tcpip.sys =(

Discussion in 'Windows 7 Blue Screen of Death (BSOD)' started by Master64, Feb 7, 2011.

  1. Master64

    Master64 New Member

    Joined:
    Feb 7, 2011
    Messages:
    10
    Likes Received:
    0
    View attachment DMP Files.rar Well..yeah, I got the deadly tcpip.sys.

    I have Windows 7 64bit.

    Here are my dump files, I really hope someone can help =(
     
  2. Elmer

    Elmer Extraordinary Member

    Joined:
    Mar 5, 2010
    Messages:
    3,873
    Likes Received:
    284
    Hi Master64 and Welcome.

    STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
    Usual causes:
    Device driver

    Your latest dump file blames PctWfpFilter64.sys which is a part of PC Tools.
    Old and incompatible drivers can and do cause issues with Windows 7, often giving false error codes.

    As a Priority:

    PC Tools is known to be a cause of BSOD's on some Windows 7 systems. Uninstall PC Tools. Download Microsoft Security Essentials as its replacement. Make sure your Windows firewall is switched on!

    Outdated Drivers. Update:

    k57nd60a.sys Sat Jun 20 12:34:49 2009 Broadcom Ethernet

    nvlddmkm.sys Fri Jun 26 23:15:53 2009 nVidia Graphics Drivers.

    RTKVHD64.sys Fri May 22 19:04:20 2009 Realtek HD Audio R2.57

    Analysis
    Code:
    Loading Dump File [D:\ DOWNLOADS\ DUMPS\Master64\020711-20092-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\XSymCache*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c65000 PsLoadedModuleList = 0xfffff800`02ea2e50
    Debug session time: Mon Feb  7 20:11:10.394 2011 (UTC + 0:00)
    System Uptime: 0 days 1:07:03.580
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ............................
    Loading User Symbols
    Loading unloaded module list
    .......
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck D1, {0, 2, 0, fffff88001a8c7a0}
    
    Unable to load image \Device\Harddisk0\Partition3\Windows\system32\drivers\PctWfpFilter64.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for PctWfpFilter64.sys
    *** ERROR: Module load completed but symbols could not be loaded for PctWfpFilter64.sys
    Probably caused by : NETIO.SYS ( NETIO!NetioDereferenceNetBufferList+86 )
    
    Followup: MachineOwner
    ---------
    
    6: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff88001a8c7a0, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0d0e0
     0000000000000000 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip! ?? ::FNODOBFM::`string'+56f4
    fffff880`01a8c7a0 488b01          mov     rax,qword ptr [rcx]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xD1
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff8800785a520 -- (.trap 0xfffff8800785a520)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa800ba97300 rbx=0000000000000000 rcx=0000000000000000
    rdx=fffffa800ba97301 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff88001a8c7a0 rsp=fffff8800785a6b0 rbp=0000000000000000
     r8=fffffa800ba97300  r9=00000000000000d0 r10=fffff88003315e80
    r11=fffffa80094fb2f0 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na po nc
    tcpip! ?? ::FNODOBFM::`string'+0x56f4:
    fffff880`01a8c7a0 488b01          mov     rax,qword ptr [rcx] ds:07ff:00000000`00000000=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002cd4ca9 to fffff80002cd5740
    
    STACK_TEXT:  
    fffff880`0785a3d8 fffff800`02cd4ca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`0785a3e0 fffff800`02cd3920 : fffffa80`0a1cd140 fffffa80`094fce20 fffffa80`07bafd50 fffffa80`07d3f380 : nt!KiBugCheckDispatch+0x69
    fffff880`0785a520 fffff880`01a8c7a0 : fffffa80`094fce20 fffff880`013eeaca fffff880`206c644d fffffa80`0a9f97b0 : nt!KiPageFault+0x260
    fffff880`0785a6b0 fffff880`018826a6 : fffffa80`094fce20 00000000`07d32000 00000000`00000000 fffffa80`07d32000 : tcpip! ?? ::FNODOBFM::`string'+0x56f4
    fffff880`0785a700 fffff880`0188035d : 00000000`00000000 fffffa80`0a9f97b0 00000000`00000000 fffff880`01b6e9a0 : NETIO!NetioDereferenceNetBufferList+0x86
    fffff880`0785a730 fffff880`01a60e26 : fffffa80`07d32000 fffffa80`0a9f9800 00000000`00000011 fffffa80`094fce20 : NETIO!NetioDereferenceNetBufferListChain+0x2dd
    fffff880`0785a7b0 fffff880`01a5fb21 : 00000000`00000000 fffffa80`07d32000 fffff880`01b6e9a0 00000000`0c53ab01 : tcpip!IppReceiveHeaderBatch+0x3c7
    fffff880`0785a890 fffff880`01b37542 : fffffa80`0938d780 00000000`00000000 fffffa80`0c53ab01 00000000`00000001 : tcpip!IpFlcReceivePackets+0x651
    fffff880`0785aa90 fffff880`01912afa : fffffa80`0b258802 fffffa80`0b2588a0 00000000`00000002 00000000`00000000 : tcpip!IppInspectInjectReceive+0xf2
    fffff880`0785aad0 fffff880`013e771d : fffffa80`0a003b10 fffffa80`0c53aba0 00000000`c0000000 fffff880`00000000 : fwpkclnt!FwpsInjectTransportReceiveAsync0+0x256
    fffff880`0785ab80 fffffa80`0a003b10 : fffffa80`0c53aba0 00000000`c0000000 fffff880`00000000 fffffa80`0b6c0002 : PctWfpFilter64+0xd71d
    fffff880`0785ab88 fffffa80`0c53aba0 : 00000000`c0000000 fffff880`00000000 fffffa80`0b6c0002 fffffa80`00000001 : 0xfffffa80`0a003b10
    fffff880`0785ab90 00000000`c0000000 : fffff880`00000000 fffffa80`0b6c0002 fffffa80`00000001 fffffa80`0000000b : 0xfffffa80`0c53aba0
    fffff880`0785ab98 fffff880`00000000 : fffffa80`0b6c0002 fffffa80`00000001 fffffa80`0000000b fffffa80`00000000 : 0xc0000000
    fffff880`0785aba0 fffffa80`0b6c0002 : fffffa80`00000001 fffffa80`0000000b fffffa80`00000000 fffffa80`00000000 : 0xfffff880`00000000
    fffff880`0785aba8 fffffa80`00000001 : fffffa80`0000000b fffffa80`00000000 fffffa80`00000000 fffff880`013e7250 : 0xfffffa80`0b6c0002
    fffff880`0785abb0 fffffa80`0000000b : fffffa80`00000000 fffffa80`00000000 fffff880`013e7250 fffffa80`0c53aba0 : 0xfffffa80`00000001
    fffff880`0785abb8 fffffa80`00000000 : fffffa80`00000000 fffff880`013e7250 fffffa80`0c53aba0 00000000`00000002 : 0xfffffa80`0000000b
    fffff880`0785abc0 fffffa80`00000000 : fffff880`013e7250 fffffa80`0c53aba0 00000000`00000002 fffffa80`0a9f97b0 : 0xfffffa80`00000000
    fffff880`0785abc8 fffff880`013e7250 : fffffa80`0c53aba0 00000000`00000002 fffffa80`0a9f97b0 fffff880`013f6338 : 0xfffffa80`00000000
    fffff880`0785abd0 fffffa80`0c53aba0 : 00000000`00000002 fffffa80`0a9f97b0 fffff880`013f6338 00000000`00000000 : PctWfpFilter64+0xd250
    fffff880`0785abd8 00000000`00000002 : fffffa80`0a9f97b0 fffff880`013f6338 00000000`00000000 00000000`00000000 : 0xfffffa80`0c53aba0
    fffff880`0785abe0 fffffa80`0a9f97b0 : fffff880`013f6338 00000000`00000000 00000000`00000000 00000000`53636670 : 0x2
    fffff880`0785abe8 fffff880`013f6338 : 00000000`00000000 00000000`00000000 00000000`53636670 fffffa80`0b82c7d0 : 0xfffffa80`0a9f97b0
    fffff880`0785abf0 00000000`00000000 : 00000000`00000000 00000000`53636670 fffffa80`0b82c7d0 fffff880`013f9128 : PctWfpFilter64+0x1c338
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    NETIO!NetioDereferenceNetBufferList+86
    fffff880`018826a6 4885ff          test    rdi,rdi
    
    SYMBOL_STACK_INDEX:  4
    
    SYMBOL_NAME:  NETIO!NetioDereferenceNetBufferList+86
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: NETIO
    
    IMAGE_NAME:  NETIO.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a
    
    FAILURE_BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    Followup: MachineOwner
    Drivers:
    Code:
    fffff880`05598000 fffff880`055d6000   1394ohci 1394ohci.sys Tue Jul 14 01:07:12 2009 (4A5BCC30)
    fffff880`00f0d000 fffff880`00f64000   ACPI     ACPI.sys     Tue Jul 14 00:19:34 2009 (4A5BC106)
    fffff880`02eb3000 fffff880`02f3d000   afd      afd.sys      Tue Jul 14 00:21:40 2009 (4A5BC184)
    fffff880`03e24000 fffff880`03e3a000   AgileVpn AgileVpn.sys Tue Jul 14 01:10:24 2009 (4A5BCCF0)
    fffff880`010d1000 fffff880`010dc000   amdxata  amdxata.sys  Tue May 19 18:56:59 2009 (4A12F2EB)
    fffff880`0109e000 fffff880`010a7000   atapi    atapi.sys    Tue Jul 14 00:19:47 2009 (4A5BC113)
    fffff880`010a7000 fffff880`010d1000   ataport  ataport.SYS  Tue Jul 14 00:19:52 2009 (4A5BC118)
    fffff880`0427a000 fffff880`043e8000   athrx    athrx.sys    Fri Jun 05 23:10:06 2009 (4A2997BE)
    fffff960`00730000 fffff960`00791000   ATMFD    ATMFD.DLL    unavailable (00000000)
    fffff880`0163d000 fffff880`01644000   Beep     Beep.SYS     Tue Jul 14 01:00:13 2009 (4A5BCA8D)
    fffff880`01000000 fffff880`01011000   blbdrive blbdrive.sys Tue Jul 14 00:35:59 2009 (4A5BC4DF)
    fffff880`074c8000 fffff880`074e6000   bowser   bowser.sys   Tue Jul 14 00:23:50 2009 (4A5BC206)
    fffff960`009d0000 fffff960`009f7000   cdd      cdd.dll      unavailable (00000000)
    fffff880`05b1d000 fffff880`05b3a000   cdfs     cdfs.sys     Tue Jul 14 00:19:46 2009 (4A5BC112)
    fffff880`01613000 fffff880`0163d000   cdrom    cdrom.sys    Tue Jul 14 00:19:54 2009 (4A5BC11A)
    fffff880`00d06000 fffff880`00dc6000   CI       CI.dll       Tue Jul 14 02:32:13 2009 (4A5BE01D)
    fffff880`017ca000 fffff880`017fa000   CLASSPNP CLASSPNP.SYS Tue Jul 14 00:19:58 2009 (4A5BC11E)
    fffff880`00ca8000 fffff880`00d06000   CLFS     CLFS.SYS     Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`0164a000 fffff880`016bd000   cng      cng.sys      Tue Jul 14 00:49:40 2009 (4A5BC814)
    fffff880`0425e000 fffff880`0426e000   CompositeBus CompositeBus.sys Tue Jul 14 01:00:33 2009 (4A5BCAA1)
    fffff880`05bbb000 fffff880`05bc9000   crashdmp crashdmp.sys Tue Jul 14 01:01:01 2009 (4A5BCABD)
    fffff880`02e8b000 fffff880`02ea9000   dfsc     dfsc.sys     Tue Jul 14 00:23:44 2009 (4A5BC200)
    fffff880`02e7c000 fffff880`02e8b000   discache discache.sys Tue Jul 14 00:37:18 2009 (4A5BC52E)
    fffff880`0183a000 fffff880`01850000   disk     disk.sys     Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`05afb000 fffff880`05b1d000   drmk     drmk.sys     Tue Jul 14 02:01:25 2009 (4A5BD8E5)
    fffff880`05bd5000 fffff880`05bde000   dump_atapi dump_atapi.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
    fffff880`05bc9000 fffff880`05bd5000   dump_dumpata dump_dumpata.sys Tue Jul 14 00:19:47 2009 (4A5BC113)
    fffff880`05bde000 fffff880`05bf1000   dump_dumpfve dump_dumpfve.sys Tue Jul 14 00:21:51 2009 (4A5BC18F)
    fffff880`05b87000 fffff880`05b93000   Dxapi    Dxapi.sys    Tue Jul 14 00:38:28 2009 (4A5BC574)
    fffff880`03e45000 fffff880`03f39000   dxgkrnl  dxgkrnl.sys  Tue Nov 02 02:51:31 2010 (4CCF7CB3)
    fffff880`03f39000 fffff880`03f7f000   dxgmms1  dxgmms1.sys  Tue Nov 02 02:50:56 2010 (4CCF7C90)
    fffff880`0835d000 fffff880`08393000   fastfat  fastfat.SYS  Tue Jul 14 00:23:28 2009 (4A5BC1F0)
    fffff880`010dc000 fffff880`010f0000   fileinfo fileinfo.sys Tue Jul 14 00:34:25 2009 (4A5BC481)
    fffff880`00f6d000 fffff880`00fb9000   fltmgr   fltmgr.sys   Tue Jul 14 00:19:59 2009 (4A5BC11F)
    fffff880`016ce000 fffff880`016d8000   Fs_Rec   Fs_Rec.sys   Tue Jul 14 00:19:45 2009 (4A5BC111)
    fffff880`01800000 fffff880`0183a000   fvevol   fvevol.sys   Sat Sep 26 03:34:26 2009 (4ABD7DB2)
    fffff880`01909000 fffff880`01953000   fwpkclnt fwpkclnt.sys Tue Jul 14 00:21:08 2009 (4A5BC164)
    fffff880`04251000 fffff880`0425e000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 13:17:04 2009 (4A1151C0)
    fffff800`02c1c000 fffff800`02c65000   hal      hal.dll      Tue Jul 14 02:27:36 2009 (4A5BDF08)
    fffff880`03e00000 fffff880`03e24000   HDAudBus HDAudBus.sys Tue Jul 14 01:06:13 2009 (4A5BCBF5)
    fffff880`05b57000 fffff880`05b70000   HIDCLASS HIDCLASS.SYS Tue Jul 14 01:06:21 2009 (4A5BCBFD)
    fffff880`05b70000 fffff880`05b78080   HIDPARSE HIDPARSE.SYS Tue Jul 14 01:06:17 2009 (4A5BCBF9)
    fffff880`05ff2000 fffff880`06000000   hidusb   hidusb.sys   Tue Jul 14 01:06:22 2009 (4A5BCBFE)
    fffff880`07400000 fffff880`074c8000   HTTP     HTTP.sys     Tue Jul 14 00:22:16 2009 (4A5BC1A8)
    fffff880`019f3000 fffff880`019fc000   hwpolicy hwpolicy.sys Tue Jul 14 00:19:22 2009 (4A5BC0FA)
    fffff880`00e37000 fffff880`00e4d000   intelppm intelppm.sys Tue Jul 14 00:19:25 2009 (4A5BC0FD)
    fffff880`04200000 fffff880`04251000   k57nd60a k57nd60a.sys Sat Jun 20 12:34:49 2009 (4A3CC959)
    fffff880`04a6b000 fffff880`04a7a000   kbdclass kbdclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
    fffff880`05b79000 fffff880`05b87000   kbdhid   kbdhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
    fffff800`00bcb000 fffff800`00bd5000   kdcom    kdcom.dll    Tue Jul 14 02:31:07 2009 (4A5BDFDB)
    fffff880`00c00000 fffff880`00c43000   ks       ks.sys       Thu Mar 04 04:32:25 2010 (4B8F37D9)
    fffff880`015d0000 fffff880`015ea000   ksecdd   ksecdd.sys   Tue Jul 14 00:20:54 2009 (4A5BC156)
    fffff880`018de000 fffff880`01909000   ksecpkg  ksecpkg.sys  Fri Dec 11 06:03:32 2009 (4B21E0B4)
    fffff880`05e3d000 fffff880`05e42200   ksthunk  ksthunk.sys  Tue Jul 14 01:00:19 2009 (4A5BCA93)
    fffff880`05a44000 fffff880`05a59000   lltdio   lltdio.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
    fffff880`05a00000 fffff880`05a23000   luafv    luafv.sys    Tue Jul 14 00:26:13 2009 (4A5BC295)
    fffff880`00c50000 fffff880`00c94000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Tue Jul 14 02:29:10 2009 (4A5BDF66)
    fffff880`05bf1000 fffff880`05bff000   monitor  monitor.sys  Tue Jul 14 00:38:52 2009 (4A5BC58C)
    fffff880`04a7a000 fffff880`04a89000   mouclass mouclass.sys Tue Jul 14 00:19:50 2009 (4A5BC116)
    fffff880`05bae000 fffff880`05bbb000   mouhid   mouhid.sys   Tue Jul 14 01:00:20 2009 (4A5BCA94)
    fffff880`01084000 fffff880`0109e000   mountmgr mountmgr.sys Tue Jul 14 00:19:54 2009 (4A5BC11A)
    fffff880`0757b000 fffff880`07593000   mpsdrv   mpsdrv.sys   Tue Jul 14 01:08:25 2009 (4A5BCC79)
    fffff880`07593000 fffff880`075c0000   mrxsmb   mrxsmb.sys   Sat Feb 27 07:52:19 2010 (4B88CF33)
    fffff880`07ad0000 fffff880`07b1e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 07:52:28 2010 (4B88CF3C)
    fffff880`07b1e000 fffff880`07b41000   mrxsmb20 mrxsmb20.sys Sat Feb 27 07:52:26 2010 (4B88CF3A)
    fffff880`01289000 fffff880`01294000   Msfs     Msfs.SYS     Tue Jul 14 00:19:47 2009 (4A5BC113)
    fffff880`00fb9000 fffff880`00fc3000   msisadrv msisadrv.sys Tue Jul 14 00:19:26 2009 (4A5BC0FE)
    fffff880`01200000 fffff880`0125e000   msrpc    msrpc.sys    Tue Jul 14 00:21:32 2009 (4A5BC17C)
    fffff880`02e71000 fffff880`02e7c000   mssmbios mssmbios.sys Tue Jul 14 00:31:10 2009 (4A5BC3BE)
    fffff880`019e1000 fffff880`019f3000   mup      mup.sys      Tue Jul 14 00:23:45 2009 (4A5BC201)
    fffff880`016d8000 fffff880`017ca000   ndis     ndis.sys     Tue Jul 14 00:21:40 2009 (4A5BC184)
    fffff880`0426e000 fffff880`0427a000   ndistapi ndistapi.sys Tue Jul 14 01:10:00 2009 (4A5BCCD8)
    fffff880`07550000 fffff880`07563000   ndisuio  ndisuio.sys  Tue Jul 14 01:09:25 2009 (4A5BCCB5)
    fffff880`04a00000 fffff880`04a2f000   ndiswan  ndiswan.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
    fffff880`05ae6000 fffff880`05afb000   NDProxy  NDProxy.SYS  Tue Jul 14 01:10:05 2009 (4A5BCCDD)
    fffff880`02fd2000 fffff880`02fe1000   netbios  netbios.sys  Tue Jul 14 01:09:26 2009 (4A5BCCB6)
