- Thread Author
- #1
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, 8df079b4, 8df07590, 82f03cec}
Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteScb+214 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 001904fb
Arg2: 8df079b4
Arg3: 8df07590
Arg4: 82f03cec
Debugging Details:
------------------
EXCEPTION_RECORD:  8df079b4 -- (.exr 0xffffffff8df079b4)
ExceptionAddress: 82f03cec (nt!RtlSubtreePredecessor+0x00000015)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 5659a5e5
Attempt to read from address 5659a5e5
CONTEXT:  8df07590 -- (.cxr 0xffffffff8df07590)
eax=5659a5dd ebx=00000000 ecx=88aee3d4 edx=00000000 esi=08000000 edi=00000000
eip=82f03cec esp=8df07a7c ebp=8df07a7c iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010206
nt!RtlSubtreePredecessor+0x15:
82f03cec 8b4808          mov     ecx,dword ptr [eax+8] ds:0023:5659a5e5=????????
Resetting default scope
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  SYSTEM
CURRENT_IRQL:  0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1:  00000000
EXCEPTION_PARAMETER2:  5659a5e5
READ_ADDRESS: GetPointerFromAddress: unable to read from 82fa6848
Unable to read MiSystemVaType memory at 82f85e40
 5659a5e5 
FOLLOWUP_IP: 
Ntfs!NtfsDeleteScb+214
8bef18ac 8b06            mov     eax,dword ptr [esi]
FAULTING_IP: 
nt!RtlSubtreePredecessor+15
82f03cec 8b4808          mov     ecx,dword ptr [eax+8]
BUGCHECK_STR:  0x24
LAST_CONTROL_TRANSFER:  from 82f03a1c to 82f03cec
STACK_TEXT:  
8df07a7c 82f03a1c 08000000 88dddac4 08000000 nt!RtlSubtreePredecessor+0x15
8df07a94 8be0f839 08000000 00000000 08000000 nt!RtlDeleteNoSplay+0x20
8df07aa8 8be0faf4 08000000 88dddac0 88dddac0 fltmgr!TreeUnlinkNoBalance+0x13
8df07ac0 8be195f5 88dddac4 ffffffff ffffffff fltmgr!TreeUnlinkMulti+0x22
8df07adc 8be26793 88dddac4 88dddac0 ffffffff fltmgr!FltpDeleteContextList+0x2f
8df07afc 8be269b4 88ddda98 ab13c580 00000000 fltmgr!CleanupStreamListCtrl+0x1b
8df07b10 830bc289 88ddda9c bf670f28 00000000 fltmgr!DeleteStreamListCtrlCallback+0x5a
8df07b50 8bef18ac ab13c580 ab13c490 ab13c580 nt!FsRtlTeardownPerStreamContexts+0x13a
8df07b6c 8bee20b5 00000705 ab13c4b8 ab13c490 Ntfs!NtfsDeleteScb+0x214
8df07b84 8be659e6 85d580a8 ab13c580 00000000 Ntfs!NtfsRemoveScb+0xc5
8df07ba0 8bef12e7 85d580a8 ab13c490 00000000 Ntfs!NtfsPrepareFcbForRemoval+0x62
8df07be4 8be612cb 85d580a8 ab13c580 ab13c728 Ntfs!NtfsTeardownStructures+0x68
8df07c0c 8bef5341 85d580a8 ab13c580 ab13c728 Ntfs!NtfsDecrementCloseCounts+0xaf
8df07c6c 8bef9424 85d580a8 ab13c580 ab13c490 Ntfs!NtfsCommonClose+0x4f2
8df07d00 82ebaa6b 00000000 00000000 857b5d48 Ntfs!NtfsFspClose+0x118
