1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Yahoo Messenger Troubleshooter

Discussion in 'Hardware' started by daivddd, Apr 28, 2012.

  1. daivddd

    daivddd Private E-2

    Whenever my computer goes to sleep, some programs that depend on internet connection are disconnected and cannot be reconnected unless I completely exit and restart the program a few times. Or if I run the Troubleshooter at Window's Network and Sharing Center.

    My problem is not only with Yahoo Messenger, but its troubleshooter listed notes that might help you detect what the problem is. Here's what it says:

    *****
    Checking virtual IP servers...
    [VIP Raw] TIMEOUT

    Checking HTTP virtual IP servers...
    [VIP Http] Resolving host name 98.139.61.47... [PASSED]
    [VIP Http] Connecting to HTTP Virtual IP server 98.139.61.47... [PASSED]
    [VIP Http] Sending HTTP request to the server... [PASSED]
    [VIP Http] Receiving response... [FAILED]
    *** 'COMPONENT_TYPE_WININET' value: '12017' ***
    [VIP Http] FAILED
    *** 'COMPONENT_TYPE_YCP' YCPError: 'YMSG.ColoSelectionTimeout' ***
    *****

    If possible, please tell me what I need to fix. If that is not enough for you, please tell me what information you need for me to provide.

    Thank you,
    David
     
  2. handygal

    handygal Sergeant Major

    Hello. I suspect your problem is easily worked around, but I have a few questions.

    What OS are you using?
    Your computer goes to standby or hibernate?
    Are you connected to a router or directly to your modem (assuming you are using a home connection of dsl or cable)? Wired or wireless?
    It sounds like a few programs will work and a few won't. Can you browse the internet right away? What works when you come back and what doesn't?
    Do you have other computers on the network that have the same issue or can do this without having an issue?
    Do you get any message about your network connection from Windows?
    Lastly, do you have multiple devices on your network? Any that connect and disconnect with some frequency? (readers, ipads, gaming consoles, network enabled TV or blu-ray)
     
  3. daivddd

    daivddd Private E-2

    Thank you for addressing this problem! I hope my answers below are sufficient.


     
  4. handygal

    handygal Sergeant Major

    This is one of those problems I use a bit of a shotgun approach for because i rarely find it on the first try.

    I'm not at a windows 7 machine right now but if I lose you anywhere with this, just let me know and i'll walk you through with more detail.

    (note: updates can rarely have unwanted effects. Check that there is a system restore point before starting any major changes or updates)

    1. Check the power settings for the network card. Find the network card on your device list in the Device Manager. Go to properties and turn off any windows management of the power.

    2. Update the drivers. Check that the drivers for devices are up to date. Update windows as well, if you haven't been updating.

    I would test the result at this point.

    When I have a machine that is having network issues i often will give it a static ip to eliminate a possible cause. If you still have the issue, I can walk you through using a static ip.
     
  5. daivddd

    daivddd Private E-2

    A shotgun approach is fine--I'm familiar with that :)

    I followed your suggestions, and FYI here's what I found:

    I un-checked "Reduce power if cable disconnected" and "Wake on Magic Packet from power off state."

    I ran Windows update--nothing to update.

    Intel Drive Update Utility showed me (and I installed) the new driver Intel 82567-2 based Network Controller.

    Hopefully these things will help. I'll contact you right away if I run into the same problem; otherwise, I'll run the comp for several days and then report back to you with an A OK.
     
  6. daivddd

    daivddd Private E-2

    Unfortunately I have to write you back already. I have encountered problems even the same day after making the previous adjustments. Here's what happens:

    Upon both startup and resume from sleep I quickly reconnect to the internet and can browse. Yahoo Messenger takes quite some time going through several automatic reconnect attempts before hooking up. If Ares is running at sleep, the comp shuts down with a BSOD. I have removed and reinstalled both Messenger and Ares a few times each.
     
  7. handygal

    handygal Sergeant Major

    I have windows 7 systems that standby and don't do this.

    What is the model of the computer?
     
  8. daivddd

    daivddd Private E-2

    I know! It's frustrating. Here's my system--

    Hewlett-Packard HPE-590t Elite Pavilion
    3.47 GHz
    24 GB ram
    64-bit Windows 7
     
  9. handygal

    handygal Sergeant Major

    :-D I finally looked up Ares. I haven't used one of those since Morpheus, I'm out of the loop.

    Nice system, btw.

    HP has some nice troubleshooting pages for sleep mode. One of them is disable what starts up automatically and see if that resolves the problem. Since any software like Ares is going to be a tech's first target (I hate that) we might as well uninstall it and see if it makes any difference.

    If you would follow the instructions for disabling programs from starting in this guide from HP http://h10025.www1.hp.com/ewfrf/wc/document?docname=c01853693&cc=us&dlc=en&lc=en&product=5061009, I know it is not the same issue but the causes can be the same.

    I used to be HP all the way, then they bought Compaq, burned me and I left them. Support used to be good, the articles are still decent. I'll see what else I can find in there.
     
  10. daivddd

    daivddd Private E-2

    I've been shotgunning--forcing sleep with various programs running. The results are inconsistent so I don't know how to report on that yet :O

    However, perhaps notes given upon a recent BSOD can help you know what to look for? It happened out of the blue while I was using the comp, not upon sleep. Here's what was given to me--

    *****


    Problem signature:
    Problem Event Name: BlueScreen
    OS Version: 6.1.7601.2.1.0.256.1
    Locale ID: 1033

    Additional information about the problem:
    BCCode: d1
    BCP1: 0000000000000028
    BCP2: 0000000000000002
    BCP3: 0000000000000001
    BCP4: FFFFF8800182BD1E
    OS Version: 6_1_7601
    Service Pack: 1_0
    Product: 256_1

    Files that help describe the problem:
    C:\Windows\Minidump\050312-21699-01.dmp
    C:\Users\David\AppData\Local\Temp\WER-67267-0.sysdata.xml
     
  11. daivddd

    daivddd Private E-2

    Just thought I'd update you. I followed the link to disabling programs you gave me. There were no suggestions that needed changing or that I hadn't already done.

    I also completely disconnected my hard wire network connection in case that caused a conflict...however, shortly after that I got a BSOD even while on the comp so apparently that didn't help.

    There was a new bios available which I installed. I'll see over the next few days if that helped.
     
  12. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    Sadly some drivers tend to hiccup when they go into hibernation or sleep, they don't wake up and its like kicking a zombie!

    But possible is to force the network or wifi driver to stay awake, in device manager open the network and/or wifi drivers up and click Power Management tab and then untick the "allow the computer to turn off this device to save power" and reboot and see how you get on/
     
  13. handygal

    handygal Sergeant Major

    Just checking back on how it is going. The BSOD files might show where the fault is -- a conflict or a memory error or something else.

    Very frustrating to have that BSOD, I know. Please be sure to have your files backed up.

    Memory problems. I just read a thread about a system having a memory stick that was failing. Now I'm very curious what your BSOD files say, could there be a hardware issue?
     
  14. daivddd

    daivddd Private E-2

    I'm sure sorry I didn't back to you sooner--I didn't know you wrote until I received the latter one. I just now unchecked "Allow..." so I guess I should give it some time to see if that helps.

    I've narrowed down that it is probably not Ares--I got a BSOD just earlier today while on the computer and Ares was not running. I guess that must mean also it's probably not a sleep issue.

    It certainly could be a hardware issue, but I have not changed or added anything for a long time and I never used to have this issue. If so it might be internal because all I have hooked up now is a printer. I've set MSCONFIG not to start hardly anything. Oh that reminds me--I did get a new Logitech keyboard a while ago, so if unchecking "Allow..." does nothing I could disable Logitech. I'll wait a while tho so I know what it is that makes a change.

    I can also send you the minidump files, I think they're called. But I'll wait for you to tell me to do that. You'd need to remind me where to find them. I'll also run a few virus scans today just in case.

    I want to thank you again for putting so much attention to my problem. I really do appreciate it!
     
  15. satrow

    satrow Major Geek Extraordinaire

    Minidumps will be good, copy them (the latest 3 or 4) to your Desktop, zip them and attach the zip file here.
    ^ you'll find them in there ^
     
  16. handygal

    handygal Sergeant Major


    And that reminds me that I've been a part of plenty of threads where several of us are working (mostly :)) together to help and I've seen a Logitech keyboard issue come up before. It certainly is easier to test than checking memory. I've only ever personally seen a conflict with a wireless Logitech keyboard and I never could resolve it. I don't support wireless keyboards at the office and this is one of the reasons why. I don't dislike wireless or Logitech but it could be worth testing with a generic keyboard if you have one handy.
     
  17. daivddd

    daivddd Private E-2

    OK, let's see if I can do this right...
    You should be getting a zip with 4 minidumps.
     

    Attached Files:

  18. daivddd

    daivddd Private E-2

    BTW where is "Beachy and warm?"
    I'm in San Diego.
     
  19. satrow

    satrow Major Geek Extraordinaire

    Several old and suspect drivers that need to be uninstalled or removed as one of them might well be the cause of the corruption seen in the dumps:
    bdfsfltr.sys 4/3/2009 19:01:57 < BitDefender remnant, uninstall it or find and rename it to bdfsfltr.BAD in Safe Mode.
    e1y62x64.sys Intel 82567V-2 Gigabit Network Connection Ethernet driver < Update it. http://www.intel.com/support/ethernetcomponents/controllers/82567/sb/cs-029669.htm

    rikvm_C6F09094.sys < Google might help, it could be from several sources.

    The below are all virtual CD/DVD drives, uninstall them and, if you really need a virtual drive, try MagicISO, it's thought to be least likely to cause problems.
    ElbyCDIO.sys
    VClone.sys
    dtsoftbus01.sys Daemon Tools driver http://www.daemon-tools.cc/eng/downloads

    The below is the driver that's being seen as corrupted in each dump, update it; if it's connected via USB and in regular use, be prepared to find a different make/model as replacement. USB wireless dongles are problematic in Windows 7x64:
    netr28x.sys Ralink RT2860 series Wireless LAN Card (you may have a different manufacturer) http://www.ralinktech.com/en/04_support/support.php?sn=500


    The dump: 0x9x's (stopped IRP's), don't like spilling their secrets to the debugging tools, sometimes log-scanning and wading through history and WER reports will help clarify the fault, sometimes not:
    Code:
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (12 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
    Machine Name:
    Kernel base = 0xfffff800`0405a000 PsLoadedModuleList = 0xfffff800`0429e650
    Debug session time: Fri May  4 19:51:27.762 2012 (UTC + 1:00)
    System Uptime: 0 days 17:01:44.652
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ......................................................
    Loading User Symbols
    Loading unloaded module list
    .....................
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 9F, {3, fffffa80138e0060, fffff80000b9c518, fffffa801a5df010}
    
    *** WARNING: Unable to verify timestamp for netr28x.sys
    *** ERROR: Module load completed but symbols could not be loaded for netr28x.sys
    Probably caused by : netr28x.sys
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;!sysinfo cpuinfo;!sysinfo machineid; ! sysinfo cpuspeed; !sysinfo smbios
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_POWER_STATE_FAILURE (9f)
    A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
    Arguments:
    Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
    Arg2: fffffa80138e0060, Physical Device Object of the stack
    Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
    Arg4: fffffa801a5df010, The blocked IRP
    
    Debugging Details:
    ------------------
    
    
    OVERLAPPED_MODULE: Address regions for 'hiber_iaStor' and 'hiber_iaStor' overlap
    
    DRVPOWERSTATE_SUBCODE:  3
    
    DEVICE_OBJECT: fffffa8017706050
    
    DRIVER_OBJECT: fffffa80177a3290
    
    IMAGE_NAME:  netr28x.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4c46dc6a
    
