BSOD: DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 tcpip.sys driver

Discussion in 'Windows 7 Blue Screen of Death (BSOD)' started by Akcook, Mar 17, 2011.

  1. Akcook

    Akcook New Member

    Joined:
    Mar 17, 2011
    Messages:
    4
    Likes Received:
    0
    Hello, I am trying to help my friend out with a BSOD problem he is having with is computer. Apparently it is occurring whenever he attempts to download a torrent or that is when he believes it happens. According to the mini dump, the problem has something to do with tcpip.sys driver. I tried searching through some of the related threads, but I did not really find anything directly related. Here is a link to the mini dump files, hopefully it works.
    https://cid-da95c55c9c2699aa.office.live.com/self.aspx/dmp^_files/dmp^_files.zip
    I'm not sure if its relevant, but his anti-virus program is Spyware Doctor.
    Anyways, hopefully this is enough information for a diagnosis. Any help would be much appreciated.
    Thank you.

    Here are the screens from CPU-Z and a text file from RAMMon
    CPUz Memory.PNG

    CPUz SPD.PNG

    CPUz SPD slot 1.PNG

    CPUz SPD slot 3.PNG

    CPUz SPD slot 4.PNG

    CPUz mainboard.PNG

    CPUz cpu.PNG
     

    Attached Files:

  2. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    1. RAM is set right and the sticks' rates are matching
    2. Your skydrive link gives me this:

     
  3. Akcook

    Akcook New Member

    Joined:
    Mar 17, 2011
    Messages:
    4
    Likes Received:
    0
    Thanks for the quick reply and sorry about the skydrive. I fixed the file on skydrive so people can view it now, I forgot to change the permissions.

    Thanks.
     
  4. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    WinDbg points to PCTools and NETIO.sys. The real culprit of your crashes is the outdated LAN driver.


    1. Update old drivers:


    ADMtek AN983/AN985 based ethernet adapter
    AN983X64.sys Thu May 19 04:14:27 2005

    Realtek Audio
    RTKVAC64.SYS Thu Jun 18 15:37:20 2009

    nForce motherboard
    nvm62x64.sys Fri Oct 17 17:01:06 2008

    nVidia video driver
    nvlddmkm.sys Sun Sep 27 20:12:06 2009




    2. Updating the above drivers will fix your blue screens. However, should crashes reoccur, uninstall PCTools and install MSE as the replacement:
    https://www.microsoft.com/security_essentials/










    Crash Dumps:

    Code:
    
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\021611-29468-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
    Machine Name:
    Kernel base = 0xfffff800`02a0b000 PsLoadedModuleList = 0xfffff800`02c48e50
    Debug session time: Wed Feb 16 07:01:04.540 2011 (UTC - 4:00)
    System Uptime: 0 days 14:09:59.461
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ................................
    Loading User Symbols
    Loading unloaded module list
    .....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck D1, {0, 2, 0, fffff8800188b7a0}
    
    Unable to load image \Device\Harddisk1\Partition2\Windows\system32\drivers\PctWfpFilter64.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for PctWfpFilter64.sys
    *** ERROR: Module load completed but symbols could not be loaded for PctWfpFilter64.sys
    Probably caused by : NETIO.SYS ( NETIO!NetioDereferenceNetBufferList+86 )
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff8800188b7a0, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cb30e0
     0000000000000000 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip! ?? ::FNODOBFM::`string'+56f4
    fffff880`0188b7a0 488b01          mov     rax,qword ptr [rcx]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xD1
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff880054bf520 -- (.trap 0xfffff880054bf520)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa8001d3bc20 rbx=0000000000000000 rcx=0000000000000000
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff8800188b7a0 rsp=fffff880054bf6b0 rbp=0000000000000000
     r8=fffffa8001d3bc20  r9=00000000000000d0 r10=fffff80002bf6b80
    r11=fffffa8003dded30 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na pe nc
    tcpip! ?? ::FNODOBFM::`string'+0x56f4:
    fffff880`0188b7a0 488b01          mov     rax,qword ptr [rcx] ds:07ff:00000000`00000000=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002a7aca9 to fffff80002a7b740
    
