Code:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c10000 PsLoadedModuleList = 0xfffff800`02e4de50
Debug session time: Sun Dec 12 16:37:36.572 2010 (GMT-5)
System Uptime: 0 days 0:02:52.289
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {c08a2, 0, 0, 0}
Probably caused by : Ntfs.sys ( Ntfs!NtfsPagingFileIo+155 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 00000000000c08a2
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x24
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff8800120fe95 to fffff80002c80740
STACK_TEXT:
fffff880`0983e6b8 fffff880`0120fe95 : 00000000`00000024 00000000`000c08a2 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`0983e6c0 fffff880`0120fae8 : 00000001`00000000 00000000`00000000 00000000`00000000 00000fa8`0087c000 : Ntfs!NtfsPagingFileIo+0x155
fffff880`0983e7c0 fffff880`0117823f : fffffa80`05e93368 fffffa80`05e93010 fffffa80`067d7c30 00000000`00000000 : Ntfs! ?? ::FNODOBFM::`string'+0x9e89
fffff880`0983e870 fffff880`011766df : fffffa80`0545ade0 fffffa80`05e93010 fffffa80`0545ad00 fffffa80`05e93010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`0983e900 fffff800`02c721f2 : fffffa80`05e93030 fffffa80`06b311c0 00000000`00000043 fffff880`02f63180 : fltmgr!FltpDispatch+0xcf
fffff880`0983e960 fffff800`02c724f5 : 00000000`00000001 00000000`00000001 fffff880`0983ea60 00000000`00000000 : nt!IoPageRead+0x252
fffff880`0983e9f0 fffff800`02c9b8bb : 00000000`00000000 00000000`00000000 ffffffff`ffffffff 00000000`00000000 : nt!MiIssueHardFault+0x255
fffff880`0983eac0 fffff800`02c7e82e : 00000000`00000000 00000000`00007003 00000000`00000001 00000000`0000064c : nt!MmAccessFault+0x14bb
fffff880`0983ec20 00000000`773c51df : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`0299e720 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773c51df
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsPagingFileIo+155
fffff880`0120fe95 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: Ntfs!NtfsPagingFileIo+155
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc14f
FAILURE_BUCKET_ID: X64_0x24_Ntfs!NtfsPagingFileIo+155
BUCKET_ID: X64_0x24_Ntfs!NtfsPagingFileIo+155
Followup: MachineOwner
---------
Debug session time: Mon Dec 13 11:02:35.380 2010 (GMT-5)
System Uptime: 0 days 0:09:04.502
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {31, fffffa80086b63c0, fffff8800e0cd000, fffff8a014267123}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+6368 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000000031, The subtype of the bugcheck.
Arg2: fffffa80086b63c0
Arg3: fffff8800e0cd000
Arg4: fffff8a014267123
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_31
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: iexplore.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002fa574d to fffff80002c79740
STACK_TEXT:
fffff880`0af5f6f8 fffff800`02fa574d : 00000000`0000001a 00000000`00000031 fffffa80`086b63c0 fffff880`0e0cd000 : nt!KeBugCheckEx
fffff880`0af5f700 fffff800`02f610b1 : fffff880`0e0cd000 00000000`00180000 00000000`00005000 fffffa80`00a8b3d0 : nt! ?? ::NNGAKEGL::`string'+0x6368
fffff880`0af5f750 fffff800`02f4e344 : 00000000`00000000 00000000`00000000 fffff6fc`40070640 fffff800`00000000 : nt!MiPerformFixups+0x65
fffff880`0af5f7a0 fffff800`02c5b68d : 00000000`000383bf 00000000`00000005 fffff8a0`14255080 00000000`00000002 : nt!MiRelocateImagePfn+0x114
fffff880`0af5f800 fffff800`02f6100d : fffffa80`089dc700 fffff6fc`40070640 fffff8a0`00000002 00000000`00000000 : nt!MiValidateImagePages+0x2bd
fffff880`0af5f8a0 fffff800`02f60720 : ffffffff`ffffffff 00000000`00000001 fffff8a0`14266000 00000000`000000ca : nt!MiSwitchBaseAddress+0x61
fffff880`0af5f8d0 fffff800`02f747ce : 00000000`00000004 00000000`01000000 00000000`00000000 00000000`00000000 : nt!MiRelocateImageAgain+0x100
fffff880`0af5f920 fffff800`02f6a013 : fffff880`0af5fb80 00000000`00000000 00000000`00000000 fffff880`0af5fb78 : nt!MmCreateSection+0x302
fffff880`0af5fb30 fffff800`02c78993 : fffffa80`0875ab60 00000000`0341e648 fffff880`0af5fbc8 00000000`00000000 : nt!NtCreateSection+0x162
fffff880`0af5fbb0 00000000`770501fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0341e628 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770501fa
STACK_COMMAND: kb
FOLLOWUP_IP:
nt! ?? ::NNGAKEGL::`string'+6368
fffff800`02fa574d cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt! ?? ::NNGAKEGL::`string'+6368
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x1a_31_nt!_??_::NNGAKEGL::_string_+6368
BUCKET_ID: X64_0x1a_31_nt!_??_::NNGAKEGL::_string_+6368
Followup: MachineOwner
---------
Debug session time: Tue Dec 14 06:34:47.868 2010 (GMT-5)
System Uptime: 0 days 0:08:26.006
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck BE, {fffff8a008441e40, 800000008f0be121, fffff88009c76ad0, b}
Probably caused by : discache.sys ( discache!DisCreateObjectRecord+1de )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory. The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8a008441e40, Virtual address for the attempted write.
