Random BSOD's WIN 7 64bit

Krismax · 21 Jan 2011

Hi all and thanks in advance for your help!
I am running windows 7 Ultimate 64bit and I experince random BSOD's since 2 weeks, even after reinstalling the OS the BSOD's are there please help i am not a noob but i run out of ideas how to fix it.I attached dump files and my system specs

CarlTR6 · 21 Jan 2011

Hi, Krismax, and welcome to the forum. Please read this thread, follow the instructions and post back. We will be glad to help you.

https://www.sevenforums.com/crashes-d...tructions.html

You have a really obsolete driver loaded on your system; it is an XP driver. Uninstall the utility or rename the driver.

RTCore64.sys Wed May 25 02:39:12 2005 - RivaTuner/EVGA Precision/MSI Afterburner (known issues w/Win7). RivaTuner.

also, update this driver.

Rt64win7.sys Thu Feb 26 04:04:13 2009 - Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC. Realtek.

I will look deeper when you upload the files generated by following the instructions above.

Krismax · 21 Jan 2011

Thank you for reply hope this helps

CarlTR6 · 21 Jan 2011

I looked at your latest four dumps.

Bugcheck A (2X), IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Bugcheck D1 (2X), DRIVER_IRQL_NOT_LESS_OR_EQUAL. Usual causes: Device driver.

One dump blamed memory corruption; one blamed ntkrnlmp.exe, which is one of the Windows system core files and highly unlikely to be the real cause; and two blamed dtsoftbus01.sys, a Daemon Tools driver. Because Daemon tools was directly blames in two dumps, I recommend that you uninstall it. Download and use Revo Uninstaller (free) to remove Daemon Tools.

Outdated drivers can cause memory corruption and BSOD's and I listed two out of date drivers in my post above. Update those two drivers Follow these suggestions and reboot; let's see how your system runs. Please post back and let us know. If you get another BSOD, upload it and we will go from there.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a12000 PsLoadedModuleList = 0xfffff800`02c4fe50
Debug session time: Fri Jan 21 08:32:13.917 2011 (GMT-5)
System Uptime: 0 days 5:24:40.699
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa7fffffd008, 2, 1, fffff80002aa33a4}

Probably caused by : memory_corruption ( nt!MiUnlinkFreeOrZeroedPage+1ca )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa7fffffd008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002aa33a4, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cba0e0
 fffffa7fffffd008 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiUnlinkFreeOrZeroedPage+1ca
fffff800`02aa33a4 48893cc2        mov     qword ptr [rdx+rax*8],rdi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  fffff880009a9a10 -- (.trap 0xfffff880009a9a10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffffffffffa00 rbx=0000000000000000 rcx=0000000000000008
rdx=fffffa8000000008 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002aa33a4 rsp=fffff880009a9ba0 rbp=0000000000000055
 r8=0000000000000000  r9=0000000000000000 r10=fffffa8003903568
r11=fffff880009a9c08 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po cy
nt!MiUnlinkFreeOrZeroedPage+0x1ca:
fffff800`02aa33a4 48893cc2        mov     qword ptr [rdx+rax*8],rdi ds:fffffa7f`ffffd008=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a81ca9 to fffff80002a82740

STACK_TEXT:  
fffff880`009a98c8 fffff800`02a81ca9 : 00000000`0000000a fffffa7f`ffffd008 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`009a98d0 fffff800`02a80920 : fffffa80`01e6efd0 fffffa80`00180ff0 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009a9a10 fffff800`02aa33a4 : 00000000`00000000 00000000`00000000 fffffa80`039d2040 fffff800`02ac9985 : nt!KiPageFault+0x260
fffff880`009a9ba0 fffff800`02ac94c6 : 00000000`000000ff 00000000`00000055 00000000`00000000 00000000`00000000 : nt!MiUnlinkFreeOrZeroedPage+0x1ca
fffff880`009a9c10 fffff800`02d26c06 : fffffa80`039d2040 00000000`00000080 fffffa80`03973b30 fffff800`02a60c19 : nt!MmZeroPageThread+0x551
fffff880`009a9d40 fffff800`02a60c26 : fffff800`02bfce80 fffffa80`039d2040 fffff800`02c0ac40 00002640`e8000000 : nt!PspSystemThreadStartup+0x5a
fffff880`009a9d80 00000000`00000000 : fffff880`009aa000 fffff880`009a4000 fffff880`009a99b0 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiUnlinkFreeOrZeroedPage+1ca
fffff800`02aa33a4 48893cc2        mov     qword ptr [rdx+rax*8],rdi

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiUnlinkFreeOrZeroedPage+1ca

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiUnlinkFreeOrZeroedPage+1ca

BUCKET_ID:  X64_0xA_nt!MiUnlinkFreeOrZeroedPage+1ca

Followup: MachineOwner
---------

Debug session time: Fri Jan 21 13:40:10.218 2011 (GMT-5)
System Uptime: 0 days 0:00:15.968
Loading Kernel Symbols
...............................................................
...................................................
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff88002c37d24, 2, 8, fffff88002c37d24}

Unable to load image \SystemRoot\system32\DRIVERS\dtsoftbus01.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dtsoftbus01.sys
*** ERROR: Module load completed but symbols could not be loaded for dtsoftbus01.sys
Probably caused by : dtsoftbus01.sys ( dtsoftbus01+37d24 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff88002c37d24, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff88002c37d24, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cbe0e0
 fffff88002c37d24 

CURRENT_IRQL:  2

FAULTING_IP: 
dtsoftbus01+37d24
fffff880`02c37d24 41b801000000    mov     r8d,1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff880031c3700 -- (.trap 0xfffff880031c3700)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffdfffd001b38 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88002c37d24 rsp=fffff880031c3890 rbp=fffffa8005cd7110
 r8=0000000000000000  r9=0000000000000000 r10=fffff88002c37d24
r11=fffffa80061c1c78 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
dtsoftbus01+0x37d24:
fffff880`02c37d24 41b801000000    mov     r8d,1
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a85ca9 to fffff80002a86740

FAILED_INSTRUCTION_ADDRESS: 
dtsoftbus01+37d24
fffff880`02c37d24 41b801000000    mov     r8d,1

STACK_TEXT:  
fffff880`031c35b8 fffff800`02a85ca9 : 00000000`0000000a fffff880`02c37d24 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`031c35c0 fffff800`02a84920 : fffffa80`03977700 fffffa80`05cd7110 00000000`00000001 00000000`00000005 : nt!KiBugCheckDispatch+0x69
fffff880`031c3700 fffff880`02c37d24 : 00000000`00000010 fffffa80`05cd7110 fffffa80`05cd7110 00000000`00000018 : nt!KiPageFault+0x260
fffff880`031c3890 00000000`00000010 : fffffa80`05cd7110 fffffa80`05cd7110 00000000`00000018 fffff980`05f5eee0 : dtsoftbus01+0x37d24
fffff880`031c3898 fffffa80`05cd7110 : fffffa80`05cd7110 00000000`00000018 fffff980`05f5eee0 fffff880`02c39235 : 0x10
fffff880`031c38a0 fffffa80`05cd7110 : 00000000`00000018 fffff980`05f5eee0 fffff880`02c39235 fffff980`05f22fa0 : 0xfffffa80`05cd7110
fffff880`031c38a8 00000000`00000018 : fffff980`05f5eee0 fffff880`02c39235 fffff980`05f22fa0 fffffa80`05cd7110 : 0xfffffa80`05cd7110
fffff880`031c38b0 fffff980`05f5eee0 : fffff880`02c39235 fffff980`05f22fa0 fffffa80`05cd7110 fffff980`05f5efb0 : 0x18
fffff880`031c38b8 fffff880`02c39235 : fffff980`05f22fa0 fffffa80`05cd7110 fffff980`05f5efb0 fffff800`02f28631 : 0xfffff980`05f5eee0
fffff880`031c38c0 fffff980`05f22fa0 : fffffa80`05cd7110 fffff980`05f5efb0 fffff800`02f28631 fffffa80`061cb010 : dtsoftbus01+0x39235
fffff880`031c38c8 fffffa80`05cd7110 : fffff980`05f5efb0 fffff800`02f28631 fffffa80`061cb010 fffff980`05f5efb0 : 0xfffff980`05f22fa0
fffff880`031c38d0 fffff980`05f5efb0 : fffff800`02f28631 fffffa80`061cb010 fffff980`05f5efb0 fffff880`00c0e0c2 : 0xfffffa80`05cd7110
fffff880`031c38d8 fffff800`02f28631 : fffffa80`061cb010 fffff980`05f5efb0 fffff880`00c0e0c2 fffffa80`05ecbdd0 : 0xfffff980`05f5efb0
fffff880`031c38e0 fffff800`02f28bcc : 00000000`05060000 fffff880`031c3988 fffff880`031c3988 fffff980`05f5eee0 : nt!VfIrpLogRecordEvent+0x211
fffff880`031c3980 00000000`00000000 : 00000000`00000000 00000000`00000000 fffffa80`05dfaa00 fffffa80`05ecbc80 : nt!IovpCallDriver1+0x51c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dtsoftbus01+37d24
fffff880`02c37d24 41b801000000    mov     r8d,1

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  dtsoftbus01+37d24

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dtsoftbus01

IMAGE_NAME:  dtsoftbus01.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d11d0b0

FAILURE_BUCKET_ID:  X64_0xD1_VRF_CODE_AV_BAD_IP_dtsoftbus01+37d24

BUCKET_ID:  X64_0xD1_VRF_CODE_AV_BAD_IP_dtsoftbus01+37d24

Followup: MachineOwner
---------

Debug session time: Fri Jan 21 09:31:50.012 2011 (GMT-5)
System Uptime: 0 days 0:58:38.747
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff88072158180, 2, 1, fffff80002a7c91d}

Probably caused by : ntkrnlmp.exe ( nt!KiCommitThreadWait+15d )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff88072158180, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002a7c91d, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cad0e0
 fffff88072158180 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KiCommitThreadWait+15d
fffff800`02a7c91d 4c89af40470000  mov     qword ptr [rdi+4740h],r13

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  iw4mp.dat

TRAP_FRAME:  fffff8800b4c88f0 -- (.trap 0xfffff8800b4c88f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=000003d5a8b60696
rdx=0000000000003d82 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002a7c91d rsp=fffff8800b4c8a80 rbp=fffffa800400e060
 r8=fffffa800400e140  r9=00000000000000af r10=fffff88002dd4180
r11=fffff88002dd4100 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl zr na po nc
nt!KiCommitThreadWait+0x15d:
fffff800`02a7c91d 4c89af40470000  mov     qword ptr [rdi+4740h],r13 ds:00000000`00004740=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a74ca9 to fffff80002a75740

STACK_TEXT:  
fffff880`0b4c87a8 fffff800`02a74ca9 : 00000000`0000000a fffff880`72158180 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0b4c87b0 fffff800`02a73920 : 00000000`00000000 fffffa80`0400e060 fffffa80`00000003 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0b4c88f0 fffff800`02a7c91d : fffffa80`0400e060 fffffa80`0400e060 00000000`00000000 fffff800`00000003 : nt!KiPageFault+0x260
fffff880`0b4c8a80 fffff800`02a7ecff : 00000000`00000188 ffffd89a`9c9a2516 00000000`000000af 00000000`0fb0f170 : nt!KiCommitThreadWait+0x15d
fffff880`0b4c8b10 fffff800`02d701d2 : fffff880`0b4c8c00 fffffa80`00000006 00000000`00000001 fffff800`02d94000 : nt!KeWaitForSingleObject+0x19f
fffff880`0b4c8bb0 fffff800`02a74993 : fffffa80`0400e060 00000000`00000188 fffff880`0b4c8bf8 fffffa80`061c2c60 : nt!NtWaitForSingleObject+0xb2
fffff880`0b4c8c20 00000000`73c82dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0fb0f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73c82dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiCommitThreadWait+15d
fffff800`02a7c91d 4c89af40470000  mov     qword ptr [rdi+4740h],r13

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KiCommitThreadWait+15d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiCommitThreadWait+15d

BUCKET_ID:  X64_0xA_nt!KiCommitThreadWait+15d

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`00ee7000 fffff880`00f3e000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02b41000 fffff880`02bcb000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0796c000 fffff880`07982000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03fea000 fffff880`03ffe000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`03f10000 fffff880`03f25000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00ff5000 fffff880`01000000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00fec000 fffff880`00ff5000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`02bcb000 fffff880`02beb000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`07043000 fffff880`0793f000   atikmdag atikmdag.sys Wed Jan 12 22:59:28 2011 (4D2E78A0)
fffff880`03f25000 fffff880`03f73000   atikmpag atikmpag.sys Wed Jan 12 22:20:37 2011 (4D2E6F85)
fffff960`00810000 fffff960`00871000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`02a70000 fffff880`02a77000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03ed9000 fffff880`03eea000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06117000 fffff880`06135000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007b0000 fffff960`007d7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`0a50f000 fffff880`0a52c000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`02a3d000 fffff880`02a67000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cbc000 fffff880`00d7c000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00c00000 fffff880`00c30000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c5e000 fffff880`00cbc000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010be000 fffff880`01131000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0795c000 fffff880`0796c000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`061eb000 fffff880`061f4000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`085f0000 fffff880`085fe000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e38000 fffff880`03ebb000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03ebb000 fffff880`03ed9000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03c68000 fffff880`03c77000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01200000 fffff880`01216000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`082a9000 fffff880`082cb000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`03d89000 fffff880`03dcc000   dtsoftbus01 dtsoftbus01.sys Wed Dec 22 05:19:28 2010 (4D11D0B0)
fffff880`0840c000 fffff880`08415000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`08400000 fffff880`0840c000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`08415000 fffff880`08428000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`085e4000 fffff880`085f0000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`06a09000 fffff880`06afd000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`06afd000 fffff880`06b43000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03861000 fffff880`03939000   eamonm   eamonm.sys   Fri Aug 13 08:38:55 2010 (4C653CDF)
fffff880`02a77000 fffff880`02a9c000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`06000000 fffff880`06021000   epfwwfpr epfwwfpr.sys Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`0104c000 fffff880`01060000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01000000 fffff880`0104c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013ee000 fffff880`013f8000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`011b7000 fffff880`011f1000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0142b000 fffff880`01475000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02fe1000 fffff800`0302a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03f73000 fffff880`03f7e000   hamachi  hamachi.sys  Thu Feb 19 05:36:41 2009 (499D3639)
fffff880`06b43000 fffff880`06b67000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`082d1000 fffff880`082ea000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`08436000 fffff880`0843e080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`08428000 fffff880`08436000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0604f000 fffff880`06117000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f2000 fffff880`015fb000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03f89000 fffff880`03f98000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08339000 fffff880`08347000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bd3000 fffff800`00bdd000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03fa7000 fffff880`03fea000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013c3000 fffff880`013dd000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`082cb000 fffff880`082d0200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`08324000 fffff880`08339000   LHidFilt LHidFilt.Sys Tue Aug 24 13:21:36 2010 (4C73FFA0)
fffff880`03939000 fffff880`0394e000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`08355000 fffff880`08378000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`08314000 fffff880`08324000   LUsbFilt LUsbFilt.Sys Tue Aug 24 13:21:47 2010 (4C73FFAB)
fffff880`00c3d000 fffff880`00c4a000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`08347000 fffff880`08355000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03f98000 fffff880`03fa7000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`082ea000 fffff880`082f7000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fd2000 fffff880`00fec000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`06135000 fffff880`0614d000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0614d000 fffff880`0617a000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0617a000 fffff880`061c8000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`061c8000 fffff880`061eb000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02afa000 fffff880`02b05000   Msfs     Msfs.SYS     unavailable (00000000)
fffff880`00f47000 fffff880`00f51000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01060000 fffff880`010be000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`03c5d000 fffff880`03c68000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e0000 fffff880`015f2000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01486000 fffff880`01578000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`079a6000 fffff880`079b2000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`079b2000 fffff880`079e1000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03e12000 fffff880`03e27000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03d5d000 fffff880`03d6c000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03ce9000 fffff880`03d2e000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01578000 fffff880`015d8000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02b05000 fffff880`02b16000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03c51000 fffff880`03c5d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a05000 fffff800`02fe1000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01220000 fffff880`013c3000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02a67000 fffff880`02a70000   Null     Null.SYS     unavailable (00000000)
fffff880`03d37000 fffff880`03d5d000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f91000 fffff880`00fa6000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f51000 fffff880`00f84000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fbb000 fffff880`00fc2000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fc2000 fffff880`00fd2000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013dd000 fffff880`013ee000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`08200000 fffff880`082a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`02a00000 fffff880`02a3d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c4a000 fffff880`00c5e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`07982000 fffff880`079a6000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`079e1000 fffff880`079fc000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`07000000 fffff880`07021000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`07021000 fffff880`0703b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03c00000 fffff880`03c51000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03f7e000 fffff880`03f89000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02adf000 fffff880`02ae8000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02ae8000 fffff880`02af1000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02af1000 fffff880`02afa000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0117d000 fffff880`011b7000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0394e000 fffff880`03966000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06b67000 fffff880`06b99000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`0a509000 fffff880`0a50f000   RTCore64 RTCore64.sys Wed May 25 02:39:12 2005 (42941D90)
fffff880`06021000 fffff880`0602c000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`07950000 fffff880`0795c000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03d6c000 fffff880`03d89000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015d8000 fffff880`015e0000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0a473000 fffff880`0a509000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`03993000 fffff880`039fa000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`03966000 fffff880`03993000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`06bfa000 fffff880`06bfb480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0602c000 fffff880`0603e000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02b34000 fffff880`02b41000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02b16000 fffff880`02b34000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03de7000 fffff880`03dfb000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004b0000 fffff960`004ba000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03eea000 fffff880`03f10000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03e00000 fffff880`03e12000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`082f7000 fffff880`08314000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0843f000 fffff880`08440f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0793f000 fffff880`07950000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`03c77000 fffff880`03cd1000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`06b99000 fffff880`06ba4000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`06ba4000 fffff880`06bfa000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00f84000 fffff880`00f91000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02a9c000 fffff880`02aaa000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`08445000 fffff880`085e4000   viahduaa viahduaa.sys Thu Sep 17 07:04:15 2009 (4AB217AF)
fffff880`02aaa000 fffff880`02acf000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01475000 fffff880`01485000   vmstorfl vmstorfl.sys unavailable (00000000)
fffff880`00fa6000 fffff880`00fbb000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d7c000 fffff880`00dd8000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`01131000 fffff880`0117d000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03dcc000 fffff880`03de7000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02acf000 fffff880`02adf000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e34000 fffff880`00ed8000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ed8000 fffff880`00ee7000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03d2e000 fffff880`03d37000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000c0000 fffff960`003d0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`06a00000 fffff880`06a09000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f3e000 fffff880`00f47000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`0a52c000 fffff880`0a59d000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`011f1000 fffff880`011ff000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`00c30000 fffff880`00c3c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01216000 fffff880`0121f000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`00dd8000 fffff880`00deb000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Krismax · 23 Jan 2011

After uninstalling Deamon tools and updating the riva tuner driver and network card driver the BSOD's stoped but today minutes ago new BSOD apeared.I attached the new health report and new Windows_NT6_BSOD_jcgriff2 report.Thanks for the help

CarlTR6 · 23 Jan 2011

I am glad that you got a little improvement anyway. Your latest dump is bugcheck 50, PAGE_FAULT_IN_NONPAGED_AREA. This is usually caused by Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS. The dump blames ntkrnlmp.exe, one of the Windows system core files and not likely to be the cause, and states it cannot identify the faulting driver.

The primary suspect is

RTCore64.sys, Wed May 25 02:39:12 2005 - RivaTuner/EVGA Precision/MSI Afterburner (known issues w/Win7). RivaTuner.

This driver is shown in the dump as an unloaded module. This does not necessarily mean that it caused the crash. But, coupled with the fact that it is an obsolete XP driver makes it suspect. Completely uninstall Riva Tuner is there is no update for this driver.

You have another outdated driver

hamachi.sys Thu Feb 19 05:36:41 2009 - LogMeIn Hamachi Virtual network interface driver https://secure.logmein.com/US/support/hamachi2/.

This driver generally works OK with Win 7. I suggest that you leave it for now. We can revisit it if getting rid of RTCore64.sys does not solve your problem.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a18000 PsLoadedModuleList = 0xfffff800`02c55e50
Debug session time: Sun Jan 23 08:43:01.753 2011 (GMT-5)
System Uptime: 0 days 2:53:09.550
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff8e002fd39bc, 1, fffff80002bbd2c2, 5}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+212 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8e002fd39bc, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff80002bbd2c2, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cc00e0
 fffff8e002fd39bc 

FAULTING_IP: 
nt!ExFreePoolWithTag+212
fffff800`02bbd2c2 ff411c          inc     dword ptr [rcx+1Ch]

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  skypePM.exe

CURRENT_IRQL:  1

IRP_ADDRESS:  fffffa8005d9c2b8

TRAP_FRAME:  fffff8800917a700 -- (.trap 0xfffff8800917a700)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000005fffffffa0 rbx=0000000000000000 rcx=fffff8e002fd39a0
rdx=fffff88002fd3180 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002bbd2c2 rsp=fffff8800917a890 rbp=0000000000000000
 r8=0000000000000000  r9=fffff80002c16a80 r10=fffff80002a18000
r11=fffffa8006b24a90 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
nt!ExFreePoolWithTag+0x212:
fffff800`02bbd2c2 ff411c          inc     dword ptr [rcx+1Ch] ds:fffff8e0`02fd39bc=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002b078c1 to fffff80002a88740

STACK_TEXT:  
fffff880`0917a598 fffff800`02b078c1 : 00000000`00000050 fffff8e0`02fd39bc 00000000`00000001 fffff880`0917a700 : nt!KeBugCheckEx
fffff880`0917a5a0 fffff800`02a8682e : 00000000`00000001 fffffa80`04224530 fffffa80`05a9b100 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x40e8b
fffff880`0917a700 fffff800`02bbd2c2 : fffffa80`04224530 00000000`00000000 fffffa80`06b24ac0 fffff8a0`021b7f50 : nt!KiPageFault+0x16e
fffff880`0917a890 fffff800`02aa7d9e : 00000000`00000000 fffff880`0917ab98 00000000`20206f49 00000000`00000000 : nt!ExFreePoolWithTag+0x212
fffff880`0917a940 fffff800`02da3d66 : fffffa80`05d9c330 fffff880`0917aca0 fffffa80`06afbe00 fffffa80`06afbd90 : nt!IopCompleteRequest+0x5ce
fffff880`0917aa10 fffff800`02d6cb1a : 00000000`0306e848 00000000`00000500 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xc63
fffff880`0917ab40 fffff800`02a87993 : fffffa80`04748760 00000000`0306e7e8 fffff880`0917abc8 00000000`00000000 : nt!NtFsControlFile+0x56
fffff880`0917abb0 00000000`73a12dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0306f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73a12dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExFreePoolWithTag+212
fffff800`02bbd2c2 ff411c          inc     dword ptr [rcx+1Ch]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!ExFreePoolWithTag+212

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x50_nt!ExFreePoolWithTag+212

BUCKET_ID:  X64_0x50_nt!ExFreePoolWithTag+212

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`00e54000 fffff880`00eab000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02cd5000 fffff880`02d5f000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e56000 fffff880`03e6c000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0416d000 fffff880`04181000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`013ea000 fffff880`013ff000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00fe8000 fffff880`00ff3000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00fb5000 fffff880`00fbe000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fbe000 fffff880`00fe8000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04015000 fffff880`04035000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`04837000 fffff880`05133000   atikmdag atikmdag.sys Wed Jan 12 22:59:28 2011 (4D2E78A0)
fffff880`03e78000 fffff880`03ec6000   atikmpag atikmpag.sys Wed Jan 12 22:20:37 2011 (4D2E6F85)
fffff960`00980000 fffff960`009e1000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`0191d000 fffff880`01924000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`02cc4000 fffff880`02cd5000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02bdd000 fffff880`02bfb000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00790000 fffff960`007b7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`018ea000 fffff880`01914000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c98000 fffff880`00d58000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01884000 fffff880`018b4000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c3a000 fffff880`00c98000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01286000 fffff880`012f9000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04815000 fffff880`04825000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02a00000 fffff880`02a09000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`061bf000 fffff880`061cd000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01800000 fffff880`01883000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`02ca6000 fffff880`02cc4000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c97000 fffff880`02ca6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`013d4000 fffff880`013ea000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05e7f000 fffff880`05ea1000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`061d9000 fffff880`061e2000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`061cd000 fffff880`061d9000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`061e2000 fffff880`061f5000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06000000 fffff880`0600c000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03ec6000 fffff880`03fba000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`05133000 fffff880`05179000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02a10000 fffff880`02ae8000   eamonm   eamonm.sys   Fri Aug 13 08:38:55 2010 (4C653CDF)
fffff880`01924000 fffff880`01949000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`04035000 fffff880`04056000   epfwwfpr epfwwfpr.sys Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`0101c000 fffff880`01030000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00e00000 fffff880`00e4c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0130a000 fffff880`01314000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0139a000 fffff880`013d4000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01593000 fffff880`015dd000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02ff4000 fffff800`0303d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`040f4000 fffff880`040ff000   hamachi  hamachi.sys  Thu Feb 19 05:36:41 2009 (499D3639)
fffff880`05179000 fffff880`0519d000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05ea7000 fffff880`05ec0000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`061f5000 fffff880`061fd080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0600c000 fffff880`0601a000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02b15000 fffff880`02bdd000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f5000 fffff880`015fe000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0410a000 fffff880`04119000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05f0f000 fffff880`05f1d000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbd000 fffff800`00bc7000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0412a000 fffff880`0416d000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`0126c000 fffff880`01286000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01568000 fffff880`01593000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05ea1000 fffff880`05ea6200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05efa000 fffff880`05f0f000   LHidFilt LHidFilt.Sys Tue Aug 24 13:21:36 2010 (4C73FFA0)
fffff880`02ae8000 fffff880`02afd000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05f2b000 fffff880`05f4e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`05eea000 fffff880`05efa000   LUsbFilt LUsbFilt.Sys Tue Aug 24 13:21:47 2010 (4C73FFAB)
fffff880`00c19000 fffff880`00c26000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`05f1d000 fffff880`05f2b000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04119000 fffff880`04128000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05ec0000 fffff880`05ecd000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00f9b000 fffff880`00fb5000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`05f4e000 fffff880`05f66000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05f66000 fffff880`05f93000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`05f93000 fffff880`05fe1000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`05e00000 fffff880`05e23000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`019a7000 fffff880`019b2000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00eb4000 fffff880`00ebe000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0120e000 fffff880`0126c000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c8c000 fffff880`02c97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01400000 fffff880`01412000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01416000 fffff880`01508000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04825000 fffff880`04831000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0406f000 fffff880`0409e000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04000000 fffff880`04015000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02dd3000 fffff880`02de2000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d5f000 fffff880`02da4000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01508000 fffff880`01568000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019b2000 fffff880`019c3000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a18000 fffff800`02ff4000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01030000 fffff880`011d3000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01914000 fffff880`0191d000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02dad000 fffff880`02dd3000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00efe000 fffff880`00f13000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ebe000 fffff880`00ef1000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f84000 fffff880`00f8b000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00f8b000 fffff880`00f9b000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`012f9000 fffff880`0130a000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06c16000 fffff880`06cbc000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05e42000 fffff880`05e7f000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c26000 fffff880`00c3a000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03fba000 fffff880`03fde000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0409e000 fffff880`040b9000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`040b9000 fffff880`040da000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`040da000 fffff880`040f4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`040ff000 fffff880`0410a000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0198c000 fffff880`01995000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01995000 fffff880`0199e000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0199e000 fffff880`019a7000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01360000 fffff880`0139a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02afd000 fffff880`02b15000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0519d000 fffff880`051db000   Rt64win7 Rt64win7.sys Thu Jul 30 07:58:43 2009 (4A718AF3)
fffff880`06f9f000 fffff880`06fa5000   RTCore64 RTCore64.sys Wed May 25 02:39:12 2005 (42941D90)
fffff880`06cbc000 fffff880`06cc7000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04800000 fffff880`0480c000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02de2000 fffff880`02dff000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015ed000 fffff880`015f5000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06e92000 fffff880`06f28000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06d06000 fffff880`06d6d000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06cc7000 fffff880`06cf4000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04128000 fffff880`04129480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06cf4000 fffff880`06d06000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019e1000 fffff880`019ee000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019c3000 fffff880`019e1000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00590000 fffff960`0059a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`011d3000 fffff880`011f9000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04181000 fffff880`04193000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05ecd000 fffff880`05eea000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`061fe000 fffff880`061fff00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`051e6000 fffff880`051f7000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04193000 fffff880`041ed000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`051db000 fffff880`051e6000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`03e00000 fffff880`03e56000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00ef1000 fffff880`00efe000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01949000 fffff880`01957000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`06020000 fffff880`061bf000   viahduaa viahduaa.sys Thu Sep 17 07:04:15 2009 (4AB217AF)
fffff880`01957000 fffff880`0197c000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015dd000 fffff880`015ed000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f13000 fffff880`00f28000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f28000 fffff880`00f84000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01314000 fffff880`01360000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0197c000 fffff880`0198c000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d58000 fffff880`00dfc000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00c00000 fffff880`00c0f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02da4000 fffff880`02dad000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000e0000 fffff960`003f0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`0480c000 fffff880`04815000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00eab000 fffff880`00eb4000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`06f2e000 fffff880`06f9f000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06f28000 fffff880`06f2e000   RTCore64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018b4000 fffff880`018c2000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018c2000 fffff880`018ce000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018ce000 fffff880`018d7000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018d7000 fffff880`018ea000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Krismax · 24 Jan 2011

After last BSOD till now there is no new BSOD and i updated riva tuner driver just after i read your first post and the riva tuner driver is now dated as May 2010.Last night i ran memtest all night long with no errors,i attached the snapshot of the test.

CarlTR6 · 24 Jan 2011

Good news about the RAM. That means your RAM is probably OK. I say "probably" because Memtest is not 100% accurate, as is the case with most hardware tests. Glad to hear there has been no new crashes. Keep us updated.

Krismax · 25 Jan 2011

Unfortunately a new BSOD appeared.

CarlTR6 · 25 Jan 2011

Bugcheck D1, DRIVER_IRQL_NOT_LESS_OR_EQUAL. Usual cause is a device driver.

RTCore64.sys is shown as an unloaded module in the dump. This means it was unloaded from memory. I cannot determine the date. Do a search of your C: drive with Windows Explorer for RTCore64.sys. Let me know what the date of the file is. If it is dated prior to 13 July 2009, rename all instances of it from .sys to .old. If it is dated May 2010, it should be good. However, Riva Tuner is known problem with Win 7.

Try enabling Driver Verifier close following the instructions in this tutorial: Driver Verifier - Enable and Disable. If Driver Verifier finds a faulty driver, it will trigger a BSOD. Upload any all Verifier enabled dumps.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a5f000 PsLoadedModuleList = 0xfffff800`02c9ce50
Debug session time: Tue Jan 25 14:56:16.252 2011 (GMT-5)
System Uptime: 0 days 3:03:49.049
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffffffffffff86, 2, 0, fffff88003f46f8e}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Xdpc_Worker+1de )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: ffffffffffffff86, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88003f46f8e, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d070e0
 ffffffffffffff86 

CURRENT_IRQL:  2

FAULTING_IP: 
USBPORT!USBPORT_Xdpc_Worker+1de
fffff880`03f46f8e 488b6c2438      mov     rbp,qword ptr [rsp+38h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  javaw.exe

TRAP_FRAME:  fffff880009b0d40 -- (.trap 0xfffff880009b0d40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000003 rbx=0000000000000000 rcx=fffffa8004cce118
rdx=000000004f444602 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88003f46f8e rsp=fffff880009b0ed0 rbp=0000000000000000
 r8=000000004f444600  r9=0000000000000000 r10=00000000ffffffff
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
USBPORT!USBPORT_Xdpc_Worker+0x1de:
fffff880`03f46f8e 488b6c2438      mov     rbp,qword ptr [rsp+38h] ss:fffff880`009b0f08=fffffa8004ccdd20
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002aceca9 to fffff80002acf740

STACK_TEXT:  
fffff880`009b0bf8 fffff800`02aceca9 : 00000000`0000000a ffffffff`ffffff86 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`009b0c00 fffff800`02acd920 : fffff880`009b0da0 fffff880`02dd3180 fffffa80`00000001 fffffa80`0474ce10 : nt!KiBugCheckDispatch+0x69
fffff880`009b0d40 fffff880`03f46f8e : fffffa80`04ccd050 00000000`00000000 fffffa80`04ccdd02 fffffa80`04ccdd20 : nt!KiPageFault+0x260
fffff880`009b0ed0 fffff800`02adabfc : fffff880`02dd3180 fffffa80`04ccdd20 fffffa80`04ccdd38 00000000`00000000 : USBPORT!USBPORT_Xdpc_Worker+0x1de
fffff880`009b0f00 fffff800`02ad5865 : 000004d8`00000000 fffffa80`03965b60 00000000`00000000 fffff880`03f46db0 : nt!KiRetireDpcList+0x1bc
fffff880`009b0fb0 fffff800`02ad567c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxRetireDpcList+0x5
fffff880`0a1dabe0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue


STACK_COMMAND:  kb

FOLLOWUP_IP: 
USBPORT!USBPORT_Xdpc_Worker+1de
fffff880`03f46f8e 488b6c2438      mov     rbp,qword ptr [rsp+38h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  USBPORT!USBPORT_Xdpc_Worker+1de

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: USBPORT

IMAGE_NAME:  USBPORT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcc07

FAILURE_BUCKET_ID:  X64_0xD1_USBPORT!USBPORT_Xdpc_Worker+1de

BUCKET_ID:  X64_0xD1_USBPORT!USBPORT_Xdpc_Worker+1de

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`00f30000 fffff880`00f87000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02b2b000 fffff880`02bb5000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03fd0000 fffff880`03fe6000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`041be000 fffff880`041d2000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`03c37000 fffff880`03c4c000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00c00000 fffff880`00c0b000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00dc4000 fffff880`00dcd000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dcd000 fffff880`00df7000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`0406f000 fffff880`0408f000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`046f6000 fffff880`04ff2000   atikmdag atikmdag.sys Wed Jan 12 22:59:28 2011 (4D2E78A0)
fffff880`03e4e000 fffff880`03e9c000   atikmpag atikmpag.sys Wed Jan 12 22:20:37 2011 (4D2E6F85)
fffff960`008e0000 fffff960`00941000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`02a5a000 fffff880`02a61000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03c00000 fffff880`03c11000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`045a4000 fffff880`045c2000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007b0000 fffff960`007d7000   cdd      cdd.dll      Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`02a27000 fffff880`02a51000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cea000 fffff880`00daa000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`011c7000 fffff880`011f7000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c8c000 fffff880`00cea000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0127f000 fffff880`012f2000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03fc0000 fffff880`03fd0000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0449e000 fffff880`044a7000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`063d8000 fffff880`063e6000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03d5c000 fffff880`03ddf000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03ddf000 fffff880`03dfd000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03d4d000 fffff880`03d5c000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`015cf000 fffff880`015e5000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05f15000 fffff880`05f37000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`063f2000 fffff880`063fb000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`063e6000 fffff880`063f2000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06200000 fffff880`06213000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06213000 fffff880`0621f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04600000 fffff880`046f4000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`03e9c000 fffff880`03ee2000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`05e00000 fffff880`05ed8000   eamonm   eamonm.sys   Fri Aug 13 08:38:55 2010 (4C653CDF)
fffff880`02a61000 fffff880`02a86000   ehdrv    ehdrv.sys    Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`044a7000 fffff880`044c8000   epfwwfpr epfwwfpr.sys Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`00c57000 fffff880`00c6b000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00c0b000 fffff880`00c57000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01303000 fffff880`0130d000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`014a9000 fffff880`014e3000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01575000 fffff880`015bf000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a16000 fffff800`02a5f000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04145000 fffff880`04150000   hamachi  hamachi.sys  Thu Feb 19 05:36:41 2009 (499D3639)
fffff880`03ee2000 fffff880`03f06000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05f3d000 fffff880`05f56000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0622d000 fffff880`06235080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0621f000 fffff880`0622d000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`044dc000 fffff880`045a4000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`014a0000 fffff880`014a9000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0415b000 fffff880`0416a000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05fa5000 fffff880`05fb3000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bd1000 fffff800`00bdb000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0417b000 fffff880`041be000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01265000 fffff880`0127f000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0154a000 fffff880`01575000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05f37000 fffff880`05f3c200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05f90000 fffff880`05fa5000   LHidFilt LHidFilt.Sys Tue Aug 24 13:21:36 2010 (4C73FFA0)
fffff880`05fe4000 fffff880`05ff9000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05fc1000 fffff880`05fe4000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`05f80000 fffff880`05f90000   LUsbFilt LUsbFilt.Sys Tue Aug 24 13:21:47 2010 (4C73FFAB)
fffff880`00c6b000 fffff880`00c78000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`05fb3000 fffff880`05fc1000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0416a000 fffff880`04179000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05f56000 fffff880`05f63000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00daa000 fffff880`00dc4000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`045c2000 fffff880`045da000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`04400000 fffff880`0442d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0442d000 fffff880`0447b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0447b000 fffff880`0449e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02ae4000 fffff880`02aef000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f90000 fffff880`00f9a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01207000 fffff880`01265000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03d42000 fffff880`03d4d000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0148e000 fffff880`014a0000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0130d000 fffff880`013ff000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e24000 fffff880`03e30000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`040c0000 fffff880`040ef000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0405a000 fffff880`0406f000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03c8a000 fffff880`03c99000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02bb5000 fffff880`02bfa000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`014ea000 fffff880`0154a000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02aef000 fffff880`02b00000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03d36000 fffff880`03d42000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a5f000 fffff800`0303b000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01024000 fffff880`011c7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02a51000 fffff880`02a5a000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`03c64000 fffff880`03c8a000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fda000 fffff880`00fef000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f9a000 fffff880`00fcd000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e71000 fffff880`00e78000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fef000 fffff880`00fff000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`012f2000 fffff880`01303000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07215000 fffff880`072bb000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05ed8000 fffff880`05f15000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c78000 fffff880`00c8c000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03e00000 fffff880`03e24000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`040ef000 fffff880`0410a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0410a000 fffff880`0412b000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0412b000 fffff880`04145000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03ce5000 fffff880`03d36000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04150000 fffff880`0415b000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02ac9000 fffff880`02ad2000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02ad2000 fffff880`02adb000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02adb000 fffff880`02ae4000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01454000 fffff880`0148e000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`041e4000 fffff880`041fc000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03f06000 fffff880`03f44000   Rt64win7 Rt64win7.sys Thu Jul 30 07:58:43 2009 (4A718AF3)
fffff880`072bb000 fffff880`072c6000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03fab000 fffff880`03fb7000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03c99000 fffff880`03cb6000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0144c000 fffff880`01454000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`076d9000 fffff880`0776f000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07305000 fffff880`0736c000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`072c6000 fffff880`072f3000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04179000 fffff880`0417a480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01600000 fffff880`017fd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`072f3000 fffff880`07305000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02b1e000 fffff880`02b2b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02b00000 fffff880`02b1e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03cd1000 fffff880`03ce5000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00490000 fffff960`0049a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03c11000 fffff880`03c37000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`041d2000 fffff880`041e4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05f63000 fffff880`05f80000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`06236000 fffff880`06237f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03f9a000 fffff880`03fab000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04000000 fffff880`0405a000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04ff2000 fffff880`04ffd000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`03f44000 fffff880`03f9a000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00fcd000 fffff880`00fda000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02a86000 fffff880`02a94000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`06239000 fffff880`063d8000   viahduaa viahduaa.sys Thu Sep 17 07:04:15 2009 (4AB217AF)
fffff880`02a94000 fffff880`02ab9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015bf000 fffff880`015cf000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e00000 fffff880`00e15000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e15000 fffff880`00e71000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01400000 fffff880`0144c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03cb6000 fffff880`03cd1000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02ab9000 fffff880`02ac9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e7d000 fffff880`00f21000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f21000 fffff880`00f30000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02a00000 fffff880`02a09000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`03fb7000 fffff880`03fc0000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f87000 fffff880`00f90000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0408f000 fffff880`040b0000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07775000 fffff880`077e6000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0776f000 fffff880`07775000   RTCore64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015e5000 fffff880`015f3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`015f3000 fffff880`015ff000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`011f7000 fffff880`01200000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01000000 fffff880`01013000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000