BSOD when resuming from sleep -- Windows 7 x64

Jonny

Member
Joined
Dec 9, 2014
Posts
17
Hi, every time I take a clean (VHD) build on my Dell XPS l502x, and install it (BCDEDIT), it's almost perfect.

All (necessary) device drivers installed, but I keep getting this BSOD when resuming from sleep. Sometimes ('quick nap') the problem isn't exhibited, but usually it does...

Currently On the same laptop with a stable build, I've mounted the affected volume, obtained the crash report (zipped).

Nirsoft's BlueScreenView is saying usbvideo.sys is the culprit.
I'm wondering if there's an issue with the NVIDIA GeForce 540M's GPU clock settings -
On the stable build I have NVIDIA Performance installed, which adds the option to underclock the GPU clock / speed (672, 900 > 522, 700) - this profile is
launched via user\Startup\myntune.bat

"C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe" "C:\Users\Jonny\AppData\Local\NVIDIA Corporation\nTune\Profiles\SAFE (Underclocked G M Clocks to 522,700).nsu"
I will post back with perfmon data in a moment (reboots required), in the meantime here's some specs.

OS - Windows 7 Ultimate x64 - original OEM

· Age of system (hardware) ~ 2 years
· Age of OS installation - < 1 year (reinstalls)

· CPU -
Intel Core i7 2670QM
· Video Card -
Intel HD PCI\VEN_8086&DEV_0116 / NVIDIA GeForce GT 540M· MotherBoard - 0NJT03
· Power Supply - brand & wattage (if laptop, skip this one)

· System Manufacturer - Dell XPS (l502x) [laptop]
 

Attachments

Hi -

The first thing to do is to get Windows 7 SP1 + all outstanding Windows Updates installed.

Learn how to install Windows 7 Service Pack 1 (SP1)

Regards. . .

jcgriff2

Code:
Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp1_032914-15475-01.zip\032914-15475-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`03614000 PsLoadedModuleList = 0xfffff800`03851e50
Debug session time: Fri Mar 28 21:38:34.722 2014 (UTC - 5:00)
System Uptime: 0 days 0:05:33.737
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa8012a83400, fffffa8012a836e0, fffff8000398e240}

----- ETW minidump data unavailable-----
Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
Probably caused by : csrss.exe

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8012a83400, Terminating object
Arg3: fffffa8012a836e0, Process image file name
Arg4: fffff8000398e240, Explanatory message (ascii)

Debugging Details:
------------------

----- ETW minidump data unavailable-----

PROCESS_OBJECT: fffffa8012a83400

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

BUGCHECK_STR:  0xF4_c0000005

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

STACK_TEXT:  
fffff880`029777a8 fffff800`03a11142 : 00000000`000000f4 00000000`00000003 fffffa80`12a83400 fffffa80`12a836e0 : nt!KeBugCheckEx
fffff880`029777b0 fffff800`039bd269 : ffffffff`ffffffff fffffa80`12d46060 fffffa80`12a83400 fffffa80`12a83400 : nt!PspCatchCriticalBreak+0x92
fffff880`029777f0 fffff800`03941c74 : ffffffff`ffffffff 00000000`00000001 fffffa80`12a83400 fffff6fb`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17a06
fffff880`02977840 fffff800`03685153 : fffffa80`12a83400 fffff800`c0000005 fffffa80`12d46060 fffff880`02978238 : nt!NtTerminateProcess+0xf4
fffff880`029778c0 fffff800`036816f0 : fffff800`036c5ada fffff880`02978238 fffff880`02977f90 fffff880`029782e0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`02977a58 fffff800`036c5ada : fffff880`02978238 fffff880`02977f90 fffff880`029782e0 00000000`014e15e0 : nt!KiServiceLinkage
fffff880`02977a60 fffff800`03685542 : fffff880`02978238 00000000`76de4e8f fffff880`029782e0 00000000`014e10b8 : nt! ?? ::FNODOBFM::`string'+0x4619d
fffff880`02978100 fffff800`036840ba : 00000000`00000001 00000000`76de4e8f 00000000`76dff601 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`029782e0 00000000`76de4e4c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`014e1000 fffff800`0367d840 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76de4e4c
fffff880`02978710 00000000`00000000 : fffff800`03bf8b7f 0000001f`00000011 fffff880`029787b0 fffff900`c2613aa0 : nt!KiCallUserMode


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

IMAGE_VERSION:  

FAILURE_BUCKET_ID:  X64_0xF4_c0000005_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_c0000005_IMAGE_csrss.exe

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xf4_c0000005_image_csrss.exe

