Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD woes


26 Nov 2009   #1

Windows7 Ultimate 64
 
 
BSOD woes

Hi All,

I have bewen having some BSOD issues with my new system and sadly can not seem to get to the bottom of it...

I am going to go with either problems with the 64 ATI drivers, new ones dont seem to work with the 5770's OR its a SSD issue and Intel still have not sorted out their toolbox / trimming issues...

But I am not 100% sure and can not seem to see any patterns.. Just randomly BSOD's..

Also, sometimes on boot, it trys to start windows then just stops with a single flashing cursor just before you would usually see the windows logo load. Hard reset then works...

Error:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 2057
Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF80002AAE35F
BCP3: 0000000000000000
BCP4: FFFFFFFFFFFFFFFF
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Todays BSOD logs attached..

System:

OS Windows7 Ultimate 64 CPU i5 720 2.66 s115 Motherboard GBYTE GA-P55A-UD3 Memory 3x2GB Corsair - TR3X6G1600C8 Graphics Card(s) 1GB XFX HD5770 DDR5 PCI-E Sound Card ON BOARD Monitor(s) Displays LG Screen Resolution N/A Hard Drives INTEL SSD 2.5I 80 GB MLC Gen.2 SS PSU Corsair 650W Case COOLMASTER Cooling corsair H50 Water Cooling

My System SpecsSystem Spec
.

26 Nov 2009   #2

Win 8 Release candidate 8400
 
 

Quote   Quote: Originally Posted by mambonee View Post
Hi All,

I have bewen having some BSOD issues with my new system and sadly can not seem to get to the bottom of it...

I am going to go with either problems with the 64 ATI drivers, new ones dont seem to work with the 5770's OR its a SSD issue and Intel still have not sorted out their toolbox / trimming issues...

But I am not 100% sure and can not seem to see any patterns.. Just randomly BSOD's..

Also, sometimes on boot, it trys to start windows then just stops with a single flashing cursor just before you would usually see the windows logo load. Hard reset then works...

Error:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 2057
Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF80002AAE35F
BCP3: 0000000000000000
BCP4: FFFFFFFFFFFFFFFF
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Todays BSOD logs attached..

System:

OS Windows7 Ultimate 64 CPU i5 720 2.66 s115 Motherboard GBYTE GA-P55A-UD3 Memory 3x2GB Corsair - TR3X6G1600C8 Graphics Card(s) 1GB XFX HD5770 DDR5 PCI-E Sound Card ON BOARD Monitor(s) Displays LG Screen Resolution N/A Hard Drives INTEL SSD 2.5I 80 GB MLC Gen.2 SS PSU Corsair 650W Case COOLMASTER Cooling corsair H50 Water Cooling
Hii and welcome

this was pretty straight forward memory corruption. the file that failed is over three years old and really needs to be updated. I would \

download and run memtestx86 for several hours at least.
if you are overclocking stop
If you have a raid update its driver
run a system file check to verify and fix your system files
type cmd ins search>right click and run as admin>sfc /scannow
let us know your results


Ken


secdrv.SYS fffff880`06353000 fffff880`0635e000 0x0000b000 0x4508052e 9/13/2006 8:18:38 AM




Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\112609-11715-01.txt.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*Symbol information
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a17000 PsLoadedModuleList = 0xfffff800`02c54e50
Debug session time: Thu Nov 26 14:49:39.802 2009 (GMT-5)
System Uptime: 0 days 0:12:07.223
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {ffffffffc0000005, fffff80002aae35f, 0, ffffffffffffffff}

Probably caused by : memory_corruption ( nt!MiReplenishPageSlist+100 )

Followup: MachineOwner

---------

3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80002aae35f, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception


Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!MiReplenishPageSlist+100
fffff800`02aae35f f00fba6b1000 lock bts dword ptr [rbx+10h],0

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cbf0e0
ffffffffffffffff

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x1E

PROCESS_NAME: MsMpEng.exe

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from fffff80002ac8a17 to fffff80002a88f00

STACK_TEXT:
fffff880`06026e38 fffff800`02ac8a17 : 00000000`0000001e ffffffff`c0000005 fffff800`02aae35f 00000000`00000000 : nt!KeBugCheckEx
fffff880`06026e40 fffff800`02a88542 : fffff880`06027618 effffa80`00b60370 fffff880`060276c0 00000000`00000005 : nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`060274e0 fffff800`02a86e4a : fffffa80`05434e60 00000000`00000ffc 00000000`00000000 00000000`00000ffc : nt!KiExceptionDispatch+0xc2
fffff880`060276c0 fffff800`02aae35f : fffff880`06027848 fffff880`06027858 00000000`00000000 00000000`01af5c00 : nt!KiGeneralProtectionFault+0x10a
fffff880`06027850 fffff800`02aae88f : fffff800`02cc1400 00000000`0000003d fffffa80`00b69370 fffffa80`00b67b70 : nt!MiReplenishPageSlist+0x100
fffff880`060278b0 fffff800`02aa6a97 : 00000000`00000002 00000000`00000002 fffffa80`07819538 00000000`00000002 : nt!MiRemoveAnyPage+0x24f
fffff880`060279d0 fffff800`02aa31a6 : 00000000`00000001 00000000`03e84ff8 fffff880`06027c20 fffff680`0001f420 : nt!MiResolveDemandZeroFault+0x577
fffff880`06027ac0 fffff800`02a86fee : 00000000`00000001 00000000`01630000 00000000`00000001 00000000`00000068 : nt!MmAccessFault+0x5c6
fffff880`06027c20 00000000`771b7f58 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`008cd760 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x771b7f58


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiReplenishPageSlist+100
fffff800`02aae35f f00fba6b1000 lock bts dword ptr [rbx+10h],0

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: nt!MiReplenishPageSlist+100

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: X64_0x1E_nt!MiReplenishPageSlist+100

BUCKET_ID: X64_0x1E_nt!MiReplenishPageSlist+100

Followup: MachineOwner
---------
My System SpecsSystem Spec
26 Nov 2009   #3

Windows7 Ultimate 64
 
 

Thanks Ken,

I tried to run scannow as admin but only made it to 40% before the below messaage was displayed.. I did a bit of googling but all links seemed to relate to Vista?

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 40% complete.
Windows Resource Protection could not perform the requested operation.
C:\Windows\system32>

Also ran memtest86+ for a full test cycle and passed 100% with no errors. I will let it run overnight so it gets a solid 8 hours or so to see if multiple runs comes up with anything.

Also managed to get two more BSOD's in the process, I have attached the new logs, second one seems different:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 2057
Additional information about the problem:
BCCode: 1a
BCP1: 0000000000000031
BCP2: FFFFFA800722FD60
BCP3: FFFFF8800A9AE000
BCP4: FFFFF8A007994F94
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Really appreciate your assistance.