    STACK_TEXT:  
    fffff880`054bf3d8 fffff800`02a7aca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`054bf3e0 fffff800`02a79920 : fffffa80`04c2e080 fffffa80`03ddeb40 fffffa80`02725b50 fffffa80`0273d910 : nt!KiBugCheckDispatch+0x69
    fffff880`054bf520 fffff880`0188b7a0 : fffffa80`03ddeb40 fffff880`02d08aca fffff880`206c644d fffffa80`03fcaa70 : nt!KiPageFault+0x260
    fffff880`054bf6b0 fffff880`017526a6 : fffffa80`03ddeb40 00000000`0274f000 00000000`00000000 fffffa80`0274f000 : tcpip! ?? ::FNODOBFM::`string'+0x56f4
    fffff880`054bf700 fffff880`0175035d : 00000000`00000000 fffffa80`03fcaa70 00000000`00000000 fffff880`0196d9a0 : NETIO!NetioDereferenceNetBufferList+0x86
    fffff880`054bf730 fffff880`0185fe26 : fffffa80`0274f000 fffffa80`03fcab00 00000000`00000011 fffffa80`03ddeb40 : NETIO!NetioDereferenceNetBufferListChain+0x2dd
    fffff880`054bf7b0 fffff880`0185eb21 : 00000000`00000000 fffffa80`0274f000 fffff880`0196d9a0 00000000`05538f01 : tcpip!IppReceiveHeaderBatch+0x3c7
    fffff880`054bf890 fffff880`01936542 : fffffa80`0288c180 00000000`00000000 fffffa80`05538f01 00000000`00000001 : tcpip!IpFlcReceivePackets+0x651
    fffff880`054bfa90 fffff880`01609afa : fffffa80`01947602 fffffa80`019476f0 00000000`00000002 00000000`00000000 : tcpip!IppInspectInjectReceive+0xf2
    fffff880`054bfad0 fffff880`02d0171d : fffffa80`04a26640 fffffa80`05538f40 00000000`c0000000 fffff880`00000000 : fwpkclnt!FwpsInjectTransportReceiveAsync0+0x256
    fffff880`054bfb80 fffffa80`04a26640 : fffffa80`05538f40 00000000`c0000000 fffff880`00000000 fffffa80`040a0002 : PctWfpFilter64+0xd71d
    fffff880`054bfb88 fffffa80`05538f40 : 00000000`c0000000 fffff880`00000000 fffffa80`040a0002 fffffa80`00000001 : 0xfffffa80`04a26640
    fffff880`054bfb90 00000000`c0000000 : fffff880`00000000 fffffa80`040a0002 fffffa80`00000001 fffffa80`0000000b : 0xfffffa80`05538f40
    fffff880`054bfb98 fffff880`00000000 : fffffa80`040a0002 fffffa80`00000001 fffffa80`0000000b fffffa80`00000000 : 0xc0000000
    fffff880`054bfba0 fffffa80`040a0002 : fffffa80`00000001 fffffa80`0000000b fffffa80`00000000 fffffa80`00000000 : 0xfffff880`00000000
    fffff880`054bfba8 fffffa80`00000001 : fffffa80`0000000b fffffa80`00000000 fffffa80`00000000 fffff880`02d01250 : 0xfffffa80`040a0002
    fffff880`054bfbb0 fffffa80`0000000b : fffffa80`00000000 fffffa80`00000000 fffff880`02d01250 fffffa80`05538f40 : 0xfffffa80`00000001
    fffff880`054bfbb8 fffffa80`00000000 : fffffa80`00000000 fffff880`02d01250 fffffa80`05538f40 00000000`53636670 : 0xfffffa80`0000000b
    fffff880`054bfbc0 fffffa80`00000000 : fffff880`02d01250 fffffa80`05538f40 00000000`53636670 fffffa80`03fcaa70 : 0xfffffa80`00000000
    fffff880`054bfbc8 fffff880`02d01250 : fffffa80`05538f40 00000000`53636670 fffffa80`03fcaa70 fffff880`02d10338 : 0xfffffa80`00000000
    fffff880`054bfbd0 fffffa80`05538f40 : 00000000`53636670 fffffa80`03fcaa70 fffff880`02d10338 00000000`00000000 : PctWfpFilter64+0xd250
    fffff880`054bfbd8 00000000`53636670 : fffffa80`03fcaa70 fffff880`02d10338 00000000`00000000 00000000`00000000 : 0xfffffa80`05538f40
    fffff880`054bfbe0 fffffa80`03fcaa70 : fffff880`02d10338 00000000`00000000 00000000`00000000 00000000`53636670 : 0x53636670
    fffff880`054bfbe8 fffff880`02d10338 : 00000000`00000000 00000000`00000000 00000000`53636670 fffffa80`05088010 : 0xfffffa80`03fcaa70
    fffff880`054bfbf0 00000000`00000000 : 00000000`00000000 00000000`53636670 fffffa80`05088010 fffff880`02d13128 : PctWfpFilter64+0x1c338
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    NETIO!NetioDereferenceNetBufferList+86
    fffff880`017526a6 4885ff          test    rdi,rdi
    
