WinDBG


  1. Posts : 5
    Windows 7 64-bit
       #1

    WinDBG


    I used WinDBG to try and figure out my solution, but I'm not sure where to go. I'm only getting this issue when I try and back up my computer using synctoy via firewire to my external hard drive. Previously with USB I had no problem. Here's the WinDBG report:

    WARNING: Inaccessible path: 'C:\Symbols'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Users\\Desktop\New folder\062210-22635-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    WARNING: Inaccessible path: 'C:\Symbols'
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;C:\Symbols
    Executable search path is:
    Windows 7 Kernel Version 7600 MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
    Machine Name:
    Kernel base = 0xfffff800`02e1c000 PsLoadedModuleList = 0xfffff800`03059e50
    Debug session time: Tue Jun 22 15:45:47.488 2010 (UTC - 4:00)
    System Uptime: 0 days 0:14:56.456
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ................................
    Loading User Symbols
    Loading unloaded module list
    .....
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck FC, {fffff880015aec86, 8000000004039963, fffff8800e196790, 2}

    Unable to load image \SystemRoot\System32\Drivers\ksecpkg.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ksecpkg.sys
    *** ERROR: Module load completed but symbols could not be loaded for ksecpkg.sys
    Probably caused by : hardware ( ksecpkg+14c86 )

    Followup: MachineOwner
    ---------

    7: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    An attempt was made to execute non-executable memory. The guilty driver
    is on the stack trace (and is typically the current instruction pointer).
    When possible, the guilty driver's name (Unicode string) is printed on
    the bugcheck screen and saved in KiBugCheckDriver.
    Arguments:
    Arg1: fffff880015aec86, Virtual address for the attempted execute.
    Arg2: 8000000004039963, PTE contents.
    Arg3: fffff8800e196790, (reserved)
    Arg4: 0000000000000002, (reserved)

    Debugging Details:
    ------------------


    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    BUGCHECK_STR: 0xFC

    PROCESS_NAME: SyncToy.exe

    CURRENT_IRQL: 0

    TRAP_FRAME: fffff8800e196790 -- (.trap 0xfffff8800e196790)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000801 rbx=0000000000000000 rcx=0000000000000000
    rdx=00000000000007ff rsi=0000000000000000 rdi=0000000000000000
    rip=fffff880015aec86 rsp=fffff8800e196920 rbp=fffff8800c4f2980
    r8=fffff80002e1c000 r9=0000000000000000 r10=ffffffffffffff7f
    r11=fffff88003186100 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0 nv up ei ng nz na po nc
    ksecpkg+0x14c86:
    fffff880`015aec86 0000 add byte ptr [rax],al ds:52f8:00000000`00000801=??
    Resetting default scope

    MISALIGNED_IP:
    ksecpkg+14c86
    fffff880`015aec86 0000 add byte ptr [rax],al

    LAST_CONTROL_TRANSFER: from fffff80002f0cb0f to fffff80002e8c600

    STACK_TEXT:
    fffff880`0e196628 fffff800`02f0cb0f : 00000000`000000fc fffff880`015aec86 80000000`04039963 fffff880`0e196790 : nt!KeBugCheckEx
    fffff880`0e196630 fffff800`02e8a6ee : 00000000`00000008 fffff8a0`0de3cb40 00000000`00000000 00000000`00010224 : nt! ?? ::FNODOBFM::`string'+0x424d7
    fffff880`0e196790 fffff880`015aec86 : 00000000`008f0000 fffff8a0`0de3cb40 fffff880`0c4f2980 00000000`00610004 : nt!KiPageFault+0x16e
    fffff880`0e196920 00000000`008f0000 : fffff8a0`0de3cb40 fffff880`0c4f2980 00000000`00610004 00000000`00000000 : ksecpkg+0x14c86
    fffff880`0e196928 fffff8a0`0de3cb40 : fffff880`0c4f2980 00000000`00610004 00000000`00000000 fffff880`0130752e : 0x8f0000
    fffff880`0e196930 fffff880`0c4f2980 : 00000000`00610004 00000000`00000000 fffff880`0130752e 00000000`00000202 : 0xfffff8a0`0de3cb40
    fffff880`0e196938 00000000`00610004 : 00000000`00000000 fffff880`0130752e 00000000`00000202 fffff800`02e910fa : 0xfffff880`0c4f2980
    fffff880`0e196940 00000000`00000000 : fffff880`0130752e 00000000`00000202 fffff800`02e910fa fffff880`02fd5180 : 0x610004


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    ksecpkg+14c86
    fffff880`015aec86 0000 add byte ptr [rax],al

    SYMBOL_STACK_INDEX: 3

    SYMBOL_NAME: ksecpkg+14c86

    FOLLOWUP_NAME: MachineOwner

    IMAGE_NAME: hardware

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    MODULE_NAME: hardware

    FAILURE_BUCKET_ID: X64_IP_MISALIGNED_ksecpkg.sys

    BUCKET_ID: X64_IP_MISALIGNED_ksecpkg.sys

    Followup: MachineOwner
    ---------

    7: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    An attempt was made to execute non-executable memory. The guilty driver
    is on the stack trace (and is typically the current instruction pointer).
    When possible, the guilty driver's name (Unicode string) is printed on
    the bugcheck screen and saved in KiBugCheckDriver.
    Arguments:
    Arg1: fffff880015aec86, Virtual address for the attempted execute.
    Arg2: 8000000004039963, PTE contents.
    Arg3: fffff8800e196790, (reserved)
    Arg4: 0000000000000002, (reserved)

    Debugging Details:
    ------------------


    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    BUGCHECK_STR: 0xFC

    PROCESS_NAME: SyncToy.exe

    CURRENT_IRQL: 0

    TRAP_FRAME: fffff8800e196790 -- (.trap 0xfffff8800e196790)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000801 rbx=0000000000000000 rcx=0000000000000000
    rdx=00000000000007ff rsi=0000000000000000 rdi=0000000000000000
    rip=fffff880015aec86 rsp=fffff8800e196920 rbp=fffff8800c4f2980
    r8=fffff80002e1c000 r9=0000000000000000 r10=ffffffffffffff7f
    r11=fffff88003186100 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0 nv up ei ng nz na po nc
    ksecpkg+0x14c86:
    fffff880`015aec86 0000 add byte ptr [rax],al ds:52f8:00000000`00000801=??
    Resetting default scope

    MISALIGNED_IP:
    ksecpkg+14c86
    fffff880`015aec86 0000 add byte ptr [rax],al

    LAST_CONTROL_TRANSFER: from fffff80002f0cb0f to fffff80002e8c600

    STACK_TEXT:
    fffff880`0e196628 fffff800`02f0cb0f : 00000000`000000fc fffff880`015aec86 80000000`04039963 fffff880`0e196790 : nt!KeBugCheckEx
    fffff880`0e196630 fffff800`02e8a6ee : 00000000`00000008 fffff8a0`0de3cb40 00000000`00000000 00000000`00010224 : nt! ?? ::FNODOBFM::`string'+0x424d7
    fffff880`0e196790 fffff880`015aec86 : 00000000`008f0000 fffff8a0`0de3cb40 fffff880`0c4f2980 00000000`00610004 : nt!KiPageFault+0x16e
    fffff880`0e196920 00000000`008f0000 : fffff8a0`0de3cb40 fffff880`0c4f2980 00000000`00610004 00000000`00000000 : ksecpkg+0x14c86
    fffff880`0e196928 fffff8a0`0de3cb40 : fffff880`0c4f2980 00000000`00610004 00000000`00000000 fffff880`0130752e : 0x8f0000
    fffff880`0e196930 fffff880`0c4f2980 : 00000000`00610004 00000000`00000000 fffff880`0130752e 00000000`00000202 : 0xfffff8a0`0de3cb40
    fffff880`0e196938 00000000`00610004 : 00000000`00000000 fffff880`0130752e 00000000`00000202 fffff800`02e910fa : 0xfffff880`0c4f2980
    fffff880`0e196940 00000000`00000000 : fffff880`0130752e 00000000`00000202 fffff800`02e910fa fffff880`02fd5180 : 0x610004


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    ksecpkg+14c86
    fffff880`015aec86 0000 add byte ptr [rax],al

    SYMBOL_STACK_INDEX: 3

    SYMBOL_NAME: ksecpkg+14c86

    FOLLOWUP_NAME: MachineOwner

    IMAGE_NAME: hardware

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    MODULE_NAME: hardware

    FAILURE_BUCKET_ID: X64_IP_MISALIGNED_ksecpkg.sys

    BUCKET_ID: X64_IP_MISALIGNED_ksecpkg.sys

    Followup: MachineOwner
    ---------

    7: kd> lmvm hardware
    start end module name

    Any help would be awesome or direction pointing
      My Computer


  2. Posts : 1,519
    El Capitan / Windows 10
       #2

    Looks like the symbols weren't loaded from the website as you wanted. Recheck the symbol path syntax.
      My Computer


  3. Posts : 5
    Windows 7 64-bit
    Thread Starter
       #3

    Not sure how it's wrong. I tried that URL after downloading both of the symbol packets for W7 RTM retail and checked symbol packages for W7 64 bit. The symbol paths are correct, I've checked them over and over again. I'm getting the same message that I posted originally
      My Computer


  4. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #4

    Hello !! Welcome to SF !!

    Check this thread for more information on configuring WinDB https://www.sevenforums.com/crash-loc...ing-tools.html it has certain commands that you could use in analysis. Here is the Detailed list of commands http://windbg.info/doc/1-common-cmds.html certian command deosn't work with Minidump it requires Memory Dump. If your look help in running analysis post us the Dump files we will be more happy to help you out.

    Also change the Symbol path from C Drive to C:\Users\Public\Symbols since seems like some permission issue as well.

    Hope this helps,
    Captain
      My Computer


  5. Posts : 5
    Windows 7 64-bit
    Thread Starter
       #5

    Dump file


    K in the meantime here is the dump file
      My Computer


  6. Posts : 5
    Windows 7 64-bit
    Thread Starter
       #6

    nvm how do you upload it? It says .dmp files are invalid to upload
      My Computer


  7. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #7

    Sawyer said:
    K in the meantime here is the dump file
    I can't find one here
      My Computer


  8. Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #8
      My Computer


  9. Posts : 5
    Windows 7 64-bit
    Thread Starter
       #9

    Here ya go
      My Computer


  10. Posts : 13,354
    Windows 7 Professional x64
       #10

    Please update your Gigabit drivers and Speedfan:
    Code:
    GVTDrv64.sys Tue Sep 05 03:10:02 2006 (44FD22CA)
    speedfan.sys Sun Sep 24 09:26:48 2006
    Avast should be updated or removed:
    Code:
    aswRdr.SYS   Tue Nov 24 18:48:59 2009
    The dmp points to hardware.

    Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

    Code:
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\Jonathan\AppData\Local\Temp\Temp1_062210-22635-01.zip\062210-22635-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
    Machine Name:
    Kernel base = 0xfffff800`02e1c000 PsLoadedModuleList = 0xfffff800`03059e50
    Debug session time: Tue Jun 22 15:45:47.488 2010 (UTC - 4:00)
    System Uptime: 0 days 0:14:56.456
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ................................
    Loading User Symbols
    Loading unloaded module list
    .....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck FC, {fffff880015aec86, 8000000004039963, fffff8800e196790, 2}
    
    Unable to load image \SystemRoot\System32\Drivers\ksecpkg.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ksecpkg.sys
    *** ERROR: Module load completed but symbols could not be loaded for ksecpkg.sys
    Probably caused by : hardware ( ksecpkg+14c86 )
    
    Followup: MachineOwner
    ---------
    
    7: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    An attempt was made to execute non-executable memory.  The guilty driver
    is on the stack trace (and is typically the current instruction pointer).
    When possible, the guilty driver's name (Unicode string) is printed on
    the bugcheck screen and saved in KiBugCheckDriver.
    Arguments:
    Arg1: fffff880015aec86, Virtual address for the attempted execute.
    Arg2: 8000000004039963, PTE contents.
    Arg3: fffff8800e196790, (reserved)
    Arg4: 0000000000000002, (reserved)
    
    Debugging Details:
    ------------------
    
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xFC
    
    PROCESS_NAME:  SyncToy.exe
    
    CURRENT_IRQL:  0
    
    TRAP_FRAME:  fffff8800e196790 -- (.trap 0xfffff8800e196790)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000801 rbx=0000000000000000 rcx=0000000000000000
    rdx=00000000000007ff rsi=0000000000000000 rdi=0000000000000000
    rip=fffff880015aec86 rsp=fffff8800e196920 rbp=fffff8800c4f2980
     r8=fffff80002e1c000  r9=0000000000000000 r10=ffffffffffffff7f
    r11=fffff88003186100 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na po nc
    ksecpkg+0x14c86:
    fffff880`015aec86 0000            add     byte ptr [rax],al ds:52f8:00000000`00000801=??
    Resetting default scope
    
    MISALIGNED_IP: 
    ksecpkg+14c86
    fffff880`015aec86 0000            add     byte ptr [rax],al
    
    LAST_CONTROL_TRANSFER:  from fffff80002f0cb0f to fffff80002e8c600
    
    STACK_TEXT:  
    fffff880`0e196628 fffff800`02f0cb0f : 00000000`000000fc fffff880`015aec86 80000000`04039963 fffff880`0e196790 : nt!KeBugCheckEx
    fffff880`0e196630 fffff800`02e8a6ee : 00000000`00000008 fffff8a0`0de3cb40 00000000`00000000 00000000`00010224 : nt! ?? ::FNODOBFM::`string'+0x424d7
    fffff880`0e196790 fffff880`015aec86 : 00000000`008f0000 fffff8a0`0de3cb40 fffff880`0c4f2980 00000000`00610004 : nt!KiPageFault+0x16e
    fffff880`0e196920 00000000`008f0000 : fffff8a0`0de3cb40 fffff880`0c4f2980 00000000`00610004 00000000`00000000 : ksecpkg+0x14c86
    fffff880`0e196928 fffff8a0`0de3cb40 : fffff880`0c4f2980 00000000`00610004 00000000`00000000 fffff880`0130752e : 0x8f0000
    fffff880`0e196930 fffff880`0c4f2980 : 00000000`00610004 00000000`00000000 fffff880`0130752e 00000000`00000202 : 0xfffff8a0`0de3cb40
    fffff880`0e196938 00000000`00610004 : 00000000`00000000 fffff880`0130752e 00000000`00000202 fffff800`02e910fa : 0xfffff880`0c4f2980
    fffff880`0e196940 00000000`00000000 : fffff880`0130752e 00000000`00000202 fffff800`02e910fa fffff880`02fd5180 : 0x610004
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    ksecpkg+14c86
    fffff880`015aec86 0000            add     byte ptr [rax],al
    
    SYMBOL_STACK_INDEX:  3
    
    SYMBOL_NAME:  ksecpkg+14c86
    
    FOLLOWUP_NAME:  MachineOwner
    
    IMAGE_NAME:  hardware
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    MODULE_NAME: hardware
    
    FAILURE_BUCKET_ID:  X64_IP_MISALIGNED_ksecpkg.sys
    
    BUCKET_ID:  X64_IP_MISALIGNED_ksecpkg.sys
    
    Followup: MachineOwner
    ---------
    
    7: kd> lmtsmn
    start             end                 module name
    fffff880`044af000 fffff880`044ed000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
    fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
    fffff880`02cd3000 fffff880`02d5d000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`0453c000 fffff880`04552000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`010cd000 fffff880`010d8000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
    fffff880`09782000 fffff880`09789000   AODDriver AODDriver.sys Mon Oct 13 00:38:55 2008 (48F2D0DF)
    fffff880`10bf7000 fffff880`10c00000   aswFsBlk aswFsBlk.sys Tue Nov 24 18:50:04 2009 (4B0C712C)
    fffff880`0197e000 fffff880`01998000   aswMonFlt aswMonFlt.sys Tue Nov 24 18:49:55 2009 (4B0C7123)
    fffff880`02d5d000 fffff880`02d66000   aswRdr   aswRdr.SYS   Tue Nov 24 18:48:59 2009 (4B0C70EB)
    fffff880`04175000 fffff880`04191000   aswSP    aswSP.SYS    Tue Nov 24 18:50:24 2009 (4B0C7140)
    fffff880`01235000 fffff880`01245000   aswTdi   aswTdi.SYS   Tue Nov 24 18:49:09 2009 (4B0C70F5)
    fffff880`09600000 fffff880`0960b000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
    fffff880`00ca6000 fffff880`00caf000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`010a3000 fffff880`010cd000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
    fffff880`01800000 fffff880`01807000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`04164000 fffff880`04175000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`08da9000 fffff880`08dc7000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
    fffff960`00770000 fffff960`00797000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
    fffff880`019c9000 fffff880`019f3000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`00e67000 fffff880`00f27000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
    fffff880`0194e000 fffff880`0197e000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00d10000 fffff880`00d6e000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
    fffff880`0452c000 fffff880`0453c000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`08c9e000 fffff880`08ca6000   cpuz132_x64 cpuz132_x64.sys Thu Mar 26 19:17:23 2009 (49CC0D03)
    fffff880`04d4b000 fffff880`04d59000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`040c3000 fffff880`04146000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
    fffff880`04146000 fffff880`04164000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
    fffff880`02cb4000 fffff880`02cc3000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`01938000 fffff880`0194e000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`04d17000 fffff880`04d39000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`04d59000 fffff880`04d63000   dump_diskdump dump_diskdump.sys Mon Jul 13 20:01:00 2009 (4A5BCABC)
    fffff880`04d83000 fffff880`04d96000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`04d63000 fffff880`04d83000   dump_JRAID dump_JRAID.sys Thu Oct 29 04:14:20 2009 (4AE94EDC)
    fffff880`04d3f000 fffff880`04d4b000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`10af5000 fffff880`10be9000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
    fffff880`0fe00000 fffff880`0fe46000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
    fffff880`09739000 fffff880`0976f000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
    fffff880`044ed000 fffff880`044fa000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
    fffff880`01124000 fffff880`01138000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`04c5e000 fffff880`04c69000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
    fffff880`010d8000 fffff880`01124000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
    fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
    fffff880`018fe000 fffff880`01938000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
    fffff880`01196000 fffff880`011e0000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
    fffff880`0976f000 fffff880`09778000   gdrv     gdrv.sys     Thu Mar 12 23:22:29 2009 (49B9D175)
    fffff880`0fe64000 fffff880`0fe71000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
    fffff880`09778000 fffff880`09782000   GVTDrv64 GVTDrv64.sys Tue Sep 05 03:10:02 2006 (44FD22CA)
    fffff800`033f8000 fffff800`03441000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
    fffff880`04056000 fffff880`0407a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
    fffff880`04c7e000 fffff880`04cda000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
    fffff880`04dc6000 fffff880`04ddf000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
    fffff880`04ddf000 fffff880`04de7080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`04db8000 fffff880`04dc6000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
    fffff880`08ce1000 fffff880`08da9000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
    fffff880`018f5000 fffff880`018fe000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
    fffff880`041b7000 fffff880`041cd000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`00c6c000 fffff880`00c8c000   jraid    jraid.sys    Thu Oct 29 04:14:20 2009 (4AE94EDC)
    fffff880`04425000 fffff880`04434000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`04de8000 fffff880`04df6000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff800`00ba5000 fffff800`00baf000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
    fffff880`0407a000 fffff880`040bd000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
    fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
    fffff880`0159a000 fffff880`015c5000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
    fffff880`04d39000 fffff880`04d3e200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`04df6000 fffff880`04dfd500   Lachesis Lachesis.sys Fri Oct 16 09:09:12 2009 (4AD87078)
    fffff880`02de9000 fffff880`02dfe000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`041cd000 fffff880`041f0000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`00cb8000 fffff880`00cfc000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
    fffff880`10be9000 fffff880`10bf7000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`04434000 fffff880`04443000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`0fe71000 fffff880`0fe7e000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`00c8c000 fffff880`00ca6000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`08dc7000 fffff880`08ddf000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`08c00000 fffff880`08c2d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
    fffff880`08c2d000 fffff880`08c7b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
    fffff880`08c7b000 fffff880`08c9e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
    fffff880`015f0000 fffff880`015fb000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00fda000 fffff880`00fe4000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`01138000 fffff880`01196000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
    fffff880`02ca9000 fffff880`02cb4000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`018e3000 fffff880`018f5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`01448000 fffff880`0153a000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`04576000 fffff880`04582000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`04582000 fffff880`045b1000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`04c69000 fffff880`04c7e000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
    fffff880`02dda000 fffff880`02de9000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`02d66000 fffff880`02dab000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
    fffff880`0153a000 fffff880`0159a000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
    fffff880`01400000 fffff880`01411000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`02c9d000 fffff880`02ca9000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff800`02e1c000 fffff800`033f8000   nt       ntkrnlmp.exe Sat Feb 27 02:55:23 2010 (4B88CFEB)
    fffff880`0125a000 fffff880`013fd000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
    fffff880`019f3000 fffff880`019fc000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`10af3000 fffff880`10af4180   nvBridge nvBridge.kmd Mon Jun 07 18:07:11 2010 (4C0D6D8F)
    fffff880`0fe85000 fffff880`10af2c80   nvlddmkm nvlddmkm.sys Mon Jun 07 18:16:55 2010 (4C0D6FD7)
    fffff880`04445000 fffff880`04455000   nvoclk64 nvoclk64.sys Tue Sep 15 17:59:25 2009 (4AB00E3D)
    fffff880`02db4000 fffff880`02dda000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
    fffff880`04506000 fffff880`04523000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`00da1000 fffff880`00db6000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00d6e000 fffff880`00da1000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`00ff1000 fffff880`00ff8000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
    fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`09245000 fffff880`092eb000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`04cda000 fffff880`04d17000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00cfc000 fffff880`00d10000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`04552000 fffff880`04576000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`045b1000 fffff880`045cc000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`045cc000 fffff880`045ed000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
    fffff880`04400000 fffff880`0441a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`02c4c000 fffff880`02c9d000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
    fffff880`0441a000 fffff880`04425000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
    fffff880`015d5000 fffff880`015de000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`015de000 fffff880`015e7000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`015e7000 fffff880`015f0000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`018a9000 fffff880`018e3000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
    fffff880`011e0000 fffff880`011f8000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`04458000 fffff880`044af000   Rt64win7 Rt64win7.sys Mon Mar 22 05:57:14 2010 (4BA73EFA)
    fffff880`00dcb000 fffff880`00dfa000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
    fffff880`092eb000 fffff880`092f6000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`044fa000 fffff880`04506000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`02c00000 fffff880`02c1d000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`018a2000 fffff880`018a9000   speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
    fffff880`0189a000 fffff880`018a2000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`096a1000 fffff880`09739000   srv      srv.sys      Tue Dec 08 03:32:55 2009 (4B1E0F37)
    fffff880`09335000 fffff880`0939e000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
    fffff880`092f6000 fffff880`09323000   srvnet   srvnet.sys   Tue Dec 08 03:32:26 2009 (4B1E0F1A)
    fffff880`04443000 fffff880`04444480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
    fffff880`09323000 fffff880`09335000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
    fffff880`0142f000 fffff880`0143c000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
    fffff880`01411000 fffff880`0142f000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
    fffff880`02c38000 fffff880`02c4c000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
    fffff960`00550000 fffff960`0055a000   TSDDD    TSDDD.dll    unavailable (00000000)
    fffff880`04191000 fffff880`041b7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
    fffff880`045ed000 fffff880`045ff000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`04d96000 fffff880`04db3000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
    fffff880`04db3000 fffff880`04db4f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`0fe53000 fffff880`0fe64000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
    fffff880`04db5000 fffff880`04db8000   UsbFltr  UsbFltr.sys  Mon Apr 09 06:09:44 2007 (461A10E8)
    fffff880`04c04000 fffff880`04c5e000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
    fffff880`04000000 fffff880`04056000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
    fffff880`0fe46000 fffff880`0fe53000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00fe4000 fffff880`00ff1000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`01807000 fffff880`01815000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`01815000 fffff880`0183a000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`015c5000 fffff880`015d5000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
    fffff880`00db6000 fffff880`00dcb000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
    fffff880`0184e000 fffff880`0189a000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
    fffff880`02c1d000 fffff880`02c38000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
    fffff880`0183a000 fffff880`0184a000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`00f27000 fffff880`00fcb000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00fcb000 fffff880`00fda000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`02dab000 fffff880`02db4000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff960`000d0000 fffff960`003df000   win32k   win32k.sys   Sat May 01 11:06:30 2010 (4BDC4376)
    fffff880`04523000 fffff880`0452c000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
    fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`01998000 fffff880`019b9000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
    
    Unloaded modules:
    fffff880`09789000 fffff880`097fa000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`0197e000 fffff880`0198c000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`0198c000 fffff880`01996000   dump_scsipor
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000A000
    fffff880`01996000 fffff880`019b6000   dump_JRAID.s
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00020000
    fffff880`019b6000 fffff880`019c9000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:39.
Find Us