100710-23103-01.dmp
BugCheck 1E, {ffffffffc0000005 ...
100710-27159-01.dmp
BugCheck 24, {1904fb ...
1. Check the hard disk:
Start -> cmd -> chkdsk /r /f
HDD Scan S.M.A.R.T. HDDScan
2. Replace Kaspersky with MSE:
Removal tool for Kaspersky Lab products
http://www.microsoft.com/security_essentials/
3. Update:
PxHlpa64.sys Thu Mar 13 03:58:17 2008
PxHelp64 Sonic Solutions
sptd.sys Sun Oct 11 23:55:14 2009
Daemon Tools/Alcohol/Duplex Secure
iaStor.sys Fri Aug 07 15:23:37 2009
Intel Storage
Impcd.sys Mon Oct 26 22:39:41 2009
Intel Turbo Boost
ASMMAP64.sys Thu Jul 02 12:13:26 2009
Asus
snp2uvc.sys Thu Aug 20 05:41:36 2009
UVC Camera
athrx.sys Mon Oct 05 19:33:57 2009
Atherox
jmcr.sys Tue Aug 18 11:23:06 2009
JMicron
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\100710-23103-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e02000 PsLoadedModuleList = 0xfffff800`0303fe50
System Uptime: 0 days 3:27:08.393
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
.................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff80003151916, 0, ffffffffffffffff}
Probably caused by : ntkrnlmp.exe ( nt!CmpAllocateKeyControlBlock+72 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80003151916, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!CmpAllocateKeyControlBlock+72
fffff800`03151916 48895808 mov qword ptr [rax+8],rbx
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030aa0e0
ffffffffffffffff
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
EXCEPTION_RECORD: fffff8800cb1eda8 -- (.exr 0xfffff8800cb1eda8)
ExceptionAddress: fffff80003151916 (nt!CmpAllocateKeyControlBlock+0x0000000000000072)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
TRAP_FRAME: fffff8800cb1ee50 -- (.trap 0xfffff8800cb1ee50)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=e688188e3d5a6e30 rbx=0000000000000000 rcx=fffff8a010123520
rdx=fffff8800cb1f048 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003151916 rsp=fffff8800cb1efe0 rbp=000000000097bd88
r8=fffff8a005b69d8c r9=fffff8a0100e16f8 r10=fffff8a003e2045a
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!CmpAllocateKeyControlBlock+0x72:
fffff800`03151916 48895808 mov qword ptr [rax+8],rbx ds:e688188e`3d5a6e38=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002eaca39 to fffff80002e72740
STACK_TEXT:
fffff880`0cb1e5d8 fffff800`02eaca39 : 00000000`0000001e ffffffff`c0000005 fffff800`03151916 00000000`00000000 : nt!KeBugCheckEx
fffff880`0cb1e5e0 fffff800`02e71d82 : fffff880`0cb1eda8 fffff800`03078040 fffff880`0cb1ee50 fffff8a0`00024010 : nt!KiDispatchException+0x1b9
fffff880`0cb1ec70 fffff800`02e7068a : fffff880`036b68a0 fffff880`0367a26f 00000000`00001bf8 00000000`00001bf8 : nt!KiExceptionDispatch+0xc2
fffff880`0cb1ee50 fffff800`03151916 : 00000000`00000000 fffff880`0cb1f2d0 fffffa80`04675b01 fffff8a0`10333520 : nt!KiGeneralProtectionFault+0x10a
fffff880`0cb1efe0 fffff800`03151477 : 00000000`00000000 00000000`93571c3e 00000000`00000000 00000000`0000001d : nt!CmpAllocateKeyControlBlock+0x72
fffff880`0cb1f010 fffff800`031501b7 : fffff8a0`00024010 00000000`0097bd88 fffff8a0`05b69d8c fffff8a0`100e16f8 : nt!CmpCreateKeyControlBlock+0xe8
fffff880`0cb1f0b0 fffff800`0314c195 : fffff8a0`00000000 fffff8a0`0097bd88 fffff8a0`00024010 fffffa80`04675b10 : nt!CmpDoOpen+0x387
fffff880`0cb1f170 fffff800`0316be84 : fffff800`0314bcc0 00000000`00000001 fffffa80`04675b10 fffff880`0cb1f800 : nt!CmpParseKey+0x4d5
fffff880`0cb1f440 fffff800`03170e4d : fffffa80`04675b10 fffff880`0cb1f5a0 00000000`00000240 fffffa80`03b9a510 : nt!ObpLookupObjectName+0x585
fffff880`0cb1f540 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObOpenObjectByName+0x1cd
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!CmpAllocateKeyControlBlock+72
fffff800`03151916 48895808 mov qword ptr [rax+8],rbx
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!CmpAllocateKeyControlBlock+72
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x1E_nt!CmpAllocateKeyControlBlock+72
BUCKET_ID: X64_0x1E_nt!CmpAllocateKeyControlBlock+72
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\100710-27159-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e05000 PsLoadedModuleList = 0xfffff800`03042e50
System Uptime: 0 days 4:15:18.906
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
.............................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88007e192b8, fffff88007e18b20, fffff80002e2ca09}
Probably caused by : Ntfs.sys ( Ntfs!NtfsExtendedCompleteRequestInternal+110 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88007e192b8
Arg3: fffff88007e18b20
Arg4: fffff80002e2ca09
Debugging Details:
------------------
EXCEPTION_RECORD: fffff88007e192b8 -- (.exr 0xfffff88007e192b8)
ExceptionAddress: fffff80002e2ca09 (nt!RtlSubtreePredecessor+0x0000000000000009)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88007e18b20 -- (.cxr 0xfffff88007e18b20)
rax=117900007b107100 rbx=5d00b47ea21adec8 rcx=fffff8a0034e5028
rdx=5d00b47ea21adec8 rsi=fffffa8004428e00 rdi=0000000000000000
rip=fffff80002e2ca09 rsp=fffff88007e194f8 rbp=fffffa8004428e08
r8=ffffffffffffffff r9=ffffffffffffffff r10=fffff80002e05000
r11=fffff8a0034e5028 r12=ffffffffffffffff r13=fffffa8004d6ee74
r14=0000000000004000 r15=0000000000000001
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!RtlSubtreePredecessor+0x9:
fffff800`02e2ca09 488b4810 mov rcx,qword ptr [rax+10h] ds:002b:11790000`7b107110=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: firefox.exe
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030ad0e0
ffffffffffffffff
FOLLOWUP_IP:
Ntfs!NtfsExtendedCompleteRequestInternal+110
fffff880`01434f30 488b5c2450 mov rbx,qword ptr [rsp+50h]
FAULTING_IP:
nt!RtlSubtreePredecessor+9
fffff800`02e2ca09 488b4810 mov rcx,qword ptr [rax+10h]
BUGCHECK_STR: 0x24
LAST_CONTROL_TRANSFER: from fffff80002e58ca8 to fffff80002e2ca09
STACK_TEXT:
fffff880`07e194f8 fffff800`02e58ca8 : 00000000`000004b6 fffff880`0124937b 00000000`00000010 00000000`00000206 : nt!RtlSubtreePredecessor+0x9
fffff880`07e19500 fffff880`01249373 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlDeleteNoSplay+0x7c
fffff880`07e19530 fffff880`01245238 : fffff8a0`03450150 00000000`00000000 00000000`00000001 00000000`00004000 : fltmgr!TreeUnlinkNoBalance+0x13
fffff880`07e19560 fffff880`0126346f : ffffffff`ffffffff 00000000`00000018 00000002`6e664d46 00000000`00be00be : fltmgr!TreeUnlinkMulti+0x148
fffff880`07e195b0 fffff880`01263e19 : ffffffff`ffffffff fffffa80`05e684b0 fffffa80`04d6e800 fffffa80`04428d70 : fltmgr!DeleteNameCacheNodes+0x9f
fffff880`07e195f0 fffff880`012732af : fffffa80`05e684b0 fffffa80`04428d70 00000000`00000000 00000000`00000000 : fltmgr!PurgeStreamNameCache+0xa9
fffff880`07e19630 fffff880`0126aa30 : fffffa80`04542580 fffffa80`04d6e800 00000000`00000000 00000000`0000000f : fltmgr!FltpPurgeVolumeNameCache+0x7f
fffff880`07e19670 fffff880`01263d4b : fffffa80`04d6e800 00000000`00000000 fffffa80`07097530 00000000`00000000 : fltmgr! ?? ::NNGAKEGL::`string'+0x1a04
fffff880`07e196b0 fffff880`0124606a : fffffa80`04c1a8b0 fffffa80`04bf6de0 fffff8a0`0dfb8560 fffff800`02faa2dd : fltmgr!FltpReinstateNameCachingAllFrames+0x4b
fffff880`07e196e0 fffff800`02e77d26 : fffffa80`0835fad0 fffff880`039d3180 00000000`00000001 00000000`00000000 : fltmgr!FltpPassThroughCompletion+0x8a
fffff880`07e19720 fffff880`01434f30 : fffffa80`0415a800 00000000`00000001 00000000`00000000 00000000`00000000 : nt!IopfCompleteRequest+0x3a6
fffff880`07e19800 fffff880`014bedfa : fffff8a0`04cc9140 fffffa80`04d88180 00000000`00000000 00000000`00000701 : Ntfs!NtfsExtendedCompleteRequestInternal+0x110
fffff880`07e19840 fffff880`0142de0c : fffffa80`0415a800 fffffa80`03d68160 fffff880`07e19901 fffff880`07e19900 : Ntfs!NtfsCommonSetInformation+0xef1
fffff880`07e19920 fffff880`0124323f : fffffa80`03d68500 fffffa80`03d68160 fffffa80`0415a800 fffff880`07e19948 : Ntfs!NtfsFsdSetInformation+0x11c
fffff880`07e199a0 fffff880`012416df : fffffa80`04bf6de0 fffffa80`03d68160 fffffa80`04bf6d00 fffffa80`03d68160 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`07e19a30 fffff800`0315862d : 00000000`000000de fffff880`07e19ca0 00000000`00000000 fffffa80`04e75070 : fltmgr!FltpDispatch+0xcf
fffff880`07e19a90 fffff800`02e74993 : 00000000`00000594 fffffa80`0835fad0 00000000`0012da38 00000000`000000de : nt!NtSetInformationFile+0x909
fffff880`07e19bb0 00000000`77b4ffca : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0012da18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b4ffca
SYMBOL_STACK_INDEX: b
SYMBOL_NAME: Ntfs!NtfsExtendedCompleteRequestInternal+110
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
STACK_COMMAND: .cxr 0xfffff88007e18b20 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsExtendedCompleteRequestInternal+110
BUCKET_ID: X64_0x24_Ntfs!NtfsExtendedCompleteRequestInternal+110
Followup: MachineOwner
---------
0: kd> lmtn
start end module name
fffff800`00b9a000 fffff800`00ba4000 kdcom kdcom.dll Tue Jul 14 04:31:07 2009 (4A5BDFDB)
fffff800`02e05000 fffff800`033e1000 nt ntkrnlmp.exe Sat Jun 19 07:16:41 2010 (4C1C44A9)
fffff800`033e1000 fffff800`0342a000 hal hal.dll Tue Jul 14 04:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00c73000 cng cng.sys Tue Jul 14 02:49:40 2009 (4A5BC814)
fffff880`00c8b000 fffff880`00ccf000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 04:29:10 2009 (4A5BDF66)
fffff880`00ccf000 fffff880`00ce3000 PSHED PSHED.dll Tue Jul 14 04:32:23 2009 (4A5BE027)
fffff880`00ce3000 fffff880`00d41000 CLFS CLFS.SYS Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00d41000 fffff880`00d9d000 volmgrx volmgrx.sys Tue Jul 14 02:20:33 2009 (4A5BC141)
fffff880`00d9d000 fffff880`00dfb000 msrpc msrpc.sys Tue Jul 14 02:21:32 2009 (4A5BC17C)
fffff880`00e00000 fffff880`00ea4000 Wdf01000 Wdf01000.sys Tue Jul 14 02:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000 WDFLDR WDFLDR.SYS Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00eb3000 fffff880`00ecd000 mountmgr mountmgr.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00ee5000 fffff880`00fa5000 CI CI.dll Tue Jul 14 04:32:13 2009 (4A5BE01D)
fffff880`00fa5000 fffff880`00fd8000 pci pci.sys Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`00fd8000 fffff880`00fed000 volmgr volmgr.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00fed000 fffff880`00ffd000 PCIIDEX PCIIDEX.SYS Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`01000000 fffff880`0102f000 SCSIPORT SCSIPORT.SYS Tue Jul 14 03:01:04 2009 (4A5BCAC0)
fffff880`0102f000 fffff880`01086000 ACPI ACPI.sys Tue Jul 14 02:19:34 2009 (4A5BC106)
fffff880`01086000 fffff880`01090000 msisadrv msisadrv.sys Tue Jul 14 02:19:26 2009 (4A5BC0FE)
fffff880`01090000 fffff880`0109d000 vdrvroot vdrvroot.sys Tue Jul 14 03:01:31 2009 (4A5BCADB)
fffff880`0109d000 fffff880`010b2000 partmgr partmgr.sys Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`010b2000 fffff880`010bb000 compbatt compbatt.sys Tue Jul 14 02:31:02 2009 (4A5BC3B6)
fffff880`010bb000 fffff880`010c7000 BATTC BATTC.SYS Tue Jul 14 02:31:01 2009 (4A5BC3B5)
fffff880`010ca000 fffff880`011f0000 sptd sptd.sys Sun Oct 11 23:55:14 2009 (4AD24632)
fffff880`011f0000 fffff880`011f9000 WMILIB WMILIB.SYS Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`011f9000 fffff880`01200000 pciide pciide.sys Tue Jul 14 02:19:49 2009 (4A5BC115)
fffff880`01200000 fffff880`0122a000 ataport ataport.SYS Tue Jul 14 02:19:52 2009 (4A5BC118)
fffff880`0122a000 fffff880`01235000 msahci msahci.sys Tue Jul 14 03:01:01 2009 (4A5BCABD)
fffff880`01235000 fffff880`01240000 amdxata amdxata.sys Tue May 19 20:56:59 2009 (4A12F2EB)
fffff880`01240000 fffff880`0128c000 fltmgr fltmgr.sys Tue Jul 14 02:19:59 2009 (4A5BC11F)
fffff880`0128c000 fffff880`012a0000 fileinfo fileinfo.sys Tue Jul 14 02:34:25 2009 (4A5BC481)
fffff880`012a0000 fffff880`012a9000 lullaby lullaby.sys Thu Jun 18 05:45:32 2009 (4A39AA4C)
fffff880`012ce000 fffff880`013ea000 iaStor iaStor.sys Fri Aug 07 15:23:37 2009 (4A7C1CC9)
fffff880`013ea000 fffff880`013f3000 atapi atapi.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`01424000 fffff880`015c7000 Ntfs Ntfs.sys Tue Jul 14 02:20:47 2009 (4A5BC14F)
fffff880`015c7000 fffff880`015e1000 ksecdd ksecdd.sys Tue Jul 14 02:20:54 2009 (4A5BC156)
fffff880`015e1000 fffff880`015f2000 pcw pcw.sys Tue Jul 14 02:19:27 2009 (4A5BC0FF)
fffff880`015f2000 fffff880`015fc000 Fs_Rec Fs_Rec.sys Tue Jul 14 02:19:45 2009 (4A5BC111)
fffff880`01600000 fffff880`01625180 Impcd Impcd.sys Mon Oct 26 22:39:41 2009 (4AE6090D)
fffff880`01646000 fffff880`01738000 ndis ndis.sys Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`01738000 fffff880`01798000 NETIO NETIO.SYS Tue Jul 14 02:21:46 2009 (4A5BC18A)
fffff880`01798000 fffff880`017c3000 ksecpkg ksecpkg.sys Fri Dec 11 08:03:32 2009 (4B21E0B4)
fffff880`017c3000 fffff880`017e9000 tunnel tunnel.sys Tue Jul 14 03:09:37 2009 (4A5BCCC1)
fffff880`01802000 fffff880`019ff000 tcpip tcpip.sys Mon Jun 14 06:39:04 2010 (4C15A458)
fffff880`01a00000 fffff880`01a96000 klif klif.sys Fri Aug 06 20:14:46 2010 (4C5C4306)
fffff880`01a96000 fffff880`01ab4000 tdx tdx.sys Tue Jul 14 02:21:15 2009 (4A5BC16B)
fffff880`01ab4000 fffff880`01abf000 mssmbios mssmbios.sys Tue Jul 14 02:31:10 2009 (4A5BC3BE)
fffff880`01abf000 fffff880`01ace000 discache discache.sys Tue Jul 14 02:37:18 2009 (4A5BC52E)
fffff880`01ace000 fffff880`01aec000 dfsc dfsc.sys Tue Jul 14 02:23:44 2009 (4A5BC200)
fffff880`01af9000 fffff880`01b43000 fwpkclnt fwpkclnt.sys Tue Jul 14 02:21:08 2009 (4A5BC164)
fffff880`01b43000 fffff880`01b8f000 volsnap volsnap.sys Tue Jul 14 02:20:08 2009 (4A5BC128)
fffff880`01b8f000 fffff880`01b97000 spldr spldr.sys Mon May 11 19:56:27 2009 (4A0858BB)
fffff880`01b97000 fffff880`01bd1000 rdyboost rdyboost.sys Tue Jul 14 02:34:34 2009 (4A5BC48A)
fffff880`01bd1000 fffff880`01be3000 mup mup.sys Tue Jul 14 02:23:45 2009 (4A5BC201)
fffff880`01be3000 fffff880`01bf4000 blbdrive blbdrive.sys Tue Jul 14 02:35:59 2009 (4A5BC4DF)
fffff880`01c00000 fffff880`01c09000 hwpolicy hwpolicy.sys Tue Jul 14 02:19:22 2009 (4A5BC0FA)
fffff880`01c09000 fffff880`01c43000 fvevol fvevol.sys Sat Sep 26 05:34:26 2009 (4ABD7DB2)
fffff880`01c43000 fffff880`01c59000 disk disk.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`01c59000 fffff880`01c89000 CLASSPNP CLASSPNP.SYS Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`01c99000 fffff880`023f8000 kl1 kl1.sys Wed Jun 09 16:34:19 2010 (4C0F985B)
fffff880`03400000 fffff880`03421000 WudfPf WudfPf.sys Tue Jul 14 03:05:37 2009 (4A5BCBD1)
fffff880`03421000 fffff880`03436000 lltdio lltdio.sys Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`03436000 fffff880`03489000 nwifi nwifi.sys Tue Jul 14 03:07:23 2009 (4A5BCC3B)
fffff880`03489000 fffff880`0349c000 ndisuio ndisuio.sys Tue Jul 14 03:09:25 2009 (4A5BCCB5)
fffff880`0349c000 fffff880`034b4000 rspndr rspndr.sys Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`034b4000 fffff880`034bb000 TurboB TurboB.sys Fri Aug 07 00:17:31 2009 (4A7B486B)
fffff880`035cc000 fffff880`035ef000 luafv luafv.sys Tue Jul 14 02:26:13 2009 (4A5BC295)
fffff880`035ef000 fffff880`035f7000 ASMMAP64 ASMMAP64.sys Thu Jul 02 12:13:26 2009 (4A4C7A36)
fffff880`03600000 fffff880`03609000 rdprefmp rdprefmp.sys Tue Jul 14 03:16:35 2009 (4A5BCE63)
fffff880`03609000 fffff880`03614000 Msfs Msfs.SYS Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`03614000 fffff880`03625000 Npfs Npfs.SYS Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`03625000 fffff880`03632000 TDI TDI.SYS Tue Jul 14 02:21:18 2009 (4A5BC16E)
fffff880`03632000 fffff880`03639000 kl2 kl2.sys Wed Jun 09 16:24:47 2010 (4C0F961F)
fffff880`03639000 fffff880`03755000 dump_iaStor dump_iaStor.sys Fri Aug 07 15:23:37 2009 (4A7C1CC9)
fffff880`0376c000 fffff880`03796000 cdrom cdrom.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`03796000 fffff880`0379f000 Null Null.SYS Tue Jul 14 02:19:37 2009 (4A5BC109)
fffff880`0379f000 fffff880`037a6000 Beep Beep.SYS Tue Jul 14 03:00:13 2009 (4A5BCA8D)
fffff880`037a6000 fffff880`037b4000 vga vga.sys Tue Jul 14 02:38:47 2009 (4A5BC587)
fffff880`037b4000 fffff880`037d9000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:38:51 2009 (4A5BC58B)
fffff880`037d9000 fffff880`037e9000 watchdog watchdog.sys Tue Jul 14 02:37:35 2009 (4A5BC53F)
fffff880`037e9000 fffff880`037f2000 RDPCDD RDPCDD.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`037f2000 fffff880`037fb000 rdpencdd rdpencdd.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`04800000 fffff880`04851000 rdbss rdbss.sys Tue Jul 14 02:24:09 2009 (4A5BC219)
fffff880`0485b000 fffff880`048e5000 afd afd.sys Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`048e5000 fffff880`0492a000 netbt netbt.sys Tue Jul 14 02:21:28 2009 (4A5BC178)
fffff880`0492a000 fffff880`04933000 wfplwf wfplwf.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`04933000 fffff880`04959000 pacer pacer.sys Tue Jul 14 03:09:41 2009 (4A5BCCC5)
fffff880`04959000 fffff880`0496f000 vwififlt vwififlt.sys Tue Jul 14 03:07:22 2009 (4A5BCC3A)
fffff880`0496f000 fffff880`04978000 klim6 klim6.sys Thu Apr 22 18:07:24 2010 (4BD0662C)
fffff880`04978000 fffff880`04987000 netbios netbios.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`04987000 fffff880`049a2000 wanarp wanarp.sys Tue Jul 14 03:10:21 2009 (4A5BCCED)
fffff880`049a2000 fffff880`049ad8c0 VBoxUSBMon VBoxUSBMon.sys Fri Jun 25 16:32:28 2010 (4C24AFEC)
fffff880`049ae000 fffff880`049dddc0 VBoxDrv VBoxDrv.sys Fri Jun 25 16:32:28 2010 (4C24AFEC)
fffff880`049de000 fffff880`049f2000 termdd termdd.sys Tue Jul 14 03:16:36 2009 (4A5BCE64)
fffff880`049f2000 fffff880`049fe000 nsiproxy nsiproxy.sys Tue Jul 14 02:21:02 2009 (4A5BC15E)
fffff880`04a00000 fffff880`04af4000 dxgkrnl dxgkrnl.sys Fri Oct 02 04:00:14 2009 (4AC5509E)
fffff880`04af8000 fffff880`04b3f000 atikmpag atikmpag.sys Wed Aug 04 04:15:45 2010 (4C58BF41)
fffff880`04b3f000 fffff880`04b50000 usbehci usbehci.sys Tue Jul 14 03:06:30 2009 (4A5BCC06)
fffff880`04b50000 fffff880`04ba6000 USBPORT USBPORT.SYS Tue Jul 14 03:06:31 2009 (4A5BCC07)
fffff880`04ba6000 fffff880`04bc4000 i8042prt i8042prt.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`04bc4000 fffff880`04be6000 ETD ETD.sys Thu Oct 15 12:23:18 2009 (4AD6EA06)
fffff880`04be6000 fffff880`04bf5000 kbdclass kbdclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`04c00000 fffff880`04c08000 kbfiltr kbfiltr.sys Mon Jul 20 12:21:42 2009 (4A643726)
fffff880`04c15000 fffff880`04d92000 athrx athrx.sys Mon Oct 05 19:33:57 2009 (4ACA1FF5)
fffff880`04d92000 fffff880`04d9f000 vwifibus vwifibus.sys Tue Jul 14 03:07:21 2009 (4A5BCC39)
fffff880`04d9f000 fffff880`04dc6000 jmcr jmcr.sys Tue Aug 18 11:23:06 2009 (4A8A64EA)
fffff880`04dc6000 fffff880`04de3000 JME JME.sys Fri Dec 04 04:14:21 2009 (4B18707D)
fffff880`04de3000 fffff880`04ded000 klmouflt klmouflt.sys Mon Nov 02 18:26:06 2009 (4AEF081E)
fffff880`04ded000 fffff880`04dfc000 mouclass mouclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`04e00000 fffff880`04e26740 VBoxNetFlt VBoxNetFlt.sys Fri Jun 25 16:32:28 2010 (4C24AFEC)
fffff880`04e27000 fffff880`04e28480 swenum swenum.sys Tue Jul 14 03:00:18 2009 (4A5BCA92)
fffff880`04e29000 fffff880`04e6c000 ks ks.sys Thu Mar 04 06:32:25 2010 (4B8F37D9)
fffff880`04e6c000 fffff880`04e7e000 umbus umbus.sys Tue Jul 14 03:06:56 2009 (4A5BCC20)
fffff880`04ea5000 fffff880`04eea000 ax9ktow7 ax9ktow7.SYS Wed Jul 15 00:12:55 2009 (4A5CF4D7)
fffff880`04eea000 fffff880`04eee500 CmBatt CmBatt.sys Tue Jul 14 02:31:03 2009 (4A5BC3B7)
fffff880`04eef000 fffff880`04f05000 intelppm intelppm.sys Tue Jul 14 02:19:25 2009 (4A5BC0FD)
fffff880`04f05000 fffff880`04f0d000 ATK64AMD ATK64AMD.sys Wed May 13 04:04:54 2009 (4A0A1CB6)
fffff880`04f0d000 fffff880`04f1d000 CompositeBus CompositeBus.sys Tue Jul 14 03:00:33 2009 (4A5BCAA1)
fffff880`04f1d000 fffff880`04f33000 AgileVpn AgileVpn.sys Tue Jul 14 03:10:24 2009 (4A5BCCF0)
fffff880`04f33000 fffff880`04f57000 rasl2tp rasl2tp.sys Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`04f57000 fffff880`04f63000 ndistapi ndistapi.sys Tue Jul 14 03:10:00 2009 (4A5BCCD8)
fffff880`04f63000 fffff880`04f92000 ndiswan ndiswan.sys Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`04f92000 fffff880`04fad000 raspppoe raspppoe.sys Tue Jul 14 03:10:17 2009 (4A5BCCE9)
fffff880`04fad000 fffff880`04fce000 raspptp raspptp.sys Tue Jul 14 03:10:18 2009 (4A5BCCEA)
fffff880`04fce000 fffff880`04fe8000 rassstp rassstp.sys Tue Jul 14 03:10:25 2009 (4A5BCCF1)
fffff880`04fe8000 fffff880`04ff3000 hamachi hamachi.sys Thu Feb 19 12:36:41 2009 (499D3639)
fffff880`05200000 fffff880`05224000 HDAudBus HDAudBus.sys Tue Jul 14 03:06:13 2009 (4A5BCBF5)
fffff880`05231000 fffff880`0599f000 atikmdag atikmdag.sys Wed Aug 04 04:39:08 2010 (4C58C4BC)
fffff880`0599f000 fffff880`059e5000 dxgmms1 dxgmms1.sys Tue Jul 14 02:38:32 2009 (4A5BC578)
fffff880`059e5000 fffff880`059f6000 HECIx64 HECIx64.sys Thu Sep 17 22:54:16 2009 (4AB293E8)
fffff880`05c00000 fffff880`05c4f000 atksgt atksgt.sys Sun May 17 16:36:34 2009 (4A1012E2)
fffff880`05c5a000 fffff880`05cb4000 usbhub usbhub.sys Tue Jul 14 03:07:09 2009 (4A5BCC2D)
fffff880`05cb4000 fffff880`05cc9000 NDProxy NDProxy.SYS Tue Jul 14 03:10:05 2009 (4A5BCCDD)
fffff880`05cc9000 fffff880`05ceb000 AtiHdmi AtiHdmi.sys Thu Nov 19 01:25:33 2009 (4B04826D)
fffff880`05ceb000 fffff880`05d28000 portcls portcls.sys Tue Jul 14 03:06:27 2009 (4A5BCC03)
fffff880`05d28000 fffff880`05d4a000 drmk drmk.sys Tue Jul 14 04:01:25 2009 (4A5BD8E5)
fffff880`05d4a000 fffff880`05d4f200 ksthunk ksthunk.sys Tue Jul 14 03:00:19 2009 (4A5BCA93)
fffff880`06000000 fffff880`06019000 HIDCLASS HIDCLASS.SYS Tue Jul 14 03:06:21 2009 (4A5BCBFD)
fffff880`06019000 fffff880`06021080 HIDPARSE HIDPARSE.SYS Tue Jul 14 03:06:17 2009 (4A5BCBF9)
fffff880`06022000 fffff880`0602f000 mouhid mouhid.sys Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff880`0602f000 fffff880`0603d000 crashdmp crashdmp.sys Tue Jul 14 03:01:01 2009 (4A5BCABD)
fffff880`0603d000 fffff880`06050000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 02:21:51 2009 (4A5BC18F)
fffff880`06050000 fffff880`0605e000 monitor monitor.sys Tue Jul 14 02:38:52 2009 (4A5BC58C)
fffff880`0606c000 fffff880`0611d000 CHDRT64 CHDRT64.sys Fri Oct 30 19:50:02 2009 (4AEB274A)
fffff880`0611d000 fffff880`06129000 Dxapi Dxapi.sys Tue Jul 14 02:38:28 2009 (4A5BC574)
fffff880`06129000 fffff880`06146000 usbccgp usbccgp.sys Tue Jul 14 03:06:45 2009 (4A5BCC15)
fffff880`06146000 fffff880`06147f00 USBD USBD.SYS Tue Jul 14 03:06:23 2009 (4A5BCBFF)
fffff880`061ec000 fffff880`061fa000 hidusb hidusb.sys Tue Jul 14 03:06:22 2009 (4A5BCBFE)
fffff880`06c00000 fffff880`06c4e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 09:52:28 2010 (4B88CF3C)
fffff880`06c4e000 fffff880`06c71000 mrxsmb20 mrxsmb20.sys Sat Feb 27 09:52:26 2010 (4B88CF3A)
fffff880`06c71000 fffff880`06c7e000 lirsgt lirsgt.sys Sun May 17 16:06:57 2009 (4A100BF1)
fffff880`06cb6000 fffff880`06d7e000 HTTP HTTP.sys Tue Jul 14 02:22:16 2009 (4A5BC1A8)
fffff880`06d7e000 fffff880`06d9c000 bowser bowser.sys Tue Jul 14 02:23:50 2009 (4A5BC206)
fffff880`06d9c000 fffff880`06db4000 mpsdrv mpsdrv.sys Tue Jul 14 03:08:25 2009 (4A5BCC79)
fffff880`06db4000 fffff880`06de1000 mrxsmb mrxsmb.sys Sat Feb 27 09:52:19 2010 (4B88CF33)
fffff880`07230000 fffff880`072d6000 peauth peauth.sys Tue Jul 14 04:01:19 2009 (4A5BD8DF)
fffff880`072d6000 fffff880`072e1000 secdrv secdrv.SYS Wed Sep 13 16:18:38 2006 (4508052E)
fffff880`072e1000 fffff880`0730e000 srvnet srvnet.sys Tue Jun 22 06:20:32 2010 (4C202C00)
fffff880`0730e000 fffff880`07320000 tcpipreg tcpipreg.sys Tue Jul 14 03:09:49 2009 (4A5BCCCD)
fffff880`07320000 fffff880`07388000 srv2 srv2.sys Tue Jun 22 06:20:47 2010 (4C202C0F)
fffff880`07800000 fffff880`0780bd00 PxHlpa64 PxHlpa64.sys Thu Mar 13 03:58:17 2008 (47D88A39)
fffff880`078b8000 fffff880`0794e000 srv srv.sys Tue Jun 22 06:21:11 2010 (4C202C27)
fffff880`0794e000 fffff880`07984000 fastfat fastfat.SYS Tue Jul 14 02:23:28 2009 (4A5BC1F0)
fffff880`0b010000 fffff880`0b1c7800 snp2uvc snp2uvc.sys Thu Aug 20 05:41:36 2009 (4A8CB7E0)
fffff880`0b1c8000 fffff880`0b1d8d00 STREAM STREAM.SYS Tue Jul 14 03:06:18 2009 (4A5BCBFA)
fffff880`0b1d9000 fffff880`0b1e1a80 sncduvc sncduvc.SYS Mon Dec 29 11:14:26 2008 (495894F2)
fffff880`0b1ef000 fffff880`0b1fd000 kbdhid kbdhid.sys Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff960`000e0000 fffff960`003ef000 win32k win32k.sys Sat Jun 19 07:32:00 2010 (4C1C4840)
fffff960`00590000 fffff960`0059a000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`00690000 fffff960`006b7000 cdd cdd.dll Wed May 19 22:48:26 2010 (4BF4408A)
fffff960`008a0000 fffff960`00901000 ATMFD ATMFD.DLL Thu May 27 07:11:31 2010 (4BFDF0F3)
Unloaded modules:
fffff880`0b1e2000 fffff880`0b1ea000 lvupdtio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b008000 fffff880`0b010000 lvupdtio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b000000 fffff880`0b008000 lvupdtio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b1e2000 fffff880`0b1e5000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b1ed000 fffff880`0b1ef000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b1eb000 fffff880`0b1ed000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`035c8000 fffff880`035cc000 btwrchid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`05d7c000 fffff880`05d8c000 BthEnum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`06160000 fffff880`061ec000 bthport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`06148000 fffff880`06160000 BTHUSB.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`05d50000 fffff880`05d7c000 rfcomm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`05d8c000 fffff880`05dac000 bthpan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`05dac000 fffff880`05dc3000 bthmodem.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`034bb000 fffff880`03536000 btwavdt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`03536000 fffff880`035bc000 btwaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`035bc000 fffff880`035c8000 btwl2cap.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0605e000 fffff880`0606c000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b1e9000 fffff880`0b1eb000 MSTEE.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b1e7000 fffff880`0b1e9000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0b1e5000 fffff880`0b1e7000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`07984000 fffff880`079f5000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`079f5000 fffff880`079fd000 lvupdtio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`04413000 fffff880`045cb000 snp2uvc.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`045cb000 fffff880`045dc000 STREAM.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`03009000 fffff880`031c1000 snp2uvc.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`031c1000 fffff880`031d2000 STREAM.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01c89000 fffff880`01c97000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0363d000 fffff880`03759000 dump_iaStor.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`03759000 fffff880`0376c000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000