    SYMBOL_STACK_INDEX:  4
    
    SYMBOL_NAME:  NETIO!NetioDereferenceNetBufferList+86
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: NETIO
    
    IMAGE_NAME:  NETIO.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a
    
    FAILURE_BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    Followup: MachineOwner
    ---------
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\021911-25468-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
    Machine Name:
    Kernel base = 0xfffff800`02a62000 PsLoadedModuleList = 0xfffff800`02c9fe50
    Debug session time: Sat Feb 19 16:40:47.890 2011 (UTC - 4:00)
    System Uptime: 0 days 0:00:47.812
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .............................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck D1, {0, 2, 0, fffff880018897a0}
    
    Unable to load image \Device\Harddisk1\Partition2\Windows\system32\drivers\PctWfpFilter64.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for PctWfpFilter64.sys
    *** ERROR: Module load completed but symbols could not be loaded for PctWfpFilter64.sys
    Probably caused by : NETIO.SYS ( NETIO!NetioDereferenceNetBufferList+86 )
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff880018897a0, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d0a0e0
     0000000000000000 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip! ?? ::FNODOBFM::`string'+56f4
    fffff880`018897a0 488b01          mov     rax,qword ptr [rcx]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xD1
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff8800591b520 -- (.trap 0xfffff8800591b520)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa800510de50 rbx=0000000000000000 rcx=0000000000000000
    rdx=fffffa800180d000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff880018897a0 rsp=fffff8800591b6b0 rbp=0000000000000000
     r8=0000000000006888  r9=00000000000000d0 r10=fffff80002a62000
    r11=000000000000029d r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na po nc
    tcpip! ?? ::FNODOBFM::`string'+0x56f4:
    fffff880`018897a0 488b01          mov     rax,qword ptr [rcx] ds:07ff:00000000`00000000=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002ad1ca9 to fffff80002ad2740
    
    STACK_TEXT:  
    fffff880`0591b3d8 fffff800`02ad1ca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`0591b3e0 fffff800`02ad0920 : fffffa80`04cab140 fffffa80`03ec0370 fffffa80`02528c90 fffffa80`0253d8c0 : nt!KiBugCheckDispatch+0x69
    fffff880`0591b520 fffff880`018897a0 : fffffa80`03ec0370 fffff880`03d95aca fffff880`206c644d fffffa80`054439a0 : nt!KiPageFault+0x260
    fffff880`0591b6b0 fffff880`017406a6 : fffffa80`03ec0370 00000000`02550000 00000000`00000000 fffffa80`02550000 : tcpip! ?? ::FNODOBFM::`string'+0x56f4
    fffff880`0591b700 fffff880`0173e35d : 00000000`00000000 fffffa80`054439a0 00000000`00000000 fffff880`0196b9a0 : NETIO!NetioDereferenceNetBufferList+0x86
    fffff880`0591b730 fffff880`0185de26 : fffffa80`02550000 fffffa80`05443a00 00000000`00000011 fffffa80`03ec0370 : NETIO!NetioDereferenceNetBufferListChain+0x2dd
    fffff880`0591b7b0 fffff880`0185cb21 : 00000000`00000000 fffffa80`02550000 fffff880`0196b9a0 00000000`0511ee01 : tcpip!IppReceiveHeaderBatch+0x3c7
    fffff880`0591b890 fffff880`01934542 : fffffa80`0316b180 00000000`00000000 fffffa80`0511ee01 00000000`00000001 : tcpip!IpFlcReceivePackets+0x651
    fffff880`0591ba90 fffff880`01609afa : fffffa80`05477002 fffffa80`05477010 00000000`00000002 00000000`00000000 : tcpip!IppInspectInjectReceive+0xf2
    fffff880`0591bad0 fffff880`03d8e71d : fffffa80`0190ada0 fffffa80`0511eec0 00000000`c0000000 fffff880`00000000 : fwpkclnt!FwpsInjectTransportReceiveAsync0+0x256
    fffff880`0591bb80 fffffa80`0190ada0 : fffffa80`0511eec0 00000000`c0000000 fffff880`00000000 fffffa80`03170002 : PctWfpFilter64+0xd71d
    fffff880`0591bb88 fffffa80`0511eec0 : 00000000`c0000000 fffff880`00000000 fffffa80`03170002 fffffa80`00000001 : 0xfffffa80`0190ada0
    fffff880`0591bb90 00000000`c0000000 : fffff880`00000000 fffffa80`03170002 fffffa80`00000001 fffffa80`0000000b : 0xfffffa80`0511eec0
    fffff880`0591bb98 fffff880`00000000 : fffffa80`03170002 fffffa80`00000001 fffffa80`0000000b fffffa80`00000000 : 0xc0000000
    fffff880`0591bba0 fffffa80`03170002 : fffffa80`00000001 fffffa80`0000000b fffffa80`00000000 fffffa80`00000000 : 0xfffff880`00000000
    fffff880`0591bba8 fffffa80`00000001 : fffffa80`0000000b fffffa80`00000000 fffffa80`00000000 fffff880`03d8e250 : 0xfffffa80`03170002
    fffff880`0591bbb0 fffffa80`0000000b : fffffa80`00000000 fffffa80`00000000 fffff880`03d8e250 fffffa80`0511eec0 : 0xfffffa80`00000001
    fffff880`0591bbb8 fffffa80`00000000 : fffffa80`00000000 fffff880`03d8e250 fffffa80`0511eec0 00000000`00000002 : 0xfffffa80`0000000b
    fffff880`0591bbc0 fffffa80`00000000 : fffff880`03d8e250 fffffa80`0511eec0 00000000`00000002 fffffa80`054439a0 : 0xfffffa80`00000000
    fffff880`0591bbc8 fffff880`03d8e250 : fffffa80`0511eec0 00000000`00000002 fffffa80`054439a0 fffff880`03d9d338 : 0xfffffa80`00000000
    fffff880`0591bbd0 fffffa80`0511eec0 : 00000000`00000002 fffffa80`054439a0 fffff880`03d9d338 00000000`00000000 : PctWfpFilter64+0xd250
    fffff880`0591bbd8 00000000`00000002 : fffffa80`054439a0 fffff880`03d9d338 00000000`00000000 00000000`00000000 : 0xfffffa80`0511eec0
    fffff880`0591bbe0 fffffa80`054439a0 : fffff880`03d9d338 00000000`00000000 00000000`00000000 00000000`53636670 : 0x2
    fffff880`0591bbe8 fffff880`03d9d338 : 00000000`00000000 00000000`00000000 00000000`53636670 fffffa80`04eda570 : 0xfffffa80`054439a0
    fffff880`0591bbf0 00000000`00000000 : 00000000`00000000 00000000`53636670 fffffa80`04eda570 fffff880`03da0128 : PctWfpFilter64+0x1c338
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    NETIO!NetioDereferenceNetBufferList+86
    fffff880`017406a6 4885ff          test    rdi,rdi
    
    SYMBOL_STACK_INDEX:  4
    
    SYMBOL_NAME:  NETIO!NetioDereferenceNetBufferList+86
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: NETIO
    
    IMAGE_NAME:  NETIO.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a
    
    FAILURE_BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    Followup: MachineOwner
    ---------
    
    
    
    



    Drivers:

    Code:
    start             end                 module name
    fffff880`00fa4000 fffff880`00ffb000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
    fffff880`03c00000 fffff880`03c8a000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`03fa1000 fffff880`03fb7000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`03a83000 fffff880`03a9a000   amdk8    amdk8.sys    Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`00dea000 fffff880`00df5000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
    fffff880`043d1000 fffff880`043e2000   AN983X64 AN983X64.sys Thu May 19 04:14:27 2005 (428C4AE3)
    fffff880`00ee0000 fffff880`00ee9000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00dc0000 fffff880`00dea000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
    fffff880`013f9000 fffff880`01400000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`03bb5000 fffff880`03bc6000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`05dbd000 fffff880`05ddb000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
    fffff960`00600000 fffff960`00627000   cdd      cdd.dll      unavailable (00000000)
    fffff880`05712000 fffff880`0572f000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
    fffff880`0106a000 fffff880`01094000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`00d00000 fffff880`00dc0000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
    fffff880`0103a000 fffff880`0106a000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00ca2000 fffff880`00d00000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`0137a000 fffff880`013ed000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
    fffff880`043e2000 fffff880`043f2000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`0572f000 fffff880`0573d000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`03a00000 fffff880`03a83000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
    fffff880`03b97000 fffff880`03bb5000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
    fffff880`03b88000 fffff880`03b97000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`0141b000 fffff880`01431000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`0403d000 fffff880`0405f000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`05749000 fffff880`05752000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`0573d000 fffff880`05749000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`05752000 fffff880`05765000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`05706000 fffff880`05712000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`052fe000 fffff880`053f2000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
    fffff880`03f5b000 fffff880`03fa1000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
    fffff880`053f2000 fffff880`053ff000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
    fffff880`0109a000 fffff880`010ae000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`056e6000 fffff880`056f1000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
    fffff880`00e09000 fffff880`00e55000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
    fffff880`01411000 fffff880`0141b000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
    fffff880`01000000 fffff880`0103a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
    fffff880`01600000 fffff880`0164a000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
    fffff880`04065000 fffff880`04072000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
    fffff800`02a19000 fffff800`02a62000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
    fffff880`057ad000 fffff880`057c6000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
    fffff880`057c6000 fffff880`057ce080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`0579f000 fffff880`057ad000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
    fffff880`05cf5000 fffff880`05dbd000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
    fffff880`017f1000 fffff880`017fa000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
    fffff880`0565a000 fffff880`05669000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`057cf000 fffff880`057dd000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff800`00bb9000 fffff800`00bc3000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
    fffff880`03eb4000 fffff880`03ef7000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
    fffff880`015d7000 fffff880`015f1000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
    fffff880`0179c000 fffff880`017c7000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
    fffff880`0405f000 fffff880`04064200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`05cc8000 fffff880`05cdd000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`05600000 fffff880`05623000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`00c81000 fffff880`00c8e000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
    fffff880`057ea000 fffff880`057f8000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`05669000 fffff880`05678000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`057dd000 fffff880`057ea000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`00c5c000 fffff880`00c76000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`05ddb000 fffff880`05df3000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`05c00000 fffff880`05c2d000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
    fffff880`05c2d000 fffff880`05c7b000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
    fffff880`05c7b000 fffff880`05c9e000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
    fffff880`03ce4000 fffff880`03cef000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00e55000 fffff880`00e5f000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`0131c000 fffff880`0137a000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
    fffff880`03b7d000 fffff880`03b88000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`017df000 fffff880`017f1000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`0164a000 fffff880`0173c000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`04829000 fffff880`04835000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`03e00000 fffff880`03e2f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`056f1000 fffff880`05706000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
    fffff880`03ac5000 fffff880`03ad4000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`03da6000 fffff880`03deb000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
    fffff880`0173c000 fffff880`0179c000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
    fffff880`03cef000 fffff880`03d00000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`03b71000 fffff880`03b7d000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff800`02a62000 fffff800`0303f000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
    fffff880`01434000 fffff880`015d7000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
    fffff880`0121c000 fffff880`01225000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`052fc000 fffff880`052fd180   nvBridge nvBridge.kmd Sun Sep 27 19:46:14 2009 (4ABFF946)
    fffff880`04838000 fffff880`052fba80   nvlddmkm nvlddmkm.sys Sun Sep 27 20:12:06 2009 (4ABFFF56)
    fffff880`03ef7000 fffff880`03f5ad80   nvm62x64 nvm62x64.sys Fri Oct 17 17:01:06 2008 (48F8FD12)
    fffff880`03a9f000 fffff880`03ac5000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
    fffff880`0480c000 fffff880`04829000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`00e9f000 fffff880`00eb4000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00e5f000 fffff880`00e92000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`00ec9000 fffff880`00ed0000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
    fffff880`00ed0000 fffff880`00ee0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`010ae000 fffff880`010f1000   PCTCore64 PCTCore64.sys Wed Nov 24 00:16:29 2010 (4CEC9FAD)
    fffff880`010f1000 fffff880`01162000   pctDS64  pctDS64.sys  Thu Jun 03 22:06:38 2010 (4C085FAE)
    fffff880`01227000 fffff880`012f3000   pctEFA64 pctEFA64.sys Fri Jul 16 00:45:25 2010 (4C3FE3E5)
    fffff880`03d2b000 fffff880`03d81000   pctgntdi64 pctgntdi64.sys Tue Nov 16 15:07:31 2010 (4CE2E483)
    fffff880`06d58000 fffff880`06d71000   pctplsg64 pctplsg64.sys Wed Nov 24 15:31:41 2010 (4CED762D)
    fffff880`06d4b000 fffff880`06d570e0   PCTSDInj64 PCTSDInj64.sys Tue Aug 31 20:31:02 2010 (4C7D9EC6)
    fffff880`03d81000 fffff880`03da6000   PctWfpFilter64 PctWfpFilter64.sys Tue Nov 16 15:17:57 2010 (4CE2E6F5)
    fffff880`01400000 fffff880`01411000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`06826000 fffff880`068cc000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`04000000 fffff880`0403d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00c8e000 fffff880`00ca2000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`03fb7000 fffff880`03fdb000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`03e2f000 fffff880`03e4a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`03fdb000 fffff880`03ffc000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
    fffff880`05635000 fffff880`0564f000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`03b20000 fffff880`03b71000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
    fffff880`0564f000 fffff880`0565a000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
    fffff880`03cc9000 fffff880`03cd2000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`06d71000 fffff880`06d9f000   rdpdr    rdpdr.sys    Mon Jul 13 20:18:02 2009 (4A5BCEBA)
    fffff880`03cd2000 fffff880`03cdb000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`03cdb000 fffff880`03ce4000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`06db9000 fffff880`06df1000   RDPWD    RDPWD.SYS    Mon Jul 13 20:16:47 2009 (4A5BCE6F)
    fffff880`011ae000 fffff880`011e8000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
    fffff880`05cdd000 fffff880`05cf5000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`0407e000 fffff880`043d0d00   RTKVAC64 RTKVAC64.SYS Thu Jun 18 15:37:20 2009 (4A3A9770)
    fffff880`068cc000 fffff880`068d7000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`04800000 fffff880`0480c000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`03ad4000 fffff880`03af1000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`017d7000 fffff880`017df000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`06cb5000 fffff880`06d4b000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
    fffff880`06916000 fffff880`0697d000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
    fffff880`068d7000 fffff880`06904000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
    fffff880`05678000 fffff880`05679480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`01800000 fffff880`019fd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
    fffff880`06904000 fffff880`06916000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
    fffff880`03d1e000 fffff880`03d2b000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
    fffff880`06d9f000 fffff880`06daa000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
    fffff880`03d00000 fffff880`03d1e000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
    fffff880`03b0c000 fffff880`03b20000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
    fffff880`012f3000 fffff880`01307000   TfFsMon  TfFsMon.sys  Wed Dec 01 18:00:02 2010 (4CF6D372)
    fffff880`01307000 fffff880`0131c000   TfSysMon TfSysMon.sys Wed Dec 01 18:00:05 2010 (4CF6D375)
    fffff960`00460000 fffff960`0046a000   TSDDD    TSDDD.dll    unavailable (00000000)
    fffff880`06daa000 fffff880`06db9000   tssecsrv tssecsrv.sys Mon Jul 13 20:16:41 2009 (4A5BCE69)
    fffff880`03bc6000 fffff880`03bec000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
    fffff880`0567a000 fffff880`0568c000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`05782000 fffff880`0579f000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
    fffff880`05780000 fffff880`05781f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`03ea3000 fffff880`03eb4000   usbehci  usbehci.sys  Sat Oct 24 00:27:33 2009 (4AE28235)
    fffff880`0568c000 fffff880`056e6000   usbhub   usbhub.sys   Sat Oct 24 00:28:24 2009 (4AE28268)
    fffff880`03bec000 fffff880`03bf7000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
    fffff880`03e4d000 fffff880`03ea3000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
    fffff880`05765000 fffff880`05780000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
    fffff880`00e92000 fffff880`00e9f000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`011e8000 fffff880`011f6000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`03c94000 fffff880`03cb9000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`017c7000 fffff880`017d7000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
    fffff880`00eb4000 fffff880`00ec9000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
    fffff880`01162000 fffff880`011ae000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
    fffff880`03af1000 fffff880`03b0c000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
    fffff880`03cb9000 fffff880`03cc9000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`00ef1000 fffff880`00f95000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00f95000 fffff880`00fa4000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`03df6000 fffff880`03dff000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff960`000a0000 fffff960`003b0000   win32k   win32k.sys   unavailable (00000000)
    fffff880`00e00000 fffff880`00e09000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`03deb000 fffff880`03df6000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 20:10:33 2009 (4A5BCCF9)
    fffff880`05ca7000 fffff880`05cc8000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
    
    Unloaded modules:
    fffff880`015f1000 fffff880`015ff000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`013ed000 fffff880`013f9000   dump_ataport
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`01200000 fffff880`01209000   dump_atapi.s
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00009000
    fffff880`01209000 fffff880`0121c000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    
    
     

Share This Page

Loading...