8df07d50 83045fda 00000000 bf6709e8 00000000 nt!ExpWorkerThread+0x10d
8df07d90 82eee1d9 82eba95e 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
SYMBOL_STACK_INDEX:  8
SYMBOL_NAME:  Ntfs!NtfsDeleteScb+214
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME:  Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4d799527
STACK_COMMAND:  .cxr 0xffffffff8df07590 ; kb
FAILURE_BUCKET_ID:  0x24_Ntfs!NtfsDeleteScb+214
BUCKET_ID:  0x24_Ntfs!NtfsDeleteScb+21495bc4000 95bf1000   1394ohci 1394ohci.sys Sat Nov 20 10:01:11 2010 (4CE79C67)
8bc89000 8bcd1000   ACPI     ACPI.sys     Sat Nov 20 08:37:52 2010 (4CE788E0)
9171a000 91774000   afd      afd.sys      Mon Apr 25 03:18:00 2011 (4DB4D9D8)
945a9000 945bb000   AgileVpn AgileVpn.sys Tue Jul 14 00:55:00 2009 (4A5BC954)
8bdf3000 8bdfc000   amdxata  amdxata.sys  Fri Mar 19 16:19:01 2010 (4BA3A3F5)
8bdea000 8bdf3000   atapi    atapi.sys    Tue Jul 14 00:11:15 2009 (4A5BBF13)
8bbb0000 8bbd3000   ataport  ataport.SYS  Sat Nov 20 08:38:00 2010 (4CE788E8)
9a800000 9a84d000   ATMFD    ATMFD.DLL    unavailable (00000000)
9166d000 9167e000   avgfwd6x avgfwd6x.sys Mon Jul 12 02:37:25 2010 (4C3A71D5)
a25b0000 a25cf300   AVGIDSDriver AVGIDSDriver.Sys Fri May 27 15:05:52 2011 (4DDFAFC0)
8c3fa000 8c3fdf80   AVGIDSEH AVGIDSEH.Sys Tue Feb 22 05:22:33 2011 (4D634819)
a255b000 a255f400   AVGIDSFilter AVGIDSFilter.Sys Thu Feb 10 04:59:07 2011 (4D53709B)
a2488000 a248bb80   AVGIDSShim AVGIDSShim.Sys Thu Feb 10 04:59:09 2011 (4D53709D)
9453a000 94575100   avgldx86 avgldx86.sys Fri Jan 07 04:35:29 2011 (4D269811)
8bff2000 8bffe000   avgmfx86 avgmfx86.sys Tue Mar 01 12:23:55 2011 (4D6CE55B)
8c1f9000 8c1ff500   avgrkx86 avgrkx86.sys Wed Mar 16 14:05:26 2011 (4D80C3A6)
916a1000 916e7e80   avgtdix  avgtdix.sys  Mon Apr 04 22:53:24 2011 (4D9A3DD4)
8bbe4000 8bbeb000   Beep     Beep.SYS     Tue Jul 14 00:45:00 2009 (4A5BC6FC)
9452c000 9453a000   blbdrive blbdrive.sys Tue Jul 14 00:23:04 2009 (4A5BC1D8)
8babb000 8bac3000   BOOTVID  BOOTVID.dll  Tue Jul 14 02:04:34 2009 (4A5BD9A2)
95dba000 95dd3000   bowser   bowser.sys   Wed Feb 23 04:47:32 2011 (4D649164)
9abb0000 9abce000   cdd      cdd.dll      unavailable (00000000)
8ba00000 8ba1f000   cdrom    cdrom.sys    Sat Nov 20 08:38:09 2010 (4CE788F1)
8bb05000 8bbb0000   CI       CI.dll       Sat Nov 20 12:05:17 2010 (4CE7B97D)
8c1d4000 8c1f9000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:11:20 2009 (4A5BBF18)
8bac3000 8bb05000   CLFS     CLFS.SYS     Tue Jul 14 00:11:10 2009 (4A5BBF0E)
8c019000 8c076000   cng      cng.sys      Tue Jul 14 00:32:55 2009 (4A5BC427)
95a1e000 95a2b000   CompositeBus CompositeBus.sys Sat Nov 20 09:50:21 2010 (4CE799DD)
