[COLOR=red][B]NTIOLib_X64.sys Wed Oct 20 08:45:49 2010 (4CBE901D)[/B][/COLOR]
MSI Afterburner driver (known [COLOR=red]BSOD[/COLOR] issues with Windows) Also found to be a part of MSI Live Update 5 & MSI Super Charger[br] [br] Recently (Nov 2014) there have been numerous instances of this driver in memory dumps. Analysis reveals that they are scattered throughout the filesystem by the installed MSI command utilities. For now I suggest uninstalling them all.
[URL="http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]NTIOLib_X64.sys[/COLOR][/B][/URL]
[COLOR=red][B]ndisrd.sys Wed Sep 14 12:18:41 2011 (4E707F81)[/B][/COLOR]
[COLOR=#777777][COLOR=#4b0082]ndisrd.sys[/COLOR] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/COLOR]
acsock64.sys Wed Nov 7 03:27:25 2012 (5099C70D)
Cisco AnyConnect Secure Mobility Client
[URL="http://www.carrona.org/drivers/driver.php?id=acsock64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]acsock64.sys[/COLOR][/B][/URL]
rtwlanu.sys Wed Dec 5 14:55:15 2012 (50BF5243)
Realtek RTLxxxxx Wireless USB 2.0 Adapter [br]Used by different manufacturer's
[URL="http://www.carrona.org/drivers/driver.php?id=rtwlanu.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]rtwlanu.sys[/COLOR][/B][/URL]
agp440.sys Thu Aug 22 13:39:35 2013 (5215F877)
Intel AGP Bus Filter
[URL="http://www.carrona.org/drivers/driver.php?id=agp440.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]agp440.sys[/COLOR][/B][/URL]
nv_agp.sys Thu Aug 22 13:39:38 2013 (5215F87A)
NVIDIA nForce AGP Bus Filter
[URL="http://www.carrona.org/drivers/driver.php?id=nv_agp.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]nv_agp.sys[/COLOR][/B][/URL]
[COLOR=red][B]WinDivert.sys Tue Dec 3 04:46:09 2013 (529D5401)[/B][/COLOR]
WinDivert network packet capture and (re)injection driver [COLOR=red]BSOD[/COLOR] - to highlight in table
[URL="http://www.carrona.org/drivers/driver.php?id=WinDivert.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]WinDivert.sys[/COLOR][/B][/URL]
point64.sys Thu Dec 12 14:16:17 2013 (52A9B721)
Microsoft IntelliPoint Filter Driver
[URL="http://www.carrona.org/drivers/driver.php?id=point64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]point64.sys[/COLOR][/B][/URL]
dc3d.sys Thu Dec 12 14:16:35 2013 (52A9B733)
Filter Driver for Identification of Microsoft Hardware Wireless Mouse and Keyboard Device Models - Microsoft IntelliType Pro / IntelliPoint
[URL="http://www.carrona.org/drivers/driver.php?id=dc3d.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]dc3d.sys[/COLOR][/B][/URL]
AMDACPKSL.SYS Sun Jun 22 04:31:43 2014 (53A6400F)
included in the AMD/ATI Catalyst WDM drivers package
[URL="http://www.carrona.org/drivers/driver.php?id=AMDACPKSL.SYS"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]AMDACPKSL.SYS[/COLOR][/B][/URL]
AtihdWB6.sys Sun Jun 22 04:32:00 2014 (53A64020)
AMD High Definition Audio Function Driver
[URL="http://www.carrona.org/drivers/driver.php?id=AtihdWB6.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]AtihdWB6.sys[/COLOR][/B][/URL]
RTKVHD64.sys Tue Jul 15 12:53:15 2014 (53C5081B)
Realtek High Definition Audio Function Driver
[URL="http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]RTKVHD64.sys[/COLOR][/B][/URL]
Rt630x64.sys Wed Jul 16 04:56:14 2014 (53C5E9CE)
Realtek PCI/PCIe Adapters
[URL="http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]Rt630x64.sys[/COLOR][/B][/URL]
atikmpag.sys Fri Nov 21 03:08:54 2014 (546E9EB6)
ATI Video driver (remove the Catalyst Control Center and only install the Display Driver)
[URL="http://www.carrona.org/drivers/driver.php?id=atikmpag.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]atikmpag.sys[/COLOR][/B][/URL]
atikmdag.sys Fri Nov 21 03:30:27 2014 (546EA3C3)
ATI Video driver (remove the Catalyst Control Center and only install the Display Driver)
[URL="http://www.carrona.org/drivers/driver.php?id=atikmdag.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]atikmdag.sys[/COLOR][/B][/URL]
dtlitescsibus.sys Mon Dec 8 11:13:10 2014 (548579B6)
[COLOR=#777777][COLOR=#4b0082]dtlitescsibus.sys[/COLOR] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/COLOR]
Debug session time: Sun Mar 1 20:33:36.762 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\030115-16484-01.dmp]
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
System Uptime: 0 days 0:01:50.293
*** WARNING: Unable to verify timestamp for ataport.SYS
*** ERROR: Module load completed but symbols could not be loaded for ataport.SYS
Probably caused by : CLASSPNP.SYS ( CLASSPNP!TransferPktComplete+322 )
BugCheck D1, {ffffe0008848d203, 2, 1, fffff8012fc958d2}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/URL]
Bugcheck code 000000d1
Arguments:
Arg1: ffffe0008848d203, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff8012fc958d2, address which referenced memory
BUGCHECK_STR: AV
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
FAILURE_BUCKET_ID: AV_CLASSPNP!TransferPktComplete
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat Feb 28 22:08:14.252 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\022815-33109-01.dmp]
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
System Uptime: 2 days 2:12:54.732
Probably caused by : win32k.sys ( win32k!SURFACE::bDeleteSurface+5a1 )
BugCheck A, {fffffa7ffffff700, 2, 0, fffff803b9b056c2}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]IRQL_NOT_LESS_OR_EQUAL (a)[/URL]
Bugcheck code 0000000A
Arguments:
Arg1: fffffa7ffffff700, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff803b9b056c2, address which referenced memory
BUGCHECK_STR: AV
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: NetworkGenie.e
FAILURE_BUCKET_ID: AV_win32k!SURFACE::bDeleteSurface
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Wed Feb 25 17:13:16.835 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\022515-30625-01.dmp]
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
System Uptime: 0 days 0:14:23.831
Probably caused by : pci.sys ( pci! ?? ::FNODOBFM::`string'+4 )
BugCheck 1E, {ffffffffc000001d, fffff80143545224, ffffe001d4654080, ffffe001cfb49010}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]KMODE_EXCEPTION_NOT_HANDLED (1e)[/URL]
Bugcheck code 0000001E
Arguments:
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff80143545224, The address that the exception occurred at
Arg3: ffffe001d4654080, Parameter 0 of the exception
Arg4: ffffe001cfb49010, Parameter 1 of the exception
BUGCHECK_STR: 0x1E_c000001d
PROCESS_NAME: TiWorker.exe
FAILURE_BUCKET_ID: 0x1E_c000001d_BAD_IP_pci!_??_::FNODOBFM::_string_
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Mon Feb 23 18:44:25.569 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\022315-23109-01.dmp]
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
System Uptime: 0 days 23:36:19.090
Probably caused by : ntkrnlmp.exe ( nt!ObpRemoveObjectRoutine+6c )
BugCheck C2, {10, ffffe00016c22000, 17e17000, ffffe00016c22030}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]BAD_POOL_CALLER (c2)[/URL]
Bugcheck code 000000c2
Arguments:
Arg1: 0000000000000010, type of pool violation the caller is guilty of.
Arg2: ffffe00016c22000
Arg3: 0000000017e17000
Arg4: ffffe00016c22030
BUGCHECK_STR: 0xc2_10
PROCESS_NAME: System
FAILURE_BUCKET_ID: 0xc2_10_nt!ObpRemoveObjectRoutine
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat Feb 21 07:25:16.304 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\022115-53843-01.dmp]
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
System Uptime: 0 days 8:40:54.554
Probably caused by : memory_corruption ( nt!MiLocateSubsectionNode+7f )
BugCheck 3B, {c0000005, fffff8026e8bdf33, ffffd001df9e3d80, 0}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Bugcheck code 0000003B
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8026e8bdf33, Address of the instruction which caused the bugcheck
Arg3: ffffd001df9e3d80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR: 0x3B
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: svchost.exe
FAILURE_BUCKET_ID: 0x3B_nt!MiLocateSubsectionNode
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Fri Feb 20 22:40:19.972 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\022015-37421-01.dmp]
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
System Uptime: 0 days 3:12:22.389
Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
BugCheck A, {773600005de8, 2, 1, fffff803022bf13e}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]IRQL_NOT_LESS_OR_EQUAL (a)[/URL]
Bugcheck code 0000000A
Arguments:
Arg1: 0000773600005de8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff803022bf13e, address which referenced memory
BUGCHECK_STR: AV
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: svchost.exe
FAILURE_BUCKET_ID: AV_nt!KxWaitForLockOwnerShip
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Wed Feb 18 19:38:07.406 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\021815-26875-01.dmp]
Built by: 9600.17031.amd64fre.winblue_gdr.140221-1952
System Uptime: 0 days 3:56:19.758
Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
BugCheck A, {490000004c, 2, 1, fffff802802a9c02}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]IRQL_NOT_LESS_OR_EQUAL (a)[/URL]
Bugcheck code 0000000A
Arguments:
Arg1: 000000490000004c, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff802802a9c02, address which referenced memory
BUGCHECK_STR: AV
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: svchost.exe
FAILURE_BUCKET_ID: AV_nt!KxWaitForLockOwnerShip
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat Feb 14 04:42:46.827 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\021415-37734-01.dmp]
Built by: 9600.17031.amd64fre.winblue_gdr.140221-1952
System Uptime: 0 days 1:50:58.078
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : atikmdag.sys ( atikmdag+8d290 )
BugCheck 3D, {ffffd001973f7450, 0, 0, fffff801558b3290}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]INTERRUPT_EXCEPTION_NOT_HANDLED (3d)[/URL]
Bugcheck code 0000003D
Arguments:
Arg1: ffffd001973f7450
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: fffff801558b3290
BUGCHECK_STR: 0x3D
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: System
FAILURE_BUCKET_ID: 0x3D_atikmdag+8d290
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Thu Feb 12 05:40:05.426 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\021215-27921-01.dmp]
Built by: 9600.17031.amd64fre.winblue_gdr.140221-1952
System Uptime: 0 days 9:32:10.015
Probably caused by : memory_corruption ( nt!MiUnlinkPageFromLockedList+35e )
BugCheck A, {fffffae005fac750, 2, 0, fffff800a6b1851e}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]IRQL_NOT_LESS_OR_EQUAL (a)[/URL]
Bugcheck code 0000000A
Arguments:
Arg1: fffffae005fac750, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800a6b1851e, address which referenced memory
BUGCHECK_STR: AV
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: svchost.exe
FAILURE_BUCKET_ID: AV_nt!MiUnlinkPageFromLockedList
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Wed Feb 11 20:07:03.681 2015 (UTC + 1:00)
Loading Dump File [C:\Users\Mihael\SysnativeBSODApps\021115-31265-01.dmp]
Built by: 9600.17031.amd64fre.winblue_gdr.140221-1952
System Uptime: 0 days 12:31:21.916
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : atikmdag.sys ( atikmdag+cd160 )
BugCheck 1000007E, {ffffffffc0000005, fffff800cef30160, ffffd0005d486dc8, ffffd0005d4865d0}
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/URL]
Bugcheck code 1000007E
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800cef30160, The address that the exception occurred at
Arg3: ffffd0005d486dc8, Exception Record Address
Arg4: ffffd0005d4865d0, Context Record Address
PROCESS_NAME: System
BUGCHECK_STR: AV
FAILURE_BUCKET_ID: AV_atikmdag+cd160
BiosVersion = V10.3
BiosReleaseDate = 11/22/2011
SystemManufacturer = MSI
SystemProductName = MS-7641
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
--- E O J --- 2015 Mar 01 23:22:34 PM _88-dbug Copyright 2012 Sysnative Forums
--- E O J --- 2015 Mar 01 23:22:34 PM _88-dbug Copyright 2012 Sysnative Forums
--- E O J --- 2015 Mar 01 23:22:34 PM _88-dbug Copyright 2012 Sysnative Forums