BSOD - driver unknown

CPRJay · Nov 18, 2010

I have read the forum rules on how to post on BSOD, but I was hoping to skip the info since my question is specifically about the driver.

I have spent hours trying to find a solution to no avail. Using the software BlueScreenView, the results I get are:

Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 0xe7741000
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x82a0eccb
Caused By Driver : ngfpl.sys
Caused By Address : ngfpl.sys+4ccb
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini111310-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
==================================================

I am trying to repair the computer for someone else, so I do not know what driver she updated to cause the BSOD. The only symptom I know is that the BSOD occurs only when I'm online, which leads me to think the faulty driver is possibly network related somehow?

Does anyone know what ngfpl.sys is? This file does not have any info on it when I look at the properties in the System32/drivers folder. Everywhere I have read says to identify the driver, but I cannot find out any info on what this driver is so makes it hard to fix it...lol

Any help would be appreciated, thank you.

Capt.Jack Sparrow · Nov 18, 2010

Hello and Welcome !

We need the actual DMP file to analysis further. Follow this thread http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html

Hope this helps,
Captain

richc46 · Nov 18, 2010

Of course the good Captain is correct we need that dump file. Although they are not definitive they give vital clues to help us solve your problem
That being said, in the past, when I googled a driver and the only hit was the question that I was researching, the usual outcome was a virus.

CPRJay · Nov 18, 2010

Hi Captain and richc46,

Thanks for the help, I am currently going step by step for the BSOD instructions and I will include the files on my next post once it is complete.

Thanks again, should be soon.

richc46 · Nov 18, 2010

Make a full antivirus scan
Download and run malwarebytes with a full scan after you update.

CPRJay · Nov 18, 2010

Hi,

I think I did everything ok, I have attached the reports. I ran an antivirus (avg) and malwarebytes full system scan last night and it yielded no results.

Vista Home Premium 32-bit OEM
original installed OS, not sure how old laptop is.

Thanks again for your help!

richc46 · Nov 18, 2010

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Windows_NT6_BSOD_jcgriff2.zip\Windows_NT6_BSOD_jcgriff2\Mini111610-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x8243d000 PsLoadedModuleList = 0x82554c70
Debug session time: Tue Nov 16 11:28:20.674 2010 (GMT-5)
System Uptime: 0 days 1:05:43.638
Loading Kernel Symbols
...............................................................
................................................................
................................................................
....
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {e138a000, 2, 0, 82a0fccb}
Unable to load image \SystemRoot\System32\Drivers\ngfpl.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ngfpl.sys
*** ERROR: Module load completed but symbols could not be loaded for ngfpl.sys
Probably caused by : ngfpl.sys ( ngfpl+4ccb )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: e138a000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 82a0fccb, address which referenced memory
Debugging Details:
------------------
 
READ_ADDRESS: GetPointerFromAddress: unable to read from 82574868
Unable to read MiSystemVaType memory at 82554420
 e138a000 
CURRENT_IRQL:  2
FAULTING_IP: 
ngfpl+4ccb
82a0fccb ??              ???
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  firefox.exe
TRAP_FRAME:  8039d348 -- (.trap 0xffffffff8039d348)
ErrCode = 00000000
eax=e138a000 ebx=0000000a ecx=e1389fff edx=e1389fff esi=e1389fff edi=e1389a58
eip=82a0fccb esp=8039d3bc ebp=8039d3cc iopl=0         nv up ei ng nz na pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010287
ngfpl+0x4ccb:
82a0fccb ??              ???
Resetting default scope
LAST_CONTROL_TRANSFER:  from 82a0fccb to 8248afd9
STACK_TEXT:  
8039d348 82a0fccb badb0d00 e1389fff 000005a8 nt!KiTrap0E+0x2e1
WARNING: Stack unwind information not available. Following frames may be wrong.
8039d3b8 00000000 e1389a58 8039d4f0 000005a8 ngfpl+0x4ccb
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
ngfpl+4ccb
82a0fccb ??              ???
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  ngfpl+4ccb
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: ngfpl
IMAGE_NAME:  ngfpl.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4ca69351
FAILURE_BUCKET_ID:  0xD1_ngfpl+4ccb
BUCKET_ID:  0xD1_ngfpl+4ccb
Followup: MachineOwner
---------
0: kd> lmtsmn
start    end        module name
80692000 806d8000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
83060000 830ca000   adp94xx  adp94xx.sys  Tue Apr 24 17:00:29 2007 (462E6FED)
830ca000 83116000   adpahci  adpahci.sys  Tue May 01 13:29:26 2007 (463778F6)
83116000 83131000   adpu160m adpu160m.sys Wed Feb 21 13:04:35 2007 (45DC89B3)
83157000 8317d000   adpu320  adpu320.sys  Tue Feb 27 19:03:08 2007 (45E4C6BC)
90518000 90560000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
82b69000 82b70000   aliide   aliide.sys   Mon Jun 02 21:10:33 2008 (48449A09)
82b70000 82b77000   amdide   amdide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
83191000 831a7000   arc      arc.sys      Thu May 24 17:31:06 2007 (4656041A)
831a7000 831bd000   arcsas   arcsas.sys   Fri May 25 14:56:36 2007 (46573164)
ad5b7000 ad5c0000   asyncmac asyncmac.sys Sat Jan 19 00:56:29 2008 (4791910D)
82bf4000 82bfc000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
807dc000 807fa000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
8f8d1000 8f9b5000   athr     athr.sys     Sun Apr 27 14:07:41 2008 (4814C0ED)
990a0000 990ec000   ATMFD    ATMFD.DLL    Wed May 26 10:47:41 2010 (4BFD348D)
90801000 90851380   avgldx86 avgldx86.sys Thu Jul 09 20:17:49 2009 (4A5688AD)
905f4000 905f9280   avgmfx86 avgmfx86.sys Wed Jul 01 16:37:21 2009 (4A4BC901)
904cd000 904e5e00   avgtdix  avgtdix.sys  Mon Apr 06 09:42:27 2009 (49DA06C3)
82af1000 82afb000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
9042d000 90434000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
80489000 80491000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
ac098000 ac0b1000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
99090000 9909e000   cdd      cdd.dll      Thu Sep 24 21:27:02 2009 (4ABC1C66)
ad565000 ad57b000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
8f7e4000 8f7fc000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
9015b000 90196000   CHDRT32  CHDRT32.sys  Fri Oct 03 14:39:26 2008 (48E666DE)
804d2000 805b2000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
82bc4000 82be5000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80491000 804d2000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
8f9e5000 8f9e8780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
82b77000 82b7f000   cmdide   cmdide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
82aee000 82af0900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
9088a000 90897000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
8b7b8000 8b7c1000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
905dd000 905f4000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
8b7a7000 8b7b8000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
8317d000 83191000   djsvs    djsvs.sys    Tue Apr 11 20:20:11 2006 (443C47BB)
901c3000 901e8000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
90897000 908a2000   dump_dumpata dump_dumpata.sys Sat Apr 11 00:39:09 2009 (49E01EED)
908a2000 908ac000   dump_msahci dump_msahci.sys Sat Apr 11 00:39:11 2009 (49E01EEF)
908ac000 908b6000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8f71d000 8f7be000   dxgkrnl  dxgkrnl.sys  Thu Sep 24 21:27:14 2009 (4ABC1C72)
8b780000 8b7a7000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
8320f000 832a3000   elxstor  elxstor.sys  Wed Apr 11 11:45:07 2007 (461D0283)
ad516000 ad53e000   fastfat  fastfat.SYS  Sat Apr 11 00:13:52 2009 (49E01900)
8b253000 8b263000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
8b221000 8b253000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
9041d000 90426000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
8b55c000 8b577000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
8f9e9000 8f9ee280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
8240a000 8243d000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
8f803000 8f890000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
9043d000 90443380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
83055000 83060000   hpcisss  hpcisss.sys  Fri Mar 09 14:51:35 2007 (45F1BAC7)
8f9c8000 8f9cc180   HpqKbFiltr HpqKbFiltr.sys Mon Jun 18 18:12:03 2007 (46770333)
90349000 903fe000   HSX_CNXT HSX_CNXT.sys Thu Nov 01 20:46:56 2007 (472A7380)
90246000 90349000   HSX_DPV  HSX_DPV.sys  Thu Nov 01 20:50:39 2007 (472A745F)
90208000 90246000   HSXHWAZL HSXHWAZL.sys Thu Nov 01 20:47:51 2007 (472A73B7)
ac00e000 ac07b000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
832a3000 832ad000   i2omp    i2omp.sys    Sat Jan 19 00:49:44 2008 (47918F78)
8f9b5000 8f9c8000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
8073b000 807dc000   iastorv  iastorv.sys  Fri Sep 28 14:17:27 2007 (46FD4537)
8ee00000 8f71d000   igdkmd32 igdkmd32.sys Wed Aug 25 15:31:24 2010 (4C756F8C)
832ad000 832bd000   iirsp    iirsp.sys    Tue Dec 13 16:48:01 2005 (439F4191)
8b3df000 8b400000   IntcHdmi IntcHdmi.sys Mon Jun 30 08:52:24 2008 (4868D708)
82b54000 82b5b000   intelide intelide.sys Mon Jun 02 21:10:34 2008 (48449A0A)
8b577000 8b586000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
80710000 8071f000   isapnp   isapnp.sys   Sat Jan 19 00:32:55 2008 (47918B87)
832bd000 832c9000   iteatapi iteatapi.sys Thu Aug 10 22:11:47 2006 (44DBE763)
832c9000 832d5000   iteraid  iteraid.sys  Thu Aug 10 21:38:19 2006 (44DBDF8B)
8f9cd000 8f9d8000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
80401000 80408000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
900d4000 900fe000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
8b263000 8b2d4000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
90990000 909a0000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
832d5000 832ef000   lsi_fc   lsi_fc.sys   Fri Jun 29 21:01:20 2007 (4685AB60)
832ef000 83307000   lsi_sas  lsi_sas.sys  Fri Jun 29 21:01:01 2007 (4685AB4D)
805b2000 805cc000   lsi_scsi lsi_scsi.sys Fri Jun 29 20:47:54 2007 (4685A83A)
908c5000 908e0000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
80408000 80478000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 02:23:19 2009 (49E03757)
ac1e5000 ac1e8180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:26:59 2006 (449716A3)
83307000 83311000   megasas  megasas.sys  Fri May 25 18:19:58 2007 (4657610E)
83311000 833c8000   megasr   megasr.sys   Mon Jul 02 17:50:10 2007 (46897312)
901e8000 901f5000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
908b6000 908c5000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8f9da000 8f9e5000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
82b7f000 82b8f000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
8071f000 8073b000   mpio     mpio.sys     Sat Jan 19 00:50:40 2008 (47918FB0)
ac0b1000 ac0c6000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
833c8000 833d3000   mraid35x mraid35x.sys Thu Sep 07 21:21:32 2006 (4500C59C)
ac0c6000 ac0e7000   mrxdav   mrxdav.sys   Sat Apr 11 00:14:39 2009 (49E0192F)
ac0e7000 ac106000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
ac106000 ac13f000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
ac13f000 ac157000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
8304b000 83055000   msahci   msahci.sys   Sat Apr 11 00:39:11 2009 (49E01EEF)
82b8f000 82ba9000   msdsm    msdsm.sys    Sat Jan 19 00:50:46 2008 (47918FB6)
90481000 9048c000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
806e1000 806e9000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
9000b000 9003a000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
8b40c000 8b437000   msrpc    msrpc.sys    Sat Apr 11 00:37:32 2009 (49E01E8C)
900fe000 90108000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8b771000 8b780000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
8b2d4000 8b3df000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
9005c000 90067000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
909ca000 909d4000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
90067000 9008a000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
9014a000 9015b000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
90576000 90584000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
904e6000 90518000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
8b437000 8b472000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
833d3000 833e1000   nfrd960  nfrd960.sys  Tue Jun 06 17:12:15 2006 (4485EFAF)
82a0b000 82adf000   [B]ngfpl    ngfpl.sys    Fri Oct 01 22:05:05 2010[/B] (4CA69351)
9048c000 9049a000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
905d3000 905dd000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
8243d000 827f6000   nt       ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
8b603000 8b713000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
90426000 9042d000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
82ba9000 82bc4000   nvraid   nvraid.sys   Wed Jun 06 16:34:41 2007 (46671A61)
833e1000 833ee000   nvstor   nvstor.sys   Wed Jun 06 16:34:41 2007 (46671A61)
909a0000 909ca000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
90560000 90576000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
82adf000 82aee000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
806e9000 80710000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
82be5000 82bec000   pciide   pciide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
