Hi Mark. . .
I ran the most recent dump file:
BugCheck
0xa (0xfffffa7fffffffea, 0x2, 0x0, 0xfffff80002857556), probable cause listed as the Vista NT Kernel
ntkrnlmp.exe.
The very 1st two entries in WERCON show Windows Defender crashing:
Code:
11/2/2008 12:41 AM Windows Error Reporting Fault bucket 369190548, type 5
Event Name: AVSubmit
Response: None
Cab Id: 526411799

Problem signature:
P1: WinDefend
P2: 1.1.4005.0
P3: unspecified
P4: 1.45.1246.0
P5: TrojanDownloader:Win32/Zlob.gen!GX
P6: 
P7: &#x
11/2/2008 12:34 AM Windows Error Reporting Fault bucket 369190548, type 5
Event Name: AVSubmit
Response: None
Cab Id: 526410840

Problem signature:
P1: WinDefend
P2: 1.1.4005.0
P3: unspecified
P4: 1.45.1246.0
P5: TrojanDownloader:Win32/Zlob.gen!GX
P6: 
P7: &#x
If you scroll to the right, you'll see these in
RED, located at P5:
Code:
P5: TrojanDownloader:Win32/Zlob.gen!GX
P5: TrojanDownloader:Win32/Zlob.gen!GX
.
Following these 2 entries are 42 additional app crashes along with the 0xa BSOD in 2.5 days.
Regards. . .
jcgriff2
.
Dbug log
Code:
Opened log file 'A:\D\#Dumps\markm75_hardware_10-06-08\$99-dbug.txt'
Microsoft (R) Windows Debugger Version 6.9.0003.113 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [A:\D\#Dumps\markm75_hardware_10-06-08\Mini110508-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*a:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.amd64fre.vistasp1_gdr.080917-1612
Kernel base = 0xfffff800`02852000 PsLoadedModuleList = 0xfffff800`02a17db0
Debug session time: Wed Nov 5 08:05:13.469 2008 (GMT-5)
System Uptime: 0 days 13:36:32.966
Loading Kernel Symbols
.................................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {fffffa7fffffffea, 2, 0, fffff80002857556}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+21453 )
Followup: MachineOwner
---------
3: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa7fffffffea, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002857556, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002a7b080
fffffa7fffffffea
CURRENT_IRQL: 2
FAULTING_IP:
nt! ?? ::FNODOBFM::`string'+21453
fffff800`02857556 8a511a mov dl,byte ptr [rcx+1Ah]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: fffffa6001be28e0 -- (.trap 0xfffffa6001be28e0)
.trap 0xfffffa6001be28e0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa60019d2180 rbx=0000000000000000 rcx=fffffa7fffffffd0
rdx=0000007d3000d008 rsi=fffff8800baecf40 rdi=fffff8800baec570
rip=fffff80002857556 rsp=fffffa6001be2a70 rbp=0000000000000007
r8=0000fffffffff000 r9=0000058000000000 r10=0000000fffffffff
r11=0000007ffffffff8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
nt! ?? ::FNODOBFM::`string'+0x21453:
fffff800`02857556 8a511a mov dl,byte ptr [rcx+1Ah] ds:fffffa7f`ffffffea=??
