Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Windows 7 BSOD

Started by Poke , Jan 04 2010 05:47 PM

  • Please log in to reply

#1
Poke
Posted 04 January 2010 - 05:47 PM

Poke

    Member

  • Member
  • PipPipPip
  • 162 posts
Ok, I have gotten my laptop to a good running capacity. Apparently, living up to its name, my Compaq Presario CQ60( Which apparently sucks >.>) has BSOD problems. There was also one crash, where the protection for that crash couldn't collect enough data for a minidump!

Do not tell me to check my hard drive for failures, Ive checked over 10 times.


Ive salvaged one Minidump, and used it in Windbg for analysis. The main error is a 0x000000F4, which is a system process failure, or to make it easier to find, CRITICAL_OBJECT_TERMINATION.

Windbg also says that Csrss.exe is the cause, but I cant delve any further due to lack of knowledge.

Enough of me talking, I can give more information about the problems when asked.

Error Codes: 0x000000F4(0x00000003, 0x878BB950, 0x878BBABC, 0x82E41D50)

WinDBG Analysis:


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\010410-62150-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C://symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82c3d000 PsLoadedModuleList = 0x82d85810
Debug session time: Mon Jan 4 08:00:26.573 2010 (GMT-8)
System Uptime: 0 days 0:09:12.370
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
..........
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 878de228, Terminating object
Arg3: 878de394, Process image file name
Arg4: 82e65d50, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: 878de228

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000

PROCESS_NAME: csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.

BUGCHECK_STR: 0xF4_IOERR

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

CURRENT_IRQL: 0

STACK_TEXT:
998a3c9c 82f1907b 000000f4 00000003 878de228 nt!KeBugCheckEx+0x1e
998a3cc0 82e9ce44 82e65d50 878de394 878de498 nt!PspCatchCriticalBreak+0x71
998a3cf0 82e9ecdf 878de228 86b5c030 c0000006 nt!PspTerminateAllThreads+0x2d
998a3d24 82c8042a ffffffff c0000006 09cef394 nt!NtTerminateProcess+0x1a2
998a3d24 76fa64f4 ffffffff c0000006 09cef394 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
09cef394 00000000 00000000 00000000 00000000 0x76fa64f4


STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: 0xF4_IOERR_IMAGE_csrss.exe

BUCKET_ID: 0xF4_IOERR_IMAGE_csrss.exe

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 878de228, Terminating object
Arg3: 878de394, Process image file name
Arg4: 82e65d50, Explanatory message (ascii)

Debugging Details:
------------------


PROCESS_OBJECT: 878de228

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: csrss

FAULTING_MODULE: 00000000

PROCESS_NAME: csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.

BUGCHECK_STR: 0xF4_IOERR

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

CURRENT_IRQL: 0

STACK_TEXT:
998a3c9c 82f1907b 000000f4 00000003 878de228 nt!KeBugCheckEx+0x1e
998a3cc0 82e9ce44 82e65d50 878de394 878de498 nt!PspCatchCriticalBreak+0x71
998a3cf0 82e9ecdf 878de228 86b5c030 c0000006 nt!PspTerminateAllThreads+0x2d
998a3d24 82c8042a ffffffff c0000006 09cef394 nt!NtTerminateProcess+0x1a2
998a3d24 76fa64f4 ffffffff c0000006 09cef394 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
09cef394 00000000 00000000 00000000 00000000 0x76fa64f4


STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

FAILURE_BUCKET_ID: 0xF4_IOERR_IMAGE_csrss.exe

BUCKET_ID: 0xF4_IOERR_IMAGE_csrss.exe

Followup: MachineOwner
---------
  • 0

Advertisements

#2
Broni
Posted 04 January 2010 - 11:26 PM

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.
  • 0

#3
Poke
Posted 05 January 2010 - 09:39 AM

Poke

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 162 posts
Alright, Looks like i also salvaged other minidumps, and it looks like its due to one driver.

==================================================
Filename : ntkrnlpa.exe
Address In Stack : ntkrnlpa.exe+228d50
From Address : 0x82c3d000
To Address : 0x8304d000
Size : 0x00410000
Time Stamp : 0x4a5bc007
Time String : 7/13/2009 3:15:19 PM
Product Name : Microsoft® Windows® Operating System
File Description : NT Kernel & System
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\ntkrnlpa.exe
==================================================

==================================================
Filename : halmacpi.dll
Address In Stack :
From Address : 0x82c06000
To Address : 0x82c3d000
Size : 0x00037000
Time Stamp : 0x4a5bbf07
Time String : 7/13/2009 3:11:03 PM
Product Name : Microsoft® Windows® Operating System
File Description : Hardware Abstraction Layer DLL
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\halmacpi.dll
==================================================

==================================================
Filename : kdcom.dll
Address In Stack :
From Address : 0x80bcd000
To Address : 0x80bd5000
Size : 0x00008000
Time Stamp : 0x4a5bdaaa
Time String : 7/13/2009 5:08:58 PM
Product Name : Microsoft® Windows® Operating System
File Description : Serial Kernel Debugger
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\kdcom.dll
==================================================

==================================================
Filename : mcupdate_GenuineIntel.dll
Address In Stack :
From Address : 0x8323c000
To Address : 0x832b4000
Size : 0x00078000
Time Stamp : 0x4a5bda21
Time String : 7/13/2009 5:06:41 PM
Product Name : Microsoft® Windows® Operating System
File Description : Intel Microcode Update Library
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\mcupdate_GenuineIntel.dll
==================================================

==================================================
Filename : PSHED.dll
Address In Stack :
From Address : 0x832b4000
To Address : 0x832c5000
Size : 0x00011000
Time Stamp : 0x4a5bdad0
Time String : 7/13/2009 5:09:36 PM
Product Name : Microsoft® Windows® Operating System
File Description : Platform Specific Hardware Error Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\PSHED.dll
==================================================

==================================================
Filename : BOOTVID.dll
Address In Stack :
From Address : 0x832c5000
To Address : 0x832cd000
Size : 0x00008000
Time Stamp : 0x4a5bd9a2
Time String : 7/13/2009 5:04:34 PM
Product Name : Microsoft® Windows® Operating System
File Description : VGA Boot Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\BOOTVID.dll
==================================================

==================================================
Filename : CLFS.SYS
Address In Stack :
From Address : 0x832cd000
To Address : 0x8330f000
Size : 0x00042000
Time Stamp : 0x4a5bbf0e
Time String : 7/13/2009 3:11:10 PM
Product Name : Microsoft® Windows® Operating System
File Description : Common Log File System Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\CLFS.SYS
==================================================

==================================================
Filename : CI.dll
Address In Stack :
From Address : 0x8330f000
To Address : 0x833ba000
Size : 0x000ab000
Time Stamp : 0x4a5bdac8
Time String : 7/13/2009 5:09:28 PM
Product Name : Microsoft® Windows® Operating System
File Description : Code Integrity Module
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\CI.dll
==================================================

==================================================
Filename : Wdf01000.sys
Address In Stack :
From Address : 0x8b03e000
To Address : 0x8b0af000
Size : 0x00071000
Time Stamp : 0x4a5bbf28
Time String : 7/13/2009 3:11:36 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Mode Driver Framework Runtime
File Version : 1.9.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Wdf01000.sys
==================================================

==================================================
Filename : WDFLDR.SYS
Address In Stack :
From Address : 0x8b0af000
To Address : 0x8b0bd000
Size : 0x0000e000
Time Stamp : 0x4a5bbf1d
Time String : 7/13/2009 3:11:25 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Mode Driver Framework Loader
File Version : 1.9.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\WDFLDR.SYS
==================================================

==================================================
Filename : sptd.sys
Address In Stack :
From Address : 0x8b0bd000
To Address : 0x8b1be000
Size : 0x00101000
Time Stamp : 0x49c72e69
Time String : 3/22/2009 10:38:33 PM
Product Name :
File Description :
File Version :
Company :
Full Path : C:\Windows\system32\drivers\sptd.sys
==================================================

