BSOD - please help

jezpe · 20 Mar 2011

Today I had a crash....please help...documents attached and computer specs in my profile. thanks a lot

Maguscreed · 20 Mar 2011

Code:

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8000364ed34, Address of the instruction which caused the bugcheck
Arg3: fffff880039a0010, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt! ?? ::FNODOBFM::`string'+407ef
fffff800`0364ed34 488b06          mov     rax,qword ptr [rsi]

CONTEXT:  fffff880039a0010 -- (.cxr 0xfffff880039a0010)
rax=fffffa8008586060 rbx=fffffa8003d3f010 rcx=fffffa8003d3f010
rdx=fffff880039a0aa8 rsi=00fffa8003ced938 rdi=0000000000000000
rip=fffff8000364ed34 rsp=fffff880039a09f0 rbp=fffff880039a0ca0
 r8=00fffa8003ced7c0  r9=0000000000000000 r10=fffffffffffffffb
r11=fffff880039a0a68 r12=0000000000000000 r13=fffff880039a0b68
r14=1400000005791104 r15=0000000005791100
iopl=0         nv up ei pl nz na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010207
nt! ?? ::FNODOBFM::`string'+0x407ef:
fffff800`0364ed34 488b06          mov     rax,qword ptr [rsi] ds:002b:00fffa80`03ced938=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800039b5c37 to fffff8000364ed34

STACK_TEXT:  
fffff880`039a09f0 fffff800`039b5c37 : 00000000`00000000 fffffa80`03d3f010 fffffa80`03e70600 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x407ef
fffff880`039a0a70 fffff800`03989dd5 : fffff880`00000000 fffff880`039a0b68 fffff880`039a0b60 00000000`00000001 : nt!IoRemoveIoCompletion+0xe7
fffff880`039a0b00 fffff800`036cc8d3 : fffffa80`08586060 00000000`0253f008 fffff880`039a0bc8 00000000`05791120 : nt!NtRemoveIoCompletion+0x145
fffff880`039a0bb0 00000000`72ef2e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0253efe8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72ef2e09


FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+407ef
fffff800`0364ed34 488b06          mov     rax,qword ptr [rsi]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+407ef

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

STACK_COMMAND:  .cxr 0xfffff880039a0010 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!_??_::FNODOBFM::_string_+407ef

BUCKET_ID:  X64_0x3B_nt!_??_::FNODOBFM::_string_+407ef

Followup: MachineOwner
---------

cdrblock.sys reports as being out of date, I can't link it to a specific device though more than one website reports it as a malware component.
You may want to do a full scan with malwarebytes.
Malwarebytes
The free version is more than adequate for this.

Driver dump follows:

Code:

fffff800`00bb0000 fffff800`00bba000   kdcom    kdcom.dll    Mon Jul 13 20:31:07 2009 (4A5BDFDB)
fffff800`03604000 fffff800`0364d000   hal      hal.dll      Sat Nov 20 07:00:25 2010 (4CE7C669)
fffff800`0364d000 fffff800`03c37000   nt       ntkrnlmp.exe Sat Nov 20 03:30:02 2010 (4CE7951A)
fffff880`00c2d000 fffff880`00c7c000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 07:03:51 2010 (4CE7C737)
fffff880`00c7c000 fffff880`00c90000   PSHED    PSHED.dll    Mon Jul 13 20:32:23 2009 (4A5BE027)
fffff880`00c90000 fffff880`00cee000   CLFS     CLFS.SYS     Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`00cee000 fffff880`00dae000   CI       CI.dll       Sat Nov 20 07:12:36 2010 (4CE7C944)
fffff880`00dae000 fffff880`00dc8000   mountmgr mountmgr.sys Sat Nov 20 03:19:21 2010 (4CE79299)
fffff880`00e04000 fffff880`00ea8000   Wdf01000 Wdf01000.sys Mon Jul 13 18:22:07 2009 (4A5BC19F)
fffff880`00ea8000 fffff880`00eb7000   WDFLDR   WDFLDR.SYS   Mon Jul 13 18:19:54 2009 (4A5BC11A)
fffff880`00eb7000 fffff880`00f0e000   ACPI     ACPI.sys     Sat Nov 20 03:19:16 2010 (4CE79294)
fffff880`00f0e000 fffff880`00f17000   WMILIB   WMILIB.SYS   Mon Jul 13 18:19:51 2009 (4A5BC117)
fffff880`00f17000 fffff880`00f21000   msisadrv msisadrv.sys Mon Jul 13 18:19:26 2009 (4A5BC0FE)
fffff880`00f21000 fffff880`00f2e000   vdrvroot vdrvroot.sys Mon Jul 13 19:01:31 2009 (4A5BCADB)
fffff880`00f2e000 fffff880`00f61000   pci      pci.sys      Sat Nov 20 03:19:11 2010 (4CE7928F)
fffff880`00f61000 fffff880`00f76000   partmgr  partmgr.sys  Sat Nov 20 03:20:00 2010 (4CE792C0)
fffff880`00f76000 fffff880`00f7f000   compbatt compbatt.sys Mon Jul 13 18:31:02 2009 (4A5BC3B6)
fffff880`00f7f000 fffff880`00f8b000   BATTC    BATTC.SYS    Mon Jul 13 18:31:01 2009 (4A5BC3B5)
fffff880`00f8b000 fffff880`00fa0000   volmgr   volmgr.sys   Sat Nov 20 03:19:28 2010 (4CE792A0)
fffff880`00fa0000 fffff880`00ffc000   volmgrx  volmgrx.sys  Sat Nov 20 03:20:43 2010 (4CE792EB)
fffff880`01000000 fffff880`0102a000   ataport  ataport.SYS  Sat Nov 20 03:19:15 2010 (4CE79293)
fffff880`0102a000 fffff880`01035000   msahci   msahci.sys   Sat Nov 20 04:33:58 2010 (4CE7A416)
fffff880`01035000 fffff880`01045000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff880`01045000 fffff880`01050000   amdxata  amdxata.sys  Fri Mar 19 11:18:18 2010 (4BA3A3CA)
fffff880`0108c000 fffff880`011e0000   iaStor   iaStor.sys   Sat Nov 06 02:44:52 2010 (4CD50774)
fffff880`011e0000 fffff880`011e9000   atapi    atapi.sys    Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`01289000   afd      afd.sys      Sat Nov 20 03:23:27 2010 (4CE7938F)
fffff880`012bf000 fffff880`0130b000   fltmgr   fltmgr.sys   Sat Nov 20 03:19:24 2010 (4CE7929C)
fffff880`0130b000 fffff880`0131f000   fileinfo fileinfo.sys Mon Jul 13 18:34:25 2009 (4A5BC481)
fffff880`0131f000 fffff880`0137d000   msrpc    msrpc.sys    Sat Nov 20 03:21:56 2010 (4CE79334)
fffff880`0137d000 fffff880`013ef000   cng      cng.sys      Sat Nov 20 04:08:45 2010 (4CE79E2D)
fffff880`01410000 fffff880`015b3000   Ntfs     Ntfs.sys     Sat Nov 20 03:20:57 2010 (4CE792F9)
fffff880`015b3000 fffff880`015ce000   ksecdd   ksecdd.sys   Sat Nov 20 03:21:15 2010 (4CE7930B)
fffff880`015ce000 fffff880`015df000   pcw      pcw.sys      Mon Jul 13 18:19:27 2009 (4A5BC0FF)
fffff880`015df000 fffff880`015e9000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 18:19:45 2009 (4A5BC111)
fffff880`01623000 fffff880`01716000   ndis     ndis.sys     Sat Nov 20 03:23:30 2010 (4CE79392)
fffff880`01716000 fffff880`01776000   NETIO    NETIO.SYS    Sat Nov 20 03:23:13 2010 (4CE79381)
fffff880`01776000 fffff880`017a1000   ksecpkg  ksecpkg.sys  Sat Nov 20 04:10:34 2010 (4CE79E9A)
fffff880`017a1000 fffff880`017c3000   tdx      tdx.sys      Sat Nov 20 03:21:54 2010 (4CE79332)
fffff880`01800000 fffff880`01825000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 18:38:51 2009 (4A5BC58B)
fffff880`01825000 fffff880`0182e000   RDPCDD   RDPCDD.sys   Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`0182e000 fffff880`01837000   rdpencdd rdpencdd.sys Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`01837000 fffff880`01840000   rdprefmp rdprefmp.sys Mon Jul 13 19:16:35 2009 (4A5BCE63)
fffff880`01840000 fffff880`0184b000   Msfs     Msfs.SYS     Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`0184b000 fffff880`0185c000   Npfs     Npfs.SYS     Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff880`0185c000 fffff880`01869000   TDI      TDI.SYS      Sat Nov 20 03:22:06 2010 (4CE7933E)
fffff880`0186e000 fffff880`01a72000   tcpip    tcpip.sys    Sat Nov 20 03:25:52 2010 (4CE79420)
fffff880`01a72000 fffff880`01abc000   fwpkclnt fwpkclnt.sys Sat Nov 20 03:21:37 2010 (4CE79321)
fffff880`01abc000 fffff880`01b08000   volsnap  volsnap.sys  Sat Nov 20 03:20:08 2010 (4CE792C8)
fffff880`01b08000 fffff880`01b10000   spldr    spldr.sys    Mon May 11 11:56:27 2009 (4A0858BB)
fffff880`01b10000 fffff880`01b17000   speedfan speedfan.sys Sun Sep 24 08:26:48 2006 (45168798)
fffff880`01b17000 fffff880`01b51000   rdyboost rdyboost.sys Sat Nov 20 03:43:10 2010 (4CE7982E)
fffff880`01b51000 fffff880`01b63000   mup      mup.sys      Mon Jul 13 18:23:45 2009 (4A5BC201)
fffff880`01b63000 fffff880`01b6c000   hwpolicy hwpolicy.sys Sat Nov 20 03:18:54 2010 (4CE7927E)
fffff880`01b6c000 fffff880`01ba6000   fvevol   fvevol.sys   Sat Nov 20 03:24:06 2010 (4CE793B6)
fffff880`01ba6000 fffff880`01bbc000   disk     disk.sys     Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`01bbc000 fffff880`01bec000   CLASSPNP CLASSPNP.SYS Sat Nov 20 03:19:23 2010 (4CE7929B)
fffff880`02e00000 fffff880`02e0e000   vga      vga.sys      Mon Jul 13 18:38:47 2009 (4A5BC587)
fffff880`02e0e000 fffff880`02e1e000   watchdog watchdog.sys Mon Jul 13 18:37:35 2009 (4A5BC53F)
fffff880`02e1e000 fffff880`02f72000   dump_iaStor dump_iaStor.sys Sat Nov 06 02:44:52 2010 (4CD50774)
fffff880`02f87000 fffff880`02fb1000   cdrom    cdrom.sys    Sat Nov 20 03:19:20 2010 (4CE79298)
fffff880`02fb1000 fffff880`02fe2000   MpFilter MpFilter.sys Tue Sep 14 19:19:28 2010 (4C901110)
fffff880`02fe2000 fffff880`02feb000   Null     Null.SYS     Mon Jul 13 18:19:37 2009 (4A5BC109)
fffff880`02feb000 fffff880`02ff2000   Beep     Beep.SYS     Mon Jul 13 19:00:13 2009 (4A5BCA8D)
fffff880`02ff2000 fffff880`02ffb000   Amfltx64 Amfltx64.sys Sun Oct 14 22:37:21 2007 (4712E071)
fffff880`03c00000 fffff880`03c4d000   mrxsmb10 mrxsmb10.sys Sat Nov 20 03:26:53 2010 (4CE7945D)
fffff880`03c4d000 fffff880`03c71000   mrxsmb20 mrxsmb20.sys Sat Nov 20 03:26:47 2010 (4CE79457)
fffff880`03cb6000 fffff880`03d7f000   HTTP     HTTP.sys     Sat Nov 20 03:24:30 2010 (4CE793CE)
fffff880`03d7f000 fffff880`03d9d000   bowser   bowser.sys   Mon Jul 13 18:23:50 2009 (4A5BC206)
fffff880`03d9d000 fffff880`03db5000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:08:25 2009 (4A5BCC79)
fffff880`03db5000 fffff880`03de2000   mrxsmb   mrxsmb.sys   Sat Nov 20 03:27:41 2010 (4CE7948D)
fffff880`04400000 fffff880`0441e000   dfsc     dfsc.sys     Sat Nov 20 03:26:31 2010 (4CE79447)
fffff880`0441e000 fffff880`0442b000   cdrblock cdrblock.sys Fri May 30 00:12:23 2008 (483F8CB7)
fffff880`0442b000 fffff880`0443c000   blbdrive blbdrive.sys Mon Jul 13 18:35:59 2009 (4A5BC4DF)
fffff880`04462000 fffff880`04466500   CmBatt   CmBatt.sys   Mon Jul 13 18:31:03 2009 (4A5BC3B7)
fffff880`04467000 fffff880`044b4000   atikmpag atikmpag.sys Tue Jan 04 20:19:38 2011 (4D23D53A)
fffff880`044b4000 fffff880`044f9000   netbt    netbt.sys    Sat Nov 20 03:23:18 2010 (4CE79386)
fffff880`044f9000 fffff880`04502000   wfplwf   wfplwf.sys   Mon Jul 13 19:09:26 2009 (4A5BCCB6)
fffff880`04502000 fffff880`04528000   pacer    pacer.sys    Sat Nov 20 04:52:18 2010 (4CE7A862)
fffff880`04528000 fffff880`0453e000   vwififlt vwififlt.sys Mon Jul 13 19:07:22 2009 (4A5BCC3A)
fffff880`0453e000 fffff880`0454d000   netbios  netbios.sys  Mon Jul 13 19:09:26 2009 (4A5BCCB6)
fffff880`0454d000 fffff880`04568000   wanarp   wanarp.sys   Sat Nov 20 04:52:36 2010 (4CE7A874)
fffff880`04568000 fffff880`0457c000   termdd   termdd.sys   Sat Nov 20 05:03:40 2010 (4CE7AB0C)
fffff880`0457c000 fffff880`045cd000   rdbss    rdbss.sys    Sat Nov 20 03:27:51 2010 (4CE79497)
fffff880`045cd000 fffff880`045d9000   nsiproxy nsiproxy.sys Mon Jul 13 18:21:02 2009 (4A5BC15E)
fffff880`045d9000 fffff880`045e4000   mssmbios mssmbios.sys Mon Jul 13 18:31:10 2009 (4A5BC3BE)
fffff880`045e4000 fffff880`045f3000   discache discache.sys Mon Jul 13 18:37:18 2009 (4A5BC52E)
fffff880`04600000 fffff880`0463c880   mcdbus   mcdbus.sys   Tue Feb 24 04:34:07 2009 (49A3CD1F)
fffff880`0463d000 fffff880`0466c000   SCSIPORT SCSIPORT.SYS Sat Nov 20 04:34:01 2010 (4CE7A419)
fffff880`046a9000 fffff880`046ff000   USBPORT  USBPORT.SYS  Sat Nov 20 04:44:00 2010 (4CE7A670)
fffff880`046ff000 fffff880`0470b000   ndistapi ndistapi.sys Mon Jul 13 19:10:00 2009 (4A5BCCD8)
fffff880`0470b000 fffff880`0473a000   ndiswan  ndiswan.sys  Sat Nov 20 04:52:32 2010 (4CE7A870)
fffff880`0473a000 fffff880`04755000   raspppoe raspppoe.sys Mon Jul 13 19:10:17 2009 (4A5BCCE9)
fffff880`04755000 fffff880`0478b000   fastfat  fastfat.SYS  Mon Jul 13 18:23:28 2009 (4A5BC1F0)
fffff880`0478b000 fffff880`047ac000   raspptp  raspptp.sys  Sat Nov 20 04:52:31 2010 (4CE7A86F)
fffff880`047ac000 fffff880`047c6000   rassstp  rassstp.sys  Mon Jul 13 19:10:25 2009 (4A5BCCF1)
fffff880`04a00000 fffff880`04a46000   dxgmms1  dxgmms1.sys  Sat Nov 20 03:49:53 2010 (4CE799C1)
fffff880`04a46000 fffff880`04a6a000   HDAudBus HDAudBus.sys Sat Nov 20 04:43:42 2010 (4CE7A65E)
fffff880`04a6a000 fffff880`04a7b000   HECIx64  HECIx64.sys  Thu Sep 17 14:54:16 2009 (4AB293E8)
fffff880`04a7b000 fffff880`04a8c000   usbehci  usbehci.sys  Sat Nov 20 04:43:54 2010 (4CE7A66A)
fffff880`04acd000 fffff880`05304000   atikmdag atikmdag.sys Tue Jan 04 20:48:52 2011 (4D23DC14)
fffff880`05304000 fffff880`053f8000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 03:50:50 2010 (4CE799FA)
fffff880`05448000 fffff880`0548b000   ks       ks.sys       Sat Nov 20 04:33:23 2010 (4CE7A3F3)
fffff880`0548b000 fffff880`0549d000   umbus    umbus.sys    Sat Nov 20 04:44:37 2010 (4CE7A695)
fffff880`0549d000 fffff880`054f7000   usbhub   usbhub.sys   Sat Nov 20 04:44:30 2010 (4CE7A68E)
fffff880`054f7000 fffff880`0550c000   NDProxy  NDProxy.SYS  Sat Nov 20 04:52:20 2010 (4CE7A864)
fffff880`0550c000 fffff880`0552c000   AtihdW76 AtihdW76.sys Fri Sep 24 00:44:48 2010 (4C9C3AD0)
fffff880`0552c000 fffff880`05569000   portcls  portcls.sys  Mon Jul 13 19:06:27 2009 (4A5BCC03)
fffff880`05569000 fffff880`0558b000   drmk     drmk.sys     Mon Jul 13 20:01:25 2009 (4A5BD8E5)
fffff880`0558b000 fffff880`05590200   ksthunk  ksthunk.sys  Mon Jul 13 19:00:19 2009 (4A5BCA93)
fffff880`0564c000 fffff880`056f2000   peauth   peauth.sys   Mon Jul 13 20:01:19 2009 (4A5BD8DF)
fffff880`056f2000 fffff880`056fd000   secdrv   secdrv.SYS   Wed Sep 13 08:18:38 2006 (4508052E)
fffff880`056fd000 fffff880`0572e000   srvnet   srvnet.sys   Sat Nov 20 03:27:20 2010 (4CE79478)
fffff880`0572e000 fffff880`05740000   tcpipreg tcpipreg.sys Sat Nov 20 04:51:48 2010 (4CE7A844)
fffff880`05740000 fffff880`057ab000   srv2     srv2.sys     Sat Nov 20 03:27:43 2010 (4CE7948F)
fffff880`05800000 fffff880`0580f000   kbdclass kbdclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`0580f000 fffff880`05862000   SynTP    SynTP.sys    Thu May 27 16:41:36 2010 (4BFEE710)
fffff880`05862000 fffff880`05863f00   USBD     USBD.SYS     Mon Jul 13 19:06:23 2009 (4A5BCBFF)
fffff880`05864000 fffff880`05873000   mouclass mouclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`05873000 fffff880`0587c000   wmiacpi  wmiacpi.sys  Mon Jul 13 18:31:02 2009 (4A5BC3B6)
fffff880`0587c000 fffff880`05892000   intelppm intelppm.sys Mon Jul 13 18:19:25 2009 (4A5BC0FD)
fffff880`05892000 fffff880`058a2000   CompositeBus CompositeBus.sys Sat Nov 20 04:33:17 2010 (4CE7A3ED)
fffff880`058a2000 fffff880`058b8000   AgileVpn AgileVpn.sys Mon Jul 13 19:10:24 2009 (4A5BCCF0)
fffff880`058b8000 fffff880`058dc000   rasl2tp  rasl2tp.sys  Sat Nov 20 04:52:34 2010 (4CE7A872)
fffff880`058dc000 fffff880`058dd480   swenum   swenum.sys   Mon Jul 13 19:00:18 2009 (4A5BCA92)
fffff880`058e3000 fffff880`05b70000   athrx    athrx.sys    Sat Nov 13 22:32:38 2010 (4CDF6666)
fffff880`05b70000 fffff880`05b7d000   vwifibus vwifibus.sys Mon Jul 13 19:07:21 2009 (4A5BCC39)
fffff880`05b7d000 fffff880`05bd3000   Rt64win7 Rt64win7.sys Wed Jun 23 04:10:45 2010 (4C21CF95)
fffff880`05bd3000 fffff880`05bf1000   i8042prt i8042prt.sys Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`05bf1000 fffff880`05bfd000   HpqKbFiltr HpqKbFiltr.sys Wed Apr 29 08:48:30 2009 (49F85AAE)
fffff880`06600000 fffff880`06613000   ndisuio  ndisuio.sys  Sat Nov 20 04:50:08 2010 (4CE7A7E0)
fffff880`06613000 fffff880`0662b000   rspndr   rspndr.sys   Mon Jul 13 19:08:50 2009 (4A5BCC92)
fffff880`06640000 fffff880`06886e00   RTKVHD64 RTKVHD64.sys Tue Jun 08 04:08:08 2010 (4C0E0878)
fffff880`06887000 fffff880`06893000   Dxapi    Dxapi.sys    Mon Jul 13 18:38:28 2009 (4A5BC574)
fffff880`068ba000 fffff880`068c2080   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:06:17 2009 (4A5BCBF9)
fffff880`068d0000 fffff880`068ed000   usbccgp  usbccgp.sys  Sat Nov 20 04:44:03 2010 (4CE7A673)
fffff880`068ed000 fffff880`0691a280   usbvideo usbvideo.sys Sat Nov 20 04:44:34 2010 (4CE7A692)
fffff880`0691b000 fffff880`06929000   crashdmp crashdmp.sys Mon Jul 13 19:01:01 2009 (4A5BCABD)
fffff880`06929000 fffff880`0693c000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 18:21:51 2009 (4A5BC18F)
fffff880`0694a000 fffff880`0696d000   luafv    luafv.sys    Mon Jul 13 18:26:13 2009 (4A5BC295)
fffff880`0696d000 fffff880`0698e000   WudfPf   WudfPf.sys   Sat Nov 20 04:42:44 2010 (4CE7A624)
fffff880`0698e000 fffff880`069a3000   lltdio   lltdio.sys   Mon Jul 13 19:08:50 2009 (4A5BCC92)
fffff880`069a3000 fffff880`069f6000   nwifi    nwifi.sys    Mon Jul 13 19:07:23 2009 (4A5BCC3B)
fffff880`072ff000 fffff880`07398000   srv      srv.sys      Sat Nov 20 03:28:05 2010 (4CE794A5)
fffff880`07398000 fffff880`073ad000   NisDrvWFP NisDrvWFP.sys Tue Sep 14 19:20:25 2010 (4C901149)
fffff880`07e00000 fffff880`07e0e000   hidusb   hidusb.sys   Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`07e0e000 fffff880`07e27000   HIDCLASS HIDCLASS.SYS Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`07e27000 fffff880`07e34000   mouhid   mouhid.sys   Mon Jul 13 19:00:20 2009 (4A5BCA94)
fffff880`07e73000 fffff880`07e83000   MpNWMon  MpNWMon.sys  Tue Sep 14 19:19:30 2010 (4C901112)
fffff880`07fab000 fffff880`07fb9000   monitor  monitor.sys  Mon Jul 13 18:38:52 2009 (4A5BC58C)
fffff960`000e0000 fffff960`003f1000   win32k   win32k.sys   Wed Jan 05 00:55:38 2011 (4D2415EA)
fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      Sat Nov 20 06:55:34 2010 (4CE7C546)
fffff960`008f0000 fffff960`00951000   ATMFD    ATMFD.DLL    Fri Jan 07 03:20:44 2011 (4D26DAEC)

Unloaded modules:
fffff880`07e83000 fffff880`07ec2000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`07e34000 fffff880`07e73000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`072b7000 fffff880`072d0000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`072a9000 fffff880`072b7000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`072d0000 fffff880`072dd000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`07fb9000 fffff880`07ff8000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`07e44000 fffff880`07f98000   hiber_iaStor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00154000
fffff880`07f98000 fffff880`07fab000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`073ad000 fffff880`073ec000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`0693c000 fffff880`0694a000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`07229000 fffff880`07242000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`0721b000 fffff880`07229000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`07242000 fffff880`0724f000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`0728e000 fffff880`072a9000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`07200000 fffff880`0721b000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`0724f000 fffff880`0728e000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`068a1000 fffff880`068ba000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`06893000 fffff880`068a1000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`068c3000 fffff880`068d0000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`073bc000 fffff880`073fb000   RtsUStor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003F000
fffff880`0727d000 fffff880`07289000   ccdcmbx64.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`07271000 fffff880`0727d000   pccsmcfdx64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`0729a000 fffff880`072cb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07289000 fffff880`0729a000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`072d5000 fffff880`072e3000   usbser.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`072cb000 fffff880`072d5000   usbser_lower
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`072e3000 fffff880`072f1000   ccdcmbox64.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`073ad000 fffff880`073bc000   modem.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff880`072f1000 fffff880`072fb000   usbser_lower
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`07200000 fffff880`07271000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01bec000 fffff880`01bfa000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`02e20000 fffff880`02f74000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00154000
fffff880`02f74000 fffff880`02f87000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`0443c000 fffff880`04462000   tunnel.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00026000

jezpe · 22 Mar 2011

tnaks a lot....you dah right...a i had a few malware and one virus...now its cleaned