BAD_POOL_HEADER BSOD error (Minidump Included)

Citrus · 01 May 2010

I would really appreciate help in trying to figure out what is causing my recent BSODs. I have had two so far and they both had the exact same error code.
Here is the information I got using BlueScreenView:

Dump File : 050110-17908-01.dmp
Crash Time : 5/1/2010 2:38:36 PM
Bug Check String : BAD_POOL_HEADER
Bug Check Code : 0x00000019
Parameter 1 : 00000000`00000003
Parameter 2 : fffff800`03017c40
Parameter 3 : 00000000`00000000
Parameter 4 : fffff800`03017c40
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+70600
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16539 (win7_gdr.100226-1909)
Processor : x64
Computer Name :
Full Path : C:\Windows\Minidump\050110-17908-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7600

Here is my dumplog.txt from WinDBG:
Opened log file 'c:\debuglog.t - Anonymous - 38fU6uJn - Pastebin.com

usasma · 01 May 2010

I'd suspect your Kaspersky protection software since kl1.sys is present in the Stack Text.

Please do the following:

Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the Kaspersky from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of Kaspersky using this free tool: Removal tool for Kaspersky Lab products
- IMMEDIATELY install and update the free antivirus
- check to see if this fixes the BSOD's

Also, please update this older driver: RimSerial_AMD64.sys Tue Jan 09 11:50:11 2007
More info on it here: Driver Reference
It usually has something to do with software for a Blackberry.

Summary of the BSOD:

Code:

Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat May  1 13:42:38.274 2010 (GMT-4)
System Uptime: 0 days 7:58:08.912
BugCheck 19, {3, fffff80003017c40, 0, fffff80003017c40}
*** WARNING: Unable to verify timestamp for kl1.sys
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
Probably caused by : Pool_Corruption ( nt!ExFreePool+536 )
BUGCHECK_STR:  0x19_3
PROCESS_NAME:  wmpnetwk.exe

Citrus · 01 May 2010

How did you get that exact output from WinDbg? My output looks a bit different using the steps outlined here: WinDbg Analysis Report

usasma · 02 May 2010

I've run the memory dump twice and get the same results each time.
Your previous post of the memory dump analysis is done differently than mine - and I suspect that it may be a different memory dump file that was analyzed (but there's no header for me to check).

In particular, yours lists the working process as msiexec.exe - while the one that I did lists the working process as wmpnetwk.exe. Also, the address for ntkrnl.exe in memory is different
Mine: fffff800`02e18000 fffff800`033f4000 nt ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
Yours: fffff800`02e4b000 fffff800`03427000 nt ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)

Finally, the stack text is completely different - please check mine to see the differences in the commands that were issued:

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\050110-17908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02e18000 PsLoadedModuleList = 0xfffff800`03055e50
Debug session time: Sat May  1 13:42:38.274 2010 (GMT-4)
System Uptime: 0 days 7:58:08.912
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {3, fffff80003017c40, 0, fffff80003017c40}

Unable to load image \SystemRoot\system32\DRIVERS\kl1.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for kl1.sys
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
Probably caused by : Pool_Corruption ( nt!ExFreePool+536 )

Followup: Pool_corruption
---------

0: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff80003017c40, the pool entry being checked.
Arg3: 0000000000000000, the read back flink freelist value (should be the same as 2).
Arg4: fffff80003017c40, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------


BUGCHECK_STR:  0x19_3

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  wmpnetwk.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002fbbd6f to fffff80002e88600

STACK_TEXT:  
fffff880`0bb55048 fffff800`02fbbd6f : 00000000`00000019 00000000`00000003 fffff800`03017c40 00000000`00000000 : nt!KeBugCheckEx
fffff880`0bb55050 fffff880`02c30c37 : 00000000`00000000 00000000`c000000d 00000000`00000000 fffff8a0`00000000 : nt!ExFreePool+0x536
fffff880`0bb55140 fffff880`02c3ab1a : 00000000`c000000d fffffa80`04ae5180 fffffa80`041c2910 fffff880`03ea858b : tdx!TdxCreateConnection+0x37
fffff880`0bb55190 fffff880`03ea2933 : fffffa80`041c2910 fffffa80`041c2a28 fffffa80`046daf50 fffffa80`038160a0 : tdx!TdxTdiDispatchCreate+0x18a
fffff880`0bb55220 fffffa80`041c2910 : fffffa80`041c2a28 fffffa80`046daf50 fffffa80`038160a0 fffffa80`041c2910 : kl1+0x4b933
fffff880`0bb55228 fffffa80`041c2a28 : fffffa80`046daf50 fffffa80`038160a0 fffffa80`041c2910 fffff880`03e59dbe : 0xfffffa80`041c2910
fffff880`0bb55230 fffffa80`046daf50 : fffffa80`038160a0 fffffa80`041c2910 fffff880`03e59dbe 00000000`00000000 : 0xfffffa80`041c2a28
fffff880`0bb55238 fffffa80`038160a0 : fffffa80`041c2910 fffff880`03e59dbe 00000000`00000000 fffffa80`041c2a28 : 0xfffffa80`046daf50
fffff880`0bb55240 fffffa80`041c2910 : fffff880`03e59dbe 00000000`00000000 fffffa80`041c2a28 fffffa80`038160a0 : 0xfffffa80`038160a0
fffff880`0bb55248 fffff880`03e59dbe : 00000000`00000000 fffffa80`041c2a28 fffffa80`038160a0 00000000`c0000001 : 0xfffffa80`041c2910
fffff880`0bb55250 00000000`00000000 : fffffa80`041c2a28 fffffa80`038160a0 00000000`c0000001 fffffa80`00000240 : kl1+0x2dbe


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExFreePool+536
fffff800`02fbbd6f cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExFreePool+536

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExFreePool+536

BUCKET_ID:  X64_0x19_3_nt!ExFreePool+536

Followup: Pool_corruption
---------

rax=fffffa8007019110 rbx=fffff80003017c40 rcx=0000000000000019
rdx=0000000000000003 rsi=0000000000001000 rdi=0000000000000000
rip=fffff80002e88600 rsp=fffff8800bb55048 rbp=fffff80003017880
 r8=fffff80003017c40  r9=0000000000000000 r10=fffff80003017888
r11=0000000000000000 r12=0000000000000029 r13=0000000000000000
r14=0000000000000000 r15=0000000043786454
iopl=0         nv up ei pl nz na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000207
nt!KeBugCheckEx:
fffff800`02e88600 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`0bb55050=0000000000000019
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`0bb55048 fffff800`02fbbd6f : 00000000`00000019 00000000`00000003 fffff800`03017c40 00000000`00000000 : nt!KeBugCheckEx
fffff880`0bb55050 fffff880`02c30c37 : 00000000`00000000 00000000`c000000d 00000000`00000000 fffff8a0`00000000 : nt!ExFreePool+0x536
fffff880`0bb55140 fffff880`02c3ab1a : 00000000`c000000d fffffa80`04ae5180 fffffa80`041c2910 fffff880`03ea858b : tdx!TdxCreateConnection+0x37
fffff880`0bb55190 fffff880`03ea2933 : fffffa80`041c2910 fffffa80`041c2a28 fffffa80`046daf50 fffffa80`038160a0 : tdx!TdxTdiDispatchCreate+0x18a
fffff880`0bb55220 fffffa80`041c2910 : fffffa80`041c2a28 fffffa80`046daf50 fffffa80`038160a0 fffffa80`041c2910 : kl1+0x4b933
fffff880`0bb55228 fffffa80`041c2a28 : fffffa80`046daf50 fffffa80`038160a0 fffffa80`041c2910 fffff880`03e59dbe : 0xfffffa80`041c2910
fffff880`0bb55230 fffffa80`046daf50 : fffffa80`038160a0 fffffa80`041c2910 fffff880`03e59dbe 00000000`00000000 : 0xfffffa80`041c2a28
fffff880`0bb55238 fffffa80`038160a0 : fffffa80`041c2910 fffff880`03e59dbe 00000000`00000000 fffffa80`041c2a28 : 0xfffffa80`046daf50
fffff880`0bb55240 fffffa80`041c2910 : fffff880`03e59dbe 00000000`00000000 fffffa80`041c2a28 fffffa80`038160a0 : 0xfffffa80`038160a0
fffff880`0bb55248 fffff880`03e59dbe : 00000000`00000000 fffffa80`041c2a28 fffffa80`038160a0 00000000`c0000001 : 0xfffffa80`041c2910
fffff880`0bb55250 00000000`00000000 : fffffa80`041c2a28 fffffa80`038160a0 00000000`c0000001 fffffa80`00000240 : kl1+0x2dbe
start             end                 module name
fffff800`00b9d000 fffff800`00ba7000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`02e18000 fffff800`033f4000   nt       ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
fffff800`033f4000 fffff800`0343d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00cc0000 fffff880`00cd1000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00cdc000 fffff880`00d20000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00d20000 fffff880`00d34000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00d34000 fffff880`00d92000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d92000 fffff880`00dee000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00dee000 fffff880`00df9000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00e2a000 fffff880`00e35000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`00e3e000 fffff880`00ee2000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ee2000 fffff880`00ef1000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ef1000 fffff880`00f48000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f48000 fffff880`00f51000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f51000 fffff880`00f5b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f5b000 fffff880`00f8e000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f8e000 fffff880`00f9b000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00f9b000 fffff880`00fb0000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fb0000 fffff880`00fc5000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00fc5000 fffff880`00fcc000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fcc000 fffff880`00fdc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00fdc000 fffff880`00ff6000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ff6000 fffff880`00fff000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`01023000   Tpkd     Tpkd.sys     Fri Aug 21 18:02:03 2009 (4A8F195B)
fffff880`01023000 fffff880`0105d000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01066000 fffff880`010b2000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`010b2000 fffff880`010c6000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010c6000 fffff880`01124000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01124000 fffff880`01197000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01197000 fffff880`011e3000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`011e3000 fffff880`011f3000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`011f3000 fffff880`011fe000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01235000 fffff880`01242000   MDPMGRNT MDPMGRNT.SYS Mon Jul 06 17:05:22 2009 (4A526712)
fffff880`01242000 fffff880`0124b000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01251000 fffff880`013f4000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013f4000 fffff880`013fd000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01400000 fffff880`01410000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`01410000 fffff880`01418000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01418000 fffff880`0142a000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0142f000 fffff880`01521000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01521000 fffff880`01581000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01581000 fffff880`015ac000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`015ac000 fffff880`015f6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`015f6000 fffff880`015ff000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01813000 fffff880`0183d000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0183d000 fffff880`0189a000   klif     klif.sys     Wed Nov 11 08:32:16 2009 (4AFABCE0)
fffff880`0189a000 fffff880`018a3000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`018a3000 fffff880`018aa000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`018aa000 fffff880`018b8000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`018b8000 fffff880`018dd000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`018e1000 fffff880`0193c000   MDFSYSNT MDFSYSNT.sys Thu Sep 03 11:53:17 2009 (4A9FE66D)
fffff880`0193c000 fffff880`0194a000   klbg     klbg.sys     Wed Oct 14 13:18:13 2009 (4AD607D5)
fffff880`0194a000 fffff880`01953000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01953000 fffff880`0198d000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0198d000 fffff880`019a3000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`019a3000 fffff880`019d3000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`02c00000 fffff880`02c1e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c27000 fffff880`02c45000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c45000 fffff880`02c52000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02c52000 fffff880`02cdc000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02cdc000 fffff880`02cf0000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02cf0000 fffff880`02d41000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02d41000 fffff880`02d4c000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`02d4c000 fffff880`02d56000   ElbyCDIO ElbyCDIO.sys Tue Feb 17 12:11:23 2009 (499AEFBB)
fffff880`02d56000 fffff880`02d65000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`02d65000 fffff880`02de8000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`02de8000 fffff880`02df9000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03e00000 fffff880`03e0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03e0f000 fffff880`03e2c000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`03e2c000 fffff880`03e47000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`03e47000 fffff880`03e53000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`03e57000 fffff880`04380000   kl1      kl1.sys      Tue Sep 01 07:29:21 2009 (4A9D0591)
fffff880`04380000 fffff880`043c5000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`043c5000 fffff880`043ce000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`043ce000 fffff880`043f4000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`043f4000 fffff880`043fe000   klim6    klim6.sys    Mon Sep 14 06:46:26 2009 (4AAE1F02)
fffff880`04400000 fffff880`04456000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04456000 fffff880`04495000   Rt64win7 Rt64win7.sys Thu Aug 20 12:05:06 2009 (4A8D7432)
fffff880`044c7000 fffff880`044ed000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`044ed000 fffff880`04503000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04503000 fffff880`045f7000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04807000 fffff880`04845000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`04845000 fffff880`04852000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`04852000 fffff880`0485e000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0485e000 fffff880`0486e000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0486e000 fffff880`04876000   RootMdm  RootMdm.sys  Mon Jul 13 20:10:47 2009 (4A5BCD07)
fffff880`04876000 fffff880`04885000   modem    modem.sys    Mon Jul 13 20:10:48 2009 (4A5BCD08)
fffff880`04885000 fffff880`0489b000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0489b000 fffff880`048bf000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`048bf000 fffff880`048cb000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`048cb000 fffff880`048fa000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`048fa000 fffff880`04915000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04915000 fffff880`04936000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04936000 fffff880`04950000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04950000 fffff880`0495d000   tap0901t tap0901t.sys Wed Sep 16 02:02:43 2009 (4AB07F83)
fffff880`0495d000 fffff880`04964680   RimSerial_AMD64 RimSerial_AMD64.sys Tue Jan 09 11:50:11 2007 (45A3C7C3)
fffff880`04965000 fffff880`04970000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`04970000 fffff880`0497f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0497f000 fffff880`0498e000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0498e000 fffff880`0499d000   VClone   VClone.sys   Fri May 22 19:08:37 2009 (4A173075)
fffff880`0499d000 fffff880`049cc000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`049cc000 fffff880`049cd480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04c00000 fffff880`04c36000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`04c3b000 fffff880`04c7e000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`04c7e000 fffff880`04c90000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04c90000 fffff880`04cea000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04cea000 fffff880`04cf5000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`04cf5000 fffff880`04d0a000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`04d0a000 fffff880`04dd2000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`06400000 fffff880`06418000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06418000 fffff880`06445000   srvnet   srvnet.sys   Tue Dec 08 03:32:26 2009 (4B1E0F1A)
fffff880`0644c000 fffff880`0666de80   RTKVHD64 RTKVHD64.sys Tue Jan 19 05:42:09 2010 (4B558C81)
fffff880`0666e000 fffff880`066ab000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`066ab000 fffff880`066cd000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`066cd000 fffff880`066d2200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`066d3000 fffff880`066df000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`066df000 fffff880`066ed000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`066ed000 fffff880`066f9000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`066f9000 fffff880`06704000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`06704000 fffff880`06717000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06717000 fffff880`06725000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`06725000 fffff880`06733000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06733000 fffff880`0674c000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0674c000 fffff880`06754080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06755000 fffff880`06756f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`06757000 fffff880`06765000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`06765000 fffff880`06772000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`06772000 fffff880`0677c000   klmouflt klmouflt.sys Fri Oct 02 11:38:29 2009 (4AC61E75)
fffff880`0677c000 fffff880`06797000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`06797000 fffff880`067ba000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`067ba000 fffff880`067db000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`067db000 fffff880`067f0000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07800000 fffff880`07823000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`07823000 fffff880`078c9000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`078c9000 fffff880`078d4000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`078e1000 fffff880`07935000   udfs     udfs.sys     Mon Jul 13 19:23:37 2009 (4A5BC1F9)
fffff880`07935000 fffff880`07953000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`07953000 fffff880`0796b000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0796b000 fffff880`07998000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07998000 fffff880`079e6000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`079e6000 fffff880`079f8000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`08200000 fffff880`08298000   srv      srv.sys      Tue Dec 08 03:32:55 2009 (4B1E0F37)
fffff880`08298000 fffff880`082c6000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
fffff880`082cd000 fffff880`0833e000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`0833e000 fffff880`083a7000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`083a7000 fffff880`083b2000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`083b2000 fffff880`083c1000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
fffff880`083c1000 fffff880`083f9000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
fffff880`0fe00000 fffff880`0fe46000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`0fe46000 fffff880`0fe53000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`0fe53000 fffff880`0fe64000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0fe64000 fffff880`0fe88000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`0fea5000 fffff880`10bce700   nvlddmkm nvlddmkm.sys Sat Apr 03 20:06:21 2010 (4BB7D7FD)
fffff880`10bcf000 fffff880`10bd0180   nvBridge nvBridge.kmd Sat Apr 03 19:50:52 2010 (4BB7D45C)
fffff960`000c0000 fffff960`003cf000   win32k   win32k.sys   Mon Jul 13 19:40:17 2009 (4A5BC5E1)
fffff960`005b0000 fffff960`005ba000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      unavailable (00000000)

Unloaded modules:
fffff880`019d3000 fffff880`019e1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019e1000 fffff880`019ed000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019ed000 fffff880`019f8000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01800000 fffff880`01813000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`04807000 fffff880`04845000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00ef1000 fffff880`00f48000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c52000 fffff880`02cdc000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04885000 fffff880`0489b000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dee000 fffff880`00df9000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00ff6000 fffff880`00fff000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`018a3000 fffff880`018aa000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`02de8000 fffff880`02df9000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07935000 fffff880`07953000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      unavailable (00000000)
fffff880`01813000 fffff880`0183d000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`019a3000 fffff880`019d3000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d34000 fffff880`00d92000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01124000 fffff880`01197000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0485e000 fffff880`0486e000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`066df000 fffff880`066ed000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`02d65000 fffff880`02de8000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`02c00000 fffff880`02c1e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02d56000 fffff880`02d65000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0198d000 fffff880`019a3000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`066ab000 fffff880`066cd000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`066ed000 fffff880`066f9000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06704000 fffff880`06717000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`066f9000 fffff880`06704000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`066d3000 fffff880`066df000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04503000 fffff880`045f7000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`0fe00000 fffff880`0fe46000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`02d4c000 fffff880`02d56000   ElbyCDIO ElbyCDIO.sys Tue Feb 17 12:11:23 2009 (499AEFBB)
fffff880`04c00000 fffff880`04c36000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`04845000 fffff880`04852000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010b2000 fffff880`010c6000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`04cea000 fffff880`04cf5000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01066000 fffff880`010b2000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01953000 fffff880`0198d000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`015ac000 fffff880`015f6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`033f4000 fffff800`0343d000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0fe64000 fffff880`0fe88000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`06733000 fffff880`0674c000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0674c000 fffff880`06754080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06725000 fffff880`06733000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`04d0a000 fffff880`04dd2000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0194a000 fffff880`01953000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`044ed000 fffff880`04503000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04970000 fffff880`0497f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06757000 fffff880`06765000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00b9d000 fffff800`00ba7000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03e57000 fffff880`04380000   kl1      kl1.sys      Tue Sep 01 07:29:21 2009 (4A9D0591)
fffff880`0193c000 fffff880`0194a000   klbg     klbg.sys     Wed Oct 14 13:18:13 2009 (4AD607D5)
fffff880`0183d000 fffff880`0189a000   klif     klif.sys     Wed Nov 11 08:32:16 2009 (4AFABCE0)
fffff880`043f4000 fffff880`043fe000   klim6    klim6.sys    Mon Sep 14 06:46:26 2009 (4AAE1F02)
fffff880`06772000 fffff880`0677c000   klmouflt klmouflt.sys Fri Oct 02 11:38:29 2009 (4AC61E75)
fffff880`04c3b000 fffff880`04c7e000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01581000 fffff880`015ac000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`066cd000 fffff880`066d2200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`067db000 fffff880`067f0000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06797000 fffff880`067ba000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cdc000 fffff880`00d20000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`018e1000 fffff880`0193c000   MDFSYSNT MDFSYSNT.sys Thu Sep 03 11:53:17 2009 (4A9FE66D)
fffff880`01235000 fffff880`01242000   MDPMGRNT MDPMGRNT.SYS Mon Jul 06 17:05:22 2009 (4A526712)
fffff880`04876000 fffff880`04885000   modem    modem.sys    Mon Jul 13 20:10:48 2009 (4A5BCD08)
fffff880`06717000 fffff880`06725000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0497f000 fffff880`0498e000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06765000 fffff880`06772000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fdc000 fffff880`00ff6000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`07953000 fffff880`0796b000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0796b000 fffff880`07998000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07998000 fffff880`079e6000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07800000 fffff880`07823000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00e2a000 fffff880`00e35000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`011f3000 fffff880`011fe000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f51000 fffff880`00f5b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010c6000 fffff880`01124000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02d41000 fffff880`02d4c000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01418000 fffff880`0142a000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0142f000 fffff880`01521000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`048bf000 fffff880`048cb000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`048cb000 fffff880`048fa000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04cf5000 fffff880`04d0a000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03e00000 fffff880`03e0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04380000 fffff880`043c5000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01521000 fffff880`01581000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`00cc0000 fffff880`00cd1000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e47000 fffff880`03e53000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e18000 fffff800`033f4000   nt       ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
fffff880`01251000 fffff880`013f4000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0189a000 fffff880`018a3000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10bcf000 fffff880`10bd0180   nvBridge nvBridge.kmd Sat Apr 03 19:50:52 2010 (4BB7D45C)
fffff880`0fea5000 fffff880`10bce700   nvlddmkm nvlddmkm.sys Sat Apr 03 20:06:21 2010 (4BB7D7FD)
fffff880`043ce000 fffff880`043f4000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f9b000 fffff880`00fb0000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f5b000 fffff880`00f8e000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fc5000 fffff880`00fcc000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fcc000 fffff880`00fdc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07823000 fffff880`078c9000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0666e000 fffff880`066ab000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00d20000 fffff880`00d34000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0489b000 fffff880`048bf000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`048fa000 fffff880`04915000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04915000 fffff880`04936000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04936000 fffff880`04950000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02cf0000 fffff880`02d41000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04965000 fffff880`04970000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`015f6000 fffff880`015ff000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`08298000 fffff880`082c6000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
fffff880`01242000 fffff880`0124b000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`013f4000 fffff880`013fd000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`083c1000 fffff880`083f9000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
fffff880`01023000 fffff880`0105d000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0495d000 fffff880`04964680   RimSerial_AMD64 RimSerial_AMD64.sys Tue Jan 09 11:50:11 2007 (45A3C7C3)
fffff880`0486e000 fffff880`04876000   RootMdm  RootMdm.sys  Mon Jul 13 20:10:47 2009 (4A5BCD07)
fffff880`06400000 fffff880`06418000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04456000 fffff880`04495000   Rt64win7 Rt64win7.sys Thu Aug 20 12:05:06 2009 (4A8D7432)
fffff880`0644c000 fffff880`0666de80   RTKVHD64 RTKVHD64.sys Tue Jan 19 05:42:09 2010 (4B558C81)
fffff880`0499d000 fffff880`049cc000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`078c9000 fffff880`078d4000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`04852000 fffff880`0485e000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03e0f000 fffff880`03e2c000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01410000 fffff880`01418000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`082cd000 fffff880`0833e000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`08200000 fffff880`08298000   srv      srv.sys      Tue Dec 08 03:32:55 2009 (4B1E0F37)
fffff880`0833e000 fffff880`083a7000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`06418000 fffff880`06445000   srvnet   srvnet.sys   Tue Dec 08 03:32:26 2009 (4B1E0F1A)
fffff880`049cc000 fffff880`049cd480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04950000 fffff880`0495d000   tap0901t tap0901t.sys Wed Sep 16 02:02:43 2009 (4AB07F83)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`079e6000 fffff880`079f8000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02c45000 fffff880`02c52000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`083a7000 fffff880`083b2000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`02c27000 fffff880`02c45000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02cdc000 fffff880`02cf0000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`01000000 fffff880`01023000   Tpkd     Tpkd.sys     Fri Aug 21 18:02:03 2009 (4A8F195B)
fffff960`005b0000 fffff960`005ba000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`083b2000 fffff880`083c1000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
fffff880`044c7000 fffff880`044ed000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`078e1000 fffff880`07935000   udfs     udfs.sys     Mon Jul 13 19:23:37 2009 (4A5BC1F9)
fffff880`04c7e000 fffff880`04c90000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`06755000 fffff880`06756f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0fe53000 fffff880`0fe64000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04c90000 fffff880`04cea000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04400000 fffff880`04456000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0677c000 fffff880`06797000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`0fe46000 fffff880`0fe53000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`0498e000 fffff880`0499d000   VClone   VClone.sys   Fri May 22 19:08:37 2009 (4A173075)
fffff880`00f8e000 fffff880`00f9b000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`018aa000 fffff880`018b8000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`018b8000 fffff880`018dd000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01400000 fffff880`01410000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fb0000 fffff880`00fc5000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d92000 fffff880`00dee000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01197000 fffff880`011e3000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`03e2c000 fffff880`03e47000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`011e3000 fffff880`011f3000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e3e000 fffff880`00ee2000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ee2000 fffff880`00ef1000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`043c5000 fffff880`043ce000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000c0000 fffff960`003cf000   win32k   win32k.sys   Mon Jul 13 19:40:17 2009 (4A5BC5E1)
fffff880`00f48000 fffff880`00f51000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`067ba000 fffff880`067db000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`019d3000 fffff880`019e1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019e1000 fffff880`019ed000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019ed000 fffff880`019f8000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01800000 fffff880`01813000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 00000019
Arguments 00000000`00000003 fffff800`03017c40 00000000`00000000 fffff800`03017c40

Citrus · 02 May 2010

If I run the minidump posted here I get the same output you just posted. In your first post, the summary of my BSOD looks slightly different. Did you copy and paste some lines from the verbose dump and erase unneeded lines?

usasma · 02 May 2010

The summary in post 2 is just a batch file that extracts that information (as a summary). It tells most analysts the basics about the memory dump - so they don't have to go redo the work.

Here's what we do with it:
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909 - We check for how updated the computer is
Debug session time: Sat May 1 13:42:38.274 2010 (GMT-4) - We verify the date that the dump is (in relation to other dumps
System Uptime: 0 days 7:58:08.912 - This tells us how frequently the dump occurs
BugCheck 19, {3, fffff80003017c40, 0, fffff80003017c40} - This is the actual error code
*** WARNING: Unable to verify timestamp for kl1.sys - This is a clue for our later analysis
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys - This is a clue for our later analysis
Probably caused by : Pool_Corruption ( nt!ExFreePool+536 ) - This is what caused the error
BUGCHECK_STR: 0x19_3 - This is the STOP error code (again)
PROCESS_NAME: wmpnetwk.exe - This is the process that was running when the error occurred. It's not very helpful, but does come in handy on rare occasions.

Citrus · 02 May 2010

Would you be willing to share that batch file?

usasma · 02 May 2010

Sorry, but it's not mine to share.
And, I can't batch file program - so it's nothing that I can help with.