    MODULE_NAME: netr28x
    
    FAULTING_MODULE: fffff88007acb000 netr28x
    
    IRP_ADDRESS:  fffffa801a5df010
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    
    BUGCHECK_STR:  0x9F
    
    PROCESS_NAME:  System
    
    CURRENT_IRQL:  2
    
    STACK_TEXT:  
    fffff800`00b9c4c8 fffff800`04144092 : 00000000`0000009f 00000000`00000003 fffffa80`138e0060 fffff800`00b9c518 : nt!KeBugCheckEx
    fffff800`00b9c4d0 fffff800`040e195c : fffff800`00b9c600 fffff800`00b9c600 00000000`00000000 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x34040
    fffff800`00b9c570 fffff800`040e17f6 : fffff800`04280f00 00000000`003bf6a0 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x6c
    fffff800`00b9c5e0 fffff800`040e16de : 0000008e`bc6ba0a5 fffff800`00b9cc58 00000000`003bf6a0 fffff800`0424f688 : nt!KiProcessExpiredTimerList+0xc6
    fffff800`00b9cc30 fffff800`040e14c7 : 00000030`33cf40c1 00000030`003bf6a0 00000030`33cf401e 00000000`000000a0 : nt!KiTimerExpiration+0x1be
    fffff800`00b9ccd0 fffff800`040ce98a : fffff800`0424be80 fffff800`04259cc0 00000000`00000000 fffff880`00db24c0 : nt!KiRetireDpcList+0x277
    fffff800`00b9cd80 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd40 00000000`00000000 : nt!KiIdleLoop+0x5a
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_NAME:  MachineOwner
    
    FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_netr28x.sys
    
    BUCKET_ID:  X64_0x9F_3_IMAGE_netr28x.sys
    
    Followup: MachineOwner
    ---------
    
    rax=fffff800042762b8 rbx=fffffa801a5df010 rcx=000000000000009f
    rdx=0000000000000003 rsi=fffffa80195b0540 rdi=fffffa80195b0540
    rip=fffff800040d6c80 rsp=fffff80000b9c4c8 rbp=0000000000000001
     r8=fffffa80138e0060  r9=fffff80000b9c518 r10=0000000000000000
    r11=0000000000008000 r12=fffffa801a5df010 r13=0000000000000000
    r14=0000000000000001 r15=fffff80004280af0
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
    nt!KeBugCheckEx:
    fffff800`040d6c80 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff800`00b9c4d0=000000000000009f
    Child-SP          RetAddr           : Args to Child                                                           : Call Site
    fffff800`00b9c4c8 fffff800`04144092 : 00000000`0000009f 00000000`00000003 fffffa80`138e0060 fffff800`00b9c518 : nt!KeBugCheckEx
    fffff800`00b9c4d0 fffff800`040e195c : fffff800`00b9c600 fffff800`00b9c600 00000000`00000000 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x34040
    fffff800`00b9c570 fffff800`040e17f6 : fffff800`04280f00 00000000`003bf6a0 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x6c
    fffff800`00b9c5e0 fffff800`040e16de : 0000008e`bc6ba0a5 fffff800`00b9cc58 00000000`003bf6a0 fffff800`0424f688 : nt!KiProcessExpiredTimerList+0xc6
    fffff800`00b9cc30 fffff800`040e14c7 : 00000030`33cf40c1 00000030`003bf6a0 00000030`33cf401e 00000000`000000a0 : nt!KiTimerExpiration+0x1be
    fffff800`00b9ccd0 fffff800`040ce98a : fffff800`0424be80 fffff800`04259cc0 00000000`00000000 fffff880`00db24c0 : nt!KiRetireDpcList+0x277
    fffff800`00b9cd80 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd40 00000000`00000000 : nt!KiIdleLoop+0x5a
    start             end                 module name
    fffff800`00bbf000 fffff800`00bc9000   kdcom    kdcom.dll    Sat Feb 05 16:52:49 2011 (4D4D8061)
    fffff800`04011000 fffff800`0405a000   hal      hal.dll      Sat Nov 20 13:00:25 2010 (4CE7C669)
    fffff800`0405a000 fffff800`04642000   nt       ntkrnlmp.exe Tue Mar 06 03:58:13 2012 (4F558B55)
    fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Sat Nov 20 09:20:43 2010 (4CE792EB)
    fffff880`00c5c000 fffff880`00c7d000   jraid    jraid.sys    Thu Nov 25 03:27:17 2010 (4CEDD795)
    fffff880`00c8f000 fffff880`00cde000   mcupdate mcupdate.dll Sat Nov 20 13:03:51 2010 (4CE7C737)
    fffff880`00cde000 fffff880`00cf2000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
    fffff880`00cf2000 fffff880`00d50000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`00d50000 fffff880`00d83000   pci      pci.sys      Sat Nov 20 09:19:11 2010 (4CE7928F)
    fffff880`00d83000 fffff880`00d98000   partmgr  partmgr.sys  Sat Nov 20 09:20:00 2010 (4CE792C0)
    fffff880`00d98000 fffff880`00dad000   volmgr   volmgr.sys   Sat Nov 20 09:19:28 2010 (4CE792A0)
    fffff880`00dad000 fffff880`00ddc000   SCSIPORT SCSIPORT.SYS Sat Nov 20 10:34:01 2010 (4CE7A419)
    fffff880`00ddc000 fffff880`00df6000   mountmgr mountmgr.sys Sat Nov 20 09:19:21 2010 (4CE79299)
    fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Sat Nov 20 09:19:16 2010 (4CE79294)
    fffff880`00e5e000 fffff880`00f1e000   CI       CI.dll       Sat Nov 20 13:12:36 2010 (4CE7C944)
    fffff880`00f1e000 fffff880`00fc2000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
    fffff880`00fc2000 fffff880`00fd1000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
    fffff880`00fd1000 fffff880`00fda000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
    fffff880`00fda000 fffff880`00fe4000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
    fffff880`00fe4000 fffff880`00ff1000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
    fffff880`01000000 fffff880`01053000   nwifi    nwifi.sys    Tue Jul 14 01:07:23 2009 (4A5BCC3B)
    fffff880`01064000 fffff880`010a0000   vmbus    vmbus.sys    Sat Nov 20 09:57:29 2010 (4CE79B89)
    fffff880`010a0000 fffff880`010b4000   winhv    winhv.sys    Sat Nov 20 09:20:02 2010 (4CE792C2)
    fffff880`010b4000 fffff880`01100000   fltmgr   fltmgr.sys   Sat Nov 20 09:19:24 2010 (4CE7929C)
    fffff880`01100000 fffff880`0115e000   msrpc    msrpc.sys    Sat Nov 20 09:21:56 2010 (4CE79334)
    fffff880`0115e000 fffff880`011d0000   cng      cng.sys      Thu Nov 17 04:23:17 2011 (4EC48C35)
    fffff880`01200000 fffff880`01211000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
    fffff880`01211000 fffff880`01233000   tdx      tdx.sys      Sat Nov 20 09:21:54 2010 (4CE79332)
    fffff880`01233000 fffff880`015d5000   iaStor   iaStor.sys   Mon Oct 17 23:54:08 2011 (4E9CB210)
    fffff880`015d5000 fffff880`015e0000   amdxata  amdxata.sys  Fri Mar 19 16:18:18 2010 (4BA3A3CA)
    fffff880`015e0000 fffff880`015f4000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
    fffff880`01600000 fffff880`01611000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
    fffff880`01611000 fffff880`0161b000   Fs_Rec   Fs_Rec.sys   Thu Mar 01 03:41:06 2012 (4F4EEFD2)
    fffff880`0161b000 fffff880`01626000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
    fffff880`01626000 fffff880`01633000   TDI      TDI.SYS      Sat Nov 20 09:22:06 2010 (4CE7933E)
    fffff880`01635000 fffff880`017d8000   Ntfs     Ntfs.sys     Fri Mar 11 03:39:39 2011 (4D79997B)
    fffff880`017d8000 fffff880`017f3000   ksecdd   ksecdd.sys   Thu Nov 17 03:48:13 2011 (4EC483FD)
    fffff880`01800000 fffff880`01860000   NETIO    NETIO.SYS    Sat Nov 20 09:23:13 2010 (4CE79381)
    fffff880`01860000 fffff880`0188b000   ksecpkg  ksecpkg.sys  Thu Nov 17 04:23:44 2011 (4EC48C50)
    fffff880`0188b000 fffff880`018d1000   dtsoftbus01 dtsoftbus01.sys Fri Jun 17 08:38:37 2011 (4DFB047D)
    fffff880`018d6000 fffff880`019c9000   ndis     ndis.sys     Sat Nov 20 09:23:30 2010 (4CE79392)
    fffff880`019c9000 fffff880`019ee000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
    fffff880`019ee000 fffff880`019f7000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
    fffff880`01a00000 fffff880`01a3a000   fvevol   fvevol.sys   Sat Nov 20 09:24:06 2010 (4CE793B6)
    fffff880`01a3a000 fffff880`01a50000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`01a50000 fffff880`01a80000   CLASSPNP CLASSPNP.SYS Sat Nov 20 09:19:23 2010 (4CE7929B)
    fffff880`01a80000 fffff880`01a8c000   avgrkx64 avgrkx64.sys Tue Sep 13 05:02:34 2011 (4E6ED5DA)
    fffff880`01a8c000 fffff880`01a96000   AVGIDSEH AVGIDSEH.Sys Sun Jul 10 23:36:50 2011 (4E1A2982)
    fffff880`01aa4000 fffff880`01ab4000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
    fffff880`01ab4000 fffff880`01abd000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`01abd000 fffff880`01ac6000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`01ac7000 fffff880`01ccb000   tcpip    tcpip.sys    Thu Sep 29 04:43:04 2011 (4E83E948)
    fffff880`01ccb000 fffff880`01d15000   fwpkclnt fwpkclnt.sys Sat Nov 20 09:21:37 2010 (4CE79321)
    fffff880`01d15000 fffff880`01d25000   vmstorfl vmstorfl.sys Sat Nov 20 09:57:30 2010 (4CE79B8A)
    fffff880`01d25000 fffff880`01d71000   volsnap  volsnap.sys  Sat Nov 20 09:20:08 2010 (4CE792C8)
    fffff880`01d71000 fffff880`01d79000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
    fffff880`01d79000 fffff880`01db3000   rdyboost rdyboost.sys Sat Nov 20 09:43:10 2010 (4CE7982E)
    fffff880`01db3000 fffff880`01dc5000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
    fffff880`01dc5000 fffff880`01dce000   hwpolicy hwpolicy.sys Sat Nov 20 09:18:54 2010 (4CE7927E)
    fffff880`01dce000 fffff880`01df8000   cdrom    cdrom.sys    Sat Nov 20 09:19:20 2010 (4CE79298)
    fffff880`02e00000 fffff880`02e2d000   mrxsmb   mrxsmb.sys   Wed Apr 27 03:40:38 2011 (4DB78226)
    fffff880`02e2d000 fffff880`02e7b000   mrxsmb10 mrxsmb10.sys Sat Jul 09 03:46:28 2011 (4E17C104)
    fffff880`02e7b000 fffff880`02e9f000   mrxsmb20 mrxsmb20.sys Wed Apr 27 03:39:37 2011 (4DB781E9)
    fffff880`02e9f000 fffff880`02eb7000   adfs     adfs.SYS     Thu Jun 26 21:52:37 2008 (48640195)
    fffff880`02eb7000 fffff880`02ec2000   AVGIDSFilter AVGIDSFilter.Sys Sun Jul 10 23:37:05 2011 (4E1A2991)
    fffff880`02eed000 fffff880`02fb6000   HTTP     HTTP.sys     Sat Nov 20 09:24:30 2010 (4CE793CE)
    fffff880`02fb6000 fffff880`02fd4000   bowser   bowser.sys   Wed Feb 23 04:55:04 2011 (4D649328)
    fffff880`02fd4000 fffff880`02fec000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
    fffff880`04224000 fffff880`0428a000   SbFw     SbFw.sys     Tue Apr 05 19:12:59 2011 (4D9B5BAB)
    fffff880`0428a000 fffff880`042e5000   sbtis    sbtis.sys    Tue Apr 05 19:12:37 2011 (4D9B5B95)
    fffff880`042e5000 fffff880`04345000   avgtdia  avgtdia.sys  Sun Jul 10 23:46:53 2011 (4E1A2BDD)
    fffff880`04345000 fffff880`0438a000   netbt    netbt.sys    Sat Nov 20 09:23:18 2010 (4CE79386)
    fffff880`0438a000 fffff880`043c7000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
    fffff880`043c7000 fffff880`043e9000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
    fffff880`04c00000 fffff880`04c10000   SBREdrv  SBREdrv.sys  Fri Apr 29 16:51:13 2011 (4DBADE71)
    fffff880`04c10000 fffff880`04c1e000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
    fffff880`04c1e000 fffff880`04fc0000   dump_iaStor dump_iaStor.sys Mon Oct 17 23:54:08 2011 (4E9CB210)
    fffff880`04fd9000 fffff880`04fe9000   avgmfx64 avgmfx64.sys Mon Aug 08 04:41:46 2011 (4E3F5AFA)
    fffff880`04fe9000 fffff880`04ff2000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
    fffff880`04ff2000 fffff880`04ff9000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
    fffff880`05844000 fffff880`059fa000   rikvm_C6F09094 rikvm_C6F09094.sys Tue Jun 29 13:17:18 2010 (4C29E44E)
    fffff880`0745d000 fffff880`07503000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
    fffff880`07503000 fffff880`0750e000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
    fffff880`0750e000 fffff880`0753f000   srvnet   srvnet.sys   Fri Apr 29 04:05:35 2011 (4DBA2AFF)
    fffff880`0753f000 fffff880`07551000   tcpipreg tcpipreg.sys Sat Nov 20 10:51:48 2010 (4CE7A844)
    fffff880`07551000 fffff880`0757c000   AVGIDSDriver AVGIDSDriver.Sys Sun Jul 10 23:36:37 2011 (4E1A2975)
    fffff880`0757c000 fffff880`075e5000   srv2     srv2.sys     Fri Apr 29 04:05:46 2011 (4DBA2B0A)
    fffff880`07800000 fffff880`07823000   nvhda64v nvhda64v.sys Mon Jun 21 23:07:25 2010 (4C1FE29D)
    fffff880`07839000 fffff880`078c2000   afd      afd.sys      Wed Dec 28 03:59:20 2011 (4EFA9418)
    fffff880`078c2000 fffff880`078cd000   ws2ifsl  ws2ifsl.sys  Tue Jul 14 01:10:33 2009 (4A5BCCF9)
    fffff880`078cd000 fffff880`078d6000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
    fffff880`078d6000 fffff880`078fc000   pacer    pacer.sys    Sat Nov 20 10:52:18 2010 (4CE7A862)
    fffff880`078fc000 fffff880`07912000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
    fffff880`07912000 fffff880`07921000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
    fffff880`07921000 fffff880`0793c000   wanarp   wanarp.sys   Sat Nov 20 10:52:36 2010 (4CE7A874)
    fffff880`0793c000 fffff880`07950000   termdd   termdd.sys   Sat Nov 20 11:03:40 2010 (4CE7AB0C)
    fffff880`07950000 fffff880`0795a000   SASKUTIL64 SASKUTIL64.SYS Tue Jul 12 22:00:01 2011 (4E1CB5D1)
    fffff880`0795a000 fffff880`07964000   SASDIFSV64 SASDIFSV64.SYS Fri Jul 22 00:03:00 2011 (4E28B024)
    fffff880`07964000 fffff880`079b5000   rdbss    rdbss.sys    Sat Nov 20 09:27:51 2010 (4CE79497)
    fffff880`079b5000 fffff880`079c1000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
    fffff880`079c1000 fffff880`079cc000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
    fffff880`079cc000 fffff880`079d8000   ElbyCDIO ElbyCDIO.sys Thu Dec 16 22:58:13 2010 (4D0A9985)
    fffff880`079d8000 fffff880`079e7000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
    fffff880`07a00000 fffff880`07a2f000   ndiswan  ndiswan.sys  Sat Nov 20 10:52:32 2010 (4CE7A870)
    fffff880`07a2f000 fffff880`07a50000   raspptp  raspptp.sys  Sat Nov 20 10:52:31 2010 (4CE7A86F)
    fffff880`07a50000 fffff880`07a6a000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
    fffff880`07a6a000 fffff880`07a79000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
    fffff880`07a79000 fffff880`07a92000   SBFWIM   SBFWIM.sys   Tue Feb 08 11:37:58 2011 (4D512B16)
    fffff880`07a92000 fffff880`07aa1000   VClone   VClone.sys   Sat Jan 15 16:21:04 2011 (4D31C970)
    fffff880`07aa1000 fffff880`07ab3000   circlass circlass.sys Tue Jul 14 01:06:34 2009 (4A5BCC0A)
    fffff880`07ab3000 fffff880`07ac5000   umbus    umbus.sys    Sat Nov 20 10:44:37 2010 (4CE7A695)
    fffff880`07acb000 fffff880`07bc7000   netr28x  netr28x.sys  Wed Jul 21 12:39:22 2010 (4C46DC6A)
    fffff880`07bc7000 fffff880`07bd4000   vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
    fffff880`07bd4000 fffff880`07bec000   nusb3hub nusb3hub.sys Fri Jan 22 03:22:18 2010 (4B5919EA)
    fffff880`07bec000 fffff880`07bf6000   vwifimp  vwifimp.sys  Tue Jul 14 01:07:28 2009 (4A5BCC40)
    fffff880`07c14000 fffff880`07c97000   csc      csc.sys      Sat Nov 20 09:27:12 2010 (4CE79470)
    fffff880`07c97000 fffff880`07cb5000   dfsc     dfsc.sys     Sat Nov 20 09:26:31 2010 (4CE79447)
    fffff880`07cb5000 fffff880`07cc6000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
    fffff880`07cc6000 fffff880`07d0f000   avgldx64 avgldx64.sys Fri Oct 07 04:55:41 2011 (4E8E783D)
    fffff880`07d0f000 fffff880`07d35000   tunnel   tunnel.sys   Sat Nov 20 10:51:50 2010 (4CE7A846)
    fffff880`07d35000 fffff880`07d4b000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
    fffff880`07d4b000 fffff880`07d87880   mcdbus   mcdbus.sys   Tue Feb 24 10:34:07 2009 (49A3CD1F)
    fffff880`07d88000 fffff880`07de2000   usbhub   usbhub.sys   Fri Mar 25 03:29:25 2011 (4D8C0C15)
    fffff880`07de2000 fffff880`07df7000   NDProxy  NDProxy.SYS  Sat Nov 20 10:52:20 2010 (4CE7A864)
    fffff880`08000000 fffff880`0800d000   usbuhci  usbuhci.sys  Fri Mar 25 03:29:03 2011 (4D8C0BFF)
    fffff880`0800d000 fffff880`0801e000   usbehci  usbehci.sys  Fri Mar 25 03:29:04 2011 (4D8C0C00)
    fffff880`0801e000 fffff880`0801ff00   USBD     USBD.SYS     Fri Mar 25 03:28:59 2011 (4D8C0BFB)
    fffff880`08020000 fffff880`0802d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:17:04 2009 (4A1151C0)
    fffff880`0802e000 fffff880`081f0200   HCW723x  HCW723x.sys  Wed May 25 18:50:52 2011 (4DDD417C)
    fffff880`081f1000 fffff880`081f4e80   BdaSup   BdaSup.SYS   Tue Jul 14 01:06:40 2009 (4A5BCC10)
    fffff880`081f5000 fffff880`081fa200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
    fffff880`081fb000 fffff880`081fc480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
    fffff880`08400000 fffff880`08443000   ks       ks.sys       Sat Nov 20 10:33:23 2010 (4CE7A3F3)
    fffff880`08443000 fffff880`08453000   CompositeBus CompositeBus.sys Sat Nov 20 10:33:17 2010 (4CE7A3ED)
    fffff880`08453000 fffff880`0845f000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
    fffff880`08465000 fffff880`08559000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 09:50:50 2010 (4CE799FA)
    fffff880`08559000 fffff880`0859f000   dxgmms1  dxgmms1.sys  Sat Nov 20 09:49:53 2010 (4CE799C1)
    fffff880`0859f000 fffff880`085c3000   HDAudBus HDAudBus.sys Sat Nov 20 10:43:42 2010 (4CE7A65E)
    fffff880`085c3000 fffff880`085f3000   nusb3xhc nusb3xhc.sys Fri Jan 22 03:22:21 2010 (4B5919ED)
    fffff880`085f3000 fffff880`085fe000   rdpbus   rdpbus.sys   Tue Jul 14 01:17:46 2009 (4A5BCEAA)
    fffff880`09071000 fffff880`0907c000   asyncmac asyncmac.sys Tue Jul 14 01:10:13 2009 (4A5BCCE5)
    fffff880`090b1000 fffff880`09149000   srv      srv.sys      Fri Apr 29 04:06:06 2011 (4DBA2B1E)
    fffff880`09149000 fffff880`0919c000   bdfsfltr bdfsfltr.sys Fri Apr 03 19:01:57 2009 (49D64F15)
    fffff880`0919c000 fffff880`091c5000   bdfm     bdfm.sys     Thu Sep 17 13:44:23 2009 (4AB22F27)
    fffff880`091c5000 fffff880`091fb000   fastfat  fastfat.SYS  Tue Jul 14 00:23:28 2009 (4A5BC1F0)
    fffff880`0a400000 fffff880`0a414000   LMouFilt LMouFilt.Sys Thu Mar 18 08:51:24 2010 (4BA1E98C)
    fffff880`0a414000 fffff880`0a420000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
    fffff880`0a420000 fffff880`0a42e000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
    fffff880`0a42e000 fffff880`0a441000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
    fffff880`0a441000 fffff880`0a44f000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
    fffff880`0a44f000 fffff880`0a472000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
    fffff880`0a472000 fffff880`0a493000   WudfPf   WudfPf.sys   Sat Nov 20 10:42:44 2010 (4CE7A624)
    fffff880`0a493000 fffff880`0a4a8000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
    fffff880`0a4a8000 fffff880`0a4bb000   ndisuio  ndisuio.sys  Sat Nov 20 10:50:08 2010 (4CE7A7E0)
    fffff880`0a4bb000 fffff880`0a4d3000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
    fffff880`0a4d8000 fffff880`0a734d00   RTKVHD64 RTKVHD64.sys Tue Sep 07 12:17:23 2010 (4C861F43)
    fffff880`0a735000 fffff880`0a746000   hidir    hidir.sys    Tue Jul 14 01:06:23 2009 (4A5BCBFF)
    fffff880`0a746000 fffff880`0a75f000   HIDCLASS HIDCLASS.SYS Sat Nov 20 10:43:49 2010 (4CE7A665)
    fffff880`0a75f000 fffff880`0a767080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
    fffff880`0a768000 fffff880`0a776000   kbdhid   kbdhid.sys   Sat Nov 20 10:33:25 2010 (4CE7A3F5)
    fffff880`0a776000 fffff880`0a783000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
    fffff880`0a783000 fffff880`0a7a0000   usbccgp  usbccgp.sys  Fri Mar 25 03:29:14 2011 (4D8C0C0A)
    fffff880`0a7a0000 fffff880`0a7ae000   hidusb   hidusb.sys   Sat Nov 20 10:43:49 2010 (4CE7A665)
    fffff880`0a7ae000 fffff880`0a7c5000   LEqdUsb  LEqdUsb.Sys  Thu Mar 18 08:51:02 2010 (4BA1E976)
    fffff880`0a7c5000 fffff880`0a7cd000   LHidEqd  LHidEqd.Sys  Thu Mar 18 08:51:06 2010 (4BA1E97A)
    fffff880`0a7cd000 fffff880`0a7e8000   USBSTOR  USBSTOR.SYS  Fri Mar 11 04:37:16 2011 (4D79A6FC)
    fffff880`0a7e8000 fffff880`0a7fd000   LHidFilt LHidFilt.Sys Thu Mar 18 08:51:17 2010 (4BA1E985)
    fffff880`0da28000 fffff880`0ddca000   hiber_iaStor hiber_iaStor.sys Mon Oct 17 23:54:08 2011 (4E9CB210)
    fffff880`0ddca000 fffff880`0dddd000   hiber_dumpfve hiber_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
    fffff880`0f400000 fffff880`0f416000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
    fffff880`0f416000 fffff880`0f43a000   rasl2tp  rasl2tp.sys  Sat Nov 20 10:52:34 2010 (4CE7A872)
    fffff880`0f43a000 fffff880`0f455000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
    fffff880`0f456000 fffff880`1010f000   nvlddmkm nvlddmkm.sys Fri Aug 05 04:44:37 2011 (4E3B6725)
    fffff880`1010f000 fffff880`10110180   nvBridge nvBridge.kmd Mon Aug 09 05:06:41 2010 (4C5F7ED1)
    fffff880`10111000 fffff880`1015a000   e1y62x64 e1y62x64.sys Sat Jun 13 02:16:42 2009 (4A32FDFA)
    fffff880`1015a000 fffff880`101b0000   USBPORT  USBPORT.SYS  Fri Mar 25 03:29:12 2011 (4D8C0C08)
    fffff880`101b0000 fffff880`101ee000   1394ohci 1394ohci.sys Sat Nov 20 10:44:56 2010 (4CE7A6A8)
    fffff880`101ee000 fffff880`101fd000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
    fffff960`000e0000 fffff960`003f5000   win32k   win32k.sys   Fri Feb 03 04:34:05 2012 (4F2B63BD)
    fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      Sat Nov 20 12:55:34 2010 (4CE7C546)
    fffff960`00890000 fffff960`008f1000   ATMFD    ATMFD.DLL    Sat Feb 19 09:00:32 2011 (4D5F86B0)
    
