Recent BSOD

Robocaspar · 05 Aug 2011

Hi,

I've recently had 2 BSOD, one 3 days ago, one earlier today. Conditions of both are similar. I had a game (World of Warcraft) running and opened or was loading a page in Firefox. Right before my laptop crashes it seems to be loading then either WoW or Firefox stops responding.

Any help would be much appreciated. Ive attached the crashdump file I think. Also I tried search for the crashdump file using WhoCrashed and it does not seem to locate any.

System specs:

Windows 7 x64.
Original OEM OS installed.
Laptop MSI GX740 purchased ~ 1 year ago
Intel i7-720QM
ATI Radeon HD5870 1gig
8gb (4x2) Crucial DDR3 (PC3 10600) ram

Thank you in advance!

Maguscreed · 05 Aug 2011

I could find no minidump files in the attachment.
Could you go to c:\windows\minidump and verify if there are any files in there.
If there are could you please upload them as well.

Robocaspar · 05 Aug 2011

Found the c:\windows\minidump file

Robocaspar · 05 Aug 2011

Is there any reason a BSOD would not create a crashdump file?

Robocaspar · 05 Aug 2011

Quick Update:

I just triggered a BSOD when I tried to run Event Viewer in start/search here's the dump log

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 4105

Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF800039FC617
BCP3: 0000000000000000
BCP4: FFFFFFFFFFFFFFFF
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\080511-23930-01.dmp
C:\Users\Chenfei\AppData\Local\Temp\WER-59935-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\windows\system32\en-US\erofflps.txt

Robocaspar · 05 Aug 2011

here's the Whocrashed.exe info

Crash dump directory: C:\windows\Minidump

Crash dumps are enabled on your computer.

On Fri 8/5/2011 9:06:27 PM your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0x1E (0xFFFFFFFFC0000005, 0xFFFFF800039FC617, 0x0, 0xFFFFFFFFFFFFFFFF)
Error: KMODE_EXCEPTION_NOT_HANDLED
Dump file: C:\windows\Minidump\080511-23930-01.dmp
file path: C:\windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit is in another driver on your system which cannot be identified at this time.

Maguscreed · 05 Aug 2011

according to the record a minidump was created.

Files that help describe the problem:
C:\Windows\Minidump\080511-23930-01.dmp

Robocaspar · 05 Aug 2011

Here you go I reattached the new dump file.

Maguscreed · 05 Aug 2011

Thanks the reason I wanted a look at that is the ntkernel can crash for litteraly a million different reasons, the dump file will contain a bit more info to help trace it.

ah okay your system is loading a driver file that niether google nor our driver database can identify.
fffff880`055ac000 fffff880`055f1000 a7h8lnr2 a7h8lnr2.SYS Tue Jul 14 16:12:55 2009 (4A5CF4D7)

My first thought with something like this is possible malware infection of some sort.

I would say boot in Safe Mode with networking

then download, install, update and run mbam's free version for a full scan. (you may want to wait until you're going to bed or out for a few a full scan can take a really long time)
Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Code:

Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+537 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800039fc617, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExAllocatePoolWithTag+537
fffff800`039fc617 48895808        mov     qword ptr [rax+8],rbx

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003b00100
 ffffffffffffffff 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0x1E_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  consent.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff8000391c5d8 to fffff800038d0d00

STACK_TEXT:  
fffff880`0b3c1b18 fffff800`0391c5d8 : 00000000`0000001e ffffffff`c0000005 fffff800`039fc617 00000000`00000000 : nt!KeBugCheckEx
fffff880`0b3c1b20 fffff800`038d0382 : fffff880`0b3c22f8 fffff800`03a584e0 fffff880`0b3c23a0 00000000`00000006 : nt! ?? ::FNODOBFM::`string'+0x4987d
fffff880`0b3c21c0 fffff800`038cec8a : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`0b3c23a0 fffff800`039fc617 : fffff8a0`0f88e110 fffff8a0`0d7e7ab0 00000000`00000000 00000002`00000000 : nt!KiGeneralProtectionFault+0x10a
fffff880`0b3c2530 fffff800`03d29b8e : 00000000`00000000 00000000`0000002c fffff8a0`0d7fbf56 00000000`00000000 : nt!ExAllocatePoolWithTag+0x537
fffff880`0b3c2620 fffff800`03d2a01d : fffff880`0b3c2740 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PfSnPrefetchSections+0x1ce
fffff880`0b3c2710 fffff800`03d2a45f : 00000001`450a61bd fffffa80`075d9b30 fffff8a0`0d7e7000 00000000`00000000 : nt!PfSnPrefetchScenario+0x16d
fffff880`0b3c2980 fffff800`03c294df : 00000000`00000000 00000000`40419367 fffffa80`0717c510 00000000`00000000 : nt!PfSnBeginAppLaunch+0x35f
fffff880`0b3c2a50 fffff800`03bbe680 : fffffa80`0723b660 fffffa80`0717c510 00000000`16050800 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x51f30
fffff880`0b3c2a80 fffff800`038c2795 : fffff800`03a43e80 00000000`00000000 fffff800`03bbe538 fffffa80`0723b660 : nt!PspUserThreadStartup+0x148
fffff880`0b3c2ae0 fffff800`038c2717 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartUserThread+0x16
fffff880`0b3c2c20 00000000`7743c500 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartUserThreadReturn
00000000`000ffbb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7743c500


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExAllocatePoolWithTag+537
fffff800`039fc617 48895808        mov     qword ptr [rax+8],rbx

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!ExAllocatePoolWithTag+537

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4d9fdd5b

FAILURE_BUCKET_ID:  X64_0x1E_c0000005_nt!ExAllocatePoolWithTag+537

BUCKET_ID:  X64_0x1E_c0000005_nt!ExAllocatePoolWithTag+537

Followup: MachineOwner
---------

0: kd> lm t n
start             end                 module name
fffff800`00ba8000 fffff800`00bb2000   kdcom    kdcom.dll    Sat Feb 05 10:52:49 2011 (4D4D8061)
fffff800`03808000 fffff800`03851000   hal      hal.dll      Sat Nov 20 07:00:25 2010 (4CE7C669)
fffff800`03851000 fffff800`03e3a000   nt       ntkrnlmp.exe Fri Apr 08 23:15:23 2011 (4D9FDD5B)
fffff880`00c00000 fffff880`00c21000   raspptp  raspptp.sys  Sat Nov 20 04:52:31 2010 (4CE7A86F)
fffff880`00c4b000 fffff880`00c9a000   mcupdate mcupdate.dll Sat Nov 20 07:03:51 2010 (4CE7C737)
fffff880`00c9a000 fffff880`00cae000   PSHED    PSHED.dll    Mon Jul 13 20:32:23 2009 (4A5BE027)
fffff880`00cae000 fffff880`00d0c000   CLFS     CLFS.SYS     Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`00d0c000 fffff880`00dcc000   CI       CI.dll       Sat Nov 20 07:12:36 2010 (4CE7C944)
fffff880`00dcc000 fffff880`00dfb000   ndiswan  ndiswan.sys  Sat Nov 20 04:52:32 2010 (4CE7A870)
fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Sat Nov 20 03:20:43 2010 (4CE792EB)
fffff880`00e5c000 fffff880`00e76000   mountmgr mountmgr.sys Sat Nov 20 03:19:21 2010 (4CE79299)
fffff880`00e76000 fffff880`00ec7000   rdbss    rdbss.sys    Sat Nov 20 03:27:51 2010 (4CE79497)
fffff880`00ec7000 fffff880`00ee2000   raspppoe raspppoe.sys Mon Jul 13 19:10:17 2009 (4A5BCCE9)
fffff880`00ee8000 fffff880`00f8c000   Wdf01000 Wdf01000.sys Mon Jul 13 18:22:07 2009 (4A5BC19F)
fffff880`00f8c000 fffff880`00f9b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 18:19:54 2009 (4A5BC11A)
fffff880`00f9b000 fffff880`00fce000   pci      pci.sys      Sat Nov 20 03:19:11 2010 (4CE7928F)
fffff880`00fce000 fffff880`00fe3000   volmgr   volmgr.sys   Sat Nov 20 03:19:28 2010 (4CE792A0)
fffff880`00fe3000 fffff880`00ffd000   rassstp  rassstp.sys  Mon Jul 13 19:10:25 2009 (4A5BCCF1)
fffff880`01000000 fffff880`0102f000   SCSIPORT SCSIPORT.SYS Sat Nov 20 04:34:01 2010 (4CE7A419)
fffff880`0102f000 fffff880`01086000   ACPI     ACPI.sys     Sat Nov 20 03:19:16 2010 (4CE79294)
fffff880`01086000 fffff880`01090000   msisadrv msisadrv.sys Mon Jul 13 18:19:26 2009 (4A5BC0FE)
fffff880`01090000 fffff880`0109d000   vdrvroot vdrvroot.sys Mon Jul 13 19:01:31 2009 (4A5BCADB)
fffff880`0109d000 fffff880`010a9000   BATTC    BATTC.SYS    Mon Jul 13 18:31:01 2009 (4A5BC3B5)
fffff880`010ac000 fffff880`011d2000   spdi     spdi.sys     Sun Oct 11 15:55:14 2009 (4AD24632)
fffff880`011d2000 fffff880`011db000   WMILIB   WMILIB.SYS   Mon Jul 13 18:19:51 2009 (4A5BC117)
fffff880`011db000 fffff880`011f0000   partmgr  partmgr.sys  Sat Nov 20 03:20:00 2010 (4CE792C0)
fffff880`011f0000 fffff880`011f9000   compbatt compbatt.sys Mon Jul 13 18:31:02 2009 (4A5BC3B6)
fffff880`01200000 fffff880`01272000   cng      cng.sys      Sat Nov 20 04:08:45 2010 (4CE79E2D)
fffff880`01272000 fffff880`01298000   tunnel   tunnel.sys   Sat Nov 20 04:51:50 2010 (4CE7A846)
fffff880`012b0000 fffff880`014b8000   iaStor   iaStor.sys   Fri Oct 02 14:58:50 2009 (4AC65B7A)
fffff880`014b8000 fffff880`014c1000   atapi    atapi.sys    Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`014c1000 fffff880`014eb000   ataport  ataport.SYS  Sat Nov 20 03:19:15 2010 (4CE79293)
fffff880`014eb000 fffff880`014f6000   msahci   msahci.sys   Sat Nov 20 04:33:58 2010 (4CE7A416)
fffff880`014f6000 fffff880`01506000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff880`01506000 fffff880`01511000   amdxata  amdxata.sys  Fri Mar 19 11:18:18 2010 (4BA3A3CA)
fffff880`01511000 fffff880`0155d000   fltmgr   fltmgr.sys   Sat Nov 20 03:19:24 2010 (4CE7929C)
fffff880`0155d000 fffff880`01571000   fileinfo fileinfo.sys Mon Jul 13 18:34:25 2009 (4A5BC481)
fffff880`01571000 fffff880`015cf000   msrpc    msrpc.sys    Sat Nov 20 03:21:56 2010 (4CE79334)
fffff880`015cf000 fffff880`015f3000   rasl2tp  rasl2tp.sys  Sat Nov 20 04:52:34 2010 (4CE7A872)
fffff880`01600000 fffff880`01611000   pcw      pcw.sys      Mon Jul 13 18:19:27 2009 (4A5BC0FF)
fffff880`01611000 fffff880`0161b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 18:19:45 2009 (4A5BC111)
fffff880`0161b000 fffff880`0162c000   blbdrive blbdrive.sys Mon Jul 13 18:35:59 2009 (4A5BC4DF)
fffff880`01639000 fffff880`017dc000   Ntfs     Ntfs.sys     Thu Mar 10 21:39:39 2011 (4D79997B)
fffff880`017dc000 fffff880`017f7000   ksecdd   ksecdd.sys   Sat Nov 20 03:21:15 2010 (4CE7930B)
fffff880`01800000 fffff880`01814000   termdd   termdd.sys   Sat Nov 20 05:03:40 2010 (4CE7AB0C)
fffff880`01814000 fffff880`0181f000   mssmbios mssmbios.sys Mon Jul 13 18:31:10 2009 (4A5BC3BE)
fffff880`0181f000 fffff880`0182e000   discache discache.sys Mon Jul 13 18:37:18 2009 (4A5BC52E)
fffff880`0182e000 fffff880`0184c000   dfsc     dfsc.sys     Sat Nov 20 03:26:31 2010 (4CE79447)
fffff880`0185a000 fffff880`0194d000   ndis     ndis.sys     Sat Nov 20 03:23:30 2010 (4CE79392)
fffff880`0194d000 fffff880`019ad000   NETIO    NETIO.SYS    Sat Nov 20 03:23:13 2010 (4CE79381)
fffff880`019ad000 fffff880`019d8000   ksecpkg  ksecpkg.sys  Sat Nov 20 04:10:34 2010 (4CE79E9A)
fffff880`019d8000 fffff880`019f3000   wanarp   wanarp.sys   Sat Nov 20 04:52:36 2010 (4CE7A874)
fffff880`01a00000 fffff880`01a45000   netbt    netbt.sys    Sat Nov 20 03:23:18 2010 (4CE79386)
fffff880`01a45000 fffff880`01a51000   nsiproxy nsiproxy.sys Mon Jul 13 18:21:02 2009 (4A5BC15E)
fffff880`01a52000 fffff880`01c56000   tcpip    tcpip.sys    Sun Apr 24 21:37:30 2011 (4DB4DE6A)
fffff880`01c56000 fffff880`01ca0000   fwpkclnt fwpkclnt.sys Sat Nov 20 03:21:37 2010 (4CE79321)
fffff880`01ca0000 fffff880`01cec000   volsnap  volsnap.sys  Sat Nov 20 03:20:08 2010 (4CE792C8)
fffff880`01cec000 fffff880`01cf4000   spldr    spldr.sys    Mon May 11 11:56:27 2009 (4A0858BB)
fffff880`01cf4000 fffff880`01d2e000   rdyboost rdyboost.sys Sat Nov 20 03:43:10 2010 (4CE7982E)
fffff880`01d2e000 fffff880`01d40000   mup      mup.sys      Mon Jul 13 18:23:45 2009 (4A5BC201)
fffff880`01d40000 fffff880`01d49000   johci    johci.sys    Tue Sep 15 21:58:41 2009 (4AB05461)
fffff880`01d49000 fffff880`01d52000   hwpolicy hwpolicy.sys Sat Nov 20 03:18:54 2010 (4CE7927E)
fffff880`01d52000 fffff880`01d8c000   fvevol   fvevol.sys   Sat Nov 20 03:24:06 2010 (4CE793B6)
fffff880`01d8c000 fffff880`01da2000   disk     disk.sys     Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`01da2000 fffff880`01dd2000   CLASSPNP CLASSPNP.SYS Sat Nov 20 03:19:23 2010 (4CE7929B)
fffff880`01de0000 fffff880`01df6000   vwififlt vwififlt.sys Mon Jul 13 19:07:22 2009 (4A5BCC3A)
fffff880`02e00000 fffff880`02e53000   nwifi    nwifi.sys    Mon Jul 13 19:07:23 2009 (4A5BCC3B)
fffff880`02e53000 fffff880`02e66000   ndisuio  ndisuio.sys  Sat Nov 20 04:50:08 2010 (4CE7A7E0)
fffff880`02e66000 fffff880`02e7e000   rspndr   rspndr.sys   Mon Jul 13 19:08:50 2009 (4A5BCC92)
fffff880`02e7e000 fffff880`02f47000   HTTP     HTTP.sys     Sat Nov 20 03:24:30 2010 (4CE793CE)
fffff880`02f47000 fffff880`02f65000   bowser   bowser.sys   Tue Feb 22 22:55:04 2011 (4D649328)
fffff880`02f65000 fffff880`02f7d000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:08:25 2009 (4A5BCC79)
fffff880`02f7d000 fffff880`02faa000   mrxsmb   mrxsmb.sys   Tue Apr 26 21:40:38 2011 (4DB78226)
fffff880`02faa000 fffff880`02ff8000   mrxsmb10 mrxsmb10.sys Tue Apr 26 21:39:40 2011 (4DB781EC)
fffff880`04000000 fffff880`0400f000   netbios  netbios.sys  Mon Jul 13 19:09:26 2009 (4A5BCCB6)
fffff880`0400f000 fffff880`04217000   dump_iaStor dump_iaStor.sys Fri Oct 02 14:58:50 2009 (4AC65B7A)
fffff880`0422c000 fffff880`04256000   cdrom    cdrom.sys    Sat Nov 20 03:19:20 2010 (4CE79298)
fffff880`04256000 fffff880`04287000   MpFilter MpFilter.sys Wed Apr 06 15:07:29 2011 (4D9CC801)
fffff880`04287000 fffff880`04290000   Null     Null.SYS     Mon Jul 13 18:19:37 2009 (4A5BC109)
fffff880`04290000 fffff880`04297000   Beep     Beep.SYS     Mon Jul 13 19:00:13 2009 (4A5BCA8D)
fffff880`04297000 fffff880`042a5000   vga      vga.sys      Mon Jul 13 18:38:47 2009 (4A5BC587)
fffff880`042a5000 fffff880`042ca000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 18:38:51 2009 (4A5BC58B)
fffff880`042ca000 fffff880`042da000   watchdog watchdog.sys Mon Jul 13 18:37:35 2009 (4A5BC53F)
fffff880`042da000 fffff880`042e3000   RDPCDD   RDPCDD.sys   Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`042e3000 fffff880`042ec000   rdpencdd rdpencdd.sys Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff880`042ec000 fffff880`042f5000   rdprefmp rdprefmp.sys Mon Jul 13 19:16:35 2009 (4A5BCE63)
fffff880`042f5000 fffff880`04300000   Msfs     Msfs.SYS     Mon Jul 13 18:19:47 2009 (4A5BC113)
fffff880`04300000 fffff880`04311000   Npfs     Npfs.SYS     Mon Jul 13 18:19:48 2009 (4A5BC114)
fffff880`04311000 fffff880`04333000   tdx      tdx.sys      Sat Nov 20 03:21:54 2010 (4CE79332)
fffff880`04333000 fffff880`04340000   TDI      TDI.SYS      Sat Nov 20 03:22:06 2010 (4CE7933E)
fffff880`04340000 fffff880`043c9000   afd      afd.sys      Sun Apr 24 21:33:58 2011 (4DB4DD96)
fffff880`043c9000 fffff880`043d2000   wfplwf   wfplwf.sys   Mon Jul 13 19:09:26 2009 (4A5BCCB6)
fffff880`043d2000 fffff880`043f8000   pacer    pacer.sys    Sat Nov 20 04:52:18 2010 (4CE7A862)
fffff880`04400000 fffff880`04456000   USBPORT  USBPORT.SYS  Thu Mar 24 22:29:12 2011 (4D8C0C08)
fffff880`04456000 fffff880`0446c000   intelppm intelppm.sys Mon Jul 13 18:19:25 2009 (4A5BC0FD)
fffff880`0446c000 fffff880`0447c000   CompositeBus CompositeBus.sys Sat Nov 20 04:33:17 2010 (4CE7A3ED)
fffff880`04490000 fffff880`044df000   atikmpag atikmpag.sys Tue Mar 08 22:17:42 2011 (4D76FF66)
fffff880`044df000 fffff880`045d3000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 03:50:50 2010 (4CE799FA)
fffff880`045d3000 fffff880`045e9000   AgileVpn AgileVpn.sys Mon Jul 13 19:10:24 2009 (4A5BCCF0)
fffff880`04c0a000 fffff880`05531000   atikmdag atikmdag.sys Tue Mar 08 22:32:17 2011 (4D7702D1)
fffff880`05531000 fffff880`05577000   dxgmms1  dxgmms1.sys  Sat Nov 20 03:49:53 2010 (4CE799C1)
fffff880`05577000 fffff880`0559b000   HDAudBus HDAudBus.sys Sat Nov 20 04:43:42 2010 (4CE7A65E)
fffff880`0559b000 fffff880`055ac000   usbehci  usbehci.sys  Thu Mar 24 22:29:04 2011 (4D8C0C00)
fffff880`055ac000 fffff880`055f1000   a7h8lnr2 a7h8lnr2.SYS Tue Jul 14 16:12:55 2009 (4A5CF4D7)
fffff880`055f1000 fffff880`055fd000   ndistapi ndistapi.sys Mon Jul 13 19:10:00 2009 (4A5BCCD8)
fffff880`05a00000 fffff880`05a70000   Rt64win7 Rt64win7.sys Mon Mar 21 08:20:32 2011 (4D8750A0)
fffff880`05a70000 fffff880`05a8e000   i8042prt i8042prt.sys Mon Jul 13 18:19:57 2009 (4A5BC11D)
fffff880`05a8e000 fffff880`05a9d000   kbdclass kbdclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`05aa6000 fffff880`06153000   NETw5s64 NETw5s64.sys Tue Sep 15 14:40:39 2009 (4AAFEDB7)
fffff880`06153000 fffff880`06160000   vwifibus vwifibus.sys Mon Jul 13 19:07:21 2009 (4A5BCC39)
fffff880`06160000 fffff880`06171c80   ohci1394 ohci1394.sys Mon Jul 13 19:06:45 2009 (4A5BCC15)
fffff880`06172000 fffff880`0618a000   1394BUS  1394BUS.SYS  Mon Jul 13 19:06:38 2009 (4A5BCC0E)
fffff880`0618a000 fffff880`061b1000   jmcr     jmcr.sys     Thu Jul 09 07:45:19 2009 (4A55E65F)
fffff880`061b1000 fffff880`061c0000   mouclass mouclass.sys Mon Jul 13 18:19:50 2009 (4A5BC116)
fffff880`061c0000 fffff880`061c4500   CmBatt   CmBatt.sys   Mon Jul 13 18:31:03 2009 (4A5BC3B7)
fffff880`061c5000 fffff880`061e2000   enecir   enecir.sys   Wed May 20 01:08:57 2009 (4A139E79)
fffff880`061e2000 fffff880`061eb000   wmiacpi  wmiacpi.sys  Mon Jul 13 18:31:02 2009 (4A5BC3B6)
fffff880`061eb000 fffff880`061f8000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 07:17:04 2009 (4A1151C0)
fffff880`061f8000 fffff880`061f9480   swenum   swenum.sys   Mon Jul 13 19:00:18 2009 (4A5BCA92)
fffff880`06200000 fffff880`06222000   drmk     drmk.sys     Mon Jul 13 20:01:25 2009 (4A5BD8E5)
fffff880`06222000 fffff880`06227200   ksthunk  ksthunk.sys  Mon Jul 13 19:00:19 2009 (4A5BCA93)
fffff880`06228000 fffff880`0624b000   luafv    luafv.sys    Mon Jul 13 18:26:13 2009 (4A5BC295)
fffff880`0624b000 fffff880`0626c000   WudfPf   WudfPf.sys   Sat Nov 20 04:42:44 2010 (4CE7A624)
fffff880`0626c000 fffff880`06281000   lltdio   lltdio.sys   Mon Jul 13 19:08:50 2009 (4A5BCC92)
fffff880`06281000 fffff880`062a5000   mrxsmb20 mrxsmb20.sys Tue Apr 26 21:39:37 2011 (4DB781E9)
fffff880`062a6000 fffff880`062e9000   ks       ks.sys       Sat Nov 20 04:33:23 2010 (4CE7A3F3)
fffff880`062e9000 fffff880`062fb000   circlass circlass.sys Mon Jul 13 19:06:34 2009 (4A5BCC0A)
fffff880`062fb000 fffff880`0630d000   umbus    umbus.sys    Sat Nov 20 04:44:37 2010 (4CE7A695)
fffff880`0630d000 fffff880`06367000   usbhub   usbhub.sys   Thu Mar 24 22:29:25 2011 (4D8C0C15)
fffff880`06367000 fffff880`0637c000   NDProxy  NDProxy.SYS  Sat Nov 20 04:52:20 2010 (4CE7A864)
fffff880`0637c000 fffff880`063ae700   RtHDMIVX RtHDMIVX.sys Wed Dec 02 00:33:25 2009 (4B160A35)
fffff880`063af000 fffff880`063ec000   portcls  portcls.sys  Mon Jul 13 19:06:27 2009 (4A5BCC03)
fffff880`07e00000 fffff880`07e0e000   monitor  monitor.sys  Mon Jul 13 18:38:52 2009 (4A5BC58C)
fffff880`07e0e000 fffff880`07e17000   cpuz135_x64 cpuz135_x64.sys Tue Nov 09 07:33:36 2010 (4CD94DB0)
fffff880`07e17000 fffff880`08032c00   RTKVHD64 RTKVHD64.sys Thu Dec 03 07:42:57 2009 (4B17C061)
fffff880`08033000 fffff880`08164000   agrsm64  agrsm64.sys  Mon Apr 06 16:31:06 2009 (49DA749A)
fffff880`08164000 fffff880`08165f00   USBD     USBD.SYS     Thu Mar 24 22:28:59 2011 (4D8C0BFB)
fffff880`08166000 fffff880`08175000   modem    modem.sys    Mon Jul 13 19:10:48 2009 (4A5BCD08)
fffff880`08175000 fffff880`08186000   hidir    hidir.sys    Mon Jul 13 19:06:23 2009 (4A5BCBFF)
fffff880`08186000 fffff880`0819f000   HIDCLASS HIDCLASS.SYS Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`0819f000 fffff880`081a7080   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:06:17 2009 (4A5BCBF9)
fffff880`081a8000 fffff880`081b6000   kbdhid   kbdhid.sys   Sat Nov 20 04:33:25 2010 (4CE7A3F5)
fffff880`081b6000 fffff880`081c3000   mouhid   mouhid.sys   Mon Jul 13 19:00:20 2009 (4A5BCA94)
fffff880`081e4000 fffff880`081f0000   Dxapi    Dxapi.sys    Mon Jul 13 18:38:28 2009 (4A5BC574)
fffff880`081f0000 fffff880`081fe000   hidusb   hidusb.sys   Sat Nov 20 04:43:49 2010 (4CE7A665)
fffff880`0a477000 fffff880`0a51d000   peauth   peauth.sys   Mon Jul 13 20:01:19 2009 (4A5BD8DF)
fffff880`0a51d000 fffff880`0a528000   secdrv   secdrv.SYS   Wed Sep 13 08:18:38 2006 (4508052E)
fffff880`0a528000 fffff880`0a559000   srvnet   srvnet.sys   Thu Apr 28 22:05:35 2011 (4DBA2AFF)
fffff880`0a559000 fffff880`0a56b000   tcpipreg tcpipreg.sys Sat Nov 20 04:51:48 2010 (4CE7A844)
fffff880`0a56b000 fffff880`0a5d4000   srv2     srv2.sys     Thu Apr 28 22:05:46 2011 (4DBA2B0A)
fffff880`0a871000 fffff880`0a87f000   crashdmp crashdmp.sys Mon Jul 13 19:01:01 2009 (4A5BCABD)
fffff880`0a883000 fffff880`0a91b000   srv      srv.sys      Thu Apr 28 22:06:06 2011 (4DBA2B1E)
fffff880`0a91b000 fffff880`0a933000   NisDrvWFP NisDrvWFP.sys Wed Apr 06 15:08:53 2011 (4D9CC855)
fffff880`0a933000 fffff880`0a946000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 18:21:51 2009 (4A5BC18F)
fffff960`000d0000 fffff960`003e3000   win32k   win32k.sys   Fri Jun 10 22:06:57 2011 (4DF2DBD1)
fffff960`00430000 fffff960`0043a000   TSDDD    TSDDD.dll    Mon Jul 13 19:16:34 2009 (4A5BCE62)
fffff960`00700000 fffff960`00727000   cdd      cdd.dll      Sat Nov 20 06:55:34 2010 (4CE7C546)

Unloaded modules:
fffff880`0a800000 fffff880`0a871000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`081c3000 fffff880`081d1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0400f000 fffff880`04217000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00208000
fffff880`081d1000 fffff880`081e4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`0a933000 fffff880`0a9a4000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01dd2000 fffff880`01de0000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`04011000 fffff880`04219000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00208000
fffff880`04219000 fffff880`0422c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

Robocaspar · 05 Aug 2011

I see I will grab the mbam and run a scan tonight. Will update when its done. Thank you!