Cannot access administrator

apinto · Jan 7, 2011

Hi there,

First of all, congratulations for this forum, it's a really useful resource and has a very healthy community!

I have a Vista 32 bits laptop with a strange problem that I can't seem to fix. It has two accounts: an administrator and a standard one, that is normally used. In the last few weeks, with no apparent reason, it stopped being able to access administrator privileges from the standard account, and logins to the admin account also fail.

Immediately after the admin login or after the admin credentials are inserted in UAC, there's a blue screen like the one in this picture:

I tried everything I could: check the disk for errors from the Vista Recovery CD, and also with GParted, safe mode, disabling services, etc.. I even tried to create another administrator account from the recovery CD, but it also failed. I think my only option is to recover the installation, or install from clean...

Does any of you have an idea of what might be going on? Can I fix this? Thank you very much for your time and attention, regards,

AP

richc46 · Jan 7, 2011

Its called a Blue Screen of Death and we will find the solution
http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html

apinto · Jan 7, 2011

richc46 said:
Its called a Blue Screen of Death and we will find the solution
http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html

Hi, thank you for your quick reply. Unfortunately I don't have administrator escalation because when I insert the credentials in UAC it fails with the BSOD. So, I can't run the collection application. :-(

AP

richc46 · Jan 7, 2011

Try to get in with safe mode.

apinto · Jan 7, 2011

richc46 said:
Try to get in with safe mode.

I tried, the behaviour is exactly the same. I also tried activate the "hidden" administrator account with the recovery CD but couldn't make it work. The bottom line is, every time admin escalation is required, after the credentials are inserted it fails with the BSOD. In any mode, even safe mode. Thank you again,

AP

richc46 · Jan 7, 2011

Using your standard account, get me the information. You will not be able to get the most important piece, but you will get some reports.

apinto · Jan 7, 2011

richc46 said:
Using your standard account, get me the information. You will not be able to get the most important piece, but you will get some reports.

Thank you very much Richard, I'll do that as soon as I have access to the laptop. I forgot to mention that sometimes, instead of the BSOD, Vista also hangs forever, either in the login screen or UAC, after the credentials are inserted. This is less common, though. Cheers,

AP

richc46 · Jan 7, 2011

Also, try to make another account, if you can.
Those reports will go a long way to solve the problem
If you have a friend, who know about computers. He or she can put your HD in their computer to get the information
Its probably a driver.

apinto · Jan 7, 2011

richc46 said:
Also, try to make another account, if you can.
Those reports will go a long way to solve the problem
If you have a friend, who know about computers. He or she can put your HD in their computer to get the information
Its probably a driver.

If you want I can boot the laptop in Linux, mount the NTFS partition and extract any files. Just tell me which files you need and I'll get them! I also suspect about a driver, but why does is only happen in the administrator account? Everything seems normal in the standard account... Network, sound, video, etc.. Cheers,

AP

richc46 · Jan 7, 2011

Dump files - Upload to Seven Forums - Windows 7 Forums
for vista too

apinto · Jan 7, 2011

richc46 said:
Dump files - Upload to Seven Forums - Windows 7 Forums
for vista too

Hi there,

I just attached the latest minidump to the thread. Thank you for your help, regards,

AP

apinto · Jan 8, 2011

Hello, does anyone have other idea of how to deal with this problem? Thank you,

AP

richc46 · Jan 8, 2011

Sorry for the delay, must have missed your last post. Have patience and I will analyze your report.

richc46 · Jan 8, 2011

STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

Code:

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Mini010711-01[1].zip\Mini010711-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.22707.x86fre.vistasp1_ldr.100608-0458
Machine Name:
Kernel base = 0x81e0f000 PsLoadedModuleList = 0x81f27c70
Debug session time: Fri Jan  7 11:43:16.262 2011 (GMT-5)
System Uptime: 0 days 0:00:56.355
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {9d7c1157, 2, 1, 821ccff9}
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+2ac )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 9d7c1157, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 821ccff9, address which referenced memory
Debugging Details:
------------------
 
