Bsod driver_irql_not_less_or_equal

archieliu · 06 Jan 2011

Hi my system seems to be running fine and stable but sometimes, when i leave my computer on over night i will wake up to the BSOD saying DRIVER_IRQL_NOT_LESS_OR_EQUAL

It has happened 3 times in the past week.

Im running window 7 x64 professional
on a recently build i7 950 system.

please help!

archieliu · 06 Jan 2011

Someone please help!...

I double checked all my drivers and it shows that they are all up to date. and seems fine.

I am quite confused right now as to what is the cause of these BSOD

I am also quite worried that these BSOD will damage my computer, as in the past i had a laptop hard drive that died right after a BSOD

help...

Thank you.

CarlTR6 · 06 Jan 2011

Welcome to the forum, archieliu. I am sorry you are have problems. I looked at your three most recent dumps. Unfortunately, they do not point out a specific cause. You will have to troubleshoot by a process of elimination.

Bugcheck A, IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Bugcheck D1 (2X), DRIVER_IRQL_NOT_LESS_OR_EQUAL. Usual causes: Device driver.

You have two obsolete drivers loaded on your system. Outdated drivers can and do cause conflicts, memory corruption and BSOD's. Update or eliminate these drivers.

ISODrv64.sys Fri Nov 02 23:21:18 2007 - ISO CD-ROM Device Driver - ISODrive. Create a MultiBoot CD, an ISO image file or a virtual CD - download FREE evaluation copies of our software!. This driver is obsolete. Uninstall UltraISO or rename the driver.

PxHlpa64.sys Mon Dec 10 18:49:01 2007 - Sonic CD/DVD driver (used by many different CD/DVD programs). pxHelp20.sys programs
Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished. This driver is obsolete rename it or uninstall the software.

Eliminate these two drivers, reboot ans see how your system does. Post back and let us know. If you get another BSOD, upload it and we will go from there.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c19000 PsLoadedModuleList = 0xfffff800`02e56e50
Debug session time: Sat Jan  1 23:17:49.001 2011 (GMT-5)
System Uptime: 0 days 4:03:33.016
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {4, 2, 0, fffff80002c95285}

Probably caused by : ntkrnlmp.exe ( nt!KiProcessTimerDpcTable+4d )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000004, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002c95285, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec10e0
 0000000000000004 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KiProcessTimerDpcTable+4d
fffff800`02c95285 458b4e04        mov     r9d,dword ptr [r14+4]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  fffff88002f8c360 -- (.trap 0xfffff88002f8c360)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=fffff88002f64180
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c95285 rsp=fffff88002f8c4f0 rbp=0000000002f64180
 r8=fffff88002f8c580  r9=0000000002f64180 r10=0000000000000015
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!KiProcessTimerDpcTable+0x4d:
fffff800`02c95285 458b4e04        mov     r9d,dword ptr [r14+4] ds:00000000`00000004=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c88ca9 to fffff80002c89740

STACK_TEXT:  
fffff880`02f8c218 fffff800`02c88ca9 : 00000000`0000000a 00000000`00000004 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02f8c220 fffff800`02c87920 : fffff880`02f64180 fffff880`02f8c580 fffffa80`05aa6140 00001f80`00000200 : nt!KiBugCheckDispatch+0x69
fffff880`02f8c360 fffff800`02c95285 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
fffff880`02f8c4f0 fffff800`02c94dd6 : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`000000ff : nt!KiProcessTimerDpcTable+0x4d
fffff880`02f8c560 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiProcessExpiredTimerList+0xc6


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiProcessTimerDpcTable+4d
fffff800`02c95285 458b4e04        mov     r9d,dword ptr [r14+4]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KiProcessTimerDpcTable+4d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xA_nt!KiProcessTimerDpcTable+4d

BUCKET_ID:  X64_0xA_nt!KiProcessTimerDpcTable+4d

Followup: MachineOwner
---------

Debug session time: Thu Jan  6 08:00:00.207 2011 (GMT-5)
System Uptime: 0 days 4:48:54.111
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {b, d, 8, b}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000000b, memory referenced
Arg2: 000000000000000d, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 000000000000000b, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec70e0
 000000000000000b 

CURRENT_IRQL:  d

FAULTING_IP: 
+77eb952f01b5d888
00000000`0000000b ??              ???

PROCESS_NAME:  System

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff880031ae9d0 -- (.trap 0xfffff880031ae9d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=51dd85b3a313b500 rbx=0000000000000000 rcx=0000000000000011
rdx=000000000001b3c1 rsi=0000000000000000 rdi=0000000000000000
rip=000000000000000b rsp=fffff880031aeb60 rbp=0000000000000000
 r8=00000000000206a2  r9=0000000000000000 r10=000000000000000b
r11=fffff8800ae81970 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
00000000`0000000b ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c8eca9 to fffff80002c8f740

FAILED_INSTRUCTION_ADDRESS: 
+77eb952f01b5d888
00000000`0000000b ??              ???

STACK_TEXT:  
fffff880`031ae888 fffff800`02c8eca9 : 00000000`0000000a 00000000`0000000b 00000000`0000000d 00000000`00000008 : nt!KeBugCheckEx
fffff880`031ae890 fffff800`02c8d920 : fffff880`03186180 0000000f`6c7e5d50 fffff880`03180003 00001f80`001a0260 : nt!KiBugCheckDispatch+0x69
fffff880`031ae9d0 00000000`0000000b : fffff880`0ae81970 fffff800`02d4a1f9 00000000`00000001 00000000`00000000 : nt!KiPageFault+0x260
fffff880`031aeb60 fffff880`0ae81970 : fffff800`02d4a1f9 00000000`00000001 00000000`00000000 00000000`00000000 : 0xb
fffff880`031aeb68 fffff800`02d4a1f9 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`0ae81970
fffff880`031aeb70 fffff800`02c9d24a : 00000000`003bffb0 fffffa80`070540a8 fffff800`02e31310 00000000`00000000 : nt!PpmPerfCalculateCoreParkingMask+0x729
fffff880`031aeca0 fffff800`02c97ebc : fffff880`03186180 fffff880`00000000 00000000`00000000 fffff800`02d48230 : nt!PoIdle+0x53a
fffff880`031aed80 00000000`00000000 : fffff880`031af000 fffff880`031a9000 fffff880`031aed40 00000000`00000000 : nt!KiIdleLoop+0x2c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02c8d920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_nt!KiPageFault+260

BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_nt!KiPageFault+260

Followup: MachineOwner
---------

7: kd> lmtsmn
start             end                 module name
fffff880`01800000 fffff880`0183e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00fa0000 fffff880`00ff7000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c05000 fffff880`02c8f000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`053e4000 fffff880`053fa000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd2000 fffff880`00ddd000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07b98000 fffff880`07ba1000   aswFsBlk aswFsBlk.SYS Tue Sep 07 10:47:09 2010 (4C86506D)
fffff880`07b5e000 fffff880`07b98000   aswMonFlt aswMonFlt.sys Tue Sep 07 10:47:32 2010 (4C865084)
fffff880`02c8f000 fffff880`02c99000   aswRdr   aswRdr.SYS   Tue Sep 07 10:47:47 2010 (4C865093)
fffff880`040cd000 fffff880`040f0000   aswSP    aswSP.SYS    Tue Sep 07 10:52:07 2010 (4C865197)
fffff880`019e3000 fffff880`019f3000   aswTdi   aswTdi.SYS   Tue Sep 07 10:52:27 2010 (4C8651AB)
fffff880`08b41000 fffff880`08b4c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00c8d000 fffff880`00c96000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00da8000 fffff880`00dd2000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00960000 fffff960`009c1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`01937000 fffff880`0193e000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`040bc000 fffff880`040cd000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0811e000 fffff880`0813c000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00690000 fffff960`006b7000   cdd      cdd.dll      unavailable (00000000)
fffff880`08b75000 fffff880`08b92000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`08b9e000 fffff880`08bc8000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ee0000 fffff880`00fa0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0189e000 fffff880`018ce000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d02000 fffff880`00d60000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0112f000 fffff880`011a2000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`043dc000 fffff880`043ec000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`081f2000 fffff880`081fb000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`07a8f000 fffff880`07a9d000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0401b000 fffff880`0409e000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`0409e000 fffff880`040bc000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02dcf000 fffff880`02dde000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01888000 fffff880`0189e000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05600000 fffff880`05622000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`07aa9000 fffff880`07ab2000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07a9d000 fffff880`07aa9000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07ab2000 fffff880`07ac5000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`07a83000 fffff880`07a8f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04271000 fffff880`04365000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04365000 fffff880`043ab000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`010bd000 fffff880`010d1000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01071000 fffff880`010bd000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0184e000 fffff880`01888000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`015ac000 fffff880`015f6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`031fb000 fffff800`03244000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`043ab000 fffff880`043cf000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`08ad0000 fffff880`08ae9000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`07b17000 fffff880`07b1f080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`08a1d000 fffff880`08a2b000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`08056000 fffff880`0811e000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f6000 fffff880`015ff000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04116000 fffff880`0412c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02db3000 fffff880`02dcf000   ISODrv64 ISODrv64.sys Fri Nov 02 23:21:18 2007 (472BE92E)
fffff880`0183e000 fffff880`0184d000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08b04000 fffff880`08b12000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bc0000 fffff800`00bca000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`056b7000 fffff880`056fa000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cd000 fffff880`013e7000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05622000 fffff880`05627200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`07ba1000 fffff880`07bb6000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07b3b000 fffff880`07b5e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`07a75000 fffff880`07a83000   MBfilt64 MBfilt64.sys Thu Jul 30 23:40:32 2009 (4A7267B0)
fffff880`00caa000 fffff880`00cee000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`08b4c000 fffff880`08b5a000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`011ee000 fffff880`011fd000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08af7000 fffff880`08b04000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c73000 fffff880`00c8d000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0813c000 fffff880`08154000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`08154000 fffff880`08181000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`08181000 fffff880`081cf000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`081cf000 fffff880`081f2000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`0199c000 fffff880`019a7000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00eb3000 fffff880`00ebd000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010d1000 fffff880`0112f000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02da8000 fffff880`02db3000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`014a3000 fffff880`014b5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014ba000 fffff880`015ac000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043ec000 fffff880`043f8000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0103a000 fffff880`01069000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0577f000 fffff880`05794000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d0d000 fffff880`02d1c000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c99000 fffff880`02cde000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019a7000 fffff880`019b8000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02d9c000 fffff880`02da8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c1f000 fffff800`031fb000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122a000 fffff880`013cd000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0192e000 fffff880`01937000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0570c000 fffff880`05725000   nusb3hub nusb3hub.sys Thu Sep 30 00:00:03 2010 (4CA40B43)
fffff880`0412c000 fffff880`0415c000   nusb3xhc nusb3xhc.sys Thu Sep 30 00:00:03 2010 (4CA40B43)
fffff880`053e2000 fffff880`053e3180   nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`05794000 fffff880`057bd000   nvhda64v nvhda64v.sys Tue Sep 07 16:08:40 2010 (4C869BC8)
fffff880`04808000 fffff880`053e1a80   nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`02ce7000 fffff880`02d0d000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00eca000 fffff880`00edf000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d60000 fffff880`00d93000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00c5c000 fffff880`00c63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c63000 fffff880`00c73000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e7000 fffff880`013f8000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0865f000 fffff880`08705000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`057bd000 fffff880`057fa000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cee000 fffff880`00d02000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`08b92000 fffff880`08b9dae0   PxHlpa64 PxHlpa64.sys Mon Dec 10 18:49:01 2007 (475DD06D)
fffff880`041c4000 fffff880`041e8000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04000000 fffff880`0401b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`02dde000 fffff880`02dff000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0120a000 fffff880`01224000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d4b000 fffff880`02d9c000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`041e8000 fffff880`041f3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01981000 fffff880`0198a000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0198a000 fffff880`01993000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01993000 fffff880`0199c000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`07bb6000 fffff880`07bce000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0415e000 fffff880`041c4000   Rt64win7 Rt64win7.sys Thu Nov 11 01:35:36 2010 (4CDB8EB8)
fffff880`07821000 fffff880`07a74700   RTKVHD64 RTKVHD64.sys Wed Jul 28 06:01:36 2010 (4C500000)
fffff880`08705000 fffff880`08710000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0149b000 fffff880`014a3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08a3a000 fffff880`08ad0000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`0874f000 fffff880`087b6000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`08710000 fffff880`0873d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`043f8000 fffff880`043f9480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0873d000 fffff880`0874f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019d6000 fffff880`019e3000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019b8000 fffff880`019d6000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d37000 fffff880`02d4b000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00430000 fffff960`0043a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`040f0000 fffff880`04116000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`056fa000 fffff880`0570c000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`08a00000 fffff880`08a1d000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0415c000 fffff880`0415df00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04256000 fffff880`04267000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05725000 fffff880`0577f000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04200000 fffff880`04256000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`043cf000 fffff880`043dc000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ebd000 fffff880`00eca000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0193e000 fffff880`0194c000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0194c000 fffff880`01971000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0148b000 fffff880`0149b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00d93000 fffff880`00da8000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`011a2000 fffff880`011ee000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d1c000 fffff880`02d37000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01971000 fffff880`01981000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02cde000 fffff880`02ce7000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00380000   win32k   win32k.sys   unavailable (00000000)
fffff880`04267000 fffff880`04270000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00ff7000 fffff880`01000000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`08ae9000 fffff880`08af7000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08b5a000 fffff880`08b75000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08bc8000 fffff880`08be5000   usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07afe000 fffff880`07b17000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07af0000 fffff880`07afe000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07ad3000 fffff880`07af0000   usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07b2e000 fffff880`07b3b000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07b20000 fffff880`07b2e000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01904000 fffff880`0192e000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07ac5000 fffff880`07ad3000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08ad0000 fffff880`08b41000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018ce000 fffff880`018dc000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018dc000 fffff880`018e8000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018e8000 fffff880`018f1000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018f1000 fffff880`01904000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

archieliu · 06 Jan 2011

thank you Carl, for your help

I have uninstalled ultraISO
and renamed the PxHlpa64.sys to PxHlpa64.BAK (but now my cd/dvd drive is gone not sure if this is supoose to happen)

now I am going to leave my computer running and see if the BSOD appears again.

If no more BSOD show up after 2 - 3 days I will post another update. and presume the problem has been fixed.

Thank again.

archieliu · 07 Jan 2011

Hi guys.

my computer BSOD again, after the suggested changes were made.

this time it just says IRQL_NOT_LESS_OR_EQUAL

attached is the new zip with the newest bosd dump files etc...

now im more confused and worried than ever lol...

thanks

CarlTR6 · 07 Jan 2011

archieliu said:

thank you Carl, for your help

I have uninstalled ultraISO
and renamed the PxHlpa64.sys to PxHlpa64.BAK (but now my cd/dvd drive is gone not sure if this is supoose to happen)

Yes, renaming the driver will break the hardware or software the driver is associated with. There is an updated version of this driver. It is dated 2009. It is a Vista driver; but it seems to work with Win 7.

Thank again.

You are very welcome.

archieliu said:

Hi guys.

my computer BSOD again, after the suggested changes were made.

this time it just says IRQL_NOT_LESS_OR_EQUAL

attached is the new zip with the newest bosd dump files etc...

now im more confused and worried than ever lol...

thanks

I looked at your three dumps all dated 6 Jan. All three indicate memory corruption.

Bugcheck A, IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Bugcheck D1 (2X), DRIVER_IRQL_NOT_LESS_OR_EQUAL. Usual causes: Device driver.

Your latest dump shows these outdated drivers loaded on your system. The earliest dump on the 6th does not show PxHlpa64.sys loaded.

ISODrv64.sys Fri Nov 02 23:21:18 2007 - ISO CD-ROM Device Driver - ISODrive. Create a MultiBoot CD, an ISO image file or a virtual CD - download FREE evaluation copies of our software!. This driver is obsolete. Uninstall UltraISO or rename the driver.

PxHlpa64.sys Mon Dec 10 18:49:01 2007 - Sonic CD/DVD driver (used by many different CD/DVD programs). pxHelp20.sys programs
Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished. This driver is obsolete rename it or uninstall the software/hardware.

Using Windows Explorer, do a search of your C: drive for all instances of ISODrv64.sys. Rename each instance you find to .old. Reboot. Once you have taken care of these two drivers, we can see how your system runs and test hardware if necessary.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c07000 PsLoadedModuleList = 0xfffff800`02e44e50
Debug session time: Thu Jan  6 00:10:24.318 2011 (GMT-5)
System Uptime: 3 days 22:12:51.333
Loading Kernel Symbols
...............................................................
................................................................
....................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {8, d, 8, 8}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 000000000000000d, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000008, address which referenced memory

Debugging Details:
------------------


WORKER_ROUTINE: 
+50a9952f01a8dce4
00000000`00000008 ??              ???

WORK_ITEM:  0000000000000008

CURRENT_IRQL:  d

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff880031ae9d0 -- (.trap 0xfffff880031ae9d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=3853ed967abdf200 rbx=0000000000000000 rcx=0000000000000011
rdx=00000000000182cb rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000008 rsp=fffff880031aeb60 rbp=0000000000000000
 r8=000000000001cc5c  r9=0000000000000000 r10=0000000000000008
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
00000000`00000008 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c76ca9 to fffff80002c77740

STACK_TEXT:  
fffff880`031ae888 fffff800`02c76ca9 : 00000000`0000000a 00000000`00000008 00000000`0000000d 00000000`00000008 : nt!KeBugCheckEx
fffff880`031ae890 fffff800`02c75920 : fffff880`03186180 00000131`415344ac fffff880`03180001 00001f80`001a0260 : nt!KiBugCheckDispatch+0x69
fffff880`031ae9d0 00000000`00000008 : 00000000`00000000 fffff800`02d321f9 00000000`00000001 00000000`00000000 : nt!KiPageFault+0x260
fffff880`031aeb60 00000000`00000000 : fffff800`02d321f9 00000000`00000001 00000000`00000000 00000000`00000000 : 0x8


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02c75920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xD1_nt!KiPageFault+260

BUCKET_ID:  X64_0xD1_nt!KiPageFault+260

Followup: MachineOwner
---------

Debug session time: Thu Jan  6 08:00:00.207 2011 (GMT-5)
System Uptime: 0 days 4:48:54.111
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {b, d, 8, b}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000000b, memory referenced
Arg2: 000000000000000d, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 000000000000000b, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ec70e0
 000000000000000b 

CURRENT_IRQL:  d

FAULTING_IP: 
+50a9952f0177ddf4
00000000`0000000b ??              ???

PROCESS_NAME:  System

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff880031ae9d0 -- (.trap 0xfffff880031ae9d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=51dd85b3a313b500 rbx=0000000000000000 rcx=0000000000000011
rdx=000000000001b3c1 rsi=0000000000000000 rdi=0000000000000000
rip=000000000000000b rsp=fffff880031aeb60 rbp=0000000000000000
 r8=00000000000206a2  r9=0000000000000000 r10=000000000000000b
r11=fffff8800ae81970 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
00000000`0000000b ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c8eca9 to fffff80002c8f740

FAILED_INSTRUCTION_ADDRESS: 
+50a9952f0177ddf4
00000000`0000000b ??              ???

STACK_TEXT:  
fffff880`031ae888 fffff800`02c8eca9 : 00000000`0000000a 00000000`0000000b 00000000`0000000d 00000000`00000008 : nt!KeBugCheckEx
fffff880`031ae890 fffff800`02c8d920 : fffff880`03186180 0000000f`6c7e5d50 fffff880`03180003 00001f80`001a0260 : nt!KiBugCheckDispatch+0x69
fffff880`031ae9d0 00000000`0000000b : fffff880`0ae81970 fffff800`02d4a1f9 00000000`00000001 00000000`00000000 : nt!KiPageFault+0x260
fffff880`031aeb60 fffff880`0ae81970 : fffff800`02d4a1f9 00000000`00000001 00000000`00000000 00000000`00000000 : 0xb
fffff880`031aeb68 fffff800`02d4a1f9 : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`0ae81970
fffff880`031aeb70 fffff800`02c9d24a : 00000000`003bffb0 fffffa80`070540a8 fffff800`02e31310 00000000`00000000 : nt!PpmPerfCalculateCoreParkingMask+0x729
fffff880`031aeca0 fffff800`02c97ebc : fffff880`03186180 fffff880`00000000 00000000`00000000 fffff800`02d48230 : nt!PoIdle+0x53a
fffff880`031aed80 00000000`00000000 : fffff880`031af000 fffff880`031a9000 fffff880`031aed40 00000000`00000000 : nt!KiIdleLoop+0x2c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02c8d920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_nt!KiPageFault+260

BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_nt!KiPageFault+260

Followup: MachineOwner
---------

7: kd> lmtsmn
start             end                 module name
fffff880`01800000 fffff880`0183e000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00fa0000 fffff880`00ff7000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c05000 fffff880`02c8f000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`053e4000 fffff880`053fa000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd2000 fffff880`00ddd000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07b98000 fffff880`07ba1000   aswFsBlk aswFsBlk.SYS Tue Sep 07 10:47:09 2010 (4C86506D)
fffff880`07b5e000 fffff880`07b98000   aswMonFlt aswMonFlt.sys Tue Sep 07 10:47:32 2010 (4C865084)
fffff880`02c8f000 fffff880`02c99000   aswRdr   aswRdr.SYS   Tue Sep 07 10:47:47 2010 (4C865093)
fffff880`040cd000 fffff880`040f0000   aswSP    aswSP.SYS    Tue Sep 07 10:52:07 2010 (4C865197)
fffff880`019e3000 fffff880`019f3000   aswTdi   aswTdi.SYS   Tue Sep 07 10:52:27 2010 (4C8651AB)
fffff880`08b41000 fffff880`08b4c000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00c8d000 fffff880`00c96000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00da8000 fffff880`00dd2000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00960000 fffff960`009c1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`01937000 fffff880`0193e000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`040bc000 fffff880`040cd000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0811e000 fffff880`0813c000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00690000 fffff960`006b7000   cdd      cdd.dll      unavailable (00000000)
fffff880`08b75000 fffff880`08b92000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`08b9e000 fffff880`08bc8000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ee0000 fffff880`00fa0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0189e000 fffff880`018ce000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d02000 fffff880`00d60000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0112f000 fffff880`011a2000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`043dc000 fffff880`043ec000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`081f2000 fffff880`081fb000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 08:33:36 2010 (4CD94DB0)
fffff880`07a8f000 fffff880`07a9d000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0401b000 fffff880`0409e000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`0409e000 fffff880`040bc000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02dcf000 fffff880`02dde000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01888000 fffff880`0189e000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05600000 fffff880`05622000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`07aa9000 fffff880`07ab2000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07a9d000 fffff880`07aa9000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07ab2000 fffff880`07ac5000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`07a83000 fffff880`07a8f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04271000 fffff880`04365000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04365000 fffff880`043ab000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`010bd000 fffff880`010d1000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01071000 fffff880`010bd000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0184e000 fffff880`01888000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`015ac000 fffff880`015f6000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`031fb000 fffff800`03244000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`043ab000 fffff880`043cf000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`08ad0000 fffff880`08ae9000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`07b17000 fffff880`07b1f080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`08a1d000 fffff880`08a2b000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`08056000 fffff880`0811e000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f6000 fffff880`015ff000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04116000 fffff880`0412c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`02db3000 fffff880`02dcf000   ISODrv64 ISODrv64.sys Fri Nov 02 23:21:18 2007 (472BE92E)
fffff880`0183e000 fffff880`0184d000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08b04000 fffff880`08b12000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bc0000 fffff800`00bca000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`056b7000 fffff880`056fa000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cd000 fffff880`013e7000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05622000 fffff880`05627200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`07ba1000 fffff880`07bb6000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07b3b000 fffff880`07b5e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`07a75000 fffff880`07a83000   MBfilt64 MBfilt64.sys Thu Jul 30 23:40:32 2009 (4A7267B0)
fffff880`00caa000 fffff880`00cee000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`08b4c000 fffff880`08b5a000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`011ee000 fffff880`011fd000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08af7000 fffff880`08b04000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c73000 fffff880`00c8d000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0813c000 fffff880`08154000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`08154000 fffff880`08181000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`08181000 fffff880`081cf000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`081cf000 fffff880`081f2000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`0199c000 fffff880`019a7000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00eb3000 fffff880`00ebd000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010d1000 fffff880`0112f000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02da8000 fffff880`02db3000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`014a3000 fffff880`014b5000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014ba000 fffff880`015ac000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043ec000 fffff880`043f8000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0103a000 fffff880`01069000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0577f000 fffff880`05794000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d0d000 fffff880`02d1c000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c99000 fffff880`02cde000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019a7000 fffff880`019b8000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02d9c000 fffff880`02da8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c1f000 fffff800`031fb000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122a000 fffff880`013cd000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0192e000 fffff880`01937000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0570c000 fffff880`05725000   nusb3hub nusb3hub.sys Thu Sep 30 00:00:03 2010 (4CA40B43)
fffff880`0412c000 fffff880`0415c000   nusb3xhc nusb3xhc.sys Thu Sep 30 00:00:03 2010 (4CA40B43)
fffff880`053e2000 fffff880`053e3180   nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`05794000 fffff880`057bd000   nvhda64v nvhda64v.sys Tue Sep 07 16:08:40 2010 (4C869BC8)
fffff880`04808000 fffff880`053e1a80   nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`02ce7000 fffff880`02d0d000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00eca000 fffff880`00edf000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00d60000 fffff880`00d93000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00c5c000 fffff880`00c63000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c63000 fffff880`00c73000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e7000 fffff880`013f8000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0865f000 fffff880`08705000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`057bd000 fffff880`057fa000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cee000 fffff880`00d02000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`08b92000 fffff880`08b9dae0   PxHlpa64 PxHlpa64.sys Mon Dec 10 18:49:01 2007 (475DD06D)
fffff880`041c4000 fffff880`041e8000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04000000 fffff880`0401b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`02dde000 fffff880`02dff000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`0120a000 fffff880`01224000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d4b000 fffff880`02d9c000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`041e8000 fffff880`041f3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01981000 fffff880`0198a000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0198a000 fffff880`01993000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01993000 fffff880`0199c000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`07bb6000 fffff880`07bce000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0415e000 fffff880`041c4000   Rt64win7 Rt64win7.sys Thu Nov 11 01:35:36 2010 (4CDB8EB8)
fffff880`07821000 fffff880`07a74700   RTKVHD64 RTKVHD64.sys Wed Jul 28 06:01:36 2010 (4C500000)
fffff880`08705000 fffff880`08710000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0149b000 fffff880`014a3000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`08a3a000 fffff880`08ad0000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`0874f000 fffff880`087b6000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`08710000 fffff880`0873d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`043f8000 fffff880`043f9480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0873d000 fffff880`0874f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019d6000 fffff880`019e3000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019b8000 fffff880`019d6000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d37000 fffff880`02d4b000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00430000 fffff960`0043a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`040f0000 fffff880`04116000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`056fa000 fffff880`0570c000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`08a00000 fffff880`08a1d000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`0415c000 fffff880`0415df00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04256000 fffff880`04267000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05725000 fffff880`0577f000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04200000 fffff880`04256000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`043cf000 fffff880`043dc000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ebd000 fffff880`00eca000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0193e000 fffff880`0194c000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0194c000 fffff880`01971000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0148b000 fffff880`0149b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00d93000 fffff880`00da8000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`011a2000 fffff880`011ee000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d1c000 fffff880`02d37000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01971000 fffff880`01981000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e00000 fffff880`00ea4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ea4000 fffff880`00eb3000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02cde000 fffff880`02ce7000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00070000 fffff960`00380000   win32k   win32k.sys   unavailable (00000000)
fffff880`04267000 fffff880`04270000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00ff7000 fffff880`01000000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`08ae9000 fffff880`08af7000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08b5a000 fffff880`08b75000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08bc8000 fffff880`08be5000   usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07afe000 fffff880`07b17000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07af0000 fffff880`07afe000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07ad3000 fffff880`07af0000   usbccgp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07b2e000 fffff880`07b3b000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07b20000 fffff880`07b2e000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01904000 fffff880`0192e000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`07ac5000 fffff880`07ad3000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`08ad0000 fffff880`08b41000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018ce000 fffff880`018dc000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018dc000 fffff880`018e8000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018e8000 fffff880`018f1000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018f1000 fffff880`01904000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000