BSOD IRQL_GT_AT_SYSTEM_SERVICE

oscar_osu

New member
Joined
May 3, 2014
Posts
1
hi been having bsods with the same driver causing it for a while now. I can recreate this crash quite often by either starting or during playback in foobar but it also rarely happens on other occations as well.

OS win 7x64 full retail
i7 3770k
MSI z77a-gd80
corsair hx1050w
asus gtx680 sli
custom buildt desktop
 
Hi,

The attached DMP files are all of the IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a) bug check.

This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL.



Remove and replace BitDefender with Microsoft Security Essentials for temporary troubleshooting purposes as it's very known to cause this bug check:

BitDefender removal - How to uninstall Bitdefender

MSE - Microsoft Security Essentials - Microsoft Windows

Regards,

Patrick
 
They are all the same> X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

vsserv.exe is the main Bitdefender process for real time protection, this usually means either Bitdefender is corrupt or there is a virus/malware program interfering with it.

To err on the safe side I would follow the instructions here> https://www.sysnative.com/forums/security-arena/2507-malware-removal-posting-instructions.html lets havet the security team rule out any possible infection before trying to remove and reinstall Bitdefender or another A/V.


Code:
Opened log file 'C:\Users\Owner\AppData\Local\Temp\SysnativeBSODApps\28240\dmps\outkdOutput1.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\Bsodapps\SysnativeBSODApps\050414-9531-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: c:\symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`02e55000 PsLoadedModuleList = 0xfffff800`030986d0
Debug session time: Sat May  3 18:05:41.137 2014 (UTC - 4:00)
System Uptime: 0 days 0:07:54.917
Loading Kernel Symbols
...............................................................
................................................................
........................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {7782132a, 2, 0, fffff88005df6b60}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

1: kd> !analyze -v; !sysinfo cpuspeed; !sysinfo SMBIOS; lmtsmn; q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 000000007782132a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff88005df6b60, 0

Debugging Details:
------------------


PROCESS_NAME:  vsserv.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+3363616235306231
00000000`7782132a ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002eca169 to fffff80002ecabc0

STACK_TEXT:  
fffff880`05df6928 fffff800`02eca169 : 00000000`0000004a 00000000`7782132a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`05df6930 fffff800`02eca0a0 : 00000000`00000ac0 fffff880`05df6b60 00000000`00000000 fffff800`031b4383 : nt!KiBugCheckDispatch+0x69
fffff880`05df6a70 00000000`7782132a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`2379fcc8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7782132a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`02eca0a0 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  521ea035

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------

CPUID:        "Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: 3500
[SMBIOS Data Tables v2.7]
[DMI Version - 39]
[2.0 Calling Convention - No]
[Table Size - 2954 bytes]

[BIOS Information (Type 0) - Length 24 - Handle 0000h]
  Vendor                        American Megatrends Inc.
  BIOS Version                  V1.7
  BIOS Starting Address Segment f000
  BIOS Release Date             09/29/2013
  BIOS ROM Size                 800000
  BIOS Characteristics
       07: - PCI Supported
       11: - Upgradeable FLASH BIOS
       12: - BIOS Shadowing Supported
       15: - CD-Boot Supported
       16: - Selectable Boot Supported
       17: - BIOS ROM Socketed
       19: - EDD Supported
       23: - 1.2MB Floppy Supported
       24: - 720KB Floppy Supported
       25: - 2.88MB Floppy Supported
       26: - Print Screen Device Supported
       27: - Keyboard Services Supported
       28: - Serial Services Supported
       29: - Printer Services Supported
       32: - BIOS Vendor Reserved
  BIOS Characteristic Extensions
       00: - ACPI Supported
       01: - USB Legacy Supported
       08: - BIOS Boot Specification Supported
       10: - Specification Reserved
       11: - Specification Reserved
  BIOS Major Revision           4
  BIOS Minor Revision           6
  EC Firmware Major Revision    255
  EC Firmware Minor Revision    255
[System Information (Type 1) - Length 27 - Handle 0001h]
  Manufacturer                  MSI
  Product Name                  MS-7757
  Version                       1.0
  Serial Number                                       
  UUID                          00000000-0000-0000-0000-000000000000
  Wakeup Type                   Power Switch
  SKUNumber                     To be filled by O.E.M.
  Family                        To be filled by O.E.M.
[BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  Manufacturer                  MSI
  Product                       Z77A-GD80 (MS-7757)
  Version                       1.0
  Serial Number                                       
  Asset Tag                                           
  Feature Flags                 09h
       -525232440: - h
       -525232488: - 

