Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03268000 PsLoadedModuleList = 0xfffff800`034a5e50
Debug session time: Tue Nov 30 16:41:50.750 2010 (GMT-5)
System Uptime: 0 days 6:12:33.092
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff8000359e521, fffff88008bbd080, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::NNGAKEGL::`string'+ec67 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8000359e521, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88008bbd080, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt! ?? ::NNGAKEGL::`string'+ec67
fffff800`0359e521 f0480fba2900 lock bts qword ptr [rcx],0
CONTEXT: fffff88008bbd080 -- (.cxr 0xfffff88008bbd080)
rax=fffffa801017e6b0 rbx=0000000000000000 rcx=f7fff8a000d9a718
rdx=fffffa80116e64e0 rsi=fffffa80116e64e0 rdi=fffffa80116e64f0
rip=fffff8000359e521 rsp=fffff88008bbda50 rbp=fffffa80116e64c0
r8=fffff8a0026ac870 r9=0000000000000a1c r10=0000000000000a1c
r11=fffff88008bbdb38 r12=f7fff8a000d9a5f0 r13=fffff80003268000
r14=0000000000000000 r15=fffff8a001f8a6a0
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
nt! ?? ::NNGAKEGL::`string'+0xec67:
fffff800`0359e521 f0480fba2900 lock bts qword ptr [rcx],0 ds:002b:f7fff8a0`00d9a718=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff800035d49dd to fffff8000359e521
STACK_TEXT:
fffff880`08bbda50 fffff800`035d49dd : 00000000`00000000 fffffa80`10c53b30 fffffa80`116e64e0 fffff800`032dd8bc : nt! ?? ::NNGAKEGL::`string'+0xec67
fffff880`08bbdac0 fffff800`035ee501 : 00000000`00000000 fffffa80`00000000 fffff8a0`01f8a6a0 00000000`00000000 : nt!ObpDecrementHandleCount+0x6d
fffff880`08bbdb40 fffff800`035ee414 : 00000000`00000a1c fffffa80`10c53b30 fffff8a0`01f8a6a0 00000000`00000a1c : nt!ObpCloseHandleTableEntry+0xb1
fffff880`08bbdbd0 fffff800`032d7993 : fffffa80`1017e6b0 fffff880`08bbdca0 00000000`00000000 00000000`00000000 : nt!ObpCloseHandle+0x94
fffff880`08bbdc20 00000000`7770fe4a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`09eff448 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7770fe4a
FOLLOWUP_IP:
nt! ?? ::NNGAKEGL::`string'+ec67
fffff800`0359e521 f0480fba2900 lock bts qword ptr [rcx],0
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt! ?? ::NNGAKEGL::`string'+ec67
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
STACK_COMMAND: .cxr 0xfffff88008bbd080 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!_??_::NNGAKEGL::_string_+ec67
BUCKET_ID: X64_0x3B_nt!_??_::NNGAKEGL::_string_+ec67
Followup: MachineOwner
---------
Debug session time: Thu Dec 2 04:02:22.658 2010 (GMT-5)
System Uptime: 0 days 0:12:20.001
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff80003230b6c, fffff88002f91fd8, fffff88002f91840}
Probably caused by : cng.sys ( cng!GatherRandomKey+294 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80003230b6c, The address that the exception occurred at
Arg3: fffff88002f91fd8, Exception Record Address
Arg4: fffff88002f91840, Context Record Address
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpGetLookasideInformation+8c
fffff800`03230b6c 0fb742c0 movzx eax,word ptr [rdx-40h]
EXCEPTION_RECORD: fffff88002f91fd8 -- (.exr 0xfffff88002f91fd8)
Cannot read Exception record @ fffff88002f91fd8
CONTEXT: fffff88002f91840 -- (.cxr 0xfffff88002f91840)
rax=0000000000000110 rbx=0000000000000ff4 rcx=fffff8800c22a590
rdx=f7fff88002d65c40 rsi=0000000000000000 rdi=0000000000000001
rip=fffff80003230b6c rsp=fffff88002f92210 rbp=00000000000000a1
r8=fffff80003427720 r9=0000000000000000 r10=0000000000000000
r11=0000fffffffff000 r12=fffff88002f922e0 r13=0000000000000000
r14=000000000001fe90 r15=fffff88002f92840
iopl=0 nv up ei ng nz na pe cy
cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00010283
nt!ExpGetLookasideInformation+0x8c:
fffff800`03230b6c 0fb742c0 movzx eax,word ptr [rdx-40h] ds:002b:f7fff880`02d65c00=????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: NULL_DEREFERENCE
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034ba0e0
0000000000000000
FOLLOWUP_IP:
cng!GatherRandomKey+294
fffff880`01108b04 85c0 test eax,eax
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from fffff800035807bb to fffff80003230b6c
STACK_TEXT:
fffff880`02f92210 fffff800`035807bb : 00000000`00000000 fffff800`00000ff4 fffff880`02f922e0 00000000`00000000 : nt!ExpGetLookasideInformation+0x8c
fffff880`02f922a0 fffff800`035811e5 : fffff8a0`0c354170 00000000`00000000 00000000`00000004 00000000`00000000 : nt!ExpQuerySystemInformation+0x15bc
fffff880`02f92640 fffff800`03281993 : fffff8a0`0c370000 fffff800`0328093d 00000000`00000041 fffffa80`0d8bbe10 : nt!NtQuerySystemInformation+0x4d