82b5b000 82b69000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
ad405000 ad4e3000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
90196000 901c3000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
80478000 80489000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
8b006000 8b13e000   ql2300   ql2300.sys   Fri Mar 09 18:13:05 2007 (45F1EA01)
8b13e000 8b193000   ql40xx   ql40xx.sys   Thu Jul 06 15:38:16 2006 (44AD66A8)
9049a000 904a3000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
90045000 9005c000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
9008a000 90099000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
90099000 900ad000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
900ad000 900c2000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
90597000 905d3000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
90471000 90479000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
90479000 90481000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
909d4000 909e7000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
8f890000 8f8d1000   Rtlh86   Rtlh86.sys   Wed Jun 23 05:21:07 2010 (4C21D203)
90409000 9041d000   RTSTOR   RTSTOR.SYS   Thu Mar 26 04:00:00 2009 (49CB3600)
8b75c000 8b771000   sbp2port sbp2port.sys Thu Nov 02 04:51:44 2006 (4549B1A0)
83131000 83157000   SCSIPORT SCSIPORT.SYS Sat Jan 19 00:49:44 2008 (47918F78)
ad4e3000 ad4ed000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8b193000 8b1a0000   sisraid2 sisraid2.sys Fri Apr 13 18:34:24 2007 (46200570)
8b1a0000 8b1b5000   sisraid4 sisraid4.sys Fri Apr 13 19:38:55 2007 (4620148F)
904b9000 904cd000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
8b754000 8b75c000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
908e0000 90990000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
ac17f000 ac1cd000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
ac157000 ac17f000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
ac07b000 ac098000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
8300a000 8304b000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
900d2000 900d3380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8b1c1000 8b1cc000   sym_hi   sym_hi.sys   Fri Nov 11 16:07:07 2005 (437507FB)
8b1cc000 8b1d7000   sym_u3   sym_u3.sys   Thu Oct 20 20:12:49 2005 (43583281)
8b1b5000 8b1c1000   symc8xx  symc8xx.sys  Fri Nov 11 17:45:56 2005 (43751F24)
8b5c4000 8b5f3080   SynTP    SynTP.sys    Thu Apr 17 20:15:05 2008 (4807E809)
8b472000 8b55c000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
ad4ed000 ad4f9000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
9003a000 90045000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
904a3000 904b9000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
900c2000 900d2000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
99070000 99079000   TSDDD    TSDDD.dll    unavailable (00000000)
8b7ee000 8b7f7000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
8b7e3000 8b7ee000   tunnel   tunnel.sys   Thu Feb 18 06:28:13 2010 (4B7D244D)
831bd000 831f9000   uliahci  uliahci.sys  Fri May 04 12:18:25 2007 (463B5CD1)
8b1d7000 8b1f8000   ulsata   ulsata.sys   Tue Sep 19 20:02:59 2006 (45108533)
805cc000 805f8000   ulsata2  ulsata2.sys  Tue Sep 19 20:18:47 2006 (451088E7)
90108000 90115000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
90852000 90869000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
8f9d8000 8f9d9700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8f7d5000 8f7e4000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
90115000 9014a000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8b586000 8b5c4000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
ad57b000 ad590000   USBSTOR  USBSTOR.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
8f7ca000 8f7d5000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
90869000 90889b80   usbvideo usbvideo.sys Sat Jan 19 00:53:38 2008 (47919062)
90444000 90450000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
82bec000 82bf4000   viaide   viaide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
90450000 90471000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
82afb000 82b0a000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
82b0a000 82b54000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
8b71b000 8b754000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
8b200000 8b221000   vsmraid  vsmraid.sys  Wed May 30 17:15:38 2007 (465DE97A)
90584000 90597000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8f7be000 8f7ca000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
8b713000 8b71b000   wd       wd.sys       Sat Jan 19 00:52:18 2008 (47919012)
80609000 80685000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
80685000 80692000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
98e50000 99053000   win32k   win32k.sys   Tue Aug 31 09:27:25 2010 (4C7D033D)
8b7f7000 8b800000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
806d8000 806e1000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
ad5a5000 ad5b7000   WUDFPf   WUDFPf.sys   Sat Jan 19 00:52:49 2008 (47919031)
ad590000 ad5a4580   WUDFRd   WUDFRd.sys   Sat Jan 19 00:53:04 2008 (47919040)
ad4f9000 ad501000   xaudio   xaudio.sys   Thu Oct 18 18:36:53 2007 (4717E005)

