Win 7 BSODed (from a clean install to defective)

usasma · 08 Sep 2009

I suspect a malware infection - I've seen this sort of issue show up at work.
The grub message is new to me - but the one's at work all involve the bootmanager is some way or another. Unfortunately our only solution at work is to either use System Restore (unsure of it's long-term effectiveness) or a wipe and reinstall.

There's nothing significant in the memory dump file that I could find.

Try posting over in the Security forums for help in determining if it's an infection: System Security - Windows 7 Forums

Clobon · 08 Sep 2009

usasma said:

I suspect a malware infection - I've seen this sort of issue show up at work.
The grub message is new to me - but the one's at work all involve the bootmanager is some way or another. Unfortunately our only solution at work is to either use System Restore (unsure of it's long-term effectiveness) or a wipe and reinstall.

There's nothing significant in the memory dump file that I could find.

Try posting over in the Security forums for help in determining if it's an infection: System Security - Windows 7 Forums

Hm... Thanks a lot for going through the dumpfile.
An infection? How? I wiped the HD with GPartED Live so nothing could
remain on the disc. Maybe I'll do "DD if=/dev/urandom of=/dev/sda"...
That'll take care of ANYTHING on that HD.

Yeah I think I'm going to do that. Wipe with DD without being connected
to the net and after the installation is finnished I'll download just the AV
client and the updates. Maybe then...

And you found absolutely nothing noteworthy in that dumpfile?
So a hardware failure is out of the question? Or driver issues?

Regards, Clobon

usasma · 09 Sep 2009

No, I found nothing noteworthy in the dump file - that means no direct references to anything driver related. That does not rule out hardware issues (very few BSOD's actually refer directly to a hardware problem) - nor does it rule out a Windows corruption. But that takes more than just one dump file to figure out.

I'd suggest that you look at this link on my blog for some suggestions for trying to track this down: BSOD troubleshooting preliminaries - Vox

The dump file blames ntoskrnl.exe - a core Windows file. If there were issues with this file you'd likely have more problems than just a couple of BSOD's. So, when dealing with Blue Screen events we omit consideration of a Windows corruption on the first couple of analysis'.

Then I check for outdated 3rd party drivers - as they can cause untold problems even if they're working correctly.

Then I review the actual analysis - first looking for issues in the heading. In yours there was nothing of note - but that's not surprising in a fresh installation. As you add updates I'd expect to see issues with the Symbol files - but they weren't present in yours.

Then I check the rest of the analysis, looking for hints and mentions of things that could be causing this. In the stack text there's no mention of anything other than ntoskrnl.exe - so I presume that the thing that caused the error had exited already.

So, what we have now is that Windows says that an exception in a system service caused the BSOD - and the exception was in the accessing of memory (the c0000005 parameter).

At this point, the first thing to look at would be the stuff that you installed on the system. This includes any programs and any 3rd party drivers that you installed. I'd presume that the Windows Update installed stuff was OK (for now).

Here's the output of the dump file with a listing of all the drivers loaded at that point (the long lists at the end):

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\FUBAR-RC1-Desktop\TempDUMP\DATA\01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7100 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7100.0.amd64fre.winmain_win7rc.090421-1700
Machine Name:
Kernel base = 0xfffff800`02c0f000 PsLoadedModuleList = 0xfffff800`02e48e90
Debug session time: Mon Sep  7 17:49:57.302 2009 (GMT-4)
System Uptime: 0 days 3:52:47.894
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002f213a5, fffff880088376f0, 0}

Probably caused by : ntkrnlmp.exe ( nt!CmpKcbCacheLookup+1e5 )

Followup: MachineOwner
---------

1: kd> !thread;!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;.logclose;q
GetPointerFromAddress: unable to read from fffff80002eb3000
THREAD fffffa8003e59650  Cid 039c.0d74  Teb: 000007fffffa6000 Win32Thread: fffff900c1ada010 RUNNING on processor 1
Not impersonating
GetUlongFromAddress: unable to read from fffff80002df1b74
Owning Process            fffffa80075a19d0       Image:         svchost.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      895372       
Context Switch Count      1169                 LargeStack
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x0000000077bba860
Stack Init fffff88008838d70 Current fffff88008837e90
Base fffff88008839000 Limit fffff88008831000 Call 0
Priority 9 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`08836e48 fffff800`02c8d4e9 : 00000000`0000003b 00000000`c0000005 fffff800`02f213a5 fffff880`088376f0 : nt!KeBugCheckEx
fffff880`08836e50 fffff800`02c8ce3c : fffff880`08837e98 fffff880`088376f0 fffff880`08838be0 fffff880`08837e98 : nt!KiBugCheckDispatch+0x69
fffff880`08836f90 fffff800`02cacd5d : fffff880`08837e98 00000000`00100000 00000000`00000000 fffff800`02c8d1d3 : nt!KiSystemServiceHandler+0x7c
fffff880`08836fd0 fffff800`02c79514 : fffff800`02e8a170 fffff800`02c0f000 fffff800`02c8cdc0 fffff800`02c8d1d3 : nt!RtlpExecuteHandlerForException+0xd
fffff880`08837000 fffff800`02cb3089 : fffff880`00000000 fffff880`088376f0 fffff880`00000000 fffff880`08838be0 : nt!RtlDispatchException+0x1f4
fffff880`088376c0 fffff800`02c8d5c2 : fffff880`08837e98 00000000`00000000 fffff880`08837f40 fffff8a0`00023768 : nt!KiDispatchException+0x135
fffff880`08837d60 fffff800`02c8beca : fffffa80`046db480 fffffa80`040ca400 00000000`00000000 00000000`00000702 : nt!KiExceptionDispatch+0xc2
fffff880`08837f40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiGeneralProtectionFault+0x10a

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002f213a5, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff880088376f0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!CmpKcbCacheLookup+1e5
fffff800`02f213a5 418b45f4        mov     eax,dword ptr [r13-0Ch]

CONTEXT:  fffff880088376f0 -- (.cxr 0xfffff880088376f0)
.cxr 0xfffff880088376f0
rax=0000000000000008 rbx=0000000000000000 rcx=0000000000000954
rdx=000000000a55fa70 rsi=fffff8a000023768 rdi=fffff880088382b0
rip=fffff80002f213a5 rsp=fffff880088380d0 rbp=fffff8a000023170
 r8=0000000000000007  r9=0000000000000000 r10=0000000000000008
r11=fffff88008838268 r12=fffff8a001b784a8 r13=ffdef8a000e39df8
r14=0000000000000003 r15=fffff8a0068db130
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!CmpKcbCacheLookup+0x1e5:
fffff800`02f213a5 418b45f4        mov     eax,dword ptr [r13-0Ch] ds:002b:ffdef8a0`00e39dec=????????
.cxr
Resetting default scope

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002f213a5

STACK_TEXT:  
fffff880`088380d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmpKcbCacheLookup+0x1e5


FOLLOWUP_IP: 
nt!CmpKcbCacheLookup+1e5
fffff800`02f213a5 418b45f4        mov     eax,dword ptr [r13-0Ch]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!CmpKcbCacheLookup+1e5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  49ee9439

STACK_COMMAND:  .cxr 0xfffff880088376f0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!CmpKcbCacheLookup+1e5

BUCKET_ID:  X64_0x3B_nt!CmpKcbCacheLookup+1e5

Followup: MachineOwner
---------

rax=fffff88008836f50 rbx=fffff80002e8a170 rcx=000000000000003b
rdx=00000000c0000005 rsi=fffff80002c8d1d3 rdi=0000000000000000
rip=fffff80002c8df80 rsp=fffff88008836e48 rbp=fffff80002c8cdc0
 r8=fffff80002f213a5  r9=fffff880088376f0 r10=0000000000000000
r11=fffff88008838be0 r12=fffff880088370c0 r13=0000000000100000
r14=fffff88008837e98 r15=fffff88008838be0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`02c8df80 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`08836e50=000000000000003b
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`08836e48 fffff800`02c8d4e9 : 00000000`0000003b 00000000`c0000005 fffff800`02f213a5 fffff880`088376f0 : nt!KeBugCheckEx
fffff880`08836e50 fffff800`02c8ce3c : fffff880`08837e98 fffff880`088376f0 fffff880`08838be0 fffff880`08837e98 : nt!KiBugCheckDispatch+0x69
fffff880`08836f90 fffff800`02cacd5d : fffff880`08837e98 00000000`00100000 00000000`00000000 fffff800`02c8d1d3 : nt!KiSystemServiceHandler+0x7c
fffff880`08836fd0 fffff800`02c79514 : fffff800`02e8a170 fffff800`02c0f000 fffff800`02c8cdc0 fffff800`02c8d1d3 : nt!RtlpExecuteHandlerForException+0xd
fffff880`08837000 fffff800`02cb3089 : fffff880`00000000 fffff880`088376f0 fffff880`00000000 fffff880`08838be0 : nt!RtlDispatchException+0x1f4
fffff880`088376c0 fffff800`02c8d5c2 : fffff880`08837e98 00000000`00000000 fffff880`08837f40 fffff8a0`00023768 : nt!KiDispatchException+0x135
fffff880`08837d60 fffff800`02c8beca : fffffa80`046db480 fffffa80`040ca400 00000000`00000000 00000000`00000702 : nt!KiExceptionDispatch+0xc2
fffff880`08837f40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiGeneralProtectionFault+0x10a
start             end                 module name
fffff800`00ba1000 fffff800`00bab000   kdcom    kdcom.dll    Wed Apr 22 01:27:31 2009 (49EEAAC3)
fffff800`02c0f000 fffff800`031e9000   nt       ntkrnlmp.exe Tue Apr 21 23:51:21 2009 (49EE9439)
fffff800`031e9000 fffff800`03232000   hal      hal.dll      Wed Apr 22 01:23:51 2009 (49EEA9E7)
fffff880`00c00000 fffff880`00c09000   atapi    atapi.sys    Tue Apr 21 23:23:18 2009 (49EE8DA6)
fffff880`00c09000 fffff880`00c33000   ataport  ataport.SYS  Tue Apr 21 23:23:22 2009 (49EE8DAA)
fffff880`00c33000 fffff880`00c3e000   msahci   msahci.sys   Wed Apr 22 00:09:58 2009 (49EE9896)
fffff880`00c3e000 fffff880`00c49000   amdxata  amdxata.sys  Tue Mar 10 19:22:44 2009 (49B6F644)
fffff880`00c62000 fffff880`00c9f000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Wed Apr 22 01:25:27 2009 (49EEAA47)
fffff880`00c9f000 fffff880`00cb3000   PSHED    PSHED.dll    Wed Apr 22 01:28:36 2009 (49EEAB04)
fffff880`00cb3000 fffff880`00d11000   CLFS     CLFS.SYS     Tue Apr 21 23:23:24 2009 (49EE8DAC)
fffff880`00d11000 fffff880`00dd1000   CI       CI.dll       Wed Apr 22 01:28:26 2009 (49EEAAFA)
fffff880`00dd1000 fffff880`00de1000   PCIIDEX  PCIIDEX.SYS  Tue Apr 21 23:23:19 2009 (49EE8DA7)
fffff880`00de1000 fffff880`00dfb000   mountmgr mountmgr.sys Tue Apr 21 23:23:27 2009 (49EE8DAF)
fffff880`00e00000 fffff880`00e09000   WMILIB   WMILIB.SYS   Tue Apr 21 23:23:25 2009 (49EE8DAD)
fffff880`00e09000 fffff880`00e13000   msisadrv msisadrv.sys Tue Apr 21 23:23:13 2009 (49EE8DA1)
fffff880`00e13000 fffff880`00e46000   pci      pci.sys      Tue Apr 21 23:23:19 2009 (49EE8DA7)
fffff880`00e46000 fffff880`00e53000   vdrvroot vdrvroot.sys Wed Apr 22 00:10:21 2009 (49EE98AD)
fffff880`00e53000 fffff880`00e69000   partmgr  partmgr.sys  Tue Apr 21 23:23:32 2009 (49EE8DB4)
fffff880`00e69000 fffff880`00e7e000   volmgr   volmgr.sys   Tue Apr 21 23:23:30 2009 (49EE8DB2)
fffff880`00e7e000 fffff880`00ee6000   volmgrx  volmgrx.sys  Tue Apr 21 23:24:00 2009 (49EE8DD0)
fffff880`00ee6000 fffff880`00eed000   pciide   pciide.sys   Tue Apr 21 23:23:21 2009 (49EE8DA9)
fffff880`00ef3000 fffff880`00f97000   Wdf01000 Wdf01000.sys Tue Apr 21 23:25:47 2009 (49EE8E3B)
fffff880`00f97000 fffff880`00fa6000   WDFLDR   WDFLDR.SYS   Tue Apr 21 23:23:28 2009 (49EE8DB0)
fffff880`00fa6000 fffff880`00ffd000   ACPI     ACPI.sys     Tue Apr 21 23:23:23 2009 (49EE8DAB)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Tue Apr 21 23:40:07 2009 (49EE9197)
fffff880`0103a000 fffff880`0104c000   umbus    umbus.sys    Wed Apr 22 00:15:31 2009 (49EE99E3)
fffff880`01052000 fffff880`0109d000   fltmgr   fltmgr.sys   Tue Apr 21 23:23:28 2009 (49EE8DB0)
fffff880`0109d000 fffff880`010b1000   fileinfo fileinfo.sys Tue Apr 21 23:39:41 2009 (49EE917D)
fffff880`010b1000 fffff880`0110f000   msrpc    msrpc.sys    Tue Apr 21 23:24:51 2009 (49EE8E03)
fffff880`0110f000 fffff880`01181000   cng      cng.sys      Tue Apr 21 23:56:45 2009 (49EE957D)
fffff880`01181000 fffff880`011cd000   volsnap  volsnap.sys  Tue Apr 21 23:23:40 2009 (49EE8DBC)
fffff880`011cd000 fffff880`011ee680   ncplelhp ncplelhp.sys Mon Nov 10 09:43:47 2008 (491848A3)
fffff880`01200000 fffff880`0120f000   mouclass mouclass.sys Tue Apr 21 23:23:17 2009 (49EE8DA5)
fffff880`01217000 fffff880`013c2000   Ntfs     Ntfs.sys     Tue Apr 21 23:24:23 2009 (49EE8DE7)
fffff880`013c2000 fffff880`013dc000   ksecdd   ksecdd.sys   Tue Apr 21 23:24:14 2009 (49EE8DDE)
fffff880`013dc000 fffff880`013ed000   pcw      pcw.sys      Tue Apr 21 23:23:14 2009 (49EE8DA2)
fffff880`013ed000 fffff880`013f7000   Fs_Rec   Fs_Rec.sys   Tue Apr 21 23:23:17 2009 (49EE8DA5)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Tue Apr 21 23:25:37 2009 (49EE8E31)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Tue Apr 21 23:57:47 2009 (49EE95BB)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Tue Apr 21 23:24:33 2009 (49EE8DF1)
fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Tue Apr 21 23:49:30 2009 (49EE93CA)
fffff880`014e5000 fffff880`014f7000   mup      mup.sys      Tue Apr 21 23:26:49 2009 (49EE8E79)
fffff880`014f8000 fffff880`015e9000   ndis     ndis.sys     Tue Apr 21 23:24:57 2009 (49EE8E09)
fffff880`015e9000 fffff880`015f2000   hwpolicy hwpolicy.sys Tue Apr 21 23:23:11 2009 (49EE8D9F)
fffff880`01600000 fffff880`01608000   spldr    spldr.sys    Wed Mar 25 15:59:44 2009 (49CA8D30)
fffff880`0160f000 fffff880`017ff000   tcpip    tcpip.sys    Tue Apr 21 23:27:56 2009 (49EE8EBC)
fffff880`01800000 fffff880`01821000   raspptp  raspptp.sys  Wed Apr 22 00:18:55 2009 (49EE9AAF)
fffff880`01821000 fffff880`0183b000   rassstp  rassstp.sys  Wed Apr 22 00:19:02 2009 (49EE9AB6)
fffff880`0183d000 fffff880`01877000   fvevol   fvevol.sys   Tue Apr 21 23:25:27 2009 (49EE8E27)
fffff880`01877000 fffff880`0188d000   disk     disk.sys     Tue Apr 21 23:23:30 2009 (49EE8DB2)
fffff880`0188d000 fffff880`018bd000   CLASSPNP CLASSPNP.SYS Tue Apr 21 23:23:28 2009 (49EE8DB0)
fffff880`018f5000 fffff880`0191f000   cdrom    cdrom.sys    Tue Apr 21 23:23:26 2009 (49EE8DAE)
fffff880`0191f000 fffff880`01928000   Null     Null.SYS     Tue Apr 21 23:23:15 2009 (49EE8DA3)
fffff880`01928000 fffff880`0192f000   Beep     Beep.SYS     Wed Apr 22 00:08:57 2009 (49EE9859)
fffff880`0192f000 fffff880`01952000   ehdrv    ehdrv.sys    Thu May 14 09:32:02 2009 (4A0C1D52)
fffff880`01952000 fffff880`01960000   vga      vga.sys      Tue Apr 21 23:45:08 2009 (49EE92C4)
fffff880`01960000 fffff880`01985000   VIDEOPRT VIDEOPRT.SYS Tue Apr 21 23:45:11 2009 (49EE92C7)
fffff880`01985000 fffff880`01995000   watchdog watchdog.sys Tue Apr 21 23:43:47 2009 (49EE9273)
fffff880`01995000 fffff880`0199e000   RDPCDD   RDPCDD.sys   Wed Apr 22 00:25:20 2009 (49EE9C30)
fffff880`0199e000 fffff880`019a7000   rdpencdd rdpencdd.sys Wed Apr 22 00:25:20 2009 (49EE9C30)
fffff880`019a7000 fffff880`019b0000   rdprefmp rdprefmp.sys Wed Apr 22 00:25:20 2009 (49EE9C30)
fffff880`019b0000 fffff880`019bb000   Msfs     Msfs.SYS     Tue Apr 21 23:23:23 2009 (49EE8DAB)
fffff880`019bb000 fffff880`019cc000   Npfs     Npfs.SYS     Tue Apr 21 23:23:26 2009 (49EE8DAE)
fffff880`019cc000 fffff880`019ea000   tdx      tdx.sys      Tue Apr 21 23:24:33 2009 (49EE8DF1)
fffff880`019ea000 fffff880`019f7000   TDI      TDI.SYS      Tue Apr 21 23:24:34 2009 (49EE8DF2)
fffff880`02600000 fffff880`02615000   lltdio   lltdio.sys   Wed Apr 22 00:17:30 2009 (49EE9A5A)
fffff880`02615000 fffff880`0262d000   rspndr   rspndr.sys   Wed Apr 22 00:17:30 2009 (49EE9A5A)
fffff880`0262d000 fffff880`026c4000   srv      srv.sys      Tue Apr 21 23:27:56 2009 (49EE8EBC)
fffff880`026d2000 fffff880`02795000   eamon    eamon.sys    Thu May 14 09:30:49 2009 (4A0C1D09)
fffff880`02795000 fffff880`027b6000   WudfPf   WudfPf.sys   Wed Apr 22 00:14:25 2009 (49EE99A1)
fffff880`027b6000 fffff880`027c4000   crashdmp crashdmp.sys Wed Apr 22 00:10:01 2009 (49EE9899)
fffff880`027c4000 fffff880`027d0000   dump_dumpata dump_dumpata.sys Tue Apr 21 23:23:18 2009 (49EE8DA6)
fffff880`027d0000 fffff880`027db000   dump_msahci dump_msahci.sys Wed Apr 22 00:09:58 2009 (49EE9896)
fffff880`027db000 fffff880`027ee000   dump_dumpfve dump_dumpfve.sys Tue Apr 21 23:25:16 2009 (49EE8E1C)
fffff880`02c00000 fffff880`02c14000   termdd   termdd.sys   Wed Apr 22 00:25:18 2009 (49EE9C2E)
fffff880`02c14000 fffff880`02c65000   rdbss    rdbss.sys    Tue Apr 21 23:27:03 2009 (49EE8E87)
fffff880`02c65000 fffff880`02c71000   nsiproxy nsiproxy.sys Tue Apr 21 23:24:29 2009 (49EE8DED)
fffff880`02c71000 fffff880`02c7c000   mssmbios mssmbios.sys Tue Apr 21 23:35:11 2009 (49EE906F)
fffff880`02c7c000 fffff880`02c8b000   discache discache.sys Tue Apr 21 23:43:33 2009 (49EE9265)
fffff880`02c8b000 fffff880`02cba000   ndiswan  ndiswan.sys  Wed Apr 22 00:18:51 2009 (49EE9AAB)
fffff880`02cc8000 fffff880`02d51000   afd      afd.sys      Tue Apr 21 23:24:52 2009 (49EE8E04)
fffff880`02d51000 fffff880`02d96000   netbt    netbt.sys    Tue Apr 21 23:24:34 2009 (49EE8DF2)
fffff880`02d96000 fffff880`02d9f000   wfplwf   wfplwf.sys   Wed Apr 22 00:18:10 2009 (49EE9A82)
fffff880`02d9f000 fffff880`02dc5000   pacer    pacer.sys    Wed Apr 22 00:18:21 2009 (49EE9A8D)
fffff880`02dc5000 fffff880`02dd4000   netbios  netbios.sys  Wed Apr 22 00:18:10 2009 (49EE9A82)
fffff880`02dd4000 fffff880`02def000   wanarp   wanarp.sys   Wed Apr 22 00:19:03 2009 (49EE9AB7)
fffff880`02def000 fffff880`02dfe000   kbdclass kbdclass.sys Tue Apr 21 23:23:17 2009 (49EE8DA5)
fffff880`03400000 fffff880`0344d000   mrxsmb10 mrxsmb10.sys Tue Apr 21 23:27:00 2009 (49EE8E84)
fffff880`0344d000 fffff880`03470000   mrxsmb20 mrxsmb20.sys Tue Apr 21 23:26:57 2009 (49EE8E81)
fffff880`03470000 fffff880`03490000   epfwwfpr epfwwfpr.sys Thu May 14 09:12:55 2009 (4A0C18D7)
fffff880`034aa000 fffff880`03572000   HTTP     HTTP.sys     Tue Apr 21 23:25:07 2009 (49EE8E13)
fffff880`03572000 fffff880`03590000   bowser   bowser.sys   Tue Apr 21 23:26:51 2009 (49EE8E7B)
fffff880`03590000 fffff880`035a8000   mpsdrv   mpsdrv.sys   Wed Apr 22 00:17:04 2009 (49EE9A40)
fffff880`035a8000 fffff880`035d4000   mrxsmb   mrxsmb.sys   Tue Apr 21 23:26:56 2009 (49EE8E80)
fffff880`03a00000 fffff880`03a55000   USBPORT  USBPORT.SYS  Wed Apr 22 00:15:12 2009 (49EE99D0)
fffff880`03a55000 fffff880`03a79000   HDAudBus HDAudBus.sys Wed Apr 22 00:14:56 2009 (49EE99C0)
fffff880`03a79000 fffff880`03a9d000   rasl2tp  rasl2tp.sys  Wed Apr 22 00:18:50 2009 (49EE9AAA)
fffff880`03a9d000 fffff880`03ab8000   raspppoe raspppoe.sys Wed Apr 22 00:18:56 2009 (49EE9AB0)
fffff880`03ab8000 fffff880`03ac3000   rdpbus   rdpbus.sys   Wed Apr 22 00:26:27 2009 (49EE9C73)
fffff880`03aca000 fffff880`03b4d000   csc      csc.sys      Tue Apr 21 23:27:28 2009 (49EE8EA0)
fffff880`03b4d000 fffff880`03b6b000   dfsc     dfsc.sys     Tue Apr 21 23:26:50 2009 (49EE8E7A)
fffff880`03b6b000 fffff880`03b7c000   blbdrive blbdrive.sys Tue Apr 21 23:41:55 2009 (49EE9203)
fffff880`03b7c000 fffff880`03ba0000   tunnel   tunnel.sys   Wed Apr 22 00:18:20 2009 (49EE9A8C)
fffff880`03ba0000 fffff880`03bb6000   intelppm intelppm.sys Tue Apr 21 23:23:12 2009 (49EE8DA0)
fffff880`03bb6000 fffff880`03bfc000   dxgmms1  dxgmms1.sys  Tue Apr 21 23:44:50 2009 (49EE92B2)
fffff880`03c00000 fffff880`03c11000   L1E62x64 L1E62x64.sys Fri Mar 27 11:09:50 2009 (49CCEC3E)
fffff880`03c11000 fffff880`03c21000   CompositeBus CompositeBus.sys Wed Apr 22 00:09:18 2009 (49EE986E)
fffff880`03c21000 fffff880`03c37000   AgileVpn AgileVpn.sys Wed Apr 22 00:19:00 2009 (49EE9AB4)
fffff880`03c37000 fffff880`03cdfe80   ctaud2k  ctaud2k.sys  Wed Jul 15 02:44:49 2009 (4A5D7AE1)
fffff880`03ce0000 fffff880`03d1d000   portcls  portcls.sys  Wed Apr 22 00:15:10 2009 (49EE99CE)
fffff880`03d1d000 fffff880`03d3f000   drmk     drmk.sys     Wed Apr 22 01:06:19 2009 (49EEA5CB)
fffff880`03d3f000 fffff880`03d82000   ks       ks.sys       Wed Apr 22 00:09:13 2009 (49EE9869)
fffff880`03d82000 fffff880`03db3000   ctoss2k  ctoss2k.sys  Wed Jul 15 02:40:56 2009 (4A5D79F8)
fffff880`03db3000 fffff880`03dbb000   ctprxy2k ctprxy2k.sys Wed Jul 15 02:44:52 2009 (4A5D7AE4)
fffff880`03dbb000 fffff880`03dc0200   ksthunk  ksthunk.sys  Wed Apr 22 00:09:04 2009 (49EE9860)
fffff880`03dc1000 fffff880`03dff000   1394ohci 1394ohci.sys Wed Apr 22 00:15:43 2009 (49EE99EF)
fffff880`04200000 fffff880`04219000   HIDCLASS HIDCLASS.SYS Wed Apr 22 00:15:02 2009 (49EE99C6)
fffff880`04219000 fffff880`04234000   USBSTOR  USBSTOR.SYS  Wed Apr 22 00:15:14 2009 (49EE99D2)
fffff880`04234000 fffff880`04288000   udfs     udfs.sys     Tue Apr 21 23:26:41 2009 (49EE8E71)
fffff880`04288000 fffff880`042ab000   luafv    luafv.sys    Tue Apr 21 23:28:18 2009 (49EE8ED2)
fffff880`042d8000 fffff880`04332000   usbhub   usbhub.sys   Wed Apr 22 00:15:41 2009 (49EE99ED)
fffff880`04332000 fffff880`04347000   NDProxy  NDProxy.SYS  Wed Apr 22 00:18:44 2009 (49EE9AA4)
fffff880`04347000 fffff880`0437f000   ctsfm2k  ctsfm2k.sys  Wed Jul 15 02:40:38 2009 (4A5D79E6)
fffff880`0439b000 fffff880`043d8000   CT20XUT  CT20XUT.SYS  Wed Jul 15 02:46:21 2009 (4A5D7B3D)
fffff880`043d8000 fffff880`043f5000   usbccgp  usbccgp.sys  Wed Apr 22 00:15:22 2009 (49EE99DA)
fffff880`04800000 fffff880`04811000   usbehci  usbehci.sys  Wed Apr 22 00:15:12 2009 (49EE99D0)
fffff880`04811000 fffff880`0481d000   ndistapi ndistapi.sys Wed Apr 22 00:18:40 2009 (49EE9AA0)
fffff880`0481d000 fffff880`0481e480   swenum   swenum.sys   Wed Apr 22 00:09:02 2009 (49EE985E)
fffff880`04827000 fffff880`052f2f00   nvlddmkm nvlddmkm.sys Tue Jul 14 15:50:52 2009 (4A5CE19C)
fffff880`052f3000 fffff880`052f4180   nvBridge nvBridge.kmd Tue Jul 14 15:26:48 2009 (4A5CDBF8)
fffff880`052f5000 fffff880`053e9000   dxgkrnl  dxgkrnl.sys  Tue Apr 21 23:45:14 2009 (49EE92CA)
fffff880`053e9000 fffff880`053f6000   usbuhci  usbuhci.sys  Wed Apr 22 00:15:06 2009 (49EE99CA)
fffff880`06400000 fffff880`0640e000   kbdhid   kbdhid.sys   Wed Apr 22 00:09:04 2009 (49EE9860)
fffff880`0640f000 fffff880`0659f000   ha20x22k ha20x22k.sys Wed Jul 15 02:44:02 2009 (4A5D7AB2)
fffff880`0659f000 fffff880`065e9000   emupia2k emupia2k.sys Wed Jul 15 02:40:28 2009 (4A5D79DC)
fffff880`065e9000 fffff880`065f6000   mouhid   mouhid.sys   Wed Apr 22 00:09:04 2009 (49EE9860)
fffff880`06800000 fffff880`0685c000   HdAudio  HdAudio.sys  Wed Apr 22 00:15:37 2009 (49EE99E9)
fffff880`0685c000 fffff880`06868000   Dxapi    Dxapi.sys    Tue Apr 21 23:44:44 2009 (49EE92AC)
fffff880`06868000 fffff880`06874000   usbprint usbprint.sys Wed Apr 22 00:45:19 2009 (49EEA0DF)
fffff880`06874000 fffff880`06875f00   USBD     USBD.SYS     Wed Apr 22 00:15:04 2009 (49EE99C8)
fffff880`06876000 fffff880`06884000   monitor  monitor.sys  Tue Apr 21 23:45:06 2009 (49EE92C2)
fffff880`06884000 fffff880`0688c080   HIDPARSE HIDPARSE.SYS Wed Apr 22 00:15:00 2009 (49EE99C4)
fffff880`0688d000 fffff880`069f1000   CTEXFIFX CTEXFIFX.SYS Wed Jul 15 02:46:15 2009 (4A5D7B37)
fffff880`069f1000 fffff880`069ff000   hidusb   hidusb.sys   Wed Apr 22 00:15:02 2009 (49EE99C6)
fffff880`06c00000 fffff880`06c69000   srv2     srv2.sys     Tue Apr 21 23:27:43 2009 (49EE8EAF)
fffff880`06c69000 fffff880`06c9a000   WUDFRd   WUDFRd.sys   Wed Apr 22 00:14:50 2009 (49EE99BA)
fffff880`06cb0000 fffff880`06d56000   peauth   peauth.sys   Wed Apr 22 01:06:32 2009 (49EEA5D8)
fffff880`06d56000 fffff880`06d61000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`06d61000 fffff880`06d8f000   srvnet   srvnet.sys   Tue Apr 21 23:27:40 2009 (49EE8EAC)
fffff880`06d8f000 fffff880`06da1000   tcpipreg tcpipreg.sys Wed Apr 22 00:18:29 2009 (49EE9A95)
fffff880`0aa89000 fffff880`0aafa000   spsys    spsys.sys    Wed Mar 25 16:24:09 2009 (49CA92E9)
fffff960`000c0000 fffff960`003d0000   win32k   win32k.sys   Tue Apr 21 23:46:20 2009 (49EE930C)
fffff960`00530000 fffff960`0053a000   TSDDD    TSDDD.dll    Wed Apr 22 00:25:18 2009 (49EE9C2E)
fffff960`00750000 fffff960`00777000   cdd      cdd.dll      unavailable (00000000)

Unloaded modules:
fffff880`06da1000 fffff880`06dbd000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06dd9000 fffff880`06df5000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06dbd000 fffff880`06dd9000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06da1000 fffff880`06dbd000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0437f000 fffff880`0439b000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018bd000 fffff880`018cb000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018cb000 fffff880`018d7000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018d7000 fffff880`018e2000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018e2000 fffff880`018f5000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff880`03dc1000 fffff880`03dff000   1394ohci 1394ohci.sys Wed Apr 22 00:15:43 2009 (49EE99EF)
fffff880`00fa6000 fffff880`00ffd000   ACPI     ACPI.sys     Tue Apr 21 23:23:23 2009 (49EE8DAB)
fffff880`02cc8000 fffff880`02d51000   afd      afd.sys      Tue Apr 21 23:24:52 2009 (49EE8E04)
fffff880`03c21000 fffff880`03c37000   AgileVpn AgileVpn.sys Wed Apr 22 00:19:00 2009 (49EE9AB4)
fffff880`00c3e000 fffff880`00c49000   amdxata  amdxata.sys  Tue Mar 10 19:22:44 2009 (49B6F644)
fffff880`00c00000 fffff880`00c09000   atapi    atapi.sys    Tue Apr 21 23:23:18 2009 (49EE8DA6)
fffff880`00c09000 fffff880`00c33000   ataport  ataport.SYS  Tue Apr 21 23:23:22 2009 (49EE8DAA)
fffff880`01928000 fffff880`0192f000   Beep     Beep.SYS     Wed Apr 22 00:08:57 2009 (49EE9859)
fffff880`03b6b000 fffff880`03b7c000   blbdrive blbdrive.sys Tue Apr 21 23:41:55 2009 (49EE9203)
fffff880`03572000 fffff880`03590000   bowser   bowser.sys   Tue Apr 21 23:26:51 2009 (49EE8E7B)
fffff960`00750000 fffff960`00777000   cdd      cdd.dll      unavailable (00000000)
fffff880`018f5000 fffff880`0191f000   cdrom    cdrom.sys    Tue Apr 21 23:23:26 2009 (49EE8DAE)
fffff880`00d11000 fffff880`00dd1000   CI       CI.dll       Wed Apr 22 01:28:26 2009 (49EEAAFA)
fffff880`0188d000 fffff880`018bd000   CLASSPNP CLASSPNP.SYS Tue Apr 21 23:23:28 2009 (49EE8DB0)
fffff880`00cb3000 fffff880`00d11000   CLFS     CLFS.SYS     Tue Apr 21 23:23:24 2009 (49EE8DAC)
fffff880`0110f000 fffff880`01181000   cng      cng.sys      Tue Apr 21 23:56:45 2009 (49EE957D)
fffff880`03c11000 fffff880`03c21000   CompositeBus CompositeBus.sys Wed Apr 22 00:09:18 2009 (49EE986E)
fffff880`027b6000 fffff880`027c4000   crashdmp crashdmp.sys Wed Apr 22 00:10:01 2009 (49EE9899)
fffff880`03aca000 fffff880`03b4d000   csc      csc.sys      Tue Apr 21 23:27:28 2009 (49EE8EA0)
fffff880`0439b000 fffff880`043d8000   CT20XUT  CT20XUT.SYS  Wed Jul 15 02:46:21 2009 (4A5D7B3D)
fffff880`03c37000 fffff880`03cdfe80   ctaud2k  ctaud2k.sys  Wed Jul 15 02:44:49 2009 (4A5D7AE1)
fffff880`0688d000 fffff880`069f1000   CTEXFIFX CTEXFIFX.SYS Wed Jul 15 02:46:15 2009 (4A5D7B37)
fffff880`03d82000 fffff880`03db3000   ctoss2k  ctoss2k.sys  Wed Jul 15 02:40:56 2009 (4A5D79F8)
fffff880`03db3000 fffff880`03dbb000   ctprxy2k ctprxy2k.sys Wed Jul 15 02:44:52 2009 (4A5D7AE4)
fffff880`04347000 fffff880`0437f000   ctsfm2k  ctsfm2k.sys  Wed Jul 15 02:40:38 2009 (4A5D79E6)
fffff880`03b4d000 fffff880`03b6b000   dfsc     dfsc.sys     Tue Apr 21 23:26:50 2009 (49EE8E7A)
fffff880`02c7c000 fffff880`02c8b000   discache discache.sys Tue Apr 21 23:43:33 2009 (49EE9265)
fffff880`01877000 fffff880`0188d000   disk     disk.sys     Tue Apr 21 23:23:30 2009 (49EE8DB2)
fffff880`03d1d000 fffff880`03d3f000   drmk     drmk.sys     Wed Apr 22 01:06:19 2009 (49EEA5CB)
fffff880`027c4000 fffff880`027d0000   dump_dumpata dump_dumpata.sys Tue Apr 21 23:23:18 2009 (49EE8DA6)
fffff880`027db000 fffff880`027ee000   dump_dumpfve dump_dumpfve.sys Tue Apr 21 23:25:16 2009 (49EE8E1C)
fffff880`027d0000 fffff880`027db000   dump_msahci dump_msahci.sys Wed Apr 22 00:09:58 2009 (49EE9896)
fffff880`0685c000 fffff880`06868000   Dxapi    Dxapi.sys    Tue Apr 21 23:44:44 2009 (49EE92AC)
fffff880`052f5000 fffff880`053e9000   dxgkrnl  dxgkrnl.sys  Tue Apr 21 23:45:14 2009 (49EE92CA)
fffff880`03bb6000 fffff880`03bfc000   dxgmms1  dxgmms1.sys  Tue Apr 21 23:44:50 2009 (49EE92B2)
fffff880`026d2000 fffff880`02795000   eamon    eamon.sys    Thu May 14 09:30:49 2009 (4A0C1D09)
fffff880`0192f000 fffff880`01952000   ehdrv    ehdrv.sys    Thu May 14 09:32:02 2009 (4A0C1D52)
fffff880`0659f000 fffff880`065e9000   emupia2k emupia2k.sys Wed Jul 15 02:40:28 2009 (4A5D79DC)
fffff880`03470000 fffff880`03490000   epfwwfpr epfwwfpr.sys Thu May 14 09:12:55 2009 (4A0C18D7)
fffff880`0109d000 fffff880`010b1000   fileinfo fileinfo.sys Tue Apr 21 23:39:41 2009 (49EE917D)
fffff880`01052000 fffff880`0109d000   fltmgr   fltmgr.sys   Tue Apr 21 23:23:28 2009 (49EE8DB0)
fffff880`013ed000 fffff880`013f7000   Fs_Rec   Fs_Rec.sys   Tue Apr 21 23:23:17 2009 (49EE8DA5)
fffff880`0183d000 fffff880`01877000   fvevol   fvevol.sys   Tue Apr 21 23:25:27 2009 (49EE8E27)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Tue Apr 21 23:24:33 2009 (49EE8DF1)
fffff880`0640f000 fffff880`0659f000   ha20x22k ha20x22k.sys Wed Jul 15 02:44:02 2009 (4A5D7AB2)
fffff800`031e9000 fffff800`03232000   hal      hal.dll      Wed Apr 22 01:23:51 2009 (49EEA9E7)
fffff880`03a55000 fffff880`03a79000   HDAudBus HDAudBus.sys Wed Apr 22 00:14:56 2009 (49EE99C0)
fffff880`06800000 fffff880`0685c000   HdAudio  HdAudio.sys  Wed Apr 22 00:15:37 2009 (49EE99E9)
fffff880`04200000 fffff880`04219000   HIDCLASS HIDCLASS.SYS Wed Apr 22 00:15:02 2009 (49EE99C6)
fffff880`06884000 fffff880`0688c080   HIDPARSE HIDPARSE.SYS Wed Apr 22 00:15:00 2009 (49EE99C4)
fffff880`069f1000 fffff880`069ff000   hidusb   hidusb.sys   Wed Apr 22 00:15:02 2009 (49EE99C6)
fffff880`034aa000 fffff880`03572000   HTTP     HTTP.sys     Tue Apr 21 23:25:07 2009 (49EE8E13)
fffff880`015e9000 fffff880`015f2000   hwpolicy hwpolicy.sys Tue Apr 21 23:23:11 2009 (49EE8D9F)
fffff880`03ba0000 fffff880`03bb6000   intelppm intelppm.sys Tue Apr 21 23:23:12 2009 (49EE8DA0)
fffff880`02def000 fffff880`02dfe000   kbdclass kbdclass.sys Tue Apr 21 23:23:17 2009 (49EE8DA5)
fffff880`06400000 fffff880`0640e000   kbdhid   kbdhid.sys   Wed Apr 22 00:09:04 2009 (49EE9860)
fffff800`00ba1000 fffff800`00bab000   kdcom    kdcom.dll    Wed Apr 22 01:27:31 2009 (49EEAAC3)
fffff880`03d3f000 fffff880`03d82000   ks       ks.sys       Wed Apr 22 00:09:13 2009 (49EE9869)
fffff880`013c2000 fffff880`013dc000   ksecdd   ksecdd.sys   Tue Apr 21 23:24:14 2009 (49EE8DDE)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Tue Apr 21 23:57:47 2009 (49EE95BB)
fffff880`03dbb000 fffff880`03dc0200   ksthunk  ksthunk.sys  Wed Apr 22 00:09:04 2009 (49EE9860)
fffff880`03c00000 fffff880`03c11000   L1E62x64 L1E62x64.sys Fri Mar 27 11:09:50 2009 (49CCEC3E)
fffff880`02600000 fffff880`02615000   lltdio   lltdio.sys   Wed Apr 22 00:17:30 2009 (49EE9A5A)
fffff880`04288000 fffff880`042ab000   luafv    luafv.sys    Tue Apr 21 23:28:18 2009 (49EE8ED2)
fffff880`00c62000 fffff880`00c9f000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Wed Apr 22 01:25:27 2009 (49EEAA47)
fffff880`06876000 fffff880`06884000   monitor  monitor.sys  Tue Apr 21 23:45:06 2009 (49EE92C2)
fffff880`01200000 fffff880`0120f000   mouclass mouclass.sys Tue Apr 21 23:23:17 2009 (49EE8DA5)
fffff880`065e9000 fffff880`065f6000   mouhid   mouhid.sys   Wed Apr 22 00:09:04 2009 (49EE9860)
fffff880`00de1000 fffff880`00dfb000   mountmgr mountmgr.sys Tue Apr 21 23:23:27 2009 (49EE8DAF)
fffff880`03590000 fffff880`035a8000   mpsdrv   mpsdrv.sys   Wed Apr 22 00:17:04 2009 (49EE9A40)
fffff880`035a8000 fffff880`035d4000   mrxsmb   mrxsmb.sys   Tue Apr 21 23:26:56 2009 (49EE8E80)
fffff880`03400000 fffff880`0344d000   mrxsmb10 mrxsmb10.sys Tue Apr 21 23:27:00 2009 (49EE8E84)
fffff880`0344d000 fffff880`03470000   mrxsmb20 mrxsmb20.sys Tue Apr 21 23:26:57 2009 (49EE8E81)
fffff880`00c33000 fffff880`00c3e000   msahci   msahci.sys   Wed Apr 22 00:09:58 2009 (49EE9896)
fffff880`019b0000 fffff880`019bb000   Msfs     Msfs.SYS     Tue Apr 21 23:23:23 2009 (49EE8DAB)
fffff880`00e09000 fffff880`00e13000   msisadrv msisadrv.sys Tue Apr 21 23:23:13 2009 (49EE8DA1)
fffff880`010b1000 fffff880`0110f000   msrpc    msrpc.sys    Tue Apr 21 23:24:51 2009 (49EE8E03)
fffff880`02c71000 fffff880`02c7c000   mssmbios mssmbios.sys Tue Apr 21 23:35:11 2009 (49EE906F)
fffff880`014e5000 fffff880`014f7000   mup      mup.sys      Tue Apr 21 23:26:49 2009 (49EE8E79)
fffff880`011cd000 fffff880`011ee680   ncplelhp ncplelhp.sys Mon Nov 10 09:43:47 2008 (491848A3)
fffff880`014f8000 fffff880`015e9000   ndis     ndis.sys     Tue Apr 21 23:24:57 2009 (49EE8E09)
fffff880`04811000 fffff880`0481d000   ndistapi ndistapi.sys Wed Apr 22 00:18:40 2009 (49EE9AA0)
fffff880`02c8b000 fffff880`02cba000   ndiswan  ndiswan.sys  Wed Apr 22 00:18:51 2009 (49EE9AAB)
fffff880`04332000 fffff880`04347000   NDProxy  NDProxy.SYS  Wed Apr 22 00:18:44 2009 (49EE9AA4)
fffff880`02dc5000 fffff880`02dd4000   netbios  netbios.sys  Wed Apr 22 00:18:10 2009 (49EE9A82)
fffff880`02d51000 fffff880`02d96000   netbt    netbt.sys    Tue Apr 21 23:24:34 2009 (49EE8DF2)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Tue Apr 21 23:25:37 2009 (49EE8E31)
fffff880`019bb000 fffff880`019cc000   Npfs     Npfs.SYS     Tue Apr 21 23:23:26 2009 (49EE8DAE)
fffff880`02c65000 fffff880`02c71000   nsiproxy nsiproxy.sys Tue Apr 21 23:24:29 2009 (49EE8DED)
fffff800`02c0f000 fffff800`031e9000   nt       ntkrnlmp.exe Tue Apr 21 23:51:21 2009 (49EE9439)
fffff880`01217000 fffff880`013c2000   Ntfs     Ntfs.sys     Tue Apr 21 23:24:23 2009 (49EE8DE7)
fffff880`0191f000 fffff880`01928000   Null     Null.SYS     Tue Apr 21 23:23:15 2009 (49EE8DA3)
fffff880`052f3000 fffff880`052f4180   nvBridge nvBridge.kmd Tue Jul 14 15:26:48 2009 (4A5CDBF8)
fffff880`04827000 fffff880`052f2f00   nvlddmkm nvlddmkm.sys Tue Jul 14 15:50:52 2009 (4A5CE19C)
fffff880`02d9f000 fffff880`02dc5000   pacer    pacer.sys    Wed Apr 22 00:18:21 2009 (49EE9A8D)
fffff880`00e53000 fffff880`00e69000   partmgr  partmgr.sys  Tue Apr 21 23:23:32 2009 (49EE8DB4)
fffff880`00e13000 fffff880`00e46000   pci      pci.sys      Tue Apr 21 23:23:19 2009 (49EE8DA7)
fffff880`00ee6000 fffff880`00eed000   pciide   pciide.sys   Tue Apr 21 23:23:21 2009 (49EE8DA9)
fffff880`00dd1000 fffff880`00de1000   PCIIDEX  PCIIDEX.SYS  Tue Apr 21 23:23:19 2009 (49EE8DA7)
fffff880`013dc000 fffff880`013ed000   pcw      pcw.sys      Tue Apr 21 23:23:14 2009 (49EE8DA2)
fffff880`06cb0000 fffff880`06d56000   peauth   peauth.sys   Wed Apr 22 01:06:32 2009 (49EEA5D8)
fffff880`03ce0000 fffff880`03d1d000   portcls  portcls.sys  Wed Apr 22 00:15:10 2009 (49EE99CE)
fffff880`00c9f000 fffff880`00cb3000   PSHED    PSHED.dll    Wed Apr 22 01:28:36 2009 (49EEAB04)
fffff880`03a79000 fffff880`03a9d000   rasl2tp  rasl2tp.sys  Wed Apr 22 00:18:50 2009 (49EE9AAA)
fffff880`03a9d000 fffff880`03ab8000   raspppoe raspppoe.sys Wed Apr 22 00:18:56 2009 (49EE9AB0)
fffff880`01800000 fffff880`01821000   raspptp  raspptp.sys  Wed Apr 22 00:18:55 2009 (49EE9AAF)
fffff880`01821000 fffff880`0183b000   rassstp  rassstp.sys  Wed Apr 22 00:19:02 2009 (49EE9AB6)
fffff880`02c14000 fffff880`02c65000   rdbss    rdbss.sys    Tue Apr 21 23:27:03 2009 (49EE8E87)
fffff880`03ab8000 fffff880`03ac3000   rdpbus   rdpbus.sys   Wed Apr 22 00:26:27 2009 (49EE9C73)
fffff880`01995000 fffff880`0199e000   RDPCDD   RDPCDD.sys   Wed Apr 22 00:25:20 2009 (49EE9C30)
fffff880`0199e000 fffff880`019a7000   rdpencdd rdpencdd.sys Wed Apr 22 00:25:20 2009 (49EE9C30)
fffff880`019a7000 fffff880`019b0000   rdprefmp rdprefmp.sys Wed Apr 22 00:25:20 2009 (49EE9C30)
fffff880`01000000 fffff880`0103a000   rdyboost rdyboost.sys Tue Apr 21 23:40:07 2009 (49EE9197)
fffff880`02615000 fffff880`0262d000   rspndr   rspndr.sys   Wed Apr 22 00:17:30 2009 (49EE9A5A)
fffff880`06d56000 fffff880`06d61000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01600000 fffff880`01608000   spldr    spldr.sys    Wed Mar 25 15:59:44 2009 (49CA8D30)
fffff880`0aa89000 fffff880`0aafa000   spsys    spsys.sys    Wed Mar 25 16:24:09 2009 (49CA92E9)
fffff880`0262d000 fffff880`026c4000   srv      srv.sys      Tue Apr 21 23:27:56 2009 (49EE8EBC)
fffff880`06c00000 fffff880`06c69000   srv2     srv2.sys     Tue Apr 21 23:27:43 2009 (49EE8EAF)
fffff880`06d61000 fffff880`06d8f000   srvnet   srvnet.sys   Tue Apr 21 23:27:40 2009 (49EE8EAC)
fffff880`0481d000 fffff880`0481e480   swenum   swenum.sys   Wed Apr 22 00:09:02 2009 (49EE985E)
fffff880`0160f000 fffff880`017ff000   tcpip    tcpip.sys    Tue Apr 21 23:27:56 2009 (49EE8EBC)
fffff880`06d8f000 fffff880`06da1000   tcpipreg tcpipreg.sys Wed Apr 22 00:18:29 2009 (49EE9A95)
fffff880`019ea000 fffff880`019f7000   TDI      TDI.SYS      Tue Apr 21 23:24:34 2009 (49EE8DF2)
fffff880`019cc000 fffff880`019ea000   tdx      tdx.sys      Tue Apr 21 23:24:33 2009 (49EE8DF1)
fffff880`02c00000 fffff880`02c14000   termdd   termdd.sys   Wed Apr 22 00:25:18 2009 (49EE9C2E)
fffff960`00530000 fffff960`0053a000   TSDDD    TSDDD.dll    Wed Apr 22 00:25:18 2009 (49EE9C2E)
fffff880`03b7c000 fffff880`03ba0000   tunnel   tunnel.sys   Wed Apr 22 00:18:20 2009 (49EE9A8C)
fffff880`04234000 fffff880`04288000   udfs     udfs.sys     Tue Apr 21 23:26:41 2009 (49EE8E71)
fffff880`0103a000 fffff880`0104c000   umbus    umbus.sys    Wed Apr 22 00:15:31 2009 (49EE99E3)
fffff880`043d8000 fffff880`043f5000   usbccgp  usbccgp.sys  Wed Apr 22 00:15:22 2009 (49EE99DA)
fffff880`06874000 fffff880`06875f00   USBD     USBD.SYS     Wed Apr 22 00:15:04 2009 (49EE99C8)
fffff880`04800000 fffff880`04811000   usbehci  usbehci.sys  Wed Apr 22 00:15:12 2009 (49EE99D0)
fffff880`042d8000 fffff880`04332000   usbhub   usbhub.sys   Wed Apr 22 00:15:41 2009 (49EE99ED)
fffff880`03a00000 fffff880`03a55000   USBPORT  USBPORT.SYS  Wed Apr 22 00:15:12 2009 (49EE99D0)
fffff880`06868000 fffff880`06874000   usbprint usbprint.sys Wed Apr 22 00:45:19 2009 (49EEA0DF)
fffff880`04219000 fffff880`04234000   USBSTOR  USBSTOR.SYS  Wed Apr 22 00:15:14 2009 (49EE99D2)
fffff880`053e9000 fffff880`053f6000   usbuhci  usbuhci.sys  Wed Apr 22 00:15:06 2009 (49EE99CA)
fffff880`00e46000 fffff880`00e53000   vdrvroot vdrvroot.sys Wed Apr 22 00:10:21 2009 (49EE98AD)
fffff880`01952000 fffff880`01960000   vga      vga.sys      Tue Apr 21 23:45:08 2009 (49EE92C4)
fffff880`01960000 fffff880`01985000   VIDEOPRT VIDEOPRT.SYS Tue Apr 21 23:45:11 2009 (49EE92C7)
fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Tue Apr 21 23:49:30 2009 (49EE93CA)
fffff880`00e69000 fffff880`00e7e000   volmgr   volmgr.sys   Tue Apr 21 23:23:30 2009 (49EE8DB2)
fffff880`00e7e000 fffff880`00ee6000   volmgrx  volmgrx.sys  Tue Apr 21 23:24:00 2009 (49EE8DD0)
fffff880`01181000 fffff880`011cd000   volsnap  volsnap.sys  Tue Apr 21 23:23:40 2009 (49EE8DBC)
fffff880`02dd4000 fffff880`02def000   wanarp   wanarp.sys   Wed Apr 22 00:19:03 2009 (49EE9AB7)
fffff880`01985000 fffff880`01995000   watchdog watchdog.sys Tue Apr 21 23:43:47 2009 (49EE9273)
fffff880`00ef3000 fffff880`00f97000   Wdf01000 Wdf01000.sys Tue Apr 21 23:25:47 2009 (49EE8E3B)
fffff880`00f97000 fffff880`00fa6000   WDFLDR   WDFLDR.SYS   Tue Apr 21 23:23:28 2009 (49EE8DB0)
fffff880`02d96000 fffff880`02d9f000   wfplwf   wfplwf.sys   Wed Apr 22 00:18:10 2009 (49EE9A82)
fffff960`000c0000 fffff960`003d0000   win32k   win32k.sys   Tue Apr 21 23:46:20 2009 (49EE930C)
fffff880`00e00000 fffff880`00e09000   WMILIB   WMILIB.SYS   Tue Apr 21 23:23:25 2009 (49EE8DAD)
fffff880`02795000 fffff880`027b6000   WudfPf   WudfPf.sys   Wed Apr 22 00:14:25 2009 (49EE99A1)
fffff880`06c69000 fffff880`06c9a000   WUDFRd   WUDFRd.sys   Wed Apr 22 00:14:50 2009 (49EE99BA)

Unloaded modules:
fffff880`06da1000 fffff880`06dbd000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06dd9000 fffff880`06df5000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06dbd000 fffff880`06dd9000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06da1000 fffff880`06dbd000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0437f000 fffff880`0439b000   CTHWIUT.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018bd000 fffff880`018cb000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018cb000 fffff880`018d7000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018d7000 fffff880`018e2000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`018e2000 fffff880`018f5000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff800`02f213a5 fffff880`088376f0 00000000`00000000

Clobon · 15 Sep 2009

Hi there,

this is stupid no embarassing><"
Since the temperature outside dropped a lot the BSODs are gone...
Yes it turned out to be a termal problem. Days wasted...
Thanks for your effort. I'll get a new tower with some good fans
and that should do the trick... Must be the chipset on that asus
mainboard...

I'm just glad nothing is damaged. Thanks again.

Regards, Clobon

zigzag3143 · 15 Sep 2009

clobon

Well all learn the hard way just wanted to say thanks for letting us know.

ken

harpua · 15 Sep 2009

I like to monitor temps in my system using Everest Ultimate which can read most sensors in a system and a 3rd party free sidebar gadget (works with 7) that displays up to 5 of Everest's readings (selectable by the user). It's the second gadget down in the below screen shot. Once set up properly, the whole thing auto loads at start up.

zigzag3143 · 15 Sep 2009

H

good Idea. I just cant give up that my screen space. I use everest also but have it display in taskbar and sound when out of range

Ken

Win 7 BSODed (from a clean install to defective)

SOLVED