Ostatni bsod bo praktycznie wszystkie takie same
PFN_LIST_CORRUPT - Uszkodzenie listy PFN (Page File Number) sterownika, zazwyczaj poprzez inny sterownik. Przyczyną może być przechowywanie przez sterownik złej listy deskryptorów lub też przez uszkodzenie pamięci.
Co można zrobić
- aktualizacja wadliwego sterownika -> po przeanalizowaniu bsodów - patrz niżej
- wyłączenie programów av oraz firewalli (testowo) -> do wyłączenia w usługach (msconfig) Avast na kolejny rozruch
- test pamięci RAM -> memtest86 na kilka godzin a nie jedna czy dwie pętelki.
Ewidentnie widać iż sterownik sieciówki nie jest zaktualizowany - jako jedyny z najstarszych z 2009r
Rt64win7.sys Thu Feb 26 10:04:13 2009 - Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
http://www.realtek.com.tw/downloads/down...Down=false
Proces z którego następuje przechwycenie błędu bsod to svchost.exe a jak wiadomo to agregator różnych procesów systemowych jak i użytkownika. Proszę nie mylić tego z jego bezpośrednią winą lub podmieniać tenże plik.
W starszych bsodach jest to NvNetworkService.exe - moduł Nvidii do aktualizacji sterownika - wywaliłbym to i zostawił sam czysty sterownik, nic ponadto.
Do zapuszczenia również podczas pracy na parę godzin weryfikacja sterowników
Kod:
- Kliknij Start, wpisz cmd a potem verifier.exe
- Zaznacz opcję "Utwórz ustawienia niestandardowe".
- Kliknij "Wybierz indywidualne ustawienia z pełnej listy".
- Zaznacz opcje -> Pula specjalna - Śledzenie puli - Wymuszanie sprawdzenia IRQL.
- Kliknij "Wybierz nazwy sterowników z listy" po czym chwilę czekamy.
- Zaznaczamy wszystkie sterowniki nie pochodzące od Microsoft (sortujemy wg kolumny Dostawca).
- Klikamy zakończ, uruchamiamy ponownie komputer i czekamy pracując sobie na złe lub dobre wieści przez kilka godzin czy system się wysypie bsodem czy nie.
- Wpisujemy verifier.exe /reset aby zakończyć diagnostykę sterowników i uruchamiamy sprzęt ponownie.
A niżej debug, nie przedstawiam wszystkich szczegółów oczywiście znanych tylko sobie.
Kod:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*c: \symbols*http: //msdl.microsoft.com/download/symbols;symsrv*symsrv.dll*c: \symb*http: //msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18933.amd64fre.win7sp1_gdr.150715-0600
Machine Name:
Kernel base = 0xfffff800`02a0f000 PsLoadedModuleList = 0xfffff800`02c56730
Debug session time: Tue Sep 15 00: 24: 48.489 2015 (UTC + 2: 00)
System Uptime: 0 days 5: 38: 21.175
Loading Kernel Symbols
...............................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 4E, {99, 8161, 2, 1}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000008161, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0000000000000001, 0
Debugging Details:
------------------
BUGCHECK_STR: 0x4E_99
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80002b150fc to fffff80002a825c0
STACK_TEXT:
fffff880`06f9d728 fffff800`02b150fc : 00000000`0000004e 00000000`00000099 00000000`00008161 00000000`00000002 : nt!KeBugCheckEx
fffff880`06f9d730 fffff800`02a2e627 : 00000000`00000000 fffff680`0004b8a8 00000000`00000000 00000001`00000001 : nt!MiBadShareCount+0x4c
fffff880`06f9d770 fffff800`02ab45b7 : fffffa80`06dc5600 fffff680`0004ba60 fffffa80`06dc5600 fffffa80`06dc5998 : nt! ? : FNODOBFM: `string'+0x30f8d
fffff880`06f9d920 fffff800`02a6fa3f : fffffa80`00000000 00000000`09b7ffff 00000000`00000000 00000000`00000000 : nt!MiDeleteVirtualAddresses+0x41f
fffff880`06f9dae0 fffff800`02a81853 : ffffffff`ffffffff 00000000`00faec78 00000000`00faec70 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`06f9dbe0 00000000`7703db9a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00faebf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7703db9a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiBadShareCount+4c
fffff800`02b150fc cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiBadShareCount+4c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 55a6901f
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
Followup: MachineOwner
---------
CPUID: "Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz"
MaxSpeed: 2930
CurrentSpeed: 2929
[SMBIOS Data Tables v2.5]
[DMI Version - 0]
[2.0 Calling Convention - No]
[Table Size - 2685 bytes]
[BIOS Information (Type 0) - Length 24 - Handle 0000h]
Vendor American Megatrends Inc.
BIOS Version V2.2
BIOS Starting Address Segment f000
BIOS Release Date 08/17/2009
BIOS ROM Size 100000
BIOS Characteristics
04: - ISA Supported
07: - PCI Supported
09: - Plug and Play Supported
10: - APM Supported
11: - Upgradeable FLASH BIOS
12: - BIOS Shadowing Supported
14: - ESCD Supported
15: - CD-Boot Supported
16: - Selectable Boot Supported
17: - BIOS ROM Socketed
19: - EDD Supported
23: - 1.2MB Floppy Supported
24: - 720KB Floppy Supported
25: - 2.88MB Floppy Supported
26: - Print Screen Device Supported
27: - Keyboard Services Supported
28: - Serial Services Supported
29: - Printer Services Supported
30: - CGA/Mono Services Supported
32: - BIOS Vendor Reserved
BIOS Characteristic Extensions
00: - ACPI Supported
01: - USB Legacy Supported
04: - LS120-Boot Supported
05: - ATAPI ZIP-Boot Supported
08: - BIOS Boot Specification Supported
10: - Specification Reserved
BIOS Major Revision 8
BIOS Minor Revision 15
EC Firmware Major Revision 255
EC Firmware Minor Revision 255
[System Information (Type 1) - Length 27 - Handle 0001h]
Manufacturer MICRO-STAR INTERNATIONAL CO.,LTD
Product Name MS-7519
Version 1.0
Serial Number
UUID 00000000-0000-0000-0000-000000000000
Wakeup Type Power Switch
SKUNumber To Be Filled By O.E.M.
Family To Be Filled By O.E.M.
[BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
Manufacturer MICRO-STAR INTERNATIONAL CO.,LTD
Product P43T-C51 (MS-7519)
Version 1.0
Serial Number
Asset Tag
Feature Flags 09h
260390260: - V<
260390220: - V<
Location To Be Filled By O.E.M.
Chassis Handle 0003h
Board Type 0ah - Processor/Memory Module
Number of Child Handles 0
[System Enclosure (Type 3) - Length 21 - Handle 0003h]
Manufacturer MICRO-STAR INTERNATIONAL CO.,LTD
Chassis Type Desktop
Version 1.0
Serial Number
Asset Tag Number
Bootup State Safe
Power Supply State Safe
Thermal State Safe
Security Status None
OEM Defined 0
Height 0U
Number of Power Cords 1
Number of Contained Elements 0
Contained Element Size 0
[Processor Information (Type 4) - Length 40 - Handle 0004h]
Socket Designation CPU1
Processor Type Central Processor
Processor Family bfh - Specification Reserved
Processor Manufacturer Intel
Processor ID 7a060100fffbebbf
Processor Version Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz
Processor Voltage 8dh - 1.3V
External Clock 267MHz
Max Speed 2933MHz
Current Speed 2933MHz
Status Enabled Populated
Processor Upgrade Other
L1 Cache Handle 0005h
L2 Cache Handle 0006h
L3 Cache Handle 0007h
Serial Number
Asset Tag Number
Part Number To Be Filled By O.E.M.
[Cache Information (Type 7) - Length 19 - Handle 0005h]
Socket Designation L1-Cache
Cache Configuration 0180h - WB Enabled Int NonSocketed L1
Maximum Cache Size 0040h - 64K
Installed Size 0040h - 64K
Supported SRAM Type 0001h - Other
Current SRAM Type 0001h - Other
Cache Speed 0ns
Error Correction Type ParitySingle-Bit ECC
System Cache Type Data
Associativity 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 0006h]
Socket Designation L2-Cache
Cache Configuration 0181h - WB Enabled Int NonSocketed L2
Maximum Cache Size 0c00h - 3072K
Installed Size 0c00h - 3072K
Supported SRAM Type 0001h - Other
Current SRAM Type 0001h - Other
Cache Speed 0ns
Error Correction Type Multi-Bit ECC
System Cache Type Unified
Associativity Other
[Cache Information (Type 7) - Length 19 - Handle 0007h]
Socket Designation L3-Cache
Cache Configuration 0302h - Unknown Disabled Int NonSocketed L3
Maximum Cache Size 0000h - 0K
Installed Size 0000h - 0K
Supported SRAM Type 0002h - Unknown
Current SRAM Type 0002h - Unknown
Cache Speed 0ns
Error Correction Type Unknown
System Cache Type Unknown
Associativity Unknown
[Memory Controller Information (Type 5) - Length 24 - Handle 0008h]
Error Detecting Method 06h - 64-bit ECC
Error Correcting Capability 04h - None
Supported Interleave 03h - One Way Interleave
Current Interleave 03h - One Way Interleave
Maximum Memory Module Size 0ch - 4096MB
Supported Speeds 0001h - Other
Supported Memory Types 0500h - DIMM SDRAM
Memory Module Voltage 3.3V
Number of Memory Slots 4
Memory Slot Handle 0009h
Memory Slot Handle 000ah
Memory Slot Handle 000bh
Memory Slot Handle 000ch
Enabled Err Correcting Caps 04h - None
[Memory Module Information (Type 6) - Length 12 - Handle 0009h]
Socket Designation DIMM1
Bank Connections 01h - 1 0
Current Speed 1ns
Current Memory Type 0500h - DIMM SDRAM
Installed Size 8ah - 1024 [double bank]
Enabled Size 8ah - 1024 [double bank]
Error Status 00h - [No Errors]
[Memory Module Information (Type 6) - Length 12 - Handle 000ah]
Socket Designation DIMM2
Bank Connections 23h - 3 2
Current Speed 35ns
Current Memory Type 0500h - DIMM SDRAM
Installed Size 8ah - 1024 [double bank]
Enabled Size 8ah - 1024 [double bank]
Error Status 00h - [No Errors]
[Memory Module Information (Type 6) - Length 12 - Handle 000bh]
Socket Designation DIMM3
Bank Connections 45h - 5 4
Current Speed 69ns
Current Memory Type 0500h - DIMM SDRAM
Installed Size 8bh - 2048 [double bank]
Enabled Size 8bh - 2048 [double bank]
Error Status 00h - [No Errors]
[Memory Module Information (Type 6) - Length 12 - Handle 000ch]
Socket Designation DIMM4
Bank Connections 67h - 7 6
Current Speed 103ns
Current Memory Type 0500h - DIMM SDRAM
Installed Size 7fh - [Not Installed] [single bank]
Enabled Size 7fh - [Not Installed] [single bank]
Error Status 00h - [No Errors]
[Physical Memory Array (Type 16) - Length 15 - Handle 002eh]
Location 03h - SystemBoard/Motherboard
Use 03h - System Memory
Memory Error Correction 03h - None
Maximum Capacity 4194304KB
Memory Error Inf Handle 002fh
Number of Memory Devices 4
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 002fh]
[Memory Array Mapped Address (Type 19) - Length 15 - Handle 0030h]
Starting Address 00000000h
Ending Address 003fffffh
Memory Array Handle 002eh
Partition Width 04
[Memory Device (Type 17) - Length 27 - Handle 0031h]
Physical Memory Array Handle 002eh
Memory Error Info Handle 0032h
Total Width 64 bits
Data Width 64 bits
Size 1024MB
Form Factor 09h - DIMM
Device Set [None]
Device Locator DIMM1
Bank Locator BANK0
Memory Type 0fh - SDRAM
Type Detail 0080h - Synchronous
Speed 0MHz
Manufacturer Manufacturer00
Serial Number
Asset Tag Number
Part Number ModulePartNumber00
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0032h]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 0033h]
Starting Address 00000000h
Ending Address 000fffffh
Memory Device Handle 0031h
Mem Array Mapped Adr Handle 0030h
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth 01
[Memory Device (Type 17) - Length 27 - Handle 0034h]
Physical Memory Array Handle 002eh
Memory Error Info Handle 0035h
Total Width 64 bits
Data Width 64 bits
Size 1024MB
Form Factor 09h - DIMM
Device Set [None]
Device Locator DIMM2
Bank Locator BANK1
Memory Type 0fh - SDRAM
Type Detail 0080h - Synchronous
Speed 0MHz
Manufacturer Manufacturer01
Serial Number
Asset Tag Number
Part Number ModulePartNumber01
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0035h]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 0036h]
Starting Address 00100000h
Ending Address 001fffffh
Memory Device Handle 0034h
Mem Array Mapped Adr Handle 0030h
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth 01
[Memory Device (Type 17) - Length 27 - Handle 0037h]
Physical Memory Array Handle 002eh
Memory Error Info Handle 0038h
Total Width 64 bits
Data Width 64 bits
Size 2048MB
Form Factor 09h - DIMM
Device Set [None]
Device Locator DIMM3
Bank Locator BANK2
Memory Type 0fh - SDRAM
Type Detail 0080h - Synchronous
Speed 0MHz
Manufacturer Manufacturer02
Serial Number
Asset Tag Number
Part Number ModulePartNumber02
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 0038h]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 0039h]
Starting Address 00200000h
Ending Address 003fffffh
Memory Device Handle 0037h
Mem Array Mapped Adr Handle 0030h
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth 01
[Memory Device (Type 17) - Length 27 - Handle 003ah]
Physical Memory Array Handle 002eh
Memory Error Info Handle 003bh
Total Width [Unknown]
Data Width [Unknown]
Size [Not Populated]
Form Factor 09h - DIMM
Device Set [None]
Device Locator DIMM4
Bank Locator BANK3
Memory Type 02h - Unknown
Type Detail 0004h - Unknown
Speed 0MHz
Manufacturer Manufacturer03
Serial Number
Asset Tag Number
Part Number ModulePartNumber03
[32Bit Memory Error Information (Type 18) - Length 23 - Handle 003bh]
[Memory Device Mapped Address (Type 20) - Length 19 - Handle 003ch]
Starting Address 00000000h
Ending Address 00000000h
Memory Device Handle 003ah
Mem Array Mapped Adr Handle 0030h
Partition Row Position 01
Interleave Position [None]
Interleave Data Depth 01
start end module name
fffff880`00f71000 fffff880`00fc8000 ACPI ACPI.sys Sat Nov 20 10: 19: 16 2010 (4CE79294)
fffff880`02c3d000 fffff880`02cc6000 afd afd.sys Fri May 30 08: 45: 48 2014 (5388291C)
fffff880`0413f000 fffff880`04155000 AgileVpn AgileVpn.sys Tue Jul 14 02: 10: 24 2009 (4A5BCCF0)
fffff880`00fe4000 fffff880`00fef000 amdxata amdxata.sys Fri Mar 19 17: 18: 18 2010 (4BA3A3CA)
fffff880`06872000 fffff880`0687c000 aswHwid aswHwid.sys Mon Jul 27 19: 06: 58 2015 (55B66532)
fffff880`011d3000 fffff880`011f7000 aswMonFlt aswMonFlt.sys Mon Jul 27 19: 06: 30 2015 (55B66516)
fffff880`02cc6000 fffff880`02ce0000 aswRdr2 aswRdr2.sys Mon Jul 27 19: 07: 28 2015 (55B66550)
fffff880`019b5000 fffff880`019c8000 aswRvrt aswRvrt.sys unavailable (00000000)
fffff880`03c08000 fffff880`03d0c000 aswSnx aswSnx.sys Wed Aug 12 16: 44: 50 2015 (55CB5BE2)
fffff880`03d0c000 fffff880`03d81000 aswSP aswSP.sys Mon Jul 27 19: 34: 27 2015 (55B66BA3)
fffff880`00dd7000 fffff880`00dfe000 aswStm aswStm.sys Mon Jul 27 19: 37: 56 2015 (55B66C74)
fffff880`01970000 fffff880`019b5000 aswVmm aswVmm.sys Mon Jul 27 19: 34: 01 2015 (55B66B89)
fffff880`00fdb000 fffff880`00fe4000 atapi atapi.sys Tue Jul 14 01: 19: 47 2009 (4A5BC113)
fffff880`00dad000 fffff880`00dd7000 ataport ataport.SYS Mon Aug 05 03: 02: 45 2013 (51FEF9B5)
fffff880`03d8a000 fffff880`03d91000 Beep Beep.SYS Tue Jul 14 02: 00: 13 2009 (4A5BCA8D)
fffff880`02c26000 fffff880`02c37000 blbdrive blbdrive.sys Tue Jul 14 01: 35: 59 2009 (4A5BC4DF)
fffff880`06973000 fffff880`06991000 bowser bowser.sys Wed Feb 23 05: 55: 04 2011 (4D649328)
fffff960`00770000 fffff960`00797000 cdd cdd.dll unavailable (00000000)
fffff880`01800000 fffff880`0182a000 cdrom cdrom.sys Sat Nov 20 10: 19: 20 2010 (4CE79298)
fffff880`00cdc000 fffff880`00d51000 CI CI.dll Fri Jun 27 04: 04: 21 2014 (53ACD125)
fffff880`01940000 fffff880`01970000 CLASSPNP CLASSPNP.SYS Sat Nov 20 10: 19: 23 2010 (4CE7929B)
fffff880`00c7e000 fffff880`00cdc000 CLFS CLFS.SYS Wed Mar 04 04: 21: 12 2015 (54F67A28)
fffff880`01000000 fffff880`01072000 cng cng.sys Fri Jan 30 04: 17: 08 2015 (54CAF7B4)
fffff880`0412f000 fffff880`0413f000 CompositeBus CompositeBus.sys Sat Nov 20 11: 33: 17 2010 (4CE7A3ED)
fffff880`0439b000 fffff880`043a9000 crashdmp crashdmp.sys Tue Jul 14 02: 01: 01 2009 (4A5BCABD)
fffff880`0186a000 fffff880`01888000 dfsc dfsc.sys Sat Nov 20 10: 26: 31 2010 (4CE79447)
fffff880`02c17000 fffff880`02c26000 discache discache.sys Tue Jul 14 01: 37: 18 2009 (4A5BC52E)
fffff880`0192a000 fffff880`01940000 disk disk.sys Tue Jul 14 01: 19: 57 2009 (4A5BC11D)
fffff880`042a8000 fffff880`042ca000 drmk drmk.sys Fri Oct 04 04: 16: 30 2013 (524E24FE)
fffff880`043b5000 fffff880`043be000 dump_atapi dump_atapi.sys Tue Jul 14 01: 19: 47 2009 (4A5BC113)
fffff880`043a9000 fffff880`043b5000 dump_dumpata dump_dumpata.sys Tue Jul 14 01: 19: 47 2009 (4A5BC113)
fffff880`043be000 fffff880`043d1000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 01: 21: 51 2009 (4A5BC18F)
fffff880`043d1000 fffff880`043dd000 Dxapi Dxapi.sys Tue Jul 14 01: 38: 28 2009 (4A5BC574)
fffff880`0fcdf000 fffff880`0fdd4000 dxgkrnl dxgkrnl.sys Mon Jun 16 02: 58: 04 2014 (539E411C)
fffff880`0f000000 fffff880`0f046000 dxgmms1 dxgmms1.sys Wed Apr 10 05: 27: 15 2013 (5164DC13)
fffff880`01127000 fffff880`0113b000 fileinfo fileinfo.sys Tue Jul 14 01: 34: 25 2009 (4A5BC481)
fffff880`010db000 fffff880`01127000 fltmgr fltmgr.sys Sat Nov 20 10: 19: 24 2010 (4CE7929C)
fffff880`013f4000 fffff880`013fe000 Fs_Rec Fs_Rec.sys unavailable (00000000)
fffff880`018f0000 fffff880`0192a000 fvevol fvevol.sys Thu Jan 24 04: 11: 24 2013 (5100A65C)
fffff880`0148c000 fffff880`014d5000 fwpkclnt fwpkclnt.sys Sat Apr 05 03: 23: 21 2014 (533F5B09)
fffff800`02ffa000 fffff800`03043000 hal hal.dll Sat Nov 20 14: 00: 25 2010 (4CE7C669)
fffff880`040cd000 fffff880`040f1000 HDAudBus HDAudBus.sys Sat Nov 20 11: 43: 42 2010 (4CE7A65E)
fffff880`0433f000 fffff880`0439b000 HdAudio HdAudio.sys Sat Nov 20 11: 44: 23 2010 (4CE7A687)
fffff880`04048000 fffff880`04061000 HIDCLASS HIDCLASS.SYS Wed Jul 03 06: 05: 05 2013 (51D3A2F1)
fffff880`04200000 fffff880`04208080 HIDPARSE HIDPARSE.SYS Wed Jul 03 06: 05: 04 2013 (51D3A2F0)
fffff880`0403a000 fffff880`04048000 hidusb hidusb.sys Sat Nov 20 11: 43: 49 2010 (4CE7A665)
fffff880`068aa000 fffff880`06973000 HTTP HTTP.sys Wed Feb 25 04: 17: 55 2015 (54ED3EE3)
fffff880`015f4000 fffff880`015fd000 hwpolicy hwpolicy.sys Sat Nov 20 10: 18: 54 2010 (4CE7927E)
fffff880`018ae000 fffff880`018c4000 intelppm intelppm.sys Tue Jul 14 01: 19: 25 2009 (4A5BC0FD)
fffff880`0401a000 fffff880`04029000 kbdclass kbdclass.sys Tue Jul 14 01: 19: 50 2009 (4A5BC116)
fffff880`041f0000 fffff880`041fe000 kbdhid kbdhid.sys Sat Nov 20 11: 33: 25 2010 (4CE7A3F5)
fffff800`00bcf000 fffff800`00bd9000 kdcom kdcom.dll Sat Feb 05 17: 52: 49 2011 (4D4D8061)
fffff880`04209000 fffff880`0424c000 ks ks.sys Sat Nov 20 11: 33: 23 2010 (4CE7A3F3)
fffff880`013c8000 fffff880`013e3000 ksecdd ksecdd.sys Wed Jul 15 18: 44: 44 2015 (55A68DFC)
fffff880`01460000 fffff880`0148c000 ksecpkg ksecpkg.sys Wed Jul 15 19: 01: 41 2015 (55A691F5)
fffff880`042ca000 fffff880`042cf200 ksthunk ksthunk.sys Tue Jul 14 02: 00: 19 2009 (4A5BCA93)
fffff880`019eb000 fffff880`01a00000 lltdio lltdio.sys Tue Jul 14 02: 08: 50 2009 (4A5BCC92)
fffff880`019c8000 fffff880`019eb000 luafv luafv.sys Tue Jul 14 01: 26: 13 2009 (4A5BC295)
fffff880`00c1b000 fffff880`00c6a000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 14: 03: 51 2010 (4CE7C737)
fffff880`018d1000 fffff880`018df000 monitor monitor.sys Tue Jul 14 01: 38: 52 2009 (4A5BC58C)
fffff880`04029000 fffff880`04038000 mouclass mouclass.sys Tue Jul 14 01: 19: 50 2009 (4A5BC116)
fffff880`018c4000 fffff880`018d1000 mouhid mouhid.sys Tue Jul 14 02: 00: 20 2009 (4A5BCA94)
fffff880`00e81000 fffff880`00e9b000 mountmgr mountmgr.sys Wed Jul 15 18: 44: 37 2015 (55A68DF5)
fffff880`06991000 fffff880`069a9000 mpsdrv mpsdrv.sys Tue Jul 14 02: 08: 25 2009 (4A5BCC79)
fffff880`069a9000 fffff880`069d6000 mrxsmb mrxsmb.sys Wed Jul 15 18: 46: 57 2015 (55A68E81)
fffff880`06800000 fffff880`0684e000 mrxsmb10 mrxsmb10.sys Wed Jul 15 18: 46: 17 2015 (55A68E59)
fffff880`0684e000 fffff880`06872000 mrxsmb20 mrxsmb20.sys Wed Jul 15 18: 46: 13 2015 (55A68E55)
fffff880`03def000 fffff880`03dfa000 Msfs Msfs.SYS Tue Jul 14 01: 19: 47 2009 (4A5BC113)
fffff880`00fd1000 fffff880`00fdb000 msisadrv msisadrv.sys Tue Jul 14 01: 19: 26 2009 (4A5BC0FE)
fffff880`0113b000 fffff880`01199000 msrpc msrpc.sys unavailable (00000000)
fffff880`02c0c000 fffff880`02c17000 mssmbios mssmbios.sys Tue Jul 14 01: 31: 10 2009 (4A5BC3BE)
fffff880`01200000 fffff880`01212000 mup mup.sys Tue Jul 14 01: 23: 45 2009 (4A5BC201)
fffff880`014dc000 fffff880`015ce000 ndis ndis.sys Wed Aug 22 17: 11: 46 2012 (5034F6B2)
fffff880`04179000 fffff880`04185000 ndistapi ndistapi.sys Tue Jul 14 02: 10: 00 2009 (4A5BCCD8)
fffff880`04185000 fffff880`041b4000 ndiswan ndiswan.sys Sat Nov 20 11: 52: 32 2010 (4CE7A870)
fffff880`0432a000 fffff880`0433f000 NDProxy NDProxy.SYS Sat Nov 20 11: 52: 20 2010 (4CE7A864)
fffff880`02d54000 fffff880`02d63000 netbios netbios.sys Tue Jul 14 02: 09: 26 2009 (4A5BCCB6)
fffff880`02ce0000 fffff880`02d25000 netbt netbt.sys Sat Nov 20 10: 23: 18 2010 (4CE79386)
fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Tue Nov 26 11: 21: 01 2013 (5294760D)
fffff880`015d6000 fffff880`015f4000 ngvss ngvss.sys Fri Jul 10 09: 57: 20 2015 (559F7AE0)
fffff880`0182a000 fffff880`0183b000 Npfs Npfs.SYS Tue Jul 14 01: 19: 48 2009 (4A5BC114)
fffff880`02c00000 fffff880`02c0c000 nsiproxy nsiproxy.sys Tue Jul 14 01: 21: 02 2009 (4A5BC15E)
fffff800`02a0f000 fffff800`02ffa000 nt ntkrnlmp.exe Wed Jul 15 18: 53: 51 2015 (55A6901F)
fffff880`0121f000 fffff880`013c8000 Ntfs Ntfs.sys Fri Jan 24 02: 14: 50 2014 (52E1BE8A)
fffff880`03d81000 fffff880`03d8a000 Null Null.SYS unavailable (00000000)
fffff880`0f046000 fffff880`0fcdf000 nvlddmkm nvlddmkm.sys Wed Feb 04 01: 08: 12 2015 (54D162EC)
fffff880`07f44000 fffff880`07f4e000 NvStreamKms NvStreamKms.sys Sat Jul 25 11: 22: 15 2015 (55B35547)
fffff880`0425e000 fffff880`0426b000 nvvad64v nvvad64v.sys Mon Aug 10 09: 51: 42 2015 (55C8580E)
fffff880`02d2e000 fffff880`02d54000 pacer pacer.sys Sat Nov 20 11: 52: 18 2010 (4CE7A862)
fffff880`00e40000 fffff880`00e55000 partmgr partmgr.sys Sat Mar 17 06: 06: 09 2012 (4F641BC1)
fffff880`00e00000 fffff880`00e33000 pci pci.sys Sat Nov 20 10: 19: 11 2010 (4CE7928F)
fffff880`00e6a000 fffff880`00e71000 pciide pciide.sys Tue Jul 14 01: 19: 49 2009 (4A5BC115)
fffff880`00e71000 fffff880`00e81000 PCIIDEX PCIIDEX.SYS Tue Jul 14 01: 19: 48 2009 (4A5BC114)
fffff880`013e3000 fffff880`013f4000 pcw pcw.sys Tue Jul 14 01: 19: 27 2009 (4A5BC0FF)
fffff880`07c20000 fffff880`07cca000 peauth peauth.sys Tue Feb 03 04: 19: 12 2015 (54D03E30)
fffff880`0426b000 fffff880`042a8000 portcls portcls.sys Fri Oct 04 03: 36: 02 2013 (524E1B82)
fffff880`00c6a000 fffff880`00c7e000 PSHED PSHED.dll Tue Jul 14 03: 32: 23 2009 (4A5BE027)
fffff880`04155000 fffff880`04179000 rasl2tp rasl2tp.sys Sat Nov 20 11: 52: 34 2010 (4CE7A872)
fffff880`041b4000 fffff880`041cf000 raspppoe raspppoe.sys Tue Jul 14 02: 10: 17 2009 (4A5BCCE9)
fffff880`041cf000 fffff880`041f0000 raspptp raspptp.sys Sat Nov 20 11: 52: 31 2010 (4CE7A86F)
fffff880`04000000 fffff880`0401a000 rassstp rassstp.sys Tue Jul 14 02: 10: 25 2009 (4A5BCCF1)
fffff880`02daf000 fffff880`02e00000 rdbss rdbss.sys Sat Nov 20 10: 27: 51 2010 (4CE79497)
fffff880`03dd4000 fffff880`03ddd000 RDPCDD RDPCDD.sys Tue Jul 14 02: 16: 34 2009 (4A5BCE62)
fffff880`03ddd000 fffff880`03de6000 rdpencdd rdpencdd.sys Tue Jul 14 02: 16: 34 2009 (4A5BCE62)
fffff880`03de6000 fffff880`03def000 rdprefmp rdprefmp.sys Tue Jul 14 02: 16: 35 2009 (4A5BCE63)
fffff880`01199000 fffff880`011d3000 rdyboost rdyboost.sys Sat Nov 20 10: 43: 10 2010 (4CE7982E)
fffff880`010be000 fffff880`010d6000 rspndr rspndr.sys Tue Jul 14 02: 08: 50 2009 (4A5BCC92)
fffff880`040f1000 fffff880`04123000 Rt64win7 Rt64win7.sys Thu Feb 26 10: 04: 13 2009 (49A65B0D)
fffff880`07cca000 fffff880`07cd5000 secdrv secdrv.SYS Wed Sep 13 15: 18: 38 2006 (4508052E)
fffff880`04123000 fffff880`0412f000 serenum serenum.sys Tue Jul 14 02: 00: 33 2009 (4A5BCAA1)
fffff880`02d63000 fffff880`02d80000 serial serial.sys Tue Jul 14 02: 00: 40 2009 (4A5BCAA8)
fffff880`015ce000 fffff880`015d6000 spldr spldr.sys Mon May 11 18: 56: 27 2009 (4A0858BB)
fffff880`07e27000 fffff880`07ebf000 srv srv.sys Fri Apr 29 05: 06: 06 2011 (4DBA2B1E)
fffff880`07d60000 fffff880`07dc9000 srv2 srv2.sys Fri Apr 29 05: 05: 46 2011 (4DBA2B0A)
fffff880`07cd5000 fffff880`07d06000 srvnet srvnet.sys Fri Apr 29 05: 05: 35 2011 (4DBA2AFF)
fffff880`04038000 fffff880`04039480 swenum swenum.sys Tue Jul 14 02: 00: 18 2009 (4A5BCA92)
fffff880`01601000 fffff880`01800000 tcpip tcpip.sys Sat Apr 05 03: 26: 44 2014 (533F5BD4)
fffff880`07d06000 fffff880`07d18000 tcpipreg tcpipreg.sys Wed Oct 03 18: 07: 26 2012 (506C62BE)
fffff880`0185d000 fffff880`0186a000 TDI TDI.SYS Sat Nov 20 10: 22: 06 2010 (4CE7933E)
fffff880`0183b000 fffff880`0185d000 tdx tdx.sys Tue Nov 11 02: 46: 26 2014 (54616A72)
fffff880`02d9b000 fffff880`02daf000 termdd termdd.sys Sat Nov 20 12: 03: 40 2010 (4CE7AB0C)
fffff960`00430000 fffff960`0043a000 TSDDD TSDDD.dll Tue Jul 14 02: 16: 34 2009 (4A5BCE62)
fffff880`01888000 fffff880`018ae000 tunnel tunnel.sys Sat Nov 20 11: 51: 50 2010 (4CE7A846)
fffff880`0424c000 fffff880`0425e000 umbus umbus.sys Sat Nov 20 11: 44: 37 2010 (4CE7A695)
fffff880`043dd000 fffff880`043fa000 usbccgp usbccgp.sys Wed Nov 27 02: 41: 15 2013 (52954DBB)
fffff880`043fa000 fffff880`043fbe80 USBD USBD.SYS Wed Nov 27 02: 41: 03 2013 (52954DAF)
fffff880`040bb000 fffff880`040cd000 usbehci usbehci.sys Wed Nov 27 02: 41: 11 2013 (52954DB7)
fffff880`042d0000 fffff880`0432a000 usbhub usbhub.sys Wed Nov 27 02: 41: 36 2013 (52954DD0)
fffff880`04065000 fffff880`040bb000 USBPORT USBPORT.SYS Wed Nov 27 02: 41: 11 2013 (52954DB7)
fffff880`0fde1000 fffff880`0fdfc000 USBSTOR USBSTOR.SYS Fri Mar 11 05: 37: 16 2011 (4D79A6FC)
fffff880`0fdd4000 fffff880`0fde1000 usbuhci usbuhci.sys Wed Nov 27 02: 41: 05 2013 (52954DB1)
fffff880`07d18000 fffff880`07d60000 VBoxAswDrv VBoxAswDrv.sys Thu Jul 09 11: 18: 15 2015 (559E3C57)
fffff880`00e33000 fffff880`00e40000 vdrvroot vdrvroot.sys Tue Jul 14 02: 01: 31 2009 (4A5BCADB)
fffff880`03d91000 fffff880`03d9f000 vga vga.sys Tue Jul 14 01: 38: 47 2009 (4A5BC587)
fffff880`03d9f000 fffff880`03dc4000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 01: 38: 51 2009 (4A5BC58B)
fffff880`00e55000 fffff880`00e6a000 volmgr volmgr.sys Sat Nov 20 10: 19: 28 2010 (4CE792A0)
fffff880`00d51000 fffff880`00dad000 volmgrx volmgrx.sys unavailable (00000000)
fffff880`01072000 fffff880`010be000 volsnap volsnap.sys Sat Nov 20 10: 20: 08 2010 (4CE792C8)
fffff880`02d80000 fffff880`02d9b000 wanarp wanarp.sys Sat Nov 20 11: 52: 36 2010 (4CE7A874)
fffff880`03dc4000 fffff880`03dd4000 watchdog watchdog.sys Tue Jul 14 01: 37: 35 2009 (4A5BC53F)
fffff880`00e9f000 fffff880`00f61000 Wdf01000 Wdf01000.sys Sat Jun 22 05: 13: 05 2013 (51C51641)
fffff880`00f61000 fffff880`00f71000 WDFLDR WDFLDR.SYS Thu Jul 26 04: 29: 04 2012 (5010AB70)
fffff880`02d25000 fffff880`02d2e000 wfplwf wfplwf.sys Tue Jul 14 02: 09: 26 2009 (4A5BCCB6)
fffff960`000a0000 fffff960`003c4000 win32k win32k.sys Thu Jul 30 18: 55: 44 2015 (55BA5710)
fffff880`00fc8000 fffff880`00fd1000 WMILIB WMILIB.SYS Tue Jul 14 01: 19: 51 2009 (4A5BC117)
fffff880`07ef5000 fffff880`07f0e000 WudfPf WudfPf.sys Thu Jul 26 04: 26: 45 2012 (5010AAE5)
fffff880`07f0e000 fffff880`07f44000 WUDFRd WUDFRd.sys Thu Jul 26 04: 26: 06 2012 (5010AABE)
Unloaded modules:
fffff880`07f4e000 fffff880`07fbf000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`07ebf000 fffff880`07ef5000 WUDFRd.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00036000
fffff880`019c8000 fffff880`019d6000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`019d6000 fffff880`019e2000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`019e2000 fffff880`019eb000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`019eb000 fffff880`019fe000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000