963ab000 963b8000   crashdmp crashdmp.sys Tue Jul 14 00:45:50 2009 (4A5BC72E)
944b0000 94514000   csc      csc.sys      Sat Nov 20 08:44:32 2010 (4CE78A70)
94514000 9452c000   dfsc     dfsc.sys     Sat Nov 20 08:42:32 2010 (4CE789F8)
944a4000 944b0000   discache discache.sys Tue Jul 14 00:24:04 2009 (4A5BC214)
8c200000 8c211000   disk     disk.sys     Tue Jul 14 00:11:28 2009 (4A5BBF20)
96360000 96379000   drmk     drmk.sys     Tue Jul 14 01:36:05 2009 (4A5BD2F5)
917c2000 917fd000   dtsoftbus01 dtsoftbus01.sys Thu Jan 13 08:26:59 2011 (4D2EB753)
963c3000 963cc000   dump_atapi dump_atapi.sys Tue Jul 14 00:11:15 2009 (4A5BBF13)
963b8000 963c3000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:11:16 2009 (4A5BBF14)
963cc000 963dd000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:12:47 2009 (4A5BBF6F)
96000000 9600a000   Dxapi    Dxapi.sys    Tue Jul 14 00:25:25 2009 (4A5BC265)
95a2b000 95ae2000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 09:08:14 2010 (4CE78FFE)
95ae2000 95b1b000   dxgmms1  dxgmms1.sys  Thu Feb 03 03:45:05 2011 (4D4A24C1)
8be39000 8be4a000   fileinfo fileinfo.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
8be05000 8be39000   fltmgr   fltmgr.sys   Tue Jul 14 00:11:13 2009 (4A5BBF11)
8c084000 8c08d000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:11:14 2009 (4A5BBF12)
a5e80000 a5e88f00   FsUsbExDisk FsUsbExDisk.SYS Fri May 28 02:03:10 2010 (4BFF164E)
8bfb7000 8bfe9000   fvevol   fvevol.sys   Sat Nov 20 08:40:22 2010 (4CE78976)
8c35c000 8c38d000   fwpkclnt fwpkclnt.sys Sat Nov 20 08:39:08 2010 (4CE7892C)
95a18000 95a1d280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:16:53 2009 (4A1151B5)
8c3f9000 8c3f9680   giveio   giveio.sys   Thu Apr 04 03:33:25 1996 (316334F5)
82e06000 82e3d000   hal      halmacpi.dll Sat Nov 20 08:37:38 2010 (4CE788D2)
95b80000 95b9f000   HDAudBus HDAudBus.sys Sat Nov 20 09:59:28 2010 (4CE79C00)
96384000 96397000   HIDCLASS HIDCLASS.SYS Sat Nov 20 09:59:37 2010 (4CE79C09)
96397000 9639d480   HIDPARSE HIDPARSE.SYS Tue Jul 14 00:50:59 2009 (4A5BC863)
96379000 96384000   hidusb   hidusb.sys   Sat Nov 20 09:59:38 2010 (4CE79C0A)
95d35000 95dba000   HTTP     HTTP.sys     Sat Nov 20 08:40:17 2010 (4CE78971)
8c3f1000 8c3f9000   hwpolicy hwpolicy.sys Sat Nov 20 08:37:35 2010 (4CE788CF)
94597000 945a9000   intelppm intelppm.sys Tue Jul 14 00:11:03 2009 (4A5BBF07)
95c45000 95c52000   kbdclass kbdclass.sys Tue Jul 14 00:11:15 2009 (4A5BBF13)
963f4000 96400000   kbdhid   kbdhid.sys   Sat Nov 20 09:50:10 2010 (4CE799D2)
80bc0000 80bc8000   kdcom    kdcom.dll    Tue Jul 14 02:08:58 2009 (4A5BDAAA)
95c61000 95c95000   ks       ks.sys       Sat Nov 20 09:50:17 2010 (4CE799D9)
