Tech Support banner

Status
Not open for further replies.
1 - 18 of 18 Posts

·
Registered
Joined
·
60 Posts
Discussion Starter #1 (Edited)
Hey, I have a computer running XP, but the BSOD posting instructions said to post here, so that's what I'm doing. I figure that someone will move it if I should have put it in the XP sub-forum.

Anyway, I've been getting a BSOD every so often on my laptop. It started about a week ago. I got three one night so I stopped using the computer. It was fine after that, until today (when I got it twice).

OS: XP
x86
Computer age: ~4 years
OS age: 3 months
CPU: AMD Turion 64 x2, 1.6 GHz, 512KB L2 cache
Video card: ATI Radeon Xpress 1100
(According to Speccy) Motherboard: Acer Navarro (Socket M2/S1G1), AIT Xpress 200 (RS480) chipset
Power supply: Not even sure where to look on a laptop. Do you just want what's on the black chunk half-way between the plug and the computer itself on the power cord?

Let me know what else you need.
 

Attachments

·
Registered
Joined
·
60 Posts
Discussion Starter #3
Yes, I figured that this might happen. Oh well. Can't fault me for following the directions exactly, right?

I thought of another piece of info that could be helpful. I (am pretty sure I) have been running Firefox every time I have gotten the BSOD.
 

·
Administrator, Manager, Microsoft Support, Acting
Joined
·
34,380 Posts
Hi -

You got me on that one --- the directions (link) lead directly to the creation of a thread in Windows 7/ Vista !! :)

Sorry, but there wer NO dump files in your attached zip file. I went through the rest of the files for your XP SP3 Pro system - you need device driver updates -

Update video drivers -
Code:
[font=lucida console]  
---------------
Display Devices
---------------
        Card name: ATI Radeon Xpress 1100
     Manufacturer: ATI Technologies Inc.
        Chip type: ATI Radeon Xpress Series (0x5975)
         DAC type: Internal DAC(400MHz)
       Device Key: Enum\PCI\VEN_1002&DEV_5975&SUBSYS_009F1025&REV_00
   Display Memory: 128.0 MB
     Current Mode: 1280 x 800 (32 bit) (60Hz)
          Monitor: Default Monitor
  Monitor Max Res: 
      Driver Name: ati2dvag.dll
   Driver Version: 6.14.0010.6614 (English)
 Driver Date/Size: [color=red][b]4/27/2006[/b][/color] 09:47:10, 258048 bytes
         Mini VDD: ati2mtag.sys
    Mini VDD Date: 4/27/2006 09:46:50, 1540096 bytes[/font]

ATI driver updates --> http://support.amd.com/us/gpudownload/Pages/index.aspx


Update audio drivers -
Code:
[font=lucida console]  
-------------
Sound Devices
-------------
            Description: Realtek HD Audio output
          Date and Size: [color=red][b]4/17/2008[/b][/color] 16:33:00, 4707328 bytes
         

            Description: Bluetooth Audio
            Driver Name: btaudio.sys
         Driver Version: 5.00.0001.1500 (English)
             Date and Size: [color=red][b]1/17/2006[/b][/color] 10:21:52, 328061 bytes[/font]

Realtek Audio --> http://www.realtek.com.tw/DOWNLOADS/


Realtek NIC -
Code:
[font=lucida console]
     Name: Realtek RTL8139/810x Family Fast Ethernet NIC
   Driver: C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys, 5.687.0225.2008 (English),
`		[color=red][b]2/25/2008[/b][/color] 12:54:56, 105088 bytes[/font]

Realtek NIC driver downloads --> http://www.realtek.com.tw/DOWNLOADS/downloadsView.aspx?Langid=1&PNid=7&PFid=10&Level=3&Conn=2

The Realtek NIC could be at the root of your BSODs w/ Firefox.

Get the driver updates and see if BSOds persist.

Regards. . .

jcgriff2

.
 

·
Registered
Joined
·
60 Posts
Discussion Starter #5
Ah. I thought that I had updated all my drivers. I guess I forgot those after I did the re-format. I'll rock those and let you know what happens. Thanks!
 

·
Registered
Joined
·
60 Posts
Discussion Starter #7
Ok. I rocked the Realtek driver updates without incident. But when I tried the ATI one, I got a message that said "Could not find the driver for your device" (or something like that).

I know I selected the correct card from the list (I tried it a couple times). Why is it telling me that the package the I download does not have the driver for my computer? (I have an ATI Radeon Xpress 1100.)
 

·
Registered
Joined
·
60 Posts
Discussion Starter #8
Ok. I got another BSOD. I got another .zip for you.

I still haven't been able to find anything from ATI that will let me run the driver update for you video card.
 

Attachments

·
Administrator, Manager, Microsoft Support, Acting
Joined
·
34,380 Posts
There was no dump file in the zip.

Run the Driver Verifier --> http://www.techsupportforum.com/2110308-post3.html

It says Windows 7/ Vista, but works in XP, too.

START | Run |cmd | verifier

When the system BSODs, go to \windows\minidump and get the dump.

Regards. . .

jcgriff2

.
 

·
Registered
Joined
·
60 Posts
Discussion Starter #10
Sorry that there's not dump file. Does that mean that one was not created, or that I'm doing something wrong?

I ran the verifier. When I ran the verifier and restarted, the computer would BSOD whenever it tried to start up. So I started in safe mode and went to check for a minidump, but there was no folder called that.

So I system restored. Now when I try to check the status of the verifier, the cmd screen pops up and closes too quickly to read. Do I just need to wait until the computer gets a BSOD while I'm using it regularly? Or did I do something wrong?

Also, there might be a new symptom. I don't know if it's related. I can barely use the internet at all. I have to tell it to load pages several times before anything will happen. I would have thought that my internet connection was just getting interrupted a bunch (sometimes my school has problems with that), but no one else is having trouble.
 

·
Registered
Joined
·
60 Posts
Discussion Starter #11 (Edited)
Bump.

Another thing to add. I have an HDD password set. When the computer BSODs often times it will tell me that the password that I enter is wrong (even though I know it's the correct one). I have to let the computer sit off for a little bit before it will work. I don't understand that at all.

Also, it turns out that the internet connection problem was something caused by bad interactions between ZoneAlarm with a change my school made to its network. That problem is solved, but I'm still getting BSODs.
 

·
Registered
Joined
·
60 Posts
Discussion Starter #13
Sorry it too me so long to respond. I tried to access the site, and I was getting "Server not found" messages.
Like I (kinda) said, I already set it up so that I have the school recommended anti-virus (AVG) and firewall (none).
I am still getting BSODs though. I just got one today in fact.
 

·
Administrator, Manager, Microsoft Support, Acting
Joined
·
34,380 Posts
Hi -

The bugcheck on the 2 mini kernel dumps -

0xf4 (0x3,,,) = process critical to XP suddenly terminated

The Microsoft MSDL SYM site used to obtain symbol files to identify Microsoft OS modules is unable to ID the NT Kernel in your Windows system. I don't know the reason for this at this time.

Code:
[font=lucida console]
nt       ntoskrnl.exe Tue [color=red]Dec 08[/color] 13:43:44 [color=red]2009[/color] (4B1E9E60) 
[/font]
These are the only XP OS drivers in the dumps that have been updated since 13 April 2008 = initial timestamp for XP SP3 OS drivers. Some have SYM errors (see end of post) -
Code:
[font=lucida console]  
tcpip.sys    Fri Jun 20 07:51:09 2008 (485B99AD) - network
afd.sys      Thu Aug 14 06:04:35 2008 (48A40333) - WinSock
KSecDD.sys   Wed Jun 24 07:18:40 2009 (4A420B90) - Kernel Security Support Provider Interface
win32k.sys   Fri Aug 14 09:21:11 2009 (4A8564C7) - Multi-User Win32 Driver
HTTP.sys     Tue Oct 20 12:20:15 2009 (4ADDE33F) - network
ntoskrnl.exe Tue Dec 08 13:43:44 2009 (4B1E9E60) - NT Kernel
srv.sys      Thu Dec 31 11:50:02 2009 (4B3CD63A) - network
[/font]
Run the System File Checker/ Repair utility (you will need XP SP3 slipstreamed OS CD) -
START | Run | cmd | type/ paste -
Code:
[font=lucida console]sfc /scannow[/font]
Upon completion re-boot to allow files in use to be repaired.

SFC general info --> http://support.microsoft.com/kb/936212
SFC & the CBS log --> http://support.microsoft.com/kb/928228

Validate your Windows OS installation at the Microsoft Genuine Advantage site.

WGA --> www.microsoft.com/genuine

Check for Windows Updates --> www.update.microsoft.com

If the above steps do not remedy the problem, I would suggest that you contact Microsoft Corporation directly an put a ticket in -

http://support.microsoft.com/ph/14019#tab0

Regards. . .

jcgriff2

.

ntoskrnl.exe SYM error info - ( kd> !sym noisy )
Code:
[font=lucida console] 
1: kd> !sym noisy
noisy mode - symbol prompts on
1: kd> .reload
SYMSRV:  C:\symbols\ntoskrnl.exe\4B1E9E6020d000\ntoskrnl.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/4B1E9E6020d000/ntoskrnl.exe not found
SYMSRV:  C:\symbols\ntkrnlup.exe\4B1E9E6020d000\ntkrnlup.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrnlup.exe/4B1E9E6020d000/ntkrnlup.exe not found
SYMSRV:  C:\symbols\ntkrnlpa.exe\4B1E9E6020d000\ntkrnlpa.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/4B1E9E6020d000/ntkrnlpa.exe not found
SYMSRV:  C:\symbols\ntkrnlmp.exe\4B1E9E6020d000\ntkrnlmp.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/4B1E9E6020d000/ntkrnlmp.exe not found
SYMSRV:  C:\symbols\ntkrpamp.exe\4B1E9E6020d000\ntkrpamp.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/4B1E9E6020d000/ntkrpamp.exe not found
DBGENG:  ntoskrnl.exe - Image mapping disallowed by non-local path.
Unable to load image ntoskrnl.exe, Win32 error 0n2
DBGENG:  ntoskrnl.exe - Partial symbol image load missing image info
DBGHELP: No header for ntoskrnl.exe.  Searching for dbg file
DBGHELP: .\ntoskrnl.dbg - file not found
DBGHELP: .\exe\ntoskrnl.dbg - path not found
DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
DBGHELP: ntoskrnl.exe missing debug info.  Searching for pdb anyway
DBGHELP: Can't use symbol server for ntoskrnl.pdb - no header information available
DBGHELP: ntoskrnl.pdb - file not found
[color=red]*** WARNING: Unable to verify timestamp for[/color] [color=#000066] ntoskrnl.exe[/color][color=red]
*** ERROR: Module load completed but symbols could not be loaded for[/color] [color=#000066] ntoskrnl.exe[/color]
DBGHELP: nt - no symbols loaded
Loading Kernel Symbols
.
SYMSRV:  C:\symbols\halaacpi.dll\4802517F20d00\halaacpi.dll not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/halaacpi.dll/4802517F20d00/halaacpi.dll not found
SYMSRV:  C:\symbols\halacpi.dll\4802517F20d00\halacpi.dll not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/halacpi.dll/4802517F20d00/halacpi.dll not found
SYMSRV:  C:\symbols\halapic.dll\4802517F20d00\halapic.dll not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/halapic.dll/4802517F20d00/halapic.dll not found
DBGHELP: C:\symbols\halmacpi.dll\4802517F20d00\halmacpi.dll - OK
DBGENG:  C:\symbols\halmacpi.dll\4802517F20d00\halmacpi.dll - Mapped image memory
.
DBGHELP: C:\symbols\kdcom.dll\3B7D83461b80\kdcom.dll - OK
DBGENG:  C:\symbols\kdcom.dll\3B7D83461b80\kdcom.dll - Mapped image memory
.............................................................
................................................................

Loading User Symbols
Loading unloaded module list................[/font]

ntoskrnl.exe -
Code:
[font=lucida console]  
1: kd> lmvm [color=red]nt[/color]
start    end        module name
804d7000 806e4000   nt       T (no symbols)           
    Loaded symbol image file: ntoskrnl.exe
    Image path: ntoskrnl.exe
    Image name: ntoskrnl.exe
    Timestamp:        Tue [color=red]Dec 08[/color] 13:43:44 [color=red]2009[/color] (4B1E9E60)
    CheckSum:         001F9C7F
    ImageSize:        0020D000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4


1: kd> .reload
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................

Loading User Symbols
Loading unloaded module list
................[/font]

srv.sys
Code:
[font=lucida console]  
1: kd> !sym noisy
noisy mode - symbol prompts on
1: kd> .reload srv.sys
1: kd> lmvm srv
start    end        module name
SYMSRV:  C:\symbols\srv.sys\4B3CD63A56600\[color=red]srv.sys not found[/color]
SYMSRV:  http://msdl.microsoft.com/download/symbols/srv.sys/4B3CD63A56600/srv.sys not found
DBGENG:  srv.sys - Image mapping disallowed by non-local path.
ac982000 ac9d8600   srv        (deferred)             
    Image path: srv.sys
    Image name: srv.sys
    Timestamp:        Thu Dec 31 11:50:02 2009 (4B3CD63A)
    CheckSum:         0005D3AD
    ImageSize:        00056600
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
[/font]

http.sys
Code:
[font=lucida console] 
1: kd> .reload http.sys
1: kd> lmvm http
start    end        module name
SYMSRV:  C:\symbols\HTTP.sys\4ADDE33F40e00\[color=red]HTTP.sys not found[/color]
SYMSRV:  http://msdl.microsoft.com/download/symbols/HTTP.sys/4ADDE33F40e00/HTTP.sys not found
DBGENG:  HTTP.sys - Image mapping disallowed by non-local path.
ac509000 ac549e00   HTTP       (deferred)             
    Image path: HTTP.sys
    Image name: HTTP.sys
    Timestamp:        Tue Oct 20 12:20:15 2009 (4ADDE33F)
    CheckSum:         0005087D
    ImageSize:        00040E00
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4[/font]


win32k.sys
Code:
[font=lucida console] 
1: kd> lmvm[color=red]win32k[/color]
start    end        module name
bf800000 bf9c3d00   win32k     (deferred)             
    Mapped memory image file: C:\symbols\win32k.sys\4A8564C71c3d00\win32k.sys
    Image path: win32k.sys
    Image name: win32k.sys
    Timestamp:        Fri Aug 14 09:21:11 2009 (4A8564C7)
    CheckSum:         001D3144
    ImageSize:        001C3D00
    File version:     5.1.2600.5863
    Product version:  5.1.2600.5863
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0405.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      [color=red]Operační systém Microsoft® Windows®[/color]
    InternalName:     win32k.sys
    OriginalFilename: win32k.sys
    ProductVersion:   5.1.2600.5863
    FileVersion:      5.1.2600.5863 (xpsp_sp3_gdr.090814-1258)
    FileDescription:  Multi-User Win32 Driver
    LegalCopyright:   © Microsoft Corporation. [color=red]Všechna práva vyhrazena.p[/color][/font]

afd.sys
Code:
[font=lucida console]  
1: kd> !sym noisy
noisy mode - symbol prompts on
1: kd> .reload afd.sys
1: kd> lmvm [color=red]afd[/color]
start    end        module name
DBGHELP: C:\symbols\afd.sys\48A4033321d00\afd.sys - OK
DBGENG:  C:\symbols\afd.sys\48A4033321d00\afd.sys - Mapped image memory
af4bc000 af4ddd00   afd        (deferred)             
    Mapped memory image file: C:\symbols\afd.sys\48A4033321d00\afd.sys
    Image path: afd.sys
    Image name: afd.sys
    Timestamp:        Thu Aug 14 06:04:35 2008 (48A40333)
    CheckSum:         000292E0
    ImageSize:        00021D00
    File version:     5.1.2600.5657
    Product version:  5.1.2600.5657
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     afd.sys
    OriginalFilename: afd.sys
    ProductVersion:   5.1.2600.5657
    FileVersion:      5.1.2600.5657 (xpsp_sp3_gdr.080814-1236)
    FileDescription:  Ancillary Function Driver for WinSock
    LegalCopyright:   © Microsoft Corporation. All rights reserved.[/font]

tcpip.sys - note AVG..?
Code:
[font=lucida console] 
1: kd> lmvm [color=red]tcpip[/color]
start    end        module name
SYMSRV:  C:\symbols\[COLOR=Blue]avgtdix.sys[/COLOR]\4B8E9AD039a00\avgtdix.sys not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/avgtdix.sys/4B8E9AD039a00/avgtdix.sys not found
DBGENG:  avgtdix.sys - Image mapping disallowed by non-local path.
DBGHELP: C:\symbols\tcpip.sys\485B99AD58480\[color=red]tcpip.sys - OK[/color]
DBGENG:  C:\symbols\tcpip.sys\485B99AD58480\tcpip.sys - Mapped image memory
af566000 af5be480   tcpip      (deferred)             
    Mapped memory image file: C:\symbols\tcpip.sys\485B99AD58480\tcpip.sys
    Image path: tcpip.sys
    Image name: tcpip.sys
    Timestamp:        Fri Jun 20 07:51:09 2008 (485B99AD)
    CheckSum:         0005ED6B
    ImageSize:        00058480
    File version:     5.1.2600.5625
    Product version:  5.1.2600.5625
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     tcpip.sys
    OriginalFilename: tcpip.sys
    ProductVersion:   5.1.2600.5625
    FileVersion:      5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)
    FileDescription:  TCP/IP Protocol Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.[/font]
Code:
[font=lucida console] 
1: kd> lmvm [color=red]ksecdd[/color]
start    end        module name
b9ea4000 b9ebab00   KSecDD     (deferred)             
    Mapped memory image file: C:\symbols\KSecDD.sys\4A420B9016b00\KSecDD.sys
    Image path: KSecDD.sys
    Image name: KSecDD.sys
    Timestamp:        Wed Jun 24 07:18:40 2009 (4A420B90)
    CheckSum:         00020E8D
    ImageSize:        00016B00
    File version:     5.1.2600.5834
    Product version:  5.1.2600.5834
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ksecdd.sys
    OriginalFilename: ksecdd.sys
    ProductVersion:   5.1.2600.5834
    FileVersion:      5.1.2600.5834 (xpsp_sp3_gdr.090624-1305)
    FileDescription:  Kernel Security Support Provider Interface
    LegalCopyright:   © Microsoft Corporation. All rights reserved.[/font]

`

`
Windows XP Kernel Version 2600 SP3 - Bugcheck = 0xf4 (0x3,,,)
Code:
[font=lucida console] 
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert7\AppData\Local\Temp\SALDF6.tmp\Mini032810-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols


Executable search path is: 
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Mar 29 00:39:26.343 2010 (GMT-4)
System Uptime: 0 days 3:40:47.027
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................

Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 8a1c36d8, 8a1c384c, 805d297e}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
Probably caused by : csrss.exe

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8a1c36d8, Terminating object
Arg3: 8a1c384c, Process image file name
Arg4: 805d297e, Explanatory message (ascii)

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************

ADDITIONAL_DEBUG_TEXT:  
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.

MODULE_NAME: csrss

FAULTING_MODULE: 00000000 

DEBUG_FLR_IMAGE_TIMESTAMP:  0

PROCESS_OBJECT: 8a1c36d8

IMAGE_NAME:  csrss.exe

CUSTOMER_CRASH_COUNT:  2

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xF4

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
acea0520 805d1ac7 000000f4 00000003 8a1c36d8 nt+0x22f43
acea0544 805d2a29 805d297e 8a1c36d8 8a1c384c nt+0xfaac7
acea0574 8054163c 8a1c3920 c0000006 acea09b0 nt+0xfba29
acea0584 80501161 badb0d00 acea05fc de9a0178 nt+0x6a63c
acea09b0 805028d9 acea09d8 00000000 acea0d64 nt+0x2a161
acea0d34 80544f1f 010bf28c 010bf2ac 00000000 nt+0x2b8d9
acea0d50 8054163c 010bf28c 010bf2ac 00000000 nt+0x6df1f
acea0d64 7c90e514 badb0d00 010bf280 00000000 nt+0x6a63c
acea0d68 badb0d00 010bf280 00000000 00000000 0x7c90e514
acea0d6c 010bf280 00000000 00000000 00000000 0xbadb0d00
acea0d70 00000000 00000000 00000000 00000000 0x10bf280


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

BUCKET_ID:  WRONG_SYMBOLS

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8a1c36d8, Terminating object
Arg3: 8a1c384c, Process image file name
Arg4: 805d297e, Explanatory message (ascii)

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

unable to get nt!KiCurrentEtwBufferOffset
unable to get nt!KiCurrentEtwBufferBase
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************

ADDITIONAL_DEBUG_TEXT:  
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.

MODULE_NAME: csrss

FAULTING_MODULE: 00000000 

DEBUG_FLR_IMAGE_TIMESTAMP:  0

PROCESS_OBJECT: 8a1c36d8

IMAGE_NAME:  csrss.exe

CUSTOMER_CRASH_COUNT:  2

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xF4

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
acea0520 805d1ac7 000000f4 00000003 8a1c36d8 nt+0x22f43
acea0544 805d2a29 805d297e 8a1c36d8 8a1c384c nt+0xfaac7
acea0574 8054163c 8a1c3920 c0000006 acea09b0 nt+0xfba29
acea0584 80501161 badb0d00 acea05fc de9a0178 nt+0x6a63c
acea09b0 805028d9 acea09d8 00000000 acea0d64 nt+0x2a161
acea0d34 80544f1f 010bf28c 010bf2ac 00000000 nt+0x2b8d9
acea0d50 8054163c 010bf28c 010bf2ac 00000000 nt+0x6df1f
acea0d64 7c90e514 badb0d00 010bf280 00000000 nt+0x6a63c
acea0d68 badb0d00 010bf280 00000000 00000000 0x7c90e514
acea0d6c 010bf280 00000000 00000000 00000000 0xbadb0d00
acea0d70 00000000 00000000 00000000 00000000 0x10bf280


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

BUCKET_ID:  WRONG_SYMBOLS

Followup: MachineOwner
---------

1: kd> k
ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
acea0520 805d1ac7 nt+0x22f43
acea0544 805d2a29 nt+0xfaac7
acea0574 8054163c nt+0xfba29
acea0584 80501161 nt+0x6a63c
acea09b0 805028d9 nt+0x2a161
acea0d34 80544f1f nt+0x2b8d9
acea0d50 8054163c nt+0x6df1f
acea0d64 7c90e514 nt+0x6a63c
acea0d68 badb0d00 0x7c90e514
acea0d6c 010bf280 0xbadb0d00
acea0d70 00000000 0x10bf280
1: kd> lmnt
start    end        module name
804d7000 806e4000   nt       ntoskrnl.exe Tue Dec 08 13:43:44 2009 (4B1E9E60)
806e4000 80704d00   hal      hal.dll      Sun Apr 13 14:31:27 2008 (4802517F)
ac509000 ac549e00   HTTP     HTTP.sys     Tue Oct 20 12:20:15 2009 (4ADDE33F)
ac982000 ac9d8600   srv      srv.sys      Thu Dec 31 11:50:02 2009 (4B3CD63A)
acb01000 acb04180   mdmxsdk  mdmxsdk.sys  Wed Feb 15 13:57:47 2006 (43F379AB)
acb19000 acb45180   mrxdav   mrxdav.sys   Sun Apr 13 14:32:42 2008 (480251CA)
acc5c000 acc70480   wdmaud   wdmaud.sys   Sun Apr 13 15:17:18 2008 (48025C3E)
acd09000 acd17d80   sysaudio sysaudio.sys Sun Apr 13 15:15:55 2008 (48025BEB)
ad189000 ad18c900   ndisuio  ndisuio.sys  Sun Apr 13 14:55:57 2008 (4802573D)
af389000 af3a0900   dump_atapi dump_atapi.sys Sun Apr 13 14:40:29 2008 (4802539D)
af3a1000 af3c4180   Fastfat  Fastfat.SYS  Sun Apr 13 15:14:28 2008 (48025B94)
af3ed000 af420280   avgldx86 avgldx86.sys Wed Feb 10 22:51:19 2010 (4B737EB7)
af421000 af490300   mrxsmb   mrxsmb.sys   Fri Dec 04 13:22:20 2009 (4B19535C)
af491000 af4bbe80   rdbss    rdbss.sys    Sun Apr 13 15:28:38 2008 (48025EE6)
af4bc000 af4ddd00   afd      afd.sys      Thu Aug 14 06:04:35 2008 (48A40333)
af4de000 af505c00   netbt    netbt.sys    Sun Apr 13 15:20:59 2008 (48025D1B)
af506000 af52b500   ipnat    ipnat.sys    Sun Apr 13 14:57:10 2008 (48025786)
af52c000 af565a00   avgtdix  avgtdix.sys  Wed Mar 03 12:22:24 2010 (4B8E9AD0)
af566000 af5be480   tcpip    tcpip.sys    Fri Jun 20 07:51:09 2008 (485B99AD)
af5bf000 af5d1600   ipsec    ipsec.sys    Sun Apr 13 15:19:42 2008 (48025CCE)
b0796000 b0798900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
b07a2000 b0853b00   HSF_CNXT HSF_CNXT.sys Mon Jun 12 19:59:43 2006 (448DFFEF)
b0854000 b0945d80   HSF_DPV  HSF_DPV.sys  Mon Jun 12 20:00:39 2006 (448E0027)
b0946000 b0978e00   HSFHWAZL HSFHWAZL.sys Mon Jun 12 19:59:50 2006 (448DFFF6)
b0979000 b0f45000   RtkHDAud RtkHDAud.sys Mon Feb 22 04:28:34 2010 (4B824E42)
b91d8000 b91e7900   Cdfs     Cdfs.SYS     Sun Apr 13 15:14:21 2008 (48025B8D)
b91f8000 b921ba80   portcls  portcls.sys  Sun Apr 13 15:19:40 2008 (48025CCC)
b921c000 b9269ca0   btaudio  btaudio.sys  Tue Jan 17 13:21:49 2006 (43CD35BD)
b92ae000 b930bf00   update   update.sys   Sun Apr 13 14:39:46 2008 (48025372)
b930c000 b933be80   rdpdr    rdpdr.sys    Sun Apr 13 14:32:50 2008 (480251D2)
b933c000 b934ce00   psched   psched.sys   Sun Apr 13 14:56:36 2008 (48025764)
b934d000 b9363580   ndiswan  ndiswan.sys  Sun Apr 13 15:20:41 2008 (48025D09)
b9364000 b942f800   btkrnl   btkrnl.sys   Tue Jan 17 13:18:20 2006 (43CD34EC)
b9430000 b9442400   ESM7SK   ESM7SK.sys   Wed May 24 22:19:43 2006 (4475143F)
b9443000 b9456580   sdbus    sdbus.sys    Sun Apr 13 14:36:44 2008 (480252BC)
b9457000 b94dcc40   ar5211   ar5211.sys   Thu Jul 26 16:19:22 2007 (46A901CA)
b94dd000 b94f1800   Rtnicxp  Rtnicxp.sys  Fri Jun 16 07:56:38 2006 (44929C76)
b94f2000 b95210a0   SynTP    SynTP.sys    Fri Mar 03 15:52:31 2006 (4408AC8F)
b9522000 b954a000   HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
b954a000 b956c700   ks       ks.sys       Sun Apr 13 15:16:34 2008 (48025C12)
b956d000 b9590200   USBPORT  USBPORT.SYS  Sun Apr 13 14:45:34 2008 (480254CE)
b9591000 b95a4f00   VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
b95a5000 b972c000   ati2mtag ati2mtag.sys Thu Apr 27 09:46:49 2006 (4450CB49)
b9da0000 b9da3c80   mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
b9dd0000 b9de9b80   Mup      Mup.sys      Sun Apr 13 15:17:05 2008 (48025C31)
b9dea000 b9e16980   NDIS     NDIS.sys     Sun Apr 13 15:20:35 2008 (48025D03)
b9e17000 b9ea3600   Ntfs     Ntfs.sys     Sun Apr 13 15:15:49 2008 (48025BE5)
b9ea4000 b9ebab00   KSecDD   KSecDD.sys   Wed Jun 24 07:18:40 2009 (4A420B90)
b9ebb000 b9eccf00   sr       sr.sys       Sun Apr 13 14:36:50 2008 (480252C2)
b9ecd000 b9eecb00   fltmgr   fltmgr.sys   Sun Apr 13 14:32:58 2008 (480251DA)
b9eed000 b9f04900   atapi    atapi.sys    Sun Apr 13 14:40:29 2008 (4802539D)
b9f05000 b9f2a700   dmio     dmio.sys     Sun Apr 13 14:44:45 2008 (4802549D)
b9f2b000 b9f49880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
b9f4a000 b9f67580   pcmcia   pcmcia.sys   Sun Apr 13 14:36:41 2008 (480252B9)
b9f68000 b9f78a80   pci      pci.sys      Sun Apr 13 14:36:43 2008 (480252BB)
b9f79000 b9fa6d80   ACPI     ACPI.sys     Sun Apr 13 14:36:33 2008 (480252B1)
ba0a8000 ba0b1180   isapnp   isapnp.sys   Sun Apr 13 14:36:40 2008 (480252B8)
ba0b8000 ba0c2580   MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
ba0c8000 ba0d4c80   VolSnap  VolSnap.sys  Sun Apr 13 14:41:00 2008 (480253BC)
ba0d8000 ba0e0e00   disk     disk.sys     Sun Apr 13 14:40:46 2008 (480253AE)
ba0e8000 ba0f4180   CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
ba0f8000 ba106100   Lbd      Lbd.sys      Fri Aug 28 05:02:18 2009 (4A979D1A)
ba108000 ba113d00   raspptp  raspptp.sys  Sun Apr 13 15:19:47 2008 (48025CD3)
ba118000 ba120900   msgpc    msgpc.sys    Sun Apr 13 14:56:32 2008 (48025760)
ba128000 ba131f00   termdd   termdd.sys   Sun Apr 13 14:38:36 2008 (4802532C)
ba138000 ba146b00   drmk     drmk.sys     Sun Apr 13 14:45:12 2008 (480254B8)
ba148000 ba151e80   NDProxy  NDProxy.SYS  Sun Apr 13 14:57:28 2008 (48025798)
ba178000 ba186880   usbhub   usbhub.sys   Sun Apr 13 14:45:36 2008 (480254D0)
ba198000 ba1a0700   wanarp   wanarp.sys   Sun Apr 13 14:57:20 2008 (48025790)
ba1a8000 ba1b0780   netbios  netbios.sys  Sun Apr 13 14:56:01 2008 (48025741)
ba1c8000 ba1d2e00   Fips     Fips.SYS     Sun Apr 13 14:33:27 2008 (480251F7)
ba298000 ba2a6000   AmdK8    AmdK8.sys    Wed May 10 14:26:59 2006 (44623073)
ba2a8000 ba2b2480   Imapi    Imapi.SYS    Sun Apr 13 14:40:57 2008 (480253B9)
ba2b8000 ba2c7600   cdrom    cdrom.sys    Sun Apr 13 14:40:45 2008 (480253AD)
ba2c8000 ba2d6100   redbook  redbook.sys  Sun Apr 13 14:40:27 2008 (4802539B)
ba2d8000 ba2e4d00   i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
ba2e8000 ba2f6e80   EMS7SK   EMS7SK.sys   Wed May 24 22:19:39 2006 (4475143B)
ba2f8000 ba301c80   ESD7SK   ESD7SK.sys   Wed May 24 22:19:47 2006 (44751443)
ba308000 ba314880   rasl2tp  rasl2tp.sys  Sun Apr 13 15:19:43 2008 (48025CCF)
ba318000 ba322200   raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
ba328000 ba32e180   PCIIDEX  PCIIDEX.SYS  Sun Apr 13 14:40:29 2008 (4802539D)
ba330000 ba334d00   PartMgr  PartMgr.sys  Sun Apr 13 14:40:48 2008 (480253B0)
ba3e8000 ba3ed7a0   btserial btserial.sys Tue Jan 17 13:19:46 2006 (43CD3542)
ba408000 ba40c300   usbohci  usbohci.sys  Sun Apr 13 14:45:34 2008 (480254CE)
ba410000 ba417600   usbehci  usbehci.sys  Sun Apr 13 14:45:34 2008 (480254CE)
ba418000 ba41d280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
ba420000 ba426000   kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
ba428000 ba42da00   mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
ba430000 ba434a80   TDI      TDI.SYS      Sun Apr 13 15:00:04 2008 (48025834)
ba438000 ba43c580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
ba440000 ba444080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
ba448000 ba44f580   Modem    Modem.SYS    Sun Apr 13 15:00:18 2008 (48025842)
ba468000 ba46d200   vga      vga.sys      Sun Apr 13 14:44:40 2008 (48025498)
ba470000 ba474a80   Msfs     Msfs.SYS     Sun Apr 13 14:32:38 2008 (480251C6)
ba478000 ba47f880   Npfs     Npfs.SYS     Sun Apr 13 14:32:38 2008 (480251C6)
ba480000 ba485940   avgmfx86 avgmfx86.sys Wed Feb 17 17:38:39 2010 (4B7C6FEF)
ba490000 ba494500   watchdog watchdog.sys Sun Apr 13 14:44:59 2008 (480254AB)
ba4b8000 ba4bb000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
ba4bc000 ba4be800   compbatt compbatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba4c0000 ba4c3780   BATTC    BATTC.SYS    Sun Apr 13 14:36:32 2008 (480252B0)
ba4c4000 ba4c6d80   ACPIEC   ACPIEC.sys   Fri Aug 17 16:57:55 2001 (3B7D8553)
ba55c000 ba55e280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
ba580000 ba582280   wmiacpi  wmiacpi.sys  Sun Apr 13 14:36:37 2008 (480252B5)
ba588000 ba58b680   CmBatt   CmBatt.sys   Sun Apr 13 14:36:36 2008 (480252B4)
ba58c000 ba58e780   ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
ba5a8000 ba5a9b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)
ba5ac000 ba5ad700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)
ba5ce000 ba5cf280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
ba5d0000 ba5d1100   swenum   swenum.sys   Sun Apr 13 14:39:52 2008 (48025378)
ba5d4000 ba5d5f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
ba5d6000 ba5d7080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba5d8000 ba5d9080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
ba5da000 ba5db080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
ba5e8000 ba5e9100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
ba670000 ba670d00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)
ba671000 ba671d80   OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
ba703000 ba703d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
ba737000 ba737c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
ba7ec000 ba7ecb80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)
bf000000 bf011600   dxg      dxg.sys      Sun Apr 13 14:38:27 2008 (48025323)
bf012000 bf055000   ati2dvag ati2dvag.dll Thu Apr 27 09:47:07 2006 (4450CB5B)
bf055000 bf09a000   ati2cqag ati2cqag.dll Thu Apr 27 09:05:56 2006 (4450C1B4)
bf09a000 bf0d0000   atikvmag atikvmag.dll Thu Apr 27 09:12:02 2006 (4450C322)
bf0d0000 bf3618a0   ati3duag ati3duag.dll Thu Apr 27 09:31:29 2006 (4450C7B1)
bf362000 bf4b9c00   ativvaxx ativvaxx.dll Thu Apr 27 09:25:14 2006 (4450C63A)
bf800000 bf9c3d00   win32k   win32k.sys   Fri Aug 14 09:21:11 2009 (4A8564C7)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Sun Apr 13 20:09:55 2008 (4802A0D3)

Unloaded modules:
ac236000 ac261000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ac236000 ac261000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ac2d6000 ac301000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acb6e000 acb99000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acc39000 acc5c000   aec.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba7bb000 ba7bc000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acce9000 accf6000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
accf9000 acd07000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba642000 ba644000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acc99000 acca9000   Serial.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acadd000 acaf1000   Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba1b8000 ba1c1000   processr.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba460000 ba465000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba558000 ba55b000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba458000 ba45d000   Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba450000 ba457000   Fdc.SYS 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
1: kd> lmntsm
start    end        module name
b9f79000 b9fa6d80   ACPI     ACPI.sys     Sun Apr 13 14:36:33 2008 (480252B1)
ba4c4000 ba4c6d80   ACPIEC   ACPIEC.sys   Fri Aug 17 16:57:55 2001 (3B7D8553)
af4bc000 af4ddd00   afd      afd.sys      Thu Aug 14 06:04:35 2008 (48A40333)
ba298000 ba2a6000   AmdK8    AmdK8.sys    Wed May 10 14:26:59 2006 (44623073)
b9457000 b94dcc40   ar5211   ar5211.sys   Thu Jul 26 16:19:22 2007 (46A901CA)
b9eed000 b9f04900   atapi    atapi.sys    Sun Apr 13 14:40:29 2008 (4802539D)
bf055000 bf09a000   ati2cqag ati2cqag.dll Thu Apr 27 09:05:56 2006 (4450C1B4)
bf012000 bf055000   ati2dvag ati2dvag.dll Thu Apr 27 09:47:07 2006 (4450CB5B)
b95a5000 b972c000   ati2mtag ati2mtag.sys Thu Apr 27 09:46:49 2006 (4450CB49)
bf0d0000 bf3618a0   ati3duag ati3duag.dll Thu Apr 27 09:31:29 2006 (4450C7B1)
bf09a000 bf0d0000   atikvmag atikvmag.dll Thu Apr 27 09:12:02 2006 (4450C322)
bf362000 bf4b9c00   ativvaxx ativvaxx.dll Thu Apr 27 09:25:14 2006 (4450C63A)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Sun Apr 13 20:09:55 2008 (4802A0D3)
ba737000 ba737c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
af3ed000 af420280   avgldx86 avgldx86.sys Wed Feb 10 22:51:19 2010 (4B737EB7)
ba480000 ba485940   avgmfx86 avgmfx86.sys Wed Feb 17 17:38:39 2010 (4B7C6FEF)
af52c000 af565a00   avgtdix  avgtdix.sys  Wed Mar 03 12:22:24 2010 (4B8E9AD0)
ba4c0000 ba4c3780   BATTC    BATTC.SYS    Sun Apr 13 14:36:32 2008 (480252B0)
ba5d6000 ba5d7080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba4b8000 ba4bb000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
b921c000 b9269ca0   btaudio  btaudio.sys  Tue Jan 17 13:21:49 2006 (43CD35BD)
b9364000 b942f800   btkrnl   btkrnl.sys   Tue Jan 17 13:18:20 2006 (43CD34EC)
ba3e8000 ba3ed7a0   btserial btserial.sys Tue Jan 17 13:19:46 2006 (43CD3542)
b91d8000 b91e7900   Cdfs     Cdfs.SYS     Sun Apr 13 15:14:21 2008 (48025B8D)
ba2b8000 ba2c7600   cdrom    cdrom.sys    Sun Apr 13 14:40:45 2008 (480253AD)
ba0e8000 ba0f4180   CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
ba588000 ba58b680   CmBatt   CmBatt.sys   Sun Apr 13 14:36:36 2008 (480252B4)
ba4bc000 ba4be800   compbatt compbatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba0d8000 ba0e0e00   disk     disk.sys     Sun Apr 13 14:40:46 2008 (480253AE)
b9f05000 b9f2a700   dmio     dmio.sys     Sun Apr 13 14:44:45 2008 (4802549D)
ba5ac000 ba5ad700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)
ba138000 ba146b00   drmk     drmk.sys     Sun Apr 13 14:45:12 2008 (480254B8)
af389000 af3a0900   dump_atapi dump_atapi.sys Sun Apr 13 14:40:29 2008 (4802539D)
ba5e8000 ba5e9100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
b0796000 b0798900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
bf000000 bf011600   dxg      dxg.sys      Sun Apr 13 14:38:27 2008 (48025323)
ba703000 ba703d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
ba2e8000 ba2f6e80   EMS7SK   EMS7SK.sys   Wed May 24 22:19:39 2006 (4475143B)
ba2f8000 ba301c80   ESD7SK   ESD7SK.sys   Wed May 24 22:19:47 2006 (44751443)
b9430000 b9442400   ESM7SK   ESM7SK.sys   Wed May 24 22:19:43 2006 (4475143F)
af3a1000 af3c4180   Fastfat  Fastfat.SYS  Sun Apr 13 15:14:28 2008 (48025B94)
ba1c8000 ba1d2e00   Fips     Fips.SYS     Sun Apr 13 14:33:27 2008 (480251F7)
b9ecd000 b9eecb00   fltmgr   fltmgr.sys   Sun Apr 13 14:32:58 2008 (480251DA)
ba5d4000 ba5d5f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
b9f2b000 b9f49880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
ba418000 ba41d280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
806e4000 80704d00   hal      hal.dll      Sun Apr 13 14:31:27 2008 (4802517F)
b9522000 b954a000   HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
b07a2000 b0853b00   HSF_CNXT HSF_CNXT.sys Mon Jun 12 19:59:43 2006 (448DFFEF)
b0854000 b0945d80   HSF_DPV  HSF_DPV.sys  Mon Jun 12 20:00:39 2006 (448E0027)
b0946000 b0978e00   HSFHWAZL HSFHWAZL.sys Mon Jun 12 19:59:50 2006 (448DFFF6)
ac509000 ac549e00   HTTP     HTTP.sys     Tue Oct 20 12:20:15 2009 (4ADDE33F)
ba2d8000 ba2e4d00   i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
ba2a8000 ba2b2480   Imapi    Imapi.SYS    Sun Apr 13 14:40:57 2008 (480253B9)
af506000 af52b500   ipnat    ipnat.sys    Sun Apr 13 14:57:10 2008 (48025786)
af5bf000 af5d1600   ipsec    ipsec.sys    Sun Apr 13 15:19:42 2008 (48025CCE)
ba0a8000 ba0b1180   isapnp   isapnp.sys   Sun Apr 13 14:36:40 2008 (480252B8)
ba420000 ba426000   kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
ba5a8000 ba5a9b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
b954a000 b956c700   ks       ks.sys       Sun Apr 13 15:16:34 2008 (48025C12)
b9ea4000 b9ebab00   KSecDD   KSecDD.sys   Wed Jun 24 07:18:40 2009 (4A420B90)
ba0f8000 ba106100   Lbd      Lbd.sys      Fri Aug 28 05:02:18 2009 (4A979D1A)
acb01000 acb04180   mdmxsdk  mdmxsdk.sys  Wed Feb 15 13:57:47 2006 (43F379AB)
ba5d8000 ba5d9080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
ba448000 ba44f580   Modem    Modem.SYS    Sun Apr 13 15:00:18 2008 (48025842)
ba428000 ba42da00   mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
ba0b8000 ba0c2580   MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
acb19000 acb45180   mrxdav   mrxdav.sys   Sun Apr 13 14:32:42 2008 (480251CA)
af421000 af490300   mrxsmb   mrxsmb.sys   Fri Dec 04 13:22:20 2009 (4B19535C)
ba470000 ba474a80   Msfs     Msfs.SYS     Sun Apr 13 14:32:38 2008 (480251C6)
ba118000 ba120900   msgpc    msgpc.sys    Sun Apr 13 14:56:32 2008 (48025760)
b9da0000 b9da3c80   mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
b9dd0000 b9de9b80   Mup      Mup.sys      Sun Apr 13 15:17:05 2008 (48025C31)
b9dea000 b9e16980   NDIS     NDIS.sys     Sun Apr 13 15:20:35 2008 (48025D03)
ba58c000 ba58e780   ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
ad189000 ad18c900   ndisuio  ndisuio.sys  Sun Apr 13 14:55:57 2008 (4802573D)
b934d000 b9363580   ndiswan  ndiswan.sys  Sun Apr 13 15:20:41 2008 (48025D09)
ba148000 ba151e80   NDProxy  NDProxy.SYS  Sun Apr 13 14:57:28 2008 (48025798)
ba1a8000 ba1b0780   netbios  netbios.sys  Sun Apr 13 14:56:01 2008 (48025741)
af4de000 af505c00   netbt    netbt.sys    Sun Apr 13 15:20:59 2008 (48025D1B)
ba478000 ba47f880   Npfs     Npfs.SYS     Sun Apr 13 14:32:38 2008 (480251C6)
804d7000 806e4000   nt       ntoskrnl.exe Tue Dec 08 13:43:44 2009 (4B1E9E60)
b9e17000 b9ea3600   Ntfs     Ntfs.sys     Sun Apr 13 15:15:49 2008 (48025BE5)
ba7ec000 ba7ecb80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)
ba671000 ba671d80   OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
ba330000 ba334d00   PartMgr  PartMgr.sys  Sun Apr 13 14:40:48 2008 (480253B0)
b9f68000 b9f78a80   pci      pci.sys      Sun Apr 13 14:36:43 2008 (480252BB)
ba670000 ba670d00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)
ba328000 ba32e180   PCIIDEX  PCIIDEX.SYS  Sun Apr 13 14:40:29 2008 (4802539D)
b9f4a000 b9f67580   pcmcia   pcmcia.sys   Sun Apr 13 14:36:41 2008 (480252B9)
b91f8000 b921ba80   portcls  portcls.sys  Sun Apr 13 15:19:40 2008 (48025CCC)
b933c000 b934ce00   psched   psched.sys   Sun Apr 13 14:56:36 2008 (48025764)
ba438000 ba43c580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
ba55c000 ba55e280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
ba308000 ba314880   rasl2tp  rasl2tp.sys  Sun Apr 13 15:19:43 2008 (48025CCF)
ba318000 ba322200   raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
ba108000 ba113d00   raspptp  raspptp.sys  Sun Apr 13 15:19:47 2008 (48025CD3)
ba440000 ba444080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
af491000 af4bbe80   rdbss    rdbss.sys    Sun Apr 13 15:28:38 2008 (48025EE6)
ba5da000 ba5db080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
b930c000 b933be80   rdpdr    rdpdr.sys    Sun Apr 13 14:32:50 2008 (480251D2)
ba2c8000 ba2d6100   redbook  redbook.sys  Sun Apr 13 14:40:27 2008 (4802539B)
b0979000 b0f45000   RtkHDAud RtkHDAud.sys Mon Feb 22 04:28:34 2010 (4B824E42)
b94dd000 b94f1800   Rtnicxp  Rtnicxp.sys  Fri Jun 16 07:56:38 2006 (44929C76)
b9443000 b9456580   sdbus    sdbus.sys    Sun Apr 13 14:36:44 2008 (480252BC)
b9ebb000 b9eccf00   sr       sr.sys       Sun Apr 13 14:36:50 2008 (480252C2)
ac982000 ac9d8600   srv      srv.sys      Thu Dec 31 11:50:02 2009 (4B3CD63A)
ba5d0000 ba5d1100   swenum   swenum.sys   Sun Apr 13 14:39:52 2008 (48025378)
b94f2000 b95210a0   SynTP    SynTP.sys    Fri Mar 03 15:52:31 2006 (4408AC8F)
acd09000 acd17d80   sysaudio sysaudio.sys Sun Apr 13 15:15:55 2008 (48025BEB)
af566000 af5be480   tcpip    tcpip.sys    Fri Jun 20 07:51:09 2008 (485B99AD)
ba430000 ba434a80   TDI      TDI.SYS      Sun Apr 13 15:00:04 2008 (48025834)
ba128000 ba131f00   termdd   termdd.sys   Sun Apr 13 14:38:36 2008 (4802532C)
b92ae000 b930bf00   update   update.sys   Sun Apr 13 14:39:46 2008 (48025372)
ba5ce000 ba5cf280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
ba410000 ba417600   usbehci  usbehci.sys  Sun Apr 13 14:45:34 2008 (480254CE)
ba178000 ba186880   usbhub   usbhub.sys   Sun Apr 13 14:45:36 2008 (480254D0)
ba408000 ba40c300   usbohci  usbohci.sys  Sun Apr 13 14:45:34 2008 (480254CE)
b956d000 b9590200   USBPORT  USBPORT.SYS  Sun Apr 13 14:45:34 2008 (480254CE)
ba468000 ba46d200   vga      vga.sys      Sun Apr 13 14:44:40 2008 (48025498)
b9591000 b95a4f00   VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
ba0c8000 ba0d4c80   VolSnap  VolSnap.sys  Sun Apr 13 14:41:00 2008 (480253BC)
ba198000 ba1a0700   wanarp   wanarp.sys   Sun Apr 13 14:57:20 2008 (48025790)
ba490000 ba494500   watchdog watchdog.sys Sun Apr 13 14:44:59 2008 (480254AB)
acc5c000 acc70480   wdmaud   wdmaud.sys   Sun Apr 13 15:17:18 2008 (48025C3E)
bf800000 bf9c3d00   win32k   win32k.sys   Fri Aug 14 09:21:11 2009 (4A8564C7)
ba580000 ba582280   wmiacpi  wmiacpi.sys  Sun Apr 13 14:36:37 2008 (480252B5)
ba5aa000 ba5ab100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

Unloaded modules:
ac236000 ac261000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ac236000 ac261000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ac2d6000 ac301000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acb6e000 acb99000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acc39000 acc5c000   aec.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba7bb000 ba7bc000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acce9000 accf6000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
accf9000 acd07000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba642000 ba644000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acc99000 acca9000   Serial.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
acadd000 acaf1000   Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba1b8000 ba1c1000   processr.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba460000 ba465000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba558000 ba55b000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba458000 ba45d000   Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba450000 ba457000   Fdc.SYS 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
1: kd> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion 
nt fver =  pver =
hal fver =  pver =
HTTP fver =  pver =
srv fver =  pver =
mdmxsdk fver =  pver =
mrxdav fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
wdmaud fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
sysaudio fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
ndisuio fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
dump_atapi fver =  pver =
Fastfat fver =  pver =
avgldx86 fver =  pver =
mrxsmb fver =  pver =
rdbss fver =  pver =
afd fver = 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236) pver = 5.1.2600.5657
netbt fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
ipnat fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
avgtdix fver =  pver =
tcpip fver =  pver =
ipsec fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
Dxapi fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
HSF_CNXT fver =  pver =
HSF_DPV fver =  pver =
HSFHWAZL fver =  pver =
RtkHDAud fver =  pver =
Cdfs fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
portcls fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
btaudio fver =  pver =
update fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
rdpdr fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
psched fver =  pver =
ndiswan fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
btkrnl fver =  pver =
ESM7SK fver =  pver =
sdbus fver = 6.0.4069.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
ar5211 fver =  pver =
Rtnicxp fver =  pver =
SynTP fver =  pver =
HDAudBus fver = 5.10.01.5013 built by: WinDDK pver = 5.10.01.5013
ks fver =  pver =
USBPORT fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
VIDEOPRT fver =  pver =
ati2mtag fver =  pver =
mssmbios fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
Mup fver =  pver =
NDIS fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
Ntfs fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
KSecDD fver = 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305) pver = 5.1.2600.5834
sr fver =  pver =
fltmgr fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
atapi fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
dmio fver =  pver =
ftdisk fver =  pver =
pcmcia fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
pci fver =  pver =
ACPI fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
isapnp fver =  pver =
MountMgr fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
VolSnap fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
disk fver =  pver =
CLASSPNP fver =  pver =
Lbd fver =  pver =
raspptp fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
msgpc fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
termdd fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
drmk fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
NDProxy fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
usbhub fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
wanarp fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
netbios fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
Fips fver =  pver =
AmdK8 fver =  pver =
Imapi fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
cdrom fver =  pver =
redbook fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
i8042prt fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
EMS7SK fver =  pver =
ESD7SK fver =  pver =
rasl2tp fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
raspppoe fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
PCIIDEX fver =  pver =
PartMgr fver =  pver =
btserial fver =  pver =
usbohci fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
usbehci fver = 5.1.2600.5512 (xpsp.080413-2108) pver = 5.1.2600.5512
GEARAspiWDM fver =  pver =
kbdclass fver =  pver =
mouclass fver =  pver =
TDI fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
ptilink fver = 1.10 (XPClient.010817-1148) pver = 5.1.2600.0
raspti fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
Modem fver =  pver =
vga fver =  pver =
Msfs fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
Npfs fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
avgmfx86 fver =  pver =
watchdog fver =  pver =
BOOTVID fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
compbatt fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
BATTC fver =  pver =
ACPIEC fver =  pver =
rasacd fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
wmiacpi fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
CmBatt fver = 5.1.2600.5512 (xpsp.080413-2111) pver = 5.1.2600.5512
ndistapi fver = 5.1.2600.5512 (xpsp.080413-0852) pver = 5.1.2600.5512
kdcom fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
WMILIB fver = 5.1.2600.0 (XPClient.010817-1148) pver = 5.1.2600.0
dmload fver =  pver =
USBD fver =  pver =
swenum fver =  pver =
Fs_Rec fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
Beep fver = 5.1.2600.0 (XPClient.010817-1148) pver = 5.1.2600.0
mnmdd fver =  pver =
RDPCDD fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
dump_WMILIB fver = 5.1.2600.0 (XPClient.010817-1148) pver = 5.1.2600.0
pciide fver =  pver =
OPRGHDLR fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
dxgthk fver = 5.1.2600.0 (xpclient.010817-1148) pver = 5.1.2600.0
audstub fver = 5.1.2600.0 (XPClient.010817-1148) pver = 5.1.2600.0
Null fver = 5.1.2600.0 (XPClient.010817-1148) pver = 5.1.2600.0
dxg fver = 5.1.2600.5512 (xpsp.080413-2105) pver = 5.1.2600.5512
ati2dvag fver =  pver =
ati2cqag fver =  pver =
atikvmag fver =  pver =
ati3duag fver =  pver =
ativvaxx fver =  pver =
win32k fver =  pver =
ATMFD fver =  pver =
1: kd> !for_each_module .echo @#ModuleIndex : @#Base @#End @#ModuleName @#ImageName  @#LoadedImageName
00 : 804d7000 806e4000 nt ntoskrnl.exe  ntoskrnl.exe
01 : 806e4000 80704d00 hal hal.dll
02 : ac509000 ac549e00 HTTP HTTP.sys
03 : ac982000 ac9d8600 srv srv.sys
04 : acb01000 acb04180 mdmxsdk mdmxsdk.sys
05 : acb19000 acb45180 mrxdav mrxdav.sys
06 : acc5c000 acc70480 wdmaud wdmaud.sys
07 : acd09000 acd17d80 sysaudio sysaudio.sys
08 : ad189000 ad18c900 ndisuio ndisuio.sys
09 : af389000 af3a0900 dump_atapi dump_atapi.sys
0a : af3a1000 af3c4180 Fastfat Fastfat.SYS
0b : af3ed000 af420280 avgldx86 avgldx86.sys
0c : af421000 af490300 mrxsmb mrxsmb.sys
0d : af491000 af4bbe80 rdbss rdbss.sys
0e : af4bc000 af4ddd00 afd afd.sys
0f : af4de000 af505c00 netbt netbt.sys
10 : af506000 af52b500 ipnat ipnat.sys
11 : af52c000 af565a00 avgtdix avgtdix.sys
12 : af566000 af5be480 tcpip tcpip.sys
13 : af5bf000 af5d1600 ipsec ipsec.sys
14 : b0796000 b0798900 Dxapi Dxapi.sys
15 : b07a2000 b0853b00 HSF_CNXT HSF_CNXT.sys
16 : b0854000 b0945d80 HSF_DPV HSF_DPV.sys
17 : b0946000 b0978e00 HSFHWAZL HSFHWAZL.sys
18 : b0979000 b0f45000 RtkHDAud RtkHDAud.sys
19 : b91d8000 b91e7900 Cdfs Cdfs.SYS
1a : b91f8000 b921ba80 portcls portcls.sys
1b : b921c000 b9269ca0 btaudio btaudio.sys
1c : b92ae000 b930bf00 update update.sys
1d : b930c000 b933be80 rdpdr rdpdr.sys
1e : b933c000 b934ce00 psched psched.sys
1f : b934d000 b9363580 ndiswan ndiswan.sys
20 : b9364000 b942f800 btkrnl btkrnl.sys
21 : b9430000 b9442400 ESM7SK ESM7SK.sys
22 : b9443000 b9456580 sdbus sdbus.sys
23 : b9457000 b94dcc40 ar5211 ar5211.sys
24 : b94dd000 b94f1800 Rtnicxp Rtnicxp.sys
25 : b94f2000 b95210a0 SynTP SynTP.sys
26 : b9522000 b954a000 HDAudBus HDAudBus.sys
27 : b954a000 b956c700 ks ks.sys
28 : b956d000 b9590200 USBPORT USBPORT.SYS
29 : b9591000 b95a4f00 VIDEOPRT VIDEOPRT.SYS
2a : b95a5000 b972c000 ati2mtag ati2mtag.sys
2b : b9da0000 b9da3c80 mssmbios mssmbios.sys
2c : b9dd0000 b9de9b80 Mup Mup.sys
2d : b9dea000 b9e16980 NDIS NDIS.sys
2e : b9e17000 b9ea3600 Ntfs Ntfs.sys
2f : b9ea4000 b9ebab00 KSecDD KSecDD.sys
30 : b9ebb000 b9eccf00 sr sr.sys
31 : b9ecd000 b9eecb00 fltmgr fltmgr.sys
32 : b9eed000 b9f04900 atapi atapi.sys
33 : b9f05000 b9f2a700 dmio dmio.sys
34 : b9f2b000 b9f49880 ftdisk ftdisk.sys
35 : b9f4a000 b9f67580 pcmcia pcmcia.sys
36 : b9f68000 b9f78a80 pci pci.sys
37 : b9f79000 b9fa6d80 ACPI ACPI.sys
38 : ba0a8000 ba0b1180 isapnp isapnp.sys
39 : ba0b8000 ba0c2580 MountMgr MountMgr.sys
3a : ba0c8000 ba0d4c80 VolSnap VolSnap.sys
3b : ba0d8000 ba0e0e00 disk disk.sys
3c : ba0e8000 ba0f4180 CLASSPNP CLASSPNP.SYS
3d : ba0f8000 ba106100 Lbd Lbd.sys
3e : ba108000 ba113d00 raspptp raspptp.sys
3f : ba118000 ba120900 msgpc msgpc.sys
40 : ba128000 ba131f00 termdd termdd.sys
41 : ba138000 ba146b00 drmk drmk.sys
42 : ba148000 ba151e80 NDProxy NDProxy.SYS
43 : ba178000 ba186880 usbhub usbhub.sys
44 : ba198000 ba1a0700 wanarp wanarp.sys
45 : ba1a8000 ba1b0780 netbios netbios.sys
46 : ba1c8000 ba1d2e00 Fips Fips.SYS
47 : ba298000 ba2a6000 AmdK8 AmdK8.sys
48 : ba2a8000 ba2b2480 Imapi Imapi.SYS
49 : ba2b8000 ba2c7600 cdrom cdrom.sys
4a : ba2c8000 ba2d6100 redbook redbook.sys
4b : ba2d8000 ba2e4d00 i8042prt i8042prt.sys
4c : ba2e8000 ba2f6e80 EMS7SK EMS7SK.sys
4d : ba2f8000 ba301c80 ESD7SK ESD7SK.sys
4e : ba308000 ba314880 rasl2tp rasl2tp.sys
4f : ba318000 ba322200 raspppoe raspppoe.sys
50 : ba328000 ba32e180 PCIIDEX PCIIDEX.SYS
51 : ba330000 ba334d00 PartMgr PartMgr.sys
52 : ba3e8000 ba3ed7a0 btserial btserial.sys
53 : ba408000 ba40c300 usbohci usbohci.sys
54 : ba410000 ba417600 usbehci usbehci.sys
55 : ba418000 ba41d280 GEARAspiWDM GEARAspiWDM.sys
56 : ba420000 ba426000 kbdclass kbdclass.sys
57 : ba428000 ba42da00 mouclass mouclass.sys
58 : ba430000 ba434a80 TDI TDI.SYS
59 : ba438000 ba43c580 ptilink ptilink.sys
5a : ba440000 ba444080 raspti raspti.sys
5b : ba448000 ba44f580 Modem Modem.SYS
5c : ba468000 ba46d200 vga vga.sys
5d : ba470000 ba474a80 Msfs Msfs.SYS
5e : ba478000 ba47f880 Npfs Npfs.SYS
5f : ba480000 ba485940 avgmfx86 avgmfx86.sys
60 : ba490000 ba494500 watchdog watchdog.sys
61 : ba4b8000 ba4bb000 BOOTVID BOOTVID.dll
62 : ba4bc000 ba4be800 compbatt compbatt.sys
63 : ba4c0000 ba4c3780 BATTC BATTC.SYS
64 : ba4c4000 ba4c6d80 ACPIEC ACPIEC.sys
65 : ba55c000 ba55e280 rasacd rasacd.sys
66 : ba580000 ba582280 wmiacpi wmiacpi.sys
67 : ba588000 ba58b680 CmBatt CmBatt.sys
68 : ba58c000 ba58e780 ndistapi ndistapi.sys
69 : ba5a8000 ba5a9b80 kdcom kdcom.dll
6a : ba5aa000 ba5ab100 WMILIB WMILIB.SYS
6b : ba5ac000 ba5ad700 dmload dmload.sys
6c : ba5ce000 ba5cf280 USBD USBD.SYS
6d : ba5d0000 ba5d1100 swenum swenum.sys
6e : ba5d4000 ba5d5f00 Fs_Rec Fs_Rec.SYS
6f : ba5d6000 ba5d7080 Beep Beep.SYS
70 : ba5d8000 ba5d9080 mnmdd mnmdd.SYS
71 : ba5da000 ba5db080 RDPCDD RDPCDD.sys
72 : ba5e8000 ba5e9100 dump_WMILIB dump_WMILIB.SYS
73 : ba670000 ba670d00 pciide pciide.sys
74 : ba671000 ba671d80 OPRGHDLR OPRGHDLR.SYS
75 : ba703000 ba703d00 dxgthk dxgthk.sys
76 : ba737000 ba737c00 audstub audstub.sys
77 : ba7ec000 ba7ecb80 Null Null.SYS
78 : bf000000 bf011600 dxg dxg.sys
79 : bf012000 bf055000 ati2dvag ati2dvag.dll
7a : bf055000 bf09a000 ati2cqag ati2cqag.dll
7b : bf09a000 bf0d0000 atikvmag atikvmag.dll
7c : bf0d0000 bf3618a0 ati3duag ati3duag.dll
7d : bf362000 bf4b9c00 ativvaxx ativvaxx.dll
7e : bf800000 bf9c3d00 win32k win32k.sys
7f : bffa0000 bffe5c00 ATMFD ATMFD.DLL
1: kd> lmvm nt
start    end        module name
804d7000 806e4000   nt       T (no symbols)           
    Loaded symbol image file: ntoskrnl.exe
    Image path: ntoskrnl.exe
    Image name: ntoskrnl.exe
    Timestamp:        Tue Dec 08 13:43:44 2009 (4B1E9E60)
    CheckSum:         001F9C7F
    ImageSize:        0020D000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
1: kd> .reload
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................

Loading User Symbols
Loading unloaded module list
................
windbg> .hh 
1: kd> !sym
!sym <noisy/quiet - prompts/prompts off> - quiet mode - symbol prompts on
1: kd> !sym noisy
noisy mode - symbol prompts on
1: kd> .reload
SYMSRV:  C:\symbols\ntoskrnl.exe\4B1E9E6020d000\ntoskrnl.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/4B1E9E6020d000/ntoskrnl.exe not found
SYMSRV:  C:\symbols\ntkrnlup.exe\4B1E9E6020d000\ntkrnlup.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrnlup.exe/4B1E9E6020d000/ntkrnlup.exe not found
SYMSRV:  C:\symbols\ntkrnlpa.exe\4B1E9E6020d000\ntkrnlpa.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/4B1E9E6020d000/ntkrnlpa.exe not found
SYMSRV:  C:\symbols\ntkrnlmp.exe\4B1E9E6020d000\ntkrnlmp.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/4B1E9E6020d000/ntkrnlmp.exe not found
SYMSRV:  C:\symbols\ntkrpamp.exe\4B1E9E6020d000\ntkrpamp.exe not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/4B1E9E6020d000/ntkrpamp.exe not found
DBGENG:  ntoskrnl.exe - Image mapping disallowed by non-local path.
Unable to load image ntoskrnl.exe, Win32 error 0n2
DBGENG:  ntoskrnl.exe - Partial symbol image load missing image info
DBGHELP: No header for ntoskrnl.exe.  Searching for dbg file
DBGHELP: .\ntoskrnl.dbg - file not found
DBGHELP: .\exe\ntoskrnl.dbg - path not found
DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
DBGHELP: ntoskrnl.exe missing debug info.  Searching for pdb anyway
DBGHELP: Can't use symbol server for ntoskrnl.pdb - no header information available
DBGHELP: ntoskrnl.pdb - file not found
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
DBGHELP: nt - no symbols loaded
Loading Kernel Symbols
.
SYMSRV:  C:\symbols\halaacpi.dll\4802517F20d00\halaacpi.dll not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/halaacpi.dll/4802517F20d00/halaacpi.dll not found
SYMSRV:  C:\symbols\halacpi.dll\4802517F20d00\halacpi.dll not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/halacpi.dll/4802517F20d00/halacpi.dll not found
SYMSRV:  C:\symbols\halapic.dll\4802517F20d00\halapic.dll not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/halapic.dll/4802517F20d00/halapic.dll not found
DBGHELP: C:\symbols\halmacpi.dll\4802517F20d00\halmacpi.dll - OK
DBGENG:  C:\symbols\halmacpi.dll\4802517F20d00\halmacpi.dll - Mapped image memory
.
DBGHELP: C:\symbols\kdcom.dll\3B7D83461b80\kdcom.dll - OK
DBGENG:  C:\symbols\kdcom.dll\3B7D83461b80\kdcom.dll - Mapped image memory
.............................................................
................................................................

Loading User Symbols
Loading unloaded module list
................
[/font]
 

·
Registered
Joined
·
60 Posts
Discussion Starter #16
Ok. Thanks.
Some questions though.
1. How do I get a copy of XP with SP3 slipstreamed? My copy of XP is pretty old and I don't think it even has SP2.
2. How do I update/fix those drivers that are having problems? I don't even know where to start with that.
 

·
TSF Team Emeritus
Joined
·
6,147 Posts
Hi,
1. How do I get a copy of XP with SP3 slipstreamed? My copy of XP is pretty old and I don't think it even has SP2.
2. How do I update/fix those drivers that are having problems? I don't even know where to start with that.
Instructions on creating a slipstreamed XP SP3 disk: http://www.lancelhoff.com/how-to-slipstream-service-pack-3-into-windows-xp/

As for your second question, don't even bother until you have repaired the critical system files. If you manage to repair the system files then I will take you through updating all your drivers.

Regards,
Reventon
 

·
Registered
Joined
·
60 Posts
Discussion Starter #18
Ok. I repaired the system files. I'll let you know if I still get BSODs.
Truthfully though, I haven't been getting BSODs for a week or so. Should I run the verifier test again?
 
1 - 18 of 18 Posts
Status
Not open for further replies.
Top