"GFXui.exe has stopped working"

[Dan.A]

Hello Forum!
Im for my english mistakes it quite rusty...

Yesterday I wrote zeros on my 500GB HD to install a new OS (Windows 7 Ultimate X64), the installation was ok and ive installed all microsoft latest updates.
somehow every time i restart windows i get the message "GFXui.exe has stopped working", im going on with clicking on "close program" - sometimes the windows continue working and sometimes i get a bsod error .
I googled it and found that it might be the .NET and the C++ which coming with microsoft - ive downloaded "Aaron Stebner's removal tool" for the .Net framework and installed it all over again, ive also uninstalled the c++ and reinstalled the 2008 version and i still get the error message.
I also tried to[COLOR=#0072BC ! important][FONT=inherit ! important][COLOR=#0072BC ! important][FONT=inherit ! important][/FONT][/FONT][/COLOR][/COLOR] download the latest driver for my (onboard) video card [COLOR=#0072BC ! important][FONT=inherit ! important][COLOR=#0072BC ! important][FONT=inherit ! important][/FONT][COLOR=#0072BC ! important][FONT=inherit ! important][/FONT][/COLOR][/FONT][/COLOR][/COLOR](which is the same as i downloaded with the windows updates) and the error has not disappeared.
When starting windows at safe mode there is no message.
my hardware is:
Gigabyte G41-combo Chipset
4GB DDR3 Kingston
Intel Core2Duo E6700

Best Regards, and sirry for my poor english,

Dan.

 

[cybercore]

GFXui.exe has stopped working", im going on with clicking on "close program" - sometimes the windows continue working and sometimes i get a bsod error .

BSOD sounds hot. Navigate to C:\Windows\Minidump to attach the .dmp files from there.

 

[Dan.A]

Hello Cybercore and thanks for your post...
it seems that the mini dump folder is empty.

any suggestions ?

Dan.

 

[cybercore]

Hello Cybercore and thanks for your post...
it seems that the mini dump folder is empty.

any suggestions ?

Yes, give me your loaded drivers list:

http://www.nirsoft.net/utils/driverview.html

 

[Dan.A]

I tried to delete my video driver and restart windows, after rebooting the windows automatically installed a new driver and now im not getting this error but now sometimes firefox crashes, I use the latest firefox version.
help me please


Dan

 

[cybercore]

Sure,,,,,,,,,,

Yes, give me your loaded drivers list:

http://www.nirsoft.net/utils/driverview.html

 

[Dan.A]

hey cybercore,
im having trouble surfing the internet because i get bsod all the time, please help me!
here is the list of the drivers you asked..

 

[Dan.A]

p.s

some dump files from the last bsod.


many thanks!!

 

[cybercore]

BugCheck 34, {50830, fffff880060414d8, fffff88006040d40, fffff80002875a45}
CACHE_MANAGER (34)
Probably caused by : memory_corruption ( nt!MiFlushSectionInternal+b1c )

``````````````
BugCheck 1A, {41790, fffffa80020ce680, ffff, 0}
MEMORY_MANAGEMENT (1a)
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )

1. CPU-Z & RAMMON:
http://windows7forums.com/blue-scre...mportant-every-thread-starter-please-see.html


2. Uninstall LogMeIn/RemotelyAnywhere:

lmimirr.sys Tue Apr 10 18:32:45 2007


3. Update Intel GMA
igdkmd64.sys Wed May 06 14:22:19 2009
http://www.intel.com/support/detect.htm


4. Replace Avast with MSE:

http://www.avast.com/uninstall-utility

https://www.microsoft.com/security_essentials/







Crash Dumps:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\021611-25958-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02800000 PsLoadedModuleList = 0xfffff800`02a3de50
Debug session time: Wed Feb 16 14:38:51.130 2011 (UTC - 5:00)
System Uptime: 1 days 6:51:22.738
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41790, fffffa80020ce680, ffff, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33906 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041790, The subtype of the bugcheck.
Arg2: fffffa80020ce680
Arg3: 000000000000ffff
Arg4: 0000000000000000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41790

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  dwm.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800028e3f9e to fffff80002870740

STACK_TEXT:  
fffff880`029f8718 fffff800`028e3f9e : 00000000`0000001a 00000000`00041790 fffffa80`020ce680 00000000`0000ffff : nt!KeBugCheckEx
fffff880`029f8720 fffff800`02843c13 : ffffffff`00000000 00000000`10120fff fffffa80`00000000 fffffa80`05bbb930 : nt! ?? ::FNODOBFM::`string'+0x33906
fffff880`029f88e0 fffff800`02b53abf : fffff8a0`02666060 fffff880`029f8be0 00000000`00000000 fffffa80`05bbb930 : nt!MmCleanProcessAddressSpace+0x62f
fffff880`029f8930 fffff800`02b2d735 : 00000000`40010004 00000000`40010001 000007ff`fffdb000 00000000`00000000 : nt!PspExitThread+0x92f
fffff880`029f89f0 fffff800`0284d1cb : 00000000`00000100 fffffa80`05bbb9f0 00000000`00000001 fffff800`02877b9d : nt!PsExitSpecialApc+0x1d
fffff880`029f8a20 fffff800`0284d610 : 00000000`00000000 fffff880`029f8aa0 fffff800`02b2d84c 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`029f8aa0 fffff800`0286fa37 : fffffa80`05bbb930 00000000`ffffffff 00000000`00000000 fffffa80`0532a160 : nt!KiInitiateUserApc+0x70
fffff880`029f8be0 00000000`77a8f6fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`01dcf418 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77a8f6fa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+33906
fffff800`028e3f9e cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+33906

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

FAILURE_BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+33906

BUCKET_ID:  X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+33906

Followup: MachineOwner
---------






Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\021711-20373-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02817000 PsLoadedModuleList = 0xfffff800`02a54e50
Debug session time: Thu Feb 17 14:44:41.393 2011 (UTC - 5:00)
System Uptime: 0 days 0:02:42.001
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 34, {50830, fffff880060414d8, fffff88006040d40, fffff80002875a45}

Probably caused by : memory_corruption ( nt!MiFlushSectionInternal+b1c )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CACHE_MANAGER (34)
    See the comment for FAT_FILE_SYSTEM (0x23)
Arguments:
Arg1: 0000000000050830
Arg2: fffff880060414d8
Arg3: fffff88006040d40
Arg4: fffff80002875a45

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880060414d8 -- (.exr 0xfffff880060414d8)
ExceptionAddress: fffff80002875a45 (nt!MiFlushSectionInternal+0x0000000000000b1c)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88006040d40 -- (.cxr 0xfffff88006040d40)
rax=0000000000000002 rbx=017ffa8001e99b70 rcx=fffff80002a01e80
rdx=0000000000000002 rsi=0000000000000000 rdi=0000000000000048
rip=fffff80002875a45 rsp=fffff88006041710 rbp=fffff88006041878
 r8=0000058000000000  r9=0000000000000000 r10=0000000000000000
r11=fffff80002a01e80 r12=0000000000000000 r13=0000000000000001
r14=fffff88006041880 r15=fffff8a0034203b0
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!MiFlushSectionInternal+0xb1c:
fffff800`02875a45 f00fba6b1000    lock bts dword ptr [rbx+10h],0 ds:002b:017ffa80`01e99b80=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002abf0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
nt!MiFlushSectionInternal+b1c
fffff800`02875a45 f00fba6b1000    lock bts dword ptr [rbx+10h],0

FAULTING_IP: 
nt!MiFlushSectionInternal+b1c
fffff800`02875a45 f00fba6b1000    lock bts dword ptr [rbx+10h],0

BUGCHECK_STR:  0x34

LAST_CONTROL_TRANSFER:  from fffff80002873804 to fffff80002875a45

STACK_TEXT:  
fffff880`06041710 fffff800`02873804 : fffff8a0`034203a0 fffff8a0`034203b0 fffffa80`04b2fa90 fffffa80`04b2fa90 : nt!MiFlushSectionInternal+0xb1c
fffff880`06041950 fffff800`02873259 : 00000000`00002896 00000000`00000000 00000000`00002000 00000000`00000000 : nt!MmFlushSection+0xa4
fffff880`06041a10 fffff800`0287a94b : fffffa80`0620fb28 fffff800`00000001 00000000`00000001 fffffa80`00002000 : nt!CcFlushCache+0x5e9
fffff880`06041b10 fffff800`0287b520 : fffff880`03b44d00 fffff880`06041c18 00000000`00000000 fffff800`00000000 : nt!CcWriteBehind+0x1eb
fffff880`06041bc0 fffff800`02894961 : fffffa80`03a08190 fffff800`02b81920 fffff800`02a8e140 fffffa80`06330220 : nt!CcWorkerThread+0x1c8
fffff880`06041c70 fffff800`02b2a7c6 : 00000000`00000000 fffffa80`04db7660 00000000`00000080 fffffa80`0396d890 : nt!ExpWorkerThread+0x111
fffff880`06041d00 fffff800`02865c26 : fffff800`02a01e80 fffffa80`04db7660 fffffa80`039e0b60 fffff880`01212534 : nt!PspSystemThreadStartup+0x5a
fffff880`06041d40 00000000`00000000 : fffff880`06042000 fffff880`0603c000 fffff880`06040ce0 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiFlushSectionInternal+b1c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

STACK_COMMAND:  .cxr 0xfffff88006040d40 ; kb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x34_nt!MiFlushSectionInternal+b1c

BUCKET_ID:  X64_0x34_nt!MiFlushSectionInternal+b1c

Followup: MachineOwner
---------













Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\021711-13696-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02803000 PsLoadedModuleList = 0xfffff800`02a40e50
Debug session time: Thu Feb 17 13:55:06.282 2011 (UTC - 5:00)
System Uptime: 0 days 0:01:14.890
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff88002fcb598, fffff88002fcae00, fffff80002856cbf}

Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteScb+108 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88002fcb598
Arg3: fffff88002fcae00
Arg4: fffff80002856cbf

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff88002fcb598 -- (.exr 0xfffff88002fcb598)
ExceptionAddress: fffff80002856cbf (nt!RtlDeleteNoSplay+0x0000000000000093)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88002fcae00 -- (.cxr 0xfffff88002fcae00)
rax=fffff8a00207e1d8 rbx=fffffa8006599a90 rcx=0008000000000000
rdx=fffffa8006599a90 rsi=ffffffffffffffff rdi=0000000000000000
rip=fffff80002856cbf rsp=fffff88002fcb7d0 rbp=fffffa8006599a90
 r8=ffffffffffffffff  r9=ffffffffffffffff r10=fffff800029f7280
r11=fffff8a00207e1d8 r12=0000000000000705 r13=0000000000000000
r14=fffffa8006599a48 r15=fffff8a001d8fed8
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
nt!RtlDeleteNoSplay+0x93:
fffff800`02856cbf 488909          mov     qword ptr [rcx],rcx ds:002b:00080000`00000000=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002aab0e0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsDeleteScb+108
fffff880`012aebcc 488b03          mov     rax,qword ptr [rbx]

FAULTING_IP: 
nt!RtlDeleteNoSplay+93
fffff800`02856cbf 488909          mov     qword ptr [rcx],rcx

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880010f7373 to fffff80002856cbf

STACK_TEXT:  
fffff880`02fcb7d0 fffff880`010f7373 : fffffa80`04ad3668 fffffa80`05a106a0 fffffa80`05a10700 ffffffff`ffffffff : nt!RtlDeleteNoSplay+0x93
fffff880`02fcb800 fffff880`010f3238 : ffffffff`ffffffff fffff8a0`018873f0 fffffa80`6e664d46 fffff880`010fc66e : fltmgr!TreeUnlinkNoBalance+0x13
fffff880`02fcb830 fffff880`0111135c : 00000000`00000130 fffff8a0`01d8f700 00000000`000007ff 00000000`00000040 : fltmgr!TreeUnlinkMulti+0x148
fffff880`02fcb880 fffff880`01113bc1 : fffffa80`04ad3010 00000000`00000130 fffff8a0`01d8fc70 fffff8a0`01d8fc70 : fltmgr!FltpDeleteContextList+0x3c
fffff880`02fcb8b0 fffff880`01113b7b : fffffa80`04ad3010 fffff8a0`01d8fed8 fffffa80`04ad3010 fffff800`02849c0a : fltmgr!CleanupStreamListCtrl+0x21
fffff880`02fcb8e0 fffff800`02b605a6 : 00000000`00000001 fffff880`012af0b8 fffff8a0`01d8fda0 fffff880`012226e1 : fltmgr!DeleteStreamListCtrlCallback+0x6b
fffff880`02fcb910 fffff880`012aebcc : fffff8a0`01d8fc70 fffffa80`039e0040 fffff880`02fcb9e8 00000000`00000706 : nt!FsRtlTeardownPerStreamContexts+0xe2
fffff880`02fcb960 fffff880`012ae8d5 : fffff800`01010000 00000000`00000000 fffff800`02a18500 00000000`00000001 : Ntfs!NtfsDeleteScb+0x108
fffff880`02fcb9a0 fffff880`01221cb4 : fffff8a0`01d8fb70 fffff8a0`01d8fc70 fffff800`02a18500 fffff880`02fcbb12 : Ntfs!NtfsRemoveScb+0x61
fffff880`02fcb9e0 fffff880`012ac2dc : fffff8a0`01d8fb40 fffff800`02a185a0 fffff880`02fcbb12 fffffa80`05b58c60 : Ntfs!NtfsPrepareFcbForRemoval+0x50
fffff880`02fcba10 fffff880`0122a882 : fffffa80`05b58c60 fffffa80`05b58c60 fffff8a0`01d8fb40 00000000`00000000 : Ntfs!NtfsTeardownStructures+0xdc
fffff880`02fcba90 fffff880`012c3813 : fffffa80`05b58c60 fffff800`02a185a0 fffff8a0`01d8fb40 00000000`00000009 : Ntfs!NtfsDecrementCloseCounts+0xa2
fffff880`02fcbad0 fffff880`0129d38f : fffffa80`05b58c60 fffff8a0`01d8fc70 fffff8a0`01d8fb40 fffffa80`04919180 : Ntfs!NtfsCommonClose+0x353
fffff880`02fcbba0 fffff800`02880961 : 00000000`00000000 fffff880`0129d200 fffffa80`039e0001 fffffa80`00000002 : Ntfs!NtfsFspClose+0x15f
fffff880`02fcbc70 fffff800`02b167c6 : 00000000`00000000 fffffa80`039e0040 00000000`00000080 fffffa80`0396d890 : nt!ExpWorkerThread+0x111
fffff880`02fcbd00 fffff800`02851c26 : fffff880`009e8180 fffffa80`039e0040 fffff880`009f2f40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`02fcbd40 00000000`00000000 : fffff880`02fcc000 fffff880`02fc6000 fffff880`02fcb9b0 00000000`00000000 : nt!KxStartSystemThread+0x16


SYMBOL_STACK_INDEX:  7

SYMBOL_NAME:  Ntfs!NtfsDeleteScb+108

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff88002fcae00 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsDeleteScb+108

BUCKET_ID:  X64_0x24_Ntfs!NtfsDeleteScb+108

Followup: MachineOwner
---------

Drivers:

start             end                 module name
fffff880`00f01000 fffff880`00f58000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c70000 fffff880`02cfa000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043d4000 fffff880`043ea000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`010e3000 fffff880`010ee000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`04845000 fffff880`0484e000   aswFsBlk aswFsBlk.SYS Thu Jan 13 03:37:10 2011 (4D2EB9B6)
fffff880`00dbf000 fffff880`00df9000   aswMonFlt aswMonFlt.sys Thu Jan 13 03:37:21 2011 (4D2EB9C1)
fffff880`02cfa000 fffff880`02d04000   aswRdr   aswRdr.SYS   Thu Jan 13 03:37:32 2011 (4D2EB9CC)
fffff880`03b8f000 fffff880`03bd8000   aswSP    aswSP.SYS    Thu Jan 13 03:41:42 2011 (4D2EBAC6)
fffff880`00fe2000 fffff880`00ff2000   aswTdi   aswTdi.SYS   Thu Jan 13 03:40:19 2011 (4D2EBA73)
fffff880`010b0000 fffff880`010b9000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010b9000 fffff880`010e3000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`013d6000 fffff880`013dd000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b7e000 fffff880`03b8f000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0233c000 fffff880`0235a000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00770000 fffff960`00797000   cdd      cdd.dll      unavailable (00000000)
fffff880`01466000 fffff880`01490000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cff000 fffff880`00dbf000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01400000 fffff880`01430000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ca1000 fffff880`00cff000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0149b000 fffff880`0150e000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`042c5000 fffff880`042d5000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04986000 fffff880`04994000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03add000 fffff880`03b60000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03b60000 fffff880`03b7e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c00000 fffff880`02c0f000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`015e9000 fffff880`015ff000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0495e000 fffff880`04980000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`049a0000 fffff880`049a9000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04994000 fffff880`049a0000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`049a9000 fffff880`049bc000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0481d000 fffff880`04829000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`042d9000 fffff880`043cd000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`04200000 fffff880`04246000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`0113a000 fffff880`0114e000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010ee000 fffff880`0113a000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0151f000 fffff880`01529000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`015af000 fffff880`015e9000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02de0000 fffff800`02e29000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04246000 fffff880`0426a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`048c5000 fffff880`04921000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`049ca000 fffff880`049e3000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`049e3000 fffff880`049eb080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`049bc000 fffff880`049ca000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02274000 fffff880`0233c000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`017f7000 fffff880`01800000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03c24000 fffff880`041f7500   igdkmd64 igdkmd64.sys Wed May 06 14:22:19 2009 (4A01D55B)
fffff880`0107e000 fffff880`01086000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03a00000 fffff880`03a16000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02c34000 fffff880`02c43000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04829000 fffff880`04837000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bd2000 fffff800`00bdc000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`00c00000 fffff880`00c43000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013bc000 fffff880`013d6000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`017ba000 fffff880`017e5000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04980000 fffff880`04985200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0426a000 fffff880`0427e000   l1c51x64 l1c51x64.sys Thu Apr 22 02:35:05 2010 (4BCFEE19)
fffff880`02247000 fffff880`0225c000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`043cd000 fffff880`043d4000   lmimirr  lmimirr.sys  Tue Apr 10 18:32:45 2007 (461C108D)
fffff880`01453000 fffff880`01466000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:56 2008 (487B7E50)
fffff880`01430000 fffff880`01453000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c49000 fffff880`00c8d000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`04837000 fffff880`04845000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`02c43000 fffff880`02c52000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`049ee000 fffff880`049fb000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`01096000 fffff880`010b0000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0235a000 fffff880`02372000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02372000 fffff880`0239f000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0239f000 fffff880`023ed000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`02200000 fffff880`02223000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`011da000 fffff880`011e5000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f61000 fffff880`00f6b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0114e000 fffff880`011ac000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02deb000 fffff880`02df6000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017e5000 fffff880`017f7000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01668000 fffff880`0175a000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043ea000 fffff880`043f6000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03a6c000 fffff880`03a9b000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`048b0000 fffff880`048c5000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d33000 fffff880`02d42000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`00e00000 fffff880`00e45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0175a000 fffff880`017ba000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`011e5000 fffff880`011f6000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02ddf000 fffff880`02deb000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02803000 fffff800`02de0000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
fffff880`01219000 fffff880`013bc000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01490000 fffff880`01499000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02d0d000 fffff880`02d33000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`042a8000 fffff880`042c5000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00fab000 fffff880`00fc0000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f6b000 fffff880`00f9e000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01086000 fffff880`01096000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0150e000 fffff880`0151f000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05cdc000 fffff880`05d82000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04921000 fffff880`0495e000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c8d000 fffff880`00ca1000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`023ed000 fffff880`023f4000   RaInfo   RaInfo.sys   Fri Jan 04 13:57:14 2008 (477E818A)
fffff880`03c00000 fffff880`03c24000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03a9b000 fffff880`03ab6000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03ab6000 fffff880`03ad7000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`02c0f000 fffff880`02c29000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d8e000 fffff880`02ddf000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02c29000 fffff880`02c34000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01200000 fffff880`01209000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01209000 fffff880`01212000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`011d1000 fffff880`011da000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01575000 fffff880`015af000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0225c000 fffff880`02274000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05d82000 fffff880`05d8d000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0429c000 fffff880`042a8000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02d42000 fffff880`02d5f000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0165a000 fffff880`01662000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`05d8d000 fffff880`05dfe000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`060be000 fffff880`06154000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`05c3f000 fffff880`05ca6000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`05c00000 fffff880`05c2d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`043f6000 fffff880`043f7480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`05c2d000 fffff880`05c3f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`00fd5000 fffff880`00fe2000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01000000 fffff880`0101e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d7a000 fffff880`02d8e000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004e0000 fffff960`004ea000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03bd8000 fffff880`03bfe000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`02c52000 fffff880`02c64000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04800000 fffff880`0481d000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`049ec000 fffff880`049edf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0428b000 fffff880`0429c000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04856000 fffff880`048b0000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03a16000 fffff880`03a6c000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0427e000 fffff880`0428b000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00f9e000 fffff880`00fab000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`013dd000 fffff880`013eb000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`011ac000 fffff880`011d1000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0164a000 fffff880`0165a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fc0000 fffff880`00fd5000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01022000 fffff880`0107e000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01529000 fffff880`01575000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d5f000 fffff880`02d7a000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`013eb000 fffff880`013fb000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e4e000 fffff880`00ef2000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ef2000 fffff880`00f01000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d04000 fffff880`02d0d000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00380000   win32k   win32k.sys   unavailable (00000000)
fffff880`00f58000 fffff880`00f61000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02226000 fffff880`02247000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`01430000 fffff880`0143e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0143e000 fffff880`0144a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0144a000 fffff880`01453000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01453000 fffff880`01466000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

 

[Dan.A]

hey cybercore and thanks for the analyze, i need to use logmein for working - you think i should update it or the software must go?
for the gma driver - last time ive updated it i got the gfxui.exe error, you think it will appear again?

thanks again,

dan.

 

[cybercore]

hey cybercore and thanks for the analyze, i need to use logmein for working - you think i should update it or the software must go?
for the gma driver - last time ive updated it i got the gfxui.exe error, you think it will appear again?

thanks again,

dan.

No prob Dan, if you need LogMeIn for working, then update it as its driver is too old and incompatible with 7:

lmimirr.sys Tue Apr 10 18:32:45 2007

and this is not the only one, there are 4-5 more drivers of LogMeIn as old as this one.


Replace Avast with MSE.

 

[Dan.A]

the logmein was installed few days ago from the installer at logmein site - there is a chance that this program just dont have updated drivers that will work with the W7?

Thanks!

 

[cybercore]

For now, replace Avast with MSE.

If still getting bsod's after that, uninstall LogMeIn.

 

[Dan.A]

tomorrow i will try it and inform you, thanks for now!!

 

[cybercore]

For now you are welcome.

 

[Dan.A]

hello!
I tried today the x84 version and it seems to work fine with no bsod's.
ill think ill stick with this version until the sp1 will be out.

thanks alot for the help cybercore!

Dan.

 

[cybercore]

Welcome.