Win 7 BSOD, windbgr problem

[Sauronis]

I come seeking the wisdom of the all mighty H2SO4, or any of the other seven gurus here

Long story short, I just got a new 750GB caviar black hard drive and since its significantly faster than my 2 x 250GB I am using it as my primary drive. I had windows 7 RC installed on the previous drive and had few BSOD's and the ones I did have were solved by driver updates.

I recently installed Win 7 on the new 750GB and I have had two crashes and I am getting an error when I try to open them up in windbg (which I will copy paste below) I have had a moderate level of success in vista using windbg to solve BSOD problems on friends computers but I am still most definitely an amateur.

I am not around to see the BSOD, I just come back to my dorm to find my BIOS asking for my password.

this is what I get when I go to open the dump file

Loading Dump File [C:\Windows\Minidump\101909-40965-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*Symbol information
Executable search path is:
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows 7 Kernel Version 7100 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7100.0.x86fre.winmain_win7rc.090421-1700
Machine Name:
Kernel base = 0x82643000 PsLoadedModuleList = 0x8278b810
Debug session time: Mon Oct 19 19:24:21.947 2009 (GMT-7)
System Uptime: 0 days 6:36:12.435
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
............................


Also, attached the two dumps.

Thank you soo much for your help!

 

[H2SO4]

I come seeking the wisdom of the all mighty H2SO4, or any of the other seven gurus here

That type of blatant sucking up cannot go unrewarded

this is what I get when I go to open the dump file
...
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe

You're not doing anything wrong. It just so happened that portions of the ntkrnlpa.exe image (the kernel itself) were paged out to disk (not resident in RAM) at the time of the crash. Specifically, a section called the "image header" was not resident. The resultant minidump is also devoid of the ntkrnlpa image header, so the debugger doesn't have enough information about the file to work out which symbol to pull down from the MS symbol server.

There's a trick you can use though: feed the debugger the actual ntkrnlpa.exe image that corresponds to the one in the dump, and that should give it enough info to work out the symbols it needs for automated analysis. To do that, set the "image path" debugger variable, then use the .reload command (notice the leading dot) to get the debugger to reload its symbols, followed by another !analyze -v to get it to repeat its automated analysis with the (hopefully) new symbols. The simplest way to set the image path is through the "File|Image File Path..." option in WinDBG, although you can also use its .exepath command. I don't have access to a 32-bit 7100 kernel right now, so I can't demonstrate.

====================================================

Even without the symbols, in this case it's possible to make some educated guesses. First dump:

1: kd> k
ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
a148f7d0 8272beb8 nt+0xdbf28
a148f82c 8271016e nt+0xe8eb8
a148f868 826d7622 nt+0xcd16e
a148f888 826c0947 nt+0x94622
a148f94c 826c4350 nt+0x7d947
a148f9e0 826da7f9 nt+0x81350
a148fa38 8b414d3e nt+0x977f9
a148fb48 8b415672 Ntfs+0xbd3e
a148fbc0 82674ad1 Ntfs+0xc672
a148fbd8 8b19620c nt+0x31ad1
a148fbfc 8b1963cb fltmgr+0x620c
a148fc34 82674ad1 fltmgr+0x63cb
a148fc4c 8286c177 nt+0x31ad1
a148fc6c 828748ba nt+0x229177
a148fd08 8267b3fa nt+0x2318ba
a148fd34 77a38244 nt+0x383fa
a148fd38 badb0d00 0x77a38244
a148fd3c 0012e8dc 0xbadb0d00
a148fd40 00000000 0x12e8dc
1: kd> .bugcheck
Bugcheck code 0000004E
Arguments 00000099 0007e929 00000002 00000a28
1: kd> !analyze -show 4e
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 00000000, 
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Allriiighty. So it's a stop 0x4E and it occurred in the "nt" image (that's the kernel itself - the debugger always refers to ntoskrnl/ntkrnlpa/ntkrpamp as "nt" internally) after a bit of activity in "fltmgr" (the Filter Driver Manager) and NTFS.SYS. If it's caused by a software issue, the most likely culprit is one of those "filter drivers" that fltmgr.sys deals with - like the anti-virus for example. The loaded modules list suggests the machine was running AVG:

1: kd> lmtm avg*
start    end        module name
99f20000 99f25500   avgmfx86  Tue Oct 13 18:24:03 2009 (4AD42B13)
99f26000 99f75b80   avgldx86  Mon Sep 21 01:03:04 2009 (4AB64428)
99f76000 99fcc680   avgtdix   Tue Oct 13 18:27:13 2009 (4AD42BD1)

If this particular crash repeats itself, you may want to consider uninstalling AVG for a while, simply as a test. You'd also want to do a full CHKDSK /R on all NTFS partitions to detect and hopefully fix any file system corruption issues which could have contributed to the crash.

Second dump:

0: kd> k
ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
8d71b688 828a802b nt+0x580c6
8d71b6b0 828a1a4f nt+0x5e02b
8d71b728 8ba4a381 nt+0x57a4f
8d71b758 8b879bbf tcpip+0x12381
8d71b838 8b888541 ndis+0x75bbf
8d71b8d4 8b88c603 ndis+0x84541
8d71ba04 8b83c0d1 ndis+0x88603
8d71ba34 8b87bfe7 ndis+0x380d1
8d71ba78 8287bad1 ndis+0x77fe7
8d71ba90 82a2864e nt+0x31ad1
8d71bac0 82add571 nt+0x1de64e
8d71bb18 82911d76 nt+0x293571
8d71bb44 82add438 nt+0xc7d76
8d71bb58 82add29b nt+0x293438
8d71bb8c 82adb78c nt+0x29329b
8d71bbc4 82adb714 nt+0x29178c
8d71bbe0 82911f0e nt+0x291714
8d71bc0c 82adc737 nt+0xc7f0e
8d71bcc4 82a0767c nt+0x292737
8d71bcdc 82a04b76 nt+0x1bd67c
0: kd> .bugcheck
Bugcheck code 0000009F
Arguments 00000004 00000258 851ad8e0 82970b24
0: kd> !analyze -show 9f
DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 00000000, SubCode
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

OK, so while the first one was disk-y, this one is network-y. "A driver is causing an inconsistent power state." Working with the (relatively safe) assumption that it's not the OS TCPIP.SYS and NDIS.SYS network-related drivers, and yet it's something networky, the most obvious place to start becomes the NIC driver - possibly this one:

0: kd> lmvmrt86*
start    end        module name
9135e000 9138f000   Rt86win7   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rt86win7.sys
    Image name: Rt86win7.sys
    Timestamp:        Thu Jul 30 21:58:26 2009 (4A718AE2)

Try updating all NIC drivers to the latest versions and cross your fingers. Good luck with it

 

[Sauronis]

Thank you!

I have yet to have another crash, but I do have CHKDSK set to run on restart just incase it does find any corruption, however my NIC driver is the most recent. I just got it from the Gigabyte website when I reinstalled Windows 7.

 

[H2SO4]

Thank you!

I have yet to have another crash, but I do have CHKDSK set to run on restart just incase it does find any corruption, however my NIC driver is the most recent. I just got it from the Gigabyte website when I reinstalled Windows 7.

Try updating the BIOS too, if possible. That 9F "power state" crash can sometimes be caused by miscommunication between the driver and the hardware device it is controlling, and updating the BIOS may fix some relevant firmware code.

As an aside, if the box is frequently under memory pressure, bits of the kernel/executive image (they live in the same file - ntkrnlpa in your case) may be getting paged out to disk, hence the debugger's inability to verify the image details and pull down appropriate symbols. You can use the DisablePagingExecutive setting to stop the kernel/executive getting paged out, but that obviously adds to the pressure.

