Windows 7 Unsolved BSOD

Kristijan Rusu

New Member
Joined
Apr 25, 2011
Hello, greetings to all.
I have some problems with BSOD. About one month, month and a half my PC started freezing and BSOD errors were shown to me. The problem was i couldn't do anything on the PC, 'cos it crashed sometimes even when playing Spider Solitaire. The freezes and BSOD were random, and the codes of the BSOD were:
0x000000A
0x0000001E
Actually, first after few crashes i went to Event Viewer and I found only one error constantly shown:
Source: atapi Event ID: 11 General: The driver detected a controller error on \Device\Ide\IdePort3.
And I thought this was my problem. After some research for this error, I got my hands on some information that it stands for HDD error. So I downloaded Western Digital application for testing HDD fault and bad sectors and it showed nothing. After some more research I came across that Comodo Internet Security is making those crashes. C After uninstalling everything was great, except I felt sorry for uninstalling CIS, 'cos i was pleased with the security it offered. Reinstalling CIS didn't fix the problem, and the program couldn't even update, don't know why. So naturally, I installed software that wouldn't "interfere" with Windows - Windows Essentials. For a week, all was going perfectly, and then, another BSOD, and computer started freezing all over again and showing BSOD, except now it were different codes:
0x0000003B
0x0000001A
I thought it was a virus and tried to update Windows Essentials, the program is working fine, but it was showing me connection error, that didn't existed. I started researching and came up with information that this code is for faulty RAM, so I downloaded Memtest86 v.4.0. and after 8 and a half hours, it showed 8 passes, and zero errors, so I assumed that my RAM is OK. So I tried testing my theory with virus, worm or trojan, and got my self Kaspersky Rescue CD, BitDefender Rescue CD and Norton Bootable Recovery Tool, and run them all, twice! I started with Kaspersky RCD, and the first time I found some trojans and viruses, deleted them, and all scans after say that the PC is clean. Then booted into windows and used Spybot S&D and Malwarebytes, again PC is clean. And then I started researching again and I got some information that Windows Essentials is causing BSODs, so I uninstalled it and installed Avast Free Version, and it's working fine, but freezes and crashes don't stop. Interesting thing I noticed is that freezes start with more than 2150-2300MB RAM Usage, and if sidebar isn't freezed sometimes, it show's 0-10% CPU Usage and RAM doesn't go higher than 3100MB. I don't have anymore ideas about fixing this problem. It couldn't be caused by overheating 'cos I removed the metal covers of the PC housing when initial BSOD crashes started and when it freezes I check temperature and it isn't very warm, normal temperature. After analyzing dumps myself, I found some outdated drivers, so I updated them. Found some info that ASACPI.sys is major BSOD cause, but now its updated and time stamped to 2009. After this update, the PC was working perfectly for about few hours, and then freezes and BSOD's started again, but now BSOD codes are:
0x00000077
0x0000003B
This codes are referred to as KERNEL_DATA_INPAGE_ERROR. When I analyzed the new dumps with Blue screen of death (STOP error) information in dump files. I found that cause to the problem is ntoskrnl.exe and I'm trying to find some patch or fix for this file, but nothing so far. I had Daemon Tools Lite, and I found info that stated that this program is major BSOD cause, so I uninstalled it and used DuplexSecure tool to remove SPTD file. Freezes and BSOD are not stopping.

System spec's are:
Motherboard: ASUS P5Q
CPU: Intel Core 2 Duo E7300 2666Mhz
VGA: nVidia GeForce 9600 GT + 1024MB
RAM: 2x Kingston DDR2 2048MB
Chipset: Intel Eaglelake P45
HDD: Western Digital WD5000AACS 500GB
OS: Windows 7 Ultimate x64
Thanks in advance. Sorry for my bad English, its not my native language.
Looking forward for your answers and hearing from you soon.
 

Attachments

  • Minidump before update.rar
    30.8 KB · Views: 259
  • Reports before update.rar
    1.2 MB · Views: 353
  • Minidump after update.rar
    278.3 KB · Views: 340
Hello, greetings to all.
I have some problems with BSOD. About one month, month and a half my PC started freezing and BSOD errors were shown to me. The problem was i couldn't do anything on the PC, 'cos it crashed sometimes even when playing Spider Solitaire. The freezes and BSOD were random, and the codes of the BSOD were:
0x000000A
0x0000001E
Actually, first after few crashes i went to Event Viewer and I found only one error constantly shown:
Source: atapi Event ID: 11 General: The driver detected a controller error on \Device\Ide\IdePort3.
And I thought this was my problem. After some research for this error, I got my hands on some information that it stands for HDD error. So I downloaded Western Digital application for testing HDD fault and bad sectors and it showed nothing. After some more research I came across that Comodo Internet Security is making those crashes. C After uninstalling everything was great, except I felt sorry for uninstalling CIS, 'cos i was pleased with the security it offered. Reinstalling CIS didn't fix the problem, and the program couldn't even update, don't know why. So naturally, I installed software that wouldn't "interfere" with Windows - Windows Essentials. For a week, all was going perfectly, and then, another BSOD, and computer started freezing all over again and showing BSOD, except now it were different codes:
0x0000003B
0x0000001A
I thought it was a virus and tried to update Windows Essentials, the program is working fine, but it was showing me connection error, that didn't existed. I started researching and came up with information that this code is for faulty RAM, so I downloaded Memtest86 v.4.0. and after 8 and a half hours, it showed 8 passes, and zero errors, so I assumed that my RAM is OK. So I tried testing my theory with virus, worm or trojan, and got my self Kaspersky Rescue CD, BitDefender Rescue CD and Norton Bootable Recovery Tool, and run them all, twice! I started with Kaspersky RCD, and the first time I found some trojans and viruses, deleted them, and all scans after say that the PC is clean. Then booted into windows and used Spybot S&D and Malwarebytes, again PC is clean. And then I started researching again and I got some information that Windows Essentials is causing BSODs, so I uninstalled it and installed Avast Free Version, and it's working fine, but freezes and crashes don't stop. Interesting thing I noticed is that freezes start with more than 2150-2300MB RAM Usage, and if sidebar isn't freezed sometimes, it show's 0-10% CPU Usage and RAM doesn't go higher than 3100MB. I don't have anymore ideas about fixing this problem. It couldn't be caused by overheating 'cos I removed the metal covers of the PC housing when initial BSOD crashes started and when it freezes I check temperature and it isn't very warm, normal temperature. After analyzing dumps myself, I found some outdated drivers, so I updated them. Found some info that ASACPI.sys is major BSOD cause, but now its updated and time stamped to 2009. After this update, the PC was working perfectly for about few hours, and then freezes and BSOD's started again, but now BSOD codes are:
0x00000077
0x0000003B
This codes are referred to as KERNEL_DATA_INPAGE_ERROR. When I analyzed the new dumps with Blue screen of death (STOP error) information in dump files. I found that cause to the problem is ntoskrnl.exe and I'm trying to find some patch or fix for this file, but nothing so far. I had Daemon Tools Lite, and I found info that stated that this program is major BSOD cause, so I uninstalled it and used DuplexSecure tool to remove SPTD file. Freezes and BSOD are not stopping.

System spec's are:
Motherboard: ASUS P5Q
CPU: Intel Core 2 Duo E7300 2666Mhz
VGA: nVidia GeForce 9600 GT + 1024MB
RAM: 2x Kingston DDR2 2048MB
Chipset: Intel Eaglelake P45
HDD: Western Digital WD5000AACS 500GB
OS: Windows 7 Ultimate x64
Thanks in advance. Sorry for my bad English, its not my native language.
Looking forward for your answers and hearing from you soon.
 
Some issue with your memory/its settings:


042511-41371-01.dmp
BugCheck 3B, {c0000005, fffff800230c2d6c, fffff880089d8f00, 0}
Probably caused by : memory_corruption ( nt!MiCaptureProtectionFromProto+1c )

042311-43118-01.dmp
BugCheck 77, {1, fa8004286c7004c0, 0, fffff8800557b690}
The requested page of kernel data could not be read in. Caused by
bad block in paging file or disk controller error.
Bad hardware.
ERROR_CODE: (NTSTATUS) 0x1 - STATUS_WAIT_1
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4e371 )



1. ATTACH:

- Screenshots of CPUZ memory and CPU TABS
- RAMMon HTML report.zip




2. Command prompt --> chkdsk /f




3. HDD S.M.A.R.T Scan:

HDDScan

PassMark DiskCheckup - SMART hard drive monitoring utility

HD Tune website



Most likely there will be no errors.





4. Uninstall Avast

avast! Uninstall Utility

Link Removed due to 404 Error



5. Update or disconnect ET USB 28xx Video eMPIA Technology, Inc.
etScan64.sys Mon Jul 23 18:00:17 2007
etFilter64.sys Wed Jun 13 22:11:11 2007


6. Update or uninstall VMWare
vmnetbridge.sys Mon Aug 10 08:05:58 2009



CRASH DUMPS

Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\DMP\042511-41371-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`2300b000 PsLoadedModuleList = 0xfffff800`23248e50
Debug session time: Mon Apr 25 06:00:37.147 2011 (UTC - 4:00)
System Uptime: 0 days 0:15:06.957
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff800230c2d6c, fffff880089d8f00, 0}

Probably caused by : memory_corruption ( nt!MiCaptureProtectionFromProto+1c )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800230c2d6c, Address of the instruction which caused the bugcheck
Arg3: fffff880089d8f00, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!MiCaptureProtectionFromProto+1c
fffff800`230c2d6c 488b01          mov     rax,qword ptr [rcx]

CONTEXT:  fffff880089d8f00 -- (.cxr 0xfffff880089d8f00)
rax=0000000000000001 rbx=0000000000000158 rcx=0000000000000158
rdx=00000000ffffffff rsi=fffffa8003bdc3f8 rdi=fffffa8003f9f060
rip=fffff800230c2d6c rsp=fffff880089d98d0 rbp=0000000000000000
 r8=0000000000000180  r9=0000000000000000 r10=ffffffffffffffff
r11=0000000000000178 r12=0000000000000011 r13=0000000000000001
r14=fffffa80035d8190 r15=fffffa8003a51cc0
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!MiCaptureProtectionFromProto+0x1c:
fffff800`230c2d6c 488b01          mov     rax,qword ptr [rcx] ds:002b:00000000`00000158=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800230d9bf8 to fffff800230c2d6c

STACK_TEXT:  
fffff880`089d98d0 fffff800`230d9bf8 : 00000000`00000000 00000000`00000158 00000000`00000000 fffffa80`03bdc3f8 : nt!MiCaptureProtectionFromProto+0x1c
fffff880`089d9920 fffff800`230bc91a : fffff680`0002f0c0 00000000`05e00000 00000000`00000000 00000000`00000080 : nt! ?? ::FNODOBFM::`string'+0x13c6c
fffff880`089d9960 fffff800`2337b1e2 : ffffffff`00000001 00000000`00000000 fffffa80`03bdc060 00000000`00000004 : nt!MiCommitExistingVad+0x2d1
fffff880`089d9a00 fffff800`2307a993 : ffffffff`ffffffff 00000000`014ec4a0 00000000`00000000 00000000`014ec538 : nt!NtAllocateVirtualMemory+0x402
fffff880`089d9bb0 00000000`76eaf83a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`014ec338 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76eaf83a


FOLLOWUP_IP: 
nt!MiCaptureProtectionFromProto+1c
fffff800`230c2d6c 488b01          mov     rax,qword ptr [rcx]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiCaptureProtectionFromProto+1c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

STACK_COMMAND:  .cxr 0xfffff880089d8f00 ; kb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x3B_nt!MiCaptureProtectionFromProto+1c

BUCKET_ID:  X64_0x3B_nt!MiCaptureProtectionFromProto+1c

Followup: MachineOwner
---------



Loading Dump File [F:\DMP\042311-43118-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`2305d000 PsLoadedModuleList = 0xfffff800`2329ae50
Debug session time: Fri Apr 22 19:49:56.608 2011 (UTC - 4:00)
System Uptime: 0 days 3:17:17.419
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 77, {1, fa8004286c7004c0, 0, fffff8800557b690}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4e371 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_STACK_INPAGE_ERROR (77)
The requested page of kernel data could not be read in.  Caused by
bad block in paging file or disk controller error.
In the case when the first arguments is 0 or 1, the stack signature
in the kernel stack was not found.  Again, bad hardware.
An I/O status of c000009c (STATUS_DEVICE_DATA_ERROR) or
C000016AL (STATUS_DISK_OPERATION_FAILED)  normally indicates
the data could not be read from the disk due to a bad
block.  Upon reboot autocheck will run and attempt to map out the bad
sector.  If the status is C0000185 (STATUS_IO_DEVICE_ERROR) and the paging
file is on a SCSI disk device, then the cabling and termination should be
checked.  See the knowledge base article on SCSI termination.
Arguments:
Arg1: 0000000000000001, (page was retrieved from disk)
Arg2: fa8004286c7004c0, value found in stack where signature should be
Arg3: 0000000000000000, 0
Arg4: fffff8800557b690, address of signature on kernel stack

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0x1 - STATUS_WAIT_1

BUGCHECK_STR:  0x77_1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80023152833 to fffff800230cd740

STACK_TEXT:  
fffff880`03140b58 fffff800`23152833 : 00000000`00000077 00000000`00000001 fa800428`6c7004c0 00000000`00000000 : nt!KeBugCheckEx
fffff880`03140b60 fffff800`230c21ec : fffffa80`0799d510 00000000`00000001 fffffa80`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x4e371
fffff880`03140c70 fffff800`230c2187 : 00000000`00000000 00000000`00000001 fffffa80`039d6040 00000000`00000080 : nt!MmInPageKernelStack+0x40
fffff880`03140cd0 fffff800`230c1e2c : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`039d6000 : nt!KiInSwapKernelStacks+0x1f
fffff880`03140d00 fffff800`233707c6 : 7006320a`0007340a 000a6418`000a1801 00083418`00095418 7010c012`e0143218 : nt!KeSwapProcessOrStack+0x84
fffff880`03140d40 fffff800`230abc26 : fffff800`23247e80 fffffa80`039f6b60 fffff800`23255c40 50066007`7008d20c : nt!PspSystemThreadStartup+0x5a
fffff880`03140d80 00000000`00000000 : fffff880`03141000 fffff880`0313b000 fffff880`031408b0 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+4e371
fffff800`23152833 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+4e371

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4cc791bd

FAILURE_BUCKET_ID:  X64_0x77_1_nt!_??_::FNODOBFM::_string_+4e371

BUCKET_ID:  X64_0x77_1_nt!_??_::FNODOBFM::_string_+4e371

Followup: MachineOwner
---------





DRIVERS

Code:
start             end                 module name
fffff880`03c71000 fffff880`03caf000   1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f95000 fffff880`00fec000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`0632c000 fffff880`06344000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`02ce6000 fffff880`02d70000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03ce0000 fffff880`03cf6000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c58000 fffff880`00c63000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`03cbc000 fffff880`03cc4000   ASACPI   ASACPI.sys   Wed Jul 15 23:31:29 2009 (4A5E9F11)
fffff880`03b6c000 fffff880`03b72000   AsIO     AsIO.sys     Mon Aug 03 03:03:16 2009 (4A768BB4)
fffff880`056e5000 fffff880`056ee000   aswFsBlk aswFsBlk.SYS Mon Apr 18 13:13:00 2011 (4DAC711C)
fffff880`043be000 fffff880`043f8000   aswMonFlt aswMonFlt.sys Mon Apr 18 13:13:11 2011 (4DAC7127)
fffff880`02d70000 fffff880`02d7a000   aswRdr   aswRdr.SYS   Mon Apr 18 13:13:23 2011 (4DAC7133)
fffff880`01800000 fffff880`01898000   aswSnx   aswSnx.SYS   Mon Apr 18 13:17:58 2011 (4DAC7246)
fffff880`03b1f000 fffff880`03b6c000   aswSP    aswSP.SYS    Mon Apr 18 13:17:56 2011 (4DAC7244)
fffff880`00c63000 fffff880`00c73000   aswTdi   aswTdi.SYS   Mon Apr 18 13:16:21 2011 (4DAC71E5)
fffff880`00c1a000 fffff880`00c23000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c23000 fffff880`00c4d000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff960`00840000 fffff960`008a1000   ATMFD    ATMFD.DLL    Fri Jan 07 00:49:20 2011 (4D26A960)
fffff880`019a8000 fffff880`019af000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b0e000 fffff880`03b1f000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0612d000 fffff880`0614b000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00680000 fffff960`006a7000   cdd      cdd.dll      Wed Jan 26 01:31:34 2011 (4D3FBFC6)
fffff880`01951000 fffff880`0197b000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0197b000 fffff880`01991000   CFRMD    CFRMD.sys    Thu Nov 25 07:40:39 2010 (4CEE5947)
fffff880`01991000 fffff880`0199f000   CFRPD    CFRPD.sys    Thu Dec 09 03:02:58 2010 (4D008D32)
fffff880`00d32000 fffff880`00df2000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018eb000 fffff880`0191b000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cd4000 fffff880`00d32000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01158000 fffff880`011cb000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`03cd0000 fffff880`03ce0000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05612000 fffff880`05620000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03a6d000 fffff880`03af0000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03af0000 fffff880`03b0e000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02cc3000 fffff880`02cd2000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`018d5000 fffff880`018eb000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`059dc000 fffff880`059fe000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0562c000 fffff880`05635000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05620000 fffff880`0562c000   dump_ataport dump_ataport.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05635000 fffff880`05648000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05606000 fffff880`05612000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`10afc000 fffff880`10bf0000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`0fe00000 fffff880`0fe46000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`05667000 fffff880`056aba00   etFilter64 etFilter64.sys Wed Jun 13 22:11:11 2007 (4670A3BF)
fffff880`056bd000 fffff880`056bf400   etScan64 etScan64.sys Mon Jul 23 18:00:17 2007 (46A524F1)
fffff880`03caf000 fffff880`03cbc000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`010e6000 fffff880`010fa000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`042bb000 fffff880`042c6000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`0109a000 fffff880`010e6000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0189b000 fffff880`018d5000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`235e8000 fffff800`23631000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`06023000 fffff880`0602f000   hcmon    hcmon.sys    Thu Oct 22 06:00:49 2009 (4AE02D51)
fffff880`03bae000 fffff880`03bd2000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`0435c000 fffff880`04375000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`056dc000 fffff880`056e4080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`056ce000 fffff880`056dc000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`06065000 fffff880`0612d000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`015f3000 fffff880`015fc000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`03b98000 fffff880`03bae000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03db6000 fffff880`03dc5000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04382000 fffff880`04390000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbc000 fffff800`00bc6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`03c00000 fffff880`03c43000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`05600000 fffff880`05605200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03bd2000 fffff880`03be4000   L1E62x64 L1E62x64.sys Thu Jun 11 02:45:22 2009 (4A30A802)
fffff880`04231000 fffff880`04246000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0439b000 fffff880`043be000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c7c000 fffff880`00cc0000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`056c0000 fffff880`056ce000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03dc5000 fffff880`03dd4000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`04375000 fffff880`04382000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c00000 fffff880`00c1a000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0614b000 fffff880`06163000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`06163000 fffff880`06190000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`06190000 fffff880`061de000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`06000000 fffff880`06023000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`00c4d000 fffff880`00c58000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`013f1000 fffff880`013fc000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00ff5000 fffff880`00fff000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010fa000 fffff880`01158000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02cb8000 fffff880`02cc3000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e1000 fffff880`015f3000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014e7000 fffff880`015d9000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`03d1a000 fffff880`03d26000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`03d26000 fffff880`03d55000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`042c6000 fffff880`042db000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c00000 fffff880`02c0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d7a000 fffff880`02dbf000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01086000 fffff880`01097000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02cac000 fffff880`02cb8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`2300b000 fffff800`235e8000   nt       ntkrnlmp.exe Tue Oct 26 22:43:09 2010 (4CC791BD)
fffff880`01245000 fffff880`013e8000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0199f000 fffff880`019a8000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`10afa000 fffff880`10afb180   nvBridge nvBridge.kmd Thu Apr 07 23:14:49 2011 (4D9E7DA9)
fffff880`0fe55000 fffff880`10af9300   nvlddmkm nvlddmkm.sys Thu Apr 07 23:22:12 2011 (4D9E7F64)
fffff880`02dd3000 fffff880`02df9000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00e40000 fffff880`00e55000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00e0d000 fffff880`00e40000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ec6000 fffff880`00ecd000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00ecd000 fffff880`00edd000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06344000 fffff880`063ea000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0599f000 fffff880`059dc000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cc0000 fffff880`00cd4000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`03cf6000 fffff880`03d1a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03d55000 fffff880`03d70000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03d70000 fffff880`03d91000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03d91000 fffff880`03dab000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c5b000 fffff880`02cac000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03dab000 fffff880`03db6000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`019f2000 fffff880`019fb000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01235000 fffff880`0123e000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`013e8000 fffff880`013f1000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0104c000 fffff880`01086000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`04246000 fffff880`0425e000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`056ee000 fffff880`0599e880   RTKVHD64 RTKVHD64.sys Wed Apr 06 03:30:01 2011 (4D9C1679)
fffff880`063ea000 fffff880`063f5000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03cc4000 fffff880`03cd0000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c0f000 fffff880`02c2c000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`015d9000 fffff880`015e1000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06925000 fffff880`069bb000   srv      srv.sys      Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`068be000 fffff880`06925000   srv2     srv2.sys     Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`06200000 fffff880`0622d000   srvnet   srvnet.sys   Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`056ac000 fffff880`056bcd00   STREAM   STREAM.SYS   Mon Jul 13 20:06:18 2009 (4A5BCBFA)
fffff880`03dd4000 fffff880`03dd5480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01603000 fffff880`01800000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`0622d000 fffff880`0623f000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`011e9000 fffff880`011f6000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`011cb000 fffff880`011e9000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c47000 fffff880`02c5b000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00400000 fffff960`0040a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03b72000 fffff880`03b98000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03c43000 fffff880`03c55000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`042db000 fffff880`0435bd80   Unknown_Module_fffff880_042db000 Unknown_Module_fffff880`042db000 Mon Jul 23 17:59:09 2007 (46A524AD)
fffff880`05648000 fffff880`05665000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05665000 fffff880`05666f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03a56000 fffff880`03a67000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04261000 fffff880`042bb000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`03a00000 fffff880`03a56000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0fe46000 fffff880`0fe53000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e00000 fffff880`00e0d000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`019af000 fffff880`019bd000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019bd000 fffff880`019e2000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0602f000 fffff880`06047000   vmci     vmci.sys     Thu Oct 22 05:26:48 2009 (4AE02558)
fffff880`04390000 fffff880`0439b000   VMkbd    VMkbd.sys    Thu Oct 22 06:51:05 2009 (4AE03919)
fffff880`03c5d000 fffff880`03c67000   VMNET    VMNET.SYS    Mon Aug 10 08:04:50 2009 (4A800CE2)
fffff880`03c55000 fffff880`03c5d000   vmnetadapter vmnetadapter.sys Mon Aug 10 08:04:53 2009 (4A800CE5)
fffff880`04221000 fffff880`04231000   vmnetbridge vmnetbridge.sys Mon Aug 10 08:05:58 2009 (4A800D26)
fffff880`0623f000 fffff880`06249000   vmnetuserif vmnetuserif.sys Thu Oct 22 06:17:07 2009 (4AE03123)
fffff880`014d5000 fffff880`014e5000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`06256000 fffff880`0632c000   vmx86    vmx86.sys    Thu Oct 22 07:36:57 2009 (4AE043D9)
fffff880`00e55000 fffff880`00e6a000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e6a000 fffff880`00ec6000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01000000 fffff880`0104c000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`068b2000 fffff880`068be000   vstor2_ws60 vstor2-ws60.sys Mon Oct 12 17:06:26 2009 (4AD39A52)
fffff880`02c2c000 fffff880`02c47000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`019e2000 fffff880`019f2000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ee2000 fffff880`00f86000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f86000 fffff880`00f95000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dca000 fffff880`02dd3000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`00360000   win32k   win32k.sys   Tue Jan 04 22:59:44 2011 (4D23ECB0)
fffff880`00fec000 fffff880`00ff5000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`02dbf000 fffff880`02dca000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 20:10:33 2009 (4A5BCCF9)
fffff880`04200000 fffff880`04221000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`06841000 fffff880`068b2000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`0191b000 fffff880`01929000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01929000 fffff880`01935000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`01935000 fffff880`0193e000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`0193e000 fffff880`01951000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
 
Back
Top Bottom