Your error report says that the crashes occurred while trying to execute a Windows update.
The driver blamed in the crash belongs to Zone Alarms True Vector System
Code:
vsdatant.sys Fri May 06 01:31:14 2011 (4DC387A2)
So
I would suggest at least for now to uninstall Zone Alarm to exclude it as a possible cause either with this cleaner (run it as Administrator): http://download.zonealarm.com/bin/fr...load/clean.exe
or after this manual method:
Self-Service Support
The driver verifyer claims he caught
Code:
dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
performing "illegal" actions. The driver is part of the DirectX system and thus part of the OS. So I think an SFC /scannow is in order (run it up to 3 times until you get a clean bill of health):
SFC /SCANNOW Command - System File Checker
Did you follow the instructions for Verifyer.exe to exclude the Microsoft services?
Driver Verifier - Enable and Disable
-DG
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\David\Desktop\MVJ\013012-4836-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e17000 PsLoadedModuleList = 0xfffff800`0305c670
Debug session time: Mon Jan 30 08:06:26.493 2012 (GMT-5)
System Uptime: 0 days 0:00:32.742
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C4, {f6, 188, fffffa8008a0eb30, fffff88002f2e733}
Unable to load image \SystemRoot\system32\DRIVERS\vsdatant.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+8f733 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000188, Handle value being referenced.
Arg3: fffffa8008a0eb30, Address of the current process.
Arg4: fffff88002f2e733, Address inside the driver that is performing the incorrect reference.
Debugging Details:
------------------
BUGCHECK_STR: 0xc4_f6
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME: bdagent.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff8000331d3dc to fffff80002e93c40
STACK_TEXT:
fffff880`098dbea8 fffff800`0331d3dc : 00000000`000000c4 00000000`000000f6 00000000`00000188 fffffa80`08a0eb30 : nt!KeBugCheckEx
fffff880`098dbeb0 fffff800`03332ae4 : 00000000`00000188 fffffa80`08a0eb30 00000000`00000002 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`098dbef0 fffff800`031d1785 : 00000000`00000000 00000000`00000188 fffff880`098dc080 00000000`00000002 : nt!VfCheckUserHandle+0x1b4
fffff880`098dbfd0 fffff800`02e92ed3 : fffffa80`0b25ab60 fffff880`010ee080 00000000`00000000 00000000`00000001 : nt! ?? ::NNGAKEGL::`string'+0x23045
fffff880`098dc000 fffff800`02e8f470 : fffff880`02f2e733 00000000`00000001 fffffa80`0b273958 00000000`00000002 : nt!KiSystemServiceCopyEnd+0x13
fffff880`098dc198 fffff880`02f2e733 : 00000000`00000001 fffffa80`0b273958 00000000`00000002 fffffa80`0adfe380 : nt!KiServiceLinkage
fffff880`098dc1a0 00000000`00000001 : fffffa80`0b273958 00000000`00000002 fffffa80`0adfe380 fffff880`098dc240 : vsdatant+0x8f733
fffff880`098dc1a8 fffffa80`0b273958 : 00000000`00000002 fffffa80`0adfe380 fffff880`098dc240 fffff880`098dc230 : 0x1
fffff880`098dc1b0 00000000`00000002 : fffffa80`0adfe380 fffff880`098dc240 fffff880`098dc230 00000000`00000000 : 0xfffffa80`0b273958
fffff880`098dc1b8 fffffa80`0adfe380 : fffff880`098dc240 fffff880`098dc230 00000000`00000000 00000000`00000080 : 0x2
fffff880`098dc1c0 fffff880`098dc240 : fffff880`098dc230 00000000`00000000 00000000`00000080 fffff880`00000007 : 0xfffffa80`0adfe380
fffff880`098dc1c8 fffff880`098dc230 : 00000000`00000000 00000000`00000080 fffff880`00000007 00000000`00000001 : 0xfffff880`098dc240
fffff880`098dc1d0 00000000`00000000 : 00000000`00000080 fffff880`00000007 00000000`00000001 00000000`00000001 : 0xfffff880`098dc230
STACK_COMMAND: kb
FOLLOWUP_IP:
vsdatant+8f733
fffff880`02f2e733 e9ae000000 jmp vsdatant+0x8f7e6 (fffff880`02f2e7e6)
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: vsdatant+8f733
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: vsdatant
IMAGE_NAME: vsdatant.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4dc387a2
FAILURE_BUCKET_ID: X64_0xc4_f6_VRF_vsdatant+8f733
BUCKET_ID: X64_0xc4_f6_VRF_vsdatant+8f733
Followup: MachineOwner
---------
3: kd> lmvm vsdatant
start end module name
fffff880`02e9f000 fffff880`02f34000 vsdatant T (no symbols)
Loaded symbol image file: vsdatant.sys
Image path: \SystemRoot\system32\DRIVERS\vsdatant.sys
Image name: vsdatant.sys
Timestamp: Fri May 06 01:31:14 2011 (4DC387A2)
CheckSum: 0007EB69
ImageSize: 00095000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
------------------------------------------------------------------------------------------------------------
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\David\Desktop\MVJ\013012-13868-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`02e09000 PsLoadedModuleList = 0xfffff800`0304e670
Debug session time: Mon Jan 30 05:26:04.684 2012 (GMT-5)
System Uptime: 2 days 20:26:56.461
Loading Kernel Symbols
...............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C4, {91, 2, fffff80003009cc0, 0}
Unable to load image \SystemRoot\system32\DRIVERS\nvkflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvkflt.sys
*** ERROR: Module load completed but symbols could not be loaded for nvkflt.sys
Probably caused by : dxgmms1.sys ( dxgmms1!VidSchDdiNotifyInterruptWorker+ef )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000091, A driver switched stacks using a method that is not supported by
the operating system. The only supported way to extend a kernel
mode stack is by using KeExpandKernelStackAndCallout.
Arg2: 0000000000000002
Arg3: fffff80003009cc0
Arg4: 0000000000000000
Debugging Details:
------------------
BUGCHECK_STR: 0xc4_91
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
EXCEPTION_RECORD: fffff80000b9c9c8 -- (.exr 0xfffff80000b9c9c8)
ExceptionAddress: fffff80002e888e2 (nt!SwapContext_PatchXRstor)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
TRAP_FRAME: fffff80000b9ca70 -- (.trap 0xfffff80000b9ca70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000004 rbx=0000000000000000 rcx=fffff80000b9ccc0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e888e2 rsp=fffff80000b9cc00 rbp=fffff80000b9cc70
r8=fffffa8006cbc0c8 r9=0000000000000000 r10=fffffffffffffffe
r11=00000000002f5b00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!SwapContext_PatchXRstor:
fffff800`02e888e2 0fae09 fxrstor [rcx] ds:9929:fffff800`00b9ccc0=b0
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002edd37a to fffff80002e85c40
STACK_TEXT:
fffff800`00b9bac8 fffff800`02edd37a : 00000000`000000c4 00000000`00000091 00000000`00000002 fffff800`03009cc0 : nt!KeBugCheckEx
fffff800`00b9bad0 fffff800`02eafef3 : 00000100`00000000 00000000`00000000 00000000`00000003 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x4874
fffff800`00b9bb10 fffff800`02ec1361 : fffff800`00b9c9c8 fffff800`00b9c720 fffff800`00b9ca70 fffffa80`0c67fb60 : nt!RtlDispatchException+0x33
fffff800`00b9c1f0 fffff800`02e852c2 : fffff800`00b9c9c8 fffff800`02ffbe80 fffff800`00b9ca70 fffff800`03009cc0 : nt!KiDispatchException+0x135
fffff800`00b9c890 fffff800`02e83bca : fffffa80`0e9d2060 fffff800`033fc895 fffff800`03422460 fffff800`00b9cb30 : nt!KiExceptionDispatch+0xc2
fffff800`00b9ca70 fffff800`02e888e2 : fffff800`00000000 fffff800`00000000 00000000`00000002 fffff800`02e7d942 : nt!KiGeneralProtectionFault+0x10a
fffff800`00b9cc00 fffffa80`09b45410 : fffff800`00b9cfb0 fffff880`04111077 00000000`00f10671 00000000`00000000 : nt!SwapContext_PatchXRstor
fffff800`00b9cc40 fffff800`00b9cfb0 : fffff880`04111077 00000000`00f10671 00000000`00000000 00000000`08000000 : 0xfffffa80`09b45410
fffff800`00b9cc48 fffff880`04111077 : 00000000`00f10671 00000000`00000000 00000000`08000000 00000000`00000000 : 0xfffff800`00b9cfb0
fffff800`00b9cc50 fffff880`04110f76 : 00000000`00000000 00000000`00000000 fffffa80`09dd7000 fffffa80`0806e3a0 : dxgmms1!VidSchDdiNotifyInterruptWorker+0xef
fffff800`00b9cca0 fffff880`0401813f : fffff880`00c316c0 fffff880`00c325ac 00000000`00000000 00000000`00000000 : dxgmms1!VidSchDdiNotifyInterrupt+0x9e
fffff800`00b9ccd0 fffff880`00c0ce39 : fffffa80`0834c480 fffff800`00b9cfb0 fffffa80`0806e3a0 00000000`0000ffff : dxgkrnl!DxgNotifyInterruptCB+0x83
fffff800`00b9cd00 fffffa80`0834c480 : fffff800`00b9cfb0 fffffa80`0806e3a0 00000000`0000ffff fffff880`00c0cdd9 : nvkflt+0xce39
fffff800`00b9cd08 fffff800`00b9cfb0 : fffffa80`0806e3a0 00000000`0000ffff fffff880`00c0cdd9 00000000`ffffffff : 0xfffffa80`0834c480
fffff800`00b9cd10 fffffa80`0806e3a0 : 00000000`0000ffff fffff880`00c0cdd9 00000000`ffffffff fffffa80`0834c480 : 0xfffff800`00b9cfb0
fffff800`00b9cd18 00000000`0000ffff : fffff880`00c0cdd9 00000000`ffffffff fffffa80`0834c480 fffffa80`0806e3a0 : 0xfffffa80`0806e3a0
fffff800`00b9cd20 fffff880`00c0cdd9 : 00000000`ffffffff fffffa80`0834c480 fffffa80`0806e3a0 00000000`00000000 : 0xffff
fffff800`00b9cd28 00000000`ffffffff : fffffa80`0834c480 fffffa80`0806e3a0 00000000`00000000 fffffa80`0834c480 : nvkflt+0xcdd9
fffff800`00b9cd30 fffffa80`0834c480 : fffffa80`0806e3a0 00000000`00000000 fffffa80`0834c480 fffff800`00b9cfb0 : 0xffffffff
fffff800`00b9cd38 fffffa80`0806e3a0 : 00000000`00000000 fffffa80`0834c480 fffff800`00b9cfb0 00000000`00000000 : 0xfffffa80`0834c480
fffff800`00b9cd40 00000000`00000000 : fffffa80`0834c480 fffff800`00b9cfb0 00000000`00000000 00000000`00000000 : 0xfffffa80`0806e3a0
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgmms1!VidSchDdiNotifyInterruptWorker+ef
fffff880`04111077 448b9f88000000 mov r11d,dword ptr [rdi+88h]
SYMBOL_STACK_INDEX: 9
SYMBOL_NAME: dxgmms1!VidSchDdiNotifyInterruptWorker+ef
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dxgmms1
IMAGE_NAME: dxgmms1.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce799c1
FAILURE_BUCKET_ID: X64_0xc4_91_dxgmms1!VidSchDdiNotifyInterruptWorker+ef
BUCKET_ID: X64_0xc4_91_dxgmms1!VidSchDdiNotifyInterruptWorker+ef
Followup: MachineOwner
---------
0: kd> lmntsm
start end module name
fffff880`04274000 fffff880`0429c880 5U877 5U877.sys Fri Mar 04 04:18:41 2011 (4D70AE71)
fffff880`00f97000 fffff880`00fee000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`02ed0000 fffff880`02f59000 afd afd.sys Sun Apr 24 22:33:58 2011 (4DB4DD96)
fffff880`061d4000 fffff880`061ea000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0116f000 fffff880`0117a000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`10400000 fffff880`10450000 AMPPAL AMPPAL.sys Mon Aug 08 10:32:06 2011 (4E3FF366)
fffff880`01b82000 fffff880`01b8c000 ApsHM64 ApsHM64.sys Tue Mar 29 05:55:16 2011 (4D91AC84)
fffff880`01bce000 fffff880`01bf4000 Apsx64 Apsx64.sys Tue Mar 29 05:58:36 2011 (4D91AD4C)
fffff880`0c515000 fffff880`0c520000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`01121000 fffff880`0112a000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0112a000 fffff880`01154000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`012ea000 fffff880`01396000 avc3 avc3.sys Fri Nov 25 04:06:35 2011 (4ECF5A9B)
fffff880`04310000 fffff880`04354000 avchv avchv.sys Fri Nov 25 04:04:45 2011 (4ECF5A2D)
fffff880`0c574000 fffff880`0c5fc000 avckf avckf.sys Mon Nov 28 10:31:57 2011 (4ED3A96D)
fffff880`00e68000 fffff880`00e74000 BATTC BATTC.SYS Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`01200000 fffff880`01272000 bdfsfltr bdfsfltr.sys Wed Jul 27 11:23:21 2011 (4E302D69)
fffff880`01272000 fffff880`0129a000 bdfwfpf bdfwfpf.sys Mon Nov 14 12:16:17 2011 (4EC14CE1)
fffff880`041ab000 fffff880`041c8000 bdvedisk bdvedisk.sys Tue Jan 19 10:45:31 2010 (4B55D39B)
fffff880`018dc000 fffff880`018e3000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0419a000 fffff880`041ab000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0af5a000 fffff880`0af78000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
fffff960`006d0000 fffff960`006f7000 cdd cdd.dll unavailable (00000000)
fffff880`0168b000 fffff880`016b5000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`07844000 fffff880`079d2000 CHDRT64 CHDRT64.sys Mon Oct 03 15:46:36 2011 (4E8A111C)
fffff880`00d1b000 fffff880`00ddb000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`0186b000 fffff880`0189b000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00cbd000 fffff880`00d1b000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05884000 fffff880`05888500 CmBatt CmBatt.sys Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01000000 fffff880`01072000 cng cng.sys Wed Nov 16 23:23:17 2011 (4EC48C35)
fffff880`00e5f000 fffff880`00e68000 compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`061c4000 fffff880`061d4000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0421f000 fffff880`0422d000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0417c000 fffff880`0419a000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`0416d000 fffff880`0417c000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01855000 fffff880`0186b000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`079d2000 fffff880`079f4000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0422d000 fffff880`04239000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04244000 fffff880`04257000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04239000 fffff880`04244000 dump_msahci dump_msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`04213000 fffff880`0421f000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04015000 fffff880`04109000 dxgkrnl dxgkrnl.sys Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04109000 fffff880`0414f000 dxgmms1 dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`0142c000 fffff880`01437000 DzHDD64 DzHDD64.sys Thu Oct 14 20:32:33 2010 (4CB7A121)
fffff880`1111b000 fffff880`11171000 e1c62x64 e1c62x64.sys Thu Aug 04 18:45:20 2011 (4E3B2100)
fffff880`0c531000 fffff880`0c567000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`011c6000 fffff880`011da000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0117a000 fffff880`011c6000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01437000 fffff880`01441000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0181b000 fffff880`01855000 fvevol fvevol.sys Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01aec000 fffff880`01b36000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`061ae000 fffff880`061bb000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`033f2000 fffff800`0343b000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`111c7000 fffff880`111eb000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`04a00000 fffff880`04a11000 HECIx64 HECIx64.sys Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`027e6000 fffff880`027ee080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0ae91000 fffff880`0af5a000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01812000 fffff880`0181b000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`06174000 fffff880`06192000 i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`061a1000 fffff880`061ae000 ibmpmdrv ibmpmdrv.sys Wed Jul 27 04:02:55 2011 (4E2FC62F)
fffff880`04a34000 fffff880`055f13c0 igdkmd64 igdkmd64.sys Mon Sep 26 05:40:22 2011 (4E804886)
fffff880`01441000 fffff880`01457000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`09f98000 fffff880`09fa4000 ISWKL ISWKL.sys Thu Nov 03 10:29:43 2011 (4EB2A557)
fffff880`04354000 fffff880`04360000 iwdbus iwdbus.sys Wed Mar 09 18:43:23 2011 (4D78109B)
fffff880`06192000 fffff880`061a1000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bc0000 fffff800`00bca000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`042cd000 fffff880`04310000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01400000 fffff880`0141b000 ksecdd ksecdd.sys Wed Nov 16 22:48:13 2011 (4EC483FD)
fffff880`01660000 fffff880`0168b000 ksecpkg ksecpkg.sys Wed Nov 16 23:23:44 2011 (4EC48C50)
fffff880`079f4000 fffff880`079f9200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`024a4000 fffff880`024c0d00 LenovoRd LenovoRd.sys Mon May 11 05:33:56 2009 (4A07F104)
fffff880`09efb000 fffff880`09f10000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02800000 fffff880`02823000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c5a000 fffff880`00ca9000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`0c4ef000 fffff880`0c4fd000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`05866000 fffff880`05875000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`01107000 fffff880`01121000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`0af78000 fffff880`0af90000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0af90000 fffff880`0afbd000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`0ae00000 fffff880`0ae4e000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`0ae4e000 fffff880`0ae72000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`01154000 fffff880`0115f000 msahci msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`016be000 fffff880`016c9000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e0a000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01396000 fffff880`013f4000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0415b000 fffff880`04166000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01800000 fffff880`01812000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016ef000 fffff880`017e2000 ndis ndis.sys Wed Dec 29 01:16:18 2010 (4D1AD232)
fffff880`061ea000 fffff880`061f6000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`09f63000 fffff880`09f76000 ndisuio ndisuio.sys Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`10474000 fffff880`104a3000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`043e5000 fffff880`043fa000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`02fb4000 fffff880`02fc3000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02f59000 fffff880`02f9e000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01600000 fffff880`01660000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`05890000 fffff880`06116000 NETwNs64 NETwNs64.sys Wed Aug 03 20:28:26 2011 (4E39E7AA)
fffff880`016c9000 fffff880`016da000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0414f000 fffff880`0415b000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e09000 fffff800`033f2000 nt ntkrnlmp.exe Wed Jun 22 22:53:23 2011 (4E02AAA3)
fffff880`0145c000 fffff880`015ff000 Ntfs Ntfs.sys Thu Mar 10 22:39:39 2011 (4D79997B)
fffff880`018d3000 fffff880`018dc000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`043cc000 fffff880`043e5000 nusb3hub nusb3hub.sys Thu Dec 09 23:50:35 2010 (4D01B19B)
fffff880`06141000 fffff880`06172000 nusb3xhc nusb3xhc.sys Thu Dec 09 23:50:35 2010 (4D01B19B)
fffff880`00c00000 fffff880`00c40000 nvkflt nvkflt.sys Sat Oct 15 02:09:00 2011 (4E99237C)
fffff880`104a4000 fffff880`1111b000 nvlddmkm nvlddmkm.sys Sat Oct 15 02:07:55 2011 (4E99233B)
fffff880`01bf4000 fffff880`01bfe000 nvpciflt nvpciflt.sys Sat Oct 15 02:08:42 2011 (4E99236A)
fffff880`09f10000 fffff880`09f63000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02e9e000 fffff880`02ec4000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00e4a000 fffff880`00e5f000 partmgr partmgr.sys Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00e0a000 fffff880`00e3d000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`0115f000 fffff880`0116f000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0141b000 fffff880`0142c000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0c086000 fffff880`0c12c000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0f24d000 fffff880`103f2000 PHCORE64 PHCORE64.SYS Fri Jul 08 02:02:21 2011 (4E169D6D)
fffff880`07800000 fffff880`0783d000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`055f2000 fffff880`05600000 psadd psadd.sys Tue Jul 26 02:56:31 2011 (4E2E651F)
fffff880`00ca9000 fffff880`00cbd000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`10450000 fffff880`10474000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`012bc000 fffff880`012d7000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`01072000 fffff880`01093000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`011da000 fffff880`011f4000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`00e89000 fffff880`00eda000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`0f235000 fffff880`0f23e000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0f23e000 fffff880`0f247000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`016b5000 fffff880`016be000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01b94000 fffff880`01bce000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`06123000 fffff880`06141000 risdxc64 risdxc64.sys Wed May 25 04:23:28 2011 (4DDCBC80)
fffff880`09f76000 fffff880`09f8e000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`024cd000 fffff880`024db000 scfilter scfilter.sys Sat Nov 20 05:09:59 2010 (4CE79E77)
fffff880`0c12c000 fffff880`0c137000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04a11000 fffff880`04a1d000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02fc3000 fffff880`02fe0000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`024c1000 fffff880`024cd000 SMCLIB SMCLIB.SYS Mon Jul 13 20:00:35 2009 (4A5BCAA3)
fffff880`02823000 fffff880`0282a000 smihlp smihlp.sys Mon May 30 12:21:37 2011 (4DE3C411)
fffff880`04166000 fffff880`0416d000 smiifx64 smiifx64.sys Tue Sep 07 00:38:27 2010 (4C85C1C3)
fffff880`01b8c000 fffff880`01b94000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0c40c000 fffff880`0c4a4000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0c17a000 fffff880`0c1e3000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`0c137000 fffff880`0c168000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`024db000 fffff880`024ebd00 STREAM STREAM.SYS Mon Jul 13 20:06:18 2009 (4A5BCBFA)
fffff880`061f6000 fffff880`061f7480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`05800000 fffff880`05866000 SynTP SynTP.sys Fri Sep 30 20:13:52 2011 (4E865B40)
fffff880`018e8000 fffff880`01aec000 tcpip tcpip.sys Wed Sep 28 23:43:04 2011 (4E83E948)
fffff880`0c168000 fffff880`0c17a000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`04200000 fffff880`04213000 tcusb tcusb.sys Thu Aug 18 20:35:41 2011 (4E4DAFDD)
fffff880`016da000 fffff880`016e7000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0129a000 fffff880`012bc000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`017e2000 fffff880`017f6000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`05875000 fffff880`05884000 tpm tpm.sys Mon Jul 13 19:21:48 2009 (4A5BC18C)
fffff880`02ec4000 fffff880`02ecb000 Tppwr64v Tppwr64v.sys Thu Nov 18 22:36:29 2010 (4CE5F0BD)
fffff880`09e18000 fffff880`09e73000 trufos trufos.sys Wed Oct 19 05:10:43 2011 (4E9E9413)
fffff960`005a0000 fffff960`005aa000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`041c8000 fffff880`041ee000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`111eb000 fffff880`111f9000 Tvti2c Tvti2c.sys Sun May 29 21:36:58 2011 (4DE2F4BA)
fffff880`04360000 fffff880`04372000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`04257000 fffff880`04274000 usbccgp usbccgp.sys Thu Mar 24 23:29:14 2011 (4D8C0C0A)
fffff880`06172000 fffff880`06173f00 USBD USBD.SYS Thu Mar 24 23:28:59 2011 (4D8C0BFB)
fffff880`04a1d000 fffff880`04a2e000 usbehci usbehci.sys Thu Mar 24 23:29:04 2011 (4D8C0C00)
fffff880`04372000 fffff880`043cc000 usbhub usbhub.sys Thu Mar 24 23:29:25 2011 (4D8C0C15)
fffff880`11171000 fffff880`111c7000 USBPORT USBPORT.SYS Thu Mar 24 23:29:12 2011 (4D8C0C08)
fffff880`00e3d000 fffff880`00e4a000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`103f2000 fffff880`10400000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0f200000 fffff880`0f225000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e74000 fffff880`00e89000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`010ab000 fffff880`01107000 volmgrx volmgrx.sys Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01b36000 fffff880`01b82000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`02e00000 fffff880`02e95000 vsdatant vsdatant.sys Fri May 06 01:31:14 2011 (4DC387A2)
fffff880`06116000 fffff880`06123000 vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02f9e000 fffff880`02fb4000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`09f8e000 fffff880`09f98000 vwifimp vwifimp.sys Mon Jul 13 20:07:28 2009 (4A5BCC40)
fffff880`02fe0000 fffff880`02ffb000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`0f225000 fffff880`0f235000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ee4000 fffff880`00f88000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f88000 fffff880`00f97000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02e95000 fffff880`02e9e000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b4000 win32k win32k.sys unavailable (00000000)
fffff880`061bb000 fffff880`061c4000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fee000 fffff880`00ff7000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0282a000 fffff880`0284b000 WudfPf WudfPf.sys Sat Nov 20 05:42:44 2010 (4CE7A624)
Unloaded modules:
fffff880`0c4fd000 fffff880`0c509000 pcdsrvc_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c509000 fffff880`0c50b000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4c5000 fffff880`0c4d1000 hiber_pciide
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4d1000 fffff880`0c4dc000 hiber_msahci
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4dc000 fffff880`0c4ef000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4b7000 fffff880`0c4c5000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c567000 fffff880`0c573000 hiber_pciide
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c400000 fffff880`0c40b000 hiber_msahci
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4a4000 fffff880`0c4b7000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4b7000 fffff880`0c4c5000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4e0000 fffff880`0c511000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4c5000 fffff880`0c4e0000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c520000 fffff880`0c531000 usbaapl64.sy
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c55f000 fffff880`0c56b000 hiber_pciide
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c400000 fffff880`0c40b000 hiber_msahci
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4a4000 fffff880`0c4b7000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c551000 fffff880`0c55f000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4b2000 fffff880`0c4c0000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4d1000 fffff880`0c4e2000 usbaapl64.sy
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c520000 fffff880`0c551000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4e2000 fffff880`0c4f3000 WinUsb.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4c0000 fffff880`0c4d1000 usbaapl64.sy
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4a4000 fffff880`0c4b2000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c566000 fffff880`0c574000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`09e73000 fffff880`09efb000 avckf.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c574000 fffff880`0c580000 pcdsrvc_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c580000 fffff880`0c582000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c558000 fffff880`0c566000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`027ef000 fffff880`027ff000 BthEnum.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`02418000 fffff880`024a4000 bthport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`02400000 fffff880`02418000 BTHUSB.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`024f6000 fffff880`027e6000 btwampfl.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0429d000 fffff880`042c9000 rfcomm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0189b000 fffff880`018bb000 bthpan.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`028a0000 fffff880`02924000 btwavdt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`02924000 fffff880`029b8000 btwaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`029b8000 fffff880`029c6000 btwl2cap.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`029ca000 fffff880`029e3000 HIDCLASS.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`029c6000 fffff880`029ca000 btwrchid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c52e000 fffff880`0c53a000 hiber_pciide
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c53a000 fffff880`0c545000 hiber_msahci
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c545000 fffff880`0c558000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`029e3000 fffff880`029f1000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c520000 fffff880`0c52c000 pcdsrvc_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c52c000 fffff880`0c52e000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0c4a4000 fffff880`0c515000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0189b000 fffff880`018a9000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`018a9000 fffff880`018b5000 dump_pciidex
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`018b5000 fffff880`018c0000 dump_msahci.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`018c0000 fffff880`018d3000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000