1. #1

    bsod

    Hello this are the 2 file result of the programs.Documents.rar


    • Ad Bot

      advertising
      Beep.

        
       

  2. #2
    jcgriff2's Avatar
    Join Date
    Feb 2012
    Location
    New Jersey Shore
    Posts
    15,851
    • specs System Specs
      • Manufacturer:
        HP
      • Model Number:
        HP ENVY TouchSmart 17-j130us Notebook - E8A04UA
      • Motherboard:
        HP Insyde 720265-501 6050A2549501-MB-A02
      • CPU:
        Intel Core i7-4700MQ Processor with Turbo Boost up to 3.4GHz.
      • Memory:
        12GB DDR3L SDRAM (2 DIMM)
      • Graphics:
        Intel HD graphics 4600 with up to 1792MB total graphics memory
      • Sound Card:
        Beats Audio quad speakers and two subwoofers
      • Hard Drives:
        1TB 5400RPM hard drive with HP ProtectSmart Hard Drive Protection
      • Disk Drives:
        Hitachi 500 GB SSD; 7 TB USB External
      • Power Supply:
        90w
      • Case:
        Laptop
      • Display:
        17.3-inch diagonal HD+ BrightView LED-backlit touchscreen display (1600 x 900)
      • Operating System:
        Windows 8.1

    Re: bsod

    Hi -


    Update your TP-LINK Wireless N Adapter driver -
    Code:
    athurx.sys       Wed Jul 28 08:01:39 2010 (4C501C23)
    The driver is written by Atheros - http://sysnative.com/drivers/driver.php?id=athurx.sys

    Try TP-Link support - http://www.tp-link.com/en/support/download/

    What other USB devices are plugged in?


    Regards. . .

    jcgriff2


    `


    BSOD SUMMARY

    Code:
    
    Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\072012-20467-01.dmp]
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Fri Jul 20 11:11:07.909 2012 (GMT-4)
    System Uptime: 0 days 0:10:43.752
    BugCheck 1000009F, {4, 258, fffffa8006779b50, fffff800044013d0}
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by : memory_corruption
    DEFAULT_BUCKET_ID:  CODE_CORRUPTION
    BUGCHECK_STR:  0x9F
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT_LARGE
    Bugcheck code 1000009F
    Arguments 00000000`00000004 00000000`00000258 fffffa80`06779b50 fffff800`044013d0
    BiosVersion = F3
    BiosReleaseDate = 04/13/2011
    SystemManufacturer = Gigabyte Technology Co., Ltd.
    SystemProductName = PH67A-D3-B3
    MaxSpeed:     3400
    CurrentSpeed: 3392
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    
      
    
    Code:
    Opened log file 'C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\_99-dbug.txt'
    
    Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\072012-20467-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?fffff8a0`00232722?
    DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?fffff8a0`0a4f3a12?
    Symbol search path is: a:\symbols
    Executable search path is: 
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Machine Name:
    Kernel base = 0xfffff800`0305a000 PsLoadedModuleList = 0xfffff800`0329e670
    Debug session time: Fri Jul 20 11:11:07.909 2012 (GMT-4)
    System Uptime: 0 days 0:10:43.752
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...............................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 1000009F, {4, 258, fffffa8006779b50, fffff800044013d0}
    
    *** WARNING: Unable to verify timestamp for win32k.sys
    *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
    Probably caused by : memory_corruption
    
    Followup: memory_corruption
    ---------
    
    0: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;!peb;!sysinfo cpuinfo;!sysinfo machineid; !sysinfo cpuspeed; !sysinfo smbios .logclose;q
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_POWER_STATE_FAILURE (9f)
    A driver is causing an inconsistent power state.
    Arguments:
    Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
    	subsystem.
    Arg2: 0000000000000258, Timeout in seconds.
    Arg3: fffffa8006779b50, The thread currently holding on to the Pnp lock.
    Arg4: fffff800044013d0
    
    Debugging Details:
    ------------------
    
    
    DRVPOWERSTATE_SUBCODE:  4
    
    FAULTING_THREAD:  fffffa8006779b50
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  CODE_CORRUPTION
    
    BUGCHECK_STR:  0x9F
    
    PROCESS_NAME:  System
    
    CURRENT_IRQL:  2
    
    LOCK_ADDRESS:  fffff800032d4b80 -- (!locks fffff800032d4b80)
    !locks fffff800032d4b80
    
    Resource @ nt!PiEngineLock (0xfffff800032d4b80)    Available
    
    WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.
    
    
    WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.
    
    1 total locks
    
    PNP_TRIAGE: 
    	Lock address  : 0xfffff800032d4b80
    	Thread Count  : 0
    	Thread address: 0x0000000000000000
    	Thread wait   : 0x0
    
