Memory Dump Errors

GeoR · 15 Dec 2010

Hi All: I have windows 7 x64bit home premium loaded on my computer since May 2010. It is a full retail version. OEM was Windows vista 32 bit. I keep getting memory dump errors so i did another clean install August 2010. Still getting same memory dump errors. Hoping somebody can help me. Thank you George

CarlTR6 · 15 Dec 2010

Hi, GeoR, and welcome to the forum. Sorry you are having problems. I looked at your four most recent dumps. Each dump has a different error code and that usually indicates a hardware/hardware related problem. Three of the dumps indicate memory corruption. Because one of the dumps blames your NTFS file system (though this may be caused by a conflict with something else), I suggest that you run Disk Check>

Run CHKDSK /R /F from an elevated (Run as adminstrator) Command Prompt. Please do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Windows 7).

Copy/paste the results into your next post.

Outdated drivers can and do cause memory corruption and BSOD's. You have some outdated drivers loaded on your system. The ones in red font are really obsolete.

adfs.SYS Mon Nov 03 11:48:14 2008 - Adobe File System Driver. Adobe. There is no update for this driver. Rename it (see note below).

e1e6032e.sys Tue Mar 24 14:17:23 2009 - Intel PRO/1000 Adapter NDIS 6 deserialized driver. http://downloadcenter.intel.com/Default.aspx. Update this driver.

iaStorV.sys Wed Apr 08 12:57:17 2009 - Intel Matrix Storage Manager driver (base). http://downloadcenter.intel.com/Default.aspx. Update this driver.

PxHlpa64.sys Wed Jun 20 18:27:08 2007 - Sonic CD/DVD driver (used by many different CD/DVD programs). pxHelp20.sys programs
Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished.

wacommousefilter.sys Fri Feb 16 13:12:17 2007 - Wacom(tablet) Mouse Filter. Wacom Hardware Drivers. Update this driver.

Note

Renaming drivers: Create restore point. Using Windows Explorer, navigate to C:\Windows\System32\Drivers, locate the driver files, and rename them from .sys to .old. Reboot and the drivers will not load. This will break whatever software or hardware these drivers are associated with.

How to find drivers -

- I have listed links to most of the drivers in the code box above. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads
- - To remove any left over driver remnants, especially from graphics cards, use driver sweeper Guru3D - Driver Sweeper
Intel Driver Utility: Intel® Driver Update Utility

Take care of these drivers, reboot and let's see how your systems does. Post back and let us know. If you get another BSOD, upload it and we will go from there. Post if you need help with the drivers.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c10000 PsLoadedModuleList = 0xfffff800`02e4de50
Debug session time: Sun Dec 12 16:37:36.572 2010 (GMT-5)
System Uptime: 0 days 0:02:52.289
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {c08a2, 0, 0, 0}

Probably caused by : Ntfs.sys ( Ntfs!NtfsPagingFileIo+155 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000000c08a2
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x24

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff8800120fe95 to fffff80002c80740

STACK_TEXT:  
fffff880`0983e6b8 fffff880`0120fe95 : 00000000`00000024 00000000`000c08a2 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff880`0983e6c0 fffff880`0120fae8 : 00000001`00000000 00000000`00000000 00000000`00000000 00000fa8`0087c000 : Ntfs!NtfsPagingFileIo+0x155
fffff880`0983e7c0 fffff880`0117823f : fffffa80`05e93368 fffffa80`05e93010 fffffa80`067d7c30 00000000`00000000 : Ntfs! ?? ::FNODOBFM::`string'+0x9e89
fffff880`0983e870 fffff880`011766df : fffffa80`0545ade0 fffffa80`05e93010 fffffa80`0545ad00 fffffa80`05e93010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`0983e900 fffff800`02c721f2 : fffffa80`05e93030 fffffa80`06b311c0 00000000`00000043 fffff880`02f63180 : fltmgr!FltpDispatch+0xcf
fffff880`0983e960 fffff800`02c724f5 : 00000000`00000001 00000000`00000001 fffff880`0983ea60 00000000`00000000 : nt!IoPageRead+0x252
fffff880`0983e9f0 fffff800`02c9b8bb : 00000000`00000000 00000000`00000000 ffffffff`ffffffff 00000000`00000000 : nt!MiIssueHardFault+0x255
fffff880`0983eac0 fffff800`02c7e82e : 00000000`00000000 00000000`00007003 00000000`00000001 00000000`0000064c : nt!MmAccessFault+0x14bb
fffff880`0983ec20 00000000`773c51df : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`0299e720 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773c51df


