BSOD on XP SP1 computer

Hi,

Got a computer having 2 types of bsod. I have check the dump file and come to the following results (have included the dump analysis for troubleshooting ease.
I'd like comments and perhaps solution as I am not a dump expert.

1. I suspect this one to be memory related but I'd like a confirmation. I will run a memtest as soon as the user has time (might be tomorrow). I am wondering also if the 2 are related.
Probably caused by : memory_corruption ( nt!MiDecrementCloneBlockReference+8 )

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000001c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8052c3e4, address which referenced memory

Debugging Details:
------------------
WRITE_ADDRESS:  0000001c
CURRENT_IRQL:  2
FAULTING_IP:
nt!MiDecrementCloneBlockReference+8
8052c3e4 ff4b1c           dec     dword ptr [ebx+0x1c]
CUSTOMER_CRASH_COUNT:  2
DEFAULT_BUCKET_ID:  DRIVER_FAULT
BUGCHECK_STR:  0xA
LAST_CONTROL_TRANSFER:  from 8051d90f to 8052c3e4
TRAP_FRAME:  ed710ad4 -- (.trap ffffffffed710ad4)
ErrCode = 00000002
eax=c0006034 ebx=00000000 ecx=00000001 edx=0180d000 esi=e1000000 edi=00000000
eip=8052c3e4 esp=ed710b48 ebp=ed710b50 iopl=0         nv up ei pl zr na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
nt!MiDecrementCloneBlockReference+0x8:
8052c3e4 ff4b1c           dec  dword ptr [ebx+0x1c] ds:0023:0000001c=????????
Resetting default scope
STACK_TEXT:  
ed710b50 8051d90f 00000000 e1000000 81d7bda8 nt!MiDecrementCloneBlockReference+0x8
ed710b88 804fa47b c000650c 01943000 00000000 nt!MiDeletePte+0x327
ed710c48 804f7685 e1773038 01dedfff 00000000 nt!MiDeleteVirtualAddresses+0x149
ed710cf4 80589732 81d7bda8 81ecadc8 ed710d64 nt!MiRemoveMappedView+0x212
ed710d38 805897e6 81d92da0 81d7c9f8 00000000 nt!MiUnmapViewOfSection+0x12a
ed710d54 804da1dd ffffffff 81d7bda8 00000000 nt!NtUnmapViewOfSection+0x52
ed710d54 7ffe0304 ffffffff 81d7bda8 00000000 nt!KiSystemService+0xc4
0012b19c 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4
FOLLOWUP_IP:
nt!MiDecrementCloneBlockReference+8
8052c3e4 ff4b1c           dec     dword ptr [ebx+0x1c]
SYMBOL_STACK_INDEX:  0
FOLLOWUP_NAME:  MachineOwner
SYMBOL_NAME:  nt!MiDecrementCloneBlockReference+8
MODULE_NAME:  nt
DEBUG_FLR_IMAGE_TIMESTAMP:  40d1d336
STACK_COMMAND:  .trap ffffffffed710ad4 ; kb
IMAGE_NAME:  memory_corruption
BUCKET_ID:  0xA_W_nt!MiDecrementCloneBlockReference+8
Followup: MachineOwner

2. This one I have no real clue about it.
DEREF_UNKNOWN_LOGON_SESSION (46)
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
DEFAULT_BUCKET_ID:  DRIVER_FAULT
BUGCHECK_STR:  0x46
LAST_CONTROL_TRANSFER:  from 805eec0d to 8052702b
STACK_TEXT:  
ed2e3d10 805eec0d 00000046 00000000 00000000 nt!KeBugCheckEx+0x19
ed2e3d38 8059338c e1f4a508 e1f4a4d8 8057fd4b nt!SepDeReferenceLogonSession+0x83
ed2e3d44 8057fd4b e1f4a4f0 e1f4a4d8 00000000 nt!SepTokenDeleteMethod+0x14
ed2e3d60 804ecf3d e1f4a4f0 00000000 815fa008 nt!ObpRemoveObjectRoutine+0xdd
ed2e3d84 ed0a3ada 81b4af3c ed0a0621 81b4af3c nt!ObfDereferenceObject+0x5d
WARNING: Stack unwind information not available. Following frames may be wrong.
ed2e3dac 8057dfe1 815fa008 00000000 00000000 naiavf5x+0xcada
ed2e3ddc 80512c12 ed0a1150 815fa008 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FOLLOWUP_IP:
naiavf5x+cada
ed0a3ada ??               ???
SYMBOL_STACK_INDEX:  5
FOLLOWUP_NAME:  MachineOwner
SYMBOL_NAME:  naiavf5x+cada
MODULE_NAME:  naiavf5x
IMAGE_NAME:  naiavf5x.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  3f2f0370
STACK_COMMAND:  kb
BUCKET_ID:  0x46_naiavf5x+cada
Followup: MachineOwner
---------


MANY THANKS

Frederic
fsalamonAsked:
Who is Participating?
 
cpc2004Connect With a Mentor Commented:
The crash is caused by faulty hardware such as ram, cpu or M/B. Install memtest and stress test your ram (www.memtest86.com )


Your naiavf5x.sys is 20 months behind and it had better to download the latest version.
naiavf5x.sys Tue Aug 05 03:08:00 2003 (3F2F0370)
0
 
OU_PhysiciansCommented:
was any hardware or software added that might have caused this?
0
 
fsalamonAuthor Commented:
no. The PC was built in October and nothing changed on the hardware side
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
fsalamonAuthor Commented:
in case this helps
The only thing I could see is that the user might have installed a USB DSL modem (Alcatel/thomson Speedtoutch) and Audacity but this was done long time ago shortly after the install.
0
 
cpc2004Commented:
Are you using nVidia Display Card? If no post the output of windbg 'lm tn' here.
0
 
fsalamonAuthor Commented:
hdw is IBM T41
Video is ATI Mobility Radeon 7500.