    LAST_CONTROL_TRANSFER:  from fffff800030cebd2 to fffff800030dc07a
    
    STACK_TEXT:  
    fffff880`03369150 fffff800`030cebd2 : fffffa80`06779b50 fffffa80`06779b50 00000000`00000000 fffff880`00000004 : nt!KiSwapContext+0x7a
    fffff880`03369290 fffff800`030def82 : fffffa80`0677a050 fffff880`04876f92 00000000`00000031 00000000`50747270 : nt!KiCommitThreadWait+0x1d2
    fffff880`03369320 fffff880`04874a07 : 00000000`002dc6c0 00000000`74696177 fffff880`048b6100 fffffa80`00000031 : nt!KeDelayExecutionThread+0x186
    fffff880`03369390 fffff880`048775e4 : 00000000`00000000 00000000`00000000 ffffffff`ffcfd7e0 fffff880`0487bec9 : usbhub!UsbhWait+0x4f
    fffff880`033693d0 fffff880`04886140 : fffffa80`0677a050 fffff880`048b6110 fffffa80`0677a1a0 00000000`00000000 : usbhub!UsbhSyncPowerOnPorts+0xac
    fffff880`03369410 fffff880`04898542 : fffffa80`0677a708 00000000`00000004 00000000`00000004 fffff880`04897556 : usbhub!UsbhFinishStart+0x70
    fffff880`03369490 fffff880`048979b7 : 00000000`00000000 00000000`00000004 fffffa80`0677a708 fffffa80`0677a000 : usbhub!UsbhHubStart+0x24a
    fffff880`033694e0 fffff880`04897fe6 : fffffa80`0677a1a0 fffffa80`0677a1a0 fffffa80`0677a708 fffffa80`09901b30 : usbhub!Usbh_FDO_WaitPnpStart+0x163
    fffff880`03369530 fffff880`0489a03f : 00000000`00000000 fffffa80`09901b30 fffffa80`0676c0b8 00000000`0000009a : usbhub!Usbh_FDO_Pnp_State+0x6e
    fffff880`03369570 fffff880`04898929 : fffffa80`0677a1a0 fffffa80`0677a050 fffffa80`09901df8 00000000`00000000 : usbhub!UsbhFdoPnp_StartDevice+0x143
    fffff880`033695f0 fffff880`04874fdf : fffffa80`09901b30 00000001`03369600 fffffa80`097bd390 fffffa80`0677a050 : usbhub!UsbhFdoPnp+0x9d
    fffff880`03369620 fffff800`0348f03e : 00000000`00000000 fffffa80`09da3060 fffffa80`097bd390 fffff880`009b3180 : usbhub!UsbhGenDispatch+0x7f
    fffff880`03369650 fffff800`031c6e6d : fffffa80`09da3060 fffffa80`097bd390 fffff800`031d0590 00000000`00000000 : nt!PnpAsynchronousCall+0xce
    fffff880`03369690 fffff800`0349e386 : fffff800`032d4940 fffffa80`074f77e0 fffffa80`097bd390 fffffa80`074f7988 : nt!PnpStartDevice+0x11d
    fffff880`03369750 fffff800`0349e624 : fffffa80`074f77e0 fffffa80`06780024 fffffa80`06787d90 00000000`00000001 : nt!PnpStartDeviceNode+0x156
    fffff880`033697e0 fffff800`034c1d56 : fffffa80`074f77e0 fffffa80`06787d90 00000000`00000002 00000000`00000000 : nt!PipProcessStartPhase1+0x74
    fffff880`03369810 fffff800`034c22e8 : 00000000`00000000 fffff800`031cf536 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x296
    fffff880`03369a80 fffff800`031d2ed7 : 00000001`00000003 00000000`00000000 00000000`00000001 fffffa80`00000084 : nt!PiProcessReenumeration+0x98
    fffff880`03369ad0 fffff800`030e2841 : fffff800`031d2bb0 fffff800`033cb601 fffffa80`06779b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
    fffff880`03369b70 fffff800`0336fe6a : 00000000`00000000 fffffa80`06779b50 00000000`00000080 fffffa80`06706040 : nt!ExpWorkerThread+0x111
    fffff880`03369c00 fffff800`030c9ec6 : fffff880`03174180 fffffa80`06779b50 fffff880`0317f0c0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`03369c40 00000000`00000000 : fffff880`0336a000 fffff880`03364000 fffff880`03367670 00000000`00000000 : nt!KxStartSystemThread+0x16
    
    
    STACK_COMMAND:  .thread 0xfffffa8006779b50 ; kb
    
    CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    !chkimg -lo 50 -d !nt
        fffff800030dc3a2 - nt!SwapContext_PatchXSave+2
    
    	[ 01:21 ]
        fffff800030dc486 - nt!SwapContext_PatchXRstor+2 (+0xe4)
    
    	[ 09:29 ]
        fffff800030dc642 - nt!EnlightenedSwapContext_PatchXSave+2 (+0x1bc)
    
    	[ 01:21 ]
        fffff800030dc728 - nt!EnlightenedSwapContext_PatchXRstor+2 (+0xe6)
    
    	[ 09:29 ]
    4 errors : !nt (fffff800030dc3a2-fffff800030dc728)
    
    MODULE_NAME: memory_corruption
    
    IMAGE_NAME:  memory_corruption
    
    FOLLOWUP_NAME:  memory_corruption
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    MEMORY_CORRUPTOR:  ONE_BIT_LARGE
    
    FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT_LARGE
    
    BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT_LARGE
    
    Followup: memory_corruption
    ---------
    
    rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff800030dc07a rsp=fffff88003369150 rbp=fffffa8006779b50
     r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
    r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up di pl nz na pe nc
    cs=0000  ss=0000  ds=0000  es=0000  fs=0000  gs=0000             efl=00000000
    nt!KiSwapContext+0x7a:
    fffff800`030dc07a 488d8c2400010000 lea     rcx,[rsp+100h]
    Child-SP          RetAddr           : Args to Child                                                           : Call Site
    fffff880`03369150 fffff800`030cebd2 : fffffa80`06779b50 fffffa80`06779b50 00000000`00000000 fffff880`00000004 : nt!KiSwapContext+0x7a
    fffff880`03369290 fffff800`030def82 : fffffa80`0677a050 fffff880`04876f92 00000000`00000031 00000000`50747270 : nt!KiCommitThreadWait+0x1d2
    fffff880`03369320 fffff880`04874a07 : 00000000`002dc6c0 00000000`74696177 fffff880`048b6100 fffffa80`00000031 : nt!KeDelayExecutionThread+0x186
    fffff880`03369390 fffff880`048775e4 : 00000000`00000000 00000000`00000000 ffffffff`ffcfd7e0 fffff880`0487bec9 : usbhub!UsbhWait+0x4f
    fffff880`033693d0 fffff880`04886140 : fffffa80`0677a050 fffff880`048b6110 fffffa80`0677a1a0 00000000`00000000 : usbhub!UsbhSyncPowerOnPorts+0xac
    fffff880`03369410 fffff880`04898542 : fffffa80`0677a708 00000000`00000004 00000000`00000004 fffff880`04897556 : usbhub!UsbhFinishStart+0x70
    fffff880`03369490 fffff880`048979b7 : 00000000`00000000 00000000`00000004 fffffa80`0677a708 fffffa80`0677a000 : usbhub!UsbhHubStart+0x24a
    fffff880`033694e0 fffff880`04897fe6 : fffffa80`0677a1a0 fffffa80`0677a1a0 fffffa80`0677a708 fffffa80`09901b30 : usbhub!Usbh_FDO_WaitPnpStart+0x163
    fffff880`03369530 fffff880`0489a03f : 00000000`00000000 fffffa80`09901b30 fffffa80`0676c0b8 00000000`0000009a : usbhub!Usbh_FDO_Pnp_State+0x6e
    fffff880`03369570 fffff880`04898929 : fffffa80`0677a1a0 fffffa80`0677a050 fffffa80`09901df8 00000000`00000000 : usbhub!UsbhFdoPnp_StartDevice+0x143
    fffff880`033695f0 fffff880`04874fdf : fffffa80`09901b30 00000001`03369600 fffffa80`097bd390 fffffa80`0677a050 : usbhub!UsbhFdoPnp+0x9d
    fffff880`03369620 fffff800`0348f03e : 00000000`00000000 fffffa80`09da3060 fffffa80`097bd390 fffff880`009b3180 : usbhub!UsbhGenDispatch+0x7f
    fffff880`03369650 fffff800`031c6e6d : fffffa80`09da3060 fffffa80`097bd390 fffff800`031d0590 00000000`00000000 : nt!PnpAsynchronousCall+0xce
    fffff880`03369690 fffff800`0349e386 : fffff800`032d4940 fffffa80`074f77e0 fffffa80`097bd390 fffffa80`074f7988 : nt!PnpStartDevice+0x11d
    fffff880`03369750 fffff800`0349e624 : fffffa80`074f77e0 fffffa80`06780024 fffffa80`06787d90 00000000`00000001 : nt!PnpStartDeviceNode+0x156
    fffff880`033697e0 fffff800`034c1d56 : fffffa80`074f77e0 fffffa80`06787d90 00000000`00000002 00000000`00000000 : nt!PipProcessStartPhase1+0x74
    fffff880`03369810 fffff800`034c22e8 : 00000000`00000000 fffff800`031cf536 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x296
    fffff880`03369a80 fffff800`031d2ed7 : 00000001`00000003 00000000`00000000 00000000`00000001 fffffa80`00000084 : nt!PiProcessReenumeration+0x98
    fffff880`03369ad0 fffff800`030e2841 : fffff800`031d2bb0 fffff800`033cb601 fffffa80`06779b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
    fffff880`03369b70 fffff800`0336fe6a : 00000000`00000000 fffffa80`06779b50 00000000`00000080 fffffa80`06706040 : nt!ExpWorkerThread+0x111
    start             end                 module name
    fffff800`00b9b000 fffff800`00ba5000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
    fffff800`03011000 fffff800`0305a000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
    fffff800`0305a000 fffff800`03642000   nt       ntkrnlmp.exe Fri May 04 04:18:59 2012 (4FA390F3)
    fffff880`00c00000 fffff880`00c09000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00c09000 fffff880`00c33000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
    fffff880`00c33000 fffff880`00c3e000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
    fffff880`00c62000 fffff880`00cb1000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
    fffff880`00cb1000 fffff880`00cc5000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`00cc5000 fffff880`00d23000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`00d23000 fffff880`00de3000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
    fffff880`00de3000 fffff880`00dfd000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
    fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
    fffff880`00e5e000 fffff880`00f02000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00f02000 fffff880`00f11000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`00f11000 fffff880`00f68000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
    fffff880`00f68000 fffff880`00f71000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`00f71000 fffff880`00f7b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`00f7b000 fffff880`00fae000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
    fffff880`00fae000 fffff880`00fbb000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`00fbb000 fffff880`00fd0000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
    fffff880`00fd0000 fffff880`00fe5000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
    fffff880`00fe5000 fffff880`00fec000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
    fffff880`00fec000 fffff880`00ffc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`01000000 fffff880`01043000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
    fffff880`0104c000 fffff880`01098000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
    fffff880`01098000 fffff880`010ac000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`010ac000 fffff880`0110a000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
    fffff880`0110a000 fffff880`0117c000   cng      cng.sys      Fri Jun 01 23:25:51 2012 (4FC987BF)
    fffff880`0117c000 fffff880`0118d000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`0118d000 fffff880`0119c000   avgfwd6a avgfwd6a.sys Sun May 22 18:33:25 2011 (4DD98F35)
    fffff880`0119c000 fffff880`011be000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
    fffff880`011be000 fffff880`011cb000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
    fffff880`011cb000 fffff880`011f2000   SCDEmu   SCDEmu.SYS   Wed May 30 21:33:23 2012 (4FC6CA63)
    fffff880`01200000 fffff880`0121b000   ksecdd   ksecdd.sys   Fri Jun 01 22:50:23 2012 (4FC97F6F)
    fffff880`0121b000 fffff880`0122c000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`0122c000 fffff880`01236000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
    fffff880`01236000 fffff880`0123f000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`0123f000 fffff880`01248000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`01248000 fffff880`01253000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`0125d000 fffff880`01400000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
    fffff880`01400000 fffff880`01409000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`01409000 fffff880`01410000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`01410000 fffff880`0141c000   avgtpx64 avgtpx64.sys Tue Jul 03 08:33:58 2012 (4FF2E6B6)
    fffff880`0141c000 fffff880`0142a000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`0142a000 fffff880`0144f000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`0144f000 fffff880`0145f000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`0145f000 fffff880`01468000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`01470000 fffff880`01563000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
    fffff880`01563000 fffff880`015c3000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
    fffff880`015c3000 fffff880`015ed000   ksecpkg  ksecpkg.sys  Fri Jun 01 23:27:11 2012 (4FC9880F)
    fffff880`015ed000 fffff880`015fd000   avgmfx64 avgmfx64.sys Sun Aug 07 23:41:46 2011 (4E3F5AFA)
    fffff880`01600000 fffff880`01615000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`01628000 fffff880`01652000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
    fffff880`01655000 fffff880`01858000   tcpip    tcpip.sys    Fri Mar 30 04:34:26 2012 (4F757012)
    fffff880`01858000 fffff880`018a2000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
    fffff880`018a2000 fffff880`018b2000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
    fffff880`018b2000 fffff880`018fe000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
    fffff880`018fe000 fffff880`01906000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`01906000 fffff880`01940000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
