Solved BSOD 0x50 - wowahreg.sys

S

Salamanca206

New Member
Greetings,

I'm working on a OEM Vista Home Premium x64 system on a roughly 2-3 year old system. It's the original OS. I've been getting a BSOD error every couple of days or so that I was hoping to get a little assistance solving. I'll get a 0x50 PAGEFAULT_IN_NON_PAGED_AREA and it references a system driver which a Google search yields absolutely no information: wowahreg.sys There is also a .dll by the same name on the system. I've run a virus scan on the mentioned files and they appear to be clean. I also just recently received a warning screen informing me that wowahreg.sys failed to load. I'm usually good with resolving BSODs, but this one has me stumped....:sarc:

Attached is my error docs dump. Thanks for the help!
 

My Computer

System One

  • Manufacturer/Model
    Gateway/SX2800
    CPU
    Intel Core 2 Quad Q8200
    Memory
    4 GB
    Graphics Card(s)
    Intel Onboard Garbage
Hello you have 2 minidumps and the both came back to the following.
0x50. I will do some research and get back to you in a little bit.

Code: 
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\Tom\AppData\Local\Temp\Temp1_ErrDump_08092011.zip\Windows_NT6_BSOD_jcgriff2\Mini080511-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18327.amd64fre.vistasp2_gdr.101014-0432
Machine Name:
Kernel base = 0xfffff800`0201b000 PsLoadedModuleList = 0xfffff800`021dfdd0
Debug session time: Fri Aug  5 13:43:08.704 2011 (GMT-7)
System Uptime: 2 days 2:20:26.775
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.......................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffff8801911c000, 0, fffffa600138be08, 0}
Unable to load image \SystemRoot\system32\DRIVERS\wowahreg.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for wowahreg.sys
*** ERROR: Module load completed but symbols could not be loaded for wowahreg.sys
Could not read faulting driver name
Probably caused by : wowahreg.sys ( wowahreg+3e08 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8801911c000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffffa600138be08, If non-zero, the instruction address which referenced the bad memory
 address.
Arg4: 0000000000000000, (reserved)
Debugging Details:
------------------

Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002242080
 fffff8801911c000 
FAULTING_IP: 
wowahreg+3e08
fffffa60`0138be08 ??              ???
MM_INTERNAL_CODE:  0
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x50
PROCESS_NAME:  TrustedInstalle
CURRENT_IRQL:  0
TRAP_FRAME:  fffffa60199b2470 -- (.trap 0xfffffa60199b2470)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa60199b2740
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffffa600138be08 rsp=fffffa60199b2608 rbp=fffff800021bec68
 r8=0000000000000000  r9=000000000000006c r10=0000000000000078
r11=000000007fffff86 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
wowahreg+0x3e08:
fffffa60`0138be08 ??              ???
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff800020d6860 to fffff80002075490
STACK_TEXT:  
fffffa60`199b2388 fffff800`020d6860 : 00000000`00000050 fffff880`1911c000 00000000`00000000 fffffa60`199b2470 : nt!KeBugCheckEx
fffffa60`199b2390 fffff800`02074019 : 00000000`00000000 00000000`000001f4 fffff6fd`300cdb00 fffff880`1911c000 : nt! ?? ::FNODOBFM::`string'+0x2d3dc
fffffa60`199b2470 fffffa60`0138be08 : fffffa60`0138a7fc 00000000`00000079 00000000`00000000 fffffa60`199b27a8 : nt!KiPageFault+0x119
fffffa60`199b2608 fffffa60`0138a7fc : 00000000`00000079 00000000`00000000 fffffa60`199b27a8 00000000`00000000 : wowahreg+0x3e08
fffffa60`199b2610 00000000`00000079 : 00000000`00000000 fffffa60`199b27a8 00000000`00000000 00000000`7ffffffe : wowahreg+0x27fc
fffffa60`199b2618 00000000`00000000 : fffffa60`199b27a8 00000000`00000000 00000000`7ffffffe fffff800`02064f09 : 0x79