Thanks again!

Marcus
My System SpecsSystem Spec
.


26 Nov 2009   #4
Microsoft MVP

 
 

I can't find anything significant in the memory dump files. Please run the Memtest overnight to get a better idea of the status of your RAM.

If that passes, then try Driver Verifier according to these instructions:
Quote:
Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.


So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista Startup Repair feature).


Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Automatically select unsigned drivers" and click "Next"
If no drivers show up, then select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.


Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.


Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.


If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.


More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users
If you go 36 hours without a BSOD (due to Driver Verifier), then reset Driver Verifier to check only the Microsoft drivers (and let it go another 36 hours).
My System SpecsSystem Spec
27 Nov 2009   #5

Windows7 Ultimate 64
 
 

Thanks again for the help guys, ran memtestx86 for 18 hours without error, ran the Windows 7 mem check too, just coz, and came up clean...

I have setup the verify stuff now and have it running in the background... I had one 'freeze' requiring a hard reset but no BSOD.. Also used DriverMax and according to it I have the latest drivers for everything.

Will let verify run over the weekend and see how it pans out, I assume this will log additonal information with the BSOD if and when it occurs? Will post the logs all the same!

Thanks again!
Marcus
My System SpecsSystem Spec
27 Nov 2009   #6
Microsoft MVP

 
 

Normally the system will spit out a BSOD quickly - but I'm wondering if this is a Windows issue rather than a 3rd party driver issue (which is why I suggest testing the Microsoft drivers separately).

If there's no BSOD from Driver Verifier, then I'd have to suspect hardware problems. Since the memory passed the Memtest, then I'd have to wonder about your motherboard. Can you check to make sure that it's clean and not overheating?
My System SpecsSystem Spec
28 Nov 2009   #7

Windows7 Ultimate 64
 
 

The motherboard is brand spanking new, its in a coolmaster case that does not get very hot at all, water cooled cpu and 4 fans.

I still have the driver verify running but have not changed it to the windows one yet. I did manage to get a new BSOD though! edit:and another..

Have attached the most recent logs. Do you think the Intel SSD issues with windows 7 could be playing a part here?

I am still waiting for the new SSD tool to be released so until then 'technically' nothing can be deleted from my SSD. Intel really need to sort this trimming stuff out...

I will be playing some Warcraft today with the driver verify running so will attach any more BSOD's generated, probably switch over to try and stress the MS drivers later this arvo too.

Also, not sure if this helps, but if it freezes and I have to hard reset then it gets to the 'Loading Operating System' then just a flashing cursor. I reset and it loads fine. Seems to do this every time it freezes or randomly decides to reset..

Thanks again!

Marcus
My System SpecsSystem Spec
28 Nov 2009   #8
Microsoft MVP

 
 

These 2 minidumps are Verifier enabled minidumps.
Unfortunately, it still points at the NT Kernel as the cause of your problems. Also, the dumps seem to point at a system service that's causing the issue.

So, I'd suggest trying to verify the Microsoft drivers next.
Also, I'm unsure of the impact that the SSD would have on this - but the alternative is to remove the SSD from the mix to see if that's the issue.

Here's the analysis of the memory dumps:
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR\TempDUMP\DATA\01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a05000 PsLoadedModuleList = 0xfffff800`02c42e50
Debug session time: Sat Nov 28 03:20:08.176 2009 (GMT-5)
System Uptime: 0 days 2:12:18.597
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {5002, fffff70001080000, 19bba, a0019bbbfffffffe}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+21bb1 )

Followup: MachineOwner
---------

1: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff80002cad000
THREAD fffffa80081bc060  Cid 0eb8.0ed4  Teb: 000000007ef38000 Win32Thread: 0000000000000000 RUNNING on processor 1
Not impersonating
GetUlongFromAddress: unable to read from fffff80002bebb74
Owning Process            fffffa8007e2fb30       Image:         Wow.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      508881       
Context Switch Count      4896433             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x00000000006e7b80
Stack Init fffff88006aa6db0 Current fffff88006aa6300
Base fffff88006aa7000 Limit fffff88006aa1000 Call 0
Priority 11 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`06aa6778 fffff800`02adf521 : 00000000`0000001a 00000000`00005002 fffff700`01080000 00000000`00019bba : nt!KeBugCheckEx
fffff880`06aa6780 fffff800`02a9182c : fffff680`00166070 fffff880`06aa6840 00000000`00000000 ffffffff`ffffffff : nt! ?? ::FNODOBFM::`string'+0x21bb1
fffff880`06aa67d0 fffff800`02a74fee : 00000000`00000000 fffffa80`0787d510 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0xc4c
fffff880`06aa6930 fffff800`02d91c52 : fffff880`06aa6c00 fffffa80`00000001 fffffa80`04f448a0 fffffa80`0787d501 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`06aa6930)
fffff880`06aa6ac0 fffff800`02a76153 : 00000000`72da2450 00000000`00000000 00000000`00000000 00000000`075ff15c : nt!NtReadFile+0x142
fffff880`06aa6bb0 00000000`72da2dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`06aa6c20)
00000000`044bf0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72da2dd9

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005002, The subtype of the bugcheck.
Arg2: fffff70001080000
Arg3: 0000000000019bba
Arg4: a0019bbbfffffffe

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_5002

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  Wow.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88006aa6930 -- (.trap 0xfffff88006aa6930)
.trap 0xfffff88006aa6930
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=000000002cc5d000
rdx=000000002cc0e000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d91c52 rsp=fffff88006aa6ac0 rbp=fffff88006aa6ca0
 r8=0000000000000000  r9=00000000001d6041 r10=fffffa8004f448a0
r11=0000000000120089 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po cy
nt!NtReadFile+0x142:
fffff800`02d91c52 0fb602          movzx   eax,byte ptr [rdx] ds:24c0:00000000`2cc0e000=??
.trap
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002adf521 to fffff80002a76f00

STACK_TEXT:  
fffff880`06aa6778 fffff800`02adf521 : 00000000`0000001a 00000000`00005002 fffff700`01080000 00000000`00019bba : nt!KeBugCheckEx
fffff880`06aa6780 fffff800`02a9182c : fffff680`00166070 fffff880`06aa6840 00000000`00000000 ffffffff`ffffffff : nt! ?? ::FNODOBFM::`string'+0x21bb1
fffff880`06aa67d0 fffff800`02a74fee : 00000000`00000000 fffffa80`0787d510 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0xc4c
fffff880`06aa6930 fffff800`02d91c52 : fffff880`06aa6c00 fffffa80`00000001 fffffa80`04f448a0 fffffa80`0787d501 : nt!KiPageFault+0x16e
fffff880`06aa6ac0 fffff800`02a76153 : 00000000`72da2450 00000000`00000000 00000000`00000000 00000000`075ff15c : nt!NtReadFile+0x142
fffff880`06aa6bb0 00000000`72da2dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`044bf0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72da2dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+21bb1
fffff800`02adf521 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+21bb1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_0x1a_5002_VRF_nt!_??_::FNODOBFM::_string_+21bb1