In my original post is the dbg of the 2 minidump. Should I send something more?
0
 
cpc2004Commented:
Yes, the output of 'lm tn'
0
 
fsalamonAuthor Commented:
Sorry. I am a native french and do not understand what is 'lm tn'
0
 
cpc2004Commented:
"lm tn' is a ommand within windbg.  Invoke windbg and open the crash dump. entter the 'lm tn' at the command line.
0
 
fsalamonAuthor Commented:
ok. I am not familiar with the dbg

1. IRQL_NOT_LESS_OR_EQUAL (a)

start    end        module name
804d4000 806c8e00   nt       ntoskrnl.exe Thu Jun 17 19:21:58 2004 (40D1D336)
806c9000 806dbe80   hal      halacpi.dll  Thu Aug 29 10:05:02 2002 (3D6DD5AE)
bf800000 bf9c2a80   win32k   win32k.sys   Thu Aug 05 20:14:31 2004 (41127907)
bf9c3000 bf9c4780   Ph32ldr  Ph32ldr.dll  Tue Feb 17 22:38:39 2004 (403289DF)
bf9c5000 bfa28000   ati2dvag ati2dvag.dll Fri May 14 03:39:22 2004 (40A4234A)
bfa28000 bfafc400   ati3d1ag ati3d1ag.dll Fri May 14 03:26:35 2004 (40A4204B)
bff80000 bff90d80   dxg      dxg.sys      Thu Aug 29 12:40:42 2002 (3D6DFA2A)
bffa0000 bffe2980   ATMFD    ATMFD.DLL    Fri Aug 17 23:55:56 2001 (3B7D92EC)
ed676000 ed6a0280   mrxdav   mrxdav.sys   Fri Aug 17 22:50:20 2001 (3B7D838C)
ed8a9000 ed8c9380   afd      afd.sys      Thu Aug 29 11:01:13 2002 (3D6DE2D9)
ed9c6000 ed9c9080   ndisuio  ndisuio.sys  Sat Aug 02 11:38:10 2003 (3F2B8682)
ed9d6000 ed9d8740   s24trans s24trans.sys Wed Feb 18 16:51:19 2004 (403389F7)
ed9de000 ed9e12e0   mdc8021x mdc8021x.sys Fri Jun 06 21:15:48 2003 (3EE0E864)
eda8a000 eda97800   irda     irda.sys     Fri Aug 17 22:51:32 2001 (3B7D83D4)
edad2000 edae7380   dump_atapi dump_atapi.sys Thu Aug 29 10:27:48 2002 (3D6DDB04)
edae8000 edb49e00   mrxsmb   mrxsmb.sys   Mon Feb 24 21:55:08 2003 (3E5A86AC)
edb72000 edb97d00   rdbss    rdbss.sys    Mon Feb 24 21:55:08 2003 (3E5A86AC)
edbb8000 edbdc700   netbt    netbt.sys    Wed Jul 09 01:48:51 2003 (3F0B5863)
edbdd000 edbf0000   csatdi_2k csatdi_2k.sys Wed Oct 29 22:55:37 2003 (3FA03759)
edbf0000 edc41480   tcpip    tcpip.sys    Thu Aug 29 10:58:10 2002 (3D6DE222)
f7de6000 f7dea000   watchdog watchdog.sys Thu Aug 29 10:32:20 2002 (3D6DDC14)
f7dea000 f7dec900   Dxapi    Dxapi.sys    Fri Aug 17 22:53:19 2001 (3B7D843F)
f7e12000 f7e33780   update   update.sys   Sat Aug 18 05:53:56 2001 (3B7DE6D4)
f7e34000 f7e60880   rdpdr    rdpdr.sys    Thu Aug 29 10:06:34 2002 (3D6DD60A)
f7f01000 f7f16600   ndiswan  ndiswan.sys  Thu Aug 29 10:58:38 2002 (3D6DE23E)
f7f17000 f7f31160   dne2000  dne2000.sys  Fri Jul 25 04:55:48 2003 (3F209C34)
f7f32000 f7f5afa0   csanet_2k csanet_2k.sys Wed Oct 29 22:55:25 2003 (3FA0374D)
f7f5b000 f7f6c5a0   csafile_2k csafile_2k.sys Wed Oct 29 22:55:05 2003 (3FA03739)
f7f6d000 f7f95180   csacenter_2k csacenter_2k.sys Wed Oct 29 22:55:01 2003 (3FA03735)
f7faa000 f7fada40   TPHKDRV  TPHKDRV.SYS  Mon Jun 23 00:33:56 2003 (3EF62ED4)
f7fbe000 f80e2140   AGRSM    AGRSM.sys    Fri Jun 27 14:53:43 2003 (3EFC3E57)
f80e3000 f80fa8c0   aeaudio  aeaudio.sys  Thu Jul 03 18:56:02 2003 (3F046022)
f80fb000 f811bc80   portcls  portcls.sys  Thu Aug 29 11:00:58 2002 (3D6DE2CA)
f811c000 f81a9300   smwdm    smwdm.sys    Tue May 27 23:05:41 2003 (3ED3D325)
f81aa000 f81c9d00   ks       ks.sys       Wed Dec 04 18:09:38 2002 (3DEE36D2)
f81ca000 f81dc900   parport  parport.sys  Thu Aug 29 10:27:29 2002 (3D6DDAF1)
f81dd000 f821eec0   SynTP    SynTP.sys    Wed Nov 19 18:52:22 2003 (3FBBADD6)
f821f000 f8236800   PCX504   PCX504.sys   Fri Feb 14 22:16:31 2003 (3E4D5CAF)
f8237000 f8255c00   e1000325 e1000325.sys Thu Aug 14 23:46:47 2003 (3F3C0347)
f8256000 f8277e00   USBPORT  USBPORT.SYS  Fri Jul 04 02:49:27 2003 (3F04CF17)
f8278000 f8289500   VIDEOPRT VIDEOPRT.SYS Thu Aug 29 10:32:03 2002 (3D6DDC03)