STACK_COMMAND:  kb
FOLLOWUP_IP: 
wowahreg+3e08
fffffa60`0138be08 ??              ???
SYMBOL_STACK_INDEX:  3
SYMBOL_NAME:  wowahreg+3e08
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: wowahreg
IMAGE_NAME:  wowahreg.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4908b505
FAILURE_BUCKET_ID:  X64_0x50_wowahreg+3e08
BUCKET_ID:  X64_0x50_wowahreg+3e08
Followup: MachineOwner
---------
2: kd> lmvm wowahreg
start             end                 module name
fffffa60`01388000 fffffa60`0139b000   wowahreg T (no symbols)           
    Loaded symbol image file: wowahreg.sys
    Image path: \SystemRoot\system32\DRIVERS\wowahreg.sys
    Image name: wowahreg.sys
    Timestamp:        Wed Oct 29 12:09:57 2008 (4908B505)
    CheckSum:         00017317
    ImageSize:        00013000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
2: kd> Lmntsm
start             end                 module name
fffffa60`03704000 fffffa60`03713f00   1394BUS  1394BUS.SYS  Fri Jan 18 22:34:04 2008 (479199DC)
fffffa60`008e9000 fffffa60`0093f000   acpi     acpi.sys     Fri Apr 10 22:03:26 2009 (49E0249E)
fffffa60`046d3000 fffffa60`0473e000   afd      afd.sys      Thu Apr 21 07:20:22 2011 (4DB03D26)
fffffa60`0380e000 fffffa60`0394a000   agrsm64  agrsm64.sys  Wed Oct 29 13:55:50 2008 (4908CDD6)
fffffa60`169ca000 fffffa60`169d5000   asyncmac asyncmac.sys Fri Jan 18 22:37:27 2008 (47919AA7)
fffffa60`00b29000 fffffa60`00b31000   atapi    atapi.sys    Fri Jan 18 22:28:49 2008 (479198A1)
fffffa60`00b31000 fffffa60`00b55000   ataport  ataport.SYS  Fri Jan 18 22:28:52 2008 (479198A4)
fffffa60`04a9d000 fffffa60`04af4000   BHDrvx64 BHDrvx64.sys Wed Jul 29 18:07:44 2009 (4A70F260)
fffffa60`15b92000 fffffa60`15bb0000   bowser   bowser.sys   Fri Feb 18 06:16:16 2011 (4D5E7F30)
fffffa60`04a0a000 fffffa60`04a9d000   ccHPx64  ccHPx64.sys  Fri Jun 19 16:28:39 2009 (4A3C1F27)
fffff960`00670000 fffff960`00681000   cdd      cdd.dll      unavailable (00000000)
fffffa60`169ae000 fffffa60`169ca000   cdfs     cdfs.sys     Fri Jan 18 21:53:45 2008 (47919069)
fffffa60`0397f000 fffffa60`0399b000   cdrom    cdrom.sys    Fri Apr 10 22:34:39 2009 (49E02BEF)
fffffa60`006b6000 fffffa60`00768000   CI       CI.dll       Sat Apr 11 00:08:09 2009 (49E041D9)
fffffa60`00fd0000 fffffa60`00ffc000   CLASSPNP CLASSPNP.SYS Fri Apr 10 22:34:15 2009 (49E02BD7)
fffffa60`00659000 fffffa60`006b6000   CLFS     CLFS.SYS     Fri Apr 10 21:54:21 2009 (49E0227D)
fffffa60`04b04000 fffffa60`04b12000   crashdmp crashdmp.sys Fri Apr 10 22:34:31 2009 (49E02BE7)
fffffa60`013f1000 fffffa60`013fb000   crcdisk  crcdisk.sys  Fri Jan 18 22:30:12 2008 (479198F4)
fffffa60`049d9000 fffffa60`049f6000   dfsc     dfsc.sys     Thu Apr 14 08:14:19 2011 (4DA70F4B)
fffffa60`011ea000 fffffa60`011fe000   disk     disk.sys     Fri Apr 10 22:34:38 2009 (49E02BEE)
fffffa60`04b71000 fffffa60`04b99000   Dot4     Dot4.sys     Fri Jan 18 22:28:01 2008 (47919871)
fffffa60`04ba4000 fffffa60`04bae000   Dot4Prt  Dot4Prt.sys  Fri Jan 18 22:27:58 2008 (4791986E)
