Brand new laptop, Win7 Ult x64, BSOD's!!!

[Casey R]

Hey guys.

Been having lots of BSOD's since I got my new laptop last week running Win7 Ultimate x64. I read that there were lots of issues with the NOD32 antivirus program, so I got rid of that in favor of Norton Internet Security.

The BSOD's became less frequent but I'm still getting them every now and then.

I've attached the most recent Minidump files.....would really appreciate some help.

Thanks in advance!

Casey

 

[Casey R]

My bad. I attached the files wrong. Fixed now.

 

[usasma]

Two different errors.

Start with this:

H/W Diagnostics:
Please start by running these hardware diagnostics:
Memory Diagnostics (read the details at the link)
HD Diagnostic (read the details at the link)

Also, please run one of these free, independent online malware scans to ensure that your current protection hasn't been compromised: Malware (read the details at the link)

Then this:

CHKDSK /R:
Run CHKDSK /R from an elevated (Run as adminstrator) Command Prompt.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter. Then reboot and let the test run. It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors. See "CHKDSK LogFile" below in order to check the results of the test.

Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"

CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry.
Copy/paste the results into your next post.

Then, replace your networking drivers with the most recent copy available from the manufacturer of the network card.

Summary of the BSOD's:

Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Wed Dec 30 18:46:45.665 2009 (GMT-5)
System Uptime: 0 days 1:37:32.600
BugCheck A, {ffffffffffffffd4, 2, 1, fffff800028db83a}
Probably caused by : NETIO.SYS ( NETIO!WfpSysTimerQueuePassiveCallback+e7 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Debug session time: Wed Dec 30 19:57:03.988 2009 (GMT-5)
System Uptime: 0 days 0:14:45.939
BugCheck 50, {fffff28006cc66e8, 0, fffff800028ec7fc, 7}
Probably caused by : memory_corruption
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  GoogleCrashHan

 

[Casey R]

Thank you so much!

I haven't yet ran the Memory or HD diagnostics as I'm not at home for a few days.

Ran Malware scan, that was all good.

Here's my Checkdisk logfile:

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 01/01/2010 23:12:58
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: KingSimon-PC
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
70656 file records processed.

File verification completed.
46 large file records processed.

0 bad file records processed.

2 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
102400 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
70656 file SDs/SIDs processed.

Cleaning up 314 unused index entries from index $SII of file 0x9.
Cleaning up 314 unused index entries from index $SDH of file 0x9.
Cleaning up 314 unused security descriptors.
Security descriptor verification completed.
15873 data files processed.

CHKDSK is verifying Usn Journal...
35759632 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
70640 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
52878167 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

244093951 KB total disk space.
32361764 KB in 53954 files.
40144 KB in 15874 indexes.
0 KB in bad sectors.
179371 KB in use by the system.
65536 KB occupied by the log file.
211512672 KB available on disk.

4096 bytes in each allocation unit.
61023487 total allocation units on disk.
52878168 allocation units available on disk.

Internal Info:
00 14 01 00 cf 10 01 00 96 22 02 00 00 00 00 00 ........."......
b8 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-01-01T23:12:58.000000000Z" />
<EventRecordID>1981</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>KingSimon-PC</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
70656 file records processed.

File verification completed.
46 large file records processed.

0 bad file records processed.

2 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
102400 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
70656 file SDs/SIDs processed.

Cleaning up 314 unused index entries from index $SII of file 0x9.
Cleaning up 314 unused index entries from index $SDH of file 0x9.
Cleaning up 314 unused security descriptors.
Security descriptor verification completed.
15873 data files processed.

CHKDSK is verifying Usn Journal...
35759632 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
70640 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
52878167 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

244093951 KB total disk space.
32361764 KB in 53954 files.
40144 KB in 15874 indexes.
0 KB in bad sectors.
179371 KB in use by the system.
65536 KB occupied by the log file.
211512672 KB available on disk.

4096 bytes in each allocation unit.
61023487 total allocation units on disk.
52878168 allocation units available on disk.

Internal Info:
00 14 01 00 cf 10 01 00 96 22 02 00 00 00 00 00 ........."......
b8 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

 

[usasma]

CHKDSK found errors on your hard drive. If you can't run the HD diagnostic, then wait a day or two and rerun the CHKDSK /R - if it shows errors again then it's likely that your hard drive is dying.

 

[Casey R]

Had a few more than usual today....attached the Minidumps here....would be really grateful if you could take a look at these as well.

 

[Casey R]

HD Diagnostics showed no errors....what to try next.....

 

[Pauly]

Run memtest86 (min 5 passes)

 

[Casey R]

No memory errors found.

Downloaded the BlueScreenView program and it seems most of the errors are because of the file NTOSKRNL.EXE.

What should I do next?

 

[Casey R]

OK, I've done a SFC scan. After doing the scan it said it found some corrupted files and gave me a path to the CBS.log.

I looked at the log file and I can't make head nor tail of it.

I've attached it - any chance one of you guys could look at it, let me know which files it says are corrupted and offer any suggestions as to what to do about fixing them?

Thank you so much (in advance )

 

[usasma]

As far as I can see, this is the only corrupted file listed in the CBS.log file: iassdo.dll

If SFC.EXE can't fix it - search the computer for it (there's 4 copies of it on my Win7 system) and see if you can replace it with one of the others.

Also, Please update or remove these older drivers that were loaded at the time of the crash. Don't use Windows Update or the Update drivers function of Device Manager. Please use the following instructions to locate the most current drivers:

How To Find Updated Drivers:
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

Here's the older drivers:

mv2.sys      Wed Feb 06 16:02:40 2008
SmSerl64.sys Fri Sep 26 04:45:56 2008

Once this is all done, then please try running Driver Verifier according to these directions:

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.

So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).

Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Low Resource Simulation" and click "Next"
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.

Reboot the system and wait for it to crash to the Blue Screen. Continue to use your system normally, and if you know what causes the crash, do that repeatedly. The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.

Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.

If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.
If that doesn't work, post back and we'll have to see about fixing the registry entry off-line.

More info on this at this link: Using Driver Verifier to identify issues with Windows drivers for advanced users

 

[Casey R]

Thanks so much, usasma.

As far as iassdo.dll goes - I didn't replace it because all the other copies of it I found were drastically different sizes. SFC is unable to fix it, but I don't think this is what's causing the problem.

mv2.sys has been deleted - it relates to a program that I do not use anymore and was uninstalled.

SMSerl64.sys is a driver for a part of the hardware that I do not use, so I have disabled it in Device Manager.

Now I'm going to create a system restore and give Driver Verifier a go. I'll upload the log afterwards.

 

[Casey R]

OK, here's the memory dump for the BSOD that happened whilst Driver Verifier was running.

 

[jcgriff2]

The bugcheck = 0x1e (0xc000001d,,,) = kernel mode exception not handled; the exception = 0xc000001d = attempt to execute illegal program instruction; probable cause = "memory corruption"; app running = chrome.exe

There are indications this may be tied to the page file. It may be the case that a rogue driver is causing the corruption or possibly RAM or HDD bad and the kernel data is being corrupted by hardware failure. Re-run chkdsk as well.

There was no indication in the dump that it was in fact a VERIFIER_ENABLED_MINIDUMP

Please run the driver verifier again per usasma's instructions.

Do you still have NIS installed?

Regards. . .

jcgriff2

.

[font=lucida console]

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\PalmDesert7\AppData\Local\Temp\Temp1_010710-19702-01[1].zip\010710-19702-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02863000 PsLoadedModuleList = 0xfffff800`02aa0e50
Debug session time: Wed Jan  6 22:19:58.028 2010 (GMT-5)
System Uptime: 0 days 6:20:49.041
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc000001d, fffff80002bc480f, 0, fffff80002bc5000}
Probably caused by : memory_corruption
Followup: memory_corruption
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff80002bc480f, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: fffff80002bc5000, Parameter 1 of the exception
Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION}  Illegal Instruction  An attempt was made to execute an illegal instruction.
FAULTING_IP: 
nt!RtlpHashStringToAtom+1f
fffff800`02bc480f 4d              ???
EXCEPTION_PARAMETER1:  0000000000000000
EXCEPTION_PARAMETER2:  fffff80002bc5000
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
BUGCHECK_STR:  0x1E
PROCESS_NAME:  chrome.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from fffff80002914a17 to fffff800028d4f00
FAILED_INSTRUCTION_ADDRESS: 
nt!RtlpHashStringToAtom+1f
fffff800`02bc480f 4d              ???
STACK_TEXT:  
fffff880`07e32ee8 fffff800`02914a17 : 00000000`0000001e ffffffff`c000001d fffff800`02bc480f 00000000`00000000 : nt!KeBugCheckEx
fffff880`07e32ef0 fffff800`028d4542 : fffff880`07e336c8 00000000`00000000 fffff880`07e33770 fffff8a0`01674c70 : nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`07e33590 fffff800`028d269f : fffff880`07e33770 fffff880`07e33b00 00000000`00000000 fffff8a0`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`07e33770 fffff800`02bc480f : 00000000`00000000 fffff800`02bc4964 00000000`00000010 00000000`00210282 : nt!KiInvalidOpcodeFault+0x11f
fffff880`07e33900 fffff880`07e33c60 : fffff8a0`01674c70 fffffa80`04d23060 fffffa80`07a3b080 00000000`00000000 : nt!RtlpHashStringToAtom+0x1f
fffff880`07e33940 fffff8a0`01674c70 : fffffa80`04d23060 fffffa80`07a3b080 00000000`00000000 00000000`0020fd01 : 0xfffff880`07e33c60
fffff880`07e33948 fffffa80`04d23060 : fffffa80`07a3b080 00000000`00000000 00000000`0020fd01 fffff880`07e339b0 : 0xfffff8a0`01674c70
fffff880`07e33950 fffffa80`07a3b080 : 00000000`00000000 00000000`0020fd01 fffff880`07e339b0 00000000`6e4bef68 : 0xfffffa80`04d23060
fffff880`07e33958 00000000`00000000 : 00000000`0020fd01 fffff880`07e339b0 00000000`6e4bef68 fffff800`02bc515c : 0xfffffa80`07a3b080

STACK_COMMAND:  kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff80002bc4810 - nt!RtlpHashStringToAtom+20
 [ 8b:8f ]
1 error : !nt (fffff80002bc4810)
MODULE_NAME: memory_corruption
IMAGE_NAME:  memory_corruption
FOLLOWUP_NAME:  memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP:  0
MEMORY_CORRUPTOR:  ONE_BIT
FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
---------
1: kd> lmvm memory_corruption
start             end                 module name
1: kd> k
Child-SP          RetAddr           Call Site
fffff880`07e32ee8 fffff800`02914a17 nt!KeBugCheckEx
fffff880`07e32ef0 fffff800`028d4542 nt! ?? ::FNODOBFM::`string'+0x460da
fffff880`07e33590 fffff800`028d269f nt!KiExceptionDispatch+0xc2
fffff880`07e33770 fffff800`02bc480f nt!KiInvalidOpcodeFault+0x11f
fffff880`07e33900 fffff880`07e33c60 nt!RtlpHashStringToAtom+0x1f
fffff880`07e33940 fffff8a0`01674c70 0xfffff880`07e33c60
fffff880`07e33948 fffffa80`04d23060 0xfffff8a0`01674c70
fffff880`07e33950 fffffa80`07a3b080 0xfffffa80`04d23060
fffff880`07e33958 00000000`00000000 0xfffffa80`07a3b080
1: kd> x *!
start             end                 module name
fffff800`00baf000 fffff800`00bb9000   kdcom      (deferred)             
fffff800`0281a000 fffff800`02863000   hal        (deferred)             
fffff800`02863000 fffff800`02e40000   nt         (pdb symbols)          c:\symbols\ntkrnlmp.pdb\F8E2A8B5C9B74BF4A6E4A48F180099942\ntkrnlmp.pdb
fffff880`00c00000 fffff880`00c5c000   volmgrx    (deferred)             
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX    (deferred)             
fffff880`00c76000 fffff880`00cba000   mcupdate_GenuineIntel   (deferred)             
fffff880`00cba000 fffff880`00cce000   PSHED      (deferred)             
fffff880`00cce000 fffff880`00d2c000   CLFS       (deferred)             
fffff880`00d2c000 fffff880`00dec000   CI         (deferred)             
fffff880`00e00000 fffff880`00e1a000   mountmgr   (deferred)             
fffff880`00e1a000 fffff880`00e23000   atapi      (deferred)             
fffff880`00e23000 fffff880`00e4d000   ataport    (deferred)             
fffff880`00e4d000 fffff880`00e58000   msahci     (deferred)             
fffff880`00e58000 fffff880`00efc000   Wdf01000   (deferred)             
fffff880`00efc000 fffff880`00f0b000   WDFLDR     (deferred)             
fffff880`00f0b000 fffff880`00f62000   ACPI       (deferred)             
fffff880`00f62000 fffff880`00f6b000   WMILIB     (deferred)             
fffff880`00f6b000 fffff880`00f75000   msisadrv   (deferred)             
fffff880`00f75000 fffff880`00fa8000   pci        (deferred)             
fffff880`00fa8000 fffff880`00fb5000   vdrvroot   (deferred)             
fffff880`00fb5000 fffff880`00fca000   partmgr    (deferred)             
fffff880`00fca000 fffff880`00fd3000   compbatt   (deferred)             
fffff880`00fd3000 fffff880`00fdf000   BATTC      (deferred)             
fffff880`00fdf000 fffff880`00ff4000   volmgr     (deferred)             
fffff880`00ff4000 fffff880`00fff000   amdxata    (deferred)             
fffff880`01000000 fffff880`0104c000   volsnap    (deferred)             
fffff880`0104c000 fffff880`01086000   rdyboost   (deferred)             
fffff880`01086000 fffff880`010a4000   tdx        (deferred)             
fffff880`010c5000 fffff880`01111000   fltmgr     (deferred)             
fffff880`01111000 fffff880`01125000   fileinfo   (deferred)             
fffff880`01125000 fffff880`01183000   msrpc      (deferred)             
fffff880`01183000 fffff880`011f6000   cng        (deferred)             
fffff880`01200000 fffff880`01211000   Npfs       (deferred)             
fffff880`01213000 fffff880`013b6000   Ntfs       (deferred)             
fffff880`013b6000 fffff880`013d0000   ksecdd     (deferred)             
fffff880`013d0000 fffff880`013e1000   pcw        (deferred)             
fffff880`013e1000 fffff880`013eb000   Fs_Rec     (deferred)             
fffff880`013eb000 fffff880`013f8000   MDPMGRNT   (deferred)             
fffff880`01400000 fffff880`01460000   NETIO      (deferred)             
fffff880`01460000 fffff880`0148b000   ksecpkg    (deferred)             
fffff880`0148b000 fffff880`014d5000   fwpkclnt   (deferred)             
fffff880`014d5000 fffff880`014e5000   vmstorfl   (deferred)             
fffff880`014ec000 fffff880`015de000   ndis       (deferred)             
fffff880`015de000 fffff880`015e6000   spldr      (deferred)             
fffff880`015e6000 fffff880`015f8000   mup        (deferred)             
fffff880`01600000 fffff880`017fd000   tcpip      (deferred)             
fffff880`01800000 fffff880`01809000   RDPCDD     (deferred)             
fffff880`01809000 fffff880`01812000   rdpencdd   (deferred)             
fffff880`01812000 fffff880`0181b000   rdprefmp   (deferred)             
fffff880`0181b000 fffff880`01826000   Msfs       (deferred)             
fffff880`01826000 fffff880`01833000   TDI        (deferred)             
fffff880`01834000 fffff880`0188f000   MDFSYSNT   (deferred)             
fffff880`0188f000 fffff880`01898000   hwpolicy   (deferred)             
fffff880`01898000 fffff880`018d2000   fvevol     (deferred)             
fffff880`018d2000 fffff880`018e8000   disk       (deferred)             
fffff880`018e8000 fffff880`01918000   CLASSPNP   (deferred)             
fffff880`01950000 fffff880`0197a000   cdrom      (deferred)             
fffff880`0197a000 fffff880`019a6000   MpFilter   (deferred)             
fffff880`019a6000 fffff880`019af000   Null       (deferred)             
fffff880`019af000 fffff880`019b6000   Beep       (deferred)             
fffff880`019b6000 fffff880`019c4000   vga        (deferred)             
fffff880`019c4000 fffff880`019e9000   VIDEOPRT   (deferred)             
fffff880`019e9000 fffff880`019f9000   watchdog   (deferred)             
fffff880`02000000 fffff880`0202d100   usbvideo   (deferred)             
fffff880`0202e000 fffff880`02051000   luafv      (deferred)             
fffff880`02051000 fffff880`02072000   WudfPf     (deferred)             
fffff880`02072000 fffff880`02087000   lltdio     (deferred)             
fffff880`02087000 fffff880`020da000   nwifi      (deferred)             
fffff880`020ea000 fffff880`02162000   RTL8187B   (deferred)             
fffff880`02162000 fffff880`0216f000   vwifibus   (deferred)             
fffff880`0216f000 fffff880`0218c000   cdfs       (deferred)             
fffff880`0218c000 fffff880`0219a000   crashdmp   (deferred)             
fffff880`0219a000 fffff880`021b7000   usbccgp    (deferred)             
fffff880`021b7000 fffff880`021c3000   dump_dumpata   (deferred)             
fffff880`021c3000 fffff880`021ce000   dump_msahci   (deferred)             
fffff880`021ce000 fffff880`021e1000   dump_dumpfve   (deferred)             
fffff880`021e1000 fffff880`021f4000   ndisuio    (deferred)             
fffff880`02a00000 fffff880`02a23000   mrxsmb20   (deferred)             
fffff880`02a23000 fffff880`02a3b000   adfs       (deferred)             
fffff880`02a68000 fffff880`02b30000   HTTP       (deferred)             
fffff880`02b30000 fffff880`02b4e000   bowser     (deferred)             
fffff880`02b4e000 fffff880`02b66000   mpsdrv     (deferred)             
fffff880`02b66000 fffff880`02b92000   mrxsmb     (deferred)             
fffff880`02b92000 fffff880`02bdf000   mrxsmb10   (deferred)             
fffff880`02c08000 fffff880`02c92000   afd        (deferred)             
fffff880`02c92000 fffff880`02cd7000   netbt      (deferred)             
fffff880`02cd7000 fffff880`02ce0000   wfplwf     (deferred)             
fffff880`02ce0000 fffff880`02d06000   pacer      (deferred)             
fffff880`02d06000 fffff880`02d1c000   vwififlt   (deferred)             
fffff880`02d1c000 fffff880`02d2b000   netbios    (deferred)             
fffff880`02d2b000 fffff880`02d46000   wanarp     (deferred)             
fffff880`02d46000 fffff880`02d5a000   termdd     (deferred)             
fffff880`02d5a000 fffff880`02dab000   rdbss      (deferred)             
fffff880`02dab000 fffff880`02db7000   nsiproxy   (deferred)             
fffff880`02db7000 fffff880`02dc2000   mssmbios   (deferred)             
fffff880`02dc2000 fffff880`02dd1000   discache   (deferred)             
fffff880`02dd1000 fffff880`02deb000   rassstp    (deferred)             
fffff880`03800000 fffff880`03869000   srv2       (deferred)             
fffff880`03878000 fffff880`0391e000   peauth     (deferred)             
fffff880`0391e000 fffff880`03929000   secdrv     (deferred)             
fffff880`03929000 fffff880`03956000   srvnet     (deferred)             
fffff880`03956000 fffff880`03968000   tcpipreg   (deferred)             
fffff880`03a00000 fffff880`03a49000   SynTP      (deferred)             
fffff880`03a49000 fffff880`03a5f000   AgileVpn   (deferred)             
fffff880`03a5f000 fffff880`03a83000   rasl2tp    (deferred)             
fffff880`03a83000 fffff880`03a8f000   ndistapi   (deferred)             
fffff880`03a8f000 fffff880`03abe000   ndiswan    (deferred)             
fffff880`03abe000 fffff880`03ad9000   raspppoe   (deferred)             
fffff880`03aef000 fffff880`03b72000   csc        (deferred)             
fffff880`03b72000 fffff880`03b90000   dfsc       (deferred)             
fffff880`03b90000 fffff880`03ba1000   blbdrive   (deferred)             
fffff880`03ba1000 fffff880`03bc7000   tunnel     (deferred)             
fffff880`03bc7000 fffff880`03be8000   raspptp    (deferred)             
fffff880`03be8000 fffff880`03bf3000   rdpbus     (deferred)             
fffff880`03c00000 fffff880`03c2f000   SCSIPORT   (deferred)             
fffff880`03c2f000 fffff880`03c4d000   i8042prt   (deferred)             
fffff880`03c4d000 fffff880`03c56000   wmiacpi    (deferred)             
fffff880`03c57000 fffff880`0435e5c0   igdkmd64   (deferred)             
fffff880`0435f000 fffff880`043ab000   Rt64win7   (deferred)             
fffff880`043ab000 fffff880`043d2000   jmcr       (deferred)             
fffff880`043d2000 fffff880`043e8000   intelppm   (deferred)             
fffff880`043e8000 fffff880`043f8000   CompositeBus   (deferred)             
fffff880`04400000 fffff880`04446000   dxgmms1    (deferred)             
fffff880`04446000 fffff880`04453000   usbuhci    (deferred)             
fffff880`04453000 fffff880`044a9000   USBPORT    (deferred)             
fffff880`044a9000 fffff880`044ba000   usbehci    (deferred)             
fffff880`044ba000 fffff880`044de000   HDAudBus   (deferred)             
fffff880`044de000 fffff880`044ed000   kbdclass   (deferred)             
fffff880`044ed000 fffff880`044eef00   USBD       (deferred)             
fffff880`044f1000 fffff880`045e5000   dxgkrnl    (deferred)             
fffff880`045e5000 fffff880`045f4000   mouclass   (deferred)             
fffff880`045f4000 fffff880`045f8500   CmBatt     (deferred)             
fffff880`045f9000 fffff880`045fa480   swenum     (deferred)             
fffff880`046a8000 fffff880`04740000   srv        (deferred)             
fffff880`04740000 fffff880`04750000   MpNWMon    (deferred)             
fffff880`04750000 fffff880`04760000   qwavedrv   (deferred)             
fffff880`04800000 fffff880`0485c000   HdAudio    (deferred)             
fffff880`0485c000 fffff880`04899000   portcls    (deferred)             
fffff880`04899000 fffff880`048bb000   drmk       (deferred)             
fffff880`048bb000 fffff880`048c0200   ksthunk    (deferred)             
fffff880`048c1000 fffff880`048cd000   Dxapi      (deferred)             
fffff880`048cd000 fffff880`048db000   monitor    (deferred)             
fffff880`048f0000 fffff880`04933000   ks         (deferred)             
fffff880`04933000 fffff880`04945000   umbus      (deferred)             
fffff880`04945000 fffff880`0499f000   usbhub     (deferred)             
fffff880`0499f000 fffff880`049b4000   NDProxy    (deferred)             
fffff880`049b4000 fffff880`049cc000   rspndr     (deferred)             
fffff960`000b0000 fffff960`003bf000   win32k     (pdb symbols)          c:\symbols\win32k.pdb\A9F6403F14074E9D8A07D0AA6F0C1CFF2\win32k.pdb
fffff960`005c0000 fffff960`005ca000   TSDDD      (deferred)             
fffff960`00710000 fffff960`00737000   cdd        (deferred)             
fffff960`00980000 fffff960`009e1000   ATMFD      (deferred)             
Unloaded modules:
fffff880`04760000 fffff880`04762000   MSPQM.sys
fffff880`04762000 fffff880`04764000   MSPCLOCK.sys
fffff880`03968000 fffff880`039d9000   spsys.sys
fffff880`01918000 fffff880`01926000   crashdmp.sys
fffff880`01926000 fffff880`01932000   dump_pciidex
fffff880`01932000 fffff880`0193d000   dump_msahci.
fffff880`0193d000 fffff880`01950000   dump_dumpfve
1: kd> !verifier 0x100
Error: incorrect value of nt!IovIrpTracesLength = 0000000000000000
1: kd> !verifier 0x1
Verify Level fbb ... enabled options are:
 Special pool
 Special irql
 All pool allocations checked on unload
 Io subsystem checking enabled
 Deadlock detection enabled
 DMA checking enabled
 Security checks enabled
 Force pending I/O requests
 IRP Logging
 Miscellaneous checks enabled
Summary of All Verifier Statistics
RaiseIrqls                             0x0
AcquireSpinLocks                       0x38fe26
Synch Executions                       0x19dde7
Trims                                  0x38b1d4
Pool Allocations Attempted             0xba1a69
Pool Allocations Succeeded             0xba1a69
Pool Allocations Succeeded SpecialPool 0xba1a69
Pool Allocations With NO TAG           0x0
Pool Allocations Failed                0x0
Resource Allocations Failed Deliberately   0x0
Current paged pool allocations         0x22 for 00068B34 bytes
Peak paged pool allocations            0x2d for 0006D9D8 bytes
Current nonpaged pool allocations      0x200a for 007F7880 bytes
Peak nonpaged pool allocations         0x2118 for 00813870 bytes
GetPointerFromAddress: unable to read from fffff80002b0b0e0
Unable to read verifier list at fffff80002a81610.
1: kd> !verifier 0x4
Driver fault injection is not enabled for this system.
1: kd> !verifier 0x8
Unable to read TrackIrqlQueue at fffff80002dae120
Irql tracking is not enabled. You need to enable driver verifier 
for at least one driver to activate irql tracking.               
1: kd> !verifier 0x20
Error: cannot resolve symbol nt!ViCancelGlobals
Error: cannot resolve symbol nt!ViCompletionThreshold
Error: cannot resolve symbol nt!ViCancelThreshold
Error: cannot resolve symbol nt!ViForceCancelEnabled
Incorrect symbols (failed to get address of verifier variables).
1: kd> !verifier 0x40
Force Pending log is empty.
1: kd> !verifier 0x80
Error: incorrect value of nt!VfPoolTracesLength = 0000000000000000
1: kd> !locks
**** DUMP OF ALL RESOURCE OBJECTS ****
fffff80002a78770: Unable to get value of ExpSystemResourcesList
1: kd> !ihs
ih: IA64 specific extension...
1: kd> !deadlock
Deadlock detection not initialized 
1: kd> .bugcheck
Bugcheck code 0000001E
Arguments ffffffff`c000001d fffff800`02bc480f 00000000`00000000 fffff800`02bc5000
1: kd> !chkimg -v
Searching for module with expression: @rip
Will apply relocation fixups to file used for comparison
Will ignore NOP/LOCK errors
Will ignore patched instructions
Image specific ignores will be applied
Comparison image path: C:\symbols\ntkrnlmp.exe\4A5BC6005dd000\ntkrnlmp.exe
No range specified
Scanning section:    .text
Size: 1685025
Range to scan: fffff80002864000-fffff800029ff621
Total bytes compared: 1685025(100%)
Number of errors: 0
Scanning section:   POOLMI
Size: 7057
Range to scan: fffff80002a04000-fffff80002a05b91
Total bytes compared: 7057(100%)
Number of errors: 0
Scanning section: POOLCODE
Size: 11836
Range to scan: fffff80002a06000-fffff80002a08e3c
Total bytes compared: 11836(100%)
Number of errors: 0
Scanning section:   PAGELK
Size: 84875
Range to scan: fffff80002b0f000-fffff80002b23b8b
Total bytes compared: 84875(100%)
Number of errors: 0
Scanning section:     PAGE
Size: 2303086
Range to scan: fffff80002b24000-fffff80002d5646e
Total bytes compared: 2303086(100%)
Number of errors: 1
Scanning section:   PAGEKD
Size: 19458
Range to scan: fffff80002d57000-fffff80002d5bc02
Total bytes compared: 19458(100%)
Number of errors: 0
Scanning section: PAGEHDLS
Size: 10199
Range to scan: fffff80002d7e000-fffff80002d807d7
Total bytes compared: 10199(100%)
Number of errors: 0
Scanning section: PAGEBGFX
Size: 26188
Range to scan: fffff80002d81000-fffff80002d8764c
Total bytes compared: 26188(100%)
Number of errors: 0
1 error : @rip (fffff80002bc4810)
1: kd> !chkimg nt
1 error : nt (fffff80002bc4810)
1: kd> lmnt
start             end                 module name
fffff800`00baf000 fffff800`00bb9000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff800`0281a000 fffff800`02863000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff800`02863000 fffff800`02e40000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00c76000 fffff880`00cba000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00cba000 fffff880`00cce000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00cce000 fffff880`00d2c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d2c000 fffff880`00dec000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00e00000 fffff880`00e1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00e1a000 fffff880`00e23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e23000 fffff880`00e4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00e4d000 fffff880`00e58000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`00e58000 fffff880`00efc000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00efc000 fffff880`00f0b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f0b000 fffff880`00f62000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f62000 fffff880`00f6b000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f6b000 fffff880`00f75000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f75000 fffff880`00fa8000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fa8000 fffff880`00fb5000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00fb5000 fffff880`00fca000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00fca000 fffff880`00fd3000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00fd3000 fffff880`00fdf000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`00fdf000 fffff880`00ff4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00ff4000 fffff880`00fff000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01086000 fffff880`010a4000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`010c5000 fffff880`01111000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01111000 fffff880`01125000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01125000 fffff880`01183000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01183000 fffff880`011f6000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01200000 fffff880`01211000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01213000 fffff880`013b6000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013b6000 fffff880`013d0000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`013d0000 fffff880`013e1000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`013e1000 fffff880`013eb000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`013eb000 fffff880`013f8000   MDPMGRNT MDPMGRNT.SYS Wed Sep 23 15:23:04 2009 (4ABA7598)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`014ec000 fffff880`015de000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`015de000 fffff880`015e6000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`015e6000 fffff880`015f8000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01600000 fffff880`017fd000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`01800000 fffff880`01809000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01809000 fffff880`01812000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01812000 fffff880`0181b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0181b000 fffff880`01826000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01826000 fffff880`01833000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01834000 fffff880`0188f000   MDFSYSNT MDFSYSNT.sys Mon Sep 28 15:02:26 2009 (4AC10842)
fffff880`0188f000 fffff880`01898000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`01898000 fffff880`018d2000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`018d2000 fffff880`018e8000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`018e8000 fffff880`01918000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`01950000 fffff880`0197a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0197a000 fffff880`019a6000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`019a6000 fffff880`019af000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`019af000 fffff880`019b6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`019b6000 fffff880`019c4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019c4000 fffff880`019e9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`019e9000 fffff880`019f9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`02000000 fffff880`0202d100   usbvideo usbvideo.sys Mon Jul 13 20:07:00 2009 (4A5BCC24)
fffff880`0202e000 fffff880`02051000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`02051000 fffff880`02072000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`02072000 fffff880`02087000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02087000 fffff880`020da000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`020ea000 fffff880`02162000   RTL8187B RTL8187B.sys Thu Nov 05 00:51:31 2009 (4AF267E3)
fffff880`02162000 fffff880`0216f000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`0216f000 fffff880`0218c000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`0218c000 fffff880`0219a000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0219a000 fffff880`021b7000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`021b7000 fffff880`021c3000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`021c3000 fffff880`021ce000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`021ce000 fffff880`021e1000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`021e1000 fffff880`021f4000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`02a00000 fffff880`02a23000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`02a23000 fffff880`02a3b000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`02a68000 fffff880`02b30000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`02b30000 fffff880`02b4e000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`02b4e000 fffff880`02b66000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02b66000 fffff880`02b92000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`02b92000 fffff880`02bdf000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`02c08000 fffff880`02c92000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`02c92000 fffff880`02cd7000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`02cd7000 fffff880`02ce0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02ce0000 fffff880`02d06000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`02d06000 fffff880`02d1c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02d1c000 fffff880`02d2b000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d2b000 fffff880`02d46000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02d46000 fffff880`02d5a000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02d5a000 fffff880`02dab000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02dab000 fffff880`02db7000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`02db7000 fffff880`02dc2000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`02dc2000 fffff880`02dd1000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`02dd1000 fffff880`02deb000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03800000 fffff880`03869000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`03878000 fffff880`0391e000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0391e000 fffff880`03929000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03929000 fffff880`03956000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`03956000 fffff880`03968000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`03a00000 fffff880`03a49000   SynTP    SynTP.sys    Thu Jun 25 21:47:41 2009 (4A4428BD)
fffff880`03a49000 fffff880`03a5f000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03a5f000 fffff880`03a83000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03a83000 fffff880`03a8f000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03a8f000 fffff880`03abe000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03abe000 fffff880`03ad9000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03aef000 fffff880`03b72000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03b72000 fffff880`03b90000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03b90000 fffff880`03ba1000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03ba1000 fffff880`03bc7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03bc7000 fffff880`03be8000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03be8000 fffff880`03bf3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`03c00000 fffff880`03c2f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`03c2f000 fffff880`03c4d000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03c4d000 fffff880`03c56000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`03c57000 fffff880`0435e5c0   igdkmd64 igdkmd64.sys Thu Aug 13 17:53:45 2009 (4A848B69)
fffff880`0435f000 fffff880`043ab000   Rt64win7 Rt64win7.sys Tue Nov 17 12:01:19 2009 (4B02D6DF)
fffff880`043ab000 fffff880`043d2000   jmcr     jmcr.sys     Tue Sep 22 22:24:55 2009 (4AB986F7)
fffff880`043d2000 fffff880`043e8000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`043e8000 fffff880`043f8000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04400000 fffff880`04446000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`04446000 fffff880`04453000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04453000 fffff880`044a9000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`044a9000 fffff880`044ba000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`044ba000 fffff880`044de000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`044de000 fffff880`044ed000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`044ed000 fffff880`044eef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`044f1000 fffff880`045e5000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`045e5000 fffff880`045f4000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`045f4000 fffff880`045f8500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`045f9000 fffff880`045fa480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`046a8000 fffff880`04740000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`04740000 fffff880`04750000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff880`04750000 fffff880`04760000   qwavedrv qwavedrv.sys Mon Jul 13 20:09:48 2009 (4A5BCCCC)
fffff880`04800000 fffff880`0485c000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`0485c000 fffff880`04899000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04899000 fffff880`048bb000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`048bb000 fffff880`048c0200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`048c1000 fffff880`048cd000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`048cd000 fffff880`048db000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`048f0000 fffff880`04933000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`04933000 fffff880`04945000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`04945000 fffff880`0499f000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`0499f000 fffff880`049b4000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`049b4000 fffff880`049cc000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff960`000b0000 fffff960`003bf000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff960`005c0000 fffff960`005ca000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
fffff960`00980000 fffff960`009e1000   ATMFD    ATMFD.DLL    Thu Jul 30 01:07:22 2009 (4A712A8A)
Unloaded modules:
fffff880`04760000 fffff880`04762000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04762000 fffff880`04764000   MSPCLOCK.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03968000 fffff880`039d9000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01918000 fffff880`01926000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01926000 fffff880`01932000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01932000 fffff880`0193d000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0193d000 fffff880`01950000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
1: kd> lmntsm
start             end                 module name
fffff880`00f0b000 fffff880`00f62000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02a23000 fffff880`02a3b000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`02c08000 fffff880`02c92000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03a49000 fffff880`03a5f000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00ff4000 fffff880`00fff000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00e1a000 fffff880`00e23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e23000 fffff880`00e4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00980000 fffff960`009e1000   ATMFD    ATMFD.DLL    Thu Jul 30 01:07:22 2009 (4A712A8A)
fffff880`00fd3000 fffff880`00fdf000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`019af000 fffff880`019b6000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b90000 fffff880`03ba1000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02b30000 fffff880`02b4e000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      Mon Jul 13 21:25:40 2009 (4A5BDE94)
fffff880`0216f000 fffff880`0218c000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`01950000 fffff880`0197a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d2c000 fffff880`00dec000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018e8000 fffff880`01918000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cce000 fffff880`00d2c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`045f4000 fffff880`045f8500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01183000 fffff880`011f6000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00fca000 fffff880`00fd3000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`043e8000 fffff880`043f8000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`0218c000 fffff880`0219a000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03aef000 fffff880`03b72000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03b72000 fffff880`03b90000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02dc2000 fffff880`02dd1000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`018d2000 fffff880`018e8000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04899000 fffff880`048bb000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`021b7000 fffff880`021c3000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`021ce000 fffff880`021e1000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`021c3000 fffff880`021ce000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`048c1000 fffff880`048cd000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`044f1000 fffff880`045e5000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04400000 fffff880`04446000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`01111000 fffff880`01125000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010c5000 fffff880`01111000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013e1000 fffff880`013eb000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01898000 fffff880`018d2000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`0281a000 fffff800`02863000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`044ba000 fffff880`044de000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04800000 fffff880`0485c000   HdAudio  HdAudio.sys  Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`02a68000 fffff880`02b30000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0188f000 fffff880`01898000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03c2f000 fffff880`03c4d000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03c57000 fffff880`0435e5c0   igdkmd64 igdkmd64.sys Thu Aug 13 17:53:45 2009 (4A848B69)
fffff880`043d2000 fffff880`043e8000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`043ab000 fffff880`043d2000   jmcr     jmcr.sys     Tue Sep 22 22:24:55 2009 (4AB986F7)
fffff880`044de000 fffff880`044ed000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00baf000 fffff800`00bb9000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`048f0000 fffff880`04933000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013b6000 fffff880`013d0000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Mon Jul 13 19:50:34 2009 (4A5BC84A)
fffff880`048bb000 fffff880`048c0200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02072000 fffff880`02087000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0202e000 fffff880`02051000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c76000 fffff880`00cba000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`01834000 fffff880`0188f000   MDFSYSNT MDFSYSNT.sys Mon Sep 28 15:02:26 2009 (4AC10842)
fffff880`013eb000 fffff880`013f8000   MDPMGRNT MDPMGRNT.SYS Wed Sep 23 15:23:04 2009 (4ABA7598)
fffff880`048cd000 fffff880`048db000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`045e5000 fffff880`045f4000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`00e00000 fffff880`00e1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0197a000 fffff880`019a6000   MpFilter MpFilter.sys Wed Jun 10 22:33:21 2009 (4A306CF1)
fffff880`04740000 fffff880`04750000   MpNWMon  MpNWMon.sys  Wed Jun 10 22:33:23 2009 (4A306CF3)
fffff880`02b4e000 fffff880`02b66000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02b66000 fffff880`02b92000   mrxsmb   mrxsmb.sys   Mon Jul 13 19:23:59 2009 (4A5BC20F)
fffff880`02b92000 fffff880`02bdf000   mrxsmb10 mrxsmb10.sys Mon Jul 13 19:24:08 2009 (4A5BC218)
fffff880`02a00000 fffff880`02a23000   mrxsmb20 mrxsmb20.sys Mon Jul 13 19:24:05 2009 (4A5BC215)
fffff880`00e4d000 fffff880`00e58000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0181b000 fffff880`01826000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f6b000 fffff880`00f75000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01125000 fffff880`01183000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02db7000 fffff880`02dc2000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e6000 fffff880`015f8000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014ec000 fffff880`015de000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03a83000 fffff880`03a8f000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`021e1000 fffff880`021f4000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`03a8f000 fffff880`03abe000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0499f000 fffff880`049b4000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d1c000 fffff880`02d2b000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c92000 fffff880`02cd7000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01200000 fffff880`01211000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02dab000 fffff880`02db7000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02863000 fffff800`02e40000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`01213000 fffff880`013b6000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`019a6000 fffff880`019af000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02087000 fffff880`020da000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02ce0000 fffff880`02d06000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fb5000 fffff880`00fca000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f75000 fffff880`00fa8000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00c5c000 fffff880`00c6c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013d0000 fffff880`013e1000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`03878000 fffff880`0391e000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0485c000 fffff880`04899000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cba000 fffff880`00cce000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04750000 fffff880`04760000   qwavedrv qwavedrv.sys Mon Jul 13 20:09:48 2009 (4A5BCCCC)
fffff880`03a5f000 fffff880`03a83000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03abe000 fffff880`03ad9000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03bc7000 fffff880`03be8000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`02dd1000 fffff880`02deb000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d5a000 fffff880`02dab000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03be8000 fffff880`03bf3000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01800000 fffff880`01809000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01809000 fffff880`01812000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01812000 fffff880`0181b000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`049b4000 fffff880`049cc000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0435f000 fffff880`043ab000   Rt64win7 Rt64win7.sys Tue Nov 17 12:01:19 2009 (4B02D6DF)
fffff880`020ea000 fffff880`02162000   RTL8187B RTL8187B.sys Thu Nov 05 00:51:31 2009 (4AF267E3)
fffff880`03c00000 fffff880`03c2f000   SCSIPORT SCSIPORT.SYS Mon Jul 13 20:01:04 2009 (4A5BCAC0)
fffff880`0391e000 fffff880`03929000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`015de000 fffff880`015e6000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`046a8000 fffff880`04740000   srv      srv.sys      Mon Jul 13 19:25:11 2009 (4A5BC257)
fffff880`03800000 fffff880`03869000   srv2     srv2.sys     Mon Jul 13 19:25:02 2009 (4A5BC24E)
fffff880`03929000 fffff880`03956000   srvnet   srvnet.sys   Mon Jul 13 19:24:58 2009 (4A5BC24A)
fffff880`045f9000 fffff880`045fa480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`03a00000 fffff880`03a49000   SynTP    SynTP.sys    Thu Jun 25 21:47:41 2009 (4A4428BD)
fffff880`01600000 fffff880`017fd000   tcpip    tcpip.sys    Mon Jul 13 19:25:34 2009 (4A5BC26E)
fffff880`03956000 fffff880`03968000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`01826000 fffff880`01833000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`01086000 fffff880`010a4000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d46000 fffff880`02d5a000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005c0000 fffff960`005ca000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03ba1000 fffff880`03bc7000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04933000 fffff880`04945000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0219a000 fffff880`021b7000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`044ed000 fffff880`044eef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`044a9000 fffff880`044ba000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04945000 fffff880`0499f000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04453000 fffff880`044a9000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04446000 fffff880`04453000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`02000000 fffff880`0202d100   usbvideo usbvideo.sys Mon Jul 13 20:07:00 2009 (4A5BCC24)
fffff880`00fa8000 fffff880`00fb5000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019b6000 fffff880`019c4000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019c4000 fffff880`019e9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fdf000 fffff880`00ff4000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02162000 fffff880`0216f000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02d06000 fffff880`02d1c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02d2b000 fffff880`02d46000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`019e9000 fffff880`019f9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e58000 fffff880`00efc000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00efc000 fffff880`00f0b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02cd7000 fffff880`02ce0000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003bf000   win32k   win32k.sys   Mon Jul 13 19:40:16 2009 (4A5BC5E0)
fffff880`03c4d000 fffff880`03c56000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f62000 fffff880`00f6b000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02051000 fffff880`02072000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
Unloaded modules:
fffff880`04760000 fffff880`04762000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`04762000 fffff880`04764000   MSPCLOCK.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03968000 fffff880`039d9000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01918000 fffff880`01926000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01926000 fffff880`01932000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`01932000 fffff880`0193d000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0193d000 fffff880`01950000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

[/font]

 

[Casey R]

Thanks, jcgriff2

Verifier was definitely running....not sure why it would think otherwise.

I don't have NIS any more, I ditched it for Microsoft Security Essentials...

I will re run chkdsk and then try Driver Verifier again.

 

[Casey R]

New chkdsk log:

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 07/01/2010 16:11:18
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: KingSimon-PC
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
103936 file records processed.

File verification completed.
48 large file records processed.

0 bad file records processed.

2 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
140060 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
103936 file SDs/SIDs processed.

Cleaning up 175 unused index entries from index $SII of file 0x9.
Cleaning up 175 unused index entries from index $SDH of file 0x9.
Cleaning up 175 unused security descriptors.
Security descriptor verification completed.
18063 data files processed.

CHKDSK is verifying Usn Journal...
34392104 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
103920 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
51434782 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

244093951 KB total disk space.
38086824 KB in 84788 files.
56108 KB in 18064 indexes.
0 KB in bad sectors.
211887 KB in use by the system.
65536 KB occupied by the log file.
205739132 KB available on disk.

4096 bytes in each allocation unit.
61023487 total allocation units on disk.
51434783 allocation units available on disk.

Internal Info:
00 96 01 00 cf 91 01 00 a0 15 03 00 00 00 00 00 ................
18 02 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-01-07T16:11:18.000000000Z" />
<EventRecordID>3618</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>KingSimon-PC</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
103936 file records processed.

File verification completed.
48 large file records processed.

0 bad file records processed.

2 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
140060 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
103936 file SDs/SIDs processed.

Cleaning up 175 unused index entries from index $SII of file 0x9.
Cleaning up 175 unused index entries from index $SDH of file 0x9.
Cleaning up 175 unused security descriptors.
Security descriptor verification completed.
18063 data files processed.

CHKDSK is verifying Usn Journal...
34392104 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
103920 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
51434782 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

244093951 KB total disk space.
38086824 KB in 84788 files.
56108 KB in 18064 indexes.
0 KB in bad sectors.
211887 KB in use by the system.
65536 KB occupied by the log file.
205739132 KB available on disk.

4096 bytes in each allocation unit.
61023487 total allocation units on disk.
51434783 allocation units available on disk.

Internal Info:
00 96 01 00 cf 91 01 00 a0 15 03 00 00 00 00 00 ................
18 02 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

 

[usasma]

Driver Verifier is quirky - let it run for 36 hours (if you can stand the BSOD's) and then upload all the dump files (or upload them one at a time until we tell you to stop)
If it doesn't work, then we'll get stricter with it (and that'll be even more painful) - by verifying all drivers.

If Driver Verifier (w/3rd party driver verification) doesn't give us significant info - then we assume either Windows corruption or hardware failure is the most likely situation

If Driver Verifier (w/all drivers being verified) doesn't pinpoint Windows, then we've gotta figure it's hardware (although I will recommend a reinstall of Windows just to be sure to rule that out).

 

[Casey R]

OK, the 36-hour Driver Verifier marathon begins now!

Thanks again for all your help guys - hopefully we can get to the bottom of this!

 

[Casey R]

Here are all the minidumps of the BSOD's that happened over the last few days whilst running "Driver Verifier".

 

[jcgriff2]

Thanks, jcgriff2

Verifier was definitely running....not sure why it would think otherwise.

I don't have NIS any more, I ditched it for Microsoft Security Essentials...

I will re run chkdsk and then try Driver Verifier again.

Hi -

Did you use the Norton Removal Tool? I found NIS drivers in the dump. Please run/ re-run the NRT.

Download the NRT; save to desktop. Then go to desktop, RIGHT-click on the NRT icon and select "Run as Administrator". When complete - re-boot.

NRT - ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

Reset the Windows Firewall to its default settings -
START | type FirewallSettings.exe into the start search box | click on FirewallSettings.exe above | select the Advanced Tab | click on "Restore Defaults" | Click Apply, OK



As for the newest round of BSODs - 6 mini kernel dumps -

(3) 0x1e (0xc0000005,,,) = kernel mode exception; 0xc...5 = memory access violation; prob cause = "memory corruption"; app running = "Seesmic Deskto" - do you know what this is?

- 0x1e #2 - this one was a "VERIFIER_ENABLED_VISTA_MINIDUMP", eventhough Windows 7, but named the Microsoft network driver tcpip.sys

- 0x1e #3 - verifier came up empty; p/c = "memory corruption"; app running = chrome.exe

(1) 0xa = driver attempted improper access of paged pool, p/c = "memory corruption"

I did see this VNC mirror driver in the dump =

[font=lucida console] vncmirror.sys Fri Mar 14 13:43:05 2008 (47DAB929)
[/font]

I don't know which VNC edition you have - make sure it is not the Free version as it's not compatible with Vista and therefore not with Windows 7 either, per the VNC site --> RealVNC - VNC feature comparison and download selector

(2) 0xc9 (0x21a,,,) = Driver Verifier flagged the Microsoft SCSI class system dll classpmp.sys
The "0x21a" = The previously-set IRP_MJ_POWER status has been converted to STATUS_NOT_SUPPORTED.

[FONT=lucida console]FAILURE_BUCKET_ID:  X64_0xc9_21a_VRF_CLASSPNP!Classp[COLOR=red]PowerDownCompletion[/COLOR]+26d[/FONT]

What devices do you have connected to the system? Have you changed the power settings?
START | power | power options | reset defaults


Do you have Adobe CS4 or other Adobe product installed? This Adobe driver has caused other BSODs in recent times -

[FONT=lucida console]adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)[/FONT]

It is possible for this to be software replated, specifically NIS if corrupted itself because no NRT used or NRT did not take it out the 1st time around; VNC appears to be a candidate as well and Adobe.

Try the above suggestions, see if BSODs persist.

Regards. . .

jcgriff2

.