Thanks much! I looked at all four dumps.
I recommend that you start your troubleshooting by uninstalling Norton/Symantec using this removal tool: Tool. Norton is a known cause of BSOD's on some Win 7 systems. Download and install Microsoft Security Essentials and make sure Windows Firewall is turned on. Once you get your system stable, you try Norton again; but I do not recommend doing so.
Error code 1E (2X), KMODE_EXCEPTION_NOT_HANDLED. Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS.
Error code 3B, Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS. Usual causes: System service, Device driver, graphics driver, ?memory.
Error code 116, VIDEO_TDR_FAILURE. Usual causes: Video driver, overheating, bad video card, ?BIOS, ?Power to card
You have a hardware/hardware related problem. Two of the dumps blame a video card driver and three indicate memory corruption.
I find the following outdated drivers loading on your system. The driver in bold font is quite obsolete. Older drivers can and do cause memory corruption and BSOD's. Up date these drivers.
Uninstall Norton, update the above drivers - especially the one in bold font - and reboot. Let's see how your system runs. If you get another BSOD, upload and we will go from there. Keep us updated.
Code:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c4d000 PsLoadedModuleList = 0xfffff800`02e8ae50
Debug session time: Fri Nov 5 20:23:46.612 2010 (GMT-4)
System Uptime: 0 days 0:04:42.252
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000096, fffff80002cc39a6, 0, 0}
Probably caused by : ntkrnlmp.exe ( nt!SwapContext_PatchXSave+a3 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000096, The exception code that was not handled
Arg2: fffff80002cc39a6, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000096 - {EXCEPTION} Privileged instruction.
FAULTING_IP:
nt!SwapContext_PatchXSave+a3
fffff800`02cc39a6 0f22da mov cr3,rdx
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x1E
CURRENT_IRQL: 2
EXCEPTION_RECORD: fffff88008e08558 -- (.exr 0xfffff88008e08558)
ExceptionAddress: fffff80002cc39a6 (nt!SwapContext_PatchXSave+0x00000000000000a3)
ExceptionCode: c0000096
ExceptionFlags: 00000000
NumberParameters: 0
TRAP_FRAME: fffff88008e08600 -- (.trap 0xfffff88008e08600)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000001
rdx=fffffa8002687bd8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cc39a6 rsp=fffff88008e08790 rbp=0000000000000002
r8=fffffa80065050f8 r9=0000000000000000 r10=fffffffffffffffe
r11=fffff80002e37e80 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!SwapContext_PatchXSave+0xa3:
fffff800`02cc39a6 0f22da mov cr3,rdx
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cf7a39 to fffff80002cbd740
STACK_TEXT:
fffff880`08e07d88 fffff800`02cf7a39 : 00000000`0000001e ffffffff`c0000096 fffff800`02cc39a6 00000000`00000000 : nt!KeBugCheckEx
fffff880`08e07d90 fffff800`02cbcd82 : fffff880`08e08558 fffff800`02e37e80 fffff880`08e08600 fffffa80`062bab60 : nt!KiDispatchException+0x1b9
fffff880`08e08420 fffff800`02cbb68a : fffffa80`04d13300 00000000`00000000 fffffa80`05c473d0 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`08e08600 fffff800`02cc39a6 : fffffa80`00000000 fffff880`00000000 00000000`00000001 fffff880`08e08e00 : nt!KiGeneralProtectionFault+0x10a
fffff880`08e08790 fffff800`02cc35da : fffff880`009ef180 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SwapContext_PatchXSave+0xa3
fffff880`08e087d0 fffff800`02cc4992 : 00000000`00060001 fffffa80`062bab60 fffff880`00000000 00000000`00000000 : nt!KiSwapContext+0x7a
fffff880`08e08910 fffff800`02cc6cff : fffff680`0004b808 00000000`00000111 fffffa80`00000000 00000000`00009f0a : nt!KiCommitThreadWait+0x1d2
fffff880`08e089a0 fffff800`02cede8e : f0a00000`a29b2800 fffff880`0000000c fffffa80`062bac00 fffff800`00000000 : nt!KeWaitForSingleObject+0x19f
fffff880`08e08a40 fffff800`02cd79d3 : 00000000`00000001 00000000`00000000 fffff6fb`7da00000 00000000`00000000 : nt!ExfAcquirePushLockExclusive+0x168
fffff880`08e08ac0 fffff800`02cbb82e : 00000000`00000001 00000000`02620000 00000000`00000001 fffffa80`05d11cd0 : nt!MmAccessFault+0x5d3
fffff880`08e08c20 00000000`779619ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`04f0f1f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x779619ac
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!SwapContext_PatchXSave+a3
fffff800`02cc39a6 0f22da mov cr3,rdx
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!SwapContext_PatchXSave+a3
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x1E_nt!SwapContext_PatchXSave+a3
BUCKET_ID: X64_0x1E_nt!SwapContext_PatchXSave+a3
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff88005b8ac8e, fffff88007fc37b0, 0}
Probably caused by : atikmdag.sys ( atikmdag+383c8e )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88005b8ac8e, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88007fc37b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
atikmdag+383c8e
fffff880`05b8ac8e 8178083000bebe cmp dword ptr [rax+8],0BEBE0030h
CONTEXT: fffff88007fc37b0 -- (.cxr 0xfffff88007fc37b0)
rax=00fffff8a00c321d rbx=fffffa80026cd9a0 rcx=fffff8a00c321df1
rdx=fffffa8002687500 rsi=fffff88007fc4430 rdi=fffff8a005cf5490
rip=fffff88005b8ac8e rsp=fffff88007fc4188 rbp=0000000000000000
r8=fffffa80026cd9a0 r9=000000000001ffb0 r10=fffff88005807000
r11=fffff8a005cf5400 r12=fffffa8002687500 r13=fffff8a005cf5490
r14=0000000000000186 r15=fffffa800266ba70
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
atikmdag+0x383c8e:
fffff880`05b8ac8e 8178083000bebe cmp dword ptr [rax+8],0BEBE0030h ds:002b:00fffff8`a00c3225=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: CivilizationV.
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff88005b8ac8e
STACK_TEXT:
fffff880`07fc4188 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : atikmdag+0x383c8e
FOLLOWUP_IP:
atikmdag+383c8e
fffff880`05b8ac8e 8178083000bebe cmp dword ptr [rax+8],0BEBE0030h
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: atikmdag+383c8e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: atikmdag
IMAGE_NAME: atikmdag.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ca29946
STACK_COMMAND: .cxr 0xfffff88007fc37b0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_atikmdag+383c8e
BUCKET_ID: X64_0x3B_atikmdag+383c8e
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 116, {fffffa8002ef8010, fffff88004989dcc, 0, 2}
Unable to load image \SystemRoot\system32\DRIVERS\atikmpag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmpag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmpag.sys
Probably caused by : atikmpag.sys ( atikmpag+6dcc )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
VIDEO_TDR_FAILURE (116)
Attempt to reset the display driver and recover from timeout failed.
Arguments:
Arg1: fffffa8002ef8010, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
Arg2: fffff88004989dcc, The pointer into responsible device driver module (e.g. owner tag).
Arg3: 0000000000000000, Optional error code (NTSTATUS) of the last failed operation.
Arg4: 0000000000000002, Optional internal context dependent data.
Debugging Details:
------------------
FAULTING_IP:
atikmpag+6dcc
fffff880`04989dcc 4883ec28 sub rsp,28h
DEFAULT_BUCKET_ID: GRAPHICS_DRIVER_TDR_FAULT
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x116
PROCESS_NAME: System
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`032489c8 fffff880`04cdfef8 : 00000000`00000116 fffffa80`02ef8010 fffff880`04989dcc 00000000`00000000 : nt!KeBugCheckEx
fffff880`032489d0 fffff880`04cdfc02 : fffff880`04989dcc fffffa80`02ef8010 fffffa80`0282dbf0 fffffa80`05d61410 : dxgkrnl!TdrBugcheckOnTimeout+0xec
fffff880`03248a10 fffff880`04d86f07 : fffffa80`02ef8010 00000000`00000000 fffffa80`0282dbf0 fffffa80`05d61410 : dxgkrnl!TdrIsRecoveryRequired+0x1a2
fffff880`03248a40 fffff880`04db0b75 : 00000000`ffffffff 00000000`001875c3 00000000`00000000 00000000`00000002 : dxgmms1!VidSchiReportHwHang+0x40b
fffff880`03248b20 fffff880`04daf2bb : 00000000`00000102 00000000`00000000 00000000`001875c3 00000000`00000000 : dxgmms1!VidSchiCheckHwProgress+0x71
fffff880`03248b50 fffff880`04d822c6 : ffffffff`ff676980 fffffa80`05d61410 00000000`00000000 00000000`00000000 : dxgmms1!VidSchiWaitForSchedulerEvents+0x1fb
fffff880`03248bf0 fffff880`04daee7a : 00000000`00000000 fffffa80`0282dbf0 00000000`00000080 fffffa80`05d61410 : dxgmms1!VidSchiScheduleCommandToRun+0x1da
fffff880`03248d00 fffff800`02d2ac06 : 00000000`fffffc32 fffffa80`05a538c0 fffffa80`02486040 fffffa80`05a538c0 : dxgmms1!VidSchiWorkerThread+0xba
fffff880`03248d40 fffff800`02a64c26 : fffff880`009ef180 fffffa80`05a538c0 fffff880`009f9fc0 fffff880`0164d534 : nt!PspSystemThreadStartup+0x5a
fffff880`03248d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
atikmpag+6dcc
fffff880`04989dcc 4883ec28 sub rsp,28h
SYMBOL_NAME: atikmpag+6dcc
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: atikmpag
IMAGE_NAME: atikmpag.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c58bf41
FAILURE_BUCKET_ID: X64_0x116_IMAGE_atikmpag.sys
BUCKET_ID: X64_0x116_IMAGE_atikmpag.sys
Followup: MachineOwner
---------
0: kd> lmtsmn
start end module name
fffff880`04800000 fffff880`0483e000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`01000000 fffff880`01057000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`0421c000 fffff880`042a6000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04de1000 fffff880`04df7000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`013e6000 fffff880`013f1000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`03e00000 fffff880`03e45000 aqdgpaht aqdgpaht.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`08af6000 fffff880`08b01000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`04e5f000 fffff880`055cd000 atikmdag atikmdag.sys Tue Aug 03 21:39:08 2010 (4C58C4BC)
fffff880`04983000 fffff880`049ca000 atikmpag atikmpag.sys Tue Aug 03 21:15:45 2010 (4C58BF41)
fffff880`041e9000 fffff880`041f0000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0485a000 fffff880`04947000 BHDrvx64 BHDrvx64.sys Fri Aug 27 18:11:09 2010 (4C7837FD)
fffff880`03fe7000 fffff880`03ff8000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04534000 fffff880`04552000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00630000 fffff960`00657000 cdd cdd.dll unavailable (00000000)
fffff880`01c00000 fffff880`01c2a000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cdd000 fffff880`00d9d000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01c81000 fffff880`01cb1000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c7f000 fffff880`00cdd000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0145e000 fffff880`014d1000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04c73000 fffff880`04c83000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05c45000 fffff880`05c53000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03fc9000 fffff880`03fe7000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03fba000 fffff880`03fc9000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0161b000 fffff880`01631000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05c00000 fffff880`05c22000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05c53000 fffff880`05c66000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01cb1000 fffff880`01dcf000 dump_iaStorV dump_iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`05c66000 fffff880`05c72000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04c83000 fffff880`04d77000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04d77000 fffff880`04dbd000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04c00000 fffff880`04c48000 e1e6032e e1e6032e.sys Tue Mar 24 14:17:23 2009 (49C923B3)
fffff880`03f1f000 fffff880`03f95000 eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`08b08000 fffff880`08b28000 ENG64 ENG64.SYS Wed Sep 15 06:25:35 2010 (4C909F1F)
fffff880`03f95000 fffff880`03fba000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`04029000 fffff880`041e7000 EX64 EX64.SYS Wed Sep 15 06:33:41 2010 (4C90A105)
fffff880`0124c000 fffff880`01260000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01200000 fffff880`0124c000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01611000 fffff880`0161b000 Fs_Rec Fs_Rec.sys unavailable (00000000)
fffff880`00d9d000 fffff880`00dd7000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`019ad000 fffff880`019f7000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04c66000 fffff880`04c73000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02ff2000 fffff800`0303b000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04dbd000 fffff880`04de1000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05d64000 fffff880`05dc0000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`05c80000 fffff880`05c99000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`04e56000 fffff880`04e5e080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05c72000 fffff880`05c80000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0446c000 fffff880`04534000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01812000 fffff880`0181b000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`012ba000 fffff880`013d8000 iaStorV iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`03ea4000 fffff880`03f1f000 IDSvia64 IDSvia64.sys Fri Sep 10 17:54:50 2010 (4C8AA92A)
fffff880`0496d000 fffff880`04983000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03160000 fffff880`0318c000 Ironx64 Ironx64.SYS Wed Jun 23 20:28:49 2010 (4C22A6C1)
fffff880`013d8000 fffff880`013e6000 iteatapi iteatapi.sys Wed May 14 02:54:25 2008 (482A8CA1)
fffff880`03e80000 fffff880`03e8f000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`043f2000 fffff880`04400000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb4000 fffff800`00bbe000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`05ca0000 fffff880`05ce3000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`017e2000 fffff880`017fc000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01982000 fffff880`019ad000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05c22000 fffff880`05c27200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`01260000 fffff880`01275000 Lbd Lbd.sys Tue May 25 03:45:36 2010 (4BFB8020)
fffff880`04200000 fffff880`04213000 LHidFilt LHidFilt.Sys Wed Jun 17 12:49:39 2009 (4A391EA3)
fffff880`01dea000 fffff880`01dff000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0307f000 fffff880`03093000 LMouFilt LMouFilt.Sys Wed Jun 17 12:49:43 2009 (4A391EA7)
fffff880`00e71000 fffff880`00e94000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c27000 fffff880`00c6b000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`03093000 fffff880`030a1000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03e8f000 fffff880`03e9e000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03072000 fffff880`0307f000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fd7000 fffff880`00ff1000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04552000 fffff880`0456a000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0456a000 fffff880`04597000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04597000 fffff880`045e5000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`04400000 fffff880`04423000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`0302b000 fffff880`03036000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01057000 fffff880`01061000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01400000 fffff880`0145e000 msrpc msrpc.sys unavailable (00000000)
fffff880`043ca000 fffff880`043d5000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01800000 fffff880`01812000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01830000 fffff880`01922000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`055f1000 fffff880`055fd000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`049ca000 fffff880`049f9000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05d4f000 fffff880`05d64000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`0431a000 fffff880`04329000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`042a6000 fffff880`042eb000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01922000 fffff880`01982000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`03036000 fffff880`03047000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`043be000 fffff880`043ca000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a16000 fffff800`02ff2000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0163f000 fffff880`017e2000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`04020000 fffff880`04029000 Null Null.SYS unavailable (00000000)
fffff880`042f4000 fffff880`0431a000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f51000 fffff880`00f66000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`0106e000 fffff880`010a1000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01600000 fffff880`01611000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06a0b000 fffff880`06ab1000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05dc0000 fffff880`05dfd000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c6b000 fffff880`00c7f000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`055cd000 fffff880`055f1000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0483e000 fffff880`04859000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03e45000 fffff880`03e66000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03e66000 fffff880`03e80000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`01c2a000 fffff880`01c7b000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03010000 fffff880`03019000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03019000 fffff880`03022000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03022000 fffff880`0302b000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01275000 fffff880`012af000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`00c00000 fffff880`00c18000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`011d0000 fffff880`011ff000 SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`06ab1000 fffff880`06abc000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`019f7000 fffff880`019ff000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`010a1000 fffff880`011c7000 sptd sptd.sys Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`030a6000 fffff880`03160000 SRTSP64 SRTSP64.SYS Tue Jul 27 18:18:25 2010 (4C4F5B31)
fffff880`0318c000 fffff880`031a2000 SRTSPX64 SRTSPX64.SYS Tue Jul 27 18:18:31 2010 (4C4F5B37)
fffff880`06b62000 fffff880`06bf8000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06afb000 fffff880`06b62000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06abc000 fffff880`06ae9000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04df7000 fffff880`04df8480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`00e00000 fffff880`00e71000 SYMDS64 SYMDS64.SYS Mon May 17 21:12:48 2010 (4BF1E990)
fffff880`014e2000 fffff880`015b0000 SYMEFA64 SYMEFA64.SYS Thu Jul 22 22:19:55 2010 (4C48FC4B)
fffff880`031a2000 fffff880`031d8000 SYMEVENT64x86 SYMEVENT64x86.SYS Fri Jul 30 19:05:59 2010 (4C535AD7)
fffff880`04358000 fffff880`043be000 SYMNETS SYMNETS.SYS Tue Jul 06 23:22:28 2010 (4C33F2F4)
fffff880`01a00000 fffff880`01bfd000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`06ae9000 fffff880`06afb000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`03065000 fffff880`03072000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`03047000 fffff880`03065000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`04344000 fffff880`04358000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004b0000 fffff960`004ba000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`04947000 fffff880`0496d000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`05ce3000 fffff880`05cf5000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`01dcf000 fffff880`01de9c00 usbaudio usbaudio.sys Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`043d5000 fffff880`043f2000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05c43000 fffff880`05c44f00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04c55000 fffff880`04c66000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05cf5000 fffff880`05d4f000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04e00000 fffff880`04e56000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05c28000 fffff880`05c43000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`04c48000 fffff880`04c55000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`01061000 fffff880`0106e000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`041f0000 fffff880`041fe000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`031d8000 fffff880`031fd000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f66000 fffff880`00f7b000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f7b000 fffff880`00fd7000 volmgrx volmgrx.sys unavailable (00000000)
fffff880`015b0000 fffff880`015fc000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`04329000 fffff880`04344000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`03000000 fffff880`03010000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e9e000 fffff880`00f42000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f42000 fffff880`00f51000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`042eb000 fffff880`042f4000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00020000 fffff960`0032f000 win32k win32k.sys unavailable (00000000)
fffff880`011c7000 fffff880`011d0000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00dd7000 fffff880`00df8000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`0442c000 fffff880`0445d000 WUDFRd WUDFRd.sys Mon Jul 13 20:06:06 2009 (4A5BCBEE)
Unloaded modules:
fffff880`0700b000 fffff880`07129000 hiber_iaStor
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`07129000 fffff880`0713c000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08b01000 fffff880`08b08000 pbfilter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`04423000 fffff880`0442c000 cpuz133_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`04000000 fffff880`04020000 ENG64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0402b000 fffff880`041e9000 EX64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08a85000 fffff880`08af6000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01cb1000 fffff880`01cbf000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01cbf000 fffff880`01ddd000 dump_iaStorV
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01ddd000 fffff880`01df0000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000