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Ntfs!NtfsPagingFileIo+155
fffff880`0120fe95 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  Ntfs!NtfsPagingFileIo+155

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc14f

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsPagingFileIo+155

BUCKET_ID:  X64_0x24_Ntfs!NtfsPagingFileIo+155

Followup: MachineOwner
---------

Debug session time: Mon Dec 13 11:02:35.380 2010 (GMT-5)
System Uptime: 0 days 0:09:04.502
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {31, fffffa80086b63c0, fffff8800e0cd000, fffff8a014267123}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+6368 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000000031, The subtype of the bugcheck.
Arg2: fffffa80086b63c0
Arg3: fffff8800e0cd000
Arg4: fffff8a014267123

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_31

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  iexplore.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002fa574d to fffff80002c79740

STACK_TEXT:  
fffff880`0af5f6f8 fffff800`02fa574d : 00000000`0000001a 00000000`00000031 fffffa80`086b63c0 fffff880`0e0cd000 : nt!KeBugCheckEx
fffff880`0af5f700 fffff800`02f610b1 : fffff880`0e0cd000 00000000`00180000 00000000`00005000 fffffa80`00a8b3d0 : nt! ?? ::NNGAKEGL::`string'+0x6368
fffff880`0af5f750 fffff800`02f4e344 : 00000000`00000000 00000000`00000000 fffff6fc`40070640 fffff800`00000000 : nt!MiPerformFixups+0x65
fffff880`0af5f7a0 fffff800`02c5b68d : 00000000`000383bf 00000000`00000005 fffff8a0`14255080 00000000`00000002 : nt!MiRelocateImagePfn+0x114
fffff880`0af5f800 fffff800`02f6100d : fffffa80`089dc700 fffff6fc`40070640 fffff8a0`00000002 00000000`00000000 : nt!MiValidateImagePages+0x2bd
fffff880`0af5f8a0 fffff800`02f60720 : ffffffff`ffffffff 00000000`00000001 fffff8a0`14266000 00000000`000000ca : nt!MiSwitchBaseAddress+0x61
fffff880`0af5f8d0 fffff800`02f747ce : 00000000`00000004 00000000`01000000 00000000`00000000 00000000`00000000 : nt!MiRelocateImageAgain+0x100
fffff880`0af5f920 fffff800`02f6a013 : fffff880`0af5fb80 00000000`00000000 00000000`00000000 fffff880`0af5fb78 : nt!MmCreateSection+0x302
fffff880`0af5fb30 fffff800`02c78993 : fffffa80`0875ab60 00000000`0341e648 fffff880`0af5fbc8 00000000`00000000 : nt!NtCreateSection+0x162
fffff880`0af5fbb0 00000000`770501fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0341e628 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770501fa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::NNGAKEGL::`string'+6368
fffff800`02fa574d cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::NNGAKEGL::`string'+6368

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x1a_31_nt!_??_::NNGAKEGL::_string_+6368

BUCKET_ID:  X64_0x1a_31_nt!_??_::NNGAKEGL::_string_+6368

Followup: MachineOwner
---------

Debug session time: Tue Dec 14 06:34:47.868 2010 (GMT-5)
System Uptime: 0 days 0:08:26.006
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck BE, {fffff8a008441e40, 800000008f0be121, fffff88009c76ad0, b}

Probably caused by : discache.sys ( discache!DisCreateObjectRecord+1de )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8a008441e40, Virtual address for the attempted write.
Arg2: 800000008f0be121, PTE contents.
Arg3: fffff88009c76ad0, (reserved)
Arg4: 000000000000000b, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xBE

PROCESS_NAME:  WerFault.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88009c76ad0 -- (.trap 0xfffff88009c76ad0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000000686c rbx=0000000000000000 rcx=00000000006fe398
rdx=fffff8a008441e3c rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002efe03a rsp=fffff88009c76c60 rbp=0000000000000000
 r8=fffff88009c76d10  r9=fffff88009c76c90 r10=000000000000000c
r11=fffff88009c76b20 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!CmpAddToLeaf+0x16e:
fffff800`02efe03a 42894ceb04      mov     dword ptr [rbx+r13*8+4],ecx ds:7a48:00000000`00000004=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002d07ae2 to fffff80002c87740

STACK_TEXT:  
fffff880`09c76968 fffff800`02d07ae2 : 00000000`000000be fffff8a0`08441e40 80000000`8f0be121 fffff880`09c76ad0 : nt!KeBugCheckEx
fffff880`09c76970 fffff800`02c8582e : 00000000`00000001 fffff8a0`08441e3c fffff8a0`08440000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x4237e
fffff880`09c76ad0 fffff800`02efe03a : fffff8a0`08441e3c 00000000`00000000 fffff8a0`03457420 fffff8a0`03457420 : nt!KiPageFault+0x16e
fffff880`09c76c60 fffff800`02efe2fe : fffff8a0`08441e3c fffff8a0`03b97344 fffff8a0`006fe398 fffff880`09c76d10 : nt!CmpAddToLeaf+0x16e
fffff880`09c76cd0 fffff800`02efc730 : fffff8a0`03457401 fffffa80`00000340 fffff8a0`006fe398 fffffa80`00000000 : nt!CmpAddSubKey+0x17a
fffff880`09c76d70 fffff800`02f62125 : fffff8a0`03b97344 fffff880`00000340 fffff880`09c76f70 fffff880`09c76f70 : nt!CmpDoCreate+0x29c
fffff880`09c76eb0 fffff800`02f80e84 : fffff800`02f60cc0 00000000`00000001 fffffa80`03d54010 00000000`00000000 : nt!CmpParseKey+0x1465
fffff880`09c77180 fffff800`02f85e4d : fffffa80`03d54010 fffff880`09c772e0 00000000`00000240 fffffa80`039377b0 : nt!ObpLookupObjectName+0x585
fffff880`09c77280 fffff800`02f25654 : fffff8a0`03be5610 00000000`00000000 fffff8a0`03be5600 00000000`00000000 : nt!ObOpenObjectByName+0x1cd
fffff880`09c77330 fffff800`02f2572e : fffff880`09c77740 fffff800`000f003f fffff880`09c77798 fffff8a0`000f003f : nt!CmCreateKey+0x2e1
fffff880`09c774a0 fffff800`02c86993 : fffff880`09c776d0 fffffa80`03ff18f0 00120089`00000000 00000000`00000000 : nt!NtCreateKey+0x2e
fffff880`09c774f0 fffff800`02c82f30 : fffff880`03a6b81e 00000000`00000000 00000000`00000000 fffff880`09c77870 : nt!KiSystemServiceCopyEnd+0x13
fffff880`09c776f8 fffff880`03a6b81e : 00000000`00000000 00000000`00000000 fffff880`09c77870 fffff880`03a6e9c5 : nt!KiServiceLinkage
fffff880`09c77700 fffff880`03a6db40 : 00000000`c0000225 ffffffff`800018c8 00070000`0000f1b5 fffff8a0`09776490 : discache!DisCreateObjectRecord+0x1de
fffff880`09c77800 fffff880`03a69b9d : 00000000`c0000225 00000000`00000002 fffff800`02f7d0b0 00000000`00000000 : discache!DisCreateFileObjectRecord+0x170
fffff880`09c77950 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : discache!ScQueryAttributeInformation+0x215


STACK_COMMAND:  kb

FOLLOWUP_IP: 
discache!DisCreateObjectRecord+1de
fffff880`03a6b81e 3bc5            cmp     eax,ebp

SYMBOL_STACK_INDEX:  d

SYMBOL_NAME:  discache!DisCreateObjectRecord+1de

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: discache

IMAGE_NAME:  discache.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc52e

FAILURE_BUCKET_ID:  X64_0xBE_discache!DisCreateObjectRecord+1de

BUCKET_ID:  X64_0xBE_discache!DisCreateObjectRecord+1de

Followup: MachineOwner
---------

Debug session time: Wed Dec 15 18:53:46.790 2010 (GMT-5)
System Uptime: 0 days 0:04:38.523
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa8006758b30, fffffa8006758e10, fffff80002fd15d0}

