Bsod-irql_not_less_or_equal

Mirage · 30 Dec 2010

Hello, I really need some help on this. I can't figure out what is causing the problem of a BSOD. I have attached my latest dump files. I have run a memtest and had my ram replaced recently by the manufacturer and I still get the BSOD's.

My OS is Windows 7 Ultimate 64bit. My copy is a full retail on a home built system around 2 years old I believe now. I have also filled in my computer specs on my profile if needed. Any help on this would be appreciated. Thanks in advance.

EDIT: I have attached an updated zip file with the files requested.

CarlTR6 · 30 Dec 2010

Hi Mirage and welcome to the forum. Please read this thread, follow the instructions and post back. We will be glad to help you.

https://www.sevenforums.com/crashes-d...tructions.html

Mirage · 31 Dec 2010

Did my updated zip file give any insight?

CarlTR6 · 31 Dec 2010

Good morning, Mirage. Thanks for uploading all of the files. Your three dumps are nearly identical and blame vfilter.sys, ShrewSoft VPN Adapter IM Filter Driver. Though this driver is up to date, there is a more recent version of Shrewsoft VPN available. I did find where your version and earlier versions do cause conflicts on some systems. I suggest that while trouble shooting you uninstall Shrewsoft VPN. When you get your system stable, you can install the latest version. If BSOD's return, you will know this software is the problem.

It is possible that something else is conflicting with VPN. You have a number of out of date drivers loaded on your system. Those in red font are quite obsolete; some are XP drivers. Software and hardware designed for XP are not going to work with Win7 unless they are updated. I suggest you update these drivers from the links provided or uninstall the software/hardware they are associated with before uninstalling Shrewsoft and see if your problem goes away. Outdated drivers can and do cause conflicts, memory corruption and BSOD's.

athrx.sys Wed Jul 08 20:49:13 2009 - Atheros Extensible Wireless LAN driver for CB42/CB43/MB42/MB43 Network Adapter - D-Link AirPlus DWL-G520 Wireless PCI Adapter(rev.B) discontinued 2008. Atheros Communications.

CT20XUT.SYS Wed Jun 03 14:01:05 2009 - Creative 20X Utility Effects. Creative Worldwide Support.

ctac32k.sys Wed Jul 02 04:38:22 2008 - Creative Audio Driver. Creative Worldwide Support.

ctaud2k.sys Wed Jun 03 13:59:45 2009 - Creative Audio Driver (WDM). Creative Worldwide Support.

CTEXFIFX.SYS Wed Jun 03 14:01:00 2009 - Creative XFi Effects. Creative Worldwide Support.

CTHWIUT.SYS Wed Jun 03 14:01:09 2009 - Creative Utility Effects. Creative Worldwide Support.

ctoss2k.sys Wed Jun 03 13:57:43 2009 - Creative OS Services Driver. Creative Worldwide Support

ctprxy2k.sys Wed Jun 03 13:59:48 2009 - Creative Audio Driver (WDM). Creative Worldwide Support

ctsfm2k.sys Wed Jun 03 13:57:30 2009 - Creative SoundFont Management Device Driver. Creative Worldwide Support.

emupia2k.sys Wed Jun 03 13:57:22 2009 - Creative E-mu Plug-in Architecture Driver. Creative Worldwide Support.

GizmoDrv.SYS Sun May 18 01:24:02 2008 - Gizmo Project - Arainia Solutions. Gizmo Central -- Get help, make suggestions, report bugs.

ha20x2k.sys Wed Jun 03 13:59:09 2009 - Creative 20X HAL (WDM). Creative Worldwide Support.

lmimirr.sys Tue Apr 10 18:32:45 2007 - RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver. https://secure.logmein.com/US/home.aspx. This is XP software and known to cause conflicts. Uninsatll LogMeIn.

LMIRfsDriver.sys Mon Jul 14 12:26:56 2008 - RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver. https://secure.logmein.com/US/home.aspx. See above.

pavboot64.sys Mon Jun 29 07:50:23 2009 - Panda ActiveScan Boot Driver. Online support for Panda Antivirus product users- Panda Security. Uninstall Panda.

pcouffin.sys Tue Dec 05 09:39:30 2006 - low level access layer for CD devices (A part of many different CD/DVD burning programs) VSO Download DVD Burning Software, convert AVI to DVD, video converter, DVD copy to DVD slideshow photo
or
rename to pcouffin.BAK and see what CD/DVD program it breaks. This is XP software and known cause of BSOD's.

RaInfo.sys Fri Jan 04 13:57:14 2008 - LogMeIn/RemotelyAnywhere Kernel Information Provider. http://www.remotelyanywhere.com/temp...=documentation.

Note

Renaming drivers: create a restore point, using Windows Explorer, navigate to C:\Windows\System32\Drivers, locate the driver files, and rename them from .sys to .old. Reboot and the drivers will not load. This will break whatever software or hardware these drivers are associated with.

I see that you are security conscious. That is good. Win 7's internal security coding is much different and much more secure than XP's. A lot of third party security programs cause conflicts with Win 7. This is why I recommend that you uninstall Panda. Panda is known cause of BSOD's on some Win 7 systems. Malwarebytes generally runs well with Win 7. I suggest that you uninstall Spybot. Tea Timer is known to cause conflicts on some Win 7 systems. You have SuperAntiSpyware installed. I also recommend that you uninstall HotSpot Shield. It is know to cause conflicts and BSOD's on some Win 7 systems. In short, reduce your third party security programs to reduce conflicts. Avast, Malwarebytes, SuperAntiSpyware, and Windows Firewall will give you ample and solid protection.

Follow these suggestions, update drivers and/or uninstall obsolete software and hardware. If there is no update for a driver, the software or hardware it is associated with is obsolete. Uninstall that software or hardware. Reboot and see how your system runs. Please update us. If you need help with the drivers, post back and ask.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e07000 PsLoadedModuleList = 0xfffff800`03044e50
Debug session time: Thu Dec 30 16:54:28.963 2010 (GMT-5)
System Uptime: 1 days 16:28:45.258
Loading Kernel Symbols
...............................................................
................................................................
......................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 0, fffff80002e7b8b6}

Unable to load image \SystemRoot\system32\DRIVERS\vfilter.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for vfilter.sys
Probably caused by : vfilter.sys ( vfilter+29a6 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002e7b8b6, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030af0e0
 0000000000000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeSetEvent+226
fffff800`02e7b8b6 488b09          mov     rcx,qword ptr [rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff8800b5b6e90 -- (.trap 0xfffff8800b5b6e90)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800a856d98 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e7b8b6 rsp=fffff8800b5b7020 rbp=0000000000000002
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac pe cy
nt!KeSetEvent+0x226:
fffff800`02e7b8b6 488b09          mov     rcx,qword ptr [rcx] ds:0002:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e76ca9 to fffff80002e77740

STACK_TEXT:  
fffff880`0b5b6d48 fffff800`02e76ca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0b5b6d50 fffff800`02e75920 : 00000000`00000002 fffffa80`0a856d90 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0b5b6e90 fffff800`02e7b8b6 : fffff880`0b5b7090 fffff880`02deeb0e 00000000`00000048 fffff880`0b5b7110 : nt!KiPageFault+0x260
fffff880`0b5b7020 fffff880`02dee9a6 : fffffa80`00000000 00000000`00000000 00000000`00000000 fffffa80`0a856d80 : nt!KeSetEvent+0x226
fffff880`0b5b7090 fffffa80`00000000 : 00000000`00000000 00000000`00000000 fffffa80`0a856d80 00000000`00000000 : vfilter+0x29a6
fffff880`0b5b7098 00000000`00000000 : 00000000`00000000 fffffa80`0a856d80 00000000`00000000 fffff880`02dee42b : 0xfffffa80`00000000


STACK_COMMAND:  kb

FOLLOWUP_IP: 
vfilter+29a6
fffff880`02dee9a6 ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  vfilter+29a6

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: vfilter

IMAGE_NAME:  vfilter.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4b048bff

FAILURE_BUCKET_ID:  X64_0xA_vfilter+29a6

BUCKET_ID:  X64_0xA_vfilter+29a6

Followup: MachineOwner
---------

2: kd> lmtsmn
start             end                 module name
fffff880`05600000 fffff880`0563e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f8e000 fffff880`00fe5000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d13000 fffff880`02d9d000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`045de000 fffff880`045f4000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c5d000 fffff880`00c68000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`074a8000 fffff880`074b1000   aswFsBlk aswFsBlk.SYS Tue Sep 07 10:47:09 2010 (4C86506D)
fffff880`0746e000 fffff880`074a8000   aswMonFlt aswMonFlt.sys Tue Sep 07 10:47:32 2010 (4C865084)
fffff880`02d9d000 fffff880`02da7000   aswRdr   aswRdr.SYS   Tue Sep 07 10:47:47 2010 (4C865093)
fffff880`04000000 fffff880`04023000   aswSP    aswSP.SYS    Tue Sep 07 10:52:07 2010 (4C865197)
fffff880`01897000 fffff880`018a7000   aswTdi   aswTdi.SYS   Tue Sep 07 10:52:27 2010 (4C8651AB)
fffff880`0bb05000 fffff880`0bb10000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00c2a000 fffff880`00c33000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c33000 fffff880`00c5d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04462000 fffff880`045d1000   athrx    athrx.sys    Wed Jul 08 20:49:13 2009 (4A553E89)
fffff960`00850000 fffff960`008b1000   ATMFD    ATMFD.DLL    Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`019ce000 fffff880`019d5000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`041e6000 fffff880`041f7000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`09590000 fffff880`095ae000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00740000 fffff960`00767000   cdd      cdd.dll      unavailable (00000000)
fffff880`0196e000 fffff880`01998000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d3e000 fffff880`00dfe000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0409a000 fffff880`040ac000   circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`01908000 fffff880`01938000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ce0000 fffff880`00d3e000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0116e000 fffff880`011e1000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`0564a000 fffff880`0565a000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06fd3000 fffff880`06fe1000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04145000 fffff880`041c8000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`05f9a000 fffff880`05fcf000   CT20XUT  CT20XUT.SYS  Wed Jun 03 14:01:05 2009 (4A26BA61)
fffff880`05eec000 fffff880`05f9a000   ctac32k  ctac32k.sys  Wed Jul 02 04:38:22 2008 (486B3E7E)
fffff880`05668000 fffff880`0570d700   ctaud2k  ctaud2k.sys  Wed Jun 03 13:59:45 2009 (4A26BA11)
fffff880`06e76000 fffff880`06fd3000   CTEXFIFX CTEXFIFX.SYS Wed Jun 03 14:01:00 2009 (4A26BA5C)
fffff880`06a00000 fffff880`06a1b000   CTHWIUT  CTHWIUT.SYS  Wed Jun 03 14:01:09 2009 (4A26BA65)
fffff880`057b0000 fffff880`057e1000   ctoss2k  ctoss2k.sys  Wed Jun 03 13:57:43 2009 (4A26B997)
fffff880`057e1000 fffff880`057e9000   ctprxy2k ctprxy2k.sys Wed Jun 03 13:59:48 2009 (4A26BA14)
fffff880`06bc7000 fffff880`06bff000   ctsfm2k  ctsfm2k.sys  Wed Jun 03 13:57:30 2009 (4A26B98A)
fffff880`041c8000 fffff880`041e6000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`04136000 fffff880`04145000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`018f2000 fffff880`01908000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`06a1b000 fffff880`06a43000   Dot4     Dot4.sys     Mon Jul 13 20:00:16 2009 (4A5BCA90)
fffff880`06e6b000 fffff880`06e75000   Dot4Prt  Dot4Prt.sys  Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`06e5b000 fffff880`06e6b000   dot4usb  dot4usb.sys  Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`0574b000 fffff880`0576d000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06fed000 fffff880`06ff6000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06fe1000 fffff880`06fed000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06e00000 fffff880`06e13000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06e13000 fffff880`06e1f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`042f3000 fffff880`043e7000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04200000 fffff880`04246000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`05ea2000 fffff880`05eec000   emupia2k emupia2k.sys Wed Jun 03 13:57:22 2009 (4A26B982)
fffff880`010fc000 fffff880`01110000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010b0000 fffff880`010fc000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013e4000 fffff880`013ee000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`018b8000 fffff880`018f2000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01583000 fffff880`015cd000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`042ba000 fffff880`042c7000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff880`0412b000 fffff880`04136000   GizmoDrv GizmoDrv.SYS Sun May 18 01:24:02 2008 (482FBD72)
fffff880`06a46000 fffff880`06bc7000   ha20x2k  ha20x2k.sys  Wed Jun 03 13:59:09 2009 (4A26B9ED)
fffff800`033e3000 fffff800`0342c000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`05fdd000 fffff880`05ff6000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`06ff6000 fffff880`06ffe080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`05fcf000 fffff880`05fdd000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0949b000 fffff880`09563000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f7000 fffff880`01600000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04049000 fffff880`0405f000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`042e2000 fffff880`042f1000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05e1d000 fffff880`05e2b000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bac000 fffff800`00bb6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0576d000 fffff880`057b0000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013b9000 fffff880`013d3000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01558000 fffff880`01583000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`057e9000 fffff880`057ee200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05661000 fffff880`05664d80   LGBusEnum LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
fffff880`0752a000 fffff880`0753f000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0565a000 fffff880`05661000   lmimirr  lmimirr.sys  Tue Apr 10 18:32:45 2007 (461C108D)
fffff880`098ed000 fffff880`09900000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:56 2008 (487B7E50)
fffff880`01938000 fffff880`0195b000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`099c3000 fffff880`099cd000   mbam     mbam.sys     Mon Nov 29 11:11:53 2010 (4CF3D0C9)
fffff880`00c88000 fffff880`00ccc000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`02cb0000 fffff880`02cbe000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`053e8000 fffff880`053f7000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05e00000 fffff880`05e0d000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c10000 fffff880`00c2a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01998000 fffff880`019c5000   MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`098d6000 fffff880`098e6000   MpNWMon  MpNWMon.sys  Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`095ae000 fffff880`095c6000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`095c6000 fffff880`095f3000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`09400000 fffff880`0944e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0944e000 fffff880`09471000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01850000 fffff880`0185b000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fee000 fffff880`00ff8000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01110000 fffff880`0116e000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`04120000 fffff880`0412b000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e5000 fffff880`015f7000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01406000 fffff880`014f8000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`057ef000 fffff880`057fb000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`07592000 fffff880`075a5000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04424000 fffff880`04453000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05e8d000 fffff880`05ea2000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c00000 fffff880`02c0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cce000 fffff880`02d13000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`014f8000 fffff880`01558000   NETIO    NETIO.SYS    Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`0185b000 fffff880`0186c000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04114000 fffff880`04120000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e07000 fffff800`033e3000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01216000 fffff880`013b9000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`019c5000 fffff880`019ce000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`053e6000 fffff880`053e7180   nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`0480c000 fffff880`053e5a80   nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`0753f000 fffff880`07592000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02db0000 fffff880`02dd6000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ecd000 fffff880`00ed8000   pavboot64 pavboot64.sys Mon Jun 29 07:50:23 2009 (4A48AA7F)
fffff880`00e00000 fffff880`00e33000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ec6000 fffff880`00ecd000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c00000 fffff880`00c10000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`043e7000 fffff880`043fb380   pcouffin pcouffin.sys Tue Dec 05 09:39:30 2006 (457584A2)
fffff880`013d3000 fffff880`013e4000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`09900000 fffff880`099a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05e0d000 fffff880`05e1d000   point64  point64.sys  Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`0570e000 fffff880`0574b000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ccc000 fffff880`00ce0000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`098e6000 fffff880`098ed000   RaInfo   RaInfo.sys   Fri Jan 04 13:57:14 2008 (477E818A)
fffff880`04400000 fffff880`04424000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`042c7000 fffff880`042e2000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0405f000 fffff880`04080000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04080000 fffff880`0409a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`040c3000 fffff880`04114000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`045f4000 fffff880`045ff000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01835000 fffff880`0183e000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0183e000 fffff880`01847000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01847000 fffff880`01850000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`075a5000 fffff880`075bd000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02ca6000 fffff880`02cb0000   SASDIFSV64 SASDIFSV64.SYS Mon Feb 08 19:11:52 2010 (4B70A848)
fffff880`02c9c000 fffff880`02ca6000   SASKUTIL64 SASKUTIL64.SYS Tue Feb 09 17:27:34 2010 (4B71E156)
fffff880`074d2000 fffff880`074f9000   SbieDrv  SbieDrv.sys  Mon Aug 09 06:02:43 2010 (4C5FD243)
fffff880`099a6000 fffff880`099b1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0563e000 fffff880`0564a000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c0f000 fffff880`02c2c000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015dd000 fffff880`015e5000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09840000 fffff880`098d6000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07400000 fffff880`07467000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`09563000 fffff880`09590000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`057fb000 fffff880`057fc480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04453000 fffff880`04460000   taphss   taphss.sys   Tue Sep 15 15:58:23 2009 (4AAFF1DF)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`099b1000 fffff880`099c3000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0188a000 fffff880`01897000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0186c000 fffff880`0188a000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c88000 fffff880`02c9c000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02c47000 fffff880`02c88000   truecrypt truecrypt.sys Sun Sep 05 10:23:16 2010 (4C83A7D4)
fffff960`00510000 fffff960`0051a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04023000 fffff880`04049000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`040ac000 fffff880`040be000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`06e1f000 fffff880`06e3c000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`06e3c000 fffff880`06e3df00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`042a9000 fffff880`042ba000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05e33000 fffff880`05e8d000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04253000 fffff880`042a9000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`06e4f000 fffff880`06e5b000   usbprint usbprint.sys Mon Jul 13 20:38:18 2009 (4A5BD37A)
fffff880`06e3e000 fffff880`06e4f000   usbscan  usbscan.sys  Mon Jul 13 20:35:32 2009 (4A5BD2D4)
fffff880`04246000 fffff880`04253000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e33000 fffff880`00e40000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02dec000 fffff880`02df6000   vfilter  vfilter.sys  Wed Nov 18 19:06:23 2009 (4B048BFF)
fffff880`019d5000 fffff880`019e3000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01800000 fffff880`01825000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015cd000 fffff880`015dd000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`045d1000 fffff880`045de000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02dd6000 fffff880`02dec000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02c2c000 fffff880`02c47000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01825000 fffff880`01835000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00edb000 fffff880`00f7f000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f7f000 fffff880`00f8e000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02da7000 fffff880`02db0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00080000 fffff960`00390000   win32k   win32k.sys   Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`00fe5000 fffff880`00fee000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`074b1000 fffff880`074d2000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`074f9000 fffff880`0752a000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)

Unloaded modules:
fffff880`0ba94000 fffff880`0bb05000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01938000 fffff880`01946000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01946000 fffff880`01952000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01952000 fffff880`0195b000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0195b000 fffff880`0196e000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05c63000 fffff880`05c94000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`05c8a000 fffff880`05cbb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000