Code:
Windows 7 Kernel Version 7600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82809000 PsLoadedModuleList = 0x82948570
Debug session time: Sun Jan 9 00:30:01.134 2011 (GMT-5)
System Uptime: 0 days 3:06:14.525
Loading Kernel Symbols
...............................................................
................................................................
................................
Loading User Symbols
Loading unloaded module list
.....
kd> !Analyze
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {b525a9ac, 0, 959afc10, 0}
Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!HwndLookupCompareTableData+d )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: b525a9ac, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 959afc10, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: GetPointerFromAddress: unable to read from 82968700
Unable to read MiSystemVaType memory at 829480c0
b525a9ac
FAULTING_IP:
win32k!HwndLookupCompareTableData+d
959afc10 8b09 mov ecx,dword ptr [ecx]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
TRAP_FRAME: 9f68e684 -- (.trap 0xffffffff9f68e684)
ErrCode = 00000000
eax=000100c6 ebx=00000000 ecx=b525a9ac edx=00000001 esi=b525a994 edi=ff9fb008
eip=959afc10 esp=9f68e6f8 ebp=9f68e6f8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
win32k!HwndLookupCompareTableData+0xd:
959afc10 8b09 mov ecx,dword ptr [ecx] ds:0023:b525a9ac=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82841988 to 82867c46
STACK_TEXT:
9f68e66c 82841988 00000000 b525a9ac 00000000 nt!MmAccessFault+0xbf
9f68e66c 959afc10 00000000 b525a9ac 00000000 nt!KiTrap0E+0xdc
9f68e6f8 828a344a ff9fb008 9f68e754 b525a9ac win32k!HwndLookupCompareTableData+0xd
9f68e710 828bf767 9f68e754 9f68e748 00200000 nt!SwapSplayLinks+0xf6
9f68e728 828bf7aa ff9fb008 9f68e754 9f68e748 nt!RtlLookupElementGenericTableFull+0x16
9f68e740 959afc5c ff9fb008 9f68e754 9f68e808 nt!RtlLookupElementGenericTable+0x18
9f68e75c 959af869 ff9fb030 00000001 9f68e828 win32k!DWMSPRITEREF::hspLookupWindow+0x31
9f68e76c 959aefd0 000100c6 00000000 fd5fc728 win32k!DWMALTSPRITEREF::DWMALTSPRITEREF+0x19
9f68e828 959afba8 ffb89008 000100c6 00000000 win32k!GreUpdateSprite+0xb7
9f68ea64 959c8ce3 9f68eabc 959cc166 9f68eb3c win32k!GreUpdateSpriteDevLockEnd+0x320
9f68ea6c 959cc166 9f68eb3c fd63d428 9f68ea94 win32k!DEVLOCKBLTOBJ::vFlushSpriteUpdates+0x33
9f68ea80 959cce62 4801098a 38010f95 fd650938 win32k!DEVLOCKBLTOBJ::~DEVLOCKBLTOBJ+0x25
9f68eb50 95958ee8 ffbbd550 95b052f0 ffbbd550 win32k!NtGdiBitBltInternal+0x73b
9f68ebb0 95959e0f fd650938 38010f95 9f68ebd0 win32k!CenterOrStretchWallpaper+0xa3
9f68ebe4 9594fb1e fd650938 fe800618 38010f95 win32k!xxxDrawWallpaper+0x86
9f68ec2c 95973213 ff5d1d28 38010f95 9f68ec60 win32k!xxxDesktopPaintCallback+0x166
9f68ec90 9594f91d 38010f95 00000000 9594f9b8 win32k!xxxEnumDisplayMonitors+0x259
9f68ecec 9595481d fe800618 38010f95 fd650938 win32k!xxxInternalPaintDesktop+0x9c
9f68ed28 8283e79a 38010f95 0016f6c0 775d64f4 win32k!NtUserPaintDesktop+0x70
9f68ed28 775d64f4 38010f95 0016f6c0 775d64f4 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0016f6c0 00000000 00000000 00000000 00000000 0x775d64f4
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!HwndLookupCompareTableData+d
959afc10 8b09 mov ecx,dword ptr [ecx]
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: win32k!HwndLookupCompareTableData+d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4cbe5b31
FAILURE_BUCKET_ID: 0x50_win32k!HwndLookupCompareTableData+d
BUCKET_ID: 0x50_win32k!HwndLookupCompareTableData+d
Followup: MachineOwner
---------
Debug session time: Sun Jan 9 10:30:07.621 2011 (GMT-5)
System Uptime: 0 days 1:44:32.027
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
.......
kd> !Analyze
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {c09d94e8, 1, 828bc1b1, 2}
Probably caused by : memory_corruption ( nt!MiReplaceWsleHash+71 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c09d94e8, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 828bc1b1, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82999700
Unable to read MiSystemVaType memory at 829790c0
c09d94e8
FAULTING_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: Ad-Aware.exe
CURRENT_IRQL: 0
TRAP_FRAME: 8f3e9bac -- (.trap 0xffffffff8f3e9bac)
ErrCode = 00000002
eax=c0801000 ebx=0007613a ecx=00000003 edx=c0800001 esi=c0402000 edi=8466ac70
eip=828bc1b1 esp=8f3e9c20 ebp=8f3e9c24 iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216
nt!MiReplaceWsleHash+0x71:
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx ds:0023:c09d94e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82872988 to 82898c46
STACK_TEXT:
8f3e9b94 82872988 00000001 c09d94e8 00000000 nt!MmAccessFault+0xbf
8f3e9b94 828bc1b1 00000001 c09d94e8 00000000 nt!KiTrap0E+0xdc
8f3e9c24 828b8326 7613a005 00000003 0000093a nt!MiReplaceWsleHash+0x71
8f3e9c5c 828b0899 8466ac70 8466aa80 00000000 nt!MiRemoveWorkingSetPages+0xdd
8f3e9c88 82a4b296 99d445e9 00000000 84674930 nt!MmCleanProcessAddressSpace+0x493
8f3e9cfc 82a52cd9 00000000 ffffffff 0012fe80 nt!PspExitThread+0x683
8f3e9d24 8286f79a ffffffff 00000012 0012fe8c nt!NtTerminateProcess+0x1fa
8f3e9d24 778664f4 ffffffff 00000012 0012fe8c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012fe8c 00000000 00000000 00000000 00000000 0x778664f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!MiReplaceWsleHash+71
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3f9b
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c09d94e8, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 828bc1b1, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82999700
Unable to read MiSystemVaType memory at 829790c0
c09d94e8
FAULTING_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: Ad-Aware.exe
CURRENT_IRQL: 0
TRAP_FRAME: 8f3e9bac -- (.trap 0xffffffff8f3e9bac)
ErrCode = 00000002
eax=c0801000 ebx=0007613a ecx=00000003 edx=c0800001 esi=c0402000 edi=8466ac70
eip=828bc1b1 esp=8f3e9c20 ebp=8f3e9c24 iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216
nt!MiReplaceWsleHash+0x71:
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx ds:0023:c09d94e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82872988 to 82898c46
STACK_TEXT:
8f3e9b94 82872988 00000001 c09d94e8 00000000 nt!MmAccessFault+0xbf
8f3e9b94 828bc1b1 00000001 c09d94e8 00000000 nt!KiTrap0E+0xdc
8f3e9c24 828b8326 7613a005 00000003 0000093a nt!MiReplaceWsleHash+0x71
8f3e9c5c 828b0899 8466ac70 8466aa80 00000000 nt!MiRemoveWorkingSetPages+0xdd
8f3e9c88 82a4b296 99d445e9 00000000 84674930 nt!MmCleanProcessAddressSpace+0x493
8f3e9cfc 82a52cd9 00000000 ffffffff 0012fe80 nt!PspExitThread+0x683
8f3e9d24 8286f79a ffffffff 00000012 0012fe8c nt!NtTerminateProcess+0x1fa
8f3e9d24 778664f4 ffffffff 00000012 0012fe8c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012fe8c 00000000 00000000 00000000 00000000 0x778664f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!MiReplaceWsleHash+71
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3f9b
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
Followup: MachineOwner
---------
kd> lmtsmn
start end module name
8df66000 8df92000 1394ohci 1394ohci.sys Mon Jul 13 19:51:59 2009 (4A5BC89F)
875be000 87606000 ACPI ACPI.sys Mon Jul 13 19:11:11 2009 (4A5BBF0F)
87b12000 87b6c000 afd afd.sys Mon Jul 13 19:12:34 2009 (4A5BBF62)
8dfdc000 8dfee000 AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
8dcf4000 8dd05000 amdppm amdppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
87755000 8775e000 amdxata amdxata.sys Tue May 19 13:57:35 2009 (4A12F30F)
898ff000 89901b00 aswFsBlk aswFsBlk.SYS Fri Dec 31 11:27:02 2010 (4D1E0456)
898c8000 898ff000 aswMonFlt aswMonFlt.sys Fri Dec 31 11:27:12 2010 (4D1E0460)
87fad000 87fb1200 aswRdr aswRdr.SYS Fri Dec 31 11:27:24 2010 (4D1E046C)
8dc8c000 8dcd2200 aswSP aswSP.SYS Fri Dec 31 15:00:16 2010 (4D1E3650)
87fa3000 87facf00 aswTdi aswTdi.SYS Fri Dec 31 11:29:58 2010 (4D1E0506)
89bb8000 89bc1000 asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
876e3000 876ec000 atapi atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
876ec000 8770f000 ataport ataport.SYS Mon Jul 13 19:11:18 2009 (4A5BBF16)
8f435000 8fadb000 atikmdag atikmdag.sys Thu Nov 25 21:43:13 2010 (4CEF1EC1)
8df92000 8dfcf000 atikmpag atikmpag.sys Thu Nov 25 21:16:27 2010 (4CEF187B)
8ebfb000 8ebfe000 BdaSup BdaSup.SYS Mon Jul 13 19:51:23 2009 (4A5BC87B)
87f0f000 87f16000 Beep Beep.SYS Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8dc7e000 8dc8c000 blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8744a000 87452000 BOOTVID BOOTVID.dll Mon Jul 13 21:04:34 2009 (4A5BD9A2)
899ea000 89a03000 bowser bowser.sys Mon Jul 13 19:14:21 2009 (4A5BBFCD)
95f40000 95f5e000 cdd cdd.dll unavailable (00000000)
87ee9000 87f08000 cdrom cdrom.sys Mon Jul 13 19:11:24 2009 (4A5BBF1C)
87494000 8753f000 CI CI.dll Mon Jul 13 21:09:28 2009 (4A5BDAC8)
87e92000 87eb7000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
87452000 87494000 CLFS CLFS.SYS Mon Jul 13 19:11:10 2009 (4A5BBF0E)
87984000 879e1000 cng cng.sys Mon Jul 13 19:32:55 2009 (4A5BC427)
8dfcf000 8dfdc000 CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
8fcc8000 8fcd5000 crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8dc02000 8dc66000 csc csc.sys Mon Jul 13 19:15:08 2009 (4A5BBFFC)
8dc66000 8dc7e000 dfsc dfsc.sys Mon Jul 13 19:14:16 2009 (4A5BBFC8)
87800000 8780c000 discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
87e81000 87e92000 disk disk.sys Mon Jul 13 19:11:28 2009 (4A5BBF20)
8de68000 8de81000 drmk drmk.sys Mon Jul 13 20:36:05 2009 (4A5BD2F5)
8fce0000 8fce9000 dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8fcd5000 8fce0000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8fce9000 8fcfa000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
8fd13000 8fd1d000 Dxapi Dxapi.sys Mon Jul 13 19:25:25 2009 (4A5BC265)
8fadb000 8fb92000 dxgkrnl dxgkrnl.sys Thu Oct 01 20:48:33 2009 (4AC54DE1)
8fb92000 8fbcb000 dxgmms1 dxgmms1.sys Mon Jul 13 19:25:25 2009 (4A5BC265)
8fbcb000 8fbd6000 fdc fdc.sys unavailable (00000000)
87792000 877a3000 fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8fcad000 8fcb7000 flpydisk flpydisk.sys unavailable (00000000)
8775e000 87792000 fltmgr fltmgr.sys Mon Jul 13 19:11:13 2009 (4A5BBF11)
879ef000 879f8000 Fs_Rec Fs_Rec.sys unavailable (00000000)
87e4f000 87e81000 fvevol fvevol.sys Fri Sep 25 22:24:21 2009 (4ABD7B55)
87d6d000 87d9e000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
82803000 8283a000 hal halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
8df06000 8df65880 hcw18bda hcw18bda.sys Thu May 28 11:46:17 2009 (4A1EB1C9)
89965000 899ea000 HTTP HTTP.sys Mon Jul 13 19:12:53 2009 (4A5BBF75)
87e47000 87e4f000 hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
8f400000 8f418000 i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
8f425000 8f432000 kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
80bca000 80bd2000 kdcom kdcom.dll Mon Jul 13 21:08:58 2009 (4A5BDAAA)
89bc1000 89bc3180 KernExplorer KernExplorer.sys Mon Oct 25 03:11:19 2010 (4CC52D97)
8de81000 8deb5000 ks ks.sys Wed Mar 03 22:57:52 2010 (4B8F2FC0)
87971000 87984000 ksecdd ksecdd.sys Mon Jul 13 19:11:56 2009 (4A5BBF3C)
87aed000 87b12000 ksecpkg ksecpkg.sys Thu Dec 10 23:04:22 2009 (4B21C4C6)
877a3000 877b1100 Lbd Lbd.sys Tue May 25 03:45:27 2010 (4BFB8017)
89902000 89912000 lltdio lltdio.sys Mon Jul 13 19:53:18 2009 (4A5BC8EE)
898ad000 898c8000 luafv luafv.sys Mon Jul 13 19:15:44 2009 (4A5BC020)
89bb3000 89bb7a80 LVPr2Mon LVPr2Mon.sys Fri May 07 21:36:25 2010 (4BE4C019)
8985e000 898a1a00 lvrs lvrs.sys Tue Nov 09 21:38:10 2010 (4CDA0592)
8942c000 89849c80 lvuvc lvuvc.sys Tue Nov 09 21:38:23 2010 (4CDA059F)
8742e000 87439000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 19:13:13 2009 (4A5BBF89)
898a2000 898ad000 monitor monitor.sys Mon Jul 13 19:25:58 2009 (4A5BC286)
8f418000 8f425000 mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
876cd000 876e3000 mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
89a03000 89a15000 mpsdrv mpsdrv.sys Mon Jul 13 19:52:52 2009 (4A5BC8D4)
89a15000 89a38000 mrxsmb mrxsmb.sys Sat Feb 27 02:32:02 2010 (4B88CA72)
89a38000 89a73000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
89a73000 89a8e000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
87f68000 87f73000 Msfs Msfs.SYS Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8760f000 87617000 msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
87946000 87971000 msrpc msrpc.sys unavailable (00000000)
87bf4000 87bfe000 mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
87e37000 87e47000 mup mup.sys Mon Jul 13 19:14:14 2009 (4A5BBFC6)
879f8000 87aaf000 ndis ndis.sys Mon Jul 13 19:12:24 2009 (4A5BBF58)
8dfee000 8dff9000 ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
877ce000 877f0000 ndiswan ndiswan.sys Mon Jul 13 19:54:34 2009 (4A5BC93A)
8fcb7000 8fcc8000 NDProxy NDProxy.SYS Mon Jul 13 19:54:27 2009 (4A5BC933)
87feb000 87ff9000 netbios netbios.sys Mon Jul 13 19:53:54 2009 (4A5BC912)
87fb2000 87fe4000 netbt netbt.sys Mon Jul 13 19:12:18 2009 (4A5BBF52)
87aaf000 87aed000 NETIO NETIO.SYS Mon Jul 13 19:12:35 2009 (4A5BBF63)
87f73000 87f81000 Npfs Npfs.SYS Mon Jul 13 19:11:31 2009 (4A5BBF23)
87bea000 87bf4000 nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
8283a000 82c3a000 nt ntkrnlmp.exe Fri Jun 18 23:55:07 2010 (4C1C3F9B)
87817000 87946000 Ntfs Ntfs.sys Mon Jul 13 19:12:05 2009 (4A5BBF45)
87f08000 87f0f000 Null Null.SYS unavailable (00000000)
87e1b000 87e37000 nv_agp nv_agp.sys Mon Jul 13 19:25:50 2009 (4A5BC27E)
8de2b000 8de38080 nvax nvax.sys Wed Apr 13 15:32:41 2005 (425D73D9)
8dd69000 8de2b000 nvm60x32 nvm60x32.sys Sat Oct 07 00:30:59 2006 (45272D83)
8f432000 8f434800 nvmpu401 nvmpu401.sys Wed Apr 13 15:34:22 2005 (425D743E)
8fc53000 8fc5ab00 nvoclock nvoclock.sys Tue Sep 15 17:59:22 2009 (4AB00E3A)
87c00000 87c1f000 pacer pacer.sys Mon Jul 13 19:53:58 2009 (4A5BC916)
8fbe0000 8fbf8000 parport parport.sys Mon Jul 13 19:45:34 2009 (4A5BC71E)
8764c000 8765d000 partmgr partmgr.sys Mon Jul 13 19:11:35 2009 (4A5BBF27)
89a8e000 89a95000 parvdm parvdm.sys unavailable (00000000)
87617000 87641000 pci pci.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
876b8000 876bf000 pciide pciide.sys Mon Jul 13 19:11:19 2009 (4A5BBF17)
876bf000 876cd000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:11:15 2009 (4A5BBF13)
879e1000 879ef000 pcw pcw.sys Mon Jul 13 19:11:10 2009 (4A5BBF0E)
89a95000 89b2c000 peauth peauth.sys Mon Jul 13 20:35:44 2009 (4A5BD2E0)
8de39000 8de68000 portcls portcls.sys Mon Jul 13 19:51:00 2009 (4A5BC864)
87439000 8744a000 PSHED PSHED.dll Mon Jul 13 21:09:36 2009 (4A5BDAD0)
877b6000 877ce000 rasl2tp rasl2tp.sys Mon Jul 13 19:54:33 2009 (4A5BC939)
87400000 87418000 raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
8fc19000 8fc30000 raspptp raspptp.sys Mon Jul 13 19:54:47 2009 (4A5BC947)
8fc30000 8fc47000 rassstp rassstp.sys Mon Jul 13 19:54:57 2009 (4A5BC951)
87ba9000 87bea000 rdbss rdbss.sys Mon Jul 13 19:14:26 2009 (4A5BBFD2)
8fc47000 8fc51000 rdpbus rdpbus.sys Mon Jul 13 20:02:40 2009 (4A5BCB20)
87f50000 87f58000 RDPCDD RDPCDD.sys Mon Jul 13 20:01:40 2009 (4A5BCAE4)
87f58000 87f60000 rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
87f60000 87f68000 rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
87dee000 87e1b000 rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
89912000 89925000 rspndr rspndr.sys Mon Jul 13 19:53:20 2009 (4A5BC8F0)
8e801000 8ebfa200 RTKVAC RTKVAC.SYS Thu Jun 18 15:36:37 2009 (4A3A9745)
8772f000 87755000 SCSIPORT SCSIPORT.SYS Mon Jul 13 19:45:55 2009 (4A5BC733)
89b2c000 89b36000 secdrv secdrv.SYS Wed Sep 13 09:18:32 2006 (45080528)
8fbd6000 8fbe0000 serenum serenum.sys Mon Jul 13 19:45:27 2009 (4A5BC717)
87b6c000 87b86000 serial serial.sys Mon Jul 13 19:45:33 2009 (4A5BC71D)
8770f000 8772f000 SI3112r SI3112r.sys Thu Aug 16 22:00:39 2007 (46C50147)
877b2000 877b5100 SiWinAcc SiWinAcc.sys Thu Jun 14 20:02:27 2007 (4671D713)
87de6000 87dee000 spldr spldr.sys Mon May 11 12:13:47 2009 (4A084EBB)
8fd34000 8fd85000 srv srv.sys Thu Aug 26 23:31:26 2010 (4C77318E)
89b64000 89bb3000 srv2 srv2.sys Thu Aug 26 23:30:45 2010 (4C773165)
89b36000 89b57000 srvnet srvnet.sys Thu Aug 26 23:30:39 2010 (4C77315F)
8fc51000 8fc52380 swenum swenum.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
87c24000 87d6d000 tcpip tcpip.sys Sun Jun 13 23:36:59 2010 (4C15A3DB)
89b57000 89b64000 tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
87f98000 87fa3000 TDI TDI.SYS Mon Jul 13 19:12:12 2009 (4A5BBF4C)
87f81000 87f98000 tdx tdx.sys Mon Jul 13 19:12:10 2009 (4A5BBF4A)
87b99000 87ba9000 termdd termdd.sys Mon Jul 13 20:01:35 2009 (4A5BCADF)
95f10000 95f19000 TSDDD TSDDD.dll unavailable (00000000)
8dcd3000 8dcf4000 tunnel tunnel.sys Mon Jul 13 19:54:03 2009 (4A5BC91B)
89925000 89965000 udfs udfs.sys Mon Jul 13 19:14:09 2009 (4A5BBFC1)
8fc5b000 8fc69000 umbus umbus.sys Mon Jul 13 19:51:38 2009 (4A5BC88A)
8984a000 8985db00 usbaudio usbaudio.sys Mon Jul 13 19:51:23 2009 (4A5BC87B)
8fd1d000 8fd34000 usbccgp usbccgp.sys Mon Jul 13 19:51:31 2009 (4A5BC883)
8fd11000 8fd12700 USBD USBD.SYS Mon Jul 13 19:51:05 2009 (4A5BC869)
8dd5a000 8dd69000 usbehci usbehci.sys Mon Jul 13 19:51:14 2009 (4A5BC872)
8fc69000 8fcad000 usbhub usbhub.sys Mon Jul 13 19:52:06 2009 (4A5BC8A6)
8dd05000 8dd0f000 usbohci usbohci.sys Mon Jul 13 19:51:14 2009 (4A5BC872)
8dd0f000 8dd5a000 USBPORT USBPORT.SYS Mon Jul 13 19:51:13 2009 (4A5BC871)
87641000 8764c000 vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
87f16000 87f22000 vga vga.sys Mon Jul 13 19:25:50 2009 (4A5BC27E)
87f22000 87f43000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
87d9e000 87da7000 vmstorfl vmstorfl.sys unavailable (00000000)
8765d000 8766d000 volmgr volmgr.sys Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8766d000 876b8000 volmgrx volmgrx.sys Mon Jul 13 19:11:41 2009 (4A5BBF2D)
87da7000 87de6000 volsnap volsnap.sys Mon Jul 13 19:11:34 2009 (4A5BBF26)
87b86000 87b99000 wanarp wanarp.sys Mon Jul 13 19:55:02 2009 (4A5BC956)
87f43000 87f50000 watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8753f000 875b0000 Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
875b0000 875be000 WDFLDR WDFLDR.SYS Mon Jul 13 19:11:25 2009 (4A5BBF1D)
87fe4000 87feb000 wfplwf wfplwf.sys Mon Jul 13 19:53:51 2009 (4A5BC90F)
95cb0000 95efb000 win32k win32k.sys Tue Oct 19 23:00:01 2010 (4CBE5B31)
87606000 8760f000 WMILIB WMILIB.SYS Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8deb5000 8df06000 yk62x86 yk62x86.sys Mon Sep 28 02:33:34 2009 (4AC058BE)
Unloaded modules:
8fcfa000 8fd11000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8fdef000 8fe59000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8fd85000 8fdef000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
87eb7000 87ec4000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
87ec4000 87ecf000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
87ecf000 87ed8000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
87ed8000 87ee9000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
Debug session time: Sun Jan 9 10:30:07.621 2011 (GMT-5)
System Uptime: 0 days 1:44:32.027
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
.......
kd> !Analyze
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {c09d94e8, 1, 828bc1b1, 2}
Probably caused by : memory_corruption ( nt!MiReplaceWsleHash+71 )
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c09d94e8, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 828bc1b1, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82999700
Unable to read MiSystemVaType memory at 829790c0
c09d94e8
FAULTING_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: Ad-Aware.exe
CURRENT_IRQL: 0
TRAP_FRAME: 8f3e9bac -- (.trap 0xffffffff8f3e9bac)
ErrCode = 00000002
eax=c0801000 ebx=0007613a ecx=00000003 edx=c0800001 esi=c0402000 edi=8466ac70
eip=828bc1b1 esp=8f3e9c20 ebp=8f3e9c24 iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216
nt!MiReplaceWsleHash+0x71:
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx ds:0023:c09d94e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82872988 to 82898c46
STACK_TEXT:
8f3e9b94 82872988 00000001 c09d94e8 00000000 nt!MmAccessFault+0xbf
8f3e9b94 828bc1b1 00000001 c09d94e8 00000000 nt!KiTrap0E+0xdc
8f3e9c24 828b8326 7613a005 00000003 0000093a nt!MiReplaceWsleHash+0x71
8f3e9c5c 828b0899 8466ac70 8466aa80 00000000 nt!MiRemoveWorkingSetPages+0xdd
8f3e9c88 82a4b296 99d445e9 00000000 84674930 nt!MmCleanProcessAddressSpace+0x493
8f3e9cfc 82a52cd9 00000000 ffffffff 0012fe80 nt!PspExitThread+0x683
8f3e9d24 8286f79a ffffffff 00000012 0012fe8c nt!NtTerminateProcess+0x1fa
8f3e9d24 778664f4 ffffffff 00000012 0012fe8c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012fe8c 00000000 00000000 00000000 00000000 0x778664f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!MiReplaceWsleHash+71
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3f9b
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
Followup: MachineOwner
---------
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c09d94e8, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 828bc1b1, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82999700
Unable to read MiSystemVaType memory at 829790c0
c09d94e8
FAULTING_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: Ad-Aware.exe
CURRENT_IRQL: 0
TRAP_FRAME: 8f3e9bac -- (.trap 0xffffffff8f3e9bac)
ErrCode = 00000002
eax=c0801000 ebx=0007613a ecx=00000003 edx=c0800001 esi=c0402000 edi=8466ac70
eip=828bc1b1 esp=8f3e9c20 ebp=8f3e9c24 iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216
nt!MiReplaceWsleHash+0x71:
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx ds:0023:c09d94e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82872988 to 82898c46
STACK_TEXT:
8f3e9b94 82872988 00000001 c09d94e8 00000000 nt!MmAccessFault+0xbf
8f3e9b94 828bc1b1 00000001 c09d94e8 00000000 nt!KiTrap0E+0xdc
8f3e9c24 828b8326 7613a005 00000003 0000093a nt!MiReplaceWsleHash+0x71
8f3e9c5c 828b0899 8466ac70 8466aa80 00000000 nt!MiRemoveWorkingSetPages+0xdd
8f3e9c88 82a4b296 99d445e9 00000000 84674930 nt!MmCleanProcessAddressSpace+0x493
8f3e9cfc 82a52cd9 00000000 ffffffff 0012fe80 nt!PspExitThread+0x683
8f3e9d24 8286f79a ffffffff 00000012 0012fe8c nt!NtTerminateProcess+0x1fa
8f3e9d24 778664f4 ffffffff 00000012 0012fe8c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012fe8c 00000000 00000000 00000000 00000000 0x778664f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiReplaceWsleHash+71
828bc1b1 890c98 mov dword ptr [eax+ebx*4],ecx
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!MiReplaceWsleHash+71
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c3f9b
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
BUCKET_ID: 0x50_nt!MiReplaceWsleHash+71
Followup: MachineOwner
---------
kd> lmtsmn
start end module name
8df66000 8df92000 1394ohci 1394ohci.sys Mon Jul 13 19:51:59 2009 (4A5BC89F)
875be000 87606000 ACPI ACPI.sys Mon Jul 13 19:11:11 2009 (4A5BBF0F)
87b12000 87b6c000 afd afd.sys Mon Jul 13 19:12:34 2009 (4A5BBF62)
8dfdc000 8dfee000 AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
8dcf4000 8dd05000 amdppm amdppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
87755000 8775e000 amdxata amdxata.sys Tue May 19 13:57:35 2009 (4A12F30F)
898ff000 89901b00 aswFsBlk aswFsBlk.SYS Fri Dec 31 11:27:02 2010 (4D1E0456)
898c8000 898ff000 aswMonFlt aswMonFlt.sys Fri Dec 31 11:27:12 2010 (4D1E0460)
87fad000 87fb1200 aswRdr aswRdr.SYS Fri Dec 31 11:27:24 2010 (4D1E046C)
8dc8c000 8dcd2200 aswSP aswSP.SYS Fri Dec 31 15:00:16 2010 (4D1E3650)
87fa3000 87facf00 aswTdi aswTdi.SYS Fri Dec 31 11:29:58 2010 (4D1E0506)
89bb8000 89bc1000 asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
876e3000 876ec000 atapi atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
876ec000 8770f000 ataport ataport.SYS Mon Jul 13 19:11:18 2009 (4A5BBF16)
8f435000 8fadb000 atikmdag atikmdag.sys Thu Nov 25 21:43:13 2010 (4CEF1EC1)
8df92000 8dfcf000 atikmpag atikmpag.sys Thu Nov 25 21:16:27 2010 (4CEF187B)
8ebfb000 8ebfe000 BdaSup BdaSup.SYS Mon Jul 13 19:51:23 2009 (4A5BC87B)
87f0f000 87f16000 Beep Beep.SYS Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8dc7e000 8dc8c000 blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8744a000 87452000 BOOTVID BOOTVID.dll Mon Jul 13 21:04:34 2009 (4A5BD9A2)
899ea000 89a03000 bowser bowser.sys Mon Jul 13 19:14:21 2009 (4A5BBFCD)
95f40000 95f5e000 cdd cdd.dll unavailable (00000000)
87ee9000 87f08000 cdrom cdrom.sys Mon Jul 13 19:11:24 2009 (4A5BBF1C)
87494000 8753f000 CI CI.dll Mon Jul 13 21:09:28 2009 (4A5BDAC8)
87e92000 87eb7000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
87452000 87494000 CLFS CLFS.SYS Mon Jul 13 19:11:10 2009 (4A5BBF0E)
87984000 879e1000 cng cng.sys Mon Jul 13 19:32:55 2009 (4A5BC427)
8dfcf000 8dfdc000 CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
8fcc8000 8fcd5000 crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8dc02000 8dc66000 csc csc.sys Mon Jul 13 19:15:08 2009 (4A5BBFFC)
8dc66000 8dc7e000 dfsc dfsc.sys Mon Jul 13 19:14:16 2009 (4A5BBFC8)
87800000 8780c000 discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
87e81000 87e92000 disk disk.sys Mon Jul 13 19:11:28 2009 (4A5BBF20)
8de68000 8de81000 drmk drmk.sys Mon Jul 13 20:36:05 2009 (4A5BD2F5)
8fce0000 8fce9000 dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8fcd5000 8fce0000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8fce9000 8fcfa000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
8fd13000 8fd1d000 Dxapi Dxapi.sys Mon Jul 13 19:25:25 2009 (4A5BC265)
8fadb000 8fb92000 dxgkrnl dxgkrnl.sys Thu Oct 01 20:48:33 2009 (4AC54DE1)
8fb92000 8fbcb000 dxgmms1 dxgmms1.sys Mon Jul 13 19:25:25 2009 (4A5BC265)
8fbcb000 8fbd6000 fdc fdc.sys unavailable (00000000)
87792000 877a3000 fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8fcad000 8fcb7000 flpydisk flpydisk.sys unavailable (00000000)
8775e000 87792000 fltmgr fltmgr.sys Mon Jul 13 19:11:13 2009 (4A5BBF11)
879ef000 879f8000 Fs_Rec Fs_Rec.sys unavailable (00000000)
87e4f000 87e81000 fvevol fvevol.sys Fri Sep 25 22:24:21 2009 (4ABD7B55)
87d6d000 87d9e000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
82803000 8283a000 hal halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
8df06000 8df65880 hcw18bda hcw18bda.sys Thu May 28 11:46:17 2009 (4A1EB1C9)
89965000 899ea000 HTTP HTTP.sys Mon Jul 13 19:12:53 2009 (4A5BBF75)
87e47000 87e4f000 hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
8f400000 8f418000 i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
8f425000 8f432000 kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
80bca000 80bd2000 kdcom kdcom.dll Mon Jul 13 21:08:58 2009 (4A5BDAAA)
89bc1000 89bc3180 KernExplorer KernExplorer.sys Mon Oct 25 03:11:19 2010 (4CC52D97)
8de81000 8deb5000 ks ks.sys Wed Mar 03 22:57:52 2010 (4B8F2FC0)
87971000 87984000 ksecdd ksecdd.sys Mon Jul 13 19:11:56 2009 (4A5BBF3C)
87aed000 87b12000 ksecpkg ksecpkg.sys Thu Dec 10 23:04:22 2009 (4B21C4C6)
877a3000 877b1100 Lbd Lbd.sys Tue May 25 03:45:27 2010 (4BFB8017)
89902000 89912000 lltdio lltdio.sys Mon Jul 13 19:53:18 2009 (4A5BC8EE)
898ad000 898c8000 luafv luafv.sys Mon Jul 13 19:15:44 2009 (4A5BC020)
89bb3000 89bb7a80 LVPr2Mon LVPr2Mon.sys Fri May 07 21:36:25 2010 (4BE4C019)
8985e000 898a1a00 lvrs lvrs.sys Tue Nov 09 21:38:10 2010 (4CDA0592)
8942c000 89849c80 lvuvc lvuvc.sys Tue Nov 09 21:38:23 2010 (4CDA059F)
8742e000 87439000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 19:13:13 2009 (4A5BBF89)
898a2000 898ad000 monitor monitor.sys Mon Jul 13 19:25:58 2009 (4A5BC286)
8f418000 8f425000 mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
876cd000 876e3000 mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
89a03000 89a15000 mpsdrv mpsdrv.sys Mon Jul 13 19:52:52 2009 (4A5BC8D4)
89a15000 89a38000 mrxsmb mrxsmb.sys Sat Feb 27 02:32:02 2010 (4B88CA72)
89a38000 89a73000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
89a73000 89a8e000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
87f68000 87f73000 Msfs Msfs.SYS Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8760f000 87617000 msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
87946000 87971000 msrpc msrpc.sys unavailable (00000000)
87bf4000 87bfe000 mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
87e37000 87e47000 mup mup.sys Mon Jul 13 19:14:14 2009 (4A5BBFC6)
879f8000 87aaf000 ndis ndis.sys Mon Jul 13 19:12:24 2009 (4A5BBF58)
8dfee000 8dff9000 ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
877ce000 877f0000 ndiswan ndiswan.sys Mon Jul 13 19:54:34 2009 (4A5BC93A)
8fcb7000 8fcc8000 NDProxy NDProxy.SYS Mon Jul 13 19:54:27 2009 (4A5BC933)
87feb000 87ff9000 netbios netbios.sys Mon Jul 13 19:53:54 2009 (4A5BC912)
87fb2000 87fe4000 netbt netbt.sys Mon Jul 13 19:12:18 2009 (4A5BBF52)
87aaf000 87aed000 NETIO NETIO.SYS Mon Jul 13 19:12:35 2009 (4A5BBF63)
87f73000 87f81000 Npfs Npfs.SYS Mon Jul 13 19:11:31 2009 (4A5BBF23)
87bea000 87bf4000 nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
8283a000 82c3a000 nt ntkrnlmp.exe Fri Jun 18 23:55:07 2010 (4C1C3F9B)
87817000 87946000 Ntfs Ntfs.sys Mon Jul 13 19:12:05 2009 (4A5BBF45)
87f08000 87f0f000 Null Null.SYS unavailable (00000000)
87e1b000 87e37000 nv_agp nv_agp.sys Mon Jul 13 19:25:50 2009 (4A5BC27E)
8de2b000 8de38080 nvax nvax.sys Wed Apr 13 15:32:41 2005 (425D73D9)
8dd69000 8de2b000 nvm60x32 nvm60x32.sys Sat Oct 07 00:30:59 2006 (45272D83)
8f432000 8f434800 nvmpu401 nvmpu401.sys Wed Apr 13 15:34:22 2005 (425D743E)
8fc53000 8fc5ab00 nvoclock nvoclock.sys Tue Sep 15 17:59:22 2009 (4AB00E3A)
87c00000 87c1f000 pacer pacer.sys Mon Jul 13 19:53:58 2009 (4A5BC916)
8fbe0000 8fbf8000 parport parport.sys Mon Jul 13 19:45:34 2009 (4A5BC71E)
8764c000 8765d000 partmgr partmgr.sys Mon Jul 13 19:11:35 2009 (4A5BBF27)
89a8e000 89a95000 parvdm parvdm.sys unavailable (00000000)
87617000 87641000 pci pci.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
876b8000 876bf000 pciide pciide.sys Mon Jul 13 19:11:19 2009 (4A5BBF17)
876bf000 876cd000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:11:15 2009 (4A5BBF13)
879e1000 879ef000 pcw pcw.sys Mon Jul 13 19:11:10 2009 (4A5BBF0E)
89a95000 89b2c000 peauth peauth.sys Mon Jul 13 20:35:44 2009 (4A5BD2E0)
8de39000 8de68000 portcls portcls.sys Mon Jul 13 19:51:00 2009 (4A5BC864)
87439000 8744a000 PSHED PSHED.dll Mon Jul 13 21:09:36 2009 (4A5BDAD0)
877b6000 877ce000 rasl2tp rasl2tp.sys Mon Jul 13 19:54:33 2009 (4A5BC939)
87400000 87418000 raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
8fc19000 8fc30000 raspptp raspptp.sys Mon Jul 13 19:54:47 2009 (4A5BC947)
8fc30000 8fc47000 rassstp rassstp.sys Mon Jul 13 19:54:57 2009 (4A5BC951)
87ba9000 87bea000 rdbss rdbss.sys Mon Jul 13 19:14:26 2009 (4A5BBFD2)
8fc47000 8fc51000 rdpbus rdpbus.sys Mon Jul 13 20:02:40 2009 (4A5BCB20)
87f50000 87f58000 RDPCDD RDPCDD.sys Mon Jul 13 20:01:40 2009 (4A5BCAE4)
87f58000 87f60000 rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
87f60000 87f68000 rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
87dee000 87e1b000 rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
89912000 89925000 rspndr rspndr.sys Mon Jul 13 19:53:20 2009 (4A5BC8F0)
8e801000 8ebfa200 RTKVAC RTKVAC.SYS Thu Jun 18 15:36:37 2009 (4A3A9745)
8772f000 87755000 SCSIPORT SCSIPORT.SYS Mon Jul 13 19:45:55 2009 (4A5BC733)
89b2c000 89b36000 secdrv secdrv.SYS Wed Sep 13 09:18:32 2006 (45080528)
8fbd6000 8fbe0000 serenum serenum.sys Mon Jul 13 19:45:27 2009 (4A5BC717)
87b6c000 87b86000 serial serial.sys Mon Jul 13 19:45:33 2009 (4A5BC71D)
8770f000 8772f000 SI3112r SI3112r.sys Thu Aug 16 22:00:39 2007 (46C50147)
877b2000 877b5100 SiWinAcc SiWinAcc.sys Thu Jun 14 20:02:27 2007 (4671D713)
87de6000 87dee000 spldr spldr.sys Mon May 11 12:13:47 2009 (4A084EBB)
8fd34000 8fd85000 srv srv.sys Thu Aug 26 23:31:26 2010 (4C77318E)
89b64000 89bb3000 srv2 srv2.sys Thu Aug 26 23:30:45 2010 (4C773165)
89b36000 89b57000 srvnet srvnet.sys Thu Aug 26 23:30:39 2010 (4C77315F)
8fc51000 8fc52380 swenum swenum.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
87c24000 87d6d000 tcpip tcpip.sys Sun Jun 13 23:36:59 2010 (4C15A3DB)
89b57000 89b64000 tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
87f98000 87fa3000 TDI TDI.SYS Mon Jul 13 19:12:12 2009 (4A5BBF4C)
87f81000 87f98000 tdx tdx.sys Mon Jul 13 19:12:10 2009 (4A5BBF4A)
87b99000 87ba9000 termdd termdd.sys Mon Jul 13 20:01:35 2009 (4A5BCADF)
95f10000 95f19000 TSDDD TSDDD.dll unavailable (00000000)
8dcd3000 8dcf4000 tunnel tunnel.sys Mon Jul 13 19:54:03 2009 (4A5BC91B)
89925000 89965000 udfs udfs.sys Mon Jul 13 19:14:09 2009 (4A5BBFC1)
8fc5b000 8fc69000 umbus umbus.sys Mon Jul 13 19:51:38 2009 (4A5BC88A)
8984a000 8985db00 usbaudio usbaudio.sys Mon Jul 13 19:51:23 2009 (4A5BC87B)
8fd1d000 8fd34000 usbccgp usbccgp.sys Mon Jul 13 19:51:31 2009 (4A5BC883)
8fd11000 8fd12700 USBD USBD.SYS Mon Jul 13 19:51:05 2009 (4A5BC869)
8dd5a000 8dd69000 usbehci usbehci.sys Mon Jul 13 19:51:14 2009 (4A5BC872)
8fc69000 8fcad000 usbhub usbhub.sys Mon Jul 13 19:52:06 2009 (4A5BC8A6)
8dd05000 8dd0f000 usbohci usbohci.sys Mon Jul 13 19:51:14 2009 (4A5BC872)
8dd0f000 8dd5a000 USBPORT USBPORT.SYS Mon Jul 13 19:51:13 2009 (4A5BC871)
87641000 8764c000 vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
87f16000 87f22000 vga vga.sys Mon Jul 13 19:25:50 2009 (4A5BC27E)
87f22000 87f43000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
87d9e000 87da7000 vmstorfl vmstorfl.sys unavailable (00000000)
8765d000 8766d000 volmgr volmgr.sys Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8766d000 876b8000 volmgrx volmgrx.sys Mon Jul 13 19:11:41 2009 (4A5BBF2D)
87da7000 87de6000 volsnap volsnap.sys Mon Jul 13 19:11:34 2009 (4A5BBF26)
87b86000 87b99000 wanarp wanarp.sys Mon Jul 13 19:55:02 2009 (4A5BC956)
87f43000 87f50000 watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8753f000 875b0000 Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
875b0000 875be000 WDFLDR WDFLDR.SYS Mon Jul 13 19:11:25 2009 (4A5BBF1D)
87fe4000 87feb000 wfplwf wfplwf.sys Mon Jul 13 19:53:51 2009 (4A5BC90F)
95cb0000 95efb000 win32k win32k.sys Tue Oct 19 23:00:01 2010 (4CBE5B31)
87606000 8760f000 WMILIB WMILIB.SYS Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8deb5000 8df06000 yk62x86 yk62x86.sys Mon Sep 28 02:33:34 2009 (4AC058BE)
Unloaded modules:
8fcfa000 8fd11000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
8fdef000 8fe59000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8fd85000 8fdef000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
87eb7000 87ec4000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
87ec4000 87ecf000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
87ecf000 87ed8000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
87ed8000 87ee9000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000