Probably caused by : csrss.exe

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8006758b30, Terminating object
Arg3: fffffa8006758e10, Process image file name
Arg4: fffff80002fd15d0, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: fffffa8006758b30

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0xF4_C0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`07ba4b08 fffff800`03052652 : 00000000`000000f4 00000000`00000003 fffffa80`06758b30 fffffa80`06758e10 : nt!KeBugCheckEx
fffff880`07ba4b10 fffff800`02ffb3e3 : ffffffff`ffffffff fffffa80`07b51060 fffffa80`06758b30 fffffa80`06758b30 : nt!PspCatchCriticalBreak+0x92
fffff880`07ba4b50 fffff800`02f8380c : ffffffff`ffffffff 00000000`00000001 fffffa80`06758b30 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17946
fffff880`07ba4ba0 fffff800`02cc5993 : fffffa80`06758b30 fffff880`c0000005 00000000`022dfc80 fffffa80`07b51060 : nt!NtTerminateProcess+0x20c
fffff880`07ba4c20 00000000`77c6001a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`022de768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c6001a


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_C0000005_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_C0000005_IMAGE_csrss.exe

Followup: MachineOwner
---------

3: kd> lmtsmn
start             end                 module name
fffff880`04565000 fffff880`045a3000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`07d5a000 fffff880`07d72000   adfs     adfs.SYS     Mon Nov 03 11:48:14 2008 (490F2B4E)
fffff880`03e9e000 fffff880`03f28000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045e5000 fffff880`045fb000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011ee000 fffff880`011f9000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`08471000 fffff880`0847c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff960`00830000 fffff960`00891000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`043dd000 fffff880`043e0e80   BdaSup   BdaSup.SYS   Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`02ded000 fffff880`02df4000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03e2d000 fffff880`03e3e000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0775e000 fffff880`0777c000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00610000 fffff960`00637000   cdd      cdd.dll      unavailable (00000000)
fffff880`02d8d000 fffff880`02db7000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cd9000 fffff880`00d99000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`04048000 fffff880`0405a000   circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`019ca000 fffff880`019fa000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c7b000 fffff880`00cd9000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01409000 fffff880`0147c000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`045b0000 fffff880`045c0000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05d77000 fffff880`05d85000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e0f000 fffff880`03e2d000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03e00000 fffff880`03e0f000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`019b4000 fffff880`019ca000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05d55000 fffff880`05d77000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05d85000 fffff880`05d98000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02c55000 fffff880`02d73000   dump_iaStorV dump_iaStorV.sys Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`05d98000 fffff880`05da4000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0405f000 fffff880`04153000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04153000 fffff880`04199000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04000000 fffff880`04048000   e1e6032e e1e6032e.sys Tue Mar 24 14:17:23 2009 (49C923B3)
fffff880`0856e000 fffff880`085a4000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0104c000 fffff880`01060000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01000000 fffff880`0104c000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0148d000 fffff880`01497000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0197a000 fffff880`019b4000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`00fb1000 fffff880`00ffb000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`045a3000 fffff880`045b0000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02c0d000 fffff800`02c56000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04211000 fffff880`043dcc80   HCW85BDA HCW85BDA.sys Wed Sep 01 16:27:22 2010 (4C7EB72A)
fffff880`04541000 fffff880`04565000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05cbc000 fffff880`05d18000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`045c3000 fffff880`045dc000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`045dc000 fffff880`045e4080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05dec000 fffff880`05dfa000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07696000 fffff880`0775e000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01971000 fffff880`0197a000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`010d0000 fffff880`011ee000   iaStorV  iaStorV.sys  Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`03e64000 fffff880`03e7a000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`044b5000 fffff880`044c4000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05c15000 fffff880`05c23000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba3000 fffff800`00bad000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04199000 fffff880`041dc000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013d1000 fffff880`013eb000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01200000 fffff880`0122b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`043e1000 fffff880`043e6200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05c00000 fffff880`05c15000   LHidFilt LHidFilt.Sys Thu Mar 18 04:51:17 2010 (4BA1E985)
fffff880`07669000 fffff880`0767e000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05c23000 fffff880`05c37000   LMouFilt LMouFilt.Sys Thu Mar 18 04:51:24 2010 (4BA1E98C)
fffff880`03e7a000 fffff880`03e9d000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c23000 fffff880`00c67000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`05dc1000 fffff880`05dcf000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`044c4000 fffff880`044d3000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05c92000 fffff880`05c9f000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00ed4000 fffff880`00eee000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02db7000 fffff880`02de4000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`07d72000 fffff880`07d82000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`0777c000 fffff880`07794000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07794000 fffff880`077c1000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07ce9000 fffff880`07d37000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07d37000 fffff880`07d5a000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`0180e000 fffff880`01819000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0106c000 fffff880`010ca000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03ff2000 fffff880`03ffd000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0195f000 fffff880`01971000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01497000 fffff880`01589000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04424000 fffff880`04430000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04430000 fffff880`0445f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05ca7000 fffff880`05cbc000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03f57000 fffff880`03f66000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`01855000 fffff880`0189a000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01589000 fffff880`015e9000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01819000 fffff880`0182a000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03fe6000 fffff880`03ff2000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c56000 fffff800`03232000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122e000 fffff880`013d1000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02de4000 fffff880`02ded000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`053f7000 fffff880`053f8180   nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`0481d000 fffff880`053f6a80   nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`03f31000 fffff880`03f57000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00eaa000 fffff880`00ebf000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e6a000 fffff880`00e9d000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0147c000 fffff880`0148d000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07c00000 fffff880`07ca6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05d18000 fffff880`05d55000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c67000 fffff880`00c7b000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01060000 fffff880`0106b700   PxHlpa64 PxHlpa64.sys Wed Jun 20 18:27:08 2007 (4679A9BC)
fffff880`04400000 fffff880`04424000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0445f000 fffff880`0447a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0447a000 fffff880`0449b000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0449b000 fffff880`044b5000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03f95000 fffff880`03fe6000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02c43000 fffff880`02c4c000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c4c000 fffff880`02c55000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02df4000 fffff880`02dfd000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01925000 fffff880`0195f000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0767e000 fffff880`07696000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07ca6000 fffff880`07cb1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0191d000 fffff880`01925000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08400000 fffff880`08471000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`084d8000 fffff880`0856e000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07d94000 fffff880`07dfb000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07cb1000 fffff880`07cde000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`044d3000 fffff880`044d4480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07d82000 fffff880`07d94000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01848000 fffff880`01855000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0182a000 fffff880`01848000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03f81000 fffff880`03f95000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`004d0000 fffff960`004da000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03e3e000 fffff880`03e64000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`041dc000 fffff880`041ee000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05dcf000 fffff880`05dec000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05dbf000 fffff880`05dc0f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04530000 fffff880`04541000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05c38000 fffff880`05c92000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`044da000 fffff880`04530000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05da4000 fffff880`05dbf000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`043e7000 fffff880`043f4000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e9d000 fffff880`00eaa000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02c00000 fffff880`02c0e000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02c0e000 fffff880`02c33000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00ebf000 fffff880`00ed4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d99000 fffff880`00df5000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`018d1000 fffff880`0191d000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`043f4000 fffff880`043fd000   wacmoumonitor wacmoumonitor.sys Fri Oct 29 12:30:06 2010 (4CCAF68E)
fffff880`05c9f000 fffff880`05ca7000   wacommousefilter wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
fffff880`045c0000 fffff880`045c2a00   wacomvhid wacomvhid.sys Mon Sep 21 19:29:14 2009 (4AB80C4A)
fffff880`03f66000 fffff880`03f81000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c33000 fffff880`02c43000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00efe000 fffff880`00fa2000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00fa2000 fffff880`00fb1000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03f28000 fffff880`03f31000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00000000 fffff960`00310000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`04200000 fffff880`04211000   WinUSB   WinUSB.SYS   Mon Jul 13 20:06:28 2009 (4A5BCC04)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0189a000 fffff880`018bb000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`07638000 fffff880`07669000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`05dec000 fffff880`05dfd000   WinUSB.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05c00000 fffff880`05c31000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01800000 fffff880`0180e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02c5c000 fffff880`02d7a000   dump_iaStorV
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`02d7a000 fffff880`02d8d000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

GeoR · 15 Dec 2010

Hi Carl: Thank you for the quick reply. I will do as you have said but I might not get it done tonight as I have to leave shortly. I will post back the results in my next post. Thank you again. George

CarlTR6 · 15 Dec 2010

You are very welcome, George. I have finished the analysis and added more information to my post above.

GeoR · 16 Dec 2010

Information 28/11/2010 3:49:41 PM Wininit 1001 None

Hopefully I have followed all your suggestions right. Have done the CHKDSK & copy/pasted. Downloaded the drivers & remaned the ones you said to do. Only problem I encountered was my wacom driver update is same update I already useing. So I renamed wacommousefilter.old & loaded driver again. It gave me a conflict error message on reboot to use their settings which i did. Seems to be working fine. I downloaded the 3dGuru Driver Sweeper but cant get it to run. Thank you George

CarlTR6 · 16 Dec 2010

Good work and thank you for reporting back. I did not think you had a hard drive problem; but you needed to check because of ntfs.sys was blamed for a crash. I rather suspect that some of your problem, if not all of it, was caused by out of date drivers. You may have to upgrade that Wacom device. We will see how it does. Don't worry about Driver Sweeper for now.

GeoR · 17 Dec 2010

Hi again. Another BSOD this morning. Have zipped up another file from this morning. Meanwhile am going to uninstall & reinstall the wacom tablet to see if that helps. Any suggestions to help solve problem would be greatly appreciated. Thanks George

CarlTR6 · 17 Dec 2010

Let me know if you find an update for the Wacom driver; I don't think there is one. However, I do not see that driver showing in your latest dump. The only outdated driver I see is -

iaStorV.sys Wed Apr 08 12:57:17 2009 - Intel Matrix Storage Manager driver (base). http://downloadcenter.intel.com/Default.aspx. Update this driver.

Your dump blames memory corruption which is usually caused by a Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, or compatibility.
After you update iaStorV.sys, if you get anohter BSOD, I suggest that you test your RAM with Memtest86. Follow the instructions in this tutorial: RAM - Test with Memtest86+. Let Memtest run for at least 7 passes; this will take 6-8 hours. Run Memtest from a cold boot after you computer has been off for a while. Post back with the results.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c60000 PsLoadedModuleList = 0xfffff800`02e9de50
Debug session time: Fri Dec 17 11:57:19.083 2010 (GMT-5)
System Uptime: 0 days 0:06:26.221
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {48, 2, 1, fffff80002d82b1f}

Probably caused by : memory_corruption ( nt!MiIdentifyPfn+26f )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000048, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002d82b1f, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f080e0
 0000000000000048 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiIdentifyPfn+26f
fffff800`02d82b1f f0410fba6e481f  lock bts dword ptr [r14+48h],1Fh

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff88006c6b4f0 -- (.trap 0xfffff88006c6b4f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=0a00000000000020
rdx=00000000000b85d0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d82b1f rsp=fffff88006c6b680 rbp=fffffa8008d93ba0
 r8=00000000000af491  r9=0000000000000001 r10=0000000000000042
r11=0000058000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
nt!MiIdentifyPfn+0x26f:
fffff800`02d82b1f f0410fba6e481f  lock bts dword ptr [r14+48h],1Fh ds:00000000`00000048=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ccfca9 to fffff80002cd0740

STACK_TEXT:  
fffff880`06c6b3a8 fffff800`02ccfca9 : 00000000`0000000a 00000000`00000048 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`06c6b3b0 fffff800`02cce920 : 00000000`42506650 02000000`000a912d 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`06c6b4f0 fffff800`02d82b1f : 00000000`000b8053 fffffa80`03c64a60 00000000`000018c0 fffff800`02f9735b : nt!KiPageFault+0x260
fffff880`06c6b680 fffff800`02d837cb : 00000000`00000000 00000000`00000004 fffffa80`03c64aa8 fffffa80`03c64000 : nt!MiIdentifyPfn+0x26f
fffff880`06c6b720 fffff800`030e2595 : fffffa80`03c64000 fffff880`06c6bca0 fffff880`06c6b7f8 00000000`00000000 : nt!MmQueryPfnList+0xbb
fffff880`06c6b760 fffff800`030278b8 : 00000000`00000006 00000000`00000000 fffffa80`03c64000 fffff800`02c60001 : nt!PfpPfnPrioRequest+0x115
fffff880`06c6b7b0 fffff800`02fce3c3 : 00000000`00000000 fffff800`02c60000 fffffa80`0738d950 fffffa80`07c52001 : nt! ?? ::NNGAKEGL::`string'+0x472ad
fffff880`06c6b840 fffff800`02fcf1e5 : 00000000`003ab268 fffff800`02cdd618 00000000`003ab2c0 fffff880`06c6bca0 : nt!ExpQuerySystemInformation+0x11c2
fffff880`06c6bbe0 fffff800`02ccf993 : 00000000`0297a448 fffff880`06c6bca0 00000000`029971c0 00000000`035e0140 : nt!NtQuerySystemInformation+0x4d
fffff880`06c6bc20 00000000`770600ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`003ab198 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770600ba


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiIdentifyPfn+26f
fffff800`02d82b1f f0410fba6e481f  lock bts dword ptr [r14+48h],1Fh

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiIdentifyPfn+26f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiIdentifyPfn+26f