Arg2: 800000008f0be121, PTE contents.
Arg3: fffff88009c76ad0, (reserved)
Arg4: 000000000000000b, (reserved)
Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xBE
PROCESS_NAME: WerFault.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff88009c76ad0 -- (.trap 0xfffff88009c76ad0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000000686c rbx=0000000000000000 rcx=00000000006fe398
rdx=fffff8a008441e3c rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002efe03a rsp=fffff88009c76c60 rbp=0000000000000000
r8=fffff88009c76d10 r9=fffff88009c76c90 r10=000000000000000c
r11=fffff88009c76b20 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
nt!CmpAddToLeaf+0x16e:
fffff800`02efe03a 42894ceb04 mov dword ptr [rbx+r13*8+4],ecx ds:7a48:00000000`00000004=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002d07ae2 to fffff80002c87740
STACK_TEXT:
fffff880`09c76968 fffff800`02d07ae2 : 00000000`000000be fffff8a0`08441e40 80000000`8f0be121 fffff880`09c76ad0 : nt!KeBugCheckEx
fffff880`09c76970 fffff800`02c8582e : 00000000`00000001 fffff8a0`08441e3c fffff8a0`08440000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x4237e
fffff880`09c76ad0 fffff800`02efe03a : fffff8a0`08441e3c 00000000`00000000 fffff8a0`03457420 fffff8a0`03457420 : nt!KiPageFault+0x16e
fffff880`09c76c60 fffff800`02efe2fe : fffff8a0`08441e3c fffff8a0`03b97344 fffff8a0`006fe398 fffff880`09c76d10 : nt!CmpAddToLeaf+0x16e
fffff880`09c76cd0 fffff800`02efc730 : fffff8a0`03457401 fffffa80`00000340 fffff8a0`006fe398 fffffa80`00000000 : nt!CmpAddSubKey+0x17a
fffff880`09c76d70 fffff800`02f62125 : fffff8a0`03b97344 fffff880`00000340 fffff880`09c76f70 fffff880`09c76f70 : nt!CmpDoCreate+0x29c
fffff880`09c76eb0 fffff800`02f80e84 : fffff800`02f60cc0 00000000`00000001 fffffa80`03d54010 00000000`00000000 : nt!CmpParseKey+0x1465
fffff880`09c77180 fffff800`02f85e4d : fffffa80`03d54010 fffff880`09c772e0 00000000`00000240 fffffa80`039377b0 : nt!ObpLookupObjectName+0x585
fffff880`09c77280 fffff800`02f25654 : fffff8a0`03be5610 00000000`00000000 fffff8a0`03be5600 00000000`00000000 : nt!ObOpenObjectByName+0x1cd
fffff880`09c77330 fffff800`02f2572e : fffff880`09c77740 fffff800`000f003f fffff880`09c77798 fffff8a0`000f003f : nt!CmCreateKey+0x2e1
fffff880`09c774a0 fffff800`02c86993 : fffff880`09c776d0 fffffa80`03ff18f0 00120089`00000000 00000000`00000000 : nt!NtCreateKey+0x2e
fffff880`09c774f0 fffff800`02c82f30 : fffff880`03a6b81e 00000000`00000000 00000000`00000000 fffff880`09c77870 : nt!KiSystemServiceCopyEnd+0x13
fffff880`09c776f8 fffff880`03a6b81e : 00000000`00000000 00000000`00000000 fffff880`09c77870 fffff880`03a6e9c5 : nt!KiServiceLinkage
fffff880`09c77700 fffff880`03a6db40 : 00000000`c0000225 ffffffff`800018c8 00070000`0000f1b5 fffff8a0`09776490 : discache!DisCreateObjectRecord+0x1de
fffff880`09c77800 fffff880`03a69b9d : 00000000`c0000225 00000000`00000002 fffff800`02f7d0b0 00000000`00000000 : discache!DisCreateFileObjectRecord+0x170
fffff880`09c77950 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : discache!ScQueryAttributeInformation+0x215
STACK_COMMAND: kb
FOLLOWUP_IP:
discache!DisCreateObjectRecord+1de
fffff880`03a6b81e 3bc5 cmp eax,ebp
SYMBOL_STACK_INDEX: d
SYMBOL_NAME: discache!DisCreateObjectRecord+1de
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: discache
IMAGE_NAME: discache.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc52e
FAILURE_BUCKET_ID: X64_0xBE_discache!DisCreateObjectRecord+1de
BUCKET_ID: X64_0xBE_discache!DisCreateObjectRecord+1de
Followup: MachineOwner
---------
Debug session time: Wed Dec 15 18:53:46.790 2010 (GMT-5)
System Uptime: 0 days 0:04:38.523
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, fffffa8006758b30, fffffa8006758e10, fffff80002fd15d0}
Probably caused by : csrss.exe
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8006758b30, Terminating object
Arg3: fffffa8006758e10, Process image file name
Arg4: fffff80002fd15d0, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa8006758b30
IMAGE_NAME: csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: csrss.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR: 0xF4_C0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`07ba4b08 fffff800`03052652 : 00000000`000000f4 00000000`00000003 fffffa80`06758b30 fffffa80`06758e10 : nt!KeBugCheckEx
fffff880`07ba4b10 fffff800`02ffb3e3 : ffffffff`ffffffff fffffa80`07b51060 fffffa80`06758b30 fffffa80`06758b30 : nt!PspCatchCriticalBreak+0x92
fffff880`07ba4b50 fffff800`02f8380c : ffffffff`ffffffff 00000000`00000001 fffffa80`06758b30 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17946
fffff880`07ba4ba0 fffff800`02cc5993 : fffffa80`06758b30 fffff880`c0000005 00000000`022dfc80 fffffa80`07b51060 : nt!NtTerminateProcess+0x20c
fffff880`07ba4c20 00000000`77c6001a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`022de768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c6001a
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_C0000005_IMAGE_csrss.exe
BUCKET_ID: X64_0xF4_C0000005_IMAGE_csrss.exe
Followup: MachineOwner
---------
3: kd> lmtsmn
start end module name
fffff880`04565000 fffff880`045a3000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00e00000 fffff880`00e57000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`07d5a000 fffff880`07d72000 adfs adfs.SYS Mon Nov 03 11:48:14 2008 (490F2B4E)
fffff880`03e9e000 fffff880`03f28000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045e5000 fffff880`045fb000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011ee000 fffff880`011f9000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`08471000 fffff880`0847c000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff960`00830000 fffff960`00891000 ATMFD ATMFD.DLL Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`043dd000 fffff880`043e0e80 BdaSup BdaSup.SYS Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`02ded000 fffff880`02df4000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03e2d000 fffff880`03e3e000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0775e000 fffff880`0777c000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00610000 fffff960`00637000 cdd cdd.dll unavailable (00000000)
fffff880`02d8d000 fffff880`02db7000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cd9000 fffff880`00d99000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`04048000 fffff880`0405a000 circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`019ca000 fffff880`019fa000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c7b000 fffff880`00cd9000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01409000 fffff880`0147c000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`045b0000 fffff880`045c0000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05d77000 fffff880`05d85000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e0f000 fffff880`03e2d000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03e00000 fffff880`03e0f000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`019b4000 fffff880`019ca000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05d55000 fffff880`05d77000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05d85000 fffff880`05d98000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02c55000 fffff880`02d73000 dump_iaStorV dump_iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`05d98000 fffff880`05da4000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0405f000 fffff880`04153000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04153000 fffff880`04199000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04000000 fffff880`04048000 e1e6032e e1e6032e.sys Tue Mar 24 14:17:23 2009 (49C923B3)
fffff880`0856e000 fffff880`085a4000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0104c000 fffff880`01060000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01000000 fffff880`0104c000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0148d000 fffff880`01497000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0197a000 fffff880`019b4000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`00fb1000 fffff880`00ffb000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`045a3000 fffff880`045b0000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02c0d000 fffff800`02c56000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04211000 fffff880`043dcc80 HCW85BDA HCW85BDA.sys Wed Sep 01 16:27:22 2010 (4C7EB72A)
fffff880`04541000 fffff880`04565000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05cbc000 fffff880`05d18000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`045c3000 fffff880`045dc000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`045dc000 fffff880`045e4080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05dec000 fffff880`05dfa000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07696000 fffff880`0775e000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01971000 fffff880`0197a000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`010d0000 fffff880`011ee000 iaStorV iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`03e64000 fffff880`03e7a000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`044b5000 fffff880`044c4000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05c15000 fffff880`05c23000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba3000 fffff800`00bad000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04199000 fffff880`041dc000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013d1000 fffff880`013eb000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01200000 fffff880`0122b000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`043e1000 fffff880`043e6200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05c00000 fffff880`05c15000 LHidFilt LHidFilt.Sys Thu Mar 18 04:51:17 2010 (4BA1E985)
fffff880`07669000 fffff880`0767e000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c23000 fffff880`05c37000 LMouFilt LMouFilt.Sys Thu Mar 18 04:51:24 2010 (4BA1E98C)
fffff880`03e7a000 fffff880`03e9d000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c23000 fffff880`00c67000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05dc1000 fffff880`05dcf000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`044c4000 fffff880`044d3000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05c92000 fffff880`05c9f000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00ed4000 fffff880`00eee000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02db7000 fffff880`02de4000 MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`07d72000 fffff880`07d82000 MpNWMon MpNWMon.sys Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`0777c000 fffff880`07794000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07794000 fffff880`077c1000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07ce9000 fffff880`07d37000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07d37000 fffff880`07d5a000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`0180e000 fffff880`01819000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0106c000 fffff880`010ca000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03ff2000 fffff880`03ffd000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0195f000 fffff880`01971000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01497000 fffff880`01589000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04424000 fffff880`04430000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04430000 fffff880`0445f000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05ca7000 fffff880`05cbc000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03f57000 fffff880`03f66000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`01855000 fffff880`0189a000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01589000 