f828a000 f834a000   ati2mtag ati2mtag.sys Fri May 14 03:38:50 2004 (40A4232A)
f83a3000 f83bc680   Mup      Mup.sys      Thu Aug 29 11:12:53 2002 (3D6DE595)
f83bd000 f83e6100   NDIS     NDIS.sys     Sat Oct 04 09:54:08 2003 (3F7E7CA0)
f83e7000 f8470300   Ntfs     Ntfs.sys     Thu Aug 29 11:13:37 2002 (3D6DE5C1)
f8471000 f8484780   KSecDD   KSecDD.sys   Fri Aug 17 22:50:01 2001 (3B7D8379)
f8485000 f8495e80   sr       sr.sys       Thu Aug 29 10:17:56 2002 (3D6DD8B4)
f8496000 f84ab380   atapi    atapi.sys    Thu Aug 29 10:27:48 2002 (3D6DDB04)
f84ac000 f84ca880   ftdisk   ftdisk.sys   Fri Aug 17 22:52:41 2001 (3B7D8419)
f84cb000 f84e7400   pcmcia   pcmcia.sys   Thu Aug 29 10:09:09 2002 (3D6DD6A5)
f84e8000 f8513c80   ACPI     ACPI.sys     Thu Aug 29 10:09:03 2002 (3D6DD69F)
f8535000 f8544600   pci      pci.sys      Thu Aug 29 10:09:10 2002 (3D6DD6A6)
f8545000 f854dc00   isapnp   isapnp.sys   Fri Aug 17 22:58:01 2001 (3B7D8559)
f8555000 f855e280   MountMgr MountMgr.sys Fri Aug 17 22:47:36 2001 (3B7D82E8)
f8565000 f85714e0   Shockprf Shockprf.sys Thu Sep 11 03:03:11 2003 (3F5FC9CF)
f8575000 f8581000   VolSnap  VolSnap.sys  Fri Aug 17 22:53:19 2001 (3B7D843F)
f8585000 f858d400   disk     disk.sys     Thu Aug 29 10:27:56 2002 (3D6DDB0C)
f8595000 f85a0500   CLASSPNP CLASSPNP.SYS Thu Aug 29 11:08:42 2002 (3D6DE49A)
f85a5000 f85b2980   ohci1394 ohci1394.sys Thu Aug 29 10:33:19 2002 (3D6DDC4F)
f85b5000 f85c1580   1394BUS  1394BUS.SYS  Thu Aug 29 10:33:19 2002 (3D6DDC4F)
f85e5000 f85ed880   Fips     Fips.SYS     Sat Aug 18 03:31:49 2001 (3B7DC585)
f85f5000 f85fd200   wanarp   wanarp.sys   Fri Aug 17 22:55:23 2001 (3B7D84BB)
f8605000 f8613900   Cdfs     Cdfs.SYS     Thu Aug 29 10:58:50 2002 (3D6DE24A)
f8625000 f8631780   i8042prt i8042prt.sys Thu Aug 29 11:06:37 2002 (3D6DE41D)
f8635000 f8644400   serial   serial.sys   Thu Aug 29 11:08:27 2002 (3D6DE48B)
f8645000 f864eb80   imapi    imapi.sys    Thu Aug 29 10:28:05 2002 (3D6DDB15)
f8655000 f8660980   cdrom    cdrom.sys    Thu Aug 29 10:27:55 2002 (3D6DDB0B)
f8665000 f8672d00   redbook  redbook.sys  Thu Aug 29 10:27:45 2002 (3D6DDB01)
f8675000 f8683200   drmk     drmk.sys     Thu Aug 29 10:32:30 2002 (3D6DDC1E)
f8685000 f868dd20   csareg_2k csareg_2k.sys Wed Oct 29 22:55:09 2003 (3FA0373D)
f8695000 f86a0d00   rasl2tp  rasl2tp.sys  Thu Aug 29 11:06:36 2002 (3D6DE41C)
f86a5000 f86ae800   raspppoe raspppoe.sys Fri Aug 17 22:55:33 2001 (3B7D84C5)
f86b5000 f86c0480   raspptp  raspptp.sys  Wed Oct 02 02:52:28 2002 (3D9A434C)
f86c5000 f86ce400   termdd   termdd.sys   Thu Aug 29 10:40:32 2002 (3D6DDE00)
f86e5000 f86ee480   NDProxy  NDProxy.SYS  Fri Aug 17 22:55:30 2001 (3B7D84C2)
f8715000 f8721f80   usbhub   usbhub.sys   Fri Jul 04 02:52:56 2003 (3F04CFE8)
f8755000 f8763280   ipsec    ipsec.sys    Thu Aug 29 11:07:19 2002 (3D6DE447)
f8765000 f876d400   msgpc    msgpc.sys    Fri Aug 17 22:54:19 2001 (3B7D847B)
f8775000 f87832a0   mvstdi5x mvstdi5x.sys Fri Aug 20 13:43:55 2004 (4125E3FB)
f8785000 f878d180   netbios  netbios.sys  Thu Aug 29 10:35:45 2002 (3D6DDCE1)
f87a5000 f87b2a00   phw2ksys phw2ksys.sys Tue Feb 17 22:38:40 2004 (403289E0)
f87b5000 f87bac80   PCIIDEX  PCIIDEX.SYS  Thu Aug 29 10:27:47 2002 (3D6DDB03)
f87bd000 f87c1900   PartMgr  PartMgr.sys  Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f87c5000 f87c90a0   PxHelp20 PxHelp20.sys Thu Jul 31 03:24:38 2003 (3F286FD6)
f87cd000 f87d3380   agp440   agp440.sys   Fri Aug 17 22:57:59 2001 (3B7D8557)
f8825000 f882c780   processr processr.sys Thu Aug 29 10:05:03 2002 (3D6DD5AF)
f882d000 f8831b80   usbuhci  usbuhci.sys  Fri Jul 04 02:51:44 2003 (3F04CFA0)
f8835000 f883b280   usbehci  usbehci.sys  Fri Jul 04 02:50:45 2003 (3F04CF65)