fffff880`02f92680 fffff800`0327df30 : fffff880`01108b04 00000000`00020000 fffff880`02f92844 fffff8a0`0c354148 : nt!KiSystemServiceCopyEnd+0x13
fffff880`02f92818 fffff880`01108b04 : 00000000`00020000 fffff880`02f92844 fffff8a0`0c354148 00000000`00000000 : nt!KiServiceLinkage
fffff880`02f92820 fffff880`0110856d : fffffa80`0d8bbe10 00000000`00000000 fffff800`20206f49 fffff800`0328d2a1 : cng!GatherRandomKey+0x294
fffff880`02f92be0 fffff800`0357ec5d : 00000000`00000000 fffffa80`0d925820 fffffa80`0d925820 fffffa80`0ca8f040 : cng!scavengingWorkItemRoutine+0x3d
fffff880`02f92c80 fffff800`0328f961 : fffff800`03427500 fffff800`0357ec20 fffffa80`0ca8f040 00000000`00000000 : nt!IopProcessWorkItem+0x3d
fffff880`02f92cb0 fffff800`03526c06 : 00000000`00000000 fffffa80`0ca8f040 00000000`00000080 fffffa80`0ca7b040 : nt!ExpWorkerThread+0x111
fffff880`02f92d40 fffff800`03260c26 : fffff880`02ea4180 fffffa80`0ca8f040 fffff880`02eaf040 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`02f92d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: cng!GatherRandomKey+294
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: cng
IMAGE_NAME: cng.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc814
STACK_COMMAND: .cxr 0xfffff88002f91840 ; kb
FAILURE_BUCKET_ID: X64_0x7E_cng!GatherRandomKey+294
BUCKET_ID: X64_0x7E_cng!GatherRandomKey+294
Followup: MachineOwner
---------
Debug session time: Thu Dec 2 03:09:53.744 2010 (GMT-5)
System Uptime: 0 days 0:06:55.087
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 34, {50830, fffff880070b4718, fffff880070b3f80, fffff800032a3942}
Probably caused by : ntkrnlmp.exe ( nt!ObDereferenceObjectDeferDeleteWithTag+1e )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CACHE_MANAGER (34)
See the comment for FAT_FILE_SYSTEM (0x23)
Arguments:
Arg1: 0000000000050830
Arg2: fffff880070b4718
Arg3: fffff880070b3f80
Arg4: fffff800032a3942
Debugging Details:
------------------
EXCEPTION_RECORD: fffff880070b4718 -- (.exr 0xfffff880070b4718)
ExceptionAddress: fffff800032a3942 (nt!ObDereferenceObjectDeferDeleteWithTag+0x000000000000001e)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff
CONTEXT: fffff880070b3f80 -- (.cxr 0xfffff880070b3f80)
rax=ffffffffffffffff rbx=fffffa80057fc030 rcx=f7fffa800e936070
rdx=00000000746c6644 rsi=0000000000000002 rdi=f7fffa800e936070
rip=fffff800032a3942 rsp=fffff880070b4950 rbp=fffffa800daed790
r8=00000000057fc030 r9=0000000000000000 r10=0000058000000000
r11=fffff880070b4988 r12=0000000000000002 r13=0000000000000000
r14=fffffa800d7e8f10 r15=fffffa800a3d3040
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt!ObDereferenceObjectDeferDeleteWithTag+0x1e:
fffff800`032a3942 f0480fc147d0 lock xadd qword ptr [rdi-30h],rax ds:002b:f7fffa80`0e936040=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b80e0
ffffffffffffffff
FOLLOWUP_IP:
nt!ObDereferenceObjectDeferDeleteWithTag+1e
fffff800`032a3942 f0480fc147d0 lock xadd qword ptr [rdi-30h],rax
FAULTING_IP:
nt!ObDereferenceObjectDeferDeleteWithTag+1e
fffff800`032a3942 f0480fc147d0 lock xadd qword ptr [rdi-30h],rax
BUGCHECK_STR: 0x34
LAST_CONTROL_TRANSFER: from fffff80003271894 to fffff800032a3942
STACK_TEXT:
fffff880`070b4950 fffff800`03271894 : fffffa80`057fc030 fffffa80`057fc030 ffffffff`ffffffff 00000000`00000002 : nt!ObDereferenceObjectDeferDeleteWithTag+0x1e
fffff880`070b4990 fffff800`03227dd4 : fffffa80`0daed790 00000000`00000000 00000000`00000000 fffffa80`10dc4b60 : nt!MiWaitForInPageComplete+0x4e4
fffff880`070b4a70 fffff800`03227b7a : 00000000`00000000 00000000`00000000 fffff800`034255a0 00000000`00000000 : nt!MiPfCompletePrefetchIos+0x54
fffff880`070b4aa0 fffff800`03232ab5 : fffffa80`10dc4b60 00000000`88b00000 00000000`88b00000 fffff800`034255a0 : nt!MmWaitForCacheManagerPrefetch+0x1e
fffff880`070b4ad0 fffff800`03274576 : fffffa80`0dbc17b0 fffffa80`10dc4b00 00000000`00000005 00000000`00000090 : nt!CcPerformReadAhead+0x341
fffff880`070b4c00 fffff800`0328d961 : fffffa80`0ca97ee0 fffff880`014213d0 fffff800`03487150 00000000`00000002 : nt!CcWorkerThread+0x21e
fffff880`070b4cb0 fffff800`03524c06 : 00000000`124bcf70 fffffa80`10dc4b60 00000000`00000080 fffffa80`0ca7b040 : nt!ExpWorkerThread+0x111
fffff880`070b4d40 fffff800`0325ec26 : fffff880`009b2180 fffffa80`10dc4b60 fffff880`009bd040 fffff880`0123da90 : nt!PspSystemThreadStartup+0x5a
fffff880`070b4d80 00000000`00000000 : fffff880`070b5000 fffff880`070af000 fffff880`070b46e0 00000000`00000000 : nt!KxStartSystemThread+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ObDereferenceObjectDeferDeleteWithTag+1e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