 

[Sauronis]

So, all of a sudden I have had a string of crashes... thoughts?

 

[jcgriff2]

The bugcheck on the last 3 - (2) 0x7f & (1) 0x50

0x7f = kernel mode trap; exception = 0xd
0xd = in this case it can refer to an access violation

0x50 = invalid or bad system memory addressed

Since a 0x50 can refer to video, it is possible that the latest video drivers are "too new". You are running Windows 7 RC. Your drivers were probably writen with Windows 7 RTM in mind. Before rolling video drivers back, get an update for this or remove it from the system. 2005 is too old in your current system -

RTCore32.sys Tue May 24 23:39:05 [COLOR=red]2005[/COLOR] (42941D89) - graphics tuning ?
 
xcbdaV.sys   Mon Sep 15 00:57:29 2008 (48CE1569) - AVStream Driver Front-End Library
xcfeV.sys    Mon Sep 15 00:58:06 2008 (48CE158E)
xchalV.sys   Mon Sep 15 00:57:26 2008 (48CE1566)
xcmemV.sys   Mon Sep 15 00:58:06 2008 (48CE158E)

`

The other drivers are dated 2008, but since video involved here (my opinion), I listed the last 3.

Update or remove the RTCore driver.

Regards. . .

jcgriff2

.




@ H2SO4 - I cannot possibly thank you enough for the tips relating to using the executable path, reload, etc... I happen to be running Windows 7 7100 x86 - the same OS build as Sauronis. I was able to get rid of the symbol errors .

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\PalmDesert7\AppData\Local\Temp\Temp1_DumpFiles[1].zip\110209-19078-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows 7 Kernel Version 7100 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7100.0.x86fre.winmain_win7rc.090421-1700
Machine Name:
Kernel base = 0x82a1e000 PsLoadedModuleList = 0x82b66810
Debug session time: Mon Nov  2 14:36:40.860 2009 (GMT-8)
System Uptime: 0 days 0:31:04.312
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
...............................................................
................................................................
................................
Loading User Symbols
Loading unloaded module list
..........
Unable to load image \SystemRoot\System32\Drivers\Ntfs.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Ntfs.sys
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {d, 0, 0, 0}
*** WARNING: Unable to verify timestamp for fltmgr.sys
*** ERROR: Module load completed but symbols could not be loaded for fltmgr.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!KPRCB                                      ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!KPRCB                                      ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
Probably caused by : ntkrnlpa.exe ( nt+3befb )
Followup: MachineOwner
---------
1: kd> .reload
Loading Kernel Symbols
...............................................................
................................................................
................................
Loading User Symbols
Loading unloaded module list
..........
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000d, EXCEPTION_GP_FAULT
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
 
BUGCHECK_STR:  0x7f_d
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  SearchIndexer.
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 8b8ce611 to 82a59efb
STACK_TEXT:  
a27309a4 8b8ce611 badb0d00 102a1001 a27309c0 nt!KiSystemFatalException+0xf
a2730ae0 8b8c2807 85629008 87e02008 00000001 Ntfs!NtfsReadUsnJournal+0x74
a2730afc 8b8e29b6 85629008 87e02008 a2730b38 Ntfs!NtfsUserFsRequest+0x22e
a2730b18 8b8df64f 85629008 87e02008 29f5f0ed Ntfs!NtfsCommonFileSystemControl+0x91
a2730b88 82a4fad1 85a9e020 87e02008 87e02008 Ntfs!NtfsFsdFileSystemControl+0x164
a2730ba0 8b78a20c 85e881e8 87e02008 00000000 nt!IofCallDriver+0x63
a2730bc4 8b79dce8 a2730be4 85e881e8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
a2730bfc 82a4fad1 85e881e8 87e02008 87e02008 fltmgr!FltpFsControl+0xe8
a2730c14 82c47177 8853bd10 87e02008 87e021e0 nt!IofCallDriver+0x63
a2730c34 82c4a158 85e881e8 8853bd10 00000001 nt!IopSynchronousServiceTail+0x1f8
a2730cd0 82c883f3 85e881e8 87e02008 00000000 nt!IopXxxControlFile+0x6aa
a2730d04 82a563fa 00000b5c 00000b60 00000000 nt!NtFsControlFile+0x2a
a2730d04 77298244 00000b5c 00000b60 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
03f5e6e4 00000000 00000000 00000000 00000000 0x77298244
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!KiSystemFatalException+f
82a59efb c3              ret
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!KiSystemFatalException+f
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  49ee8b4e
FAILURE_BUCKET_ID:  0x7f_d_nt!KiSystemFatalException+f
BUCKET_ID:  0x7f_d_nt!KiSystemFatalException+f
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000d, EXCEPTION_GP_FAULT
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
 
