Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\011711-22359-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c54000 PsLoadedModuleList = 0xfffff800`02e91e50
Debug session time: Mon Jan 17 09:36:47.073 2011 (UTC - 5:00)
System Uptime: 0 days 1:03:55.541
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {ffffdfff96933153, 2, 0, fffff80002ccaa37}
Probably caused by : ntkrnlmp.exe ( nt!SwapContext_PatchXRstor+51 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffffdfff96933153, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002ccaa37, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002efc0e0
ffffdfff96933153
CURRENT_IRQL: 2
FAULTING_IP:
nt!SwapContext_PatchXRstor+51
fffff800`02ccaa37 488b86b8000000 mov rax,qword ptr [rsi+0B8h]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: chrome.exe
TRAP_FRAME: fffff88009ae6e40 -- (.trap 0xfffff88009ae6e40)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000053 rbx=0000000000000000 rcx=00000000c0000102
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002ccaa37 rsp=fffff88009ae6fd0 rbp=fffff88009ae7db0
r8=fffffa8006aa3bb8 r9=0000000000000000 r10=fffffffffffffffe
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!SwapContext_PatchXRstor+0x51:
fffff800`02ccaa37 488b86b8000000 mov rax,qword ptr [rsi+0B8h] ds:0198:00000000`000000b8=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cc3ca9 to fffff80002cc4740
STACK_TEXT:
fffff880`09ae6cf8 fffff800`02cc3ca9 : 00000000`0000000a ffffdfff`96933153 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09ae6d00 fffff800`02cc2920 : 00000000`00000000 fffff800`02e3ee80 00000000`002df100 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`09ae6e40 fffff800`02ccaa37 : 00000000`00000000 00000000`00000000 fffff880`09ae6ff0 00001f80`001600a9 : nt!KiPageFault+0x260
fffff880`09ae6fd0 fffff800`02cca5da : 00000000`00000000 ffffffff`fffffffe fffff800`02e3ee00 fffff960`001645da : nt!SwapContext_PatchXRstor+0x51
fffff880`09ae7010 fffff800`02ccb992 : fffffa80`06d99780 fffffa80`06d99780 fffff880`00000000 fffff800`00000000 : nt!KiSwapContext+0x7a
fffff880`09ae7150 fffff800`02cc7d4b : 00000073`000027f2 fffff880`09ae7850 fffff900`000000e2 00000000`7efdb000 : nt!KiCommitThreadWait+0x1d2
fffff880`09ae71e0 fffff800`02fc02ef : fffff880`00000001 fffff880`09ae7520 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x271
fffff880`09ae7490 fffff800`02fe6e41 : 00000000`00000001 00000000`00000001 00000000`00000001 fffff960`0016be00 : nt!ObpWaitForMultipleObjects+0x294
fffff880`09ae7960 fffff800`02cc3993 : fffff880`09ae7ca0 fffff800`02cd080a 00000000`0000002a 00000000`74aa2450 : nt!NtWaitForMultipleObjects32+0xec
fffff880`09ae7bb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!SwapContext_PatchXRstor+51
fffff800`02ccaa37 488b86b8000000 mov rax,qword ptr [rsi+0B8h]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!SwapContext_PatchXRstor+51
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0xA_nt!SwapContext_PatchXRstor+51
BUCKET_ID: X64_0xA_nt!SwapContext_PatchXRstor+51
Followup: MachineOwner
---------
start end module name
fffff880`00eca000 fffff880`00f21000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`03411000 fffff880`0349b000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03dcd000 fffff880`03de3000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03cc4000 fffff880`03cd9000 amdppm amdppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00c2a000 fffff880`00c35000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07b69000 fffff880`07b71000 AsrOcDrv AsrOcDrv.sys Thu Jan 08 02:43:57 2009 (4965AEBD)
fffff880`07b71000 fffff880`07b7c000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00de0000 fffff880`00de9000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c00000 fffff880`00c2a000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00880000 fffff960`008e1000 ATMFD ATMFD.DLL Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`07a38000 fffff880`07a6c000 AVGIDSDriver AVGIDSDriver.Sys Tue Aug 03 18:24:45 2010 (4C58972D)
fffff880`013e6000 fffff880`013f0000 AVGIDSEH AVGIDSEH.Sys Mon Sep 13 18:46:38 2010 (4C8EA9CE)
fffff880`05706000 fffff880`05712000 AVGIDSFilter AVGIDSFilter.Sys Tue Aug 03 18:23:21 2010 (4C5896D9)
fffff880`03c4e000 fffff880`03c9e000 avgldx64 avgldx64.sys Tue Dec 07 21:01:55 2010 (4CFEE713)
fffff880`02b1d000 fffff880`02b2c000 avgmfx64 avgmfx64.sys Mon Sep 06 20:49:14 2010 (4C858C0A)
fffff880`013dc000 fffff880`013e6000 avgrkx64 avgrkx64.sys Mon Sep 06 20:49:37 2010 (4C858C21)
fffff880`02a00000 fffff880`02a61000 avgtdia avgtdia.sys Fri Nov 12 06:08:42 2010 (4CDD203A)
fffff880`02b48000 fffff880`02b4f000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`035e3000 fffff880`035f4000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05632000 fffff880`05650000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00610000 fffff960`00637000 cdd cdd.dll Tue Nov 02 00:59:22 2010 (4CCF9AAA)
fffff880`02af3000 fffff880`02b1d000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d06000 fffff880`00dc6000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`011b0000 fffff880`011e0000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ca8000 fffff880`00d06000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01302000 fffff880`01375000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`149e0000 fffff880`149f0000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`04cf5000 fffff880`04d03000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`035c5000 fffff880`035e3000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`035b6000 fffff880`035c5000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01274000 fffff880`0128a000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03fb8000 fffff880`03fda000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`04d0f000 fffff880`04d18000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04d03000 fffff880`04d0f000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04d18000 fffff880`04d2b000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04d2b000 fffff880`04d37000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03cd9000 fffff880`03dcd000 dxgkrnl dxgkrnl.sys Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`14976000 fffff880`149bc000 dxgmms1 dxgmms1.sys Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`00de9000 fffff880`00dfd000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00c35000 fffff880`00c81000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01386000 fffff880`01390000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0123a000 fffff880`01274000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`13c32000 fffff880`13c3f000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02c0b000 fffff800`02c54000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`149bc000 fffff880`149e0000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`03f1f000 fffff880`03f7b000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`03de3000 fffff880`03dfc000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`03fee000 fffff880`03ff6080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`03fe0000 fffff880`03fee000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`04c2b000 fffff880`04cf3000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`014dd000 fffff880`014e6000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04d68000 fffff880`04d8b000 irda irda.sys Mon Jul 13 20:09:01 2009 (4A5BCC9D)
fffff880`13cbd000 fffff880`13cc6000 irenum irenum.sys Mon Jul 13 20:08:59 2009 (4A5BCC9B)
fffff880`13cb1000 fffff880`13cbd000 irsir irsir.sys Sat Jan 19 01:36:11 2008 (47919A5B)
fffff880`03e3b000 fffff880`03e4a000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`013f0000 fffff880`013fe000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00ba8000 fffff800`00bb2000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03e5b000 fffff880`03e9e000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`012e8000 fffff880`01302000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`03fda000 fffff880`03fdf200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`04d8b000 fffff880`04da0000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04d45000 fffff880`04d68000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c87000 fffff880`00c94000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`04d37000 fffff880`04d45000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03e4a000 fffff880`03e59000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03c3f000 fffff880`03c4c000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00dc6000 fffff880`00de0000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`05650000 fffff880`05668000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05668000 fffff880`05695000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`05695000 fffff880`056e3000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`056e3000 fffff880`05706000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02bad000 fffff880`02bb8000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f2a000 fffff880`00f34000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0128a000 fffff880`012e8000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`035ab000 fffff880`035b6000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015ee000 fffff880`01600000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014e9000 fffff880`015db000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`149f0000 fffff880`149fc000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04c00000 fffff880`04c13000 ndisuio ndisuio.sys Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`02aa6000 fffff880`02ad5000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f0a000 fffff880`03f1f000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`034e0000 fffff880`034ef000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02a61000 fffff880`02aa6000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`02bb8000 fffff880`02bc9000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0359f000 fffff880`035ab000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c54000 fffff800`03230000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0100d000 fffff880`011b0000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02b3f000 fffff880`02b48000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`14974000 fffff880`14975180 nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`13ce2000 fffff880`14973e00 nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`04da0000 fffff880`04df3000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`034a4000 fffff880`034ca000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f74000 fffff880`00f89000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f34000 fffff880`00f67000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e00000 fffff880`00e07000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e07000 fffff880`00e17000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01375000 fffff880`01386000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05712000 fffff880`057b8000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03400000 fffff880`03410000 point64 point64.sys Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`03f7b000 fffff880`03fb8000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c94000 fffff880`00ca8000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0358c000 fffff880`0359f000 RapportEI64 RapportEI64.sys Wed Jan 05 11:59:23 2011 (4D24A36B)
fffff880`015db000 fffff880`015ee000 RapportKE64 RapportKE64.sys Wed Jan 05 11:58:40 2011 (4D24A340)
fffff880`02b2c000 fffff880`02b3f000 RapportPG64 RapportPG64.sys Wed Jan 05 11:58:48 2011 (4D24A348)
fffff880`03c00000 fffff880`03c24000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03c24000 fffff880`03c3f000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03e00000 fffff880`03e21000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03e21000 fffff880`03e3b000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0353b000 fffff880`0358c000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02b92000 fffff880`02b9b000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02b9b000 fffff880`02ba4000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02ba4000 fffff880`02bad000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01200000 fffff880`0123a000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04c13000 fffff880`04c2b000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`13c00000 fffff880`13c32000 Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009 (49A65B0D)
fffff880`057b8000 fffff880`057c3000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`13cc6000 fffff880`13cd2000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`034ef000 fffff880`0350c000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`014d5000 fffff880`014dd000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`07ad3000 fffff880`07b69000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07a6c000 fffff880`07ad3000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`057c3000 fffff880`057f0000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`03e59000 fffff880`03e5a480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`05600000 fffff880`05612000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02be7000 fffff880`02bf4000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02bc9000 fffff880`02be7000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03527000 fffff880`0353b000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00530000 fffff960`0053a000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`03c9e000 fffff880`03cc4000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03e9e000 fffff880`03eb0000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`011e0000 fffff880`011fd000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`03ff7000 fffff880`03ff8f00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`13ca0000 fffff880`13cb1000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`03eb0000 fffff880`03f0a000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`13c3f000 fffff880`13c4a000 usbohci usbohci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`13c4a000 fffff880`13ca0000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`02ad5000 fffff880`02af0000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00f67000 fffff880`00f74000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02b4f000 fffff880`02b5d000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02b5d000 fffff880`02b82000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f89000 fffff880`00f9e000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f9e000 fffff880`00ffa000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01390000 fffff880`013dc000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`034ca000 fffff880`034e0000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`0350c000 fffff880`03527000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02b82000 fffff880`02b92000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e17000 fffff880`00ebb000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ebb000 fffff880`00eca000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0349b000 fffff880`034a4000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003b0000 win32k win32k.sys Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`13cd2000 fffff880`13cdb000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f21000 fffff880`00f2a000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
Unloaded modules:
fffff880`07b7c000 fffff880`07bed000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`013f0000 fffff880`013fe000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`011e0000 fffff880`011ec000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`011ec000 fffff880`011f5000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`02ae0000 fffff880`02af3000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
I will do as you had said thank you.
Just wondering how do i do the latter do recommendations. probably seems simple to you but I am not exactly sure
4. Update the overclocker driver and do not overclock until BSODs are gone:
AsrOcDrv.sys Thu Jan 08 02:43:57 2009
thank you for your help, just have to see if it works over the next few days.
your help has been much appreciated
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\011811-22515-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c1d000 PsLoadedModuleList = 0xfffff800`02e5ae50
Debug session time: Tue Jan 18 08:47:51.218 2011 (UTC - 5:00)
System Uptime: 0 days 0:00:12.734
Loading Kernel Symbols
................................................
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {3, fffff8a0004cf530, fffff8a0004cf530, ffffffff00000061}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+ca0 )
Followup: Pool_corruption
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff8a0004cf530, the pool entry being checked.
Arg3: fffff8a0004cf530, the read back flink freelist value (should be the same as 2).
Arg4: ffffffff00000061, the read back blink freelist value (should be the same as 2).
Debugging Details:
------------------
BUGCHECK_STR: 0x19_3
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002dc0130 to fffff80002c8d740
STACK_TEXT:
fffff880`009a8608 fffff800`02dc0130 : 00000000`00000019 00000000`00000003 fffff8a0`004cf530 fffff8a0`004cf530 : nt!KeBugCheckEx
fffff880`009a8610 fffff800`02dc24c1 : fffff8a0`004ec970 fffff8a0`004ec000 fffff880`009a8820 00000000`004ab240 : nt!ExDeferredFreePool+0xca0
fffff880`009a86a0 fffff880`00d14f08 : 00000000`00000008 00000000`004ab242 00000000`72634943 00000000`00000004 : nt!ExFreePoolWithTag+0x411
fffff880`009a8750 fffff880`00d148e0 : 00000000`00000000 00000000`00000009 fffff8a0`004e1750 fffff8a0`004bd810 : CI!I_MinCryptGetCertificateEKUs+0x188
fffff880`009a87c0 fffff880`00d15f60 : 00000000`004ab500 00000000`00000000 00000000`00000024 fffff8a0`004cb5e0 : CI!MinCryptVerifyCertificateWithPolicy+0x214
fffff880`009a8960 fffff880`00d12179 : fffff8a0`00000001 00000000`0000b905 00000000`72634943 00000000`000007ff : CI!MinCrypK_VerifySignedDataKModeEx+0x2d4
fffff880`009a8ac0 fffff880`00d11e0a : 00000000`00000000 fffff8a0`004bd7a0 00000000`00000000 00000000`00000000 : CI!I_ParseCatalog+0x101
fffff880`009a8c50 fffff880`00d12578 : fffff880`0000b905 fffff8a0`004bd7a0 00000000`004a0000 ffffffff`80000054 : CI!I_MapCatalog+0x19e
fffff880`009a8d00 fffff880`00d113dd : ffffffff`80000060 00000000`c0000428 fffff880`009a91d8 00000000`00000000 : CI!I_ReloadCatalogs+0x2cc
fffff880`009a8ea0 fffff880`00d0f9cd : fffff880`009a90f0 00000000`00000001 fffff880`00000000 00000000`00000000 : CI!I_FindFileOrHeaderHashInCatalogs+0x101
fffff880`009a8f40 fffff880`00d10381 : fffffa80`082b2050 fffff880`009a90f0 00000000`00008004 00000000`00000000 : CI!CipFindFileHash+0xf9
fffff880`009a9010 fffff880`00d0efbb : 00000000`00000001 fffff880`009a92d0 fffff880`009a92d0 00000000`00000000 : CI!CipValidateFileHash+0x311
fffff880`009a9180 fffff800`02ef868e : 00000000`000001ab 00000000`000fffff fffffa80`082b2050 00000000`00000000 : CI!CiValidateImageHeader+0x213
fffff880`009a9260 fffff800`02ef857c : 00000000`00000001 00000000`01000000 fffffa80`08455010 00000000`00000000 : nt!SeValidateImageHeader+0x2e
fffff880`009a92a0 fffff800`02f88d95 : fffffa80`082b2050 fffffa80`08455010 00000000`00000001 00000000`000001ab : nt!MiValidateImageHeader+0xa4
fffff880`009a9360 fffff800`02f7e013 : fffff880`009a95c0 00000000`00000000 fffff880`009a9878 00000000`00000001 : nt!MmCreateSection+0x8c9
fffff880`009a9570 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateSection+0x162
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExDeferredFreePool+ca0
fffff800`02dc0130 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExDeferredFreePool+ca0
FOLLOWUP_NAME: Pool_corruption
IMAGE_NAME: Pool_Corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: Pool_Corruption
FAILURE_BUCKET_ID: X64_0x19_3_nt!ExDeferredFreePool+ca0
BUCKET_ID: X64_0x19_3_nt!ExDeferredFreePool+ca0
Followup: Pool_corruption
---------
start end module name
fffff880`00ed9000 fffff880`00f30000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00fe7000 fffff880`00ff2000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00fde000 fffff880`00fe7000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00dc4000 fffff880`00dee000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00d04000 fffff880`00dc4000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01858000 fffff880`01888000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ca6000 fffff880`00d04000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010da000 fffff880`0114d000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`01888000 fffff880`01896000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`01842000 fffff880`01858000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`018a2000 fffff880`018ab000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01896000 fffff880`018a2000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`018ab000 fffff880`018be000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`01068000 fffff880`0107c000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0101c000 fffff880`01068000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`013e7000 fffff880`013f1000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01808000 fffff880`01842000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`015b2000 fffff880`015fc000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`031f9000 fffff800`03242000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`013f1000 fffff880`013fa000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff800`00ba7000 fffff800`00bb1000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`013bc000 fffff880`013d6000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`00c85000 fffff880`00c92000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`00fc4000 fffff880`00fde000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f39000 fffff880`00f43000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`0107c000 fffff880`010da000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`014a6000 fffff880`014b8000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014c0000 fffff880`015b2000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff800`02c1d000 fffff800`031f9000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01219000 fffff880`013bc000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`00f83000 fffff880`00f98000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f43000 fffff880`00f76000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fad000 fffff880`00fb4000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fb4000 fffff880`00fc4000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013d6000 fffff880`013e7000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`00c92000 fffff880`00ca6000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`01493000 fffff880`014a6000 RapportKE64 RapportKE64.sys Wed Jan 05 11:58:40 2011 (4D24A340)
fffff880`01199000 fffff880`011d3000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`0148b000 fffff880`01493000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01600000 fffff880`017fd000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`00f76000 fffff880`00f83000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00f98000 fffff880`00fad000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0114d000 fffff880`01199000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`00e26000 fffff880`00eca000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eca000 fffff880`00ed9000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f30000 fffff880`00f39000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\012011-16640-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c0b000 PsLoadedModuleList = 0xfffff800`02e48e50
Debug session time: Thu Jan 20 04:24:16.853 2011 (UTC - 5:00)
System Uptime: 0 days 0:02:26.369
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C5, {fffffb800a16f9c0, 2, 0, fffff80002daf0cd}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+241 )
Followup: Pool_corruption
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: fffffb800a16f9c0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80002daf0cd, address which referenced memory
Debugging Details:
------------------
BUGCHECK_STR: 0xC5_2
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExDeferredFreePool+241
fffff800`02daf0cd 4c3910 cmp qword ptr [rax],r10
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: svchost.exe
IRP_ADDRESS: fffffa800a102f88
TRAP_FRAME: fffff88007d7f290 -- (.trap 0xfffff88007d7f290)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffb800a16f9c0 rbx=0000000000000000 rcx=fffff80002e0abf0
rdx=fffffa80084dd000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002daf0cd rsp=fffff88007d7f420 rbp=0000000000000000
r8=fffffa8009f25510 r9=fffffa80084dd360 r10=fffffa80084dd370
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!ExDeferredFreePool+0x241:
fffff800`02daf0cd 4c3910 cmp qword ptr [rax],r10 ds:0003:fffffb80`0a16f9c0=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002c7aca9 to fffff80002c7b740
STACK_TEXT:
fffff880`07d7f148 fffff800`02c7aca9 : 00000000`0000000a fffffb80`0a16f9c0 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`07d7f150 fffff800`02c79920 : 00000000`00000000 00000000`00000000 4cf00001`7e01c921 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`07d7f290 fffff800`02daf0cd : fffffa80`00000000 ffffffff`ffffffff 00006200`00006c7a 0000558e`00006c7a : nt!KiPageFault+0x260
fffff880`07d7f420 fffff800`02db04c1 : fffffa80`0a19d000 fffffa80`0a19d000 00000000`00000000 fffff8a0`02943c70 : nt!ExDeferredFreePool+0x241
fffff880`07d7f4b0 fffff800`02c9ad1c : 00000000`00000001 fffffa80`0a19d010 00000000`20707249 00000000`00000001 : nt!ExFreePoolWithTag+0x411
fffff880`07d7f560 fffff800`02c7e0dd : fffffa80`0a103000 00000000`00040000 fffffa80`090d5301 fffff980`00000000 : nt!IopCompleteRequest+0x54c
fffff880`07d7f630 fffff880`01228953 : fffffa80`096fd940 00000000`00000001 fffff880`07d7f8e0 00000000`00000000 : nt!IopfCompleteRequest+0x75d
fffff880`07d7f710 fffff880`01229f78 : fffffa80`096fd940 fffffa80`0a19d010 fffff880`07d7f800 fffffa80`0a200800 : Ntfs!NtfsCommonRead+0x1bc7
fffff880`07d7f8b0 fffff880`0106c23f : fffffa80`0a19d3b0 fffffa80`0a19d010 fffffa80`0a200830 00000000`00000001 : Ntfs!NtfsFsdRead+0x1b8
fffff880`07d7f960 fffff880`0106a6df : fffffa80`079a1ce0 00000000`00000000 fffffa80`079a1c00 fffffa80`0a19d010 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`07d7f9f0 fffff800`02f91ca9 : 00000000`00000000 fffffa80`073322e0 00000000`00000000 fffffa80`0a19d010 : fltmgr!FltpDispatch+0xcf
fffff880`07d7fa50 fffff800`02f994a3 : fffffa80`073322e0 fffffa80`073322e0 fffffa80`073322e0 fffff680`00001b01 : nt!IopSynchronousServiceTail+0xf9
fffff880`07d7fac0 fffff800`02c7a993 : 00000000`00001179 00000000`000004ec 00000000`00000000 00000000`01ebd618 : nt!NtReadFile+0x631
fffff880`07d7fbb0 00000000`7723fdba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0270e0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7723fdba
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExDeferredFreePool+241
fffff800`02daf0cd 4c3910 cmp qword ptr [rax],r10
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!ExDeferredFreePool+241
FOLLOWUP_NAME: Pool_corruption
IMAGE_NAME: Pool_Corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: Pool_Corruption
FAILURE_BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+241
BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+241
Followup: Pool_corruption
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\012011-18781-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (3 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c0f000 PsLoadedModuleList = 0xfffff800`02e4ce50
Debug session time: Thu Jan 20 04:41:29.170 2011 (UTC - 5:00)
System Uptime: 0 days 0:11:00.686
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {ffffd8a008b7a030, 1, fffff80002c8b6e0, 7}
Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+40e0b )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ffffd8a008b7a030, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff80002c8b6e0, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000007, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eb70e0
ffffd8a008b7a030
FAULTING_IP:
nt!ObfReferenceObject+20
fffff800`02c8b6e0 f0480fc11f lock xadd qword ptr [rdi],rbx
MM_INTERNAL_CODE: 7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
TRAP_FRAME: fffff880090338c0 -- (.trap 0xfffff880090338c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a0013238c2 rbx=0000000000000000 rcx=ffffd8a008b7a060
rdx=fffff8a0013238c0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002c8b6e0 rsp=fffff88009033a50 rbp=0000000000000000
r8=fffff8a0013238c3 r9=fffffa80098b7838 r10=fffffa8006a51820
r11=fffff88009033ba8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!ObfReferenceObject+0x20:
fffff800`02c8b6e0 f0480fc11f lock xadd qword ptr [rdi],rbx ds:0001:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002cfe849 to fffff80002c7f740
STACK_TEXT:
fffff880`09033758 fffff800`02cfe849 : 00000000`00000050 ffffd8a0`08b7a030 00000000`00000001 fffff880`090338c0 : nt!KeBugCheckEx
fffff880`09033760 fffff800`02c7d82e : 00000000`00000001 00000000`00000001 00000000`00000000 000007fe`f9d7e034 : nt! ?? ::FNODOBFM::`string'+0x40e0b
fffff880`090338c0 fffff800`02c8b6e0 : fffff8a0`00000000 fffff8a0`08ae27e0 00000000`00000008 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`09033a50 fffff800`02f537b1 : fffff8a0`013238c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObfReferenceObject+0x20
fffff880`09033a80 fffff800`02f55f2e : 00000000`00000100 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PsImpersonateClient+0xb1
fffff880`09033b10 fffff800`02f5627b : fffff880`09033ca0 000007fe`00000001 00000000`00000000 fffffa80`07555070 : nt!AlpcpImpersonateMessage+0xfe
fffff880`09033bb0 fffff800`02c7e993 : fffffa80`06ca8b60 00000000`00000000 00000000`00008001 fffffa80`07555070 : nt!NtAlpcImpersonateClientOfPort+0x159
fffff880`09033c20 00000000`77c4054a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0740cbd8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c4054a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+40e0b
fffff800`02cfe849 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+40e0b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4c1c44a9
FAILURE_BUCKET_ID: X64_0x50_nt!_??_::FNODOBFM::_string_+40e0b
BUCKET_ID: X64_0x50_nt!_??_::FNODOBFM::_string_+40e0b
Followup: MachineOwner
---------
start end module name
fffff880`00eca000 fffff880`00f21000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02a00000 fffff880`02a8a000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`149c1000 fffff880`149d7000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03426000 fffff880`0343b000 amdppm amdppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e64000 fffff880`00e6f000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`07096000 fffff880`070a1000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00e31000 fffff880`00e3a000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e3a000 fffff880`00e64000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00960000 fffff960`009c1000 ATMFD ATMFD.DLL Tue Oct 19 23:05:45 2010 (4CBE5C89)
fffff880`02b0a000 fffff880`02b11000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`035e0000 fffff880`035f1000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0674b000 fffff880`06769000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`006c0000 fffff960`006e7000 cdd cdd.dll unavailable (00000000)
fffff880`02aa6000 fffff880`02ad0000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00c9a000 fffff880`00d5a000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01074000 fffff880`010a4000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c3c000 fffff880`00c9a000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01118000 fffff880`0118b000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`149b1000 fffff880`149c1000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`035f1000 fffff880`035ff000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`035c2000 fffff880`035e0000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`035b3000 fffff880`035c2000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0120a000 fffff880`01220000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0474f000 fffff880`04771000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`13ca0000 fffff880`13ca9000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`02a93000 fffff880`02a9f000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`011d7000 fffff880`011ea000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`047cb000 fffff880`047d7000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03cf4000 fffff880`03de8000 dxgkrnl dxgkrnl.sys Mon Nov 01 22:51:31 2010 (4CCF7CB3)
fffff880`03c00000 fffff880`03c46000 dxgmms1 dxgmms1.sys Mon Nov 01 22:50:56 2010 (4CCF7C90)
fffff880`010a6000 fffff880`010ba000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00e6f000 fffff880`00ebb000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01200000 fffff880`0120a000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0103a000 fffff880`01074000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`015a7000 fffff880`015f1000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`03cd0000 fffff880`03cdd000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`031eb000 fffff800`03234000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`03c46000 fffff880`03c6a000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`046b6000 fffff880`04712000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`047e5000 fffff880`047fe000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`04600000 fffff880`04608080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`047d7000 fffff880`047e5000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06683000 fffff880`0674b000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01412000 fffff880`0141b000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`036b2000 fffff880`036d5000 irda irda.sys Mon Jul 13 20:09:01 2009 (4A5BCC9D)
fffff880`14993000 fffff880`1499c000 irenum irenum.sys Mon Jul 13 20:08:59 2009 (4A5BCC9B)
fffff880`03ce8000 fffff880`03cf4000 irsir irsir.sys Sat Jan 19 01:36:11 2008 (47919A5B)
fffff880`13c91000 fffff880`13ca0000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03660000 fffff880`0366e000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bc0000 fffff800`00bca000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0344a000 fffff880`0348d000 ks ks.sys Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`013cf000 fffff880`013e9000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`0157c000 fffff880`015a7000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`04771000 fffff880`04776200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`036d5000 fffff880`036ea000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0366e000 fffff880`03691000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c1b000 fffff880`00c28000 mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`0349f000 fffff880`034ad000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0343b000 fffff880`0344a000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0460b000 fffff880`04618000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e17000 fffff880`00e31000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02ad0000 fffff880`02b01000 MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`06623000 fffff880`06633000 MpNWMon MpNWMon.sys Tue Sep 14 20:19:30 2010 (4C901112)
fffff880`06769000 fffff880`06781000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`06781000 fffff880`067ae000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`067ae000 fffff880`067fc000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`06600000 fffff880`06623000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`02b6f000 fffff880`02b7a000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f2a000 fffff880`00f34000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010ba000 fffff880`01118000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`035a8000 fffff880`035b3000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01400000 fffff880`01412000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0142a000 fffff880`0151c000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`13c00000 fffff880`13c0c000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0373d000 fffff880`03750000 ndisuio ndisuio.sys Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`13c0c000 fffff880`13c3b000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`046a1000 fffff880`046b6000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`034f0000 fffff880`034ff000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02bb6000 fffff880`02bfb000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`0151c000 fffff880`0157c000 NETIO NETIO.SYS Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`06633000 fffff880`06648000 NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`02b7a000 fffff880`02b8b000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0359c000 fffff880`035a8000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02c0f000 fffff800`031eb000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122c000 fffff880`013cf000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`02b01000 fffff880`02b0a000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`1493b000 fffff880`1493c180 nvBridge nvBridge.kmd Fri Jul 09 17:07:54 2010 (4C378FAA)
fffff880`13ca9000 fffff880`1493ae00 nvlddmkm nvlddmkm.sys Fri Jul 09 17:15:58 2010 (4C37918E)
fffff880`036ea000 fffff880`0373d000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`034b4000 fffff880`034da000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f74000 fffff880`00f89000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f34000 fffff880`00f67000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e00000 fffff880`00e07000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e07000 fffff880`00e17000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013e9000 fffff880`013fa000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`070a2000 fffff880`07148000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04618000 fffff880`04628000 point64 point64.sys Tue Jun 29 04:54:31 2010 (4C29B4C7)
fffff880`04712000 fffff880`0474f000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c28000 fffff880`00c3c000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`149d7000 fffff880`149fb000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`13c3b000 fffff880`13c56000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`13c56000 fffff880`13c77000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`13c77000 fffff880`13c91000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0354b000 fffff880`0359c000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02b54000 fffff880`02b5d000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02b5d000 fffff880`02b66000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02b66000 fffff880`02b6f000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01000000 fffff880`0103a000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`03750000 fffff880`03768000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03c6a000 fffff880`03cd0000 Rt64win7 Rt64win7.sys Tue Nov 30 01:01:28 2010 (4CF49338)
fffff880`07148000 fffff880`07153000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`1499c000 fffff880`149a8000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`034ff000 fffff880`0351c000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015f1000 fffff880`015f9000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`03768000 fffff880`037d9000 spsys spsys.sys Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`07000000 fffff880`07096000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07192000 fffff880`071f9000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`07153000 fffff880`07180000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`03df9000 fffff880`03dfa480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`07180000 fffff880`07192000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02ba9000 fffff880`02bb6000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02b8b000 fffff880`02ba9000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`03537000 fffff880`0354b000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00530000 fffff960`0053a000 TSDDD TSDDD.dll Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03400000 fffff880`03426000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04777000 fffff880`047cb000 udfs udfs.sys Mon Jul 13 19:23:37 2009 (4A5BC1F9)
fffff880`0348d000 fffff880`0349f000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`03643000 fffff880`03660000 usbccgp usbccgp.sys Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`04609000 fffff880`0460af00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03de8000 fffff880`03df9000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04647000 fffff880`046a1000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03cdd000 fffff880`03ce8000 usbohci usbohci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`1493d000 fffff880`14993000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04628000 fffff880`04643000 USBSTOR USBSTOR.SYS Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00f67000 fffff880`00f74000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02b11000 fffff880`02b1f000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02b1f000 fffff880`02b44000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f89000 fffff880`00f9e000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f9e000 fffff880`00ffa000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0118b000 fffff880`011d7000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`034da000 fffff880`034f0000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`0351c000 fffff880`03537000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02b44000 fffff880`02b54000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00d5a000 fffff880`00dfe000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00c00000 fffff880`00c0f000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02a8a000 fffff880`02a93000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00090000 fffff960`003a0000 win32k win32k.sys Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`149a8000 fffff880`149b1000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f21000 fffff880`00f2a000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`03691000 fffff880`036b2000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
Unloaded modules:
fffff880`03768000 fffff880`037d9000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`07096000 fffff880`0709e000 AODDriver.sy
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
fffff880`0141b000 fffff880`01429000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`01220000 fffff880`0122c000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`011d7000 fffff880`011e0000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`011e0000 fffff880`011f3000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
would you recommend manually changing them all the the values that they should be?
MatEnd said:you provide an excellent line of assistance for people such as myself and it is very much appreciated.