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81f47868
Unable to read MiSystemVaType memory at 81f27420
 9d7c1157 
CURRENT_IRQL:  2
FAULTING_IP: 
hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+29
821ccff9 8902            mov     dword ptr [edx],eax
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
TRAP_FRAME:  9d607768 -- (.trap 0xffffffff9d607768)
ErrCode = 00000002
eax=9d60780c ebx=00000000 ecx=a08497ac edx=9d7c1157 esi=00001000 edi=a08496f4
eip=821ccff9 esp=9d6077dc ebp=9d60781c iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010282
hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+0x29:
821ccff9 8902            mov     dword ptr [edx],eax  ds:0023:9d7c1157=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from 821ccff9 to 81e69ee4
STACK_TEXT:  
9d607768 821ccff9 badb0d00 9d7c1157 88a63418 nt!KiTrap0E+0x2ac
9d6077d8 81e5b43c b1be2a18 ae9eeab8 9d607844 hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+0x29
9d60781c 81e58f54 a08496f4 84971259 0c88a634 nt!CcSetDirtyInMask+0x9c
9d607858 820013c1 84971251 00000000 1c6efb4f nt!CcSetDirtyPinnedData+0x4a
9d6078ac 820010cc ae9eeab8 b1ae9000 b1be2a18 nt!CmpUnpinView+0x26
9d6078cc 82000dfa 9d607908 1c6efabb 9d607b28 nt!HvpFlushPinnedData+0x70
9d607958 81f96b93 b1be2a18 9d607978 b1be2fdc nt!HvWriteHive+0x1b2
9d60797c 81f995c5 b1be2a01 00000005 00000002 nt!HvInitializeHive+0x52c
9d6079f8 81f971cb 9d607a7c 00000005 00000000 nt!CmpInitializeHive+0x3ad
9d607aa0 81f90867 9d607ce8 00000000 9d607b14 nt!CmpInitHiveFromFile+0x19e
9d607ae0 81fa7fe9 9d607ce8 9d607bc0 9d607b3c nt!CmpCmdHiveOpen+0x36
9d607c04 81f97a12 9d607cc4 9d607ce8 00000000 nt!CmLoadKey+0x396
9d607d3c 81e66bba 0414f648 00000000 00000000 nt!NtLoadKeyEx+0x559
9d607d3c 77129a94 0414f648 00000000 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0414f8a8 00000000 00000000 00000000 00000000 0x77129a94
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!KiTrap0E+2ac
81e69ee4 833dc4ecf38100  cmp     dword ptr [nt!KiFreezeFlag (81f3ecc4)],0
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!KiTrap0E+2ac
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4c0e53ac
FAILURE_BUCKET_ID:  0xA_nt!KiTrap0E+2ac
BUCKET_ID:  0xA_nt!KiTrap0E+2ac
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 9d7c1157, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 821ccff9, address which referenced memory
Debugging Details:
------------------
 
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81f47868
Unable to read MiSystemVaType memory at 81f27420
 9d7c1157 
CURRENT_IRQL:  2
FAULTING_IP: 
hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+29
821ccff9 8902            mov     dword ptr [edx],eax
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
TRAP_FRAME:  9d607768 -- (.trap 0xffffffff9d607768)
ErrCode = 00000002
eax=9d60780c ebx=00000000 ecx=a08497ac edx=9d7c1157 esi=00001000 edi=a08496f4
eip=821ccff9 esp=9d6077dc ebp=9d60781c iopl=0         nv up ei ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010282
hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+0x29:
821ccff9 8902            mov     dword ptr [edx],eax  ds:0023:9d7c1157=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from 821ccff9 to 81e69ee4
STACK_TEXT:  
9d607768 821ccff9 badb0d00 9d7c1157 88a63418 nt!KiTrap0E+0x2ac
9d6077d8 81e5b43c b1be2a18 ae9eeab8 9d607844 hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+0x29
9d60781c 81e58f54 a08496f4 84971259 0c88a634 nt!CcSetDirtyInMask+0x9c
9d607858 820013c1 84971251 00000000 1c6efb4f nt!CcSetDirtyPinnedData+0x4a
9d6078ac 820010cc ae9eeab8 b1ae9000 b1be2a18 nt!CmpUnpinView+0x26
9d6078cc 82000dfa 9d607908 1c6efabb 9d607b28 nt!HvpFlushPinnedData+0x70
9d607958 81f96b93 b1be2a18 9d607978 b1be2fdc nt!HvWriteHive+0x1b2
9d60797c 81f995c5 b1be2a01 00000005 00000002 nt!HvInitializeHive+0x52c
9d6079f8 81f971cb 9d607a7c 00000005 00000000 nt!CmpInitializeHive+0x3ad
9d607aa0 81f90867 9d607ce8 00000000 9d607b14 nt!CmpInitHiveFromFile+0x19e
9d607ae0 81fa7fe9 9d607ce8 9d607bc0 9d607b3c nt!CmpCmdHiveOpen+0x36
9d607c04 81f97a12 9d607cc4 9d607ce8 00000000 nt!CmLoadKey+0x396
9d607d3c 81e66bba 0414f648 00000000 00000000 nt!NtLoadKeyEx+0x559
9d607d3c 77129a94 0414f648 00000000 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0414f8a8 00000000 00000000 00000000 00000000 0x77129a94
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!KiTrap0E+2ac
81e69ee4 833dc4ecf38100  cmp     dword ptr [nt!KiFreezeFlag (81f3ecc4)],0
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!KiTrap0E+2ac
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  4c0e53ac
FAILURE_BUCKET_ID:  0xA_nt!KiTrap0E+2ac
BUCKET_ID:  0xA_nt!KiTrap0E+2ac
Followup: MachineOwner
---------
0: kd> lmtsmn
start    end        module name
afe04000 afe30000   000      000.fcl      Fri Sep 26 09:11:12 2008 (48DCDF70)
9f7eb000 9f7f6000   Accelerometer Accelerometer.sys Tue Mar 18 17:24:47 2008 (47E0331F)
8060f000 80655000   acpi     acpi.sys     Sat Jan 19 00:32:48 2008 (47918B80)
8a546000 8a5b0000   adp94xx  adp94xx.sys  Tue Apr 24 17:00:29 2007 (462E6FED)
8a5b0000 8a5fc000   adpahci  adpahci.sys  Tue May 01 13:29:26 2007 (463778F6)
807cd000 807e8000   adpu160m adpu160m.sys Wed Feb 21 13:04:35 2007 (45DC89B3)
8a600000 8a626000   adpu320  adpu320.sys  Tue Feb 27 19:03:08 2007 (45E4C6BC)
a0003000 a004b000   afd      afd.sys      Sat Jan 19 00:57:00 2008 (4791912C)
80749000 80750000   aliide   aliide.sys   Mon Jun 02 21:10:33 2008 (48449A09)
80750000 80757000   amdide   amdide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
8a63a000 8a650000   arc      arc.sys      Thu May 24 17:31:06 2007 (4656041A)
8a650000 8a666000   arcsas   arcsas.sys   Fri May 25 14:56:36 2007 (46573164)
8a4b0000 8a4b8000   atapi    atapi.sys    Fri Aug 15 21:19:58 2008 (48A62B3E)
8a4b8000 8a4d6000   ataport  ataport.SYS  Fri Aug 15 21:19:59 2008 (48A62B3F)
9f609000 9f717000   athr     athr.sys     Sat Dec 20 03:01:43 2008 (494CA667)
9f000000 9f462000   atikmdag atikmdag.sys Thu Jan 22 00:52:34 2009 (497809A2)
8b1c4000 8b1cc000   AtiPcie  AtiPcie.sys  Mon Oct 30 14:23:10 2006 (4546430E)
806ca000 806d4000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
9fafc000 9fb03000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
a1711000 a17bd000   BHDrvx86 BHDrvx86.sys Mon Nov 15 17:35:02 2010 (4CE1B596)
8041f000 80427000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
add9d000 addb6000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
a019b000 a01a5000   BthEnum  BthEnum.sys  Wed Apr 16 22:33:26 2008 (4806B6F6)
a01a5000 a01bf000   bthpan   bthpan.sys   Sat Jan 19 00:53:44 2008 (47919068)
a00f2000 a0172000   bthport  bthport.sys  Wed Apr 16 22:33:24 2008 (4806B6F4)
a00e5000 a00f2000   BTHUSB   BTHUSB.sys   Wed Apr 16 22:33:25 2008 (4806B6F5)
a0e7a000 a0efa000   btwaudio btwaudio.sys Tue May 13 00:10:09 2008 (482914A1)
a0e0f000 a0e7a000   btwavdt  btwavdt.sys  Tue May 13 00:09:15 2008 (4829146B)
a0efa000 a0efc500   btwrchid btwrchid.sys Tue May 13 00:10:45 2008 (482914C5)
a1692000 a1711000   ccHPx86  ccHPx86.sys  Fri Feb 05 15:57:22 2010 (4B6C8632)
