
Image path: Ntfs.sys
Image name: Ntfs.sys
Timestamp: Sun Apr 13 15:15:49 2008 (48025BE5)
CheckSum: 0009586B
ImageSize: 0008C 600
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
baf17000 baf2d880 KSecDD (postponed)
Image path: KSecDD.sys
Image name: KSecDD.sys
Timestamp: Sun Apr 13 14:31:40 2008 (4802518 C)
CheckSum: 00025D4C
ImageSize: 00016880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
baf3e000 baf47e80 NDProxy (postponed)
Image path: NDProxy.SYS
Image name: NDProxy.SYS
Timestamp: Sun Apr 13 14:57:28 2008 (48025798)
CheckSum: 00011DE5
ImageSize: 00009E80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bafce000 bafdff00 sr (postponed)
Image path: sr.sys
Image name: sr.sys
Timestamp: Sun Apr 13 14:36:50 2008 (480252 2)
CheckSum: 00012604
ImageSize: 00011F00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bafe0000 bafffb00 fltmgr (postponed)
Image path: fltmgr.sys
Image name: fltmgr.sys
Timestamp: Sun Apr 13 14:32:58 2008 (480251DA)
CheckSum: 000251BB
ImageSize: 0001FB00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
BF800000 bf9c2f80 win32k (postponed)
Image path: win32k.sys
Image name: win32k.sys
Timestamp: Fri Apr 17 08:26:26 2009 (49E87572)
CheckSum: 001C50F1
ImageSize: 001C2F80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bf9c3000 bf9d4600 dxg (postponed)
Image path: dxg.sys
Image name: dxg.sys
Timestamp: Sun Apr 13 14:38:27 2008 (48025323)
Sum: 0001313C
ImageSize: 00011600
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
BF9D5000 bfa17000 ati2dvag (postponed)
Image path: ati2dvag.dll
Image name: ati2dvag.dll
Timestamp: Thu Feb 09 21:58:02 2006 (43EC013A)
CheckSum: 000493AB
ImageSize: 00042000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bfa17000 bfa56000 ati2cqag (postponed)
Image path: ati2cqag.dll
Image name: ati2cqag.dll
Timestamp: Thu Feb 09 21:22:39 2006 (43EBF8EF)
CheckSum: 00044F2F
ImageSize: 0003F000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bfa56000 bfa8c000 atikvmag (postponed)
Image path: c:\windows\system32\atikvmag.dll
Image name: c:\windows\system32\atikvmag.dll
Timestamp: Thu Feb 09 21:27:47 2006 (43EBFA23)
Checksum: 000317C 3
ImageSize: 00036000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bfa8c000 bfd0f940 ati3duag (postponed)
Image path: ati3duag.dll
Image name: ati3duag.dll
Timestamp: Thu Feb 09 21:44:39 2006 (43EBFE17)
CheckSum: 0028EAA1
ImageSize: 00283940
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bfd10000 bfde20c0 ativvaxx (postponed)
Image path: ativvaxx.dll
Image name: ativvaxx.dll
Timestamp: Thu Feb 09 21:39:23 2006 (43EBFCDB)
CheckSum: 000D58AB
ImageSize: 000D20C0
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bff50000 bff52f00 TSDDD (postponed)
Image path: TSDDD.dll
Image name: TSDDD.dll
Timestamp: Sun Apr 13 20:11:25 2008 (4802A12D)
CheckSum: 0000E39C
ImageSize: 00002F00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
bffa0000 bffe5c00 ATMFD (postponed)
Image path: ATMFD. DLL
Image name: ATMFD. DLL
Timestamp: Sun Apr 13 20:09:55 2008 (4802A0D3)
CheckSum: 0004BE90
ImageSize: 00045C 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f747f000 f748fa80 pci (postponed)
Image path: pci.sys
Image name: pci.sys
Timestamp: Sun Apr 13 14:36:43 2008 (480252BB)
CheckSum: 00015F46
ImageSize: 00010A 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7490000 f74bdd80 ACPI (postponed)
Image path: ACPI.sys
Image name: ACPI.sys
Timestamp: Sun Apr 13 14:36:33 2008 (480252B 1)
CheckSum: 00038955
ImageSize: 0002DD80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f74be000 f74d5880 SCSIPORT (postponed)
Image path: SCSIPORT. SYS
Image name: SCSIPORT. SYS
Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)
CheckSum: 00021101
ImageSize: 00017880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f74d6000 f75d6000 DTAS (postponed)
Image path: c:\windows\system32\drivers\sptd.sys
Image name: c:\windows\system32\drivers\sptd.sys
Timestamp: Wed Mar 05 19:32:57 2008 (47CF3BB9)
CheckSum: 000 B 4211
ImageSize: 00100000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f75f7000 f7606100 ohci1394 (postponed)
Image path: ohci1394.sys
Image name: ohci1394.sys
Timestamp: Sun Apr 13 14:46:18 2008 (480254FA)
CheckSum: 000151B 2
ImageSize: 0000F100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7607000 f7614080 1394BUS (postponed)