You gave two reports they both indicate the driver
ngfpl.sys Fri Oct 01 22:05:05 2010

Very strange, the driver has a date of Oct 2010, very current and yet nothing in Google. I suggest that in lieu uninstalling,
You go to the driver location change the .sys to .bup and see what happens.
I do not want to uninstall just in case it is actually needed for some software, we can never find it again LOL

kamiasss · Nov 18, 2010

Hello? I posted a thread and nobody seems to help me?

CPRJay · Nov 18, 2010

Hi richc46,

When I try to rename the file, I get a cannot read from the source file or disk pop up.

I also tried to copy the file so I'd have one as a backup and it gives me the same message.

Thank you again

richc46 · Nov 18, 2010

You have to go to
C-->Windows-->System 32-->drivers.

and

make a system restore point first.

CPRJay · Nov 18, 2010

Hi richc46,

I did just that, I made a restore point first, then I went to the Windows/System32/drivers folder to try and change the file.

Any other ideas? Thanks!

richc46 · Nov 18, 2010

Was it changed?

CPRJay · Nov 18, 2010

Hi richc46,

I still couldn't make any changes to the file. When I go to it's properties, this is the description...(hehe, not much of one)

Property - Value
Type - System File
File Version -
Product name -
Product Version -
Copyright -
Size - 824KB
Date modified - 11/18/2010 11:47AM (which is what time it is for me currently)
Language -

All of the other drivers listed in the /System32/drivers folder give some hint or idea of what they were for so if you wanted to go to the device and uninstall, at least you would have an idea of where to look first. With this file, since I have no idea of what it's for and it has no description, I have no idea what device I would try to uninstall it from.

Thanks again

richc46 · Nov 18, 2010

Newly installed
No google results, except your post.
Sounds like a virus which should be removed.
Try changing the .sys from a administrator account.

CPRJay · Nov 18, 2010

Hi richc46,

Thanks for your help with this, that's what I was afraid of. I googled like crazy and found nothing on it either. I was using an administrator account to try and make changes to the file.

Since I have created a restore point, how would you advise trying to remove the file, simply by deleting or any other advice? Just want to make sure I can hopefully be prepared if computer doesn't boot upon removal. ugg

Thanks

richc46 · Nov 18, 2010

I am really sure that this driver is leading to no good, but am reluctant to say remove. If needed we can never get it back. I would use the security section, if I were you, and tell the story to the experts in that section. They will be better equipped to handle the problem. They have the neeeded expertise and use software like hijack this and other diagnotic software. Go to security, tell them what happend and get their help. I am reluctant to take any further action with a driver that cannot be replaced.

CPRJay · Nov 18, 2010

Hi richc46,

Thanks, I will head over to the security section! I appreciate you trying to help.

richc46 · Nov 18, 2010

You are very welcome
I will notify one of our best , too.

In addition, other BSOD people may come by with other ideas. They may recognize the driver. They may disagree and know it is not a virus or malware, but a lot of evidence suggests that it is.

CPRJay · Nov 18, 2010

Hi richc46,

I posted in the system security section, fingers crossed.

hopefully someone has heard of it or has some ideas, but I'm stumped for sure

Thanks again

BSOD - driver unknown

My Computer

The Black Pearl

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer