Blue Screens and Random Reboots

CarlTR6 · 25 Jun 2010

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\AppData\Local\Temp\Temp1_062510-18267-01.zip\062510-18267-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a11000 PsLoadedModuleList = 0xfffff800`02c4ee50
Debug session time: Fri Jun 25 15:11:01.541 2010 (GMT-4)
System Uptime: 0 days 0:12:01.648

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {81, fffffa8006ca7610, 8a, 0}

Unable to load image mcdbus.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mcdbus.sys
*** ERROR: Module load completed but symbols could not be loaded for mcdbus.sys
Probably caused by : mcdbus.sys ( mcdbus+36823 )

Followup: MachineOwner
---------

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000081, MmMapLockedPages called without MDL_MAPPING_CAN_FAIL
Arg2: fffffa8006ca7610, MDL address.
Arg3: 000000000000008a, MDL flags.
Arg4: 0000000000000000, 0.

Debugging Details:
------------------


BUGCHECK_STR:  0xc4_81

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002f0b3dc to fffff80002a81600

STACK_TEXT:  
fffff880`031af588 fffff800`02f0b3dc : 00000000`000000c4 00000000`00000081 fffffa80`06ca7610 00000000`0000008a : nt!KeBugCheckEx
fffff880`031af590 fffff800`02f1e89a : fffffa80`06ca7610 00000000`00000002 fffffa80`063f2660 fffff880`031b0000 : nt!VerifierBugCheckIfAppropriate+0x3c
fffff880`031af5d0 fffff880`04236823 : fffff980`1d462ee0 fffff980`1d4b4fc0 fffffa80`06091f00 fffff800`000007ad : nt!VerifierMmMapLockedPages+0x4a
fffff880`031af610 fffff980`1d462ee0 : fffff980`1d4b4fc0 fffffa80`06091f00 fffff800`000007ad fffff980`1d462ee0 : mcdbus+0x36823
fffff880`031af618 fffff980`1d4b4fc0 : fffffa80`06091f00 fffff800`000007ad fffff980`1d462ee0 fffff980`1d462fb0 : 0xfffff980`1d462ee0
fffff880`031af620 fffffa80`06091f00 : fffff800`000007ad fffff980`1d462ee0 fffff980`1d462fb0 fffff880`031afaa0 : 0xfffff980`1d4b4fc0
fffff880`031af628 fffff800`000007ad : fffff980`1d462ee0 fffff980`1d462fb0 fffff880`031afaa0 fffff980`1d4b4fc0 : 0xfffffa80`06091f00
fffff880`031af630 fffff980`1d462ee0 : fffff980`1d462fb0 fffff880`031afaa0 fffff980`1d4b4fc0 fffffa80`063f27b0 : 0xfffff800`000007ad
fffff880`031af638 fffff980`1d462fb0 : fffff880`031afaa0 fffff980`1d4b4fc0 fffffa80`063f27b0 fffff880`031afab0 : 0xfffff980`1d462ee0
fffff880`031af640 fffff880`031afaa0 : fffff980`1d4b4fc0 fffffa80`063f27b0 fffff880`031afab0 fffff880`00000000 : 0xfffff980`1d462fb0
fffff880`031af648 fffff980`1d4b4fc0 : fffffa80`063f27b0 fffff880`031afab0 fffff880`00000000 fffff980`1d4b4fe8 : 0xfffff880`031afaa0
fffff880`031af650 fffffa80`063f27b0 : fffff880`031afab0 fffff880`00000000 fffff980`1d4b4fe8 fffffa80`054d9200 : 0xfffff980`1d4b4fc0
fffff880`031af658 fffff880`031afab0 : fffff880`00000000 fffff980`1d4b4fe8 fffffa80`054d9200 fffff800`02f1d09d : 0xfffffa80`063f27b0
fffff880`031af660 fffff880`00000000 : fffff980`1d4b4fe8 fffffa80`054d9200 fffff800`02f1d09d fffff980`1d462ee0 : 0xfffff880`031afab0
fffff880`031af668 fffff980`1d4b4fe8 : fffffa80`054d9200 fffff800`02f1d09d fffff980`1d462ee0 00000000`00000002 : 0xfffff880`00000000
fffff880`031af670 fffffa80`054d9200 : fffff800`02f1d09d fffff980`1d462ee0 00000000`00000002 fffffa80`6264636d : 0xfffff980`1d4b4fe8
fffff880`031af678 fffff800`02f1d09d : fffff980`1d462ee0 00000000`00000002 fffffa80`6264636d fffffa80`063f2660 : 0xfffffa80`054d9200
fffff880`031af680 fffff880`042362db : fffffa80`063f2660 00000000`00000000 fffff880`00f6ad88 00000000`00000000 : nt!VerifierExAllocatePoolWithTag+0x1d
fffff880`031af6c0 fffffa80`063f2660 : 00000000`00000000 fffff880`00f6ad88 00000000`00000000 00000000`00000000 : mcdbus+0x362db
fffff880`031af6c8 00000000`00000000 : fffff880`00f6ad88 00000000`00000000 00000000`00000000 fffff880`031af8e0 : 0xfffffa80`063f2660


STACK_COMMAND:  kb

FOLLOWUP_IP: 
mcdbus+36823
fffff880`04236823 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  mcdbus+36823

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: mcdbus

IMAGE_NAME:  mcdbus.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  49a3cd1f

FAILURE_BUCKET_ID:  X64_0xc4_81_mcdbus+36823

BUCKET_ID:  X64_0xc4_81_mcdbus+36823

Followup: MachineOwner
---------

Two things:

1. ASACPI.sys does NOT show up in this dump.

2. The faulting driver according to Driver Verifier is mcdbus.sys.

The process MagicISO SCSI Host Controller belongs to the software MagicDisc or Driver for MagicISO SCSI Host Controller by MagicISO, Inc.

Here is a thread you might want to read:

[SOLVED] computer crash stop message. - Tech Support Forum

I suggest that you uninstall MagicISO or uninstall it and reinstall it. If you can live without it, I'd just uninstall it, at least until we work all of the bugs out of your system.

jason786 · 25 Jun 2010

Yep, I rebooted

I just checked the directory again and it's still renamed

Is it possible that windows is automatically redownloading it (even though it's not showing up) because it detects hardware without a driver?

CarlTR6 said:

Working on the second dump now.

Alright, good luck

Edit, just searched my pc for that driver and it's in C:\Windows\System32\DriverStore\FileRepository\asacpi.inf_amd64_neutral_a7ca2c2f114f9353

Should I rename it there too, or is it inactive in that folder?

CarlTR6 · 25 Jun 2010

Keep that location marked and lets see if it reappears. If it does, rename it there also.

I updated my post above. You might need to refresh your page.

We are making progress! :)

jason786 · 25 Jun 2010

CarlTR6 said:

Keep that location marked and lets see if it reappears. If it does, rename it there also.

I updated my post above. You might need to refresh your page.

We are making progress! :)

Great!

I uninstalled it, do you think I should run driver verifier again?

Also, what I still don't understand is, why would my blue screens be a reoccuring problem after I have clean installed so many times

But thanks for the assistance, it's really helped me out a lot

Will keep you updated

Lordbob75 · 25 Jun 2010

jason786 said:

CarlTR6 said:

Keep that location marked and lets see if it reappears. If it does, rename it there also.

I updated my post above. You might need to refresh your page.

We are making progress! :)

Great!

I uninstalled it, do you think I should run driver verifier again?

Also, what I still don't understand is, why would my blue screens be a reoccuring problem after I have clean installed so many times

But thanks for the assistance, it's really helped me out a lot

Will keep you updated

That would point to either a hardware problem, or something you are installing on ALL of them (such as a driver).

~Lordbob

CarlTR6 · 25 Jun 2010

Lordbob is right with his answer. Reinstalling the OS and reinstalling the same programs is repeating the problem if there are conflicts with the program's drivers.

Let's see how you run without Driver Verifier. I would like to know where we are at this point. If you get another BSOD, turn it back on for at least 36 hours.

I watch this thread all of the time I am online. If I am offline, there are others on the team who will jump in to help you. Our goal is to provide all of the assistance we possibly can.

jason786 · 25 Jun 2010

Thanks a lot!

It's true that each time I complete a clean install I just redownload some of the programs that I use (AVG etc)

But this is the first time I've tried the AIsuite

Anyway, I will let you know how the current setup works out (after getting rid of MagicISO)

CarlTR6 · 25 Jun 2010

Very good. Waiting to hear that all is well!

jason786 · 25 Jun 2010

Well this one didn't take long at all!

Lordbob75 · 25 Jun 2010

AVG is known to cause BSoDs. Try replacing it with MSE to see if that will help.

Analyzing now.
Not really any good information on this dump. Definitely need more...

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\David\AppData\Local\Temp\Temp1_062510-16286-01-1.zip\062510-16286-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02a60000 PsLoadedModuleList = 0xfffff800`02c9de50
Debug session time: Fri Jun 25 15:11:22.234 2010 (UTC - 7:00)
System Uptime: 0 days 1:36:37.278
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 101, {31, 0, fffff88002f63180, 2}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CLOCK_WATCHDOG_TIMEOUT (101)
An expected clock interrupt was not received on a secondary processor in an
MP system within the allocated interval. This indicates that the specified
processor is hung and not processing interrupts.
Arguments:
Arg1: 0000000000000031, Clock interrupt time out interval in nominal clock ticks.
Arg2: 0000000000000000, 0.
Arg3: fffff88002f63180, The PRCB address of the hung processor.
Arg4: 0000000000000002, 0.

Debugging Details:
------------------


BUGCHECK_STR:  CLOCK_WATCHDOG_TIMEOUT_4_PROC

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  d

STACK_TEXT:  
fffff880`0297c478 fffff800`02a7e443 : 00000000`00000101 00000000`00000031 00000000`00000000 fffff880`02f63180 : nt!KeBugCheckEx
fffff880`0297c480 fffff800`02ad8cf7 : fffff880`00000000 fffff800`00000002 00000000`00002711 00000000`00000006 : nt! ?? ::FNODOBFM::`string'+0x4dfe
fffff880`0297c510 fffff800`02a21895 : fffff800`02a463c0 fffff880`0297c6c0 fffff800`02a463c0 00000000`00000000 : nt!KeUpdateSystemTime+0x377
fffff880`0297c610 fffff800`02accaf3 : fffff800`02c4ae80 00000000`00000001 00000000`00000001 00000000`00000004 : hal!HalpHpetClockInterrupt+0x8d
fffff880`0297c640 fffff800`02a8f9a1 : fffffa80`05d6d000 fffff880`049e9960 fffffa80`05d6dbd0 fffffa80`05d75f50 : nt!KiInterruptDispatchNoLock+0x163
fffff880`0297c7d0 fffff800`02dcf158 : 00000000`00000000 fffff880`0297cca0 fffff800`02a60000 fffff880`049dcfc4 : nt!KeFlushProcessWriteBuffers+0x6d
fffff880`0297c840 fffff800`02dd0149 : 00000000`003f4d80 fffff800`02dcbcee 00000000`00000000 00000000`00000246 : nt!ExpQuerySystemInformation+0x1368
fffff880`0297cbe0 fffff800`02acf853 : 00000000`00000000 fffff880`0297cca0 ffffffff`fffe7960 000007fe`fb2a0b48 : nt!NtQuerySystemInformation+0x4d
fffff880`0297cc20 00000000`771900ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00dff588 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x771900ba


STACK_COMMAND:  kb

SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  X64_CLOCK_WATCHDOG_TIMEOUT_4_PROC_ANALYSIS_INCONCLUSIVE

BUCKET_ID:  X64_CLOCK_WATCHDOG_TIMEOUT_4_PROC_ANALYSIS_INCONCLUSIVE

Followup: MachineOwner
---------

0: kd> kb
RetAddr           : Args to Child                                                           : Call Site
fffff800`02a7e443 : 00000000`00000101 00000000`00000031 00000000`00000000 fffff880`02f63180 : nt!KeBugCheckEx
fffff800`02ad8cf7 : fffff880`00000000 fffff800`00000002 00000000`00002711 00000000`00000006 : nt! ?? ::FNODOBFM::`string'+0x4dfe
fffff800`02a21895 : fffff800`02a463c0 fffff880`0297c6c0 fffff800`02a463c0 00000000`00000000 : nt!KeUpdateSystemTime+0x377
fffff800`02accaf3 : fffff800`02c4ae80 00000000`00000001 00000000`00000001 00000000`00000004 : hal!HalpHpetClockInterrupt+0x8d
fffff800`02a8f9a1 : fffffa80`05d6d000 fffff880`049e9960 fffffa80`05d6dbd0 fffffa80`05d75f50 : nt!KiInterruptDispatchNoLock+0x163
fffff800`02dcf158 : 00000000`00000000 fffff880`0297cca0 fffff800`02a60000 fffff880`049dcfc4 : nt!KeFlushProcessWriteBuffers+0x6d
fffff800`02dd0149 : 00000000`003f4d80 fffff800`02dcbcee 00000000`00000000 00000000`00000246 : nt!ExpQuerySystemInformation+0x1368
fffff800`02acf853 : 00000000`00000000 fffff880`0297cca0 ffffffff`fffe7960 000007fe`fb2a0b48 : nt!NtQuerySystemInformation+0x4d
00000000`771900ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x771900ba
0: kd> lmtsmn
start             end                 module name
fffff880`02ca0000 fffff880`02cde000   1394ohci 1394ohci.sys Mon Jul 13 17:07:12 2009 (4A5BCC30)
fffff880`010c6000 fffff880`0111d000   ACPI     ACPI.sys     Mon Jul 13 16:19:34 2009 (4A5BC106)
fffff880`02d65000 fffff880`02def000   afd      afd.sys      Mon Jul 13 16:21:40 2009 (4A5BC184)
fffff880`042b8000 fffff880`042ce000   AgileVpn AgileVpn.sys Mon Jul 13 17:10:24 2009 (4A5BCCF0)
fffff880`0105d000 fffff880`01068000   amdxata  amdxata.sys  Tue May 19 10:56:59 2009 (4A12F2EB)
fffff880`02c3c000 fffff880`02c45000   anodlwfx anodlwfx.sys Fri Mar 06 03:10:08 2009 (49B0F680)
fffff880`0102a000 fffff880`01033000   atapi    atapi.sys    Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`01033000 fffff880`0105d000   ataport  ataport.SYS  Mon Jul 13 16:19:52 2009 (4A5BC118)
fffff880`04824000 fffff880`04ece000   atikmdag atikmdag.sys Tue Apr 06 18:47:17 2010 (4BBBE425)
fffff880`03f6e000 fffff880`03fa4000   atikmpag atikmpag.sys Tue Apr 06 18:23:30 2010 (4BBBDE92)
fffff880`016f1000 fffff880`016f8000   Beep     Beep.SYS     Mon Jul 13 17:00:13 2009 (4A5BCA8D)
fffff880`03f21000 fffff880`03f32000   blbdrive blbdrive.sys Mon Jul 13 16:35:59 2009 (4A5BC4DF)
fffff880`055c6000 fffff880`055e4000   bowser   bowser.sys   Mon Jul 13 16:23:50 2009 (4A5BC206)
fffff960`00720000 fffff960`00747000   cdd      cdd.dll      Mon Jul 13 18:25:40 2009 (4A5BDE94)
fffff880`00e23000 fffff880`00e4d000   cdrom    cdrom.sys    Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       Mon Jul 13 18:32:13 2009 (4A5BE01D)
fffff880`013ba000 fffff880`013ea000   CLASSPNP CLASSPNP.SYS Mon Jul 13 16:19:58 2009 (4A5BC11E)
fffff880`00d4e000 fffff880`00dac000   CLFS     CLFS.SYS     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`01509000 fffff880`0157c000   cng      cng.sys      Mon Jul 13 16:49:40 2009 (4A5BC814)
fffff880`042a8000 fffff880`042b8000   CompositeBus CompositeBus.sys Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`05d31000 fffff880`05d3f000   crashdmp crashdmp.sys Mon Jul 13 17:01:01 2009 (4A5BCABD)
fffff880`03f03000 fffff880`03f21000   dfsc     dfsc.sys     Mon Jul 13 16:23:44 2009 (4A5BC200)
fffff880`03ef4000 fffff880`03f03000   discache discache.sys Mon Jul 13 16:37:18 2009 (4A5BC52E)
fffff880`01474000 fffff880`0148a000   disk     disk.sys     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`026b4000 fffff880`027ae000   Dnetr28ux Dnetr28ux.sys Wed Aug 05 06:59:46 2009 (4A799052)
fffff880`05cfd000 fffff880`05d1f000   drmk     drmk.sys     Mon Jul 13 18:01:25 2009 (4A5BD8E5)
fffff880`00e58000 fffff880`00f00000   dsfksvcs dsfksvcs.sys Mon Feb 08 21:06:20 2010 (4B70DF3C)
fffff880`00f00000 fffff880`00f5b000   DSFOleaut32 DSFOleaut32.sys Mon Feb 08 21:06:19 2010 (4B70DF3B)
fffff880`016d5000 fffff880`016e0000   dsfroot  dsfroot.sys  Mon Feb 08 21:06:12 2010 (4B70DF34)
fffff880`05d4b000 fffff880`05d54000   dump_atapi dump_atapi.sys Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`05d3f000 fffff880`05d4b000   dump_ataport dump_ataport.sys Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`05d54000 fffff880`05d67000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 16:21:51 2009 (4A5BC18F)
fffff880`05d25000 fffff880`05d31000   Dxapi    Dxapi.sys    Mon Jul 13 16:38:28 2009 (4A5BC574)
fffff880`04ece000 fffff880`04fc2000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 18:00:14 2009 (4AC5509E)
fffff880`03fa4000 fffff880`03fea000   dxgmms1  dxgmms1.sys  Mon Jul 13 16:38:32 2009 (4A5BC578)
fffff880`0670d000 fffff880`06743000   fastfat  fastfat.SYS  Mon Jul 13 16:23:28 2009 (4A5BC1F0)
fffff880`04ff3000 fffff880`05000000   fdc      fdc.sys      Mon Jul 13 17:00:54 2009 (4A5BCAB6)
fffff880`00e0f000 fffff880`00e23000   fileinfo fileinfo.sys Mon Jul 13 16:34:25 2009 (4A5BC481)
fffff880`0425a000 fffff880`04265000   flpydisk flpydisk.sys Mon Jul 13 17:00:54 2009 (4A5BCAB6)
fffff880`01068000 fffff880`010b4000   fltmgr   fltmgr.sys   Mon Jul 13 16:19:59 2009 (4A5BC11F)
fffff880`0158d000 fffff880`01597000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 16:19:45 2009 (4A5BC111)
fffff880`0143a000 fffff880`01474000   fvevol   fvevol.sys   Fri Sep 25 19:34:26 2009 (4ABD7DB2)
fffff880`0168b000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 16:21:08 2009 (4A5BC164)
fffff800`02a17000 fffff800`02a60000   hal      hal.dll      Mon Jul 13 18:27:36 2009 (4A5BDF08)
fffff880`04fc2000 fffff880`04fe6000   HDAudBus HDAudBus.sys Mon Jul 13 17:06:13 2009 (4A5BCBF5)
fffff880`05c64000 fffff880`05cc0000   HdAudio  HdAudio.sys  Mon Jul 13 17:06:59 2009 (4A5BCC23)
fffff880`0264c000 fffff880`02665000   HIDCLASS HIDCLASS.SYS Mon Jul 13 17:06:21 2009 (4A5BCBFD)
fffff880`02665000 fffff880`0266d080   HIDPARSE HIDPARSE.SYS Mon Jul 13 17:06:17 2009 (4A5BCBF9)
fffff880`0263e000 fffff880`0264c000   hidusb   hidusb.sys   Mon Jul 13 17:06:22 2009 (4A5BCBFE)
fffff880`054fe000 fffff880`055c6000   HTTP     HTTP.sys     Mon Jul 13 16:22:16 2009 (4A5BC1A8)
fffff880`016e8000 fffff880`016f1000   hwpolicy hwpolicy.sys Mon Jul 13 16:19:22 2009 (4A5BC0FA)
fffff880`03e62000 fffff880`03e80000   i8042prt i8042prt.sys Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`03f58000 fffff880`03f6e000   intelppm intelppm.sys Mon Jul 13 16:19:25 2009 (4A5BC0FD)
fffff880`03fea000 fffff880`03ff9000   kbdclass kbdclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff800`00bd5000 fffff800`00bdf000   kdcom    kdcom.dll    Mon Jul 13 18:31:07 2009 (4A5BDFDB)
fffff880`04394000 fffff880`043d7000   ks       ks.sys       Mon Jul 13 17:00:31 2009 (4A5BCA9F)
fffff880`014ef000 fffff880`01509000   ksecdd   ksecdd.sys   Mon Jul 13 16:20:54 2009 (4A5BC156)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Thu Dec 10 23:03:32 2009 (4B21E0B4)
fffff880`05d1f000 fffff880`05d24200   ksthunk  ksthunk.sys  Mon Jul 13 17:00:19 2009 (4A5BCA93)
fffff880`04811000 fffff880`04823000   L1E62x64 L1E62x64.sys Wed Jun 10 23:45:22 2009 (4A30A802)
fffff880`0269c000 fffff880`026b1000   lltdio   lltdio.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`0261b000 fffff880`0263e000   luafv    luafv.sys    Mon Jul 13 16:26:13 2009 (4A5BC295)
fffff880`00cf6000 fffff880`00d3a000   mcupdate mcupdate.dll Mon Jul 13 18:29:10 2009 (4A5BDF66)
fffff880`027bb000 fffff880`027c9000   monitor  monitor.sys  Mon Jul 13 16:38:52 2009 (4A5BC58C)
fffff880`04383000 fffff880`04392000   mouclass mouclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`0268f000 fffff880`0269c000   mouhid   mouhid.sys   Mon Jul 13 17:00:20 2009 (4A5BCA94)
fffff880`01010000 fffff880`0102a000   mountmgr mountmgr.sys Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`00cc0000 fffff880`00ced000   MpFilter MpFilter.sys Fri Nov 20 19:56:47 2009 (4B0756EF)
fffff880`066fd000 fffff880`0670d000   MpNWMon  MpNWMon.sys  Fri Nov 20 19:56:38 2009 (4B0756E6)
fffff880`055e4000 fffff880`055fc000   mpsdrv   mpsdrv.sys   Mon Jul 13 17:08:25 2009 (4A5BCC79)
fffff880`05400000 fffff880`0542d000   mrxsmb   mrxsmb.sys   Sat Feb 27 00:52:19 2010 (4B88CF33)
fffff880`0542d000 fffff880`0547b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 00:52:28 2010 (4B88CF3C)
fffff880`0547b000 fffff880`0549e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 00:52:26 2010 (4B88CF3A)
fffff880`00df3000 fffff880`00dfe000   Msfs     Msfs.SYS     Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`01126000 fffff880`01130000   msisadrv msisadrv.sys Mon Jul 13 16:19:26 2009 (4A5BC0FE)
fffff880`01491000 fffff880`014ef000   msrpc    msrpc.sys    Mon Jul 13 16:21:32 2009 (4A5BC17C)
fffff880`03ee9000 fffff880`03ef4000   mssmbios mssmbios.sys Mon Jul 13 16:31:10 2009 (4A5BC3BE)
fffff880`017ea000 fffff880`017fc000   mup      mup.sys      Mon Jul 13 16:23:45 2009 (4A5BC201)
fffff880`016f8000 fffff880`017ea000   ndis     ndis.sys     Mon Jul 13 16:21:40 2009 (4A5BC184)
fffff880`042f2000 fffff880`042fe000   ndistapi ndistapi.sys Mon Jul 13 17:10:00 2009 (4A5BCCD8)
fffff880`027e8000 fffff880`027fb000   ndisuio  ndisuio.sys  Mon Jul 13 17:09:25 2009 (4A5BCCB5)
fffff880`042fe000 fffff880`0432d000   ndiswan  ndiswan.sys  Mon Jul 13 17:10:11 2009 (4A5BCCE3)
fffff880`04265000 fffff880`0427a000   NDProxy  NDProxy.SYS  Mon Jul 13 17:10:05 2009 (4A5BCCDD)
fffff880`02c45000 fffff880`02c54000   netbios  netbios.sys  Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff880`02d20000 fffff880`02d65000   netbt    netbt.sys    Mon Jul 13 16:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 16:21:46 2009 (4A5BC18A)
fffff880`02ce4000 fffff880`02cf5000   Npfs     Npfs.SYS     Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`03edd000 fffff880`03ee9000   nsiproxy nsiproxy.sys Mon Jul 13 16:21:02 2009 (4A5BC15E)
fffff800`02a60000 fffff800`0303c000   nt       ntkrnlmp.exe Sat Feb 27 00:55:23 2010 (4B88CFEB)
fffff880`01217000 fffff880`013ba000   Ntfs     Ntfs.sys     Mon Jul 13 16:20:47 2009 (4A5BC14F)
fffff880`013f3000 fffff880`013fc000   Null     Null.SYS     Mon Jul 13 16:19:37 2009 (4A5BC109)
fffff880`05d67000 fffff880`05dba000   nwifi    nwifi.sys    Mon Jul 13 17:07:23 2009 (4A5BCC3B)
fffff880`02c00000 fffff880`02c26000   pacer    pacer.sys    Mon Jul 13 17:09:41 2009 (4A5BCCC5)
fffff880`01170000 fffff880`01185000   partmgr  partmgr.sys  Mon Jul 13 16:19:58 2009 (4A5BC11E)
fffff880`01130000 fffff880`01163000   pci      pci.sys      Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`011f6000 fffff880`011fd000   pciide   pciide.sys   Mon Jul 13 16:19:49 2009 (4A5BC115)
fffff880`01000000 fffff880`01010000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`0157c000 fffff880`0158d000   pcw      pcw.sys      Mon Jul 13 16:19:27 2009 (4A5BC0FF)
fffff880`0603c000 fffff880`060e2000   peauth   peauth.sys   Mon Jul 13 18:01:19 2009 (4A5BD8DF)
fffff880`05cc0000 fffff880`05cfd000   portcls  portcls.sys  Mon Jul 13 17:06:27 2009 (4A5BCC03)
fffff880`00d3a000 fffff880`00d4e000   PSHED    PSHED.dll    Mon Jul 13 18:32:23 2009 (4A5BE027)
fffff880`042ce000 fffff880`042f2000   rasl2tp  rasl2tp.sys  Mon Jul 13 17:10:11 2009 (4A5BCCE3)
fffff880`0432d000 fffff880`04348000   raspppoe raspppoe.sys Mon Jul 13 17:10:17 2009 (4A5BCCE9)
fffff880`04348000 fffff880`04369000   raspptp  raspptp.sys  Mon Jul 13 17:10:18 2009 (4A5BCCEA)
fffff880`04369000 fffff880`04383000   rassstp  rassstp.sys  Mon Jul 13 17:10:25 2009 (4A5BCCF1)
fffff880`03e8c000 fffff880`03edd000   rdbss    rdbss.sys    Mon Jul 13 16:24:09 2009 (4A5BC219)
fffff880`00e4d000 fffff880`00e56000   RDPCDD   RDPCDD.sys   Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`00de1000 fffff880`00dea000   rdpencdd rdpencdd.sys Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`00dea000 fffff880`00df3000   rdprefmp rdprefmp.sys Mon Jul 13 17:16:35 2009 (4A5BCE63)
fffff880`01400000 fffff880`0143a000   rdyboost rdyboost.sys Mon Jul 13 16:34:34 2009 (4A5BC48A)
fffff880`05dba000 fffff880`05dd2000   rspndr   rspndr.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`060e2000 fffff880`060ed000   secdrv   secdrv.SYS   Wed Sep 13 06:18:38 2006 (4508052E)
fffff880`03e56000 fffff880`03e62000   serenum  serenum.sys  Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`02c54000 fffff880`02c71000   serial   serial.sys   Mon Jul 13 17:00:40 2009 (4A5BCAA8)
fffff880`016e0000 fffff880`016e8000   spldr    spldr.sys    Mon May 11 09:56:27 2009 (4A0858BB)
fffff880`0665b000 fffff880`066f3000   srv      srv.sys      Tue Dec 08 01:32:55 2009 (4B1E0F37)
fffff880`0612c000 fffff880`06195000   srv2     srv2.sys     Mon Jul 13 16:25:02 2009 (4A5BC24E)
fffff880`060ed000 fffff880`0611a000   srvnet   srvnet.sys   Tue Dec 08 01:32:26 2009 (4B1E0F1A)
fffff880`04392000 fffff880`04393480   swenum   swenum.sys   Mon Jul 13 17:00:18 2009 (4A5BCA92)
fffff880`01800000 fffff880`019fd000   tcpip    tcpip.sys    Mon Jul 13 16:25:34 2009 (4A5BC26E)
fffff880`0611a000 fffff880`0612c000   tcpipreg tcpipreg.sys Mon Jul 13 17:09:49 2009 (4A5BCCCD)
fffff880`02d13000 fffff880`02d20000   TDI      TDI.SYS      Mon Jul 13 16:21:18 2009 (4A5BC16E)
fffff880`02cf5000 fffff880`02d13000   tdx      tdx.sys      Mon Jul 13 16:21:15 2009 (4A5BC16B)
fffff880`02c8c000 fffff880`02ca0000   termdd   termdd.sys   Mon Jul 13 17:16:36 2009 (4A5BCE64)
fffff960`00480000 fffff960`0048a000   TSDDD    TSDDD.dll    Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`03f32000 fffff880`03f58000   tunnel   tunnel.sys   Mon Jul 13 17:09:37 2009 (4A5BCCC1)
fffff880`043d7000 fffff880`043e9000   umbus    umbus.sys    Mon Jul 13 17:06:56 2009 (4A5BCC20)
fffff880`02600000 fffff880`0261ac00   usbaudio usbaudio.sys Mon Jul 13 17:06:31 2009 (4A5BCC07)
fffff880`027c9000 fffff880`027e6000   usbccgp  usbccgp.sys  Mon Jul 13 17:06:45 2009 (4A5BCC15)
fffff880`027e6000 fffff880`027e7f00   USBD     USBD.SYS     Mon Jul 13 17:06:23 2009 (4A5BCBFF)
fffff880`04800000 fffff880`04811000   usbehci  usbehci.sys  Mon Jul 13 17:06:30 2009 (4A5BCC06)
fffff880`04200000 fffff880`0425a000   usbhub   usbhub.sys   Mon Jul 13 17:07:09 2009 (4A5BCC2D)
fffff880`03e00000 fffff880`03e56000   USBPORT  USBPORT.SYS  Mon Jul 13 17:06:31 2009 (4A5BCC07)
fffff880`04fe6000 fffff880`04ff3000   usbuhci  usbuhci.sys  Mon Jul 13 17:06:27 2009 (4A5BCC03)
fffff880`01163000 fffff880`01170000   vdrvroot vdrvroot.sys Mon Jul 13 17:01:31 2009 (4A5BCADB)
fffff880`010b4000 fffff880`010c2000   vga      vga.sys      Mon Jul 13 16:38:47 2009 (4A5BC587)
fffff880`00dac000 fffff880`00dd1000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 16:38:51 2009 (4A5BC58B)
fffff880`01185000 fffff880`0119a000   volmgr   volmgr.sys   Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`0119a000 fffff880`011f6000   volmgrx  volmgrx.sys  Mon Jul 13 16:20:33 2009 (4A5BC141)
fffff880`01597000 fffff880`015e3000   volsnap  volsnap.sys  Mon Jul 13 16:20:08 2009 (4A5BC128)
fffff880`027ae000 fffff880`027bb000   vwifibus vwifibus.sys Mon Jul 13 17:07:21 2009 (4A5BCC39)
fffff880`02c26000 fffff880`02c3c000   vwififlt vwififlt.sys Mon Jul 13 17:07:22 2009 (4A5BCC3A)
fffff880`066f3000 fffff880`066fd000   vwifimp  vwifimp.sys  Mon Jul 13 17:07:28 2009 (4A5BCC40)
fffff880`02c71000 fffff880`02c8c000   wanarp   wanarp.sys   Mon Jul 13 17:10:21 2009 (4A5BCCED)
fffff880`00dd1000 fffff880`00de1000   watchdog watchdog.sys Mon Jul 13 16:37:35 2009 (4A5BC53F)
fffff880`00f5b000 fffff880`00fff000   Wdf01000 Wdf01000.sys Mon Jul 13 16:22:07 2009 (4A5BC19F)
fffff880`00e00000 fffff880`00e0f000   WDFLDR   WDFLDR.SYS   Mon Jul 13 16:19:54 2009 (4A5BC11A)
fffff880`02def000 fffff880`02df8000   wfplwf   wfplwf.sys   Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff960`00020000 fffff960`0032f000   win32k   win32k.sys   Sat May 01 08:06:30 2010 (4BDC4376)
fffff880`0111d000 fffff880`01126000   WMILIB   WMILIB.SYS   Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`0266e000 fffff880`0268f000   WudfPf   WudfPf.sys   Mon Jul 13 17:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06743000 fffff880`067b4000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`015e3000 fffff880`015f1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`015f1000 fffff880`015fd000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`013ea000 fffff880`013f3000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`01200000 fffff880`01213000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

~Lordbob