fffffa60`04b61000 fffffa60`04b71000   dot4usb  dot4usb.sys  Fri Jan 18 22:28:00 2008 (47919870)
fffffa60`00dad000 fffffa60`00dd0000   drmk     drmk.sys     Fri Jan 18 23:20:04 2008 (4791A4A4)
fffffa60`02800000 fffffa60`0291c000   dump_iaStor dump_iaStor.sys Fri Sep 12 13:46:00 2008 (48CAD508)
fffffa60`04bae000 fffffa60`04bba000   Dxapi    Dxapi.sys    Fri Jan 18 22:08:00 2008 (479193C0)
fffffa60`03400000 fffffa60`034e3000   dxgkrnl  dxgkrnl.sys  Thu Jan 20 06:09:42 2011 (4D384226)
fffffa60`034f3000 fffffa60`03540000   e1y60x64 e1y60x64.sys Fri Nov 21 09:52:13 2008 (4926F54D)
fffffa60`011be000 fffffa60`011ea000   ecache   ecache.sys   Fri Apr 10 22:36:18 2009 (49E02C52)
fffffa60`0493a000 fffffa60`049b3000   eeCtrl64 eeCtrl64.sys Thu Jul 07 18:45:01 2011 (4E16611D)
fffffa60`177a7000 fffffa60`177c7000   ENG64    ENG64.SYS    Fri Jul 29 06:17:51 2011 (4E32B2FF)
fffffa60`049b3000 fffffa60`049d9000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Thu Jul 07 18:45:01 2011 (4E16611D)
fffffa60`18e00000 fffffa60`18ff8000   EX64     EX64.SYS     Fri Jul 29 06:15:11 2011 (4E32B25F)
fffffa60`00b9c000 fffffa60`00bb0000   fileinfo fileinfo.sys Fri Jan 18 22:05:23 2008 (47919323)
fffffa60`00b55000 fffffa60`00b9c000   fltmgr   fltmgr.sys   Fri Apr 10 21:54:38 2009 (49E0228E)
fffffa60`045f6000 fffffa60`04600000   Fs_Rec   Fs_Rec.SYS   Fri Jan 18 21:53:41 2008 (47919065)
fffffa60`01180000 fffffa60`011ac000   fwpkclnt fwpkclnt.sys Fri Apr 10 22:42:44 2009 (49E02DD4)
fffffa60`0399b000 fffffa60`039a8000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 05:17:04 2009 (4A1151C0)
fffff800`02533000 fffff800`02579000   hal      hal.dll      Sat Apr 11 00:04:56 2009 (49E04118)
fffffa60`03605000 fffffa60`036f2000   HDAudBus HDAudBus.sys Fri Apr 10 22:39:38 2009 (49E02D1A)
fffffa60`04b4f000 fffffa60`04b61000   HIDCLASS HIDCLASS.SYS Fri Apr 10 22:39:32 2009 (49E02D14)
fffffa60`029eb000 fffffa60`029f2b80   HIDPARSE HIDPARSE.SYS Fri Jan 18 22:33:51 2008 (479199CF)
fffffa60`04b46000 fffffa60`04b4f000   hidusb   hidusb.sys   Fri Apr 10 22:39:32 2009 (49E02D14)
fffffa60`15ac6000 fffffa60`15b69000   HTTP     HTTP.sys     Sat Feb 20 13:30:05 2010 (4B80545D)
fffffa60`0395b000 fffffa60`03971000   i8042prt i8042prt.sys Fri Jan 18 22:28:08 2008 (47919878)
fffffa60`00a0d000 fffffa60`00b29000   iaStor   iaStor.sys   Fri Sep 12 13:46:00 2008 (48CAD508)
fffffa60`1770a000 fffffa60`17787000   IDSvia64 IDSvia64.sys Tue May 31 16:40:33 2011 (4DE57C71)
fffffa60`02a05000 fffffa60`033d1e00   igdkmd64 igdkmd64.sys Thu Feb 26 11:46:30 2009 (49A6F196)
fffffa60`00dd0000 fffffa60`00df4000   IntcHdmi IntcHdmi.sys Mon Sep 22 06:49:56 2008 (48D7A284)
fffffa60`0293d000 fffffa60`02950000   intelppm intelppm.sys Fri Jan 18 21:52:45 2008 (4791902D)
fffffa60`03971000 fffffa60`0397f000   kbdclass kbdclass.sys Fri Jan 18 22:28:05 2008 (47919875)
fffffa60`00600000 fffffa60`0060a000   kdcom    kdcom.dll    Thu Feb 24 08:04:07 2011 (4D668177)
fffffa60`02950000 fffffa60`02984000   ks       ks.sys       Fri Apr 10 22:33:51 2009 (49E02BBF)
