More BSOD... Woo

Meepit · 03 Nov 2009

Greetings Win7 forum users! I seem to be having a dilemna.
I've had Windows 7 installed for perhaps a week now, but I keep getting random Blue screens. The BSODs seem unrelated. I had one while burning a CD, another while instant messaging, and one when I just moved the computer to a different room!

I have the dumps if anyone is willing to decipher them.

EDIT:
Well, I tried what you asked, and I still seem to be having a problem. Updated my network drivers, uninstalled and reinstalled Avast! and scanned. Didn't find anything. It went another day before it BSOD'd again... I got a Bluescreen with the BAD_POOL_HEADER error, and one new one after returning from Sleep, IRQL_NOT_LESS_OR_EQUAL.
Uploaded the new dumps.

usasma · 03 Nov 2009

Please zip up the contents of your C:\Windows\Minidump folder and upload/attach it to your next post.

FYI - there's pinned topics at the top of the forum that will help you to get the symbols straight in your dump file analysis.

Meepit · 03 Nov 2009

Thank you Usasma. I've uploaded the dumps on the first post

usasma · 03 Nov 2009

A quick look says "networking" to me - I'd first suggest updating your networking drivers.

Pause here while dump files are running....

Could also be issues with Avast - or with an infection (from the 3rd memory dump).
Please download a new copy of Avast, uninstall the current one, and install the new one.

I'd suggest updating these drivers also:

Code:

FwLnk.sys    Sun Nov 19 09:11:12 2006 -                                                   TOSHIBA Firmware Linkage 32-bit Driver
WacomVKHid.sys Thu Feb 15 18:11:07 2007 - Wacom Virtual HID Driver
wacommousefilter.sys Fri Feb 16 13:12:29 2007 - Wacom Technology Wacom Mouse Filter Driver

First 2 memory dumps summaries:

Code:

Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Debug session time: Thu Oct 29 23:55:00.230 2009 (GMT-5)
System Uptime: 1 days 9:38:09.228
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  explorer.exe
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Debug session time: Sat Oct 31 21:35:47.331 2009 (GMT-5)
System Uptime: 1 days 14:24:20.328
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  svchost.exe

Last memory dump:

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR\TempDUMP\DATA\03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82a44000 PsLoadedModuleList = 0x82b8c810
Debug session time: Sun Nov  1 19:21:28.160 2009 (GMT-5)
System Uptime: 0 days 11:42:43.157
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
.......
1: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from 82bac71c
THREAD 8528dd48  Cid 0004.003c  Teb: 00000000 Win32Thread: 00000000 RUNNING on processor 1
IRP List:
    Unable to read nt!_IRP @ 8775bb08
Not impersonating
GetUlongFromAddress: unable to read from 82b6c49c
Owning Process            85268c78       Image:         System
Attached Process          N/A            Image:         N/A
ffdf0000: Unable to get shared data
Wait Start TickCount      2702749      
Context Switch Count      100004  NoStackSwap
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0x82ab1e1e)
Stack Init 8dd23fd0 Current 8dd23c10 Base 8dd24000 Limit 8dd21000 Call 0
Priority 12 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
*** WARNING: Unable to verify timestamp for aswTdi.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswTdi.SYS
*** WARNING: Unable to verify timestamp for aswRdr.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswRdr.SYS
ChildEBP RetAddr  Args to Child              
8dd239d8 8bbe9192 8540d008 00000000 861ca770 nt!ExFreePoolWithTag+0x1b1
8dd239ec 82a804bc 861ca770 8775bb08 861ccce0 tdx!TdxTdiDispatchClose+0x44 (FPO: [2,0,4])
8dd23a04 8ba00d0c 8775bb08 8775bbc0 861cccb0 nt!IofCallDriver+0x63
WARNING: Stack unwind information not available. Following frames may be wrong.
8dd23a50 8ba00e7a 861cccb0 8775bb08 8775bbc0 aswTdi+0xd0c
8dd23aa8 82a804bc 861ccbf8 8775bb08 8775bb08 aswTdi+0xe7a
8dd23ac0 8f26a3aa 8f26a378 861e3dc0 8775bb08 nt!IofCallDriver+0x63
8dd23af8 82c85dc7 8528c3f8 8537ef68 00000000 aswRdr+0x3aa
8dd23b3c 82c656f4 8537ef80 8537ef80 8537ef68 nt!IopDeleteFile+0x10c
8dd23b54 82aacf60 00000000 8528dd48 8537ef68 nt!ObpRemoveObjectRoutine+0x59
8dd23b68 82aaced0 8537ef80 82c8978c 8ca01d10 nt!ObfDereferenceObjectWithTag+0x88 (FPO: [0,0,3])
8dd23b70 82c8978c 8ca01d10 8528dd48 00002e44 nt!ObfDereferenceObject+0xd (FPO: [0,1,0])
8dd23bb4 82c8af72 8ca01d10 9fcd1c88 85268c78 nt!ObpCloseHandleTableEntry+0x21d
8dd23be4 82c8b0ea 85268c78 00000000 8dd23c88 nt!ObpCloseHandle+0x7f
8dd23c00 82a8742a 80002e44 8dd23cbc 82a84d8d nt!NtClose+0x4e
8dd23c00 82a84d8d 80002e44 8dd23cbc 82a84d8d nt!KiFastCallEntry+0x12a (FPO: [0,3] TrapFrame @ 8dd23c0c)
8dd23c7c 8f2230ac 80002e44 87662410 8f221ea8 nt!ZwClose+0x11 (FPO: [1,0,0])
8dd23cbc 8f228c6e 87662410 876624b4 8f221ea8 afd!AfdFreeEndpointResources+0x120 (FPO: [1,10,4])
8dd23cd0 8f21329e 876624b4 861cce78 861e3278 afd!AfdFreeEndpointTditl+0x22 (FPO: [1,0,0])
8dd23cec 82c647b5 861e3278 00000000 8528dd48 afd!AfdDoWork+0x51 (FPO: [2,1,4])
8dd23d00 82ab1f2b 861cce78 00000000 8528dd48 nt!IopProcessWorkItem+0x23
8dd23d50 82c5266d 00000001 aa0af046 00000000 nt!ExpWorkerThread+0x10d
8dd23d90 82b040d9 82ab1e1e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 8540d000, The pool entry we were looking for within the page.
Arg3: 8540d300, The next pool entry.
Arg4: 08600000, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 82bac718
Unable to read MiSystemVaType memory at 82b8c160
 8540d000 

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 8bbe9192 to 82b631b6

STACK_TEXT:  
8dd239d8 8bbe9192 8540d008 00000000 861ca770 nt!ExFreePoolWithTag+0x1b1
8dd239ec 82a804bc 861ca770 8775bb08 861ccce0 tdx!TdxTdiDispatchClose+0x44
8dd23a04 8ba00d0c 8775bb08 8775bbc0 861cccb0 nt!IofCallDriver+0x63
WARNING: Stack unwind information not available. Following frames may be wrong.
8dd23a50 8ba00e7a 861cccb0 8775bb08 8775bbc0 aswTdi+0xd0c
8dd23aa8 82a804bc 861ccbf8 8775bb08 8775bb08 aswTdi+0xe7a
8dd23ac0 8f26a3aa 8f26a378 861e3dc0 8775bb08 nt!IofCallDriver+0x63
8dd23af8 82c85dc7 8528c3f8 8537ef68 00000000 aswRdr+0x3aa
8dd23b3c 82c656f4 8537ef80 8537ef80 8537ef68 nt!IopDeleteFile+0x10c
8dd23b54 82aacf60 00000000 8528dd48 8537ef68 nt!ObpRemoveObjectRoutine+0x59
8dd23b68 82aaced0 8537ef80 82c8978c 8ca01d10 nt!ObfDereferenceObjectWithTag+0x88
8dd23b70 82c8978c 8ca01d10 8528dd48 00002e44 nt!ObfDereferenceObject+0xd
8dd23bb4 82c8af72 8ca01d10 9fcd1c88 85268c78 nt!ObpCloseHandleTableEntry+0x21d
8dd23be4 82c8b0ea 85268c78 00000000 8dd23c88 nt!ObpCloseHandle+0x7f
8dd23c00 82a8742a 80002e44 8dd23cbc 82a84d8d nt!NtClose+0x4e
8dd23c00 82a84d8d 80002e44 8dd23cbc 82a84d8d nt!KiFastCallEntry+0x12a
8dd23c7c 8f2230ac 80002e44 87662410 8f221ea8 nt!ZwClose+0x11
8dd23cbc 8f228c6e 87662410 876624b4 8f221ea8 afd!AfdFreeEndpointResources+0x120
8dd23cd0 8f21329e 876624b4 861cce78 861e3278 afd!AfdFreeEndpointTditl+0x22
8dd23cec 82c647b5 861e3278 00000000 8528dd48 afd!AfdDoWork+0x51
8dd23d00 82ab1f2b 861cce78 00000000 8528dd48 nt!IopProcessWorkItem+0x23
8dd23d50 82c5266d 00000001 aa0af046 00000000 nt!ExpWorkerThread+0x10d
8dd23d90 82b040d9 82ab1e1e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tdx!TdxTdiDispatchClose+44
8bbe9192 b828e2be8b      mov     eax,offset tdx!TdxGlobalStatistics+0x8 (8bbee228)

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  tdx!TdxTdiDispatchClose+44

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tdx

IMAGE_NAME:  tdx.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bbf4a

FAILURE_BUCKET_ID:  0x19_20_tdx!TdxTdiDispatchClose+44

BUCKET_ID:  0x19_20_tdx!TdxTdiDispatchClose+44

Followup: MachineOwner
---------

eax=82b7b17c ebx=00000000 ecx=0000001c edx=00000000 esi=807c3120 edi=00000000
eip=82b631b6 esp=8dd23968 ebp=8dd239d8 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000206
nt!ExFreePoolWithTag+0x1b1:
82b631b6 cc              int     3
ChildEBP RetAddr  Args to Child              
8dd239d8 8bbe9192 8540d008 00000000 861ca770 nt!ExFreePoolWithTag+0x1b1
8dd239ec 82a804bc 861ca770 8775bb08 861ccce0 tdx!TdxTdiDispatchClose+0x44 (FPO: [2,0,4])
8dd23a04 8ba00d0c 8775bb08 8775bbc0 861cccb0 nt!IofCallDriver+0x63
WARNING: Stack unwind information not available. Following frames may be wrong.
8dd23a50 8ba00e7a 861cccb0 8775bb08 8775bbc0 aswTdi+0xd0c
8dd23aa8 82a804bc 861ccbf8 8775bb08 8775bb08 aswTdi+0xe7a
8dd23ac0 8f26a3aa 8f26a378 861e3dc0 8775bb08 nt!IofCallDriver+0x63
8dd23af8 82c85dc7 8528c3f8 8537ef68 00000000 aswRdr+0x3aa
8dd23b3c 82c656f4 8537ef80 8537ef80 8537ef68 nt!IopDeleteFile+0x10c
8dd23b54 82aacf60 00000000 8528dd48 8537ef68 nt!ObpRemoveObjectRoutine+0x59
8dd23b68 82aaced0 8537ef80 82c8978c 8ca01d10 nt!ObfDereferenceObjectWithTag+0x88 (FPO: [0,0,3])
8dd23b70 82c8978c 8ca01d10 8528dd48 00002e44 nt!ObfDereferenceObject+0xd (FPO: [0,1,0])
8dd23bb4 82c8af72 8ca01d10 9fcd1c88 85268c78 nt!ObpCloseHandleTableEntry+0x21d
8dd23be4 82c8b0ea 85268c78 00000000 8dd23c88 nt!ObpCloseHandle+0x7f
8dd23c00 82a8742a 80002e44 8dd23cbc 82a84d8d nt!NtClose+0x4e
8dd23c00 82a84d8d 80002e44 8dd23cbc 82a84d8d nt!KiFastCallEntry+0x12a (FPO: [0,3] TrapFrame @ 8dd23c0c)
8dd23c7c 8f2230ac 80002e44 87662410 8f221ea8 nt!ZwClose+0x11 (FPO: [1,0,0])
8dd23cbc 8f228c6e 87662410 876624b4 8f221ea8 afd!AfdFreeEndpointResources+0x120 (FPO: [1,10,4])
8dd23cd0 8f21329e 876624b4 861cce78 861e3278 afd!AfdFreeEndpointTditl+0x22 (FPO: [1,0,0])
8dd23cec 82c647b5 861e3278 00000000 8528dd48 afd!AfdDoWork+0x51 (FPO: [2,1,4])
8dd23d00 82ab1f2b 861cce78 00000000 8528dd48 nt!IopProcessWorkItem+0x23
start    end        module name
80bba000 80bc2000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
82a0d000 82a44000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
82a44000 82e54000   nt       ntkrpamp.exe Mon Jul 13 19:15:19 2009 (4A5BC007)
8b80b000 8b816000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 19:13:13 2009 (4A5BBF89)
8b816000 8b827000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
8b827000 8b82f000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
8b82f000 8b871000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8b871000 8b91c000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8b91c000 8b98d000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8b98d000 8b99b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8b99b000 8b9e3000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
8b9e3000 8b9ec000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8b9ec000 8b9f4000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8ba00000 8ba0a660   aswTdi   aswTdi.SYS   Tue Sep 15 06:54:29 2009 (4AAF7265)
8ba0b000 8ba2c000   aswSP    aswSP.SYS    Tue Sep 15 06:55:29 2009 (4AAF72A1)
8ba32000 8ba5c000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
8ba5c000 8ba67000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
8ba67000 8ba78000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8ba78000 8ba80000   compbatt compbatt.sys Mon Jul 13 19:19:18 2009 (4A5BC0F6)
8ba80000 8ba8b000   BATTC    BATTC.SYS    Mon Jul 13 19:19:15 2009 (4A5BC0F3)
8ba8b000 8ba9b000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8ba9b000 8bae6000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8bae6000 8baed000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
8baed000 8bafb000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8bafb000 8bb11000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
8bb11000 8bb1a000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
8bb1a000 8bb3d000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
8bb3d000 8bb46000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
8bb46000 8bb7a000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8bb7a000 8bb8b000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8bb8b000 8bbac000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8bbac000 8bbb4000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8bbb4000 8bbbc000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
8bbbc000 8bbc4000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8bbc4000 8bbcf000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8bbcf000 8bbdd000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
8bbdd000 8bbf4000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
8bbf4000 8bbff000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
8bc00000 8bc09000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8bc09000 8bc15000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
8bc15000 8bc22000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8bc28000 8bd57000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
8bd57000 8bd82000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
8bd82000 8bd95000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8bd95000 8bdf2000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8bdf2000 8be00000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8be00000 8be07000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
8be07000 8be0e000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8be11000 8bec8000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
8bec8000 8bf06000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
8bf06000 8bf2b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:34:00 2009 (4A5BC468)
8bf2b000 8bf3b000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8bf3b000 8bf43000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
8bf43000 8bf75000   fvevol   fvevol.sys   Mon Jul 13 19:13:01 2009 (4A5BBF7D)
8bf75000 8bf86000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
8bf86000 8bfab000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8bfdd000 8bffc000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8c000000 8c03f000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
8c03f000 8c188000   tcpip    tcpip.sys    Mon Jul 13 19:13:18 2009 (4A5BBF8E)
8c188000 8c1b9000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
8c1b9000 8c1c1380   vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8c1c2000 8c1c6100   TVALZ_O  TVALZ_O.SYS  Mon Jul 13 22:19:21 2009 (4A5BEB29)
8c1c7000 8c1cf000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
8c1cf000 8c1fc000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
8f210000 8f26a000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
8f26a000 8f26db20   aswRdr   aswRdr.SYS   Tue Sep 15 06:54:20 2009 (4AAF725C)
8f26e000 8f2a0000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
8f2a0000 8f2a7000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
8f2a7000 8f2c6000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8f2c6000 8f2d7000   vwififlt vwififlt.sys Mon Jul 13 19:52:03 2009 (4A5BC8A3)
8f2d7000 8f2e5000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
8f2e5000 8f2f8000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
8f2f8000 8f308000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
8f308000 8f349000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
8f349000 8f353000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
8f353000 8f35d000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8f35d000 8f369000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8f369000 8f3cd000   csc      csc.sys      Mon Jul 13 19:15:08 2009 (4A5BBFFC)
8f3cd000 8f3e5000   dfsc     dfsc.sys     Mon Jul 13 19:14:16 2009 (4A5BBFC8)
8f3e5000 8f3f3000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
91600000 91618000   i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
91639000 9165a000   tunnel   tunnel.sys   Mon Jul 13 19:54:03 2009 (4A5BC91B)
9165a000 91662000   FwLnk    FwLnk.sys    Sun Nov 19 09:11:12 2006 (45606600)
91662000 91674000   amdk8    amdk8.sys    Mon Jul 13 19:11:03 2009 (4A5BBF07)
91674000 91677700   CmBatt   CmBatt.sys   Mon Jul 13 19:19:18 2009 (4A5BC0F6)
91678000 917a5000   athr     athr.sys     Mon Sep 21 13:58:25 2009 (4AB7BEC1)
917a5000 917f0000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
91800000 9180d000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
91817000 91ca8000   atikmdag atikmdag.sys Fri May 22 00:08:48 2009 (4A162550)
91ca8000 91d5f000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 20:48:33 2009 (4AC54DE1)
91d5f000 91d98000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:25:25 2009 (4A5BC265)
91d98000 91dbd000   Rt86win7 Rt86win7.sys Thu Feb 26 04:04:22 2009 (49A65B16)
91dbd000 91dc7000   vwifibus vwifibus.sys Mon Jul 13 19:52:02 2009 (4A5BC8A2)
91dc7000 91dd1000   usbohci  usbohci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
91dd1000 91de0000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
91de0000 91dff000   HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
92210000 92240000   SynTP    SynTP.sys    Thu Aug 14 22:02:22 2008 (48A4E3AE)
92240000 92241700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
92242000 9224f000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
9224f000 9225c000   CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
9225c000 9225e080   wacomvhid wacomvhid.sys Wed May 20 15:54:02 2009 (4A145FDA)
9225f000 92272000   HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
92272000 92278480   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
92279000 9227a680   WacomVKHid WacomVKHid.sys Thu Feb 15 18:11:07 2007 (45D4E88B)
9227b000 9227ce80   WacomVTHid WacomVTHid.sys Wed May 20 18:14:28 2009 (4A1480C4)
9227d000 9228f000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
9228f000 922a7000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
922a7000 922b2000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
922b2000 922d4000   ndiswan  ndiswan.sys  Mon Jul 13 19:54:34 2009 (4A5BC93A)
922d4000 922ec000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
922ec000 92303000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
92303000 9231a000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
9231a000 92324000   rdpbus   rdpbus.sys   Mon Jul 13 20:02:40 2009 (4A5BCB20)
92324000 92325380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
92326000 9235a000   ks       ks.sys       Mon Jul 13 19:45:13 2009 (4A5BC709)
9235a000 92368000   umbus    umbus.sys    Mon Jul 13 19:51:38 2009 (4A5BC88A)
92368000 923ac000   usbhub   usbhub.sys   Mon Jul 13 19:52:06 2009 (4A5BC8A6)
923ac000 923b7000   mouhid   mouhid.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
923b7000 923bf000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:29 2007 (45D5F40D)
923bf000 923cb000   kbdhid   kbdhid.sys   Mon Jul 13 19:45:09 2009 (4A5BC705)
923cb000 923dc000   NDProxy  NDProxy.SYS  Mon Jul 13 19:54:27 2009 (4A5BC933)
92626000 9272c000   AGRSM    AGRSM.sys    Mon Nov 10 09:56:37 2008 (49184BA5)
9272c000 92739000   modem    modem.sys    Mon Jul 13 19:55:24 2009 (4A5BC96C)
92739000 9277f000   nwifi    nwifi.sys    Mon Jul 13 19:51:59 2009 (4A5BC89F)
9277f000 927ce000   srv2     srv2.sys     Mon Jul 13 19:14:52 2009 (4A5BBFEC)
92800000 92813000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
92813000 92834000   srvnet   srvnet.sys   Mon Jul 13 19:14:45 2009 (4A5BBFE5)
92835000 92ad0140   RTKVHDA  RTKVHDA.sys  Tue Jul 28 09:02:38 2009 (4A6EF6EE)
92ad1000 92b00000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
92b00000 92b19000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
92b24000 92b3b000   USBSTOR  USBSTOR.SYS  Mon Jul 13 19:51:19 2009 (4A5BC877)
92b3b000 92b48000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
92b48000 92b53000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
92b53000 92b5c000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
92b5c000 92b6d000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
92b6d000 92b77000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
92b77000 92b82000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
92b82000 92b9d000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
92b9d000 92bb4000   aswMonFlt aswMonFlt.sys Tue Sep 15 06:55:08 2009 (4AAF728C)
92bb4000 92bbc000   aswFsBlk aswFsBlk.sys Tue Sep 15 06:55:18 2009 (4AAF7296)
92bbc000 92bd6000   WudfPf   WudfPf.sys   Mon Jul 13 19:50:13 2009 (4A5BC835)
92bd6000 92be6000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
92be6000 92bf6000   ndisuio  ndisuio.sys  Mon Jul 13 19:53:51 2009 (4A5BC90F)
96200000 9644a000   win32k   win32k.sys   unavailable (00000000)
96460000 96469000   TSDDD    TSDDD.dll    unavailable (00000000)
96490000 964ae000   cdd      cdd.dll      unavailable (00000000)
9ca00000 9ca0d000   tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
9ca1b000 9caa0000   HTTP     HTTP.sys     Mon Jul 13 19:12:53 2009 (4A5BBF75)
9caa0000 9cab9000   bowser   bowser.sys   Mon Jul 13 19:14:21 2009 (4A5BBFCD)
9cab9000 9cacb000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
9cacb000 9caee000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:14:24 2009 (4A5BBFD0)
9caee000 9cb29000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:14:34 2009 (4A5BBFDA)
9cb29000 9cb44000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:14:29 2009 (4A5BBFD5)
9cb5c000 9cbf3000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
9cbf3000 9cbfd000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
9e82d000 9e87e000   srv      srv.sys      Mon Jul 13 19:15:10 2009 (4A5BBFFE)
9e87e000 9e886000   ALSysIO  ALSysIO.sys  Sun Apr 19 15:41:19 2009 (49EB7E5F)
9e886000 9e8a6480   WUDFRd   WUDFRd.sys   Mon Jul 13 19:50:44 2009 (4A5BC854)
9e911000 9e91c000   hidusb   hidusb.sys   Mon Jul 13 19:51:04 2009 (4A5BC868)

Unloaded modules:
9e8a7000 9e911000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9cb44000 9cb5c000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfab000 8bfb8000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfb8000 8bfc3000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfc3000 8bfcc000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfcc000 8bfdd000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
92b19000 92b24000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start    end        module name
8b99b000 8b9e3000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
8f210000 8f26a000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
9227d000 9228f000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
92626000 9272c000   AGRSM    AGRSM.sys    Mon Nov 10 09:56:37 2008 (49184BA5)
9e87e000 9e886000   ALSysIO  ALSysIO.sys  Sun Apr 19 15:41:19 2009 (49EB7E5F)
91662000 91674000   amdk8    amdk8.sys    Mon Jul 13 19:11:03 2009 (4A5BBF07)
8bb3d000 8bb46000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
92bb4000 92bbc000   aswFsBlk aswFsBlk.sys Tue Sep 15 06:55:18 2009 (4AAF7296)
92b9d000 92bb4000   aswMonFlt aswMonFlt.sys Tue Sep 15 06:55:08 2009 (4AAF728C)
8f26a000 8f26db20   aswRdr   aswRdr.SYS   Tue Sep 15 06:54:20 2009 (4AAF725C)
8ba0b000 8ba2c000   aswSP    aswSP.SYS    Tue Sep 15 06:55:29 2009 (4AAF72A1)
8ba00000 8ba0a660   aswTdi   aswTdi.SYS   Tue Sep 15 06:54:29 2009 (4AAF7265)
8bb11000 8bb1a000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
8bb1a000 8bb3d000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
91678000 917a5000   athr     athr.sys     Mon Sep 21 13:58:25 2009 (4AB7BEC1)
91817000 91ca8000   atikmdag atikmdag.sys Fri May 22 00:08:48 2009 (4A162550)
8ba80000 8ba8b000   BATTC    BATTC.SYS    Mon Jul 13 19:19:15 2009 (4A5BC0F3)
8be07000 8be0e000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8f3e5000 8f3f3000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8b827000 8b82f000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
9caa0000 9cab9000   bowser   bowser.sys   Mon Jul 13 19:14:21 2009 (4A5BBFCD)
96490000 964ae000   cdd      cdd.dll      unavailable (00000000)
8bfdd000 8bffc000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8b871000 8b91c000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8bf86000 8bfab000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8b82f000 8b871000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
91674000 91677700   CmBatt   CmBatt.sys   Mon Jul 13 19:19:18 2009 (4A5BC0F6)
8bd95000 8bdf2000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8ba78000 8ba80000   compbatt compbatt.sys Mon Jul 13 19:19:18 2009 (4A5BC0F6)
9224f000 9225c000   CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
92b3b000 92b48000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8f369000 8f3cd000   csc      csc.sys      Mon Jul 13 19:15:08 2009 (4A5BBFFC)
8f3cd000 8f3e5000   dfsc     dfsc.sys     Mon Jul 13 19:14:16 2009 (4A5BBFC8)
8f35d000 8f369000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8bf75000 8bf86000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
92b00000 92b19000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
92b53000 92b5c000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
92b48000 92b53000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
92b5c000 92b6d000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
92b6d000 92b77000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
91ca8000 91d5f000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 20:48:33 2009 (4AC54DE1)
91d5f000 91d98000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:25:25 2009 (4A5BC265)
8bb7a000 8bb8b000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8bb46000 8bb7a000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8bc00000 8bc09000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8bf43000 8bf75000   fvevol   fvevol.sys   Mon Jul 13 19:13:01 2009 (4A5BBF7D)
9165a000 91662000   FwLnk    FwLnk.sys    Sun Nov 19 09:11:12 2006 (45606600)
8c188000 8c1b9000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
82a0d000 82a44000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
91de0000 91dff000   HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
9225f000 92272000   HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
92272000 92278480   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
9e911000 9e91c000   hidusb   hidusb.sys   Mon Jul 13 19:51:04 2009 (4A5BC868)
9ca1b000 9caa0000   HTTP     HTTP.sys     Mon Jul 13 19:12:53 2009 (4A5BBF75)
8bf3b000 8bf43000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
91600000 91618000   i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
91800000 9180d000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
923bf000 923cb000   kbdhid   kbdhid.sys   Mon Jul 13 19:45:09 2009 (4A5BC705)
80bba000 80bc2000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
92326000 9235a000   ks       ks.sys       Mon Jul 13 19:45:13 2009 (4A5BC709)
8bd82000 8bd95000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8bf06000 8bf2b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:34:00 2009 (4A5BC468)
92bd6000 92be6000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
92b82000 92b9d000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
8b80b000 8b816000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 19:13:13 2009 (4A5BBF89)
9272c000 92739000   modem    modem.sys    Mon Jul 13 19:55:24 2009 (4A5BC96C)
92b77000 92b82000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
92242000 9224f000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
923ac000 923b7000   mouhid   mouhid.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8bafb000 8bb11000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
9cab9000 9cacb000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
9cacb000 9caee000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:14:24 2009 (4A5BBFD0)
9caee000 9cb29000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:14:34 2009 (4A5BBFDA)
9cb29000 9cb44000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:14:29 2009 (4A5BBFD5)
8bbc4000 8bbcf000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8b9ec000 8b9f4000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8bd57000 8bd82000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
8f353000 8f35d000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8bf2b000 8bf3b000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8be11000 8bec8000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
922a7000 922b2000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
92be6000 92bf6000   ndisuio  ndisuio.sys  Mon Jul 13 19:53:51 2009 (4A5BC90F)
922b2000 922d4000   ndiswan  ndiswan.sys  Mon Jul 13 19:54:34 2009 (4A5BC93A)
923cb000 923dc000   NDProxy  NDProxy.SYS  Mon Jul 13 19:54:27 2009 (4A5BC933)
8f2d7000 8f2e5000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
8f26e000 8f2a0000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
8bec8000 8bf06000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
8bbcf000 8bbdd000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
8f349000 8f353000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82a44000 82e54000   nt       ntkrpamp.exe Mon Jul 13 19:15:19 2009 (4A5BC007)
8bc28000 8bd57000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
8be00000 8be07000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
92739000 9277f000   nwifi    nwifi.sys    Mon Jul 13 19:51:59 2009 (4A5BC89F)
8f2a7000 8f2c6000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8ba67000 8ba78000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8ba32000 8ba5c000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
8bae6000 8baed000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
8baed000 8bafb000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8bdf2000 8be00000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
9cb5c000 9cbf3000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
92ad1000 92b00000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
8b816000 8b827000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
9228f000 922a7000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
922d4000 922ec000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
922ec000 92303000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
92303000 9231a000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
8f308000 8f349000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
9231a000 92324000   rdpbus   rdpbus.sys   Mon Jul 13 20:02:40 2009 (4A5BCB20)
8bbac000 8bbb4000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8bbb4000 8bbbc000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
8bbbc000 8bbc4000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8c1cf000 8c1fc000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
92800000 92813000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
91d98000 91dbd000   Rt86win7 Rt86win7.sys Thu Feb 26 04:04:22 2009 (49A65B16)
92835000 92ad0140   RTKVHDA  RTKVHDA.sys  Tue Jul 28 09:02:38 2009 (4A6EF6EE)
9cbf3000 9cbfd000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8c1c7000 8c1cf000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
9e82d000 9e87e000   srv      srv.sys      Mon Jul 13 19:15:10 2009 (4A5BBFFE)
9277f000 927ce000   srv2     srv2.sys     Mon Jul 13 19:14:52 2009 (4A5BBFEC)
92813000 92834000   srvnet   srvnet.sys   Mon Jul 13 19:14:45 2009 (4A5BBFE5)
92324000 92325380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
92210000 92240000   SynTP    SynTP.sys    Thu Aug 14 22:02:22 2008 (48A4E3AE)
8c03f000 8c188000   tcpip    tcpip.sys    Mon Jul 13 19:13:18 2009 (4A5BBF8E)
9ca00000 9ca0d000   tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
8bbf4000 8bbff000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
8bbdd000 8bbf4000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
8f2f8000 8f308000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
96460000 96469000   TSDDD    TSDDD.dll    unavailable (00000000)
91639000 9165a000   tunnel   tunnel.sys   Mon Jul 13 19:54:03 2009 (4A5BC91B)
8c1c2000 8c1c6100   TVALZ_O  TVALZ_O.SYS  Mon Jul 13 22:19:21 2009 (4A5BEB29)
9235a000 92368000   umbus    umbus.sys    Mon Jul 13 19:51:38 2009 (4A5BC88A)
92240000 92241700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
91dd1000 91de0000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
92368000 923ac000   usbhub   usbhub.sys   Mon Jul 13 19:52:06 2009 (4A5BC8A6)
91dc7000 91dd1000   usbohci  usbohci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
917a5000 917f0000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
92b24000 92b3b000   USBSTOR  USBSTOR.SYS  Mon Jul 13 19:51:19 2009 (4A5BC877)
8ba5c000 8ba67000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
8bc09000 8bc15000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
8bb8b000 8bbac000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8c1b9000 8c1c1380   vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8ba8b000 8ba9b000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8ba9b000 8bae6000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8c000000 8c03f000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
91dbd000 91dc7000   vwifibus vwifibus.sys Mon Jul 13 19:52:02 2009 (4A5BC8A2)
8f2c6000 8f2d7000   vwififlt vwififlt.sys Mon Jul 13 19:52:03 2009 (4A5BC8A3)
923b7000 923bf000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:29 2007 (45D5F40D)
9225c000 9225e080   wacomvhid wacomvhid.sys Wed May 20 15:54:02 2009 (4A145FDA)
92279000 9227a680   WacomVKHid WacomVKHid.sys Thu Feb 15 18:11:07 2007 (45D4E88B)
9227b000 9227ce80   WacomVTHid WacomVTHid.sys Wed May 20 18:14:28 2009 (4A1480C4)
8f2e5000 8f2f8000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
8bc15000 8bc22000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8b91c000 8b98d000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8b98d000 8b99b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8f2a0000 8f2a7000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
96200000 9644a000   win32k   win32k.sys   unavailable (00000000)
8b9e3000 8b9ec000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
92bbc000 92bd6000   WudfPf   WudfPf.sys   Mon Jul 13 19:50:13 2009 (4A5BC835)
9e886000 9e8a6480   WUDFRd   WUDFRd.sys   Mon Jul 13 19:50:44 2009 (4A5BC854)

Unloaded modules:
9e8a7000 9e911000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9cb44000 9cb5c000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfab000 8bfb8000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfb8000 8bfc3000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfc3000 8bfcc000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bfcc000 8bfdd000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
92b19000 92b24000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 00000019
Arguments 00000020 8540d000 8540d300 08600000

Meepit · 04 Nov 2009

Wacom? That's surprising. I just downloaded the latest driver for my tablet... Avast updates itself (also a fresh download for Win7), so could it be an infection?

usasma · 04 Nov 2009

If you check the stack text for the last memory dump - you'll find components of Avast in there. And they are very close to the area where the stack unwind information is unavailable - and seem very close to the top of the stack when the crash occurs (which increases the likelihood of it being involved in the crash (although there's also a networking component there also).

The memory dump is a snapshot of the system just as it crashed. It doesn't include everything, and it may not even show the obvious issues. So, the clues that we pick up from the dump file lead to the suggestions that we make.

In this case I would uninstall/reinstall Avast because of the above info. Once you've reinstalled it, then update it and scan for malware.

The older drivers are just that - older drivers. They are more likely to have issues, especially with the newer OS's, but this doesn't mean that they are definitely bad. But, it's in indicator of a potential problem - so it's worth looking into.

Meepit · 04 Nov 2009

Aye cap'n! I'll do that and let you all know the results.

Meepit · 08 Nov 2009

Well, I tried what you asked, and I still seem to be having a problem. Updated my network drivers, uninstalled and reinstalled Avast! and scanned. Didn't find anything. It went another day before it BSOD'd again... I got a Bluescreen with the BAD_POOL_HEADER error, and one new one after returning from Sleep, IRQL_NOT_LESS_OR_EQUAL.

More BSOD... Woo

More BSOD... Woo -Still Unresolved-