[BSOD] Crossfire on Windows7 x32

richardyusan1 · 07 Oct 2010

An error occurred when running CrossFire on windows 7 32bit!
how for CrossFire to run on windows 7 32 bit?
when CrossFire patcher and XTrap start no problem, but after XTrap finished downloading the patch, my computer suddenly restarts itself (BSOD) when I turn off antivirus and Crossfire.exe've already put my exception list

I think, an error occurred because XTrap incompatible with Windows 7 32 bit.
then, how can I can report this incident to the Microsoft or XTrap?
if you can, give me an email address can I contact the parties XTrap!

This is a file dump...

cybercore · 07 Oct 2010

100210-35084-01.dmp
IRQL_NOT_LESS_OR_EQUAL (a)
PROCESS_NAME: crossfire.exe
Probably caused by : XDva361.sys

100610-56253-01.dmp
IRQL_NOT_LESS_OR_EQUAL (a)
PROCESS_NAME: crossfire.exe (old game)
Probably caused by : XDva361.sys

XDva361.sys Wed Aug 18 11:28:48 2010
Unknown

1. You have too many old drivers, you must update them:

RivaTuner32.sys Tue Jul 17 22:13:33 2007
RivaTuner

Aspi32.SYS Sat Sep 11 02:46:10 1999
Adaptec EZ-SCSI <- Please find a newer driver (or uninstall and disable this device)

parldr2k.sys Thu May 06 18:36:09 2004
PARLKD2K
Data Encryption Systems Limited

GVTDrv.sys Wed Nov 23 11:00:18 2005
Unknown (Gygabite ?)

s125bus.sys Tue Apr 24 18:16:28 2007
s125wh.sys Tue Apr 24 18:16:23 2007
s125mdm.sys Tue Apr 24 18:18:58 2007
s125mdfl.sys Tue Apr 24 18:18:54 2007
s125obex.sys Tue Apr 24 18:23:19 2007
s125mgmt.sys Tue Apr 24 18:21:22 2007
Sony Ericsson Device 125 USB WMC Modem
MCCI Corporation

lirsgt.sys Sun Jan 29 13:06:18 2006
Copy protection driver witn some software

hotcore3.sys Thu Feb 14 02:25:24 2008
UimFIO.SYS Thu Feb 14 02:27:11 2008
UimBus.sys Thu Feb 14 02:27:11 2008
Uim_IM.sys Thu Feb 14 02:27:15 2008
HotBackup
Paragon Software Group

ISODrive.sys Sat May 24 16:09:08 2008
ISODrive
EZB Systems, Inc.

gdrv.sys Fri Mar 13 05:17:32 2009
GIGABYTE Tools

L1C62x86.sys Mon Jul 27 10:06:45 2009
Atheros L1c PCI-E Gigabit Ethernet Controller

vmnetadapter.sys Mon Aug 10 15:04:00 2009
vmnetbridge.sys Mon Aug 10 15:05:29 2009
hcmon.sys Thu Oct 22 13:00:39 2009
VMWare <- check updates

2. Replace Kaspersky with MSE:

klmouflt.sys Mon Nov 02 18:26:08 2009

Removal tool for Kaspersky Lab products

http://www.microsoft.com/security_essentials/

3. Scan your system for viruses and malware:

Malwarebytes

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\100210-35084-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e0a000 PsLoadedModuleList = 0x82f52810
System Uptime: 0 days 4:18:34.757
Loading Kernel Symbols
...............................................................
................................................................
......................................................
Loading User Symbols
Loading unloaded module list
..........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {a60eb058, ff, 0, 8305104c}

*** WARNING: Unable to verify timestamp for XDva361.sys
*** ERROR: Module load completed but symbols could not be loaded for XDva361.sys
Probably caused by : XDva361.sys ( XDva361+521 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: a60eb058, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8305104c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82f72718
Unable to read MiSystemVaType memory at 82f52160
 a60eb058 

CURRENT_IRQL:  0

FAULTING_IP: 
nt!ExMapHandleToPointer+21
8305104c 8b0e            mov     ecx,dword ptr [esi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xA

PROCESS_NAME:  crossfire.exe

TRAP_FRAME:  8a7fe5f8 -- (.trap 0xffffffff8a7fe5f8)
ErrCode = 00000000
eax=a60eb058 ebx=00000000 ecx=0000002c edx=00000000 esi=a60eb058 edi=868012d8
eip=8305104c esp=8a7fe66c ebp=8a7fe678 iopl=0         nv up di ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010082
nt!ExMapHandleToPointer+0x21:
8305104c 8b0e            mov     ecx,dword ptr [esi]  ds:0023:a60eb058=871e63e9
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8305104c to 82e507eb

STACK_TEXT:  
8a7fe5f8 8305104c badb0d00 00000000 00000000 nt!KiTrap0E+0x2cf
8a7fe678 8307a041 0000102c a05894a8 0000102c nt!ExMapHandleToPointer+0x21
8a7fe69c a057c521 0000102c 8a7fe6ac 00000000 nt!PsLookupProcessByProcessId+0x29
WARNING: Stack unwind information not available. Following frames may be wrong.
8a7fe6b0 a0587705 0000102c 00000005 8a7fe8d4 XDva361+0x521
8a7fe6ec a058675d a05894a8 8a7fe854 ad58ee58 XDva361+0xb705
8a7fe8d8 a057e9d1 ad58ee58 000001a8 ad58ee58 XDva361+0xa75d
8a7feba0 a057e126 a83f4f68 8a2b0048 00000001 XDva361+0x29d1
8a7febdc 831396c3 8aab9620 a83f4f68 8a2b0048 XDva361+0x2126
8a7fec00 82e46473 00000000 a83f4f68 8aab9620 nt!IovCallDriver+0x258
8a7fec14 83047eee 8a2b0048 a83f4f68 a83f4fd8 nt!IofCallDriver+0x1b
8a7fec34 83064cd1 8aab9620 8a2b0048 00000000 nt!IopSynchronousServiceTail+0x1f8
8a7fecd0 830674ac 8aab9620 a83f4f68 00000000 nt!IopXxxControlFile+0x6aa
8a7fed04 82e4d42a 00000450 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
8a7fed04 779c64f4 00000450 00000000 00000000 nt!KiFastCallEntry+0x12a
00000000 00000000 00000000 00000000 00000000 0x779c64f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
XDva361+521
a057c521 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  XDva361+521

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: XDva361

IMAGE_NAME:  XDva361.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c6b99c0

FAILURE_BUCKET_ID:  0xA_VRF_XDva361+521

BUCKET_ID:  0xA_VRF_XDva361+521

Followup: MachineOwner
---------

0: kd> lmvm XDva361
start    end        module name
a057c000 a058d000   XDva361  T (no symbols)           
    Loaded symbol image file: XDva361.sys
    Image path: \??\C:\Windows\system32\XDva361.sys
    Image name: XDva361.sys
    Timestamp:        Wed Aug 18 11:28:48 2010 (4C6B99C0)
    CheckSum:         0001BD71
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4


















Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\100610-56253-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e3f000 PsLoadedModuleList = 0x82f87810
System Uptime: 0 days 0:03:45.330
Loading Kernel Symbols
...............................................................
................................................................
.......................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {a620b6d0, ff, 0, 8308604c}

*** WARNING: Unable to verify timestamp for XDva361.sys
*** ERROR: Module load completed but symbols could not be loaded for XDva361.sys
Probably caused by : XDva361.sys ( XDva361+521 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: a620b6d0, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8308604c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82fa7718
Unable to read MiSystemVaType memory at 82f87160
 a620b6d0 

CURRENT_IRQL:  0

FAULTING_IP: 
nt!ExMapHandleToPointer+21
8308604c 8b0e            mov     ecx,dword ptr [esi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xA

PROCESS_NAME:  crossfire.exe

TRAP_FRAME:  8a5085f8 -- (.trap 0xffffffff8a5085f8)
ErrCode = 00000000
eax=a620b6d0 ebx=00000000 ecx=00000368 edx=00000000 esi=a620b6d0 edi=87201280
eip=8308604c esp=8a50866c ebp=8a508678 iopl=0         nv up di ng nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010082
nt!ExMapHandleToPointer+0x21:
8308604c 8b0e            mov     ecx,dword ptr [esi]  ds:0023:a620b6d0=aa0f13c9
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8308604c to 82e857eb

STACK_TEXT:  
8a5085f8 8308604c badb0d00 00000000 00000000 nt!KiTrap0E+0x2cf
8a508678 830af041 00001368 aa5404a8 00001368 nt!ExMapHandleToPointer+0x21
8a50869c aa533521 00001368 8a5086ac 00000000 nt!PsLookupProcessByProcessId+0x29
WARNING: Stack unwind information not available. Following frames may be wrong.
8a5086b0 aa53e705 00001368 00000005 8a5088d4 XDva361+0x521
8a5086ec aa53d75d aa5404a8 8a508854 ab85ce58 XDva361+0xb705
8a5088d8 aa5359d1 ab85ce58 000001a8 ab85ce58 XDva361+0xa75d
8a508ba0 aa535126 acad8f68 8ac2f420 00000001 XDva361+0x29d1
8a508bdc 8316e6c3 87ec3ec8 acad8f68 8ac2f420 XDva361+0x2126
8a508c00 82e7b473 00000000 acad8f68 87ec3ec8 nt!IovCallDriver+0x258
8a508c14 8307ceee 8ac2f420 acad8f68 acad8fd8 nt!IofCallDriver+0x1b
8a508c34 83099cd1 87ec3ec8 8ac2f420 00000000 nt!IopSynchronousServiceTail+0x1f8
8a508cd0 8309c4ac 87ec3ec8 acad8f68 00000000 nt!IopXxxControlFile+0x6aa
8a508d04 82e8242a 00000468 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
8a508d04 770c64f4 00000468 00000000 00000000 nt!KiFastCallEntry+0x12a
00000000 00000000 00000000 00000000 00000000 0x770c64f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
XDva361+521
aa533521 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  XDva361+521

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: XDva361

IMAGE_NAME:  XDva361.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c6b99c0

FAILURE_BUCKET_ID:  0xA_VRF_XDva361+521

BUCKET_ID:  0xA_VRF_XDva361+521

Followup: MachineOwner
---------

0: kd> lmvm XDva361
start    end        module name
aa533000 aa544000   XDva361  T (no symbols)           
    Loaded symbol image file: XDva361.sys
    Image path: \??\C:\Windows\system32\XDva361.sys
    Image name: XDva361.sys
    Timestamp:        Wed Aug 18 11:28:48 2010 (4C6B99C0)
    CheckSum:         0001BD71
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> lmtn
start    end        module name
80ba5000 80bad000   kdcom    kdcom.dll    Tue Jul 14 04:08:58 2009 (4A5BDAAA)
82e08000 82e3f000   hal      halmacpi.dll Tue Jul 14 02:11:03 2009 (4A5BBF07)
82e3f000 8324f000   nt       ntkrpamp.exe Tue Jul 14 02:15:19 2009 (4A5BC007)
85400000 85407000   intelide intelide.sys Tue Jul 14 02:11:19 2009 (4A5BBF17)
85407000 85415000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 02:11:15 2009 (4A5BBF13)
85416000 8548e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 04:06:41 2009 (4A5BDA21)
8548e000 8549f000   PSHED    PSHED.dll    Tue Jul 14 04:09:36 2009 (4A5BDAD0)
8549f000 854a7000   BOOTVID  BOOTVID.dll  Tue Jul 14 04:04:34 2009 (4A5BD9A2)
854a7000 854e9000   CLFS     CLFS.SYS     Tue Jul 14 02:11:10 2009 (4A5BBF0E)
854e9000 85594000   CI       CI.dll       Tue Jul 14 04:09:28 2009 (4A5BDAC8)
85594000 855a5000   partmgr  partmgr.sys  Tue Jul 14 02:11:35 2009 (4A5BBF27)
855a5000 855b5000   volmgr   volmgr.sys   Tue Jul 14 02:11:25 2009 (4A5BBF1D)
855b5000 85600000   volmgrx  volmgrx.sys  unavailable (00000000)
85600000 8560b000   vdrvroot vdrvroot.sys Tue Jul 14 02:46:19 2009 (4A5BC74B)
8560b000 85635000   pci      pci.sys      Tue Jul 14 02:11:16 2009 (4A5BBF14)
85635000 85639300   hotcore3 hotcore3.sys Thu Feb 14 02:25:24 2008 (47B38A74)
8563a000 856ab000   Wdf01000 Wdf01000.sys Tue Jul 14 02:11:36 2009 (4A5BBF28)
856ab000 856b9000   WDFLDR   WDFLDR.SYS   Tue Jul 14 02:11:25 2009 (4A5BBF1D)
856b9000 856cc000   wanarp   wanarp.sys   Tue Jul 14 02:55:02 2009 (4A5BC956)
856cc000 856e96c0   Uim_IM   Uim_IM.sys   Thu Feb 14 02:27:15 2008 (47B38AE3)
856ea000 856fa000   termdd   termdd.sys   Tue Jul 14 03:01:35 2009 (4A5BCADF)
856fa000 8573b000   rdbss    rdbss.sys    Tue Jul 14 02:14:26 2009 (4A5BBFD2)
8573b000 85751000   ISODrive ISODrive.sys Sat May 24 16:09:08 2008 (48381374)
85751000 8575d000   discache discache.sys Tue Jul 14 02:24:04 2009 (4A5BC214)
85781000 8578a000   WMILIB   WMILIB.SYS   Tue Jul 14 02:11:22 2009 (4A5BBF1A)
8578a000 857b0000   SPTDDRV1 SPTDDRV1.SYS Tue Jul 14 02:45:55 2009 (4A5BC733)
857b0000 857f8000   ACPI     ACPI.sys     Tue Jul 14 02:11:11 2009 (4A5BBF0F)
857f8000 85800000   msisadrv msisadrv.sys Tue Jul 14 02:11:09 2009 (4A5BBF0D)
85800000 8581a000   serial   serial.sys   Tue Jul 14 02:45:33 2009 (4A5BC71D)
8581a000 85824000   nsiproxy nsiproxy.sys Tue Jul 14 02:12:08 2009 (4A5BBF48)
85827000 8583d000   mountmgr mountmgr.sys Tue Jul 14 02:11:27 2009 (4A5BBF1F)
8583d000 85846000   atapi    atapi.sys    Tue Jul 14 02:11:15 2009 (4A5BBF13)
85846000 85869000   ataport  ataport.SYS  Tue Jul 14 02:11:18 2009 (4A5BBF16)
85869000 85872000   amdxata  amdxata.sys  Tue May 19 20:57:35 2009 (4A12F30F)
85872000 8587d000   MDPMGRNT MDPMGRNT.sys Fri Jan 22 19:20:25 2010 (4B59DE59)
8587d000 858b1000   fltmgr   fltmgr.sys   Tue Jul 14 02:11:13 2009 (4A5BBF11)
858b1000 858c2000   fileinfo fileinfo.sys Tue Jul 14 02:21:51 2009 (4A5BC18F)
858c2000 859f1000   Ntfs     Ntfs.sys     Tue Jul 14 02:12:05 2009 (4A5BBF45)
859f1000 859fb000   mssmbios mssmbios.sys Tue Jul 14 02:19:25 2009 (4A5BC0FD)
85a00000 85a25000   ksecpkg  ksecpkg.sys  Tue Jul 14 02:34:00 2009 (4A5BC468)
85a25000 85a35000   mup      mup.sys      Tue Jul 14 02:14:14 2009 (4A5BBFC6)
85a37000 85a62000   msrpc    msrpc.sys    unavailable (00000000)
85a62000 85a75000   ksecdd   ksecdd.sys   Tue Jul 14 02:11:56 2009 (4A5BBF3C)
85a75000 85ad2000   cng      cng.sys      Tue Jul 14 02:32:55 2009 (4A5BC427)
85ad2000 85ae0000   pcw      pcw.sys      Tue Jul 14 02:11:10 2009 (4A5BBF0E)
85ae0000 85ae9000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
85ae9000 85ba0000   ndis     ndis.sys     Tue Jul 14 02:12:24 2009 (4A5BBF58)
85ba0000 85bde000   NETIO    NETIO.SYS    Tue Jul 14 02:12:35 2009 (4A5BBF63)
85bde000 85be6000   klim6    klim6.sys    Thu Apr 22 18:07:20 2010 (4BD06628)
85be6000 85bf4000   netbios  netbios.sys  Tue Jul 14 02:53:54 2009 (4A5BC912)
85bf4000 85bfa200   UimBus   UimBus.sys   Thu Feb 14 02:27:11 2008 (47B38ADF)
85c05000 85d4e000   tcpip    tcpip.sys    Tue Jul 14 02:13:18 2009 (4A5BBF8E)
85d4e000 85d7f000   fwpkclnt fwpkclnt.sys Tue Jul 14 02:12:03 2009 (4A5BBF43)
85d7f000 85d88000   vmstorfl vmstorfl.sys unavailable (00000000)
85d88000 85dc7000   volsnap  volsnap.sys  Tue Jul 14 02:11:34 2009 (4A5BBF26)
85dc7000 85dcf000   spldr    spldr.sys    Mon May 11 19:13:47 2009 (4A084EBB)
85dcf000 85dfc000   rdyboost rdyboost.sys Tue Jul 14 02:22:02 2009 (4A5BC19A)
85e00000 85e1f000   pacer    pacer.sys    Tue Jul 14 02:53:58 2009 (4A5BC916)
85e1f000 85e20600   UimFIO   UimFIO.SYS   Thu Feb 14 02:27:11 2008 (47B38ADF)
85e22000 85e62000   MDFSYSNT MDFSYSNT.sys Thu Feb 04 18:52:09 2010 (4B6AFB39)
85e62000 85ee2000   klif     klif.sys     Fri May 07 11:23:55 2010 (4BE3CE1B)
85ee2000 85eee000   vga      vga.sys      Tue Jul 14 02:25:50 2009 (4A5BC27E)
85eee000 85f0f000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:25:49 2009 (4A5BC27D)
85f0f000 85f1c000   watchdog watchdog.sys Tue Jul 14 02:24:10 2009 (4A5BC21A)
85f1c000 85f24000   rdpencdd rdpencdd.sys Tue Jul 14 03:01:39 2009 (4A5BCAE3)
85f24000 85f2c000   rdprefmp rdprefmp.sys Tue Jul 14 03:01:41 2009 (4A5BCAE5)
85f2c000 85f37000   Msfs     Msfs.SYS     Tue Jul 14 02:11:26 2009 (4A5BBF1E)
85f37000 85f45000   Npfs     Npfs.SYS     Tue Jul 14 02:11:31 2009 (4A5BBF23)
85f45000 85f5c000   tdx      tdx.sys      Tue Jul 14 02:12:10 2009 (4A5BBF4A)
85f5c000 85f67000   TDI      TDI.SYS      Tue Jul 14 02:12:12 2009 (4A5BBF4C)
85f67000 85fc1000   afd      afd.sys      Tue Jul 14 02:12:34 2009 (4A5BBF62)
85fc1000 85ff3000   netbt    netbt.sys    Tue Jul 14 02:12:18 2009 (4A5BBF52)
85ff3000 85ffc000   ws2ifsl  ws2ifsl.sys  Tue Jul 14 02:55:01 2009 (4A5BC955)
86000000 8601f000   cdrom    cdrom.sys    Tue Jul 14 02:11:24 2009 (4A5BBF1C)
8601f000 86026000   Null     Null.SYS     Tue Jul 14 02:11:12 2009 (4A5BBF10)
86026000 8602d000   Beep     Beep.SYS     Tue Jul 14 02:45:00 2009 (4A5BC6FC)
8602d000 86035000   RDPCDD   RDPCDD.sys   Tue Jul 14 03:01:40 2009 (4A5BCAE4)
86035000 86557000   kl1      kl1.sys      Thu May 06 23:00:06 2010 (4BE31FC6)
86557000 8655f000   hwpolicy hwpolicy.sys Tue Jul 14 02:11:01 2009 (4A5BBF05)
8655f000 86591000   fvevol   fvevol.sys   Tue Jul 14 02:13:01 2009 (4A5BBF7D)
86591000 865a2000   disk     disk.sys     Tue Jul 14 02:11:28 2009 (4A5BBF20)
865a2000 865c7000   CLASSPNP CLASSPNP.SYS Tue Jul 14 02:11:20 2009 (4A5BBF18)
865f9000 86600000   wfplwf   wfplwf.sys   Tue Jul 14 02:53:51 2009 (4A5BC90F)
8dc00000 8dc0d000   mouclass mouclass.sys Tue Jul 14 02:11:15 2009 (4A5BBF13)
8dc2a000 8dc8e000   csc      csc.sys      Tue Jul 14 02:15:08 2009 (4A5BBFFC)
8dc8e000 8dca6000   dfsc     dfsc.sys     Tue Jul 14 02:14:16 2009 (4A5BBFC8)
8dca6000 8dcb2300   CBDisk   CBDisk.sys   Wed Jan 13 11:15:41 2010 (4B4D8F3D)
8dcb3000 8dcc1000   blbdrive blbdrive.sys Tue Jul 14 02:23:04 2009 (4A5BC1D8)
8dcc1000 8dce2000   tunnel   tunnel.sys   Tue Jul 14 02:54:03 2009 (4A5BC91B)
8dce2000 8dcf4000   intelppm intelppm.sys Tue Jul 14 02:11:03 2009 (4A5BBF07)
8dcf4000 8dd3f000   USBPORT  USBPORT.SYS  Tue Jul 14 02:51:13 2009 (4A5BC871)
8dd3f000 8dd57000   i8042prt i8042prt.sys Tue Jul 14 02:11:23 2009 (4A5BBF1B)
8dd57000 8dd69000   AgileVpn AgileVpn.sys Tue Jul 14 02:55:00 2009 (4A5BC954)
8dd69000 8dd81000   rasl2tp  rasl2tp.sys  Tue Jul 14 02:54:33 2009 (4A5BC939)
8dd81000 8dd8c000   ndistapi ndistapi.sys Tue Jul 14 02:54:24 2009 (4A5BC930)
8dd8c000 8ddae000   ndiswan  ndiswan.sys  Tue Jul 14 02:54:34 2009 (4A5BC93A)
8ddae000 8ddc6000   raspppoe raspppoe.sys Tue Jul 14 02:54:53 2009 (4A5BC94D)
8ddc6000 8dddd000   raspptp  raspptp.sys  Tue Jul 14 02:54:47 2009 (4A5BC947)
8dddd000 8ddf4000   rassstp  rassstp.sys  Tue Jul 14 02:54:57 2009 (4A5BC951)
8ddf4000 8ddfe000   rdpbus   rdpbus.sys   Tue Jul 14 03:02:40 2009 (4A5BCB20)
8e400000 8e418000   parport  parport.sys  Tue Jul 14 02:45:34 2009 (4A5BC71E)
8e418000 8e425000   kbdclass kbdclass.sys Tue Jul 14 02:11:15 2009 (4A5BBF13)
8e425000 8e429080   VMkbd    VMkbd.sys    Thu Oct 22 13:50:57 2009 (4AE03911)
8e42a000 8e42b380   swenum   swenum.sys   Tue Jul 14 02:45:08 2009 (4A5BC704)
8e42f000 8eeacdc0   nvlddmkm nvlddmkm.sys Sat Jul 10 00:15:14 2010 (4C379162)
8eead000 8eeae040   nvBridge nvBridge.kmd Sat Jul 10 00:10:11 2010 (4C379033)
8eeaf000 8ef66000   dxgkrnl  dxgkrnl.sys  Tue Jul 14 02:26:15 2009 (4A5BC297)
8ef66000 8ef9f000   dxgmms1  dxgmms1.sys  Tue Jul 14 02:25:25 2009 (4A5BC265)
8ef9f000 8efbe000   HDAudBus HDAudBus.sys Tue Jul 14 02:50:55 2009 (4A5BC85F)
8efbe000 8efce000   L1C62x86 L1C62x86.sys Mon Jul 27 10:06:45 2009 (4A6D5205)
8efce000 8efd9000   usbuhci  usbuhci.sys  Tue Jul 14 02:51:10 2009 (4A5BC86E)
8efd9000 8efe8000   usbehci  usbehci.sys  Tue Jul 14 02:51:14 2009 (4A5BC872)
8efe8000 8eff2000   serenum  serenum.sys  Tue Jul 14 02:45:27 2009 (4A5BC717)
8eff2000 8efff000   CompositeBus CompositeBus.sys Tue Jul 14 02:45:26 2009 (4A5BC716)
8fc11000 8fc45000   ks       ks.sys       Tue Jul 14 02:45:13 2009 (4A5BC709)
8fc45000 8fc48ba0   vsb      vsb.sys      Tue Sep 07 16:31:26 2004 (413DB82E)
8fc49000 8fc57000   umbus    umbus.sys    Tue Jul 14 02:51:38 2009 (4A5BC88A)
8fc57000 8fc59680   vmnetadapter vmnetadapter.sys Mon Aug 10 15:04:00 2009 (4A800CB0)
8fc5a000 8fc5cf00   VMNET    VMNET.SYS    Mon Aug 10 15:03:57 2009 (4A800CAD)
8fc5d000 8fca1000   usbhub   usbhub.sys   Tue Jul 14 02:52:06 2009 (4A5BC8A6)
8fca1000 8fcb2000   NDProxy  NDProxy.SYS  Tue Jul 14 02:54:27 2009 (4A5BC933)
8fcb2000 8fccd000   luafv    luafv.sys    Tue Jul 14 02:15:44 2009 (4A5BC020)
8fccd000 8fce7000   WudfPf   WudfPf.sys   Tue Jul 14 02:50:13 2009 (4A5BC835)
8fce7000 8fcfa000   rspndr   rspndr.sys   Tue Jul 14 02:53:20 2009 (4A5BC8F0)
8fcfa000 8fd7f000   HTTP     HTTP.sys     Tue Jul 14 02:12:53 2009 (4A5BBF75)
8fd7f000 8fd98000   bowser   bowser.sys   Tue Jul 14 02:14:21 2009 (4A5BBFCD)
8fd98000 8fdaa000   mpsdrv   mpsdrv.sys   Tue Jul 14 02:52:52 2009 (4A5BC8D4)
8fdaa000 8fdcd000   mrxsmb   mrxsmb.sys   Tue Jul 14 02:14:24 2009 (4A5BBFD0)
8fdcd000 8fde3000   cdfs     cdfs.sys     Tue Jul 14 02:11:14 2009 (4A5BBF12)
94600000 94610000   lltdio   lltdio.sys   Tue Jul 14 02:53:18 2009 (4A5BC8EE)
94617000 94906f80   RTKVHDA  RTKVHDA.sys  Fri Apr 30 11:59:05 2010 (4BDA9BD9)
94907000 94936000   portcls  portcls.sys  Tue Jul 14 02:51:00 2009 (4A5BC864)
94936000 9494f000   drmk     drmk.sys     Tue Jul 14 03:36:05 2009 (4A5BD2F5)
9494f000 9495c000   crashdmp crashdmp.sys Tue Jul 14 02:45:50 2009 (4A5BC72E)
9495c000 94967000   dump_dumpata dump_dumpata.sys Tue Jul 14 02:11:16 2009 (4A5BBF14)
94967000 94970000   dump_atapi dump_atapi.sys Tue Jul 14 02:11:15 2009 (4A5BBF13)
94970000 94981000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 02:12:47 2009 (4A5BBF6F)
94981000 9498b000   Dxapi    Dxapi.sys    Tue Jul 14 02:25:25 2009 (4A5BC265)
9498b000 949a2000   USBSTOR  USBSTOR.SYS  Tue Jul 14 02:51:19 2009 (4A5BC877)
949a2000 949a3700   USBD     USBD.SYS     Tue Jul 14 02:51:05 2009 (4A5BC869)
949a4000 949af000   hidusb   hidusb.sys   Tue Jul 14 02:51:04 2009 (4A5BC868)
949af000 949c2000   HIDCLASS HIDCLASS.SYS Tue Jul 14 02:51:01 2009 (4A5BC865)
949c2000 949c8480   HIDPARSE HIDPARSE.SYS Tue Jul 14 02:50:59 2009 (4A5BC863)
949c9000 949d4000   mouhid   mouhid.sys   Tue Jul 14 02:45:08 2009 (4A5BC704)
949d4000 949dd000   klmouflt klmouflt.sys Mon Nov 02 18:26:08 2009 (4AEF0820)
949dd000 949e8000   monitor  monitor.sys  Tue Jul 14 02:25:58 2009 (4A5BC286)
949e8000 949f6000   vmnetbridge vmnetbridge.sys Mon Aug 10 15:05:29 2009 (4A800D09)
95f50000 9619a000   win32k   win32k.sys   Tue Jul 14 02:26:26 2009 (4A5BC2A2)
961b0000 961b9000   TSDDD    TSDDD.dll    unavailable (00000000)
961e0000 961fe000   cdd      cdd.dll      Tue Jul 14 04:04:18 2009 (4A5BD992)
9d236000 9d271000   mrxsmb10 mrxsmb10.sys Tue Jul 14 02:14:34 2009 (4A5BBFDA)
9d271000 9d28c000   mrxsmb20 mrxsmb20.sys Tue Jul 14 02:14:29 2009 (4A5BBFD5)
9d28c000 9d296000   hcmon    hcmon.sys    Thu Oct 22 13:00:39 2009 (4AE02D47)
9d296000 9d29d000   parvdm   parvdm.sys   Tue Jul 14 02:45:29 2009 (4A5BC719)
9d29d000 9d2aca00   vmci     vmci.sys     Thu Oct 22 12:25:26 2009 (4AE02506)
9d2ad000 9d2af000   VMparport VMparport.sys Thu Oct 22 12:24:15 2009 (4AE024BF)
9d2af000 9d37dd80   vmx86    vmx86.sys    Thu Oct 22 14:36:25 2009 (4AE043B9)
9d37e000 9d381e40   Aspi32   Aspi32.SYS   Sat Sep 11 02:46:10 1999 (37D99842)
9d3c5000 9d3c9680   lirsgt   lirsgt.sys   Sun Jan 29 13:06:18 2006 (43DCA1AA)
9d3ca000 9d3cc880   parldr2k parldr2k.sys Thu May 06 18:36:09 2004 (409A5B69)
a2e30000 a2ec7000   peauth   peauth.sys   Tue Jul 14 03:35:44 2009 (4A5BD2E0)
a2ec7000 a2ed1000   secdrv   secdrv.SYS   Wed Sep 13 16:18:32 2006 (45080528)
a2ed1000 a2ef2000   srvnet   srvnet.sys   Tue Jul 14 02:14:45 2009 (4A5BBFE5)
a2ef2000 a2f5c000   spsys    spsys.sys    Mon May 11 19:37:10 2009 (4A085436)
a2f5c000 a2f69000   tcpipreg tcpipreg.sys Tue Jul 14 02:54:14 2009 (4A5BC926)
a2f69000 a2f6dc80   vmnetuserif vmnetuserif.sys Thu Oct 22 13:16:06 2009 (4AE030E6)
a2f6e000 a2f71d80   vstor2_ws60 vstor2-ws60.sys Tue Oct 13 00:06:25 2009 (4AD39A51)
a2f72000 a2fc1000   srv2     srv2.sys     Tue Jul 14 02:14:52 2009 (4A5BBFEC)
aa43b000 aa48c000   srv      srv.sys      Tue Jul 14 02:15:10 2009 (4A5BBFFE)
aa48c000 aa48e6c0   gdrv     gdrv.sys     Fri Mar 13 05:17:32 2009 (49B9D04C)
aa48f000 aa491380   RivaTuner32 RivaTuner32.sys Tue Jul 17 22:13:33 2007 (469D14DD)
aa492000 aa4b2480   WUDFRd   WUDFRd.sys   Tue Jul 14 02:50:44 2009 (4A5BC854)
aa4b3000 aa4c5a80   s125bus  s125bus.sys  Tue Apr 24 18:16:28 2007 (462E1F4C)
aa4c6000 aa4c7580   s125wh   s125wh.sys   Tue Apr 24 18:16:23 2007 (462E1F47)
aa4c8000 aa4e0d80   s125mdm  s125mdm.sys  Tue Apr 24 18:18:58 2007 (462E1FE2)
aa4e1000 aa4e2580   s125cm   s125cm.sys   Tue Apr 24 18:23:15 2007 (462E20E3)
aa4e3000 aa4f0000   modem    modem.sys    Tue Jul 14 02:55:24 2009 (4A5BC96C)
aa4f0000 aa4f2000   s125mdfl s125mdfl.sys Tue Apr 24 18:18:54 2007 (462E1FDE)
aa4f2000 aa508680   s125obex s125obex.sys Tue Apr 24 18:23:19 2007 (462E20E7)
aa509000 aa51fd80   s125mgmt s125mgmt.sys Tue Apr 24 18:21:22 2007 (462E2072)
aa520000 aa523e80   GVTDrv   GVTDrv.sys   Wed Nov 23 11:00:18 2005 (43842FA2)
aa52a000 aa533000   asyncmac asyncmac.sys Tue Jul 14 02:54:46 2009 (4A5BC946)
aa533000 aa544000   XDva361  XDva361.sys  Wed Aug 18 11:28:48 2010 (4C6B99C0)

Unloaded modules:
aa524000 aa52a000   AODDriver.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9d382000 9d3c5000   atksgt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
865c7000 865d4000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
865d4000 865df000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
865df000 865e8000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
865e8000 865f9000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8e433000 8e955000   kl2.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
856b9000 85781000   sptd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000

richardyusan1 · 08 Oct 2010

I've followed the steps you give, but still error

Can I know the email address microsoft or x-trap to inform this issue?

cybercore · 08 Oct 2010

As you know there are 2 causes of BSOD's -> 1) bad drivers or software, 2) faulty hardware or wrong hardware configuration. You do indeed have many outdated drivers incompattible with Windows 7. Please update them.

100810-45458-01.dmp (8.10.2010)
BugCheck A, {87204b50, ff, 0, 8305804c}
Probably caused by : XDva361.sys ( XDva361+521 )

1. Please update these drivers:

parldr2k.sys Thu May 06 18:36:09 2004
PARLKD2K
Data Encryption Systems Limited

GVTDrv.sys Wed Nov 23 11:00:18 2005
Unknown (Gygabite ?)

RivaTuner32.sys Tue Jul 17 22:13:33 2007
RivaTuner

s125bus.sys Tue Apr 24 18:16:28 2007
s125wh.sys Tue Apr 24 18:16:23 2007
s125mdm.sys Tue Apr 24 18:18:58 2007
s125mdfl.sys Tue Apr 24 18:18:54 2007
s125obex.sys Tue Apr 24 18:23:19 2007
s125mgmt.sys Tue Apr 24 18:21:22 2007
Sony Ericsson Device 125 USB WMC Modem
MCCI Corporation

lirsgt.sys Sun Jan 29 13:06:18 2006
Copy protection driver witn some software

hotcore3.sys Thu Feb 14 02:25:24 2008
UimFIO.SYS Thu Feb 14 02:27:11 2008
UimBus.sys Thu Feb 14 02:27:11 2008
Uim_IM.sys Thu Feb 14 02:27:15 2008
HotBackup
Paragon Software Group

ISODrive.sys Sat May 24 16:09:08 2008
ISODrive
EZB Systems, Inc.

gdrv.sys Fri Mar 13 05:17:32 2009
GIGABYTE Tools

L1C62x86.sys Mon Jul 27 10:06:45 2009
Atheros L1c PCI-E Gigabit Ethernet Controller

There is no timestamp for sptd.sys (Daemon Tools/Duplex Software), but please update this one too.

2. Replace Kaspersky with MSE:

Removal tool for Kaspersky Lab products

http://www.microsoft.com/security_essentials/

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\100810-45458-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e11000 PsLoadedModuleList = 0x82f59810
System Uptime: 0 days 5:23:00.434
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {87204b50, ff, 0, 8305804c}

*** WARNING: Unable to verify timestamp for XDva361.sys
*** ERROR: Module load completed but symbols could not be loaded for XDva361.sys
Probably caused by : XDva361.sys ( XDva361+521 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 87204b50, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8305804c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82f79718
Unable to read MiSystemVaType memory at 82f59160
 87204b50 

CURRENT_IRQL:  0

FAULTING_IP: 
nt!ExMapHandleToPointer+21
8305804c 8b0e            mov     ecx,dword ptr [esi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xA

PROCESS_NAME:  crossfire.exe

TRAP_FRAME:  9f30f5f8 -- (.trap 0xffffffff9f30f5f8)
ErrCode = 00000000
eax=87204b50 ebx=00000000 ecx=000005a8 edx=00000000 esi=87204b50 edi=87201280
eip=8305804c esp=9f30f66c ebp=9f30f678 iopl=0         nv up di ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010086
nt!ExMapHandleToPointer+0x21:
8305804c 8b0e            mov     ecx,dword ptr [esi]  ds:0023:87204b50=bef25031
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8305804c to 82e577eb

STACK_TEXT:  
9f30f5f8 8305804c badb0d00 00000000 00000000 nt!KiTrap0E+0x2cf
9f30f678 83081041 000005a8 bdfa84a8 000005a8 nt!ExMapHandleToPointer+0x21
9f30f69c bdf9b521 000005a8 9f30f6ac 00000000 nt!PsLookupProcessByProcessId+0x29
WARNING: Stack unwind information not available. Following frames may be wrong.
9f30f6b0 bdfa6705 000005a8 00000005 9f30f8d4 XDva361+0x521
9f30f6ec bdfa575d bdfa84a8 9f30f854 c2122e58 XDva361+0xb705
9f30f8d8 bdf9d9d1 c2122e58 000001a8 c2122e58 XDva361+0xa75d
9f30fba0 bdf9d126 c208cf68 a3bfa3d0 00000001 XDva361+0x29d1
9f30fbdc 831406c3 955af1d8 c208cf68 a3bfa3d0 XDva361+0x2126
9f30fc00 82e4d473 00000000 c208cf68 955af1d8 nt!IovCallDriver+0x258
9f30fc14 8304eeee a3bfa3d0 c208cf68 c208cfd8 nt!IofCallDriver+0x1b
9f30fc34 8306bcd1 955af1d8 a3bfa3d0 00000000 nt!IopSynchronousServiceTail+0x1f8
9f30fcd0 8306e4ac 955af1d8 c208cf68 00000000 nt!IopXxxControlFile+0x6aa
9f30fd04 82e5442a 0000047c 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
9f30fd04 771864f4 0000047c 00000000 00000000 nt!KiFastCallEntry+0x12a
00000000 00000000 00000000 00000000 00000000 0x771864f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
XDva361+521
bdf9b521 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  XDva361+521

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: XDva361

IMAGE_NAME:  XDva361.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c6b99c0

FAILURE_BUCKET_ID:  0xA_VRF_XDva361+521

BUCKET_ID:  0xA_VRF_XDva361+521

Followup: MachineOwner
---------

0: kd> lmvm XDva361
start    end        module name
bdf9b000 bdfac000   XDva361  T (no symbols)           
    Loaded symbol image file: XDva361.sys
    Image path: \??\C:\Windows\system32\XDva361.sys
    Image name: XDva361.sys
    Timestamp:        Wed Aug 18 11:28:48 2010 (4C6B99C0)
    CheckSum:         0001BD71
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> lmtn
start    end        module name
80bbb000 80bc3000   kdcom    kdcom.dll    Tue Jul 14 04:08:58 2009 (4A5BDAAA)
81e00000 81e09000   TSDDD    TSDDD.dll    unavailable (00000000)
81e30000 81e4e000   cdd      cdd.dll      unavailable (00000000)
81fa0000 821ea000   win32k   win32k.sys   Tue Jul 14 02:26:26 2009 (4A5BC2A2)
82400000 8241b000   luafv    luafv.sys    Tue Jul 14 02:15:44 2009 (4A5BC020)
8241b000 82435000   WudfPf   WudfPf.sys   Tue Jul 14 02:50:13 2009 (4A5BC835)
82435000 82439680   lirsgt   lirsgt.sys   Sun Jan 29 13:06:18 2006 (43DCA1AA)
8243b000 8272af80   RTKVHDA  RTKVHDA.sys  Fri Apr 30 11:59:05 2010 (4BDA9BD9)
8272b000 8275a000   portcls  portcls.sys  Tue Jul 14 02:51:00 2009 (4A5BC864)
8275a000 82773000   drmk     drmk.sys     Tue Jul 14 03:36:05 2009 (4A5BD2F5)
82773000 8277d000   Dxapi    Dxapi.sys    Tue Jul 14 02:25:25 2009 (4A5BC265)
8277d000 8278a000   crashdmp crashdmp.sys Tue Jul 14 02:45:50 2009 (4A5BC72E)
8278a000 82795000   dump_dumpata dump_dumpata.sys Tue Jul 14 02:11:16 2009 (4A5BBF14)
82795000 8279e000   dump_atapi dump_atapi.sys Tue Jul 14 02:11:15 2009 (4A5BBF13)
8279e000 827af000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 02:12:47 2009 (4A5BBF6F)
827af000 827ba000   hidusb   hidusb.sys   Tue Jul 14 02:51:04 2009 (4A5BC868)
827ba000 827cd000   HIDCLASS HIDCLASS.SYS Tue Jul 14 02:51:01 2009 (4A5BC865)
827cd000 827d3480   HIDPARSE HIDPARSE.SYS Tue Jul 14 02:50:59 2009 (4A5BC863)
827d4000 827d5700   USBD     USBD.SYS     Tue Jul 14 02:51:05 2009 (4A5BC869)
827d6000 827e1000   mouhid   mouhid.sys   Tue Jul 14 02:45:08 2009 (4A5BC704)
827e1000 827ea000   klmouflt klmouflt.sys Mon Nov 02 18:26:08 2009 (4AEF0820)
827ea000 827f5000   monitor  monitor.sys  Tue Jul 14 02:25:58 2009 (4A5BC286)
827f5000 827fc000   parvdm   parvdm.sys   unavailable (00000000)
827fc000 827ff180   cpuz132_x32 cpuz132_x32.sys Fri Mar 27 01:16:27 2009 (49CC0CCB)
82e11000 83221000   nt       ntkrpamp.exe Tue Jul 14 02:15:19 2009 (4A5BC007)
83221000 83258000   hal      halmacpi.dll Tue Jul 14 02:11:03 2009 (4A5BBF07)
83e00000 83e0b000   Msfs     Msfs.SYS     Tue Jul 14 02:11:26 2009 (4A5BBF1E)
83e18000 83e90000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 04:06:41 2009 (4A5BDA21)
83e90000 83ea1000   PSHED    PSHED.dll    Tue Jul 14 04:09:36 2009 (4A5BDAD0)
83ea1000 83ea9000   BOOTVID  BOOTVID.dll  Tue Jul 14 04:04:34 2009 (4A5BD9A2)
83ea9000 83eeb000   CLFS     CLFS.SYS     Tue Jul 14 02:11:10 2009 (4A5BBF0E)
83eeb000 83f96000   CI       CI.dll       Tue Jul 14 04:09:28 2009 (4A5BDAC8)
83f96000 83fca000   fltmgr   fltmgr.sys   Tue Jul 14 02:11:13 2009 (4A5BBF11)
83fca000 83fdb000   fileinfo fileinfo.sys Tue Jul 14 02:21:51 2009 (4A5BC18F)
83fdb000 83ffc000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:25:49 2009 (4A5BC27D)
85800000 8580b000   MDPMGRNT MDPMGRNT.sys Fri Jan 22 19:20:25 2010 (4B59DE59)
8580c000 85d2e000   kl1      kl1.sys      Thu May 06 23:00:06 2010 (4BE31FC6)
85d2e000 85d9f000   Wdf01000 Wdf01000.sys Tue Jul 14 02:11:36 2009 (4A5BBF28)
85d9f000 85dad000   WDFLDR   WDFLDR.SYS   Tue Jul 14 02:11:25 2009 (4A5BBF1D)
85dad000 85db1300   hotcore3 hotcore3.sys Thu Feb 14 02:25:24 2008 (47B38A74)
85db2000 85dc8000   mountmgr mountmgr.sys Tue Jul 14 02:11:27 2009 (4A5BBF1F)
85dc8000 85dd1000   atapi    atapi.sys    Tue Jul 14 02:11:15 2009 (4A5BBF13)
85dd1000 85df4000   ataport  ataport.SYS  Tue Jul 14 02:11:18 2009 (4A5BBF16)
85df4000 85dfd000   amdxata  amdxata.sys  Tue May 19 20:57:35 2009 (4A12F30F)
85e00000 85e1f000   cdrom    cdrom.sys    Tue Jul 14 02:11:24 2009 (4A5BBF1C)
85e1f000 85e9f000   klif     klif.sys     Fri May 07 11:23:55 2010 (4BE3CE1B)
85e9f000 85eab000   vga      vga.sys      Tue Jul 14 02:25:50 2009 (4A5BC27E)
85eab000 85eb8000   watchdog watchdog.sys Tue Jul 14 02:24:10 2009 (4A5BC21A)
85eb8000 85ec0000   rdpencdd rdpencdd.sys Tue Jul 14 03:01:39 2009 (4A5BCAE3)
85ec0000 85ec8000   rdprefmp rdprefmp.sys Tue Jul 14 03:01:41 2009 (4A5BCAE5)
85ec8000 85ed1000   WMILIB   WMILIB.SYS   Tue Jul 14 02:11:22 2009 (4A5BBF1A)
85ed1000 85ef7000   SPTDDRV1 SPTDDRV1.SYS Tue Jul 14 02:45:55 2009 (4A5BC733)
85ef7000 85f3f000   ACPI     ACPI.sys     Tue Jul 14 02:11:11 2009 (4A5BBF0F)
85f3f000 85f47000   msisadrv msisadrv.sys Tue Jul 14 02:11:09 2009 (4A5BBF0D)
85f47000 85f52000   vdrvroot vdrvroot.sys Tue Jul 14 02:46:19 2009 (4A5BC74B)
85f52000 85f7c000   pci      pci.sys      Tue Jul 14 02:11:16 2009 (4A5BBF14)
85f7c000 85f8d000   partmgr  partmgr.sys  Tue Jul 14 02:11:35 2009 (4A5BBF27)
85f8d000 85f9d000   volmgr   volmgr.sys   Tue Jul 14 02:11:25 2009 (4A5BBF1D)
85f9d000 85fe8000   volmgrx  volmgrx.sys  Tue Jul 14 02:11:41 2009 (4A5BBF2D)
85fe8000 85fef000   intelide intelide.sys Tue Jul 14 02:11:19 2009 (4A5BBF17)
85fef000 85ffd000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 02:11:15 2009 (4A5BBF13)
86000000 86025000   CLASSPNP CLASSPNP.SYS Tue Jul 14 02:11:20 2009 (4A5BBF18)
86032000 8603a000   RDPCDD   RDPCDD.sys   Tue Jul 14 03:01:40 2009 (4A5BCAE4)
8603b000 8616a000   Ntfs     Ntfs.sys     Tue Jul 14 02:12:05 2009 (4A5BBF45)
8616a000 86195000   msrpc    msrpc.sys    unavailable (00000000)
86195000 861a8000   ksecdd   ksecdd.sys   Tue Jul 14 02:11:56 2009 (4A5BBF3C)
861a8000 861e8000   MDFSYSNT MDFSYSNT.sys Thu Feb 04 18:52:09 2010 (4B6AFB39)
861f9000 86200000   Beep     Beep.SYS     Tue Jul 14 02:45:00 2009 (4A5BC6FC)
86200000 86207000   Null     Null.SYS     unavailable (00000000)
8620a000 86267000   cng      cng.sys      Tue Jul 14 02:32:55 2009 (4A5BC427)
86267000 86275000   pcw      pcw.sys      Tue Jul 14 02:11:10 2009 (4A5BBF0E)
86275000 8627e000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
8627e000 86335000   ndis     ndis.sys     Tue Jul 14 02:12:24 2009 (4A5BBF58)
86335000 86373000   NETIO    NETIO.SYS    Tue Jul 14 02:12:35 2009 (4A5BBF63)
86373000 86398000   ksecpkg  ksecpkg.sys  Tue Jul 14 02:34:00 2009 (4A5BC468)
86398000 863c5000   rdyboost rdyboost.sys Tue Jul 14 02:22:02 2009 (4A5BC19A)
863c5000 863f7000   fvevol   fvevol.sys   Tue Jul 14 02:13:01 2009 (4A5BBF7D)
86400000 86408000   hwpolicy hwpolicy.sys Tue Jul 14 02:11:01 2009 (4A5BBF05)
86408000 86419000   disk     disk.sys     Tue Jul 14 02:11:28 2009 (4A5BBF20)
86425000 8656e000   tcpip    tcpip.sys    Tue Jul 14 02:13:18 2009 (4A5BBF8E)
8656e000 8659f000   fwpkclnt fwpkclnt.sys Tue Jul 14 02:12:03 2009 (4A5BBF43)
8659f000 865a8000   vmstorfl vmstorfl.sys unavailable (00000000)
865a8000 865e7000   volsnap  volsnap.sys  Tue Jul 14 02:11:34 2009 (4A5BBF26)
865e7000 865ef000   spldr    spldr.sys    Mon May 11 19:13:47 2009 (4A084EBB)
865ef000 865ff000   mup      mup.sys      Tue Jul 14 02:14:14 2009 (4A5BBFC6)
8d821000 8d82f000   Npfs     Npfs.SYS     Tue Jul 14 02:11:31 2009 (4A5BBF23)
8d82f000 8d846000   tdx      tdx.sys      Tue Jul 14 02:12:10 2009 (4A5BBF4A)
8d846000 8d851000   TDI      TDI.SYS      Tue Jul 14 02:12:12 2009 (4A5BBF4C)
8d851000 8d8ab000   afd      afd.sys      Tue Jul 14 02:12:34 2009 (4A5BBF62)
8d8ab000 8d8dd000   netbt    netbt.sys    Tue Jul 14 02:12:18 2009 (4A5BBF52)
8d8dd000 8d8e4000   wfplwf   wfplwf.sys   Tue Jul 14 02:53:51 2009 (4A5BC90F)
8d8e4000 8d903000   pacer    pacer.sys    Tue Jul 14 02:53:58 2009 (4A5BC916)
8d903000 8d90b000   klim6    klim6.sys    Thu Apr 22 18:07:20 2010 (4BD06628)
8d90b000 8d919000   netbios  netbios.sys  Tue Jul 14 02:53:54 2009 (4A5BC912)
8d919000 8d933000   serial   serial.sys   Tue Jul 14 02:45:33 2009 (4A5BC71D)
8d933000 8d946000   wanarp   wanarp.sys   Tue Jul 14 02:55:02 2009 (4A5BC956)
8d946000 8d9636c0   Uim_IM   Uim_IM.sys   Thu Feb 14 02:27:15 2008 (47B38AE3)
8d964000 8d965600   UimFIO   UimFIO.SYS   Thu Feb 14 02:27:11 2008 (47B38ADF)
8d966000 8d96c200   UimBus   UimBus.sys   Thu Feb 14 02:27:11 2008 (47B38ADF)
8d96d000 8d97d000   termdd   termdd.sys   Tue Jul 14 03:01:35 2009 (4A5BCADF)
8d97d000 8d9be000   rdbss    rdbss.sys    Tue Jul 14 02:14:26 2009 (4A5BBFD2)
8d9be000 8d9c8000   nsiproxy nsiproxy.sys Tue Jul 14 02:12:08 2009 (4A5BBF48)
8d9c8000 8d9d2000   mssmbios mssmbios.sys Tue Jul 14 02:19:25 2009 (4A5BC0FD)
8d9d2000 8d9e8000   ISODrive ISODrive.sys Sat May 24 16:09:08 2008 (48381374)
8d9e8000 8d9f4000   discache discache.sys Tue Jul 14 02:24:04 2009 (4A5BC214)
8de24000 8de88000   csc      csc.sys      Tue Jul 14 02:15:08 2009 (4A5BBFFC)
8de88000 8dea0000   dfsc     dfsc.sys     Tue Jul 14 02:14:16 2009 (4A5BBFC8)
8dea0000 8deac300   CBDisk   CBDisk.sys   Wed Jan 13 11:15:41 2010 (4B4D8F3D)
8dead000 8debb000   blbdrive blbdrive.sys Tue Jul 14 02:23:04 2009 (4A5BC1D8)
8debb000 8dedc000   tunnel   tunnel.sys   Tue Jul 14 02:54:03 2009 (4A5BC91B)
8dedc000 8deee000   intelppm intelppm.sys Tue Jul 14 02:11:03 2009 (4A5BBF07)
8deee000 8df39000   USBPORT  USBPORT.SYS  Tue Jul 14 02:51:13 2009 (4A5BC871)
8df39000 8df51000   i8042prt i8042prt.sys Tue Jul 14 02:11:23 2009 (4A5BBF1B)
8df51000 8df63000   AgileVpn AgileVpn.sys Tue Jul 14 02:55:00 2009 (4A5BC954)
8df63000 8df7b000   rasl2tp  rasl2tp.sys  Tue Jul 14 02:54:33 2009 (4A5BC939)
8df7b000 8df86000   ndistapi ndistapi.sys Tue Jul 14 02:54:24 2009 (4A5BC930)
8df86000 8dfa8000   ndiswan  ndiswan.sys  Tue Jul 14 02:54:34 2009 (4A5BC93A)
8dfa8000 8dfc0000   raspppoe raspppoe.sys Tue Jul 14 02:54:53 2009 (4A5BC94D)
8dfc0000 8dfd7000   raspptp  raspptp.sys  Tue Jul 14 02:54:47 2009 (4A5BC947)
8dfd7000 8dfee000   rassstp  rassstp.sys  Tue Jul 14 02:54:57 2009 (4A5BC951)
8dfee000 8dffb000   mouclass mouclass.sys Tue Jul 14 02:11:15 2009 (4A5BBF13)
8dffb000 8dffc380   swenum   swenum.sys   Tue Jul 14 02:45:08 2009 (4A5BC704)
94600000 94618000   parport  parport.sys  Tue Jul 14 02:45:34 2009 (4A5BC71E)
94618000 94625000   kbdclass kbdclass.sys Tue Jul 14 02:11:15 2009 (4A5BBF13)
94626000 950a3dc0   nvlddmkm nvlddmkm.sys Sat Jul 10 00:15:14 2010 (4C379162)
950a4000 950a5040   nvBridge nvBridge.kmd Sat Jul 10 00:10:11 2010 (4C379033)
950a6000 9515d000   dxgkrnl  dxgkrnl.sys  Tue Jul 14 02:26:15 2009 (4A5BC297)
9515d000 95196000   dxgmms1  dxgmms1.sys  Tue Jul 14 02:25:25 2009 (4A5BC265)
95196000 951b5000   HDAudBus HDAudBus.sys Tue Jul 14 02:50:55 2009 (4A5BC85F)
951b5000 951c5000   L1C62x86 L1C62x86.sys Mon Jul 27 10:06:45 2009 (4A6D5205)
951c5000 951d0000   usbuhci  usbuhci.sys  Tue Jul 14 02:51:10 2009 (4A5BC86E)
951d0000 951df000   usbehci  usbehci.sys  Tue Jul 14 02:51:14 2009 (4A5BC872)
951df000 951e9000   serenum  serenum.sys  Tue Jul 14 02:45:27 2009 (4A5BC717)
951e9000 951f6000   CompositeBus CompositeBus.sys Tue Jul 14 02:45:26 2009 (4A5BC716)
951f6000 95200000   rdpbus   rdpbus.sys   Tue Jul 14 03:02:40 2009 (4A5BCB20)
95200000 95234000   ks       ks.sys       Tue Jul 14 02:45:13 2009 (4A5BC709)
95234000 95237ba0   vsb      vsb.sys      Tue Sep 07 16:31:26 2004 (413DB82E)
95238000 95246000   umbus    umbus.sys    Tue Jul 14 02:51:38 2009 (4A5BC88A)
95246000 9528a000   usbhub   usbhub.sys   Tue Jul 14 02:52:06 2009 (4A5BC8A6)
9528a000 9529b000   NDProxy  NDProxy.SYS  Tue Jul 14 02:54:27 2009 (4A5BC933)
9529b000 952ab000   lltdio   lltdio.sys   Tue Jul 14 02:53:18 2009 (4A5BC8EE)
952ab000 952be000   rspndr   rspndr.sys   Tue Jul 14 02:53:20 2009 (4A5BC8F0)
952be000 95343000   HTTP     HTTP.sys     Tue Jul 14 02:12:53 2009 (4A5BBF75)
95343000 9535c000   bowser   bowser.sys   Tue Jul 14 02:14:21 2009 (4A5BBFCD)
9535c000 9536e000   mpsdrv   mpsdrv.sys   Tue Jul 14 02:52:52 2009 (4A5BC8D4)
9536e000 95391000   mrxsmb   mrxsmb.sys   Tue Jul 14 02:14:24 2009 (4A5BBFD0)
95391000 953cc000   mrxsmb10 mrxsmb10.sys Tue Jul 14 02:14:34 2009 (4A5BBFDA)
953cc000 953e7000   mrxsmb20 mrxsmb20.sys Tue Jul 14 02:14:29 2009 (4A5BBFD5)
953e7000 953e9880   parldr2k parldr2k.sys Thu May 06 18:36:09 2004 (409A5B69)
a3800000 a3803e80   GVTDrv   GVTDrv.sys   Wed Nov 23 11:00:18 2005 (43842FA2)
a381f000 a38b6000   peauth   peauth.sys   Tue Jul 14 03:35:44 2009 (4A5BD2E0)
a38b6000 a38c0000   secdrv   secdrv.SYS   Wed Sep 13 16:18:32 2006 (45080528)
a38c0000 a38e1000   srvnet   srvnet.sys   Tue Jul 14 02:14:45 2009 (4A5BBFE5)
a38e1000 a38ee000   tcpipreg tcpipreg.sys Tue Jul 14 02:54:14 2009 (4A5BC926)
a38ee000 a393d000   srv2     srv2.sys     Tue Jul 14 02:14:52 2009 (4A5BBFEC)
a3954000 a396a000   cdfs     cdfs.sys     Tue Jul 14 02:11:14 2009 (4A5BBF12)
a39a7000 a39f8000   srv      srv.sys      Tue Jul 14 02:15:10 2009 (4A5BBFFE)
a39f8000 a39fa6c0   gdrv     gdrv.sys     Fri Mar 13 05:17:32 2009 (49B9D04C)
a39fb000 a39fd380   RivaTuner32 RivaTuner32.sys Tue Jul 17 22:13:33 2007 (469D14DD)
bde32000 bde68000   fengyue0 fengyue0.sys Mon Aug 09 08:46:38 2010 (4C5F963E)
bdea9000 bdeb5000   kprocesshacker kprocesshacker.sys Wed May 26 14:09:11 2010 (4BFD0157)
bdeed000 bdeffa80   s125bus  s125bus.sys  Tue Apr 24 18:16:28 2007 (462E1F4C)
bdf00000 bdf01580   s125wh   s125wh.sys   Tue Apr 24 18:16:23 2007 (462E1F47)
bdf02000 bdf1ad80   s125mdm  s125mdm.sys  Tue Apr 24 18:18:58 2007 (462E1FE2)
bdf1b000 bdf1c580   s125cm   s125cm.sys   Tue Apr 24 18:23:15 2007 (462E20E3)
bdf1d000 bdf2a000   modem    modem.sys    Tue Jul 14 02:55:24 2009 (4A5BC96C)
bdf2a000 bdf2c000   s125mdfl s125mdfl.sys Tue Apr 24 18:18:54 2007 (462E1FDE)
bdf2c000 bdf42680   s125obex s125obex.sys Tue Apr 24 18:23:19 2007 (462E20E7)
bdf43000 bdf59d80   s125mgmt s125mgmt.sys Tue Apr 24 18:21:22 2007 (462E2072)
bdf5a000 bdf63000   asyncmac asyncmac.sys Tue Jul 14 02:54:46 2009 (4A5BC946)
bdf63000 bdf7a000   USBSTOR  USBSTOR.SYS  Tue Jul 14 02:51:19 2009 (4A5BC877)
bdf7a000 bdf9a480   WUDFRd   WUDFRd.sys   Tue Jul 14 02:50:44 2009 (4A5BC854)
bdf9b000 bdfac000   XDva361  XDva361.sys  Wed Aug 18 11:28:48 2010 (4C6B99C0)

Unloaded modules:
bdecc000 bdeed000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
bdeb5000 bdecc000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
bde7f000 bdea0000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
bde68000 bde7f000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
bdea0000 bdea9000   Engine.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a396a000 a398b000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a393d000 a3954000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a393d000 a39a7000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a3804000 a380a000   AODDriver.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9d439000 9d47c000   atksgt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
86025000 86032000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
86419000 86424000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
863f7000 86400000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
861e8000 861f9000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8dc0c000 8e12e000   kl2.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
85e00000 85ec8000   sptd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000