==================================================
Filename : WMILIB.SYS
Address In Stack :
From Address : 0x8b1be000
To Address : 0x8b1c7000
Size : 0x00009000
Time Stamp : 0x4a5bbf1a
Time String : 7/13/2009 3:11:22 PM
Product Name : Microsoft® Windows® Operating System
File Description : WMILIB WMI support library Dll
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\WMILIB.SYS
==================================================

==================================================
Filename : SCSIPORT.SYS
Address In Stack :
From Address : 0x8b1c7000
To Address : 0x8b1ed000
Size : 0x00026000
Time Stamp : 0x4a5bc733
Time String : 7/13/2009 3:45:55 PM
Product Name : Microsoft® Windows® Operating System
File Description : SCSI Port Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\SCSIPORT.SYS
==================================================

==================================================
Filename : pci.sys
Address In Stack :
From Address : 0x8b000000
To Address : 0x8b02a000
Size : 0x0002a000
Time Stamp : 0x4a5bbf14
Time String : 7/13/2009 3:11:16 PM
Product Name : Microsoft® Windows® Operating System
File Description : NT Plug and Play PCI Enumerator
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\pci.sys
==================================================

==================================================
Filename : vdrvroot.sys
Address In Stack :
From Address : 0x8b02a000
To Address : 0x8b035000
Size : 0x0000b000
Time Stamp : 0x4a5bc74b
Time String : 7/13/2009 3:46:19 PM
Product Name : Microsoft® Windows® Operating System
File Description : Virtual Drive Root Enumerator
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\vdrvroot.sys
==================================================

==================================================
Filename : ACPI.sys
Address In Stack :
From Address : 0x8b20a000
To Address : 0x8b252000
Size : 0x00048000
Time Stamp : 0x4a5bbf0f
Time String : 7/13/2009 3:11:11 PM
Product Name : Microsoft® Windows® Operating System
File Description : ACPI Driver for NT
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ACPI.sys
==================================================

==================================================
Filename : msisadrv.sys
Address In Stack :
From Address : 0x8b252000
To Address : 0x8b25a000
Size : 0x00008000
Time Stamp : 0x4a5bbf0d
Time String : 7/13/2009 3:11:09 PM
Product Name : Microsoft® Windows® Operating System
File Description : ISA Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\msisadrv.sys
==================================================

==================================================
Filename : partmgr.sys
Address In Stack :
From Address : 0x8b25a000
To Address : 0x8b26b000
Size : 0x00011000
Time Stamp : 0x4a5bbf27
Time String : 7/13/2009 3:11:35 PM
Product Name : Microsoft® Windows® Operating System
File Description : Partition Management Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\partmgr.sys
==================================================

==================================================
Filename : volmgr.sys
Address In Stack :
From Address : 0x8b26b000
To Address : 0x8b27b000
Size : 0x00010000
Time Stamp : 0x4a5bbf1d
Time String : 7/13/2009 3:11:25 PM
Product Name : Microsoft® Windows® Operating System
File Description : Volume Manager Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\volmgr.sys
==================================================

==================================================
Filename : volmgrx.sys
Address In Stack :
From Address : 0x8b27b000
To Address : 0x8b2c6000
Size : 0x0004b000
Time Stamp : 0x4a5bbf2d
Time String : 7/13/2009 3:11:41 PM
Product Name : Microsoft® Windows® Operating System
File Description : Volume Manager Extension Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\volmgrx.sys
==================================================

==================================================
Filename : compbatt.sys
Address In Stack :
From Address : 0x8b2c6000
To Address : 0x8b2ce000
Size : 0x00008000
Time Stamp : 0x4a5bc0f6
Time String : 7/13/2009 3:19:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : Composite Battery Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\compbatt.sys
==================================================

==================================================
Filename : BATTC.SYS
Address In Stack :
From Address : 0x8b2ce000
To Address : 0x8b2d9000
Size : 0x0000b000
Time Stamp : 0x4a5bc0f3
Time String : 7/13/2009 3:19:15 PM
Product Name : Microsoft® Windows® Operating System
File Description : Battery Class Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\BATTC.SYS
==================================================

==================================================
Filename : mountmgr.sys
Address In Stack :
From Address : 0x8b2d9000
To Address : 0x8b2ef000
Size : 0x00016000
Time Stamp : 0x4a5bbf1f
Time String : 7/13/2009 3:11:27 PM
Product Name : Microsoft® Windows® Operating System
File Description : Mount Point Manager
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mountmgr.sys
==================================================

==================================================
Filename : atapi.sys
Address In Stack :
From Address : 0x8b2ef000
To Address : 0x8b2f8000
Size : 0x00009000
Time Stamp : 0x4a5bbf13
Time String : 7/13/2009 3:11:15 PM
Product Name : Microsoft® Windows® Operating System
File Description : ATAPI IDE Miniport Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\atapi.sys
==================================================

==================================================
Filename : ataport.SYS
Address In Stack :
From Address : 0x8b2f8000
To Address : 0x8b31b000
Size : 0x00023000
Time Stamp : 0x4a5bbf16
Time String : 7/13/2009 3:11:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : ATAPI Driver Extension
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ataport.SYS
==================================================

==================================================
Filename : msahci.sys
Address In Stack :
From Address : 0x8b31b000
To Address : 0x8b325000
Size : 0x0000a000
Time Stamp : 0x4a5bc72e
Time String : 7/13/2009 3:45:50 PM
Product Name : Microsoft® Windows® Operating System
File Description : MS AHCI 1.0 Standard Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\msahci.sys
==================================================

==================================================
Filename : PCIIDEX.SYS
Address In Stack :
From Address : 0x8b325000
To Address : 0x8b333000
Size : 0x0000e000
Time Stamp : 0x4a5bbf13
Time String : 7/13/2009 3:11:15 PM
Product Name : Microsoft® Windows® Operating System
File Description : PCI IDE Bus Driver Extension
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\PCIIDEX.SYS
==================================================

==================================================
Filename : amdxata.sys
Address In Stack :
From Address : 0x8b333000
To Address : 0x8b33c000
Size : 0x00009000
Time Stamp : 0x4a12f30f
Time String : 5/19/2009 9:57:35 AM
Product Name : Storage Filter Driver
File Description : Storage Filter Driver
File Version : 1.1.2.4 (NT.080820-1745)
Company : Advanced Micro Devices
Full Path : C:\Windows\system32\drivers\amdxata.sys
==================================================

==================================================
Filename : fltmgr.sys
Address In Stack :
From Address : 0x8b33c000
To Address : 0x8b370000
Size : 0x00034000
Time Stamp : 0x4a5bbf11
Time String : 7/13/2009 3:11:13 PM
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Filesystem Filter Manager
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fltmgr.sys
==================================================

==================================================
Filename : fileinfo.sys
Address In Stack :
From Address : 0x8b370000
To Address : 0x8b381000
Size : 0x00011000
Time Stamp : 0x4a5bc18f
Time String : 7/13/2009 3:21:51 PM
Product Name : Microsoft® Windows® Operating System
File Description : FileInfo Filter Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fileinfo.sys
==================================================

==================================================
Filename : Ntfs.sys
Address In Stack :
From Address : 0x8b402000
To Address : 0x8b531000
Size : 0x0012f000
Time Stamp : 0x4a5bbf45
Time String : 7/13/2009 3:12:05 PM
Product Name : Microsoft® Windows® Operating System
File Description : NT File System Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Ntfs.sys
==================================================

==================================================
Filename : msrpc.sys
Address In Stack :
From Address : 0x8b531000
To Address : 0x8b55c000
Size : 0x0002b000
Time Stamp : 0x4a5bbf3f
Time String : 7/13/2009 3:11:59 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Remote Procedure Call Provider
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\msrpc.sys
==================================================

==================================================
Filename : ksecdd.sys
Address In Stack :
From Address : 0x8b55c000
To Address : 0x8b56f000
Size : 0x00013000
Time Stamp : 0x4a5bbf3c
Time String : 7/13/2009 3:11:56 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Security Support Provider Interface
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ksecdd.sys
==================================================

==================================================
Filename : cng.sys
Address In Stack :
From Address : 0x8b56f000
To Address : 0x8b5cc000
Size : 0x0005d000
Time Stamp : 0x4a5bc427
Time String : 7/13/2009 3:32:55 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Cryptography, Next Generation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\cng.sys
==================================================

==================================================
Filename : pcw.sys
Address In Stack :
From Address : 0x8b5cc000
To Address : 0x8b5da000
Size : 0x0000e000
Time Stamp : 0x4a5bbf0e
Time String : 7/13/2009 3:11:10 PM
Product Name : Microsoft® Windows® Operating System
File Description : Performance Counters for Windows Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\pcw.sys
==================================================

==================================================
Filename : Fs_Rec.sys
Address In Stack :
From Address : 0x8b5da000
To Address : 0x8b5e3000
Size : 0x00009000
Time Stamp : 0x4a5bbf12
Time String : 7/13/2009 3:11:14 PM
Product Name : Microsoft® Windows® Operating System
File Description : File System Recognizer Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Fs_Rec.sys
==================================================

==================================================
Filename : ndis.sys
Address In Stack :
From Address : 0x8b62e000
To Address : 0x8b6e5000
Size : 0x000b7000
Time Stamp : 0x4a5bbf58
Time String : 7/13/2009 3:12:24 PM
Product Name : Microsoft® Windows® Operating System
File Description : NDIS 6.20 driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndis.sys
==================================================

==================================================
Filename : NETIO.SYS
Address In Stack :
From Address : 0x8b6e5000
To Address : 0x8b723000
Size : 0x0003e000
Time Stamp : 0x4a5bbf63
Time String : 7/13/2009 3:12:35 PM
Product Name : Microsoft® Windows® Operating System
File Description : Network I/O Subsystem
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\NETIO.SYS
==================================================

==================================================
Filename : ksecpkg.sys
Address In Stack :
From Address : 0x8b723000
To Address : 0x8b748000
Size : 0x00025000
Time Stamp : 0x4a5bc468
Time String : 7/13/2009 3:34:00 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel Security Support Provider Interface Packages
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ksecpkg.sys
==================================================

==================================================
Filename : tcpip.sys
Address In Stack :
From Address : 0x8b82b000
To Address : 0x8b974000
Size : 0x00149000
Time Stamp : 0x4a5bbf8e
Time String : 7/13/2009 3:13:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : TCP/IP Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\tcpip.sys
==================================================

==================================================
Filename : fwpkclnt.sys
Address In Stack :
From Address : 0x8b974000
To Address : 0x8b9a5000
Size : 0x00031000
Time Stamp : 0x4a5bbf43
Time String : 7/13/2009 3:12:03 PM
Product Name : Microsoft® Windows® Operating System
File Description : FWP/IPsec Kernel-Mode API
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fwpkclnt.sys
==================================================

==================================================
Filename : volsnap.sys
Address In Stack :
From Address : 0x8b9a5000
To Address : 0x8b9e4000
Size : 0x0003f000
Time Stamp : 0x4a5bbf26
Time String : 7/13/2009 3:11:34 PM
Product Name : Microsoft® Windows® Operating System
File Description : Volume Shadow Copy Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\volsnap.sys
==================================================

==================================================
Filename : sshrmd.sys
Address In Stack :
From Address : 0x8b9ef000
To Address : 0x8b9f8000
Size : 0x00009000
Time Stamp : 0x4ab3eb4f
Time String : 9/18/2009 12:19:27 PM
Product Name : Spy Sweeper SDK
File Description : Spy Sweeper Mini Driver
File Version : 4.4.0.83
Company : Webroot Software, Inc. (www.webroot.com)
Full Path : C:\Windows\system32\drivers\sshrmd.sys
==================================================

==================================================
Filename : ssfs0bbc.sys
Address In Stack :
From Address : 0x8b800000
To Address : 0x8b80b000
Size : 0x0000b000
Time Stamp : 0x4ab3ebae
Time String : 9/18/2009 12:21:02 PM
Product Name : Spy Sweeper SDK
File Description : Spy Sweeper FileSystem Filter Driver
File Version : 4.4.0.83
Company : Webroot Software, Inc. (www.webroot.com)
Full Path : C:\Windows\system32\drivers\ssfs0bbc.sys
==================================================

==================================================
Filename : spldr.sys
Address In Stack :
From Address : 0x8b80b000
To Address : 0x8b813000
Size : 0x00008000
Time Stamp : 0x4a084ebb
Time String : 5/11/2009 8:13:47 AM
Product Name : Microsoft® Windows® Operating System
File Description : loader for security processor
File Version : 6.1.7127.0 (fbl_security_bugfix(sepbld-s).090511-0900)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\spldr.sys
==================================================

==================================================
Filename : rdyboost.sys
Address In Stack :
From Address : 0x8b776000
To Address : 0x8b7a3000
Size : 0x0002d000
Time Stamp : 0x4a5bc19a
Time String : 7/13/2009 3:22:02 PM
Product Name : Microsoft® Windows® Operating System
File Description : ReadyBoost Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rdyboost.sys
==================================================

==================================================
Filename : mup.sys
Address In Stack :
From Address : 0x8b813000
To Address : 0x8b823000
Size : 0x00010000
Time Stamp : 0x4a5bbfc6
Time String : 7/13/2009 3:14:14 PM
Product Name : Microsoft® Windows® Operating System
File Description : Multiple UNC Provider Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mup.sys
==================================================

==================================================
Filename : hwpolicy.sys
Address In Stack :
From Address : 0x8b823000
To Address : 0x8b82b000
Size : 0x00008000
Time Stamp : 0x4a5bbf05
Time String : 7/13/2009 3:11:01 PM
Product Name : Microsoft® Windows® Operating System
File Description : Hardware Policy Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\hwpolicy.sys
==================================================

==================================================
Filename : fvevol.sys
Address In Stack :
From Address : 0x8b7a3000
To Address : 0x8b7d5000
Size : 0x00032000
Time Stamp : 0x4a5bbf7d
Time String : 7/13/2009 3:13:01 PM
Product Name : Microsoft® Windows® Operating System
File Description : BitLocker Drive Encryption Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\fvevol.sys
==================================================

==================================================
Filename : cdrom.sys
Address In Stack :
From Address : 0x8b381000
To Address : 0x8b3a0000
Size : 0x0001f000
Time Stamp : 0x4a5bbf1c
Time String : 7/13/2009 3:11:24 PM
Product Name : Microsoft® Windows® Operating System
File Description : SCSI CD-ROM Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\cdrom.sys
==================================================

==================================================
Filename : Null.SYS
Address In Stack :
From Address : 0x8b9f8000
To Address : 0x8b9ff000
Size : 0x00007000
Time Stamp : 0x4a5bbf10
Time String : 7/13/2009 3:11:12 PM
Product Name : Microsoft® Windows® Operating System
File Description : NULL Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Null.SYS
==================================================

==================================================
Filename : Beep.SYS
Address In Stack :
From Address : 0x8b7e6000
To Address : 0x8b7ed000
Size : 0x00007000
Time Stamp : 0x4a5bc6fc
Time String : 7/13/2009 3:45:00 PM
Product Name : Microsoft® Windows® Operating System
File Description : BEEP Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Beep.SYS
==================================================

==================================================
Filename : vga.sys
Address In Stack :
From Address : 0x8b7ed000
To Address : 0x8b7f9000
Size : 0x0000c000
Time Stamp : 0x4a5bc27e
Time String : 7/13/2009 3:25:50 PM
Product Name : Microsoft® Windows® Operating System
File Description : VGA/Super VGA Video Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\vga.sys
==================================================

==================================================
Filename : VIDEOPRT.SYS
Address In Stack :
From Address : 0x8b3a0000
To Address : 0x8b3c1000
Size : 0x00021000
Time Stamp : 0x4a5bc27d
Time String : 7/13/2009 3:25:49 PM
Product Name : Microsoft® Windows® Operating System
File Description : Video Port Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\VIDEOPRT.SYS
==================================================