BUCKET_ID:  X64_0xA_nt!MiIdentifyPfn+26f

Followup: MachineOwner
---------

1: kd> lmtsmn
start             end                 module name
fffff880`04000000 fffff880`0403e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f7f000 fffff880`00fd6000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02e4b000 fffff880`02ed5000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04a00000 fffff880`04a16000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`014d4000 fffff880`014df000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`08f90000 fffff880`08f9b000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff960`00810000 fffff960`00871000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`047eb000 fffff880`047eee80   BdaSup   BdaSup.SYS   Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`042c5000 fffff880`042cc000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`02fd7000 fffff880`02fe8000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07128000 fffff880`07146000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      unavailable (00000000)
fffff880`04265000 fffff880`0428f000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00eb0000 fffff880`00f70000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00dee000 fffff880`00e00000   circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`01174000 fffff880`011a4000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d12000 fffff880`00d70000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01200000 fffff880`01273000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`044d2000 fffff880`044e2000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05f42000 fffff880`05f50000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`02fb9000 fffff880`02fd7000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02faa000 fffff880`02fb9000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`017dc000 fffff880`017f2000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05f20000 fffff880`05f42000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05f50000 fffff880`05f63000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0403e000 fffff880`04248000   dump_iaStor dump_iaStor.sys Wed Mar 03 21:51:31 2010 (4B8F2033)
fffff880`05f63000 fffff880`05f6f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`044ed000 fffff880`045e1000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04400000 fffff880`04446000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04489000 fffff880`044d2000   e1e6232e e1e6232e.sys Fri Mar 26 04:14:14 2010 (4BAC6CD6)
fffff880`08ee9000 fffff880`08f1f000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`0152b000 fffff880`0153f000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`014df000 fffff880`0152b000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`017d2000 fffff880`017dc000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0113a000 fffff880`01174000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0182b000 fffff880`01875000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02c17000 fffff800`02c60000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`0461f000 fffff880`047eac80   HCW85BDA HCW85BDA.sys Wed Sep 01 16:27:22 2010 (4C7EB72A)
fffff880`043b6000 fffff880`043da000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05e87000 fffff880`05ee3000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`045e1000 fffff880`045fa000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`044e2000 fffff880`044ea080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05feb000 fffff880`05ff9000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07060000 fffff880`07128000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0188f000 fffff880`01898000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`012ca000 fffff880`014d4000   iaStor   iaStor.sys   Wed Mar 03 21:51:31 2010 (4B8F2033)
fffff880`0101c000 fffff880`0113a000   iaStorV  iaStorV.sys  Wed Apr 08 12:57:17 2009 (49DCD76D)
fffff880`02e26000 fffff880`02e3c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02e3c000 fffff880`02e4b000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05fa1000 fffff880`05faf000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bce000 fffff800`00bd8000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04446000 fffff880`04489000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`017a7000 fffff880`017c1000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01800000 fffff880`0182b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`047ef000 fffff880`047f4200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05f8c000 fffff880`05fa1000   LHidFilt LHidFilt.Sys Thu Mar 18 04:51:17 2010 (4BA1E985)
fffff880`06523000 fffff880`06538000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04248000 fffff880`0425c000   LMouFilt LMouFilt.Sys Thu Mar 18 04:51:24 2010 (4BA1E98C)
fffff880`0649d000 fffff880`064c0000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cba000 fffff880`00cfe000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`017f2000 fffff880`01800000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`02fe8000 fffff880`02ff7000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05faf000 fffff880`05fbc000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c5c000 fffff880`00c76000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0428f000 fffff880`042bc000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`07000000 fffff880`07010000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`07146000 fffff880`0715e000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0715e000 fffff880`0718b000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`0718b000 fffff880`071d9000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`071d9000 fffff880`071fc000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`0432a000 fffff880`04335000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fdf000 fffff880`00fe9000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0153f000 fffff880`0159d000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02f9f000 fffff880`02faa000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`0187d000 fffff880`0188f000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`018a3000 fffff880`01995000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`055f3000 fffff880`055ff000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`00c76000 fffff880`00ca5000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05e72000 fffff880`05e87000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02f04000 fffff880`02f13000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04371000 fffff880`043b6000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01995000 fffff880`019f5000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`04335000 fffff880`04346000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02f93000 fffff880`02f9f000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c60000 fffff800`0323c000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01604000 fffff880`017a7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`042bc000 fffff880`042c5000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`055f1000 fffff880`055f2180   nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`04a17000 fffff880`055f0a80   nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`02ede000 fffff880`02f04000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00da3000 fffff880`00db8000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d70000 fffff880`00da3000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`017c1000 fffff880`017d2000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06550000 fffff880`065f6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05ee3000 fffff880`05f20000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cfe000 fffff880`00d12000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`043da000 fffff880`043fe000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`015d7000 fffff880`015f2000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`00dcd000 fffff880`00dee000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`01000000 fffff880`0101a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02f42000 fffff880`02f93000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`0430f000 fffff880`04318000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04318000 fffff880`04321000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04321000 fffff880`0432a000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0159d000 fffff880`015d7000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`06538000 fffff880`06550000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07010000 fffff880`0701b000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01875000 fffff880`0187d000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08f1f000 fffff880`08f90000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`08e53000 fffff880`08ee9000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06400000 fffff880`06467000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`0701b000 fffff880`07048000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`047f8000 fffff880`047f9480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01a00000 fffff880`01bfd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07048000 fffff880`0705a000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`04364000 fffff880`04371000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`04346000 fffff880`04364000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02f2e000 fffff880`02f42000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00420000 fffff960`0042a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02e00000 fffff880`02e26000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`00ca5000 fffff880`00cb7000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`05fce000 fffff880`05feb000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05f8a000 fffff880`05f8bf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0460d000 fffff880`0461e000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05e0b000 fffff880`05e65000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`011a4000 fffff880`011fa000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`05f6f000 fffff880`05f8a000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`04600000 fffff880`0460d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fe9000 fffff880`00ff6000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`042cc000 fffff880`042da000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`042da000 fffff880`042ff000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00db8000 fffff880`00dcd000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01273000 fffff880`012bf000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`05fbc000 fffff880`05fc5000   wacmoumonitor wacmoumonitor.sys Fri Oct 29 12:30:06 2010 (4CCAF68E)
fffff880`047f5000 fffff880`047f7a00   wacomvhid wacomvhid.sys Mon Sep 21 19:29:14 2009 (4AB80C4A)
fffff880`02f13000 fffff880`02f2e000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`042ff000 fffff880`0430f000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f70000 fffff880`00f7f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02ed5000 fffff880`02ede000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b0000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`064e1000 fffff880`064f2000   WinUSB   WinUSB.SYS   Mon Jul 13 20:06:28 2009 (4A5BCC04)
fffff880`00fd6000 fffff880`00fdf000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`064c0000 fffff880`064e1000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`064f2000 fffff880`06523000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`05f8c000 fffff880`05f9d000   WinUSB.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05f9d000 fffff880`05fce000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`017f2000 fffff880`01800000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04048000 fffff880`04252000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04252000 fffff880`04265000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05e65000 fffff880`05e72000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000