Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp13_Windows_NT6_BSOD_jcgriff2[1].zip\Windows_NT6_BSOD_jcgriff2\011711-27112-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82a0a000 PsLoadedModuleList = 0x82b52810
Debug session time: Mon Jan 17 08:59:47.515 2011 (GMT-5)
System Uptime: 0 days 0:48:13.778
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {30, 2, 0, 92a538a5}
Unable to load image \SystemRoot\system32\DRIVERS\athr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athr.sys
*** ERROR: Module load completed but symbols could not be loaded for athr.sys
Probably caused by : athr.sys ( athr+428a5 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000030, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 92a538a5, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 82b72718
Unable to read MiSystemVaType memory at 82b52160
00000030
CURRENT_IRQL: 2
FAULTING_IP:
athr+428a5
92a538a5 8b5130 mov edx,dword ptr [ecx+30h]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: svchost.exe
TRAP_FRAME: 807e4b64 -- (.trap 0xffffffff807e4b64)
ErrCode = 00000000
eax=0000001a ebx=8657d190 ecx=00000000 edx=00000088 esi=00000000 edi=00000000
eip=92a538a5 esp=807e4bd8 ebp=807e4bdc iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
athr+0x428a5:
92a538a5 8b5130 mov edx,dword ptr [ecx+30h] ds:0023:00000030=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 92a538a5 to 82a5082b
STACK_TEXT:
807e4b64 92a538a5 badb0d00 00000088 82e1fba9 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
807e4bdc 92a53647 00000000 85423d0c 854319e0 athr+0x428a5
807e4c14 92a52c52 86ce5908 86219d28 00000000 athr+0x42647
807e4c3c 92a79fc0 86ce5828 86219d28 00000018 athr+0x41c52
807e4c90 92a7a8c7 84fa1020 86219d28 00000000 athr+0x68fc0
807e4de4 92a2bcfe 86219d28 807e4e00 92a28d2f athr+0x698c7
807e4df0 92a28d2f 86219d28 861e59b0 807e4e10 athr+0x1acfe
807e4e00 92a709c7 861e59b0 86219d28 807e4e38 athr+0x17d2f
807e4e10 92a706b7 86139628 86219d28 00000000 athr+0x5f9c7
807e4e38 92a2462a 86139628 86219d28 00000000 athr+0x5f6b7
807e4e64 92a24414 86141a50 86219ca0 8657d190 athr+0x1362a
807e4e7c 92a25499 86141a50 85336b70 8505cce8 athr+0x13414
807e4e94 92a25525 86141a50 807e4eac 92a82554 athr+0x14499
807e4ea0 92a82554 86141a50 807e4ec8 92a871ff athr+0x14525
807e4eac 92a871ff 861e2020 8ff5f488 868e0008 athr+0x71554
807e4ec8 92a2babd 861e2020 807e4ee4 92a12761 athr+0x761ff
807e4ed4 92a12761 84fa1020 86141a50 807e4f20 athr+0x1aabd
807e4ee4 8b06f309 86141a50 00000000 807e4f10 athr+0x1761
807e4f20 8b01a9f4 8657d1a4 0057d190 00000000 ndis!ndisMiniportDpc+0xe2
807e4f48 82a723b5 8657d1a4 8657d190 00000000 ndis!ndisInterruptDpc+0xaf
807e4fa4 82a72218 807c4120 8524a030 00000000 nt!KiExecuteAllDpcs+0xf9
807e4ff4 82a719dc b0203ce4 00000000 00000000 nt!KiRetireDpcList+0xd5
807e4ff8 b0203ce4 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
82a719dc 00000000 0000001a 00d6850f bb830000 0xb0203ce4
STACK_COMMAND: kb
FOLLOWUP_IP:
athr+428a5
92a538a5 8b5130 mov edx,dword ptr [ecx+30h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: athr+428a5
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: athr
IMAGE_NAME: athr.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a2ea444
FAILURE_BUCKET_ID: 0xD1_athr+428a5
BUCKET_ID: 0xD1_athr+428a5
Followup: MachineOwner
---------
1: kd> lmtsmn
start end module name
8ac2c000 8ac74000 ACPI ACPI.sys Mon Jul 13 19:11:11 2009 (4A5BBF0F)
8f303000 8f35d000 afd afd.sys Mon Jul 13 19:12:34 2009 (4A5BBF62)
92be4000 92bf6000 AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
8ad9a000 8ada3000 amdxata amdxata.sys Tue May 19 13:57:35 2009 (4A12F30F)
b2c8b000 b2c94000 asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
8ad64000 8ad6d000 atapi atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8ad6d000 8ad90000 ataport ataport.SYS Mon Jul 13 19:11:18 2009 (4A5BBF16)
92a11000 92b21000 athr athr.sys Tue Jun 09 14:04:52 2009 (4A2EA444)
8acd3000 8acde000 BATTC BATTC.SYS Mon Jul 13 19:19:15 2009 (4A5BC0F3)
8f26f000 8f276000 Beep Beep.SYS Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8fee7000 8fef5000 blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8aa94000 8aa9c000 BOOTVID BOOTVID.dll Mon Jul 13 21:04:34 2009 (4A5BD9A2)
93af4000 93b0d000 bowser bowser.sys Mon Jul 13 19:14:21 2009 (4A5BBFCD)
96f50000 96f6e000 cdd cdd.dll unavailable (00000000)
8f226000 8f245000 cdrom cdrom.sys Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8aade000 8ab89000 CI CI.dll Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8b192000 8b1b7000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8aa9c000 8aade000 CLFS CLFS.SYS Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8ff28000 8ff2b700 CmBatt CmBatt.sys Mon Jul 13 19:19:18 2009 (4A5BC0F6)
8af80000 8afdd000 cng cng.sys Mon Jul 13 19:32:55 2009 (4A5BC427)
8accb000 8acd3000 compbatt compbatt.sys Mon Jul 13 19:19:18 2009 (4A5BC0F6)
92bd7000 92be4000 CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
8ff2c000 8ff2e480 cpqbttn cpqbttn.sys Mon Apr 20 10:38:52 2009 (49EC88FC)
8200d000 8201a000 crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8fe6b000 8fecf000 csc csc.sys Mon Jul 13 19:15:08 2009 (4A5BBFFC)
8fecf000 8fee7000 dfsc dfsc.sys Mon Jul 13 19:14:16 2009 (4A5BBFC8)
8fe5f000 8fe6b000 discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8b200000 8b211000 disk disk.sys Mon Jul 13 19:11:28 2009 (4A5BBF20)
96749000 96762000 drmk drmk.sys Mon Jul 13 20:36:05 2009 (4A5BD2F5)
8201a000 82025000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
9679f000 967b0000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
82025000 8202f000 dump_msahci dump_msahci.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
821f6000 82200000 Dxapi Dxapi.sys Mon Jul 13 19:25:25 2009 (4A5BC265)
90d39000 90df0000 dxgkrnl dxgkrnl.sys Mon Nov 01 22:37:53 2010 (4CCF7981)
8ff52000 8ff8b000 dxgmms1 dxgmms1.sys Mon Nov 01 22:37:04 2010 (4CCF7950)
8add7000 8ade8000 fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8ada3000 8add7000 fltmgr fltmgr.sys Mon Jul 13 19:11:13 2009 (4A5BBF11)
8afeb000 8aff4000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:11:14 2009 (4A5BBF12)
8b160000 8b192000 fvevol fvevol.sys Fri Sep 25 22:24:21 2009 (4ABD7B55)
8b361000 8b392000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
92bd1000 92bd6280 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
82e1a000 82e51000 hal halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
90800000 9081f000 HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
966ca000 9671a000 HdAudio HdAudio.sys Mon Jul 13 19:51:46 2009 (4A5BC892)
8ff2f000 8ff42000 HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
8ff42000 8ff48480 HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
82031000 8203c000 hidusb hidusb.sys Mon Jul 13 19:51:04 2009 (4A5BC868)
93a6f000 93af4000 HTTP HTTP.sys Mon Jul 13 19:12:53 2009 (4A5BBF75)
8b3f2000 8b3fa000 hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
92b9f000 92bb7000 i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
90830000 90d39000 igdkmd32 igdkmd32.sys Wed Sep 23 15:18:09 2009 (4ABA7471)
8ad39000 8ad40000 intelide intelide.sys Mon Jul 13 19:11:19 2009 (4A5BBF17)
8ff16000 8ff28000 intelppm intelppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
92bb7000 92bc4000 kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
96669000 96675000 kbdhid kbdhid.sys Mon Jul 13 19:45:09 2009 (4A5BC705)
80b97000 80b9f000 kdcom kdcom.dll Mon Jul 13 21:08:58 2009 (4A5BDAAA)
96627000 9665b000 ks ks.sys Wed Mar 03 22:57:52 2010 (4B8F2FC0)
8af6d000 8af80000 ksecdd ksecdd.sys Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8b10e000 8b133000 ksecpkg ksecpkg.sys Thu Dec 10 23:04:22 2009 (4B21C4C6)
9081f000 9082f000 lltdio lltdio.sys Mon Jul 13 19:53:18 2009 (4A5BC8EE)
8b1b7000 8b1d2000 luafv luafv.sys Mon Jul 13 19:15:44 2009 (4A5BC020)
8aa0b000 8aa83000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
82000000 8200d000 modem modem.sys Mon Jul 13 19:55:24 2009 (4A5BC96C)
967e9000 967f4000 monitor monitor.sys Mon Jul 13 19:25:58 2009 (4A5BC286)
92bc4000 92bd1000 mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
967c7000 967d2000 mouhid mouhid.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
8ad4e000 8ad64000 mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
8f245000 8f268000 MpFilter MpFilter.sys Sat Mar 20 00:03:26 2010 (4BA4490E)
93bb0000 93bb8e00 MpNWMon MpNWMon.sys Sat Mar 20 00:03:24 2010 (4BA4490C)
93b0d000 93b1f000 mpsdrv mpsdrv.sys Mon Jul 13 19:52:52 2009 (4A5BC8D4)
93b1f000 93b42000 mrxsmb mrxsmb.sys Sat Feb 27 02:32:02 2010 (4B88CA72)
93b42000 93b7d000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
93b7d000 93b98000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
8ad90000 8ad9a000 msahci msahci.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8f2c8000 8f2d3000 Msfs Msfs.SYS Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8ac7d000 8ac85000 msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8af42000 8af6d000 msrpc msrpc.sys Mon Jul 13 19:11:59 2009 (4A5BBF3F)
8fe55000 8fe5f000 mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8b3e2000 8b3f2000 mup mup.sys Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8b019000 8b0d0000 ndis ndis.sys Mon Jul 13 19:12:24 2009 (4A5BBF58)
92a00000 92a0b000 ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
93a4c000 93a5c000 ndisuio ndisuio.sys Mon Jul 13 19:53:51 2009 (4A5BC90F)
8ffa3000 8ffc5000 ndiswan ndiswan.sys Mon Jul 13 19:54:34 2009 (4A5BC93A)
966b9000 966ca000 NDProxy NDProxy.SYS Mon Jul 13 19:54:27 2009 (4A5BC933)
8f3c6000 8f3d4000 netbios netbios.sys Mon Jul 13 19:53:54 2009 (4A5BC912)
8f35d000 8f38f000 netbt netbt.sys Mon Jul 13 19:12:18 2009 (4A5BBF52)
8b0d0000 8b10e000 NETIO NETIO.SYS Mon Jul 13 19:12:35 2009 (4A5BBF63)
8f2d3000 8f2e1000 Npfs Npfs.SYS Mon Jul 13 19:11:31 2009 (4A5BBF23)
8fe4b000 8fe55000 nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82a0a000 82e1a000 nt ntkrpamp.exe Fri Jun 18 23:55:24 2010 (4C1C3FAC)
8ae13000 8af42000 Ntfs Ntfs.sys Mon Jul 13 19:12:05 2009 (4A5BBF45)
8f268000 8f26f000 Null Null.SYS Mon Jul 13 19:11:12 2009 (4A5BBF10)
93a06000 93a4c000 nwifi nwifi.sys Mon Jul 13 19:51:59 2009 (4A5BC89F)
8f396000 8f3b5000 pacer pacer.sys Mon Jul 13 19:53:58 2009 (4A5BC916)
8acba000 8accb000 partmgr partmgr.sys Mon Jul 13 19:11:35 2009 (4A5BBF27)
8ac85000 8acaf000 pci pci.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8ad40000 8ad4e000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:11:15 2009 (4A5BBF13)
8afdd000 8afeb000 pcw pcw.sys Mon Jul 13 19:11:10 2009 (4A5BBF0E)
99810000 998a7000 peauth peauth.sys Mon Jul 13 20:35:44 2009 (4A5BD2E0)
9671a000 96749000 portcls portcls.sys Mon Jul 13 19:51:00 2009 (4A5BC864)
8aa83000 8aa94000 PSHED PSHED.dll Mon Jul 13 21:09:36 2009 (4A5BDAD0)
8ff8b000 8ffa3000 rasl2tp rasl2tp.sys Mon Jul 13 19:54:33 2009 (4A5BC939)
8ffc5000 8ffdd000 raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
8ffdd000 8fff4000 raspptp raspptp.sys Mon Jul 13 19:54:47 2009 (4A5BC947)
8f200000 8f217000 rassstp rassstp.sys Mon Jul 13 19:54:57 2009 (4A5BC951)
8fe0a000 8fe4b000 rdbss rdbss.sys Mon Jul 13 19:14:26 2009 (4A5BBFD2)
92bf6000 92c00000 rdpbus rdpbus.sys Mon Jul 13 20:02:40 2009 (4A5BCB20)
8f2b0000 8f2b8000 RDPCDD RDPCDD.sys Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8f2b8000 8f2c0000 rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
8f2c0000 8f2c8000 rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8b133000 8b160000 rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
93a5c000 93a6f000 rspndr rspndr.sys Mon Jul 13 19:53:20 2009 (4A5BC8F0)
92b90000 92b9f000 Rtnicxp Rtnicxp.sys Fri May 30 11:12:11 2008 (4840194B)
998a7000 998b1000 secdrv secdrv.SYS Wed Sep 13 09:18:32 2006 (45080528)
8b3da000 8b3e2000 spldr spldr.sys Mon May 11 12:13:47 2009 (4A084EBB)
9992e000 9997f000 srv srv.sys Thu Aug 26 23:31:26 2010 (4C77318E)
998df000 9992e000 srv2 srv2.sys Thu Aug 26 23:30:45 2010 (4C773165)
998b1000 998d2000 srvnet srvnet.sys Thu Aug 26 23:30:39 2010 (4C77315F)
92a0b000 92a0c380 swenum swenum.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
8b218000 8b361000 tcpip tcpip.sys Sun Jun 13 23:36:59 2010 (4C15A3DB)
998d2000 998df000 tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
8f2f8000 8f303000 TDI TDI.SYS Mon Jul 13 19:12:12 2009 (4A5BBF4C)
8f2e1000 8f2f8000 tdx tdx.sys Mon Jul 13 19:12:10 2009 (4A5BBF4A)
8f3e7000 8f3f7000 termdd termdd.sys Mon Jul 13 20:01:35 2009 (4A5BCADF)
96f20000 96f29000 TSDDD TSDDD.dll Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8fef5000 8ff16000 tunnel tunnel.sys Mon Jul 13 19:54:03 2009 (4A5BC91B)
9665b000 96669000 umbus umbus.sys Mon Jul 13 19:51:38 2009 (4A5BC88A)
967b0000 967c7000 usbccgp usbccgp.sys Mon Jul 13 19:51:31 2009 (4A5BC883)
8202f000 82030700 USBD USBD.SYS Mon Jul 13 19:51:05 2009 (4A5BC869)
92b81000 92b90000 usbehci usbehci.sys Mon Jul 13 19:51:14 2009 (4A5BC872)
96675000 966b9000 usbhub usbhub.sys Mon Jul 13 19:52:06 2009 (4A5BC8A6)
92b36000 92b81000 USBPORT USBPORT.SYS Mon Jul 13 19:51:13 2009 (4A5BC871)
967d2000 967e9000 USBSTOR USBSTOR.SYS Mon Jul 13 19:51:19 2009 (4A5BC877)
92b2b000 92b36000 usbuhci usbuhci.sys Mon Jul 13 19:51:10 2009 (4A5BC86E)
96600000 96623b80 usbvideo usbvideo.sys Wed Mar 03 23:04:40 2010 (4B8F3158)
8acaf000 8acba000 vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
8f276000 8f282000 vga vga.sys Mon Jul 13 19:25:50 2009 (4A5BC27E)
8f282000 8f2a3000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8b392000 8b39a380 vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8acde000 8acee000 volmgr volmgr.sys Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8acee000 8ad39000 volmgrx volmgrx.sys Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8b39b000 8b3da000 volsnap volsnap.sys Mon Jul 13 19:11:34 2009 (4A5BBF26)
96762000 9679f000 VSTAZL3 VSTAZL3.SYS Wed Oct 15 20:30:03 2008 (48F68B0B)
82141000 821f6000 VSTCNXT3 VSTCNXT3.SYS Wed Oct 15 20:29:13 2008 (48F68AD9)
8203f000 82141000 VSTDPV3 VSTDPV3.SYS Wed Oct 15 20:32:04 2008 (48F68B84)
92b21000 92b2b000 vwifibus vwifibus.sys Mon Jul 13 19:52:02 2009 (4A5BC8A2)
8f3b5000 8f3c6000 vwififlt vwififlt.sys Mon Jul 13 19:52:03 2009 (4A5BC8A3)
8f3d4000 8f3e7000 wanarp wanarp.sys Mon Jul 13 19:55:02 2009 (4A5BC956)
8f2a3000 8f2b0000 watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8ab89000 8abfa000 Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8ac1e000 8ac2c000 WDFLDR WDFLDR.SYS Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8f38f000 8f396000 wfplwf wfplwf.sys Mon Jul 13 19:53:51 2009 (4A5BC90F)
96cc0000 96f0b000 win32k win32k.sys Tue Oct 19 23:00:01 2010 (4CBE5B31)
8ff49000 8ff52000 wmiacpi wmiacpi.sys Mon Jul 13 19:19:16 2009 (4A5BC0F4)
8ac74000 8ac7d000 WMILIB WMILIB.SYS Mon Jul 13 19:11:22 2009 (4A5BBF1A)
8b1d2000 8b1ec000 WudfPf WudfPf.sys Mon Jul 13 19:50:13 2009 (4A5BC835)
9997f000 9999f480 WUDFRd WUDFRd.sys Mon Jul 13 19:50:44 2009 (4A5BC854)