Well basically mine sounds like every one elses. I have windows 7 and every time i go to shut the machine down, the blue screen comes up and the computer automatically restarts and when it boots up again it states that windows has recovered from a unexpected shutdown. I have attached my dump file to the thread if any one can help me out.. i'd really appreciate it!
Windows 7 My bsod
- Thread starter JDUB348
- Start date
cybercore
New Member
- Joined
- Jul 7, 2009
LIDUSB-WIN32 is the culprit.
WDF_VIOLATION (10d)
The Kernel-Mode Driver Framework was notified that Windows detected an error
in a framework-based driver.
Caused by USB filter driver Link Removed due to 404 Error.
1. Uninstall lidusb-win32:
libusb0.sys Tue Mar 20 06:33:27 2007
2. Update old drivers:
IDT Audio
stwrt.sys Sat May 05 20:40:01 2007
Razer Tarantula Keyboard
Lycosa.sys Fri Jan 18 17:43:15 2008
Intel(R) PRO/1000 Adapter
e1e6232.sys Fri Jun 05 15:07:54 2009
ATI Catalyst
atikmdag.sys Thu Nov 25 21:43:13 2010
See if there's an update for Conexant 56k
VSTBS23.SYS Wed Oct 15 20:30:15 2008
3. You are using MSE and ZoneAlarm. Should the blue screens reoccur, uninstall ZoneAlarm.
Crash Dumps:
Drivers:
WDF_VIOLATION (10d)
The Kernel-Mode Driver Framework was notified that Windows detected an error
in a framework-based driver.
Caused by USB filter driver Link Removed due to 404 Error.
1. Uninstall lidusb-win32:
libusb0.sys Tue Mar 20 06:33:27 2007
2. Update old drivers:
IDT Audio
stwrt.sys Sat May 05 20:40:01 2007
Razer Tarantula Keyboard
Lycosa.sys Fri Jan 18 17:43:15 2008
Intel(R) PRO/1000 Adapter
e1e6232.sys Fri Jun 05 15:07:54 2009
ATI Catalyst
atikmdag.sys Thu Nov 25 21:43:13 2010
See if there's an update for Conexant 56k
VSTBS23.SYS Wed Oct 15 20:30:15 2008
3. You are using MSE and ZoneAlarm. Should the blue screens reoccur, uninstall ZoneAlarm.
Crash Dumps:
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\013111-17518-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82a3b000 PsLoadedModuleList = 0x82b83810
Debug session time: Mon Jan 31 16:15:20.298 2011 (UTC - 5:00)
System Uptime: 0 days 0:10:03.968
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
..................................................
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
WDF_VIOLATION (10d)
The Kernel-Mode Driver Framework was notified that Windows detected an error
in a framework-based driver. In general, the dump file will yield additional
information about the driver that caused this bug check.
Arguments:
Arg1: 0000000d, A power irp was received for the device but the irp was not
requested by the device (the power policy owner). Possibly there
are multiple power policy owners. Only one driver in the stack can
be the power policy owner. A KMDF driver can change power policy
ownership by calling the DDI WdfDeviceInitSetPowerPolicyOwnership.
Arg2: 86c6ee10, Device object pointer.
Arg3: 850f7900, Power Irp.
Arg4: 8642dcf0, Reserved.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for libusb0.sys
*** ERROR: Module load completed but symbols could not be loaded for libusb0.sys
BUGCHECK_STR: 0x10D_d
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 8ac4ef9e to 82b17d10
STACK_TEXT:
9d88bbec 8ac4ef9e 0000010d 0000000d 86c6ee10 nt!KeBugCheckEx+0x1e
9d88bc08 8ac61f72 8642dcf0 0000000d 86c6ee10 Wdf01000!FxVerifierBugCheck+0x24
9d88bc24 8ac61fce 8642dcf0 9d88bc50 8ac55e02 Wdf01000!FxPkgFdo::DispatchDeviceSetPower+0x6e
9d88bc30 8ac55e02 86c6e010 9d88bc58 850f7900 Wdf01000!FxPkgFdo::_DispatchSetPower+0x23
9d88bc50 8ac32a3f 850f7900 9d88bc78 8ac32c63 Wdf01000!FxPkgPnp::Dispatch+0x207
9d88bc5c 8ac32c63 86c6ee10 850f7900 850f7900 Wdf01000!FxDevice::Dispatch+0x7f
9d88bc78 82a46d16 86c6ee10 850f7900 00000016 Wdf01000!FxDevice::DispatchWithLock+0x7b
9d88bc90 82a774ae 00000003 86c6ee10 9d88bca8 nt!IopPoHandleIrp+0x28
9d88bca0 82a49049 9d88bcd8 9691528c 86c6ee10 nt!IofCallDriver+0x55
9d88bca8 9691528c 86c6ee10 850f7900 00620073 nt!IoCallDriver+0x10
WARNING: Stack unwind information not available. Following frames may be wrong.
9d88bcd8 969123dc 86c670e0 850f7900 82b7c400 libusb0+0x428c
9d88bcf8 82a46823 86c67028 850f7900 00000000 libusb0+0x13dc
9d88bd50 82c496d3 8680c828 b586f017 00000000 nt!PopIrpWorker+0x351
9d88bd90 82afb0f9 82a464d2 8680c828 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
libusb0+428c
9691528c ?? ???
SYMBOL_STACK_INDEX: a
SYMBOL_NAME: libusb0+428c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: libusb0
IMAGE_NAME: libusb0.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45ffb877
FAILURE_BUCKET_ID: 0x10D_d_libusb0+428c
BUCKET_ID: 0x10D_d_libusb0+428c
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\013111-21933-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82a44000 PsLoadedModuleList = 0x82b8c810
Debug session time: Mon Jan 31 14:36:23.033 2011 (UTC - 5:00)
System Uptime: 0 days 0:50:02.687
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
..................................................
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
WDF_VIOLATION (10d)
The Kernel-Mode Driver Framework was notified that Windows detected an error
in a framework-based driver. In general, the dump file will yield additional
information about the driver that caused this bug check.
Arguments:
Arg1: 0000000d, A power irp was received for the device but the irp was not
requested by the device (the power policy owner). Possibly there
are multiple power policy owners. Only one driver in the stack can
be the power policy owner. A KMDF driver can change power policy
ownership by calling the DDI WdfDeviceInitSetPowerPolicyOwnership.
Arg2: 86d33ef0, Device object pointer.
Arg3: 87449738, Power Irp.
Arg4: 8645ff08, Reserved.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for libusb0.sys
*** ERROR: Module load completed but symbols could not be loaded for libusb0.sys
BUGCHECK_STR: 0x10D_d
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 8ac7df9e to 82b20d10
STACK_TEXT:
8c137bec 8ac7df9e 0000010d 0000000d 86d33ef0 nt!KeBugCheckEx+0x1e
8c137c08 8ac90f72 8645ff08 0000000d 86d33ef0 Wdf01000!FxVerifierBugCheck+0x24
8c137c24 8ac90fce 8645ff08 8c137c50 8ac84e02 Wdf01000!FxPkgFdo::DispatchDeviceSetPower+0x6e
8c137c30 8ac84e02 86d30d30 8c137c58 87449738 Wdf01000!FxPkgFdo::_DispatchSetPower+0x23
8c137c50 8ac61a3f 87449738 8c137c78 8ac61c63 Wdf01000!FxPkgPnp::Dispatch+0x207
8c137c5c 8ac61c63 86d33ef0 87449738 87449738 Wdf01000!FxDevice::Dispatch+0x7f
8c137c78 82a4fd16 86d33ef0 87449738 00000016 Wdf01000!FxDevice::DispatchWithLock+0x7b
8c137c90 82a804ae 00000003 86d33ef0 8c137ca8 nt!IopPoHandleIrp+0x28
8c137ca0 82a52049 8c137cd8 9522828c 86d33ef0 nt!IofCallDriver+0x55
8c137ca8 9522828c 86d33ef0 87449738 00620073 nt!IoCallDriver+0x10
WARNING: Stack unwind information not available. Following frames may be wrong.
8c137cd8 952253dc 86d340e0 87449738 82b85400 libusb0+0x428c
8c137cf8 82a4f823 86d34028 87449738 00000000 libusb0+0x13dc
8c137d50 82c526d3 87035ea8 a4109078 00000000 nt!PopIrpWorker+0x351
8c137d90 82b040f9 82a4f4d2 87035ea8 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
libusb0+428c
9522828c ?? ???
SYMBOL_STACK_INDEX: a
SYMBOL_NAME: libusb0+428c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: libusb0
IMAGE_NAME: libusb0.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45ffb877
FAILURE_BUCKET_ID: 0x10D_d_libusb0+428c
BUCKET_ID: 0x10D_d_libusb0+428c
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\013111-19266-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82a56000 PsLoadedModuleList = 0x82b9e810
Debug session time: Mon Jan 31 21:42:28.457 2011 (UTC - 5:00)
System Uptime: 0 days 0:09:54.517
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
..................................................
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
WDF_VIOLATION (10d)
The Kernel-Mode Driver Framework was notified that Windows detected an error
in a framework-based driver. In general, the dump file will yield additional
information about the driver that caused this bug check.
Arguments:
Arg1: 0000000d, A power irp was received for the device but the irp was not
requested by the device (the power policy owner). Possibly there
are multiple power policy owners. Only one driver in the stack can
be the power policy owner. A KMDF driver can change power policy
ownership by calling the DDI WdfDeviceInitSetPowerPolicyOwnership.
Arg2: 86203cf0, Device object pointer.
Arg3: 855a3278, Power Irp.
Arg4: 86be6388, Reserved.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for libusb0.sys
*** ERROR: Module load completed but symbols could not be loaded for libusb0.sys
BUGCHECK_STR: 0x10D_d
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 8ac7ef9e to 82b32d10
STACK_TEXT:
9b6bbbec 8ac7ef9e 0000010d 0000000d 86203cf0 nt!KeBugCheckEx+0x1e
9b6bbc08 8ac91f72 86be6388 0000000d 86203cf0 Wdf01000!FxVerifierBugCheck+0x24
9b6bbc24 8ac91fce 86be6388 9b6bbc50 8ac85e02 Wdf01000!FxPkgFdo::DispatchDeviceSetPower+0x6e
9b6bbc30 8ac85e02 86bea950 9b6bbc58 855a3278 Wdf01000!FxPkgFdo::_DispatchSetPower+0x23
9b6bbc50 8ac62a3f 855a3278 9b6bbc78 8ac62c63 Wdf01000!FxPkgPnp::Dispatch+0x207
9b6bbc5c 8ac62c63 86203cf0 855a3278 855a3278 Wdf01000!FxDevice::Dispatch+0x7f
9b6bbc78 82a61d16 86203cf0 855a3278 00000016 Wdf01000!FxDevice::DispatchWithLock+0x7b
9b6bbc90 82a924ae 00000004 86203cf0 9b6bbca8 nt!IopPoHandleIrp+0x28
9b6bbca0 82a64049 9b6bbcd8 93f3b28c 86203cf0 nt!IofCallDriver+0x55
9b6bbca8 93f3b28c 86203cf0 855a3278 858cc010 nt!IoCallDriver+0x10
WARNING: Stack unwind information not available. Following frames may be wrong.
9b6bbcd8 93f383dc 86c4a0e0 855a3278 82b97400 libusb0+0x428c
9b6bbcf8 82a61823 86c4a028 855a3278 00000000 libusb0+0x13dc
9b6bbd50 82c646d3 86c1e9f0 b364df67 00000000 nt!PopIrpWorker+0x351
9b6bbd90 82b160f9 82a614d2 86c1e9f0 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
libusb0+428c
93f3b28c ?? ???
SYMBOL_STACK_INDEX: a
SYMBOL_NAME: libusb0+428c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: libusb0
IMAGE_NAME: libusb0.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 45ffb877
FAILURE_BUCKET_ID: 0x10D_d_libusb0+428c
BUCKET_ID: 0x10D_d_libusb0+428c
Followup: MachineOwner
---------Drivers:
Code:
start end module name
92607000 92633000 1394ohci 1394ohci.sys Mon Jul 13 19:51:59 2009 (4A5BC89F)
8acbd000 8ad05000 ACPI ACPI.sys Mon Jul 13 19:11:11 2009 (4A5BBF0F)
90637000 90691000 afd afd.sys Mon Jul 13 19:12:34 2009 (4A5BBF62)
92646000 92658000 AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
8ac23000 8ac2c000 amdxata amdxata.sys Tue May 19 13:57:35 2009 (4A12F30F)
9c95c000 9c965000 asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
8ade2000 8adeb000 atapi atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
8ac00000 8ac23000 ataport ataport.SYS Mon Jul 13 19:11:18 2009 (4A5BBF16)
9c9e3000 9c9ff000 AtihdW73 AtihdW73.sys Wed Nov 17 07:00:47 2010 (4CE3C3EF)
91238000 918de000 atikmdag atikmdag.sys Thu Nov 25 21:43:13 2010 (4CEF1EC1)
9c96a000 9c9a7000 atikmpag atikmpag.sys Thu Nov 25 21:16:27 2010 (4CEF187B)
8b000000 8b007000 Beep Beep.SYS Mon Jul 13 19:45:00 2009 (4A5BC6FC)
90c55000 90c63000 blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8aaad000 8aab5000 BOOTVID BOOTVID.dll Mon Jul 13 21:04:34 2009 (4A5BD9A2)
9a8ae000 9a8c7000 bowser bowser.sys Mon Jul 13 19:14:21 2009 (4A5BBFCD)
979c0000 979de000 cdd cdd.dll unavailable (00000000)
8b1e0000 8b1ff000 cdrom cdrom.sys Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8aaf7000 8aba2000 CI CI.dll Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8b196000 8b1bb000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8aab5000 8aaf7000 CLFS CLFS.SYS Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8af78000 8afd5000 cng cng.sys Mon Jul 13 19:32:55 2009 (4A5BC427)
92639000 92646000 CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
93eec000 93ef9000 crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
90c3d000 90c55000 dfsc dfsc.sys Mon Jul 13 19:14:16 2009 (4A5BBFC8)
90c31000 90c3d000 discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8b200000 8b211000 disk disk.sys Mon Jul 13 19:11:28 2009 (4A5BBF20)
93e58000 93e71000 drmk drmk.sys Mon Jul 13 20:36:05 2009 (4A5BD2F5)
93f04000 93f0d000 dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
93ef9000 93f04000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
93f0d000 93f1e000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
93ee2000 93eec000 Dxapi Dxapi.sys Mon Jul 13 19:25:25 2009 (4A5BC265)
918df000 91996000 dxgkrnl dxgkrnl.sys Mon Nov 01 22:37:53 2010 (4CCF7981)
91996000 919cf000 dxgmms1 dxgmms1.sys Mon Nov 01 22:37:04 2010 (4CCF7950)
91200000 91238000 e1e6232 e1e6232.sys Fri Jun 05 15:07:54 2009 (4A296D0A)
9c8b9000 9c8e3000 fastfat fastfat.SYS Mon Jul 13 19:14:01 2009 (4A5BBFB9)
8ac2c000 8ac3d000 fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8aba2000 8abd6000 fltmgr fltmgr.sys Mon Jul 13 19:11:13 2009 (4A5BBF11)
8afe3000 8afec000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:11:14 2009 (4A5BBF12)
8b164000 8b196000 fvevol fvevol.sys Fri Sep 25 22:24:21 2009 (4ABD7B55)
8b36e000 8b39f000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
92633000 92638280 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
82a1f000 82a56000 hal halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
919cf000 919ee000 HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
93f53000 93f66000 HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
93f66000 93f6c480 HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
93f48000 93f53000 hidusb hidusb.sys Mon Jul 13 19:51:04 2009 (4A5BC868)
9a829000 9a8ae000 HTTP HTTP.sys Mon Jul 13 19:12:53 2009 (4A5BBF75)
8b3f6000 8b3fe000 hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
90ca2000 90cb4000 intelppm intelppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
93e1b000 93e23000 ISWKL ISWKL.sys Thu Sep 02 06:44:34 2010 (4C7F8012)
9275b000 92768000 kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
93f6d000 93f79000 kbdhid kbdhid.sys Mon Jul 13 19:45:09 2009 (4A5BC705)
80baa000 80bb2000 kdcom kdcom.dll Mon Jul 13 21:08:58 2009 (4A5BDAAA)
90d72000 90da6000 ks ks.sys Wed Mar 03 22:57:52 2010 (4B8F2FC0)
8af65000 8af78000 ksecdd ksecdd.sys Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8b112000 8b137000 ksecpkg ksecpkg.sys Thu Dec 10 23:04:22 2009 (4B21C4C6)
93fd1000 93fd8d80 LHidFilt LHidFilt.Sys Thu Mar 18 04:50:19 2010 (4BA1E94B)
93f37000 93f44000 libusb0 libusb0.sys Tue Mar 20 06:33:27 2007 (45FFB877)
93fec000 93ffc000 lltdio lltdio.sys Mon Jul 13 19:53:18 2009 (4A5BC8EE)
93fe4000 93feb780 LMouFilt LMouFilt.Sys Thu Mar 18 04:50:27 2010 (4BA1E953)
93e00000 93e1b000 luafv luafv.sys Mon Jul 13 19:15:44 2009 (4A5BC020)
93f44000 93f47f00 Lycosa Lycosa.sys Fri Jan 18 17:43:15 2008 (47912B83)
8aa24000 8aa9c000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
923e2000 923ef000 modem modem.sys Mon Jul 13 19:55:24 2009 (4A5BC96C)
9c9a7000 9c9b2000 monitor monitor.sys Mon Jul 13 19:25:58 2009 (4A5BC286)
92768000 92775000 mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
93fd9000 93fe4000 mouhid mouhid.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
8adcc000 8ade2000 mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
8abd6000 8abf9000 MpFilter MpFilter.sys Sat Mar 20 00:03:26 2010 (4BA4490E)
90c2b000 90c30900 MpKsl4c38edde MpKsl4c38edde.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
9c8ec000 9c8f1900 MpKsl6a7606ba MpKsl6a7606ba.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
90c25000 90c2a900 MpKsl7bbc996a MpKsl7bbc996a.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
90c1f000 90c24900 MpKsla075842c MpKsla075842c.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
8abf9000 8abfe900 MpKsla848a890 MpKsla848a890.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
8aff9000 8affe900 MpKsla9236abe MpKsla9236abe.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
90600000 90605900 MpKslb4f7ba69 MpKslb4f7ba69.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
907fa000 907ff900 MpKslf7e09aa0 MpKslf7e09aa0.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
9c8e3000 9c8ebe00 MpNWMon MpNWMon.sys Sat Mar 20 00:03:24 2010 (4BA4490C)
9a8c7000 9a8d9000 mpsdrv mpsdrv.sys Mon Jul 13 19:52:52 2009 (4A5BC8D4)
9a8d9000 9a8fc000 mrxsmb mrxsmb.sys Sat Feb 27 02:32:02 2010 (4B88CA72)
9a8fc000 9a937000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
9a937000 9a952000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
8adf3000 8adfe000 Msfs Msfs.SYS Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8ad0e000 8ad16000 msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8af3a000 8af65000 msrpc msrpc.sys Mon Jul 13 19:11:59 2009 (4A5BBF3F)
907f0000 907fa000 mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8b3e6000 8b3f6000 mup mup.sys Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8b01d000 8b0d4000 ndis ndis.sys Mon Jul 13 19:12:24 2009 (4A5BBF58)
9268e000 92699000 ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
92699000 926bb000 ndiswan ndiswan.sys Mon Jul 13 19:54:34 2009 (4A5BC93A)
927dc000 927ed000 NDProxy NDProxy.SYS Mon Jul 13 19:54:27 2009 (4A5BC933)
90774000 90782000 netbios netbios.sys Mon Jul 13 19:53:54 2009 (4A5BC912)
90691000 906c3000 netbt netbt.sys Mon Jul 13 19:12:18 2009 (4A5BBF52)
8b0d4000 8b112000 NETIO NETIO.SYS Thu Apr 08 22:32:21 2010 (4BBE91B5)
90607000 90615000 Npfs Npfs.SYS Mon Jul 13 19:11:31 2009 (4A5BBF23)
907e6000 907f0000 nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82a56000 82e66000 nt ntkrpamp.exe Fri Jun 18 23:55:24 2010 (4C1C3FAC)
8ae0b000 8af3a000 Ntfs Ntfs.sys Mon Jul 13 19:12:05 2009 (4A5BBF45)
8b21e000 8b225000 Null Null.SYS Mon Jul 13 19:11:12 2009 (4A5BBF10)
90755000 90774000 pacer pacer.sys Mon Jul 13 19:53:58 2009 (4A5BC916)
8ad4b000 8ad5c000 partmgr partmgr.sys Mon Jul 13 19:11:35 2009 (4A5BBF27)
8ad16000 8ad40000 pci pci.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
8adb7000 8adbe000 pciide pciide.sys Mon Jul 13 19:11:19 2009 (4A5BBF17)
8adbe000 8adcc000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:11:15 2009 (4A5BBF13)
8afd5000 8afe3000 pcw pcw.sys Mon Jul 13 19:11:10 2009 (4A5BBF0E)
9a952000 9a9e9000 peauth peauth.sys Mon Jul 13 20:35:44 2009 (4A5BD2E0)
93e29000 93e58000 portcls portcls.sys Mon Jul 13 19:51:00 2009 (4A5BC864)
8aa9c000 8aaad000 PSHED PSHED.dll Mon Jul 13 21:09:36 2009 (4A5BDAD0)
92667000 9267f000 rasl2tp rasl2tp.sys Mon Jul 13 19:54:33 2009 (4A5BC939)
926e8000 92700000 raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
9270f000 92726000 raspptp raspptp.sys Mon Jul 13 19:54:47 2009 (4A5BC947)
92735000 9274c000 rassstp rassstp.sys Mon Jul 13 19:54:57 2009 (4A5BC951)
907a5000 907e6000 rdbss rdbss.sys Mon Jul 13 19:14:26 2009 (4A5BBFD2)
8b013000 8b01b000 RDPCDD RDPCDD.sys Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8ae00000 8ae08000 rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
8adeb000 8adf3000 rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8b137000 8b164000 rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
927ed000 92800000 rspndr rspndr.sys Mon Jul 13 19:53:20 2009 (4A5BC8F0)
9a9e9000 9a9f3000 secdrv secdrv.SYS Wed Sep 13 09:18:32 2006 (45080528)
8b3de000 8b3e6000 spldr spldr.sys Mon May 11 12:13:47 2009 (4A084EBB)
9c865000 9c8b6000 srv srv.sys Thu Aug 26 23:31:26 2010 (4C77318E)
9c816000 9c865000 srv2 srv2.sys Thu Aug 26 23:30:45 2010 (4C773165)
9a800000 9a821000 srvnet srvnet.sys Thu Aug 26 23:30:39 2010 (4C77315F)
93e80000 93ed3000 stwrt stwrt.sys Sat May 05 20:40:01 2007 (463D23E1)
92775000 92776380 swenum swenum.sys Mon Jul 13 19:45:08 2009 (4A5BC704)
8b225000 8b36e000 tcpip tcpip.sys Sun Jun 13 23:36:59 2010 (4C15A3DB)
9a9f3000 9aa00000 tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
9062c000 90637000 TDI TDI.SYS Mon Jul 13 19:12:12 2009 (4A5BBF4C)
90615000 9062c000 tdx tdx.sys Mon Jul 13 19:12:10 2009 (4A5BBF4A)
90795000 907a5000 termdd termdd.sys Mon Jul 13 20:01:35 2009 (4A5BCADF)
978d0000 978d9000 TSDDD TSDDD.dll unavailable (00000000)
90c63000 90c84000 tunnel tunnel.sys Mon Jul 13 19:54:03 2009 (4A5BC91B)
9278a000 92798000 umbus umbus.sys Mon Jul 13 19:51:38 2009 (4A5BC88A)
93fa3000 93fb6b00 usbaudio usbaudio.sys Mon Jul 13 19:51:23 2009 (4A5BC87B)
93f1e000 93f35000 usbccgp usbccgp.sys Mon Jul 13 19:51:31 2009 (4A5BC883)
93f35000 93f36700 USBD USBD.SYS Mon Jul 13 19:51:05 2009 (4A5BC869)
90d63000 90d72000 usbehci usbehci.sys Mon Jul 13 19:51:14 2009 (4A5BC872)
92798000 927dc000 usbhub usbhub.sys Mon Jul 13 19:52:06 2009 (4A5BC8A6)
90cf1000 90d3c000 USBPORT USBPORT.SYS Mon Jul 13 19:51:13 2009 (4A5BC871)
919ee000 919f9000 usbuhci usbuhci.sys Mon Jul 13 19:51:10 2009 (4A5BC86E)
8ad40000 8ad4b000 vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
8b007000 8b013000 vga vga.sys Mon Jul 13 19:25:50 2009 (4A5BC27E)
8aa00000 8aa21000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8ad5c000 8ad6c000 volmgr volmgr.sys Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8ad6c000 8adb7000 volmgrx volmgrx.sys Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8b39f000 8b3de000 volsnap volsnap.sys Mon Jul 13 19:11:34 2009 (4A5BBF26)
906c3000 9074e000 vsdatant vsdatant.sys Sun May 09 12:28:53 2010 (4BE6E2C5)
90db3000 90dff000 VSTBS23 VSTBS23.SYS Wed Oct 15 20:30:15 2008 (48F68B17)
9232d000 923e2000 VSTCNXT3 VSTCNXT3.SYS Wed Oct 15 20:29:13 2008 (48F68AD9)
9222b000 9232d000 VSTDPV3 VSTDPV3.SYS Wed Oct 15 20:32:04 2008 (48F68B84)
90782000 90795000 wanarp wanarp.sys Mon Jul 13 19:55:02 2009 (4A5BC956)
8afec000 8aff9000 watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8ac3e000 8acaf000 Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8acaf000 8acbd000 WDFLDR WDFLDR.SYS Mon Jul 13 19:11:25 2009 (4A5BBF1D)
9074e000 90755000 wfplwf wfplwf.sys Mon Jul 13 19:53:51 2009 (4A5BC90F)
97670000 978bb000 win32k win32k.sys unavailable (00000000)
92777000 9277af00 WmBEnum WmBEnum.sys Tue Apr 27 16:05:26 2010 (4BD74386)
8ad05000 8ad0e000 WMILIB WMILIB.SYS Mon Jul 13 19:11:22 2009 (4A5BBF1A)
9c8b6000 9c8b8080 WmVirHid WmVirHid.sys Tue Apr 27 16:04:38 2010 (4BD74356)
9277b000 92789a00 WmXlCore WmXlCore.sys Tue Apr 27 16:04:44 2010 (4BD7435C)
93f79000 93f93000 WudfPf WudfPf.sys Mon Jul 13 19:50:13 2009 (4A5BC835)
93fc2000 93fd0b00 xusb21 xusb21.sys Thu Aug 13 18:09:56 2009 (4A848F34)
Unloaded modules:
9c809000 9c810000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00007000
9c807000 9c809000 MSTEE.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9c804000 9c807000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00003000
9c802000 9c804000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9c800000 9c802000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9c9b2000 9c9ce000 AtihdW73.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001C000
9c9de000 9c9e3000 atidcmxx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00005000
9c8f2000 9c95c000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0006A000
9c9d7000 9c9de000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00007000
9c9d3000 9c9d5000 MSTEE.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9c9d5000 9c9d7000 MSPQM.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9c9d0000 9c9d3000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00003000
9c9ce000 9c9d0000 MSPCLOCK.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
926bb000 926d7000 AtihdW73.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0001C000
90cb4000 90cf1000 atikmpag.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0003D000
91239000 918df000 atikmdag.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 006A6000
93fb7000 93fc2000 monitor.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
9c965000 9c96a000 atidcmxx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00005000
9a952000 9a96a000 parport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00018000
92200000 92221000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00021000
93f93000 93f9c000 WinUSB.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
93f79000 93f82000 WinUSB.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
93f82000 93fa3000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00021000
8b211000 8b21e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
8b1bb000 8b1c6000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000B000
8b1c6000 8b1cf000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
8b1cf000 8b1e0000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00011000
93ee0000 93ee2000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
93ed3000 93ee0000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
93e7e000 93e80000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
93e71000 93e7e000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
9270d000 9270f000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
92700000 9270d000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
926e6000 926e8000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
926d9000 926e6000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
926d7000 926d9000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
926ca000 926d7000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
926c8000 926ca000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
926bb000 926c8000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
9268c000 9268e000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9267f000 9268c000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
92665000 92667000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
92658000 92665000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
927f8000 927fa000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
927eb000 927f8000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
927e9000 927eb000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
927dc000 927e9000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
92759000 9275b000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
9274c000 92759000 libusb0.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000D000
92733000 92735000 usbd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00002000
