BSODs out of the blue win 7 64bit

frazered · 28 Feb 2011

win7 64 bit

usually very stable PC

recently had a number of BSODs - approx 5 / 6 a day

grateful for any pointers to solve them

a range of events - ntfs to kernel power to apc index failure

thanks

Maguscreed · 28 Feb 2011

I'm short on time so I didn't do a complete driver dump. However, based on the below error I would suggest you run a disk check.

Disk Check

Code:

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880095092d8
Arg3: fffff88009508b40
Arg4: fffff880012d84c4

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880095092d8 -- (.exr 0xfffff880095092d8)
ExceptionAddress: fffff880012d84c4 (Ntfs!NtfsReadMftRecord+0x0000000000000054)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88009508b40 -- (.cxr 0xfffff88009508b40)
rax=0000ffffffffffff rbx=000000000000f49b rcx=fffffa8008363c80
rdx=fffff88009509610 rsi=fffffa8008363c80 rdi=0000000000000000
rip=fffff880012d84c4 rsp=fffff88009509510 rbp=0000000000000080
 r8=fffff8a00b088b48  r9=0000000000000001 r10=0000000000000000
r11=fffff880095095b8 r12=fefffa8004832180 r13=fffff8a00b088b48
r14=fffffa8008363c80 r15=0000000000000001
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
Ntfs!NtfsReadMftRecord+0x54:
fffff880`012d84c4 410fb68c248c010000 movzx ecx,byte ptr [r12+18Ch] ds:002b:fefffa80`0483230c=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  VSSVC.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032c40e0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsReadMftRecord+54
fffff880`012d84c4 410fb68c248c010000 movzx ecx,byte ptr [r12+18Ch]

FAULTING_IP: 
Ntfs!NtfsReadMftRecord+54
fffff880`012d84c4 410fb68c248c010000 movzx ecx,byte ptr [r12+18Ch]

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880012ce4dc to fffff880012d84c4

STACK_TEXT:  
fffff880`09509510 fffff880`012ce4dc : fffffa80`08363c80 fefffa80`04832180 fffff8a0`0b088b48 fffffa80`03fa9601 : Ntfs!NtfsReadMftRecord+0x54
fffff880`095095c0 fffff880`012cf498 : fffff880`09509768 fffff8a0`0b088c70 fffff880`09509a80 00000001`00000000 : Ntfs!NtfsLookupInFileRecord+0x6c
fffff880`09509650 fffff880`01295a24 : fffffa80`08363c80 fffff8a0`0b088c00 00000000`00000000 00000000`00000001 : Ntfs!NtfsWriteFileSizes+0xa8
fffff880`095097b0 fffff880`012e6bbd : fffffa80`08363c80 fffffa80`04832180 00000000`00000001 0000000f`ffffff00 : Ntfs!NtfsFlushVolume+0x304
fffff880`095098e0 fffff880`012e75f0 : fffffa80`08363c80 fffffa80`0395da20 fffffa80`08639070 00000000`00000000 : Ntfs!NtfsCommonFlushBuffers+0x459
fffff880`095099c0 fffff880`00db123f : fffffa80`0395ddc0 fffffa80`0395da20 fffffa80`08363c80 fffff880`095099e8 : Ntfs!NtfsFsdFlushBuffers+0x104
fffff880`09509a30 fffff880`00daf6df : fffffa80`046b3930 00000000`00000000 fffffa80`046b3900 fffffa80`0395da20 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`09509ac0 fffff800`033a0ae9 : 00000000`00000002 fffffa80`08639070 00000000`00000000 fffffa80`0395da20 : fltmgr!FltpDispatch+0xcf
fffff880`09509b20 fffff800`0332df01 : fffffa80`0395da20 fffffa80`0840f480 fffffa80`08639070 fffff800`03206e80 : nt!IopSynchronousServiceTail+0xf9
fffff880`09509b90 fffff800`0308b993 : fffffa80`0840f480 00000000`ff742270 fffffa80`046b3930 fffffa80`08639070 : nt!NtFlushBuffersFile+0x171
fffff880`09509c20 00000000`776ffb6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02baf478 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776ffb6a


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  Ntfs!NtfsReadMftRecord+54

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff88009508b40 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsReadMftRecord+54

BUCKET_ID:  X64_0x24_Ntfs!NtfsReadMftRecord+54

Followup: MachineOwner
---------

DeanP · 01 Mar 2011

Please remove ALL Adobe Software and then reinstall the latest version (Adobe)

Code:

adfs.SYS  Fri Jun 27 08:52:37 2008

Update... WinPcap by CACE Technologies - here

Code:

npf_devolo.sys  Fri Feb 02 22:24:05 2007

Update all of your CD/DVD programs

Code:

PxHlpa64.sys  Tue Dec 11 12:49:01 2007

Run chkdsk as Magus request.
Do you have Daemon Tools/Alcohol 120% installed on your computer?

Regards...

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff880095092d8, fffff88009508b40, fffff880012d84c4}

Probably caused by : Ntfs.sys ( Ntfs!NtfsReadMftRecord+54 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff880095092d8
Arg3: fffff88009508b40
Arg4: fffff880012d84c4

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff880095092d8 -- (.exr 0xfffff880095092d8)
ExceptionAddress: fffff880012d84c4 (Ntfs!NtfsReadMftRecord+0x0000000000000054)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  fffff88009508b40 -- (.cxr 0xfffff88009508b40)
rax=0000ffffffffffff rbx=000000000000f49b rcx=fffffa8008363c80
rdx=fffff88009509610 rsi=fffffa8008363c80 rdi=0000000000000000
rip=fffff880012d84c4 rsp=fffff88009509510 rbp=0000000000000080
 r8=fffff8a00b088b48  r9=0000000000000001 r10=0000000000000000
r11=fffff880095095b8 r12=fefffa8004832180 r13=fffff8a00b088b48
r14=fffffa8008363c80 r15=0000000000000001
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
Ntfs!NtfsReadMftRecord+0x54:
fffff880`012d84c4 410fb68c248c010000 movzx ecx,byte ptr [r12+18Ch] ds:002b:fefffa80`0483230c=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  VSSVC.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032c40e0
 ffffffffffffffff 

FOLLOWUP_IP: 
Ntfs!NtfsReadMftRecord+54
fffff880`012d84c4 410fb68c248c010000 movzx ecx,byte ptr [r12+18Ch]

FAULTING_IP: 
Ntfs!NtfsReadMftRecord+54
fffff880`012d84c4 410fb68c248c010000 movzx ecx,byte ptr [r12+18Ch]

BUGCHECK_STR:  0x24

LAST_CONTROL_TRANSFER:  from fffff880012ce4dc to fffff880012d84c4

STACK_TEXT:  
fffff880`09509510 fffff880`012ce4dc : fffffa80`08363c80 fefffa80`04832180 fffff8a0`0b088b48 fffffa80`03fa9601 : Ntfs!NtfsReadMftRecord+0x54
fffff880`095095c0 fffff880`012cf498 : fffff880`09509768 fffff8a0`0b088c70 fffff880`09509a80 00000001`00000000 : Ntfs!NtfsLookupInFileRecord+0x6c
fffff880`09509650 fffff880`01295a24 : fffffa80`08363c80 fffff8a0`0b088c00 00000000`00000000 00000000`00000001 : Ntfs!NtfsWriteFileSizes+0xa8
fffff880`095097b0 fffff880`012e6bbd : fffffa80`08363c80 fffffa80`04832180 00000000`00000001 0000000f`ffffff00 : Ntfs!NtfsFlushVolume+0x304
fffff880`095098e0 fffff880`012e75f0 : fffffa80`08363c80 fffffa80`0395da20 fffffa80`08639070 00000000`00000000 : Ntfs!NtfsCommonFlushBuffers+0x459
fffff880`095099c0 fffff880`00db123f : fffffa80`0395ddc0 fffffa80`0395da20 fffffa80`08363c80 fffff880`095099e8 : Ntfs!NtfsFsdFlushBuffers+0x104
fffff880`09509a30 fffff880`00daf6df : fffffa80`046b3930 00000000`00000000 fffffa80`046b3900 fffffa80`0395da20 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`09509ac0 fffff800`033a0ae9 : 00000000`00000002 fffffa80`08639070 00000000`00000000 fffffa80`0395da20 : fltmgr!FltpDispatch+0xcf
fffff880`09509b20 fffff800`0332df01 : fffffa80`0395da20 fffffa80`0840f480 fffffa80`08639070 fffff800`03206e80 : nt!IopSynchronousServiceTail+0xf9
fffff880`09509b90 fffff800`0308b993 : fffffa80`0840f480 00000000`ff742270 fffffa80`046b3930 fffffa80`08639070 : nt!NtFlushBuffersFile+0x171
fffff880`09509c20 00000000`776ffb6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02baf478 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x776ffb6a


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  Ntfs!NtfsReadMftRecord+54

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

STACK_COMMAND:  .cxr 0xfffff88009508b40 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsReadMftRecord+54

BUCKET_ID:  X64_0x24_Ntfs!NtfsReadMftRecord+54

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`013be000 fffff880`013fc000   1394ohci 1394ohci.sys Tue Jul 14 12:07:12 2009 (4A5BCC30)
fffff880`01038000 fffff880`0108f000   ACPI     ACPI.sys     Tue Jul 14 11:19:34 2009 (4A5BC106)
fffff880`077d4000 fffff880`077ec000   adfs     adfs.SYS     Fri Jun 27 08:52:37 2008 (48640195)
fffff880`06040000 fffff880`06085000   af1npn9n af1npn9n.SYS Wed Jul 15 09:12:55 2009 (4A5CF4D7)
fffff880`03443000 fffff880`034cd000   afd      afd.sys      Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`060b4000 fffff880`060ca000   AgileVpn AgileVpn.sys Tue Jul 14 12:10:24 2009 (4A5BCCF0)
fffff880`091b0000 fffff880`091b8000   ALSysIO64 ALSysIO64.sys Mon Apr 20 07:41:04 2009 (49EB7E50)
fffff880`00fea000 fffff880`00ff5000   amdxata  amdxata.sys  Wed May 20 05:56:59 2009 (4A12F2EB)
fffff880`04902000 fffff880`04951000   ArcSec   ArcSec.sys   Tue Sep 21 12:38:32 2010 (4C97FE88)
fffff880`00fb7000 fffff880`00fc0000   atapi    atapi.sys    Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00fc0000 fffff880`00fea000   ataport  ataport.SYS  Tue Jul 14 11:19:52 2009 (4A5BC118)
fffff960`00830000 fffff960`00891000   ATMFD    ATMFD.DLL    Fri Jan 07 18:49:20 2011 (4D26A960)
fffff880`010c4000 fffff880`010d0000   BATTC    BATTC.SYS    Tue Jul 14 11:31:01 2009 (4A5BC3B5)
fffff880`03587000 fffff880`0358e000   Beep     Beep.SYS     Tue Jul 14 12:00:13 2009 (4A5BCA8D)
fffff880`048f1000 fffff880`04902000   blbdrive blbdrive.sys Tue Jul 14 11:35:59 2009 (4A5BC4DF)
fffff880`07700000 fffff880`0771e000   bowser   bowser.sys   Tue Jul 14 11:23:50 2009 (4A5BC206)
fffff960`006b0000 fffff960`006d7000   cdd      cdd.dll      Wed Jan 26 19:31:34 2011 (4D3FBFC6)
fffff880`015cb000 fffff880`015f5000   cdrom    cdrom.sys    Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Tue Jul 14 13:32:13 2009 (4A5BE01D)
fffff880`021c7000 fffff880`021f7000   CLASSPNP CLASSPNP.SYS Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00d50000 fffff880`00dae000   CLFS     CLFS.SYS     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`04c02000 fffff880`04dc7000   cmudaxp  cmudaxp.sys  Thu Sep 16 15:41:13 2010 (4C9191D9)
fffff880`01498000 fffff880`0150b000   cng      cng.sys      Tue Jul 14 11:49:40 2009 (4A5BC814)
fffff880`010bb000 fffff880`010c4000   compbatt compbatt.sys Tue Jul 14 11:31:02 2009 (4A5BC3B6)
fffff880`06085000 fffff880`06095000   CompositeBus CompositeBus.sys Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`06032000 fffff880`06040000   crashdmp crashdmp.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`04850000 fffff880`048d3000   csc      csc.sys      Tue Jul 14 11:24:26 2009 (4A5BC22A)
fffff880`048d3000 fffff880`048f1000   dfsc     dfsc.sys     Tue Jul 14 11:23:44 2009 (4A5BC200)
fffff880`047bf000 fffff880`047ce000   discache discache.sys Tue Jul 14 11:37:18 2009 (4A5BC52E)
fffff880`021b1000 fffff880`021c7000   disk     disk.sys     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`04dc7000 fffff880`04de9000   drmk     drmk.sys     Tue Jul 14 13:01:25 2009 (4A5BD8E5)
fffff880`049e3000 fffff880`049ec000   dump_atapi dump_atapi.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`04bf4000 fffff880`04c00000   dump_ataport dump_ataport.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`049ec000 fffff880`049ff000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:21:51 2009 (4A5BC18F)
fffff880`06026000 fffff880`06032000   Dxapi    Dxapi.sys    Tue Jul 14 11:38:28 2009 (4A5BC574)
fffff880`04ad8000 fffff880`04bcc000   dxgkrnl  dxgkrnl.sys  Wed Jan 26 17:22:56 2011 (4D3FA1A0)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Wed Jan 26 17:22:12 2011 (4D3FA174)
fffff880`00e00000 fffff880`00e14000   fileinfo fileinfo.sys Tue Jul 14 11:34:25 2009 (4A5BC481)
fffff880`00dae000 fffff880`00dfa000   fltmgr   fltmgr.sys   Tue Jul 14 11:19:59 2009 (4A5BC11F)
fffff880`0151c000 fffff880`01526000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 11:19:45 2009 (4A5BC111)
fffff880`02177000 fffff880`021b1000   fvevol   fvevol.sys   Sat Sep 26 14:34:26 2009 (4ABD7DB2)
fffff880`0168b000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Tue Jul 14 11:21:08 2009 (4A5BC164)
fffff880`0483d000 fffff880`0484a000   GEARAspiWDM GEARAspiWDM.sys Tue May 19 00:17:04 2009 (4A1151C0)
fffff800`035f9000 fffff800`03642000   hal      hal.dll      Tue Jul 14 13:27:36 2009 (4A5BDF08)
fffff880`07638000 fffff880`07700000   HTTP     HTTP.sys     Tue Jul 14 11:22:16 2009 (4A5BC1A8)
fffff880`0216e000 fffff880`02177000   hwpolicy hwpolicy.sys Tue Jul 14 11:19:22 2009 (4A5BC0FA)
fffff880`04bcc000 fffff880`04bea000   i8042prt i8042prt.sys Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`04977000 fffff880`0498d000   intelppm intelppm.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD)
fffff880`05bf1000 fffff880`05c00000   kbdclass kbdclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff800`00bc2000 fffff800`00bcc000   kdcom    kdcom.dll    Tue Jul 14 13:31:07 2009 (4A5BDFDB)
fffff880`01a0f000 fffff880`0216e000   kl1      kl1.sys      Thu Jun 10 01:34:19 2010 (4C0F985B)
fffff880`0343c000 fffff880`03443000   kl2      kl2.sys      Thu Jun 10 01:24:47 2010 (4C0F961F)
fffff880`034e8000 fffff880`0357e000   klif     klif.sys     Fri Oct 01 20:28:56 2010 (4CA58DB8)
fffff880`046e0000 fffff880`046e9000   klim6    klim6.sys    Fri Apr 23 03:07:24 2010 (4BD0662C)
fffff880`04bea000 fffff880`04bf4000   klmouflt klmouflt.sys Tue Nov 03 05:26:06 2009 (4AEF081E)
fffff880`04600000 fffff880`04643000   ks       ks.sys       Thu Mar 04 17:32:25 2010 (4B8F37D9)
fffff880`0147e000 fffff880`01498000   ksecdd   ksecdd.sys   Tue Jul 14 11:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 19:03:32 2009 (4B21E0B4)
fffff880`04de9000 fffff880`04dee200   ksthunk  ksthunk.sys  Tue Jul 14 12:00:19 2009 (4A5BCA93)
fffff880`04651000 fffff880`04666000   lltdio   lltdio.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`047ce000 fffff880`047f1000   luafv    luafv.sys    Tue Jul 14 11:26:13 2009 (4A5BC295)
fffff880`00cf8000 fffff880`00d3c000   mcupdate mcupdate.dll Tue Jul 14 13:29:10 2009 (4A5BDF66)
fffff880`060a5000 fffff880`060b4000   modem    modem.sys    Tue Jul 14 12:10:48 2009 (4A5BCD08)
fffff880`04643000 fffff880`04651000   monitor  monitor.sys  Tue Jul 14 11:38:52 2009 (4A5BC58C)
fffff880`05be2000 fffff880`05bf1000   mouclass mouclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`00f9d000 fffff880`00fb7000   mountmgr mountmgr.sys Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`0771e000 fffff880`07736000   mpsdrv   mpsdrv.sys   Tue Jul 14 12:08:25 2009 (4A5BCC79)
fffff880`07736000 fffff880`07763000   mrxsmb   mrxsmb.sys   Sat Feb 27 20:52:19 2010 (4B88CF33)
fffff880`07763000 fffff880`077b1000   mrxsmb10 mrxsmb10.sys Sat Feb 27 20:52:28 2010 (4B88CF3C)
fffff880`077b1000 fffff880`077d4000   mrxsmb20 mrxsmb20.sys Sat Feb 27 20:52:26 2010 (4B88CF3A)
fffff880`035ec000 fffff880`035f7000   Msfs     Msfs.SYS     Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`0108f000 fffff880`01099000   msisadrv msisadrv.sys Tue Jul 14 11:19:26 2009 (4A5BC0FE)
fffff880`01420000 fffff880`0147e000   msrpc    msrpc.sys    Tue Jul 14 11:21:32 2009 (4A5BC17C)
fffff880`047b4000 fffff880`047bf000   mssmbios mssmbios.sys Tue Jul 14 11:31:10 2009 (4A5BC3BE)
fffff880`017ea000 fffff880`017fc000   mup      mup.sys      Tue Jul 14 11:23:45 2009 (4A5BC201)
fffff880`016f8000 fffff880`017ea000   ndis     ndis.sys     Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`060ee000 fffff880`060fa000   ndistapi ndistapi.sys Tue Jul 14 12:10:00 2009 (4A5BCCD8)
fffff880`060fa000 fffff880`06129000   ndiswan  ndiswan.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`06000000 fffff880`06015000   NDProxy  NDProxy.SYS  Tue Jul 14 12:10:05 2009 (4A5BCCDD)
fffff880`046e9000 fffff880`046f8000   netbios  netbios.sys  Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff880`0466c000 fffff880`046b1000   netbt    netbt.sys    Tue Jul 14 11:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Tue Jul 14 11:21:46 2009 (4A5BC18A)
fffff880`077ec000 fffff880`077f8000   npf_devolo npf_devolo.sys Fri Feb 02 22:24:05 2007 (45C30335)
fffff880`03400000 fffff880`03411000   Npfs     Npfs.SYS     Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`047a8000 fffff880`047b4000   nsiproxy nsiproxy.sys Tue Jul 14 11:21:02 2009 (4A5BC15E)
fffff800`0301c000 fffff800`035f9000   nt       ntkrnlmp.exe Wed Oct 27 15:43:09 2010 (4CC791BD)
fffff880`0121b000 fffff880`013be000   Ntfs     Ntfs.sys     Tue Jul 14 11:20:47 2009 (4A5BC14F)
fffff880`0357e000 fffff880`03587000   Null     Null.SYS     Tue Jul 14 11:19:37 2009 (4A5BC109)
fffff880`05be0000 fffff880`05be1180   nvBridge nvBridge.kmd Sun Oct 17 06:06:16 2010 (4CB9DB88)
fffff880`05006000 fffff880`05bdfa80   nvlddmkm nvlddmkm.sys Sun Oct 17 06:12:46 2010 (4CB9DD0E)
fffff880`046ba000 fffff880`046e0000   pacer    pacer.sys    Tue Jul 14 12:09:41 2009 (4A5BCCC5)
fffff880`04aba000 fffff880`04ad7000   parport  parport.sys  Tue Jul 14 12:00:40 2009 (4A5BCAA8)
fffff880`010a6000 fffff880`010bb000   partmgr  partmgr.sys  Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00ee9000 fffff880`00f1c000   pci      pci.sys      Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`010d0000 fffff880`010d7000   pciide   pciide.sys   Tue Jul 14 11:19:49 2009 (4A5BC115)
fffff880`00f8d000 fffff880`00f9d000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`0150b000 fffff880`0151c000   pcw      pcw.sys      Tue Jul 14 11:19:27 2009 (4A5BC0FF)
fffff880`08c43000 fffff880`08ce9000   peauth   peauth.sys   Tue Jul 14 13:01:19 2009 (4A5BD8DF)
fffff880`04800000 fffff880`0483d000   portcls  portcls.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00d3c000 fffff880`00d50000   PSHED    PSHED.dll    Tue Jul 14 13:32:23 2009 (4A5BE027)
fffff880`00e14000 fffff880`00e1fae0   PxHlpa64 PxHlpa64.sys Tue Dec 11 12:49:01 2007 (475DD06D)
fffff880`060ca000 fffff880`060ee000   rasl2tp  rasl2tp.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`06129000 fffff880`06144000   raspppoe raspppoe.sys Tue Jul 14 12:10:17 2009 (4A5BCCE9)
fffff880`06144000 fffff880`06165000   raspptp  raspptp.sys  Tue Jul 14 12:10:18 2009 (4A5BCCEA)
fffff880`06165000 fffff880`0617f000   rassstp  rassstp.sys  Tue Jul 14 12:10:25 2009 (4A5BCCF1)
fffff880`04757000 fffff880`047a8000   rdbss    rdbss.sys    Tue Jul 14 11:24:09 2009 (4A5BC219)
fffff880`0617f000 fffff880`0618a000   rdpbus   rdpbus.sys   Tue Jul 14 12:17:46 2009 (4A5BCEAA)
fffff880`035d1000 fffff880`035da000   RDPCDD   RDPCDD.sys   Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`035da000 fffff880`035e3000   rdpencdd rdpencdd.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`035e3000 fffff880`035ec000   rdprefmp rdprefmp.sys Tue Jul 14 12:16:35 2009 (4A5BCE63)
fffff880`01572000 fffff880`015ac000   rdyboost rdyboost.sys Tue Jul 14 11:34:34 2009 (4A5BC48A)
fffff880`0609d000 fffff880`060a5000   RootMdm  RootMdm.sys  Tue Jul 14 12:10:47 2009 (4A5BCD07)
fffff880`034cd000 fffff880`034e5000   rspndr   rspndr.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`0498d000 fffff880`049e3000   Rt64win7 Rt64win7.sys Wed Jun 23 21:10:45 2010 (4C21CF95)
fffff880`01009000 fffff880`01038000   SCSIPORT SCSIPORT.SYS Tue Jul 14 12:01:04 2009 (4A5BCAC0)
fffff880`08ce9000 fffff880`08cf4000   secdrv   secdrv.SYS   Thu Sep 14 01:18:38 2006 (4508052E)
fffff880`04def000 fffff880`04dfb000   serenum  serenum.sys  Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`046f8000 fffff880`04715000   serial   serial.sys   Tue Jul 14 12:00:40 2009 (4A5BCAA8)
fffff880`06095000 fffff880`0609d000   serscan  serscan.sys  Tue Jul 14 12:35:32 2009 (4A5BD2D4)
fffff880`016ed000 fffff880`016f4000   speedfan speedfan.sys Mon Sep 25 02:26:48 2006 (45168798)
fffff880`016e5000 fffff880`016ed000   spldr    spldr.sys    Tue May 12 04:56:27 2009 (4A0858BB)
fffff880`010d8000 fffff880`011fe000   spwr     spwr.sys     Mon Oct 12 09:55:14 2009 (4AD24632)
fffff880`0911a000 fffff880`091b0000   srv      srv.sys      Fri Aug 27 15:38:00 2010 (4C773318)
fffff880`090b3000 fffff880`0911a000   srv2     srv2.sys     Fri Aug 27 15:37:46 2010 (4C77330A)
fffff880`08cf4000 fffff880`08d21000   srvnet   srvnet.sys   Fri Aug 27 15:37:24 2010 (4C7732F4)
fffff880`0618a000 fffff880`0618b480   swenum   swenum.sys   Tue Jul 14 12:00:18 2009 (4A5BCA92)
fffff880`01803000 fffff880`01a00000   tcpip    tcpip.sys    Mon Jun 14 15:39:04 2010 (4C15A458)
fffff880`08d92000 fffff880`08da4000   tcpipreg tcpipreg.sys Tue Jul 14 12:09:49 2009 (4A5BCCCD)
fffff880`0342f000 fffff880`0343c000   TDI      TDI.SYS      Tue Jul 14 11:21:18 2009 (4A5BC16E)
fffff880`03411000 fffff880`0342f000   tdx      tdx.sys      Tue Jul 14 11:21:15 2009 (4A5BC16B)
fffff880`04743000 fffff880`04757000   termdd   termdd.sys   Tue Jul 14 12:16:36 2009 (4A5BCE64)
fffff880`06015000 fffff880`06026000   tosporte tosporte.sys Tue Jun 16 22:48:47 2009 (4A37788F)
fffff880`04715000 fffff880`04727a00   tosrfcom tosrfcom.sys Tue Jul 28 22:18:20 2009 (4A6ED06C)
fffff960`00580000 fffff960`0058a000   TSDDD    TSDDD.dll    Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`04951000 fffff880`04977000   tunnel   tunnel.sys   Tue Jul 14 12:09:37 2009 (4A5BCCC1)
fffff880`0618c000 fffff880`0619e000   umbus    umbus.sys    Tue Jul 14 12:06:56 2009 (4A5BCC20)
fffff880`04aa9000 fffff880`04aba000   usbehci  usbehci.sys  Tue Jul 14 12:06:30 2009 (4A5BCC06)
fffff880`0619e000 fffff880`061f8000   usbhub   usbhub.sys   Tue Jul 14 12:07:09 2009 (4A5BCC2D)
fffff880`04a53000 fffff880`04aa9000   USBPORT  USBPORT.SYS  Tue Jul 14 12:06:31 2009 (4A5BCC07)
fffff880`04a46000 fffff880`04a53000   usbuhci  usbuhci.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`01099000 fffff880`010a6000   vdrvroot vdrvroot.sys Tue Jul 14 12:01:31 2009 (4A5BCADB)
fffff880`0358e000 fffff880`0359c000   vga      vga.sys      Tue Jul 14 11:38:47 2009 (4A5BC587)
fffff880`0359c000 fffff880`035c1000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:38:51 2009 (4A5BC58B)
fffff880`016d5000 fffff880`016e5000   vmstorfl vmstorfl.sys Tue Jul 14 11:42:54 2009 (4A5BC67E)
fffff880`00f1c000 fffff880`00f31000   volmgr   volmgr.sys   Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00f31000 fffff880`00f8d000   volmgrx  volmgrx.sys  Tue Jul 14 11:20:33 2009 (4A5BC141)
fffff880`01526000 fffff880`01572000   volsnap  volsnap.sys  Tue Jul 14 11:20:08 2009 (4A5BC128)
fffff880`04728000 fffff880`04743000   wanarp   wanarp.sys   Tue Jul 14 12:10:21 2009 (4A5BCCED)
fffff880`035c1000 fffff880`035d1000   watchdog watchdog.sys Tue Jul 14 11:37:35 2009 (4A5BC53F)
fffff880`00e36000 fffff880`00eda000   Wdf01000 Wdf01000.sys Tue Jul 14 11:22:07 2009 (4A5BC19F)
fffff880`00eda000 fffff880`00ee9000   WDFLDR   WDFLDR.SYS   Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`046b1000 fffff880`046ba000   wfplwf   wfplwf.sys   Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003c0000   win32k   win32k.sys   Wed Jan 05 16:59:44 2011 (4D23ECB0)
fffff880`01000000 fffff880`01009000   WMILIB   WMILIB.SYS   Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`00cc0000 fffff880`00ce1000   WudfPf   WudfPf.sys   Tue Jul 14 12:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`08d21000 fffff880`08d92000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`091b8000 fffff880`091c0000   cpuz_x64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00008000
fffff880`01a00000 fffff880`01a0e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`015ac000 fffff880`015b8000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`021f7000 fffff880`02200000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`015b8000 fffff880`015cb000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

yowanvista · 01 Mar 2011

Kaspersky was not involved in the crash,none of its drivers were listed as the cause, instead of removing it just upgrade to the latest version

=> Product Updates

Or do a repair install of Kaspersky
Attachment 141116

DeanP · 01 Mar 2011

Also, please download and install SP1: Learn how to install Windows 7 Service Pack 1 (SP1)

frazered · 01 Mar 2011

thanks, have done all apart from sp1 and cd/dvd (my drivers are upto date for the drive, just updating tmt5)

will see how she gets on

frazered · 02 Mar 2011

another couple of blue screens this morning

I have rerun the perfmon report and the jcgriff app

am getting a new WD caviar black hdd this morning so thinking a fresh install onto that disk that will be a dedicated system os drive from now on

DeanP · 02 Mar 2011

Hello again,
Dump blames Memory_Corruption. Test your memory (RAM) with Memtest86+: RAM - Test with Memtest86+
Run at least 7 passes (takes 6-8 hours)

You have not yet updated anything - please read my first post.

Regards...

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa800dde5010, 2, 1, fffff8000318dac7}

Probably caused by : memory_corruption ( nt!MiReleaseConfirmedPageFileSpace+87 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa800dde5010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000318dac7, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800033070e0
 fffffa800dde5010 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiReleaseConfirmedPageFileSpace+87
fffff800`0318dac7 480fb328        btr     qword ptr [rax],rbp

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  SearchFilterHo

TRAP_FRAME:  fffff88008aa4760 -- (.trap 0xfffff88008aa4760)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8005de5010 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000318dac7 rsp=fffff88008aa48f0 rbp=0000000040000000
 r8=fffff88008aa4920  r9=fffffa8003b81b30 r10=0000000fffffffff
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MiReleaseConfirmedPageFileSpace+0x87:
fffff800`0318dac7 480fb328        btr     qword ptr [rax],rbp ds:fffffa80`05de5010=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800030ceca9 to fffff800030cf740

STACK_TEXT:  
fffff880`08aa4618 fffff800`030ceca9 : 00000000`0000000a fffffa80`0dde5010 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`08aa4620 fffff800`030cd920 : fffff800`0329d728 fffffa80`06bbe060 fffff880`08aa47c0 fffffa80`036dd260 : nt!KiBugCheckDispatch+0x69
fffff880`08aa4760 fffff800`0318dac7 : fffff8a0`0b796780 fffffa80`06bbe060 fffffa80`05c26880 fffff800`03107aae : nt!KiPageFault+0x260
fffff880`08aa48f0 fffff800`03142e38 : 40000000`00000000 55555555`55555555 00000000`000000d0 00000000`034c2000 : nt!MiReleaseConfirmedPageFileSpace+0x87
fffff880`08aa4970 fffff800`031110da : 00000000`00000000 00000000`035b9fff fffffa80`00000000 fffffa80`00000000 : nt! ?? ::FNODOBFM::`string'+0x33798
fffff880`08aa4b30 fffff800`030ce993 : ffffffff`ffffffff 00000000`011de200 00000000`011de1c8 00000000`00008000 : nt!NtFreeVirtualMemory+0x5ca
fffff880`08aa4c20 00000000`7787f89a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`011de138 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7787f89a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiReleaseConfirmedPageFileSpace+87
fffff800`0318dac7 480fb328        btr     qword ptr [rax],rbp

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiReleaseConfirmedPageFileSpace+87

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiReleaseConfirmedPageFileSpace+87

BUCKET_ID:  X64_0xA_nt!MiReleaseConfirmedPageFileSpace+87

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`04b69000 fffff880`04ba7000   1394ohci 1394ohci.sys Tue Jul 14 12:07:12 2009 (4A5BCC30)
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys     Tue Jul 14 11:19:34 2009 (4A5BC106)
fffff880`0769e000 fffff880`076b6000   adfs     adfs.SYS     Fri Jun 27 08:52:37 2008 (48640195)
fffff880`03400000 fffff880`0348a000   afd      afd.sys      Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`04800000 fffff880`04816000   AgileVpn AgileVpn.sys Tue Jul 14 12:10:24 2009 (4A5BCCF0)
fffff880`00fdd000 fffff880`00fe8000   amdxata  amdxata.sys  Wed May 20 05:56:59 2009 (4A12F2EB)
fffff880`0481e000 fffff880`0486d000   ArcSec   ArcSec.sys   Tue Sep 21 12:38:32 2010 (4C97FE88)
fffff880`00faa000 fffff880`00fb3000   atapi    atapi.sys    Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`00fb3000 fffff880`00fdd000   ataport  ataport.SYS  Tue Jul 14 11:19:52 2009 (4A5BC118)
fffff960`00960000 fffff960`009c1000   ATMFD    ATMFD.DLL    Fri Jan 07 18:49:20 2011 (4D26A960)
fffff880`011eb000 fffff880`011f7000   BATTC    BATTC.SYS    Tue Jul 14 11:31:01 2009 (4A5BC3B5)
fffff880`03529000 fffff880`03530000   Beep     Beep.SYS     Tue Jul 14 12:00:13 2009 (4A5BCA8D)
fffff880`04292000 fffff880`042a3000   blbdrive blbdrive.sys Tue Jul 14 11:35:59 2009 (4A5BC4DF)
fffff880`0779e000 fffff880`077bc000   bowser   bowser.sys   Tue Jul 14 11:23:50 2009 (4A5BC206)
fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      Wed Jan 26 19:31:34 2011 (4D3FBFC6)
fffff880`0145f000 fffff880`01489000   cdrom    cdrom.sys    Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`00ce0000 fffff880`00da0000   CI       CI.dll       Tue Jul 14 13:32:13 2009 (4A5BE01D)
fffff880`01a50000 fffff880`01a80000   CLASSPNP CLASSPNP.SYS Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00c82000 fffff880`00ce0000   CLFS     CLFS.SYS     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`04c28000 fffff880`04ded000   cmudaxp  cmudaxp.sys  Thu Sep 16 15:41:13 2010 (4C9191D9)
fffff880`01510000 fffff880`01583000   cng      cng.sys      Tue Jul 14 11:49:40 2009 (4A5BC814)
fffff880`011e2000 fffff880`011eb000   compbatt compbatt.sys Tue Jul 14 11:31:02 2009 (4A5BC3B6)
fffff880`04a1c000 fffff880`04a2c000   CompositeBus CompositeBus.sys Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`060c5000 fffff880`060d3000   crashdmp crashdmp.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
fffff880`0420f000 fffff880`04292000   csc      csc.sys      Tue Jul 14 11:24:26 2009 (4A5BC22A)
fffff880`035dc000 fffff880`035fa000   dfsc     dfsc.sys     Tue Jul 14 11:23:44 2009 (4A5BC200)
fffff880`04200000 fffff880`0420f000   discache discache.sys Tue Jul 14 11:37:18 2009 (4A5BC52E)
fffff880`01a3a000 fffff880`01a50000   disk     disk.sys     Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`04c00000 fffff880`04c22000   drmk     drmk.sys     Tue Jul 14 13:01:25 2009 (4A5BD8E5)
fffff880`060df000 fffff880`060e8000   dump_atapi dump_atapi.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`060d3000 fffff880`060df000   dump_ataport dump_ataport.sys Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`060e8000 fffff880`060fb000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:21:51 2009 (4A5BC18F)
fffff880`060b9000 fffff880`060c5000   Dxapi    Dxapi.sys    Tue Jul 14 11:38:28 2009 (4A5BC574)
fffff880`048a9000 fffff880`0499d000   dxgkrnl  dxgkrnl.sys  Wed Jan 26 17:22:56 2011 (4D3FA1A0)
fffff880`0499d000 fffff880`049e3000   dxgmms1  dxgmms1.sys  Wed Jan 26 17:22:12 2011 (4D3FA174)
fffff880`00fe8000 fffff880`00ffc000   fileinfo fileinfo.sys Tue Jul 14 11:34:25 2009 (4A5BC481)
fffff880`00da0000 fffff880`00dec000   fltmgr   fltmgr.sys   Tue Jul 14 11:19:59 2009 (4A5BC11F)
fffff880`01594000 fffff880`0159e000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 11:19:45 2009 (4A5BC111)
fffff880`01a00000 fffff880`01a3a000   fvevol   fvevol.sys   Sat Sep 26 14:34:26 2009 (4ABD7DB2)
fffff880`0159e000 fffff880`015e8000   fwpkclnt fwpkclnt.sys Tue Jul 14 11:21:08 2009 (4A5BC164)
fffff880`04a0f000 fffff880`04a1c000   GEARAspiWDM GEARAspiWDM.sys Tue May 19 00:17:04 2009 (4A1151C0)
fffff800`03016000 fffff800`0305f000   hal      hal.dll      Tue Jul 14 13:27:36 2009 (4A5BDF08)
fffff880`076d6000 fffff880`0779e000   HTTP     HTTP.sys     Tue Jul 14 11:22:16 2009 (4A5BC1A8)
fffff880`021eb000 fffff880`021f4000   hwpolicy hwpolicy.sys Tue Jul 14 11:19:22 2009 (4A5BC0FA)
fffff880`04bc4000 fffff880`04be2000   i8042prt i8042prt.sys Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`04893000 fffff880`048a9000   intelppm intelppm.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD)
fffff880`04a00000 fffff880`04a0f000   kbdclass kbdclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff800`00bca000 fffff800`00bd4000   kdcom    kdcom.dll    Tue Jul 14 13:31:07 2009 (4A5BDFDB)
fffff880`01a8c000 fffff880`021eb000   kl1      kl1.sys      Thu Jun 10 01:34:19 2010 (4C0F985B)
fffff880`035d5000 fffff880`035dc000   kl2      kl2.sys      Thu Jun 10 01:24:47 2010 (4C0F961F)
fffff880`0348a000 fffff880`03520000   klif     klif.sys     Fri Oct 01 20:28:56 2010 (4CA58DB8)
fffff880`04318000 fffff880`04321000   klim6    klim6.sys    Fri Apr 23 03:07:24 2010 (4BD0662C)
fffff880`04be2000 fffff880`04bec000   klmouflt klmouflt.sys Tue Nov 03 05:26:06 2009 (4AEF081E)
fffff880`04b26000 fffff880`04b69000   ks       ks.sys       Thu Mar 04 17:32:25 2010 (4B8F37D9)
fffff880`014f6000 fffff880`01510000   ksecdd   ksecdd.sys   Tue Jul 14 11:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 19:03:32 2009 (4B21E0B4)
fffff880`04c22000 fffff880`04c27200   ksthunk  ksthunk.sys  Tue Jul 14 12:00:19 2009 (4A5BCA93)
fffff880`061a4000 fffff880`061b9000   lltdio   lltdio.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`06160000 fffff880`06183000   luafv    luafv.sys    Tue Jul 14 11:26:13 2009 (4A5BC295)
fffff880`00c2a000 fffff880`00c6e000   mcupdate mcupdate.dll Tue Jul 14 13:29:10 2009 (4A5BDF66)
fffff880`049e3000 fffff880`049f2000   modem    modem.sys    Tue Jul 14 12:10:48 2009 (4A5BCD08)
fffff880`06152000 fffff880`06160000   monitor  monitor.sys  Tue Jul 14 11:38:52 2009 (4A5BC58C)
fffff880`04bec000 fffff880`04bfb000   mouclass mouclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
fffff880`00f90000 fffff880`00faa000   mountmgr mountmgr.sys Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`077bc000 fffff880`077d4000   mpsdrv   mpsdrv.sys   Tue Jul 14 12:08:25 2009 (4A5BCC79)
fffff880`07600000 fffff880`0762d000   mrxsmb   mrxsmb.sys   Sat Feb 27 20:52:19 2010 (4B88CF33)
fffff880`0762d000 fffff880`0767b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 20:52:28 2010 (4B88CF3C)
fffff880`0767b000 fffff880`0769e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 20:52:26 2010 (4B88CF3A)
fffff880`0358e000 fffff880`03599000   Msfs     Msfs.SYS     Tue Jul 14 11:19:47 2009 (4A5BC113)
fffff880`01057000 fffff880`01061000   msisadrv msisadrv.sys Tue Jul 14 11:19:26 2009 (4A5BC0FE)
fffff880`01498000 fffff880`014f6000   msrpc    msrpc.sys    Tue Jul 14 11:21:32 2009 (4A5BC17C)
fffff880`043ec000 fffff880`043f7000   mssmbios mssmbios.sys Tue Jul 14 11:31:10 2009 (4A5BC3BE)
fffff880`016aa000 fffff880`016bc000   mup      mup.sys      Tue Jul 14 11:23:45 2009 (4A5BC201)
fffff880`016d2000 fffff880`017c4000   ndis     ndis.sys     Tue Jul 14 11:21:40 2009 (4A5BC184)
fffff880`049f2000 fffff880`049fe000   ndistapi ndistapi.sys Tue Jul 14 12:10:00 2009 (4A5BCCD8)
fffff880`01200000 fffff880`0122f000   ndiswan  ndiswan.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`06093000 fffff880`060a8000   NDProxy  NDProxy.SYS  Tue Jul 14 12:10:05 2009 (4A5BCCDD)
fffff880`04321000 fffff880`04330000   netbios  netbios.sys  Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff880`042a4000 fffff880`042e9000   netbt    netbt.sys    Tue Jul 14 11:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Tue Jul 14 11:21:46 2009 (4A5BC18A)
fffff880`076b6000 fffff880`076c2000   npf_devolo npf_devolo.sys Fri Feb 02 22:24:05 2007 (45C30335)
fffff880`03599000 fffff880`035aa000   Npfs     Npfs.SYS     Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`043e0000 fffff880`043ec000   nsiproxy nsiproxy.sys Tue Jul 14 11:21:02 2009 (4A5BC15E)
fffff800`0305f000 fffff800`0363c000   nt       ntkrnlmp.exe Wed Oct 27 15:43:09 2010 (4CC791BD)
fffff880`01234000 fffff880`013d7000   Ntfs     Ntfs.sys     Tue Jul 14 11:20:47 2009 (4A5BC14F)
fffff880`03520000 fffff880`03529000   Null     Null.SYS     Tue Jul 14 11:19:37 2009 (4A5BC109)
fffff880`05bdb000 fffff880`05bdc180   nvBridge nvBridge.kmd Sun Oct 17 06:06:16 2010 (4CB9DB88)
fffff880`05001000 fffff880`05bdaa80   nvlddmkm nvlddmkm.sys Sun Oct 17 06:12:46 2010 (4CB9DD0E)
fffff880`042f2000 fffff880`04318000   pacer    pacer.sys    Tue Jul 14 12:09:41 2009 (4A5BCCC5)
fffff880`04ba7000 fffff880`04bc4000   parport  parport.sys  Tue Jul 14 12:00:40 2009 (4A5BCAA8)
fffff880`0106e000 fffff880`01083000   partmgr  partmgr.sys  Tue Jul 14 11:19:58 2009 (4A5BC11E)
fffff880`00edc000 fffff880`00f0f000   pci      pci.sys      Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`011f7000 fffff880`011fe000   pciide   pciide.sys   Tue Jul 14 11:19:49 2009 (4A5BC115)
fffff880`00f80000 fffff880`00f90000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 11:19:48 2009 (4A5BC114)
fffff880`01583000 fffff880`01594000   pcw      pcw.sys      Tue Jul 14 11:19:27 2009 (4A5BC0FF)
fffff880`07e90000 fffff880`07f36000   peauth   peauth.sys   Tue Jul 14 13:01:19 2009 (4A5BD8DF)
fffff880`04ae9000 fffff880`04b26000   portcls  portcls.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`00c6e000 fffff880`00c82000   PSHED    PSHED.dll    Tue Jul 14 13:32:23 2009 (4A5BE027)
fffff880`00e00000 fffff880`00e0bae0   PxHlpa64 PxHlpa64.sys Tue Dec 11 12:49:01 2007 (475DD06D)
fffff880`013d7000 fffff880`013fb000   rasl2tp  rasl2tp.sys  Tue Jul 14 12:10:11 2009 (4A5BCCE3)
fffff880`00e0c000 fffff880`00e27000   raspppoe raspppoe.sys Tue Jul 14 12:10:17 2009 (4A5BCCE9)
fffff880`00c00000 fffff880`00c21000   raspptp  raspptp.sys  Tue Jul 14 12:10:18 2009 (4A5BCCEA)
fffff880`06000000 fffff880`0601a000   rassstp  rassstp.sys  Tue Jul 14 12:10:25 2009 (4A5BCCF1)
fffff880`0438f000 fffff880`043e0000   rdbss    rdbss.sys    Tue Jul 14 11:24:09 2009 (4A5BC219)
fffff880`0601a000 fffff880`06025000   rdpbus   rdpbus.sys   Tue Jul 14 12:17:46 2009 (4A5BCEAA)
fffff880`03573000 fffff880`0357c000   RDPCDD   RDPCDD.sys   Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`0357c000 fffff880`03585000   rdpencdd rdpencdd.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`03585000 fffff880`0358e000   rdprefmp rdprefmp.sys Tue Jul 14 12:16:35 2009 (4A5BCE63)
fffff880`017c4000 fffff880`017fe000   rdyboost rdyboost.sys Tue Jul 14 11:34:34 2009 (4A5BC48A)
fffff880`05bf2000 fffff880`05bfa000   RootMdm  RootMdm.sys  Tue Jul 14 12:10:47 2009 (4A5BCD07)
fffff880`061b9000 fffff880`061d1000   rspndr   rspndr.sys   Tue Jul 14 12:08:50 2009 (4A5BCC92)
fffff880`04a93000 fffff880`04ae9000   Rt64win7 Rt64win7.sys Wed Jun 23 21:10:45 2010 (4C21CF95)
fffff880`011b3000 fffff880`011e2000   SCSIPORT SCSIPORT.SYS Tue Jul 14 12:01:04 2009 (4A5BCAC0)
fffff880`07f36000 fffff880`07f41000   secdrv   secdrv.SYS   Thu Sep 14 01:18:38 2006 (4508052E)
fffff880`04ded000 fffff880`04df9000   serenum  serenum.sys  Tue Jul 14 12:00:33 2009 (4A5BCAA1)
fffff880`04330000 fffff880`0434d000   serial   serial.sys   Tue Jul 14 12:00:40 2009 (4A5BCAA8)
fffff880`05bea000 fffff880`05bf2000   serscan  serscan.sys  Tue Jul 14 12:35:32 2009 (4A5BD2D4)
fffff880`016a3000 fffff880`016aa000   speedfan speedfan.sys Mon Sep 25 02:26:48 2006 (45168798)
fffff880`01084000 fffff880`011aa000   spgw     spgw.sys     Mon Oct 12 09:55:14 2009 (4AD24632)
fffff880`0169b000 fffff880`016a3000   spldr    spldr.sys    Tue May 12 04:56:27 2009 (4A0858BB)
fffff880`07f6e000 fffff880`07fdf000   spsys    spsys.sys    Tue May 12 05:20:58 2009 (4A085E7A)
fffff880`080dc000 fffff880`08172000   srv      srv.sys      Fri Aug 27 15:38:00 2010 (4C773318)
fffff880`07e00000 fffff880`07e67000   srv2     srv2.sys     Fri Aug 27 15:37:46 2010 (4C77330A)
fffff880`07f41000 fffff880`07f6e000   srvnet   srvnet.sys   Fri Aug 27 15:37:24 2010 (4C7732F4)
fffff880`06025000 fffff880`06026480   swenum   swenum.sys   Tue Jul 14 12:00:18 2009 (4A5BCA92)
fffff880`01800000 fffff880`019fd000   tcpip    tcpip.sys    Mon Jun 14 15:39:04 2010 (4C15A458)
fffff880`07fdf000 fffff880`07ff1000   tcpipreg tcpipreg.sys Tue Jul 14 12:09:49 2009 (4A5BCCCD)
fffff880`035c8000 fffff880`035d5000   TDI      TDI.SYS      Tue Jul 14 11:21:18 2009 (4A5BC16E)
fffff880`035aa000 fffff880`035c8000   tdx      tdx.sys      Tue Jul 14 11:21:15 2009 (4A5BC16B)
fffff880`0437b000 fffff880`0438f000   termdd   termdd.sys   Tue Jul 14 12:16:36 2009 (4A5BCE64)
fffff880`060a8000 fffff880`060b9000   tosporte tosporte.sys Tue Jun 16 22:48:47 2009 (4A37788F)
fffff880`0434d000 fffff880`0435fa00   tosrfcom tosrfcom.sys Tue Jul 28 22:18:20 2009 (4A6ED06C)
fffff960`00490000 fffff960`0049a000   TSDDD    TSDDD.dll    Tue Jul 14 12:16:34 2009 (4A5BCE62)
fffff880`0486d000 fffff880`04893000   tunnel   tunnel.sys   Tue Jul 14 12:09:37 2009 (4A5BCCC1)
fffff880`06027000 fffff880`06039000   umbus    umbus.sys    Tue Jul 14 12:06:56 2009 (4A5BCC20)
fffff880`060fb000 fffff880`06118000   usbccgp  usbccgp.sys  Tue Jul 14 12:06:45 2009 (4A5BCC15)
fffff880`06118000 fffff880`06119f00   USBD     USBD.SYS     Tue Jul 14 12:06:23 2009 (4A5BCBFF)
fffff880`04a82000 fffff880`04a93000   usbehci  usbehci.sys  Tue Jul 14 12:06:30 2009 (4A5BCC06)
fffff880`06039000 fffff880`06093000   usbhub   usbhub.sys   Tue Jul 14 12:07:09 2009 (4A5BCC2D)
fffff880`04a2c000 fffff880`04a82000   USBPORT  USBPORT.SYS  Tue Jul 14 12:06:31 2009 (4A5BCC07)
fffff880`0611a000 fffff880`06126000   usbprint usbprint.sys Tue Jul 14 12:38:18 2009 (4A5BD37A)
fffff880`06126000 fffff880`06137000   usbscan  usbscan.sys  Tue Jul 14 12:35:32 2009 (4A5BD2D4)
fffff880`06137000 fffff880`06152000   USBSTOR  USBSTOR.SYS  Tue Jul 14 12:06:34 2009 (4A5BCC0A)
fffff880`05bdd000 fffff880`05bea000   usbuhci  usbuhci.sys  Tue Jul 14 12:06:27 2009 (4A5BCC03)
fffff880`01061000 fffff880`0106e000   vdrvroot vdrvroot.sys Tue Jul 14 12:01:31 2009 (4A5BCADB)
fffff880`03530000 fffff880`0353e000   vga      vga.sys      Tue Jul 14 11:38:47 2009 (4A5BC587)
fffff880`0353e000 fffff880`03563000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:38:51 2009 (4A5BC58B)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Tue Jul 14 11:42:54 2009 (4A5BC67E)
fffff880`00f0f000 fffff880`00f24000   volmgr   volmgr.sys   Tue Jul 14 11:19:57 2009 (4A5BC11D)
fffff880`00f24000 fffff880`00f80000   volmgrx  volmgrx.sys  Tue Jul 14 11:20:33 2009 (4A5BC141)
fffff880`01400000 fffff880`0144c000   volsnap  volsnap.sys  Tue Jul 14 11:20:08 2009 (4A5BC128)
fffff880`04360000 fffff880`0437b000   wanarp   wanarp.sys   Tue Jul 14 12:10:21 2009 (4A5BCCED)
fffff880`03563000 fffff880`03573000   watchdog watchdog.sys Tue Jul 14 11:37:35 2009 (4A5BC53F)
fffff880`00e29000 fffff880`00ecd000   Wdf01000 Wdf01000.sys Tue Jul 14 11:22:07 2009 (4A5BC19F)
fffff880`00ecd000 fffff880`00edc000   WDFLDR   WDFLDR.SYS   Tue Jul 14 11:19:54 2009 (4A5BC11A)
fffff880`042e9000 fffff880`042f2000   wfplwf   wfplwf.sys   Tue Jul 14 12:09:26 2009 (4A5BCCB6)
fffff960`000f0000 fffff960`00400000   win32k   win32k.sys   Wed Jan 05 16:59:44 2011 (4D23ECB0)
fffff880`011aa000 fffff880`011b3000   WMILIB   WMILIB.SYS   Tue Jul 14 11:19:51 2009 (4A5BC117)
fffff880`06183000 fffff880`061a4000   WudfPf   WudfPf.sys   Tue Jul 14 12:05:37 2009 (4A5BCBD1)
fffff880`08172000 fffff880`081a3000   WUDFRd   WUDFRd.sys   Tue Jul 14 12:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`016bc000 fffff880`016ca000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01a80000 fffff880`01a8c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`021f4000 fffff880`021fd000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`0144c000 fffff880`0145f000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000