Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c08000 PsLoadedModuleList = 0xfffff800`02e45e50
Debug session time: Sun Jan 16 17:42:02.657 2011 (GMT-5)
System Uptime: 0 days 9:37:44.000
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, 1097, 1, fffff8800a80e2d0}
GetPointerFromAddress: unable to read from fffff80002eb00e0
GetUlongFromAddress: unable to read from fffff80002e1e1b0
Probably caused by : CLFS.SYS ( CLFS!ClfsScanLogContainers+478 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001097, (reserved)
Arg3: 0000000000000001, Memory contents of the pool block
Arg4: fffff8800a80e2d0, Address of the block of pool being deallocated
Debugging Details:
------------------
GetUlongFromAddress: unable to read from fffff80002e1e1b0
POOL_ADDRESS: fffff8800a80e2d0
BUGCHECK_STR: 0xc2_7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: a
LAST_CONTROL_TRANSFER: from fffff80002dab60e to fffff80002c78740
STACK_TEXT:
fffff880`0a80e1b0 fffff800`02dab60e : 00000000`000000c2 00000000`00000007 00000000`00001097 00000000`00000001 : nt!KeBugCheckEx
fffff880`0a80e1b8 fffff880`00d531c8 : fffffa80`07873880 fffffa80`078736a8 00000000`00000000 fffffa80`078721a0 : nt!ExDeferredFreePool+0x11eb
fffff880`0a80e268 00000000`00000001 : fffff780`c0000401 fffff880`0000000c fffffa80`0a80e2d0 00000000`00000000 : CLFS!ClfsScanLogContainers+0x478
fffff880`0a80e2c8 fffff780`c0000401 : fffff880`0000000c fffffa80`0a80e2d0 00000000`00000000 fffffa80`07897e00 : 0x1
fffff880`0a80e2d0 fffff880`0000000c : fffffa80`0a80e2d0 00000000`00000000 fffffa80`07897e00 00000000`00000000 : 0xfffff780`c0000401
fffff880`0a80e2d8 fffffa80`0a80e2d0 : 00000000`00000000 fffffa80`07897e00 00000000`00000000 fffff880`0a80e390 : 0xfffff880`0000000c
fffff880`0a80e2e0 00000000`00000000 : fffffa80`07897e00 00000000`00000000 fffff880`0a80e390 00000000`00000000 : 0xfffffa80`0a80e2d0
STACK_COMMAND: kb
FOLLOWUP_IP:
CLFS!ClfsScanLogContainers+478
fffff880`00d531c8 33d2 xor edx,edx
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: CLFS!ClfsScanLogContainers+478
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: CLFS
IMAGE_NAME: CLFS.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc11d
FAILURE_BUCKET_ID: X64_0xc2_7_CLFS!ClfsScanLogContainers+478
BUCKET_ID: X64_0xc2_7_CLFS!ClfsScanLogContainers+478
Followup: MachineOwner
---------
Debug session time: Mon Jan 17 14:01:26.748 2011 (GMT-5)
System Uptime: 0 days 0:00:31.668
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff9600015a265, fffff88007a49de0, 0}
Probably caused by : win32k.sys ( win32k!ThreadUnlock1+25 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600015a265, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88007a49de0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!ThreadUnlock1+25
fffff960`0015a265 834208ff add dword ptr [rdx+8],0FFFFFFFFh
CONTEXT: fffff88007a49de0 -- (.cxr 0xfffff88007a49de0)
rax=fffff88007a4a978 rbx=fffff900c29b0770 rcx=fffff88007a4a9f8
rdx=0000000000200000 rsi=0000000000000000 rdi=0000000000010000
rip=fffff9600015a265 rsp=fffff88007a4a7b0 rbp=fffff88007a4aca0
r8=fffff880009edfc0 r9=fffff88007a4adb0 r10=fffff900c29b0770
r11=fffff88007a4a7b0 r12=fffff900c0c0ae10 r13=fffff900c29b0770
r14=fffff900c0c0aed0 r15=0000000000000001
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
win32k!ThreadUnlock1+0x25:
fffff960`0015a265 834208ff add dword ptr [rdx+8],0FFFFFFFFh ds:002b:00000000`00200008=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff9600015a265
STACK_TEXT:
fffff880`07a4a7b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!ThreadUnlock1+0x25
FOLLOWUP_IP:
win32k!ThreadUnlock1+25
fffff960`0015a265 834208ff add dword ptr [rdx+8],0FFFFFFFFh
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!ThreadUnlock1+25
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4cbe5d3e
STACK_COMMAND: .cxr 0xfffff88007a49de0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!ThreadUnlock1+25
BUCKET_ID: X64_0x3B_win32k!ThreadUnlock1+25
Followup: MachineOwner
---------
Debug session time: Mon Jan 17 14:00:20.833 2011 (GMT-5)
System Uptime: 0 days 0:08:46.113
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, fffffa800944bb30, fffffa800944be10, fffff80002f855d0}
Probably caused by : csrss.exe
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa800944bb30, Terminating object
Arg3: fffffa800944be10, Process image file name
Arg4: fffff80002f855d0, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa800944bb30
IMAGE_NAME: csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: csrss.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
BUGCHECK_STR: 0xF4_C0000409
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`037ccb08 fffff800`03006652 : 00000000`000000f4 00000000`00000003 fffffa80`0944bb30 fffffa80`0944be10 : nt!KeBugCheckEx
fffff880`037ccb10 fffff800`02faf3e3 : ffffffff`ffffffff fffffa80`09278b60 fffffa80`0944bb30 fffffa80`0944bb30 : nt!PspCatchCriticalBreak+0x92
fffff880`037ccb50 fffff800`02f3780c : ffffffff`ffffffff 00000000`00000001 fffffa80`0944bb30 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17946
fffff880`037ccba0 fffff800`02c79993 : fffffa80`0944bb30 00000000`c0000409 00000000`0186ef01 fffffa80`09278b60 : nt!NtTerminateProcess+0x20c
fffff880`037ccc20 00000000`76e9001a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`76f7eb4c 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76e9001a
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_C0000409_IMAGE_csrss.exe
BUCKET_ID: X64_0xF4_C0000409_IMAGE_csrss.exe
Followup: MachineOwner
---------
Debug session time: Tue Jan 18 15:13:26.410 2011 (GMT-5)
System Uptime: 0 days 7:59:03.392
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff80002cd34cb}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80002cd34cb
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: plugin-contain
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002cb8ca9 to fffff80002cb9740
STACK_TEXT:
fffff800`03fc9d28 fffff800`02cb8ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`03fc9d30 fffff800`02cb7172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`03fc9e70 fffff800`02cd34cb : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`07d48f00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0xcb
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDoubleFaultAbort+b2
fffff800`02cb7172 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiDoubleFaultAbort+b2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
Followup: MachineOwner
---------
0: kd> lmtsmn
start end module name
fffff880`00ed7000 fffff880`00f2e000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02c3b000 fffff880`02cc5000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`05600000 fffff880`05616000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`08a9e000 fffff880`08aa6000 ALSysIO64 ALSysIO64.sys Sun Apr 19 15:41:04 2009 (49EB7E50)
fffff880`048f9000 fffff880`0490e000 amdppm amdppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e0b000 fffff880`00e16000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00ff1000 fffff880`00ffa000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dbe000 fffff880`00de8000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00910000 fffff960`00971000 ATMFD ATMFD.DLL Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`00f9f000 fffff880`00fab000 BATTC BATTC.SYS Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`01986000 fffff880`0198d000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`048c2000 fffff880`048d3000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07b8b000 fffff880`07ba9000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007c0000 fffff960`007e7000 cdd cdd.dll Tue Nov 02 00:59:22 2010 (4CCF9AAA)
fffff880`01953000 fffff880`0197d000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ca2000 fffff880`00d62000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018eb000 fffff880`0191b000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c44000 fffff880`00ca2000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010ca000 fffff880`0113d000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`00f96000 fffff880`00f9f000 compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04a72000 fffff880`04a82000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`07a71000 fffff880`07a7a000 cpuz134_x64 cpuz134_x64.sys Fri Jul 09 07:16:58 2010 (4C37052A)
fffff880`07512000 fffff880`07520000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04821000 fffff880`048a4000 csc csc.sys Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`048a4000 fffff880`048c2000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02c00000 fffff880`02c0f000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`018d5000 fffff880`018eb000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0653e000 fffff880`06560000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`07520000 fffff880`0752c000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07537000 fffff880`0754a000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0752c000 fffff880`07537000 dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`07506000 fffff880`07512000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04a92000 fffff880`04b86000 dxgkrnl dxgkrnl.sys Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`04b86000 fffff880`04bcc000 dxgmms1 dxgmms1.sys Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`0629e000 fffff880`06375000 eamonm eamonm.sys Wed Jul 14 04:13:43 2010 (4C3D71B7)
fffff880`0198d000 fffff880`019b2000 ehdrv ehdrv.sys Wed Jul 14 04:14:21 2010 (4C3D71DD)
fffff880`07a7a000 fffff880`07a9b000 epfwwfpr epfwwfpr.sys Wed Jul 14 04:10:34 2010 (4C3D70FA)
fffff880`01058000 fffff880`0106c000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0100c000 fffff880`01058000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0189b000 fffff880`018d5000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0113d000 fffff880`01187000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`04bf0000 fffff880`04bfd000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02c00000 fffff800`02c49000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04bcc000 fffff880`04bf0000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`074aa000 fffff880`074c3000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`074c3000 fffff880`074cb080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0749c000 fffff880`074aa000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`07ac3000 fffff880`07b8b000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`014b5000 fffff880`014be000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04c0b000 fffff880`04c1a000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`074f8000 fffff880`07506000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00b98000 fffff800`00ba2000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04c2b000 fffff880`04c6e000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cd000 fffff880`013e7000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`06560000 fffff880`06565200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06396000 fffff880`063ab000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07558000 fffff880`0757b000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c23000 fffff880`00c30000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`0754a000 fffff880`07558000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04c1a000 fffff880`04c29000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`074eb000 fffff880`074f8000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fd7000 fffff880`00ff1000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`07ba9000 fffff880`07bc1000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07bc1000 fffff880`07bee000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`07a00000 fffff880`07a4e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`07a4e000 fffff880`07a71000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00e00000 fffff880`00e0b000 msahci msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01812000 fffff880`0181d000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f37000 fffff880`00f41000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0106c000 fffff880`010ca000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02dee000 fffff880`02df9000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`014a3000 fffff880`014b5000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014c8000 fffff880`015ba000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04a82000 fffff880`04a8e000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0496d000 fffff880`0499c000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`064c3000 fffff880`064d8000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d39000 fffff880`02d48000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02cc5000 fffff880`02d0a000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`04c9c000 fffff880`051fe000 nlndis nlndis.sys Fri Aug 27 07:21:17 2010 (4C779FAD)
fffff880`0403a000 fffff880`045aa000 nltdi nltdi.sys Fri Aug 27 07:21:18 2010 (4C779FAE)
fffff880`0181d000 fffff880`0182e000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02de2000 fffff880`02dee000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c49000 fffff800`03225000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122a000 fffff880`013cd000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0197d000 fffff880`01986000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`061f5000 fffff880`061f6180 nvBridge nvBridge.kmd Fri Oct 08 02:47:30 2010 (4CAEBE82)
fffff880`064d8000 fffff880`06501000 nvhda64v nvhda64v.sys Tue Sep 07 16:08:40 2010 (4C869BC8)
fffff880`05623000 fffff880`061f4180 nvlddmkm nvlddmkm.sys Fri Oct 08 03:41:00 2010 (4CAECB0C)
fffff880`02d13000 fffff880`02d39000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f81000 fffff880`00f96000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f41000 fffff880`00f74000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fc0000 fffff880`00fc7000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fc7000 fffff880`00fd7000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e7000 fffff880`013f8000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`08abc000 fffff880`08b62000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06501000 fffff880`0653e000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c30000 fffff880`00c44000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`04949000 fffff880`0496d000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0499c000 fffff880`049b7000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`049b7000 fffff880`049d8000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`049d8000 fffff880`049f2000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d91000 fffff880`02de2000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04c00000 fffff880`04c0b000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`019f5000 fffff880`019fe000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01800000 fffff880`01809000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01809000 fffff880`01812000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`015ba000 fffff880`015f4000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`063ab000 fffff880`063c3000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04917000 fffff880`04949000 Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`07240000 fffff880`0749bd80 RTKVHD64 RTKVHD64.sys Fri Sep 03 04:02:27 2010 (4C80AB93)
fffff880`02d77000 fffff880`02d91000 SCDEmu SCDEmu.SYS Mon Apr 12 04:52:25 2010 (4BC2DF49)
fffff880`08b62000 fffff880`08b6d000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0149b000 fffff880`014a3000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06566000 fffff880`065fc000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`06200000 fffff880`06267000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`08b6d000 fffff880`08b9a000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04c29000 fffff880`04c2a480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`08a71000 fffff880`08a83000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`0184c000 fffff880`01859000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`0182e000 fffff880`0184c000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d63000 fffff880`02d77000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00450000 fffff960`0045a000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`048d3000 fffff880`048f9000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04c6e000 fffff880`04c80000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`074ce000 fffff880`074eb000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`074cc000 fffff880`074cdf00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04a61000 fffff880`04a72000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`06469000 fffff880`064c3000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04a00000 fffff880`04a0b000 usbohci usbohci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04a0b000 fffff880`04a61000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`00f74000 fffff880`00f81000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019b2000 fffff880`019c0000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019c0000 fffff880`019e5000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0148b000 fffff880`0149b000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fab000 fffff880`00fc0000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d62000 fffff880`00dbe000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01187000 fffff880`011d3000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d48000 fffff880`02d63000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`019e5000 fffff880`019f5000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e24000 fffff880`00ec8000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ec8000 fffff880`00ed7000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02d0a000 fffff880`02d13000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00320000 win32k win32k.sys Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`0490e000 fffff880`04917000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f2e000 fffff880`00f37000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06375000 fffff880`06396000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
Unloaded modules:
fffff880`08aa6000 fffff880`08aaf000 cpuz135_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08a00000 fffff880`08a71000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08a95000 fffff880`08a9e000 cpuz135_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08a8c000 fffff880`08a95000 cpuz135_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08a83000 fffff880`08a8c000 cpuz135_x64.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`08a00000 fffff880`08a71000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0191b000 fffff880`01929000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01929000 fffff880`01935000 dump_pciidex
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01935000 fffff880`01940000 dump_msahci.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01940000 fffff880`01953000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000