==================================================
Filename : watchdog.sys
Address In Stack :
From Address : 0x8b5e3000
To Address : 0x8b5f0000
Size : 0x0000d000
Time Stamp : 0x4a5bc21a
Time String : 7/13/2009 3:24:10 PM
Product Name : Microsoft® Windows® Operating System
File Description : Watchdog Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\watchdog.sys
==================================================

==================================================
Filename : RDPCDD.sys
Address In Stack :
From Address : 0x8b625000
To Address : 0x8b62d000
Size : 0x00008000
Time Stamp : 0x4a5bcae4
Time String : 7/13/2009 4:01:40 PM
Product Name : Microsoft® Windows® Operating System
File Description : RDP Miniport
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\RDPCDD.sys
==================================================

==================================================
Filename : rdpencdd.sys
Address In Stack :
From Address : 0x8b5f0000
To Address : 0x8b5f8000
Size : 0x00008000
Time Stamp : 0x4a5bcae3
Time String : 7/13/2009 4:01:39 PM
Product Name : Microsoft® Windows® Operating System
File Description : RDP Encoder Miniport
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rdpencdd.sys
==================================================

==================================================
Filename : rdprefmp.sys
Address In Stack :
From Address : 0x8b5f8000
To Address : 0x8b600000
Size : 0x00008000
Time Stamp : 0x4a5bcae5
Time String : 7/13/2009 4:01:41 PM
Product Name : Microsoft® Windows® Operating System
File Description : RDP Reflector Driver Miniport
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rdprefmp.sys
==================================================

==================================================
Filename : Msfs.SYS
Address In Stack :
From Address : 0x8b3c1000
To Address : 0x8b3cc000
Size : 0x0000b000
Time Stamp : 0x4a5bbf1e
Time String : 7/13/2009 3:11:26 PM
Product Name : Microsoft® Windows® Operating System
File Description : Mailslot driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Msfs.SYS
==================================================

==================================================
Filename : Npfs.SYS
Address In Stack :
From Address : 0x8b3cc000
To Address : 0x8b3da000
Size : 0x0000e000
Time Stamp : 0x4a5bbf23
Time String : 7/13/2009 3:11:31 PM
Product Name : Microsoft® Windows® Operating System
File Description : NPFS Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Npfs.SYS
==================================================

==================================================
Filename : tdx.sys
Address In Stack :
From Address : 0x8b3da000
To Address : 0x8b3f1000
Size : 0x00017000
Time Stamp : 0x4a5bbf4a
Time String : 7/13/2009 3:12:10 PM
Product Name : Microsoft® Windows® Operating System
File Description : TDI Translation Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\tdx.sys
==================================================

==================================================
Filename : TDI.SYS
Address In Stack :
From Address : 0x8b3f1000
To Address : 0x8b3fc000
Size : 0x0000b000
Time Stamp : 0x4a5bbf4c
Time String : 7/13/2009 3:12:12 PM
Product Name : Microsoft® Windows® Operating System
File Description : TDI Wrapper
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\TDI.SYS
==================================================

==================================================
Filename : afd.sys
Address In Stack :
From Address : 0x8f405000
To Address : 0x8f45f000
Size : 0x0005a000
Time Stamp : 0x4a5bbf62
Time String : 7/13/2009 3:12:34 PM
Product Name : Microsoft® Windows® Operating System
File Description : Ancillary Function Driver for WinSock
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\afd.sys
==================================================

==================================================
Filename : netbt.sys
Address In Stack :
From Address : 0x8f45f000
To Address : 0x8f491000
Size : 0x00032000
Time Stamp : 0x4a5bbf52
Time String : 7/13/2009 3:12:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : MBT Transport driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\netbt.sys
==================================================

==================================================
Filename : wfplwf.sys
Address In Stack :
From Address : 0x8f491000
To Address : 0x8f498000
Size : 0x00007000
Time Stamp : 0x4a5bc90f
Time String : 7/13/2009 3:53:51 PM
Product Name : Microsoft® Windows® Operating System
File Description : WFP NDIS 6.20 Lightweight Filter Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\wfplwf.sys
==================================================

==================================================
Filename : pacer.sys
Address In Stack :
From Address : 0x8f498000
To Address : 0x8f4b7000
Size : 0x0001f000
Time Stamp : 0x4a5bc916
Time String : 7/13/2009 3:53:58 PM
Product Name : Microsoft® Windows® Operating System
File Description : QoS Packet Scheduler
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\pacer.sys
==================================================

==================================================
Filename : vwififlt.sys
Address In Stack :
From Address : 0x8f4b7000
To Address : 0x8f4c8000
Size : 0x00011000
Time Stamp : 0x4a5bc8a3
Time String : 7/13/2009 3:52:03 PM
Product Name : Microsoft® Windows® Operating System
File Description : Virtual WiFi Filter Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\vwififlt.sys
==================================================

==================================================
Filename : netbios.sys
Address In Stack :
From Address : 0x8f4c8000
To Address : 0x8f4d6000
Size : 0x0000e000
Time Stamp : 0x4a5bc912
Time String : 7/13/2009 3:53:54 PM
Product Name : Microsoft® Windows® Operating System
File Description : NetBIOS interface driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\netbios.sys
==================================================

==================================================
Filename : wanarp.sys
Address In Stack :
From Address : 0x8f4d6000
To Address : 0x8f4e9000
Size : 0x00013000
Time Stamp : 0x4a5bc956
Time String : 7/13/2009 3:55:02 PM
Product Name : Microsoft® Windows® Operating System
File Description : MS Remote Access and Routing ARP Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\wanarp.sys
==================================================

==================================================
Filename : termdd.sys
Address In Stack :
From Address : 0x8f4e9000
To Address : 0x8f4f9000
Size : 0x00010000
Time Stamp : 0x4a5bcadf
Time String : 7/13/2009 4:01:35 PM
Product Name : Microsoft® Windows® Operating System
File Description : Remote Desktop Server Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\termdd.sys
==================================================

==================================================
Filename : rdbss.sys
Address In Stack :
From Address : 0x8f4f9000
To Address : 0x8f53a000
Size : 0x00041000
Time Stamp : 0x4a5bbfd2
Time String : 7/13/2009 3:14:26 PM
Product Name : Microsoft® Windows® Operating System
File Description : Redirected Drive Buffering SubSystem Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rdbss.sys
==================================================

==================================================
Filename : nsiproxy.sys
Address In Stack :
From Address : 0x8f53a000
To Address : 0x8f544000
Size : 0x0000a000
Time Stamp : 0x4a5bbf48
Time String : 7/13/2009 3:12:08 PM
Product Name : Microsoft® Windows® Operating System
File Description : NSI Proxy
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\nsiproxy.sys
==================================================

==================================================
Filename : mssmbios.sys
Address In Stack :
From Address : 0x8f544000
To Address : 0x8f54e000
Size : 0x0000a000
Time Stamp : 0x4a5bc0fd
Time String : 7/13/2009 3:19:25 PM
Product Name : Microsoft® Windows® Operating System
File Description : System Management BIOS Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mssmbios.sys
==================================================

==================================================
Filename : discache.sys
Address In Stack :
From Address : 0x8f54e000
To Address : 0x8f55a000
Size : 0x0000c000
Time Stamp : 0x4a5bc214
Time String : 7/13/2009 3:24:04 PM
Product Name : Microsoft® Windows® Operating System
File Description : System Indexer/Cache Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\discache.sys
==================================================

==================================================
Filename : dfsc.sys
Address In Stack :
From Address : 0x8f55a000
To Address : 0x8f572000
Size : 0x00018000
Time Stamp : 0x4a5bbfc8
Time String : 7/13/2009 3:14:16 PM
Product Name : Microsoft® Windows® Operating System
File Description : DFS Namespace Client Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\dfsc.sys
==================================================

==================================================
Filename : blbdrive.sys
Address In Stack :
From Address : 0x8f572000
To Address : 0x8f580000
Size : 0x0000e000
Time Stamp : 0x4a5bc1d8
Time String : 7/13/2009 3:23:04 PM
Product Name : Microsoft® Windows® Operating System
File Description : BLB Drive Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\blbdrive.sys
==================================================

==================================================
Filename : intelppm.sys
Address In Stack :
From Address : 0x8f580000
To Address : 0x8f592000
Size : 0x00012000
Time Stamp : 0x4a5bbf07
Time String : 7/13/2009 3:11:03 PM
Product Name : Microsoft® Windows® Operating System
File Description : Processor Device Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\intelppm.sys
==================================================

==================================================
Filename : wmiacpi.sys
Address In Stack :
From Address : 0x8f592000
To Address : 0x8f59b000
Size : 0x00009000
Time Stamp : 0x4a5bc0f4
Time String : 7/13/2009 3:19:16 PM
Product Name : Microsoft® Windows® Operating System
File Description : Windows Management Interface for ACPI
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\wmiacpi.sys
==================================================

==================================================
Filename : igdkmd32.sys
Address In Stack :
From Address : 0x90a23000
To Address : 0x9109b000
Size : 0x00678000
Time Stamp : 0x4aeb3b27
Time String : 10/30/2009 11:14:47 AM
Product Name : Intel Graphics Accelerator Drivers for Windows XP®
File Description : Intel Graphics Kernel Mode Driver
File Version : 8.15.10.1986
Company : Intel Corporation
Full Path : C:\Windows\system32\drivers\igdkmd32.sys
==================================================

==================================================
Filename : dxgkrnl.sys
Address In Stack :
From Address : 0x9109b000
To Address : 0x91152000
Size : 0x000b7000
Time Stamp : 0x4ac54de1
Time String : 10/1/2009 4:48:33 PM
Product Name : Microsoft® Windows® Operating System
File Description : DirectX Graphics Kernel
File Version : 6.1.7600.16432 (win7_gdr.091001-1312)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\dxgkrnl.sys
==================================================

==================================================
Filename : dxgmms1.sys
Address In Stack :
From Address : 0x91152000
To Address : 0x9118b000
Size : 0x00039000
Time Stamp : 0x4a5bc265
Time String : 7/13/2009 3:25:25 PM
Product Name : Microsoft® Windows® Operating System
File Description : DirectX Graphics MMS
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\dxgmms1.sys
==================================================

==================================================
Filename : usbuhci.sys
Address In Stack :
From Address : 0x9118b000
To Address : 0x91196000
Size : 0x0000b000
Time Stamp : 0x4a5bc86e
Time String : 7/13/2009 3:51:10 PM
Product Name : Microsoft® Windows® Operating System
File Description : UHCI USB Miniport Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\usbuhci.sys
==================================================

==================================================
Filename : USBPORT.SYS
Address In Stack :
From Address : 0x91196000
To Address : 0x911e1000
Size : 0x0004b000
Time Stamp : 0x4a5bc871
Time String : 7/13/2009 3:51:13 PM
Product Name : Microsoft® Windows® Operating System
File Description : USB 1.1 & 2.0 Port Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\USBPORT.SYS
==================================================

==================================================
Filename : usbehci.sys
Address In Stack :
From Address : 0x911e1000
To Address : 0x911f0000
Size : 0x0000f000
Time Stamp : 0x4a5bc872
Time String : 7/13/2009 3:51:14 PM
Product Name : Microsoft® Windows® Operating System
File Description : EHCI eUSB Miniport Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\usbehci.sys
==================================================

==================================================
Filename : HDAudBus.sys
Address In Stack :
From Address : 0x90a00000
To Address : 0x90a1f000
Size : 0x0001f000
Time Stamp : 0x4a5bc85f
Time String : 7/13/2009 3:50:55 PM
Product Name : Microsoft® Windows® Operating System
File Description : High Definition Audio Bus Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\HDAudBus.sys
==================================================

==================================================
Filename : Rtlh86.sys
Address In Stack :
From Address : 0x8f59b000
To Address : 0x8f5bd000
Size : 0x00022000
Time Stamp : 0x484e5d6a
Time String : 6/10/2008 2:54:34 AM
Product Name : Realtek 8101E/8168/8169 PCI/PCIe Adapters
File Description : Realtek 8101E/8168/8169 NDIS6 32-bit Driver
File Version : 6.207.0609.2008 built by: WinDDK
Company : Realtek Corporation
Full Path : C:\Windows\system32\drivers\Rtlh86.sys
==================================================

==================================================
Filename : athr.sys
Address In Stack :
From Address : 0x9602c000
To Address : 0x9613a000
Size : 0x0010e000
Time Stamp : 0x494ca667
Time String : 12/20/2008 12:01:43 AM
Product Name : Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter
File Description : Atheros Extensible Wireless LAN device driver
File Version : 7.7.0.199 built by: WinDDK
Company : Atheros Communications, Inc.
Full Path : C:\Windows\system32\drivers\athr.sys
==================================================

==================================================
Filename : i8042prt.sys
Address In Stack :
From Address : 0x9613a000
To Address : 0x96152000
Size : 0x00018000
Time Stamp : 0x4a5bbf1b
Time String : 7/13/2009 3:11:23 PM
Product Name : Microsoft® Windows® Operating System
File Description : i8042 Port Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\i8042prt.sys
==================================================

==================================================
Filename : HpqKbFiltr.sys
Address In Stack :
From Address : 0x96152000
To Address : 0x9615b000
Size : 0x00009000
Time Stamp : 0x49f85a4b
Time String : 4/29/2009 5:46:51 AM
Product Name : HP Quick Launch Buttons
File Description : HpqKbFiltr Keyboard Filter Driver
File Version : 1.0.0.2 built by: WinDDK
Company : Hewlett-Packard Development Company, L.P.
Full Path : C:\Windows\system32\drivers\HpqKbFiltr.sys
==================================================

==================================================
Filename : kbdclass.sys
Address In Stack :
From Address : 0x9615b000
To Address : 0x96168000
Size : 0x0000d000
Time Stamp : 0x4a5bbf13
Time String : 7/13/2009 3:11:15 PM
Product Name : Microsoft® Windows® Operating System
File Description : Keyboard Class Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\kbdclass.sys
==================================================

==================================================
Filename : SynTP.sys
Address In Stack :
From Address : 0x96168000
To Address : 0x96197080
Size : 0x0002f080
Time Stamp : 0x4807e809
Time String : 4/17/2008 4:15:05 PM
Product Name : Synaptics Pointing Device Driver
File Description : Synaptics Touchpad Driver
File Version : 11.1.3 17Apr08
Company : Synaptics, Inc.
Full Path : C:\Windows\system32\drivers\SynTP.sys
==================================================

==================================================
Filename : USBD.SYS
Address In Stack :
From Address : 0x96198000
To Address : 0x96199700
Size : 0x00001700
Time Stamp : 0x4a5bc869
Time String : 7/13/2009 3:51:05 PM
Product Name : Microsoft® Windows® Operating System
File Description : Universal Serial Bus Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\USBD.SYS
==================================================

==================================================
Filename : mouclass.sys
Address In Stack :
From Address : 0x9619a000
To Address : 0x961a7000
Size : 0x0000d000
Time Stamp : 0x4a5bbf13
Time String : 7/13/2009 3:11:15 PM
Product Name : Microsoft® Windows® Operating System
File Description : Mouse Class Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mouclass.sys
==================================================

==================================================
Filename : CmBatt.sys
Address In Stack :
From Address : 0x961a7000
To Address : 0x961aa700
Size : 0x00003700
Time Stamp : 0x4a5bc0f6
Time String : 7/13/2009 3:19:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : Control Method Battery Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\CmBatt.sys
==================================================

==================================================
Filename : GEARAspiWDM.sys
Address In Stack :
From Address : 0x961ab000
To Address : 0x961b0280
Size : 0x00005280
Time Stamp : 0x4a1151b5
Time String : 5/18/2009 4:16:53 AM
Product Name : CD DVD Filter
File Description : CD DVD Filter
File Version : 2.02.00.01
Company : GEAR Software Inc.
Full Path : C:\Windows\system32\drivers\GEARAspiWDM.sys
==================================================

==================================================
Filename : CompositeBus.sys
Address In Stack :
From Address : 0x961b1000
To Address : 0x961be000
Size : 0x0000d000
Time Stamp : 0x4a5bc716
Time String : 7/13/2009 3:45:26 PM
Product Name : Microsoft® Windows® Operating System
File Description : Multi-Transport Composite Bus Enumerator
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\CompositeBus.sys
==================================================

==================================================
Filename : AgileVpn.sys
Address In Stack :
From Address : 0x961be000
To Address : 0x961d0000
Size : 0x00012000
Time Stamp : 0x4a5bc954
Time String : 7/13/2009 3:55:00 PM
Product Name : Microsoft® Windows® Operating System
File Description : RAS Agile Vpn Miniport Call Manager
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\AgileVpn.sys
==================================================

==================================================
Filename : rasl2tp.sys
Address In Stack :
From Address : 0x961d0000
To Address : 0x961e8000
Size : 0x00018000
Time Stamp : 0x4a5bc939
Time String : 7/13/2009 3:54:33 PM
Product Name : Microsoft® Windows® Operating System
File Description : RAS L2TP mini-port/call-manager driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rasl2tp.sys
==================================================

==================================================
Filename : ndistapi.sys
Address In Stack :
From Address : 0x961e8000
To Address : 0x961f3000
Size : 0x0000b000
Time Stamp : 0x4a5bc930
Time String : 7/13/2009 3:54:24 PM
Product Name : Microsoft® Windows® Operating System
File Description : NDIS 3.0 connection wrapper driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndistapi.sys
==================================================

==================================================
Filename : ndiswan.sys
Address In Stack :
From Address : 0x96000000
To Address : 0x96022000
Size : 0x00022000
Time Stamp : 0x4a5bc93a
Time String : 7/13/2009 3:54:34 PM
Product Name : Microsoft® Windows® Operating System
File Description : MS PPP Framing Driver (Strong Encryption)
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndiswan.sys
==================================================

==================================================
Filename : raspppoe.sys
Address In Stack :
From Address : 0x8f5bd000
To Address : 0x8f5d5000
Size : 0x00018000
Time Stamp : 0x4a5bc94d
Time String : 7/13/2009 3:54:53 PM
Product Name : Microsoft® Windows® Operating System
File Description : RAS PPPoE mini-port/call-manager driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\raspppoe.sys
==================================================

==================================================
Filename : raspptp.sys
Address In Stack :
From Address : 0x8f5d5000
To Address : 0x8f5ec000
Size : 0x00017000
Time Stamp : 0x4a5bc947
Time String : 7/13/2009 3:54:47 PM
Product Name : Microsoft® Windows® Operating System
File Description : Peer-to-Peer Tunneling Protocol
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\raspptp.sys
==================================================

==================================================
Filename : rassstp.sys
Address In Stack :
From Address : 0x833ba000
To Address : 0x833d1000
Size : 0x00017000
Time Stamp : 0x4a5bc951
Time String : 7/13/2009 3:54:57 PM
Product Name : Microsoft® Windows® Operating System
File Description : RAS SSTP Miniport Call Manager
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rassstp.sys
==================================================

==================================================
Filename : swenum.sys
Address In Stack :
From Address : 0x96022000
To Address : 0x96023380
Size : 0x00001380
Time Stamp : 0x4a5bc704
Time String : 7/13/2009 3:45:08 PM
Product Name : Microsoft® Windows® Operating System
File Description : Plug and Play Software Device Enumerator
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\swenum.sys
==================================================

==================================================
Filename : ks.sys
Address In Stack :
From Address : 0x83200000
To Address : 0x83234000
Size : 0x00034000
Time Stamp : 0x4a5bc709
Time String : 7/13/2009 3:45:13 PM
Product Name : Microsoft® Windows® Operating System
File Description : Kernel CSA Library
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ks.sys
==================================================

==================================================
Filename : umbus.sys
Address In Stack :
From Address : 0x911f0000
To Address : 0x911fe000
Size : 0x0000e000
Time Stamp : 0x4a5bc88a
Time String : 7/13/2009 3:51:38 PM
Product Name : Microsoft® Windows® Operating System
File Description : User-Mode Bus Enumerator
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\umbus.sys
==================================================

==================================================
Filename : usbhub.sys
Address In Stack :
From Address : 0x96632000
To Address : 0x96676000
Size : 0x00044000
Time Stamp : 0x4a5bc8a6
Time String : 7/13/2009 3:52:06 PM
Product Name : Microsoft® Windows® Operating System
File Description : Default Hub Driver for USB
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\usbhub.sys
==================================================

==================================================
Filename : NDProxy.SYS
Address In Stack :
From Address : 0x96676000
To Address : 0x96687000
Size : 0x00011000
Time Stamp : 0x4a5bc933
Time String : 7/13/2009 3:54:27 PM
Product Name : Microsoft® Windows® Operating System
File Description : NDIS Proxy
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\NDProxy.SYS
==================================================

==================================================
Filename : CHDRT32.sys
Address In Stack :
From Address : 0x96687000
To Address : 0x966c2000
Size : 0x0003b000
Time Stamp : 0x48487dae
Time String : 6/5/2008 3:58:38 PM
Product Name : Conexant HDAudio Driver
File Description : High Definition Audio Function Driver
File Version : 4.58.0.0 built by: WinDDK
Company : Conexant Systems Inc.
Full Path : C:\Windows\system32\drivers\CHDRT32.sys
==================================================

==================================================
Filename : portcls.sys
Address In Stack :
From Address : 0x966c2000
To Address : 0x966f1000
Size : 0x0002f000
Time Stamp : 0x4a5bc864
Time String : 7/13/2009 3:51:00 PM
Product Name : Microsoft® Windows® Operating System
File Description : Port Class (Class Driver for Port/Miniport Devices)
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\portcls.sys
==================================================

==================================================
Filename : drmk.sys
Address In Stack :
From Address : 0x966f1000
To Address : 0x9670a000
Size : 0x00019000
Time Stamp : 0x4a5bd2f5
Time String : 7/13/2009 4:36:05 PM
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Trusted Audio Drivers
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\drmk.sys
==================================================

==================================================
Filename : HSXHWAZL.sys
Address In Stack :
From Address : 0x9670a000
To Address : 0x96748000
Size : 0x0003e000
Time Stamp : 0x472a73b7
Time String : 11/1/2007 4:47:51 PM
Product Name : SoftK56 Modem Driver
File Description : HSF_HWAZL WDM driver
File Version : 7.70.00 built by: WinDDK
Company : Conexant Systems, Inc.
Full Path : C:\Windows\system32\drivers\HSXHWAZL.sys
==================================================

==================================================
Filename : HSX_DPV.sys
Address In Stack :
From Address : 0x81e02000
To Address : 0x81f05000
Size : 0x00103000
Time Stamp : 0x472a745f
Time String : 11/1/2007 4:50:39 PM
Product Name : SoftK56 Modem Driver
File Description : HSF_DP driver
File Version : 7.70.00 built by: WinDDK
Company : Conexant Systems, Inc.
Full Path : C:\Windows\system32\drivers\HSX_DPV.sys
==================================================

==================================================
Filename : HSX_CNXT.sys
Address In Stack :
From Address : 0x81f05000
To Address : 0x81fba000
Size : 0x000b5000
Time Stamp : 0x472a7380
Time String : 11/1/2007 4:46:56 PM
Product Name : SoftK56 Modem Driver
File Description : HSF_CNXT driver
File Version : 7.70.00 built by: WinDDK
Company : Conexant Systems, Inc.
Full Path : C:\Windows\system32\drivers\HSX_CNXT.sys
==================================================

==================================================
Filename : modem.sys
Address In Stack :
From Address : 0x81fba000
To Address : 0x81fc7000
Size : 0x0000d000
Time Stamp : 0x4a5bc96c
Time String : 7/13/2009 3:55:24 PM
Product Name : Microsoft® Windows® Operating System
File Description : Modem Device Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\modem.sys
==================================================

==================================================
Filename : IntcHdmi.sys
Address In Stack :
From Address : 0x81fc7000
To Address : 0x81fea000
Size : 0x00023000
Time Stamp : 0x4a5745d2
Time String : 7/10/2009 5:44:50 AM
Product Name : Intel® High Definition Audio HDMI
File Description : Intel® High Definition Audio HDMI
File Version : 6.10.01.2077 built by: WinDDK
Company : Intel® Corporation
Full Path : C:\Windows\system32\drivers\IntcHdmi.sys
==================================================

==================================================
Filename : RTSTOR.SYS
Address In Stack :
From Address : 0x81fea000
To Address : 0x81ffd000
Size : 0x00013000
Time Stamp : 0x48d37454
Time String : 9/19/2008 1:43:48 AM
Product Name : Realtek USB Mass Storage Driver for Vista
File Description : Realtek USB Mass Storage Driver for Vista
File Version : 6.0.6000.20109
Company : Realtek Semiconductor Corp.
Full Path : C:\Windows\system32\drivers\RTSTOR.SYS
==================================================

==================================================
Filename : win32k.sys
Address In Stack :
From Address : 0x97540000
To Address : 0x9778a000
Size : 0x0024a000
Time Stamp : 0x4a5bc2a2
Time String : 7/13/2009 3:26:26 PM
Product Name : Microsoft® Windows® Operating System
File Description : Multi-User Win32 Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\win32k.sys
==================================================

==================================================
Filename : Dxapi.sys
Address In Stack :
From Address : 0x96748000
To Address : 0x96752000
Size : 0x0000a000
Time Stamp : 0x4a5bc265
Time String : 7/13/2009 3:25:25 PM
Product Name : Microsoft® Windows® Operating System
File Description : DirectX API Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\Dxapi.sys
==================================================

==================================================
Filename : crashdmp.sys
Address In Stack :
From Address : 0x96752000
To Address : 0x9675f000
Size : 0x0000d000
Time Stamp : 0x4a5bc72e
Time String : 7/13/2009 3:45:50 PM
Product Name : Microsoft® Windows® Operating System
File Description : Crash Dump Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\crashdmp.sys
==================================================

==================================================
Filename : dump_dumpata.sys
Address In Stack :
From Address : 0x9675f000
To Address : 0x9676a000
Size : 0x0000b000
Time Stamp : 0x4a5bbf14
Time String : 7/13/2009 3:11:16 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dump_msahci.sys
Address In Stack :
From Address : 0x9676a000
To Address : 0x96774000
Size : 0x0000a000
Time Stamp : 0x4a5bc72e
Time String : 7/13/2009 3:45:50 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : dump_dumpfve.sys
Address In Stack :
From Address : 0x96774000
To Address : 0x96785000
Size : 0x00011000
Time Stamp : 0x4a5bbf6f
Time String : 7/13/2009 3:12:47 PM
Product Name :
File Description :
File Version :
Company :
Full Path :
==================================================

==================================================
Filename : monitor.sys
Address In Stack :
From Address : 0x96785000
To Address : 0x96790000
Size : 0x0000b000
Time Stamp : 0x4a5bc286
Time String : 7/13/2009 3:25:58 PM
Product Name : Microsoft® Windows® Operating System
File Description : Monitor Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\monitor.sys
==================================================

==================================================
Filename : TSDDD.dll
Address In Stack :
From Address : 0x977a0000
To Address : 0x977a9000
Size : 0x00009000
Time Stamp : 0x00000000
Time String :
Product Name : Microsoft® Windows® Operating System
File Description : Framebuffer Display Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\TSDDD.dll
==================================================

==================================================
Filename : cdd.dll
Address In Stack :
From Address : 0x977d0000
To Address : 0x977ee000
Size : 0x0001e000
Time Stamp : 0x4a5bd992
Time String : 7/13/2009 5:04:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : Canonical Display Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\cdd.dll
==================================================

==================================================
Filename : ATMFD.DLL
Address In Stack :
From Address : 0x97400000
To Address : 0x9744d000
Size : 0x0004d000
Time Stamp : 0x4a71251a
Time String : 7/29/2009 8:44:10 PM
Product Name : Adobe Type Manager
File Description : Windows NT OpenType/Type 1 Font Driver
File Version : 5.1 Build 226
Company : Adobe Systems Incorporated
Full Path : C:\Windows\system32\ATMFD.DLL
==================================================

==================================================
Filename : luafv.sys
Address In Stack :
From Address : 0x96790000
To Address : 0x967ab000
Size : 0x0001b000
Time Stamp : 0x4a5bc020
Time String : 7/13/2009 3:15:44 PM
Product Name : Microsoft® Windows® Operating System
File Description : LUA File Virtualization Filter Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\luafv.sys
==================================================

==================================================
Filename : WudfPf.sys
Address In Stack :
From Address : 0x967ab000
To Address : 0x967c5000
Size : 0x0001a000
Time Stamp : 0x4a5bc835
Time String : 7/13/2009 3:50:13 PM
Product Name : Microsoft® Windows® Operating System
File Description : Windows Driver Foundation - User-mode Driver Framework Platform Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\WudfPf.sys
==================================================

==================================================
Filename : lltdio.sys
Address In Stack :
From Address : 0x967c5000
To Address : 0x967d5000
Size : 0x00010000
Time Stamp : 0x4a5bc8ee
Time String : 7/13/2009 3:53:18 PM
Product Name : Microsoft® Windows® Operating System
File Description : Link-Layer Topology Mapper I/O Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\lltdio.sys
==================================================

==================================================
Filename : nwifi.sys
Address In Stack :
From Address : 0x98015000
To Address : 0x9805b000
Size : 0x00046000
Time Stamp : 0x4a5bc89f
Time String : 7/13/2009 3:51:59 PM
Product Name : Microsoft® Windows® Operating System
File Description : NativeWiFi Miniport Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\nwifi.sys
==================================================

==================================================
Filename : ndisuio.sys
Address In Stack :
From Address : 0x9805b000
To Address : 0x9806b000
Size : 0x00010000
Time Stamp : 0x4a5bc90f
Time String : 7/13/2009 3:53:51 PM
Product Name : Microsoft® Windows® Operating System
File Description : NDIS User mode I/O driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\ndisuio.sys
==================================================

==================================================
Filename : rspndr.sys
Address In Stack :
From Address : 0x9806b000
To Address : 0x9807e000
Size : 0x00013000
Time Stamp : 0x4a5bc8f0
Time String : 7/13/2009 3:53:20 PM
Product Name : Microsoft® Windows® Operating System
File Description : Link-Layer Topology Responder Driver for NDIS 6
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\rspndr.sys
==================================================

==================================================
Filename : HTTP.sys
Address In Stack :
From Address : 0x9807e000
To Address : 0x98103000
Size : 0x00085000
Time Stamp : 0x4a5bbf75
Time String : 7/13/2009 3:12:53 PM
Product Name : Microsoft® Windows® Operating System
File Description : HTTP Protocol Stack
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\HTTP.sys
==================================================

==================================================
Filename : bowser.sys
Address In Stack :
From Address : 0x98103000
To Address : 0x9811c000
Size : 0x00019000
Time Stamp : 0x4a5bbfcd
Time String : 7/13/2009 3:14:21 PM
Product Name : Microsoft® Windows® Operating System
File Description : NT Lan Manager Datagram Receiver Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\bowser.sys
==================================================

==================================================
Filename : mpsdrv.sys
Address In Stack :
From Address : 0x9811c000
To Address : 0x9812e000
Size : 0x00012000
Time Stamp : 0x4a5bc8d4
Time String : 7/13/2009 3:52:52 PM
Product Name : Microsoft® Windows® Operating System
File Description : Microsoft Protection Service Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mpsdrv.sys
==================================================

==================================================
Filename : mrxsmb.sys
Address In Stack :
From Address : 0x9812e000
To Address : 0x98151000
Size : 0x00023000
Time Stamp : 0x4a5bbfd0
Time String : 7/13/2009 3:14:24 PM
Product Name : Microsoft® Windows® Operating System
File Description : Windows NT SMB Minirdr
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mrxsmb.sys
==================================================

==================================================
Filename : mrxsmb10.sys
Address In Stack :
From Address : 0x98151000
To Address : 0x9818c000
Size : 0x0003b000
Time Stamp : 0x4a5bbfda
Time String : 7/13/2009 3:14:34 PM
Product Name : Microsoft® Windows® Operating System
File Description : Longhorn SMB Downlevel SubRdr
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mrxsmb10.sys
==================================================

==================================================
Filename : mrxsmb20.sys
Address In Stack :
From Address : 0x9818c000
To Address : 0x981a7000
Size : 0x0001b000
Time Stamp : 0x4a5bbfd5
Time String : 7/13/2009 3:14:29 PM
Product Name : Microsoft® Windows® Operating System
File Description : Longhorn SMB 2.0 Redirector
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\mrxsmb20.sys
==================================================

==================================================
Filename : mdmxsdk.sys
Address In Stack :
From Address : 0x981bf000
To Address : 0x981c2180
Size : 0x00003180
Time Stamp : 0x449716a3
Time String : 6/19/2006 1:26:59 PM
Product Name : Diagnostic Interface x86 Driver
File Description : Diagnostic Interface x86 Driver
File Version : 1.0.2.012
Company : Conexant
Full Path : C:\Windows\system32\drivers\mdmxsdk.sys
==================================================

==================================================
Filename : peauth.sys
Address In Stack :
From Address : 0x99005000
To Address : 0x9909c000
Size : 0x00097000
Time Stamp : 0x4a5bd2e0
Time String : 7/13/2009 4:35:44 PM
Product Name : Microsoft® Windows® Operating System
File Description : Protected Environment Authentication and Authorization Export Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\peauth.sys
==================================================

==================================================
Filename : secdrv.SYS
Address In Stack :
From Address : 0x9909c000
To Address : 0x990a6000
Size : 0x0000a000
Time Stamp : 0x45080528
Time String : 9/13/2006 5:18:32 AM
Product Name : Macrovision SECURITY Driver
File Description : Macrovision SECURITY Driver
File Version : 4.03.086
Company : Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
Full Path : C:\Windows\system32\drivers\secdrv.SYS
==================================================

==================================================
Filename : srvnet.sys
Address In Stack :
From Address : 0x990a6000
To Address : 0x990c7000
Size : 0x00021000
Time Stamp : 0x4a5bbfe5
Time String : 7/13/2009 3:14:45 PM
Product Name : Microsoft® Windows® Operating System
File Description : Server Network driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\srvnet.sys
==================================================

==================================================
Filename : tcpipreg.sys
Address In Stack :
From Address : 0x990c7000
To Address : 0x990d4000
Size : 0x0000d000
Time Stamp : 0x4a5bc926
Time String : 7/13/2009 3:54:14 PM
Product Name : Microsoft® Windows® Operating System
File Description : TCP/IP Registry Compatibility Driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\tcpipreg.sys
==================================================

==================================================
Filename : xaudio.sys
Address In Stack :
From Address : 0x990d4000
To Address : 0x990dc000
Size : 0x00008000
Time Stamp : 0x4717e005
Time String : 10/18/2007 2:36:53 PM
Product Name : SoftK56 Modem Driver
File Description : Modem Audio Device Driver
File Version : 1.00.15.00 built by: WinDDK
Company : Conexant Systems, Inc.
Full Path : C:\Windows\system32\drivers\xaudio.sys
==================================================

==================================================
Filename : srv2.sys
Address In Stack :
From Address : 0x990dc000
To Address : 0x9912b000
Size : 0x0004f000
Time Stamp : 0x4a5bbfec
Time String : 7/13/2009 3:14:52 PM
Product Name : Microsoft® Windows® Operating System
File Description : Smb 2.0 Server driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\srv2.sys
==================================================

==================================================
Filename : srv.sys
Address In Stack :
From Address : 0x9912b000
To Address : 0x9917c000
Size : 0x00051000
Time Stamp : 0x4a5bbffe
Time String : 7/13/2009 3:15:10 PM
Product Name : Microsoft® Windows® Operating System
File Description : Server driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\srv.sys
==================================================

==================================================
Filename : ssidrv.sys
Address In Stack :
From Address : 0x9917c000
To Address : 0x991aa000
Size : 0x0002e000
Time Stamp : 0x4ab3eb73
Time String : 9/18/2009 12:20:03 PM
Product Name : Spy Sweeper SDK
File Description : Spy Sweeper Interdiction Driver
File Version : 4.4.0.83
Company : Webroot Software, Inc. (www.webroot.com)
Full Path : C:\Windows\system32\drivers\ssidrv.sys
==================================================

==================================================
Filename : asyncmac.sys
Address In Stack :
From Address : 0xb4c7c000
To Address : 0xb4c85000
Size : 0x00009000
Time Stamp : 0x4a5bc946
Time String : 7/13/2009 3:54:46 PM
Product Name : Microsoft® Windows® Operating System
File Description : MS Remote Access serial network driver
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\drivers\asyncmac.sys
==================================================
  • 0

#4
Broni
Posted 05 January 2010 - 07:49 PM

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
OK, surely tons of errors and almost every error comes from different source.
Some errors date back to 2006, but interestingly, 90% of all errors come from one date, 7/13/09.
I can see only 3 errors pass that date, 1 from September and two from October.
I don't see any recent errors listed.

In any case, before we go anywhere, how old is this laptop and what happened on July 13th?
  • 0

#5
Poke
Posted 05 January 2010 - 08:09 PM

Poke

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 162 posts
Laptop bought from Best buy, Oct 10-20, 2009. Updated to Windows 7 Around December, and had BSOD stemming from there.
  • 0

#6
Broni
Posted 05 January 2010 - 08:53 PM

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
Yeah, the thing is, I don't see any errors in your log, pass October
Can you check in C:\Windows\Minidump, if you have any .dmp files with recent dates?
  • 0

#7
Poke
Posted 05 January 2010 - 09:07 PM

Poke

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 162 posts
Well, the last one I figured out myself. Apparently, someone with access to admin added a virtual disk software, and kept giving me KERNEL_DATA_INPAGE_ERROR. Which is the reason I added the disk check in my first post.

Apparently, the software, or laptop, was terminating the process in an unusual way and causing BSOD's. But I can Give you logs of those annoying ones. They haven't popped up since I uninstalled the software.



EDIT: Looking at the logs myself, WHAT DID HAPPEN ON JULY 13TH? :) That many errors in one day? Is there a possibility that someone used this computer before me and screwed with files? I did get the GeekSquad barebones one, which uninstalls all trials and speeds up my computer apparently.

Edited by Poke, 05 January 2010 - 09:11 PM.

  • 0

#8
Broni
Posted 05 January 2010 - 09:11 PM

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
Since the errors appear to be gone, let's wait.
Are you saying, that you have some recent .dmp files listed in C:\Windows\Minidump and they didn't show up in BlueScreenView log?
  • 0

#9
Poke
Posted 05 January 2010 - 09:12 PM

Poke

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 162 posts
I have other minidumps, but the BSOD cause has disappeared.
  • 0

#10
Broni
Posted 05 January 2010 - 09:22 PM

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
??
  • 0

#11
Poke
Posted 06 January 2010 - 08:22 PM

Poke

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 162 posts
I have the minidumps for the other BSOD. In plain terms.
  • 0

#12
Broni
Posted 06 January 2010 - 10:25 PM

Broni

    Kraków my love :)

  • Member
  • PipPipPipPipPipPipPipPip
  • 12,300 posts
Can you zip them and upload here?
  • 0
Back to Windows Vista and Windows 7 · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Retired Forums
  3. → Windows Vista and Windows 7

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP