another bluescreen please help :(

brodiewf · 18 Feb 2011

this happened when i was using my anti-virus program please assist

- windows 7 professional x64
- windows vista 32 bit, however the computer is made for 64 bit
MSI gx 700
laptop

- hardware is not even a year old yet
- installed windows 7 about 6 months ago

zigzag3143 · 18 Feb 2011

brodiewf said:

this happened when i was using my anti-virus program please assist

- windows 7 professional x64
- windows vista 32 bit, however the computer is made for 64 bit
MSI gx 700
laptop

- hardware is not even a year old yet
- installed windows 7 about 6 months ago

Old drivers. these are from as far back as 2005. They need updating

Code:

tosrfcom.sys    8/1/2005 2:45:42    0x42edd326    fffff880`02dc3000    fffff880`02ddbe80        0x00018e80                    
tosporte.sys    10/11/2006 2:31:08    0x452c9dbc    fffff880`04957000    fffff880`04969000        0x00012000                    
agrsm64.sys    11/28/2006 15:46:57    0x456ca041    fffff880`068a1000    fffff880`069d4000        0x00133000                    
SandBox64.sys    3/12/2008 4:31:32    0x47d7a2f4    fffff880`01950000    fffff880`019bb380        0x0006b380                    
o2sdx64.sys    6/10/2008 6:26:44    0x484e64f4    fffff880`03c3e000    fffff880`03c49300        0x0000b300                    
adfs.SYS    6/26/2008 15:52:37    0x48640195    fffff880`06e8d000    fffff880`06ea5000        0x00018000                    
o2mdx64.sys    7/14/2008 22:21:08    0x487c17a4    fffff880`03c4a000    fffff880`03c57c00        0x0000dc00                    
spldr.sys    5/11/2009 11:56:27    0x4a0858bb    fffff880`015ca000    fffff880`015d2000        0x00008000                    
GEARAspiWDM.sys    5/18/2009 7:17:04    0x4a1151c0    fffff880`02c4c000    fffff880`02c59000        0x0000d000

How To Find Drivers:

- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Though blamed on win32.sys it is a memory exception probably again caused by one of the above drivers. Update the drivers and run memtest. If the problems continue let us know

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot. Test the sticks individually, and if you find a good one, test it in all slots.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\021811-24492-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`0405c000 PsLoadedModuleList = 0xfffff800`04299e50
Debug session time: Fri Feb 18 21:05:40.540 2011 (GMT-5)
System Uptime: 0 days 12:35:07.021
Loading Kernel Symbols
...............................................................
................................................................
......................................
Loading User Symbols
Loading unloaded module list
..................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff960000c5314, fffff8800b120920, 0}

Probably caused by : win32k.sys ( win32k!SURFACE::bDeleteSurface+264 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960000c5314, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800b120920, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!SURFACE::bDeleteSurface+264
fffff960`000c5314 396908          cmp     dword ptr [rcx+8],ebp

CONTEXT:  fffff8800b120920 -- (.cxr 0xfffff8800b120920)
rax=fffff900c0200000 rbx=518ae30051a5d800 rcx=0000000000000000
rdx=0000000000000000 rsi=fffff900c2b4e000 rdi=0000000000000000
rip=fffff960000c5314 rsp=fffff8800b1212f0 rbp=0000000000000001
 r8=0000000000000001  r9=0000000000000000 r10=5195060051800000
r11=fffff8800b1212d0 r12=0000000000000000 r13=000000000000518c
r14=0000000000000000 r15=5181d7005186ef00
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
win32k!SURFACE::bDeleteSurface+0x264:
fffff960`000c5314 396908          cmp     dword ptr [rcx+8],ebp ds:002b:00000000`00000008=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff960000c5314

STACK_TEXT:  
fffff880`0b1212f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!SURFACE::bDeleteSurface+0x264


FOLLOWUP_IP: 
win32k!SURFACE::bDeleteSurface+264
fffff960`000c5314 396908          cmp     dword ptr [rcx+8],ebp

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  win32k!SURFACE::bDeleteSurface+264

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d23ecb0

STACK_COMMAND:  .cxr 0xfffff8800b120920 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_win32k!SURFACE::bDeleteSurface+264

BUCKET_ID:  X64_0x3B_win32k!SURFACE::bDeleteSurface+264

Followup: MachineOwner
---------

1: kd> lmvm win32k
start             end                 module name
fffff960`00000000 fffff960`00310000   win32k     (pdb symbols)          c:\symbols\win32k.pdb\37B842136414455F88E0369BAAB0B7962\win32k.pdb
    Loaded symbol image file: win32k.sys
    Mapped memory image file: C:\Symbols\win32k.sys\4D23ECB0310000\win32k.sys
    Image path: \SystemRoot\System32\win32k.sys
    Image name: win32k.sys
    Timestamp:        Tue Jan 04 22:59:44 2011 (4D23ECB0)
    CheckSum:         00309E24
    ImageSize:        00310000
    File version:     6.1.7600.16732
    Product version:  6.1.7600.16732
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     win32k.sys
    OriginalFilename: win32k.sys
    ProductVersion:   6.1.7600.16732
    FileVersion:      6.1.7600.16732 (win7_gdr.110104-1502)
    FileDescription:  Multi-User Win32 Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

DeanP · 18 Feb 2011

Hello,
Start by updating these drivers.

adfs.SYS Fri Jun 27 08:52:37 2008
Uninstall ALL Adobe Software and then install latest version.

agrsm64.sys Wed Nov 29 09:46:57 2006
Agere Systems Soft Modem

SandBox64.sys Wed Mar 12 22:31:32 2008
SRS Labs Audio Sandbox software

tosporte.sys Wed Oct 11 20:31:08 2006
Toshiba Bluetooth Port Emulation Driver

tosrfcom.sys Mon Aug 01 19:45:42 2005
See Above

Uninstall RivaTuner/EVGA Precision/MSI Afterburner is they are a known cause of BSOD.

Regards...

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff960000c5314, fffff8800b120920, 0}

Probably caused by : win32k.sys ( win32k!SURFACE::bDeleteSurface+264 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960000c5314, Address of the instruction which caused the bugcheck
Arg3: fffff8800b120920, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!SURFACE::bDeleteSurface+264
fffff960`000c5314 396908          cmp     dword ptr [rcx+8],ebp

CONTEXT:  fffff8800b120920 -- (.cxr 0xfffff8800b120920)
rax=fffff900c0200000 rbx=518ae30051a5d800 rcx=0000000000000000
rdx=0000000000000000 rsi=fffff900c2b4e000 rdi=0000000000000000
rip=fffff960000c5314 rsp=fffff8800b1212f0 rbp=0000000000000001
 r8=0000000000000001  r9=0000000000000000 r10=5195060051800000
r11=fffff8800b1212d0 r12=0000000000000000 r13=000000000000518c
r14=0000000000000000 r15=5181d7005186ef00
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
win32k!SURFACE::bDeleteSurface+0x264:
fffff960`000c5314 396908          cmp     dword ptr [rcx+8],ebp ds:002b:00000000`00000008=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff960000c5314

STACK_TEXT:  
fffff880`0b1212f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!SURFACE::bDeleteSurface+0x264


FOLLOWUP_IP: 
win32k!SURFACE::bDeleteSurface+264
fffff960`000c5314 396908          cmp     dword ptr [rcx+8],ebp

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  win32k!SURFACE::bDeleteSurface+264

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d23ecb0

STACK_COMMAND:  .cxr 0xfffff8800b120920 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_win32k!SURFACE::bDeleteSurface+264

BUCKET_ID:  X64_0x3B_win32k!SURFACE::bDeleteSurface+264

Followup: MachineOwner
---------

1: kd> lmtsmn
start             end                 module name
fffff880`03c00000 fffff880`03c3e000   1394ohci 1394ohci.sys Tue Jul 14 12:07:12 2009 (4A5BCC30)
fffff880`00f93000 fffff880`00fea000   ACPI     ACPI.sys     Tue Jul 14 11:19:34 2009 (4A5BC106)
fffff880`06e8d000 fffff880`06ea5000   adfs     adfs.SYS     Fri Jun 27 08:52:37 2008 (48640195)
fffff880`02c71000 fffff880`02cfb000   afd      afd.sys      Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`02d6f000 fffff880`02d85000   AgileVpn AgileVpn.sys Tue Jul 14 12:10:24 2009 (4A5BCCF0)
fffff880`068a1000 fffff880`069d4000   agrsm64  agrsm64.sys  Wed Nov 29 09:46:57 2006 (456CA041)
fffff880`00deb000 fffff880`00df6000   amdxata  amdxata.sys  Wed May 20 05:56:59 2009 (4A12F2EB)
fffff880`07a71000 fffff880`07a7c000   asyncmac asyncmac.sys Tue Jul 14 12:10:13 2009 (4A5BCCE5)
fffff880`00dad000 fffff880`00db6000   atapi    atapi.sys    Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00db6000 fffff880`00de0000   ataport  ataport.SYS  Tue Jul 14 11:19:52 2009 (4A5BC118)
fffff960`00850000 fffff960`008b1000   ATMFD    ATMFD.DLL    Fri Jan 07 18:49:20 2011 (4D26A960)
fffff880`00d8c000 fffff880`00d98000   BATTC    BATTC.SYS    Tue Jul 14 11:31:01 2009 (4A5BC3B5)
fffff880`019c5000 fffff880`019cc000   Beep     Beep.SYS     Tue Jul 14 12:00:13 2009 (4A5BCA8D)
fffff880`03b4e000 fffff880`03b5f000   blbdrive blbdrive.sys Tue Jul 14 11:35:59 2009 (4A5BC4DF)
fffff880`03998000 fffff880`039b6000   bowser   bowser.sys   Tue Jul 14 11:23:50 2009 (4A5BC206)
fffff960`006f0000 fffff960`00717000   cdd      cdd.dll      Wed Jan 26 19:31:34 2011 (4D3FBFC6)
fffff880`01926000 fffff880`01950000   cdrom    cdrom.sys    Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`00ed3000 fffff880`00f93000   CI       CI.dll       Tue Jul 14 13:32:13 2009 (4A5BE01D)
fffff880`048d9000 fffff880`048eb000   circlass circlass.sys Tue Jul 14 12:06:34 2009 (4A5BCC0A)
fffff880`018be000 fffff880`018ee000   CLASSPNP CLASSPNP.SYS Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00ce6000 fffff880`00d44000   CLFS     CLFS.SYS     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`03c58000 fffff880`03c5c500   CmBatt   CmBatt.sys   Tue Jul 14 11:31:03 2009 (4A5BC3B7)
fffff880`0118a000 fffff880`011fd000   cng      cng.sys      Tue Jul 14 11:49:40 2009 (4A5BC814)
fffff880`00ec0000 fffff880`00ec9000   compbatt compbatt.sys Tue Jul 14 11:31:02 2009 (4A5BC3B6)
fffff880`02c59000 fffff880`02c69000   CompositeBus CompositeBus.sys Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`0686d000 fffff880`0687b000   crashdmp crashdmp.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`03aad000 fffff880`03b30000   csc      csc.sys      Tue Jul 14 11:24:26 2009 (4A5BC22A)
fffff880`03b30000 fffff880`03b4e000   dfsc     dfsc.sys     Tue Jul 14 11:23:44 2009 (4A5BC200)
fffff880`03a9e000 fffff880`03aad000   discache discache.sys Tue Jul 14 11:37:18 2009 (4A5BC52E)
fffff880`018a8000 fffff880`018be000   disk     disk.sys     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`049bb000 fffff880`049dd000   drmk     drmk.sys     Tue Jul 14 13:01:25 2009 (4A5BD8E5)
fffff880`0687b000 fffff880`06887000   dump_dumpata dump_dumpata.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`069e5000 fffff880`069f8000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:21:51 2009 (4A5BC18F)
fffff880`06887000 fffff880`06892000   dump_msahci dump_msahci.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`06892000 fffff880`0689e000   Dxapi    Dxapi.sys    Tue Jul 14 11:38:28 2009 (4A5BC574)
fffff880`10aa6000 fffff880`10b9a000   dxgkrnl  dxgkrnl.sys  Wed Jan 26 17:22:56 2011 (4D3FA1A0)
fffff880`10b9a000 fffff880`10be0000   dxgmms1  dxgmms1.sys  Wed Jan 26 17:22:12 2011 (4D3FA174)
fffff880`07a97000 fffff880`07acd000   fastfat  fastfat.SYS  Tue Jul 14 11:23:28 2009 (4A5BC1F0)
fffff880`01103000 fffff880`01117000   fileinfo fileinfo.sys Tue Jul 14 11:34:25 2009 (4A5BC481)
fffff880`010b7000 fffff880`01103000   fltmgr   fltmgr.sys   Tue Jul 14 11:19:59 2009 (4A5BC11F)
fffff880`013d1000 fffff880`013db000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 11:19:45 2009 (4A5BC111)
fffff880`0186e000 fffff880`018a8000   fvevol   fvevol.sys   Sat Sep 26 14:34:26 2009 (4ABD7DB2)
fffff880`01000000 fffff880`0104a000   fwpkclnt fwpkclnt.sys Tue Jul 14 11:21:08 2009 (4A5BC164)
fffff880`02c4c000 fffff880`02c59000   GEARAspiWDM GEARAspiWDM.sys Tue May 19 00:17:04 2009 (4A1151C0)
fffff800`04013000 fffff800`0405c000   hal      hal.dll      Tue Jul 14 13:27:36 2009 (4A5BDF08)
fffff880`03bcb000 fffff880`03bef000   HDAudBus HDAudBus.sys Tue Jul 14 12:06:13 2009 (4A5BCBF5)
fffff880`06830000 fffff880`06849000   HIDCLASS HIDCLASS.SYS Tue Jul 14 12:06:21 2009 (4A5BCBFD)
fffff880`0681f000 fffff880`06830000   hidir    hidir.sys    Tue Jul 14 12:06:23 2009 (4A5BCBFF)
fffff880`06849000 fffff880`06851080   HIDPARSE HIDPARSE.SYS Tue Jul 14 12:06:17 2009 (4A5BCBF9)
fffff880`03800000 fffff880`038c8000   HTTP     HTTP.sys     Tue Jul 14 11:22:16 2009 (4A5BC1A8)
fffff880`015e4000 fffff880`015ed000   hwpolicy hwpolicy.sys Tue Jul 14 11:19:22 2009 (4A5BC0FA)
fffff880`02c2e000 fffff880`02c4c000   i8042prt i8042prt.sys Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00ec9000 fffff880`00ed1000   intelide intelide.sys Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`03b5f000 fffff880`03b75000   intelppm intelppm.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD)
fffff880`0fe00000 fffff880`0fe0f000   kbdclass kbdclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`06852000 fffff880`06860000   kbdhid   kbdhid.sys   Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff800`00bbe000 fffff800`00bc8000   kdcom    kdcom.dll    Tue Jul 14 13:31:07 2009 (4A5BDFDB)
fffff880`07a3f000 fffff880`07a46000   KernExplorer64 KernExplorer64.sys Fri Feb 04 03:28:26 2011 (4D4ABB8A)
fffff880`04896000 fffff880`048d9000   ks       ks.sys       Thu Mar 04 17:32:25 2010 (4B8F37D9)
fffff880`013a6000 fffff880`013c0000   ksecdd   ksecdd.sys   Tue Jul 14 11:20:54 2009 (4A5BC156)
fffff880`0158f000 fffff880`015ba000   ksecpkg  ksecpkg.sys  Fri Dec 11 19:03:32 2009 (4B21E0B4)
fffff880`067f0000 fffff880`067f5200   ksthunk  ksthunk.sys  Tue Jul 14 12:00:19 2009 (4A5BCA93)
fffff880`01117000 fffff880`0112c000   Lbd      Lbd.sys      Tue May 25 19:45:36 2010 (4BFB8020)
fffff880`03905000 fffff880`0391a000   lltdio   lltdio.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`018ee000 fffff880`01911000   luafv    luafv.sys    Tue Jul 14 11:26:13 2009 (4A5BC295)
fffff880`00c8e000 fffff880`00cd2000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 13:29:10 2009 (4A5BDF66)
fffff880`069d6000 fffff880`069e5000   modem    modem.sys    Tue Jul 14 12:10:48 2009 (4A5BCD08)
fffff880`049dd000 fffff880`049eb000   monitor  monitor.sys  Tue Jul 14 11:38:52 2009 (4A5BC58C)
fffff880`03bef000 fffff880`03bfe000   mouclass mouclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`06860000 fffff880`0686d000   mouhid   mouhid.sys   Tue Jul 14 12:00:20 2009 (4A5BCA94)
fffff880`00c6c000 fffff880`00c86000   mountmgr mountmgr.sys Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`039b6000 fffff880`039ce000   mpsdrv   mpsdrv.sys   Tue Jul 14 12:08:25 2009 (4A5BCC79)
fffff880`039ce000 fffff880`039fb000   mrxsmb   mrxsmb.sys   Sat Feb 27 20:52:19 2010 (4B88CF33)
fffff880`06e1c000 fffff880`06e6a000   mrxsmb10 mrxsmb10.sys Sat Feb 27 20:52:28 2010 (4B88CF3C)
fffff880`06e6a000 fffff880`06e8d000   mrxsmb20 mrxsmb20.sys Sat Feb 27 20:52:26 2010 (4B88CF3A)
fffff880`00de0000 fffff880`00deb000   msahci   msahci.sys   Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`01850000 fffff880`0185b000   Msfs     Msfs.SYS     Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00ff3000 fffff880`00ffd000   msisadrv msisadrv.sys Tue Jul 14 11:19:26 2009 (4A5BC0FE)
fffff880`0112c000 fffff880`0118a000   msrpc    msrpc.sys    Tue Jul 14 11:21:32 2009 (4A5BC17C)
fffff880`03a93000 fffff880`03a9e000   mssmbios mssmbios.sys Tue Jul 14 11:31:10 2009 (4A5BC3BE)
fffff880`015d2000 fffff880`015e4000   mup      mup.sys      Tue Jul 14 11:23:45 2009 (4A5BC201)
fffff880`0143d000 fffff880`0152f000   ndis     ndis.sys     Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`015ed000 fffff880`015f9000   ndistapi ndistapi.sys Tue Jul 14 12:10:00 2009 (4A5BCCD8)
fffff880`0396d000 fffff880`03980000   ndisuio  ndisuio.sys  Tue Jul 14 12:09:25 2009 (4A5BCCB5)
fffff880`04804000 fffff880`04833000   ndiswan  ndiswan.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`04969000 fffff880`0497e000   NDProxy  NDProxy.SYS  Tue Jul 14 12:10:05 2009 (4A5BCCDD)
fffff880`02db4000 fffff880`02dc3000   netbios  netbios.sys  Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff880`02cfb000 fffff880`02d40000   netbt    netbt.sys    Tue Jul 14 11:21:28 2009 (4A5BC178)
fffff880`0152f000 fffff880`0158f000   NETIO    NETIO.SYS    Tue Jul 14 11:21:46 2009 (4A5BC18A)
fffff880`03c64000 fffff880`0439f000   NETwLv64 NETwLv64.sys Fri Oct 08 01:11:47 2010 (4CADB903)
fffff880`0185b000 fffff880`0186c000   Npfs     Npfs.SYS     Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`03a87000 fffff880`03a93000   nsiproxy nsiproxy.sys Tue Jul 14 11:21:02 2009 (4A5BC15E)
fffff800`0405c000 fffff800`04639000   nt       ntkrnlmp.exe Wed Oct 27 15:43:09 2010 (4CC791BD)
fffff880`01203000 fffff880`013a6000   Ntfs     Ntfs.sys     Tue Jul 14 11:20:47 2009 (4A5BC14F)
fffff880`019bc000 fffff880`019c5000   Null     Null.SYS     Tue Jul 14 11:19:37 2009 (4A5BC109)
fffff880`10aa4000 fffff880`10aa5180   nvBridge nvBridge.kmd Sat Jul 10 09:07:54 2010 (4C378FAA)
fffff880`0fe12000 fffff880`10aa3e00   nvlddmkm nvlddmkm.sys Sat Jul 10 09:15:58 2010 (4C37918E)
fffff880`0391a000 fffff880`0396d000   nwifi    nwifi.sys    Tue Jul 14 12:07:23 2009 (4A5BCC3B)
fffff880`03c4a000 fffff880`03c57c00   o2mdx64  o2mdx64.sys  Tue Jul 15 15:21:08 2008 (487C17A4)
fffff880`03c3e000 fffff880`03c49300   o2sdx64  o2sdx64.sys  Tue Jun 10 23:26:44 2008 (484E64F4)
fffff880`02d49000 fffff880`02d6f000   pacer    pacer.sys    Tue Jul 14 12:09:41 2009 (4A5BCCC5)
fffff880`00d77000 fffff880`00d8c000   partmgr  partmgr.sys  Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00d44000 fffff880`00d77000   pci      pci.sys      Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`013c0000 fffff880`013d1000   pcw      pcw.sys      Tue Jul 14 11:19:27 2009 (4A5BC0FF)
fffff880`06ea5000 fffff880`06f4b000   peauth   peauth.sys   Tue Jul 14 13:01:19 2009 (4A5BD8DF)
fffff880`0497e000 fffff880`049bb000   portcls  portcls.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00cd2000 fffff880`00ce6000   PSHED    PSHED.dll    Tue Jul 14 13:32:23 2009 (4A5BE027)
fffff880`02d85000 fffff880`02da9000   rasl2tp  rasl2tp.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`04833000 fffff880`0484e000   raspppoe raspppoe.sys Tue Jul 14 12:10:17 2009 (4A5BCCE9)
fffff880`0484e000 fffff880`0486f000   raspptp  raspptp.sys  Tue Jul 14 12:10:18 2009 (4A5BCCEA)
fffff880`0486f000 fffff880`04889000   rassstp  rassstp.sys  Tue Jul 14 12:10:25 2009 (4A5BCCF1)
fffff880`03a36000 fffff880`03a87000   rdbss    rdbss.sys    Tue Jul 14 11:24:09 2009 (4A5BC219)
fffff880`04889000 fffff880`04894000   rdpbus   rdpbus.sys   Tue Jul 14 12:17:46 2009 (4A5BCEAA)
fffff880`01835000 fffff880`0183e000   RDPCDD   RDPCDD.sys   Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`07b6a000 fffff880`07b98000   rdpdr    rdpdr.sys    Tue Jul 14 12:18:02 2009 (4A5BCEBA)
fffff880`0183e000 fffff880`01847000   rdpencdd rdpencdd.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`01847000 fffff880`01850000   rdprefmp rdprefmp.sys Tue Jul 14 12:16:35 2009 (4A5BCE63)
fffff880`07bb2000 fffff880`07bea000   RDPWD    RDPWD.SYS    Tue Jul 14 12:16:47 2009 (4A5BCE6F)
fffff880`01400000 fffff880`0143a000   rdyboost rdyboost.sys Tue Jul 14 11:34:34 2009 (4A5BC48A)
fffff880`03980000 fffff880`03998000   rspndr   rspndr.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`0439f000 fffff880`043f6000   Rt64win7 Rt64win7.sys Mon Sep 20 19:38:09 2010 (4C970F61)
fffff880`06609000 fffff880`067efe80   RTKVHD64 RTKVHD64.sys Sat Sep 12 01:45:12 2009 (4AAA5468)
fffff880`01950000 fffff880`019bb380   SandBox64 SandBox64.sys Wed Mar 12 22:31:32 2008 (47D7A2F4)
fffff880`01096000 fffff880`010ae000   sbapifs  sbapifs.sys  Tue Jun 15 04:20:34 2010 (4C1656D2)
fffff880`02c14000 fffff880`02c2e000   SCDEmu   SCDEmu.SYS   Mon Nov 09 16:27:29 2009 (4AF78C21)
fffff880`03a00000 fffff880`03a2f000   SCSIPORT SCSIPORT.SYS Tue Jul 14 12:01:04 2009 (4A5BCAC0)
fffff880`06f4b000 fffff880`06f56000   secdrv   secdrv.SYS   Thu Sep 14 01:18:38 2006 (4508052E)
fffff880`015ca000 fffff880`015d2000   spldr    spldr.sys    Tue May 12 04:56:27 2009 (4A0858BB)
fffff880`07ace000 fffff880`07b64000   srv      srv.sys      Fri Aug 27 15:38:00 2010 (4C773318)
fffff880`06f95000 fffff880`06ffc000   srv2     srv2.sys     Fri Aug 27 15:37:46 2010 (4C77330A)
fffff880`06f56000 fffff880`06f83000   srvnet   srvnet.sys   Fri Aug 27 15:37:24 2010 (4C7732F4)
fffff880`04894000 fffff880`04895480   swenum   swenum.sys   Tue Jul 14 12:00:18 2009 (4A5BCA92)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jun 14 15:39:04 2010 (4C15A458)
fffff880`06f83000 fffff880`06f95000   tcpipreg tcpipreg.sys Tue Jul 14 12:09:49 2009 (4A5BCCCD)
fffff880`019e9000 fffff880`019f6000   TDI      TDI.SYS      Tue Jul 14 11:21:18 2009 (4A5BC16E)
fffff880`07b98000 fffff880`07ba3000   tdtcp    tdtcp.sys    Tue Jul 14 12:16:32 2009 (4A5BCE60)
fffff880`013db000 fffff880`013f9000   tdx      tdx.sys      Tue Jul 14 11:21:15 2009 (4A5BC16B)
fffff880`02c00000 fffff880`02c14000   termdd   termdd.sys   Tue Jul 14 12:16:36 2009 (4A5BCE64)
fffff880`04957000 fffff880`04969000   tosporte tosporte.sys Wed Oct 11 20:31:08 2006 (452C9DBC)
fffff880`02dc3000 fffff880`02ddbe80   tosrfcom tosrfcom.sys Mon Aug 01 19:45:42 2005 (42EDD326)
fffff960`00580000 fffff960`0058a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`07ba3000 fffff880`07bb2000   tssecsrv tssecsrv.sys Tue Jul 14 12:16:41 2009 (4A5BCE69)
fffff880`048eb000 fffff880`048fd000   umbus    umbus.sys    Tue Jul 14 12:06:56 2009 (4A5BCC20)
fffff880`06800000 fffff880`0681f000   usbcir   usbcir.sys   Tue Jul 14 12:06:36 2009 (4A5BCC0C)
fffff880`069d4000 fffff880`069d5f00   USBD     USBD.SYS     Tue Jul 14 12:06:23 2009 (4A5BCBFF)
fffff880`10bed000 fffff880`10bfe000   usbehci  usbehci.sys  Tue Jul 14 12:06:30 2009 (4A5BCC06)
fffff880`048fd000 fffff880`04957000   usbhub   usbhub.sys   Tue Jul 14 12:07:09 2009 (4A5BCC2D)
fffff880`03b75000 fffff880`03bcb000   USBPORT  USBPORT.SYS  Tue Jul 14 12:06:31 2009 (4A5BCC07)
fffff880`10be0000 fffff880`10bed000   usbuhci  usbuhci.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00eb3000 fffff880`00ec0000   vdrvroot vdrvroot.sys Tue Jul 14 12:01:31 2009 (4A5BCADB)
fffff880`019db000 fffff880`019e9000   vga      vga.sys      Tue Jul 14 11:38:47 2009 (4A5BC587)
fffff880`01800000 fffff880`01825000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:38:51 2009 (4A5BC58B)
fffff880`015ba000 fffff880`015ca000   vmstorfl vmstorfl.sys Tue Jul 14 11:42:54 2009 (4A5BC67E)
fffff880`00d98000 fffff880`00dad000   volmgr   volmgr.sys   Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Tue Jul 14 11:20:33 2009 (4A5BC141)
fffff880`0104a000 fffff880`01096000   volsnap  volsnap.sys  Tue Jul 14 11:20:08 2009 (4A5BC128)
fffff880`02ddc000 fffff880`02df7000   wanarp   wanarp.sys   Tue Jul 14 12:10:21 2009 (4A5BCCED)
fffff880`01825000 fffff880`01835000   watchdog watchdog.sys Tue Jul 14 11:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Tue Jul 14 11:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`02d40000 fffff880`02d49000   wfplwf   wfplwf.sys   Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff960`00000000 fffff960`00310000   win32k   win32k.sys   Wed Jan 05 16:59:44 2011 (4D23ECB0)
fffff880`043f6000 fffff880`043ff000   wmiacpi  wmiacpi.sys  Tue Jul 14 11:31:02 2009 (4A5BC3B6)
fffff880`00fea000 fffff880`00ff3000   WMILIB   WMILIB.SYS   Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`038e4000 fffff880`03905000   WudfPf   WudfPf.sys   Tue Jul 14 12:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`019cc000 fffff880`019db000   SBREdrv.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff880`07a38000 fffff880`07a3f000   KernExplorer
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff880`07a31000 fffff880`07a38000   KernExplorer
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff880`07a00000 fffff880`07a31000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07a31000 fffff880`07a4c000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`07a00000 fffff880`07a31000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07a31000 fffff880`07a4c000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`07a00000 fffff880`07a31000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07a31000 fffff880`07a4c000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`07a00000 fffff880`07a31000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07a7c000 fffff880`07a97000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`07a00000 fffff880`07a71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`07b64000 fffff880`07b6a000   RTCore64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00006000
fffff880`018ee000 fffff880`018fc000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`018fc000 fffff880`01908000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01908000 fffff880`01913000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`01913000 fffff880`01926000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`02d6f000 fffff880`02db4000   afw.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00045000