
-- 02 kwi 2013, 22:24 --
pokazuje mi że zła scieżka ?
-- 04 kwi 2013, 18:06 --
dzisiaj już 4-ry razy mi się zawiesił , przeglądałem strony i uruchomiony był utorent , poni zej kilka zrzutów pomocy !
fltmgr.sys fltmgr.sys+3018 0xf71b6000 0xf71d5b00 0x0001fb00 0x480251da 2008-04-13 20:32:58 Microsoft® Windows® Operating System Microsoft Filesystem Filter Manager 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\fltmgr.sys
Ntfs.sys Ntfs.sys+c09a9b54 0xf7100000 0xf718c600 0x0008c600 0x48025be5 2008-04-13 21:15:49 Microsoft® Windows® Operating System NT File System Driver 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\Ntfs.sys
ntoskrnl.exe ntoskrnl.exe+21ce3 0x804d7000 0x806d0980 0x001f9980 0x503385cf 2012-08-21 14:57:51 System operacyjny Microsoft® Windows® Jądro i system NT 5.1.2600.6284 (xpsp_sp3_gdr.120821-1629) Microsoft Corporation C:\WINDOWS\system32\ntoskrnl.exe
sr.sys sr.sys+c0905c04 0xf71a4000 0xf71b5f00 0x00011f00 0x480252c2 2008-04-13 20:36:50 System operacyjny Microsoft® Windows® Sterownik filtru systemu plików Przywracania systemu 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\sr.sys
hal.dll 0x806d1000 0x806f1300 0x00020300 0x4802517f 2008-04-13 20:31:27 Microsoft® Windows® Operating System Hardware Abstraction Layer DLL 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\hal.dll
kdcom.dll 0xf79db000 0xf79dcb80 0x00001b80 0x3b7d8346 2001-08-17 22:49:10 Microsoft® Windows® Operating System Kernel Debugger HW Extension DLL 5.1.2600.0 (xpclient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\kdcom.dll
BOOTVID.dll 0xf78eb000 0xf78ee000 0x00003000 0x3b7d8345 2001-08-17 22:49:09 Microsoft® Windows® Operating System VGA Boot Driver 5.1.2600.0 (xpclient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\BOOTVID.dll
sptd.sys 0xf72da000 0xf73da000 0x00100000 0x47cf3bb9 2008-03-06 02:32:57 C:\WINDOWS\system32\drivers\sptd.sys
WMILIB.SYS 0xf79dd000 0xf79de100 0x00001100 0x3b7d878b 2001-08-17 23:07:23 Microsoft® Windows® Operating System WMILIB WMI support library Dll 5.1.2600.0 (XPClient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\WMILIB.SYS
SCSIPORT.SYS 0xf72c2000 0xf72d9880 0x00017880 0x4802539d 2008-04-13 20:40:29 Microsoft® Windows® Operating System SCSI Port Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\SCSIPORT.SYS
a347bus.sys 0xf729a000 0xf72c1380 0x00027380 0x4091f40d 2004-04-30 08:37:01 Plug and Play BIOS Extension 3.47.0.0 built by: WinDDK C:\WINDOWS\system32\drivers\a347bus.sys
ACPI.sys 0xf726b000 0xf7299080 0x0002e080 0x480252b1 2008-04-13 20:36:33 System operacyjny Microsoft® Windows® Sterownik ACPI dla systemu NT 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\ACPI.sys
pci.sys 0xf725a000 0xf726ac00 0x00010c00 0x480252bb 2008-04-13 20:36:43 System operacyjny Microsoft® Windows® Licznik NT Plug and Play PCI 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\pci.sys
ohci1394.sys 0xf74db000 0xf74ea100 0x0000f100 0x480254fa 2008-04-13 20:46:18 Microsoft® Windows® Operating System 1394 OpenHCI Port Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\ohci1394.sys
1394BUS.SYS 0xf74eb000 0xf74f8080 0x0000d080 0x480254fa 2008-04-13 20:46:18 Microsoft® Windows® Operating System 1394 Bus Device Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\1394BUS.SYS
isapnp.sys 0xf74fb000 0xf7504300 0x00009300 0x480252b8 2008-04-13 20:36:40 System operacyjny Microsoft® Windows® Sterownik magistrali ISA PNP 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\isapnp.sys
pciide.sys 0xf7aa3000 0xf7aa3d80 0x00000d80 0x3b7d83e5 2001-08-17 22:51:49 System operacyjny Microsoft® Windows® Rodzajowy sterownik magistrali PCI IDE 5.1.2600.0 (XPClient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\pciide.sys
PCIIDEX.SYS 0xf775b000 0xf7761180 0x00006180 0x4802539d 2008-04-13 20:40:29 Microsoft® Windows® Operating System PCI IDE Bus Driver Extension 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\PCIIDEX.SYS
intelide.sys 0xf79df000 0xf79e0580 0x00001580 0x4802539d 2008-04-13 20:40:29 System operacyjny Microsoft® Windows® Sterownik Intel PCI IDE 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\intelide.sys
MountMgr.sys 0xf750b000 0xf7515580 0x0000a580 0x48025371 2008-04-13 20:39:45 Microsoft® Windows® Operating System Mount Manager 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\MountMgr.sys
ftdisk.sys 0xf723b000 0xf7259a80 0x0001ea80 0x3b7d8419 2001-08-17 22:52:41 System operacyjny Microsoft® Windows® Sterownik dysku FT 5.1.2600.0 (XPClient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\ftdisk.sys
dmload.sys 0xf79e1000 0xf79e1000 0x00000000 0x00000000 Logical Disk Manager for Windows NT NT Disk Manager Startup Driver 2600.0.503.0 Microsoft Corp., Veritas Software. C:\WINDOWS\system32\drivers\dmload.sys
dmio.sys 0xf7215000 0xf723a900 0x00025900 0x4802549d 2008-04-13 20:44:45 VERITAS® NT Disk Manager Sterownik We/Wy menedżera dysków NT 2600.5512.503.0 Microsoft Corp., Veritas Software C:\WINDOWS\system32\drivers\dmio.sys
PartMgr.sys 0xf7763000 0xf7767d00 0x00004d00 0x480253b0 2008-04-13 20:40:48 Microsoft® Windows® Operating System Partition Manager 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\PartMgr.sys
VolSnap.sys 0xf751b000 0xf7527e80 0x0000ce80 0x480253bc 2008-04-13 20:41:00 System operacyjny Microsoft® Windows® Sterownik kopiowania woluminów w tle 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\VolSnap.sys
atapi.sys 0xf71fd000 0xf7214900 0x00017900 0x4802539d 2008-04-13 20:40:29 C:\WINDOWS\system32\drivers\atapi.sys
nvatabus.sys 0xf71e9000 0xf71fc600 0x00013600 0x40bf629c 2004-06-03 19:40:44 NVIDIA nForce(TM) IDE Driver NVIDIA® nForce(TM) IDE Performance Driver 5.10.2600.0446 built by: WinDDK NVIDIA Corporation C:\WINDOWS\system32\drivers\nvatabus.sys
a347scsi.sys 0xf79e3000 0xf79e4480 0x00001480 0x4091f31a 2004-04-30 08:32:58 SCSI miniport 3.47.0.0 built by: WinDDK C:\WINDOWS\system32\drivers\a347scsi.sys
viamraid.sys 0xf71d6000 0xf71e8180 0x00012180 0x40a9c438 2004-05-18 10:07:20 VIA RAID driver VIA RAID DRIVER FOR WIN 2000/XP/2003IA32 5.1.2600.310 VIA Technologies inc,.ltd C:\WINDOWS\system32\drivers\viamraid.sys
disk.sys 0xf752b000 0xf7533e00 0x00008e00 0x480253ae 2008-04-13 20:40:46 Microsoft® Windows® Operating System PnP Disk Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\disk.sys
CLASSPNP.SYS 0xf753b000 0xf7547180 0x0000c180 0x48025c05 2008-04-13 21:16:21 Microsoft® Windows® Operating System SCSI Class System Dll 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\CLASSPNP.SYS
KSecDD.sys 0xf718d000 0xf71a3b00 0x00016b00 0x4a420b90 2009-06-24 13:18:40 Microsoft® Windows® Operating System Kernel Security Support Provider Interface 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305) Microsoft Corporation C:\WINDOWS\system32\drivers\KSecDD.sys
NDIS.sys 0xf70d3000 0xf70ff980 0x0002c980 0x48025d03 2008-04-13 21:20:35 Microsoft® Windows® Operating System NDIS 5.1 wrapper driver 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\NDIS.sys
nv_agp.sys 0xf776b000 0xf7770280 0x00005280 0x3fa029e3 2003-10-29 22:58:11 NVIDIA nForce AGP Filter NVIDIA nForce AGP Filter 4.12.01.0377 NVIDIA Corporation C:\WINDOWS\system32\drivers\nv_agp.sys
Mup.sys 0xf70b9000 0xf70d2c00 0x00019c00 0x4db03327 2011-04-21 15:37:43 Microsoft® Windows® Operating System Multiple UNC Provider driver 5.1.2600.6103 (xpsp_sp3_gdr.110421-1640) Microsoft Corporation C:\WINDOWS\system32\drivers\Mup.sys
aswRvrt.sys 0xf754b000 0xf754b000 0x00000000 0x00000000 C:\WINDOWS\system32\drivers\aswRvrt.sys
intelppm.sys 0xf75db000 0xf75e4e00 0x00009e00 0x48025183 2008-04-13 20:31:31 System operacyjny Microsoft® Windows® Sterownik urządzenia procesora 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\intelppm.sys
nv4_mini.sys 0xf664a000 0xf7016fa0 0x009ccfa0 0x4b4c0937 2010-01-12 07:31:35 NVIDIA Compatible Windows 2000 Miniport Driver, Version 196.21 NVIDIA Compatible Windows 2000 Miniport Driver, Version 196.21 6.14.11.9621 NVIDIA Corporation C:\WINDOWS\system32\drivers\nv4_mini.sys
VIDEOPRT.SYS 0xf6636000 0xf6649f00 0x00013f00 0x48025497 2008-04-13 20:44:39 Microsoft® Windows® Operating System Video Port Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\VIDEOPRT.SYS
usbuhci.sys 0xf785b000 0xf7860080 0x00005080 0x480254ce 2008-04-13 20:45:34 Microsoft® Windows® Operating System UHCI USB Miniport Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\usbuhci.sys
USBPORT.SYS 0xf6612000 0xf6635200 0x00023200 0x480254ce 2008-04-13 20:45:34 Microsoft® Windows® Operating System USB 1.1 & 2.0 Port Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\USBPORT.SYS
usbehci.sys 0xf7863000 0xf786a600 0x00007600 0x480254ce 2008-04-13 20:45:34 Microsoft® Windows® Operating System EHCI eUSB Miniport Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\usbehci.sys
cmudax3.sys 0xf64a0000 0xf6611600 0x00171600 0x49c06bcf 2009-03-18 05:34:39 C-Media Audio Driver (WDM) C-Media Audio WDM Driver 5.12.8.1734 C-Media Inc C:\WINDOWS\system32\drivers\cmudax3.sys
portcls.sys 0xf647c000 0xf649fa80 0x00023a80 0x48025ccc 2008-04-13 21:19:40 Microsoft® Windows® Operating System Port Class (Class Driver for Port/Miniport Devices) 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\portcls.sys
drmk.sys 0xf75eb000 0xf75f9b00 0x0000eb00 0x480254b8 2008-04-13 20:45:12 Microsoft® Windows® Operating System Microsoft Kernel DRM Descrambler Filter 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\drmk.sys
ks.sys 0xf6459000 0xf647b700 0x00022700 0x48025c12 2008-04-13 21:16:34 Microsoft(R) Windows(R) Operating System Kernel CSA Library 5.3.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\ks.sys
Rtnicxp.sys 0xf6439000 0xf6458d80 0x0001fd80 0x49c9cf60 2009-03-25 08:29:52 Realtek 10/100/1000 NIC Family all in one NDIS Driver Realtek 10/100/1000 NDIS 5.1 Driver 5.719.0325.2009 built by: WinDDK Realtek Semiconductor Corporation C:\WINDOWS\system32\drivers\Rtnicxp.sys
ALCXWDM.SYS 0xf60bf000 0xf6438d80 0x00379d80 0x4305a705 2005-08-19 11:31:49 Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab) Realtek AC'97 Audio Driver (WDM) 5.10.5900 built by: WinDDK Realtek Semiconductor Corp. C:\WINDOWS\system32\drivers\ALCXWDM.SYS
fdc.sys 0xf7883000 0xf7883000 0x00000000 0x00000000 Microsoft® Windows® Operating System Floppy Disk Controller Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\fdc.sys
serial.sys 0xf75fb000 0xf760af00 0x0000ff00 0x48025be0 2008-04-13 21:15:44 System operacyjny Microsoft® Windows® Sterownik urządzenia szeregowego 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\serial.sys
serenum.sys 0xf7089000 0xf708cd80 0x00003d80 0x4802538c 2008-04-13 20:40:12 Microsoft® Windows® Operating System Serial Port Enumerator 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\serenum.sys
parport.sys 0xf60ab000 0xf60be980 0x00013980 0x48025389 2008-04-13 20:40:09 System operacyjny Microsoft® Windows® Sterownik portu równoległego 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\parport.sys
imapi.sys 0xf760b000 0xf7615480 0x0000a480 0x480253b9 2008-04-13 20:40:57 Microsoft® Windows® Operating System IMAPI Kernel Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\imapi.sys
cdrom.sys 0xf761b000 0xf762a600 0x0000f600 0x480253ad 2008-04-13 20:40:45 Microsoft® Windows® Operating System SCSI CD-ROM Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\cdrom.sys
redbook.sys 0xf762b000 0xf7639600 0x0000e600 0x4802539b 2008-04-13 20:40:27 System operacyjny Microsoft® Windows® Sterownik filtru audio Redbook 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\redbook.sys
audstub.sys 0xf7027000 0xf7027c00 0x00000c00 0x3b7d85bc 2001-08-17 22:59:40 Microsoft® Windows® Operating System AudStub Driver 5.1.2600.0 (XPClient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\audstub.sys
rasl2tp.sys 0xf763b000 0xf7647880 0x0000c880 0x48025ccf 2008-04-13 21:19:43 Microsoft® Windows® Operating System RAS L2TP mini-port/call-manager driver 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\rasl2tp.sys
ndistapi.sys 0xf7075000 0xf7077900 0x00002900 0x4e170dd8 2011-07-08 16:02:00 Microsoft® Windows® Operating System NDIS 3.0 connection wrapper driver 5.1.2600.6132 (xpsp_sp3_gdr.110708-1731) Microsoft Corporation C:\WINDOWS\system32\drivers\ndistapi.sys
ndiswan.sys 0xf6094000 0xf60aa580 0x00016580 0x48025d09 2008-04-13 21:20:41 Microsoft® Windows® Operating System MS PPP Framing Driver (Strong Encryption) 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\ndiswan.sys
raspppoe.sys 0xf764b000 0xf7655200 0x0000a200 0x4802579b 2008-04-13 20:57:31 Microsoft® Windows® Operating System RAS PPPoE mini-port/call-manager driver 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\raspppoe.sys
raspptp.sys 0xf765b000 0xf7666d00 0x0000bd00 0x48025cd3 2008-04-13 21:19:47 Microsoft® Windows® Operating System Peer-to-Peer Tunneling Protocol 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\raspptp.sys
TDI.SYS 0xf78ab000 0xf78afa80 0x00004a80 0x48025834 2008-04-13 21:00:04 Microsoft® Windows® Operating System TDI Wrapper 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\TDI.SYS
psched.sys 0xf6083000 0xf6093e00 0x00010e00 0x48025764 2008-04-13 20:56:36 Microsoft® Windows® Operating System MS QoS Packet Scheduler 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\psched.sys
msgpc.sys 0xf766b000 0xf7673900 0x00008900 0x48025760 2008-04-13 20:56:32 Microsoft® Windows® Operating System MS General Packet Classifier 5.1.2600.5512 (xpsp.080413-0852) Microsoft Corporation C:\WINDOWS\system32\drivers\msgpc.sys
ptilink.sys 0xf78bb000 0xf78bf580 0x00004580 0x3b7d8371 2001-08-17 22:49:53 Microsoft® Windows® Operating System Parallel Technologies DirectParallel IO Library 1.10 (XPClient.010817-1148) Parallel Technologies, Inc. C:\WINDOWS\system32\drivers\ptilink.sys
raspti.sys 0xf78cb000 0xf78cf080 0x00004080 0x3b7d84c4 2001-08-17 22:55:32 Microsoft® Windows® Operating System PTI DirectParallel(R) mini-port/call-manager driver 5.1.2600.0 (xpclient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\raspti.sys
rdpdr.sys 0xf6053000 0xf6082e80 0x0002fe80 0x480251d2 2008-04-13 20:32:50 Microsoft® Windows® Operating System Microsoft RDP Device redirector 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\rdpdr.sys
termdd.sys 0xf767b000 0xf7684f00 0x00009f00 0x4802532c 2008-04-13 20:38:36 Microsoft® Windows® Operating System Terminal Server Driver 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\termdd.sys
kbdclass.sys 0xf78e3000 0xf78e9180 0x00006180 0x48025372 2008-04-13 20:39:46 System operacyjny Microsoft® Windows® Sterownik klasy klawiatury 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\kbdclass.sys
mouclass.sys 0xf77a3000 0xf77a8b00 0x00005b00 0x48025373 2008-04-13 20:39:47 System operacyjny Microsoft® Windows® Sterownik klasy myszy 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\mouclass.sys
swenum.sys 0xf7a1f000 0xf7a20100 0x00001100 0x48025378 2008-04-13 20:39:52 Microsoft(R) Windows(R) Operating System Plug and Play Software Device Enumerator 5.3.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\swenum.sys
update.sys 0xf5f55000 0xf5fb2f00 0x0005df00 0x48025372 2008-04-13 20:39:46 Microsoft® Windows® Operating System Update Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\update.sys
mssmbios.sys 0xf7051000 0xf7054c80 0x00003c80 0x480252bd 2008-04-13 20:36:45 Microsoft® Windows® Operating System System Management BIOS Driver 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\mssmbios.sys
NDProxy.SYS 0xf768b000 0xf7695000 0x0000a000 0x4cd02b6e 2010-11-02 17:17:02 Microsoft® Windows® Operating System NDIS Proxy 5.1.2600.6048 (xpsp_sp3_gdr.101102-1900) Microsoft Corporation C:\WINDOWS\system32\drivers\NDProxy.SYS
aswSP.SYS aswSP.SYS+25503 0xf3c02000 0xf3c59280 0x00057280 0x5137cfc3 2013-03-07 01:22:43 avast! Antivirus avast! self protection module 8.0.1483.72 AVAST Software C:\WINDOWS\system32\drivers\aswSP.SYS
ntoskrnl.exe ntoskrnl.exe+22b70 0x804d7000 0x806d0980 0x001f9980 0x503385cf 2012-08-21 14:57:51 System operacyjny Microsoft® Windows® Jądro i system NT 5.1.2600.6284 (xpsp_sp3_gdr.120821-1629) Microsoft Corporation C:\WINDOWS\system32\ntoskrnl.exe
hal.dll 0x806d1000 0x806f1300 0x00020300 0x4802517f 2008-04-13 20:31:27 Microsoft® Windows® Operating System Hardware Abstraction Layer DLL 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\hal.dll
kdcom.dll 0xf79db000 0xf79dcb80 0x00001b80 0x3b7d8346 2001-08-17 22:49:10 Microsoft® Windows® Operating System Kernel Debugger HW Extension DLL 5.1.2600.0 (xpclient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\kdcom.dll
BOOTVID.dll 0xf78eb000 0xf78ee000 0x00003000 0x3b7d8345 2001-08-17 22:49:09 Microsoft® Windows® Operating System VGA Boot Driver 5.1.2600.0 (xpclient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\BOOTVID.dll
sptd.sys 0xf72da000 0xf73da000 0x00100000 0x47cf3bb9 2008-03-06 02:32:57 C:\WINDOWS\system32\drivers\sptd.sys
WMILIB.SYS 0xf79dd000 0xf79de100 0x00001100 0x3b7d878b 2001-08-17 23:07:23 Microsoft® Windows® Operating System WMILIB WMI support library Dll 5.1.2600.0 (XPClient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\WMILIB.SYS
SCSIPORT.SYS 0xf72c2000 0xf72d9880 0x00017880 0x4802539d 2008-04-13 20:40:29 Microsoft® Windows® Operating System SCSI Port Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\SCSIPORT.SYS
a347bus.sys 0xf729a000 0xf72c1380 0x00027380 0x4091f40d 2004-04-30 08:37:01 Plug and Play BIOS Extension 3.47.0.0 built by: WinDDK C:\WINDOWS\system32\drivers\a347bus.sys
ACPI.sys 0xf726b000 0xf7299080 0x0002e080 0x480252b1 2008-04-13 20:36:33 System operacyjny Microsoft® Windows® Sterownik ACPI dla systemu NT 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\ACPI.sys
pci.sys 0xf725a000 0xf726ac00 0x00010c00 0x480252bb 2008-04-13 20:36:43 System operacyjny Microsoft® Windows® Licznik NT Plug and Play PCI 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\pci.sys
ohci1394.sys 0xf74db000 0xf74ea100 0x0000f100 0x480254fa 2008-04-13 20:46:18 Microsoft® Windows® Operating System 1394 OpenHCI Port Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\ohci1394.sys
1394BUS.SYS 0xf74eb000 0xf74f8080 0x0000d080 0x480254fa 2008-04-13 20:46:18 Microsoft® Windows® Operating System 1394 Bus Device Driver 5.1.2600.5512 (xpsp.080413-2108) Microsoft Corporation C:\WINDOWS\system32\drivers\1394BUS.SYS
isapnp.sys 0xf74fb000 0xf7504300 0x00009300 0x480252b8 2008-04-13 20:36:40 System operacyjny Microsoft® Windows® Sterownik magistrali ISA PNP 5.1.2600.5512 (xpsp.080413-2111) Microsoft Corporation C:\WINDOWS\system32\drivers\isapnp.sys
pciide.sys 0xf7aa3000 0xf7aa3d80 0x00000d80 0x3b7d83e5 2001-08-17 22:51:49 System operacyjny Microsoft® Windows® Rodzajowy sterownik magistrali PCI IDE 5.1.2600.0 (XPClient.010817-1148) Microsoft Corporation C:\WINDOWS\system32\drivers\pciide.sys
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00000781, The PTEs mapping the argument system cache view have been
corrupted.
Arg2: c06e99e0
Arg3: 00000000
Arg4: e1c8b9e0
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: sr
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 480252c2
BUGCHECK_STR: 0x1a_781
CUSTOMER_CRASH_COUNT: 5
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
LAST_CONTROL_TRANSFER: from 805181a4 to 804f8ce3
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
b7aa9920 805181a4 0000001a 00000781 c06e99e0 nt+0x21ce3
b7aa9970 8055fd3e dd33c000 0001a830 00000000 nt+0x411a4
b7aa9988 804e76b6 875b7ef0 87534008 00000000 nt+0x88d3e
b7aa9a28 804e79d0 87307ed0 00540000 00000000 nt+0x106b6
b7aa9a60 8055eb71 00307ed0 00540000 00000000 nt+0x109d0
b7aa9afc f7120e9a 8731dd60 00540000 00001177 nt+0x87b71
b7aa9b54 f71b9018 8731dd60 b7aa9bc4 00001900 Ntfs+0x20e9a
b7aa9b88 f71c4a1d 00000003 00000000 b7aa9bbc fltmgr+0x3018
b7aa9bdc f71ab9a2 8731dd60 b7aa9c74 00001900 fltmgr+0xea1d
b7aa9c04 f71b9018 8731dd60 b7aa9c74 00001900 sr+0x79a2
b7aa9c38 f71c4a1d 00000003 00000000 b7aa9c6c fltmgr+0x3018
b7aa9c8c 80571bf1 8731dd60 b7aa9cc8 00001900 fltmgr+0xea1d
b7aa9d38 8053d738 00000380 00000000 00000000 nt+0x9abf1
b7aa9d64 7c90e514 badb0d00 023ffd4c 00000000 nt+0x66738
b7aa9d68 badb0d00 023ffd4c 00000000 00000000 0x7c90e514
b7aa9d6c 023ffd4c 00000000 00000000 00000003 0xbadb0d00
b7aa9d70 00000000 00000000 00000003 000000b0 0x23ffd4c
STACK_COMMAND: kb
FOLLOWUP_IP:
sr+79a2
f71ab9a2 ?? ???
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: sr+79a2
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: sr.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini040413-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x80554140
Debug session time: Thu Apr 4 17:32:25.812 2013 (GMT+2)
System Uptime: 0 days 0:11:22.418
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
...............................................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000000A, {812eeb84, 2, 1, 804f9b70}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Probably caused by : ntoskrnl.exe ( nt+22b70 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 812eeb84, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 804f9b70, address which referenced memory
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 503385cf
WRITE_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
812eeb84
CURRENT_IRQL: 2
FAULTING_IP:
nt+22b70
804f9b70 897904 mov dword ptr [ecx+4],edi
CUSTOMER_CRASH_COUNT: 4
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0xA
LAST_CONTROL_TRANSFER: from 805b65d6 to 804f9b70
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
b84719b8 805b65d6 00000002 b8471bec 00000001 nt+0x22b70
b8471d48 8053d738 00000002 01daf4e0 00000001 nt+0xdf5d6
b8471d64 7c90e514 badb0d00 01daf4c0 00000000 nt+0x66738
b8471d68 badb0d00 01daf4c0 00000000 00000000 0x7c90e514
b8471d6c 01daf4c0 00000000 00000000 00000000 0xbadb0d00
b8471d70 00000000 00000000 00000000 00000000 0x1daf4c0
STACK_COMMAND: kb
FOLLOWUP_IP:
nt+22b70
804f9b70 897904 mov dword ptr [ecx+4],edi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt+22b70
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntoskrnl.exe
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner