BSOD ntoskrnl.exe

nextway · 28 Apr 2011

Can you help me?

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\042311-15303-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\Windows\Symbol
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a5f000 PsLoadedModuleList = 0xfffff800`02ca4e90
Debug session time: Sat Apr 23 12:48:41.338 2011 (UTC - 3:00)
System Uptime: 0 days 0:18:15.023
Loading Kernel Symbols
.................................................. .............
.................................................. ..............
..........................
Loading User Symbols
Loading unloaded module list
.....
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff7ffec62c64d, 2, 8, fffff7ffec62c64d}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for hal.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for USBPORT.SYS -
Probably caused by : USBPORT.SYS ( USBPORT+13023 )

Followup: MachineOwner
---------

3: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff7ffec62c64d, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff7ffec62c64d, address which referenced memory

Debugging Details:
------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d100e8
fffff7ffec62c64d

CURRENT_IRQL: 2

FAULTING_IP:
+3632613837376432
fffff7ff`ec62c64d ?? ???

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xD1

PROCESS_NAME: System

TRAP_FRAME: fffff88002ffb880 -- (.trap 0xfffff88002ffb880)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8005513080 rbx=0000000000000000 rcx=0000000000003000
rdx=0000000000001000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff7ffec62c64d rsp=fffff88002ffba18 rbp=0000000000000000
r8=000000000000206c r9=00000000cf965000 r10=fffffa8005513260
r11=fffffa8005503480 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac pe nc
fffff7ff`ec62c64d ?? ???
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80002adebe9 to fffff80002adf640

FAILED_INSTRUCTION_ADDRESS:
+3632613837376432
fffff7ff`ec62c64d ?? ???

STACK_TEXT:
fffff880`02ffb738 fffff800`02adebe9 : 00000000`0000000a fffff7ff`ec62c64d 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`02ffb740 fffff800`02add860 : 00000000`00000000 fffffa80`065d1380 fffffa80`056b9d40 fffffa80`05513080 : nt!KiBugCheckDispatch+0x69
fffff880`02ffb880 fffff7ff`ec62c64d : fffffa80`04110d30 fffffa80`04110d00 fffff800`02a18652 fffffa80`05513080 : nt!KiPageFault+0x260
fffff880`02ffba18 fffffa80`04110d30 : fffffa80`04110d00 fffff800`02a18652 fffffa80`05513080 fffffa80`06608000 : 0xfffff7ff`ec62c64d
fffff880`02ffba20 fffffa80`04110d00 : fffff800`02a18652 fffffa80`05513080 fffffa80`06608000 fffffa80`06608000 : 0xfffffa80`04110d30
fffff880`02ffba28 fffff800`02a18652 : fffffa80`05513080 fffffa80`06608000 fffffa80`06608000 00000000`0000206c : 0xfffffa80`04110d00
fffff880`02ffba30 fffff800`02a1b83f : fffffa80`05503480 fffffa80`06608000 fffffa80`05513080 00000000`0000206c : hal!HalMakeBeep+0x138a
fffff880`02ffba80 fffff800`02a1a7d5 : fffffa80`066faee0 fffffa80`06608000 00000000`0000206c fffffa80`04110d30 : hal!IoFlushAdapterBuffers+0xaf
fffff880`02ffbac0 fffff880`0421e023 : fffffa80`0517c1a0 fffffa80`04028c20 fffffa80`0517c050 fffffa80`0517c1a0 : hal!HalFreeCommonBuffer+0x501
fffff880`02ffbb20 fffff880`0421eab7 : fffffa80`04028802 fffffa80`054a3910 00000000`ffffffff fffffa80`0517cea8 : USBPORT+0x13023
fffff880`02ffbc00 fffff880`0421c64f : fffffa80`0517cea8 fffffa80`0517c1a0 fffffa80`0517d040 00000000`00000000 : USBPORT+0x13ab7
fffff880`02ffbc60 fffff880`0420df89 : fffffa80`0517c050 00000000`00000000 fffffa80`0517ce02 fffffa80`0517cea8 : USBPORT+0x1164f
fffff880`02ffbca0 fffff800`02aeab1c : fffff880`02fd3180 fffffa80`0517cea8 fffffa80`0517cec0 00000000`00000000 : USBPORT+0x2f89
fffff880`02ffbcd0 fffff800`02ad736a : fffff880`02fd3180 fffff880`02fddfc0 00000000`00000000 fffff880`0420ddb0 : nt!KiRetireDpcList+0x1bc
fffff880`02ffbd80 00000000`00000000 : fffff880`02ffc000 fffff880`02ff6000 fffff880`02ffbd40 00000000`00000000 : nt!KiIdleLoop+0x5a

STACK_COMMAND: kb

FOLLOWUP_IP:
USBPORT+13023
fffff880`0421e023 4533c0 xor r8d,r8d

SYMBOL_STACK_INDEX: 9

SYMBOL_NAME: USBPORT+13023

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: USBPORT

IMAGE_NAME: USBPORT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bcc07

FAILURE_BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_USBPORT+13023

BUCKET_ID: X64_0xD1_CODE_AV_BAD_IP_USBPORT+13023

Followup: MachineOwner
---------

3: kd> lmvm USBPORT
start end module name
fffff880`0420b000 fffff880`04261000 USBPORT (export symbols) USBPORT.SYS
Loaded symbol image file: USBPORT.SYS
Mapped memory image file: c:\windows\symbol\USBPORT.SYS\4A5BCC0756000\USBPOR T.SYS
Image path: \SystemRoot\system32\DRIVERS\USBPORT.SYS
Image name: USBPORT.SYS
Timestamp: Mon Jul 13 21:06:31 2009 (4A5BCC07)
CheckSum: 0005E0B4
ImageSize: 00056000
File version: 6.1.7600.16385
Product version: 6.1.7600.16385
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: usbport.sys
OriginalFilename: usbport.sys
ProductVersion: 6.1.7600.16385
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: USB 1.1 & 2.0 Port Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.

mgorman87 · 28 Apr 2011

Please provide a full report
https://www.sevenforums.com/crashes-d...tructions.html

nextway · 28 Apr 2011

Here is.
Its in spanish u need in english? may be i need to change the system language.

The OS instalation is new
The components are
Msi 785
ati 4890
phenom II 940 x4 be
2x2gb ocz gold edit ddr2

mgorman87 · 28 Apr 2011

nextway said:

Here is.
Its in spanish u need in english? may be i need to change the system language.

The OS instalation is new
The components are
Msi 785
ati 4890
phenom 940 x4 be
2x2gb ocz gold edit ddr2

I'll be fine. Thanks. Looking now

mgorman87 · 28 Apr 2011

There were a lot of weird, unknown drivers listed in your dumps. This could be a sign of possible virus infection. I would like you to run some scans and report the results
Malwarebytes : Free anti-malware, anti-virus and spyware removal download
HouseCall - Free Online Virus Scan - Trend Micro USA

Code:

Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)

Update your Realtek driver - http://218.210.127.131/downloads/dow...&GetDown=false

Code:

Event[157]:
  Log Name: System
  Source: Application Popup
  Date: 2011-04-28T16:11:04.237
  Event ID: 1060
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Clásico
  User: N/A
  User Name: N/A
  Computer: Living-PC
  Description: 
Se bloqueó la carga de \SystemRoot\SysWow64\Drivers\StarOpen.SYS por una incompatibilidad con este sistema. Póngase en contacto con el fabricante del software para obtener una versión compatible del controlador.

staropen.sys is a Kernel-level I/O operations helper driver from Rocket Division Software, which from my understanding, allows you to bypass windows system permissions, which are required by some CD/DVD writer software so to be able to burn without being administrator/domain admin/power user. I don;t believe this is compatible with 64-bit and it is why it's not loading properly. Search your drive for all instances of StarOpen.sys and rename them to StarOpen.bak

Run these tests and report back the results
1. Memtest86 - Run for 7-8 passes - RAM - RAM - Test with Memtest86+
2. Prime95 - Run all three tests for 3-4 hours each or until fail - https://www.sevenforums.com/tutorials...t-prime95.html
3. Hard drive scan using SeaTools - Both long and short tests
4. SFC /SCANNOW Command - System File Checker

...Summary of the dumps:

Code:


Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Apr 28 15:09:11.932 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:23.618
Probably caused by : ntkrnlmp.exe ( nt!PoIdle+52a )
BUGCHECK_STR:  0x1E_c0000005
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!PoIdle+52a
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Apr 28 15:06:18.845 2011 (UTC - 4:00)
System Uptime: 0 days 0:03:54.156
Probably caused by : ntkrnlmp.exe ( nt!CmpDereferenceNameControlBlockWithLock+ce )
BUGCHECK_STR:  0x19_20
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x19_20_nt!CmpDereferenceNameControlBlockWithLock+ce
BiosReleaseDate = 09/09/2010
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7551
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Wed Apr 27 21:52:13.853 2011 (UTC - 4:00)
System Uptime: 0 days 0:23:12.539
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+11718 )
BUGCHECK_STR:  0x4E_2
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0x4E_2_nt!_??_::FNODOBFM::_string_+11718
BiosReleaseDate = 09/09/2010
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7551
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Wed Apr 27 19:33:20.263 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:51.949
Probably caused by : win32k.sys ( win32k!xxxUpdateInputHangInfo+92 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xBE
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID:  X64_0xBE_win32k!xxxUpdateInputHangInfo+92
BiosReleaseDate = 09/09/2010
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7551
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Sat Apr 23 11:48:41.338 2011 (UTC - 4:00)
System Uptime: 0 days 0:18:15.023
Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Core_iCompleteDoneTransfer+45f )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_USBPORT!USBPORT_Core_iCompleteDoneTransfer+45f
BiosReleaseDate = 09/09/2010
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7551
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Fri Apr 22 20:09:42.205 2011 (UTC - 4:00)
System Uptime: 0 days 0:51:46.891
Probably caused by : memory_corruption ( nt!MiUpdateWsleHash+13c )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  msnmsgr.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!MiUpdateWsleHash+13c
BiosReleaseDate = 09/09/2010
SystemManufacturer = MICRO-STAR INTERNATIONAL CO.,LTD
SystemProductName = MS-7551
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Code:

fffff880`00ec1000 fffff880`00f18000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`01022000 fffff880`010ab000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`02dd5000 fffff880`02deb000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03fc0000 fffff880`03fd4000   amdiox64 amdiox64.sys Thu Feb 18 10:17:53 2010 (4B7D5A21)
fffff880`03f03000 fffff880`03f18000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`010b0000 fffff880`010bb000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`026b9000 fffff880`027c3000   arusb_win7x arusb_win7x.sys Thu Nov 26 03:55:17 2009 (4B0E4275)
fffff880`00e7a000 fffff880`00e83000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e83000 fffff880`00ead000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`0534c000 fffff880`0536c000   AtihdW76 AtihdW76.sys Wed Nov 17 07:02:04 2010 (4CE3C43C)
fffff880`04862000 fffff880`05189000   atikmdag atikmdag.sys Tue Mar 08 23:32:17 2011 (4D7702D1)
fffff880`03f18000 fffff880`03f67000   atikmpag atikmpag.sys Tue Mar 08 23:17:42 2011 (4D76FF66)
fffff960`00900000 fffff960`00961000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`02661000 fffff880`0267e000   avgntflt avgntflt.sys Thu Nov 11 10:59:48 2010 (4CDC12F4)
fffff880`03ebb000 fffff880`03edd000   avipbb   avipbb.sys   Mon Feb 22 05:08:50 2010 (4B8257B2)
fffff880`019e3000 fffff880`019ea000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03eaa000 fffff880`03ebb000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04759000 fffff880`04777000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
fffff960`00650000 fffff960`00677000   cdd      cdd.dll      unavailable (00000000)
fffff880`0142b000 fffff880`01455000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01972000 fffff880`019a2000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00cf8000 fffff880`00d56000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01179000 fffff880`011eb000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`02c63000 fffff880`02c73000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0525c000 fffff880`0526a000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e09000 fffff880`03e8c000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`03e8c000 fffff880`03eaa000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04072000 fffff880`04081000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0195c000 fffff880`01972000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`053a9000 fffff880`053cb000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0526a000 fffff880`05276000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05281000 fffff880`05294000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05276000 fffff880`05281000   dump_msahci dump_msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`05294000 fffff880`052a0000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`02c77000 fffff880`02d6b000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`02d6b000 fffff880`02db1000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`07b5d000 fffff880`07b93000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`01107000 fffff880`0111b000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010bb000 fffff880`01107000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01200000 fffff880`0120a000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01922000 fffff880`0195c000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`0181f000 fffff880`01869000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`03005000 fffff800`0304e000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`02db1000 fffff880`02dd5000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`05200000 fffff880`0525c000   HdAudio  HdAudio.sys  Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`02600000 fffff880`02619000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02619000 fffff880`02621080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`027ef000 fffff880`027fd000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04690000 fffff880`04759000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`04068000 fffff880`04072000   HWiNFO64A HWiNFO64A.SYS Wed Sep 29 18:13:23 2010 (4CA3BA03)
fffff880`01919000 fffff880`01922000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`03fa2000 fffff880`03fb1000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02622000 fffff880`02630000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bab000 fffff800`00bb5000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`04081000 fffff880`040c4000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013d4000 fffff880`013ef000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01400000 fffff880`0142b000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`053cb000 fffff880`053d0200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0269f000 fffff880`026b4000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0263e000 fffff880`02661000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00cd7000 fffff880`00ce4000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`02630000 fffff880`0263e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03fb1000 fffff880`03fc0000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`07b93000 fffff880`07ba0000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e10000 fffff880`00e2a000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`04777000 fffff880`0478f000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`0478f000 fffff880`047bc000   mrxsmb   mrxsmb.sys   Tue Feb 22 23:56:22 2011 (4D649376)
fffff880`060c5000 fffff880`06112000   mrxsmb10 mrxsmb10.sys Tue Feb 22 23:55:12 2011 (4D649330)
fffff880`06112000 fffff880`06136000   mrxsmb20 mrxsmb20.sys Tue Feb 22 23:55:12 2011 (4D649330)
fffff880`00ead000 fffff880`00eb8000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`015e8000 fffff880`015f3000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f21000 fffff880`00f2b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0111b000 fffff880`01179000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0405d000 fffff880`04068000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01907000 fffff880`01919000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01495000 fffff880`01588000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`02deb000 fffff880`02df7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0465b000 fffff880`0466e000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`04824000 fffff880`04853000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`05337000 fffff880`0534c000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`04179000 fffff880`04188000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`040ef000 fffff880`04134000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01588000 fffff880`015e8000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`0120a000 fffff880`0121b000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04051000 fffff880`0405d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a1b000 fffff800`03005000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01231000 fffff880`013d4000   Ntfs     Ntfs.sys     Thu Mar 10 22:39:39 2011 (4D79997B)
fffff880`019da000 fffff880`019e3000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`04608000 fffff880`0465b000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`0413d000 fffff880`04163000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00f6b000 fffff880`00f80000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f2b000 fffff880`00f5e000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00ff1000 fffff880`00ff8000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e00000 fffff880`00e10000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013ef000 fffff880`01400000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06136000 fffff880`061dc000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0536c000 fffff880`053a9000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00ce4000 fffff880`00cf8000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04800000 fffff880`04824000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`051df000 fffff880`051fa000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03f67000 fffff880`03f88000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`03f88000 fffff880`03fa2000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04000000 fffff880`04051000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04853000 fffff880`0485e000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01610000 fffff880`01619000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0147a000 fffff880`01483000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01483000 fffff880`0148c000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`018cd000 fffff880`01907000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`0466e000 fffff880`04686000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02c00000 fffff880`02c32000   Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`041d4000 fffff880`041ed000   SCDEmu   SCDEmu.SYS   Fri Oct 31 02:56:21 2008 (490AAC15)
fffff880`061dc000 fffff880`061e7000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`02c4e000 fffff880`02c5a000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04188000 fffff880`041a5000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`018c5000 fffff880`018cd000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07a00000 fffff880`07a71000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`07aaa000 fffff880`07b42000   srv      srv.sys      Tue Feb 22 23:56:21 2011 (4D649375)
fffff880`06043000 fffff880`060ad000   srv2     srv2.sys     Tue Feb 22 23:56:00 2011 (4D649360)
fffff880`06000000 fffff880`06031000   srvnet   srvnet.sys   Tue Feb 22 23:55:44 2011 (4D649350)
fffff880`02df7000 fffff880`02df8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0161b000 fffff880`0181f000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`06031000 fffff880`06043000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`015f3000 fffff880`01600000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01000000 fffff880`01022000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`041c0000 fffff880`041d4000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00460000 fffff960`0046a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03edd000 fffff880`03f03000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`03fd4000 fffff880`03fe6000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`027d0000 fffff880`027ed000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`027ed000 fffff880`027eef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`02c3d000 fffff880`02c4e000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`052dd000 fffff880`05337000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`02c32000 fffff880`02c3d000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05189000 fffff880`051df000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00f5e000 fffff880`00f6b000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019ea000 fffff880`019f8000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01455000 fffff880`0147a000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00e2a000 fffff880`00e66000   vmbus    vmbus.sys    Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`01869000 fffff880`01879000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00f80000 fffff880`00f95000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00f95000 fffff880`00ff1000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01879000 fffff880`018c5000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`027c3000 fffff880`027d0000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`04163000 fffff880`04179000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`04686000 fffff880`04690000   vwifimp  vwifimp.sys  Mon Jul 13 20:07:28 2009 (4A5BCC40)
fffff880`041a5000 fffff880`041c0000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`01600000 fffff880`01610000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d56000 fffff880`00dfa000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00cc0000 fffff880`00ccf000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`04134000 fffff880`0413d000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00020000 fffff960`00332000   win32k   win32k.sys   unavailable (00000000)
fffff880`00e66000 fffff880`00e7a000   winhv    winhv.sys    Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`02c5a000 fffff880`02c63000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f18000 fffff880`00f21000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0267e000 fffff880`0269f000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`07a71000 fffff880`07aa2000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00031000
fffff880`07b42000 fffff880`07b5d000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`019a2000 fffff880`019b0000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`019b0000 fffff880`019bc000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`019bc000 fffff880`019c7000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`019c7000 fffff880`019da000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000