BUGCHECK_STR:  0x7f_d
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  SearchIndexer.
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 8b8ce611 to 82a59efb
STACK_TEXT:  
a27309a4 8b8ce611 badb0d00 102a1001 a27309c0 nt!KiSystemFatalException+0xf
a2730ae0 8b8c2807 85629008 87e02008 00000001 Ntfs!NtfsReadUsnJournal+0x74
a2730afc 8b8e29b6 85629008 87e02008 a2730b38 Ntfs!NtfsUserFsRequest+0x22e
a2730b18 8b8df64f 85629008 87e02008 29f5f0ed Ntfs!NtfsCommonFileSystemControl+0x91
a2730b88 82a4fad1 85a9e020 87e02008 87e02008 Ntfs!NtfsFsdFileSystemControl+0x164
a2730ba0 8b78a20c 85e881e8 87e02008 00000000 nt!IofCallDriver+0x63
a2730bc4 8b79dce8 a2730be4 85e881e8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
a2730bfc 82a4fad1 85e881e8 87e02008 87e02008 fltmgr!FltpFsControl+0xe8
a2730c14 82c47177 8853bd10 87e02008 87e021e0 nt!IofCallDriver+0x63
a2730c34 82c4a158 85e881e8 8853bd10 00000001 nt!IopSynchronousServiceTail+0x1f8
a2730cd0 82c883f3 85e881e8 87e02008 00000000 nt!IopXxxControlFile+0x6aa
a2730d04 82a563fa 00000b5c 00000b60 00000000 nt!NtFsControlFile+0x2a
a2730d04 77298244 00000b5c 00000b60 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
03f5e6e4 00000000 00000000 00000000 00000000 0x77298244
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!KiSystemFatalException+f
82a59efb c3              ret
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!KiSystemFatalException+f
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  49ee8b4e
FAILURE_BUCKET_ID:  0x7f_d_nt!KiSystemFatalException+f
BUCKET_ID:  0x7f_d_nt!KiSystemFatalException+f
Followup: MachineOwner
---------
1: kd> lmnt
start    end        module name
80bd2000 80bda000   kdcom    kdcom.dll    Tue Apr 21 22:07:23 2009 (49EEA60B)
82420000 8266a000   win32k   win32k.sys   Tue Apr 21 20:23:55 2009 (49EE8DCB)
82680000 82689000   TSDDD    TSDDD.dll    Tue Apr 21 21:00:10 2009 (49EE964A)
826b0000 826ce000   cdd      cdd.dll      unavailable (00000000)
82a1e000 82e2d000   nt       ntkrpamp.exe Tue Apr 21 20:13:18 2009 (49EE8B4E)
82e2d000 82e64000   hal      halmacpi.dll Tue Apr 21 20:08:30 2009 (49EE8A2E)
8b406000 8b477000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Apr 21 22:05:20 2009 (49EEA590)
8b477000 8b488000   PSHED    PSHED.dll    Tue Apr 21 22:09:07 2009 (49EEA673)
8b488000 8b490000   BOOTVID  BOOTVID.dll  Tue Apr 21 22:01:42 2009 (49EEA4B6)
8b490000 8b4d2000   CLFS     CLFS.SYS     Tue Apr 21 20:08:36 2009 (49EE8A34)
8b4d2000 8b57d000   CI       CI.dll       Tue Apr 21 22:08:59 2009 (49EEA66B)
8b57d000 8b5ee000   Wdf01000 Wdf01000.sys Tue Apr 21 20:09:01 2009 (49EE8A4D)
8b5ee000 8b5fc000   WDFLDR   WDFLDR.SYS   Tue Apr 21 20:08:47 2009 (49EE8A3F)
8b600000 8b608000   rdprefmp rdprefmp.sys Tue Apr 21 21:00:11 2009 (49EE964B)
8b608000 8b613000   Msfs     Msfs.SYS     Tue Apr 21 20:08:46 2009 (49EE8A3E)
8b613000 8b621000   Npfs     Npfs.SYS     Tue Apr 21 20:08:49 2009 (49EE8A41)
8b62a000 8b672000   ACPI     ACPI.sys     Tue Apr 21 20:08:37 2009 (49EE8A35)
8b672000 8b67b000   WMILIB   WMILIB.SYS   Tue Apr 21 20:08:46 2009 (49EE8A3E)
8b67b000 8b683000   msisadrv msisadrv.sys Tue Apr 21 20:08:33 2009 (49EE8A31)
8b683000 8b6ad000   pci      pci.sys      Tue Apr 21 20:08:40 2009 (49EE8A38)
8b6ad000 8b6b8000   vdrvroot vdrvroot.sys Tue Apr 21 20:44:49 2009 (49EE92B1)
8b6b8000 8b6c9000   partmgr  partmgr.sys  Tue Apr 21 20:08:57 2009 (49EE8A49)
8b6c9000 8b6d9000   volmgr   volmgr.sys   Tue Apr 21 20:08:47 2009 (49EE8A3F)
8b6d9000 8b724000   volmgrx  volmgrx.sys  Tue Apr 21 20:09:06 2009 (49EE8A52)
8b724000 8b72b000   pciide   pciide.sys   Tue Apr 21 20:08:44 2009 (49EE8A3C)
8b72b000 8b739000   PCIIDEX  PCIIDEX.SYS  Tue Apr 21 20:08:40 2009 (49EE8A38)
8b739000 8b74f000   mountmgr mountmgr.sys Tue Apr 21 20:08:51 2009 (49EE8A43)
8b74f000 8b758000   atapi    atapi.sys    Tue Apr 21 20:08:39 2009 (49EE8A37)
8b758000 8b77b000   ataport  ataport.SYS  Tue Apr 21 20:08:42 2009 (49EE8A3A)
8b77b000 8b784000   amdxata  amdxata.sys  Tue Mar 10 16:22:16 2009 (49B6F628)
8b784000 8b7b8000   fltmgr   fltmgr.sys   Tue Apr 21 20:08:39 2009 (49EE8A37)
8b7b8000 8b7c9000   fileinfo fileinfo.sys Tue Apr 21 20:19:22 2009 (49EE8CBA)
8b7c9000 8b7d1b80   PxHelp20 PxHelp20.sys Fri Feb 02 13:23:57 2007 (45C3ABED)
8b7d2000 8b7f3000   VIDEOPRT VIDEOPRT.SYS Tue Apr 21 20:23:20 2009 (49EE8DA8)
8b7f3000 8b7fb000   rdpencdd rdpencdd.sys Tue Apr 21 21:00:11 2009 (49EE964B)
8b800000 8b80e000   pcw      pcw.sys      Tue Apr 21 20:08:34 2009 (49EE8A32)
8b80e000 8b817000   Fs_Rec   Fs_Rec.sys   Tue Apr 21 20:08:38 2009 (49EE8A36)
8b817000 8b823000   vga      vga.sys      Tue Apr 21 20:23:17 2009 (49EE8DA5)
8b823000 8b830000   watchdog watchdog.sys Tue Apr 21 20:21:46 2009 (49EE8D4A)
8b831000 8b960000   Ntfs     Ntfs.sys     Tue Apr 21 20:09:31 2009 (49EE8A6B)
8b960000 8b98b000   msrpc    msrpc.sys    Tue Apr 21 20:09:19 2009 (49EE8A5F)
8b98b000 8b99e000   ksecdd   ksecdd.sys   Tue Apr 21 20:09:16 2009 (49EE8A5C)
8b99e000 8b9fb000   cng      cng.sys      Tue Apr 21 20:31:04 2009 (49EE8F78)
8ba00000 8ba1f000   cdrom    cdrom.sys    Tue Apr 21 20:08:48 2009 (49EE8A40)
8ba1f000 8ba26000   Null     Null.SYS     Tue Apr 21 20:08:37 2009 (49EE8A35)
8ba26000 8ba2d000   Beep     Beep.SYS     Tue Apr 21 20:43:27 2009 (49EE925F)
8ba2d000 8ba35000   RDPCDD   RDPCDD.sys   Tue Apr 21 21:00:11 2009 (49EE964B)
8ba35000 8baec000   ndis     ndis.sys     Tue Apr 21 20:09:42 2009 (49EE8A76)
8baec000 8bb2a000   NETIO    NETIO.SYS    Tue Apr 21 20:10:05 2009 (49EE8A8D)
8bb2a000 8bb4f000   ksecpkg  ksecpkg.sys  Tue Apr 21 20:32:15 2009 (49EE8FBF)
8bb4f000 8bb5f000   mup      mup.sys      Tue Apr 21 20:11:32 2009 (49EE8AE4)
8bb5f000 8bb91000   fvevol   fvevol.sys   Tue Apr 21 20:10:25 2009 (49EE8AA1)
8bb91000 8bba2000   disk     disk.sys     Tue Apr 21 20:08:52 2009 (49EE8A44)
8bba2000 8bbc7000   CLASSPNP CLASSPNP.SYS Tue Apr 21 20:08:43 2009 (49EE8A3B)
8bbc7000 8bbe1000   WudfPf   WudfPf.sys   Tue Apr 21 20:48:41 2009 (49EE9399)
8bc00000 8bc2d000   rdyboost rdyboost.sys Tue Apr 21 20:19:32 2009 (49EE8CC4)
8bc2d000 8bc35000   hwpolicy hwpolicy.sys Tue Apr 21 20:08:27 2009 (49EE8A2B)
8bc3b000 8bd80000   tcpip    tcpip.sys    Tue Apr 21 20:10:47 2009 (49EE8AB7)
8bd80000 8bdb1000   fwpkclnt fwpkclnt.sys Tue Apr 21 20:09:26 2009 (49EE8A66)
8bdb1000 8bdb9380   vmstorfl vmstorfl.sys Tue Apr 21 20:26:29 2009 (49EE8E65)