Image path: 1394BUS. SYS
Image name: 1394BUS. SYS
Timestamp: Sun Apr 13 14:46:18 2008 (480254FA)
CheckSum: 0000F247
ImageSize: 0000D 080
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7617000 f7620180 isapnp (postponed)
Image path: isapnp.sys
Image name: isapnp.sys
Timestamp: Sun Apr 13 14:36:40 2008 (480252B 8)
Sum: 0000D 074
ImageSize: 00009180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7627000 f7631580 MountMgr (postponed)
Image path: MountMgr.sys
Image name: MountMgr.sys
Timestamp: Sun Apr 13 14:39:45 2008 (48025371)
CheckSum: 0000E3AA
ImageSize: 0000A 580
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7637000 f7643c80 VolSnap (postponed)
Image path: VolSnap.sys
Image name: VolSnap.sys
Timestamp: Sun Apr 13 14:41 2008 (480253BC)
CheckSum: 00019063
ImageSize: 0000CC80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7647000 f764fe00 drive (postponed)
Image path: disk.sys
Image name: disk.sys
Timestamp: Sun Apr 13 14:40:46 2008 (480253AE)
Checksum: 00014C 02
ImageSize: 00008E00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7657000 f7663180 CLASSPNP (postponed)
Image path: CLASSPNP. SYS
Image name: CLASSPNP. SYS
Timestamp: Sun Apr 13 15:16:21 2008 (48025-05)
CheckSum: 0000CA8C
ImageSize: 0000C 180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7667000 f766fde0 PxHelp20 (postponed)
Image path: PxHelp20.sys
Image name: PxHelp20.sys
Timestamp: Wed Jun 20 18:26 2007 (4679A 978)
CheckSum: 00015660
ImageSize: 00008DE0
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7687000 f7696180 nic1394 (postponed)
Image path: nic1394.sys
Image name: nic1394.sys
Timestamp: Sun Apr 13 14:51:22 2008 (4802562A)
CheckSum: 0000F8AC
ImageSize: 0000F180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f76b7000 f76c5880 usbhub (postponed)
Image path: usbhub.sys
Image name: usbhub.sys
Timestamp: Sun Apr 13 14:45:36 2008 (480254 D 0)
CheckSum: 0000FBBC
ImageSize: 0000E880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7707000 f770d180 PCIIDEX (postponed)
Image path: PCIIDEX. SYS
Image name: PCIIDEX. SYS
Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)
CheckSum: 00009319
ImageSize: 00006180
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f770f000 f7713d00 PartMgr (postponed)
Image path: PartMgr.sys
Image name: PartMgr.sys
Timestamp: Sun Apr 13 14:40:48 2008 (B 480253, 0)
CheckSum: 0000C1F3
ImageSize: 00004D 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f77b7000 f77bc080 usbuhci (postponed)
Image path: usbuhci.sys
Image name: usbuhci.sys
Timestamp: Sun Apr 13 14:45:34 2008 (480254CE)
CheckSum: 0000DB34
ImageSize: 00005080
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f77bf000 f77c6600 usbehci (postponed)
Image path: usbehci.sys
Image name: usbehci.sys
Timestamp: Sun Apr 13 14:45:34 2008 (480254CE)
Checksum: 000099D 5
ImageSize: 00007600
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f77c7000 f77cf000 ctprxy2k (postponed)
Image path: ctprxy2k.sys
Image name: ctprxy2k.sys
Timestamp: Fri Aug 11 02:45:39 2006 (44DC2793)
CheckSum: 00005746
ImageSize: 00008000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f77cf000 f77d5000 kbdclass (postponed)
Image path: kbdclass.sys
Image name: kbdclass.sys
Timestamp: Sun Apr 13 14:39:46 2008 (48025372)
CheckSum: 00011FF4
ImageSize: 00006000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f77d7000 f77dca00 mouclass (postponed)
Image path: mouclass.sys
Image name: mouclass.sys
Timestamp: Sun Apr 13 14:39:47 2008 (48025373)
CheckSum: 00014EAB
ImageSize: 00005A 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f77ff000 f7803080 raspti (postponed)
Image path: raspti.sys
Image name: raspti.sys
Timestamp: Fri Aug 17 16:55:32 2001 (3B7D84C4)
CheckSum: 000114B 1
ImageSize: 00004080
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7832000 f7857700 dmio (postponed)
Image path: dmio.sys
Image name: dmio.sys
Timestamp: Sun Apr 13 14:44:45 2008 (4802549 D)
CheckSum: 00034FCE
ImageSize: 00025700
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7858000 f7876880 ftdisk (postponed)
Image path: ftdisk.sys
Image name: ftdisk.sys
Timestamp: Fri August 17 16:52:41 2001 (3B7D8419)
CheckSum: 00021032
ImageSize: 0001E880
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7877000 f7885d80 sysaudio (postponed)
Image path: sysaudio.sys