  Location                      To be filled by O.E.M.
  Chassis Handle                0003h
  Board Type                    0ah - Processor/Memory Module
  Number of Child Handles       0
[System Enclosure (Type 3) - Length 22 - Handle 0003h]
  Manufacturer                  MSI
  Chassis Type                  Desktop
  Version                       1.0
  Serial Number                                       
  Asset Tag Number                                    
  Bootup State                  Safe
  Power Supply State            Safe
  Thermal State                 Safe
  Security Status               None
  OEM Defined                   0
  Height                        0U
  Number of Power Cords         1
  Number of Contained Elements  0
  Contained Element Size        0
[OEM Strings (Type 11) - Length 5 - Handle 0021h]
  Number of Strings             1
   1                            To Be Filled By O.E.M.
[System Configuration Options (Type 12) - Length 5 - Handle 0022h]
[Cache Information (Type 7) - Length 19 - Handle 003ch]
  Socket Designation            CPU Internal L2
  Cache Configuration           0081h - WT Enabled Int NonSocketed L2
  Maximum Cache Size            0400h - 1024K
  Installed Size                0400h - 1024K
  Supported SRAM Type           0002h - Unknown 
  Current SRAM Type             0002h - Unknown 
  Cache Speed                   0ns
  Error Correction Type         Specification Reserved
  System Cache Type             Unified
  Associativity                 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 003dh]
  Socket Designation            CPU Internal L1
  Cache Configuration           0080h - WT Enabled Int NonSocketed L1
  Maximum Cache Size            0100h - 256K
  Installed Size                0100h - 256K
  Supported SRAM Type           0002h - Unknown 
  Current SRAM Type             0002h - Unknown 
  Cache Speed                   0ns
  Error Correction Type         ParitySingle-Bit ECC
  System Cache Type             Data
  Associativity                 8-way Set-Associative
[Cache Information (Type 7) - Length 19 - Handle 003eh]
  Socket Designation            CPU Internal L3
  Cache Configuration           0182h - WB Enabled Int NonSocketed L3
  Maximum Cache Size            2000h - 8192K
  Installed Size                2000h - 8192K
  Supported SRAM Type           0002h - Unknown 
  Current SRAM Type             0002h - Unknown 
  Cache Speed                   0ns
  Error Correction Type         Specification Reserved
  System Cache Type             Unified
  Associativity                 16-way Set-Associative
[Physical Memory Array (Type 16) - Length 23 - Handle 003fh]
  Location                      03h - SystemBoard/Motherboard
  Use                           03h - System Memory
  Memory Error Correction       03h - None
  Maximum Capacity              33554432KB
  Memory Error Inf Handle       [Not Provided]
  Number of Memory Devices      4
[Processor Information (Type 4) - Length 42 - Handle 0040h]
  Socket Designation            SOCKET 0
  Processor Type                Central Processor
  Processor Family              c6h - Specification Reserved
  Processor Manufacturer        Intel(R) Corporation
  Processor ID                  a9060300fffbebbf
  Processor Version             Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
  Processor Voltage             35h - 5V 2.9V 
  External Clock                100MHz
  Max Speed                     3800MHz
  Current Speed                 3500MHz
  Status                        Enabled Populated
  Processor Upgrade             Specification Reserved
  L1 Cache Handle               003dh
  L2 Cache Handle               003ch
  L3 Cache Handle               003eh
  Serial Number                 [String Not Specified]
  Asset Tag Number                         
  Part Number                   Fill By OEM
[Memory Device (Type 17) - Length 34 - Handle 0041h]
  Physical Memory Array Handle  003fh
  Memory Error Info Handle      [Not Provided]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          4096MB
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                ChannelA-DIMM0
  Bank Locator                  BANK 0
  Memory Type                   18h - Specification Reserved
  Type Detail                   0080h - Synchronous
  Speed                         1600MHz
  Manufacturer                  029E
  Serial Number                         
  Asset Tag Number                        
  Part Number                   CMZ8GX3M2A1600C8  
[Memory Device Mapped Address (Type 20) - Length 35 - Handle 0042h]
  Starting Address              00000000h