8bdba000 8bdf8000   volsnap  volsnap.sys  Tue Apr 21 20:08:58 2009 (49EE8A4A)
8bdf8000 8be00000   spldr    spldr.sys    Wed Mar 25 12:16:08 2009 (49CA82F8)
90e11000 90e28000   tdx      tdx.sys      Tue Apr 21 20:09:29 2009 (49EE8A69)
90e28000 90e33000   TDI      TDI.SYS      Tue Apr 21 20:09:31 2009 (49EE8A6B)
90e33000 90e89680   avgtdix  avgtdix.sys  Wed Oct 14 09:36:32 2009 (4AD5FE10)
90e8a000 90ebc000   netbt    netbt.sys    Tue Apr 21 20:09:39 2009 (49EE8A73)
90ebc000 90f16000   afd      afd.sys      Tue Apr 21 20:09:58 2009 (49EE8A86)
90f16000 90f1d000   wfplwf   wfplwf.sys   Tue Apr 21 20:52:24 2009 (49EE9478)
90f1d000 90f3b000   pacer    pacer.sys    Tue Apr 21 20:52:32 2009 (49EE9480)
90f3b000 90f49000   netbios  netbios.sys  Tue Apr 21 20:52:28 2009 (49EE947C)
90f49000 90f63000   serial   serial.sys   Tue Apr 21 20:44:02 2009 (49EE9282)
90f63000 90f76000   wanarp   wanarp.sys   Tue Apr 21 20:53:29 2009 (49EE94B9)
90f76000 90f86000   termdd   termdd.sys   Tue Apr 21 21:00:07 2009 (49EE9647)
90f86000 90f93880   SCDEmu   SCDEmu.SYS   Sun Jul 26 19:43:19 2009 (4A6D1447)
90f94000 90fd5000   rdbss    rdbss.sys    Tue Apr 21 20:11:43 2009 (49EE8AEF)
90fd5000 90fdf000   nsiproxy nsiproxy.sys Tue Apr 21 20:09:25 2009 (49EE8A65)
90fdf000 90fe9000   mssmbios mssmbios.sys Tue Apr 21 20:16:49 2009 (49EE8C21)
90fe9000 90ff5000   discache discache.sys Tue Apr 21 20:21:34 2009 (49EE8D3E)
91000000 91017000   rassstp  rassstp.sys  Tue Apr 21 20:53:30 2009 (49EE94BA)
9101a000 9107e000   csc      csc.sys      Tue Apr 21 20:12:21 2009 (49EE8B15)
9107e000 91096000   dfsc     dfsc.sys     Tue Apr 21 20:11:34 2009 (49EE8AE6)
91096000 910a4000   blbdrive blbdrive.sys Tue Apr 21 20:20:31 2009 (49EE8CFF)
910a4000 910a9500   avgmfx86 avgmfx86.sys Tue Oct 13 00:24:03 2009 (4AD42B13)
910aa000 910f9b80   avgldx86 avgldx86.sys Sun Sep 20 08:03:04 2009 (4AB64428)
910fa000 91119000   tunnel   tunnel.sys   Tue Apr 21 20:52:38 2009 (49EE9486)
91119000 9112b000   intelppm intelppm.sys Tue Apr 21 20:08:27 2009 (49EE8A2B)
9112b000 91164000   dxgmms1  dxgmms1.sys  Tue Apr 21 20:22:57 2009 (49EE8D91)
91164000 911ae000   USBPORT  USBPORT.SYS  Tue Apr 21 20:49:38 2009 (49EE93D2)
911ae000 911cd000   HDAudBus HDAudBus.sys Tue Apr 21 20:49:20 2009 (49EE93C0)
911cd000 911f3780   xcbdaV   xcbdaV.sys   Mon Sep 15 00:57:29 2008 (48CE1569)
91200000 9120d000   kbdclass kbdclass.sys Tue Apr 21 20:08:39 2009 (49EE8A37)
91211000 91245000   ks       ks.sys       Tue Apr 21 20:43:43 2009 (49EE926F)
91245000 91248000   BdaSup   BdaSup.SYS   Tue Apr 21 20:49:46 2009 (49EE93DA)
91248000 9129f000   xcmemV   xcmemV.sys   Mon Sep 15 00:58:06 2008 (48CE158E)
9129f000 91338000   xcfeV    xcfeV.sys    Mon Sep 15 00:58:06 2008 (48CE158E)
91338000 91350000   parport  parport.sys  Tue Apr 21 20:44:01 2009 (49EE9281)
91350000 91358000   RootMdm  RootMdm.sys  Tue Apr 21 20:53:55 2009 (49EE94D3)
91358000 91365000   modem    modem.sys    Tue Apr 21 20:53:57 2009 (49EE94D5)
91365000 91377000   AgileVpn AgileVpn.sys Tue Apr 21 20:53:30 2009 (49EE94BA)
91377000 9138f000   rasl2tp  rasl2tp.sys  Tue Apr 21 20:53:07 2009 (49EE94A3)
9138f000 9139a000   ndistapi ndistapi.sys Tue Apr 21 20:52:58 2009 (49EE949A)
9139a000 913bd000   ndiswan  ndiswan.sys  Tue Apr 21 20:53:08 2009 (49EE94A4)
913bd000 913d5000   raspppoe raspppoe.sys Tue Apr 21 20:53:24 2009 (49EE94B4)
913d5000 913ec000   raspptp  raspptp.sys  Tue Apr 21 20:53:17 2009 (49EE94AD)
913ec000 913f2a00   RimSerial RimSerial.sys Mon Nov 24 09:02:13 2008 (492ADE15)
913f3000 913fd000   rdpbus   rdpbus.sys   Tue Apr 21 21:01:12 2009 (49EE9688)
91e00000 91e0e000   umbus    umbus.sys    Tue Apr 21 20:50:03 2009 (49EE93EB)
91e0f000 9271f160   nvlddmkm nvlddmkm.sys Sun Sep 27 17:13:17 2009 (4ABFFF9D)
92720000 92721080   nvBridge nvBridge.kmd Sun Sep 27 16:56:53 2009 (4ABFFBC5)
92722000 927d9000   dxgkrnl  dxgkrnl.sys  Tue Apr 21 20:23:48 2009 (49EE8DC4)
927d9000 927e4000   usbuhci  usbuhci.sys  Tue Apr 21 20:49:34 2009 (49EE93CE)
927e4000 927f3000   usbehci  usbehci.sys  Tue Apr 21 20:49:40 2009 (49EE93D4)
927f3000 92800000   mouclass mouclass.sys Tue Apr 21 20:08:39 2009 (49EE8A37)
92a00000 92a32000   Rt86win7 Rt86win7.sys Thu Aug 20 09:04:54 2009 (4A8D7426)
92a32000 92a3d000   fdc      fdc.sys      Tue Apr 21 20:44:14 2009 (49EE928E)
92a3d000 92a3e380   swenum   swenum.sys   Tue Apr 21 20:43:34 2009 (49EE9266)
92a3f000 92fe9000   xchalV   xchalV.sys   Mon Sep 15 00:57:26 2008 (48CE1566)
92fe9000 92ff3000   serenum  serenum.sys  Tue Apr 21 20:43:55 2009 (49EE927B)
92ff3000 93000000   CompositeBus CompositeBus.sys Tue Apr 21 20:43:54 2009 (49EE927A)
97a0f000 97a53000   usbhub   usbhub.sys   Tue Apr 21 20:50:25 2009 (49EE9401)
97a53000 97a5d000   flpydisk flpydisk.sys Tue Apr 21 20:44:14 2009 (49EE928E)
97a5d000 97a6e000   NDProxy  NDProxy.SYS  Tue Apr 21 20:53:01 2009 (49EE949D)
97a6e000 97abe000   HdAudio  HdAudio.sys  Tue Apr 21 20:50:10 2009 (49EE93F2)
97abe000 97aed000   portcls  portcls.sys  Tue Apr 21 20:49:26 2009 (49EE93C6)
97aed000 97b06000   drmk     drmk.sys     Tue Apr 21 21:40:17 2009 (49EE9FB1)
97b06000 97b10000   Dxapi    Dxapi.sys    Tue Apr 21 20:22:56 2009 (49EE8D90)
97b10000 97b26000   cdfs     cdfs.sys     Tue Apr 21 20:08:38 2009 (49EE8A36)
97b26000 97b3d000   USBSTOR  USBSTOR.SYS  Tue Apr 21 20:49:42 2009 (49EE93D6)
97b3d000 97b3e700   USBD     USBD.SYS     Tue Apr 21 20:49:30 2009 (49EE93CA)
97b3f000 97b4a000   monitor  monitor.sys  Tue Apr 21 20:23:20 2009 (49EE8DA8)
97b4a000 97b61000   usbccgp  usbccgp.sys  Tue Apr 21 20:49:53 2009 (49EE93E1)
97b67000 97b82000   luafv    luafv.sys    Tue Apr 21 20:13:02 2009 (49EE8B3E)
97b91000 97b9c000   hidusb   hidusb.sys   Tue Apr 21 20:49:29 2009 (49EE93C9)
97b9c000 97baf000   HIDCLASS HIDCLASS.SYS Tue Apr 21 20:49:26 2009 (49EE93C6)
97baf000 97bb5480   HIDPARSE HIDPARSE.SYS Tue Apr 21 20:49:24 2009 (49EE93C4)
97bb6000 97bc2000   kbdhid   kbdhid.sys   Tue Apr 21 20:43:35 2009 (49EE9267)
97bc2000 97bcd000   mouhid   mouhid.sys   Tue Apr 21 20:43:33 2009 (49EE9265)
97bcd000 97bda000   crashdmp crashdmp.sys Tue Apr 21 20:44:19 2009 (49EE9293)
97bda000 97be5000   dump_dumpata dump_dumpata.sys Tue Apr 21 20:08:41 2009 (49EE8A39)
97be5000 97bee000   dump_atapi dump_atapi.sys Tue Apr 21 20:08:39 2009 (49EE8A37)
97bee000 97bff000   dump_dumpfve dump_dumpfve.sys Tue Apr 21 20:10:11 2009 (49EE8A93)