STACK_COMMAND: .cxr 0xfffff880070b3f80 ; kb
FAILURE_BUCKET_ID: X64_0x34_nt!ObDereferenceObjectDeferDeleteWithTag+1e
BUCKET_ID: X64_0x34_nt!ObDereferenceObjectDeferDeleteWithTag+1e
Followup: MachineOwner
---------
1: kd> lmtsmn
start end module name
fffff880`00eb0000 fffff880`00f07000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02a00000 fffff880`02a8a000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03dab000 fffff880`03dc1000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`07b72000 fffff880`07b7a000 ALSysIO64 ALSysIO64.sys Sun Apr 19 15:41:04 2009 (49EB7E50)
fffff880`03d30000 fffff880`03d45000 amdppm amdppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e4d000 fffff880`00e58000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`03ad5000 fffff880`03ade000 anodlwfx anodlwfx.sys Fri Mar 06 05:10:08 2009 (49B0F680)
fffff880`00e1a000 fffff880`00e23000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e23000 fffff880`00e4d000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00860000 fffff960`008c1000 ATMFD ATMFD.DLL unavailable (00000000)
fffff880`02b19000 fffff880`02b20000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03cf9000 fffff880`03d0a000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06d82000 fffff880`06da0000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`007b0000 fffff960`007d7000 cdd cdd.dll unavailable (00000000)
fffff880`02ab9000 fffff880`02ae3000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d28000 fffff880`00de8000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01074000 fffff880`010a4000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cca000 fffff880`00d28000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01132000 fffff880`011a5000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03d9b000 fffff880`03dab000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`06bdc000 fffff880`06bea000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03c58000 fffff880`03cdb000 csc csc.sys Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03cdb000 fffff880`03cf9000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03a00000 fffff880`03a0f000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01213000 fffff880`01229000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`09aca000 fffff880`09bc4000 Dnetr28ux Dnetr28ux.sys Wed Aug 05 09:59:46 2009 (4A799052)
fffff880`06ab7000 fffff880`06ad9000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06bf6000 fffff880`06bff000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06bea000 fffff880`06bf6000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06800000 fffff880`06813000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06adf000 fffff880`06aeb000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04207000 fffff880`042fb000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`042fb000 fffff880`04341000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`07b3c000 fffff880`07b72000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`051f2000 fffff880`051ff000 fdc fdc.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010b3000 fffff880`010c7000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`05545000 fffff880`05550000 flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`00e58000 fffff880`00ea4000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0103a000 fffff880`01074000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01597000 fffff880`015e1000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`037ec000 fffff800`03835000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03d4e000 fffff880`03d72000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`06b05000 fffff880`06b1e000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`06b1e000 fffff880`06b26080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06af7000 fffff880`06b05000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06cba000 fffff880`06d82000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0120a000 fffff880`01213000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03df1000 fffff880`03e00000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06b51000 fffff880`06b5f000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bad000 fffff800`00bb7000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`06aeb000 fffff880`06af7000 KMWDFILTER KMWDFILTER.sys Wed Apr 29 02:20:48 2009 (49F7F1C0)
fffff880`0542c000 fffff880`0546f000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cf000 fffff880`013e9000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0156c000 fffff880`01597000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`06ad9000 fffff880`06ade200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05565000 fffff880`0557a000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`06813000 fffff880`06836000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00ca9000 fffff880`00cb6000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`06b7a000 fffff880`06b88000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`02bc5000 fffff880`02bd4000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06b27000 fffff880`06b34000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e00000 fffff880`00e1a000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02ae3000 fffff880`02b10000 MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`077b2000 fffff880`077c2000 MpNWMon MpNWMon.sys Sat Mar 20 01:58:00 2010 (4BA463E8)
fffff880`06da0000 fffff880`06db8000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`06db8000 fffff880`06de5000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06c00000 fffff880`06c4e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`06c4e000 fffff880`06c71000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02b7e000 fffff880`02b89000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f10000 fffff880`00f1a000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010d4000 fffff880`01132000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03bed000 fffff880`03bf8000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01400000 fffff880`01412000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0141a000 fffff880`0150c000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03de5000 fffff880`03df1000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`055cd000 fffff880`055e0000 ndisuio ndisuio.sys Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`03c00000 fffff880`03c2f000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`05550000 fffff880`05565000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`03ade000 fffff880`03aed000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03a37000 fffff880`03a7c000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0150c000 fffff880`0156c000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02b89000 fffff880`02b9a000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03be1000 fffff880`03bed000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03210000 fffff800`037ec000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122c000 fffff880`013cf000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02b10000 fffff880`02b19000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`051f0000 fffff880`051f1180 nvBridge nvBridge.kmd Sat Oct 16 13:06:16 2010 (4CB9DB88)
fffff880`04616000 fffff880`051efa80 nvlddmkm nvlddmkm.sys Sat Oct 16 13:12:46 2010 (4CB9DD0E)
fffff880`0557a000 fffff880`055cd000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`03a85000 fffff880`03aab000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03d7e000 fffff880`03d9b000 parport parport.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00f5a000 fffff880`00f6f000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f1a000 fffff880`00f4d000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fe0000 fffff880`00fe7000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fe7000 fffff880`00ff7000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e9000 fffff880`013fa000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`076d4000 fffff880`0777a000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06a7a000 fffff880`06ab7000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cb6000 fffff880`00cca000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`010c7000 fffff880`010d3040 PxHlpa64 PxHlpa64.sys Tue Oct 20 14:08:42 2009 (4ADDFCAA)
fffff880`03dc1000 fffff880`03de5000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03c2f000 fffff880`03c4a000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03a0f000 fffff880`03a30000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`02a8a000 fffff880`02aa4000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03b90000 fffff880`03be1000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03c4a000 fffff880`03c55000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02b63000 fffff880`02b6c000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02b6c000 fffff880`02b75000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02b75000 fffff880`02b7e000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`055e0000 fffff880`055f8000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04341000 fffff880`04398000 Rt64win7 Rt64win7.sys Fri Sep 03 01:58:32 2010 (4C808E88)