  Ending Address                003fffffh
  Memory Device Handle          0041h
  Mem Array Mapped Adr Handle   0049h
  Partition Row Position        [Unknown]
  Interleave Position           01
  Interleave Data Depth         02
[Memory Device (Type 17) - Length 34 - Handle 0043h]
  Physical Memory Array Handle  003fh
  Memory Error Info Handle      [Not Provided]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          4096MB
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                ChannelA-DIMM1
  Bank Locator                  BANK 1
  Memory Type                   18h - Specification Reserved
  Type Detail                   0080h - Synchronous
  Speed                         1600MHz
  Manufacturer                  029E
  Serial Number                         
  Asset Tag Number                        
  Part Number                   CMZ8GX3M2A1600C8  
[Memory Device Mapped Address (Type 20) - Length 35 - Handle 0044h]
  Starting Address              00800000h
  Ending Address                00bfffffh
  Memory Device Handle          0043h
  Mem Array Mapped Adr Handle   0049h
  Partition Row Position        [Unknown]
  Interleave Position           01
  Interleave Data Depth         02
[Memory Device (Type 17) - Length 34 - Handle 0045h]
  Physical Memory Array Handle  003fh
  Memory Error Info Handle      [Not Provided]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          4096MB
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                ChannelB-DIMM0
  Bank Locator                  BANK 2
  Memory Type                   18h - Specification Reserved
  Type Detail                   0080h - Synchronous
  Speed                         1600MHz
  Manufacturer                  029E
  Serial Number                         
  Asset Tag Number                        
  Part Number                   CMZ8GX3M2A1600C8  
[Memory Device Mapped Address (Type 20) - Length 35 - Handle 0046h]
  Starting Address              00400000h
  Ending Address                007fffffh
  Memory Device Handle          0045h
  Mem Array Mapped Adr Handle   0049h
  Partition Row Position        [Unknown]
  Interleave Position           02
  Interleave Data Depth         02
[Memory Device (Type 17) - Length 34 - Handle 0047h]
  Physical Memory Array Handle  003fh
  Memory Error Info Handle      [Not Provided]
  Total Width                   64 bits
  Data Width                    64 bits
  Size                          4096MB
  Form Factor                   09h - DIMM
  Device Set                    [None]
  Device Locator                ChannelB-DIMM1
  Bank Locator                  BANK 3
  Memory Type                   18h - Specification Reserved
  Type Detail                   0080h - Synchronous
  Speed                         1600MHz
  Manufacturer                  029E
  Serial Number                         
  Asset Tag Number                        
  Part Number                   CMZ8GX3M2A1600C8  
[Memory Device Mapped Address (Type 20) - Length 35 - Handle 0048h]
  Starting Address              00c00000h
  Ending Address                00ffffffh
  Memory Device Handle          0047h
  Mem Array Mapped Adr Handle   0049h
  Partition Row Position        [Unknown]
  Interleave Position           02
  Interleave Data Depth         02
[Memory Array Mapped Address (Type 19) - Length 31 - Handle 0049h]
  Starting Address              00000000h
  Ending Address                00ffffffh
  Memory Array Handle           003fh
  Partition Width               04
start             end                 module name
fffff880`09fb5000 fffff880`09fc3000   000      000.fcl      Fri Oct 18 03:16:31 2013 (5260E04F)
fffff880`0f06a000 fffff880`0f0a8000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00e10000 fffff880`00e67000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`06af6000 fffff880`06b7f000   afd      afd.sys      Fri Sep 27 21:09:07 2013 (52462C33)
fffff880`0f0b8000 fffff880`0f0ce000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01107000 fffff880`01112000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`0bdd3000 fffff880`0bdde000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`010b9000 fffff880`010c2000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010c2000 fffff880`010ec000   ataport  ataport.SYS  Sun Aug 04 21:02:45 2013 (51FEF9B5)
fffff960`008a0000 fffff960`00901000   ATMFD    ATMFD.DLL    Wed Jun 05 23:30:53 2013 (51B0026D)
fffff880`012ae000 fffff880`0138e000   avc3     avc3.sys     Mon Dec 02 04:37:41 2013 (529C54E5)
fffff880`074b7000 fffff880`074fb000   avchv    avchv.sys    Wed Oct 31 13:05:22 2012 (50915A52)
fffff880`04610000 fffff880`046af000   avckf    avckf.sys    Mon Dec 02 04:39:31 2013 (529C5553)
fffff880`02dbb000 fffff880`02de7000   bdfndisf6 bdfndisf6.sys Fri Feb 22 11:41:39 2013 (51279FC3)
fffff880`02c00000 fffff880`02c28000   bdfwfpf  bdfwfpf.sys  Mon Nov 14 12:16:17 2011 (4EC14CE1)
fffff880`02d24000 fffff880`02d2b000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`06cc9000 fffff880`06cda000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`047a5000 fffff880`047c3000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
fffff960`00690000 fffff960`006b7000   cdd      cdd.dll      unavailable (00000000)
fffff880`07400000 fffff880`0742a000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00e7b000 fffff880`00f3b000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`00dc7000 fffff880`00df7000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00cf5000 fffff880`00d53000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`07b1a000 fffff880`07b4c000   CMUACWO  CMUACWO.sys  Fri Jul 13 01:53:16 2012 (4FFFB7CC)
fffff880`01172000 fffff880`011e4000   cng      cng.sys      Wed Aug 01 11:48:07 2012 (50194FB7)
fffff880`0f0a8000 fffff880`0f0b8000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`085a4000 fffff880`085b2000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`06c28000 fffff880`06cab000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`02d2b000 fffff880`02d40f00   ctxusbm  ctxusbm.sys  Mon Sep 09 12:02:22 2013 (522DF10E)
fffff880`06cab000 fffff880`06cc9000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`06ab1000 fffff880`06ac0000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0103a000 fffff880`01050000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`07557000 fffff880`07579000   drmk     drmk.sys     Thu Oct 03 22:16:30 2013 (524E24FE)
fffff880`02ca9000 fffff880`02cf1000   dtsoftbus01 dtsoftbus01.sys Thu Jun 20 03:22:51 2013 (51C2ADCB)
fffff880`085b2000 fffff880`085be000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`085c9000 fffff880`085dc000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`085be000 fffff880`085c9000   dump_msahci dump_msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`085dc000 fffff880`085e8000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`06d00000 fffff880`06df4000   dxgkrnl  dxgkrnl.sys  Thu Aug 01 03:58:53 2013 (51FA153D)
fffff880`0f000000 fffff880`0f046000   dxgmms1  dxgmms1.sys  Tue Apr 09 23:27:15 2013 (5164DC13)
fffff880`06f09000 fffff880`06f85000   e1c62x64 e1c62x64.sys Thu Feb 21 00:14:02 2013 (5125AD1A)
fffff880`0115e000 fffff880`01172000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01112000 fffff880`0115e000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`0142c000 fffff880`01436000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`01000000 fffff880`0103a000   fvevol   fvevol.sys   Wed Jan 23 22:11:24 2013 (5100A65C)
fffff880`01600000 fffff880`01649000   fwpkclnt fwpkclnt.sys Wed Jan 02 22:06:48 2013 (50E4F5C8)
fffff880`0138e000 fffff880`013c1000   gzflt    gzflt.sys    Fri Aug 23 06:48:49 2013 (52173E11)
fffff800`02e0c000 fffff800`02e55000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`0f046000 fffff880`0f06a000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`06ef6000 fffff880`06f09000   HECIx64  HECIx64.sys  Thu Jul 12 22:18:26 2012 (4FFF8572)
fffff880`07af8000 fffff880`07b11000   HIDCLASS HIDCLASS.SYS Wed Jul 03 00:05:05 2013 (51D3A2F1)
fffff880`07b11000 fffff880`07b19080   HIDPARSE HIDPARSE.SYS Wed Jul 03 00:05:04 2013 (51D3A2F0)
fffff880`07aea000 fffff880`07af8000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`046dc000 fffff880`047a5000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`06aa6000 fffff880`06ab1000   HWiNFO64A HWiNFO64A.SYS Fri Nov 22 10:45:10 2013 (528F7C06)
fffff880`01436000 fffff880`0143f000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`06e00000 fffff880`06e16000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`06e16000 fffff880`06e27000   ISCTD64  ISCTD64.sys  Tue Nov 27 14:52:34 2012 (50B51A02)
fffff880`00d93000 fffff880`00d9d000   iusb3hcs iusb3hcs.sys Fri Feb 22 07:36:29 2013 (5127664D)
fffff880`07a70000 fffff880`07acd000   iusb3hub iusb3hub.sys Fri Feb 22 07:33:42 2013 (512765A6)
fffff880`06e2f000 fffff880`06ef4000   iusb3xhc iusb3xhc.sys Fri Feb 22 07:33:45 2013 (512765A9)
fffff880`02c78000 fffff880`02c87000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08596000 fffff880`085a4000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bc1000 fffff800`00bcb000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`07474000 fffff880`074b7000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01400000 fffff880`0141b000   ksecdd   ksecdd.sys   Tue Sep 24 21:03:28 2013 (52423660)
fffff880`017ae000 fffff880`017d9000   ksecpkg  ksecpkg.sys  Tue Sep 24 21:20:07 2013 (52423A47)
fffff880`07579000 fffff880`0757e200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`046af000 fffff880`046c4000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07bb6000 fffff880`07bd9000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`08535000 fffff880`08588b80   lvrs64   lvrs64.sys   Thu Dec 15 00:13:30 2011 (4EE981FA)
fffff880`08078000 fffff880`08519080   lvuvc64  lvuvc64.sys  Thu Dec 15 00:14:00 2011 (4EE98218)
fffff880`00c92000 fffff880`00ce1000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`085e8000 fffff880`085f6000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`02c87000 fffff880`02c96000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08589000 fffff880`08596000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00c5c000 fffff880`00c76000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`047c3000 fffff880`047db000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07a00000 fffff880`07a2d000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`09e43000 fffff880`09e91000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`09e91000 fffff880`09eb5000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`010ec000 fffff880`010f7000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`02d9f000 fffff880`02daa000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e70000 fffff880`00e7a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01200000 fffff880`0125e000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`06a9b000 fffff880`06aa6000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017eb000 fffff880`017fd000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0165c000 fffff880`0174e000   ndis     ndis.sys     Wed Aug 22 11:11:46 2012 (5034F6B2)
fffff880`0fde2000 fffff880`0fdee000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`06ac0000 fffff880`06aef000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`075d9000 fffff880`075ee000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`06a00000 fffff880`06a0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`06b7f000 fffff880`06bc4000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`0174e000 fffff880`017ae000   NETIO    NETIO.SYS    Tue Nov 26 05:21:01 2013 (5294760D)
fffff880`09eb5000 fffff880`09ec1000   npf      npf.sys      Fri Jun 25 12:50:58 2010 (4C24DE72)
fffff880`02daa000 fffff880`02dbb000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`06a8f000 fffff880`06a9b000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e55000 fffff800`0343a000   nt       ntkrnlmp.exe Wed Aug 28 21:13:25 2013 (521EA035)
fffff880`0144b000 fffff880`015f4000   Ntfs     Ntfs.sys     Thu Jan 23 20:14:50 2014 (52E1BE8A)
fffff880`0bd70000 fffff880`0bd77000   NTIOLib_X64 NTIOLib_X64.sys Thu Oct 25 21:46:44 2012 (5089EB84)
fffff880`0bd77000 fffff880`0bd7e000   NTIOLib_X64_fffff8800bd77000 NTIOLib_X64.sys Wed Oct 20 02:45:49 2010 (4CBE901D)
fffff880`02d1b000 fffff880`02d24000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0742a000 fffff880`0745e000   nvhda64v nvhda64v.sys Thu Nov 28 08:38:09 2013 (52974741)
fffff880`0f0e8000 fffff880`0fdbe000   nvlddmkm nvlddmkm.sys Fri Apr 11 09:26:10 2014 (5347ED72)
fffff880`08000000 fffff880`08070000   nvstusb  nvstusb.sys  Fri Apr 11 09:48:38 2014 (5347F2B6)
fffff880`0750d000 fffff880`0751a000   nvvad64v nvvad64v.sys Fri Mar 21 13:42:58 2014 (532C7A22)
fffff880`06bcd000 fffff880`06bf3000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00d9d000 fffff880`00db2000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00d53000 fffff880`00d86000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`010f7000 fffff880`01107000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0141b000 fffff880`0142c000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`09ec1000 fffff880`09f67000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0751a000 fffff880`07557000   portcls  portcls.sys  Thu Oct 03 21:36:02 2013 (524E1B82)
fffff880`00ce1000 fffff880`00cf5000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0fdbe000 fffff880`0fde2000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`06c00000 fffff880`06c1b000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`02c57000 fffff880`02c78000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0f0ce000 fffff880`0f0e8000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`06a3e000 fffff880`06a8f000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`06c1b000 fffff880`06c26000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02d84000 fffff880`02d8d000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d8d000 fffff880`02d96000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02d96000 fffff880`02d9f000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`013c1000 fffff880`013fb000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`046c4000 fffff880`046dc000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`09f67000 fffff880`09f72000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`017e1000 fffff880`017eb000   speedfan speedfan.sys Sat Dec 29 15:59:35 2012 (50DF59B7)
fffff880`017d9000 fffff880`017e1000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0bcd8000 fffff880`0bd70000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0bc6f000 fffff880`0bcd8000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`09f72000 fffff880`09fa3000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`06e27000 fffff880`06e28480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0fdee000 fffff880`0fdfb000   tap0901  tap0901.sys  Thu Aug 22 08:40:01 2013 (521606A1)
fffff880`01801000 fffff880`01a00000   tcpip    tcpip.sys    Sat Sep 07 21:11:52 2013 (522BCED8)
fffff880`09fa3000 fffff880`09fb5000   tcpipreg tcpipreg.sys Wed Oct 03 12:07:26 2012 (506C62BE)
fffff880`02c4a000 fffff880`02c57000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`02c28000 fffff880`02c4a000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`06a2a000 fffff880`06a3e000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`07b4c000 fffff880`07bb6000   trufos   trufos.sys   Wed Aug 07 06:46:25 2013 (52022581)
fffff960`004b0000 fffff960`004ba000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06cda000 fffff880`06d00000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`0bd7e000 fffff880`0bdd3000   udfs     udfs.sys     Sat Nov 20 04:26:11 2010 (4CE79433)
fffff880`074fb000 fffff880`0750d000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0851a000 fffff880`08534d00   usbaudio usbaudio.sys Fri Jul 12 06:40:58 2013 (51DFDD3A)
fffff880`07acd000 fffff880`07aea000   usbccgp  usbccgp.sys  Tue Nov 26 20:41:15 2013 (52954DBB)
fffff880`06ef4000 fffff880`06ef5e80   USBD     USBD.SYS     Tue Nov 26 20:41:03 2013 (52954DAF)
fffff880`06f85000 fffff880`06f97000   usbehci  usbehci.sys  Tue Nov 26 20:41:11 2013 (52954DB7)
fffff880`0757f000 fffff880`075d9000   usbhub   usbhub.sys   Tue Nov 26 20:41:36 2013 (52954DD0)
fffff880`06f97000 fffff880`06fed000   USBPORT  USBPORT.SYS  Tue Nov 26 20:41:11 2013 (52954DB7)
fffff880`00d86000 fffff880`00d93000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02d41000 fffff880`02d4f000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02d4f000 fffff880`02d74000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01069000 fffff880`010a5000   vmbus    vmbus.sys    Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`01649000 fffff880`01659000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00db2000 fffff880`00dc7000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`0125e000 fffff880`012aa000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`06a0f000 fffff880`06a2a000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`02d74000 fffff880`02d84000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00f3b000 fffff880`00ffd000   Wdf01000 Wdf01000.sys Fri Jun 21 23:13:05 2013 (51C51641)
fffff880`00e00000 fffff880`00e10000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`06bc4000 fffff880`06bcd000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000b0000 fffff960`003c7000   win32k   win32k.sys   Thu Feb 06 20:23:07 2014 (52F4357B)
fffff880`010a5000 fffff880`010b9000   winhv    winhv.sys    Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`06fed000 fffff880`06ff6000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00e67000 fffff880`00e70000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`14479000 fffff880`14484000   WSDPrint WSDPrint.sys Mon Jul 13 20:39:20 2009 (4A5BD3B8)
fffff880`14484000 fffff880`14490000   WSDScan  WSDScan.sys  Mon Jul 13 20:35:37 2009 (4A5BD2D9)

Unloaded modules:
fffff880`14408000 fffff880`14479000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01050000 fffff880`0105e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0143f000 fffff880`0144b000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`015f4000 fffff880`015ff000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`011e4000 fffff880`011f7000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`02cf1000 fffff880`02d1b000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002A000
quit:
 
Back
Top