8bfa4000 8bfb7000   ksecdd   ksecdd.sys   Sat Nov 20 08:38:54 2010 (4CE7891E)
8c182000 8c1a7000   ksecpkg  ksecpkg.sys  Tue Jul 14 00:34:00 2009 (4A5BC468)
95d12000 95d22000   lltdio   lltdio.sys   Tue Jul 14 00:53:18 2009 (4A5BC8EE)
96015000 96030000   luafv    luafv.sys    Tue Jul 14 00:15:44 2009 (4A5BC020)
8ba25000 8baaa000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 12:00:54 2010 (4CE7B876)
9600a000 96015000   monitor  monitor.sys  Tue Jul 14 00:25:58 2009 (4A5BC286)
95c52000 95c5f000   mouclass mouclass.sys Tue Jul 14 00:11:15 2009 (4A5BBF13)
963a0000 963ab000   mouhid   mouhid.sys   Tue Jul 14 00:45:08 2009 (4A5BC704)
8bd98000 8bdae000   mountmgr mountmgr.sys Sat Nov 20 08:38:09 2010 (4CE788F1)
95dd3000 95de5000   mpsdrv   mpsdrv.sys   Tue Jul 14 00:52:52 2009 (4A5BC8D4)
a2408000 a242b000   mrxsmb   mrxsmb.sys   Wed Apr 27 03:17:20 2011 (4DB77CB0)
a242b000 a2466000   mrxsmb10 mrxsmb10.sys Sat Jul 09 03:29:57 2011 (4E17BD25)
a2466000 a2481000   mrxsmb20 mrxsmb20.sys Wed Apr 27 03:17:26 2011 (4DB77CB6)
91654000 9165f000   Msfs     Msfs.SYS     Tue Jul 14 00:11:26 2009 (4A5BBF1E)
8bcda000 8bce2000   msisadrv msisadrv.sys Tue Jul 14 00:11:09 2009 (4A5BBF0D)
8bf79000 8bfa4000   msrpc    msrpc.sys    Tue Jul 14 00:11:59 2009 (4A5BBF3F)
9449a000 944a4000   mssmbios mssmbios.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
8c3e1000 8c3f1000   mup      mup.sys      Tue Jul 14 00:14:14 2009 (4A5BBFC6)
8c08d000 8c144000   ndis     ndis.sys     Sat Nov 20 08:39:19 2010 (4CE78937)
955f5000 95600000   ndistapi ndistapi.sys Tue Jul 14 00:54:24 2009 (4A5BC930)
945d3000 945f5000   ndiswan  ndiswan.sys  Sat Nov 20 10:07:48 2010 (4CE79DF4)
95ce7000 95cf8000   NDProxy  NDProxy.SYS  Sat Nov 20 10:07:39 2010 (4CE79DEB)
9179a000 917a8000   netbios  netbios.sys  Tue Jul 14 00:53:54 2009 (4A5BC912)
916e8000 9171a000   netbt    netbt.sys    Sat Nov 20 08:39:22 2010 (4CE7893A)
8c144000 8c182000   NETIO    NETIO.SYS    Sat Nov 20 08:40:03 2010 (4CE78963)
9165f000 9166d000   Npfs     Npfs.SYS     Tue Jul 14 00:11:31 2009 (4A5BBF23)
94490000 9449a000   nsiproxy nsiproxy.sys Tue Jul 14 00:12:08 2009 (4A5BBF48)
82e3d000 8324f000   nt       ntkrpamp.exe Thu Jun 23 03:23:05 2011 (4E02A389)
8be4a000 8bf79000   Ntfs     Ntfs.sys     Fri Mar 11 03:21:11 2011 (4D799527)
8bc00000 8bc07000   Null     Null.SYS     Tue Jul 14 00:11:12 2009 (4A5BBF10)
955f1000 955f5000   nvBridge nvBridge.kmd Sat May 21 04:57:55 2011 (4DD73843)
94c0b000 955f1000   nvlddmkm nvlddmkm.sys Wed Aug 03 10:06:24 2011 (4E390F90)
9177b000 9179a000   pacer    pacer.sys    Tue Jul 14 00:53:58 2009 (4A5BC916)