fffff880`015e9000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01819000 fffff880`0182a000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03fe6000 fffff880`03ff2000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c56000 fffff800`03232000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122e000 fffff880`013d1000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02de4000 fffff880`02ded000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`053f7000 fffff880`053f8180 nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`0481d000 fffff880`053f6a80 nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`03f31000 fffff880`03f57000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00eaa000 fffff880`00ebf000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e6a000 fffff880`00e9d000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0147c000 fffff880`0148d000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07c00000 fffff880`07ca6000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05d18000 fffff880`05d55000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c67000 fffff880`00c7b000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01060000 fffff880`0106b700 PxHlpa64 PxHlpa64.sys Wed Jun 20 18:27:08 2007 (4679A9BC)
fffff880`04400000 fffff880`04424000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0445f000 fffff880`0447a000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0447a000 fffff880`0449b000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0449b000 fffff880`044b5000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03f95000 fffff880`03fe6000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02c43000 fffff880`02c4c000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c4c000 fffff880`02c55000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02df4000 fffff880`02dfd000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01925000 fffff880`0195f000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0767e000 fffff880`07696000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07ca6000 fffff880`07cb1000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0191d000 fffff880`01925000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08400000 fffff880`08471000 spsys spsys.sys Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`084d8000 fffff880`0856e000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07d94000 fffff880`07dfb000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07cb1000 fffff880`07cde000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`044d3000 fffff880`044d4480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07d82000 fffff880`07d94000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01848000 fffff880`01855000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0182a000 fffff880`01848000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03f81000 fffff880`03f95000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004d0000 fffff960`004da000 TSDDD TSDDD.dll Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03e3e000 fffff880`03e64000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`041dc000 fffff880`041ee000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05dcf000 fffff880`05dec000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05dbf000 fffff880`05dc0f00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04530000 fffff880`04541000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05c38000 fffff880`05c92000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`044da000 fffff880`04530000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05da4000 fffff880`05dbf000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`043e7000 fffff880`043f4000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e9d000 fffff880`00eaa000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02c00000 fffff880`02c0e000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02c0e000 fffff880`02c33000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00ebf000 fffff880`00ed4000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d99000 fffff880`00df5000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`018d1000 fffff880`0191d000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`043f4000 fffff880`043fd000 wacmoumonitor wacmoumonitor.sys Fri Oct 29 12:30:06 2010 (4CCAF68E)
fffff880`05c9f000 fffff880`05ca7000 wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
fffff880`045c0000 fffff880`045c2a00 wacomvhid wacomvhid.sys Mon Sep 21 19:29:14 2009 (4AB80C4A)
fffff880`03f66000 fffff880`03f81000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c33000 fffff880`02c43000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00efe000 fffff880`00fa2000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00fa2000 fffff880`00fb1000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03f28000 fffff880`03f31000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00000000 fffff960`00310000 win32k win32k.sys Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`04200000 fffff880`04211000 WinUSB WinUSB.SYS Mon Jul 13 20:06:28 2009 (4A5BCC04)
fffff880`00e57000 fffff880`00e60000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0189a000 fffff880`018bb000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`07638000 fffff880`07669000 WUDFRd WUDFRd.sys Mon Jul 13 20:06:06 2009 (4A5BCBEE)
Unloaded modules:
fffff880`05dec000 fffff880`05dfd000 WinUSB.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`05c00000 fffff880`05c31000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01800000 fffff880`0180e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`02c5c000 fffff880`02d7a000 dump_iaStorV
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`02d7a000 fffff880`02d8d000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000