.trap
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800028a70ee to fffff800028a7350
STACK_TEXT:
fffffa60`01be2798 fffff800`028a70ee : 00000000`0000000a fffffa7f`ffffffea 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffa60`01be27a0 fffff800`028a5fcb : 00000000`00000000 fffffa60`00b05f6f fffffa80`05306500 fffffa80`018ad040 : nt!KiBugCheckDispatch+0x6e
fffffa60`01be28e0 fffff800`02857556 : fffffa80`03c88dc0 00000000`0000000c 00000000`00000001 fffff800`028aa56f : nt!KiPageFault+0x20b
fffffa60`01be2a70 fffff800`02afbf30 : 00000000`00000000 00000000`00000001 00000000`00000000 fffffa80`03cb5040 : nt! ?? ::FNODOBFM::`string'+0x21453
fffffa60`01be2b10 fffff800`028ae1b3 : fffffa80`03c887e0 fffffa80`08ca4040 fffffa80`08ca4040 fffffa80`01e74910 : nt!PspProcessDelete+0x170
fffffa60`01be2b70 fffff800`02b4dff8 : fffffa80`03c88520 00000000`00000000 00000000`00000000 fffffa60`019d27f0 : nt!ObfDereferenceObject+0x103
fffffa60`01be2c00 fffff800`028ae1b3 : fffffa80`03c88520 00000000`00000000 fffffa80`08ca3bb0 fffffa80`08ca3b80 : nt!PspThreadDelete+0x108
fffffa60`01be2c30 fffff800`028ebf33 : fffffa80`08ca3f10 fffff800`029e4950 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObject+0x103
fffffa60`01be2cc0 fffff800`028b405a : fffff800`028ebeb0 fffffa80`03cb5040 00000000`00000000 3d6c5a67`00000000 : nt!PspReaper+0x83
fffffa60`01be2cf0 fffff800`02ac9ff3 : fffff800`029f7440 d98c4d03`303684c4 fffffa80`03cb5040 00000000`00000080 : nt!ExpWorkerThread+0x11a
fffffa60`01be2d50 fffff800`028e1546 : fffffa60`005ec180 fffffa80`03cb5040 fffffa60`005f5d40 00000000`00000001 : nt!PspSystemThreadStartup+0x57
fffffa60`01be2d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+21453
fffff800`02857556 8a511a mov dl,byte ptr [rcx+1Ah]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+21453
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 48d1ba35
FAILURE_BUCKET_ID: X64_0xA_nt!_??_::FNODOBFM::_string_+21453
BUCKET_ID: X64_0xA_nt!_??_::FNODOBFM::_string_+21453
Followup: MachineOwner
---------
rax=fffffa6001be28a0 rbx=fffffa80018ad040 rcx=000000000000000a
rdx=fffffa7fffffffea rsi=0000000000000001 rdi=fffffa8008ca4040
rip=fffff800028a7350 rsp=fffffa6001be2798 rbp=fffffa6001be2960
r8=0000000000000002 r9=0000000000000000 r10=fffff80002857556
r11=00000000000001f4 r12=ffffffffffffffff r13=0000000000000001
r14=fffffa6001a00000 r15=0000000000000001
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000286
nt!KeBugCheckEx:
fffff800`028a7350 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffffa60`01be27a0=000000000000000a
Child-SP RetAddr : Args to Child : Call Site
fffffa60`01be2798 fffff800`028a70ee : 00000000`0000000a fffffa7f`ffffffea 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffffa60`01be27a0 fffff800`028a5fcb : 00000000`00000000 fffffa60`00b05f6f fffffa80`05306500 fffffa80`018ad040 : nt!KiBugCheckDispatch+0x6e
fffffa60`01be28e0 fffff800`02857556 : fffffa80`03c88dc0 00000000`0000000c 00000000`00000001 fffff800`028aa56f : nt!KiPageFault+0x20b (TrapFrame @ fffffa60`01be28e0)
fffffa60`01be2a70 fffff800`02afbf30 : 00000000`00000000 00000000`00000001 00000000`00000000 fffffa80`03cb5040 : nt! ?? ::FNODOBFM::`string'+0x21453
fffffa60`01be2b10 fffff800`028ae1b3 : fffffa80`03c887e0 fffffa80`08ca4040 fffffa80`08ca4040 fffffa80`01e74910 : nt!PspProcessDelete+0x170
fffffa60`01be2b70 fffff800`02b4dff8 : fffffa80`03c88520 00000000`00000000 00000000`00000000 fffffa60`019d27f0 : nt!ObfDereferenceObject+0x103
fffffa60`01be2c00 fffff800`028ae1b3 : fffffa80`03c88520 00000000`00000000 fffffa80`08ca3bb0 fffffa80`08ca3b80 : nt!PspThreadDelete+0x108
fffffa60`01be2c30 fffff800`028ebf33 : fffffa80`08ca3f10 fffff800`029e4950 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObject+0x103
fffffa60`01be2cc0 fffff800`028b405a : fffff800`028ebeb0 fffffa80`03cb5040 00000000`00000000 3d6c5a67`00000000 : nt!PspReaper+0x83
fffffa60`01be2cf0 fffff800`02ac9ff3 : fffff800`029f7440 d98c4d03`303684c4 fffffa80`03cb5040 00000000`00000080 : nt!ExpWorkerThread+0x11a
fffffa60`01be2d50 fffff800`028e1546 : fffffa60`005ec180 fffffa80`03cb5040 fffffa60`005f5d40 00000000`00000001 : nt!PspSystemThreadStartup+0x57
fffffa60`01be2d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
start end module name
fffff800`0280c000 fffff800`02852000 hal hal.dll Sat Jan 19 02:55:25 2008 (4791ACED)
fffff800`02852000 fffff800`02d6a000 nt ntkrnlmp.exe Wed Sep 17 22:17:25 2008 (48D1BA35)
fffff960`000b0000 fffff960`00361000 win32k win32k.sys Wed Sep 17 22:27:53 2008 (48D1BCA9)
fffff960`00470000 fffff960`0047a000 TSDDD TSDDD.dll Sat Jan 19 01:42:04 2008 (47919BBC)
fffff960`006a0000 fffff960`006b1000 cdd cdd.dll Fri Aug 01 23:40:21 2008 (4893D725)
fffffa60`00602000 fffffa60`0060c000 kdcom kdcom.dll Sat Jan 19 02:58:25 2008 (4791ADA1)
fffffa60`0060c000 fffffa60`00639000 mcupdate mcupdate.dll Sat Jan 19 02:56:17 2008 (4791AD21)
fffffa60`00639000 fffffa60`0064d000 PSHED PSHED.dll Sat Jan 19 02:58:13 2008 (4791AD95)
fffffa60`0064d000 fffffa60`006aa000 CLFS CLFS.SYS Sat Jan 19 00:53:58 2008 (47919076)
fffffa60`006aa000 fffffa60`0075c000 CI CI.dll Fri Feb 22 00:20:54 2008 (47BE5BB6)
fffffa60`0075c000 fffffa60`007c2000 volmgrx volmgrx.sys Sat Jan 19 01:29:45 2008 (479198D9)
fffffa60`007c2000 fffffa60`007ee000 CLASSPNP CLASSPNP.SYS Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`00802000 fffffa60`008dc000 Wdf01000 Wdf01000.sys Sat Jan 19 01:33:27 2008 (479199B7)
fffffa60`008dc000 fffffa60`008ea000 WDFLDR WDFLDR.SYS Sat Jan 19 01:32:33 2008 (47919981)
fffffa60`008ea000 fffffa60`00940000 acpi acpi.sys Sat Jan 19 01:02:45 2008 (47919285)
fffffa60`00940000 fffffa60`00949000 WMILIB WMILIB.SYS Sat Jan 19 01:33:45 2008 (479199C9)
fffffa60`00949000 fffffa60`00953000 msisadrv msisadrv.sys Sat Jan 19 01:02:50 2008 (4791928A)
fffffa60`00953000 fffffa60`00983000 pci pci.sys Sat Jan 19 01:02:57 2008 (47919291)
fffffa60`00983000 fffffa60`00998000 partmgr partmgr.sys Sat Jan 19 01:29:14 2008 (479198BA)
fffffa60`00998000 fffffa60`009ac000 volmgr volmgr.sys Sat Jan 19 01:29:12 2008 (479198B8)
fffffa60`009ac000 fffffa60`009b3000 pciide pciide.sys Thu Nov 02 05:38:14 2006 (4549BC86)
fffffa60`009b3000 fffffa60`009c3000 PCIIDEX PCIIDEX.SYS Sat Jan 19 01:28:53 2008 (479198A5)
fffffa60`009c3000 fffffa60`009d6000 mountmgr mountmgr.sys Sat Jan 19 01:28:01 2008 (47919871)
fffffa60`009d6000 fffffa60`009e9000 intelppm intelppm.sys Sat Jan 19 00:52:45 2008 (4791902D)
fffffa60`00a0f000 fffffa60`00ad6000 iastorv iastorv.sys Fri Sep 28 14:32:10 2007 (46FD48AA)
fffffa60`00ad6000 fffffa60`00ade000 atapi atapi.sys Sat Jan 19 01:28:49 2008 (479198A1)
fffffa60`00ade000 fffffa60`00b02000 ataport ataport.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`00b02000 fffffa60`00b0c000 msahci msahci.sys Sat Jan 19 01:28:58 2008 (479198AA)
fffffa60`00b0c000 fffffa60`00b2f000 3wareDrv 3wareDrv.sys Fri Sep 19 18:22:54 2008 (48D4263E)
fffffa60`00b2f000 fffffa60`00b5d000 SCSIPORT SCSIPORT.SYS Sat Jan 19 01:28:52 2008 (479198A4)
fffffa60`00b5d000 fffffa60`00ba3000 fltmgr fltmgr.sys Sat Jan 19 00:54:10 2008 (47919082)
fffffa60`00ba3000 fffffa60`00bb7000 fileinfo fileinfo.sys Sat Jan 19 01:05:23 2008 (47919323)
fffffa60`00bb7000 fffffa60`00be0000 fvevol fvevol.sys Sat Jan 19 00:52:29 2008 (4791901D)
fffffa60`00be0000 fffffa60`00bfc000 usbccgp usbccgp.sys Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`00c00000 fffffa60`00c0c000 tunnel tunnel.sys Sat Jan 19 01:36:44 2008 (47919A7C)
fffffa60`00c0e000 fffffa60`00c93000 ksecdd ksecdd.sys Sat Jan 19 01:16:38 2008 (479195C6)
fffffa60`00c93000 fffffa60`00c94000 msrpc msrpc.sys unavailable (00000000)
fffffa60`00ce3000 fffffa60`00d3b000 NETIO NETIO.SYS Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`00d3b000 fffffa60`00deb000 timntr timntr.sys Thu Oct 11 03:27:41 2007 (470DD06D)
fffffa60`00df7000 fffffa60`00e00000 tunmp tunmp.sys Sat Jan 19 01:36:30 2008 (47919A6E)
fffffa60`00e01000 fffffa60`00fc4000 ndis ndis.sys Sat Jan 19 01:37:13 2008 (47919A99)
fffffa60`00fc4000 fffffa60`00ff0000 ecache ecache.sys Sat Jan 19 01:30:39 2008 (4791990F)
fffffa60`0100b000 fffffa60`0117f000 tcpip tcpip.sys Sat Apr 26 02:33:23 2008 (4812CCB3)
fffffa60`0117f000 fffffa60`011ab000 fwpkclnt fwpkclnt.sys Sat Jan 19 01:36:43 2008 (47919A7B)
fffffa60`011ab000 fffffa60`011e6000 snapman snapman.sys Wed Feb 20 16:25:55 2008 (47BC9AE3)
fffffa60`011e6000 fffffa60`011fa000 disk disk.sys Sat Jan 19 01:29:02 2008 (479198AE)
fffffa60`01206000 fffffa60`0138a000 Ntfs Ntfs.sys Sat Jan 19 00:55:29 2008 (479190D1)
fffffa60`0138a000 fffffa60`013ce000 volsnap volsnap.sys Sat Jan 19 01:29:47 2008 (479198DB)
fffffa60`013ce000 fffffa60`013d6000 spldr spldr.sys Thu Jun 21 20:57:56 2007 (467B1E94)
fffffa60`013d6000 fffffa60`013dd000 speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
fffffa60`013dd000 fffffa60`013ef000 mup mup.sys Sat Jan 19 00:54:18 2008 (4791908A)
fffffa60`013ef000 fffffa60`013f9000 crcdisk crcdisk.sys Sat Jan 19 01:30:12 2008 (479198F4)
fffffa60`02a09000 fffffa60`03082000 atikmdag atikmdag.sys Tue Sep 23 22:37:07 2008 (48D9A7D3)
fffffa60`03082000 fffffa60`03161000 dxgkrnl dxgkrnl.sys Fri Aug 01 21:19:59 2008 (4893B63F)
fffffa60`03161000 fffffa60`03170000 watchdog watchdog.sys Sat Jan 19 01:07:23 2008 (4791939B)
fffffa60`03170000 fffffa60`03183000 HDAudBus HDAudBus.sys Tue Nov 27 18:24:06 2007 (474CA716)
fffffa60`03183000 fffffa60`0318f000 usbuhci usbuhci.sys Sat Jan 19 01:33:56 2008 (479199D4)
fffffa60`0318f000 fffffa60`031d5000 USBPORT USBPORT.SYS Sat Jan 19 01:34:00 2008 (479199D8)
fffffa60`031d5000 fffffa60`031e6000 usbehci usbehci.sys Sat Jan 19 01:33:57 2008 (479199D5)
fffffa60`031e6000 fffffa60`031f6000 raspppoe raspppoe.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`03203000 fffffa60`03268000 yk60x64 yk60x64.sys Thu Dec 06 08:50:34 2007 (4757FE2A)
fffffa60`03268000 fffffa60`03279a00 ohci1394 ohci1394.sys Sat Jan 19 01:34:08 2008 (479199E0)
fffffa60`0327a000 fffffa60`03289f00 1394BUS 1394BUS.SYS Sat Jan 19 01:34:04 2008 (479199DC)
fffffa60`0328a000 fffffa60`03292000 ASACPI ASACPI.sys Sun Mar 27 22:30:36 2005 (42476C4C)
fffffa60`03292000 fffffa60`032a5000 monitor monitor.sys Sat Jan 19 01:32:34 2008 (47919982)
fffffa60`032a8000 fffffa60`032b6000 kbdclass kbdclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`032b6000 fffffa60`032d5000 AnyDVD AnyDVD.sys Sat Sep 20 06:44:21 2008 (48D4D405)
fffffa60`032d5000 fffffa60`032f1000 cdrom cdrom.sys Sat Jan 19 01:29:04 2008 (479198B0)
fffffa60`032f1000 fffffa60`032fa000 GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:59 2008 (47FBC46F)
fffffa60`032fa000 fffffa60`03332000 msiscsi msiscsi.sys Sat Jan 19 01:30:31 2008 (47919907)
fffffa60`03332000 fffffa60`0338f000 storport storport.sys Sat Jan 19 01:29:09 2008 (479198B5)
fffffa60`0338f000 fffffa60`0339c000 TDI TDI.SYS Sat Jan 19 01:38:11 2008 (47919AD3)
fffffa60`0339c000 fffffa60`033bf000 rasl2tp rasl2tp.sys Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`033bf000 fffffa60`033cb000 ndistapi ndistapi.sys Sat Jan 19 01:37:22 2008 (47919AA2)
fffffa60`033cb000 fffffa60`033fc000 ndiswan ndiswan.sys Sat Jan 19 01:37:33 2008 (47919AAD)
fffffa60`0340a000 fffffa60`03428000 raspptp raspptp.sys Sat Jan 19 01:37:34 2008 (47919AAE)
fffffa60`03428000 fffffa60`03440000 rassstp rassstp.sys Sat Jan 19 01:37:42 2008 (47919AB6)
fffffa60`03440000 fffffa60`0344b000 hamachi hamachi.sys Wed Aug 15 19:05:08 2007 (46C386A4)
fffffa60`0344b000 fffffa60`034e5000 rdpdr rdpdr.sys Sat Jan 19 01:43:38 2008 (47919C1A)
fffffa60`034e5000 fffffa60`034f7000 termdd termdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`034f7000 fffffa60`03503000 mouclass mouclass.sys Sat Jan 19 01:28:05 2008 (47919875)
fffffa60`03503000 fffffa60`03511000 VClone VClone.sys Wed Jul 16 20:12:49 2008 (487E8E81)
fffffa60`03511000 fffffa60`03512480 swenum swenum.sys Thu Nov 02 05:37:33 2006 (4549BC5D)
fffffa60`03513000 fffffa60`03547000 ks ks.sys Sat Jan 19 01:28:24 2008 (47919888)
fffffa60`03547000 fffffa60`03558000 circlass circlass.sys Sat Jan 19 01:34:00 2008 (479199D8)
fffffa60`03558000 fffffa60`03563000 mssmbios mssmbios.sys Sat Jan 19 01:02:54 2008 (4791928E)
fffffa60`03563000 fffffa60`03573000 umbus umbus.sys Sat Jan 19 01:34:16 2008 (479199E8)
fffffa60`03573000 fffffa60`035ba000 usbhub usbhub.sys Sat Jan 19 01:34:13 2008 (479199E5)
fffffa60`035c7000 fffffa60`035f2980 RtHDMIVX RtHDMIVX.sys Mon Aug 25 23:25:59 2008 (48B377C7)
fffffa60`035f3000 fffffa60`035fe000 usbprint usbprint.sys Sat Jan 19 02:10:56 2008 (4791A280)
fffffa60`04009000 fffffa60`04044000 portcls portcls.sys Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`04044000 fffffa60`04067000 drmk drmk.sys Sat Jan 19 02:20:04 2008 (4791A4A4)
fffffa60`04067000 fffffa60`0406c180 ksthunk ksthunk.sys Sat Jan 19 01:28:14 2008 (4791987E)
fffffa60`0406d000 fffffa60`0407d000 usbscan usbscan.sys Sat Jan 19 02:09:56 2008 (4791A244)
fffffa60`0407d000 fffffa60`04087000 kbdhid kbdhid.sys Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`04087000 fffffa60`040f6000 ADIHdAud ADIHdAud.sys Wed Aug 29 10:44:37 2007 (46D58655)
fffffa60`040f6000 fffffa60`0410a000 NDProxy NDProxy.SYS Sat Jan 19 01:37:26 2008 (47919AA6)
fffffa60`0410a000 fffffa60`0410b000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
fffffa60`04114000 fffffa60`04115000 Null Null.SYS unavailable (00000000)
fffffa60`0411d000 fffffa60`04133000 i8042prt i8042prt.sys Sat Jan 19 01:28:08 2008 (47919878)
fffffa60`0413d000 fffffa60`04144b80 HIDPARSE HIDPARSE.SYS Sat Jan 19 01:33:51 2008 (479199CF)
fffffa60`04145000 fffffa60`04153000 vga vga.sys Sat Jan 19 01:32:21 2008 (47919975)
fffffa60`04153000 fffffa60`04178000 VIDEOPRT VIDEOPRT.SYS Sat Jan 19 01:32:25 2008 (47919979)
fffffa60`04178000 fffffa60`04181000 RDPCDD RDPCDD.sys Sat Jan 19 01:42:04 2008 (47919BBC)
fffffa60`04181000 fffffa60`0418a000 rdpencdd rdpencdd.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`0418a000 fffffa60`0418b000 Msfs Msfs.SYS unavailable (00000000)
fffffa60`04195000 fffffa60`041a6000 Npfs Npfs.SYS Sat Jan 19 00:53:57 2008 (47919075)
fffffa60`041a6000 fffffa60`041af000 rasacd rasacd.sys Sat Jan 19 01:37:30 2008 (47919AAA)
fffffa60`041af000 fffffa60`041cc000 tdx tdx.sys Sat Jan 19 01:36:53 2008 (47919A85)
fffffa60`041cc000 fffffa60`041e7000 smb smb.sys Sat Jan 19 01:36:17 2008 (47919A61)
fffffa60`041e7000 fffffa60`041f4000 epfwtdir epfwtdir.sys Wed Nov 14 08:59:13 2007 (473AFF31)
fffffa60`041f4000 fffffa60`041fe980 LVUSBS64 LVUSBS64.sys Sat Jul 26 11:06:36 2008 (488B3D7C)
fffffa60`04207000 fffffa60`04274000 afd afd.sys Sat Jan 19 01:38:15 2008 (47919AD7)
fffffa60`04274000 fffffa60`042b8000 netbt netbt.sys Sat Jan 19 01:36:24 2008 (47919A68)
fffffa60`042b8000 fffffa60`042d6000 pacer pacer.sys Fri Apr 04 21:55:46 2008 (47F6DC22)
fffffa60`042d6000 fffffa60`042e5000 netbios netbios.sys Sat Jan 19 01:36:35 2008 (47919A73)
fffffa60`042e5000 fffffa60`04300000 wanarp wanarp.sys Sat Jan 19 01:37:35 2008 (47919AAF)
fffffa60`04300000 fffffa60`0434e000 rdbss rdbss.sys Sat Jan 19 00:55:09 2008 (479190BD)
fffffa60`0434e000 fffffa60`0435a000 nsiproxy nsiproxy.sys Sat Jan 19 01:36:45 2008 (47919A7D)
fffffa60`0435a000 fffffa60`04364000 ElbyCDIO ElbyCDIO.sys Mon Jul 21 08:11:55 2008 (48847D0B)
fffffa60`04364000 fffffa60`0436e000 easdrv easdrv.sys Wed Nov 14 09:02:00 2007 (473AFFD8)
fffffa60`0436e000 fffffa60`043e4000 csc csc.sys Sat Jan 19 00:55:39 2008 (479190DB)
fffffa60`043e4000 fffffa60`043f7000 dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:52:25 2008 (47919019)
fffffa60`04407000 fffffa60`04424000 dfsc dfsc.sys Sat Jan 19 00:54:16 2008 (47919088)
fffffa60`04424000 fffffa60`04436000 archlp archlp.sys Tue May 27 23:11:05 2008 (483CCD49)
fffffa60`04436000 fffffa60`04444000 BTHUSB BTHUSB.sys Mon Apr 28 22:10:51 2008 (481683AB)
fffffa60`04444000 fffffa60`0448d000 bthport bthport.sys Mon Apr 28 22:10:55 2008 (481683AF)
fffffa60`0448d000 fffffa60`0448ee00 USBD USBD.SYS Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`0448f000 fffffa60`04545000 netr28ux netr28ux.sys Tue Nov 20 22:36:24 2007 (4743A7B8)
fffffa60`04545000 fffffa60`04559000 rfcomm rfcomm.sys Sat Jan 19 01:34:13 2008 (479199E5)
fffffa60`04559000 fffffa60`04565000 BthEnum BthEnum.sys Sat Jan 19 01:34:12 2008 (479199E4)
fffffa60`04565000 fffffa60`04584000 bthpan bthpan.sys Sat Jan 19 01:34:19 2008 (479199EB)
fffffa60`04584000 fffffa60`0458d000 hidusb hidusb.sys Sat Jan 19 01:33:54 2008 (479199D2)
fffffa60`0458d000 fffffa60`0459f000 HIDCLASS HIDCLASS.SYS Sat Jan 19 01:33:52 2008 (479199D0)
fffffa60`0459f000 fffffa60`045ac000 hidbth hidbth.sys Sat Jan 19 01:34:12 2008 (479199E4)
fffffa60`045ac000 fffffa60`045b7000 mouhid mouhid.sys Sat Jan 19 01:28:10 2008 (4791987A)
fffffa60`045b7000 fffffa60`045cc000 USBSTOR USBSTOR.SYS Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`045cc000 fffffa60`045da000 crashdmp crashdmp.sys Sat Jan 19 01:28:59 2008 (479198AB)
fffffa60`045da000 fffffa60`045e6000 dump_pciidex dump_pciidex.sys Sat Jan 19 01:28:54 2008 (479198A6)
fffffa60`045e6000 fffffa60`045f0000 dump_msahci dump_msahci.sys Sat Jan 19 01:28:58 2008 (479198AA)
fffffa60`045f0000 fffffa60`045fc000 Dxapi Dxapi.sys Sat Jan 19 01:08:00 2008 (479193C0)
fffffa60`05e0c000 fffffa60`05e2e000 luafv luafv.sys Sat Jan 19 00:59:06 2008 (479191AA)
fffffa60`05e2e000 fffffa60`05e45000 tifsfilt tifsfilt.sys Thu Oct 11 03:24:46 2007 (470DCFBE)
fffffa60`05e45000 fffffa60`05edf000 spsys spsys.sys Thu Jun 21 21:02:05 2007 (467B1F8D)
fffffa60`05edf000 fffffa60`05ef3000 lltdio lltdio.sys Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`05ef3000 fffffa60`05f27000 nwifi nwifi.sys Mon May 19 22:33:46 2008 (4832388A)
fffffa60`05f27000 fffffa60`05f32000 ndisuio ndisuio.sys Sat Jan 19 01:36:29 2008 (47919A6D)
fffffa60`05f32000 fffffa60`05f4a000 rspndr rspndr.sys Sat Jan 19 01:35:48 2008 (47919A44)
fffffa60`05f4a000 fffffa60`05fe5000 HTTP HTTP.sys Sat Jan 19 01:36:22 2008 (47919A66)
fffffa60`05fe5000 fffffa60`05fff000 usbcir usbcir.sys Sat Jan 19 01:34:01 2008 (479199D9)
fffffa60`0680d000 fffffa60`06835000 srvnet srvnet.sys Sat Jan 19 00:56:38 2008 (47919116)
fffffa60`06835000 fffffa60`06853000 bowser bowser.sys Sat Jan 19 00:54:51 2008 (479190AB)
fffffa60`06853000 fffffa60`0686d000 mpsdrv mpsdrv.sys Sat Jan 19 01:35:28 2008 (47919A30)
fffffa60`0686d000 fffffa60`06894000 mrxdav mrxdav.sys Sat Jan 19 00:55:28 2008 (479190D0)
fffffa60`06894000 fffffa60`068bc000 mrxsmb mrxsmb.sys Sat Jan 19 00:55:21 2008 (479190C9)
fffffa60`068bc000 fffffa60`06905000 mrxsmb10 mrxsmb10.sys Wed May 07 23:26:31 2008 (482272E7)
fffffa60`06905000 fffffa60`06924000 mrxsmb20 mrxsmb20.sys Sat Jan 19 00:55:19 2008 (479190C7)
fffffa60`06924000 fffffa60`06955000 srv2 srv2.sys Sat Jan 19 00:56:40 2008 (47919118)
fffffa60`06955000 fffffa60`069e9000 srv srv.sys Tue Aug 26 21:27:57 2008 (48B4AD9D)
fffffa60`07606000 fffffa60`07622000 cdfs cdfs.sys Sat Jan 19 00:53:45 2008 (47919069)
fffffa60`07622000 fffffa60`0765f000 eamon eamon.sys Wed Nov 14 09:01:33 2007 (473AFFBD)
fffffa60`0765f000 fffffa60`0766a000 hidir hidir.sys Sat Jan 19 01:33:53 2008 (479199D1)
fffffa60`0766a000 fffffa60`07720000 peauth peauth.sys Mon Oct 23 07:57:00 2006 (453CAE0C)
fffffa60`07720000 fffffa60`0772f000 tcpipreg tcpipreg.sys Sat Jan 19 01:37:01 2008 (47919A8D)
fffffa60`0772f000 fffffa60`07754000 000 000.fcl Thu Oct 04 22:47:54 2007 (4705A5DA)
fffffa60`07754000 fffffa60`07774000 WUDFRd WUDFRd.sys Sat Jan 19 01:33:43 2008 (479199C7)
fffffa60`07774000 fffffa60`0778a000 WUDFPf WUDFPf.sys Sat Jan 19 01:33:22 2008 (479199B2)
fffffa60`0778a000 fffffa60`07794000 LVPr2M64 LVPr2M64.sys Sat Jul 26 11:07:46 2008 (488B3DC2)
fffffa60`07794000 fffffa60`077a1000 tdtcp tdtcp.sys Sat Jan 19 01:42:03 2008 (47919BBB)
fffffa60`077a1000 fffffa60`077af000 tssecsrv tssecsrv.sys Sat Jan 19 01:42:10 2008 (47919BC2)
fffffa60`077af000 fffffa60`077eb000 RDPWD RDPWD.SYS Sat Jan 19 01:42:20 2008 (47919BCC)
fffffa60`077eb000 fffffa60`077f6000 asyncmac asyncmac.sys Sat Jan 19 01:37:27 2008 (47919AA7)
fffffa60`08602000 fffffa60`08ad5b00 lvuvc64 lvuvc64.sys Sat Jul 26 11:09:49 2008 (488B3E3D)
fffffa60`08ad6000 fffffa60`08b0ed80 lvpopf64 lvpopf64.sys Sat Jul 26 11:08:20 2008 (488B3DE4)
fffffa60`08b0f000 fffffa60`08b27200 usbaudio usbaudio.sys Sat Jan 19 01:33:58 2008 (479199D6)
fffffa60`08b28000 fffffa60`08be7580 lvrs64 lvrs64.sys Sat Jul 26 11:09:02 2008 (488B3E0E)
fffffa60`08be8000 fffffa60`08bf0000 regi regi.sys Mon Apr 16 11:19:10 2007 (462393EE)
fffffa60`08bf0000 fffffa60`08bfb000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
Unloaded modules:
fffffa60`069e9000 fffffa60`069f6000 GPU-Z.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`08bfb000 fffffa60`08bfe000 MSKSSRV.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0740a000 fffffa60`07423000 usbaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`00ff0000 fffffa60`00ffe000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`00deb000 fffffa60`00df7000 dump_pciidex
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`01000000 fffffa60`0100a000 dump_msahci.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`00be0000 fffffa60`00bf3000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`04133000 fffffa60`0413d000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`04085000 fffffa60`04087000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0407a000 fffffa60`04085000 LVUSBS64.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`04078000 fffffa60`0407a000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0406d000 fffffa60`04078000 LVUSBS64.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`035c5000 fffffa60`035c7000 USBD.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`035ba000 fffffa60`035c5000 LVUSBS64.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`03292000 fffffa60`032a8000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file A:\D\#Dumps\markm75_hardware_10-06-08\$99-dbug.txt
.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
.