95a00000 95a18000   parport  parport.sys  Tue Jul 14 00:45:34 2009 (4A5BC71E)
8bd17000 8bd28000   partmgr  partmgr.sys  Sat Nov 20 08:38:14 2010 (4CE788F6)
a2481000 a2488000   parvdm   parvdm.sys   Tue Jul 14 00:45:29 2009 (4A5BC719)
8bce2000 8bd0c000   pci      pci.sys      Sat Nov 20 08:37:57 2010 (4CE788E5)
8bd83000 8bd8a000   pciide   pciide.sys   Tue Jul 14 00:11:19 2009 (4A5BBF17)
8bd8a000 8bd98000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:11:15 2009 (4A5BBF13)
8c076000 8c084000   pcw      pcw.sys      Tue Jul 14 00:11:10 2009 (4A5BBF0E)
a248c000 a2523000   peauth   peauth.sys   Tue Jul 14 01:35:44 2009 (4A5BD2E0)
96331000 96360000   portcls  portcls.sys  Tue Jul 14 00:51:00 2009 (4A5BC864)
8baaa000 8babb000   PSHED    PSHED.dll    Tue Jul 14 02:09:36 2009 (4A5BDAD0)
945bb000 945d3000   rasl2tp  rasl2tp.sys  Tue Jul 14 00:54:33 2009 (4A5BC939)
94400000 94418000   raspppoe raspppoe.sys Tue Jul 14 00:54:53 2009 (4A5BC94D)
95c0d000 95c24000   raspptp  raspptp.sys  Tue Jul 14 00:54:47 2009 (4A5BC947)
95c24000 95c3b000   rassstp  rassstp.sys  Tue Jul 14 00:54:57 2009 (4A5BC951)
9444f000 94490000   rdbss    rdbss.sys    Sat Nov 20 08:42:44 2010 (4CE78A04)
95c3b000 95c45000   rdpbus   rdpbus.sys   Tue Jul 14 01:02:40 2009 (4A5BCB20)
9163c000 91644000   RDPCDD   RDPCDD.sys   Sat Nov 20 10:22:19 2010 (4CE7A15B)
91644000 9164c000   rdpencdd rdpencdd.sys Tue Jul 14 01:01:39 2009 (4A5BCAE3)
9164c000 91654000   rdprefmp rdprefmp.sys Tue Jul 14 01:01:41 2009 (4A5BCAE5)
8c1a7000 8c1d4000   rdyboost rdyboost.sys Sat Nov 20 09:00:07 2010 (4CE78E17)
95d22000 95d35000   rspndr   rspndr.sys   Tue Jul 14 00:53:20 2009 (4A5BC8F0)
95b9f000 95bc4000   Rt86win7 Rt86win7.sys Thu Feb 26 09:04:22 2009 (49A65B16)
96035000 963302c0   RTKVHDA  RTKVHDA.sys  Tue Jul 06 11:02:40 2010 (4C32FF40)
a2523000 a252d000   secdrv   secdrv.SYS   Wed Sep 13 14:18:32 2006 (45080528)
95bf1000 95bfb000   serenum  serenum.sys  Tue Jul 14 00:45:27 2009 (4A5BC717)
917a8000 917c2000   serial   serial.sys   Tue Jul 14 00:45:33 2009 (4A5BC71D)
8c3dd000 8c3e0a00   speedfan speedfan.sys Sat Dec 18 11:03:50 2010 (4D0C9516)
8c3d5000 8c3dd000   spldr    spldr.sys    Mon May 11 17:13:47 2009 (4A084EBB)
a5e2e000 a5e80000   srv      srv.sys      Fri Apr 29 03:46:30 2011 (4DBA2686)
a2560000 a25b0000   srv2     srv2.sys     Fri Apr 29 03:46:13 2011 (4DBA2675)
a252d000 a254e000   srvnet   srvnet.sys   Fri Apr 29 03:46:08 2011 (4DBA2670)
95c5f000 95c60380   swenum   swenum.sys   Tue Jul 14 00:45:08 2009 (4A5BC704)
8c212000 8c35c000   tcpip    tcpip.sys    Tue Jun 21 04:16:03 2011 (4E000CF3)
a254e000 a255b000   tcpipreg tcpipreg.sys Sat Nov 20 10:07:13 2010 (4CE79DD1)
91695000 916a1000   TDI      TDI.SYS      Sat Nov 20 08:39:18 2010 (4CE78936)
9167e000 91695000   tdx      tdx.sys      Sat Nov 20 08:39:17 2010 (4CE78935)
9443e000 9444f000   termdd   termdd.sys   Sat Nov 20 10:21:10 2010 (4CE7A116)
9ab80000 9ab89000   TSDDD    TSDDD.dll    unavailable (00000000)
94576000 94597000   tunnel   tunnel.sys   Sat Nov 20 10:06:40 2010 (4CE79DB0)
95c95000 95ca3000   umbus    umbus.sys    Sat Nov 20 10:00:23 2010 (4CE79C37)
963dd000 963f4000   usbccgp  usbccgp.sys  Fri Mar 25 02:58:06 2011 (4D8C04BE)
9639e000 9639f700   USBD     USBD.SYS     Fri Mar 25 02:57:53 2011 (4D8C04B1)
95b71000 95b80000   usbehci  usbehci.sys  Fri Mar 25 02:57:58 2011 (4D8C04B6)
95ca3000 95ce7000   usbhub   usbhub.sys   Fri Mar 25 02:58:34 2011 (4D8C04DA)
95b26000 95b71000   USBPORT  USBPORT.SYS  Fri Mar 25 02:58:05 2011 (4D8C04BD)
95b1b000 95b26000   usbuhci  usbuhci.sys  Fri Mar 25 02:57:56 2011 (4D8C04B4)
8bd0c000 8bd17000   vdrvroot vdrvroot.sys Tue Jul 14 00:46:19 2009 (4A5BC74B)
8bbeb000 8bbf7000   vga      vga.sys      Tue Jul 14 00:25:50 2009 (4A5BC27E)
9160e000 9162f000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:25:49 2009 (4A5BC27D)
8bdae000 8bdd7180   vmbus    vmbus.sys    Sat Nov 20 09:14:58 2010 (4CE79192)
8c38d000 8c395380   vmstorfl vmstorfl.sys Sat Nov 20 09:14:37 2010 (4CE7917D)
8bd28000 8bd38000   volmgr   volmgr.sys   Sat Nov 20 08:38:06 2010 (4CE788EE)
8bd38000 8bd83000   volmgrx  volmgrx.sys  Tue Jul 14 00:11:41 2009 (4A5BBF2D)
8c396000 8c3d5000   volsnap  volsnap.sys  Sat Nov 20 08:38:13 2010 (4CE788F5)
9442b000 9443e000   wanarp   wanarp.sys   Sat Nov 20 10:07:45 2010 (4CE79DF1)
9162f000 9163c000   watchdog watchdog.sys Tue Jul 14 00:24:10 2009 (4A5BC21A)
8bc0a000 8bc7b000   Wdf01000 Wdf01000.sys Tue Jul 14 00:11:36 2009 (4A5BBF28)
8bc7b000 8bc89000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:11:25 2009 (4A5BBF1D)
91774000 9177b000   wfplwf   wfplwf.sys   Tue Jul 14 00:53:51 2009 (4A5BC90F)
9a920000 9ab6e000   win32k   win32k.sys   unavailable (00000000)
8bdd8000 8bdea000   winhv    winhv.sys    Sat Nov 20 08:38:15 2010 (4CE788F7)
8bcd1000 8bcda000   WMILIB   WMILIB.SYS   Tue Jul 14 00:11:22 2009 (4A5BBF1A)
95cf8000 95d12000   WudfPf   WudfPf.sys   Sat Nov 20 09:58:55 2010 (4CE79BDF)
Unloaded modules:
a5e89000 a5ef3000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0006A000
8c000000 8c00d000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
8c00d000 8c018000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
8bfe9000 8bff2000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
8bbd3000 8bbe4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000


 ).
).