BUCKET_ID:  X64_0x1a_5002_VRF_nt!_??_::FNODOBFM::_string_+21bb1

Followup: MachineOwner
---------

rax=a0019bbbfffffffe rbx=0000000000019bba rcx=000000000000001a
rdx=0000000000005002 rsi=fffff68000166070 rdi=fffffa8007e2fec8
rip=fffff80002a76f00 rsp=fffff88006aa6778 rbp=0000000000000000
 r8=fffff70001080000  r9=0000000000019bba r10=0000000000000000
r11=fffff70001080488 r12=fffff70001080000 r13=fffffa8004d99a30
r14=0000000000000000 r15=00000000ffffffff
iopl=0         nv up ei ng nz ac po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000296
nt!KeBugCheckEx:
fffff800`02a76f00 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`06aa6780=000000000000001a
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`06aa6778 fffff800`02adf521 : 00000000`0000001a 00000000`00005002 fffff700`01080000 00000000`00019bba : nt!KeBugCheckEx
fffff880`06aa6780 fffff800`02a9182c : fffff680`00166070 fffff880`06aa6840 00000000`00000000 ffffffff`ffffffff : nt! ?? ::FNODOBFM::`string'+0x21bb1
fffff880`06aa67d0 fffff800`02a74fee : 00000000`00000000 fffffa80`0787d510 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0xc4c
fffff880`06aa6930 fffff800`02d91c52 : fffff880`06aa6c00 fffffa80`00000001 fffffa80`04f448a0 fffffa80`0787d501 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`06aa6930)
fffff880`06aa6ac0 fffff800`02a76153 : 00000000`72da2450 00000000`00000000 00000000`00000000 00000000`075ff15c : nt!NtReadFile+0x142
fffff880`06aa6bb0 00000000`72da2dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`06aa6c20)
00000000`044bf0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x72da2dd9
start             end                 module name
fffff800`00ba6000 fffff800`00bb0000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`02a05000 fffff800`02fe2000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff800`02fe2000 fffff800`0302b000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00cc0000 fffff880`00cda000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cda000 fffff880`00ce3000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ce5000 fffff880`00d29000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00d29000 fffff880`00d3d000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00d3d000 fffff880`00d9b000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d9b000 fffff880`00dc5000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00dc5000 fffff880`00dd0000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00dd0000 fffff880`00dea000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e63000 fffff880`00e73000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00e74000 fffff880`00f18000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f18000 fffff880`00f27000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f27000 fffff880`00f7e000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f7e000 fffff880`00f87000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f87000 fffff880`00f91000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f91000 fffff880`00fc4000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fc4000 fffff880`00fd1000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00fd1000 fffff880`00fe6000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fe6000 fffff880`00ffb000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01011000 fffff880`0105d000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0105d000 fffff880`01071000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01071000 fffff880`010cf000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`010cf000 fffff880`01142000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01142000 fffff880`0118e000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0118e000 fffff880`011c8000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`011c8000 fffff880`011f7000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0124d000 fffff880`013f0000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01400000 fffff880`01409000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01409000 fffff880`014fb000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`014fb000 fffff880`0155b000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0155b000 fffff880`01586000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`01586000 fffff880`015d0000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`015d0000 fffff880`015e0000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`015e0000 fffff880`015e8000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`015e8000 fffff880`015fa000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01800000 fffff880`0180f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`01818000 fffff880`01852000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01852000 fffff880`01868000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01868000 fffff880`01898000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01898000 fffff880`018b5000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`018b5000 fffff880`018c3000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`018ce000 fffff880`018f8000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`018f8000 fffff880`01924000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`01924000 fffff880`0192d000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0192d000 fffff880`01934000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01934000 fffff880`01942000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01942000 fffff880`01967000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01967000 fffff880`01977000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`01977000 fffff880`01980000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01980000 fffff880`01989000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01989000 fffff880`01992000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01992000 fffff880`0199d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0199d000 fffff880`019ae000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`019ae000 fffff880`019cc000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`019cc000 fffff880`019d9000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019d9000 fffff880`019fa000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`02800000 fffff880`02869000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`0287d000 fffff880`02896000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`02896000 fffff880`028a4000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`028a4000 fffff880`028ad000   NuidFltr NuidFltr.sys Fri May 08 04:53:31 2009 (4A03F30B)
fffff880`028ad000 fffff880`028ba000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`028ba000 fffff880`028c8000   point64k point64k.sys Fri Oct 16 16:08:03 2009 (4AD8D2A3)
fffff880`028c8000 fffff880`028d6000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`028d6000 fffff880`028f9000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`028f9000 fffff880`0291a000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`0291a000 fffff880`0292f000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0292f000 fffff880`02947000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02947000 fffff880`029ed000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`02c00000 fffff880`02c0f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02c10000 fffff880`02c9a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02c9a000 fffff880`02cdf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`02cdf000 fffff880`02ce8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02ce8000 fffff880`02d0e000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`02d0e000 fffff880`02d1d000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d1d000 fffff880`02d3a000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`02d3a000 fffff880`02d55000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02d55000 fffff880`02d69000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02d69000 fffff880`02dba000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02dba000 fffff880`02dc6000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`02dc6000 fffff880`02dd1000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`02dd1000 fffff880`02de0000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`02de0000 fffff880`02dfb000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03e00000 fffff880`03e4b000   Rt64win7 Rt64win7.sys Thu Nov 05 09:15:41 2009 (4AF2DE0D)
fffff880`03e4b000 fffff880`03e5b000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03e5b000 fffff880`03e71000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03e71000 fffff880`03e7d000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03e7d000 fffff880`03e88000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`03e8f000 fffff880`03f12000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03f12000 fffff880`03f30000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03f30000 fffff880`03f41000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03f41000 fffff880`03f67000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03f67000 fffff880`03f7d000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03f7d000 fffff880`03fd3000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`03fd3000 fffff880`03ff7000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04000000 fffff880`0405c000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`0405c000 fffff880`04099000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04099000 fffff880`040bb000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`040bb000 fffff880`040c0200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`040c1000 fffff880`040d7000   nusb3hub nusb3hub.sys Fri Sep 25 09:58:23 2009 (4ABCCC7F)
fffff880`040d7000 fffff880`040e3000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`040e3000 fffff880`040f1000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`040fc000 fffff880`0413f000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`0413f000 fffff880`04151000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04151000 fffff880`041ab000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`041ab000 fffff880`041c0000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`041c0000 fffff880`041cc000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`041cc000 fffff880`041d5000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`041d5000 fffff880`041e8000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`041e8000 fffff880`041f4000   dc3d     dc3d.sys     Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`041f4000 fffff880`041fc080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04800000 fffff880`0480c000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0480c000 fffff880`04829000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`04829000 fffff880`04e4b000   atikmdag atikmdag.sys Wed Nov 04 11:11:41 2009 (4AF1A7BD)
fffff880`04e4b000 fffff880`04f3f000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04f3f000 fffff880`04f85000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04f85000 fffff880`04fa9000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04fa9000 fffff880`04fb6000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04fb6000 fffff880`04fc7000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04fc7000 fffff880`04ff7000   nusb3xhc nusb3xhc.sys Fri Sep 25 09:58:31 2009 (4ABCCC87)
fffff880`04ff7000 fffff880`04ff8f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04ff9000 fffff880`04ffa480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`05400000 fffff880`0544d000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`0544d000 fffff880`05470000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`05470000 fffff880`0547b000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0548b000 fffff880`05553000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`05553000 fffff880`05571000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`05571000 fffff880`05589000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05589000 fffff880`055b5000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`055b5000 fffff880`055e2000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`055e2000 fffff880`055f4000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`06647000 fffff880`066df000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`066df000 fffff880`066ef000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff960`00090000 fffff960`0039f000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff960`00550000 fffff960`0055a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00640000 fffff960`00667000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
fffff960`00820000 fffff960`00881000   ATMFD    ATMFD.DLL    Thu Jul 30 01:07:22 2009 (4A712A8A)

Unloaded modules:
fffff880`06760000 fffff880`06768000   cpuz132_x64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`066ef000 fffff880`06760000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01898000 fffff880`018a6000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018a6000 fffff880`018b2000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018b2000 fffff880`018bb000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018bb000 fffff880`018ce000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`00f27000 fffff880`00f7e000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c10000 fffff880`02c9a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e5b000 fffff880`03e71000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dc5000 fffff880`00dd0000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00cda000 fffff880`00ce3000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00d9b000 fffff880`00dc5000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04829000 fffff880`04e4b000   atikmdag atikmdag.sys Wed Nov 04 11:11:41 2009 (4AF1A7BD)
fffff960`00820000 fffff960`00881000   ATMFD    ATMFD.DLL    Thu Jul 30 01:07:22 2009 (4A712A8A)
fffff880`0192d000 fffff880`01934000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03f30000 fffff880`03f41000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05553000 fffff880`05571000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00640000 fffff960`00667000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
fffff880`018ce000 fffff880`018f8000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01868000 fffff880`01898000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d3d000 fffff880`00d9b000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010cf000 fffff880`01142000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03e4b000 fffff880`03e5b000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`040e3000 fffff880`040f1000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e8f000 fffff880`03f12000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`041e8000 fffff880`041f4000   dc3d     dc3d.sys     Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`03f12000 fffff880`03f30000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02dd1000 fffff880`02de0000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01852000 fffff880`01868000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04099000 fffff880`040bb000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`041cc000 fffff880`041d5000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`041c0000 fffff880`041cc000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`041d5000 fffff880`041e8000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`040d7000 fffff880`040e3000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04e4b000 fffff880`04f3f000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04f3f000 fffff880`04f85000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0105d000 fffff880`01071000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01011000 fffff880`0105d000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01818000 fffff880`01852000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01586000 fffff880`015d0000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02fe2000 fffff800`0302b000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04f85000 fffff880`04fa9000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04000000 fffff880`0405c000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`0287d000 fffff880`02896000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`041f4000 fffff880`041fc080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`018b5000 fffff880`018c3000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0548b000 fffff880`05553000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01400000 fffff880`01409000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03f67000 fffff880`03f7d000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02c00000 fffff880`02c0f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02896000 fffff880`028a4000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba6000 fffff800`00bb0000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`040fc000 fffff880`0413f000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0155b000 fffff880`01586000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`040bb000 fffff880`040c0200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0291a000 fffff880`0292f000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`028d6000 fffff880`028f9000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00ce5000 fffff880`00d29000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`028c8000 fffff880`028d6000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`01800000 fffff880`0180f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`028ad000 fffff880`028ba000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00cc0000 fffff880`00cda000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`018f8000 fffff880`01924000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`066df000 fffff880`066ef000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff880`05571000 fffff880`05589000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05589000 fffff880`055b5000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`05400000 fffff880`0544d000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`0544d000 fffff880`05470000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`01992000 fffff880`0199d000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f87000 fffff880`00f91000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01071000 fffff880`010cf000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02dc6000 fffff880`02dd1000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e8000 fffff880`015fa000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01409000 fffff880`014fb000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03e71000 fffff880`03e7d000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`011c8000 fffff880`011f7000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`041ab000 fffff880`041c0000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d0e000 fffff880`02d1d000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c9a000 fffff880`02cdf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`014fb000 fffff880`0155b000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0199d000 fffff880`019ae000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02dba000 fffff880`02dc6000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a05000 fffff800`02fe2000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`0124d000 fffff880`013f0000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`028a4000 fffff880`028ad000   NuidFltr NuidFltr.sys Fri May 08 04:53:31 2009 (4A03F30B)
fffff880`01924000 fffff880`0192d000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`040c1000 fffff880`040d7000   nusb3hub nusb3hub.sys Fri Sep 25 09:58:23 2009 (4ABCCC7F)
fffff880`04fc7000 fffff880`04ff7000   nusb3xhc nusb3xhc.sys Fri Sep 25 09:58:31 2009 (4ABCCC87)
fffff880`02ce8000 fffff880`02d0e000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`0480c000 fffff880`04829000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00fd1000 fffff880`00fe6000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f91000 fffff880`00fc4000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e63000 fffff880`00e73000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`02947000 fffff880`029ed000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`028ba000 fffff880`028c8000   point64k point64k.sys Fri Oct 16 16:08:03 2009 (4AD8D2A3)
fffff880`0405c000 fffff880`04099000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d29000 fffff880`00d3d000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03fd3000 fffff880`03ff7000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`02de0000 fffff880`02dfb000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`019d9000 fffff880`019fa000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`00dd0000 fffff880`00dea000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d69000 fffff880`02dba000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03e7d000 fffff880`03e88000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01977000 fffff880`01980000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01980000 fffff880`01989000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01989000 fffff880`01992000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0118e000 fffff880`011c8000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0292f000 fffff880`02947000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03e00000 fffff880`03e4b000   Rt64win7 Rt64win7.sys Thu Nov 05 09:15:41 2009 (4AF2DE0D)
fffff880`05470000 fffff880`0547b000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04800000 fffff880`0480c000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02d1d000 fffff880`02d3a000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015e0000 fffff880`015e8000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06647000 fffff880`066df000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`02800000 fffff880`02869000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`055b5000 fffff880`055e2000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`04ff9000 fffff880`04ffa480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`055e2000 fffff880`055f4000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019cc000 fffff880`019d9000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019ae000 fffff880`019cc000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d55000 fffff880`02d69000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00550000 fffff960`0055a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03f41000 fffff880`03f67000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`0413f000 fffff880`04151000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`01898000 fffff880`018b5000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04ff7000 fffff880`04ff8f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04fb6000 fffff880`04fc7000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04151000 fffff880`041ab000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03f7d000 fffff880`03fd3000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04fa9000 fffff880`04fb6000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fc4000 fffff880`00fd1000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01934000 fffff880`01942000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01942000 fffff880`01967000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015d0000 fffff880`015e0000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fe6000 fffff880`00ffb000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01142000 fffff880`0118e000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d3a000 fffff880`02d55000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01967000 fffff880`01977000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e74000 fffff880`00f18000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f18000 fffff880`00f27000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02cdf000 fffff880`02ce8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`0039f000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff880`00f7e000 fffff880`00f87000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`028f9000 fffff880`0291a000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06760000 fffff880`06768000   cpuz132_x64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`066ef000 fffff880`06760000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01898000 fffff880`018a6000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018a6000 fffff880`018b2000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018b2000 fffff880`018bb000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018bb000 fffff880`018ce000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000001A
Arguments 00000000`00005002 fffff700`01080000 00000000`00019bba a0019bbb`fffffffe
Closing open log file C:\Users\FUBAR\TempDUMP\DATA\$99-dbug.txt

.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
.
Opened log file 'C:\Users\FUBAR\TempDUMP\DATA\$99-dbug.txt'

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR\TempDUMP\DATA\02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a15000 PsLoadedModuleList = 0xfffff800`02c52e50
Debug session time: Sat Nov 28 01:06:47.676 2009 (GMT-5)
System Uptime: 0 days 0:09:57.096
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck BE, {fffff80002a826f0, 2a82121, fffff880031fc700, a}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+40a84 )

Followup: MachineOwner
---------

2: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff80002cbd000
THREAD fffffa8004f2c8c0  Cid 0004.0060  Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 2
Not impersonating
GetUlongFromAddress: unable to read from fffff80002bfbb74
Owning Process            fffffa8004ea5990       Image:         System
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      38274        
Context Switch Count      151148             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!ViKeTrimWorkerThreadRoutine (0xfffff80002f272b0)
Stack Init fffff880031fcdb0 Current fffff880031fca50
Base fffff880031fd000 Limit fffff880031f7000 Call 0
Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`031fc598 fffff800`02b04718 : 00000000`000000be fffff800`02a826f0 00000000`02a82121 fffff880`031fc700 : nt!KeBugCheckEx
fffff880`031fc5a0 fffff800`02a84fee : 00000000`00000000 fffffa80`0090fea0 00000000`00009581 00000000`0000000c : nt! ?? ::FNODOBFM::`string'+0x40a84
fffff880`031fc700 fffff800`02ac7c22 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`031fc700)
fffff880`031fc890 fffff800`02a9faf4 : fffffa80`0090fea0 00000000`00000001 fffff880`02f64180 00000000`00000001 : nt!KxWaitForLockOwnerShip+0x12
fffff880`031fc8c0 fffff800`02aba466 : fffffa80`0090fea0 fffff6fb`c0e00008 fffffa80`04be4b40 00000000`00000001 : nt!MiInsertPageInFreeOrZeroedList+0x4e4
fffff880`031fc9c0 fffff800`02aba22b : 00000000`00000003 00000000`00000000 80000000`3054e863 00000000`0000000c : nt!MiDeleteValidSystemPte+0x136
fffff880`031fcac0 fffff800`02a5aec6 : fffff800`02c11b40 80b00000`9e0d7d42 00000000`00000000 80900001`0000000c : nt!MiDeletePteRange+0x291
fffff880`031fcb40 fffff800`02b8c335 : fffff800`00000000 00000000`000035a8 fffff781`c0000000 fffff781`c0000488 : nt!MiRemoveWorkingSetPages+0x196
fffff880`031fcbc0 fffff800`02b8d7e7 : fffffa80`04f2c8c0 00000000`00000001 00000000`00000000 ffffffff`ffffffff : nt!MiEmptyWorkingSet+0x285
fffff880`031fcc70 fffff800`02f27261 : 00000000`00000000 fffffa80`04f2c8c0 00000000`00000080 00000000`00000080 : nt!MiTrimAllSystemPagableMemory+0x218
fffff880`031fccd0 fffff800`02f272d9 : fffffa80`04f2c8c0 fffffa80`04ea5990 00000000`00000000 00000000`00000000 : nt!MmVerifierTrimMemory+0xf1
fffff880`031fcd00 fffff800`02d2a166 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ViKeTrimWorkerThreadRoutine+0x29
fffff880`031fcd40 fffff800`02a65486 : fffff880`02f64180 fffffa80`04f2c8c0 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031fcd80 00000000`00000000 : fffff880`031fd000 fffff880`031f7000 fffff880`031fca50 00000000`00000000 : nt!KxStartSystemThread+0x16

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff80002a826f0, Virtual address for the attempted write.
Arg2: 0000000002a82121, PTE contents.
Arg3: fffff880031fc700, (reserved)
Arg4: 000000000000000a, (reserved)

Debugging Details:
------------------


DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xBE

PROCESS_NAME:  System

CURRENT_IRQL:  2

TRAP_FRAME:  fffff880031fc700 -- (.trap 0xfffff880031fc700)
.trap 0xfffff880031fc700
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880031fc928
rdx=fffff80002a826f0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ac7c22 rsp=fffff880031fc890 rbp=fffff880031fc900
 r8=fffff88002f64180  r9=0000000000000000 r10=fffff80002cbf840
r11=0000058000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!KxWaitForLockOwnerShip+0x12:
fffff800`02ac7c22 48890a          mov     qword ptr [rdx],rcx ds:4180:fffff800`02a826f0=90909090909090c3
.trap
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002b04718 to fffff80002a86f00

STACK_TEXT:  
fffff880`031fc598 fffff800`02b04718 : 00000000`000000be fffff800`02a826f0 00000000`02a82121 fffff880`031fc700 : nt!KeBugCheckEx
fffff880`031fc5a0 fffff800`02a84fee : 00000000`00000000 fffffa80`0090fea0 00000000`00009581 00000000`0000000c : nt! ?? ::FNODOBFM::`string'+0x40a84
fffff880`031fc700 fffff800`02ac7c22 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`031fc890 fffff800`02a9faf4 : fffffa80`0090fea0 00000000`00000001 fffff880`02f64180 00000000`00000001 : nt!KxWaitForLockOwnerShip+0x12
fffff880`031fc8c0 fffff800`02aba466 : fffffa80`0090fea0 fffff6fb`c0e00008 fffffa80`04be4b40 00000000`00000001 : nt!MiInsertPageInFreeOrZeroedList+0x4e4
fffff880`031fc9c0 fffff800`02aba22b : 00000000`00000003 00000000`00000000 80000000`3054e863 00000000`0000000c : nt!MiDeleteValidSystemPte+0x136
fffff880`031fcac0 fffff800`02a5aec6 : fffff800`02c11b40 80b00000`9e0d7d42 00000000`00000000 80900001`0000000c : nt!MiDeletePteRange+0x291
fffff880`031fcb40 fffff800`02b8c335 : fffff800`00000000 00000000`000035a8 fffff781`c0000000 fffff781`c0000488 : nt!MiRemoveWorkingSetPages+0x196
fffff880`031fcbc0 fffff800`02b8d7e7 : fffffa80`04f2c8c0 00000000`00000001 00000000`00000000 ffffffff`ffffffff : nt!MiEmptyWorkingSet+0x285
fffff880`031fcc70 fffff800`02f27261 : 00000000`00000000 fffffa80`04f2c8c0 00000000`00000080 00000000`00000080 : nt!MiTrimAllSystemPagableMemory+0x218
fffff880`031fccd0 fffff800`02f272d9 : fffffa80`04f2c8c0 fffffa80`04ea5990 00000000`00000000 00000000`00000000 : nt!MmVerifierTrimMemory+0xf1
fffff880`031fcd00 fffff800`02d2a166 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ViKeTrimWorkerThreadRoutine+0x29
fffff880`031fcd40 fffff800`02a65486 : fffff880`02f64180 fffffa80`04f2c8c0 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031fcd80 00000000`00000000 : fffff880`031fd000 fffff880`031f7000 fffff880`031fca50 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+40a84
fffff800`02b04718 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+40a84

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_0xBE_VRF_nt!_??_::FNODOBFM::_string_+40a84

BUCKET_ID:  X64_0xBE_VRF_nt!_??_::FNODOBFM::_string_+40a84

Followup: MachineOwner
---------

rax=0000000002a82121 rbx=fffff6fb7dbf0000 rcx=00000000000000be
rdx=fffff80002a826f0 rsi=0000000000000001 rdi=fffff6fb7dbed000
rip=fffff80002a86f00 rsp=fffff880031fc598 rbp=fffff880031fc600
 r8=0000000002a82121  r9=fffff880031fc700 r10=00000000000001f0
r11=fffff6fb7e0000a8 r12=fffff880031fc700 r13=fffff80002a826f0
r14=000000000078ce40 r15=0000000000000001
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000202
nt!KeBugCheckEx:
fffff800`02a86f00 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`031fc5a0=00000000000000be
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`031fc598 fffff800`02b04718 : 00000000`000000be fffff800`02a826f0 00000000`02a82121 fffff880`031fc700 : nt!KeBugCheckEx
fffff880`031fc5a0 fffff800`02a84fee : 00000000`00000000 fffffa80`0090fea0 00000000`00009581 00000000`0000000c : nt! ?? ::FNODOBFM::`string'+0x40a84
fffff880`031fc700 fffff800`02ac7c22 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`031fc700)
fffff880`031fc890 fffff800`02a9faf4 : fffffa80`0090fea0 00000000`00000001 fffff880`02f64180 00000000`00000001 : nt!KxWaitForLockOwnerShip+0x12
fffff880`031fc8c0 fffff800`02aba466 : fffffa80`0090fea0 fffff6fb`c0e00008 fffffa80`04be4b40 00000000`00000001 : nt!MiInsertPageInFreeOrZeroedList+0x4e4
fffff880`031fc9c0 fffff800`02aba22b : 00000000`00000003 00000000`00000000 80000000`3054e863 00000000`0000000c : nt!MiDeleteValidSystemPte+0x136
fffff880`031fcac0 fffff800`02a5aec6 : fffff800`02c11b40 80b00000`9e0d7d42 00000000`00000000 80900001`0000000c : nt!MiDeletePteRange+0x291
fffff880`031fcb40 fffff800`02b8c335 : fffff800`00000000 00000000`000035a8 fffff781`c0000000 fffff781`c0000488 : nt!MiRemoveWorkingSetPages+0x196
fffff880`031fcbc0 fffff800`02b8d7e7 : fffffa80`04f2c8c0 00000000`00000001 00000000`00000000 ffffffff`ffffffff : nt!MiEmptyWorkingSet+0x285
fffff880`031fcc70 fffff800`02f27261 : 00000000`00000000 fffffa80`04f2c8c0 00000000`00000080 00000000`00000080 : nt!MiTrimAllSystemPagableMemory+0x218
fffff880`031fccd0 fffff800`02f272d9 : fffffa80`04f2c8c0 fffffa80`04ea5990 00000000`00000000 00000000`00000000 : nt!MmVerifierTrimMemory+0xf1
fffff880`031fcd00 fffff800`02d2a166 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ViKeTrimWorkerThreadRoutine+0x29
fffff880`031fcd40 fffff800`02a65486 : fffff880`02f64180 fffffa80`04f2c8c0 fffff880`02f6efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`031fcd80 00000000`00000000 : fffff880`031fd000 fffff880`031f7000 fffff880`031fca50 00000000`00000000 : nt!KxStartSystemThread+0x16
start             end                 module name
fffff800`00bb5000 fffff800`00bbf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`02a15000 fffff800`02ff2000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff800`02ff2000 fffff800`0303b000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00cc0000 fffff880`00cce000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00cda000 fffff880`00d1e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00d1e000 fffff880`00d32000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00d32000 fffff880`00d90000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d90000 fffff880`00dec000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00dec000 fffff880`00dfd000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`00e00000 fffff880`00e1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e1a000 fffff880`00e23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e23000 fffff880`00e4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00e55000 fffff880`00ef9000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ef9000 fffff880`00f08000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f08000 fffff880`00f5f000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f5f000 fffff880`00f68000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f68000 fffff880`00f72000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f72000 fffff880`00fa5000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fa5000 fffff880`00fb2000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00fb2000 fffff880`00fc7000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fc7000 fffff880`00fdc000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00fdc000 fffff880`00fe3000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fe3000 fffff880`00ff3000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00ff3000 fffff880`00ffe000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01086000 fffff880`010c0000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`010c8000 fffff880`01114000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01114000 fffff880`01128000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01128000 fffff880`01186000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01186000 fffff880`011f9000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01235000 fffff880`0124b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0124b000 fffff880`01254000   NuidFltr NuidFltr.sys Fri May 08 04:53:31 2009 (4A03F30B)
fffff880`01254000 fffff880`013f7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`0144a000 fffff880`0145a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`0145a000 fffff880`01462000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01462000 fffff880`0146b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0146d000 fffff880`0155f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`0155f000 fffff880`015bf000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`015bf000 fffff880`015ea000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`015ea000 fffff880`015fc000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01800000 fffff880`01810000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`01810000 fffff880`01819000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01819000 fffff880`01822000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01822000 fffff880`0182b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0182b000 fffff880`01836000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01836000 fffff880`01847000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01847000 fffff880`01865000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`01865000 fffff880`01872000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01872000 fffff880`018f5000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`018fa000 fffff880`0192a000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`0192a000 fffff880`01947000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`01947000 fffff880`01960000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`01960000 fffff880`0198a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0198a000 fffff880`019b6000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`019b6000 fffff880`019bf000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`019bf000 fffff880`019c6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`019c6000 fffff880`019d4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019d4000 fffff880`019f9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`02c8c000 fffff880`02c97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`02c97000 fffff880`02ca6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`02ca6000 fffff880`02cc4000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02cc8000 fffff880`02d52000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02d52000 fffff880`02d97000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`02d97000 fffff880`02da0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02da0000 fffff880`02dc6000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`02dc6000 fffff880`02dd5000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02dd5000 fffff880`02df2000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`02df2000 fffff880`02e00000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`03a00000 fffff880`03a2c000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`03a4c000 fffff880`03a59000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`03a59000 fffff880`03a67000   point64k point64k.sys Fri Oct 16 16:08:03 2009 (4AD8D2A3)
fffff880`03a67000 fffff880`03a75000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03a75000 fffff880`03a98000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`03a98000 fffff880`03ab9000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`03ab9000 fffff880`03ace000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03ace000 fffff880`03ae6000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03ae6000 fffff880`03bae000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`03bae000 fffff880`03bcc000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`03bcc000 fffff880`03be4000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03e00000 fffff880`03e08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`03e0d000 fffff880`03e33000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03e33000 fffff880`03e49000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03e49000 fffff880`03e94000   Rt64win7 Rt64win7.sys Thu Nov 05 09:15:41 2009 (4AF2DE0D)
fffff880`03e94000 fffff880`03ec4000   nusb3xhc nusb3xhc.sys Fri Sep 25 09:58:31 2009 (4ABCCC87)
fffff880`03ec4000 fffff880`03ed0000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03ed0000 fffff880`03eed000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`03eed000 fffff880`03efd000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03efd000 fffff880`03f13000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03f13000 fffff880`03f37000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f37000 fffff880`03f43000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03f43000 fffff880`03f72000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f72000 fffff880`03f8d000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03f8d000 fffff880`03fae000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fae000 fffff880`03fc8000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03fc8000 fffff880`03fd3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`03fd3000 fffff880`03fe2000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03fe2000 fffff880`03ff1000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03ff1000 fffff880`03ffd000   dc3d     dc3d.sys     Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`04000000 fffff880`04022000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`04022000 fffff880`04027200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`04028000 fffff880`0403e000   nusb3hub nusb3hub.sys Fri Sep 25 09:58:23 2009 (4ABCCC7F)
fffff880`0403e000 fffff880`04059000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`04059000 fffff880`04065000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04065000 fffff880`04073000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04073000 fffff880`0407f000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0407f000 fffff880`04088000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04088000 fffff880`0409b000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0409f000 fffff880`040e2000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`040e2000 fffff880`040f4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`040f4000 fffff880`0414e000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0414e000 fffff880`04163000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`04163000 fffff880`041bf000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`041bf000 fffff880`041fc000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04800000 fffff880`048f4000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`048f6000 fffff880`04f18000   atikmdag atikmdag.sys Wed Nov 04 11:11:41 2009 (4AF1A7BD)
fffff880`04f18000 fffff880`04f5e000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04f5e000 fffff880`04f82000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04f82000 fffff880`04f8f000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04f8f000 fffff880`04fe5000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04fe5000 fffff880`04ff6000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04ff6000 fffff880`04ff7f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04ff8000 fffff880`04ff9480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`06400000 fffff880`064a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`064a6000 fffff880`064b1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`064b1000 fffff880`064de000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`064de000 fffff880`064f0000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`064f3000 fffff880`06540000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`06540000 fffff880`06563000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`06563000 fffff880`065cc000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`0687b000 fffff880`06913000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`06913000 fffff880`06923000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff960`000c0000 fffff960`003cf000   win32k   win32k.sys   unavailable (00000000)
fffff960`005b0000 fffff960`005ba000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00630000 fffff960`00657000   cdd      cdd.dll      unavailable (00000000)
fffff960`00840000 fffff960`008a1000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff880`06923000 fffff880`06994000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0192a000 fffff880`01938000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01938000 fffff880`01944000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01944000 fffff880`0194d000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0194d000 fffff880`01960000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`00f08000 fffff880`00f5f000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02cc8000 fffff880`02d52000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03efd000 fffff880`03f13000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00ff3000 fffff880`00ffe000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00e1a000 fffff880`00e23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e23000 fffff880`00e4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`048f6000 fffff880`04f18000   atikmdag atikmdag.sys Wed Nov 04 11:11:41 2009 (4AF1A7BD)
fffff960`00840000 fffff960`008a1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`019bf000 fffff880`019c6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`00dec000 fffff880`00dfd000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03bae000 fffff880`03bcc000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00630000 fffff960`00657000   cdd      cdd.dll      unavailable (00000000)
fffff880`01960000 fffff880`0198a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018fa000 fffff880`0192a000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d32000 fffff880`00d90000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01186000 fffff880`011f9000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03eed000 fffff880`03efd000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04065000 fffff880`04073000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01872000 fffff880`018f5000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03ff1000 fffff880`03ffd000   dc3d     dc3d.sys     Tue Nov 03 21:55:41 2009 (4AF0ED2D)
fffff880`02ca6000 fffff880`02cc4000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c97000 fffff880`02ca6000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01235000 fffff880`0124b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04000000 fffff880`04022000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0407f000 fffff880`04088000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04073000 fffff880`0407f000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04088000 fffff880`0409b000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04059000 fffff880`04065000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04800000 fffff880`048f4000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04f18000 fffff880`04f5e000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`01114000 fffff880`01128000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010c8000 fffff880`01114000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01086000 fffff880`010c0000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01400000 fffff880`0144a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02ff2000 fffff800`0303b000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04f5e000 fffff880`04f82000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04163000 fffff880`041bf000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`01947000 fffff880`01960000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`03e00000 fffff880`03e08080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`02df2000 fffff880`02e00000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`03ae6000 fffff880`03bae000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01462000 fffff880`0146b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03e33000 fffff880`03e49000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03fd3000 fffff880`03fe2000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00cc0000 fffff880`00cce000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb5000 fffff800`00bbf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0409f000 fffff880`040e2000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`015bf000 fffff880`015ea000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`04022000 fffff880`04027200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03ab9000 fffff880`03ace000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03a75000 fffff880`03a98000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cda000 fffff880`00d1e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`03a67000 fffff880`03a75000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03fe2000 fffff880`03ff1000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03a4c000 fffff880`03a59000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e00000 fffff880`00e1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0198a000 fffff880`019b6000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`06913000 fffff880`06923000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff880`03bcc000 fffff880`03be4000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`03a00000 fffff880`03a2c000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`064f3000 fffff880`06540000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`06540000 fffff880`06563000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`0182b000 fffff880`01836000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f68000 fffff880`00f72000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01128000 fffff880`01186000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c8c000 fffff880`02c97000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015ea000 fffff880`015fc000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0146d000 fffff880`0155f000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03f37000 fffff880`03f43000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03f43000 fffff880`03f72000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0414e000 fffff880`04163000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02dc6000 fffff880`02dd5000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d52000 fffff880`02d97000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0155f000 fffff880`015bf000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01836000 fffff880`01847000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c80000 fffff880`02c8c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a15000 fffff800`02ff2000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01254000 fffff880`013f7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0124b000 fffff880`01254000   NuidFltr NuidFltr.sys Fri May 08 04:53:31 2009 (4A03F30B)
fffff880`019b6000 fffff880`019bf000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04028000 fffff880`0403e000   nusb3hub nusb3hub.sys Fri Sep 25 09:58:23 2009 (4ABCCC7F)
fffff880`03e94000 fffff880`03ec4000   nusb3xhc nusb3xhc.sys Fri Sep 25 09:58:31 2009 (4ABCCC87)
fffff880`02da0000 fffff880`02dc6000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03ed0000 fffff880`03eed000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00fb2000 fffff880`00fc7000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f72000 fffff880`00fa5000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fdc000 fffff880`00fe3000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fe3000 fffff880`00ff3000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06400000 fffff880`064a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03a59000 fffff880`03a67000   point64k point64k.sys Fri Oct 16 16:08:03 2009 (4AD8D2A3)
fffff880`041bf000 fffff880`041fc000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d1e000 fffff880`00d32000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03f13000 fffff880`03f37000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f72000 fffff880`03f8d000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03f8d000 fffff880`03fae000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fae000 fffff880`03fc8000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c2f000 fffff880`02c80000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03fc8000 fffff880`03fd3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01810000 fffff880`01819000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01819000 fffff880`01822000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01822000 fffff880`0182b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`03ace000 fffff880`03ae6000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03e49000 fffff880`03e94000   Rt64win7 Rt64win7.sys Thu Nov 05 09:15:41 2009 (4AF2DE0D)
fffff880`064a6000 fffff880`064b1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03ec4000 fffff880`03ed0000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02dd5000 fffff880`02df2000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0145a000 fffff880`01462000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0687b000 fffff880`06913000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`06563000 fffff880`065cc000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`064b1000 fffff880`064de000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`04ff8000 fffff880`04ff9480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`064de000 fffff880`064f0000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01865000 fffff880`01872000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01847000 fffff880`01865000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c1b000 fffff880`02c2f000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005b0000 fffff960`005ba000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03e0d000 fffff880`03e33000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`040e2000 fffff880`040f4000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0192a000 fffff880`01947000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04ff6000 fffff880`04ff7f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04fe5000 fffff880`04ff6000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`040f4000 fffff880`0414e000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04f8f000 fffff880`04fe5000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0403e000 fffff880`04059000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`04f82000 fffff880`04f8f000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fa5000 fffff880`00fb2000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019c6000 fffff880`019d4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019d4000 fffff880`019f9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0144a000 fffff880`0145a000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fc7000 fffff880`00fdc000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d90000 fffff880`00dec000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c00000 fffff880`02c1b000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01800000 fffff880`01810000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e55000 fffff880`00ef9000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ef9000 fffff880`00f08000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d97000 fffff880`02da0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000c0000 fffff960`003cf000   win32k   win32k.sys   unavailable (00000000)
fffff880`00f5f000 fffff880`00f68000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`03a98000 fffff880`03ab9000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06923000 fffff880`06994000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0192a000 fffff880`01938000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01938000 fffff880`01944000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01944000 fffff880`0194d000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0194d000 fffff880`01960000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 000000BE
Arguments fffff800`02a826f0 00000000`02a82121 fffff880`031fc700 00000000`0000000a
My System SpecsSystem Spec
28 Nov 2009   #9

Windows7 Ultimate 64
 
 

I have not switched the verify over to the MS drivers yet but have been playing around a bit with the settings i was using in Warcraft today...

I had the sound set to max.. being reverb, etc, and am using on board sound, while this was set, had 2 bsod's in about 10 mins, also have everything set to max in the vidoe settings. I would think with this spec the video card and warcraft should not be an issue but onboard sound... possibly.....

Anyways, dropped the sound settings to normal and pulled the graphics back to high rather than ultra and not one bsod for the next 5 hrs or so of gaming... nothing since..

I will switch the verify to the MS drivers tomorrow and play for a few hours to see what happens..

Thanks again for your help, greatly appreciated!

Marcus

*edit: oh and I also unplugged my movie / music 1 ~TB external HDD during this period, plugged it back in just before and got my first 'freeze'.. hopefully the windows driver verify will tell all.
My System SpecsSystem Spec
29 Nov 2009   #10

Windows7 Ultimate 64
 
 

Hey there,

I have been running verifier with all the windows components selected (an no others) for the last 6 hours or so. Everything runs pretty slowly but not one BSOD or crash... I did have another BSOD this morning before I changed.

I have attached the logs but pretty sure they will same same...

Will see if any BSOD come in the next day with these settings.

Thanks again
Marcus
My System SpecsSystem Spec
Reply

 BSOD woes




Thread Tools



Similar help and support threads for2: BSOD woes
Thread Forum
Serious VHD woes Virtualization
Random BSOD Woes BSOD Help and Support
BSOD woes BSOD Help and Support
Encryption woes System Security
BSOD woes BSOD Help and Support
BSOD memory mgmt and other woes BSOD Help and Support
ATI All in Wonder Woes. Graphic Cards

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:12 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33