fffffa60`00c6f000 fffffa60`00cf6000   ksecdd   ksecdd.sys   Mon Jun 15 06:15:18 2009 (4A364966)
fffffa60`045f0000 fffffa60`045f5180   ksthunk  ksthunk.sys  Fri Jan 18 22:28:14 2008 (4791987E)
fffffa60`15a9a000 fffffa60`15aae000   lltdio   lltdio.sys   Fri Jan 18 22:35:48 2008 (47919A44)
fffffa60`039c6000 fffffa60`039cd000   lmimirr  lmimirr.sys  Tue Apr 10 15:32:45 2007 (461C108D)
fffffa60`15f3d000 fffffa60`15f50000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 09:26:56 2008 (487B7E50)
fffffa60`04bcd000 fffffa60`04bef000   luafv    luafv.sys    Fri Jan 18 21:59:06 2008 (479191AA)
fffffa60`0060a000 fffffa60`00645000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 00:05:41 2009 (49E04145)
fffffa60`0394c000 fffffa60`0395b000   modem    modem.sys    Fri Jan 18 22:38:17 2008 (47919AD9)
fffffa60`04bba000 fffffa60`04bcd000   monitor  monitor.sys  Fri Jan 18 22:32:34 2008 (47919982)
fffffa60`033d2000 fffffa60`033de000   mouclass mouclass.sys Fri Jan 18 22:28:05 2008 (47919875)
fffffa60`04b99000 fffffa60`04ba4000   mouhid   mouhid.sys   Fri Jan 18 22:28:10 2008 (4791987A)
fffffa60`009ab000 fffffa60`009be000   mountmgr mountmgr.sys Fri Jan 18 22:28:01 2008 (47919871)
fffffa60`15bb0000 fffffa60`15bca000   mpsdrv   mpsdrv.sys   Fri Jan 18 22:35:28 2008 (47919A30)
fffffa60`15bca000 fffffa60`15bf1000   mrxdav   mrxdav.sys   Fri Apr 10 21:55:42 2009 (49E022CE)
fffffa60`047d5000 fffffa60`047fe000   mrxsmb   mrxsmb.sys   Fri Apr 29 06:39:33 2011 (4DBABF95)
fffffa60`15e09000 fffffa60`15e52000   mrxsmb10 mrxsmb10.sys Fri Apr 29 06:39:34 2011 (4DBABF96)
fffffa60`15e52000 fffffa60`15e71000   mrxsmb20 mrxsmb20.sys Fri Apr 29 06:39:31 2011 (4DBABF93)
fffffa60`029e0000 fffffa60`029eb000   Msfs     Msfs.SYS     Fri Jan 18 21:53:55 2008 (47919073)
fffffa60`00948000 fffffa60`00952000   msisadrv msisadrv.sys Fri Jan 18 22:02:50 2008 (4791928A)
fffffa60`03714000 fffffa60`0374d000   msiscsi  msiscsi.sys  Fri Apr 10 22:36:09 2009 (49E02C49)
fffffa60`00cf6000 fffffa60`00d46000   msrpc    msrpc.sys    Fri Apr 10 22:32:13 2009 (49E02B5D)
fffffa60`033de000 fffffa60`033e9000   mssmbios mssmbios.sys Fri Jan 18 22:02:54 2008 (4791928E)
fffffa60`011ac000 fffffa60`011be000   mup      mup.sys      Fri Apr 10 21:54:47 2009 (49E02297)
fffffa60`00e0d000 fffffa60`00fd0000   ndis     ndis.sys     Fri Apr 10 22:43:15 2009 (49E02DF3)
fffffa60`03800000 fffffa60`0380c000   ndistapi ndistapi.sys Fri Jan 18 22:37:22 2008 (47919AA2)
fffffa60`037cd000 fffffa60`037fe000   ndiswan  ndiswan.sys  Fri Apr 10 22:43:39 2009 (49E02E0B)
fffffa60`029cc000 fffffa60`029e0000   NDProxy  NDProxy.SYS  Fri Jan 18 22:37:26 2008 (47919AA6)
fffffa60`047ab000 fffffa60`047ba000   netbios  netbios.sys  Fri Jan 18 22:36:35 2008 (47919A73)
fffffa60`0473e000 fffffa60`04782000   netbt    netbt.sys    Fri Apr 10 22:42:31 2009 (49E02DC7)
fffffa60`00d46000 fffffa60`00d9f000   NETIO    NETIO.SYS    Fri Apr 10 22:43:34 2009 (49E02E06)
fffffa60`00bbe000 fffffa60`00bcf000   Npfs     Npfs.SYS     Fri Apr 10 21:54:22 2009 (49E0227E)