9bc3f000 9bc5f480   WUDFRd   WUDFRd.sys   Tue Apr 21 20:49:10 2009 (49EE93B6)
9bc60000 9bc70000   lltdio   lltdio.sys   Tue Apr 21 20:51:49 2009 (49EE9455)
9bc70000 9bc83000   rspndr   rspndr.sys   Tue Apr 21 20:51:50 2009 (49EE9456)
9bc83000 9bd08000   HTTP     HTTP.sys     Tue Apr 21 20:10:08 2009 (49EE8A90)
9bd08000 9bd21000   bowser   bowser.sys   Tue Apr 21 20:11:38 2009 (49EE8AEA)
9bd21000 9bd33000   mpsdrv   mpsdrv.sys   Tue Apr 21 20:51:21 2009 (49EE9439)
9bd33000 9bd56000   mrxsmb   mrxsmb.sys   Tue Apr 21 20:11:40 2009 (49EE8AEC)
9bd56000 9bd91000   mrxsmb10 mrxsmb10.sys Tue Apr 21 20:11:55 2009 (49EE8AFB)
9bd91000 9bdac000   mrxsmb20 mrxsmb20.sys Tue Apr 21 20:11:48 2009 (49EE8AF4)
9bdac000 9bdb3000   parvdm   parvdm.sys   Tue Apr 21 20:43:55 2009 (49EE927B)
9e826000 9e8bd000   peauth   peauth.sys   Tue Apr 21 21:40:09 2009 (49EE9FA9)
9e8bd000 9e8c7000   secdrv   secdrv.SYS   Wed Sep 13 06:18:32 2006 (45080528)
9e8c7000 9e8e8000   srvnet   srvnet.sys   Tue Apr 21 20:12:06 2009 (49EE8B06)
9e8e8000 9e8f5000   tcpipreg tcpipreg.sys Tue Apr 21 20:52:46 2009 (49EE948E)
9e8f5000 9e944000   srv2     srv2.sys     Wed Sep 09 20:10:12 2009 (4AA86E14)
9e944000 9e995000   srv      srv.sys      Tue Apr 21 20:12:29 2009 (49EE8B1D)
9e995000 9e996200   RTCore32 RTCore32.sys Tue May 24 23:39:05 2005 (42941D89)
a7a8f000 a7a98000   asyncmac asyncmac.sys Tue Apr 21 20:53:14 2009 (49EE94AA)
a7a9e000 a7ac8000   fastfat  fastfat.SYS  Tue Apr 21 20:11:23 2009 (49EE8ADB)
Unloaded modules:
a7a25000 a7a8f000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7a98000 a7a9e000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b61000 97b67000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b82000 97b8b000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b67000 97b70000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b70000 97b91000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbc7000 8bbd4000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbd4000 8bbdf000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbdf000 8bbe8000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbe8000 8bbf9000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
1: kd> lmntsm
start    end        module name
8b62a000 8b672000   ACPI     ACPI.sys     Tue Apr 21 20:08:37 2009 (49EE8A35)
90ebc000 90f16000   afd      afd.sys      Tue Apr 21 20:09:58 2009 (49EE8A86)
91365000 91377000   AgileVpn AgileVpn.sys Tue Apr 21 20:53:30 2009 (49EE94BA)
8b77b000 8b784000   amdxata  amdxata.sys  Tue Mar 10 16:22:16 2009 (49B6F628)
a7a8f000 a7a98000   asyncmac asyncmac.sys Tue Apr 21 20:53:14 2009 (49EE94AA)
8b74f000 8b758000   atapi    atapi.sys    Tue Apr 21 20:08:39 2009 (49EE8A37)
8b758000 8b77b000   ataport  ataport.SYS  Tue Apr 21 20:08:42 2009 (49EE8A3A)
910aa000 910f9b80   avgldx86 avgldx86.sys Sun Sep 20 08:03:04 2009 (4AB64428)
910a4000 910a9500   avgmfx86 avgmfx86.sys Tue Oct 13 00:24:03 2009 (4AD42B13)
90e33000 90e89680   avgtdix  avgtdix.sys  Wed Oct 14 09:36:32 2009 (4AD5FE10)
91245000 91248000   BdaSup   BdaSup.SYS   Tue Apr 21 20:49:46 2009 (49EE93DA)
8ba26000 8ba2d000   Beep     Beep.SYS     Tue Apr 21 20:43:27 2009 (49EE925F)
91096000 910a4000   blbdrive blbdrive.sys Tue Apr 21 20:20:31 2009 (49EE8CFF)
8b488000 8b490000   BOOTVID  BOOTVID.dll  Tue Apr 21 22:01:42 2009 (49EEA4B6)
9bd08000 9bd21000   bowser   bowser.sys   Tue Apr 21 20:11:38 2009 (49EE8AEA)
826b0000 826ce000   cdd      cdd.dll      unavailable (00000000)
97b10000 97b26000   cdfs     cdfs.sys     Tue Apr 21 20:08:38 2009 (49EE8A36)
8ba00000 8ba1f000   cdrom    cdrom.sys    Tue Apr 21 20:08:48 2009 (49EE8A40)
8b4d2000 8b57d000   CI       CI.dll       Tue Apr 21 22:08:59 2009 (49EEA66B)
8bba2000 8bbc7000   CLASSPNP CLASSPNP.SYS Tue Apr 21 20:08:43 2009 (49EE8A3B)
8b490000 8b4d2000   CLFS     CLFS.SYS     Tue Apr 21 20:08:36 2009 (49EE8A34)
8b99e000 8b9fb000   cng      cng.sys      Tue Apr 21 20:31:04 2009 (49EE8F78)
92ff3000 93000000   CompositeBus CompositeBus.sys Tue Apr 21 20:43:54 2009 (49EE927A)
97bcd000 97bda000   crashdmp crashdmp.sys Tue Apr 21 20:44:19 2009 (49EE9293)
9101a000 9107e000   csc      csc.sys      Tue Apr 21 20:12:21 2009 (49EE8B15)
9107e000 91096000   dfsc     dfsc.sys     Tue Apr 21 20:11:34 2009 (49EE8AE6)
90fe9000 90ff5000   discache discache.sys Tue Apr 21 20:21:34 2009 (49EE8D3E)
8bb91000 8bba2000   disk     disk.sys     Tue Apr 21 20:08:52 2009 (49EE8A44)
97aed000 97b06000   drmk     drmk.sys     Tue Apr 21 21:40:17 2009 (49EE9FB1)
97be5000 97bee000   dump_atapi dump_atapi.sys Tue Apr 21 20:08:39 2009 (49EE8A37)
97bda000 97be5000   dump_dumpata dump_dumpata.sys Tue Apr 21 20:08:41 2009 (49EE8A39)
97bee000 97bff000   dump_dumpfve dump_dumpfve.sys Tue Apr 21 20:10:11 2009 (49EE8A93)
97b06000 97b10000   Dxapi    Dxapi.sys    Tue Apr 21 20:22:56 2009 (49EE8D90)
92722000 927d9000   dxgkrnl  dxgkrnl.sys  Tue Apr 21 20:23:48 2009 (49EE8DC4)
9112b000 91164000   dxgmms1  dxgmms1.sys  Tue Apr 21 20:22:57 2009 (49EE8D91)
a7a9e000 a7ac8000   fastfat  fastfat.SYS  Tue Apr 21 20:11:23 2009 (49EE8ADB)
92a32000 92a3d000   fdc      fdc.sys      Tue Apr 21 20:44:14 2009 (49EE928E)
8b7b8000 8b7c9000   fileinfo fileinfo.sys Tue Apr 21 20:19:22 2009 (49EE8CBA)
97a53000 97a5d000   flpydisk flpydisk.sys Tue Apr 21 20:44:14 2009 (49EE928E)
8b784000 8b7b8000   fltmgr   fltmgr.sys   Tue Apr 21 20:08:39 2009 (49EE8A37)
8b80e000 8b817000   Fs_Rec   Fs_Rec.sys   Tue Apr 21 20:08:38 2009 (49EE8A36)
8bb5f000 8bb91000   fvevol   fvevol.sys   Tue Apr 21 20:10:25 2009 (49EE8AA1)
8bd80000 8bdb1000   fwpkclnt fwpkclnt.sys Tue Apr 21 20:09:26 2009 (49EE8A66)
82e2d000 82e64000   hal      halmacpi.dll Tue Apr 21 20:08:30 2009 (49EE8A2E)
911ae000 911cd000   HDAudBus HDAudBus.sys Tue Apr 21 20:49:20 2009 (49EE93C0)
97a6e000 97abe000   HdAudio  HdAudio.sys  Tue Apr 21 20:50:10 2009 (49EE93F2)
97b9c000 97baf000   HIDCLASS HIDCLASS.SYS Tue Apr 21 20:49:26 2009 (49EE93C6)
97baf000 97bb5480   HIDPARSE HIDPARSE.SYS Tue Apr 21 20:49:24 2009 (49EE93C4)
97b91000 97b9c000   hidusb   hidusb.sys   Tue Apr 21 20:49:29 2009 (49EE93C9)
9bc83000 9bd08000   HTTP     HTTP.sys     Tue Apr 21 20:10:08 2009 (49EE8A90)
8bc2d000 8bc35000   hwpolicy hwpolicy.sys Tue Apr 21 20:08:27 2009 (49EE8A2B)
91119000 9112b000   intelppm intelppm.sys Tue Apr 21 20:08:27 2009 (49EE8A2B)
91200000 9120d000   kbdclass kbdclass.sys Tue Apr 21 20:08:39 2009 (49EE8A37)
97bb6000 97bc2000   kbdhid   kbdhid.sys   Tue Apr 21 20:43:35 2009 (49EE9267)
80bd2000 80bda000   kdcom    kdcom.dll    Tue Apr 21 22:07:23 2009 (49EEA60B)
91211000 91245000   ks       ks.sys       Tue Apr 21 20:43:43 2009 (49EE926F)
8b98b000 8b99e000   ksecdd   ksecdd.sys   Tue Apr 21 20:09:16 2009 (49EE8A5C)
8bb2a000 8bb4f000   ksecpkg  ksecpkg.sys  Tue Apr 21 20:32:15 2009 (49EE8FBF)
9bc60000 9bc70000   lltdio   lltdio.sys   Tue Apr 21 20:51:49 2009 (49EE9455)
97b67000 97b82000   luafv    luafv.sys    Tue Apr 21 20:13:02 2009 (49EE8B3E)
8b406000 8b477000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Apr 21 22:05:20 2009 (49EEA590)
91358000 91365000   modem    modem.sys    Tue Apr 21 20:53:57 2009 (49EE94D5)
97b3f000 97b4a000   monitor  monitor.sys  Tue Apr 21 20:23:20 2009 (49EE8DA8)
927f3000 92800000   mouclass mouclass.sys Tue Apr 21 20:08:39 2009 (49EE8A37)
97bc2000 97bcd000   mouhid   mouhid.sys   Tue Apr 21 20:43:33 2009 (49EE9265)
8b739000 8b74f000   mountmgr mountmgr.sys Tue Apr 21 20:08:51 2009 (49EE8A43)
9bd21000 9bd33000   mpsdrv   mpsdrv.sys   Tue Apr 21 20:51:21 2009 (49EE9439)
9bd33000 9bd56000   mrxsmb   mrxsmb.sys   Tue Apr 21 20:11:40 2009 (49EE8AEC)
9bd56000 9bd91000   mrxsmb10 mrxsmb10.sys Tue Apr 21 20:11:55 2009 (49EE8AFB)
9bd91000 9bdac000   mrxsmb20 mrxsmb20.sys Tue Apr 21 20:11:48 2009 (49EE8AF4)
8b608000 8b613000   Msfs     Msfs.SYS     Tue Apr 21 20:08:46 2009 (49EE8A3E)
8b67b000 8b683000   msisadrv msisadrv.sys Tue Apr 21 20:08:33 2009 (49EE8A31)
8b960000 8b98b000   msrpc    msrpc.sys    Tue Apr 21 20:09:19 2009 (49EE8A5F)
90fdf000 90fe9000   mssmbios mssmbios.sys Tue Apr 21 20:16:49 2009 (49EE8C21)
8bb4f000 8bb5f000   mup      mup.sys      Tue Apr 21 20:11:32 2009 (49EE8AE4)
8ba35000 8baec000   ndis     ndis.sys     Tue Apr 21 20:09:42 2009 (49EE8A76)
9138f000 9139a000   ndistapi ndistapi.sys Tue Apr 21 20:52:58 2009 (49EE949A)
9139a000 913bd000   ndiswan  ndiswan.sys  Tue Apr 21 20:53:08 2009 (49EE94A4)
97a5d000 97a6e000   NDProxy  NDProxy.SYS  Tue Apr 21 20:53:01 2009 (49EE949D)
90f3b000 90f49000   netbios  netbios.sys  Tue Apr 21 20:52:28 2009 (49EE947C)
90e8a000 90ebc000   netbt    netbt.sys    Tue Apr 21 20:09:39 2009 (49EE8A73)
8baec000 8bb2a000   NETIO    NETIO.SYS    Tue Apr 21 20:10:05 2009 (49EE8A8D)
8b613000 8b621000   Npfs     Npfs.SYS     Tue Apr 21 20:08:49 2009 (49EE8A41)
90fd5000 90fdf000   nsiproxy nsiproxy.sys Tue Apr 21 20:09:25 2009 (49EE8A65)
82a1e000 82e2d000   nt       ntkrpamp.exe Tue Apr 21 20:13:18 2009 (49EE8B4E)
8b831000 8b960000   Ntfs     Ntfs.sys     Tue Apr 21 20:09:31 2009 (49EE8A6B)
8ba1f000 8ba26000   Null     Null.SYS     Tue Apr 21 20:08:37 2009 (49EE8A35)
92720000 92721080   nvBridge nvBridge.kmd Sun Sep 27 16:56:53 2009 (4ABFFBC5)
91e0f000 9271f160   nvlddmkm nvlddmkm.sys Sun Sep 27 17:13:17 2009 (4ABFFF9D)
90f1d000 90f3b000   pacer    pacer.sys    Tue Apr 21 20:52:32 2009 (49EE9480)
91338000 91350000   parport  parport.sys  Tue Apr 21 20:44:01 2009 (49EE9281)
8b6b8000 8b6c9000   partmgr  partmgr.sys  Tue Apr 21 20:08:57 2009 (49EE8A49)
9bdac000 9bdb3000   parvdm   parvdm.sys   Tue Apr 21 20:43:55 2009 (49EE927B)
8b683000 8b6ad000   pci      pci.sys      Tue Apr 21 20:08:40 2009 (49EE8A38)
8b724000 8b72b000   pciide   pciide.sys   Tue Apr 21 20:08:44 2009 (49EE8A3C)
8b72b000 8b739000   PCIIDEX  PCIIDEX.SYS  Tue Apr 21 20:08:40 2009 (49EE8A38)
8b800000 8b80e000   pcw      pcw.sys      Tue Apr 21 20:08:34 2009 (49EE8A32)
9e826000 9e8bd000   peauth   peauth.sys   Tue Apr 21 21:40:09 2009 (49EE9FA9)
97abe000 97aed000   portcls  portcls.sys  Tue Apr 21 20:49:26 2009 (49EE93C6)
8b477000 8b488000   PSHED    PSHED.dll    Tue Apr 21 22:09:07 2009 (49EEA673)
8b7c9000 8b7d1b80   PxHelp20 PxHelp20.sys Fri Feb 02 13:23:57 2007 (45C3ABED)
91377000 9138f000   rasl2tp  rasl2tp.sys  Tue Apr 21 20:53:07 2009 (49EE94A3)
913bd000 913d5000   raspppoe raspppoe.sys Tue Apr 21 20:53:24 2009 (49EE94B4)
913d5000 913ec000   raspptp  raspptp.sys  Tue Apr 21 20:53:17 2009 (49EE94AD)
91000000 91017000   rassstp  rassstp.sys  Tue Apr 21 20:53:30 2009 (49EE94BA)
90f94000 90fd5000   rdbss    rdbss.sys    Tue Apr 21 20:11:43 2009 (49EE8AEF)
913f3000 913fd000   rdpbus   rdpbus.sys   Tue Apr 21 21:01:12 2009 (49EE9688)
8ba2d000 8ba35000   RDPCDD   RDPCDD.sys   Tue Apr 21 21:00:11 2009 (49EE964B)
8b7f3000 8b7fb000   rdpencdd rdpencdd.sys Tue Apr 21 21:00:11 2009 (49EE964B)
8b600000 8b608000   rdprefmp rdprefmp.sys Tue Apr 21 21:00:11 2009 (49EE964B)
8bc00000 8bc2d000   rdyboost rdyboost.sys Tue Apr 21 20:19:32 2009 (49EE8CC4)
913ec000 913f2a00   RimSerial RimSerial.sys Mon Nov 24 09:02:13 2008 (492ADE15)
91350000 91358000   RootMdm  RootMdm.sys  Tue Apr 21 20:53:55 2009 (49EE94D3)
9bc70000 9bc83000   rspndr   rspndr.sys   Tue Apr 21 20:51:50 2009 (49EE9456)
92a00000 92a32000   Rt86win7 Rt86win7.sys Thu Aug 20 09:04:54 2009 (4A8D7426)
9e995000 9e996200   RTCore32 RTCore32.sys Tue May 24 23:39:05 2005 (42941D89)
90f86000 90f93880   SCDEmu   SCDEmu.SYS   Sun Jul 26 19:43:19 2009 (4A6D1447)
9e8bd000 9e8c7000   secdrv   secdrv.SYS   Wed Sep 13 06:18:32 2006 (45080528)
92fe9000 92ff3000   serenum  serenum.sys  Tue Apr 21 20:43:55 2009 (49EE927B)
90f49000 90f63000   serial   serial.sys   Tue Apr 21 20:44:02 2009 (49EE9282)
8bdf8000 8be00000   spldr    spldr.sys    Wed Mar 25 12:16:08 2009 (49CA82F8)
9e944000 9e995000   srv      srv.sys      Tue Apr 21 20:12:29 2009 (49EE8B1D)
9e8f5000 9e944000   srv2     srv2.sys     Wed Sep 09 20:10:12 2009 (4AA86E14)
9e8c7000 9e8e8000   srvnet   srvnet.sys   Tue Apr 21 20:12:06 2009 (49EE8B06)
92a3d000 92a3e380   swenum   swenum.sys   Tue Apr 21 20:43:34 2009 (49EE9266)
8bc3b000 8bd80000   tcpip    tcpip.sys    Tue Apr 21 20:10:47 2009 (49EE8AB7)
9e8e8000 9e8f5000   tcpipreg tcpipreg.sys Tue Apr 21 20:52:46 2009 (49EE948E)
90e28000 90e33000   TDI      TDI.SYS      Tue Apr 21 20:09:31 2009 (49EE8A6B)
90e11000 90e28000   tdx      tdx.sys      Tue Apr 21 20:09:29 2009 (49EE8A69)
90f76000 90f86000   termdd   termdd.sys   Tue Apr 21 21:00:07 2009 (49EE9647)
82680000 82689000   TSDDD    TSDDD.dll    Tue Apr 21 21:00:10 2009 (49EE964A)
910fa000 91119000   tunnel   tunnel.sys   Tue Apr 21 20:52:38 2009 (49EE9486)
91e00000 91e0e000   umbus    umbus.sys    Tue Apr 21 20:50:03 2009 (49EE93EB)
97b4a000 97b61000   usbccgp  usbccgp.sys  Tue Apr 21 20:49:53 2009 (49EE93E1)
97b3d000 97b3e700   USBD     USBD.SYS     Tue Apr 21 20:49:30 2009 (49EE93CA)
927e4000 927f3000   usbehci  usbehci.sys  Tue Apr 21 20:49:40 2009 (49EE93D4)
97a0f000 97a53000   usbhub   usbhub.sys   Tue Apr 21 20:50:25 2009 (49EE9401)
91164000 911ae000   USBPORT  USBPORT.SYS  Tue Apr 21 20:49:38 2009 (49EE93D2)
97b26000 97b3d000   USBSTOR  USBSTOR.SYS  Tue Apr 21 20:49:42 2009 (49EE93D6)
927d9000 927e4000   usbuhci  usbuhci.sys  Tue Apr 21 20:49:34 2009 (49EE93CE)
8b6ad000 8b6b8000   vdrvroot vdrvroot.sys Tue Apr 21 20:44:49 2009 (49EE92B1)
8b817000 8b823000   vga      vga.sys      Tue Apr 21 20:23:17 2009 (49EE8DA5)
8b7d2000 8b7f3000   VIDEOPRT VIDEOPRT.SYS Tue Apr 21 20:23:20 2009 (49EE8DA8)
8bdb1000 8bdb9380   vmstorfl vmstorfl.sys Tue Apr 21 20:26:29 2009 (49EE8E65)
8b6c9000 8b6d9000   volmgr   volmgr.sys   Tue Apr 21 20:08:47 2009 (49EE8A3F)
8b6d9000 8b724000   volmgrx  volmgrx.sys  Tue Apr 21 20:09:06 2009 (49EE8A52)
8bdba000 8bdf8000   volsnap  volsnap.sys  Tue Apr 21 20:08:58 2009 (49EE8A4A)
90f63000 90f76000   wanarp   wanarp.sys   Tue Apr 21 20:53:29 2009 (49EE94B9)
8b823000 8b830000   watchdog watchdog.sys Tue Apr 21 20:21:46 2009 (49EE8D4A)
8b57d000 8b5ee000   Wdf01000 Wdf01000.sys Tue Apr 21 20:09:01 2009 (49EE8A4D)
8b5ee000 8b5fc000   WDFLDR   WDFLDR.SYS   Tue Apr 21 20:08:47 2009 (49EE8A3F)
90f16000 90f1d000   wfplwf   wfplwf.sys   Tue Apr 21 20:52:24 2009 (49EE9478)
82420000 8266a000   win32k   win32k.sys   Tue Apr 21 20:23:55 2009 (49EE8DCB)
8b672000 8b67b000   WMILIB   WMILIB.SYS   Tue Apr 21 20:08:46 2009 (49EE8A3E)
8bbc7000 8bbe1000   WudfPf   WudfPf.sys   Tue Apr 21 20:48:41 2009 (49EE9399)
9bc3f000 9bc5f480   WUDFRd   WUDFRd.sys   Tue Apr 21 20:49:10 2009 (49EE93B6)
911cd000 911f3780   xcbdaV   xcbdaV.sys   Mon Sep 15 00:57:29 2008 (48CE1569)
9129f000 91338000   xcfeV    xcfeV.sys    Mon Sep 15 00:58:06 2008 (48CE158E)
92a3f000 92fe9000   xchalV   xchalV.sys   Mon Sep 15 00:57:26 2008 (48CE1566)
91248000 9129f000   xcmemV   xcmemV.sys   Mon Sep 15 00:58:06 2008 (48CE158E)
Unloaded modules:
a7a25000 a7a8f000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7a98000 a7a9e000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b61000 97b67000   RimUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b82000 97b8b000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b67000 97b70000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97b70000 97b91000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbc7000 8bbd4000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbd4000 8bbdf000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbdf000 8bbe8000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8bbe8000 8bbf9000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
1: kd> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion 
kdcom fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
win32k fver =  pver =
TSDDD fver =  pver =
cdd fver =  pver =
nt fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
hal fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mcupdate_GenuineIntel fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
PSHED fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
BOOTVID fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
CLFS fver =  pver =
CI fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Wdf01000 fver = 1.9.7100.0 (winmain_win7rc.090421-1700) pver = 1.9.7100.0
WDFLDR fver =  pver =
rdprefmp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Msfs fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Npfs fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ACPI fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
WMILIB fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
msisadrv fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
pci fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
vdrvroot fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
partmgr fver =  pver =
volmgr fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
volmgrx fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
pciide fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
PCIIDEX fver =  pver =
mountmgr fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
atapi fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ataport fver =  pver =
amdxata fver =  pver =
fltmgr fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
fileinfo fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
PxHelp20 fver =  pver =
VIDEOPRT fver =  pver =
rdpencdd fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
pcw fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Fs_Rec fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
vga fver =  pver =
watchdog fver =  pver =
Ntfs fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
msrpc fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ksecdd fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
cng fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
cdrom fver =  pver =
Null fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Beep fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
RDPCDD fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ndis fver =  pver =
NETIO fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ksecpkg fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mup fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
fvevol fver =  pver =
disk fver =  pver =
CLASSPNP fver =  pver =
WudfPf fver =  pver =
rdyboost fver =  pver =
hwpolicy fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
tcpip fver =  pver =
fwpkclnt fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
vmstorfl fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
volsnap fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
spldr fver = 6.1.7069.0 (fbl_security_bugfix(sepbld-s).090325-1203) pver = 6.1.7069.0
tdx fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
TDI fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
avgtdix fver =  pver =
netbt fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
afd fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
wfplwf fver =  pver =
pacer fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
netbios fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