aaf30000 aaf3e000   cdd      cdd.dll      unavailable (00000000)
9f73d000 9f755000   cdrom    cdrom.sys    Sat Jan 19 00:49:50 2008 (47918F7E)
80468000 80548000   CI       CI.dll       Fri Feb 22 00:00:56 2008 (47BE5708)
8af82000 8af90000   circlass circlass.sys Sat Jan 19 00:53:24 2008 (47919054)
807a4000 807c5000   CLASSPNP CLASSPNP.SYS Sat Jan 19 00:49:36 2008 (47918F70)
80427000 80468000   CLFS     CLFS.SYS     Fri Mar 07 20:44:18 2008 (47D1EF72)
9f7f6000 9f7f9780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
80757000 8075f000   cmdide   cmdide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
806c7000 806c9900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
a17e5000 a17f2000   crashdmp crashdmp.sys Sat Jan 19 00:49:43 2008 (47918F77)
8b1cc000 8b1d5000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
a167b000 a1692000   dfsc     dfsc.sys     Sat Jan 19 00:28:20 2008 (47918A74)
8b1b3000 8b1c4000   disk     disk.sys     Sat Jan 19 00:49:47 2008 (47918F7B)
8a626000 8a63a000   djsvs    djsvs.sys    Tue Apr 11 20:20:11 2006 (443C47BB)
9fa30000 9fa55000   drmk     drmk.sys     Mon Oct 27 23:58:19 2008 (49068DDB)
a17f2000 a17fd000   dump_dumpata dump_dumpata.sys Fri Aug 15 21:19:58 2008 (48A62B3E)
a0fe9000 a0ff3000   dump_msahci dump_msahci.sys Fri Aug 15 21:20:01 2008 (48A62B41)
a0ff3000 a0ffd000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
9f462000 9f501000   dxgkrnl  dxgkrnl.sys  Fri Aug 01 21:01:19 2008 (4893B1DF)
8b183000 8b1aa000   ecache   ecache.sys   Sat Jan 19 00:50:47 2008 (47918FB7)
a1600000 a165e000   eeCtrl   eeCtrl.sys   Fri May 21 17:44:53 2010 (4BF6FED5)
8a666000 8a6fa000   elxstor  elxstor.sys  Wed Apr 11 11:45:07 2007 (461D0283)
9f551000 9f569000   enecir   enecir.sys   Thu Sep 04 05:47:24 2008 (48BFAEAC)
a165e000 a167b000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:53 2010 (4BF6FED5)
a17bd000 a17e5000   fastfat  fastfat.SYS  Sat Jan 19 00:28:00 2008 (47918A60)
8a768000 8a778000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
8a96a000 8a99c000   fltmgr   fltmgr.sys   Sat Jan 19 00:28:10 2008 (47918A6A)
9faec000 9faf5000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
8aeea000 8af05000   fwpkclnt fwpkclnt.sys Sat Jan 19 00:55:44 2008 (479190E0)
9f755000 9f75a280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
821c9000 821fc000   hal      halmacpi.dll Sat Jan 19 00:27:20 2008 (47918A38)
9f50e000 9f520000   HDAudBus HDAudBus.sys Tue Nov 27 18:18:41 2007 (474CA5D1)
8a7a5000 8a7e4000   HdAudio  HdAudio.sys  Wed Nov 01 21:43:11 2006 (45494D2F)
9fac4000 9fad4000   HIDCLASS HIDCLASS.SYS Wed Apr 16 22:33:00 2008 (4806B6DC)
9fab9000 9fac4000   hidir    hidir.sys    Wed Apr 16 22:33:02 2008 (4806B6DE)
9fad4000 9fada480   HIDPARSE HIDPARSE.SYS Wed Apr 16 22:32:59 2008 (4806B6DB)
a0fe0000 a0fe9000   hidusb   hidusb.sys   Wed Apr 16 22:33:01 2008 (4806B6DD)
8a53b000 8a546000   hpcisss  hpcisss.sys  Fri Mar 09 14:51:35 2007 (45F1BAC7)
8b1aa000 8b1b3000   hpdskflt hpdskflt.sys Tue Mar 18 17:24:47 2008 (47E0331F)
9f7d0000 9f7d4180   HpqKbFiltr HpqKbFiltr.sys Mon Jun 18 18:12:03 2007 (46770333)
add13000 add80000   HTTP     HTTP.sys     Sat Feb 20 16:18:38 2010 (4B8051AE)
8a6fa000 8a704000   i2omp    i2omp.sys    Sat Jan 19 00:49:44 2008 (47918F78)
9f7bd000 9f7d0000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
8a40f000 8a4b0000   iastorv  iastorv.sys  Fri Sep 28 14:17:27 2007 (46FD4537)
a0f85000 a0fe0000   IDSvix86 IDSvix86.sys Fri Nov 05 17:11:46 2010 (4CD47312)
8a704000 8a714000   iirsp    iirsp.sys    Tue Dec 13 16:48:01 2005 (439F4191)
8072d000 80734000   intelide intelide.sys Mon Jun 02 21:10:34 2008 (48449A0A)
a00b4000 a00d3000   Ironx86  Ironx86.SYS  Tue Apr 27 20:47:15 2010 (4BD78593)
8068d000 8069c000   isapnp   isapnp.sys   Sat Jan 19 00:32:55 2008 (47918B87)
8a714000 8a720000   iteatapi iteatapi.sys Thu Aug 10 22:11:47 2006 (44DBE763)
8a720000 8a72c000   iteraid  iteraid.sys  Thu Aug 10 21:38:19 2006 (44DBDF8B)
9f7d5000 9f7e0000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
9fadb000 9fae4000   kbdhid   kbdhid.sys   Sat Jan 19 00:49:17 2008 (47918F5D)
80406000 8040e000   kdcom    kdcom.dll    Sat Jan 19 02:31:53 2008 (4791A769)
8af58000 8af82000   ks       ks.sys       Sat Jan 19 00:49:21 2008 (47918F61)
8ac0a000 8ac7b000   ksecdd   ksecdd.sys   Mon Jun 15 08:58:01 2009 (4A364559)
adcbc000 adccc000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
8a72c000 8a746000   lsi_fc   lsi_fc.sys   Fri Jun 29 21:01:20 2007 (4685AB60)
8a746000 8a75e000   lsi_sas  lsi_sas.sys  Fri Jun 29 21:01:01 2007 (4685AB4D)
8a4d6000 8a4f0000   lsi_scsi lsi_scsi.sys Fri Jun 29 20:47:54 2007 (4685A83A)