fffffa60`048b1000 fffffa60`048bd000   nsiproxy nsiproxy.sys Fri Jan 18 22:36:45 2008 (47919A7D)
fffff800`0201b000 fffff800`02533000   nt       ntkrnlmp.exe Thu Oct 14 08:53:03 2010 (4CB7275F)
fffffa60`01208000 fffffa60`01388000   Ntfs     Ntfs.sys     Fri Apr 10 21:55:38 2009 (49E022CA)
fffffa60`04400000 fffffa60`04409000   Null     Null.SYS     Thu Nov 02 02:37:15 2006 (4549BC4B)
fffffa60`036f2000 fffffa60`03703b00   ohci1394 ohci1394.sys Fri Apr 10 22:39:49 2009 (49E02D25)
fffffa60`04782000 fffffa60`047a0000   pacer    pacer.sys    Fri Apr 10 22:42:56 2009 (49E02DE0)
fffffa60`00982000 fffffa60`00997000   partmgr  partmgr.sys  Fri Apr 10 22:34:51 2009 (49E02BFB)
fffffa60`00952000 fffffa60`00982000   pci      pci.sys      Fri Apr 10 22:03:33 2009 (49E024A5)
fffffa60`16809000 fffffa60`168bf000   peauth   peauth.sys   Mon Oct 23 04:57:00 2006 (453CAE0C)
fffffa60`045b5000 fffffa60`045f0000   portcls  portcls.sys  Fri Apr 10 22:39:36 2009 (49E02D18)
fffffa60`00645000 fffffa60`00659000   PSHED    PSHED.dll    Sat Apr 11 00:08:17 2009 (49E041E1)
fffffa60`15f36000 fffffa60`15f3d000   RaInfo   RaInfo.sys   Fri Jan 04 10:57:14 2008 (477E818A)
fffffa60`01000000 fffffa60`01009000   rasacd   rasacd.sys   Fri Jan 18 22:37:30 2008 (47919AAA)
fffffa60`037aa000 fffffa60`037cd000   rasl2tp  rasl2tp.sys  Fri Apr 10 22:43:37 2009 (49E02E09)
fffffa60`035a3000 fffffa60`035b3000   raspppoe raspppoe.sys Fri Apr 10 22:43:33 2009 (49E02E05)
fffffa60`035b3000 fffffa60`035d1000   raspptp  raspptp.sys  Fri Apr 10 22:43:38 2009 (49E02E0A)
fffffa60`035d1000 fffffa60`035e9000   rassstp  rassstp.sys  Fri Apr 10 22:43:46 2009 (49E02E12)
fffffa60`04864000 fffffa60`048b1000   rdbss    rdbss.sys    Fri Apr 10 21:55:21 2009 (49E022B9)
fffffa60`029f3000 fffffa60`029fc000   RDPCDD   RDPCDD.sys   Fri Jan 18 22:42:04 2008 (47919BBC)
fffffa60`02923000 fffffa60`0292c000   rdpencdd rdpencdd.sys Fri Jan 18 22:42:03 2008 (47919BBB)
fffffa60`15aae000 fffffa60`15ac6000   rspndr   rspndr.sys   Fri Jan 18 22:35:48 2008 (47919A44)
fffffa60`0440f000 fffffa60`045b4780   RTKVHD64 RTKVHD64.sys Tue Mar 10 01:24:09 2009 (49B623A9)
fffffa60`168bf000 fffffa60`168ca000   secdrv   secdrv.SYS   Wed Sep 13 06:18:38 2006 (4508052E)
fffffa60`046b8000 fffffa60`046d3000   smb      smb.sys      Fri Apr 10 22:42:19 2009 (49E02DBB)
fffffa60`013e7000 fffffa60`013f1000   speedfan speedfan.sys Fri Mar 18 09:08:46 2011 (4D83838E)
fffffa60`013df000 fffffa60`013e7000   spldr    spldr.sys    Mon Jan 12 13:51:29 2009 (496BBB61)
fffffa60`15a00000 fffffa60`15a9a000   spsys    spsys.sys    Tue Mar 10 10:16:43 2009 (49B6A07B)
fffffa60`16910000 fffffa60`1698e000   SRTSP64  SRTSP64.SYS  Mon Jun 22 19:45:21 2009 (4A4041C1)
fffffa60`04850000 fffffa60`04864000   SRTSPX64 SRTSPX64.SYS Mon Jun 22 19:47:54 2009 (4A40425A)
fffffa60`15ea3000 fffffa60`15f36000   srv      srv.sys      Fri Feb 18 06:18:12 2011 (4D5E7FA4)
fffffa60`15e71000 fffffa60`15ea3000   srv2     srv2.sys     Fri Apr 29 06:41:01 2011 (4DBABFED)
fffffa60`15b69000 fffffa60`15b92000   srvnet   srvnet.sys   Fri Apr 29 06:40:55 2011 (4DBABFE7)
fffffa60`0374d000 fffffa60`037aa000   storport storport.sys Fri Apr 10 22:34:45 2009 (49E02BF5)
fffffa60`0380c000 fffffa60`0380d480   swenum   swenum.sys   Thu Nov 02 02:37:33 2006 (4549BC5D)
fffffa60`00c08000 fffffa60`00c6f000   SYMEFA64 SYMEFA64.SYS Tue Jun 23 14:52:39 2009 (4A414EA7)
fffffa60`04650000 fffffa60`04686000   SYMEVENT64x86 SYMEVENT64x86.SYS Wed Jun 24 13:19:12 2009 (4A428A40)
fffffa60`04696000 fffffa60`046b8000   SYMFW    SYMFW.SYS    Mon Jul 06 17:29:22 2009 (4A5296E2)
fffffa60`047a0000 fffffa60`047ab000   SymIMv   SymIMv.sys   Mon Jun 22 16:11:56 2009 (4A400FBC)
fffffa60`04686000 fffffa60`04696000   SYMNDISV SYMNDISV.SYS Mon Jul 06 17:33:26 2009 (4A5297D6)
fffffa60`04604000 fffffa60`04650000   SYMTDI   SYMTDI.SYS   Mon Jul 06 17:28:48 2009 (4A5296C0)
fffffa60`0100a000 fffffa60`01180000   tcpip    tcpip.sys    Wed Jun 16 07:51:56 2010 (4C18E50C)
fffffa60`168ca000 fffffa60`168da000   tcpipreg tcpipreg.sys Tue Dec 08 09:55:32 2009 (4B1E9314)
fffffa60`039f2000 fffffa60`039ff000   TDI      TDI.SYS      Fri Apr 10 22:44:14 2009 (49E02E2E)
fffffa60`00bcf000 fffffa60`00bec000   tdx      tdx.sys      Fri Apr 10 22:43:00 2009 (49E02DE4)
fffffa60`035e9000 fffffa60`035fc000   termdd   termdd.sys   Fri Apr 10 22:48:13 2009 (49E02F1D)
fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    Fri Jan 18 22:42:04 2008 (47919BBC)
fffffa60`17600000 fffffa60`1760d000   tunnel   tunnel.sys   Thu Feb 18 03:59:46 2010 (4B7D2BB2)
fffffa60`033e9000 fffffa60`033f9000   umbus    umbus.sys    Fri Jan 18 22:34:16 2008 (479199E8)
fffffa60`04b12000 fffffa60`04b2e000   usbccgp  usbccgp.sys  Fri Jan 18 22:34:04 2008 (479199DC)
fffffa60`0394a000 fffffa60`0394be00   USBD     USBD.SYS     Fri Jan 18 22:33:53 2008 (479199D1)
fffffa60`03592000 fffffa60`035a3000   usbehci  usbehci.sys  Fri Apr 10 22:39:36 2009 (49E02D18)
fffffa60`02984000 fffffa60`029cc000   usbhub   usbhub.sys   Fri Apr 10 22:39:52 2009 (49E02D28)
fffffa60`0354c000 fffffa60`03592000   USBPORT  USBPORT.SYS  Fri Apr 10 22:39:39 2009 (49E02D1B)
fffffa60`04af4000 fffffa60`04b04000   usbscan  usbscan.sys  Fri Jan 18 23:09:56 2008 (4791A244)
fffffa60`04b2e000 fffffa60`04b46000   USBSTOR  USBSTOR.SYS  Fri Apr 10 22:39:38 2009 (49E02D1A)
fffffa60`03540000 fffffa60`0354c000   usbuhci  usbuhci.sys  Fri Jan 18 22:33:56 2008 (479199D4)
fffffa60`00bb0000 fffffa60`00bbe000   vga      vga.sys      Fri Jan 18 22:32:21 2008 (47919975)
fffffa60`039cd000 fffffa60`039f2000   VIDEOPRT VIDEOPRT.SYS Fri Jan 18 22:32:25 2008 (47919979)
fffffa60`04803000 fffffa60`04850000   vmm      vmm.sys      Fri May 15 05:28:12 2009 (4A0D5FDC)
fffffa60`039b1000 fffffa60`039c6000   VMNetSrv VMNetSrv.sys Wed Jan 24 04:05:46 2007 (45B74B9A)
fffffa60`00997000 fffffa60`009ab000   volmgr   volmgr.sys   Fri Apr 10 22:34:49 2009 (49E02BF9)
fffffa60`00768000 fffffa60`007ce000   volmgrx  volmgrx.sys  Fri Apr 10 22:35:14 2009 (49E02C12)
fffffa60`0139b000 fffffa60`013df000   volsnap  volsnap.sys  Fri Apr 10 22:35:33 2009 (49E02C25)