    Unloaded modules:
    fffff880`0da45000 fffff880`0dde7000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0dde7000 fffff880`0ddfa000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0907c000 fffff880`09088000   usbprint.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`0da44000 fffff880`0dde6000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0dde6000 fffff880`0ddf9000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0da49000 fffff880`0ddeb000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0ddeb000 fffff880`0ddfe000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0b84f000 fffff880`0bbf1000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0b800000 fffff880`0b813000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0ba5e000 fffff880`0be00000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0ba00000 fffff880`0ba13000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0b45e000 fffff880`0b800000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0b400000 fffff880`0b413000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0b402000 fffff880`0b7a4000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0b7a4000 fffff880`0b7b7000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0da2b000 fffff880`0ddcd000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0ddcd000 fffff880`0dde0000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`09000000 fffff880`09071000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`01a96000 fffff880`01aa4000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`04c24000 fffff880`04fc6000   dump_iaStor.
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`04fc6000 fffff880`04fd9000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    start             end                 module name
    fffff880`101b0000 fffff880`101ee000   1394ohci 1394ohci.sys Sat Nov 20 10:44:56 2010 (4CE7A6A8)
    fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Sat Nov 20 09:19:16 2010 (4CE79294)
    fffff880`02e9f000 fffff880`02eb7000   adfs     adfs.SYS     Thu Jun 26 21:52:37 2008 (48640195)
    fffff880`07839000 fffff880`078c2000   afd      afd.sys      Wed Dec 28 03:59:20 2011 (4EFA9418)
    fffff880`0f400000 fffff880`0f416000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
    fffff880`015d5000 fffff880`015e0000   amdxata  amdxata.sys  Fri Mar 19 16:18:18 2010 (4BA3A3CA)
    fffff880`09071000 fffff880`0907c000   asyncmac asyncmac.sys Tue Jul 14 01:10:13 2009 (4A5BCCE5)
    fffff960`00890000 fffff960`008f1000   ATMFD    ATMFD.DLL    Sat Feb 19 09:00:32 2011 (4D5F86B0)
    fffff880`07551000 fffff880`0757c000   AVGIDSDriver AVGIDSDriver.Sys Sun Jul 10 23:36:37 2011 (4E1A2975)
    fffff880`01a8c000 fffff880`01a96000   AVGIDSEH AVGIDSEH.Sys Sun Jul 10 23:36:50 2011 (4E1A2982)
    fffff880`02eb7000 fffff880`02ec2000   AVGIDSFilter AVGIDSFilter.Sys Sun Jul 10 23:37:05 2011 (4E1A2991)
    fffff880`07cc6000 fffff880`07d0f000   avgldx64 avgldx64.sys Fri Oct 07 04:55:41 2011 (4E8E783D)
    fffff880`04fd9000 fffff880`04fe9000   avgmfx64 avgmfx64.sys Mon Aug 08 04:41:46 2011 (4E3F5AFA)
    fffff880`01a80000 fffff880`01a8c000   avgrkx64 avgrkx64.sys Tue Sep 13 05:02:34 2011 (4E6ED5DA)
    fffff880`042e5000 fffff880`04345000   avgtdia  avgtdia.sys  Sun Jul 10 23:46:53 2011 (4E1A2BDD)
    fffff880`081f1000 fffff880`081f4e80   BdaSup   BdaSup.SYS   Tue Jul 14 01:06:40 2009 (4A5BCC10)
    fffff880`0919c000 fffff880`091c5000   bdfm     bdfm.sys     Thu Sep 17 13:44:23 2009 (4AB22F27)
    fffff880`09149000 fffff880`0919c000   bdfsfltr bdfsfltr.sys Fri Apr 03 19:01:57 2009 (49D64F15)
    fffff880`04ff2000 fffff880`04ff9000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
    fffff880`07cb5000 fffff880`07cc6000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
    fffff880`02fb6000 fffff880`02fd4000   bowser   bowser.sys   Wed Feb 23 04:55:04 2011 (4D649328)
    fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      Sat Nov 20 12:55:34 2010 (4CE7C546)
    fffff880`01dce000 fffff880`01df8000   cdrom    cdrom.sys    Sat Nov 20 09:19:20 2010 (4CE79298)
    fffff880`00e5e000 fffff880`00f1e000   CI       CI.dll       Sat Nov 20 13:12:36 2010 (4CE7C944)
    fffff880`07aa1000 fffff880`07ab3000   circlass circlass.sys Tue Jul 14 01:06:34 2009 (4A5BCC0A)
    fffff880`01a50000 fffff880`01a80000   CLASSPNP CLASSPNP.SYS Sat Nov 20 09:19:23 2010 (4CE7929B)
    fffff880`00cf2000 fffff880`00d50000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`0115e000 fffff880`011d0000   cng      cng.sys      Thu Nov 17 04:23:17 2011 (4EC48C35)
    fffff880`08443000 fffff880`08453000   CompositeBus CompositeBus.sys Sat Nov 20 10:33:17 2010 (4CE7A3ED)
    fffff880`0a420000 fffff880`0a42e000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
    fffff880`07c14000 fffff880`07c97000   csc      csc.sys      Sat Nov 20 09:27:12 2010 (4CE79470)
    fffff880`07c97000 fffff880`07cb5000   dfsc     dfsc.sys     Sat Nov 20 09:26:31 2010 (4CE79447)
    fffff880`079d8000 fffff880`079e7000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
    fffff880`01a3a000 fffff880`01a50000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`043c7000 fffff880`043e9000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
    fffff880`0188b000 fffff880`018d1000   dtsoftbus01 dtsoftbus01.sys Fri Jun 17 08:38:37 2011 (4DFB047D)
    fffff880`0a42e000 fffff880`0a441000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
    fffff880`04c1e000 fffff880`04fc0000   dump_iaStor dump_iaStor.sys Mon Oct 17 23:54:08 2011 (4E9CB210)
    fffff880`0a414000 fffff880`0a420000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
    fffff880`08465000 fffff880`08559000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 09:50:50 2010 (4CE799FA)
    fffff880`08559000 fffff880`0859f000   dxgmms1  dxgmms1.sys  Sat Nov 20 09:49:53 2010 (4CE799C1)
    fffff880`10111000 fffff880`1015a000   e1y62x64 e1y62x64.sys Sat Jun 13 02:16:42 2009 (4A32FDFA)
    fffff880`079cc000 fffff880`079d8000   ElbyCDIO ElbyCDIO.sys Thu Dec 16 22:58:13 2010 (4D0A9985)
    fffff880`091c5000 fffff880`091fb000   fastfat  fastfat.SYS  Tue Jul 14 00:23:28 2009 (4A5BC1F0)
    fffff880`015e0000 fffff880`015f4000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
    fffff880`010b4000 fffff880`01100000   fltmgr   fltmgr.sys   Sat Nov 20 09:19:24 2010 (4CE7929C)
    fffff880`01611000 fffff880`0161b000   Fs_Rec   Fs_Rec.sys   Thu Mar 01 03:41:06 2012 (4F4EEFD2)
    fffff880`01a00000 fffff880`01a3a000   fvevol   fvevol.sys   Sat Nov 20 09:24:06 2010 (4CE793B6)
    fffff880`01ccb000 fffff880`01d15000   fwpkclnt fwpkclnt.sys Sat Nov 20 09:21:37 2010 (4CE79321)
    fffff880`08020000 fffff880`0802d000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:17:04 2009 (4A1151C0)
    fffff800`04011000 fffff800`0405a000   hal      hal.dll      Sat Nov 20 13:00:25 2010 (4CE7C669)
    fffff880`0802e000 fffff880`081f0200   HCW723x  HCW723x.sys  Wed May 25 18:50:52 2011 (4DDD417C)
    fffff880`0859f000 fffff880`085c3000   HDAudBus HDAudBus.sys Sat Nov 20 10:43:42 2010 (4CE7A65E)
    fffff880`0ddca000 fffff880`0dddd000   hiber_dumpfve hiber_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
    fffff880`0da28000 fffff880`0ddca000   hiber_iaStor hiber_iaStor.sys Mon Oct 17 23:54:08 2011 (4E9CB210)
    fffff880`0a746000 fffff880`0a75f000   HIDCLASS HIDCLASS.SYS Sat Nov 20 10:43:49 2010 (4CE7A665)
    fffff880`0a735000 fffff880`0a746000   hidir    hidir.sys    Tue Jul 14 01:06:23 2009 (4A5BCBFF)
    fffff880`0a75f000 fffff880`0a767080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
    fffff880`0a7a0000 fffff880`0a7ae000   hidusb   hidusb.sys   Sat Nov 20 10:43:49 2010 (4CE7A665)
    fffff880`02eed000 fffff880`02fb6000   HTTP     HTTP.sys     Sat Nov 20 09:24:30 2010 (4CE793CE)
    fffff880`01dc5000 fffff880`01dce000   hwpolicy hwpolicy.sys Sat Nov 20 09:18:54 2010 (4CE7927E)
    fffff880`01233000 fffff880`015d5000   iaStor   iaStor.sys   Mon Oct 17 23:54:08 2011 (4E9CB210)
    fffff880`07d35000 fffff880`07d4b000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
    fffff880`00c5c000 fffff880`00c7d000   jraid    jraid.sys    Thu Nov 25 03:27:17 2010 (4CEDD795)
    fffff880`101ee000 fffff880`101fd000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
    fffff880`0a768000 fffff880`0a776000   kbdhid   kbdhid.sys   Sat Nov 20 10:33:25 2010 (4CE7A3F5)
    fffff800`00bbf000 fffff800`00bc9000   kdcom    kdcom.dll    Sat Feb 05 16:52:49 2011 (4D4D8061)
    fffff880`08400000 fffff880`08443000   ks       ks.sys       Sat Nov 20 10:33:23 2010 (4CE7A3F3)
    fffff880`017d8000 fffff880`017f3000   ksecdd   ksecdd.sys   Thu Nov 17 03:48:13 2011 (4EC483FD)
    fffff880`01860000 fffff880`0188b000   ksecpkg  ksecpkg.sys  Thu Nov 17 04:23:44 2011 (4EC48C50)
    fffff880`081f5000 fffff880`081fa200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
    fffff880`0a7ae000 fffff880`0a7c5000   LEqdUsb  LEqdUsb.Sys  Thu Mar 18 08:51:02 2010 (4BA1E976)
    fffff880`0a7c5000 fffff880`0a7cd000   LHidEqd  LHidEqd.Sys  Thu Mar 18 08:51:06 2010 (4BA1E97A)
    fffff880`0a7e8000 fffff880`0a7fd000   LHidFilt LHidFilt.Sys Thu Mar 18 08:51:17 2010 (4BA1E985)
    fffff880`0a493000 fffff880`0a4a8000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
    fffff880`0a400000 fffff880`0a414000   LMouFilt LMouFilt.Sys Thu Mar 18 08:51:24 2010 (4BA1E98C)
    fffff880`0a44f000 fffff880`0a472000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
    fffff880`07d4b000 fffff880`07d87880   mcdbus   mcdbus.sys   Tue Feb 24 10:34:07 2009 (49A3CD1F)
    fffff880`00c8f000 fffff880`00cde000   mcupdate mcupdate.dll Sat Nov 20 13:03:51 2010 (4CE7C737)
    fffff880`0a441000 fffff880`0a44f000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
    fffff880`07a6a000 fffff880`07a79000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
    fffff880`0a776000 fffff880`0a783000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
    fffff880`00ddc000 fffff880`00df6000   mountmgr mountmgr.sys Sat Nov 20 09:19:21 2010 (4CE79299)
    fffff880`02fd4000 fffff880`02fec000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
    fffff880`02e00000 fffff880`02e2d000   mrxsmb   mrxsmb.sys   Wed Apr 27 03:40:38 2011 (4DB78226)
    fffff880`02e2d000 fffff880`02e7b000   mrxsmb10 mrxsmb10.sys Sat Jul 09 03:46:28 2011 (4E17C104)
    fffff880`02e7b000 fffff880`02e9f000   mrxsmb20 mrxsmb20.sys Wed Apr 27 03:39:37 2011 (4DB781E9)
    fffff880`0161b000 fffff880`01626000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
    fffff880`00fda000 fffff880`00fe4000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
    fffff880`01100000 fffff880`0115e000   msrpc    msrpc.sys    Sat Nov 20 09:21:56 2010 (4CE79334)
    fffff880`079c1000 fffff880`079cc000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
    fffff880`01db3000 fffff880`01dc5000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
    fffff880`018d6000 fffff880`019c9000   ndis     ndis.sys     Sat Nov 20 09:23:30 2010 (4CE79392)
    fffff880`08453000 fffff880`0845f000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
    fffff880`0a4a8000 fffff880`0a4bb000   ndisuio  ndisuio.sys  Sat Nov 20 10:50:08 2010 (4CE7A7E0)
    fffff880`07a00000 fffff880`07a2f000   ndiswan  ndiswan.sys  Sat Nov 20 10:52:32 2010 (4CE7A870)
    fffff880`07de2000 fffff880`07df7000   NDProxy  NDProxy.SYS  Sat Nov 20 10:52:20 2010 (4CE7A864)
    fffff880`07912000 fffff880`07921000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
    fffff880`04345000 fffff880`0438a000   netbt    netbt.sys    Sat Nov 20 09:23:18 2010 (4CE79386)
    fffff880`01800000 fffff880`01860000   NETIO    NETIO.SYS    Sat Nov 20 09:23:13 2010 (4CE79381)
    fffff880`07acb000 fffff880`07bc7000   netr28x  netr28x.sys  Wed Jul 21 12:39:22 2010 (4C46DC6A)
    fffff880`01200000 fffff880`01211000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
    fffff880`079b5000 fffff880`079c1000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
    fffff800`0405a000 fffff800`04642000   nt       ntkrnlmp.exe Tue Mar 06 03:58:13 2012 (4F558B55)
    fffff880`01635000 fffff880`017d8000   Ntfs     Ntfs.sys     Fri Mar 11 03:39:39 2011 (4D79997B)
    fffff880`04fe9000 fffff880`04ff2000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
    fffff880`07bd4000 fffff880`07bec000   nusb3hub nusb3hub.sys Fri Jan 22 03:22:18 2010 (4B5919EA)
    fffff880`085c3000 fffff880`085f3000   nusb3xhc nusb3xhc.sys Fri Jan 22 03:22:21 2010 (4B5919ED)
    fffff880`1010f000 fffff880`10110180   nvBridge nvBridge.kmd Mon Aug 09 05:06:41 2010 (4C5F7ED1)
    fffff880`07800000 fffff880`07823000   nvhda64v nvhda64v.sys Mon Jun 21 23:07:25 2010 (4C1FE29D)
    fffff880`0f456000 fffff880`1010f000   nvlddmkm nvlddmkm.sys Fri Aug 05 04:44:37 2011 (4E3B6725)
    fffff880`01000000 fffff880`01053000   nwifi    nwifi.sys    Tue Jul 14 01:07:23 2009 (4A5BCC3B)
    fffff880`078d6000 fffff880`078fc000   pacer    pacer.sys    Sat Nov 20 10:52:18 2010 (4CE7A862)
    fffff880`00d83000 fffff880`00d98000   partmgr  partmgr.sys  Sat Nov 20 09:20:00 2010 (4CE792C0)
    fffff880`00d50000 fffff880`00d83000   pci      pci.sys      Sat Nov 20 09:19:11 2010 (4CE7928F)
    fffff880`01600000 fffff880`01611000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
    fffff880`0745d000 fffff880`07503000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
    fffff880`0438a000 fffff880`043c7000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
    fffff880`00cde000 fffff880`00cf2000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
    fffff880`0f416000 fffff880`0f43a000   rasl2tp  rasl2tp.sys  Sat Nov 20 10:52:34 2010 (4CE7A872)
    fffff880`0f43a000 fffff880`0f455000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
    fffff880`07a2f000 fffff880`07a50000   raspptp  raspptp.sys  Sat Nov 20 10:52:31 2010 (4CE7A86F)
    fffff880`07a50000 fffff880`07a6a000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
    fffff880`07964000 fffff880`079b5000   rdbss    rdbss.sys    Sat Nov 20 09:27:51 2010 (4CE79497)
    fffff880`085f3000 fffff880`085fe000   rdpbus   rdpbus.sys   Tue Jul 14 01:17:46 2009 (4A5BCEAA)
    fffff880`01ab4000 fffff880`01abd000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`01abd000 fffff880`01ac6000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`019ee000 fffff880`019f7000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
    fffff880`01d79000 fffff880`01db3000   rdyboost rdyboost.sys Sat Nov 20 09:43:10 2010 (4CE7982E)
    fffff880`05844000 fffff880`059fa000   rikvm_C6F09094 rikvm_C6F09094.sys Tue Jun 29 13:17:18 2010 (4C29E44E)
    fffff880`0a4bb000 fffff880`0a4d3000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
    fffff880`0a4d8000 fffff880`0a734d00   RTKVHD64 RTKVHD64.sys Tue Sep 07 12:17:23 2010 (4C861F43)
    fffff880`0795a000 fffff880`07964000   SASDIFSV64 SASDIFSV64.SYS Fri Jul 22 00:03:00 2011 (4E28B024)
    fffff880`07950000 fffff880`0795a000   SASKUTIL64 SASKUTIL64.SYS Tue Jul 12 22:00:01 2011 (4E1CB5D1)
    fffff880`04224000 fffff880`0428a000   SbFw     SbFw.sys     Tue Apr 05 19:12:59 2011 (4D9B5BAB)
    fffff880`07a79000 fffff880`07a92000   SBFWIM   SBFWIM.sys   Tue Feb 08 11:37:58 2011 (4D512B16)
    fffff880`04c00000 fffff880`04c10000   SBREdrv  SBREdrv.sys  Fri Apr 29 16:51:13 2011 (4DBADE71)
    fffff880`0428a000 fffff880`042e5000   sbtis    sbtis.sys    Tue Apr 05 19:12:37 2011 (4D9B5B95)
    fffff880`00dad000 fffff880`00ddc000   SCSIPORT SCSIPORT.SYS Sat Nov 20 10:34:01 2010 (4CE7A419)
    fffff880`07503000 fffff880`0750e000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
    fffff880`01d71000 fffff880`01d79000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
    fffff880`090b1000 fffff880`09149000   srv      srv.sys      Fri Apr 29 04:06:06 2011 (4DBA2B1E)
    fffff880`0757c000 fffff880`075e5000   srv2     srv2.sys     Fri Apr 29 04:05:46 2011 (4DBA2B0A)
    fffff880`0750e000 fffff880`0753f000   srvnet   srvnet.sys   Fri Apr 29 04:05:35 2011 (4DBA2AFF)
    fffff880`081fb000 fffff880`081fc480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
    fffff880`01ac7000 fffff880`01ccb000   tcpip    tcpip.sys    Thu Sep 29 04:43:04 2011 (4E83E948)
    fffff880`0753f000 fffff880`07551000   tcpipreg tcpipreg.sys Sat Nov 20 10:51:48 2010 (4CE7A844)
    fffff880`01626000 fffff880`01633000   TDI      TDI.SYS      Sat Nov 20 09:22:06 2010 (4CE7933E)
    fffff880`01211000 fffff880`01233000   tdx      tdx.sys      Sat Nov 20 09:21:54 2010 (4CE79332)
    fffff880`0793c000 fffff880`07950000   termdd   termdd.sys   Sat Nov 20 11:03:40 2010 (4CE7AB0C)
    fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`07d0f000 fffff880`07d35000   tunnel   tunnel.sys   Sat Nov 20 10:51:50 2010 (4CE7A846)
    fffff880`07ab3000 fffff880`07ac5000   umbus    umbus.sys    Sat Nov 20 10:44:37 2010 (4CE7A695)
    fffff880`0a783000 fffff880`0a7a0000   usbccgp  usbccgp.sys  Fri Mar 25 03:29:14 2011 (4D8C0C0A)
    fffff880`0801e000 fffff880`0801ff00   USBD     USBD.SYS     Fri Mar 25 03:28:59 2011 (4D8C0BFB)
    fffff880`0800d000 fffff880`0801e000   usbehci  usbehci.sys  Fri Mar 25 03:29:04 2011 (4D8C0C00)
    fffff880`07d88000 fffff880`07de2000   usbhub   usbhub.sys   Fri Mar 25 03:29:25 2011 (4D8C0C15)
    fffff880`1015a000 fffff880`101b0000   USBPORT  USBPORT.SYS  Fri Mar 25 03:29:12 2011 (4D8C0C08)
    fffff880`0a7cd000 fffff880`0a7e8000   USBSTOR  USBSTOR.SYS  Fri Mar 11 04:37:16 2011 (4D79A6FC)
    fffff880`08000000 fffff880`0800d000   usbuhci  usbuhci.sys  Fri Mar 25 03:29:03 2011 (4D8C0BFF)
    fffff880`07a92000 fffff880`07aa1000   VClone   VClone.sys   Sat Jan 15 16:21:04 2011 (4D31C970)
    fffff880`00fe4000 fffff880`00ff1000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
    fffff880`04c10000 fffff880`04c1e000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
    fffff880`019c9000 fffff880`019ee000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
    fffff880`01064000 fffff880`010a0000   vmbus    vmbus.sys    Sat Nov 20 09:57:29 2010 (4CE79B89)
    fffff880`01d15000 fffff880`01d25000   vmstorfl vmstorfl.sys Sat Nov 20 09:57:30 2010 (4CE79B8A)
    fffff880`00d98000 fffff880`00dad000   volmgr   volmgr.sys   Sat Nov 20 09:19:28 2010 (4CE792A0)
    fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Sat Nov 20 09:20:43 2010 (4CE792EB)
    fffff880`01d25000 fffff880`01d71000   volsnap  volsnap.sys  Sat Nov 20 09:20:08 2010 (4CE792C8)
    fffff880`07bc7000 fffff880`07bd4000   vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
    fffff880`078fc000 fffff880`07912000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
    fffff880`07bec000 fffff880`07bf6000   vwifimp  vwifimp.sys  Tue Jul 14 01:07:28 2009 (4A5BCC40)
    fffff880`07921000 fffff880`0793c000   wanarp   wanarp.sys   Sat Nov 20 10:52:36 2010 (4CE7A874)
    fffff880`01aa4000 fffff880`01ab4000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
    fffff880`00f1e000 fffff880`00fc2000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
    fffff880`00fc2000 fffff880`00fd1000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
    fffff880`078cd000 fffff880`078d6000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
    fffff960`000e0000 fffff960`003f5000   win32k   win32k.sys   Fri Feb 03 04:34:05 2012 (4F2B63BD)
    fffff880`010a0000 fffff880`010b4000   winhv    winhv.sys    Sat Nov 20 09:20:02 2010 (4CE792C2)
    fffff880`00fd1000 fffff880`00fda000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
    fffff880`078c2000 fffff880`078cd000   ws2ifsl  ws2ifsl.sys  Tue Jul 14 01:10:33 2009 (4A5BCCF9)
    fffff880`0a472000 fffff880`0a493000   WudfPf   WudfPf.sys   Sat Nov 20 10:42:44 2010 (4CE7A624)
    
    Unloaded modules:
    fffff880`0da45000 fffff880`0dde7000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0dde7000 fffff880`0ddfa000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0907c000 fffff880`09088000   usbprint.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`0da44000 fffff880`0dde6000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0dde6000 fffff880`0ddf9000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0da49000 fffff880`0ddeb000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0ddeb000 fffff880`0ddfe000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0b84f000 fffff880`0bbf1000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0b800000 fffff880`0b813000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0ba5e000 fffff880`0be00000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0ba00000 fffff880`0ba13000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0b45e000 fffff880`0b800000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0b400000 fffff880`0b413000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0b402000 fffff880`0b7a4000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0b7a4000 fffff880`0b7b7000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`0da2b000 fffff880`0ddcd000   hiber_iaStor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`0ddcd000 fffff880`0dde0000   hiber_dumpfv
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    fffff880`09000000 fffff880`09071000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`01a96000 fffff880`01aa4000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`04c24000 fffff880`04fc6000   dump_iaStor.
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  003A2000
    fffff880`04fc6000 fffff880`04fd9000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    Bugcheck code 0000009F
    Arguments 00000000`00000003 fffffa80`138e0060 fffff800`00b9c518 fffffa80`1a5df010
    [CPU Information]
    ~MHz = REG_DWORD 3458
    Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
    Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
    Identifier = REG_SZ Intel64 Family 6 Model 44 Stepping 2
    ProcessorNameString = REG_SZ Intel(R) Core(TM) i7 CPU       X 990  @ 3.47GHz
    Update Signature = REG_BINARY 0,0,0,0,13,0,0,0
    Update Status = REG_DWORD 7
    VendorIdentifier = REG_SZ GenuineIntel
    MSR8B = REG_QWORD 1300000000
    Machine ID Information [From Smbios 2.5, DMIVersion 0, Size=2263]
    BiosMajorRelease = 8
    BiosMinorRelease = 15
    BiosVendor = American Megatrends Inc.
    BiosVersion = 6.13   
    BiosReleaseDate = 03/18/2011
    SystemManufacturer = Hewlett-Packard
    SystemProductName = HPE-590t
    SystemFamily = 103C_53316J G=D
    SystemVersion =                                 
    SystemSKU = XX096AV#ABA
    BaseBoardManufacturer = PEGATRON CORPORATION
    BaseBoardProduct = 2A86
    BaseBoardVersion = 1.04E01
    CPUID:        "Intel(R) Core(TM) i7 CPU       X 990  @ 3.47GHz"
    MaxSpeed:     3470
    CurrentSpeed: 3458
    [SMBIOS Data Tables v2.5]
    [DMI Version - 0]
    [2.0 Calling Convention - No]
    [Table Size - 2263 bytes]
    
    [BIOS Information (Type 0) - Length 24 - Handle 0000h]
      Vendor                        American Megatrends Inc.
      BIOS Version                  6.13   
      BIOS Starting Address Segment f000
      BIOS Release Date             03/18/2011
      BIOS ROM Size                 100000
      BIOS Characteristics
           04: - ISA Supported
           07: - PCI Supported
           09: - Plug and Play Supported
           11: - Upgradeable FLASH BIOS
           12: - BIOS Shadowing Supported
           14: - ESCD Supported
           15: - CD-Boot Supported
           16: - Selectable Boot Supported
           17: - BIOS ROM Socketed
           19: - EDD Supported
           23: - 1.2MB Floppy Supported
           24: - 720KB Floppy Supported
           25: - 2.88MB Floppy Supported
           26: - Print Screen Device Supported
           28: - Serial Services Supported
           29: - Printer Services Supported
           30: - CGA/Mono Services Supported
           32: - BIOS Vendor Reserved
           48: - System Vendor Reserved
      BIOS Characteristic Extensions
           00: - ACPI Supported
           01: - USB Legacy Supported
           04: - LS120-Boot Supported
           05: - ATAPI ZIP-Boot Supported
           08: - BIOS Boot Specification Supported
           10: - Specification Reserved
      BIOS Major Revision           8
      BIOS Minor Revision           15
      EC Firmware Major Revision    255
      EC Firmware Minor Revision    255
    [System Information (Type 1) - Length 27 - Handle 0001h]
      Manufacturer                  Hewlett-Packard
      Product Name                  HPE-590t
      Version                                                       
      Serial Number                           
      UUID                          00000000-0000-0000-0000-000000000000
      Wakeup Type                   Power Switch
      SKUNumber                     XX096AV#ABA
      Family                        103C_53316J G=D
    [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
      Manufacturer                  PEGATRON CORPORATION
      Product                       2A86
      Version                       1.04E01
      Serial Number                                
      Asset Tag                        
      Feature Flags                 09h
           -171703056: - (null)
           -171703008: - (null)
      Location                                                      
      Chassis Handle                0003h
      Board Type                    0ah - Processor/Memory Module
      Number of Child Handles       0
    [System Enclosure (Type 3) - Length 21 - Handle 0003h]
      Manufacturer                  Hewlett-Packard
      Chassis Type                  Desktop
      Version                       Chassis Version
      Serial Number                                      
      Asset Tag Number                         
      Bootup State                  Safe
      Power Supply State            Safe
      Thermal State                 Safe
      Security Status               None
      OEM Defined                   0
      Height                        0U
      Number of Power Cords         1
      Number of Contained Elements  0
      Contained Element Size        0
    [Processor Information (Type 4) - Length 40 - Handle 0004h]
      Socket Designation            CPU 1
      Processor Type                Central Processor
      Processor Family              01h - Other
      Processor Manufacturer        Intel            
      Processor ID                  c2060200fffbebbf
      Processor Version             Intel(R) Core(TM) i7 CPU       X 990  @ 3.47GHz     
      Processor Voltage             00h - 
      External Clock                133MHz
      Max Speed                     3466MHz
      Current Speed                 3466MHz
      Status                        Enabled Populated
      Processor Upgrade             Other
      L1 Cache Handle               0005h
      L2 Cache Handle               0006h
      L3 Cache Handle               0007h
      Serial Number                                                 
      Asset Tag Number                                              
      Part Number                                                   
    [Cache Information (Type 7) - Length 19 - Handle 0005h]
      Socket Designation            L1-Cache
      Cache Configuration           0180h - WB Enabled Int NonSocketed L1
      Maximum Cache Size            00c0h - 192K
      Installed Size                00c0h - 192K
      Supported SRAM Type           0001h - Other 
      Current SRAM Type             0001h - Other 
      Cache Speed                   0ns
      Error Correction Type         ParitySingle-Bit ECC
      System Cache Type             Data
      Associativity                 8-way Set-Associative
    [Cache Information (Type 7) - Length 19 - Handle 0006h]
      Socket Designation            L2-Cache
      Cache Configuration           0181h - WB Enabled Int NonSocketed L2
      Maximum Cache Size            0600h - 1536K
      Installed Size                0600h - 1536K
      Supported SRAM Type           0001h - Other 
      Current SRAM Type             0001h - Other 
      Cache Speed                   0ns
      Error Correction Type         Multi-Bit ECC
      System Cache Type             Unified
      Associativity                 8-way Set-Associative
    [Cache Information (Type 7) - Length 19 - Handle 0007h]
      Socket Designation            L3-Cache
      Cache Configuration           0182h - WB Enabled Int NonSocketed L3
      Maximum Cache Size            3000h - 12288K
      Installed Size                3000h - 12288K
      Supported SRAM Type           0001h - Other 
      Current SRAM Type             0001h - Other 
      Cache Speed                   0ns
      Error Correction Type         Multi-Bit ECC
      System Cache Type             Unified
      Associativity                 16-way Set-Associative
    [OEM Strings (Type 11) - Length 5 - Handle 0026h]
      Number of Strings             32
       1                            FBYTE#2U2V2e3D3H3N3Q3R3T3V3X3f3m3v484B4f4k5Q5T5d5h5j5x676S6T6b7B
       2                            7F7K7N7Q7T7W7z.Hn;BUILDID#11NA1MCW606#SABA#DABA;
       3                             
       4                             
       5                             
       6                             
       7                             
       8                             
       9                             
      10                             
      11                             
      12                             
      13                             
      14                             
      15                             
      16                             
      17                             
      18                             
      19                             
      20                             
      21                             
      22                             
      23                             
      24                             
      25                             
      26                             
      27                             
      28                             
      29                             
      30                             
      31                             
      32                             
    [Physical Memory Array (Type 16) - Length 15 - Handle 0029h]
      Location                      03h - SystemBoard/Motherboard
      Use                           03h - System Memory
      Memory Error Correction       03h - None
      Maximum Capacity              25165824KB
      Memory Error Inf Handle       [Not Provided]
      Number of Memory Devices      6
    [Memory Array Mapped Address (Type 19) - Length 15 - Handle 002ah]
      Starting Address              00000000h
      Ending Address                017fffffh
      Memory Array Handle           0029h
      Partition Width               03
    [Memory Device (Type 17) - Length 27 - Handle 002bh]
      Physical Memory Array Handle  0029h
      Memory Error Info Handle      [Not Provided]
      Total Width                   72 bits
      Data Width                    64 bits
      Size                          4096MB
      Form Factor                   09h - DIMM
      Device Set                    [None]
      Device Locator                DIMM0
      Bank Locator                  BANK0
      Memory Type                   18h - Specification Reserved
      Type Detail                   0002h - Other
      Speed                         1066MHz
      Manufacturer                  0000000002C80
      Serial Number                        
      Asset Tag Number                          
      Part Number                   16JTF51264AZ-1G4D1
    [Memory Device (Type 17) - Length 27 - Handle 002ch]
      Physical Memory Array Handle  0029h
      Memory Error Info Handle      [Not Provided]
      Total Width                   72 bits
      Data Width                    64 bits
      Size                          4096MB
      Form Factor                   09h - DIMM
      Device Set                    [None]
      Device Locator                DIMM1
      Bank Locator                  BANK1
      Memory Type                   18h - Specification Reserved
      Type Detail                   0002h - Other
      Speed                         1066MHz
      Manufacturer                  0000000002C80
      Serial Number                        
      Asset Tag Number                          
      Part Number                   16JTF51264AZ-1G4D1
    [Memory Device (Type 17) - Length 27 - Handle 002dh]
      Physical Memory Array Handle  0029h
      Memory Error Info Handle      [Not Provided]
      Total Width                   72 bits
      Data Width                    64 bits
      Size                          4096MB
      Form Factor                   09h - DIMM
      Device Set                    [None]
      Device Locator                DIMM2
      Bank Locator                  BANK2
      Memory Type                   18h - Specification Reserved
      Type Detail                   0002h - Other
      Speed                         1066MHz
      Manufacturer                  0000000002C80
      Serial Number                        
      Asset Tag Number                          
      Part Number                   16JTF51264AZ-1G4D1
    [Memory Device (Type 17) - Length 27 - Handle 002eh]
      Physical Memory Array Handle  0029h
      Memory Error Info Handle      [Not Provided]
      Total Width                   72 bits
      Data Width                    64 bits
      Size                          4096MB
      Form Factor                   09h - DIMM
      Device Set                    [None]
      Device Locator                DIMM3
      Bank Locator                  BANK3
      Memory Type                   18h - Specification Reserved
      Type Detail                   0002h - Other
      Speed                         1066MHz
      Manufacturer                  0000000002C80
      Serial Number                        
      Asset Tag Number                          
      Part Number                   16JTF51264AZ-1G4D1
    [Memory Device (Type 17) - Length 27 - Handle 002fh]
      Physical Memory Array Handle  0029h
      Memory Error Info Handle      [Not Provided]
      Total Width                   72 bits
      Data Width                    64 bits
      Size                          4096MB
      Form Factor                   09h - DIMM
      Device Set                    [None]
      Device Locator                DIMM4
      Bank Locator                  BANK4
      Memory Type                   18h - Specification Reserved
      Type Detail                   0002h - Other
      Speed                         1066MHz
      Manufacturer                  0000000002C80
      Serial Number                        
      Asset Tag Number                          
      Part Number                   16JTF51264AZ-1G4D1
    [Memory Device (Type 17) - Length 27 - Handle 0030h]
      Physical Memory Array Handle  0029h
      Memory Error Info Handle      [Not Provided]
      Total Width                   72 bits
      Data Width                    64 bits
      Size                          4096MB
      Form Factor                   09h - DIMM
      Device Set                    [None]
      Device Locator                DIMM5
      Bank Locator                  BANK5
      Memory Type                   18h - Specification Reserved
      Type Detail                   0002h - Other
      Speed                         1066MHz
      Manufacturer                  0000000002C80
      Serial Number                        
      Asset Tag Number                          
      Part Number                   16JTF51264AZ-1G4D1
    @ Handygal: CPU/RAM/BIOS/Board specs detailed in the final 1/5th of the dump ^^ drool in private please ;)
     
  20. handygal

    handygal Sergeant Major

    Thanks satrow, I was about to get in over my head and learned a little more about reading dump files.

    I was warned that the specs were impressive! We have to fix it, can't have that system and BSOD issues.
     
  21. handygal

    handygal Sergeant Major

    Fort Lauderdale.
    Wrote that a few weeks ago when my cousins in Canada and Austria both had an overnight freeze. I've lived in both places, I faintly remember that feeling. Now I live in a house without heat. Winter is for ski vacations, right?
     
  22. daivddd

    daivddd Private E-2

    Yes, thanks satrow for checking my dump logs! When it comes to that I'm not even in left field.

    I successfully completed all directions except one:

    bdfsfltr.sys BitDefender--uninstalled

    e1y62x64.sys 82567V-2 Gigabit Network Connection Ethernet driver--updated

    rikvm_C6F09094.sys--Google suggested it's Cyberlink or a wireless adapter/LAN--uninstalled Cyberlink and hope the update below helps for the other two.

    ElbyCDIO.sys--could find nothing to do with this! I checked All Programs and Programs and Features for anything to do with "clone", "virtual", "dvd", and any sort of "Elby", ran a Windows scan, searched Regedit, and searched Google (I found several ideas but nothing helped me).

    VClone.sys--uninstalled

    dtsoftbus01.sys Daemon Tools--uninstalled

    netr28x.sys Wireless LAN Card--upated

    I tried log-scanning and wading through the history you included, but that was way over my head; I saw nothing stand out to me.

    I also ran Windows update, Malwarebytes Anti-Malware, and SUPERAntiSpyware (found only tracking cookies).

    After all that, I had no internet connection which really freaked me out! But a another simple re-start and I was good to go hahahahahaha

    So now we'll see....
     
  23. satrow

    satrow Major Geek Extraordinaire

    You removed or updated 4 possible and 2 likely causes, that means there's a pretty fair chance you've removed/updated the problem driver, now all you have to do is not BSOD for a week or 10 days and we can be pretty sure you fixed it.

    If you do get a new BSOD, attach the dump as you did last time, also describe what you were doing/what was running, during the minutes leading up to the crash. Run MSInfo32, Ctrl+S to save as a *.nfo file, once saving has finished, zip and upload/attach it, too.
     
  24. daivddd

    daivddd Private E-2

    Sounds good :-D!!! I'll be sure to get back to you after a week or so with a good report. (I hope I don't need to write you sooner :cry)
     
  25. daivddd

    daivddd Private E-2

    I'm sorry to tell you that I got another BSOD. The attached zip holds the latest minidump and MSInfo.

    --Yahoo Messenger was running.
    --A window was open with 3 email programs.
    --MS Word was running with an open file.
    --A window was open running Grooveshark, an internet radio/music player. It was streaming (running) a song muted.
    --A window was open running WordReference, an internet dictionary.
    --Ares was running idle, no searching or downloading.
    --I had left the comp idle for some time and it had gone to sleep. I was greeted with a BSOD when I returned.

    Often I have been getting a BSOD waking out of sleep. Many times while Ares was running, sometime not so I ruled it out. Sometimes I'd also get a BSOD while sitting at the comp without Ares on. Confusing! :confused
     

    Attached Files:

  26. daivddd

    daivddd Private E-2

    I forgot to include--SearchTempest was running, a program that searches for you at one time different city's Craigslist.
     
  27. daivddd

    daivddd Private E-2

    You might want to know this too. After my last post, coming out of sleep I got the error message--

    Access violation at address 77863TAO in module "ntdll.dll".
    Read of address 02DDDC12.

    This time--

    A window with 3 emails and another tab
    A window running SearchTempest
    Yahoo Messenger
    MS Window with one file open
     
  28. satrow

    satrow Major Geek Extraordinaire

    Hmm, unfortunately, no WER (Windows Error Reporting) data logged in the MSInfo32 report :( Can you run MSInfo32 again please, this time wait 5 minutes or so after it's loaded then expand the Software environment thread and click on Windows Error Reporting - if it fills with unreadable data then save zip and attach it please - that's the part that may be most useful.

    Same 0x9f, blaming the same (but updated) driver. Check in Device Manager that the wireless network card still has all power saving features disabled please.

    Coming out of sleep means a big hit on the PSU - I'm wondering whether the 450W unit supplied is up to the task still; how long have you had this PC? Which graphics card is in it?
     
  29. daivddd

    daivddd Private E-2

    Before I get to your other questions, I’m stumped on something. I ran MSInfo32 a couple more times and waited 5 – 10 minutes before checking WER. Apparently it’s disabled because it appears only blank.

    Google showed me a couple ways to turn it on or off. However, both Local Group Policies’ User Configuration > Administrative Templates > Windows Components > Windows Error Reporting as well as Computer Configuration > Administrative Templates > Systems > Internet Communication Management > Internet Communication Settings show it is not configured. I understand that is default and does not turn off error reporting.

    Can you tell me how to get MSInfo32 to generate the WER log?
     
  30. satrow

    satrow Major Geek Extraordinaire

    At this point, I have no clue :-D it feels like it could be the result of an overzealous tweaking program or maybe worse, maybe running SFC will repair it.

    EDIT: Have you tried Option 2 (reg fix) here?: http://www.sevenforums.com/tutorials/194181-windows-error-reporting-disable-windows-7-a.html

    Let's try slightly different tracks to work out why both versions of netr28x.sys appear to be either corrupted or can't be verified (Symbols can't be loaded) by the debugger:
    Sysinternals Autoruns, run it, press Esc to cancel, Options > Filter options > check the bottom 3 and click OK, refresh and wait for it to finish then Ctrl+S to save it. Zip and attach the file please.

    Check that you have the latest chipset drivers installed, use the driver update checker here: http://downloadcenter.intel.com/Default.aspx

    Install the original HP/Ralink drivers for your wireless card from the HP support site for your PC, reboot and test with those (check using Autoruns that the 'new' netr28x.sys is verified > Services tab).

    Then test until BSOD, upload the dump ...

    I've tried 2 recommended debug methods to track this 0x9F down, the first failed (possibly a buggy debugger version :major I'll try it again shortly in an older version I have installed), the second pointed straight to the netr28x.sys.

    I've had a rethink on the PSU as a possible cause for this, I'm pretty sure there'd be other oddities you would have mentioned or several different BSOD's if it was the cause. That's not to say that your PSU is good, in fact, I'd say it was borderline given the hardware options available for that computer - if it were mine, I'd be hunting down a good quality 550+W PSU that would fit in your case.
     
    Last edited: May 10, 2012
  31. daivddd

    daivddd Private E-2

    The wireless network card has only one power-saving option, Allow the computer to turn off this device to save power, which was and is unchecked.

    The system is around 6 month old. By the way I had never had any of this—or any--sort of problem for the first several months.

    I have the graphics card NVIDIA GeForce GT 440.

    I understand what you mean about an overzealous tweaking program. FYI I have never tried to tweak performance or, as far as I know, initiated something that would have. I’ve always wondered about a clever virus that neither MalwareBytes nor SUPERAantiSpyware could detect.

    I had run SFC not too long ago with nothing being corrected. But I just ran it again and still no integrity violations.

    I installed the original Ralink driver.

    I did see the reg fix at that sight but was afraid to use it :-o. I wouldn’t have known how to un-do it if it hurt something else! I just ran the reg fix, restarted, then ran MSInfo32. I realize no errors would probably have been reported so soon, but I’d think at least something would appear. It’s still blank. Interestingly, Software Environment > Network Connections is also blank.

    Intel Driver Update Utility scanned and told me my version of the chipset software is valid.

    I’ll go to Fry’s this weekend and check out a 550W PSU.

    And finally, I was a bit unsure about autoruns—the link took me to an autorun’s page, then I downloaded Download Locations/Download Author’s Site, then I ran autoruns.exe, not autorunsc.exe. Then hit [ESC] and the rest of your directions. The zip is attached.

    I hope I covered everything! Upon the next BSOD (I'll keep my fingers crossed!) I'll send you the dump and error report if it's not still blank.

    Thank you again SO MUCH for all of your help!!!
     

    Attached Files:

  32. satrow

    satrow Major Geek Extraordinaire

    Ok, looks like you did fine!

    The only Ralink entries I see are 3 *.exe's in the Services section - none are verified so I guess that's why we see the Symbols can't be loaded error on debugging.

    Let's assume (we have nothing else to go on yet - WER, please start) that there's something else blocking the wireless driver from restarting - software-wise, it would be a security program that heads the list (Issue: Sunbelt Personal Firewall may cause AVG update process to monopolize the CPU time. < or similar).

    You have AVG (install MSE) and Sunbelt Firewall* (enable the built-in Windows firewall) loaded, let's remove those from the equation via Remove Programs in control Panel and AVG remover - you may need to reboot to Safe Mode after the normal uninstall method to run the cleaner from there. *The Sunbelt (Vipre) uninstall tool is available via a direct link at ESET, scroll down to Vipre (Sunbelt Software).

    Reboot (again), check the firewall is active, install MSE and seek out another BSOD (and check occasionally for signs of WER waking up).

    If the above routine doesn't change or rid you of the BSOD, I guess we're looking at a fresh Windows install (do you have a spare hard drive you could use for testing this?), it feels like a repair install won't cure all the bugs we've discovered.

    Re the PSU: it's probably a good idea to devote a few hours poring over verified owners reports on Newegg, I doubt if there's a good quality (Tier 1/2) 550-650W PSU for less than $100 with a mail-in rebate :( , probably a number of mediocre/poor/bad ones for that and more, too - it's a minefield without experienced help. I suggest you ask in the Hardware section for recommendations suited to the specifications of your PC.
     
  33. daivddd

    daivddd Private E-2

    Sunbelt Firewall?!?! I’ve never heard of it. Neither is it listed in Programs and Features. I wonder what put that in and if it’s a problem. I thought only Windows firewall was enabled. Actually it was enabled. There’s an option checked “Block all connections to programs that are not on the list of allowed programs.” I never checked it—is it OK?

    Anyhow, both Sunbelt and AVG are now gone, and I’ve installed MSE. I’ll read up on that tonight because as of now I know nothing.

    Here’s something interesting—there’s been a little white flag for the Action Center (which I didn't know) down in my notification area, and it’s been crossed out with a red slash-through-a-circle symbol. There had been a balloon stating I had 6 error messages waiting, but I thought they were spam and ignored it. Just now when I installed MSE, the red symbol disappeared and I can now access the Action Center with the icon. I see no balloon anymore and I can’t find the messages—I wonder if they could have helped us now.

    I got another BSOD since I wrote last, but because of these new changes I figure I might as well ignore it and wait for the next one to have current logs.

    I hate total reinstalls! But I’ve been thinking of that as a good solution. Yes, I have an external hard drive to use, and I’ve made a system backup on a large flash drive. Unfortunately I’ve never installed without simply using a manufactured CD, so I need to do some reading up.
     
  34. satrow

    satrow Major Geek Extraordinaire

    Ok, reads like you're still making good progress towards pinning down the problem (and bug-fixing en route).

    If the crash happened after you changed something since the last dump, it might be useful, attach it by all means ;)
     
  35. daivddd

    daivddd Private E-2

    I hope you meant the dump file, cuz WER still doens't work for me.
     

    Attached Files:

  36. satrow

    satrow Major Geek Extraordinaire

    I did ;) I'll probably fall asleep soon, don't wait up ^^

    EDIT: Ok, same BSOD, it still had the AVG and Sunbelt/Vipre drivers loaded.
     
  37. daivddd

    daivddd Private E-2

    I had made some changes, but no, not including AVS or Sunbelt or the other latest. Sorry, I misunderstood :-o
     
  38. daivddd

    daivddd Private E-2

    Ok this time my BSOD-generated dump file represents all the changes we've done. I restarted, loaded my typical windows, then went to bed and let it go to sleep. This morning I was greeted with a stop screen.

    We've spent a lot of time on this, so I'm thinking a re-install might be a good thing to consider. First, however, I found http://sourcedaddy.com/windows-7/troubleshooting-stop-messages.html that has a lot of info about the BSOD appearing as you come out of sleep or standby. Next time I get it I'll mark down all the codes and check out that site. Are you familiar with it?
     

    Attached Files:

  39. satrow

    satrow Major Geek Extraordinaire

    I'm bushed, too tired to concentrate tonight. Same BSOD and cause.

    There's still a Sunbelt/Vipre driver loading, you can try to find it in Device Manager > File > View > Show hidden devices. Now click the + next to Non-plug and play drivers and scroll down to SbFw (<--- SbFw.sys), select uninstall and reboot when prompted. Yes - this could easily trigger another BSOD :(

    After rebooting, repeat to check if it's still showing, if so, reboot into Safe Mode and try to track it down; rename or delete it, if you can - either may cause a popup on boot complaining about something not found or failing to load, copy the exact message here and we'll deal with that.

    Test as usual, post a dump if you get one.

    Tomorrow I'll try to put an hour or so aside to dig into the 0x9f some more, I may call in reinforcements ;)

    Oh yes - that site's pretty good for a taster of BSOD battling and many other topics too. One useful method for 0x9F's is here at Mike Burr's blog, unfortunately, as I wrote earlier:
    Yours looks like one that doesn't fit that method; we've successfully changed the drivers for the 'offending' hardware successfully with zero difference - that probably means (to me) that something just 'downstream' is blocking the driver - an orphaned or broken software firewall driver fits that frame very well.
     
  40. daivddd

    daivddd Private E-2

    WOOOOOOOOAH!!! I think (HOPE!) we're finally taking a chunk out of the problem :celebrate But it scared me for a while. Humor me--I'll list the steps I took (that I can remember).

    I tried to uninstall SbFw as per your instructions. Upon restart it was still there. I tried again. No go.

    I checked a few folders that contain drivers, and I found 3 with the word Sunbelt in the description. I renamed them all .BAD

    Upon restart I had no connection.

    I ran Troubleshooter and got--

    Problems found​
    There might be a problem with the driver ​
    for the Local Area Connection adapter​
    and​
    fot the Wireless Network Connection 2 adapter​

    I restarted and ran troubleshooter a few times.

    Restarted in safe network mode...no go.

    Fortunately (I thought) I still had the downloaded install .exe for the original wireless adapter. However, that did not help.

    Re-ran the original driver installation...no go.

    Started with Last good configuration...no go.

    (Running troubleshooter between each step)

    Finally restored the system to the most recent restore point. PHEW!!! I'm back.

    Well SbFw never had permission to get on here, and it had a bad attitude being removed. Then the sudden problem getting connection. That's got to be related, no? Pleeeeeeeeeeeease!!!

    I'll continue working as normal and see what happens.
     
  41. daivddd

    daivddd Private E-2

    Oh no, my enthusiasm was misplaced--I got another BSOD :cry

    Last night I left my computer on with 2 windows and several tabs going, iTunes, and Ares. I awoke to a blue screen.

    I checked hidden devices and SbFw is back!!! The drivers folder now contains all 3 originals that I had renamed, and the renamed files are gone. I'll go through the routine again, but this time I'll attempt to remove them completely and I'll look around to see if I can find a way to be sure Sunbelt gets totally removed. If you know of a tool or plan, be sure to let me know!
     

    Attached Files:

  42. daivddd

    daivddd Private E-2

    ¡¡¡IGNORANCE DETECTED!!!

    (This post follows 2 I wrote you might not have seen yetl.)

    I re-did my Sunbelt removals then restored so that I could get connected, then I checked the drivers folder. Apparently, as you must know, restoring restores drivers that you delete even in safe command prompt. All Sunbelt driver files I deleted were back.

    Or maybe Sunbelt has a backup file to restore their files that are deleted.

    I'll look on Google how to delete Sunbelt, but if you have an idea let me know.
     
  43. daivddd

    daivddd Private E-2

    Sorry, this will be the last one until I hear from you...

    I found a link at several sites to completely remove Sunbelt, but the link does not work.

    There are MANY entries in regedit containing the word Sunbelt. I'm not expert at regedit, so I didn't mess with any of them. But is it safe to first remove the drivers I found then delete the entries in regedit? If so, would I remove the entire "folder" containing those entries or just the individual entries?

    I'm rather stumped right now, so I'll wait for you. I CAN access the internet, so I'm not expecting you to drop everything to work on this. Just when you have time is perfectly OK--I can be patient.
     
  44. satrow

    satrow Major Geek Extraordinaire

    Hmm, I think we first need to ascertain whether Sunbelt means Sunbelt or whether it's referring to Vipre (I think they also use it, or bought the rights to it - there may be others too?), scan through the registry for Vipre, also see if there's a cleanup tool from Vipre you can use (sorry for the brief reply, lots of catchup to do today, I'll look in again later).
     
  45. daivddd

    daivddd Private E-2

    An update--

    I contacted the company. He ran me through some steps. First deleted Koko in Programs and Features. Then changed Adapter Settings in the Network and Sharing Center. For each adapter I unchecked in "This connection uses the following items" a setting for Sunbelt Software Firewall NDIS IM Filter. That seemed to do it. I restarted a couple of times and all the driver files remain deleted, Koko is gone, and I get immediate connection :clap

    One thing hopefully out of the way. If I have to send you a minidump again we'll see if Sunbelt REALLY is gone!
     
  46. satrow

    satrow Major Geek Extraordinaire

    Ahh, great work - KoKo (never heard of it before now) had been hooked into the Sunbelt driver and that was the reason it couldn't be uninstalled/removed?, Nice find :major :
    http://www.sunbeltsecurity.com/ThreatDisplay.aspx?tid=40878&cs=12F0352A2EBD4C55FCE8C65F73E4FE32 if the above is any indication, you're well rid of it!

    Now get us some dumps so we can be sure that was the cause ^^ !
     
  47. daivddd

    daivddd Private E-2

    As you know I won't be sure for several days, but as of now I can report that everything looks very good. For a while I fretted--if I turned on my computer from "off" I was immediately connected online; however, when resuming from sleep I could not get connected. No BSOD, just not connection. I'd run Troubleshoot my connection to the Internet and get the response "Troubleshooting couldn't identify the problem," but each time I could then get connected anyhow...kinda odd. I then re-checked "Allow the computer to turn off this device to save power," which I had previously unchecked while we were narrowing things down. Now I can get connected immediately any time. Feels really good! I hope in several days I can come back to you with these same comments :)
     
  48. satrow

    satrow Major Geek Extraordinaire

    Part of the KoKo/Sunbelt removal process may have reset some of the driver properties to default, looks like you figured that out quick enough :)

    I'm pleased to hear that, for a short time at least, it seems to be much improved; you did a fine job of sticking to the task in hand - I hope your computer will do the same for you now.

    If you're free of BSOD's for around 10 days, I reckon you've cracked it. If it does BSOD again, upload the dump and a little history around it happening and someone will take a look through it.
     
  49. daivddd

    daivddd Private E-2

    Well it's been several days and I have not again run into any sort of problem! I consider it all fixed :celebrate My machine once again runs fast and powerful :clap

    So, satrow & handygal, and anyone else who contributed, thank you very much :dood It took a while, but we finally narrowed it down to Koko and its firewall. Once removed absolutely my comp was back to normal.

    Now then, do you all do this sort of work as a hobby and challenge, or do you hope to earn some money? I don't have a lot to deal with, but you did provide me with a valuable service. Please tell me what you are anticipating, what is normal to contribute. (Don't just say whatever I think is good!)

    Thanks again,
    David
     
  50. handygal

    handygal Sergeant Major

    Thanks for letting us know!

    Interesting question. satrow fixed you but as far as why invest the time, for me, it's a combination of paying back to the community that I have learned much from and also the challenge. It is not much different from puzzles and internet games. I'm just a member like most users on here.
     

Share This Page

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds