1
1NetAdminGuy
Ok, I posted about this problem before, but now I have more
information that may be helpful for someone to help me solve this.
Basically my computer will restart after being idle for a certain
amount of time, but as long as I sit on here and use it it will never
restart. I've turned off all sleep mode and power settings and a
screen saver. anything that would invoke action after a certain amount
of time is turned off. So here is what I have found out.
When looking in the event viewer, I notice that overnight when it is
idle it will restart every 17 minutes. At exactly 15 minutes of being
idle it must try to do some sort of paging process because it logs a
warning, and the message is "An error was detected on device
\Device\Harddisk0\D during a paging operation." This happens 10 times
over 2 minutes. it tries to do it every 7 or 8 seconds. After the 10th
attempt the computer restarts and it logs an information event that
says "The computer has rebooted from a bugcheck. The bugcheck was:
0x0000000a (0x00000166, 0x00000002, 0x00000000, 0x804f5bc0). A dump
was saved in: C:\WINDOWS\Minidump\Mini121203-28.dmp."
So I run the dumpchk.exe program and this is what it spits out.
DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 0d91f000
PfnDataBase 81000000
PsLoadedModuleList 80543530
PsActiveProcessHead 80545578
MachineImageType 0000014c
NumberProcessors 00000001
BugCheckCode 0000000a
BugCheckParameter1 00000166
BugCheckParameter2 00000002
BugCheckParameter3 00000000
BugCheckParameter4 804f5bc0
PaeEnabled 00000000
KdDebuggerDataBlock 805353e0
MiniDumpFields 00000dff
TRIAGE_DUMP32:
ServicePackBuild 00000100
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 000024c8
ThreadOffset 00002720
CallStackOffset 00002978
SizeOfCallStack 00003000
DriverListOffset 00005c08
DriverCount 00000084
StringPoolOffset 00008338
StringPoolSize 00001240
BrokenDriverOffset 00000000
TriageOptions 00000041
TopOfStack f2741000
DebuggerDataOffset 00005978
DebuggerDataSize 00000290
DataBlocksOffset 00009578
DataBlocksCount 00000004
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Kernel base = 0x804d4000 PsLoadedModuleList = 0x80543530
Debug session time: Fri Dec 12 07:44:55 2003
System Uptime: 0 days 0:16:41
start end module name
804d4000 806aa280 nt Checksum: 001E311B Timestamp: Thu
Apr 24 10:
57:43 2003 (3EA80977)
Unloaded modules:
b2da6000 b2dc2000 bpusbdrv.sys Timestamp: unavailable (00000000)
f7b68000 f7b72000 imapi.sys Timestamp: unavailable (00000000)
f7975000 f797a000 Cdaudio.SYS Timestamp: unavailable (00000000)
f22eb000 f22ee000 Sfloppy.SYS Timestamp: unavailable (00000000)
Finished dump check
So I then pipe the pstat output to a file and get this
ModuleName Load Addr Code Data Paged LinkDate
------------------------------------------------------------------------------
ntoskrnl.exe 804D4000 396160 76160 1094784 Thu Apr 24 10:57:43 2003
hal.dll 806AB000 32896 42624 28672 Thu Aug 29 03:05:02 2002
KDCOM.DLL F97C6000 2560 256 1280 Fri Aug 17 15:49:10 2001
BOOTVID.dll F96D6000 5632 3584 0 Fri Aug 17 15:49:09 2001
ACPI.sys F9279000 103936 11008 40192 Thu Aug 29 03:09:03 2002
WMILIB.SYS F97C8000 512 0 1280 Fri Aug 17 16:07:23 2001
pci.sys F92C6000 14464 1664 30976 Thu Aug 29 03:09:10 2002
isapnp.sys F92D6000 8704 768 18688 Fri Aug 17 15:58:01 2001
compbatt.sys F96DA000 2560 0 2944 Fri Aug 17 15:57:58 2001
BATTC.SYS F96DE000 2432 128 3072 Fri Aug 17 15:57:52 2001
pciide.sys F988E000 896 128 0 Fri Aug 17 15:51:49 2001
PCIIDEX.SYS F9546000 5120 512 12288 Thu Aug 29 03:27:47 2002
MountMgr.sys F92E6000 1280 128 29696 Fri Aug 17 15:47:36 2001
ftdisk.sys F925A000 5888 128 102400 Fri Aug 17 15:52:41 2001
dmload.sys F97CA000 2560 128 0 Fri Aug 17 15:58:15 2001
dmio.sys F9236000 114432 15104 1152 Fri Aug 17 15:58:27 2001
PartMgr.sys F954E000 1920 128 11136 Fri Aug 17 20:32:23 2001
IdeBusDr.sys F96E2000 7008 384 224 Wed Apr 10 19:02:46 2002
VolSnap.sys F92F6000 2304 128 32512 Fri Aug 17 15:53:19 2001
atapi.sys F9220000 41472 3584 25984 Thu Aug 29 03:27:48 2002
IdeChnDr.sys F920A000 63392 14848 0 Wed Apr 10 19:03:12 2002
disk.sys F9306000 7808 256 16256 Thu Aug 29 03:27:56 2002
CLASSPNP.SYS F9316000 23424 128 14336 Thu Aug 29 04:08:42 2002
sr.sys F91F9000 1792 1152 51200 Thu Aug 29 03:17:56 2002
KSecDD.sys F91E5000 9216 6784 53504 Fri Aug 17 15:50:01 2001
Ntfs.sys F915B000 92288 6912 404608 Thu Aug 29 04:13:37 2002
NDIS.sys F9132000 18560 1024 122368 Thu Aug 29 04:09:23 2002
Mup.sys F9118000 13824 6144 70272 Thu Aug 29 04:12:53 2002
processr.sys F958E000 7552 1408 9216 Thu Aug 29 03:05:03 2002
ialmnt5.sys F8E5D000 34336 13504 23232 Mon May 06 15:40:05 2002
VIDEOPRT.SYS F8E4B000 9984 384 43008 Thu Aug 29 03:32:03 2002
usbuhci.sys F9596000 15744 384 0 Thu Jul 03 19:51:44 2003
USBPORT.SYS F8E29000 116352 1024 10368 Thu Jul 03 19:49:27 2003
usbehci.sys F959E000 21120 768 0 Thu Jul 03 19:50:45 2003
serial.sys F9436000 11392 256 29312 Thu Aug 29 04:08:27 2002
Modem.SYS F95A6000 1280 128 19968 Fri Aug 17 15:57:35 2001
e100b325.sys F8E06000 119808 5632 0 Mon Feb 25 09:54:01 2002
fdc.sys F95AE000 18176 256 384 Fri Aug 17 15:51:22 2001
serenum.sys F97A6000 2688 128 7552 Fri Aug 17 15:50:13 2001
parport.sys F8DF3000 63232 1280 256 Thu Aug 29 03:27:29 2002
i8042prt.sys F93C6000 11648 256 22016 Thu Aug 29 04:06:37 2002
kbdclass.sys F95B6000 6528 896 6144 Thu Aug 29 03:26:59 2002
mouclass.sys F95BE000 5888 896 5504 Thu Aug 29 03:27:00 2002
bpflt.sys F994B000 480 0 1056 Thu Aug 08 12:01:04 2002
Cdr4_xp.SYS F93D6000 50752 1280 0 Wed Jan 23 16:23:59 2002
cdrom.sys F93E6000 31872 128 5632 Thu Aug 29 03:27:55 2002
redbook.sys F93F6000 6400 1152 36096 Thu Aug 29 03:27:45 2002
ks.sys F8DD3000 28800 128 79744 Wed Dec 04 11:09:38 2002
BpCdrVsd.SYS F97F4000 4192 672 0 Mon May 13 09:55:41 2002
Cdralw2k.SYS F95C6000 16320 416 0 Wed Jan 23 16:22:38 2002
pwd_2K.SYS F8DBB000 14784 73856 0 Fri Feb 22 17:43:56 2002
smwdm.sys F8D4F000 266304 38848 48384 Thu Apr 04 12:54:28 2002
SENSUPGD.SYS F994E000 0 0 64 Thu Apr 04 12:54:03 2002
portcls.sys F8D2E000 39168 10496 60032 Thu Aug 29 04:00:58 2002
drmk.sys F9406000 5120 1280 45824 Thu Aug 29 03:32:30 2002
bpfinder.sys F9416000 46304 3776 3936 Thu Aug 08 11:58:39 2002
audstub.sys F9978000 128 0 512 Fri Aug 17 15:59:40 2001
rasl2tp.sys F8EB0000 41984 512 0 Thu Aug 29 04:06:36 2002
ndistapi.sys F90E8000 5248 128 0 Fri Aug 17 15:55:29 2001
ndiswan.sys F88F0000 68352 2432 0 Thu Aug 29 03:58:38 2002
raspppoe.sys F8EA0000 29056 4608 0 Fri Aug 17 15:55:33 2001
raspptp.sys F8E90000 38016 896 0 Tue Oct 01 19:52:28 2002
TDI.SYS F90E4000 9472 512 256 Fri Aug 17 15:57:25 2001
psched.sys F88DF000 49792 2048 3968 Thu Aug 29 03:35:54 2002
msgpc.sys F8E80000 27264 1408 512 Fri Aug 17 15:54:19 2001
ptilink.sys F961E000 12928 256 0 Fri Aug 17 15:49:53 2001
raspti.sys F9626000 11008 640 0 Fri Aug 17 15:55:32 2001
rdpdr.sys F2508000 67840 4608 86400 Thu Aug 29 03:06:34 2002
termdd.sys F9346000 25216 768 2304 Thu Aug 29 03:40:32 2002
swenum.sys F98A7000 384 128 640 Wed Dec 04 11:10:07 2002
update.sys F24E6000 2048 768 129792 Fri Aug 17 22:53:56 2001
NDProxy.SYS F9356000 29184 2176 0 Fri Aug 17 15:55:30 2001
ialmsbw.sys B2FEA000 66720 16672 0 Mon May 06 15:41:08 2002
ialmkchw.sys B2FD9000 58240 4320 0 Mon May 06 15:41:18 2002
usbhub.sys F9376000 25472 768 19840 Thu Jul 03 19:52:56 2003
USBD.SYS F988C000 256 0 896 Fri Aug 17 16:02:58 2001
flpydisk.sys F964E000 1920 1280 11392 Thu Aug 29 03:27:43 2002
Fs_Rec.SYS F97DA000 128 128 3584 Fri Aug 17 15:49:37 2001
Null.SYS F98C4000 0 128 384 Fri Aug 17 15:47:39 2001
Beep.SYS F97D4000 1152 0 0 Fri Aug 17 15:47:33 2001
vga.sys F965E000 768 128 14848 Thu Aug 29 03:32:03 2002
mnmdd.SYS F97D6000 0 0 1792 Fri Aug 17 15:57:28 2001
RDPCDD.sys F97D8000 0 0 1792 Fri Aug 17 15:46:56 2001
cdudf_xp.SYS B2F18000 165504 13312 34560 Tue Apr 09 18:18:00 2002
Msfs.SYS F9666000 896 128 11264 Fri Aug 17 15:50:02 2001
Npfs.SYS F9676000 1664 256 20352 Fri Aug 17 15:50:03 2001
UdfReadr_xp.SYS B2ED3000 136448 13312 34432 Wed Jan 23 15:59:22
2002
rasacd.sys F269F000 3840 128 512 Fri Aug 17 15:55:39 2001
ipsec.sys F93B6000 46976 1792 2432 Thu Aug 29 04:07:19 2002
tcpip.sys B2E6F000 234496 39168 21376 Thu Aug 29 03:58:10 2002
netbt.sys B2E4A000 99456 1664 30720 Tue Jul 08 18:48:51 2003
netbios.sys F871D000 14336 768 11648 Thu Aug 29 03:35:45 2002
rdbss.sys B2E22000 33024 2816 103936 Thu Aug 29 03:58:48 2002
ckldrv.sys F88C7000 7872 3424 0 Thu Feb 03 14:53:11 2000
mrxsmb.sys B2DC2000 98304 18944 236160 Mon Nov 18 13:27:37 2002
Fips.SYS F86FD000 22016 768 3584 Fri Aug 17 20:31:49 2001
Cdfs.SYS F86ED000 6528 640 42880 Thu Aug 29 03:58:50 2002
wanarp.sys F86DD000 21632 896 3328 Fri Aug 17 15:55:23 2001
hidusb.sys F80F7000 4352 128 1920 Fri Aug 17 16:02:16 2001
HIDCLASS.SYS F86AD000 20096 256 7936 Thu Aug 29 03:32:40 2002
HIDPARSE.SYS F967E000 10880 1408 7936 Fri Aug 17 16:02:04 2001
usbscan.sys F5F37000 2432 128 7552 Thu Aug 29 03:48:51 2002
dump_IdeChnDr.sys B2DAC000 0 0 0
HidBatt.sys F968E000 14592 128 0 Fri Aug 17 15:57:58 2001
win32k.sys BF800000 1578880 77184 0 Thu Sep 25 11:35:41 2003
watchdog.sys F5F23000 2816 128 8320 Thu Aug 29 03:32:20 2002
Dxapi.sys F5F1F000 6272 384 640 Fri Aug 17 15:53:19 2001
dxg.sys BFF80000 59520 896 0 Thu Aug 29 05:40:42 2002
dxgthk.sys F496D000 128 0 0 Fri Aug 17 15:53:12 2001
bpusbflt.sys F9858000 2144 96 2368 Thu Aug 08 12:01:25 2002
USBSTOR.SYS F4697000 6656 128 10368 Thu Aug 29 03:32:50 2002
imapi.sys F4463000 10240 256 19328 Thu Aug 29 03:28:05 2002
mmc_2K.SYS F4687000 15232 288 0 Fri Feb 22 17:44:07 2002
ialmdnt5.dll BF9C3000 65536 4096 4096 Mon May 06 15:40:02 2002
ialmrnt5.dll BF9B7000 24576 4096 0 Mon May 06 15:41:01 2002
ialmdev5.DLL BF9DB000 160992 3552 0 Mon May 06 15:39:49 2002
ialmdd5.DLL BFA05000 352256 98304 0 Mon May 06 15:38:44 2002
TmPreFlt.sys F4677000 0 0 0
VSApiNt.sys B229E000 0 0 0
TmXPFlt.sys B2272000 0 0 0
afd.sys B2251000 3840 2048 105984 Thu Aug 29 04:01:13 2002
nwlnkipx.sys B223C000 70784 384 1920 Fri Aug 17 15:54:11 2001
nwlnknb.sys F8EC0000 51328 512 3200 Fri Aug 17 15:54:16 2001
ndisuio.sys F90D0000 6912 128 640 Thu Aug 29 03:35:40 2002
nwlnkspx.sys F7BB8000 45056 896 768 Fri Aug 17 15:54:16 2001
nwrdr.sys B219D000 20480 3840 116992 Thu Aug 29 03:21:07 2002
mrxdav.sys B2172000 25088 5504 122240 Fri Aug 17 15:50:20 2001
ParVdm.SYS F97E0000 1408 128 0 Fri Aug 17 15:49:49 2001
srv.sys B20AB000 52096 8320 227712 Fri Mar 28 13:54:53 2003
Fastfat.SYS B200F000 8704 768 116864 Thu Aug 29 04:12:45 2002
TDTCP.SYS F74F4000 15104 128 0 Fri Aug 17 15:46:43 2001
RDPWD.SYS B1CFA000 103936 768 3456 Thu Aug 29 03:40:38 2002
sysaudio.sys F9466000 2560 128 44160 Thu Aug 29 04:01:17 2002
wdmaud.sys B1C9C000 7936 2048 60160 Thu Aug 29 04:00:46 2002
ATMFD.DLL BFFA0000 203648 34176 0 Fri Aug 17 16:55:56 2001
kmixer.sys B0F99000 12032 35840 94208 Thu Aug 29 03:32:28 2002
ntdll.dll 77F50000 458752 24576 0 Thu May 01 18:56:10 2003
------------------------------------------------------------------------------
Total 6832096 808000 4432416
The problem I have, is even being a network administrator, I don't
know a whole lot about the internal workings of the XP OS. So nothing
in these two files makes a whole lot of sense to me. I was wondering
if anyone could understand this problem and have the knowledge to
troubleshoot based on these tools. Any help would be great. Like I
said, as long as I'm working on here it will never log an event
related to this problem. This isn't a drive that I can afford to wipe
clean and rebuild if at all possible. It's a Micron PC with XP Pro and
256 MB RAM. It came from Micron and I haven't changed anything
internally. Thanks for any help in advance.
Brian Mosher
information that may be helpful for someone to help me solve this.
Basically my computer will restart after being idle for a certain
amount of time, but as long as I sit on here and use it it will never
restart. I've turned off all sleep mode and power settings and a
screen saver. anything that would invoke action after a certain amount
of time is turned off. So here is what I have found out.
When looking in the event viewer, I notice that overnight when it is
idle it will restart every 17 minutes. At exactly 15 minutes of being
idle it must try to do some sort of paging process because it logs a
warning, and the message is "An error was detected on device
\Device\Harddisk0\D during a paging operation." This happens 10 times
over 2 minutes. it tries to do it every 7 or 8 seconds. After the 10th
attempt the computer restarts and it logs an information event that
says "The computer has rebooted from a bugcheck. The bugcheck was:
0x0000000a (0x00000166, 0x00000002, 0x00000000, 0x804f5bc0). A dump
was saved in: C:\WINDOWS\Minidump\Mini121203-28.dmp."
So I run the dumpchk.exe program and this is what it spits out.
DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 0d91f000
PfnDataBase 81000000
PsLoadedModuleList 80543530
PsActiveProcessHead 80545578
MachineImageType 0000014c
NumberProcessors 00000001
BugCheckCode 0000000a
BugCheckParameter1 00000166
BugCheckParameter2 00000002
BugCheckParameter3 00000000
BugCheckParameter4 804f5bc0
PaeEnabled 00000000
KdDebuggerDataBlock 805353e0
MiniDumpFields 00000dff
TRIAGE_DUMP32:
ServicePackBuild 00000100
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 000024c8
ThreadOffset 00002720
CallStackOffset 00002978
SizeOfCallStack 00003000
DriverListOffset 00005c08
DriverCount 00000084
StringPoolOffset 00008338
StringPoolSize 00001240
BrokenDriverOffset 00000000
TriageOptions 00000041
TopOfStack f2741000
DebuggerDataOffset 00005978
DebuggerDataSize 00000290
DataBlocksOffset 00009578
DataBlocksCount 00000004
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Kernel base = 0x804d4000 PsLoadedModuleList = 0x80543530
Debug session time: Fri Dec 12 07:44:55 2003
System Uptime: 0 days 0:16:41
start end module name
804d4000 806aa280 nt Checksum: 001E311B Timestamp: Thu
Apr 24 10:
57:43 2003 (3EA80977)
Unloaded modules:
b2da6000 b2dc2000 bpusbdrv.sys Timestamp: unavailable (00000000)
f7b68000 f7b72000 imapi.sys Timestamp: unavailable (00000000)
f7975000 f797a000 Cdaudio.SYS Timestamp: unavailable (00000000)
f22eb000 f22ee000 Sfloppy.SYS Timestamp: unavailable (00000000)
Finished dump check
So I then pipe the pstat output to a file and get this
ModuleName Load Addr Code Data Paged LinkDate
------------------------------------------------------------------------------
ntoskrnl.exe 804D4000 396160 76160 1094784 Thu Apr 24 10:57:43 2003
hal.dll 806AB000 32896 42624 28672 Thu Aug 29 03:05:02 2002
KDCOM.DLL F97C6000 2560 256 1280 Fri Aug 17 15:49:10 2001
BOOTVID.dll F96D6000 5632 3584 0 Fri Aug 17 15:49:09 2001
ACPI.sys F9279000 103936 11008 40192 Thu Aug 29 03:09:03 2002
WMILIB.SYS F97C8000 512 0 1280 Fri Aug 17 16:07:23 2001
pci.sys F92C6000 14464 1664 30976 Thu Aug 29 03:09:10 2002
isapnp.sys F92D6000 8704 768 18688 Fri Aug 17 15:58:01 2001
compbatt.sys F96DA000 2560 0 2944 Fri Aug 17 15:57:58 2001
BATTC.SYS F96DE000 2432 128 3072 Fri Aug 17 15:57:52 2001
pciide.sys F988E000 896 128 0 Fri Aug 17 15:51:49 2001
PCIIDEX.SYS F9546000 5120 512 12288 Thu Aug 29 03:27:47 2002
MountMgr.sys F92E6000 1280 128 29696 Fri Aug 17 15:47:36 2001
ftdisk.sys F925A000 5888 128 102400 Fri Aug 17 15:52:41 2001
dmload.sys F97CA000 2560 128 0 Fri Aug 17 15:58:15 2001
dmio.sys F9236000 114432 15104 1152 Fri Aug 17 15:58:27 2001
PartMgr.sys F954E000 1920 128 11136 Fri Aug 17 20:32:23 2001
IdeBusDr.sys F96E2000 7008 384 224 Wed Apr 10 19:02:46 2002
VolSnap.sys F92F6000 2304 128 32512 Fri Aug 17 15:53:19 2001
atapi.sys F9220000 41472 3584 25984 Thu Aug 29 03:27:48 2002
IdeChnDr.sys F920A000 63392 14848 0 Wed Apr 10 19:03:12 2002
disk.sys F9306000 7808 256 16256 Thu Aug 29 03:27:56 2002
CLASSPNP.SYS F9316000 23424 128 14336 Thu Aug 29 04:08:42 2002
sr.sys F91F9000 1792 1152 51200 Thu Aug 29 03:17:56 2002
KSecDD.sys F91E5000 9216 6784 53504 Fri Aug 17 15:50:01 2001
Ntfs.sys F915B000 92288 6912 404608 Thu Aug 29 04:13:37 2002
NDIS.sys F9132000 18560 1024 122368 Thu Aug 29 04:09:23 2002
Mup.sys F9118000 13824 6144 70272 Thu Aug 29 04:12:53 2002
processr.sys F958E000 7552 1408 9216 Thu Aug 29 03:05:03 2002
ialmnt5.sys F8E5D000 34336 13504 23232 Mon May 06 15:40:05 2002
VIDEOPRT.SYS F8E4B000 9984 384 43008 Thu Aug 29 03:32:03 2002
usbuhci.sys F9596000 15744 384 0 Thu Jul 03 19:51:44 2003
USBPORT.SYS F8E29000 116352 1024 10368 Thu Jul 03 19:49:27 2003
usbehci.sys F959E000 21120 768 0 Thu Jul 03 19:50:45 2003
serial.sys F9436000 11392 256 29312 Thu Aug 29 04:08:27 2002
Modem.SYS F95A6000 1280 128 19968 Fri Aug 17 15:57:35 2001
e100b325.sys F8E06000 119808 5632 0 Mon Feb 25 09:54:01 2002
fdc.sys F95AE000 18176 256 384 Fri Aug 17 15:51:22 2001
serenum.sys F97A6000 2688 128 7552 Fri Aug 17 15:50:13 2001
parport.sys F8DF3000 63232 1280 256 Thu Aug 29 03:27:29 2002
i8042prt.sys F93C6000 11648 256 22016 Thu Aug 29 04:06:37 2002
kbdclass.sys F95B6000 6528 896 6144 Thu Aug 29 03:26:59 2002
mouclass.sys F95BE000 5888 896 5504 Thu Aug 29 03:27:00 2002
bpflt.sys F994B000 480 0 1056 Thu Aug 08 12:01:04 2002
Cdr4_xp.SYS F93D6000 50752 1280 0 Wed Jan 23 16:23:59 2002
cdrom.sys F93E6000 31872 128 5632 Thu Aug 29 03:27:55 2002
redbook.sys F93F6000 6400 1152 36096 Thu Aug 29 03:27:45 2002
ks.sys F8DD3000 28800 128 79744 Wed Dec 04 11:09:38 2002
BpCdrVsd.SYS F97F4000 4192 672 0 Mon May 13 09:55:41 2002
Cdralw2k.SYS F95C6000 16320 416 0 Wed Jan 23 16:22:38 2002
pwd_2K.SYS F8DBB000 14784 73856 0 Fri Feb 22 17:43:56 2002
smwdm.sys F8D4F000 266304 38848 48384 Thu Apr 04 12:54:28 2002
SENSUPGD.SYS F994E000 0 0 64 Thu Apr 04 12:54:03 2002
portcls.sys F8D2E000 39168 10496 60032 Thu Aug 29 04:00:58 2002
drmk.sys F9406000 5120 1280 45824 Thu Aug 29 03:32:30 2002
bpfinder.sys F9416000 46304 3776 3936 Thu Aug 08 11:58:39 2002
audstub.sys F9978000 128 0 512 Fri Aug 17 15:59:40 2001
rasl2tp.sys F8EB0000 41984 512 0 Thu Aug 29 04:06:36 2002
ndistapi.sys F90E8000 5248 128 0 Fri Aug 17 15:55:29 2001
ndiswan.sys F88F0000 68352 2432 0 Thu Aug 29 03:58:38 2002
raspppoe.sys F8EA0000 29056 4608 0 Fri Aug 17 15:55:33 2001
raspptp.sys F8E90000 38016 896 0 Tue Oct 01 19:52:28 2002
TDI.SYS F90E4000 9472 512 256 Fri Aug 17 15:57:25 2001
psched.sys F88DF000 49792 2048 3968 Thu Aug 29 03:35:54 2002
msgpc.sys F8E80000 27264 1408 512 Fri Aug 17 15:54:19 2001
ptilink.sys F961E000 12928 256 0 Fri Aug 17 15:49:53 2001
raspti.sys F9626000 11008 640 0 Fri Aug 17 15:55:32 2001
rdpdr.sys F2508000 67840 4608 86400 Thu Aug 29 03:06:34 2002
termdd.sys F9346000 25216 768 2304 Thu Aug 29 03:40:32 2002
swenum.sys F98A7000 384 128 640 Wed Dec 04 11:10:07 2002
update.sys F24E6000 2048 768 129792 Fri Aug 17 22:53:56 2001
NDProxy.SYS F9356000 29184 2176 0 Fri Aug 17 15:55:30 2001
ialmsbw.sys B2FEA000 66720 16672 0 Mon May 06 15:41:08 2002
ialmkchw.sys B2FD9000 58240 4320 0 Mon May 06 15:41:18 2002
usbhub.sys F9376000 25472 768 19840 Thu Jul 03 19:52:56 2003
USBD.SYS F988C000 256 0 896 Fri Aug 17 16:02:58 2001
flpydisk.sys F964E000 1920 1280 11392 Thu Aug 29 03:27:43 2002
Fs_Rec.SYS F97DA000 128 128 3584 Fri Aug 17 15:49:37 2001
Null.SYS F98C4000 0 128 384 Fri Aug 17 15:47:39 2001
Beep.SYS F97D4000 1152 0 0 Fri Aug 17 15:47:33 2001
vga.sys F965E000 768 128 14848 Thu Aug 29 03:32:03 2002
mnmdd.SYS F97D6000 0 0 1792 Fri Aug 17 15:57:28 2001
RDPCDD.sys F97D8000 0 0 1792 Fri Aug 17 15:46:56 2001
cdudf_xp.SYS B2F18000 165504 13312 34560 Tue Apr 09 18:18:00 2002
Msfs.SYS F9666000 896 128 11264 Fri Aug 17 15:50:02 2001
Npfs.SYS F9676000 1664 256 20352 Fri Aug 17 15:50:03 2001
UdfReadr_xp.SYS B2ED3000 136448 13312 34432 Wed Jan 23 15:59:22
2002
rasacd.sys F269F000 3840 128 512 Fri Aug 17 15:55:39 2001
ipsec.sys F93B6000 46976 1792 2432 Thu Aug 29 04:07:19 2002
tcpip.sys B2E6F000 234496 39168 21376 Thu Aug 29 03:58:10 2002
netbt.sys B2E4A000 99456 1664 30720 Tue Jul 08 18:48:51 2003
netbios.sys F871D000 14336 768 11648 Thu Aug 29 03:35:45 2002
rdbss.sys B2E22000 33024 2816 103936 Thu Aug 29 03:58:48 2002
ckldrv.sys F88C7000 7872 3424 0 Thu Feb 03 14:53:11 2000
mrxsmb.sys B2DC2000 98304 18944 236160 Mon Nov 18 13:27:37 2002
Fips.SYS F86FD000 22016 768 3584 Fri Aug 17 20:31:49 2001
Cdfs.SYS F86ED000 6528 640 42880 Thu Aug 29 03:58:50 2002
wanarp.sys F86DD000 21632 896 3328 Fri Aug 17 15:55:23 2001
hidusb.sys F80F7000 4352 128 1920 Fri Aug 17 16:02:16 2001
HIDCLASS.SYS F86AD000 20096 256 7936 Thu Aug 29 03:32:40 2002
HIDPARSE.SYS F967E000 10880 1408 7936 Fri Aug 17 16:02:04 2001
usbscan.sys F5F37000 2432 128 7552 Thu Aug 29 03:48:51 2002
dump_IdeChnDr.sys B2DAC000 0 0 0
HidBatt.sys F968E000 14592 128 0 Fri Aug 17 15:57:58 2001
win32k.sys BF800000 1578880 77184 0 Thu Sep 25 11:35:41 2003
watchdog.sys F5F23000 2816 128 8320 Thu Aug 29 03:32:20 2002
Dxapi.sys F5F1F000 6272 384 640 Fri Aug 17 15:53:19 2001
dxg.sys BFF80000 59520 896 0 Thu Aug 29 05:40:42 2002
dxgthk.sys F496D000 128 0 0 Fri Aug 17 15:53:12 2001
bpusbflt.sys F9858000 2144 96 2368 Thu Aug 08 12:01:25 2002
USBSTOR.SYS F4697000 6656 128 10368 Thu Aug 29 03:32:50 2002
imapi.sys F4463000 10240 256 19328 Thu Aug 29 03:28:05 2002
mmc_2K.SYS F4687000 15232 288 0 Fri Feb 22 17:44:07 2002
ialmdnt5.dll BF9C3000 65536 4096 4096 Mon May 06 15:40:02 2002
ialmrnt5.dll BF9B7000 24576 4096 0 Mon May 06 15:41:01 2002
ialmdev5.DLL BF9DB000 160992 3552 0 Mon May 06 15:39:49 2002
ialmdd5.DLL BFA05000 352256 98304 0 Mon May 06 15:38:44 2002
TmPreFlt.sys F4677000 0 0 0
VSApiNt.sys B229E000 0 0 0
TmXPFlt.sys B2272000 0 0 0
afd.sys B2251000 3840 2048 105984 Thu Aug 29 04:01:13 2002
nwlnkipx.sys B223C000 70784 384 1920 Fri Aug 17 15:54:11 2001
nwlnknb.sys F8EC0000 51328 512 3200 Fri Aug 17 15:54:16 2001
ndisuio.sys F90D0000 6912 128 640 Thu Aug 29 03:35:40 2002
nwlnkspx.sys F7BB8000 45056 896 768 Fri Aug 17 15:54:16 2001
nwrdr.sys B219D000 20480 3840 116992 Thu Aug 29 03:21:07 2002
mrxdav.sys B2172000 25088 5504 122240 Fri Aug 17 15:50:20 2001
ParVdm.SYS F97E0000 1408 128 0 Fri Aug 17 15:49:49 2001
srv.sys B20AB000 52096 8320 227712 Fri Mar 28 13:54:53 2003
Fastfat.SYS B200F000 8704 768 116864 Thu Aug 29 04:12:45 2002
TDTCP.SYS F74F4000 15104 128 0 Fri Aug 17 15:46:43 2001
RDPWD.SYS B1CFA000 103936 768 3456 Thu Aug 29 03:40:38 2002
sysaudio.sys F9466000 2560 128 44160 Thu Aug 29 04:01:17 2002
wdmaud.sys B1C9C000 7936 2048 60160 Thu Aug 29 04:00:46 2002
ATMFD.DLL BFFA0000 203648 34176 0 Fri Aug 17 16:55:56 2001
kmixer.sys B0F99000 12032 35840 94208 Thu Aug 29 03:32:28 2002
ntdll.dll 77F50000 458752 24576 0 Thu May 01 18:56:10 2003
------------------------------------------------------------------------------
Total 6832096 808000 4432416
The problem I have, is even being a network administrator, I don't
know a whole lot about the internal workings of the XP OS. So nothing
in these two files makes a whole lot of sense to me. I was wondering
if anyone could understand this problem and have the knowledge to
troubleshoot based on these tools. Any help would be great. Like I
said, as long as I'm working on here it will never log an event
related to this problem. This isn't a drive that I can afford to wipe
clean and rebuild if at all possible. It's a Micron PC with XP Pro and
256 MB RAM. It came from Micron and I haven't changed anything
internally. Thanks for any help in advance.
Brian Mosher