f883d000 f8842b80   kbdclass kbdclass.sys Thu Aug 29 10:26:59 2002 (3D6DDAD3)
f8845000 f884a600   mouclass mouclass.sys Thu Aug 29 10:27:00 2002 (3D6DDAD4)
f884d000 f884e000   fdc      fdc.sys      unavailable (00000000)
f8855000 f885ac00   nscirda  nscirda.sys  Fri Aug 17 22:51:31 2001 (3B7D83D3)
f885d000 f8864000   ibmpmdrv ibmpmdrv.sys Thu Jul 03 04:54:03 2003 (3F039ACB)
f8865000 f886c000   GEARAspiWDM GEARAspiWDM.sys Tue Apr 06 00:37:14 2004 (4071DF9A)
f886d000 f8874080   Modem    Modem.SYS    Fri Aug 17 22:57:35 2001 (3B7D853F)
f8875000 f8879c80   rasirda  rasirda.sys  Fri Aug 17 22:51:29 2001 (3B7D83D1)
f887d000 f8881580   ptilink  ptilink.sys  Fri Aug 17 22:49:53 2001 (3B7D8371)
f8885000 f8889080   raspti   raspti.sys   Fri Aug 17 22:55:32 2001 (3B7D84C4)
f889d000 f88a1d00   vga      vga.sys      Thu Aug 29 10:32:03 2002 (3D6DDC03)
f88a5000 f88a9680   Msfs     Msfs.SYS     Fri Aug 17 22:50:02 2001 (3B7D837A)
f88ad000 f88b4380   Npfs     Npfs.SYS     Fri Aug 17 22:50:03 2001 (3B7D837B)
f88b5000 f88bd000   Tppwr    Tppwr.sys    Tue Dec 10 17:36:51 2002 (3DF61823)
f88bd000 f88c3000   TDSMAPI  TDSMAPI.SYS  Thu Nov 28 08:11:29 2002 (3DE5C1A1)
f88c5000 f88cd000   Smapint  Smapint.sys  Wed Dec 04 14:58:05 2002 (3DEE09ED)
f8945000 f8948000   BOOTVID  BOOTVID.dll  Fri Aug 17 22:49:09 2001 (3B7D8345)
f8949000 f894b480   compbatt compbatt.sys Fri Aug 17 22:57:58 2001 (3B7D8556)
f894d000 f8950700   BATTC    BATTC.SYS    Fri Aug 17 22:57:52 2001 (3B7D8550)
f8951000 f8953d80   ACPIEC   ACPIEC.sys   Fri Aug 17 22:57:55 2001 (3B7D8553)
f89ed000 f89ef280   rasacd   rasacd.sys   Fri Aug 17 22:55:39 2001 (3B7D84CB)
f89f9000 f89fca80   serenum  serenum.sys  Fri Aug 17 22:50:13 2001 (3B7D8385)
f89fd000 f89ff900   irenum   irenum.sys   Fri Aug 17 22:51:19 2001 (3B7D83C7)
f8a05000 f8a08380   CmBatt   CmBatt.sys   Thu Aug 29 10:09:04 2002 (3D6DD6A0)
f8a21000 f8a24f80   TDI      TDI.SYS      Fri Aug 17 22:57:25 2001 (3B7D8535)
f8a25000 f8a27580   ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f8a35000 f8a36b80   kdcom    kdcom.dll    Fri Aug 17 22:49:10 2001 (3B7D8346)
f8a37000 f8a38100   WMILIB   WMILIB.SYS   Fri Aug 17 23:07:23 2001 (3B7D878B)
f8a39000 f8a3a280   intelide intelide.sys Thu Aug 29 10:27:47 2002 (3D6DDB03)
f8a45000 f8a46280   USBD     USBD.SYS     Fri Aug 17 23:02:58 2001 (3B7D8682)
f8a47000 f8a48420   CVirtA   CVirtA.sys   Wed Apr 23 15:52:10 2003 (3EA69A8A)
f8a6b000 f8a6cf00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 22:49:37 2001 (3B7D8361)
f8a6d000 f8a6e080   Beep     Beep.SYS     Fri Aug 17 22:47:33 2001 (3B7D82E5)
f8a6f000 f8a70880   phmmini  phmmini.sys  Tue Feb 17 22:38:38 2004 (403289DE)
f8a71000 f8a72080   mnmdd    mnmdd.SYS    Fri Aug 17 22:57:28 2001 (3B7D8538)
f8a73000 f8a74080   RDPCDD   RDPCDD.sys   Fri Aug 17 22:46:56 2001 (3B7D82C0)
f8a75000 f8a76100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8aa9000 f8aaaa80   ParVdm   ParVdm.SYS   Fri Aug 17 22:49:49 2001 (3B7D836D)
f8afd000 f8afdd00   pciide   pciide.sys   Fri Aug 17 22:51:49 2001 (3B7D83E5)
f8afe000 f8afed80   OPRGHDLR OPRGHDLR.SYS Fri Aug 17 22:57:55 2001 (3B7D8553)
f8be0000 f8be0d80   PhPort2K_Kbd PhPort2K_Kbd.sys Wed Jun 20 20:36:27 2001 (3B30ED2B)
f8be2000 f8be2e00   PhPortVK PhPortVK.sys Wed Jun 20 20:36:36 2001 (3B30ED34)
f8be3000 f8be3c00   audstub  audstub.sys  Fri Aug 17 22:59:40 2001 (3B7D85BC)
f8be4000 f8be4d80   PhPort2K_Mou PhPort2K_Mou.sys Wed Jun 20 20:36:27 2001 (3B30ED2B)
f8be5000 f8be6000   swenum   swenum.sys   Wed Dec 04 18:10:07 2002 (3DEE36EF)
f8bf3000 f8bf3b80   Null     Null.SYS     Fri Aug 17 22:47:39 2001 (3B7D82EB)
f8c29000 f8c29d00   dxgthk   dxgthk.sys   Fri Aug 17 22:53:12 2001 (3B7D8438)

