BSOD errors 7E, 24 ( Ntfs!NtfsCommonWrite+da0 ).
Replace Avast with MSE:
avast! Uninstall Utility
http://www.microsoft.com/security_essentials/
Uninstall:
RTCore64.sys Wed May 25 09:39:12 2005
RMClock/CPUGenie
Update:
speedfan.sys Sun Sep 24 16:26:48 2006
Speedfan
AtiPcie.sys Tue May 05 18:00:22 2009
ATI PCIE Driver for ATI PCIE chipset
nusb3xhc.sys Fri Jan 22 05:22:21 2010 (latest is April 2010)
nusb3hub.sys Fri Jan 22 05:22:18 2010 (latest is April 2010)
Motherboard USB 3.0 by NEC Electronics Corporation
If crashes persist, test your hdd for errors:
Disk Check
HD Diagnostic
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\101010-25864-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0305f000 PsLoadedModuleList = 0xfffff800`0329ce50
Debug session time: Mon Oct 11 09:46:10.029 2010 (UTC - 5:00)
System Uptime: 5 days 5:53:10.793
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
......................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff800030f0cf9, fffff8800330f888, fffff8800330f0f0}
Probably caused by : memory_corruption ( nt!MiUnlinkPageFromLockedList+6c9 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800030f0cf9, The address that the exception occurred at
Arg3: fffff8800330f888, Exception Record Address
Arg4: fffff8800330f0f0, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!MiUnlinkPageFromLockedList+6c9
fffff800`030f0cf9 488914c1 mov qword ptr [rcx+rax*8],rdx
EXCEPTION_RECORD: fffff8800330f888 -- (.exr 0xfffff8800330f888)
ExceptionAddress: fffff800030f0cf9 (nt!MiUnlinkPageFromLockedList+0x00000000000006c9)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff8800330f0f0 -- (.cxr 0xfffff8800330f0f0)
rax=fffe7ffffffffffa rbx=fffffa80002c5ce0 rcx=fffffa8000000000
rdx=0000000000104e9b rsi=0000000000000001 rdi=fffff800032866f0
rip=fffff800030f0cf9 rsp=fffff8800330fac0 rbp=fffff88002f63180
r8=0000058000000000 r9=fffffa8000000008 r10=fffffffffffffffb
r11=2aaaaaaaaaaaaaab r12=0000000000000000 r13=0000000000000000
r14=0000000000000001 r15=0000000000000000
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00010297
nt!MiUnlinkPageFromLockedList+0x6c9:
fffff800`030f0cf9 488914c1 mov qword ptr [rcx+rax*8],rdx ds:002b:fff3fa7f`ffffffd0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800033070e0
ffffffffffffffff
FOLLOWUP_IP:
nt!MiUnlinkPageFromLockedList+6c9
fffff800`030f0cf9 488914c1 mov qword ptr [rcx+rax*8],rdx
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from fffff80003105c40 to fffff800030f0cf9
STACK_TEXT:
fffff880`0330fac0 fffff800`03105c40 : 00000000`0000000a fffff800`00000000 00000000`00000000 fffffa80`002c5ce0 : nt!MiUnlinkPageFromLockedList+0x6c9
fffff880`0330fb50 fffff800`03106a6c : 00000000`00000000 fffffa80`052ef0e0 fffffa80`052ef178 00000000`00000032 : nt!MiGatherMappedPages+0x108
fffff880`0330fc50 fffff800`03373c06 : fffffa80`039f2040 00000000`00000080 fffffa80`03973890 00000000`00000000 : nt!MiMappedPageWriter+0x198
fffff880`0330fd40 fffff800`030adc26 : fffff880`02fd3180 fffffa80`039f2040 fffff880`02fddfc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`0330fd80 00000000`00000000 : fffff880`03310000 fffff880`0330a000 fffff880`0330f8d0 00000000`00000000 : nt!KxStartSystemThread+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiUnlinkPageFromLockedList+6c9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
STACK_COMMAND: .cxr 0xfffff8800330f0f0 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x7E_nt!MiUnlinkPageFromLockedList+6c9
BUCKET_ID: X64_0x7E_nt!MiUnlinkPageFromLockedList+6c9
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\101710-18018-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03001000 PsLoadedModuleList = 0xfffff800`0323ee50
Debug session time: Mon Oct 18 02:11:28.790 2010 (UTC - 5:00)
System Uptime: 4 days 16:41:36.554
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88008de60d8, fffff88008de5940, fffff80003092cf9}
Probably caused by : Ntfs.sys ( Ntfs!NtfsCommonWrite+da0 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff88008de60d8
Arg3: fffff88008de5940
Arg4: fffff80003092cf9
Debugging Details:
------------------
EXCEPTION_RECORD: fffff88008de60d8 -- (.exr 0xfffff88008de60d8)
ExceptionAddress: fffff80003092cf9 (nt!MiUnlinkPageFromLockedList+0x00000000000006c9)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff88008de5940 -- (.cxr 0xfffff88008de5940)
rax=fffe7ffffffffffa rbx=fffffa80018cdce0 rcx=fffffa8000000000
rdx=000000000011f35e rsi=0000000000000001 rdi=fffff80003228560
rip=fffff80003092cf9 rsp=fffff88008de6310 rbp=fffff800031ebe80
r8=0000058000000000 r9=fffffa8000000008 r10=fffffa80035f8320
r11=2aaaaaaaaaaaaaab r12=0000000000000000 r13=0000000000000000
r14=0000000000000001 r15=0000000000000000
iopl=0 nv up ei ng nz ac po cy
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010297
nt!MiUnlinkPageFromLockedList+0x6c9:
fffff800`03092cf9 488914c1 mov qword ptr [rcx+rax*8],rdx ds:002b:fff3fa7f`ffffffd0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: chrome.exe
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032a90e0
ffffffffffffffff
FOLLOWUP_IP:
Ntfs!NtfsCommonWrite+da0
fffff880`01235f40 84c0 test al,al
FAULTING_IP:
nt!MiUnlinkPageFromLockedList+6c9
fffff800`03092cf9 488914c1 mov qword ptr [rcx+rax*8],rdx
BUGCHECK_STR: 0x24
DEVICE_OBJECT: fffffa8004c693f8
LAST_CONTROL_TRANSFER: from fffff8000308e535 to fffff80003092cf9
STACK_TEXT:
fffff880`08de6310 fffff800`0308e535 : fffff800`08000000 00000000`00000000 fffff880`00000000 fffff880`08de6400 : nt!MiUnlinkPageFromLockedList+0x6c9
fffff880`08de63a0 fffff800`0309d7c1 : fffff980`1e028000 00000000`01a68000 fffff880`00000006 fffff880`08de6588 : nt!MmCheckCachedPageStates+0x295
fffff880`08de6550 fffff800`0309d434 : fffffa80`04e12390 00000000`0de20000 fffff880`08de6690 00000000`00000000 : nt!CcMapAndCopyInToCache+0x301
fffff880`08de6640 fffff880`01235f40 : fffff8a0`02d33c98 fffff880`08de68c0 fffffa80`03c4cc90 fffff880`08de6800 : nt!CcCopyWrite+0x194
fffff880`08de66d0 fffff880`0123a413 : fffffa80`03c4cc90 fffffa80`04c69010 fffff880`08de6801 fffff880`08de6800 : Ntfs!NtfsCommonWrite+0xda0
fffff880`08de6890 fffff880`00c3823f : fffffa80`04c693b0 fffffa80`04c69010 fffffa80`05256cb0 00000000`00000001 : Ntfs!NtfsFsdWrite+0x1c3
fffff880`08de6950 fffff880`00c366df : fffffa80`060d22c0 00000000`00000000 fffffa80`060d2200 fffffa80`04c69010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`08de69e0 fffff800`03387ca9 : 00000000`00000001 fffff800`030808b1 fffffa80`060d2200 00000000`000005a8 : fltmgr!FltpDispatch+0xcf
fffff880`08de6a40 fffff800`03388a43 : fffffa80`04c693f8 00000000`00000000 fffffa80`05399f20 fffff800`031ebe80 : nt!IopSynchronousServiceTail+0xf9
fffff880`08de6ab0 fffff800`03070993 : 00000000`00001e01 00000000`00000000 00000000`00000001 00000000`11e22150 : nt!NtWriteFile+0x7e2
fffff880`08de6bb0 00000000`752b2dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02f5ead8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x752b2dd9
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: Ntfs!NtfsCommonWrite+da0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
STACK_COMMAND: .cxr 0xfffff88008de5940 ; kb
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsCommonWrite+da0
BUCKET_ID: X64_0x24_Ntfs!NtfsCommonWrite+da0
Followup: MachineOwner
---------
0: kd> lmtn
start end module name
fffff800`00bbd000 fffff800`00bc7000 kdcom kdcom.dll Tue Jul 14 04:31:07 2009 (4A5BDFDB)
fffff800`03001000 fffff800`035dd000 nt ntkrnlmp.exe Sat Jun 19 07:16:41 2010 (4C1C44A9)
fffff800`035dd000 fffff800`03626000 hal hal.dll Tue Jul 14 04:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00c2a000 ataport ataport.SYS Tue Jul 14 02:19:52 2009 (4A5BC118)
fffff880`00c2a000 fffff880`00c35000 amdxata amdxata.sys Tue May 19 20:56:59 2009 (4A12F2EB)
fffff880`00c35000 fffff880`00c81000 fltmgr fltmgr.sys Tue Jul 14 02:19:59 2009 (4A5BC11F)
fffff880`00c94000 fffff880`00ca1000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Tue Jul 14 04:29:09 2009 (4A5BDF65)
fffff880`00ca1000 fffff880`00cb5000 PSHED PSHED.dll Tue Jul 14 04:32:23 2009 (4A5BE027)
fffff880`00cb5000 fffff880`00d13000 CLFS CLFS.SYS Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00d13000 fffff880`00dd3000 CI CI.dll Tue Jul 14 04:32:13 2009 (4A5BE01D)
fffff880`00dd3000 fffff880`00ded000 mountmgr mountmgr.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00ded000 fffff880`00df6000 atapi atapi.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`00e02000 fffff880`00ea6000 Wdf01000 Wdf01000.sys Tue Jul 14 02:22:07 2009 (4A5BC19F)
fffff880`00ea6000 fffff880`00eb5000 WDFLDR WDFLDR.SYS Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00eb5000 fffff880`00f0c000 ACPI ACPI.sys Tue Jul 14 02:19:34 2009 (4A5BC106)
fffff880`00f0c000 fffff880`00f15000 WMILIB WMILIB.SYS Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`00f15000 fffff880`00f1f000 msisadrv msisadrv.sys Tue Jul 14 02:19:26 2009 (4A5BC0FE)
fffff880`00f1f000 fffff880`00f52000 pci pci.sys Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`00f52000 fffff880`00f5f000 vdrvroot vdrvroot.sys Tue Jul 14 03:01:31 2009 (4A5BCADB)
fffff880`00f5f000 fffff880`00f74000 partmgr partmgr.sys Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`00f74000 fffff880`00f89000 volmgr volmgr.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00f89000 fffff880`00fe5000 volmgrx volmgrx.sys unavailable (00000000)
fffff880`00fe5000 fffff880`00fec000 pciide pciide.sys Tue Jul 14 02:19:49 2009 (4A5BC115)
fffff880`00fec000 fffff880`00ffc000 PCIIDEX PCIIDEX.SYS Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`01000000 fffff880`0103a000 fvevol fvevol.sys Sat Sep 26 05:34:26 2009 (4ABD7DB2)
fffff880`0103a000 fffff880`0106a000 CLASSPNP CLASSPNP.SYS Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`0107c000 fffff880`01090000 fileinfo fileinfo.sys Tue Jul 14 02:34:25 2009 (4A5BC481)
fffff880`01090000 fffff880`010ee000 msrpc msrpc.sys unavailable (00000000)
fffff880`010ee000 fffff880`01161000 cng cng.sys Tue Jul 14 02:49:40 2009 (4A5BC814)
fffff880`01161000 fffff880`011ad000 volsnap volsnap.sys Tue Jul 14 02:20:08 2009 (4A5BC128)
fffff880`011ad000 fffff880`011e7000 rdyboost rdyboost.sys Tue Jul 14 02:34:34 2009 (4A5BC48A)
fffff880`01200000 fffff880`01216000 disk disk.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`01223000 fffff880`013c6000 Ntfs Ntfs.sys Tue Jul 14 02:20:47 2009 (4A5BC14F)
fffff880`013c6000 fffff880`013e0000 ksecdd ksecdd.sys Tue Jul 14 02:20:54 2009 (4A5BC156)
fffff880`013e0000 fffff880`013f1000 pcw pcw.sys Tue Jul 14 02:19:27 2009 (4A5BC0FF)
fffff880`013f1000 fffff880`013fb000 Fs_Rec Fs_Rec.sys unavailable (00000000)
fffff880`01400000 fffff880`01408000 spldr spldr.sys Mon May 11 19:56:27 2009 (4A0858BB)
fffff880`01408000 fffff880`0140f000 speedfan speedfan.sys Sun Sep 24 16:26:48 2006 (45168798)
fffff880`0140f000 fffff880`01421000 mup mup.sys Tue Jul 14 02:23:45 2009 (4A5BC201)
fffff880`01421000 fffff880`0142a000 hwpolicy hwpolicy.sys Tue Jul 14 02:19:22 2009 (4A5BC0FA)
fffff880`0142a000 fffff880`01432000 AtiPcie AtiPcie.sys Tue May 05 18:00:22 2009 (4A005486)
fffff880`01435000 fffff880`01527000 ndis ndis.sys Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`01527000 fffff880`01587000 NETIO NETIO.SYS Tue Jul 14 02:21:46 2009 (4A5BC18A)
fffff880`01587000 fffff880`015b2000 ksecpkg ksecpkg.sys Fri Dec 11 08:03:32 2009 (4B21E0B4)
fffff880`015b2000 fffff880`015fc000 fwpkclnt fwpkclnt.sys Tue Jul 14 02:21:08 2009 (4A5BC164)
fffff880`01600000 fffff880`017fd000 tcpip tcpip.sys Mon Jun 14 06:39:04 2010 (4C15A458)
fffff880`02a00000 fffff880`02a8a000 afd afd.sys Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`02a8a000 fffff880`02a94000 aswRdr aswRdr.SYS Mon Jun 28 23:33:15 2010 (4C29070B)
fffff880`02a94000 fffff880`02ad9000 netbt netbt.sys Tue Jul 14 02:21:28 2009 (4A5BC178)
fffff880`02ad9000 fffff880`02ae2000 wfplwf wfplwf.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`02af9000 fffff880`02b23000 cdrom cdrom.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`02b23000 fffff880`02b2c000 Null Null.SYS unavailable (00000000)
fffff880`02b2c000 fffff880`02b33000 Beep Beep.SYS Tue Jul 14 03:00:13 2009 (4A5BCA8D)
fffff880`02b33000 fffff880`02b41000 vga vga.sys Tue Jul 14 02:38:47 2009 (4A5BC587)
fffff880`02b41000 fffff880`02b66000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:38:51 2009 (4A5BC58B)
fffff880`02b66000 fffff880`02b76000 watchdog watchdog.sys Tue Jul 14 02:37:35 2009 (4A5BC53F)
fffff880`02b76000 fffff880`02b7f000 RDPCDD RDPCDD.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`02b7f000 fffff880`02b88000 rdpencdd rdpencdd.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`02b88000 fffff880`02b91000 rdprefmp rdprefmp.sys Tue Jul 14 03:16:35 2009 (4A5BCE63)
fffff880`02b91000 fffff880`02b9c000 Msfs Msfs.SYS unavailable (00000000)
fffff880`02b9c000 fffff880`02bad000 Npfs Npfs.SYS Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`02bad000 fffff880`02bcb000 tdx tdx.sys Tue Jul 14 02:21:15 2009 (4A5BC16B)
fffff880`02bcb000 fffff880`02bd8000 TDI TDI.SYS Tue Jul 14 02:21:18 2009 (4A5BC16E)
fffff880`02bd8000 fffff880`02be8000 aswTdi aswTdi.SYS Mon Jun 28 23:37:54 2010 (4C290822)
fffff880`03c00000 fffff880`03c23000 aswSP aswSP.SYS Mon Jun 28 23:37:34 2010 (4C29080E)
fffff880`03c23000 fffff880`03c49000 tunnel tunnel.sys Tue Jul 14 03:09:37 2009 (4A5BCCC1)
fffff880`03c49000 fffff880`03c5e000 amdppm amdppm.sys Tue Jul 14 02:19:25 2009 (4A5BC0FD)
fffff880`03c5e000 fffff880`03c9b000 portcls portcls.sys Tue Jul 14 03:06:27 2009 (4A5BCC03)
fffff880`03cc9000 fffff880`03cef000 pacer pacer.sys Tue Jul 14 03:09:41 2009 (4A5BCCC5)
fffff880`03cef000 fffff880`03cfe000 netbios netbios.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`03cfe000 fffff880`03d1b000 serial serial.sys Tue Jul 14 03:00:40 2009 (4A5BCAA8)
fffff880`03d1b000 fffff880`03d36000 wanarp wanarp.sys Tue Jul 14 03:10:21 2009 (4A5BCCED)
fffff880`03d36000 fffff880`03d4a000 termdd termdd.sys Tue Jul 14 03:16:36 2009 (4A5BCE64)
fffff880`03d4a000 fffff880`03d9b000 rdbss rdbss.sys Tue Jul 14 02:24:09 2009 (4A5BC219)
fffff880`03d9b000 fffff880`03da7000 nsiproxy nsiproxy.sys Tue Jul 14 02:21:02 2009 (4A5BC15E)
fffff880`03da7000 fffff880`03db2000 mssmbios mssmbios.sys Tue Jul 14 02:31:10 2009 (4A5BC3BE)
fffff880`03db2000 fffff880`03dc1000 discache discache.sys Tue Jul 14 02:37:18 2009 (4A5BC52E)
fffff880`03dc1000 fffff880`03ddf000 dfsc dfsc.sys Tue Jul 14 02:23:44 2009 (4A5BC200)
fffff880`03ddf000 fffff880`03df0000 blbdrive blbdrive.sys Tue Jul 14 02:35:59 2009 (4A5BC4DF)
fffff880`03e00000 fffff880`03e24000 HDAudBus HDAudBus.sys Tue Jul 14 03:06:13 2009 (4A5BCBF5)
fffff880`03e24000 fffff880`03e54000 nusb3xhc nusb3xhc.sys Fri Jan 22 05:22:21 2010 (4B5919ED)
fffff880`03e54000 fffff880`03e55f00 USBD USBD.SYS Tue Jul 14 03:06:23 2009 (4A5BCBFF)
fffff880`03e56000 fffff880`03e63000 usbfilter usbfilter.sys Tue Dec 22 10:26:22 2009 (4B3082AE)
fffff880`03e63000 fffff880`03e70000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 15:17:04 2009 (4A1151C0)
fffff880`03e70000 fffff880`03e7b000 usbohci usbohci.sys Tue Jul 14 03:06:30 2009 (4A5BCC06)
fffff880`03e7b000 fffff880`03e8c000 usbehci usbehci.sys Tue Jul 14 03:06:30 2009 (4A5BCC06)
fffff880`03e8c000 fffff880`03e9b000 kbdclass kbdclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`03ea3000 fffff880`03f97000 dxgkrnl dxgkrnl.sys Fri Oct 02 04:00:14 2009 (4AC5509E)
fffff880`03f97000 fffff880`03fdd000 dxgmms1 dxgmms1.sys Tue Jul 14 02:38:32 2009 (4A5BC578)
fffff880`04200000 fffff880`0420f000 mouclass mouclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`0420f000 fffff880`0424b880 mcdbus mcdbus.sys Tue Feb 24 12:34:07 2009 (49A3CD1F)
fffff880`0424c000 fffff880`0427b000 SCSIPORT SCSIPORT.SYS Tue Jul 14 03:01:04 2009 (4A5BCAC0)
fffff880`0427b000 fffff880`0427c480 swenum swenum.sys Tue Jul 14 03:00:18 2009 (4A5BCA92)
fffff880`0427d000 fffff880`0428f000 umbus umbus.sys Tue Jul 14 03:06:56 2009 (4A5BCC20)
fffff880`0428f000 fffff880`042a7000 nusb3hub nusb3hub.sys Fri Jan 22 05:22:18 2010 (4B5919EA)
fffff880`042e4000 fffff880`04327000 ks ks.sys Thu Mar 04 06:32:25 2010 (4B8F37D9)
fffff880`04327000 fffff880`0432c200 ksthunk ksthunk.sys Tue Jul 14 03:00:19 2009 (4A5BCA93)
fffff880`0432d000 fffff880`04343000 AgileVpn AgileVpn.sys Tue Jul 14 03:10:24 2009 (4A5BCCF0)
fffff880`04343000 fffff880`04367000 rasl2tp rasl2tp.sys Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`04367000 fffff880`04373000 ndistapi ndistapi.sys Tue Jul 14 03:10:00 2009 (4A5BCCD8)
fffff880`04373000 fffff880`043a2000 ndiswan ndiswan.sys Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`043a2000 fffff880`043bd000 raspppoe raspppoe.sys Tue Jul 14 03:10:17 2009 (4A5BCCE9)
fffff880`043bd000 fffff880`043de000 raspptp raspptp.sys Tue Jul 14 03:10:18 2009 (4A5BCCEA)
fffff880`043de000 fffff880`043f8000 rassstp rassstp.sys Tue Jul 14 03:10:25 2009 (4A5BCCF1)
fffff880`05000000 fffff880`050c8000 HTTP HTTP.sys Tue Jul 14 02:22:16 2009 (4A5BC1A8)
fffff880`050c8000 fffff880`050f5000 mrxsmb mrxsmb.sys Sat Feb 27 09:52:19 2010 (4B88CF33)
fffff880`050f7000 fffff880`05151000 usbhub usbhub.sys Tue Jul 14 03:07:09 2009 (4A5BCC2D)
fffff880`05151000 fffff880`05166000 NDProxy NDProxy.SYS Tue Jul 14 03:10:05 2009 (4A5BCCDD)
fffff880`05166000 fffff880`05189000 nvhda64v nvhda64v.sys Tue Jun 22 01:07:25 2010 (4C1FE29D)
fffff880`05189000 fffff880`051d7000 mrxsmb10 mrxsmb10.sys Sat Feb 27 09:52:28 2010 (4B88CF3C)
fffff880`051d7000 fffff880`051fa000 mrxsmb20 mrxsmb20.sys Sat Feb 27 09:52:26 2010 (4B88CF3A)
fffff880`05a00000 fffff880`05a0d000 mouhid mouhid.sys Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff880`05a0d000 fffff880`05a1b000 kbdhid kbdhid.sys Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff880`05a1b000 fffff880`05a3e000 luafv luafv.sys Tue Jul 14 02:26:13 2009 (4A5BC295)
fffff880`05a3e000 fffff880`05a58000 aswMonFlt aswMonFlt.sys Mon Jun 28 23:32:58 2010 (4C2906FA)
fffff880`05a58000 fffff880`05a61000 aswFsBlk aswFsBlk.SYS Mon Jun 28 23:32:34 2010 (4C2906E2)
fffff880`05a61000 fffff880`05a82000 WudfPf WudfPf.sys Tue Jul 14 03:05:37 2009 (4A5BCBD1)
fffff880`05a82000 fffff880`05a97000 lltdio lltdio.sys Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`05a97000 fffff880`05aaf000 rspndr rspndr.sys Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`05aaf000 fffff880`05acd000 bowser bowser.sys Tue Jul 14 02:23:50 2009 (4A5BC206)
fffff880`05acd000 fffff880`05ae5000 mpsdrv mpsdrv.sys Tue Jul 14 03:08:25 2009 (4A5BCC79)
fffff880`05af9000 fffff880`05d20f80 RTKVHD64 RTKVHD64.sys Mon Feb 08 12:24:50 2010 (4B6FE672)
fffff880`05d21000 fffff880`05d2d000 Dxapi Dxapi.sys Tue Jul 14 02:38:28 2009 (4A5BC574)
fffff880`05d2d000 fffff880`05d3b000 monitor monitor.sys Tue Jul 14 02:38:52 2009 (4A5BC58C)
fffff880`05d3b000 fffff880`05d49000 crashdmp crashdmp.sys Tue Jul 14 03:01:01 2009 (4A5BCABD)
fffff880`05d49000 fffff880`05d55000 dump_dumpata dump_dumpata.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`05d55000 fffff880`05d5e000 dump_atapi dump_atapi.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`05d5e000 fffff880`05d71000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 02:21:51 2009 (4A5BC18F)
fffff880`05d71000 fffff880`05d8e000 usbccgp usbccgp.sys Tue Jul 14 03:06:45 2009 (4A5BCC15)
fffff880`05d8e000 fffff880`05da9000 USBSTOR USBSTOR.SYS Tue Jul 14 03:06:34 2009 (4A5BCC0A)
fffff880`05da9000 fffff880`05db7000 hidusb hidusb.sys Tue Jul 14 03:06:22 2009 (4A5BCBFE)
fffff880`05db7000 fffff880`05dd0000 HIDCLASS HIDCLASS.SYS Tue Jul 14 03:06:21 2009 (4A5BCBFD)
fffff880`05dd0000 fffff880`05dd8080 HIDPARSE HIDPARSE.SYS Tue Jul 14 03:06:17 2009 (4A5BCBF9)
fffff880`05dd9000 fffff880`05df3c00 usbaudio usbaudio.sys Tue Jul 14 03:06:31 2009 (4A5BCC07)
fffff880`06400000 fffff880`06468000 srv2 srv2.sys Tue Jun 22 06:20:47 2010 (4C202C0F)
fffff880`064d0000 fffff880`06576000 peauth peauth.sys Tue Jul 14 04:01:19 2009 (4A5BD8DF)
fffff880`06576000 fffff880`06581000 secdrv secdrv.SYS Wed Sep 13 16:18:38 2006 (4508052E)
fffff880`06581000 fffff880`065ae000 srvnet srvnet.sys Tue Jun 22 06:20:32 2010 (4C202C00)
fffff880`065ae000 fffff880`065c0000 tcpipreg tcpipreg.sys Tue Jul 14 03:09:49 2009 (4A5BCCCD)
fffff880`06c70000 fffff880`06d06000 srv srv.sys Tue Jun 22 06:21:11 2010 (4C202C27)
fffff880`06d3d000 fffff880`06d43000 RTCore64 RTCore64.sys Wed May 25 09:39:12 2005 (42941D90)
fffff880`06d43000 fffff880`06d79000 fastfat fastfat.SYS Tue Jul 14 02:23:28 2009 (4A5BC1F0)
fffff880`06d79000 fffff880`06daa000 WUDFRd WUDFRd.sys Tue Jul 14 03:06:06 2009 (4A5BCBEE)
fffff880`06db4000 fffff880`06dbf000 asyncmac asyncmac.sys Tue Jul 14 03:10:13 2009 (4A5BCCE5)
fffff880`13c00000 fffff880`13c3e000 1394ohci 1394ohci.sys Tue Jul 14 03:07:12 2009 (4A5BCC30)
fffff880`13c3e000 fffff880`13c47000 wmiacpi wmiacpi.sys Tue Jul 14 02:31:02 2009 (4A5BC3B6)
fffff880`13c47000 fffff880`13c57000 CompositeBus CompositeBus.sys Tue Jul 14 03:00:33 2009 (4A5BCAA1)
fffff880`13c57000 fffff880`13c65a00 vrtaucbl vrtaucbl.sys Mon Feb 15 19:07:10 2010 (4B797F3E)
fffff880`13c81000 fffff880`14912e00 nvlddmkm nvlddmkm.sys Sat Jul 10 00:15:58 2010 (4C37918E)
fffff880`14913000 fffff880`14914180 nvBridge nvBridge.kmd Sat Jul 10 00:07:54 2010 (4C378FAA)
fffff880`14915000 fffff880`1496c000 Rt64win7 Rt64win7.sys Thu Mar 04 15:42:52 2010 (4B8FB8DC)
fffff880`1496c000 fffff880`149c2000 USBPORT USBPORT.SYS Tue Jul 14 03:06:31 2009 (4A5BCC07)
fffff880`149c2000 fffff880`149ce000 serenum serenum.sys Tue Jul 14 03:00:33 2009 (4A5BCAA1)
fffff880`149ce000 fffff880`149f0000 drmk drmk.sys Tue Jul 14 04:01:25 2009 (4A5BD8E5)
fffff960`000a0000 fffff960`003af000 win32k win32k.sys Sat Jun 19 07:31:59 2010 (4C1C483F)
fffff960`00430000 fffff960`0043a000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`00650000 fffff960`00677000 cdd cdd.dll unavailable (00000000)
fffff960`008f0000 fffff960`00951000 ATMFD ATMFD.DLL Thu May 27 07:11:31 2010 (4BFDF0F3)
Unloaded modules:
fffff880`08251000 fffff880`082c2000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`06d06000 fffff880`06d37000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`06c31000 fffff880`06c62000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`06c00000 fffff880`06c31000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`06dbf000 fffff880`06df0000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`06d06000 fffff880`06d37000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`06d43000 fffff880`06db4000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`06d37000 fffff880`06d3d000 RTCore64.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00006000
fffff880`0106a000 fffff880`01078000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`01216000 fffff880`01222000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`011e7000 fffff880`011f0000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`00c81000 fffff880`00c94000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
fffff880`03fdd000 fffff880`03ffb000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001E000
Quote