Image name: sysaudio.sys
Timestamp: Sun Apr 13 15:15:55 2008 (48025BEB)
CheckSum: 0001C7CE
ImageSize: 0000ED80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7897000 f789a000 BOOTVID (postponed)
Image path: BOOTVID.dll
Image name: BOOTVID.dll
Timestamp: Fri Aug 17 16:49:09 2001 (3B7D8345)
CheckSum: 0000A36C
ImageSize: 00003000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f796f000 f7986900 atapi (postponed)
Image path: atapi.sys
Image name: atapi.sys
Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)
Sum: 0001CD 25
ImageSize: 00017900
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7987000 f7988b80 kdcom (postponed)
Image path: kdcom.dll
Image name: kdcom.dll
Timestamp: Fri Aug 17 16:49:10 2001 (3B7D8346)
CheckSum: 00008311
ImageSize: 00001 B 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7989000 f798a100 WMILIB (postponed)
Image path: WMILIB. SYS
Image name: WMILIB. SYS
Timestamp: Fri 17 August 17:07:23 2001 (3B7D878B)
Sum: 0000D 600
ImageSize: 00001100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f798b000 f798c580 intelide (postponed)
Image path: intelide.sys
Image name: intelide.sys
Timestamp: Sun Apr 13 14:40:29 2008 (4802539 D)
CheckSum: 0000E81D
ImageSize: 00001580
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f798d000 f798e700 dmload (postponed)
Image path: system32\drivers\dmload.sys
Image name: system32\drivers\dmload.sys
Timestamp: Fri Aug 17 16:58:15 2001 (3B7D8567)
CheckSum: 0000DC8A
ImageSize: 00001700
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79b7000 f79b8a80 ParVdm (postponed)
Image path: ParVdm.SYS
Image name: ParVdm.SYS
Timestamp: Fri Aug 17 16:49:49 2001 (3B7D836D)
CheckSum: 0000A 855
ImageSize: 00001 has 80
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79c1000 f79c2f00 Fs_Rec (postponed)
Image path: Fs_Rec.SYS
Image name: Fs_Rec.SYS
Timestamp: Fri Aug 17 16:49:37 2001 (3B7D8361)
CheckSum: 000079A 7
ImageSize: 00001F00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79c3000 f79c4080 beep (postponed)
Image path: c:\windows\system32\drivers\beep.sys
Image name: c:\windows\system32\drivers\beep.sys
Timestamp: Fri Aug 17 16:47:33 2001 (3B7D82E5)
CheckSum: 0000C82C
ImageSize: 00001080
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79c5000 f79c6080 mnmdd (postponed)
Image path: mnmdd. SYS
Image name: mnmdd. SYS
Timestamp: Fri Aug 17 16:57:28 2001 (3B7D8538)
CheckSum: 0000F3F7
ImageSize: 00001080
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79c7000 f79c8080 RDPCDD (postponed)
Image path: system32\drivers\rdpcdd.sys
Image name: system32\drivers\rdpcdd.sys
Timestamp: Fri Aug 17 16:46:56 2001 (3B7D82C0)
CheckSum: 0000E2B7
ImageSize: 00001080
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79d3000 f79d4100 swenum (postponed)
Image path: swenum.sys
Image name: swenum.sys
Timestamp: Sun Apr 13 14:39:52 2008 (48025378)
CheckSum: 0000383A
ImageSize: 00001100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79d9000 f79da380 MSPQM (postponed)
Image path: MSPQM.sys
Image name: MSPQM.sys
Timestamp: Sun Apr 13 14:39:51 2008 (48025377)
Checksum: 00006D 54
ImageSize: 00001380
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f79df000 f79e0280 USBD (postponed)
Image path: USBD. SYS
Image name: USBD. SYS
Timestamp: Fri Aug 17 17:02:58 2001 (3B7D8682)
CheckSum: 000040AF
ImageSize: 00001280
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7a4f000 f7a4fd00 pciide (postponed)
Image path: system32\drivers\pciide.sys
Image name: system32\drivers\pciide.sys
Timestamp: Fri Aug 17 16:51:49 2001 (3B7D83E5)
CheckSum: 0000213E
ImageSize: 00000D 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7a73000 f7a73c00 audstub (postponed)
Image path: audstub.sys
Image name: audstub.sys
Timestamp: Fri Aug 17 16:59:40 2001 (3B7D85BC)
CheckSum: 000105B 1
ImageSize: 00000C 00
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
f7b6c000 f7bde100 iaStor (postponed)
Image path: iaStor.sys
Image name: iaStor.sys
Timestamp: Tue Mar 23 15:13:55 2004 (40608 C 73)
CheckSum: 00072C3C
ImageSize: 00072100
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Unloaded modules:
9525b 000 95286000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
955e4000 9560f000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
975e4000 9760f000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
975e4000 9760f000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
975e4000 9760f000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
975e0000 b 9760, 000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
979c 6000 979f1000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ca 985 000 985f5000 c:\windows\system32\drivers\kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b03da000 b03db000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b0ffe000 b100b000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba6bd000 ba6cb000 c:\windows\system32\drivers\swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ad4ab000 ad4ad000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9869b 000 986be000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ca 9, 79000 kbdhid.sys 9ca7d000
Timestamp: unavailable (00000000)
Checksum: 00000000
ad6ac000 ad6b1000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9ca7d000 ca 9, 80000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ad6b4000 ad6b9000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ae12a000 ae131000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Hello
Bluescreens can certainly be triggered by malware.
Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone. (If Rootkits run UnHackMe)
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Malwarebytes - free
http://www.Malwarebytes.org/Run the malware removal tool from Microsoft
Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.
You should get this tool and its updates via Windows updates - if necessary, you can download it here.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
(Then run MRT as shown above.)Malicious removal tool from Microsoft
http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=enalso install Prevx to be sure that it is all gone.
Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
http://www.prevx.com/Choice of PCmag editor - Prevx-
http://www.PCMag.com/Article2/0, 2817,2346862,00.asp--------------------------------------------------------
If necessary here are some free online scanners to help the
http://www.eset.com/onlinescan/
http://www.Kaspersky.com/virusscanner
Other tests free online
http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1--------------------------------------------------------
Also do to the General corruption of cleaning.
Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup
Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN
Enter this at the command prompt - sfc/scannow
How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.
How to run the check disk at startup in Vista
http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html-----------------------------------------------------------------------
If we find Rootkits use this thread and other suggestions. (Run UnHackMe)
I hope this helps.
Rob - bicycle - Mark Twain said it is good.
Maybe you are looking for
-
Reinstall Win XP without reformatting the hard disk
Hello Is it possible to reinstall Win XP on my Equium A60 without having to reformat the HD? The HD currently has only one partition. Thanks in advance,Mike
-
How to write a double waveform in an Excel file without blank lines of cells
Hello I am writing two waveforms in an Excel file, I'm almost there, but the stumper is that after each data line, a blank line appears in the XL file. Probably something simple I forgot because I am fairly new to this. Thanks in advance, Joel
-
Microsoft Visual C++ Runtime Library error, please help!
The assertion failed!Program:...File:... \rgl\rglString.cppOnline: 198 Expression: 1 For more information on how your program can cause the assertion failure, see the Visual C++ documents on says. (Press Retry to debug the application - JIT must be e
-
I installed Windows 8 on an HP dv6-6096 nr, I bought in May 2011. I did an upgrade to Windows 7 Home Premium. Every time I hightlight Control Panel, the machine returns to the desktop. How can I fix it? I thave updated my video drivers. I say what ot
-
Question on visibility network file share
Hello I recently took a project to rework our file sharing server. I created the permissions by group and assigned to users, and everything is functional. However, there are some users I want to limit access to only a few specific folders in the root