a01bf000 a01da000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
8a75e000 8a768000   megasas  megasas.sys  Fri May 25 18:19:58 2007 (4657610E)
8a804000 8a8bb000   megasr   megasr.sys   Mon Jul 02 17:50:10 2007 (46897312)
a0e00000 a0e0f000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
9f7e0000 9f7eb000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
9fae4000 9faec000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
8075f000 8076f000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
8069c000 806b8000   mpio     mpio.sys     Sat Jan 19 00:50:40 2008 (47918FB0)
addb6000 addcb000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
8a8bb000 8a8c6000   mraid35x mraid35x.sys Thu Sep 07 21:21:32 2006 (4500C59C)
addcb000 addeb000   mrxdav   mrxdav.sys   Sat Jan 19 00:28:44 2008 (47918A8C)
a01da000 a01f9000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:32:29 2010 (4B83BCCD)
ae402000 ae43b000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:32:35 2010 (4B83BCD3)
ae43b000 ae453000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:32:33 2010 (4B83BCD1)
8a531000 8a53b000   msahci   msahci.sys   Fri Aug 15 21:20:01 2008 (48A62B41)
8076f000 80789000   msdsm    msdsm.sys    Sat Jan 19 00:50:46 2008 (47918FB6)
9fb40000 9fb4b000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
8065e000 80666000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
9f569000 9f597000   msiscsi  msiscsi.sys  Sat Jan 19 00:50:44 2008 (47918FB4)
afe30000 afe31580   MSPQM    MSPQM.sys    Sat Jan 19 00:49:18 2008 (47918F5E)
8ad86000 8adb1000   msrpc    msrpc.sys    Sat Jan 19 00:48:15 2008 (47918F1F)
9f5f6000 9f600000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8b174000 8b183000   mup      mup.sys      Sat Jan 19 00:28:20 2008 (47918A74)
8ac7b000 8ad86000   ndis     ndis.sys     Sat Jan 19 00:55:51 2008 (479190E7)
9f5b9000 9f5c4000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
adcf6000 add00000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
9f5c4000 9f5e7000   ndiswan  ndiswan.sys  Sat Jan 19 00:56:32 2008 (47919110)
8afd1000 8afe2000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
a0093000 a00a1000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
a004b000 a007d000   netbt    netbt.sys    Sat Jan 19 00:55:33 2008 (479190D5)
8adb1000 8adeb000   NETIO    NETIO.SYS    Sat Jan 19 00:56:19 2008 (47919103)
8a8c6000 8a8d4000   nfrd960  nfrd960.sys  Tue Jun 06 17:12:15 2006 (4485EFAF)
9fb4b000 9fb59000   Npfs     Npfs.SYS     Sat Jan 19 00:28:09 2008 (47918A69)
a0f7b000 a0f85000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
81e0f000 821c9000   nt       ntkrpamp.exe Tue Jun 08 10:29:00 2010 (4C0E53AC)
8b007000 8b116000   Ntfs     Ntfs.sys     Sat Jan 19 00:28:54 2008 (47918A96)
9faf5000 9fafc000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
80789000 807a4000   nvraid   nvraid.sys   Wed Jun 06 16:34:41 2007 (46671A61)
8a8d4000 8a8e1000   nvstor   nvstor.sys   Wed Jun 06 16:34:41 2007 (46671A61)
adccc000 adcf6000   nwifi    nwifi.sys    Mon May 19 22:07:27 2008 (4832325F)
a007d000 a0093000   pacer    pacer.sys    Fri Apr 04 21:21:42 2008 (47F6D426)
806b8000 806c7000   partmgr  partmgr.sys  Sat Jan 19 00:49:54 2008 (47918F82)
80666000 8068d000   pci      pci.sys      Sat Jan 19 00:32:57 2008 (47918B89)
80742000 80749000   pciide   pciide.sys   Fri Aug 15 21:20:00 2008 (48A62B40)
80734000 80742000   PCIIDEX  PCIIDEX.SYS  Fri Aug 15 21:19:58 2008 (48A62B3E)
ae4e1000 ae5bf000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
9fa03000 9fa30000   portcls  portcls.sys  Mon Oct 27 22:28:48 2008 (490678E0)
8af10000 8af1f000   processr processr.sys Sat Jan 19 00:27:20 2008 (47918A38)
8040e000 8041f000   PSHED    PSHED.dll    Sat Jan 19 02:31:21 2008 (4791A749)
8aa01000 8ab39000   ql2300   ql2300.sys   Fri Mar 09 18:13:05 2007 (45F1EA01)
8ab39000 8ab8e000   ql40xx   ql40xx.sys   Thu Jul 06 15:38:16 2006 (44AD66A8)
9fb59000 9fb62000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
9f5a2000 9f5b9000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
9f5e7000 9f5f6000   raspppoe raspppoe.sys Sat Jan 19 00:56:33 2008 (47919111)
8af1f000 8af33000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8af33000 8af48000   rassstp  rassstp.sys  Sat Jan 19 00:56:43 2008 (4791911B)
a0f3f000 a0f7b000   rdbss    rdbss.sys    Sat Jan 19 00:28:34 2008 (47918A82)
9fb30000 9fb38000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
9fb38000 9fb40000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
a0172000 a019b000   rfcomm   rfcomm.sys   Wed Apr 16 22:33:30 2008 (4806B6FA)
add00000 add13000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
9f717000 9f73d000   Rtlh86   Rtlh86.sys   Fri Mar 06 04:06:03 2009 (49B0E77B)
8b15f000 8b174000   sbp2port sbp2port.sys Thu Nov 02 04:51:44 2006 (4549B1A0)
805d1000 805f7000   SCSIPORT SCSIPORT.SYS Sat Jan 19 00:49:44 2008 (47918F78)
ae5bf000 ae5c9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8ab8e000 8ab9b000   sisraid2 sisraid2.sys Fri Apr 13 18:34:24 2007 (46200570)
8ab9b000 8abb0000   sisraid4 sisraid4.sys Fri Apr 13 19:38:55 2007 (4620148F)
8afe2000 8aff6000   smb      smb.sys      Sat Jan 19 00:55:27 2008 (479190CF)
8b157000 8b15f000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
adc0d000 adcbc000   spsys    spsys.sys    Thu Jun 21 20:33:02 2007 (467B18BE)
a0f14000 a0f1d080   SRTSPX   SRTSPX.SYS   Wed Feb 24 18:55:07 2010 (4B85BC5B)
ae47b000 ae4c9000   srv      srv.sys      Mon Sep 06 10:12:59 2010 (4C84F6EB)
ae453000 ae47b000   srv2     srv2.sys     Mon Sep 06 10:12:37 2010 (4C84F6D5)
add80000 add9d000   srvnet   srvnet.sys   Mon Sep 06 10:12:37 2010 (4C84F6D5)
8a4f0000 8a531000   storport storport.sys Sat Jan 19 00:49:49 2008 (47918F7D)
9fa55000 9fab9000   stwrt    stwrt.sys    Thu Jan 08 12:13:36 2009 (49663440)
9f7fa000 9f7fb380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8abbc000 8abc7000   sym_hi   sym_hi.sys   Fri Nov 11 16:07:07 2005 (437507FB)
8abc7000 8abd2000   sym_u3   sym_u3.sys   Thu Oct 20 20:12:49 2005 (43583281)
8abb0000 8abbc000   symc8xx  symc8xx.sys  Fri Nov 11 17:45:56 2005 (43751F24)
8a99c000 8a9f2000   SYMDS    SYMDS.SYS    Mon Aug 17 19:34:39 2009 (4A89E90F)
8a778000 8a7a5000   SYMEFA   SYMEFA.SYS   Wed Apr 21 17:46:52 2010 (4BCF724C)
9fbd1000 9fbf6000   SYMEVENT SYMEVENT.SYS Thu Aug 13 18:22:41 2009 (4A849231)
9fb78000 9fbd1000   SYMTDIV  SYMTDIV.SYS  Tue May 04 00:29:10 2010 (4BDFA296)
9f520000 9f550680   SynTP    SynTP.sys    Fri Dec 05 01:14:54 2008 (4938C6DE)
8ae01000 8aeea000   tcpip    tcpip.sys    Wed Jun 16 09:37:47 2010 (4C18D3AB)
ae5c9000 ae5d5000   tcpipreg tcpipreg.sys Sat Jan 19 00:56:07 2008 (479190F7)
9f597000 9f5a2000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
9fb62000 9fb78000   tdx      tdx.sys      Sat Jan 19 00:55:58 2008 (479190EE)
8af48000 8af58000   termdd   termdd.sys   Sat Jan 19 01:01:06 2008 (47919222)
aaf10000 aaf19000   TSDDD    TSDDD.dll    Sat Jan 19 01:01:09 2008 (47919225)
8b1f7000 8b200000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
8af05000 8af10000   tunnel   tunnel.sys   Thu Feb 18 06:52:00 2010 (4B7D29E0)
8a8e1000 8a91d000   uliahci  uliahci.sys  Fri May 04 12:18:25 2007 (463B5CD1)
8abd2000 8abf3000   ulsata   ulsata.sys   Tue Sep 19 20:02:59 2006 (45108533)
8a91d000 8a949000   ulsata2  ulsata2.sys  Tue Sep 19 20:18:47 2006 (451088E7)
8af90000 8af9d000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
a0efd000 a0f14000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
9f7ac000 9f7ad700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
9f7ae000 9f7bd000   usbehci  usbehci.sys  Sat Jan 19 00:53:21 2008 (47919051)
9f7a3000 9f7ac000   usbfilter usbfilter.sys Wed May 28 18:54:13 2008 (483DE295)
8af9d000 8afd1000   usbhub   usbhub.sys   Sat Jan 19 00:53:40 2008 (47919064)
9f75b000 9f765000   usbohci  usbohci.sys  Sat Jan 19 00:53:21 2008 (47919051)
9f765000 9f7a3000   USBPORT  USBPORT.SYS  Sat Jan 19 00:53:23 2008 (47919053)
a00d3000 a00e5000   USBSTOR  USBSTOR.SYS  Sat Jan 19 00:53:22 2008 (47919052)
a0f1e000 a0f3eb80   usbvideo usbvideo.sys Sat Jan 19 00:53:38 2008 (47919062)
9fb03000 9fb0f000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
807c5000 807cd000   viaide   viaide.sys   Mon Jun 02 21:10:34 2008 (48449A0A)
9fb0f000 9fb30000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
806d4000 806e3000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
806e3000 8072d000   volmgrx  volmgrx.sys  Sat Jan 19 00:50:00 2008 (47918F88)
8b11e000 8b157000   volsnap  volsnap.sys  Sat Jan 19 00:50:10 2008 (47918F92)
8a949000 8a96a000   vsmraid  vsmraid.sys  Wed May 30 17:15:38 2007 (465DE97A)
a00a1000 a00b4000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
9f501000 9f50e000   watchdog watchdog.sys Sat Jan 19 00:35:29 2008 (47918C21)
8b116000 8b11e000   wd       wd.sys       Sat Jan 19 00:52:18 2008 (47919012)
80548000 805c4000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
805c4000 805d1000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
aacf0000 aaef3000   win32k   win32k.sys   Mon Oct 18 09:56:28 2010 (4CBC520C)
9f600000 9f609000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
80655000 8065e000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
Unloaded modules:

Code:

 sym_u3.sys   Thu Oct 20 20:12:49 2005 (
sym_hi.sys   Fri Nov 11 16:07:07 2005 (
symc8xx.sys  Fri Nov 11 17:45:56 2005 (
iirsp.sys    Tue Dec 13 16:48:01 2005 (
djsvs.sys    Tue Apr 11 20:20:11 2006 (
nfrd960.sys  Tue Jun 06 17:12:15 2006 (
ql40xx.sys   Thu Jul 06 15:38:16 2006 (
iteraid.sys  Thu Aug 10 21:38:19 2006 (
iteatapi.sys Thu Aug 10 22:11:47 2006 (
mraid35x.sys Thu Sep 07 21:21:32 2006 (
secdrv.SYS   Wed Sep 13 09:18:32 2006 (
ulsata.sys   Tue Sep 19 20:02:59 2006 (
ulsata2.sys  Tue Sep 19 20:18:47 2006 (
peauth.sys   Mon Oct 23 04:55:32 2006 (
AtiPcie.sys  Mon Oct 30 14:23:10 2006 (
HdAudio.sys  Wed Nov 01 21:43:11 2006 (
sbp2port.sys Thu Nov 02 04:51:44 2006 (
adpu160m.sys Wed Feb 21 13:04:35 2007 (
adpu320.sys  Tue Feb 27 19:03:08 2007 (
hpcisss.sys  Fri Mar 09 14:51:35 2007 (
ql2300.sys   Fri Mar 09 18:13:05 2007 (
elxstor.sys  Wed Apr 11 11:45:07 2007 (
sisraid2.sys Fri Apr 13 18:34:24 2007 (
sisraid4.sys Fri Apr 13 19:38:55 2007 (
adp94xx.sys  Tue Apr 24 17:00:29 2007 (
adpahci.sys  Tue May 01 13:29:26 2007 (
uliahci.sys  Fri May 04 12:18:25 2007 (
arc.sys      Thu May 24 17:31:06 2007 (
arcsas.sys   Fri May 25 14:56:36 2007 (
megasas.sys  Fri May 25 18:19:58 2007 (
vsmraid.sys  Wed May 30 17:15:38 2007 (
nvstor.sys   Wed Jun 06 16:34:41 2007 (
nvraid.sys   Wed Jun 06 16:34:41 2007 (
spldr.sys    Thu Jun 21 20:29:17 2007 (
spsys.sys    Thu Jun 21 20:33:02 2007 (
lsi_scsi.sys Fri Jun 29 20:47:54 2007 (
lsi_sas.sys  Fri Jun 29 21:01:01 2007 (
lsi_fc.sys   Fri Jun 29 21:01:20 2007 (
megasr.sys   Mon Jul 02 17:50:10 2007 (
iastorv.sys  Fri Sep 28 14:17:27 2007 (
HDAudBus.sys Tue Nov 27 18:18:41 2007 (
HpqKbFiltr.sys Mon Jun 18 18:12:03 2007

The reports that you have submitted reveal clues to the cause of your problem. They do not give a definitive answer. The more reports that we receive the more clues are made available improving our chances of finding a solution to your problem. You may have to experience several more BSODs until the final answer is discovered.

If overclocking restore normal settings

SFC /scannow
System Files - SFC Command

Scan with your Anti Virus

Update outdated listed drivers. If I have inadvertently listed any Microsoft Drivers, they can be ignored. If the list is extensive I have included the driver verifier test so that you may determine which drivers are in need of immediate attention.

How to Find Drivers
search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone - will help you search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- - if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.
- The most common drivers are listed on this page: http://www.carrona.org/dvrref.html
- - Driver manufacturer links are on this page: http://www.carrona.org/drvrdown.html
and here
http://www.edbott.com/weblog/the-vista-master-driver-list/
To remove any left over driver remnants, especially from graphics cards, use driver sweeper
www.guru3d.com/category/driversweeper/
You can also locate information about your driver using this information
http://www.sevenforums.com/tutorials/96442-device-manager-finding-unknown-devices.html

Uninstall your current Anti Virus and replace with Microsoft Security Essentials.
www.microsoft.com/Security_Essentials/

Run the upgrade advisor to help discover hardware problems
www.microsoft.com/Windows/windows-7/get/upgrade-advisor.aspx

Cannot access administrator

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

Attachments

My Computer

My Computer

My Computer

My Computer