Unloaded modules:
f8795000 f879f000   p3.sys  
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8895000 f889a000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8bde000 f8bdf000   PhPortVK.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000


2.DEREF_UNKNOWN_LOGON_SESSION

start    end        module name
804d4000 806c8e00   nt       ntoskrnl.exe Thu Jun 17 19:21:58 2004 (40D1D336)
806c9000 806dbe80   hal      halacpi.dll  Thu Aug 29 10:05:02 2002 (3D6DD5AE)
bf800000 bf9c2a80   win32k   win32k.sys   Thu Aug 05 20:14:31 2004 (41127907)
bf9c3000 bf9c4780   Ph32ldr  Ph32ldr.dll  Tue Feb 17 22:38:39 2004 (403289DF)
bf9c5000 bfa28000   ati2dvag ati2dvag.dll Fri May 14 03:39:22 2004 (40A4234A)
bfa28000 bfafc400   ati3d1ag ati3d1ag.dll Fri May 14 03:26:35 2004 (40A4204B)
bff80000 bff90d80   dxg      dxg.sys      Thu Aug 29 12:40:42 2002 (3D6DFA2A)
bffa0000 bffe2980   ATMFD    ATMFD.DLL    Fri Aug 17 23:55:56 2001 (3B7D92EC)
ebdee000 ebe14e80   kmixer   kmixer.sys   Thu Aug 29 10:32:28 2002 (3D6DDC1C)
ecea4000 eceb6e80   wdmaud   wdmaud.sys   Thu Aug 29 11:00:46 2002 (3D6DE2BE)
ecf67000 ecf74e00   sysaudio sysaudio.sys Thu Aug 29 11:01:17 2002 (3D6DE2DD)
ed097000 ed0ab440   naiavf5x naiavf5x.sys Tue Aug 05 03:08:00 2003 (3F2F0370)
ed46c000 ed4baa00   srv      srv.sys      Fri Mar 28 20:54:53 2003 (3E84A88D)
ed583000 ed5fe000   CVPNDRVA CVPNDRVA.sys Wed Jun 16 19:06:58 2004 (40D07E32)
ed5fe000 ed6006c0   mdmxsdk  mdmxsdk.sys  Wed Apr 09 22:48:53 2003 (3E948735)
ed676000 ed6a0280   mrxdav   mrxdav.sys   Fri Aug 17 22:50:20 2001 (3B7D838C)
ed8a9000 ed8c9380   afd      afd.sys      Thu Aug 29 11:01:13 2002 (3D6DE2D9)
ed9c2000 ed9c5080   ndisuio  ndisuio.sys  Sat Aug 02 11:38:10 2003 (3F2B8682)
ed9da000 ed9dc740   s24trans s24trans.sys Wed Feb 18 16:51:19 2004 (403389F7)
eda8a000 eda97800   irda     irda.sys     Fri Aug 17 22:51:32 2001 (3B7D83D4)
edad2000 edae7380   dump_atapi dump_atapi.sys Thu Aug 29 10:27:48 2002 (3D6DDB04)
edaf8000 edafb2e0   mdc8021x mdc8021x.sys Fri Jun 06 21:15:48 2003 (3EE0E864)
edb10000 edb71e00   mrxsmb   mrxsmb.sys   Mon Feb 24 21:55:08 2003 (3E5A86AC)
edb72000 edb97d00   rdbss    rdbss.sys    Mon Feb 24 21:55:08 2003 (3E5A86AC)
edbb8000 edbdc700   netbt    netbt.sys    Wed Jul 09 01:48:51 2003 (3F0B5863)
edbdd000 edbf0000   csatdi_2k csatdi_2k.sys Wed Oct 29 22:55:37 2003 (3FA03759)
edbf0000 edc41480   tcpip    tcpip.sys    Thu Aug 29 10:58:10 2002 (3D6DE222)
f7dea000 f7dee000   watchdog watchdog.sys Thu Aug 29 10:32:20 2002 (3D6DDC14)
f7dee000 f7df0900   Dxapi    Dxapi.sys    Fri Aug 17 22:53:19 2001 (3B7D843F)
f7e12000 f7e33780   update   update.sys   Sat Aug 18 05:53:56 2001 (3B7DE6D4)
f7e34000 f7e60880   rdpdr    rdpdr.sys    Thu Aug 29 10:06:34 2002 (3D6DD60A)
f7f01000 f7f16600   ndiswan  ndiswan.sys  Thu Aug 29 10:58:38 2002 (3D6DE23E)
f7f17000 f7f31160   dne2000  dne2000.sys  Fri Jul 25 04:55:48 2003 (3F209C34)
f7f32000 f7f5afa0   csanet_2k csanet_2k.sys Wed Oct 29 22:55:25 2003 (3FA0374D)
f7f5b000 f7f6c5a0   csafile_2k csafile_2k.sys Wed Oct 29 22:55:05 2003 (3FA03739)
f7f6d000 f7f95180   csacenter_2k csacenter_2k.sys Wed Oct 29 22:55:01 2003 (3FA03735)
f7fb2000 f7fb5a40   TPHKDRV  TPHKDRV.SYS  Mon Jun 23 00:33:56 2003 (3EF62ED4)
f7fbe000 f80e2140   AGRSM    AGRSM.sys    Fri Jun 27 14:53:43 2003 (3EFC3E57)
f80e3000 f80fa8c0   aeaudio  aeaudio.sys  Thu Jul 03 18:56:02 2003 (3F046022)
f80fb000 f811bc80   portcls  portcls.sys  Thu Aug 29 11:00:58 2002 (3D6DE2CA)
f811c000 f81a9300   smwdm    smwdm.sys    Tue May 27 23:05:41 2003 (3ED3D325)
f81aa000 f81c9d00   ks       ks.sys       Wed Dec 04 18:09:38 2002 (3DEE36D2)
f81ca000 f81dc900   parport  parport.sys  Thu Aug 29 10:27:29 2002 (3D6DDAF1)
f81dd000 f821eec0   SynTP    SynTP.sys    Wed Nov 19 18:52:22 2003 (3FBBADD6)
f821f000 f8236800   PCX504   PCX504.sys   Fri Feb 14 22:16:31 2003 (3E4D5CAF)
f8237000 f8255c00   e1000325 e1000325.sys Thu Aug 14 23:46:47 2003 (3F3C0347)
f8256000 f8277e00   USBPORT  USBPORT.SYS  Fri Jul 04 02:49:27 2003 (3F04CF17)
f8278000 f8289500   VIDEOPRT VIDEOPRT.SYS Thu Aug 29 10:32:03 2002 (3D6DDC03)
f828a000 f834a000   ati2mtag ati2mtag.sys Fri May 14 03:38:50 2004 (40A4232A)
f83a3000 f83bc680   Mup      Mup.sys      Thu Aug 29 11:12:53 2002 (3D6DE595)
f83bd000 f83e6100   NDIS     NDIS.sys     Sat Oct 04 09:54:08 2003 (3F7E7CA0)
f83e7000 f8470300   Ntfs     Ntfs.sys     Thu Aug 29 11:13:37 2002 (3D6DE5C1)
f8471000 f8484780   KSecDD   KSecDD.sys   Fri Aug 17 22:50:01 2001 (3B7D8379)
f8485000 f8495e80   sr       sr.sys       Thu Aug 29 10:17:56 2002 (3D6DD8B4)
f8496000 f84ab380   atapi    atapi.sys    Thu Aug 29 10:27:48 2002 (3D6DDB04)
f84ac000 f84ca880   ftdisk   ftdisk.sys   Fri Aug 17 22:52:41 2001 (3B7D8419)
f84cb000 f84e7400   pcmcia   pcmcia.sys   Thu Aug 29 10:09:09 2002 (3D6DD6A5)
f84e8000 f8513c80   ACPI     ACPI.sys     Thu Aug 29 10:09:03 2002 (3D6DD69F)
f8535000 f8544600   pci      pci.sys      Thu Aug 29 10:09:10 2002 (3D6DD6A6)
f8545000 f854dc00   isapnp   isapnp.sys   Fri Aug 17 22:58:01 2001 (3B7D8559)
f8555000 f855e280   MountMgr MountMgr.sys Fri Aug 17 22:47:36 2001 (3B7D82E8)
f8565000 f85714e0   Shockprf Shockprf.sys Thu Sep 11 03:03:11 2003 (3F5FC9CF)
f8575000 f8581000   VolSnap  VolSnap.sys  Fri Aug 17 22:53:19 2001 (3B7D843F)
f8585000 f858d400   disk     disk.sys     Thu Aug 29 10:27:56 2002 (3D6DDB0C)
f8595000 f85a0500   CLASSPNP CLASSPNP.SYS Thu Aug 29 11:08:42 2002 (3D6DE49A)
f85a5000 f85b2980   ohci1394 ohci1394.sys Thu Aug 29 10:33:19 2002 (3D6DDC4F)
f85b5000 f85c1580   1394BUS  1394BUS.SYS  Thu Aug 29 10:33:19 2002 (3D6DDC4F)
f85e5000 f85f0980   cdrom    cdrom.sys    Thu Aug 29 10:27:55 2002 (3D6DDB0B)
f85f5000 f8602d00   redbook  redbook.sys  Thu Aug 29 10:27:45 2002 (3D6DDB01)
f8605000 f8613200   drmk     drmk.sys     Thu Aug 29 10:32:30 2002 (3D6DDC1E)
f8615000 f861dd20   csareg_2k csareg_2k.sys Wed Oct 29 22:55:09 2003 (3FA0373D)
f8625000 f8630d00   rasl2tp  rasl2tp.sys  Thu Aug 29 11:06:36 2002 (3D6DE41C)
f8635000 f863e800   raspppoe raspppoe.sys Fri Aug 17 22:55:33 2001 (3B7D84C5)
f8645000 f8650480   raspptp  raspptp.sys  Wed Oct 02 02:52:28 2002 (3D9A434C)
f8655000 f865e400   termdd   termdd.sys   Thu Aug 29 10:40:32 2002 (3D6DDE00)
f8675000 f867e480   NDProxy  NDProxy.SYS  Fri Aug 17 22:55:30 2001 (3B7D84C2)
f86a5000 f86b1f80   usbhub   usbhub.sys   Fri Jul 04 02:52:56 2003 (3F04CFE8)
f86e5000 f86f3280   ipsec    ipsec.sys    Thu Aug 29 11:07:19 2002 (3D6DE447)
f86f5000 f86fd400   msgpc    msgpc.sys    Fri Aug 17 22:54:19 2001 (3B7D847B)
f8705000 f870d180   netbios  netbios.sys  Thu Aug 29 10:35:45 2002 (3D6DDCE1)
f8725000 f8732a00   phw2ksys phw2ksys.sys Tue Feb 17 22:38:40 2004 (403289E0)
f8735000 f873d880   Fips     Fips.SYS     Sat Aug 18 03:31:49 2001 (3B7DC585)
f8745000 f874d200   wanarp   wanarp.sys   Fri Aug 17 22:55:23 2001 (3B7D84BB)
f8755000 f8763900   Cdfs     Cdfs.SYS     Thu Aug 29 10:58:50 2002 (3D6DE24A)
f8785000 f8791780   i8042prt i8042prt.sys Thu Aug 29 11:06:37 2002 (3D6DE41D)
f8795000 f87a4400   serial   serial.sys   Thu Aug 29 11:08:27 2002 (3D6DE48B)
f87a5000 f87aeb80   imapi    imapi.sys    Thu Aug 29 10:28:05 2002 (3D6DDB15)
f87b5000 f87bac80   PCIIDEX  PCIIDEX.SYS  Thu Aug 29 10:27:47 2002 (3D6DDB03)
f87bd000 f87c1900   PartMgr  PartMgr.sys  Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f87c5000 f87c90a0   PxHelp20 PxHelp20.sys Thu Jul 31 03:24:38 2003 (3F286FD6)
f87cd000 f87d3380   agp440   agp440.sys   Fri Aug 17 22:57:59 2001 (3B7D8557)
f886d000 f8874780   processr processr.sys Thu Aug 29 10:05:03 2002 (3D6DD5AF)
f8875000 f8879b80   usbuhci  usbuhci.sys  Fri Jul 04 02:51:44 2003 (3F04CFA0)
f887d000 f8883280   usbehci  usbehci.sys  Fri Jul 04 02:50:45 2003 (3F04CF65)
f8885000 f888ab80   kbdclass kbdclass.sys Thu Aug 29 10:26:59 2002 (3D6DDAD3)
f888d000 f8892600   mouclass mouclass.sys Thu Aug 29 10:27:00 2002 (3D6DDAD4)
f8895000 f8896000   fdc      fdc.sys      unavailable (00000000)
f889d000 f88a2c00   nscirda  nscirda.sys  Fri Aug 17 22:51:31 2001 (3B7D83D3)
f88a5000 f88ac000   ibmpmdrv ibmpmdrv.sys Thu Jul 03 04:54:03 2003 (3F039ACB)
f88ad000 f88b4000   GEARAspiWDM GEARAspiWDM.sys Tue Apr 06 00:37:14 2004 (4071DF9A)
f88b5000 f88bc080   Modem    Modem.SYS    Fri Aug 17 22:57:35 2001 (3B7D853F)
f88bd000 f88c1c80   rasirda  rasirda.sys  Fri Aug 17 22:51:29 2001 (3B7D83D1)
f88c5000 f88c9580   ptilink  ptilink.sys  Fri Aug 17 22:49:53 2001 (3B7D8371)
f88cd000 f88d1080   raspti   raspti.sys   Fri Aug 17 22:55:32 2001 (3B7D84C4)
f88e5000 f88e9d00   vga      vga.sys      Thu Aug 29 10:32:03 2002 (3D6DDC03)
f88ed000 f88f1680   Msfs     Msfs.SYS     Fri Aug 17 22:50:02 2001 (3B7D837A)
f88f5000 f88fc380   Npfs     Npfs.SYS     Fri Aug 17 22:50:03 2001 (3B7D837B)
f88fd000 f8905000   Tppwr    Tppwr.sys    Tue Dec 10 17:36:51 2002 (3DF61823)
f8905000 f890b000   TDSMAPI  TDSMAPI.SYS  Thu Nov 28 08:11:29 2002 (3DE5C1A1)
f890d000 f8915000   Smapint  Smapint.sys  Wed Dec 04 14:58:05 2002 (3DEE09ED)
f8945000 f8948000   BOOTVID  BOOTVID.dll  Fri Aug 17 22:49:09 2001 (3B7D8345)
f8949000 f894b480   compbatt compbatt.sys Fri Aug 17 22:57:58 2001 (3B7D8556)
f894d000 f8950700   BATTC    BATTC.SYS    Fri Aug 17 22:57:52 2001 (3B7D8550)
f8951000 f8953d80   ACPIEC   ACPIEC.sys   Fri Aug 17 22:57:55 2001 (3B7D8553)
f89ed000 f89ef280   rasacd   rasacd.sys   Fri Aug 17 22:55:39 2001 (3B7D84CB)
f8a01000 f8a04a80   serenum  serenum.sys  Fri Aug 17 22:50:13 2001 (3B7D8385)
f8a05000 f8a07900   irenum   irenum.sys   Fri Aug 17 22:51:19 2001 (3B7D83C7)
f8a0d000 f8a10380   CmBatt   CmBatt.sys   Thu Aug 29 10:09:04 2002 (3D6DD6A0)
f8a2d000 f8a30f80   TDI      TDI.SYS      Fri Aug 17 22:57:25 2001 (3B7D8535)
f8a31000 f8a33580   ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f8a35000 f8a36b80   kdcom    kdcom.dll    Fri Aug 17 22:49:10 2001 (3B7D8346)
f8a37000 f8a38100   WMILIB   WMILIB.SYS   Fri Aug 17 23:07:23 2001 (3B7D878B)
f8a39000 f8a3a280   intelide intelide.sys Thu Aug 29 10:27:47 2002 (3D6DDB03)
f8a4b000 f8a4c400   PMEMNT   PMEMNT.SYS   Thu Sep 30 17:51:09 1999 (37F386ED)
f8a55000 f8a56280   USBD     USBD.SYS     Fri Aug 17 23:02:58 2001 (3B7D8682)
f8a79000 f8a7af00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 22:49:37 2001 (3B7D8361)
f8a7b000 f8a7c080   Beep     Beep.SYS     Fri Aug 17 22:47:33 2001 (3B7D82E5)
f8a7d000 f8a7e880   phmmini  phmmini.sys  Tue Feb 17 22:38:38 2004 (403289DE)
f8a7f000 f8a80080   mnmdd    mnmdd.SYS    Fri Aug 17 22:57:28 2001 (3B7D8538)
f8a81000 f8a82080   RDPCDD   RDPCDD.sys   Fri Aug 17 22:46:56 2001 (3B7D82C0)
f8a83000 f8a84100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f8af1000 f8af2000   ParVdm   ParVdm.SYS   unavailable (00000000)
f8afd000 f8afdd00   pciide   pciide.sys   Fri Aug 17 22:51:49 2001 (3B7D83E5)
f8afe000 f8afed80   OPRGHDLR OPRGHDLR.SYS Fri Aug 17 22:57:55 2001 (3B7D8553)
f8b1a000 f8b1ad80   PhPort2K_Kbd PhPort2K_Kbd.sys Wed Jun 20 20:36:27 2001 (3B30ED2B)
f8b1c000 f8b1ce00   PhPortVK PhPortVK.sys Wed Jun 20 20:36:36 2001 (3B30ED34)
f8b1d000 f8b1dc00   audstub  audstub.sys  Fri Aug 17 22:59:40 2001 (3B7D85BC)
f8b1e000 f8b1ed80   PhPort2K_Mou PhPort2K_Mou.sys Wed Jun 20 20:36:27 2001 (3B30ED2B)
f8b1f000 f8b20000   swenum   swenum.sys   Wed Dec 04 18:10:07 2002 (3DEE36EF)
f8b2d000 f8b2e000   Null     Null.SYS     unavailable (00000000)
f8b64000 f8b64d00   dxgthk   dxgthk.sys   Fri Aug 17 22:53:12 2001 (3B7D8438)
f8c60000 f8c60ec0   ShockMgr ShockMgr.SYS Thu Jul 24 06:26:55 2003 (3F1F600F)
f8c82000 f8c827c0   AlKernel AlKernel.sys Sat Aug 25 00:31:42 2001 (3B86D5CE)

Unloaded modules:
ec405000 ec40a000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec43d000 ec442000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec049000 ec070000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec1b0000 ec1d7000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec1b0000 ec1d7000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec1b0000 ec1d7000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8835000 f883a000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec277000 ec29e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec317000 ec33e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec317000 ec33e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec317000 ec33e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec317000 ec33e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec3de000 ec405000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec455000 ec47c000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec455000 ec47c000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec455000 ec47c000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ec5bc000 ec5e3000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f882d000 f8832000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8915000 f891a000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ecd43000 ecd6a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8835000 f883a000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f8c2e000 f8c2f000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ecdba000 ecde1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ecf47000 ecf54000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.