BSOD's after adding RAM [ tcpip.sys ] [ error:tcpip+7a6cc ]

ombama · 26 Oct 2010

Bsod's started since i added a 4gb ddr3 RAM(1333MHZ ddr3 corsair single stick) to my board which already has 2 more sticks of 2gb each(1333MHZ, ddr3 , kingston)
[SLOT1 2GB Kingston 1333MHZ]
[SLOT2 2GB Kingston 1333MHZ]
[SLOT3 4GB Corsair 1333MHZ]
[SLOT4 EMPTY .....................]
They happen every few hours...
I reinstalled(removed and installed) network driver thrice.(didnt reboot the system though)
I reinstalled utorrent once.
The last one happened even after all the reinstalling.

This used to happen before too but it usually happened after continuously running the pc for like 5 days and I fixed it by installing the latest network card driver but this time doing the same doesn't seem to work.

Here below i have attached the minidump files for the crashes...

cybercore · 26 Oct 2010

1. You got two AV's in your system - Eset and Avast. Uninstall Avast:

epfwwfp.sys Mon Apr 19 09:43:19 2010

aswTdi.SYS Tue Sep 07 17:52:27 2010

--> avast! Uninstall Utility

2. Update:

SCDEmu.SYS Sun Jan 20 09:56:57 2008
PowerISO

VMkbd.sys Thu Oct 22 13:51:05 2009
VMWare

Code:









Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [I:\102610-21808-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a06000 PsLoadedModuleList = 0xfffff800`02c43e50
Debug session time: Mon Oct 25 22:16:12.228 2010 (UTC - 5:00)
System Uptime: 0 days 1:41:46.226
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {1000000, 2, 0, fffff8800167b6cc}

Unable to load image \SystemRoot\System32\Drivers\aswTdi.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswTdi.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswTdi.SYS
Probably caused by : tdx.sys ( tdx!TdxSendConnection+255 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000001000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800167b6cc, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cae0e0
 0000000001000000 

CURRENT_IRQL:  2

FAULTING_IP: 
tcpip!TcpSegmentTcbSend+318
fffff880`0167b6cc 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88003b6d0d0 -- (.trap 0xfffff88003b6d0d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000089 rbx=0000000000000000 rcx=0000000001000000
rdx=fffffa80091916b0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800167b6cc rsp=fffff88003b6d260 rbp=0000000000000001
 r8=fffffa80077cd9b8  r9=fffffa8007fd59d8 r10=fffffa8007fd59c0
r11=0000000000000014 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
tcpip!TcpSegmentTcbSend+0x318:
fffff880`0167b6cc 488b09          mov     rcx,qword ptr [rcx] ds:00ff:00000000`01000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a75ca9 to fffff80002a76740

STACK_TEXT:  
fffff880`03b6cf88 fffff800`02a75ca9 : 00000000`0000000a 00000000`01000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03b6cf90 fffff800`02a74920 : 00000001`000200ff fffff880`03b6d468 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`03b6d0d0 fffff880`0167b6cc : fffffa80`00000006 fffffa80`0a0a35b0 00000000`00000000 fffffa80`06bbadd0 : nt!KiPageFault+0x260
fffff880`03b6d260 fffff880`0167a54d : 00000000`80698e6f fffffa80`07fd5910 00000000`01000000 fffffa80`07fd59d8 : tcpip!TcpSegmentTcbSend+0x318
fffff880`03b6d360 fffff880`01678bc9 : 00000001`00000042 00000000`00000000 00000000`00000000 00000000`00000089 : tcpip!TcpBeginTcbSend+0x4bd
fffff880`03b6d5e0 fffff880`0167703a : fffff880`03b6d8d0 fffff880`03b6db30 00000000`00000000 fffff880`03b60000 : tcpip!TcpTcbSend+0x1d9
fffff880`03b6d860 fffff880`01676e28 : fffffa80`0a766cf0 fffffa80`0a766cf0 00000000`00da7a64 00000000`00000005 : tcpip!TcpEnqueueTcbSendOlmNotifySendComplete+0x19a
fffff880`03b6d890 fffff880`01676e7b : fffffa80`0744c001 fffff880`01634fb5 fffffa80`07f05680 00000000`0000060a : tcpip!TcpEnqueueTcbSend+0x438
fffff880`03b6d930 fffff800`02a85e5a : 00000000`00002000 fffff800`02a85e5a 00000000`00002711 00000000`00000000 : tcpip!TcpTlConnectionSendCalloutRoutine+0x1b
fffff880`03b6d960 fffff880`0167cdaa : fffff880`01676e60 fffff880`03b6da70 fffffa80`06d4a100 fffff880`01806f9f : nt!KeExpandKernelStackAndCalloutEx+0xda
fffff880`03b6da40 fffff880`01810df5 : fffffa80`06d4a180 fffffa80`077cd810 fffffa80`077cd810 00000000`00000000 : tcpip!TcpTlConnectionSend+0x7a
fffff880`03b6dab0 fffff880`0180377f : fffffa80`077cd810 fffffa80`07dec510 fffffa80`077cd810 fffffa80`07e07060 : tdx!TdxSendConnection+0x255
fffff880`03b6db90 fffff880`01831cbc : fffffa80`077cd8e0 fffff800`02a7d992 fffffa80`07e07060 fffffa80`077cd8e0 : tdx! ?? ::FNODOBFM::`string'+0x8a5
fffff880`03b6dbc0 fffffa80`077cd8e0 : fffff800`02a7d992 fffffa80`07e07060 fffffa80`077cd8e0 00000000`00000000 : aswTdi+0x6cbc
fffff880`03b6dbc8 fffff800`02a7d992 : fffffa80`07e07060 fffffa80`077cd8e0 00000000`00000000 fffffa80`07e07060 : 0xfffffa80`077cd8e0
fffff880`03b6dbd0 fffff880`03b6dcd0 : 00000000`00000000 fffff880`0183fddc fffffa80`078a03a0 00000000`00007530 : nt!KiCommitThreadWait+0x1d2
fffff880`03b6dc60 00000000`00000000 : fffff880`0183fddc fffffa80`078a03a0 00000000`00007530 fffffa80`07c028e0 : 0xfffff880`03b6dcd0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tdx!TdxSendConnection+255
fffff880`01810df5 bf03010000      mov     edi,103h

SYMBOL_STACK_INDEX:  b

SYMBOL_NAME:  tdx!TdxSendConnection+255

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tdx

IMAGE_NAME:  tdx.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc16b

FAILURE_BUCKET_ID:  X64_0xD1_tdx!TdxSendConnection+255

BUCKET_ID:  X64_0xD1_tdx!TdxSendConnection+255

Followup: MachineOwner
---------





















Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [I:\102610-22120-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a06000 PsLoadedModuleList = 0xfffff800`02c43e50
Debug session time: Tue Oct 26 01:23:09.539 2010 (UTC - 5:00)
System Uptime: 0 days 3:03:50.552
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {1000000, 2, 0, fffff8800167c6cc}

Probably caused by : tcpip.sys ( tcpip!TcpSegmentTcbSend+318 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000001000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800167c6cc, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cae0e0
 0000000001000000 

CURRENT_IRQL:  2

FAULTING_IP: 
tcpip!TcpSegmentTcbSend+318
fffff880`0167c6cc 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88003c53780 -- (.trap 0xfffff88003c53780)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000011 rbx=0000000000000000 rcx=0000000001000000
rdx=fffffa800726c350 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800167c6cc rsp=fffff88003c53910 rbp=0000000000000001
 r8=fffffa8006943b28  r9=fffffa800779e728 r10=fffffa800779e710
r11=0000000000000014 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
tcpip!TcpSegmentTcbSend+0x318:
fffff880`0167c6cc 488b09          mov     rcx,qword ptr [rcx] ds:00000000`01000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a75ca9 to fffff80002a76740

STACK_TEXT:  
fffff880`03c53638 fffff800`02a75ca9 : 00000000`0000000a 00000000`01000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03c53640 fffff800`02a74920 : 00000000`00000000 fffff880`03c53b18 fffffa80`00000008 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`03c53780 fffff880`0167c6cc : fffffa80`07c1b030 fffff880`0160c4d3 fffff880`03c539b8 fffffa80`073fe020 : nt!KiPageFault+0x260
fffff880`03c53910 fffff880`0167b54d : 00000000`e4d2a5e4 fffffa80`0779e660 00000000`01000000 fffffa80`0779e728 : tcpip!TcpSegmentTcbSend+0x318
fffff880`03c53a10 fffff880`01679bc9 : ffff0000`02b34b6c ffff0000`02b34b1c fffffa80`08f07798 00000000`00000011 : tcpip!TcpBeginTcbSend+0x4bd
fffff880`03c53c90 fffff880`01675a56 : 00000000`00000000 fffffa80`0771a001 fffff880`01767128 fffff880`01641ac2 : tcpip!TcpTcbSend+0x1d9
fffff880`03c53f10 fffff880`0167d44c : fffffa80`07315a00 00000000`00000000 00000000`00000000 fffff880`01660700 : tcpip!TcpFlushDelay+0x316
fffff880`03c53ff0 fffff880`0165f6c7 : fffffa80`07710ef9 fffffa80`077285f8 fffffa80`07720ef9 00000000`00000000 : tcpip!TcpPreValidatedReceive+0x20c
fffff880`03c540a0 fffff880`0165f799 : fffff880`03c54220 fffff880`0176d9a0 fffff880`03c54230 00000000`00000000 : tcpip!IppDeliverListToProtocol+0x97
fffff880`03c54160 fffff880`0165fc90 : fffffa80`08231380 fffffa80`0a18e000 00000000`00000000 fffff880`03c54220 : tcpip!IppProcessDeliverList+0x59
fffff880`03c541d0 fffff880`0165eb21 : 00000000`0000000e fffffa80`0771a000 fffff880`0176d9a0 00000000`08654001 : tcpip!IppReceiveHeaderBatch+0x231
fffff880`03c542b0 fffff880`0165d592 : fffffa80`08653d80 00000000`00000000 fffffa80`08654001 fffff880`00000001 : tcpip!IpFlcReceivePackets+0x651
fffff880`03c544b0 fffff880`01676e5a : fffffa80`08654010 fffff880`03c545e0 fffffa80`08654010 00000000`00000000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`03c54590 fffff800`02a85e5a : fffffa80`099e5210 fffff880`03c4f000 00000000`00004800 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff880`03c545e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0xda


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tcpip!TcpSegmentTcbSend+318
fffff880`0167c6cc 488b09          mov     rcx,qword ptr [rcx]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  tcpip!TcpSegmentTcbSend+318

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tcpip

IMAGE_NAME:  tcpip.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c15a458

FAILURE_BUCKET_ID:  X64_0xD1_tcpip!TcpSegmentTcbSend+318

BUCKET_ID:  X64_0xD1_tcpip!TcpSegmentTcbSend+318

Followup: MachineOwner
---------











































Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [I:\102610-19437-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a4b000 PsLoadedModuleList = 0xfffff800`02c88e50
Debug session time: Tue Oct 26 02:25:58.373 2010 (UTC - 5:00)
System Uptime: 0 days 1:02:03.746
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
Loading unloaded module list
............................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {1000000, 2, 0, fffff8800167d6cc}

Probably caused by : tcpip.sys ( tcpip!TcpSegmentTcbSend+318 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000001000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800167d6cc, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cf30e0
 0000000001000000 

CURRENT_IRQL:  2

FAULTING_IP: 
tcpip!TcpSegmentTcbSend+318
fffff880`0167d6cc 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88003c7b780 -- (.trap 0xfffff88003c7b780)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000037 rbx=0000000000000000 rcx=0000000001000000
rdx=fffffa80091036b0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800167d6cc rsp=fffff88003c7b910 rbp=0000000000000071
 r8=fffffa80084bacb8  r9=fffffa800695fbe8 r10=fffffa800695fbd0
r11=fffffa800a1cd3b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
tcpip!TcpSegmentTcbSend+0x318:
fffff880`0167d6cc 488b09          mov     rcx,qword ptr [rcx] ds:00000000`01000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002abaca9 to fffff80002abb740

STACK_TEXT:  
fffff880`03c7b638 fffff800`02abaca9 : 00000000`0000000a 00000000`01000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03c7b640 fffff800`02ab9920 : 00000000`0000000a fffff880`03c7bb18 fffffa80`091513c0 00000000`0000007c : nt!KiBugCheckDispatch+0x69
fffff880`03c7b780 fffff880`0167d6cc : 00000000`00000071 fffff880`03c7bb18 fffffa80`09ffc910 fffff880`03c7bb18 : nt!KiPageFault+0x260
fffff880`03c7b910 fffff880`0167c54d : 00000000`c68e13a2 fffffa80`0695fb20 00000000`01000000 fffffa80`0695fbe8 : tcpip!TcpSegmentTcbSend+0x318
fffff880`03c7ba10 fffff880`0167abc9 : 00000000`00000000 fffffa80`09469350 00000000`00000000 00000000`000000fa : tcpip!TcpBeginTcbSend+0x4bd
fffff880`03c7bc90 fffff880`01676a56 : 00000000`00000000 00000008`ab86a8ab fffff880`01768128 fffff880`01642ac2 : tcpip!TcpTcbSend+0x1d9
fffff880`03c7bf10 fffff880`0167e44c : fffffa80`06cd4a00 00000000`00000000 00000000`00000000 fffff880`01661700 : tcpip!TcpFlushDelay+0x316
fffff880`03c7bff0 fffff880`016606c7 : fffffa80`07711f76 fffffa80`075e4be8 fffffa80`07721f76 00000000`00000000 : tcpip!TcpPreValidatedReceive+0x20c
fffff880`03c7c0a0 fffff880`01660799 : fffff880`03c7c220 fffff880`0176e9a0 fffff880`03c7c230 00000000`00000000 : tcpip!IppDeliverListToProtocol+0x97
fffff880`03c7c160 fffff880`01660c90 : fffffa80`07473030 fffffa80`08cd2f50 00000000`00000011 fffff880`03c7c220 : tcpip!IppProcessDeliverList+0x59
fffff880`03c7c1d0 fffff880`0165fb21 : 00000000`0000000e fffffa80`0771b138 fffff880`0176e9a0 00000000`07328601 : tcpip!IppReceiveHeaderBatch+0x231
fffff880`03c7c2b0 fffff880`0165e592 : fffffa80`0a463ba0 00000000`00000000 fffffa80`07328601 fffff880`00000002 : tcpip!IpFlcReceivePackets+0x651
fffff880`03c7c4b0 fffff880`01677e5a : fffffa80`073286b0 fffff880`03c7c5e0 fffffa80`073286b0 00000000`00000000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`03c7c590 fffff800`02acae5a : fffffa80`08cd2e20 fffff880`03c77000 00000000`00004800 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff880`03c7c5e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0xda


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tcpip!TcpSegmentTcbSend+318
fffff880`0167d6cc 488b09          mov     rcx,qword ptr [rcx]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  tcpip!TcpSegmentTcbSend+318

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tcpip

IMAGE_NAME:  tcpip.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c15a458

FAILURE_BUCKET_ID:  X64_0xD1_tcpip!TcpSegmentTcbSend+318

BUCKET_ID:  X64_0xD1_tcpip!TcpSegmentTcbSend+318

Followup: MachineOwner
---------


fffff880`00f3a000 fffff880`00f91000   ACPI     ACPI.sys     Tue Jul 14 02:19:34 2009 (4A5BC106)
fffff880`02c56000 fffff880`02ce0000   afd      afd.sys      Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`04238000 fffff880`0424e000   AgileVpn AgileVpn.sys Tue Jul 14 03:10:24 2009 (4A5BCCF0)
fffff880`04000000 fffff880`04015000   amdppm   amdppm.sys   Tue Jul 14 02:19:25 2009 (4A5BC0FD)
fffff880`00dbc000 fffff880`00dc7000   amdxata  amdxata.sys  Tue May 19 20:56:59 2009 (4A12F2EB)
fffff880`029c5000 fffff880`029ce000   aswFsBlk aswFsBlk.SYS Tue Sep 07 17:47:09 2010 (4C86506D)
fffff880`0643d000 fffff880`06477000   aswMonFlt aswMonFlt.sys Tue Sep 07 17:47:32 2010 (4C865084)
fffff880`02ce0000 fffff880`02cea000   aswRdr   aswRdr.SYS   Tue Sep 07 17:47:47 2010 (4C865093)
fffff880`041a6000 fffff880`041c9000   aswSP    aswSP.SYS    Tue Sep 07 17:52:07 2010 (4C865197)
fffff880`0182b000 fffff880`0183b000   aswTdi   aswTdi.SYS   Tue Sep 07 17:52:27 2010 (4C8651AB)
fffff880`00e78000 fffff880`00e81000   atapi    atapi.sys    Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`00d92000 fffff880`00dbc000   ataport  ataport.SYS  Tue Jul 14 02:19:52 2009 (4A5BC118)
fffff880`05082000 fffff880`050a5000   AtiHdmi  AtiHdmi.sys  Thu May 06 12:20:39 2010 (4BE289E7)
fffff880`0480f000 fffff880`04eeb000   atikmdag atikmdag.sys Thu May 27 19:47:58 2010 (4BFEA23E)
fffff880`04015000 fffff880`0405b000   atikmpag atikmpag.sys Thu May 27 19:25:36 2010 (4BFE9D00)
fffff960`008d0000 fffff960`00931000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`0195a000 fffff880`01961000   Beep     Beep.SYS     Tue Jul 14 03:00:13 2009 (4A5BCA8D)
fffff880`04195000 fffff880`041a6000   blbdrive blbdrive.sys Tue Jul 14 02:35:59 2009 (4A5BC4DF)
fffff880`06bbc000 fffff880`06bda000   bowser   bowser.sys   Tue Jul 14 02:23:50 2009 (4A5BC206)
fffff960`007c0000 fffff960`007e7000   cdd      cdd.dll      unavailable (00000000)
fffff880`028d0000 fffff880`028ed000   cdfs     cdfs.sys     Tue Jul 14 02:19:46 2009 (4A5BC112)
fffff880`0504b000 fffff880`05075000   cdrom    cdrom.sys    Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00ca8000 fffff880`00d68000   CI       CI.dll       Tue Jul 14 04:32:13 2009 (4A5BE01D)
fffff880`018c1000 fffff880`018f1000   CLASSPNP CLASSPNP.SYS Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`00c4a000 fffff880`00ca8000   CLFS     CLFS.SYS     Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Tue Jul 14 02:49:40 2009 (4A5BC814)
fffff880`0421d000 fffff880`0422d000   CompositeBus CompositeBus.sys Tue Jul 14 03:00:33 2009 (4A5BCAA1)
fffff880`06d7e000 fffff880`06d87000   cpuz134_x64 cpuz134_x64.sys Fri Jul 09 14:16:58 2010 (4C37052A)
fffff880`06588000 fffff880`06596000   crashdmp crashdmp.sys Tue Jul 14 03:01:01 2009 (4A5BCABD)
fffff880`040f4000 fffff880`04177000   csc      csc.sys      Tue Jul 14 02:24:26 2009 (4A5BC22A)
fffff880`04177000 fffff880`04195000   dfsc     dfsc.sys     Tue Jul 14 02:23:44 2009 (4A5BC200)
fffff880`02ded000 fffff880`02dfc000   discache discache.sys Tue Jul 14 02:37:18 2009 (4A5BC52E)
fffff880`018ab000 fffff880`018c1000   disk     disk.sys     Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`06504000 fffff880`06526000   drmk     drmk.sys     Tue Jul 14 04:01:25 2009 (4A5BD8E5)
fffff880`065a2000 fffff880`065ab000   dump_atapi dump_atapi.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`06596000 fffff880`065a2000   dump_dumpata dump_dumpata.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`065ab000 fffff880`065be000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 02:21:51 2009 (4A5BC18F)
fffff880`06400000 fffff880`0640c000   Dxapi    Dxapi.sys    Tue Jul 14 02:38:28 2009 (4A5BC574)
fffff880`04eeb000 fffff880`04fdf000   dxgkrnl  dxgkrnl.sys  Fri Oct 02 04:00:14 2009 (4AC5509E)
fffff880`0405b000 fffff880`040a1000   dxgmms1  dxgmms1.sys  Tue Jul 14 02:38:32 2009 (4A5BC578)
fffff880`028ef000 fffff880`029c5000   eamonm   eamonm.sys   Wed Jun 16 17:39:33 2010 (4C18E225)
fffff880`01961000 fffff880`01986000   ehdrv    ehdrv.sys    Mon Apr 19 09:47:01 2010 (4BCBFC65)
fffff880`02800000 fffff880`0282d000   epfw     epfw.sys     Mon Apr 19 09:43:19 2010 (4BCBFB87)
fffff880`0422d000 fffff880`04238000   Epfwndis Epfwndis.sys Mon Apr 19 09:43:15 2010 (4BCBFB83)
fffff880`06d87000 fffff880`06d98000   epfwwfp  epfwwfp.sys  Mon Apr 19 09:43:19 2010 (4BCBFB87)
fffff880`05000000 fffff880`05036000   fastfat  fastfat.SYS  Tue Jul 14 02:23:28 2009 (4A5BC1F0)
fffff880`0111e000 fffff880`01132000   fileinfo fileinfo.sys Tue Jul 14 02:34:25 2009 (4A5BC481)
fffff880`010d2000 fffff880`0111e000   fltmgr   fltmgr.sys   Tue Jul 14 02:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 02:19:45 2009 (4A5BC111)
fffff880`01871000 fffff880`018ab000   fvevol   fvevol.sys   Tue Jul 14 02:22:15 2009 (4A5BC1A7)
fffff880`0159c000 fffff880`015e6000   fwpkclnt fwpkclnt.sys Tue Jul 14 02:21:08 2009 (4A5BC164)
fffff880`05075000 fffff880`05082000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 15:17:04 2009 (4A1151C0)
fffff800`02a02000 fffff800`02a4b000   hal      hal.dll      Tue Jul 14 04:27:36 2009 (4A5BDF08)
fffff880`06a9e000 fffff880`06aaa000   hcmon    hcmon.sys    Thu Oct 22 13:00:49 2009 (4AE02D51)
fffff880`040a1000 fffff880`040c5000   HDAudBus HDAudBus.sys Tue Jul 14 03:06:13 2009 (4A5BCBF5)
fffff880`0652c000 fffff880`06588000   HdAudio  HdAudio.sys  Tue Jul 14 03:06:59 2009 (4A5BCC23)
fffff880`065cc000 fffff880`065e5000   HIDCLASS HIDCLASS.SYS Tue Jul 14 03:06:21 2009 (4A5BCBFD)
fffff880`065e5000 fffff880`065ed080   HIDPARSE HIDPARSE.SYS Tue Jul 14 03:06:17 2009 (4A5BCBF9)
fffff880`065be000 fffff880`065cc000   hidusb   hidusb.sys   Tue Jul 14 03:06:22 2009 (4A5BCBFE)
fffff880`06af4000 fffff880`06bbc000   HTTP     HTTP.sys     Tue Jul 14 02:22:16 2009 (4A5BC1A8)
fffff880`01412000 fffff880`0141b000   hwpolicy hwpolicy.sys Tue Jul 14 02:19:22 2009 (4A5BC0FA)
fffff880`043b0000 fffff880`043ce000   i8042prt i8042prt.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`043ce000 fffff880`043dd000   kbdclass kbdclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff800`00bc3000 fffff800`00bcd000   kdcom    kdcom.dll    Tue Jul 14 04:31:07 2009 (4A5BDFDB)
fffff880`0512b000 fffff880`0516e000   ks       ks.sys       Tue Jul 14 03:00:31 2009 (4A5BCA9F)
fffff880`013d0000 fffff880`013ea000   ksecdd   ksecdd.sys   Tue Jul 14 02:20:54 2009 (4A5BC156)
fffff880`01571000 fffff880`0159c000   ksecpkg  ksecpkg.sys  Fri Dec 11 08:03:32 2009 (4B21E0B4)
fffff880`06526000 fffff880`0652b200   ksthunk  ksthunk.sys  Tue Jul 14 03:00:19 2009 (4A5BCA93)
fffff880`0283d000 fffff880`02852000   lltdio   lltdio.sys   Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`0641a000 fffff880`0643d000   luafv    luafv.sys    Tue Jul 14 02:26:13 2009 (4A5BC295)
fffff880`050bd000 fffff880`050f9880   mcdbus   mcdbus.sys   Tue Feb 24 12:34:07 2009 (49A3CD1F)
fffff880`00c29000 fffff880`00c36000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Tue Jul 14 04:29:09 2009 (4A5BDF65)
fffff880`0735c000 fffff880`0736a000   monitor  monitor.sys  Tue Jul 14 02:38:52 2009 (4A5BC58C)
fffff880`04800000 fffff880`0480f000   mouclass mouclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`065f0000 fffff880`065fd000   mouhid   mouhid.sys   Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff880`00d78000 fffff880`00d92000   mountmgr mountmgr.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`06bda000 fffff880`06bf2000   mpsdrv   mpsdrv.sys   Tue Jul 14 03:08:25 2009 (4A5BCC79)
fffff880`06a00000 fffff880`06a2d000   mrxsmb   mrxsmb.sys   Sat Feb 27 09:52:19 2010 (4B88CF33)
fffff880`06a2d000 fffff880`06a7b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 09:52:28 2010 (4B88CF3C)
fffff880`06a7b000 fffff880`06a9e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 09:52:26 2010 (4B88CF3A)
fffff880`019e4000 fffff880`019ef000   Msfs     Msfs.SYS     Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`00f9a000 fffff880`00fa4000   msisadrv msisadrv.sys Tue Jul 14 02:19:26 2009 (4A5BC0FE)
fffff880`0113e000 fffff880`0119c000   msrpc    msrpc.sys    Tue Jul 14 02:21:32 2009 (4A5BC17C)
fffff880`02de2000 fffff880`02ded000   mssmbios mssmbios.sys Tue Jul 14 02:31:10 2009 (4A5BC3BE)
fffff880`01400000 fffff880`01412000   mup      mup.sys      Tue Jul 14 02:23:45 2009 (4A5BC201)
fffff880`0141f000 fffff880`01511000   ndis     ndis.sys     Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`04272000 fffff880`0427e000   ndistapi ndistapi.sys Tue Jul 14 03:10:00 2009 (4A5BCCD8)
fffff880`028a5000 fffff880`028b8000   ndisuio  ndisuio.sys  Tue Jul 14 03:09:25 2009 (4A5BCCB5)
fffff880`0427e000 fffff880`042ad000   ndiswan  ndiswan.sys  Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`05036000 fffff880`0504b000   NDProxy  NDProxy.SYS  Tue Jul 14 03:10:05 2009 (4A5BCCDD)
fffff880`02d69000 fffff880`02d78000   netbios  netbios.sys  Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`02cea000 fffff880`02d2f000   netbt    netbt.sys    Tue Jul 14 02:21:28 2009 (4A5BC178)
fffff880`01511000 fffff880`01571000   NETIO    NETIO.SYS    Tue Jul 14 02:21:46 2009 (4A5BC18A)
fffff880`0183b000 fffff880`01858000   nltdi    nltdi.sys    Sun May 13 15:34:38 2007 (464705DE)
fffff880`06d98000 fffff880`06da4000   npf      npf.sys      Fri Jun 25 19:50:58 2010 (4C24DE72)
fffff880`019ef000 fffff880`01a00000   Npfs     Npfs.SYS     Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`02dd6000 fffff880`02de2000   nsiproxy nsiproxy.sys Tue Jul 14 02:21:02 2009 (4A5BC15E)
fffff800`02a4b000 fffff800`03027000   nt       ntkrnlmp.exe Sat Jun 19 07:16:41 2010 (4C1C44A9)
fffff880`0122d000 fffff880`013d0000   Ntfs     Ntfs.sys     Tue Jul 14 02:20:47 2009 (4A5BC14F)
fffff880`01951000 fffff880`0195a000   Null     Null.SYS     Tue Jul 14 02:19:37 2009 (4A5BC109)
fffff880`02852000 fffff880`028a5000   nwifi    nwifi.sys    Tue Jul 14 03:07:23 2009 (4A5BCC3B)
fffff880`02d43000 fffff880`02d69000   pacer    pacer.sys    Tue Jul 14 03:09:41 2009 (4A5BCCC5)
fffff880`04200000 fffff880`0421d000   parport  parport.sys  Tue Jul 14 03:00:40 2009 (4A5BCAA8)
fffff880`00fe4000 fffff880`00ff9000   partmgr  partmgr.sys  Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`00fa4000 fffff880`00fd7000   pci      pci.sys      Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`00e71000 fffff880`00e78000   pciide   pciide.sys   Tue Jul 14 02:19:49 2009 (4A5BC115)
fffff880`00d68000 fffff880`00d78000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`013ea000 fffff880`013fb000   pcw      pcw.sys      Tue Jul 14 02:19:27 2009 (4A5BC0FF)
fffff880`06c00000 fffff880`06ca6000   peauth   peauth.sys   Tue Jul 14 04:01:19 2009 (4A5BD8DF)
fffff880`064c7000 fffff880`06504000   portcls  portcls.sys  Tue Jul 14 03:06:27 2009 (4A5BCC03)
fffff880`00c36000 fffff880`00c4a000   PSHED    PSHED.dll    Tue Jul 14 04:32:23 2009 (4A5BE027)
fffff880`01132000 fffff880`0113de00   PxHlpa64 PxHlpa64.sys Wed Jun 24 02:16:35 2009 (4A416253)
fffff880`0424e000 fffff880`04272000   rasl2tp  rasl2tp.sys  Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`042ad000 fffff880`042c8000   raspppoe raspppoe.sys Tue Jul 14 03:10:17 2009 (4A5BCCE9)
fffff880`04fdf000 fffff880`05000000   raspptp  raspptp.sys  Tue Jul 14 03:10:18 2009 (4A5BCCEA)
fffff880`042c8000 fffff880`042e2000   rassstp  rassstp.sys  Tue Jul 14 03:10:25 2009 (4A5BCCF1)
fffff880`02c00000 fffff880`02c51000   rdbss    rdbss.sys    Tue Jul 14 02:24:09 2009 (4A5BC219)
fffff880`043f4000 fffff880`043ff000   rdpbus   rdpbus.sys   Tue Jul 14 03:17:46 2009 (4A5BCEAA)
fffff880`019c9000 fffff880`019d2000   RDPCDD   RDPCDD.sys   Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`019d2000 fffff880`019db000   rdpencdd rdpencdd.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`019db000 fffff880`019e4000   rdprefmp rdprefmp.sys Tue Jul 14 03:16:35 2009 (4A5BCE63)
fffff880`0119c000 fffff880`011d6000   rdyboost rdyboost.sys Tue Jul 14 02:34:34 2009 (4A5BC48A)
fffff880`028b8000 fffff880`028d0000   rspndr   rspndr.sys   Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`0736a000 fffff880`073c1000   Rt64win7 Rt64win7.sys Fri Sep 03 08:58:32 2010 (4C808E88)
fffff880`02dc4000 fffff880`02dd6000   SCDEmu   SCDEmu.SYS   Sun Jan 20 09:56:57 2008 (4792FEC9)
fffff880`050fa000 fffff880`05129000   SCSIPORT SCSIPORT.SYS Tue Jul 14 03:01:04 2009 (4A5BCAC0)
fffff880`06da4000 fffff880`06daf000   secdrv   secdrv.SYS   Wed Sep 13 16:18:38 2006 (4508052E)
fffff880`043e8000 fffff880`043f4000   serenum  serenum.sys  Tue Jul 14 03:00:33 2009 (4A5BCAA1)
fffff880`02d78000 fffff880`02d95000   serial   serial.sys   Tue Jul 14 03:00:40 2009 (4A5BCAA8)
fffff880`015f6000 fffff880`015fe000   spldr    spldr.sys    Mon May 11 19:56:27 2009 (4A0858BB)
fffff880`072c6000 fffff880`0735c000   srv      srv.sys      Fri Aug 27 06:38:00 2010 (4C773318)
fffff880`0725f000 fffff880`072c6000   srv2     srv2.sys     Fri Aug 27 06:37:46 2010 (4C77330A)
fffff880`06daf000 fffff880`06ddc000   srvnet   srvnet.sys   Fri Aug 27 06:37:24 2010 (4C7732F4)
fffff880`05129000 fffff880`0512a480   swenum   swenum.sys   Tue Jul 14 03:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jun 14 06:39:04 2010 (4C15A458)
fffff880`06ddc000 fffff880`06dee000   tcpipreg tcpipreg.sys Tue Jul 14 03:09:49 2009 (4A5BCCCD)
fffff880`0181e000 fffff880`0182b000   TDI      TDI.SYS      Tue Jul 14 02:21:18 2009 (4A5BC16E)
fffff880`01800000 fffff880`0181e000   tdx      tdx.sys      Tue Jul 14 02:21:15 2009 (4A5BC16B)
fffff880`02db0000 fffff880`02dc4000   termdd   termdd.sys   Tue Jul 14 03:16:36 2009 (4A5BCE64)
fffff960`00530000 fffff960`0053a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`041c9000 fffff880`041ef000   tunnel   tunnel.sys   Tue Jul 14 03:09:37 2009 (4A5BCCC1)
fffff880`0516e000 fffff880`05180000   umbus    umbus.sys    Tue Jul 14 03:06:56 2009 (4A5BCC20)
fffff880`065ee000 fffff880`065eff00   USBD     USBD.SYS     Tue Jul 14 03:06:23 2009 (4A5BCBFF)
fffff880`0439f000 fffff880`043b0000   usbehci  usbehci.sys  Tue Jul 14 03:06:30 2009 (4A5BCC06)
fffff880`05192000 fffff880`051ec000   usbhub   usbhub.sys   Tue Jul 14 03:07:09 2009 (4A5BCC2D)
fffff880`0433e000 fffff880`04349000   usbohci  usbohci.sys  Tue Jul 14 03:06:30 2009 (4A5BCC06)
fffff880`04349000 fffff880`0439f000   USBPORT  USBPORT.SYS  Tue Jul 14 03:06:31 2009 (4A5BCC07)
fffff880`00fd7000 fffff880`00fe4000   vdrvroot vdrvroot.sys Tue Jul 14 03:01:31 2009 (4A5BCADB)
fffff880`01986000 fffff880`01994000   vga      vga.sys      Tue Jul 14 02:38:47 2009 (4A5BC587)
fffff880`01994000 fffff880`019b9000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:38:51 2009 (4A5BC58B)
fffff880`06aaa000 fffff880`06ac2000   vmci     vmci.sys     Thu Oct 22 12:26:48 2009 (4AE02558)
fffff880`043dd000 fffff880`043e8000   VMkbd    VMkbd.sys    Thu Oct 22 13:51:05 2009 (4AE03919)
fffff880`05188000 fffff880`05192000   VMNET    VMNET.SYS    Mon Aug 10 15:04:50 2009 (4A800CE2)
fffff880`05180000 fffff880`05188000   vmnetadapter vmnetadapter.sys Mon Aug 10 15:04:53 2009 (4A800CE5)
fffff880`0282d000 fffff880`0283d000   vmnetbridge vmnetbridge.sys Mon Aug 10 15:05:58 2009 (4A800D26)
fffff880`06dee000 fffff880`06df8000   vmnetuserif vmnetuserif.sys Thu Oct 22 13:17:07 2009 (4AE03123)
fffff880`06ac2000 fffff880`06aca000   VMparport VMparport.sys Thu Oct 22 12:24:21 2009 (4AE024C5)
fffff880`015e6000 fffff880`015f6000   vmstorfl vmstorfl.sys Tue Jul 14 02:42:54 2009 (4A5BC67E)
fffff880`06ca8000 fffff880`06d7e000   vmx86    vmx86.sys    Thu Oct 22 14:36:57 2009 (4AE043D9)
fffff880`00e00000 fffff880`00e15000   volmgr   volmgr.sys   Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00e15000 fffff880`00e71000   volmgrx  volmgrx.sys  Tue Jul 14 02:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000   volsnap  volsnap.sys  Tue Jul 14 02:20:08 2009 (4A5BC128)
fffff880`06aca000 fffff880`06ad6000   vstor2_ws60 vstor2-ws60.sys Tue Oct 13 00:06:26 2009 (4AD39A52)
fffff880`02d95000 fffff880`02db0000   wanarp   wanarp.sys   Tue Jul 14 03:10:21 2009 (4A5BCCED)
fffff880`019b9000 fffff880`019c9000   watchdog watchdog.sys Tue Jul 14 02:37:35 2009 (4A5BC53F)
fffff880`00e87000 fffff880`00f2b000   Wdf01000 Wdf01000.sys Tue Jul 14 02:22:07 2009 (4A5BC19F)
fffff880`00f2b000 fffff880`00f3a000   WDFLDR   WDFLDR.SYS   Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`02d3a000 fffff880`02d43000   wfplwf   wfplwf.sys   Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`0037f000   win32k   win32k.sys   unavailable (00000000)
fffff880`00f91000 fffff880`00f9a000   WMILIB   WMILIB.SYS   Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`02d2f000 fffff880`02d3a000   ws2ifsl  ws2ifsl.sys  Tue Jul 14 03:10:33 2009 (4A5BCCF9)
fffff880`029ce000 fffff880`029ef000   WudfPf   WudfPf.sys   Tue Jul 14 03:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`073b3000 fffff880`073c1000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`073c1000 fffff880`073cf000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0735c000 fffff880`073b3000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`073b3000 fffff880`073c1000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`073c1000 fffff880`073cf000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0735c000 fffff880`073b3000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`0735c000 fffff880`073b3000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`0735c000 fffff880`0736a000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0736a000 fffff880`073c1000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`073c1000 fffff880`073cf000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`0735c000 fffff880`073b3000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`0735c000 fffff880`0736a000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0736a000 fffff880`073c1000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`07200000 fffff880`07257000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`0736a000 fffff880`073c1000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`0640c000 fffff880`0641a000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`042e7000 fffff880`0433e000   Rt64win7.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00057000
fffff880`018f1000 fffff880`018ff000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`018ff000 fffff880`0190b000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0190b000 fffff880`01914000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01914000 fffff880`01927000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`01927000 fffff880`01951000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002A000

cybercore · 26 Oct 2010

Also, since there's a lot of reference to tcpip, I see your Rt64win7.sys once loaded and several times unloaded. Rt64win7.sys - Realtek 8136/8168/8169 PCI/PCIe Adapters. Not sure what's going on there, check in Control Panel -> Device Manager -> Realtek 8136/8168/8169 PCI/PCIe Adapters.

ombama · 26 Oct 2010

Hey wow thanks for that quick response

I removed avast and rebooted the system
do i have to remove vmware and poweriso too?

cybercore · 26 Oct 2010

You are welcome. : )

Remove those and install their latest versions. Uninstall Avast, don't forget. You should be well.

ombama · 26 Oct 2010

Just removed avast nothing other then that no bsod since then :)
waiting for one

cybercore · 27 Oct 2010

ombama said:

Just removed avast nothing other then that no bsod since then :)
waiting for one

No, not more of them, Heaven Forbid!

I would still recommend you update these two drivers:

SCDEmu.SYS Sun Jan 20 09:56:57 2008
PowerISO

VMkbd.sys Thu Oct 22 13:51:05 2009
VMWare

ombama · 28 Oct 2010

Okay got another one

john56477 · 16 Mar 2012

I have just had a similar problem, after adding 2 new sticks of RAM, each 4G
Slot 1 2G DDR3 1333 wide
Slot 2 2G DDR3 1333 wide
Slot 3 4G DDR3 1333 narrow (newly added)
Slot 4 4G DDR3 1333 narrow (newly added)

checking the RAM using tools "speccy" and "CPU-Z"
showed while the frequency was matching, at PC3-10700 (667 MHz)
the old and new RAM did not have the same latency specs

I solved the random BSOD by removing the old 2G sticks and only using the new ones
Anyway, as the BSOD started after I inserted the new RAM,
I guessed the fault had to be RAM related.

no BSOD now,

Slot 1 4G DDR3 1333 narrow (new)
Slot 2 4G DDR3 1333 narrow (new)
Slot 3 Empty
Slot 4 Empty