BSOD Problem (content attached)

MoodyBlue · 21 Jun 2010

I've been having this BSOD problem since sometime last year and seems to happening more often. I have attched the minidump files and in my profile has all my hard drives and specs etc.

Jonathan_King · 21 Jun 2010

Please enable driver verifier: Using Driver Verifier to identify issues with Drivers.

Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

Please update the following:

Code:

AGRSM.sys    Mon Nov 10 09:56:37 2008 (49184BA5)- your modem drivers
EMS7SK.sys   Wed Feb 15 21:55:09 2006 (43F3E98D)- Card reader drivers

I have my suspicions of AVG, just because of the number of BSODs I have seen it cause, but I see no evidence of it as the cause here.

I may ask you to do this later, if new dmps suggest it, but you may consider removing it and replacing it with Microsoft Security Essentials.

BSOD BUGCHECK SUMMARY

Code:


Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Mon Jun 21 14:56:56.433 2010 (UTC - 4:00)
System Uptime: 0 days 0:54:27.540
BUGCHECK_STR:  STACK_BUFFER_OVERRUN
PROCESS_NAME:  TS3.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Mon Jun 21 15:05:41.915 2010 (UTC - 4:00)
System Uptime: 0 days 0:07:59.022
BugCheck 1000007F, {8, 801c7000, 0, 0}
Probably caused by : ntkrnlmp.exe ( nt!KiTrap0E+a )
BUGCHECK_STR:  0x7f_8
PROCESS_NAME:  TS3.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Mon Jun 21 14:01:38.444 2010 (UTC - 4:00)
System Uptime: 0 days 0:13:57.550
BugCheck 1000008E, {c000001d, 82ca7043, 80d8ad34, 0}
Probably caused by : ntkrnlmp.exe ( nt!KiDeferredReadyThread+6dd )
BUGCHECK_STR:  0x8E
PROCESS_NAME:  Sims2.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sun Jun 20 17:32:11.897 2010 (UTC - 4:00)
System Uptime: 0 days 0:34:14.004
BugCheck A, {33b8, ff, 0, 82c57d00}
Probably caused by : ntkrnlmp.exe ( nt!PoIdle+590 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sat Jun 19 20:24:12.580 2010 (UTC - 4:00)
System Uptime: 0 days 4:09:16.687
BugCheck A, {17ec1b3f, ff, 0, 82c73983}
Probably caused by : ntkrnlmp.exe ( nt!PoIdle+219 )
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sun Jun 20 18:31:49.975 2010 (UTC - 4:00)
System Uptime: 0 days 0:10:41.082
BugCheck 1000008E, {c000001d, 82c75e05, b27d622c, 0}
Probably caused by : HDAudBus.sys ( HDAudBus!HdaController::Isr+32e )
BUGCHECK_STR:  0x8E
PROCESS_NAME:  iexplore.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sun Jun 20 18:05:25.401 2010 (UTC - 4:00)
System Uptime: 0 days 0:32:25.508
BUGCHECK_STR:  0x50
PROCESS_NAME:  iexplore.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sun Jun 20 18:20:19.456 2010 (UTC - 4:00)
System Uptime: 0 days 0:05:44.563
BugCheck 1000007F, {8, 801c7000, 0, 0}
Probably caused by : ntkrnlmp.exe ( nt!KiTrap0E+9 )
BUGCHECK_STR:  0x7f_8
PROCESS_NAME:  iexplore.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sun Jun 20 18:13:48.992 2010 (UTC - 4:00)
System Uptime: 0 days 0:07:36.114
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Fri Jun 18 20:21:07.295 2010 (UTC - 4:00)
System Uptime: 0 days 3:53:09.728
BugCheck 1000008E, {c0000005, 941091d3, 8e21bc38, 0}
Probably caused by : win32k.sys ( win32k!TimersProc+111 )
BUGCHECK_STR:  0x8E
PROCESS_NAME:  csrss.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Thu Jun 17 17:48:44.157 2010 (UTC - 4:00)
System Uptime: 0 days 1:30:55.263
BugCheck D1, {0, 2, 1, 80d8abf8}
Probably caused by : ntkrnlmp.exe ( nt!KiTrap0E+2cf )
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\_jcgriff2_\dbug\__Kernel__\062110-49889-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0x82c49000 PsLoadedModuleList = 0x82d88570
Debug session time: Mon Jun 21 14:56:56.433 2010 (UTC - 4:00)
System Uptime: 0 days 0:54:27.540
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.......
kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: 8879d06c, Actual security check cookie from the stack
Arg2: 21a5206c, Expected security check cookie
Arg3: de5adf93, Complement of the expected security check cookie
Arg4: 00000000, zero

Debugging Details:
------------------


GSFAILURE_FUNCTION: nt!PpmPerfCalculateCoreParkingMask

GSFAILURE_RA_SMASHED:  TRUE

GSFAILURE_MODULE_COOKIE: 21a5206c nt!__security_cookie [ 82d6aa00 ]

GSFAILURE_FRAME_COOKIE:  ffffffff

SECURITY_COOKIE:  Expected 21a5206c found 8879d06c

GSFAILURE_ANALYSIS_TEXT: !gs output:
Corruption occurred in nt!PpmPerfCalculateCoreParkingMask or one of its callers

Analyzing __report_gsfailure frame (2)...
LEA usage: Function @0xFFFFFFFF82D34881-0xFFFFFFFF82D34EA0 is NOT using LEA
Module canary at 0xFFFFFFFF82D6AA00 (nt!__security_cookie): 0x21A5206C
Complement at 0xFFFFFFFF82D6AA04: 0xDE5ADF93  (matches OK)
couldn't disassemble

Stack buffer overrun analysis completed successfully.


BUGCHECK_STR:  STACK_BUFFER_OVERRUN

DEFAULT_BUCKET_ID:  GS_FALSE_POSITIVE_PROBABLY_NOT_USING_GS

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  TS3.exe

CURRENT_IRQL:  2

STACK_TEXT:  
80d8ad1c 82d0bb99 000000f7 8879d06c 21a5206c nt!KeBugCheckEx+0x1e
80d8ad3c 82d34ea0 00000000 00000000 0000d529 nt!__report_gsfailure+0x24
80d8ade1 ea82d32f 0082d32e 00000000 00000000 nt!PpmPerfCalculateCoreParkingMask+0x619
WARNING: Frame IP not in any known module. Following frames may be wrong.
80d8ade5 0082d32e 00000000 00000000 00000000 0xea82d32f
80d8ade9 00000000 00000000 00000000 00000000 0x82d32e


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!PpmPerfCalculateCoreParkingMask+619
82d34ea0 c9              leave

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!PpmPerfCalculateCoreParkingMask+619

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cac3

FAILURE_BUCKET_ID:  STACK_BUFFER_OVERRUN_MISMATCH_GSCOOKIE_nt!PpmPerfCalculateCoreParkingMask+619

BUCKET_ID:  STACK_BUFFER_OVERRUN_MISMATCH_GSCOOKIE_nt!PpmPerfCalculateCoreParkingMask+619

Followup: MachineOwner
---------

eax=82d77934 ebx=8502ca02 ecx=00000083 edx=00000000 esi=82d6ad20 edi=00000000
eip=82d1a574 esp=80d8ad00 ebp=80d8ad1c iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000206
nt!KeBugCheckEx+0x1e:
82d1a574 cc              int     3
ChildEBP RetAddr  Args to Child              
80d8ad1c 82d0bb99 000000f7 8879d06c 21a5206c nt!KeBugCheckEx+0x1e
80d8ad3c 82d34ea0 00000000 00000000 0000d529 nt!__report_gsfailure+0x24
80d8ade1 ea82d32f 0082d32e 00000000 00000000 nt!PpmPerfCalculateCoreParkingMask+0x619
WARNING: Frame IP not in any known module. Following frames may be wrong.
80d8ade5 0082d32e 00000000 00000000 00000000 0xea82d32f
80d8ade9 00000000 00000000 00000000 00000000 0x82d32e
start    end        module name
80bb7000 80bbf000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
82c12000 82c49000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
82c49000 83049000   nt       ntkrnlmp.exe Sat Feb 27 02:33:23 2010 (4B88CAC3)
89000000 89034000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8903d000 890b5000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
890b5000 890c6000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
890c6000 890ce000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
890ce000 89110000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
89110000 891bb000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
891bb000 8922c000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8922c000 8923a000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8923a000 89282000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
89282000 8928b000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8928b000 89293000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
89293000 892bd000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
892bd000 892c8000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
892c8000 892d9000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
892d9000 892e1000   compbatt compbatt.sys Mon Jul 13 19:19:18 2009 (4A5BC0F6)
892e1000 892ec000   BATTC    BATTC.SYS    Mon Jul 13 19:19:15 2009 (4A5BC0F3)
892ec000 892fc000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
892fc000 89347000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
89347000 8934e000   intelide intelide.sys Mon Jul 13 19:11:19 2009 (4A5BBF17)
8934e000 8935c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8935c000 8938a000   pcmcia   pcmcia.sys   Mon Jul 13 19:19:29 2009 (4A5BC101)
8938a000 893a0000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
893a0000 893a9000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
893a9000 893cc000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
893cc000 893d5000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
893d5000 893e6000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
893e6000 893f4000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
89409000 89538000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
89538000 89563000   msrpc    msrpc.sys    unavailable (00000000)
89563000 89576000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
89576000 895d3000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
895d3000 895e1000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
895e1000 895ea000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
895ea000 896a1000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
896a1000 896df000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
896df000 89704000   ksecpkg  ksecpkg.sys  Thu Dec 10 23:04:22 2009 (4B21C4C6)
89704000 8975e000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
8975e000 89771000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
89771000 89781000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
89781000 897c2000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
897c2000 897cc000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
897cc000 897d6000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
897d6000 897e2000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
897e2000 897fa000   dfsc     dfsc.sys     Mon Jul 13 19:14:16 2009 (4A5BBFC8)
89800000 8980e000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
8980e000 89813940   avgmfx86 avgmfx86.sys Sun Apr 25 17:05:02 2010 (4BD4AE7E)
89814000 8995d000   tcpip    tcpip.sys    Mon Jul 13 19:13:18 2009 (4A5BBF8E)
8995d000 8998e000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
8998e000 899cd000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
899cd000 899d5000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
899d5000 89a02000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
89a02000 89a12000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
89a12000 89a1a000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
89a1a000 89a4c000   fvevol   fvevol.sys   Fri Sep 25 22:24:21 2009 (4ABD7B55)
89a4c000 89a5d000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
89a5d000 89a82000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
89ab4000 89ad3000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
89ad3000 89ada000   Null     Null.SYS     unavailable (00000000)
89ada000 89ae1000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
89ae1000 89aed000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
89aed000 89b0e000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
89b0e000 89b1b000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
89b1b000 89b23000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
89b23000 89b2b000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
89b2b000 89b33000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
89b33000 89b3e000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
89b3e000 89b4c000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
89b4c000 89b63000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
89b63000 89b6e000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
89b6e000 89ba7a80   avgtdix  avgtdix.sys  Sun Apr 25 17:08:21 2010 (4BD4AF45)
89ba8000 89bda000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
89bda000 89be1000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
89be1000 89c00000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8c012000 8c045280   avgldx86 avgldx86.sys Wed Feb 10 22:51:19 2010 (4B737EB7)
8c046000 8c067000   tunnel   tunnel.sys   Mon Jul 13 19:54:03 2009 (4A5BC91B)
8c067000 8c079000   intelppm intelppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
8c079000 8c086000   modem    modem.sys    Mon Jul 13 19:55:24 2009 (4A5BC96C)
8c086000 8c091000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
8c091000 8c0d1000   udfs     udfs.sys     Mon Jul 13 19:14:09 2009 (4A5BBFC1)
8c0d1000 8c0de000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8c0de000 8c0e9000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8c0e9000 8c0f2000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8c0f2000 8c103000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
8c103000 8c11e000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
8c11e000 8c138000   WudfPf   WudfPf.sys   Mon Jul 13 19:50:13 2009 (4A5BC835)
8c138000 8c148000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
8c148000 8c18e000   nwifi    nwifi.sys    Mon Jul 13 19:51:59 2009 (4A5BC89F)
8c18e000 8c19e000   ndisuio  ndisuio.sys  Mon Jul 13 19:53:51 2009 (4A5BC90F)
8c19e000 8c1b1000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
8c1b1000 8c236000   HTTP     HTTP.sys     Mon Jul 13 19:12:53 2009 (4A5BBF75)
8c236000 8c24f000   bowser   bowser.sys   Mon Jul 13 19:14:21 2009 (4A5BBFCD)
8c24f000 8c261000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
8c261000 8c284000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:32:02 2010 (4B88CA72)
8c284000 8c2bf000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
8c2bf000 8c2da000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
8c2f2000 8c389000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
8c389000 8c393000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8c393000 8c3b4000   srvnet   srvnet.sys   Tue Dec 08 03:05:06 2009 (4B1E08B2)
8c3b4000 8c3c1000   tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
91000000 9100a000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
9100a000 91507000   igdkmd32 igdkmd32.sys Wed May 06 14:13:40 2009 (4A01D354)
91507000 915be000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 20:48:33 2009 (4AC54DE1)
915be000 915f7000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:25:25 2009 (4A5BC265)
915f7000 91616000   HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
91616000 9165a000   usbhub   usbhub.sys   Mon Jul 13 19:52:06 2009 (4A5BC8A6)
9165a000 916aa000   HdAudio  HdAudio.sys  Mon Jul 13 19:51:46 2009 (4A5BC892)
916aa000 916d9000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
916d9000 916f2000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
916f2000 917f8000   AGRSM    AGRSM.sys    Mon Nov 10 09:56:37 2008 (49184BA5)
92000000 9200e000   umbus    umbus.sys    Mon Jul 13 19:51:38 2009 (4A5BC88A)
9200e000 9201f000   NDProxy  NDProxy.SYS  Mon Jul 13 19:54:27 2009 (4A5BC933)
9201f000 92020700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
92029000 925ec000   netw5v32 netw5v32.sys Tue Sep 15 15:34:10 2009 (4AAFEC32)
925ec000 92611000   Rt86win7 Rt86win7.sys Thu Feb 26 04:04:22 2009 (49A65B16)
92611000 9261c000   usbuhci  usbuhci.sys  Mon Jul 13 19:51:10 2009 (4A5BC86E)
9261c000 92667000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
92667000 92676000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
92676000 926a2000   1394ohci 1394ohci.sys Mon Jul 13 19:51:59 2009 (4A5BC89F)
926a2000 926b0e00   EMS7SK   EMS7SK.sys   Wed Feb 15 21:55:09 2006 (43F3E98D)
926b1000 926ca000   sdbus    sdbus.sys    Mon Jul 13 19:19:26 2009 (4A5BC0FE)
926ca000 926dc380   ESM7SK   ESM7SK.sys   Wed Feb 15 21:55:15 2006 (43F3E993)
926dd000 926e0700   CmBatt   CmBatt.sys   Mon Jul 13 19:19:18 2009 (4A5BC0F6)
926e1000 926f9000   i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
926f9000 92706000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
92706000 92713000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
92713000 92718280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
92719000 92726000   CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
92726000 92738000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
92738000 92750000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
92750000 9275b000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
9275b000 9277d000   ndiswan  ndiswan.sys  Mon Jul 13 19:54:34 2009 (4A5BC93A)
9277d000 92795000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
92795000 927ac000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
927ac000 927c3000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
927c3000 927c4380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
927c5000 927f9000   ks       ks.sys       Mon Jul 13 19:45:13 2009 (4A5BC709)
938f0000 93b3a000   win32k   win32k.sys   Sat May 01 10:49:02 2010 (4BDC3F5E)
93b50000 93b59000   TSDDD    TSDDD.dll    unavailable (00000000)
93b80000 93b9e000   cdd      cdd.dll      Mon Jul 13 21:04:18 2009 (4A5BD992)
93ba0000 93bed000   ATMFD    ATMFD.DLL    Thu Jul 30 00:44:10 2009 (4A71251A)
aac0c000 aac5b000   srv2     srv2.sys     Mon Jul 13 19:14:52 2009 (4A5BBFEC)
aac5b000 aacac000   srv      srv.sys      Tue Dec 08 03:05:37 2009 (4B1E08D1)
aad16000 aad1f000   asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
aad1f000 aad36000   USBSTOR  USBSTOR.SYS  Mon Jul 13 19:51:19 2009 (4A5BC877)
aad36000 aad60000   fastfat  fastfat.SYS  Mon Jul 13 19:14:01 2009 (4A5BBFB9)

Unloaded modules:
aad60000 aadca000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0006A000
aacac000 aad16000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0006A000
8c2da000 8c2f2000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
89a82000 89a8f000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
89a8f000 89a9a000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
89a9a000 89aa3000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
89aa3000 89ab4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000