    fffff880`01940000 fffff880`01952000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`01952000 fffff880`0195b000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
    fffff880`0195b000 fffff880`01995000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
    fffff880`01995000 fffff880`019ab000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`019ab000 fffff880`019db000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
    fffff880`019db000 fffff880`019e7000   avgrkx64 avgrkx64.sys Tue Sep 13 00:02:34 2011 (4E6ED5DA)
    fffff880`019e7000 fffff880`019f1000   AVGIDSEH AVGIDSEH.Sys Sun Jul 10 18:36:50 2011 (4E1A2982)
    fffff880`02c00000 fffff880`02c26000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
    fffff880`02c26000 fffff880`02c3c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
    fffff880`02c3c000 fffff880`02c4b000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`02c4b000 fffff880`02c68000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`02c68000 fffff880`02c83000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
    fffff880`02c83000 fffff880`02c97000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
    fffff880`02c97000 fffff880`02ca6000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`02ca6000 fffff880`02cb8000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
    fffff880`02cb8000 fffff880`02d18000   avgtdia  avgtdia.sys  Sun Jul 10 18:46:53 2011 (4E1A2BDD)
    fffff880`02d18000 fffff880`02d5d000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
    fffff880`02d5d000 fffff880`02de6000   afd      afd.sys      Tue Dec 27 22:59:20 2011 (4EFA9418)
    fffff880`02de6000 fffff880`02def000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`04000000 fffff880`04021000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
    fffff880`04021000 fffff880`0403b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`04048000 fffff880`04099000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
    fffff880`04099000 fffff880`040a5000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff880`040a5000 fffff880`040b0000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`040b0000 fffff880`040bf000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`040bf000 fffff880`04142000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
    fffff880`04142000 fffff880`04160000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
    fffff880`04160000 fffff880`04171000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`04171000 fffff880`041ba000   avgldx64 avgldx64.sys Thu Oct 06 23:55:41 2011 (4E8E783D)
    fffff880`041ba000 fffff880`041c2000   AppleCharger AppleCharger.sys Tue Nov 01 22:46:00 2011 (4EB0AEE8)
    fffff880`041c2000 fffff880`041e8000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
    fffff880`041e8000 fffff880`041fe000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`04200000 fffff880`04211000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
    fffff880`04211000 fffff880`04267000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
    fffff880`04267000 fffff880`0427bb00   EtronXHCI EtronXHCI.sys Fri Feb 03 06:23:49 2012 (4F2BC3C5)
    fffff880`04283000 fffff880`04377000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
    fffff880`04377000 fffff880`043bd000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
    fffff880`043bd000 fffff880`043e1000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
    fffff880`043e1000 fffff880`043f2000   HECIx64  HECIx64.sys  Tue Oct 19 19:33:43 2010 (4CBE2AD7)
    fffff880`043f2000 fffff880`043fe000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`043fe000 fffff880`043ff480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`04800000 fffff880`04813000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`04813000 fffff880`0481f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`0481f000 fffff880`0482d000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`0482d000 fffff880`04850000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`04850000 fffff880`04871000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
    fffff880`04873000 fffff880`048cd000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
    fffff880`048cd000 fffff880`048db880   EtronHub3 EtronHub3.sys Fri Feb 03 06:23:55 2012 (4F2BC3CB)
    fffff880`048dc000 fffff880`048ddf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`048de000 fffff880`048f3000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
    fffff880`048f3000 fffff880`04925000   nvhda64v nvhda64v.sys Tue Jan 17 07:45:46 2012 (4F156D7A)
    fffff880`04925000 fffff880`04962000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`04962000 fffff880`04984000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`04984000 fffff880`04989200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`0498a000 fffff880`049a3000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
    fffff880`049a3000 fffff880`049c0000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
    fffff880`049c0000 fffff880`049cd000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`049cd000 fffff880`049db000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
    fffff880`049db000 fffff880`049f6000   USBSTOR  USBSTOR.SYS  Sat Nov 20 05:44:05 2010 (4CE7A675)
    fffff880`04e00000 fffff880`04e0e000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
    fffff880`04e0e000 fffff880`04e16080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`04e17000 fffff880`04e23000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`04e23000 fffff880`051f5b80   RTKVHD64 RTKVHD64.sys Tue Mar 27 05:01:50 2012 (4F7181FE)
    fffff880`05200000 fffff880`053db000   athurx   athurx.sys   Wed Jul 28 08:01:39 2010 (4C501C23)
    fffff880`053db000 fffff880`053e8000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
    fffff880`053e8000 fffff880`053f6000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`053f6000 fffff880`053ff000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`05a00000 fffff880`05a2d000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)
    fffff880`05a46000 fffff880`05a99000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
    fffff880`05a99000 fffff880`05aac000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
    fffff880`05aac000 fffff880`05ac4000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`05ac4000 fffff880`05afa000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
    fffff880`05afa000 fffff880`05bc3000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
    fffff880`05bc3000 fffff880`05be1000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
    fffff880`05be1000 fffff880`05bf9000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`06e00000 fffff880`06ea6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`06ea6000 fffff880`06eb1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`06eb1000 fffff880`06ee2000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)
    fffff880`06ee6000 fffff880`06f34000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
    fffff880`06f34000 fffff880`06f58000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
    fffff880`06f58000 fffff880`06f63000   AVGIDSFilter AVGIDSFilter.Sys Sun Jul 10 18:37:05 2011 (4E1A2991)
    fffff880`06f63000 fffff880`06f75000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
    fffff880`06f75000 fffff880`06fa0000   AVGIDSDriver AVGIDSDriver.Sys Sun Jul 10 18:36:37 2011 (4E1A2975)
    fffff880`0745a000 fffff880`074c3000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)
    fffff880`074c3000 fffff880`0755b000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)
    fffff880`0755b000 fffff880`0758c000   WUDFRd   WUDFRd.sys   Sat Nov 20 05:43:32 2010 (4CE7A654)
    fffff880`0f000000 fffff880`0f02f000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
    fffff880`0f02f000 fffff880`0f04a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`0f04a000 fffff880`0f055000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
    fffff880`0f056000 fffff880`0fd74000   nvlddmkm nvlddmkm.sys Wed Feb 29 13:04:52 2012 (4F4E68C4)
    fffff880`0fd74000 fffff880`0fd91000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`0fd91000 fffff880`0fda1000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
    fffff880`0fda1000 fffff880`0fdb7000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`0fdb7000 fffff880`0fddb000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
    fffff880`0fddb000 fffff880`0fde7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`0fde7000 fffff880`0fdf6000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff960`000e0000 fffff960`003f5000   win32k   win32k.sys   unavailable (00000000)
    fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    unavailable (00000000)
    fffff960`00790000 fffff960`007b7000   cdd      cdd.dll      unavailable (00000000)
    fffff960`00800000 fffff960`00861000   ATMFD    ATMFD.DLL    unavailable (00000000)
    
    Unloaded modules:
    fffff880`019f1000 fffff880`019ff000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    fffff880`01600000 fffff880`0160c000   dump_ataport
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    fffff880`0160c000 fffff880`01615000   dump_atapi.s
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    fffff880`01615000 fffff880`01628000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    start             end                 module name
    fffff880`00f11000 fffff880`00f68000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
    fffff880`02d5d000 fffff880`02de6000   afd      afd.sys      Tue Dec 27 22:59:20 2011 (4EFA9418)
    fffff880`0fda1000 fffff880`0fdb7000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
    fffff880`00c33000 fffff880`00c3e000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
    fffff880`041ba000 fffff880`041c2000   AppleCharger AppleCharger.sys Tue Nov 01 22:46:00 2011 (4EB0AEE8)
    fffff880`00c00000 fffff880`00c09000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00c09000 fffff880`00c33000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
    fffff880`05200000 fffff880`053db000   athurx   athurx.sys   Wed Jul 28 08:01:39 2010 (4C501C23)
    fffff960`00800000 fffff960`00861000   ATMFD    ATMFD.DLL    unavailable (00000000)
    fffff880`0118d000 fffff880`0119c000   avgfwd6a avgfwd6a.sys Sun May 22 18:33:25 2011 (4DD98F35)
    fffff880`06f75000 fffff880`06fa0000   AVGIDSDriver AVGIDSDriver.Sys Sun Jul 10 18:36:37 2011 (4E1A2975)
    fffff880`019e7000 fffff880`019f1000   AVGIDSEH AVGIDSEH.Sys Sun Jul 10 18:36:50 2011 (4E1A2982)
    fffff880`06f58000 fffff880`06f63000   AVGIDSFilter AVGIDSFilter.Sys Sun Jul 10 18:37:05 2011 (4E1A2991)
    fffff880`04171000 fffff880`041ba000   avgldx64 avgldx64.sys Thu Oct 06 23:55:41 2011 (4E8E783D)
    fffff880`015ed000 fffff880`015fd000   avgmfx64 avgmfx64.sys Sun Aug 07 23:41:46 2011 (4E3F5AFA)
    fffff880`019db000 fffff880`019e7000   avgrkx64 avgrkx64.sys Tue Sep 13 00:02:34 2011 (4E6ED5DA)
    fffff880`02cb8000 fffff880`02d18000   avgtdia  avgtdia.sys  Sun Jul 10 18:46:53 2011 (4E1A2BDD)
    fffff880`01410000 fffff880`0141c000   avgtpx64 avgtpx64.sys Tue Jul 03 08:33:58 2012 (4FF2E6B6)
    fffff880`01409000 fffff880`01410000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
    fffff880`04160000 fffff880`04171000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
    fffff880`05bc3000 fffff880`05be1000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
    fffff960`00790000 fffff960`007b7000   cdd      cdd.dll      unavailable (00000000)
    fffff880`01628000 fffff880`01652000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
    fffff880`00d23000 fffff880`00de3000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
    fffff880`019ab000 fffff880`019db000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
    fffff880`00cc5000 fffff880`00d23000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`0110a000 fffff880`0117c000   cng      cng.sys      Fri Jun 01 23:25:51 2012 (4FC987BF)
    fffff880`0fd91000 fffff880`0fda1000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
    fffff880`053e8000 fffff880`053f6000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
    fffff880`040bf000 fffff880`04142000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
    fffff880`04142000 fffff880`04160000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
    fffff880`040b0000 fffff880`040bf000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
    fffff880`01995000 fffff880`019ab000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
    fffff880`04962000 fffff880`04984000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
    fffff880`053f6000 fffff880`053ff000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`04e17000 fffff880`04e23000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`04800000 fffff880`04813000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
    fffff880`04813000 fffff880`0481f000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
    fffff880`04283000 fffff880`04377000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
    fffff880`04377000 fffff880`043bd000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
    fffff880`048cd000 fffff880`048db880   EtronHub3 EtronHub3.sys Fri Feb 03 06:23:55 2012 (4F2BC3CB)
    fffff880`04267000 fffff880`0427bb00   EtronXHCI EtronXHCI.sys Fri Feb 03 06:23:49 2012 (4F2BC3C5)
    fffff880`05ac4000 fffff880`05afa000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
    fffff880`01098000 fffff880`010ac000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
    fffff880`0104c000 fffff880`01098000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
    fffff880`0122c000 fffff880`01236000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
    fffff880`0195b000 fffff880`01995000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
    fffff880`01858000 fffff880`018a2000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
    fffff800`03011000 fffff800`0305a000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
    fffff880`043bd000 fffff880`043e1000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
    fffff880`043e1000 fffff880`043f2000   HECIx64  HECIx64.sys  Tue Oct 19 19:33:43 2010 (4CBE2AD7)
    fffff880`0498a000 fffff880`049a3000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
    fffff880`04e0e000 fffff880`04e16080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
    fffff880`04e00000 fffff880`04e0e000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
    fffff880`05afa000 fffff880`05bc3000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
    fffff880`01952000 fffff880`0195b000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
    fffff880`041e8000 fffff880`041fe000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
    fffff880`0fde7000 fffff880`0fdf6000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`049cd000 fffff880`049db000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
    fffff800`00b9b000 fffff800`00ba5000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
    fffff880`01000000 fffff880`01043000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
    fffff880`01200000 fffff880`0121b000   ksecdd   ksecdd.sys   Fri Jun 01 22:50:23 2012 (4FC97F6F)
    fffff880`015c3000 fffff880`015ed000   ksecpkg  ksecpkg.sys  Fri Jun 01 23:27:11 2012 (4FC9880F)
    fffff880`04984000 fffff880`04989200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
    fffff880`01600000 fffff880`01615000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`0482d000 fffff880`04850000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
    fffff880`00c62000 fffff880`00cb1000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
    fffff880`0481f000 fffff880`0482d000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
    fffff880`02c97000 fffff880`02ca6000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
    fffff880`049c0000 fffff880`049cd000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
    fffff880`00de3000 fffff880`00dfd000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
    fffff880`05be1000 fffff880`05bf9000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
    fffff880`05a00000 fffff880`05a2d000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)
    fffff880`06ee6000 fffff880`06f34000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
    fffff880`06f34000 fffff880`06f58000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
    fffff880`01248000 fffff880`01253000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
    fffff880`00f71000 fffff880`00f7b000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
    fffff880`010ac000 fffff880`0110a000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
    fffff880`040a5000 fffff880`040b0000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
    fffff880`01940000 fffff880`01952000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
    fffff880`01470000 fffff880`01563000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
    fffff880`0fddb000 fffff880`0fde7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
    fffff880`05a99000 fffff880`05aac000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
    fffff880`0f000000 fffff880`0f02f000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
    fffff880`048de000 fffff880`048f3000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
    fffff880`02c3c000 fffff880`02c4b000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff880`02d18000 fffff880`02d5d000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
    fffff880`01563000 fffff880`015c3000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
    fffff880`0117c000 fffff880`0118d000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`04099000 fffff880`040a5000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
    fffff800`0305a000 fffff800`03642000   nt       ntkrnlmp.exe Fri May 04 04:18:59 2012 (4FA390F3)
    fffff880`0125d000 fffff880`01400000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
    fffff880`01400000 fffff880`01409000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
    fffff880`048f3000 fffff880`04925000   nvhda64v nvhda64v.sys Tue Jan 17 07:45:46 2012 (4F156D7A)
    fffff880`0f056000 fffff880`0fd74000   nvlddmkm nvlddmkm.sys Wed Feb 29 13:04:52 2012 (4F4E68C4)
    fffff880`05a46000 fffff880`05a99000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
    fffff880`02c00000 fffff880`02c26000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
    fffff880`0fd74000 fffff880`0fd91000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`00fbb000 fffff880`00fd0000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
    fffff880`00f7b000 fffff880`00fae000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
    fffff880`00fe5000 fffff880`00fec000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
    fffff880`00fec000 fffff880`00ffc000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
    fffff880`0121b000 fffff880`0122c000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
    fffff880`06e00000 fffff880`06ea6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
    fffff880`04925000 fffff880`04962000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
    fffff880`00cb1000 fffff880`00cc5000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
    fffff880`0fdb7000 fffff880`0fddb000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
    fffff880`0f02f000 fffff880`0f04a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
    fffff880`04000000 fffff880`04021000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
    fffff880`04021000 fffff880`0403b000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
    fffff880`04048000 fffff880`04099000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
    fffff880`0f04a000 fffff880`0f055000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
    fffff880`0145f000 fffff880`01468000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`01236000 fffff880`0123f000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
    fffff880`0123f000 fffff880`01248000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
    fffff880`01906000 fffff880`01940000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
    fffff880`05aac000 fffff880`05ac4000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
    fffff880`04e23000 fffff880`051f5b80   RTKVHD64 RTKVHD64.sys Tue Mar 27 05:01:50 2012 (4F7181FE)
    fffff880`011cb000 fffff880`011f2000   SCDEmu   SCDEmu.SYS   Wed May 30 21:33:23 2012 (4FC6CA63)
    fffff880`06ea6000 fffff880`06eb1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
    fffff880`043f2000 fffff880`043fe000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
    fffff880`02c4b000 fffff880`02c68000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
    fffff880`018fe000 fffff880`01906000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
    fffff880`074c3000 fffff880`0755b000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)
    fffff880`0745a000 fffff880`074c3000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)
    fffff880`06eb1000 fffff880`06ee2000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)
    fffff880`043fe000 fffff880`043ff480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
    fffff880`01655000 fffff880`01858000   tcpip    tcpip.sys    Fri Mar 30 04:34:26 2012 (4F757012)
    fffff880`06f63000 fffff880`06f75000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
    fffff880`011be000 fffff880`011cb000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
    fffff880`0119c000 fffff880`011be000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
    fffff880`02c83000 fffff880`02c97000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
    fffff960`00440000 fffff960`0044a000   TSDDD    TSDDD.dll    unavailable (00000000)
    fffff880`041c2000 fffff880`041e8000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
    fffff880`02ca6000 fffff880`02cb8000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
    fffff880`049a3000 fffff880`049c0000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
    fffff880`048dc000 fffff880`048ddf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
    fffff880`04200000 fffff880`04211000   usbehci  usbehci.sys  Sat Nov 20 05:43:54 2010 (4CE7A66A)
    fffff880`04873000 fffff880`048cd000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
    fffff880`04211000 fffff880`04267000   USBPORT  USBPORT.SYS  Sat Nov 20 05:44:00 2010 (4CE7A670)
    fffff880`049db000 fffff880`049f6000   USBSTOR  USBSTOR.SYS  Sat Nov 20 05:44:05 2010 (4CE7A675)
    fffff880`00fae000 fffff880`00fbb000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
    fffff880`0141c000 fffff880`0142a000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
    fffff880`0142a000 fffff880`0144f000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
    fffff880`018a2000 fffff880`018b2000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
    fffff880`00fd0000 fffff880`00fe5000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
    fffff880`00e00000 fffff880`00e5c000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
    fffff880`018b2000 fffff880`018fe000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
    fffff880`053db000 fffff880`053e8000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
    fffff880`02c26000 fffff880`02c3c000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
    fffff880`02c68000 fffff880`02c83000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
    fffff880`0144f000 fffff880`0145f000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
    fffff880`00e5e000 fffff880`00f02000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
    fffff880`00f02000 fffff880`00f11000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
    fffff880`02de6000 fffff880`02def000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
    fffff960`000e0000 fffff960`003f5000   win32k   win32k.sys   unavailable (00000000)
    fffff880`00f68000 fffff880`00f71000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
    fffff880`04850000 fffff880`04871000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
    fffff880`0755b000 fffff880`0758c000   WUDFRd   WUDFRd.sys   Sat Nov 20 05:43:32 2010 (4CE7A654)
    
    Unloaded modules:
    fffff880`019f1000 fffff880`019ff000   crashdmp.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    fffff880`01600000 fffff880`0160c000   dump_ataport
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    fffff880`0160c000 fffff880`01615000   dump_atapi.s
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    fffff880`01615000 fffff880`01628000   dump_dumpfve
        Timestamp: unavailable (00000000)
        Checksum:  00000000
    Bugcheck code 1000009F
    Arguments 00000000`00000004 00000000`00000258 fffffa80`06779b50 fffff800`044013d0
    PEB NULL...
    [CPU Information]
    ~MHz = REG_DWORD 3392
    Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
    Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
    Identifier = REG_SZ Intel64 Family 6 Model 42 Stepping 7
    ProcessorNameString = REG_SZ Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
    Update Signature = REG_BINARY 0,0,0,0,14,0,0,0
    Update Status = REG_DWORD 2
    VendorIdentifier = REG_SZ GenuineIntel
    MSR8B = REG_QWORD 1400000000
    Machine ID Information [From Smbios 2.4, DMIVersion 36, Size=1173]
    BiosVendor = Award Software International, Inc.
    BiosVersion = F3
    BiosReleaseDate = 04/13/2011
    SystemManufacturer = Gigabyte Technology Co., Ltd.
    SystemProductName = PH67A-D3-B3
    SystemFamily =  
    SystemVersion =  
    SystemSKU =  
    BaseBoardManufacturer = Gigabyte Technology Co., Ltd.
    BaseBoardProduct = PH67A-D3-B3
    BaseBoardVersion = x.x
    CPUID:        "Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3392
    dump smbios [-csv | -v | -headers | -devices | -memory | -power | -cpu | -system]
    quit:
    
    
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    writhziden says thanks for this.

    BSOD Posting Instructions - Windows 10, 8.1, 8, 7 & Vista ` ` `Carrona Driver Reference Table (DRT)
    https://www.sysnative.com/
    Sysnative Hex-Decimal-UNIX Date Conversion

    Has Sysnative Forums helped you?
    Please consider donating to help support the forum.
    Thank You!

    Microsoft MVP 2009-2015

  3. #3

    Re: bsod

    Hello and welcome to Sysnative!

    The dump attached is a 9F: DRIVER_POWER_STATE_FAILURE bugcheck that is pointing to memory corruption as the fault. Given that there are a few mentions of usbhub! in the stack:

    STACK_TEXT:
    fffff880`03369150 fffff800`030cebd2 : fffffa80`06779b50 fffffa80`06779b50 00000000`00000000 fffff880`00000004 : nt!KiSwapContext+0x7a
    fffff880`03369290 fffff800`030def82 : fffffa80`0677a050 fffff880`04876f92 00000000`00000031 00000000`50747270 : nt!KiCommitThreadWait+0x1d2
    fffff880`03369320 fffff880`04874a07 : 00000000`002dc6c0 00000000`74696177 fffff880`048b6100 fffffa80`00000031 : nt!KeDelayExecutionThread+0x186
    fffff880`03369390 fffff880`048775e4 : 00000000`00000000 00000000`00000000 ffffffff`ffcfd7e0 fffff880`0487bec9 : usbhub!UsbhWait+0x4f
    fffff880`033693d0 fffff880`04886140 : fffffa80`0677a050 fffff880`048b6110 fffffa80`0677a1a0 00000000`00000000 : usbhub!UsbhSyncPowerOnPorts+0xac
    fffff880`03369410 fffff880`04898542 : fffffa80`0677a708 00000000`00000004 00000000`00000004 fffff880`04897556 : usbhub!UsbhFinishStart+0x70
    fffff880`03369490 fffff880`048979b7 : 00000000`00000000 00000000`00000004 fffffa80`0677a708 fffffa80`0677a000 : usbhub!UsbhHubStart+0x24a
    fffff880`033694e0 fffff880`04897fe6 : fffffa80`0677a1a0 fffffa80`0677a1a0 fffffa80`0677a708 fffffa80`09901b30 : usbhub!Usbh_FDO_WaitPnpStart+0x163
    fffff880`03369530 fffff880`0489a03f : 00000000`00000000 fffffa80`09901b30 fffffa80`0676c0b8 00000000`0000009a : usbhub!Usbh_FDO_Pnp_State+0x6e
    fffff880`03369570 fffff880`04898929 : fffffa80`0677a1a0 fffffa80`0677a050 fffffa80`09901df8 00000000`00000000 : usbhub!UsbhFdoPnp_StartDevice+0x143
    fffff880`033695f0 fffff880`04874fdf : fffffa80`09901b30 00000001`03369600 fffffa80`097bd390 fffffa80`0677a050 : usbhub!UsbhFdoPnp+0x9d
    fffff880`03369620 fffff800`0348f03e : 00000000`00000000 fffffa80`09da3060 fffffa80`097bd390 fffff880`009b3180 : usbhub!UsbhGenDispatch+0x7f
    fffff880`03369650 fffff800`031c6e6d : fffffa80`09da3060 fffffa80`097bd390 fffff800`031d0590 00000000`00000000 : nt!PnpAsynchronousCall+0xce
    fffff880`03369690 fffff800`0349e386 : fffff800`032d4940 fffffa80`074f77e0 fffffa80`097bd390 fffffa80`074f7988 : nt!PnpStartDevice+0x11d
    fffff880`03369750 fffff800`0349e624 : fffffa80`074f77e0 fffffa80`06780024 fffffa80`06787d90 00000000`00000001 : nt!PnpStartDeviceNode+0x156
    fffff880`033697e0 fffff800`034c1d56 : fffffa80`074f77e0 fffffa80`06787d90 00000000`00000002 00000000`00000000 : nt!PipProcessStartPhase1+0x74
    fffff880`03369810 fffff800`034c22e8 : 00000000`00000000 fffff800`031cf536 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x296
    fffff880`03369a80 fffff800`031d2ed7 : 00000001`00000003 00000000`00000000 00000000`00000001 fffffa80`00000084 : nt!PiProcessReenumeration+0x98
    fffff880`03369ad0 fffff800`030e2841 : fffff800`031d2bb0 fffff800`033cb601 fffffa80`06779b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
    fffff880`03369b70 fffff800`0336fe6a : 00000000`00000000 fffffa80`06779b50 00000000`00000080 fffffa80`06706040 : nt!ExpWorkerThread+0x111
    fffff880`03369c00 fffff800`030c9ec6 : fffff880`03174180 fffffa80`06779b50 fffff880`0317f0c0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`03369c40 00000000`00000000 : fffff880`0336a000 fffff880`03364000 fffff880`03367670 00000000`00000000 : nt!KxStartSystemThread+0x16
    and a lock:

    LOCK_ADDRESS: fffff800032d4b80 -- (!locks fffff800032d4b80)
    I'm going to say this may be related to a device connected via USB. Do you happen to have any video devices such as a webcam or something connected via USB? As it's not a full kernel dump, I don't think it's possible to get what the object causing the lock is.

    I do see mention of AppleCharger.sys in your drivers list, this is the Gigabyte on/off charge driver which is used to charge your iPhone / iPad / iPod Touch. Given that I believe this is done USB, and the fact that it's Gigabyte motherboard software which is generally very buggy and has caused issues in the past, I'd recommend uninstalling Gigabyte on/off as well as any other Gigabyte utilities / software you have installed.

    Regards,

    Patrick
    writhziden says thanks for this.

  4. #4

    Join Date
    Mar 2012
    Posts
    469

    Re: bsod

    Careful on the memory corruption thing. Granted, the analysis engine did determine there was corruption of the nt module, but when I opened it I found 0 errors on mine. Also I noticed JC has some missing and/or incorrect symbols errors in his output, so if you're basing your decision on the output that JC gave, then you may be thrown by a false positive generated by the improper symbols.

    Anyways, I think I at least found the relevant IRP. It was awkward, given that apparently the TRIAGE_9F_PNP and TRIAGE_9F_POWER structures are private-only and are not available through the public MS symbol server, despite the MSDN article on DRIVER_POWER_STATE_FAILURE hinting otherwise:

    Code:
    0: kd> dt nt!TRIAGE_9F_POWER
    Symbol nt!TRIAGE_9F_POWER not found.
    0: kd> dt nt!_TRIAGE_9F_PNP
    Symbol nt!_TRIAGE_9F_PNP not found.
    So instead I just had to eyeball the raw data and try to get something relevant out of it, judging from what was posted in the article, which I'll paste here for easy viewing:

    Code:
    kd>dt nt!TRIAGE_9F_PNP 82931b24
        +0x000 Signature        : 0x8001
        +0x002 Revision         : 1
        +0x004 CompletionQueue  : 0x82970e20 _TRIAGE_PNP_DEVICE_COMPLETION_QUEUE
        +0x008 DelayedWorkQueue : 0x829455bc _TRIAGE_EX_WORK_QUEUE
    Again, the other structures listed in this one are probably private-only types not available to us, and this example is in x86, but I venture to guess x64 version isn't much different. So let me work with this template:

    Code:
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_POWER_STATE_FAILURE (9f)
    A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
    Arguments:
    Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
        subsystem.
    Arg2: 0000000000000258, Timeout in seconds.
    Arg3: fffffa8006779b50, The thread currently holding on to the Pnp lock.
    Arg4: fffff800044013d0, nt!TRIAGE_9F_PNP on Win7
    
    ...
    
    0: kd> dps fffff800044013d0
    fffff800`044013d0  00000000`00018001
    fffff800`044013d8  fffff800`032d4940 nt!PnpDeviceCompletionQueue     < Most likely _TRIAGE_PNP_DEVICE_COMPLETION_QUEUE
    fffff800`044013e0  fffff800`032762d8 nt!ExWorkerQueue+0x58           < Most likely _TRIAGE_EX_WORK_QUEUE
    fffff800`044013e8  00000000`00000000
    fffff800`044013f0  fffff800`04401508
    fffff800`044013f8  fffff800`0331334c nt!PopBuildDeviceNotifyListWatchdog+0x1c
    fffff800`04401400  00000000`00000000
    fffff800`04401408  fffff800`00000000
    fffff800`04401410  00000000`00000000
    fffff800`04401418  fffff800`04401500
    fffff800`04401420  fffff800`044014d8
    fffff800`04401428  fffff800`030e3e3c nt!KiProcessTimerDpcTable+0x6c
    fffff800`04401430  fffff800`044014c0
    fffff800`04401438  fffff800`044014c0
    fffff800`04401440  00000000`00000000
    fffff800`04401448  fffff800`04401500
    So I start with the completion queue structure and see what I got:

    Code:
    0: kd> dps fffff800`032d4940
    fffff800`032d4940  fffffa80`097bd390     < Looks like another memory address, let's take a look
    fffff800`032d4948  fffffa80`097bd390
    fffff800`032d4950  ????????`????????
    fffff800`032d4958  ????????`????????
    fffff800`032d4960  ????????`????????
    fffff800`032d4968  ????????`????????
    fffff800`032d4970  ????????`????????
    fffff800`032d4978  ????????`????????
    fffff800`032d4980  ????????`????????
    fffff800`032d4988  ????????`????????
    fffff800`032d4990  ????????`????????
    fffff800`032d4998  ????????`????????
    fffff800`032d49a0  ????????`????????
    fffff800`032d49a8  ????????`????????
    fffff800`032d49b0  ????????`????????
    fffff800`032d49b8  ????????`????????
    
    0: kd> !irp fffffa80`097bd390
    IRP signature does not match, probably not an IRP.  Use any flag to force.     < Ok, obviously not an IRP. Now let's dump it raw:
    
    0: kd> dps fffffa80`097bd390
    fffffa80`097bd390  fffff800`032d4940 nt!PnpDeviceCompletionQueue
    fffffa80`097bd398  fffff800`032d4940 nt!PnpDeviceCompletionQueue
    fffffa80`097bd3a0  fffffa80`074f77e0     < While the other memory addresses bring us right back, this one looks different, let's look...
    fffffa80`097bd3a8  ????????`????????
    fffffa80`097bd3b0  ????????`????????
    fffffa80`097bd3b8  ????????`????????
    fffffa80`097bd3c0  ????????`????????
    fffffa80`097bd3c8  ????????`????????
    fffffa80`097bd3d0  ????????`????????
    fffffa80`097bd3d8  ????????`????????
    fffffa80`097bd3e0  ????????`????????
    fffffa80`097bd3e8  ????????`????????
    fffffa80`097bd3f0  ????????`????????
    fffffa80`097bd3f8  ????????`????????
    fffffa80`097bd400  ????????`????????
    fffffa80`097bd408  ????????`????????
    
    0: kd> dps fffffa80`074f77e0
    fffffa80`074f77e0  00000000`00000000
    fffffa80`074f77e8  00000000`00000000
    fffffa80`074f77f0  fffffa80`0839ad90
    fffffa80`074f77f8  00000000`00000000
    fffffa80`074f7800  fffffa80`09da3060
    fffffa80`074f7808  00000000`004a0048
    fffffa80`074f7810  fffffa80`09d1d720
    fffffa80`074f7818  00000000`000e000c
    fffffa80`074f7820  fffff8a0`08458260
    fffffa80`074f7828  fffffa80`09901b30
    fffffa80`074f7830  ????????`????????
    fffffa80`074f7838  ????????`????????
    fffffa80`074f7840  ????????`????????
    fffffa80`074f7848  ????????`????????
    fffffa80`074f7850  ????????`????????
    fffffa80`074f7858  ????????`????????
    
    Ok, we got some items here, let's try to run !irp through each of those memory addresses:
    
    0: kd> !irp fffffa80`0839ad90;!irp fffffa80`09da3060;!irp fffffa80`09d1d720;!irp fffff8a0`08458260;!irp fffffa80`09901b30
    IRP signature does not match, probably not an IRP.  Use any flag to force.
    IRP signature does not match, probably not an IRP.  Use any flag to force.
    IRP signature does not match, probably not an IRP.  Use any flag to force.
    IRP signature does not match, probably not an IRP.  Use any flag to force.
    Irp is active with 8 stacks 8 is current (= 0xfffffa8009901df8)
     No Mdl: No System Buffer: Thread fffffa8006779b50:  Irp stack trace.  
         cmd  flg cl Device   File     Completion-Context
     [  0, 0]   0  0 00000000 00000000 00000000-00000000    
    
                Args: 00000000 00000000 00000000 00000000
     [  0, 0]   0  0 00000000 00000000 00000000-00000000    
    
                Args: 00000000 00000000 00000000 00000000
     [  0, 0]   0  0 00000000 00000000 00000000-00000000    
    
                Args: 00000000 00000000 00000000 00000000
     [  0, 0]   0  0 00000000 00000000 00000000-00000000    
    
                Args: 00000000 00000000 00000000 00000000
     [  0, 0]   0  0 00000000 00000000 00000000-00000000    
    
                Args: 00000000 00000000 00000000 00000000
     [  0, 0]   0  0 00000000 00000000 00000000-00000000    
    
                Args: 00000000 00000000 00000000 00000000
     [ 1b, 0]   0  0 fffffa8009da3060 00000000 fffff88004876d80-fffff880033695c0    
               \Driver\usbhub    usbhub!UsbhDeferIrpCompletion
                Args: 00000000 00000000 00000000 00000000
    >[ 1b, 0]   0 e0 fffffa800677a050 00000000 fffff800031d0590-fffffa80097bd390 Success Error Cancel 
               \Driver\usbhub    nt!PnpDeviceCompletionRoutine
                Args: 00000000 00000000 00000000 00000000
    Ah, there we go! That last one looks like it matches up. When I checked the major function code 1b, it revealed itself as a PNP IRP, with the minor code being IRP_MN_START_DEVICE. As you can also tell, it's USB-related. Both these points match up with entries we saw in the callstack posted by !analyze -v. Last, but not least, the thread that owns the IRP matches up with the one that faulted.

    Part of me thinks I was just lucky with this discovery, but it's nice to know sometimes you can trek through raw data muck and come up with something relevant. It also goes to show that access to symbols is VERY beneficial but not totally impossible to deal without.

    Now to figure out where to go from here. It looks like the IRP got deferred but I can't tell much from here on. I think this may be as far as we can go with the minidump.
    Last edited by Vir Gnarus; 07-23-2012 at 03:16 PM.
    Capt.Jack Sparrow, Patrick, jcgriff2 and 2 others say thanks for this.

  5. #5

    Re: bsod

    Nice digging, VN. Now that we've ultimately come to the conclusion that it was caused by USB as I had guessed, we'll see soon whether or not the Gigabyte charging utility caused it. I've seen some trouble with that program in the past when it comes to charging phones.

  6. #6

    Join Date
    Mar 2012
    Posts
    469

    Re: bsod

    Oh yeah, especially when we're dealing with power IRPs and starting up a usb-powered device like what we're seeing here. Bloody thing wreaks havoc on those. I'd still like to see it actually involved some way or another with this but so far I haven't been able to do that just yet. I'm not quite sure if the minidump has retained the pertinent data.

Similar Threads

  1. Windows 7 x64 BSOD - PFN_LIST_CORRUPT BSOD
    By emreblt in forum BSOD, Crashes, Kernel Debugging
    Replies: 4
    Last Post: 03-23-2013, 03:23 AM
  2. Random BSOD + Verifier triggers BSOD on startup
    By eyeland in forum BSOD, Crashes, Kernel Debugging
    Replies: 3
    Last Post: 06-10-2012, 08:23 AM

Log in

Log in