Does it happen during hibernation only?
Both crash dumps point to memory corruption:
031111-20857-01.dmp
BugCheck 3B, {c0000005, fffff80002b06d35, fffff88007973c80, 0}
PROCESS_NAME: svchost.exe
Probably caused by : memory_corruption ( nt!MiGetTopLevelPfn+65 )
031711-17737-01.dmp
BugCheck 3B, {c0000005, fffff80002b54d35, fffff88007b80c80, 0}
PROCESS_NAME: svchost.exe
Probably caused by : memory_corruption ( nt!MiGetTopLevelPfn+65 )
1. Attach this information:
- CPU-Z m e m o r y tab snip
- Rammon h t m l report
Important! Every thread starter please see.
2. Update:
Realtek NDIS Protocol Driver
RtNdPt60.sys Sun Jul 19 22:27:32 2009
Crash Dumps:
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\031111-20857-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a01000 PsLoadedModuleList = 0xfffff800`02c46e90
Debug session time: Fri Mar 11 15:49:33.192 2011 (UTC - 4:00)
System Uptime: 0 days 1:40:11.002
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80002b06d35, fffff88007973c80, 0}
Probably caused by : memory_corruption ( nt!MiGetTopLevelPfn+65 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002b06d35, Address of the instruction which caused the bugcheck
Arg3: fffff88007973c80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!MiGetTopLevelPfn+65
fffff800`02b06d35 4c8b4928 mov r9,qword ptr [rcx+28h]
CONTEXT: fffff88007973c80 -- (.cxr 0xfffff88007973c80)
rax=0008050000000000 rbx=000fffffffffffff rcx=0180ea8000000000
rdx=fffffff5557dd179 rsi=fffffa8003c02000 rdi=0000058000000000
rip=fffff80002b06d35 rsp=fffff88007974668 rbp=0000000000000000
r8=fffffe00079746a0 r9=0008050000000000 r10=fffff88007974718
r11=0000000000000001 r12=000000003ffffff8 r13=0000000000000000
r14=fffff6fb40000000 r15=0000000fffffffff
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!MiGetTopLevelPfn+0x65:
fffff800`02b06d35 4c8b4928 mov r9,qword ptr [rcx+28h] ds:002b:0180ea80`00000028=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002b06d35
STACK_TEXT:
fffff880`07974668 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiGetTopLevelPfn+0x65
FOLLOWUP_IP:
nt!MiGetTopLevelPfn+65
fffff800`02b06d35 4c8b4928 mov r9,qword ptr [rcx+28h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiGetTopLevelPfn+65
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7951a
STACK_COMMAND: .cxr 0xfffff88007973c80 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x3B_nt!MiGetTopLevelPfn+65
BUCKET_ID: X64_0x3B_nt!MiGetTopLevelPfn+65
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\031711-17737-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02a4f000 PsLoadedModuleList = 0xfffff800`02c94e90
Debug session time: Thu Mar 17 06:41:44.176 2011 (UTC - 4:00)
System Uptime: 0 days 5:10:40.002
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80002b54d35, fffff88007b80c80, 0}
Probably caused by : memory_corruption ( nt!MiGetTopLevelPfn+65 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002b54d35, Address of the instruction which caused the bugcheck
Arg3: fffff88007b80c80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!MiGetTopLevelPfn+65
fffff800`02b54d35 4c8b4928 mov r9,qword ptr [rcx+28h]
CONTEXT: fffff88007b80c80 -- (.cxr 0xfffff88007b80c80)
rax=0000050000000000 rbx=000fffffffffffff rcx=0000ea8000000000
rdx=fffffff5557e8079 rsi=fffffa8003c02000 rdi=0000058000000000
rip=fffff80002b54d35 rsp=fffff88007b81668 rbp=0000000000000000
r8=fffffe0007b816a0 r9=0000050000000000 r10=fffff88007b81718
r11=0000000000000001 r12=000000003ffffff8 r13=0000000000000000
r14=fffff6fb40000000 r15=0000000fffffffff
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!MiGetTopLevelPfn+0x65:
fffff800`02b54d35 4c8b4928 mov r9,qword ptr [rcx+28h] ds:002b:0000ea80`00000028=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002b54d35
STACK_TEXT:
fffff880`07b81668 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiGetTopLevelPfn+0x65
FOLLOWUP_IP:
nt!MiGetTopLevelPfn+65
fffff800`02b54d35 4c8b4928 mov r9,qword ptr [rcx+28h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiGetTopLevelPfn+65
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7951a
STACK_COMMAND: .cxr 0xfffff88007b80c80 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x3B_nt!MiGetTopLevelPfn+65
BUCKET_ID: X64_0x3B_nt!MiGetTopLevelPfn+65
Followup: MachineOwner
---------
Drivers:
Code:
start end module name
fffff880`04400000 fffff880`0443e000 1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00e0f000 fffff880`00e66000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`040af000 fffff880`04138000 afd afd.sys Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`03a95000 fffff880`03aab000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01042000 fffff880`0104d000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`081f4000 fffff880`081ff000 asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00ff2000 fffff880`00ffb000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01018000 fffff880`01042000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff960`00840000 fffff960`008a1000 ATMFD ATMFD.DLL unavailable (00000000)
fffff880`0165b000 fffff880`01662000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03b59000 fffff880`03b6a000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0771c000 fffff880`0773a000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00760000 fffff960`00787000 cdd cdd.dll unavailable (00000000)
fffff880`01628000 fffff880`01652000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00e8e000 fffff880`00f4e000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`019bf000 fffff880`019ef000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00cf1000 fffff880`00d4f000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0110b000 fffff880`0117d000 cng cng.sys Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`03a85000 fffff880`03a95000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`06df1000 fffff880`06dff000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03ab8000 fffff880`03b3b000 csc csc.sys Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`0699f000 fffff880`069d4000 CT20XUT CT20XUT.SYS Wed May 05 09:01:28 2010 (4BE16C28)
fffff880`06865000 fffff880`06913000 ctac32k ctac32k.sys Wed Jul 02 04:38:22 2008 (486B3E7E)
fffff880`04446000 fffff880`044eb700 ctaud2k ctaud2k.sys Wed May 05 08:59:48 2010 (4BE16BC4)
fffff880`06c94000 fffff880`06df1000 CTEXFIFX CTEXFIFX.SYS Wed May 05 09:01:21 2010 (4BE16C21)
fffff880`06984000 fffff880`0699f000 CTHWIUT CTHWIUT.SYS Wed May 05 09:01:32 2010 (4BE16C2C)
fffff880`0458e000 fffff880`045bf000 ctoss2k ctoss2k.sys Wed May 05 08:57:46 2010 (4BE16B4A)
fffff880`045bf000 fffff880`045c7000 ctprxy2k ctprxy2k.sys Wed May 05 08:59:51 2010 (4BE16BC7)
fffff880`067be000 fffff880`067f6000 ctsfm2k ctsfm2k.sys Wed May 05 08:57:33 2010 (4BE16B3D)
fffff880`03b3b000 fffff880`03b59000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`0407c000 fffff880`0408b000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`019a9000 fffff880`019bf000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04529000 fffff880`0454b000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`06c0c000 fffff880`06c15000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06c00000 fffff880`06c0c000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06c15000 fffff880`06c28000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`06c28000 fffff880`06c34000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0fc79000 fffff880`0fd6d000 dxgkrnl dxgkrnl.sys Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`0fd6d000 fffff880`0fdb3000 dxgmms1 dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`04b66000 fffff880`04bb0000 emupia2k emupia2k.sys Wed May 05 08:57:27 2010 (4BE16B37)
fffff880`01099000 fffff880`010ad000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0104d000 fffff880`01099000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`013ed000 fffff880`013f7000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0196f000 fffff880`019a9000 fvevol fvevol.sys Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`0186c000 fffff880`018b6000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`0663d000 fffff880`067be000 ha20x2k ha20x2k.sys Wed May 05 08:59:10 2010 (4BE16B9E)
fffff800`02a06000 fffff800`02a4f000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`0fdd1000 fffff880`0fdf5000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`06928000 fffff880`06984000 HdAudio HdAudio.sys Sat Nov 20 05:44:23 2010 (4CE7A687)
fffff880`06c42000 fffff880`06c5b000 HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`06c5b000 fffff880`06c63080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`06c34000 fffff880`06c42000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`07653000 fffff880`0771c000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01966000 fffff880`0196f000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`03a67000 fffff880`03a85000 i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`03b90000 fffff880`03ba6000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0f000000 fffff880`0f00f000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00b99000 fffff800`00ba3000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0454b000 fffff880`0458e000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013c1000 fffff880`013dc000 ksecdd ksecdd.sys Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`015b5000 fffff880`015e0000 ksecpkg ksecpkg.sys Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`045c7000 fffff880`045cc200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`06821000 fffff880`06836000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`069d4000 fffff880`069f7000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c8e000 fffff880`00cdd000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`06c83000 fffff880`06c91000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04ae9000 fffff880`04af8000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`06c66000 fffff880`06c73000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c6c000 fffff880`00c86000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`01400000 fffff880`01431000 MpFilter MpFilter.sys Tue Sep 14 20:19:28 2010 (4C901110)
fffff880`079a2000 fffff880`079b2000 MpNWMon MpNWMon.sys Tue Sep 14 20:19:30 2010 (4C901112)
fffff880`0773a000 fffff880`07752000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07752000 fffff880`0777f000 mrxsmb mrxsmb.sys Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`0777f000 fffff880`077cc000 mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`077cc000 fffff880`077f0000 mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`015e9000 fffff880`015f4000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e6f000 fffff880`00e79000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010ad000 fffff880`0110b000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`04071000 fffff880`0407c000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01954000 fffff880`01966000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01462000 fffff880`01555000 ndis ndis.sys Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`0f00f000 fffff880`0f01b000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`011c4000 fffff880`011f3000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`06913000 fffff880`06928000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`041ac000 fffff880`041bb000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04138000 fffff880`0417d000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01555000 fffff880`015b5000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`0816e000 fffff880`08183000 NisDrvWFP NisDrvWFP.sys Tue Sep 14 20:20:25 2010 (4C901149)
fffff880`01200000 fffff880`01211000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04065000 fffff880`04071000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a4f000 fffff800`03039000 nt ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`0121e000 fffff880`013c1000 Ntfs Ntfs.sys Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01652000 fffff880`0165b000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0fc77000 fffff880`0fc78180 nvBridge nvBridge.kmd Fri Jan 07 20:57:22 2011 (4D27C482)
fffff880`0f01c000 fffff880`0fc76d00 nvlddmkm nvlddmkm.sys Fri Jan 07 21:07:22 2011 (4D27C6DA)
fffff880`04186000 fffff880`041ac000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`045d9000 fffff880`045f6000 parport parport.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00d82000 fffff880`00d97000 partmgr partmgr.sys Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00d4f000 fffff880`00d82000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00e86000 fffff880`00e8d000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00c5c000 fffff880`00c6c000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`013dc000 fffff880`013ed000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`078ae000 fffff880`07954000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06c73000 fffff880`06c83000 point64 point64.sys Tue Dec 14 06:09:25 2010 (4D075065)
fffff880`044ec000 fffff880`04529000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cdd000 fffff880`00cf1000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0408b000 fffff880`040af000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04a88000 fffff880`04aa3000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04aa3000 fffff880`04ac4000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04ac4000 fffff880`04ade000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04014000 fffff880`04065000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04ade000 fffff880`04ae9000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0144f000 fffff880`01458000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01458000 fffff880`01461000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`015e0000 fffff880`015e9000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0191a000 fffff880`01954000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`06836000 fffff880`0684e000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03a00000 fffff880`03a67000 Rt64win7 Rt64win7.sys Thu Jan 13 06:57:19 2011 (4D2EE89F)
fffff880`0684e000 fffff880`0685a000 RtNdPt60 RtNdPt60.sys Sun Jul 19 22:27:32 2009 (4A63D614)
fffff880`07954000 fffff880`0795f000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`045cd000 fffff880`045d9000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`041bb000 fffff880`041d8000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01912000 fffff880`0191a000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`080d5000 fffff880`0816e000 srv srv.sys Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`07800000 fffff880`0786b000 srv2 srv2.sys Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`0795f000 fffff880`07990000 srvnet srvnet.sys Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`04af8000 fffff880`04af9480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01668000 fffff880`0186c000 tcpip tcpip.sys Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`07990000 fffff880`079a2000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`01211000 fffff880`0121e000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`011a2000 fffff880`011c4000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`04000000 fffff880`04014000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00440000 fffff960`0044a000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`03b6a000 fffff880`03b90000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`04afa000 fffff880`04b0c000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`06c64000 fffff880`06c65f00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0fdc0000 fffff880`0fdd1000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04b0c000 fffff880`04b66000 usbhub usbhub.sys Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`03ba6000 fffff880`03bfc000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0fdb3000 fffff880`0fdc0000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00e79000 fffff880`00e86000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01431000 fffff880`0143f000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0117d000 fffff880`011a2000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00dac000 fffff880`00de8000 vmbus vmbus.sys Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`018b6000 fffff880`018c6000 vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00d97000 fffff880`00dac000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00c00000 fffff880`00c5c000 volmgrx volmgrx.sys Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`018c6000 fffff880`01912000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`041d8000 fffff880`041f3000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`0143f000 fffff880`0144f000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00f4e000 fffff880`00ff2000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00e00000 fffff880`00e0f000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0417d000 fffff880`04186000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`00361000 win32k win32k.sys unavailable (00000000)
fffff880`00de8000 fffff880`00dfc000 winhv winhv.sys Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`00e66000 fffff880`00e6f000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06800000 fffff880`06821000 WudfPf WudfPf.sys Sat Nov 20 05:42:44 2010 (4CE7A624)
Unloaded modules:
fffff880`08000000 fffff880`0800c000 hiber_atapor
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`0800c000 fffff880`08015000 hiber_atapi.
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`08015000 fffff880`08028000 hiber_dumpfv
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
fffff880`08183000 fffff880`081f4000 spsys.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00071000
fffff880`019ef000 fffff880`019fd000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`01600000 fffff880`0160c000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`0160c000 fffff880`01615000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`01615000 fffff880`01628000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000