fffff880`0685c000 fffff880`06a79300 RTKVHD64 RTKVHD64.sys Tue Dec 08 05:20:05 2009 (4B1E2855)
fffff880`0777a000 fffff880`07785000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03d72000 fffff880`03d7e000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`03aed000 fffff880`03b0a000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015f1000 fffff880`015f9000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`09a00000 fffff880`09a71000 spsys spsys.sys Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`07aa6000 fffff880`07b3c000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07600000 fffff880`07667000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07785000 fffff880`077b2000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`043f9000 fffff880`043fa480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01600000 fffff880`017fd000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`077c2000 fffff880`077d4000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02bb8000 fffff880`02bc5000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02b9a000 fffff880`02bb8000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03b7c000 fffff880`03b90000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00560000 fffff960`0056a000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`03d0a000 fffff880`03d30000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`06b88000 fffff880`06bdc000 udfs udfs.sys Mon Jul 13 19:23:37 2009 (4A5BC1F9)
fffff880`0546f000 fffff880`05481000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`06b34000 fffff880`06b51000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`054ad000 fffff880`054aef00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04600000 fffff880`04611000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`054eb000 fffff880`05545000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04398000 fffff880`043a3000 usbohci usbohci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`043a3000 fffff880`043f9000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0549e000 fffff880`054ad000 usbrpm usbrpm.sys Mon Jul 13 20:35:14 2009 (4A5BD2C2)
fffff880`06b5f000 fffff880`06b7a000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00f4d000 fffff880`00f5a000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02b20000 fffff880`02b2e000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02b2e000 fffff880`02b53000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`015e1000 fffff880`015f1000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f6f000 fffff880`00f84000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f84000 fffff880`00fe0000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`011a5000 fffff880`011f1000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`054af000 fffff880`054eb000 vpchbus vpchbus.sys Tue Sep 22 21:32:32 2009 (4AB97AB0)
fffff880`03ac1000 fffff880`03ad5000 vpcnfltr vpcnfltr.sys Tue Sep 22 21:32:30 2009 (4AB97AAE)
fffff880`05481000 fffff880`0549e000 vpcusb vpcusb.sys Tue Sep 22 21:32:39 2009 (4AB97AB7)
fffff880`03b25000 fffff880`03b7b580 vpcvmm vpcvmm.sys Thu Dec 31 02:27:33 2009 (4B3C5265)
fffff880`09bc4000 fffff880`09bd1000 vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`03aab000 fffff880`03ac1000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`03b0a000 fffff880`03b25000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02b53000 fffff880`02b63000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00c00000 fffff880`00ca4000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00de8000 fffff880`00df7000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03a7c000 fffff880`03a85000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003bf000 win32k win32k.sys unavailable (00000000)
fffff880`03d45000 fffff880`03d4e000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f07000 fffff880`00f10000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06836000 fffff880`06857000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
Unloaded modules:
fffff880`010a4000 fffff880`010b2000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`011f1000 fffff880`011fd000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`00ea4000 fffff880`00ead000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`02aa6000 fffff880`02ab9000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000