fffffa60`047ba000 fffffa60`047d5000   wanarp   wanarp.sys   Fri Apr 10 22:43:38 2009 (49E02E0A)
fffffa60`034e3000 fffffa60`034f3000   watchdog watchdog.sys Fri Apr 10 22:09:16 2009 (49E025FC)
fffffa60`00801000 fffffa60`008db000   Wdf01000 Wdf01000.sys Fri Jan 18 22:33:27 2008 (479199B7)
fffffa60`008db000 fffffa60`008e9000   WDFLDR   WDFLDR.SYS   Fri Jan 18 22:32:33 2008 (47919981)
fffff960`00080000 fffff960`00337000   win32k   win32k.sys   Thu Jun 02 06:49:48 2011 (4DE794FC)
fffffa60`039a8000 fffffa60`039b1000   wmiacpi  wmiacpi.sys  Fri Jan 18 22:02:42 2008 (47919282)
fffffa60`0093f000 fffffa60`00948000   WMILIB   WMILIB.SYS   Fri Jan 18 22:33:45 2008 (479199C9)
fffffa60`01388000 fffffa60`0139b000   wowahreg wowahreg.sys Wed Oct 29 12:09:57 2008 (4908B505)
fffffa60`169d5000 fffffa60`169e0000   WSDPrint WSDPrint.sys Fri Jan 18 23:11:31 2008 (4791A2A3)
fffffa60`168fa000 fffffa60`16910000   WUDFPf   WUDFPf.sys   Fri Jan 18 22:33:22 2008 (479199B2)
fffffa60`168da000 fffffa60`168fa000   WUDFRd   WUDFRd.sys   Fri Jan 18 22:33:43 2008 (479199C7)
Unloaded modules:
fffffa60`17787000 fffffa60`177a7000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`18e00000 fffffa60`18ff8000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`176ea000 fffffa60`1770a000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`18e00000 fffffa60`18ff8000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`1762d000 fffffa60`176aa000   IDSvia64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`176ca000 fffffa60`176ea000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`18e00000 fffffa60`18ff8000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`176aa000 fffffa60`176ca000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`19400000 fffffa60`195f8000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`195f8000 fffffa60`195fa000   MSTEE.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`195fa000 fffffa60`195fd000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`1760d000 fffffa60`1762d000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`19400000 fffffa60`195f8000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`048bd000 fffffa60`0493a000   IDSvia64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`1698e000 fffffa60`169ae000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`1760d000 fffffa60`177fc000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`17600000 fffffa60`1760d000   tunnel.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`17600000 fffffa60`1760b000   WSDPrint.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`02930000 fffffa60`0293d000   tunnel.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`00d9f000 fffffa60`00dad000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`02807000 fffffa60`02923000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`029e0000 fffffa60`029eb000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffffa60`02923000 fffffa60`02930000   tunnel.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
 

My Computer

System One

  • Manufacturer/Model
    a6530f Desktop
    CPU
    HP-PAVILION
    Motherboard
    M2N68-LA (Narra3)
    Memory
    8 Gigs of Ram/DDR2 PC2-6400 MB/sec
    Graphics Card(s)
    NVIDIA GeForce 6150SE nForce 430
    Sound Card
    Intergrated Realtex ALC888S Audio
    Monitor(s) Displays
    LG W40 series widescreen
    Screen Resolution
    1600 X 900
    Hard Drives
    1 640 GB Sata transfer rating: 3.0 Gb/sec speed: 7200 RPM
    PSU
    300W
    Case
    Mid-Size ATX
    Keyboard
    HP Multimedia Keyboard
    Mouse
    Microsoft Wireless Mouse 5000
    Other Info
    Processor: AMD Phenom X3 8450 Operating speed: Up to 2.1 GHz, Number of cores: 3, Socket: AM2+, Bus speed: 3600 MHz HT3 (clocked down to 2000 MHz)

    Modem: 56K WinModem/

    Supermulti: 16X DVD(+/-)R/RW 12X Ram (+/-)R DL Lightscribe SATA Drive

    Menory Card Reader: 15-in-1 Multimedia Card Reader

    Media Drive

My Computer

System One

  • Manufacturer/Model
    a6530f Desktop
    CPU
    HP-PAVILION
    Motherboard
    M2N68-LA (Narra3)
    Memory
    8 Gigs of Ram/DDR2 PC2-6400 MB/sec
    Graphics Card(s)
    NVIDIA GeForce 6150SE nForce 430
    Sound Card
    Intergrated Realtex ALC888S Audio
    Monitor(s) Displays
    LG W40 series widescreen
    Screen Resolution
    1600 X 900
    Hard Drives
    1 640 GB Sata transfer rating: 3.0 Gb/sec speed: 7200 RPM
    PSU
    300W
    Case
    Mid-Size ATX
    Keyboard
    HP Multimedia Keyboard
    Mouse
    Microsoft Wireless Mouse 5000
    Other Info
    Processor: AMD Phenom X3 8450 Operating speed: Up to 2.1 GHz, Number of cores: 3, Socket: AM2+, Bus speed: 3600 MHz HT3 (clocked down to 2000 MHz)

    Modem: 56K WinModem/

    Supermulti: 16X DVD(+/-)R/RW 12X Ram (+/-)R DL Lightscribe SATA Drive

    Menory Card Reader: 15-in-1 Multimedia Card Reader

    Media Drive
Very good chance its a virus or malware.
Make an anti virus scan and download and make a full scan with malwarebytes.
Dont forget the memory test as mentioned.
 

My Computer

System One

  • Manufacturer/Model
    Dell XPS420
    Memory
    6 gig
    Graphics Card(s)
    ATI Radeon HD3650 256 MB
    Sound Card
    Intergrated 7.1 Channel Audio
    Monitor(s) Displays
    Dell SP2009W 20 inch Flat Panel w Webcam
    Hard Drives
    640 gb
    Cooling
    Fan
    Keyboard
    Dell USB
    Mouse
    Dell USB 4 button optical
    Other Info
    DSL provided by ATT
Ok, I will do the virus scans and the memtest and be back to you. Thank you for the assistance.
 

My Computer

System One

  • Manufacturer/Model
    Gateway/SX2800
    CPU
    Intel Core 2 Quad Q8200
    Memory
    4 GB
    Graphics Card(s)
    Intel Onboard Garbage
I've run a full virus scan with MalwareBytes which prompted the 0x50 blue screen again on the very same file "wowahreg.sys". I ran the same scan in safe mode and it completed, finding no threats. I also did subsequent full scans with Norton Internet Security and then finally Spybot Search and Destroy and both of those scans came up clean as well. I did more investigative work on the culprit file and a driver file of a similar name "wowahreg.dll" and found them to be related to monitoring software that is supposed to be on the machine. Said software is out of date and needed to be updated.

The issue should be resolved and you can close the thread. Thank you for your assistance.
 

My Computer

System One

  • Manufacturer/Model
    Gateway/SX2800
    CPU
    Intel Core 2 Quad Q8200
    Memory
    4 GB
    Graphics Card(s)
    Intel Onboard Garbage
You must log in or register to reply here.
Back
Top