FAILURE_ID_HASH:  {92bd9bcd-069a-8a82-1b78-cb81a61ff626}

Followup: MachineOwner
---------

rax=fffff88002977838 rbx=ffffffffffffff00 rcx=00000000000000f4
rdx=0000000000000003 rsi=fffffa8012a836e0 rdi=fffffa8012a83400
rip=fffff80003685f00 rsp=fffff880029777a8 rbp=fffff8000398e240
 r8=fffffa8012a83400  r9=fffffa8012a836e0 r10=fffff80003941b80
r11=fffff880029778b8 r12=00000000c0000005 r13=00000000c0000005
r14=0000000000000008 r15=ffffffffffffffff
iopl=0         nv up ei pl nz na po nc
cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
nt!KeBugCheckEx:
fffff800`03685f00 48894c2408      mov     qword ptr [rsp+8],rcx ss:fffff880`029777b0=00000000000000f4
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`029777a8 fffff800`03a11142 : 00000000`000000f4 00000000`00000003 fffffa80`12a83400 fffffa80`12a836e0 : nt!KeBugCheckEx
fffff880`029777b0 fffff800`039bd269 : ffffffff`ffffffff fffffa80`12d46060 fffffa80`12a83400 fffffa80`12a83400 : nt!PspCatchCriticalBreak+0x92
fffff880`029777f0 fffff800`03941c74 : ffffffff`ffffffff 00000000`00000001 fffffa80`12a83400 fffff6fb`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17a06
fffff880`02977840 fffff800`03685153 : fffffa80`12a83400 fffff800`c0000005 fffffa80`12d46060 fffff880`02978238 : nt!NtTerminateProcess+0xf4
fffff880`029778c0 fffff800`036816f0 : fffff800`036c5ada fffff880`02978238 fffff880`02977f90 fffff880`029782e0 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`029778c0)
fffff880`02977a58 fffff800`036c5ada : fffff880`02978238 fffff880`02977f90 fffff880`029782e0 00000000`014e15e0 : nt!KiServiceLinkage
fffff880`02977a60 fffff800`03685542 : fffff880`02978238 00000000`76de4e8f fffff880`029782e0 00000000`014e10b8 : nt! ?? ::FNODOBFM::`string'+0x4619d
fffff880`02978100 fffff800`036840ba : 00000000`00000001 00000000`76de4e8f 00000000`76dff601 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`029782e0 00000000`76de4e4c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a (TrapFrame @ fffff880`029782e0)
00000000`014e1000 fffff800`0367d840 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76de4e4c
fffff880`02978710 00000000`00000000 : fffff800`03bf8b7f 0000001f`00000011 fffff880`029787b0 fffff900`c2613aa0 : nt!KiCallUserMode
start             end                 module name
fffff800`00ba0000 fffff800`00baa000   kdcom    kdcom.dll    Sat Feb 05 07:21:45 2011 (4D4D40D9)
fffff800`03614000 fffff800`03bf1000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff800`03bf1000 fffff800`03c3a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`00c5c000 fffff880`00c71000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`00c76000 fffff880`00cba000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`00cba000 fffff880`00cce000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00cce000 fffff880`00d2c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d2c000 fffff880`00dec000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`00e0c000 fffff880`00eb0000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb0000 fffff880`00ebf000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00ebf000 fffff880`00f16000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`00f16000 fffff880`00f1f000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f1f000 fffff880`00f29000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f29000 fffff880`00f5c000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f5c000 fffff880`00f69000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00f69000 fffff880`00f7e000   partmgr  partmgr.sys  Sat Mar 17 01:12:46 2012 (4F641D4E)
fffff880`00f7e000 fffff880`00f87000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f87000 fffff880`00f93000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`00f93000 fffff880`00fa8000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00fa8000 fffff880`00fc2000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00fc2000 fffff880`00fcb000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fcb000 fffff880`00ff5000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`01000000 fffff880`01014000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01014000 fffff880`01072000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`01072000 fffff880`01097000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`01097000 fffff880`010a0000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010a0000 fffff880`010a9000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010a9000 fffff880`010b2000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`010b2000 fffff880`010bd000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`010bd000 fffff880`010ce000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`010da000 fffff880`01112000   vhdmp    vhdmp.sys    Mon Jul 13 20:01:36 2009 (4A5BCAE0)
fffff880`01112000 fffff880`01174000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`01174000 fffff880`011c0000   FLTMGR   FLTMGR.SYS   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`011c0000 fffff880`011d2000   FSDEPENDS FSDEPENDS.SYS Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`011d2000 fffff880`011dd000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`011dd000 fffff880`011ed000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`011ed000 fffff880`011f8000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`01200000 fffff880`0122a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0122a000 fffff880`0123a000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`0123e000 fffff880`013df000   Ntfs     Ntfs.sys     Fri Apr 12 08:03:39 2013 (5167F81B)
fffff880`013df000 fffff880`013f9000   ksecdd   ksecdd.sys   Fri Jun 01 22:47:00 2012 (4FC97EA4)
fffff880`01400000 fffff880`01412000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01412000 fffff880`0141b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0141b000 fffff880`01455000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`01455000 fffff880`0146b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0146b000 fffff880`0149b000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`0149b000 fffff880`014ce000   SbieDrv  SbieDrv.sys  Mon Jul 08 07:28:31 2013 (51DAA25F)
fffff880`014d3000 fffff880`014dc000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`014dc000 fffff880`014ea000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`014eb000 fffff880`0155d000   cng      cng.sys      Fri Jun 01 23:19:52 2012 (4FC98658)
fffff880`0155d000 fffff880`0156e000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0156e000 fffff880`01578000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:54:36 2012 (4F4EF2FC)
fffff880`01578000 fffff880`015c4000   volsnap  volsnap.sys  Thu Sep 06 10:55:02 2012 (5048B946)
fffff880`015c4000 fffff880`015fe000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Jun 01 23:20:48 2012 (4FC98690)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`016a4000 fffff880`016ac000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`016ac000 fffff880`016b7000   nvpciflt nvpciflt.sys Thu Dec 19 12:03:20 2013 (52B326D8)
fffff880`016bd000 fffff880`017af000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`017af000 fffff880`017f8000   fwpkclnt fwpkclnt.sys Thu Jan 03 22:00:34 2013 (50E645D2)
fffff880`017f8000 fffff880`017ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Thu Jan 03 22:03:34 2013 (50E64686)
fffff880`02c00000 fffff880`02c16000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02c16000 fffff880`02c25000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c25000 fffff880`02c40000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`02c40000 fffff880`02c54000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff880`02c54000 fffff880`02ca5000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`02ca5000 fffff880`02cc7000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`02cd3000 fffff880`02cf1000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02cf1000 fffff880`02cfe000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02cfe000 fffff880`02d87000   afd      afd.sys      Tue Dec 27 22:59:08 2011 (4EFA940C)
fffff880`02d87000 fffff880`02dcc000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`02dcc000 fffff880`02dd5000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02dd5000 fffff880`02dfb000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`03c00000 fffff880`03c0c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`03c0c000 fffff880`03c17000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`03c17000 fffff880`03c26000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`03c26000 fffff880`03c63000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`03c6e000 fffff880`03cbb000   nvkflt   nvkflt.sys   Thu Dec 19 12:03:30 2013 (52B326E2)
fffff880`03cbb000 fffff880`03daf000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`03daf000 fffff880`03df5000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`03e00000 fffff880`03e43000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`03e43000 fffff880`03e4f000   iwdbus   iwdbus.sys   Sat Apr 14 17:16:13 2012 (4F89E91D)
fffff880`03e4f000 fffff880`03e61000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`03e65000 fffff880`03ee8000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`03ee8000 fffff880`03f06000   dfsc     dfsc.sys     Tue Apr 26 22:57:39 2011 (4DB78623)
fffff880`03f06000 fffff880`03f17000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03f17000 fffff880`03f3d000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03f3d000 fffff880`03f46000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`03f46000 fffff880`03f6a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f6a000 fffff880`03f99000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`03f99000 fffff880`03fba000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fba000 fffff880`03fd4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03fd4000 fffff880`03fdf000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`03fdf000 fffff880`03fec000   nvvad64v nvvad64v.sys Fri Dec 27 11:41:28 2013 (52BDADB8)
fffff880`04800000 fffff880`04856000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`04856000 fffff880`0486c000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`04874000 fffff880`04d91600   igdkmd64 igdkmd64.sys Thu Oct 31 14:28:01 2013 (5272A131)
fffff880`04d92000 fffff880`04da3000   HECIx64  HECIx64.sys  Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`04da3000 fffff880`04db4000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04db4000 fffff880`04dd8000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04dd8000 fffff880`04dee000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04dee000 fffff880`04dfe000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`05000000 fffff880`0502af80   CtClsFlt CtClsFlt.sys Thu Jun 16 02:40:18 2011 (4DF9A552)
fffff880`0502b000 fffff880`0504e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`0505f000 fffff880`050b9000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`050b9000 fffff880`050ce000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`050ce000 fffff880`05126000   IntcDAud IntcDAud.sys Tue Jun 19 10:40:51 2012 (4FE08F73)
fffff880`05126000 fffff880`05142000   nusb3hub nusb3hub.sys Tue Sep 13 03:14:40 2011 (4E6F02E0)
fffff880`05184000 fffff880`051a1000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`051a1000 fffff880`051ce100   usbvideo usbvideo.sys Mon Jul 13 20:07:00 2009 (4A5BCC24)
fffff880`051cf000 fffff880`051da000   qicflt   qicflt.sys   Thu Jul 01 21:46:34 2010 (4C2D44FA)
fffff880`051da000 fffff880`051fb000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`05600000 fffff880`05639000   nusb3xhc nusb3xhc.sys Tue Sep 13 03:14:43 2011 (4E6F02E3)
fffff880`05639000 fffff880`0563af00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0563b000 fffff880`05659000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05659000 fffff880`05668000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05668000 fffff880`0566d200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0566e000 fffff880`061c0000   Netwsw00 Netwsw00.sys Wed May 29 09:10:47 2013 (51A5FE57)
fffff880`061c0000 fffff880`061cd000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`061cd000 fffff880`061dc000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`061dc000 fffff880`061ec000   Accelern Accelern.sys Mon Dec 13 12:33:51 2010 (4D0658FF)
fffff880`061ec000 fffff880`061f0500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`061f1000 fffff880`061fd000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`061fd000 fffff880`061fe480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`07200000 fffff880`0720c000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0720c000 fffff880`07214080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`07219000 fffff880`075f7d80   RTKVHD64 RTKVHD64.sys Tue Jun 19 04:50:56 2012 (4FE03D70)
fffff880`07600000 fffff880`0764e000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:44:55 2011 (4E17C0A7)
fffff880`0764e000 fffff880`07671000   mrxsmb20 mrxsmb20.sys Tue May 03 22:51:05 2011 (4DC0BF19)
fffff880`076d3000 fffff880`07726000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`07726000 fffff880`07739000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`07739000 fffff880`07751000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07751000 fffff880`0776f000   bowser   bowser.sys   Wed Feb 23 00:15:06 2011 (4D6497DA)
fffff880`0776f000 fffff880`07787000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07787000 fffff880`077b4000   mrxsmb   mrxsmb.sys   Tue May 03 22:51:06 2011 (4DC0BF1A)
fffff880`07a99000 fffff880`07b3f000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`07b3f000 fffff880`07b4a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`07b4a000 fffff880`07b77000   srvnet   srvnet.sys   Thu Apr 28 23:12:35 2011 (4DBA2CA3)
fffff880`07b77000 fffff880`07b89000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`07b89000 fffff880`07b97000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`07b97000 fffff880`07ba3000   dump_pciidex dump_pciidex.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07ba3000 fffff880`07bae000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`07bae000 fffff880`07bc1000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0a453000 fffff880`0a4ba000   srv2     srv2.sys     Thu Apr 28 23:12:51 2011 (4DBA2CB3)
fffff880`0a4ba000 fffff880`0a54f000   srv      srv.sys      Thu Apr 28 23:13:05 2011 (4DBA2CC1)
fffff880`0ae00000 fffff880`0ae71000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`0ae71000 fffff880`0ae7f000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0ae7f000 fffff880`0ae8d000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0ae8d000 fffff880`0aea6000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0aea6000 fffff880`0aeb3000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`0aed8000 fffff880`0afa0000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0fe01000 fffff880`10a4a000   nvlddmkm nvlddmkm.sys Thu Dec 19 12:02:52 2013 (52B326BC)
fffff880`10a4a000 fffff880`10ba7000   SynTP    SynTP.sys    Fri Dec 17 11:51:13 2010 (4D0B9501)
fffff880`10ba7000 fffff880`10bdf000   usb3Hub  usb3Hub.sys  Fri Jun 14 09:49:08 2013 (51BB1F54)
fffff880`10bdf000 fffff880`10bfa000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff960`00030000 fffff960`00346000   win32k   win32k.sys   Thu Feb 28 22:31:58 2013 (5130212E)
fffff960`00470000 fffff960`0047a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff960`007d0000 fffff960`007f7000   cdd      cdd.dll      Wed Jan 26 01:31:34 2011 (4D3FBFC6)

Unloaded modules:
fffff880`07a71000 fffff880`07a7b000   vwifimp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`0169b000 fffff880`016a4000   stdcfltn.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`05150000 fffff880`05169000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`05142000 fffff880`05150000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`05169000 fffff880`05176000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`05176000 fffff880`05184000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`07a00000 fffff880`07a71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`0149b000 fffff880`014a9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`014a9000 fffff880`014b5000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`014b5000 fffff880`014c0000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`014c0000 fffff880`014d3000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
start             end                 module name
fffff880`061dc000 fffff880`061ec000   Accelern Accelern.sys Mon Dec 13 12:33:51 2010 (4D0658FF)
fffff880`00ebf000 fffff880`00f16000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02cfe000 fffff880`02d87000   afd      afd.sys      Tue Dec 27 22:59:08 2011 (4EFA940C)
fffff880`04856000 fffff880`0486c000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011ed000 fffff880`011f8000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00fc2000 fffff880`00fcb000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00fcb000 fffff880`00ff5000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`00f87000 fffff880`00f93000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`017f8000 fffff880`017ff000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03f06000 fffff880`03f17000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`07751000 fffff880`0776f000   bowser   bowser.sys   Wed Feb 23 00:15:06 2011 (4D6497DA)
fffff960`007d0000 fffff960`007f7000   cdd      cdd.dll      Wed Jan 26 01:31:34 2011 (4D3FBFC6)
fffff880`01200000 fffff880`0122a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d2c000 fffff880`00dec000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0146b000 fffff880`0149b000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cce000 fffff880`00d2c000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`061ec000 fffff880`061f0500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`014eb000 fffff880`0155d000   cng      cng.sys      Fri Jun 01 23:19:52 2012 (4FC98658)
fffff880`00f7e000 fffff880`00f87000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04dee000 fffff880`04dfe000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`07b89000 fffff880`07b97000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03e65000 fffff880`03ee8000   csc      csc.sys      Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`05000000 fffff880`0502af80   CtClsFlt CtClsFlt.sys Thu Jun 16 02:40:18 2011 (4DF9A552)
fffff880`03ee8000 fffff880`03f06000   dfsc     dfsc.sys     Tue Apr 26 22:57:39 2011 (4DB78623)
fffff880`03c17000 fffff880`03c26000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01455000 fffff880`0146b000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`02ca5000 fffff880`02cc7000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`07bae000 fffff880`07bc1000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`07ba3000 fffff880`07bae000   dump_msahci dump_msahci.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`07b97000 fffff880`07ba3000   dump_pciidex dump_pciidex.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`07200000 fffff880`0720c000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03cbb000 fffff880`03daf000   dxgkrnl  dxgkrnl.sys  Tue Jan 25 23:22:56 2011 (4D3FA1A0)
fffff880`03daf000 fffff880`03df5000   dxgmms1  dxgmms1.sys  Tue Jan 25 23:22:12 2011 (4D3FA174)
fffff880`01000000 fffff880`01014000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01174000 fffff880`011c0000   FLTMGR   FLTMGR.SYS   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0156e000 fffff880`01578000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:54:36 2012 (4F4EF2FC)
fffff880`011c0000 fffff880`011d2000   FSDEPENDS FSDEPENDS.SYS Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`0141b000 fffff880`01455000   fvevol   fvevol.sys   Mon Jul 13 19:22:15 2009 (4A5BC1A7)
fffff880`017af000 fffff880`017f8000   fwpkclnt fwpkclnt.sys Thu Jan 03 22:00:34 2013 (50E645D2)
fffff800`03bf1000 fffff800`03c3a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04db4000 fffff880`04dd8000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`04d92000 fffff880`04da3000   HECIx64  HECIx64.sys  Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`0ae8d000 fffff880`0aea6000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`0720c000 fffff880`07214080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0ae7f000 fffff880`0ae8d000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`0aed8000 fffff880`0afa0000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01412000 fffff880`0141b000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0563b000 fffff880`05659000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04874000 fffff880`04d91600   igdkmd64 igdkmd64.sys Thu Oct 31 14:28:01 2013 (5272A131)
fffff880`050ce000 fffff880`05126000   IntcDAud IntcDAud.sys Tue Jun 19 10:40:51 2012 (4FE08F73)
fffff880`04dd8000 fffff880`04dee000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03e43000 fffff880`03e4f000   iwdbus   iwdbus.sys   Sat Apr 14 17:16:13 2012 (4F89E91D)
fffff880`05659000 fffff880`05668000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00ba0000 fffff800`00baa000   kdcom    kdcom.dll    Sat Feb 05 07:21:45 2011 (4D4D40D9)
fffff880`03e00000 fffff880`03e43000   ks       ks.sys       Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013df000 fffff880`013f9000   ksecdd   ksecdd.sys   Fri Jun 01 22:47:00 2012 (4FC97EA4)
fffff880`01660000 fffff880`0168b000   ksecpkg  ksecpkg.sys  Fri Jun 01 23:20:48 2012 (4FC98690)
fffff880`05668000 fffff880`0566d200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`00c5c000 fffff880`00c71000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0502b000 fffff880`0504e000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c76000 fffff880`00cba000   mcupdate mcupdate.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0ae71000 fffff880`0ae7f000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`061cd000 fffff880`061dc000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0aea6000 fffff880`0aeb3000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fa8000 fffff880`00fc2000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`0776f000 fffff880`07787000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`07787000 fffff880`077b4000   mrxsmb   mrxsmb.sys   Tue May 03 22:51:06 2011 (4DC0BF1A)
fffff880`07600000 fffff880`0764e000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:44:55 2011 (4E17C0A7)
fffff880`0764e000 fffff880`07671000   mrxsmb20 mrxsmb20.sys Tue May 03 22:51:05 2011 (4DC0BF19)
fffff880`011d2000 fffff880`011dd000   msahci   msahci.sys   Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`010b2000 fffff880`010bd000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f1f000 fffff880`00f29000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01014000 fffff880`01072000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03c0c000 fffff880`03c17000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01400000 fffff880`01412000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016bd000 fffff880`017af000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`061f1000 fffff880`061fd000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`07726000 fffff880`07739000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`03f6a000 fffff880`03f99000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`050b9000 fffff880`050ce000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c16000 fffff880`02c25000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d87000 fffff880`02dcc000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01600000 fffff880`01660000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`0566e000 fffff880`061c0000   Netwsw00 Netwsw00.sys Wed May 29 09:10:47 2013 (51A5FE57)
fffff880`010bd000 fffff880`010ce000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03c00000 fffff880`03c0c000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03614000 fffff800`03bf1000   nt       ntkrnlmp.exe Mon Jul 13 19:40:48 2009 (4A5BC600)
fffff880`0123e000 fffff880`013df000   Ntfs     Ntfs.sys     Fri Apr 12 08:03:39 2013 (5167F81B)
fffff880`014d3000 fffff880`014dc000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`05126000 fffff880`05142000   nusb3hub nusb3hub.sys Tue Sep 13 03:14:40 2011 (4E6F02E0)
fffff880`05600000 fffff880`05639000   nusb3xhc nusb3xhc.sys Tue Sep 13 03:14:43 2011 (4E6F02E3)
fffff880`03c6e000 fffff880`03cbb000   nvkflt   nvkflt.sys   Thu Dec 19 12:03:30 2013 (52B326E2)
fffff880`0fe01000 fffff880`10a4a000   nvlddmkm nvlddmkm.sys Thu Dec 19 12:02:52 2013 (52B326BC)
fffff880`016ac000 fffff880`016b7000   nvpciflt nvpciflt.sys Thu Dec 19 12:03:20 2013 (52B326D8)
fffff880`03fdf000 fffff880`03fec000   nvvad64v nvvad64v.sys Fri Dec 27 11:41:28 2013 (52BDADB8)
fffff880`076d3000 fffff880`07726000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02dd5000 fffff880`02dfb000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f69000 fffff880`00f7e000   partmgr  partmgr.sys  Sat Mar 17 01:12:46 2012 (4F641D4E)
fffff880`00f29000 fffff880`00f5c000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`011dd000 fffff880`011ed000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0155d000 fffff880`0156e000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07a99000 fffff880`07b3f000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03c26000 fffff880`03c63000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cba000 fffff880`00cce000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`051cf000 fffff880`051da000   qicflt   qicflt.sys   Thu Jul 01 21:46:34 2010 (4C2D44FA)
fffff880`03f46000 fffff880`03f6a000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`10bdf000 fffff880`10bfa000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`03f99000 fffff880`03fba000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`03fba000 fffff880`03fd4000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c54000 fffff880`02ca5000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`03fd4000 fffff880`03fdf000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01097000 fffff880`010a0000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010a0000 fffff880`010a9000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010a9000 fffff880`010b2000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`015c4000 fffff880`015fe000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`07739000 fffff880`07751000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`07219000 fffff880`075f7d80   RTKVHD64 RTKVHD64.sys Tue Jun 19 04:50:56 2012 (4FE03D70)
fffff880`0149b000 fffff880`014ce000   SbieDrv  SbieDrv.sys  Mon Jul 08 07:28:31 2013 (51DAA25F)
fffff880`07b3f000 fffff880`07b4a000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`016a4000 fffff880`016ac000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0ae00000 fffff880`0ae71000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`0a4ba000 fffff880`0a54f000   srv      srv.sys      Thu Apr 28 23:13:05 2011 (4DBA2CC1)
fffff880`0a453000 fffff880`0a4ba000   srv2     srv2.sys     Thu Apr 28 23:12:51 2011 (4DBA2CB3)
fffff880`07b4a000 fffff880`07b77000   srvnet   srvnet.sys   Thu Apr 28 23:12:35 2011 (4DBA2CA3)
fffff880`01112000 fffff880`01174000   storport storport.sys Mon Jul 13 20:01:18 2009 (4A5BCACE)
fffff880`061fd000 fffff880`061fe480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`10a4a000 fffff880`10ba7000   SynTP    SynTP.sys    Fri Dec 17 11:51:13 2010 (4D0B9501)
fffff880`01802000 fffff880`019ff000   tcpip    tcpip.sys    Thu Jan 03 22:03:34 2013 (50E64686)
fffff880`07b77000 fffff880`07b89000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`02cf1000 fffff880`02cfe000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`02cd3000 fffff880`02cf1000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c40000 fffff880`02c54000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00470000 fffff960`0047a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`03f17000 fffff880`03f3d000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`03e4f000 fffff880`03e61000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`10ba7000 fffff880`10bdf000   usb3Hub  usb3Hub.sys  Fri Jun 14 09:49:08 2013 (51BB1F54)
fffff880`05184000 fffff880`051a1000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`05639000 fffff880`0563af00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04da3000 fffff880`04db4000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0505f000 fffff880`050b9000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04800000 fffff880`04856000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`051a1000 fffff880`051ce100   usbvideo usbvideo.sys Mon Jul 13 20:07:00 2009 (4A5BCC24)
fffff880`00f5c000 fffff880`00f69000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`014dc000 fffff880`014ea000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`010da000 fffff880`01112000   vhdmp    vhdmp.sys    Mon Jul 13 20:01:36 2009 (4A5BCAE0)
fffff880`01072000 fffff880`01097000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0168b000 fffff880`0169b000   vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00f93000 fffff880`00fa8000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01578000 fffff880`015c4000   volsnap  volsnap.sys  Thu Sep 06 10:55:02 2012 (5048B946)
fffff880`061c0000 fffff880`061cd000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02c00000 fffff880`02c16000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02c25000 fffff880`02c40000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0122a000 fffff880`0123a000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e0c000 fffff880`00eb0000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00eb0000 fffff880`00ebf000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dcc000 fffff880`02dd5000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00030000 fffff960`00346000   win32k   win32k.sys   Thu Feb 28 22:31:58 2013 (5130212E)
fffff880`03f3d000 fffff880`03f46000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f16000 fffff880`00f1f000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`051da000 fffff880`051fb000   WudfPf   WudfPf.sys   Mon Jul 13 20:05:37 2009 (4A5BCBD1)

Unloaded modules:
fffff880`07a71000 fffff880`07a7b000   vwifimp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`0169b000 fffff880`016a4000   stdcfltn.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00009000
fffff880`05150000 fffff880`05169000   HIDCLASS.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`05142000 fffff880`05150000   hidusb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`05169000 fffff880`05176000   mouhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff880`05176000 fffff880`05184000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`07a00000 fffff880`07a71000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`0149b000 fffff880`014a9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`014a9000 fffff880`014b5000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`014b5000 fffff880`014c0000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`014c0000 fffff880`014d3000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
Bugcheck code 000000F4
Arguments 00000000`00000003 fffffa80`12a83400 fffffa80`12a836e0 fffff800`0398e240
 
Hi,

This won't be able to be analyzed without a kernel dump, due to the nature of the crash.

Code:
fffff880`029777a8 fffff800`03a11142 : 00000000`000000f4 00000000`00000003 fffffa80`12a83400 fffffa80`12a836e0 : nt!KeBugCheckEx
fffff880`029777b0 fffff800`039bd269 : ffffffff`ffffffff fffffa80`12d46060 fffffa80`12a83400 fffffa80`12a83400 : nt!PspCatchCriticalBreak+0x92
fffff880`029777f0 fffff800`03941c74 : ffffffff`ffffffff 00000000`00000001 fffffa80`12a83400 fffff6fb`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17a06
fffff880`02977840 fffff800`03685153 : fffffa80`12a83400 fffff800`c0000005 fffffa80`12d46060 fffff880`02978238 : nt!NtTerminateProcess+0xf4
fffff880`029778c0 fffff800`036816f0 : fffff800`036c5ada fffff880`02978238 fffff880`02977f90 fffff880`029782e0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`02977a58 fffff800`036c5ada : fffff880`02978238 fffff880`02977f90 fffff880`029782e0 00000000`014e15e0 : nt!KiServiceLinkage
fffff880`02977a60 fffff800`03685542 : fffff880`02978238 00000000`76de4e8f fffff880`029782e0 00000000`014e10b8 : nt! ?? ::FNODOBFM::`string'+0x4619d
fffff880`02978100 fffff800`036840ba : 00000000`00000001 00000000`76de4e8f 00000000`76dff601 00000000`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`029782e0 00000000`76de4e4c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`014e1000 fffff800`0367d840 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76de4e4c
fffff880`02978710 00000000`00000000 : fffff800`03bf8b7f 0000001f`00000011 fffff880`029787b0 fffff900`c2613aa0 : nt!KiCallUserMode

As a matter of fact, a complete memory dump would answer all questions regarding the crash given we're starting from a call via user mode and hit the pagefault directly after, but it's not realistic to upload a complete memory dump.

Are you running Sandboxie 24/7?

Regards,

Patrick
 
I can skip the browser choice one, right (kb976002)?
downloading and installing. this may take some time :bored2:
 
I'm surprised sb appears in your report. one of the reasons behind the "clean install" is to clear all apps. There's nothing on that build (not even sp1 - yet) so sandboxie and virtualbox aren't installed. haven't even got new .net frameworks yet (trying to conserve disk space and keep the VHD trim).

Re the full dump etc, I have windbg on the stable build. I can attach the unstable volume and go to sleep, try and generate the exception, and work on the dump locally (with instructions).

Patrick - should I have followed step #1 of posting instructions with bsod log collector?
Also, could you tell me, is that the minidump I posted, and what it tells your trained eye? (how do you see sandboxie?! is this a "symbols thang"?)

very keen to learn (men taught > fishermen)

many thanks
 
There's nothing on that build (not even sp1 - yet) so sandboxie and virtualbox aren't installed.

Code:
start             end                 module name
fffff880`0149b000 fffff880`014ce000   SbieDrv    (deferred)             
    Image path: SbieDrv.sys
    Image name: SbieDrv.sys
    Timestamp:        Mon Jul 08 07:28:31 [COLOR=#ff0000]2013[/COLOR]

The above is a driver from Sandboxie's kernel mode suite, and it's loaded on the system in the latest crash dump.

Also, could you tell me, is that the minidump I posted, and what it tells your trained eye?

0xF4's are either a critical system process/thread termination bug check.

Code:
Arguments [COLOR=#ff0000]00000000`00000003[/COLOR] fffffa80`12a83400 fffffa80`12a836e0 fffff800`0398e240

00000000`00000003 = Process, 6 is thread.

Code:
GetPointerFromAddress: unable to read from fffff800038bc000
PROCESS fffffa8012a83400
    SessionId: none  Cid: 0324    Peb: 7fffffdf000  ParentCid: 0318
    DirBase: 220152000  ObjectTable: fffff8a00015ad20  HandleCount: <Data Not Accessible>
    Image: [COLOR=#ff0000]csrss.exe[/COLOR]

Client/Server Runtime Subsystem is the critical process that crashed, which makes sense as to why we're seeing mention of a user-mode call as the first thing in the stack. Csrss is a user-mode service, and when a user-mode process calls a function as opposed to issuing a system call (INT 2e for example), Win32 libraries send an inter-process call to csrss's process. Csrss then handles most of the work without needing to get the kernel involved like it would be with system calls. Usually when you see an 0xF4 with csrss as the terminating process, you inspect likely 3rd party culprits. This is a pretty blank system, with really the only red-flag-raising 3rd party driver being Sandboxie.

I agree to update to SP1 as that's relatively imperative, but if the crashes continue, I'd definitely remove Sandboxie. It's loaded, so it's installed.

Regards,

Patrick
 
Thanks, I'll have a closer look. Right now, I'm stuck. Followed instruction #1: get updates.

SP1 seems smaller than I expected, perhaps just the installer...
A couple of updates failed, but SP1 says it installed successfully, but I'm still on build 7600. (ever heard of that?!)
5mjCmq7.png TAFg62U.png

Downloaded system update readiness tool (500MB!) after learning system restore is not turned on (so can't undo unsuccessful, reported successful update (976932)

I've looked and looked, and there's no sbiedrv installed on this build (I'm on the problematic new clean build now)

CV3pyt5.png
 
I've just check the minidump stamp and it's an old one. So sorry about that. There's only one in C:\Windows\Minidump, after I caused the exception. I'll sleep now and see if one is generated.

I've checked and it looks normal I think
9MCe6Dx.png
but when I click ok I get this
GXQ9qOn.png
 
Code:
fffff880`19e980a8 fffff800`02253142 : 00000000`000000f4 00000000`00000003 fffffa80`0990c560 fffffa80`0990c840 : nt!KeBugCheckEx
fffff880`19e980b0 fffff800`021ff269 : ffffffff`ffffffff fffffa80`080f5660 fffffa80`0990c560 fffffa80`0990c560 : nt!PspCatchCriticalBreak+0x92
fffff880`19e980f0 fffff800`02183c74 : ffffffff`ffffffff 00000000`00000001 fffffa80`0990c560 fffff6fb`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17a06
fffff880`19e98140 fffff800`01ec7153 : fffffa80`0990c560 fffff800`c0000006 fffffa80`080f5660 fffff880`19e98b38 : nt!NtTerminateProcess+0xf4
fffff880`19e981c0 fffff800`01ec36f0 : fffff800`01f07ada fffff880`19e98b38 fffff880`19e98890 fffff880`19e98be0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`19e98358 fffff800`01f07ada : fffff880`19e98b38 fffff880`19e98890 fffff880`19e98be0 00000000`014d1680 : nt!KiServiceLinkage
fffff880`19e98360 fffff800`01ec7542 : fffff880`19e98b38 00000000`00011e34 fffff880`19e98be0 00000000`014d1158 : nt! ?? ::FNODOBFM::`string'+0x4619d
fffff880`19e98a00 fffff800`01ec60ba : 00000000`00000000 00000000`00011e34 00000000`77bd4e01 00000000`014eb000 : nt!KiExceptionDispatch+0xc2
fffff880`19e98be0 00000000`77ac548f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`014d10a0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : [COLOR="#FF0000"]0x77ac548f[/COLOR]

AFAIK (correct me if I'm wrong), it looks like the virtual address for csrss.exe is paged out, the user mode process incurred csrss, bring the page into memory, although something went wrong because of an I/O error, causing the thread to terminate.

It is very likely a disk filter driver is misbehaving; I'm not confident on this driver.

Code:
stdcfltn.sys

It appears to be the Disk Class Filter Driver for Accelerometer by ST MicroElectronics, you might want to try their website for an update.

It's a driver for the accelerometer, which is a chip built into laptops to detect drops, when it detects the drop, the driver stops the hard drive by parking the head, preventing data loss.
Quite a nice feature to be honest.
 
I don't think that's the culprit as I don't recall updating that driver on my other (stable) builds on same laptop... comparing driver versions (new build has assembly 1.0.0.15) and checking man's site
 
Downloaded system update readiness tool (500MB!) after learning system restore is not turned on (so can't undo unsuccessful, reported successful update (976932)
Could you upload your SURT log (C:\Windows\Logs\CBS\CheckSUR.persist.log) to your next post so I can take a look at why SP1 isn't installing?

Thanks,
Stephen
 
ok I found the full installer in an archive of kb's I've accumulated.
Didn't think it was going to work (hung around 50% for an epoch) but it says it's installed! The CBS.log is wasted on my untrained eyes.
Re SURT, that's not on the (new) clean build anymore (that build I trashed, after reading of SURT complexities

Should I try and get a new (BSOD) dump?
 
You haven't answered my question as to why a Sanboxie kernel mode driver is listed and loaded. The only explanation is it's installed.

Have you uninstalled it?
 
I posted the wrong log. This is a new build, sandboxie is not installed. please see previous post for updated log.

First resume-from-sleep with SP1 did not crash - could this have been the cause?

Monitoring, awaiting instructions. On the clean build SURT is not yet installed (not exactly sure if I need it or how to use it).

thanks again, apologies for confusion
 
We'll need a kernel dump.

C:\Windows > MEMORY.DMP.

Upload it 3rd party (Onedrive for example) and then paste the link here, please.

Regards,

Patrick
 
Hi -

The first thing to do is to get Windows 7 SP1 + all outstanding Windows Updates installed.

Learn how to install Windows 7 Service Pack 1 (SP1)
...

jcgriff2

I've gone from having a failed SP1 update (build 7600) that shows as "successfully installed" ... to (successfully!) manually installing windows6.1-KB976932-X64 (900MB)
but now the windows update list doesn't reflect the fact that KB976932 is installed (and has some old fails listed in windows update history) - is this fixable / a cause for concern?

(On the positive, no blue screen since SP1 successfully installed : )

VgY107I.pngFJFOZOu.png

nzRVuDa.png
 
I can't find that memory.dmp, although I think I should see one
SugF6Mt.png
in virtual memory settings it reports 1024mb in use. tried to emulate settings on other builds (paging file only on host, d:) but after a restart there's an error and it reports 8gb paging in use.

FPTOX6G.png
 
You're looking at two incorrect paths. The file collection app doesn't collect kernels and the only dumps you'll find in Minidump are small memory dumps.

The only path is C:\Windows.

Regards,

Patrick
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top