    fffff880`02f3d000 fffff880`02f82000   netbt    netbt.sys    Tue Jul 14 00:21:28 2009 (4A5BC178)
    fffff880`0187e000 fffff880`018de000   NETIO    NETIO.SYS    Tue Jul 14 00:21:46 2009 (4A5BC18A)
    fffff880`01294000 fffff880`012a5000   Npfs     Npfs.SYS     Tue Jul 14 00:19:48 2009 (4A5BC114)
    fffff880`02e65000 fffff880`02e71000   nsiproxy nsiproxy.sys Tue Jul 14 00:21:02 2009 (4A5BC15E)
    fffff800`02c65000 fffff800`03241000   nt       ntkrnlmp.exe Sat Jun 19 05:16:41 2010 (4C1C44A9)
    fffff880`0142d000 fffff880`015d0000   Ntfs     Ntfs.sys     Tue Jul 14 00:20:47 2009 (4A5BC14F)
    fffff880`01873000 fffff880`0187c000   Null     Null.SYS     Tue Jul 14 00:19:37 2009 (4A5BC109)
    fffff880`05596000 fffff880`05597180   nvBridge nvBridge.kmd Fri Jun 26 22:22:03 2009 (4A453BFB)
    fffff880`04a9c000 fffff880`05595d80   nvlddmkm nvlddmkm.sys Fri Jun 26 23:15:53 2009 (4A454899)
    fffff880`074fd000 fffff880`07550000   nwifi    nwifi.sys    Tue Jul 14 01:07:23 2009 (4A5BCC3B)
    fffff880`02f96000 fffff880`02fbc000   pacer    pacer.sys    Tue Jul 14 01:09:41 2009 (4A5BCCC5)
    fffff880`00e0d000 fffff880`00e22000   partmgr  partmgr.sys  Tue Jul 14 00:19:58 2009 (4A5BC11E)
    fffff880`00fc3000 fffff880`00ff6000   pci      pci.sys      Tue Jul 14 00:19:51 2009 (4A5BC117)
    fffff880`0106d000 fffff880`01074000   pciide   pciide.sys   Tue Jul 14 00:19:49 2009 (4A5BC115)
    fffff880`01074000 fffff880`01084000   PCIIDEX  PCIIDEX.SYS  Tue Jul 14 00:19:48 2009 (4A5BC114)
    fffff880`010f0000 fffff880`01133000   PCTCore64 PCTCore64.sys Wed Nov 24 05:16:29 2010 (4CEC9FAD)
    fffff880`01133000 fffff880`011a4000   pctDS64  pctDS64.sys  Fri Jun 04 03:06:38 2010 (4C085FAE)
    fffff880`012ae000 fffff880`0137a000   pctEFA64 pctEFA64.sys Fri Jul 16 05:45:25 2010 (4C3FE3E5)
    fffff880`011a4000 fffff880`011fa000   pctgntdi64 pctgntdi64.sys Tue Nov 16 20:07:31 2010 (4CE2E483)
    fffff880`08313000 fffff880`0832c000   pctplsg64 pctplsg64.sys Wed Nov 24 20:31:41 2010 (4CED762D)
    fffff880`013da000 fffff880`013ff000   PctWfpFilter64 PctWfpFilter64.sys Tue Nov 16 20:17:57 2010 (4CE2E6F5)
    fffff880`016bd000 fffff880`016ce000   pcw      pcw.sys      Tue Jul 14 00:19:27 2009 (4A5BC0FF)
    fffff880`07b41000 fffff880`07be7000   peauth   peauth.sys   Tue Jul 14 02:01:19 2009 (4A5BD8DF)
    fffff880`05e00000 fffff880`05e3d000   portcls  portcls.sys  Tue Jul 14 01:06:27 2009 (4A5BCC03)
    fffff880`00c94000 fffff880`00ca8000   PSHED    PSHED.dll    Tue Jul 14 02:32:23 2009 (4A5BE027)
    fffff880`013a3000 fffff880`013aee00   PxHlpa64 PxHlpa64.sys Wed Jun 24 00:16:35 2009 (4A416253)
    fffff880`055d6000 fffff880`055fa000   rasl2tp  rasl2tp.sys  Tue Jul 14 01:10:11 2009 (4A5BCCE3)
    fffff880`04a2f000 fffff880`04a4a000   raspppoe raspppoe.sys Tue Jul 14 01:10:17 2009 (4A5BCCE9)
    fffff880`04a4a000 fffff880`04a6b000   raspptp  raspptp.sys  Tue Jul 14 01:10:18 2009 (4A5BCCEA)
    fffff880`03fe6000 fffff880`04000000   rassstp  rassstp.sys  Tue Jul 14 01:10:25 2009 (4A5BCCF1)
    fffff880`02e14000 fffff880`02e65000   rdbss    rdbss.sys    Tue Jul 14 00:24:09 2009 (4A5BC219)
    fffff880`0126e000 fffff880`01277000   RDPCDD   RDPCDD.sys   Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`01277000 fffff880`01280000   rdpencdd rdpencdd.sys Tue Jul 14 01:16:34 2009 (4A5BCE62)
    fffff880`01280000 fffff880`01289000   rdprefmp rdprefmp.sys Tue Jul 14 01:16:35 2009 (4A5BCE63)
    fffff880`019a7000 fffff880`019e1000   rdyboost rdyboost.sys Tue Jul 14 00:34:34 2009 (4A5BC48A)
    fffff880`07563000 fffff880`0757b000   rspndr   rspndr.sys   Tue Jul 14 01:08:50 2009 (4A5BCC92)
    fffff880`05e45000 fffff880`05ff1900   RTKVHD64 RTKVHD64.sys Fri May 22 19:04:20 2009 (4A16E924)
    fffff880`07be7000 fffff880`07bf2000   secdrv   secdrv.SYS   Wed Sep 13 14:18:38 2006 (4508052E)
    fffff880`0199f000 fffff880`019a7000   spldr    spldr.sys    Mon May 11 17:56:27 2009 (4A0858BB)
    fffff880`0827d000 fffff880`08313000   srv      srv.sys      Fri Aug 27 04:38:00 2010 (4C773318)
    fffff880`07a3f000 fffff880`07aa6000   srv2     srv2.sys     Fri Aug 27 04:37:46 2010 (4C77330A)
    fffff880`07a00000 fffff880`07a2d000   srvnet   srvnet.sys   Fri Aug 27 04:37:24 2010 (4C7732F4)
    fffff880`043f5000 fffff880`043f6480   swenum   swenum.sys   Tue Jul 14 01:00:18 2009 (4A5BCA92)
    fffff880`01a03000 fffff880`01c00000   tcpip    tcpip.sys    Mon Jun 14 04:39:04 2010 (4C15A458)
    fffff880`07a2d000 fffff880`07a3f000   tcpipreg tcpipreg.sys Tue Jul 14 01:09:49 2009 (4A5BCCCD)
    fffff880`013cd000 fffff880`013da000   TDI      TDI.SYS      Tue Jul 14 00:21:18 2009 (4A5BC16E)
    fffff880`013af000 fffff880`013cd000   tdx      tdx.sys      Tue Jul 14 00:21:15 2009 (4A5BC16B)
    fffff880`02e00000 fffff880`02e14000   termdd   termdd.sys   Tue Jul 14 01:16:36 2009 (4A5BCE64)
    fffff880`0138f000 fffff880`013a3000   TfFsMon  TfFsMon.sys  Wed Dec 01 23:00:02 2010 (4CF6D372)
    fffff880`08393000 fffff880`083a1000   TfNetMon TfNetMon.sys Wed Dec 01 23:00:08 2010 (4CF6D378)
    fffff880`0137a000 fffff880`0138f000   TfSysMon TfSysMon.sys Wed Dec 01 23:00:05 2010 (4CF6D375)
    fffff960`004e0000 fffff960`004ea000   TSDDD    TSDDD.dll    unavailable (00000000)
    fffff880`00dc6000 fffff880`00dec000   tunnel   tunnel.sys   Tue Jul 14 01:09:37 2009 (4A5BCCC1)
    fffff880`04a89000 fffff880`04a9b000   umbus    umbus.sys    Tue Jul 14 01:06:56 2009 (4A5BCC20)
    fffff880`083a1000 fffff880`083b2000   usbaapl64 usbaapl64.sys Fri Sep 17 03:19:05 2010 (4C92D019)
    fffff880`05b3a000 fffff880`05b57000   usbccgp  usbccgp.sys  Tue Jul 14 01:06:45 2009 (4A5BCC15)
    fffff880`05e43000 fffff880`05e44f00   USBD     USBD.SYS     Tue Jul 14 01:06:23 2009 (4A5BCBFF)
    fffff880`03f7f000 fffff880`03f90000   usbehci  usbehci.sys  Tue Jul 14 01:06:30 2009 (4A5BCC06)
    fffff880`05a8c000 fffff880`05ae6000   usbhub   usbhub.sys   Tue Jul 14 01:07:09 2009 (4A5BCC2D)
    fffff880`03f90000 fffff880`03fe6000   USBPORT  USBPORT.SYS  Tue Jul 14 01:06:31 2009 (4A5BCC07)
    fffff880`05b93000 fffff880`05bae000   USBSTOR  USBSTOR.SYS  Tue Jul 14 01:06:34 2009 (4A5BCC0A)
    fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Tue Jul 14 01:01:31 2009 (4A5BCADB)
    fffff880`015ea000 fffff880`015f8000   vga      vga.sys      Tue Jul 14 00:38:47 2009 (4A5BC587)
    fffff880`01400000 fffff880`01425000   VIDEOPRT VIDEOPRT.SYS Tue Jul 14 00:38:51 2009 (4A5BC58B)
    fffff880`00e22000 fffff880`00e37000   volmgr   volmgr.sys   Tue Jul 14 00:19:57 2009 (4A5BC11D)
    fffff880`01011000 fffff880`0106d000   volmgrx  volmgrx.sys  Tue Jul 14 00:20:33 2009 (4A5BC141)
    fffff880`01953000 fffff880`0199f000   volsnap  volsnap.sys  Tue Jul 14 00:20:08 2009 (4A5BC128)
    fffff880`043e8000 fffff880`043f5000   vwifibus vwifibus.sys Tue Jul 14 01:07:21 2009 (4A5BCC39)
    fffff880`02fbc000 fffff880`02fd2000   vwififlt vwififlt.sys Tue Jul 14 01:07:22 2009 (4A5BCC3A)
    fffff880`02fe1000 fffff880`02ffc000   wanarp   wanarp.sys   Tue Jul 14 01:10:21 2009 (4A5BCCED)
    fffff880`0125e000 fffff880`0126e000   watchdog watchdog.sys Tue Jul 14 00:37:35 2009 (4A5BC53F)
    fffff880`00e5a000 fffff880`00efe000   Wdf01000 Wdf01000.sys Tue Jul 14 00:22:07 2009 (4A5BC19F)
    fffff880`00efe000 fffff880`00f0d000   WDFLDR   WDFLDR.SYS   Tue Jul 14 00:19:54 2009 (4A5BC11A)
    fffff880`02f8d000 fffff880`02f96000   wfplwf   wfplwf.sys   Tue Jul 14 01:09:26 2009 (4A5BCCB6)
    fffff960`00080000 fffff960`00390000   win32k   win32k.sys   unavailable (00000000)
    fffff880`083b2000 fffff880`083c3000   WinUsb   WinUsb.sys   Tue Jul 14 01:06:28 2009 (4A5BCC04)
    fffff880`00f64000 fffff880`00f6d000   WMILIB   WMILIB.SYS   Tue Jul 14 00:19:51 2009 (4A5BC117)
    fffff880`02f82000 fffff880`02f8d000   ws2ifsl  ws2ifsl.sys  Tue Jul 14 01:10:33 2009 (4A5BCCF9)
    fffff880`05a23000 fffff880`05a44000   WudfPf   WudfPf.sys   Tue Jul 14 01:05:37 2009 (4A5BCBD1)
    fffff880`0832c000 fffff880`0835d000   WUDFRd   WUDFRd.sys   Tue Jul 14 01:06:06 2009 (4A5BCBEE)
    
    Unloaded modules:
    fffff880`08200000 fffff880`08271000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`083ae000 fffff880`083b6000   FoxAwdWINFLA
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00008000
    fffff880`083a1000 fffff880`083ae000   pmxdrv.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000D000
    fffff880`01850000 fffff880`0185e000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`0185e000 fffff880`0186a000   dump_ataport
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`0186a000 fffff880`01873000   dump_atapi.s
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00009000
    fffff880`01600000 fffff880`01613000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    If you get further problems with blue screens, attach your new dump files and details.
    Take snips of the Memory tab and all the Slot #'s available under the SPD tab.
     
  3. Master64

    Master64 New Member

    Joined:
    Feb 7, 2011
    Messages:
    10
    Likes Received:
    0
    Hello, Elmer =) Thanks for helping me.

    Alright, I have updated all the drivers that you listed above, and I just got the Blue Screen again, there's no need to upload the DMP file again, because I haven't uninstalled Spyware Doctor, I wanted to try the drivers solutions first.

    It really sucks, Spyware Doctor has been my favourite Anti-Virus/Spyware for years, is Microsoft Security Essentials good? Or would you recommend me to buy some other software? If so, which one?

    I'll bring some new info after I uninstall Spyware Doctor.
     
  4. Elmer

    Elmer Extraordinary Member

    Joined:
    Mar 5, 2010
    Messages:
    3,873
    Likes Received:
    284
    A lot of people swear by MSE, it's very lightweight and unobtrusive. It's especially good when folks are struggling with BSOD's as it's "blue screen friendly". Once the analysis is over and you are BSOD free you could try other AV software.
    Recommending AV though is like kicking a hornets nest and expecting not to be stung! But I think I can quite safely say (??), of the brought ones ESET, (I use Nod32, never a problem) Kaspersky and Avast! are three of the current better behaved ones with Windows 7. Ones to avoid at the moment are PC Tools, AVG, ZoneAlarm and Norton.

    As I say I use ESET Nod32 AV. I also have Malwarebytes' with which I do a weekly scan, I use WinPatrol to watch what is trying to add itself to the start up menu and I use Windows 7 firewall which bears no resemblance whatsoever to the old XP effort. With a bit of care and foresight on the types of sites or downloads I get, I've not caught a cold yet (touch wood!!).
     
  5. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321

    I think you're going the right route: update the drivers and you'll get a good chance that Spyware Doctor will work fine then. You can replace it with MSE as a temporary workaround. MSE works well with Malwarebytes. This freeware combo is known to offer good protection and doesn't cause BSODs.

    I personally prefer Eset Smart Security.
     
  6. Master64

    Master64 New Member

    Joined:
    Feb 7, 2011
    Messages:
    10
    Likes Received:
    0
    Thanks Elmer, and Cybercore =)

    This's what happened:

    I was going to uninstall SpywareDoctor, but then I tried to do a little research, and went to PCTools Forum, and as Elmer told me, this's a common error, there's an "offical thread" for this BlueScreen, and they released an update a couple of days ago, but I got the BlueScreen again =(

    Could you guys check this new DMP? I want to make sure it's still SpywareDoctor's fault, then I'll uninstall it once and for all >=(

    Cybercore, but..is it a good idea to combine both Softwares? (MSE and Malwarebytes)

    Thanks for the help guys >.< BlueScreens are really stressful -.-

    View attachment DMP.zip
     
  7. cybercore

    cybercore New Member

    Joined:
    Jul 7, 2009
    Messages:
    15,823
    Likes Received:
    321
    Yes, it is safe to install both MSE + Malwarebytes.


    ~~~~~~~~~


    Same error again, caused by tcpip.sys - 0xD1_tcpip!TcpBeginTcbSend.

    Update:

    Atheros Extensible Wireless LAN
    athrx.sys Fri Jun 05 18:10:06 2009


    Broadcom NetLink Gigabit Ethernet
    k57nd60a.sys Sat Jun 20 07:34:49 2009


    Update these drivers as they get involved in tcpip.



    If crashes reoccur, uninstall PCTools and replace that with MSE:

    https://www.microsoft.com/security_essentials/










    Crash Dumps:

    Code:
    
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [F:\a\Minidump\D M P\DMP\021811-22401-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
    Machine Name:
    Kernel base = 0xfffff800`02c13000 PsLoadedModuleList = 0xfffff800`02e50e50
    Debug session time: Sat Feb 19 00:24:10.351 2011 (UTC - 5:00)
    System Uptime: 0 days 13:32:09.506
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ............................
    Loading User Symbols
    Loading unloaded module list
    .......
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck D1, {1c, 2, 1, fffff8800187b3ba}
    
    Probably caused by : tcpip.sys ( tcpip!TcpBeginTcbSend+32a )
    
    Followup: MachineOwner
    ---------
    
    3: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 000000000000001c, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
    Arg4: fffff8800187b3ba, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002ebb0e0
     000000000000001c 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip!TcpBeginTcbSend+32a
    fffff880`0187b3ba f083401c01      lock add dword ptr [rax+1Ch],1
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xD1
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff880031fc680 -- (.trap 0xfffff880031fc680)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8012cb2790
    rdx=fffffa8012cb2780 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff8800187b3ba rsp=fffff880031fc810 rbp=fffff880031fc918
     r8=fffffa8012cb2590  r9=fffff880031fc8b0 r10=fffffa8012cb26c0
    r11=0000000000000020 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl nz na pe nc
    tcpip!TcpBeginTcbSend+0x32a:
    fffff880`0187b3ba f083401c01      lock add dword ptr [rax+1Ch],1 ds:c8b0:00000000`0000001c=????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002c82ca9 to fffff80002c83740
    
    STACK_TEXT:  
    fffff880`031fc538 fffff800`02c82ca9 : 00000000`0000000a 00000000`0000001c 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
    fffff880`031fc540 fffff800`02c81920 : fffffa80`0a404140 00000000`00000001 fffffa80`12652550 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`031fc680 fffff880`0187b3ba : 00000000`00000001 fffffa80`13089010 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
    fffff880`031fc810 fffff880`01879bc9 : ffff0000`0289b913 ffff0000`0289b963 00000000`00000000 00000000`00000001 : tcpip!TcpBeginTcbSend+0x32a
    fffff880`031fca90 fffff880`01875a56 : 00000000`00000000 00000071`750bdb01 fffff880`01967128 00000000`00000000 : tcpip!TcpTcbSend+0x1d9
    fffff880`031fcd10 fffff880`0187d44c : fffffa80`09477600 00000000`00000000 00000000`00000000 fffff880`01860700 : tcpip!TcpFlushDelay+0x316
    fffff880`031fcdf0 fffff880`0185f6c7 : fffffa80`07d271c0 fffffa80`07d18b00 fffffa80`07bd71c0 00000000`00000000 : tcpip!TcpPreValidatedReceive+0x20c
    fffff880`031fcea0 fffff880`0185f799 : fffff880`031fd020 fffff880`0196d9a0 fffff880`031fd030 00000000`00000001 : tcpip!IppDeliverListToProtocol+0x97
    fffff880`031fcf60 fffff880`0185fc90 : fffffa80`07d23000 00000000`00000001 00000000`00000000 fffff880`031fd020 : tcpip!IppProcessDeliverList+0x59
    fffff880`031fcfd0 fffff880`0185eb21 : fffff880`ff01a8c0 fffffa80`07d23000 fffff880`0196d9a0 00000000`093e7a01 : tcpip!IppReceiveHeaderBatch+0x231
    fffff880`031fd0b0 fffff880`0185d592 : fffffa80`093c47d0 00000000`00000000 fffffa80`093e7a01 00000000`00000001 : tcpip!IpFlcReceivePackets+0x651
    fffff880`031fd2b0 fffff880`01876e5a : fffffa80`093e7a90 fffff880`031fd3e0 fffffa80`093e7a90 00000000`00000000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
    fffff880`031fd390 fffff800`02c92e5a : fffffa80`09486580 fffff880`031f8000 00000000`00004800 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
    fffff880`031fd3e0 fffff880`01876882 : fffff880`01876d80 fffff880`031fd4f0 00000000`00000002 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0xda
    fffff880`031fd4c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    tcpip!TcpBeginTcbSend+32a
    fffff880`0187b3ba f083401c01      lock add dword ptr [rax+1Ch],1
    
    SYMBOL_STACK_INDEX:  3
    
    SYMBOL_NAME:  tcpip!TcpBeginTcbSend+32a
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: tcpip
    
    IMAGE_NAME:  tcpip.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4c15a458
    
    FAILURE_BUCKET_ID:  X64_0xD1_tcpip!TcpBeginTcbSend+32a
    
    BUCKET_ID:  X64_0xD1_tcpip!TcpBeginTcbSend+32a
    
    Followup: MachineOwner
    ---------
    
    
    
    



    Drivers:

    Code:
    start             end                 module name
    fffff880`03f1a000 fffff880`03f58000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
    fffff880`00fa2000 fffff880`00ff9000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
    fffff880`02e4c000 fffff880`02ed6000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`047e2000 fffff880`047f8000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`0107a000 fffff880`01085000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
    fffff880`00ee0000 fffff880`00ee9000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`01050000 fffff880`0107a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
    fffff880`0464a000 fffff880`047b8000   athrx    athrx.sys    Fri Jun 05 18:10:06 2009 (4A2997BE)
    fffff960`00820000 fffff960`00881000   ATMFD    ATMFD.DLL    unavailable (00000000)
    fffff880`01b2b000 fffff880`01b32000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`01a7c000 fffff880`01a8d000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`06d45000 fffff880`06d63000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
    fffff960`007c0000 fffff960`007e7000   cdd      cdd.dll      unavailable (00000000)
    fffff880`0535f000 fffff880`0537c000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
    fffff880`01af8000 fffff880`01b22000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`00d3c000 fffff880`00dfc000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
    fffff880`01a92000 fffff880`01ac2000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00cde000 fffff880`00d3c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`01200000 fffff880`01273000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
    fffff880`047d2000 fffff880`047e2000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`04c93000 fffff880`04ca1000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`02e26000 fffff880`02e44000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
    fffff880`02e17000 fffff880`02e26000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`017e1000 fffff880`017f7000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`0532b000 fffff880`0534d000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`04cad000 fffff880`04cb6000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`04ca1000 fffff880`04cad000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`04cb6000 fffff880`04cc9000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`05353000 fffff880`0535f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`10ca9000 fffff880`10d9d000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
    fffff880`10d9d000 fffff880`10de3000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
    fffff880`07b7c000 fffff880`07bb2000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
    fffff880`01085000 fffff880`01099000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`00e09000 fffff880`00e55000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
    fffff880`015d9000 fffff880`015e3000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
    fffff880`01000000 fffff880`0103a000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
    fffff880`0114d000 fffff880`01197000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
    fffff880`047c5000 fffff880`047d2000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
    fffff800`031f0000 fffff800`03239000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
    fffff880`03ef6000 fffff880`03f1a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
    fffff880`0502f000 fffff880`05048000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
    fffff880`05048000 fffff880`05050080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`05021000 fffff880`0502f000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
    fffff880`06c7d000 fffff880`06d45000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
    fffff880`017d8000 fffff880`017e1000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
    fffff880`015e3000 fffff880`015f9000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`03f58000 fffff880`03fa9000   k57nd60a k57nd60a.sys Sat Jun 20 07:34:49 2009 (4A3CC959)
    fffff880`03e21000 fffff880`03e30000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`04c78000 fffff880`04c86000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff800`00b96000 fffff800`00ba0000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
    fffff880`03e3f000 fffff880`03e82000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
    fffff880`015ae000 fffff880`015c8000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
    fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
    fffff880`0534d000 fffff880`05352200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`04cc9000 fffff880`04cde000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`053b8000 fffff880`053db000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`00c86000 fffff880`00cca000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
    fffff880`0537c000 fffff880`0538a000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`03e30000 fffff880`03e3f000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`04c86000 fffff880`04c93000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`00c5c000 fffff880`00c76000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`06d63000 fffff880`06d7b000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`06d7b000 fffff880`06da8000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
    fffff880`06da8000 fffff880`06df6000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
    fffff880`06c00000 fffff880`06c23000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
    fffff880`01b90000 fffff880`01b9b000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00e55000 fffff880`00e5f000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`0138d000 fffff880`013eb000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
    fffff880`02e0c000 fffff880`02e17000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`017c6000 fffff880`017d8000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`016d4000 fffff880`017c6000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
    fffff880`04624000 fffff880`04630000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`04d31000 fffff880`04d44000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
    fffff880`03fa9000 fffff880`03fd8000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`04c63000 fffff880`04c78000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
    fffff880`02f6b000 fffff880`02f7a000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`02ed6000 fffff880`02f1b000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
    fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
    fffff880`01b9b000 fffff880`01bac000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`02e00000 fffff880`02e0c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff800`02c13000 fffff800`031f0000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
    fffff880`0140b000 fffff880`015ae000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
    fffff880`01b22000 fffff880`01b2b000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`10ca7000 fffff880`10ca8180   nvBridge nvBridge.kmd Fri Jan 07 20:57:22 2011 (4D27C482)
    fffff880`1004c000 fffff880`10ca6d00   nvlddmkm nvlddmkm.sys Fri Jan 07 21:07:22 2011 (4D27C6DA)
    fffff880`04cde000 fffff880`04d31000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
    fffff880`02f2f000 fffff880`02f55000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
    fffff880`00e9f000 fffff880`00eb4000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
    fffff880`00e5f000 fffff880`00e92000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`00ec9000 fffff880`00ed0000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
    fffff880`00ed0000 fffff880`00ee0000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`01099000 fffff880`010dc000   PCTCore64 PCTCore64.sys Wed Dec 08 16:22:19 2010 (4CFFF70B)
    fffff880`010dc000 fffff880`0114d000   pctDS64  pctDS64.sys  Thu Jun 03 22:06:38 2010 (4C085FAE)
    fffff880`0128c000 fffff880`01358000   pctEFA64 pctEFA64.sys Fri Jul 16 00:45:25 2010 (4C3FE3E5)
    fffff880`01a00000 fffff880`01a57000   pctgntdi64 pctgntdi64.sys Sun Jan 16 13:49:12 2011 (4D333DA8)
    fffff880`07a8a000 fffff880`07aa3000   pctplsg64 pctplsg64.sys Wed Dec 15 15:25:42 2010 (4D092446)
    fffff880`01a57000 fffff880`01a7c000   PctWfpFilter64 PctWfpFilter64.sys Wed Dec 15 15:34:09 2010 (4D092641)
    fffff880`015c8000 fffff880`015d9000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`0763f000 fffff880`076e5000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`052ee000 fffff880`0532b000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00cca000 fffff880`00cde000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`01381000 fffff880`0138ce00   PxHlpa64 PxHlpa64.sys Tue Jun 23 19:16:35 2009 (4A416253)
    fffff880`04600000 fffff880`04624000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
    fffff880`03fd8000 fffff880`03ff3000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`03e00000 fffff880`03e21000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
    fffff880`04630000 fffff880`0464a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`02fa9000 fffff880`02ffa000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
    fffff880`01b75000 fffff880`01b7e000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`01b7e000 fffff880`01b87000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`01b87000 fffff880`01b90000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`01693000 fffff880`016cd000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
    fffff880`04d44000 fffff880`04d5c000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`05055000 fffff880`052ed580   RTKVHD64 RTKVHD64.sys Tue Jan 25 05:38:43 2011 (4D3EA833)
    fffff880`076e5000 fffff880`076f0000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`0168b000 fffff880`01693000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`07acd000 fffff880`07b63000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
    fffff880`0772f000 fffff880`07796000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
    fffff880`076f0000 fffff880`0771d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
    fffff880`047f8000 fffff880`047f9480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
    fffff880`0771d000 fffff880`0772f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
    fffff880`01bca000 fffff880`01bd7000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
    fffff880`01bac000 fffff880`01bca000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
    fffff880`02f95000 fffff880`02fa9000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
    fffff880`0136d000 fffff880`01381000   TfFsMon  TfFsMon.sys  Thu Dec 30 17:35:44 2010 (4D1D0940)
    fffff880`07bb2000 fffff880`07bc0000   TfNetMon TfNetMon.sys Thu Dec 30 17:35:51 2010 (4D1D0947)
    fffff880`01358000 fffff880`0136d000   TfSysMon TfSysMon.sys Thu Dec 30 17:35:48 2010 (4D1D0944)
    fffff960`00570000 fffff960`0057a000   TSDDD    TSDDD.dll    unavailable (00000000)
    fffff880`01bd7000 fffff880`01bfd000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
    fffff880`03e82000 fffff880`03e94000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
    fffff880`053a7000 fffff880`053b8000   usbaapl64 usbaapl64.sys Thu Sep 16 22:19:05 2010 (4C92D019)
    fffff880`053db000 fffff880`053f8000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
    fffff880`053a5000 fffff880`053a6f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`10de3000 fffff880`10df4000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
    fffff880`04c09000 fffff880`04c63000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
    fffff880`03ea0000 fffff880`03ef6000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
    fffff880`0538a000 fffff880`053a5000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
    fffff880`00e92000 fffff880`00e9f000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`01b32000 fffff880`01b40000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`01b40000 fffff880`01b65000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`00eb4000 fffff880`00ec9000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
    fffff880`01197000 fffff880`011e3000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
    fffff880`047b8000 fffff880`047c5000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
    fffff880`02f55000 fffff880`02f6b000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
    fffff880`02f7a000 fffff880`02f95000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
    fffff880`01b65000 fffff880`01b75000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`00eef000 fffff880`00f93000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00f93000 fffff880`00fa2000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`02f26000 fffff880`02f2f000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff960`000b0000 fffff960`003c0000   win32k   win32k.sys   unavailable (00000000)
    fffff880`04d5c000 fffff880`04d6d000   WinUsb   WinUsb.sys   Mon Jul 13 20:06:28 2009 (4A5BCC04)
    fffff880`00e00000 fffff880`00e09000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`02f1b000 fffff880`02f26000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 20:10:33 2009 (4A5BCCF9)
    fffff880`05000000 fffff880`05021000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
    fffff880`04d6d000 fffff880`04d9e000   WUDFRd   WUDFRd.sys   Mon Jul 13 20:06:06 2009 (4A5BCBEE)
    
    Unloaded modules:
    fffff880`07a71000 fffff880`07a8a000   pctplsg64.sy
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00019000
    fffff880`07b63000 fffff880`07b7c000   pctplsg64.sy
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00019000
    fffff880`07a00000 fffff880`07a71000   spsys.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00071000
    fffff880`01ac2000 fffff880`01ad0000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000E000
    fffff880`01ad0000 fffff880`01adc000   dump_ataport
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  0000C000
    fffff880`01adc000 fffff880`01ae5000   dump_atapi.s
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00009000
    fffff880`01ae5000 fffff880`01af8000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00013000
    
    
     

Share This Page

Loading...