[grantb685]

hi i just had an unexpected shutdown and im wondering what caused it ?? if you would be so kind to help me, i managed to get this error message when it restarted

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.768.2
Locale ID: 2057

Additional information about the problem:
BCCode: d1
BCP1: A49FFFF6
BCP2: 00000002
BCP3: 00000000
BCP4: 8DEE8575
OS Version: 6_0_6001
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\Mini100908-01.dmp
C:\Users\dg\AppData\Local\Temp\WER-176639-0.sysdata.xml
C:\Users\dg\AppData\Local\Temp\WER8A63.tmp.version.txt



can you let me know what has happened and talk me through your fixes if it is needed,
many thanks in advance

 

[jcgriff2]

BCCode: d1
BCP1: A49FFFF6
BCP2: 00000002
BCP3: 00000000
BCP4: 8DEE8575

Hi Grant. . .

The BCC = Buchcheck code = 0x000000d1 (0xa49ffff6, 0x00000002, 0x00000000, 0x8dee8575). 0xd1 = DRIVER_IRQL_NOT_LESS_OR_EQUAL
and indicates that a kernel-mode driver attempted to access pageable (or bad) memory at a time when it should not have. I need some system info from you as well as the dumps. {Please do the following:

Download the attached zip file and extract the batch and exe file to your desktop. Go to your desktop, right-click on the batch file and select run as administrator. You will see the black "DOS" screen appear and scroll and it will provide you with the status of the script. Then the AutoRuns viewer screen will appear - let it scan (look on bottom-left for status - "scanning..."). When AutoRuns is finished, the screen will close. The batch job will take ~ 5 minutes to run.

The output will be in a new folder found within your documents folder named TSF_Vista_Support. Zip the contents of the new folder up and attach to your next post.

Any ? - please let me know.

Regards. . .

jcgriff2

.

 

[grantb685]

here you go by the way i like the thing u got goin with comand prompt

many thanks grant

 

[jcgriff2]

Hi Grant. . .

Thanks re: cmd prompt. Just an easier way to get the files that I need.

However, there were no mini kernel dump files nor AutoRuns in the file you uploaded. Did you run the batch file at an elevated admin level (right-click/run as admin)?

I don't need AutoRuns just yet - but I need the dump files. Please go to \windows\minidump and zip all of them up and attach to your next post. I do have all of the other files that I need to get started.

Regards. . .

jcgriff2

.

 

[grantb685]

is this the minidump you were after ?

 

[grantb685]

^^^^^ :4-dontkno plz help me

 

[jcgriff2]

Hi Grant. . .

Just to let you know that I did p/u the attached file and will run it. Is that the only dump file that you have?

If more, please send.

Regards. . .

jcgriff2

.

 

[jcgriff2]

Hi. . .

It may just be that one dump is all that is needed - we'll see.

The bugcheck found in the dump is the same as you posted - 0xd1 (0xa49ffff6, 0x2, 0x0, 0x8dee8575, with the probable cause listed as the PixArt Imaging driver pfc027.sys, timestamp = Mon Dec 04 22:34:41 2006. I checked out PixArt's web site, found HERE - and noticed that their last press conference was on July 14, 2006. I was unable to locate a driver update.

While looking through your dump file, I noticed two other drivers that s/b updated as well - as I see them as primary future BSOD candidates. Both are from Realtek, but I advise that you go to the OEM site (Dell, Toshiba, etc..) if applicable, to download them.

» Rtlh86.sys - Mon Jan 15 09:28:18 2007 - Realtek 8169 NIC - Ethernet.

» RTKVHDA.sys - Thu Mar 01 03:20:58 2007 - Realtek HD audio codec

Please let me know how you make out. The dbug log is below.

Regards. . .

jcgriff2

.

Microsoft (R) Windows Debugger Version 6.9.0003.113 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [A:\D\#Dumps\grantb685_Vista_10-10-08\Mini100908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*a:\symbols\*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18063.x86fre.vistasp1_gdr.080425-1930
Kernel base = 0x81a42000 PsLoadedModuleList = 0x81b59c70
Debug session time: Thu Oct  9 15:11:01.731 2008 (GMT-4)
System Uptime: 0 days 3:51:42.099
Loading Kernel Symbols
.................................................................................................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {a49ffff6, 2, 0, 8dee8575}

Unable to load image \SystemRoot\system32\DRIVERS\PFC027.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for PFC027.SYS
*** ERROR: Module load completed but symbols could not be loaded for PFC027.SYS
Probably caused by : PFC027.SYS ( PFC027+4575 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: a49ffff6, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8dee8575, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 81b79868
Unable to read MiSystemVaType memory at 81b59420
 a49ffff6 

CURRENT_IRQL:  2

FAULTING_IP: 
PFC027+4575
8dee8575 ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  81b37af4 -- (.trap 0xffffffff81b37af4)
ErrCode = 00000000
eax=83e52ea4 ebx=83e52450 ecx=00000000 edx=83e52450 esi=a49ffff6 edi=a4a00000
eip=8dee8575 esp=81b37b68 ebp=81b37b84 iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
PFC027+0x4575:
8dee8575 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8dee8575 to 81a9cd84

STACK_TEXT:  
81b37af4 8dee8575 badb0d00 83e52450 81b3a902 nt!KiTrap0E+0x2ac
WARNING: Stack unwind information not available. Following frames may be wrong.
81b37b64 a4a1a020 841a05bc 83e52330 838e5028 PFC027+0x4575
81b37b84 8defe25e 840dd030 83e52450 00000000 0xa4a1a020
81b37bdc 8defe611 841a05bc 8420d1c7 8420d0e8 PFC027+0x1a25e
81b37bf4 81a7c0e4 00000000 8420d0e8 841a05bc PFC027+0x1a611
81b37c28 8ababb37 81a964f4 84213440 00000000 nt!IopfCompleteRequest+0x11d
81b37c64 8abae9fd 838e5028 8420d0e8 850dfc58 USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x6cb
81b37c94 8abb006a 838e5028 39585043 838e5bf8 USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x4f5
81b37cc0 8aba9274 838e5028 838e5bf8 838e5002 USBPORT!USBPORT_Core_UsbIocDpc_Worker+0x122
81b37ce8 81af8510 838e5c04 34776478 00000000 USBPORT!USBPORT_Xdpc_Worker+0x274
81b37d50 81af6f9d 00000000 0000000e 00000000 nt!KiRetireDpcList+0x147
81b37d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49


STACK_COMMAND:  kb

FOLLOWUP_IP: 
PFC027+4575
8dee8575 ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  PFC027+4575

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: PFC027

IMAGE_NAME:  PFC027.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4574e8d1

FAILURE_BUCKET_ID:  0xD1_PFC027+4575

BUCKET_ID:  0xD1_PFC027+4575

Followup: MachineOwner
---------

eax=81b3a920 ebx=00000002 ecx=81b421f8 edx=000000c2 esi=81b3a93c edi=81b37768
eip=81a9cd84 esp=81b37adc ebp=81b37af4 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000206
nt!KiTrap0E+0x2ac:
81a9cd84 833d640cb78100  cmp     dword ptr [nt!KiFreezeFlag (81b70c64)],0 ds:0023:81b70c64=????????
ChildEBP RetAddr  Args to Child              
81b37af4 8dee8575 badb0d00 83e52450 81b3a902 nt!KiTrap0E+0x2ac (FPO: [0,0] TrapFrame @ 81b37af4)
WARNING: Stack unwind information not available. Following frames may be wrong.
81b37b64 a4a1a020 841a05bc 83e52330 838e5028 PFC027+0x4575
81b37b84 8defe25e 840dd030 83e52450 00000000 0xa4a1a020
81b37bdc 8defe611 841a05bc 8420d1c7 8420d0e8 PFC027+0x1a25e
81b37bf4 81a7c0e4 00000000 8420d0e8 841a05bc PFC027+0x1a611
81b37c28 8ababb37 81a964f4 84213440 00000000 nt!IopfCompleteRequest+0x11d
81b37c64 8abae9fd 838e5028 8420d0e8 850dfc58 USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x6cb (FPO: [Non-Fpo])
81b37c94 8abb006a 838e5028 39585043 838e5bf8 USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x4f5 (FPO: [Non-Fpo])
81b37cc0 8aba9274 838e5028 838e5bf8 838e5002 USBPORT!USBPORT_Core_UsbIocDpc_Worker+0x122 (FPO: [Non-Fpo])
81b37ce8 81af8510 838e5c04 34776478 00000000 USBPORT!USBPORT_Xdpc_Worker+0x274 (FPO: [Non-Fpo])
81b37d50 81af6f9d 00000000 0000000e 00000000 nt!KiRetireDpcList+0x147
81b37d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49 (FPO: [0,0,0])
start    end        module name
8040b000 80413000   kdcom    kdcom.dll    Sat Jan 19 02:31:53 2008 (4791A769)
80413000 80473000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Jan 19 02:29:43 2008 (4791A6E7)
80473000 80484000   PSHED    PSHED.dll    Sat Jan 19 02:31:21 2008 (4791A749)
80484000 8048c000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
8048c000 804cd000   CLFS     CLFS.SYS     Sat Jan 19 00:28:01 2008 (47918A61)
804cd000 805ad000   CI       CI.dll       Fri Feb 22 00:00:56 2008 (47BE5708)
805ad000 805bd000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
805bd000 805e0000   ndiswan  ndiswan.sys  Sat Jan 19 00:56:32 2008 (47919110)
805e0000 805f5000   rassstp  rassstp.sys  Sat Jan 19 00:56:43 2008 (4791911B)
8060a000 80686000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
80686000 80693000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
80693000 806d9000   acpi     acpi.sys     Sat Jan 19 00:32:48 2008 (47918B80)
806d9000 806e2000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
806e2000 806ea000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
806ea000 80711000   pci      pci.sys      Sat Jan 19 00:32:57 2008 (47918B89)
80711000 80720000   partmgr  partmgr.sys  Sat Jan 19 00:49:54 2008 (47918F82)
80720000 8072f000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
8072f000 80779000   volmgrx  volmgrx.sys  Sat Jan 19 00:50:00 2008 (47918F88)
80779000 80780000   intelide intelide.sys Sat Jan 19 00:49:42 2008 (47918F76)
80780000 8078e000   PCIIDEX  PCIIDEX.SYS  Sat Jan 19 00:49:40 2008 (47918F74)
8078e000 8079e000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
8079e000 807a6000   atapi    atapi.sys    Sat Jan 19 00:49:40 2008 (47918F74)
807a6000 807c4000   ataport  ataport.SYS  Sat Jan 19 00:49:40 2008 (47918F74)
807c4000 807f6000   fltmgr   fltmgr.sys   Sat Jan 19 00:28:10 2008 (47918A6A)
807f6000 807feb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)
81a0f000 81a42000   hal      halmacpi.dll Sat Jan 19 00:27:20 2008 (47918A38)
81a42000 81dfb000   nt       ntkrpamp.exe Sat Apr 26 01:28:17 2008 (4812BD71)
85407000 85478000   ksecdd   ksecdd.sys   Sat Jan 19 00:41:20 2008 (47918D80)
85478000 85583000   ndis     ndis.sys     Sat Jan 19 00:55:51 2008 (479190E7)
85583000 855ae000   msrpc    msrpc.sys    unavailable (00000000)
855ae000 855e8000   NETIO    NETIO.SYS    Sat Jan 19 00:56:19 2008 (47919103)
855e8000 855fc000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
85609000 856f0000   tcpip    tcpip.sys    Sat Apr 26 02:00:17 2008 (4812C4F1)
856f0000 8570b000   fwpkclnt fwpkclnt.sys Sat Jan 19 00:55:44 2008 (479190E0)
8570b000 8571a000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
8571a000 8572d000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
8572d000 85745000   cdrom    cdrom.sys    Sat Jan 19 00:49:50 2008 (47918F7E)
85745000 85773000   msiscsi  msiscsi.sys  Sat Jan 19 00:50:44 2008 (47918FB4)
85773000 857b4000   storport storport.sys Sat Jan 19 00:49:49 2008 (47918F7D)
857b4000 857bf000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
857bf000 857d6000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
857d6000 857e1000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
857e1000 857f0000   raspppoe raspppoe.sys Sat Jan 19 00:56:33 2008 (47919111)
857f0000 85800000   termdd   termdd.sys   Sat Jan 19 01:01:06 2008 (47919222)
85805000 85914000   Ntfs     Ntfs.sys     Sat Jan 19 00:28:54 2008 (47918A96)
85914000 8594d000   volsnap  volsnap.sys  Sat Jan 19 00:50:10 2008 (47918F92)
8594d000 85955000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
85955000 85964000   mup      mup.sys      Sat Jan 19 00:28:20 2008 (47918A74)
85964000 8598b000   ecache   ecache.sys   Sat Jan 19 00:50:47 2008 (47918FB7)
8598b000 8599c000   disk     disk.sys     Sat Jan 19 00:49:47 2008 (47918F7B)
8599c000 859bd000   CLASSPNP CLASSPNP.SYS Sat Jan 19 00:49:36 2008 (47918F70)
859bd000 859c6000   crcdisk  crcdisk.sys  Thu Nov 02 04:52:27 2006 (4549B1CB)
859e6000 859f1000   tunnel   tunnel.sys   Sat Jan 19 00:55:50 2008 (479190E6)
859f1000 859fa000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
8a400000 8a40b000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8a40b000 8aac8000   igdkmd32 igdkmd32.sys Tue Mar 25 12:44:20 2008 (47E92BE4)
8aac8000 8ab67000   dxgkrnl  dxgkrnl.sys  Fri Aug 01 21:01:19 2008 (4893B1DF)
8ab67000 8ab74000   watchdog watchdog.sys Sat Jan 19 00:35:29 2008 (47918C21)
8ab74000 8ab86000   HDAudBus HDAudBus.sys Tue Nov 27 18:18:41 2007 (474CA5D1)
8ab86000 8ab9b000   Rtlh86   Rtlh86.sys   Mon Jan 15 09:28:18 2007 (45AB8F82)
8ab9b000 8aba6000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
8aba6000 8abe4000   USBPORT  USBPORT.SYS  Sat Jan 19 00:53:23 2008 (47919053)
8abe4000 8abf3000   usbehci  usbehci.sys  Sat Jan 19 00:53:21 2008 (47919051)
8abf3000 8abfe000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8abfe000 8abff380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8ae09000 8ae33000   ks       ks.sys       Sat Jan 19 00:49:21 2008 (47918F61)
8ae33000 8ae3d000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8ae3d000 8ae4a000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
8ae4a000 8ae7e000   usbhub   usbhub.sys   Sat Jan 19 00:53:40 2008 (47919064)
8ae7e000 8ae8f000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
8ae8f000 8aeb4000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
8aeb4000 8aed5000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
8aed5000 8aedd000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8aedd000 8aee5000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
8aee5000 8aef0000   Msfs     Msfs.SYS     unavailable (00000000)
8aef0000 8aefe000   Npfs     Npfs.SYS     Sat Jan 19 00:28:09 2008 (47918A69)
8aefe000 8af07000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8af07000 8af1d000   tdx      tdx.sys      Sat Jan 19 00:55:58 2008 (479190EE)
8af1d000 8af31000   smb      smb.sys      Sat Jan 19 00:55:27 2008 (479190CF)
8af31000 8af79000   afd      afd.sys      Sat Jan 19 00:57:00 2008 (4791912C)
8af79000 8afab000   netbt    netbt.sys    Sat Jan 19 00:55:33 2008 (479190D5)
8afab000 8afc1000   pacer    pacer.sys    Fri Apr 04 21:21:42 2008 (47F6D426)
8afc1000 8afcf000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
8afcf000 8afe2000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8c000000 8c00c000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
8c00f000 8c1b7a00   RTKVHDA  RTKVHDA.sys  Thu Mar 01 03:20:58 2007 (45E68CEA)
8c1b8000 8c1e5000   portcls  portcls.sys  Sat Jan 19 00:53:17 2008 (4791904D)
8c1e5000 8c1ee000   Fs_Rec   Fs_Rec.SYS   unavailable (00000000)
8c1ee000 8c1f5000   Null     Null.SYS     unavailable (00000000)
8c1f5000 8c1fc000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
8de0b000 8de47000   rdbss    rdbss.sys    Sat Jan 19 00:28:34 2008 (47918A82)
8de47000 8de51000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
8de51000 8deb1000   eeCtrl   eeCtrl.sys   Thu Jan 17 21:44:27 2008 (4790128B)
8deb1000 8dec8000   dfsc     dfsc.sys     Sat Jan 19 00:28:20 2008 (47918A74)
8dec8000 8deccec0   avgmfx86 avgmfx86.sys Thu Jun 26 11:19:13 2008 (4863B371)
8decd000 8dee3480   avgldx86 avgldx86.sys Mon Jul 14 14:46:33 2008 (487B9F09)
8dee4000 8df5fd00   PFC027   PFC027.SYS   Mon Dec 04 22:34:41 2006 (4574E8D1)
8df60000 8df6cf00   STREAM   STREAM.SYS   Sat Jan 19 00:53:16 2008 (4791904C)
8df6d000 8df6e700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8df6f000 8df7c000   crashdmp crashdmp.sys Sat Jan 19 00:49:43 2008 (47918F77)
8df7c000 8df87000   dump_dumpata dump_dumpata.sys Sat Jan 19 00:49:40 2008 (47918F74)
8df87000 8df8f000   dump_atapi dump_atapi.sys Sat Jan 19 00:49:40 2008 (47918F74)
8df8f000 8df99000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8df99000 8dfa8000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8dfa8000 8dfc3000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
8dfcb000 8dfdb000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
93ab0000 93cb1000   win32k   win32k.sys   unavailable (00000000)
93cd0000 93cd9000   TSDDD    TSDDD.dll    unavailable (00000000)
93cf0000 93cfe000   cdd      cdd.dll      unavailable (00000000)
a460e000 a46bd000   spsys    spsys.sys    Thu Jun 21 20:33:02 2007 (467B18BE)
a46bd000 a46e7000   nwifi    nwifi.sys    Mon May 19 22:07:27 2008 (4832325F)
a46e7000 a46f1000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
a46f1000 a4704000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
a4704000 a476f000   HTTP     HTTP.sys     Sat Jan 19 00:55:21 2008 (479190C9)
a476f000 a478c000   srvnet   srvnet.sys   Sat Jan 19 00:29:11 2008 (47918AA7)
a478c000 a47a5000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
a47a5000 a47ba000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
a47ba000 a47da000   mrxdav   mrxdav.sys   Sat Jan 19 00:28:44 2008 (47918A8C)
a47da000 a47f9000   mrxsmb   mrxsmb.sys   Sat Jan 19 00:28:33 2008 (47918A81)
a4c04000 a4c3d000   mrxsmb10 mrxsmb10.sys Thu May 08 15:21:54 2008 (482352D2)
a4c3d000 a4c55000   mrxsmb20 mrxsmb20.sys Sat Jan 19 00:28:35 2008 (47918A83)
a4c55000 a4c7c000   srv2     srv2.sys     Sat Jan 19 00:29:14 2008 (47918AAA)
a4c7c000 a4cc8000   srv      srv.sys      Sat Jan 19 00:29:25 2008 (47918AB5)
a4cc8000 a4da6000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
a4da6000 a4db0000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
a4db0000 a4dbc000   tcpipreg tcpipreg.sys Sat Jan 19 00:56:07 2008 (479190F7)
a4dbc000 a4dd0000   avgwfpx  avgwfpx.sys  Fri May 16 03:57:55 2008 (482D3E83)
a4dd0000 a4de6000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
a4de6000 a4de7580   MSPQM    MSPQM.sys    Sat Jan 19 00:49:18 2008 (47918F5E)
a4de8000 a4de9700   MSPCLOCK MSPCLOCK.sys Sat Jan 19 00:49:18 2008 (47918F5E)

Unloaded modules:
8dfc3000 8dfcb000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
859c6000 859d3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
859d3000 859de000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
859de000 859e6000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
0: kd> lmvm PFC027
start    end        module name
8dee4000 8df5fd00   PFC027   T (no symbols)           
    Loaded symbol image file: PFC027.SYS
    Image path: \SystemRoot\system32\DRIVERS\PFC027.SYS
    Image name: PFC027.SYS
    Timestamp:        Mon Dec 04 22:34:41 2006 (4574E8D1)
    CheckSum:         00083D26
    ImageSize:        0007BD00
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
0: kd> .trap 0xffffffff81b37af4
ErrCode = 00000000
eax=83e52ea4 ebx=83e52450 ecx=00000000 edx=83e52450 esi=a49ffff6 edi=a4a00000
eip=8dee8575 esp=81b37b68 ebp=81b37b84 iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
PFC027+0x4575:
8dee8575 ??              ???
0: kd> lmvm rtlh86
start    end        module name
8ab86000 8ab9b000   Rtlh86     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rtlh86.sys
    Image name: Rtlh86.sys
    Timestamp:        Mon Jan 15 09:28:18 2007 (45AB8F82)
    CheckSum:         000210C1
    ImageSize:        00015000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
0: kd> lmvm pxhelp20
start    end        module name
807f6000 807feb80   PxHelp20   (deferred)             
    Image path: \SystemRoot\System32\Drivers\PxHelp20.sys
    Image name: PxHelp20.sys
    Timestamp:        Fri Feb 02 16:23:57 2007 (45C3ABED)
    CheckSum:         0000D2D9
    ImageSize:        00008B80
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
0: kd> lmvm rtkvhda
start    end        module name
8c00f000 8c1b7a00   RTKVHDA    (deferred)             
    Image path: \SystemRoot\system32\drivers\RTKVHDA.sys
    Image name: RTKVHDA.sys
    Timestamp:        Thu Mar 01 03:20:58 2007 (45E68CEA)
    CheckSum:         001B576F
    ImageSize:        001A8A00
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
0: kd> lmvm spldr.sys
start    end        module name
0: kd> lmvm spldr
start    end        module name
8594d000 85955000   spldr      (deferred)             
    Mapped memory image file: a:\symbols\spldr.sys\467B17DD8000\spldr.sys
    Image path: \SystemRoot\System32\Drivers\spldr.sys
    Image name: spldr.sys
    Timestamp:        Thu Jun 21 20:29:17 2007 (467B17DD)
    CheckSum:         0000F57B
    ImageSize:        00008000
    File version:     6.0.6001.16606
    Product version:  6.0.6001.16606
    File flags:       8 (Mask 3F) Private
    File OS:          40004 NT Win32
    File type:        3.0 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     spldr.sys
    OriginalFilename: spldr.sys
    ProductVersion:   6.0.6001.16606
    FileVersion:      6.0.6001.16606 (lh_security(sepbld-s).070621-1657)
    FileDescription:  loader for security processor
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmvm spsys
start    end        module name
a460e000 a46bd000   spsys      (deferred)             
    Image path: \SystemRoot\system32\drivers\spsys.sys
    Image name: spsys.sys
    Timestamp:        Thu Jun 21 20:33:02 2007 (467B18BE)
    CheckSum:         000AA2A6
    ImageSize:        000AF000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0
0: kd> lmvm hdaudbus
start    end        module name
8ab74000 8ab86000   HDAudBus   (deferred)             
    Mapped memory image file: a:\symbols\HDAudBus.sys\474CA5D112000\HDAudBus.sys
    Image path: \SystemRoot\system32\DRIVERS\HDAudBus.sys
    Image name: HDAudBus.sys
    Timestamp:        Tue Nov 27 18:18:41 2007 (474CA5D1)
    CheckSum:         00014C8B
    ImageSize:        00012000
    File version:     6.0.6001.17036
    Product version:  6.0.6001.17036
    File flags:       8 (Mask 3F) Private
    File OS:          40004 NT Win32
    File type:        3.9 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     hdaudbus.sys
    OriginalFilename: hdaudbus.sys
    ProductVersion:   6.0.6001.17036
    FileVersion:      6.0.6001.17036 (LH_Client.071120-1638)
    FileDescription:  High Definition Audio Bus Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

 

[grantb685]

sorry jcgriff2 but i dont fully understand what u want me to do, im good on pc`s but not as technical as you are. if you would run over what you would want me to do and in your next post, reply in steps i can take and in simple words i dont understand half of the big words im still in high school ( 15 ) lol and what is needed to sort this problem happening


(ps) after i have sorted all this out can/will it happen again ???

many thanks grant

 

[jcgriff2]

The bugcheck found in the dump is the same as you posted - 0xd1 (0xa49ffff6, 0x2, 0x0, 0x8dee8575, with the probable cause listed as the PixArt Imaging driver pfc027.sys, timestamp = Mon Dec 04 22:34:41 2006. I checked out PixArt's web site, found HERE - and noticed that their last press conference was on July 14, 2006. I was unable to locate a driver update.

Hi Grant. . .

No problem at all - ask all the questions you want.

Yes, a BSOD can happen again for many reasons at any time. Not just to you, but anyone.

In my quote up there, the important part is about PixArt. The file pfx027.sys is part of the PixArt software program and is dated December 2006 - and is most likely responsible for the BSOD. This PixArt file was written before Vista came out in January 2007. So I went looking for newer one, but could not find one.

I mentioned the press conference that PixArt last held on July 14, 2006, because this tells me that something happened to the company (no news for 2 years) so I don't think you will be able to find updated software for PixArt to be able to run it on your Vista system anymore. If you keep it on your system, it will crash w/ BSOD again. Your Vista system has been updated w/ software from 2008 by Microsoft - but PixArt has not updated their software. So you should un-install PixArt and find another software product like it to use - but newer.

This is the website for PixArt -

http://www.pixart.com.tw/

While looking through your dump file, I noticed two other drivers that s/b updated as well - as I see them as primary future BSOD candidates. Both are from Realtek, but I advise that you go to the OEM site (Dell, Toshiba, etc..) if applicable, to download them.

» Rtlh86.sys - Mon Jan 15 09:28:18 2007 - Realtek 8169 NIC - Ethernet.

» RTKVHDA.sys - Thu Mar 01 03:20:58 2007 - Realtek HD audio codec

What I was saying here is that I looked through the files in your system and found 2 more old ones - but there are newer ones that you can get. The 1st one is for your Realtek Ethernet. The link above is for the page to get the new driver from - 1/2 way down under "windows" - for RTL8169 - the 2nd one listed - is for your system and was updated on Sept 24th. You should download it and install it. This is the link for that 2nd driver listed - click on it and download and install the new Realtek driver -

ftp://202.65.194.212/cn/nic/INSTALL_VISTA_6208_0922.zip

The Realtek HD Audio codec is also old and there is an updated one for that, too - from August 10th. It is the 1st one listed on this site -

http://www.realtek.com.tw/downloads...=24&Level=4&Conn=3&DownTypeID=3&GetDown=false

Click on this link for the audio codec driver from that site - download and install it -

ftp://202.65.194.211/pc/audio/Vista_R206.zip

If you do these 3 things now, there will be a good chance that your system will not crash again soon - I hope. There is no guarantee, of course.

You should keep your drivers updated. Go to your computer manufacturer's web site and look for any updates. Most like Dell, HP, and others can scan your system and figure out which ones you need.

Any more questions, just let me know.

JC

.

Regards. . .

jcgriff2

.

 

[grantb685]

what alternative can i choose for pixart and i have a problem some time i just get a non responisve program is there a way you can find out what is causing it or somthing like that and ive just been on the compaq website which it is the manufacturer of my pc and it came up with loads of new downloads should i download them all ????

many thanks grant

 

[jcgriff2]

what alternative can i choose for pixart and i have a problem some time i just get a non responisve program is there a way you can find out what is causing it or somthing like that and ive just been on the compaq website which it is the manufacturer of my pc and it came up with loads of new downloads should i download them all ????

many thanks grant

Hi Grant -

I don't know anything about pixart or what a similar program would be. I can just tell you that it will not run properly under Vista SP1. I suggest that you start a thread in our Graphic Design Forum as ask that question - Here is the link -

http://www.techsupportforum.com/f159/

On the compaq website look for a tool to scan your system so that it will tell you what drivers are available. Compaq is owned by HP and I know HP has such a tool. To find out what devices you have in your system - go to Device Manager -
START type devmgmt.msc and hit enter

jcgriff2

.

 

[grantb685]

ok so will pixart be on my program list and shall i uninstall it and do you have any advise on the non responsive programs.

many thanks grant

 

[jcgriff2]

Grant -

I have moved your pixart thread to the Graphic Design Forum.

jcgriff2

.

 

[grantb685]

ok thanks very much and do you have any advise on the non responsive programs because it is a big problem and do pixart need to be removed or can i stay put untill graphic design get back to me

regards ....

grant

 

[Coolfreak]

grantb685 - Just to keep you informed, jcgriff2 might not be able to get back to you right away. He has come across some personal problems. He should be back soon to help you.

-Coolfreak

 

[jcgriff2]

Thank you, Coolfreak.


.


Grant - here is the link to your pixart thread in the Graphic Design forum

http://www.techsupportforum.com/f159/pixart-moved-from-vista-302865.html

Someone should respond and will hopefully be able to help. I think it would be a good idea to post again to the new thread w/ a screen shot and include details of what pixart does - and also what type of program you are looking for. I don't know anything about it.

You do need to un-install pixart from your current system as it was to blame for your recent BSODs. Also, you should go to your manufacturer's web site and see what driver updates are available for your system. I found 3 that I listed in my previous post -

http://www.techsupportforum.com/1753897-post10.html

These items must be done before I can look at anything else. You may not have problems after these items are finished.

Bye for now. . .

JC

.

 

[grantb685]

i cannot find pixart in my installed program list on tyhe controll panel so how do i uninstall it

many thanks grant

 

[grantb685]

and by the way i cant find a place that will scan my computer for updates i need if possible and if you would, so kindly send me a link so it can scan my computer for the updates because ive tried everything that i can do with my computing skills

hope to hear from you soon =] thanks grant

 

[jcgriff2]

Hi Grant. . .

HERE is the web site for your Compaq Presario SG3002UK. There have been driver updates, but you may already have them.

That is a nice list to have, but let HP (they own Compaq Computer Corp) scan your system - HP Support & Drivers. You appear to have all of your Windows Updates in - including Service Pack 1 (SP1).

I did notice that you only have 512mb installed memory (RAM). You need to increase to at least 2gb RAM (2048mb). Unfortunately like w/ pixart, this is a area that I am unfamiliar with. There is a Hardware Forum here that can help.

As for pixart, I could find no reference to it in the installed program list that I have either. I did see that it runs out of the \windows\system32 folder - or at least part of it does.

sp207	1.23.2006.1012	116.50 KB (119,296 bytes) 12/10/2006 18:10

PixArt Imaging Incorporation	c:\windows\system32\sp207.ax

It may be part of a program named PAC207 - see if it is in your windows folder. It may be PAC207.exe.

Bye for now -

JC

.