serial fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
wanarp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
termdd fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
SCDEmu fver =  pver =
rdbss fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
nsiproxy fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mssmbios fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
discache fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
rassstp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
csc fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
dfsc fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
blbdrive fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
avgmfx86 fver =  pver =
avgldx86 fver =  pver =
tunnel fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
intelppm fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
dxgmms1 fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
USBPORT fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
HDAudBus fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
xcbdaV fver = ViXS XCode (R) AVStream Driver Version 6,0,129,0 (winmain(edkeith).080905-0005) pver = 6.00
kbdclass fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ks fver =  pver =
BdaSup fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
xcmemV fver = ViXS XCode (R) AVStream Memory Init Library Ver 6,0,129,0 (winmain(edkeith).080905-0005) pver = 6.00
xcfeV fver = ViXS XCode (R) AVStream Front-End Library Ver 6,0,129,0 (winmain(edkeith).080905-0005) pver = 6.00
parport fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
RootMdm fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
modem fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
AgileVpn fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
rasl2tp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ndistapi fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
ndiswan fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
raspppoe fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
raspptp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
RimSerial fver =  pver =
rdpbus fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
umbus fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
nvlddmkm fver =  pver =
nvBridge fver =  pver =
dxgkrnl fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
usbuhci fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
usbehci fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mouclass fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Rt86win7 fver =  pver =
fdc fver =  pver =
swenum fver =  pver =
xchalV fver = ViXS XCode (R) AVStream HAL Library Ver 6,0,129,0 (winmain(edkeith).080905-0005) pver = 6.00
serenum fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
CompositeBus fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
usbhub fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
flpydisk fver =  pver =
NDProxy fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
HdAudio fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
portcls fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
drmk fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
Dxapi fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
cdfs fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
USBSTOR fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
USBD fver =  pver =
monitor fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
usbccgp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
luafv fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
hidusb fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
HIDCLASS fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
HIDPARSE fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
kbdhid fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mouhid fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
crashdmp fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
dump_dumpata fver =  pver =
dump_atapi fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
dump_dumpfve fver =  pver =
WUDFRd fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
lltdio fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
rspndr fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
HTTP fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
bowser fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mpsdrv fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mrxsmb fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mrxsmb10 fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
mrxsmb20 fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
parvdm fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
peauth fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
secdrv fver =  pver =
srvnet fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
tcpipreg fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
srv2 fver = 6.1.7100.4137 (winmain_win7rc.090909-1520) pver = 6.1.7100.4137
srv fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
RTCore32 fver =  pver =
asyncmac fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
fastfat fver = 6.1.7100.0 (winmain_win7rc.090421-1700) pver = 6.1.7100.0
1: kd> .bugcheck
Bugcheck code 0000007F
Arguments 0000000d 00000000 00000000 00000000
1: kd> .bugcheck
Bugcheck code 0000007F
Arguments 0000000d 00000000 00000000 00000000
1: kd> !analyze -show 0x7f
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000000, EXCEPTION_DIVIDED_BY_ZERO
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

 

[H2SO4]

@ H2SO4 - I cannot possibly thank you enough for the tips relating to using the executable path, reload, etc... I happen to be running Windows 7 7100 x86 - the same OS build as Sauronis. I was able to get rid of the symbol errors .

No problem at all JC

To misappropriate a common phrase, technical knowledge is 90% of debugging, and the other half is doing battle with the @#$%^& symbol server!

 

[Sauronis]

I am waiting on my University to get us our Win 7 Keys (found out last week we are entitled to a free copy due to MSDN AA ), so I will just sit tight for now then I will be upgrading to Win 7 pro as well as get rid of that old driver.

Should have it within the next few days, hopefully that will clear up the video driver issues. Other then that I am up to date driver wise.

As usual, thanks guys