Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [G:\101910-28360-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`0320c000 PsLoadedModuleList = 0xfffff800`03449e50
Debug session time: Tue Oct 19 07:51:00.822 2010 (UTC - 5:00)
System Uptime: 0 days 0:17:01.023
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff80003246798}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80003246798
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff8000327d469 to fffff8000327df00
STACK_TEXT:
fffff800`00ba4d28 fffff800`0327d469 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`00ba4d30 fffff800`0327b932 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`00ba4e70 fffff800`03246798 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`0bc61c40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SeAccessCheckFromState+0x58
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDoubleFaultAbort+b2
fffff800`0327b932 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiDoubleFaultAbort+b2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600
FAILURE_BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [G:\101910-22417-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`03260000 PsLoadedModuleList = 0xfffff800`0349de50
Debug session time: Tue Oct 19 08:12:37.869 2010 (UTC - 5:00)
System Uptime: 0 days 0:21:03.070
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff8000329a798}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff8000329a798
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff800032d1469 to fffff800032d1f00
STACK_TEXT:
fffff800`00ba4d28 fffff800`032d1469 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`00ba4d30 fffff800`032cf932 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`00ba4e70 fffff800`0329a798 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`0a834c40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SeAccessCheckFromState+0x58
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDoubleFaultAbort+b2
fffff800`032cf932 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiDoubleFaultAbort+b2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600
FAILURE_BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [G:\102110-22276-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.20738.amd64fre.win7_ldr.100618-1621
Machine Name:
Kernel base = 0xfffff800`0345b000 PsLoadedModuleList = 0xfffff800`0368feb0
Debug session time: Thu Oct 21 11:49:03.530 2010 (UTC - 5:00)
System Uptime: 0 days 1:41:50.340
Loading Kernel Symbols
...............................................................
................................................................
.........................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80050031, 6f8, fffff80003487fe8}
Probably caused by : ntkrnlmp.exe ( nt!KiDoubleFaultAbort+b2 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050031
Arg3: 00000000000006f8
Arg4: fffff80003487fe8
Debugging Details:
------------------
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff800034c0ae9 to fffff800034c1580
STACK_TEXT:
fffff800`00ba4d28 fffff800`034c0ae9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx
fffff800`00ba4d30 fffff800`034befb2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff800`00ba4e70 fffff800`03487fe8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`0d147c40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SeAccessCheckFromState+0x58
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiDoubleFaultAbort+b2
fffff800`034befb2 90 nop
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiDoubleFaultAbort+b2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c42e3
FAILURE_BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
BUCKET_ID: X64_0x7f_8_nt!KiDoubleFaultAbort+b2
fffff800`00bd1000 fffff800`00bdb000 kdcom kdcom.dll Tue Jul 14 04:31:07 2009 (4A5BDFDB)
fffff800`03412000 fffff800`0345b000 hal hal.dll Tue Jul 14 04:27:36 2009 (4A5BDF08)
fffff800`0345b000 fffff800`03a2e000 nt ntkrnlmp.exe Sat Jun 19 07:09:07 2010 (4C1C42E3)
fffff880`00c2b000 fffff880`00c6f000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 04:29:10 2009 (4A5BDF66)
fffff880`00c6f000 fffff880`00c83000 PSHED PSHED.dll Tue Jul 14 04:32:23 2009 (4A5BE027)
fffff880`00c83000 fffff880`00ce1000 CLFS CLFS.SYS Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00ce1000 fffff880`00da1000 CI CI.dll Tue Jul 14 04:32:13 2009 (4A5BE01D)
fffff880`00da1000 fffff880`00dfd000 volmgrx volmgrx.sys Tue Jul 14 02:20:33 2009 (4A5BC141)
fffff880`00e00000 fffff880`00e33000 pci pci.sys Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`00e33000 fffff880`00e40000 vdrvroot vdrvroot.sys Tue Jul 14 03:01:31 2009 (4A5BCADB)
fffff880`00e40000 fffff880`00e55000 partmgr partmgr.sys Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`00e55000 fffff880`00e5e000 compbatt compbatt.sys Tue Jul 14 02:31:02 2009 (4A5BC3B6)
fffff880`00e5e000 fffff880`00e6a000 BATTC BATTC.SYS Tue Jul 14 02:31:01 2009 (4A5BC3B5)
fffff880`00e6a000 fffff880`00e7f000 volmgr volmgr.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`00e7f000 fffff880`00e99000 mountmgr mountmgr.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00e99000 fffff880`00ed3000 rdyboost rdyboost.sys Tue Jul 14 02:34:34 2009 (4A5BC48A)
fffff880`00eda000 fffff880`00f7e000 Wdf01000 Wdf01000.sys Tue Jul 14 02:22:07 2009 (4A5BC19F)
fffff880`00f7e000 fffff880`00f8d000 WDFLDR WDFLDR.SYS Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`00f8d000 fffff880`00fe4000 ACPI ACPI.sys Tue Jul 14 02:19:34 2009 (4A5BC106)
fffff880`00fe4000 fffff880`00fed000 WMILIB WMILIB.SYS Tue Jul 14 02:19:51 2009 (4A5BC117)
fffff880`00fed000 fffff880`00ff7000 msisadrv msisadrv.sys Tue Jul 14 02:19:26 2009 (4A5BC0FE)
fffff880`01000000 fffff880`0104c000 volsnap volsnap.sys Tue Jul 14 02:20:08 2009 (4A5BC128)
fffff880`0106e000 fffff880`01276000 iaStor iaStor.sys Sat Nov 21 01:09:41 2009 (4B0721B5)
fffff880`01276000 fffff880`0127f000 atapi atapi.sys Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`0127f000 fffff880`012a9000 ataport ataport.SYS Tue Jul 14 02:19:52 2009 (4A5BC118)
fffff880`012a9000 fffff880`012b4000 msahci msahci.sys Tue Jul 14 03:01:01 2009 (4A5BCABD)
fffff880`012b4000 fffff880`012c4000 PCIIDEX PCIIDEX.SYS Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`012c4000 fffff880`012cf000 amdxata amdxata.sys Tue May 19 20:56:59 2009 (4A12F2EB)
fffff880`012cf000 fffff880`0131b000 fltmgr fltmgr.sys Tue Jul 14 02:19:59 2009 (4A5BC11F)
fffff880`0131b000 fffff880`0132f000 fileinfo fileinfo.sys Tue Jul 14 02:34:25 2009 (4A5BC481)
fffff880`0132f000 fffff880`0138d000 msrpc msrpc.sys Tue Jul 14 02:21:32 2009 (4A5BC17C)
fffff880`0138d000 fffff880`01400000 cng cng.sys Tue Jul 14 02:49:40 2009 (4A5BC814)
fffff880`01400000 fffff880`0141a000 ksecdd ksecdd.sys Tue Jul 14 02:20:54 2009 (4A5BC156)
fffff880`0141a000 fffff880`0142b000 pcw pcw.sys Tue Jul 14 02:19:27 2009 (4A5BC0FF)
fffff880`0142b000 fffff880`01435000 Fs_Rec Fs_Rec.sys Tue Jul 14 02:19:45 2009 (4A5BC111)
fffff880`01450000 fffff880`015f3000 Ntfs Ntfs.sys Tue Jul 14 02:20:47 2009 (4A5BC14F)
fffff880`01600000 fffff880`01660000 NETIO NETIO.SYS Tue Jul 14 02:21:46 2009 (4A5BC18A)
fffff880`01660000 fffff880`0168b000 ksecpkg ksecpkg.sys Fri Dec 11 08:03:32 2009 (4B21E0B4)
fffff880`0168b000 fffff880`0169b000 vmstorfl vmstorfl.sys Tue Jul 14 02:42:54 2009 (4A5BC67E)
fffff880`0169b000 fffff880`016a3000 spldr spldr.sys Mon May 11 19:56:27 2009 (4A0858BB)
fffff880`016a3000 fffff880`016b5000 mup mup.sys Tue Jul 14 02:23:45 2009 (4A5BC201)
fffff880`016b8000 fffff880`017aa000 ndis ndis.sys Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`017aa000 fffff880`017f4000 fwpkclnt fwpkclnt.sys Tue Jul 14 02:21:08 2009 (4A5BC164)
fffff880`017f4000 fffff880`017fd000 hwpolicy hwpolicy.sys Tue Jul 14 02:19:22 2009 (4A5BC0FA)
fffff880`01800000 fffff880`019fd000 tcpip tcpip.sys Mon Jun 14 06:39:04 2010 (4C15A458)
fffff880`01a00000 fffff880`01a51000 rdbss rdbss.sys Tue Jul 14 02:24:09 2009 (4A5BC219)
fffff880`01a51000 fffff880`01a60000 discache discache.sys Tue Jul 14 02:37:18 2009 (4A5BC52E)
fffff880`01ab4000 fffff880`01aee000 fvevol fvevol.sys Sat Sep 26 05:34:26 2009 (4ABD7DB2)
fffff880`01aee000 fffff880`01b04000 disk disk.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`01b04000 fffff880`01b34000 CLASSPNP CLASSPNP.SYS Tue Jul 14 02:19:58 2009 (4A5BC11E)
fffff880`01b42000 fffff880`01bd2000 vsdatant vsdatant.sys Sat Oct 17 11:35:33 2009 (4AD981D5)
fffff880`01bd2000 fffff880`01bec000 SCDEmu SCDEmu.SYS Mon Apr 12 11:52:25 2010 (4BC2DF49)
fffff880`02e00000 fffff880`02e46000 atikmpag atikmpag.sys Wed Jun 30 04:48:33 2010 (4C2AA271)
fffff880`02e46000 fffff880`02e67000 raspptp raspptp.sys Tue Jul 14 03:10:18 2009 (4A5BCCEA)
fffff880`02e67000 fffff880`02eaa000 ks ks.sys Thu Mar 04 06:32:25 2010 (4B8F37D9)
fffff880`02ef2000 fffff880`02f75000 csc csc.sys Tue Jul 14 02:24:26 2009 (4A5BC22A)
fffff880`02f75000 fffff880`02f93000 dfsc dfsc.sys Tue Jul 14 02:23:44 2009 (4A5BC200)
fffff880`02f93000 fffff880`02fa4000 blbdrive blbdrive.sys Tue Jul 14 02:35:59 2009 (4A5BC4DF)
fffff880`02fa4000 fffff880`02ffe000 usbhub usbhub.sys Tue Jul 14 03:07:09 2009 (4A5BCC2D)
fffff880`03a37000 fffff880`03ac3000 bthport bthport.sys Tue Jul 14 03:06:56 2009 (4A5BCC20)
fffff880`03ac3000 fffff880`03aef000 rfcomm rfcomm.sys Tue Jul 14 03:06:56 2009 (4A5BCC20)
fffff880`03aef000 fffff880`03aff000 BthEnum BthEnum.sys Tue Jul 14 03:06:52 2009 (4A5BCC1C)
fffff880`03aff000 fffff880`03b1f000 bthpan bthpan.sys Tue Jul 14 03:07:00 2009 (4A5BCC24)
fffff880`03b1f000 fffff880`03b36000 bthmodem bthmodem.sys Tue Jul 14 03:06:52 2009 (4A5BCC1C)
fffff880`03b36000 fffff880`03b45000 modem modem.sys Tue Jul 14 03:10:48 2009 (4A5BCD08)
fffff880`03b45000 fffff880`03bc0000 btwavdt btwavdt.sys Thu Jun 25 08:50:13 2009 (4A431015)
fffff880`03c7e000 fffff880`03d04000 btwaudio btwaudio.sys Wed Jul 01 16:54:56 2009 (4A4B6AB0)
fffff880`03d04000 fffff880`03d10000 btwl2cap btwl2cap.sys Sat Apr 04 03:28:45 2009 (49D6A9BD)
fffff880`03d10000 fffff880`03d13880 btwrchid btwrchid.sys Thu Jun 25 08:51:37 2009 (4A431069)
fffff880`03d14000 fffff880`03d22000 monitor monitor.sys Tue Jul 14 02:38:52 2009 (4A5BC58C)
fffff880`03d22000 fffff880`03d45000 luafv luafv.sys Tue Jul 14 02:26:13 2009 (4A5BC295)
fffff880`03d45000 fffff880`03d66000 WudfPf WudfPf.sys Tue Jul 14 03:05:37 2009 (4A5BCBD1)
fffff880`03d66000 fffff880`03d7b000 lltdio lltdio.sys Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`03d7b000 fffff880`03dce000 nwifi nwifi.sys Tue Jul 14 03:07:23 2009 (4A5BCC3B)
fffff880`03dce000 fffff880`03de1000 ndisuio ndisuio.sys Tue Jul 14 03:09:25 2009 (4A5BCCB5)
fffff880`03de1000 fffff880`03df9000 rspndr rspndr.sys Tue Jul 14 03:08:50 2009 (4A5BCC92)
fffff880`04000000 fffff880`04045000 netbt netbt.sys Tue Jul 14 02:21:28 2009 (4A5BC178)
fffff880`04045000 fffff880`04054000 netbios netbios.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`04054000 fffff880`0406f000 wanarp wanarp.sys Tue Jul 14 03:10:21 2009 (4A5BCCED)
fffff880`0406f000 fffff880`04083000 termdd termdd.sys Tue Jul 14 03:16:36 2009 (4A5BCE64)
fffff880`04083000 fffff880`0408f000 nsiproxy nsiproxy.sys Tue Jul 14 02:21:02 2009 (4A5BC15E)
fffff880`0408f000 fffff880`04297000 dump_iaStor dump_iaStor.sys Sat Nov 21 01:09:41 2009 (4B0721B5)
fffff880`042b2000 fffff880`042b6500 CmBatt CmBatt.sys Tue Jul 14 02:31:03 2009 (4A5BC3B7)
fffff880`042b7000 fffff880`042e1000 cdrom cdrom.sys Tue Jul 14 02:19:54 2009 (4A5BC11A)
fffff880`042e1000 fffff880`0433d000 klif klif.sys Tue Sep 22 13:31:19 2009 (4AB8A777)
fffff880`0433d000 fffff880`04346000 Null Null.SYS Tue Jul 14 02:19:37 2009 (4A5BC109)
fffff880`04346000 fffff880`0434d000 Beep Beep.SYS Tue Jul 14 03:00:13 2009 (4A5BCA8D)
fffff880`0434d000 fffff880`0435b000 vga vga.sys Tue Jul 14 02:38:47 2009 (4A5BC587)
fffff880`0435b000 fffff880`04380000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:38:51 2009 (4A5BC58B)
fffff880`04380000 fffff880`04390000 watchdog watchdog.sys Tue Jul 14 02:37:35 2009 (4A5BC53F)
fffff880`04390000 fffff880`04399000 RDPCDD RDPCDD.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`04399000 fffff880`043a2000 rdpencdd rdpencdd.sys Tue Jul 14 03:16:34 2009 (4A5BCE62)
fffff880`043a2000 fffff880`043ab000 rdprefmp rdprefmp.sys Tue Jul 14 03:16:35 2009 (4A5BCE63)
fffff880`043ab000 fffff880`043b6000 Msfs Msfs.SYS Tue Jul 14 02:19:47 2009 (4A5BC113)
fffff880`043b6000 fffff880`043c7000 Npfs Npfs.SYS Tue Jul 14 02:19:48 2009 (4A5BC114)
fffff880`043c7000 fffff880`043e5000 tdx tdx.sys Tue Jul 14 02:21:15 2009 (4A5BC16B)
fffff880`043e5000 fffff880`043f2000 TDI TDI.SYS Tue Jul 14 02:21:18 2009 (4A5BC16E)
fffff880`043f2000 fffff880`043fd000 mssmbios mssmbios.sys Tue Jul 14 02:31:10 2009 (4A5BC3BE)
fffff880`04400000 fffff880`04456000 USBPORT USBPORT.SYS Tue Jul 14 03:06:31 2009 (4A5BCC07)
fffff880`04456000 fffff880`0447a000 HDAudBus HDAudBus.sys Tue Jul 14 03:06:13 2009 (4A5BCBF5)
fffff880`0447a000 fffff880`0448c000 umbus umbus.sys Tue Jul 14 03:06:56 2009 (4A5BCC20)
fffff880`0448c000 fffff880`04580000 dxgkrnl dxgkrnl.sys Fri Oct 02 04:00:14 2009 (4AC5509E)
fffff880`04580000 fffff880`045c6000 dxgmms1 dxgmms1.sys Tue Jul 14 02:38:32 2009 (4A5BC578)
fffff880`045c6000 fffff880`045d7000 HECIx64 HECIx64.sys Thu Sep 17 22:54:16 2009 (4AB293E8)
fffff880`045d7000 fffff880`045e8000 usbehci usbehci.sys Tue Jul 14 03:06:30 2009 (4A5BCC06)
fffff880`045e8000 fffff880`045fd000 NDProxy NDProxy.SYS Tue Jul 14 03:10:05 2009 (4A5BCCDD)
fffff880`04a00000 fffff880`04a8a000 afd afd.sys Tue Jul 14 02:21:40 2009 (4A5BC184)
fffff880`04a8a000 fffff880`04a93000 wfplwf wfplwf.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6)
fffff880`04a93000 fffff880`04aa9000 vwififlt vwififlt.sys Tue Jul 14 03:07:22 2009 (4A5BCC3A)
fffff880`04aad000 fffff880`04fd6000 kl1 kl1.sys Fri Sep 25 16:59:13 2009 (4ABCCCB1)
fffff880`04fd6000 fffff880`04ffc000 pacer pacer.sys Tue Jul 14 03:09:41 2009 (4A5BCCC5)
fffff880`0523f000 fffff880`05465300 RTKVHD64 RTKVHD64.sys Fri Jan 29 08:48:35 2010 (4B6284C3)
fffff880`05466000 fffff880`054a3000 portcls portcls.sys Tue Jul 14 03:06:27 2009 (4A5BCC03)
fffff880`054a3000 fffff880`054c5000 drmk drmk.sys Tue Jul 14 04:01:25 2009 (4A5BD8E5)
fffff880`054c5000 fffff880`054ca200 ksthunk ksthunk.sys Tue Jul 14 03:00:19 2009 (4A5BCA93)
fffff880`054cb000 fffff880`054d7000 Dxapi Dxapi.sys Tue Jul 14 02:38:28 2009 (4A5BC574)
fffff880`054d7000 fffff880`054e5000 crashdmp crashdmp.sys Tue Jul 14 03:01:01 2009 (4A5BCABD)
fffff880`054e5000 fffff880`054f8000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 02:21:51 2009 (4A5BC18F)
fffff880`054f8000 fffff880`05506000 hidusb hidusb.sys Tue Jul 14 03:06:22 2009 (4A5BCBFE)
fffff880`05506000 fffff880`0551f000 HIDCLASS HIDCLASS.SYS Tue Jul 14 03:06:21 2009 (4A5BCBFD)
fffff880`0551f000 fffff880`05527080 HIDPARSE HIDPARSE.SYS Tue Jul 14 03:06:17 2009 (4A5BCBF9)
fffff880`05528000 fffff880`05529f00 USBD USBD.SYS Tue Jul 14 03:06:23 2009 (4A5BCBFF)
fffff880`0552a000 fffff880`05538000 kbdhid kbdhid.sys Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff880`05538000 fffff880`05545000 mouhid mouhid.sys Tue Jul 14 03:00:20 2009 (4A5BCA94)
fffff880`05545000 fffff880`05562000 usbccgp usbccgp.sys Tue Jul 14 03:06:45 2009 (4A5BCC15)
fffff880`05562000 fffff880`05594980 vm332avs vm332avs.sys Fri Nov 13 10:39:35 2009 (4AFD1B47)
fffff880`05595000 fffff880`055a5d00 STREAM STREAM.SYS Tue Jul 14 03:06:18 2009 (4A5BCBFA)
fffff880`055a6000 fffff880`055b7000 btusbflt btusbflt.sys Fri Apr 09 04:11:36 2010 (4BBE7EC8)
fffff880`055b7000 fffff880`055cf000 BTHUSB BTHUSB.sys Tue Jul 14 03:06:52 2009 (4A5BCC1C)
fffff880`05800000 fffff880`0582f000 SCSIPORT SCSIPORT.SYS Tue Jul 14 03:01:04 2009 (4A5BCAC0)
fffff880`0582f000 fffff880`0585e000 ndiswan ndiswan.sys Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`0585e000 fffff880`05879000 raspppoe raspppoe.sys Tue Jul 14 03:10:17 2009 (4A5BCCE9)
fffff880`05896000 fffff880`05fc5000 atikmdag atikmdag.sys Wed Jun 30 04:59:35 2010 (4C2AA507)
fffff880`05fc5000 fffff880`05ff0000 jmcr jmcr.sys Fri Mar 26 09:02:54 2010 (4BAC5C1E)
fffff880`06609000 fffff880`06fe5f60 igdpmd64 igdpmd64.sys Wed Jun 02 19:43:16 2010 (4C068A24)
fffff880`06fe6000 fffff880`07000000 rassstp rassstp.sys Tue Jul 14 03:10:25 2009 (4A5BCCF1)
fffff880`07400000 fffff880`0741e000 i8042prt i8042prt.sys Tue Jul 14 02:19:57 2009 (4A5BC11D)
fffff880`0741e000 fffff880`0742d000 kbdclass kbdclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`0742d000 fffff880`0743c000 mouclass mouclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116)
fffff880`0743c000 fffff880`07462d00 Impcd Impcd.sys Sat Feb 27 01:32:11 2010 (4B8859FB)
fffff880`07463000 fffff880`07479000 intelppm intelppm.sys Tue Jul 14 02:19:25 2009 (4A5BC0FD)
fffff880`07479000 fffff880`07482000 wmiacpi wmiacpi.sys Tue Jul 14 02:31:02 2009 (4A5BC3B6)
fffff880`07482000 fffff880`07492000 CompositeBus CompositeBus.sys Tue Jul 14 03:00:33 2009 (4A5BCAA1)
fffff880`07492000 fffff880`074a8000 AgileVpn AgileVpn.sys Tue Jul 14 03:10:24 2009 (4A5BCCF0)
fffff880`074a8000 fffff880`074cc000 rasl2tp rasl2tp.sys Tue Jul 14 03:10:11 2009 (4A5BCCE3)
fffff880`074cc000 fffff880`074d8000 ndistapi ndistapi.sys Tue Jul 14 03:10:00 2009 (4A5BCCD8)
fffff880`074d8000 fffff880`074e3000 rdpbus rdpbus.sys Tue Jul 14 03:17:46 2009 (4A5BCEAA)
fffff880`074e3000 fffff880`074e4480 swenum swenum.sys Tue Jul 14 03:00:18 2009 (4A5BCA92)
fffff880`074ee000 fffff880`07b9b000 NETw5s64 NETw5s64.sys Tue Sep 15 22:40:39 2009 (4AAFEDB7)
fffff880`07b9b000 fffff880`07ba8000 vwifibus vwifibus.sys Tue Jul 14 03:07:21 2009 (4A5BCC39)
fffff880`07ba8000 fffff880`07bf9000 k57nd60a k57nd60a.sys Fri Oct 16 13:29:38 2009 (4AD84B12)
fffff880`08400000 fffff880`0842d000 mrxsmb mrxsmb.sys Sat Feb 27 09:52:19 2010 (4B88CF33)
fffff880`0842d000 fffff880`0847b000 mrxsmb10 mrxsmb10.sys Sat Feb 27 09:52:28 2010 (4B88CF3C)
fffff880`0847b000 fffff880`0849e000 mrxsmb20 mrxsmb20.sys Sat Feb 27 09:52:26 2010 (4B88CF3A)
fffff880`084e3000 fffff880`085ab000 HTTP HTTP.sys Tue Jul 14 02:22:16 2009 (4A5BC1A8)
fffff880`085ab000 fffff880`085c9000 bowser bowser.sys Tue Jul 14 02:23:50 2009 (4A5BC206)
fffff880`085c9000 fffff880`085e1000 mpsdrv mpsdrv.sys Tue Jul 14 03:08:25 2009 (4A5BCC79)
fffff880`08a00000 fffff880`08aa6000 peauth peauth.sys Tue Jul 14 04:01:19 2009 (4A5BD8DF)
fffff880`08aa6000 fffff880`08ab1000 secdrv secdrv.SYS Wed Sep 13 16:18:38 2006 (4508052E)
fffff880`08ab1000 fffff880`08ade000 srvnet srvnet.sys Fri Aug 27 06:37:24 2010 (4C7732F4)
fffff880`08ade000 fffff880`08af0000 tcpipreg tcpipreg.sys Tue Jul 14 03:09:49 2009 (4A5BCCCD)
fffff880`08af0000 fffff880`08b57000 srv2 srv2.sys Fri Aug 27 06:37:46 2010 (4C77330A)
fffff880`08bc8000 fffff880`08bd2000 vwifimp vwifimp.sys Tue Jul 14 03:07:28 2009 (4A5BCC40)
fffff880`08e33000 fffff880`08ec9000 srv srv.sys Fri Aug 27 06:38:00 2010 (4C773318)
fffff880`08ee4000 fffff880`08f1a000 fastfat fastfat.SYS Tue Jul 14 02:23:28 2009 (4A5BC1F0)
fffff960`00080000 fffff960`0038f000 win32k win32k.sys unavailable (00000000)
fffff960`004b0000 fffff960`004ba000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`006d0000 fffff960`006f7000 cdd cdd.dll unavailable (00000000)
fffff960`008a0000 fffff960`00901000 ATMFD ATMFD.DLL unavailable (00000000)
Unloaded modules:
fffff880`08f1a000 fffff880`08f4b000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00031000
fffff880`08ec9000 fffff880`08ee4000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001B000
fffff880`08b57000 fffff880`08bc8000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`01b34000 fffff880`01b42000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`04097000 fffff880`0429f000 dump_iaStor.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00208000
fffff880`0429f000 fffff880`042b2000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
fffff880`02fa4000 fffff880`02fca000 tunnel.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00026000