[SOLVED] BSOD while browsing in firefox

malis2007

Member
Joined
Jul 26, 2013
Posts
100
Hello there!
First of all.. Thanks for reading, and your help in-advanced. :)

Attached
SysnativeFileCollectionApp.zip:
View attachment SysnativeFileCollectionApp.zip

· OS - Windows 10, 8.1, 8, 7, Vista ? 7
· x86 (32-bit) or x64 ? x64
· What was original installed OS on system? win7 home premium
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? pre-installed (OEM)
· Age of system (hardware): don't know..
· Age of OS installation - have you re-installed the OS?: don't know/recall.

· CPU: intel core i7 740qm 1.73ghz
· Video Card: nvidia geforce gt425m cuda 1gb
· MotherBoard - (if NOT a laptop)
· Power Supply - brand & wattage (if laptop, skip this one)

· System Manufacturer: ASUS
· Exact model number (if laptop, check label on bottom): n53j series

· Laptop or Desktop? Laptop

i had a sudden BSOD while browsing in firefox :/
 
Hi. . .

The lone BSOD listed Hitman Pro Alert as the probable cause.
Code:
hmpnet.sys   Sat Dec 31 05:26:02 2016 (586787BA

Update to most recent version - HitmanPro.Alert Ransomware Scanner, Anti-Exploit Tool | Download HMP.Alert with CryptoGuard | hitmanpro.com

If already done so, remove it from your system.

Regards. . .

jcgriff2

Code:
Microsoft (R) Windows Debugger Version 10.0.10075.9 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\SAL34.tmp\071217-41277-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.23807.amd64fre.win7sp1_ldr.170512-0600
Machine Name:
Kernel base = 0xfffff800`03463000 PsLoadedModuleList = 0xfffff800`036a5750
Debug session time: Wed Jul 12 13:19:41.049 2017 (UTC - 4:00)
System Uptime: 0 days 6:36:13.968
Loading Kernel Symbols
...............................................................
................................................................
...................................................
Loading User Symbols
Loading unloaded module list
..............
No .natvis files found at C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\Visualizers.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {3, fffff80003666940, 0, fffff80003666940}

*** ERROR: Module load completed but symbols could not be loaded for tdx.sys
*** WARNING: Unable to verify timestamp for hmpnet.sys
*** ERROR: Module load completed but symbols could not be loaded for hmpnet.sys
Probably caused by : Pool_Corruption ( nt!ExFreePool+503 )

Followup:     Pool_corruption
---------

Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
6: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff80003666940, the pool entry being checked.
Arg3: 0000000000000000, the read back flink freelist value (should be the same as 2).
Arg4: fffff80003666940, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------


SYSTEM_SKU:                        

SYSTEM_VERSION:  1.0       

BIOS_DATE:  11/05/2010

BASEBOARD_PRODUCT:  N53Jq

BASEBOARD_VERSION:  1.0       

BUGCHECK_P1: 3

BUGCHECK_P2: fffff80003666940

BUGCHECK_P3: 0

BUGCHECK_P4: fffff80003666940

BUGCHECK_STR:  0x19_3

CPU_COUNT: 8

CPU_MHZ: 6c1

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 1e

CPU_STEPPING: 5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  2

ANALYSIS_VERSION: 10.0.10075.9 amd64fre

LAST_CONTROL_TRANSFER:  from fffff800036094c3 to fffff800034d3e40

STACK_TEXT:  
fffff880`0d363ff8 fffff800`036094c3 : 00000000`00000019 00000000`00000003 fffff800`03666940 00000000`00000000 : nt!KeBugCheckEx
fffff880`0d364000 fffff880`03e4856f : 00000000`00000000 fffffa80`0caad440 fffff800`00000000 fffffa80`00000000 : nt!ExFreePool+0x503
fffff880`0d3640f0 fffff880`09bea81f : fffffa80`00000000 fffffa80`0619ecb0 fffffa80`05ce7740 00000000`00000000 : tdx+0x856f
fffff880`0d364190 fffffa80`00000000 : fffffa80`0619ecb0 fffffa80`05ce7740 00000000`00000000 fffffa80`0619ecb0 : hmpnet+0x181f
fffff880`0d364198 fffffa80`0619ecb0 : fffffa80`05ce7740 00000000`00000000 fffffa80`0619ecb0 fffff880`09beac1a : 0xfffffa80`00000000
fffff880`0d3641a0 fffffa80`05ce7740 : 00000000`00000000 fffffa80`0619ecb0 fffff880`09beac1a fffffa80`0619edc8 : 0xfffffa80`0619ecb0
fffff880`0d3641a8 00000000`00000000 : fffffa80`0619ecb0 fffff880`09beac1a fffffa80`0619edc8 00000000`00000240 : 0xfffffa80`05ce7740


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExFreePool+503
fffff800`036094c3 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExFreePool+503

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

IMAGE_VERSION:  6.1.7601.23807

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExFreePool+503

BUCKET_ID:  X64_0x19_3_nt!ExFreePool+503

PRIMARY_PROBLEM_CLASS:  X64_0x19_3_nt!ExFreePool+503

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x19_3_nt!exfreepool+503

FAILURE_ID_HASH:  {d373d2a9-5d4f-c173-73da-6579efcd2515}

Followup:     Pool_corruption
---------

rax=fffffa800ba60010 rbx=fffff80003666940 rcx=0000000000000019
rdx=0000000000000003 rsi=0000000000000029 rdi=0000000000000000
rip=fffff800034d3e40 rsp=fffff8800d363ff8 rbp=0000000000001000
 r8=fffff80003666940  r9=0000000000000000 r10=fffff80003666588
r11=fffffa800619ed80 r12=fffff80003666580 r13=0000000000000000
r14=0000000000000000 r15=0000000043786454
iopl=0         nv up ei pl nz na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000207
nt!KeBugCheckEx:
fffff800`034d3e40 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`0d364000=0000000000000019
 # Child-SP          RetAddr           : Args to Child                                                           : Call Site
00 fffff880`0d363ff8 fffff800`036094c3 : 00000000`00000019 00000000`00000003 fffff800`03666940 00000000`00000000 : nt!KeBugCheckEx
01 fffff880`0d364000 fffff880`03e4856f : 00000000`00000000 fffffa80`0caad440 fffff800`00000000 fffffa80`00000000 : nt!ExFreePool+0x503
02 fffff880`0d3640f0 fffff880`09bea81f : fffffa80`00000000 fffffa80`0619ecb0 fffffa80`05ce7740 00000000`00000000 : tdx+0x856f
03 fffff880`0d364190 fffffa80`00000000 : fffffa80`0619ecb0 fffffa80`05ce7740 00000000`00000000 fffffa80`0619ecb0 : hmpnet+0x181f
04 fffff880`0d364198 fffffa80`0619ecb0 : fffffa80`05ce7740 00000000`00000000 fffffa80`0619ecb0 fffff880`09beac1a : 0xfffffa80`00000000
05 fffff880`0d3641a0 fffffa80`05ce7740 : 00000000`00000000 fffffa80`0619ecb0 fffff880`09beac1a fffffa80`0619edc8 : 0xfffffa80`0619ecb0
06 fffff880`0d3641a8 00000000`00000000 : fffffa80`0619ecb0 fffff880`09beac1a fffffa80`0619edc8 00000000`00000240 : 0xfffffa80`05ce7740
start             end                 module name
fffff800`00bd1000 fffff800`00bdb000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff800`0341a000 fffff800`03463000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff800`03463000 fffff800`03a49000   nt       ntkrnlmp.exe Fri May 12 13:49:14 2017 (5915F59A)
fffff880`00c0c000 fffff880`00c8a000   mcupdate mcupdate.dll Sat May 09 14:16:12 2015 (554E4EEC)
fffff880`00c8a000 fffff880`00c9e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00c9e000 fffff880`00cfd000   CLFS     CLFS.SYS     Thu Nov 17 10:57:42 2016 (582DD376)
fffff880`00cfd000 fffff880`00d72000   CI       CI.dll       Thu Jun 26 22:08:21 2014 (53ACD215)
fffff880`00d72000 fffff880`00dce000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00e6a000 fffff880`00e9d000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00e9d000 fffff880`00eaa000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00eaa000 fffff880`00ebf000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00ebf000 fffff880`00ec8000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00ec8000 fffff880`00ed4000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`00edc000 fffff880`00f9e000   Wdf01000 Wdf01000.sys Fri Jun 21 23:13:05 2013 (51C51641)
fffff880`00f9e000 fffff880`00fae000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`00fae000 fffff880`00fc3000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00fc3000 fffff880`00fca000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fca000 fffff880`00fda000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`00fda000 fffff880`00ff4000   mountmgr mountmgr.sys Sun May 07 10:52:08 2017 (590F3498)
fffff880`01000000 fffff880`01031000   MBAMChameleon MBAMChameleon.sys Tue Jun 27 14:22:06 2017 (5952A24E)
fffff880`01033000 fffff880`0123d000   iaStor   iaStor.sys   Wed Mar 03 21:51:31 2010 (4B8F2033)
fffff880`0123d000 fffff880`01246000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01246000 fffff880`01270000   ataport  ataport.SYS  Sun Aug 04 21:02:45 2013 (51FEF9B5)
fffff880`01270000 fffff880`0127b000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`0127b000 fffff880`01286000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`01286000 fffff880`012d2000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`012d2000 fffff880`012e6000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`012e6000 fffff880`01344000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`01344000 fffff880`013b9000   cng      cng.sys      Sat Nov 19 11:03:43 2016 (583077DF)
fffff880`013b9000 fffff880`013dc000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`01402000 fffff880`015ab000   Ntfs     Ntfs.sys     Mon Jan 11 12:38:49 2016 (5693E8A9)
fffff880`015ab000 fffff880`015c6000   ksecdd   ksecdd.sys   Sat May 20 23:47:38 2017 (59210DDA)
fffff880`015c6000 fffff880`015d7000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`015d7000 fffff880`015e1000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`01600000 fffff880`01661000   NETIO    NETIO.SYS    Tue Apr 04 10:53:11 2017 (58E3B357)
fffff880`01661000 fffff880`0168c000   ksecpkg  ksecpkg.sys  Sat May 20 23:55:20 2017 (59210FA8)
fffff880`0168c000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Tue Apr 04 10:53:02 2017 (58E3B34E)
fffff880`016da000 fffff880`017cd000   ndis     ndis.sys     Mon Oct 12 23:30:31 2015 (561C7AD7)
fffff880`017cd000 fffff880`017e6000   HIDCLASS HIDCLASS.SYS Wed Jul 03 00:05:05 2013 (51D3A2F1)
fffff880`01801000 fffff880`019fd000   tcpip    tcpip.sys    Tue Apr 04 10:53:49 2017 (58E3B37D)
fffff880`01a00000 fffff880`01a5a000   usbhub   usbhub.sys   Tue Aug 16 16:40:25 2016 (57B37A39)
fffff880`01a5a000 fffff880`01a68000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`01a6b000 fffff880`01ab7000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`01ab7000 fffff880`01abf000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01abf000 fffff880`01af9000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`01af9000 fffff880`01afd600   nvpciflt nvpciflt.sys Tue Aug 17 00:11:15 2010 (4C6A0BE3)
fffff880`01afe000 fffff880`01b10000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01b10000 fffff880`01b19000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`01b19000 fffff880`01b32000   edevmon  edevmon.sys  Thu Dec 01 05:42:33 2016 (583FFE99)
fffff880`01b32000 fffff880`01b6c000   fvevol   fvevol.sys   Wed Jan 23 22:11:24 2013 (5100A65C)
fffff880`01b6c000 fffff880`01b81000   disk     disk.sys     Tue Jan 19 21:12:06 2016 (569EECF6)
fffff880`01b81000 fffff880`01bb1000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`01bbf000 fffff880`01bf4000   nvhda64v nvhda64v.sys Tue May 16 09:02:27 2017 (591AF863)
fffff880`02e00000 fffff880`02e11000   epfw     epfw.sys     Thu Dec 01 05:44:27 2016 (583FFF0B)
fffff880`02e11000 fffff880`02e88000   em042_64 em042_64.dll Tue Jul 11 09:19:35 2017 (5964D067)
fffff880`02e88000 fffff880`02ea1000   epfwwfp  epfwwfp.sys  Thu Dec 01 05:44:27 2016 (583FFF0B)
fffff880`02ea1000 fffff880`02f36000   srv      srv.sys      Wed Apr 05 10:55:34 2017 (58E50566)
fffff880`02f84000 fffff880`02f92000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02f92000 fffff880`02fb7000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`02fb7000 fffff880`02fc7000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`02fc7000 fffff880`02fd0000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02fd0000 fffff880`02fd9000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02fd9000 fffff880`02fe2000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`02fe2000 fffff880`02fed000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`02fed000 fffff880`02ffe000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03e00000 fffff880`03e40000   em006_64 em006_64.dll Tue May 30 03:12:37 2017 (592D1B65)
fffff880`03e40000 fffff880`03e62000   tdx      tdx.sys      Wed May 10 10:52:38 2017 (59132936)
fffff880`03e62000 fffff880`03e9f000   portcls  portcls.sys  Tue Dec 08 13:12:06 2015 (56671D76)
fffff880`03e9f000 fffff880`03eae000   nvvhci   nvvhci.sys   Tue Dec 27 20:44:00 2016 (586318E0)
fffff880`03eae000 fffff880`040b8000   dump_iaStor dump_iaStor.sys Wed Mar 03 21:51:31 2010 (4B8F2033)
fffff880`040b8000 fffff880`040d5000   usbccgp  usbccgp.sys  Tue Aug 16 16:40:16 2016 (57B37A30)
fffff880`040dd000 fffff880`040f2000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`040f2000 fffff880`04100000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`04107000 fffff880`041b7000   eamonm   eamonm.sys   Thu Dec 01 05:42:31 2016 (583FFE97)
fffff880`041b7000 fffff880`041c0000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`041c0000 fffff880`041c7000   beep     beep.sys     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`041c7000 fffff880`041f2000   ehdrv    ehdrv.sys    Thu Dec 01 05:43:40 2016 (583FFEDC)
fffff880`041f2000 fffff880`041fe000   em000k_64 em000k_64.dll Wed Jun 21 03:44:58 2017 (594A23FA)
fffff880`0460c000 fffff880`047e8000   em008_64 em008_64.dll Mon May 29 03:57:16 2017 (592BD45C)
fffff880`047e8000 fffff880`047f5000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`04a00000 fffff880`04a16000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`04a16000 fffff880`04a38000   drmk     drmk.sys     Tue Dec 08 13:54:36 2015 (5667276C)
fffff880`04a39000 fffff880`04a6d000   VBoxNetLwf VBoxNetLwf.sys Tue Jan 19 11:40:16 2016 (569E66F0)
fffff880`04a6d000 fffff880`04a7b000   EpfwLWF  EpfwLWF.sys  Thu Dec 01 05:44:26 2016 (583FFF0A)
fffff880`04a7b000 fffff880`04a8a000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04a8a000 fffff880`04aa5000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`04aa5000 fffff880`04ace000   VBoxUSBMon VBoxUSBMon.sys Tue Jan 19 11:40:17 2016 (569E66F1)
fffff880`04ace000 fffff880`04af4000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`04af4000 fffff880`04b7d000   afd      afd.sys      Tue Apr 04 10:53:16 2017 (58E3B35C)
fffff880`04b7d000 fffff880`04bc2000   netbt    netbt.sys    Wed May 11 10:58:22 2016 (5733488E)
fffff880`04bc2000 fffff880`04bcb000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04bcb000 fffff880`04bf1000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`04bf1000 fffff880`04bff000   nvvad64v nvvad64v.sys Wed Apr 12 04:06:41 2017 (58EDE011)
fffff880`04c00000 fffff880`04c3d000   hmpalert hmpalert.sys Fri Jun 09 05:59:11 2017 (593A716F)
fffff880`04c3d000 fffff880`04c4b6a0   mbae64   mbae64.sys   Fri Apr 29 06:10:09 2016 (57233301)
fffff880`04c4c000 fffff880`04c5b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`04c5b000 fffff880`04c7a000   dfsc     dfsc.sys     Thu Sep 08 10:55:13 2016 (57D17BD1)
fffff880`04c7a000 fffff880`04c8b000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04c8b000 fffff880`04d7c000   VBoxDrv  VBoxDrv.sys  Tue Jan 19 11:40:46 2016 (569E670E)
fffff880`04d7c000 fffff880`04d90000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`04d90000 fffff880`04de1000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04de1000 fffff880`04ded000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`04ded000 fffff880`04df8000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`04e00000 fffff880`04e24000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`04e24000 fffff880`04e35000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`04e35000 fffff880`04e47000   usbehci  usbehci.sys  Tue Aug 16 16:40:12 2016 (57B37A2C)
fffff880`04e47000 fffff880`04e9e000   USBPORT  USBPORT.SYS  Tue Aug 16 16:40:11 2016 (57B37A2B)
fffff880`04e9e000 fffff880`04eb9000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04eba000 fffff880`04faf000   dxgkrnl  dxgkrnl.sys  Fri Apr 07 10:58:54 2017 (58E7A92E)
fffff880`04faf000 fffff880`04ff5000   dxgmms1  dxgmms1.sys  Fri Apr 07 10:58:40 2017 (58E7A920)
fffff880`05000000 fffff880`05010000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`05010000 fffff880`05026000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`05026000 fffff880`0504a000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0504a000 fffff880`05056000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05056000 fffff880`05057480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`05058000 fffff880`0505d200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05065000 fffff880`0530b000   athrx    athrx.sys    Tue Jun 21 04:03:39 2011 (4E00505B)
fffff880`0530b000 fffff880`05318000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`05318000 fffff880`05359000   FLxHCIc  FLxHCIc.sys  Fri Nov 02 05:01:10 2012 (50938BD6)
fffff880`05359000 fffff880`0535ae80   USBD     USBD.SYS     Tue Aug 16 16:40:06 2016 (57B37A26)
fffff880`0535b000 fffff880`05379000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`05379000 fffff880`0539e000   ETD      ETD.sys      Wed Jul 21 01:33:50 2010 (4C4686BE)
fffff880`0539e000 fffff880`053ad000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`053ad000 fffff880`053b5000   kbfiltr  kbfiltr.sys  Mon Jul 20 05:21:42 2009 (4A643726)
fffff880`053b5000 fffff880`053c1000   ekbdflt  ekbdflt.sys  Thu Dec 01 05:46:07 2016 (583FFF6F)
fffff880`053c1000 fffff880`053d0000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`053d0000 fffff880`053d4500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`053d5000 fffff880`053eb000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`053eb000 fffff880`053f3000   ATK64AMD ATK64AMD.sys Tue May 12 21:04:54 2009 (4A0A1CB6)
fffff880`053f3000 fffff880`053fe000   Sftvollh Sftvollh.sys Tue Oct 07 23:03:06 2014 (5434A96A)
fffff880`05c00000 fffff880`05c4e000   mrxsmb10 mrxsmb10.sys Sat May 20 23:48:19 2017 (59210E03)
fffff880`05c4e000 fffff880`05c72000   mrxsmb20 mrxsmb20.sys Sat May 20 23:48:17 2017 (59210E01)
fffff880`05cbf000 fffff880`05cf5000   SbieDrv  SbieDrv.sys  Mon Jun 05 12:47:14 2017 (59358B12)
fffff880`05cf5000 fffff880`05d0a000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05d0a000 fffff880`05d5d000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`05d5d000 fffff880`05d70000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`05d70000 fffff880`05d88000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05d88000 fffff880`05d8f000   TurboB   TurboB.sys   Fri Apr 16 19:07:26 2010 (4BC8EDAE)
fffff880`05d8f000 fffff880`05d97000   ASMMAP64 ASMMAP64.sys Thu Jul 02 05:13:26 2009 (4A4C7A36)
fffff880`05d97000 fffff880`05db4000   bowser   bowser.sys   Wed Oct 05 10:54:43 2016 (57F51433)
fffff880`05db4000 fffff880`05dcc000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05dcc000 fffff880`05df9000   mrxsmb   mrxsmb.sys   Sat May 20 23:48:53 2017 (59210E25)
fffff880`05e03000 fffff880`063ad000   RTKVHD64 RTKVHD64.sys Tue Apr 11 06:45:30 2017 (58ECB3CA)
fffff880`063ad000 fffff880`063bb000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`063bb000 fffff880`063c3080   HIDPARSE HIDPARSE.SYS Wed Jul 03 00:05:04 2013 (51D3A2F0)
fffff880`063c6000 fffff880`063d2000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`063d2000 fffff880`063e0000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`063e0000 fffff880`063f3000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`063f3000 fffff880`06400000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`08e13000 fffff880`08edc000   HTTP     HTTP.sys     Tue Feb 24 22:17:55 2015 (54ED3EE3)
fffff880`08edc000 fffff880`08f0f000   idmwfp   idmwfp.sys   Tue Jun 06 11:50:55 2017 (5936CF5F)
fffff880`08f0f000 fffff880`08f1b000   npf      npf.sys      Thu Feb 28 20:31:24 2013 (513004EC)
fffff880`08f1b000 fffff880`08fc5000   peauth   peauth.sys   Tue Jun 14 13:11:06 2016 (57603AAA)
fffff880`09200000 fffff880`0921a000   farflt   farflt.sys   Wed Jun 14 09:21:34 2017 (5941385E)
fffff880`09276000 fffff880`09338000   Sftfslh  Sftfslh.sys  Tue Oct 07 23:03:22 2014 (5434A97A)
fffff880`09338000 fffff880`09386000   Sftplaylh Sftplaylh.sys Tue Oct 07 23:03:44 2014 (5434A990)
fffff880`09386000 fffff880`09398000   tcpipreg tcpipreg.sys Thu Jul 07 11:08:06 2016 (577E7056)
fffff880`09398000 fffff880`093ce000   fastfat  fastfat.SYS  Fri Mar 10 10:55:26 2017 (58C2CC6E)
fffff880`093ce000 fffff880`093da000   Sftredirlh Sftredirlh.sys Tue Oct 07 23:03:47 2014 (5434A993)
fffff880`09a00000 fffff880`09a40000   MBAMSwissArmy MBAMSwissArmy.sys Fri Jun 02 16:46:01 2017 (5931CE89)
fffff880`09a40000 fffff880`09a71000   srvnet   srvnet.sys   Wed Apr 05 10:55:22 2017 (58E5055A)
fffff880`09a71000 fffff880`09ad9000   srv2     srv2.sys     Wed Apr 05 10:55:27 2017 (58E5055F)
fffff880`09af0000 fffff880`09be9000   em018_64 em018_64.dll Wed Jul 05 05:08:15 2017 (595CAC7F)
fffff880`09be9000 fffff880`09bff000   hmpnet   hmpnet.sys   Sat Dec 31 05:26:02 2016 (586787BA)
fffff880`0ac93000 fffff880`0aca0000   mbam     mbam.sys     Wed Jun 07 10:26:58 2017 (59380D32)
fffff880`0ad08000 fffff880`0ad20000   mwac     mwac.sys     Tue Jun 20 13:52:56 2017 (594960F8)
fffff880`0f200000 fffff880`0f22f000   BazisVirtualCDBus BazisVirtualCDBus.sys Sat Sep 26 22:51:28 2015 (560759B0)
fffff880`0f22f000 fffff880`0f272000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`0f272000 fffff880`0f284000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0f285000 fffff880`10195000   nvlddmkm nvlddmkm.sys Tue Jun 27 16:00:30 2017 (5952B95E)
fffff880`10195000 fffff880`101c4000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`101c4000 fffff880`101e5000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`101e5000 fffff880`101ff000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff960`00060000 fffff960`00387000   win32k   win32k.sys   Fri May 12 13:52:11 2017 (5915F64B)
fffff960`00560000 fffff960`0056a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      Fri Apr 07 11:31:14 2017 (58E7B0C2)

Unloaded modules:
fffff880`0acf0000 fffff880`0ad08000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0acd8000 fffff880`0acf0000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0acc0000 fffff880`0acd8000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0aca0000 fffff880`0acb8000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0acb8000 fffff880`0acc0000   lvupdtio.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00008000
fffff880`093da000 fffff880`093f2000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0ac22000 fffff880`0ac93000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`02ea7000 fffff880`02f84000   em018_64.dll
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  000DD000
fffff880`01bb1000 fffff880`01bbf000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`03ec0000 fffff880`040ca000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0020A000
fffff880`040ca000 fffff880`040dd000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`063ad000 fffff880`063c6000   FLxHCIh.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`04a16000 fffff880`04a39000   VBoxNetAdp6.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00023000
fffff880`040dd000 fffff880`04107000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002A000
start             end                 module name
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`04af4000 fffff880`04b7d000   afd      afd.sys      Tue Apr 04 10:53:16 2017 (58E3B35C)
fffff880`05010000 fffff880`05026000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0127b000 fffff880`01286000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`05d8f000 fffff880`05d97000   ASMMAP64 ASMMAP64.sys Thu Jul 02 05:13:26 2009 (4A4C7A36)
fffff880`0123d000 fffff880`01246000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01246000 fffff880`01270000   ataport  ataport.SYS  Sun Aug 04 21:02:45 2013 (51FEF9B5)
fffff880`05065000 fffff880`0530b000   athrx    athrx.sys    Tue Jun 21 04:03:39 2011 (4E00505B)
fffff880`053eb000 fffff880`053f3000   ATK64AMD ATK64AMD.sys Tue May 12 21:04:54 2009 (4A0A1CB6)
fffff880`00ec8000 fffff880`00ed4000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`0f200000 fffff880`0f22f000   BazisVirtualCDBus BazisVirtualCDBus.sys Sat Sep 26 22:51:28 2015 (560759B0)
fffff880`041c0000 fffff880`041c7000   beep     beep.sys     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04c7a000 fffff880`04c8b000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05d97000 fffff880`05db4000   bowser   bowser.sys   Wed Oct 05 10:54:43 2016 (57F51433)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      Fri Apr 07 11:31:14 2017 (58E7B0C2)
fffff880`00cfd000 fffff880`00d72000   CI       CI.dll       Thu Jun 26 22:08:21 2014 (53ACD215)
fffff880`01b81000 fffff880`01bb1000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c9e000 fffff880`00cfd000   CLFS     CLFS.SYS     Thu Nov 17 10:57:42 2016 (582DD376)
fffff880`053d0000 fffff880`053d4500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01344000 fffff880`013b9000   cng      cng.sys      Sat Nov 19 11:03:43 2016 (583077DF)
fffff880`00ebf000 fffff880`00ec8000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`05000000 fffff880`05010000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`063d2000 fffff880`063e0000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04c5b000 fffff880`04c7a000   dfsc     dfsc.sys     Thu Sep 08 10:55:13 2016 (57D17BD1)
fffff880`04c4c000 fffff880`04c5b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01b6c000 fffff880`01b81000   disk     disk.sys     Tue Jan 19 21:12:06 2016 (569EECF6)
fffff880`04a16000 fffff880`04a38000   drmk     drmk.sys     Tue Dec 08 13:54:36 2015 (5667276C)
fffff880`063e0000 fffff880`063f3000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`03eae000 fffff880`040b8000   dump_iaStor dump_iaStor.sys Wed Mar 03 21:51:31 2010 (4B8F2033)
fffff880`063c6000 fffff880`063d2000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04eba000 fffff880`04faf000   dxgkrnl  dxgkrnl.sys  Fri Apr 07 10:58:54 2017 (58E7A92E)
fffff880`04faf000 fffff880`04ff5000   dxgmms1  dxgmms1.sys  Fri Apr 07 10:58:40 2017 (58E7A920)
fffff880`04107000 fffff880`041b7000   eamonm   eamonm.sys   Thu Dec 01 05:42:31 2016 (583FFE97)
fffff880`01b19000 fffff880`01b32000   edevmon  edevmon.sys  Thu Dec 01 05:42:33 2016 (583FFE99)
fffff880`041c7000 fffff880`041f2000   ehdrv    ehdrv.sys    Thu Dec 01 05:43:40 2016 (583FFEDC)
fffff880`053b5000 fffff880`053c1000   ekbdflt  ekbdflt.sys  Thu Dec 01 05:46:07 2016 (583FFF6F)
fffff880`041f2000 fffff880`041fe000   em000k_64 em000k_64.dll Wed Jun 21 03:44:58 2017 (594A23FA)
fffff880`03e00000 fffff880`03e40000   em006_64 em006_64.dll Tue May 30 03:12:37 2017 (592D1B65)
fffff880`0460c000 fffff880`047e8000   em008_64 em008_64.dll Mon May 29 03:57:16 2017 (592BD45C)
fffff880`09af0000 fffff880`09be9000   em018_64 em018_64.dll Wed Jul 05 05:08:15 2017 (595CAC7F)
fffff880`02e11000 fffff880`02e88000   em042_64 em042_64.dll Tue Jul 11 09:19:35 2017 (5964D067)
fffff880`02e00000 fffff880`02e11000   epfw     epfw.sys     Thu Dec 01 05:44:27 2016 (583FFF0B)
fffff880`04a6d000 fffff880`04a7b000   EpfwLWF  EpfwLWF.sys  Thu Dec 01 05:44:26 2016 (583FFF0A)
fffff880`02e88000 fffff880`02ea1000   epfwwfp  epfwwfp.sys  Thu Dec 01 05:44:27 2016 (583FFF0B)
fffff880`05379000 fffff880`0539e000   ETD      ETD.sys      Wed Jul 21 01:33:50 2010 (4C4686BE)
fffff880`09200000 fffff880`0921a000   farflt   farflt.sys   Wed Jun 14 09:21:34 2017 (5941385E)
fffff880`09398000 fffff880`093ce000   fastfat  fastfat.SYS  Fri Mar 10 10:55:26 2017 (58C2CC6E)
fffff880`012d2000 fffff880`012e6000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01286000 fffff880`012d2000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`05318000 fffff880`05359000   FLxHCIc  FLxHCIc.sys  Fri Nov 02 05:01:10 2012 (50938BD6)
fffff880`015d7000 fffff880`015e1000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`01b32000 fffff880`01b6c000   fvevol   fvevol.sys   Wed Jan 23 22:11:24 2013 (5100A65C)
fffff880`0168c000 fffff880`016d5000   fwpkclnt fwpkclnt.sys Tue Apr 04 10:53:02 2017 (58E3B34E)
fffff800`0341a000 fffff800`03463000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`04e00000 fffff880`04e24000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`04e24000 fffff880`04e35000   HECIx64  HECIx64.sys  Thu Sep 17 15:54:16 2009 (4AB293E8)
fffff880`017cd000 fffff880`017e6000   HIDCLASS HIDCLASS.SYS Wed Jul 03 00:05:05 2013 (51D3A2F1)
fffff880`063bb000 fffff880`063c3080   HIDPARSE HIDPARSE.SYS Wed Jul 03 00:05:04 2013 (51D3A2F0)
fffff880`063ad000 fffff880`063bb000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04c00000 fffff880`04c3d000   hmpalert hmpalert.sys Fri Jun 09 05:59:11 2017 (593A716F)
fffff880`09be9000 fffff880`09bff000   hmpnet   hmpnet.sys   Sat Dec 31 05:26:02 2016 (586787BA)
fffff880`08e13000 fffff880`08edc000   HTTP     HTTP.sys     Tue Feb 24 22:17:55 2015 (54ED3EE3)
fffff880`01b10000 fffff880`01b19000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`0535b000 fffff880`05379000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01033000 fffff880`0123d000   iaStor   iaStor.sys   Wed Mar 03 21:51:31 2010 (4B8F2033)
fffff880`08edc000 fffff880`08f0f000   idmwfp   idmwfp.sys   Tue Jun 06 11:50:55 2017 (5936CF5F)
fffff880`053d5000 fffff880`053eb000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`053c1000 fffff880`053d0000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`040f2000 fffff880`04100000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`053ad000 fffff880`053b5000   kbfiltr  kbfiltr.sys  Mon Jul 20 05:21:42 2009 (4A643726)
fffff800`00bd1000 fffff800`00bdb000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`0f22f000 fffff880`0f272000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`015ab000 fffff880`015c6000   ksecdd   ksecdd.sys   Sat May 20 23:47:38 2017 (59210DDA)
fffff880`01661000 fffff880`0168c000   ksecpkg  ksecpkg.sys  Sat May 20 23:55:20 2017 (59210FA8)
fffff880`05058000 fffff880`0505d200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`05cf5000 fffff880`05d0a000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`013b9000 fffff880`013dc000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`04c3d000 fffff880`04c4b6a0   mbae64   mbae64.sys   Fri Apr 29 06:10:09 2016 (57233301)
fffff880`0ac93000 fffff880`0aca0000   mbam     mbam.sys     Wed Jun 07 10:26:58 2017 (59380D32)
fffff880`01000000 fffff880`01031000   MBAMChameleon MBAMChameleon.sys Tue Jun 27 14:22:06 2017 (5952A24E)
fffff880`09a00000 fffff880`09a40000   MBAMSwissArmy MBAMSwissArmy.sys Fri Jun 02 16:46:01 2017 (5931CE89)
fffff880`00c0c000 fffff880`00c8a000   mcupdate mcupdate.dll Sat May 09 14:16:12 2015 (554E4EEC)
fffff880`01a5a000 fffff880`01a68000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0539e000 fffff880`053ad000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`063f3000 fffff880`06400000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fda000 fffff880`00ff4000   mountmgr mountmgr.sys Sun May 07 10:52:08 2017 (590F3498)
fffff880`05db4000 fffff880`05dcc000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05dcc000 fffff880`05df9000   mrxsmb   mrxsmb.sys   Sat May 20 23:48:53 2017 (59210E25)
fffff880`05c00000 fffff880`05c4e000   mrxsmb10 mrxsmb10.sys Sat May 20 23:48:19 2017 (59210E03)
fffff880`05c4e000 fffff880`05c72000   mrxsmb20 mrxsmb20.sys Sat May 20 23:48:17 2017 (59210E01)
fffff880`01270000 fffff880`0127b000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`02fe2000 fffff880`02fed000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`012e6000 fffff880`01344000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`04ded000 fffff880`04df8000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01afe000 fffff880`01b10000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0ad08000 fffff880`0ad20000   mwac     mwac.sys     Tue Jun 20 13:52:56 2017 (594960F8)
fffff880`016da000 fffff880`017cd000   ndis     ndis.sys     Mon Oct 12 23:30:31 2015 (561C7AD7)
fffff880`0504a000 fffff880`05056000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05d5d000 fffff880`05d70000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`10195000 fffff880`101c4000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`040dd000 fffff880`040f2000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`04a7b000 fffff880`04a8a000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04b7d000 fffff880`04bc2000   netbt    netbt.sys    Wed May 11 10:58:22 2016 (5733488E)
fffff880`01600000 fffff880`01661000   NETIO    NETIO.SYS    Tue Apr 04 10:53:11 2017 (58E3B357)
fffff880`08f0f000 fffff880`08f1b000   npf      npf.sys      Thu Feb 28 20:31:24 2013 (513004EC)
fffff880`02fed000 fffff880`02ffe000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04de1000 fffff880`04ded000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03463000 fffff800`03a49000   nt       ntkrnlmp.exe Fri May 12 13:49:14 2017 (5915F59A)
fffff880`01402000 fffff880`015ab000   Ntfs     Ntfs.sys     Mon Jan 11 12:38:49 2016 (5693E8A9)
fffff880`041b7000 fffff880`041c0000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01bbf000 fffff880`01bf4000   nvhda64v nvhda64v.sys Tue May 16 09:02:27 2017 (591AF863)
fffff880`0f285000 fffff880`10195000   nvlddmkm nvlddmkm.sys Tue Jun 27 16:00:30 2017 (5952B95E)
fffff880`01af9000 fffff880`01afd600   nvpciflt nvpciflt.sys Tue Aug 17 00:11:15 2010 (4C6A0BE3)
fffff880`04bf1000 fffff880`04bff000   nvvad64v nvvad64v.sys Wed Apr 12 04:06:41 2017 (58EDE011)
fffff880`03e9f000 fffff880`03eae000   nvvhci   nvvhci.sys   Tue Dec 27 20:44:00 2016 (586318E0)
fffff880`05d0a000 fffff880`05d5d000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`04bcb000 fffff880`04bf1000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00eaa000 fffff880`00ebf000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00e6a000 fffff880`00e9d000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00fc3000 fffff880`00fca000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fca000 fffff880`00fda000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`015c6000 fffff880`015d7000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`08f1b000 fffff880`08fc5000   peauth   peauth.sys   Tue Jun 14 13:11:06 2016 (57603AAA)
fffff880`03e62000 fffff880`03e9f000   portcls  portcls.sys  Tue Dec 08 13:12:06 2015 (56671D76)
fffff880`00c8a000 fffff880`00c9e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`05026000 fffff880`0504a000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`04e9e000 fffff880`04eb9000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`101c4000 fffff880`101e5000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`101e5000 fffff880`101ff000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04d90000 fffff880`04de1000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`02fc7000 fffff880`02fd0000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02fd0000 fffff880`02fd9000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02fd9000 fffff880`02fe2000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01abf000 fffff880`01af9000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`05d70000 fffff880`05d88000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05e03000 fffff880`063ad000   RTKVHD64 RTKVHD64.sys Tue Apr 11 06:45:30 2017 (58ECB3CA)
fffff880`05cbf000 fffff880`05cf5000   SbieDrv  SbieDrv.sys  Mon Jun 05 12:47:14 2017 (59358B12)
fffff880`09276000 fffff880`09338000   Sftfslh  Sftfslh.sys  Tue Oct 07 23:03:22 2014 (5434A97A)
fffff880`09338000 fffff880`09386000   Sftplaylh Sftplaylh.sys Tue Oct 07 23:03:44 2014 (5434A990)
fffff880`093ce000 fffff880`093da000   Sftredirlh Sftredirlh.sys Tue Oct 07 23:03:47 2014 (5434A993)
fffff880`053f3000 fffff880`053fe000   Sftvollh Sftvollh.sys Tue Oct 07 23:03:06 2014 (5434A96A)
fffff880`01ab7000 fffff880`01abf000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`02ea1000 fffff880`02f36000   srv      srv.sys      Wed Apr 05 10:55:34 2017 (58E50566)
fffff880`09a71000 fffff880`09ad9000   srv2     srv2.sys     Wed Apr 05 10:55:27 2017 (58E5055F)
fffff880`09a40000 fffff880`09a71000   srvnet   srvnet.sys   Wed Apr 05 10:55:22 2017 (58E5055A)
fffff880`05056000 fffff880`05057480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01801000 fffff880`019fd000   tcpip    tcpip.sys    Tue Apr 04 10:53:49 2017 (58E3B37D)
fffff880`09386000 fffff880`09398000   tcpipreg tcpipreg.sys Thu Jul 07 11:08:06 2016 (577E7056)
fffff880`047e8000 fffff880`047f5000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`03e40000 fffff880`03e62000   tdx      tdx.sys      Wed May 10 10:52:38 2017 (59132936)
fffff880`04d7c000 fffff880`04d90000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00560000 fffff960`0056a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`04ace000 fffff880`04af4000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`05d88000 fffff880`05d8f000   TurboB   TurboB.sys   Fri Apr 16 19:07:26 2010 (4BC8EDAE)
fffff880`0f272000 fffff880`0f284000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`040b8000 fffff880`040d5000   usbccgp  usbccgp.sys  Tue Aug 16 16:40:16 2016 (57B37A30)
fffff880`05359000 fffff880`0535ae80   USBD     USBD.SYS     Tue Aug 16 16:40:06 2016 (57B37A26)
fffff880`04e35000 fffff880`04e47000   usbehci  usbehci.sys  Tue Aug 16 16:40:12 2016 (57B37A2C)
fffff880`01a00000 fffff880`01a5a000   usbhub   usbhub.sys   Tue Aug 16 16:40:25 2016 (57B37A39)
fffff880`04e47000 fffff880`04e9e000   USBPORT  USBPORT.SYS  Tue Aug 16 16:40:11 2016 (57B37A2B)
fffff880`04c8b000 fffff880`04d7c000   VBoxDrv  VBoxDrv.sys  Tue Jan 19 11:40:46 2016 (569E670E)
fffff880`04a39000 fffff880`04a6d000   VBoxNetLwf VBoxNetLwf.sys Tue Jan 19 11:40:16 2016 (569E66F0)
fffff880`04aa5000 fffff880`04ace000   VBoxUSBMon VBoxUSBMon.sys Tue Jan 19 11:40:17 2016 (569E66F1)
fffff880`00e9d000 fffff880`00eaa000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02f84000 fffff880`02f92000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02f92000 fffff880`02fb7000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00fae000 fffff880`00fc3000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00d72000 fffff880`00dce000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01a6b000 fffff880`01ab7000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`0530b000 fffff880`05318000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`04a00000 fffff880`04a16000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`04a8a000 fffff880`04aa5000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`02fb7000 fffff880`02fc7000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00edc000 fffff880`00f9e000   Wdf01000 Wdf01000.sys Fri Jun 21 23:13:05 2013 (51C51641)
fffff880`00f9e000 fffff880`00fae000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`04bc2000 fffff880`04bcb000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00060000 fffff960`00387000   win32k   win32k.sys   Fri May 12 13:52:11 2017 (5915F64B)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)

Unloaded modules:
fffff880`0acf0000 fffff880`0ad08000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0acd8000 fffff880`0acf0000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0acc0000 fffff880`0acd8000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0aca0000 fffff880`0acb8000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0acb8000 fffff880`0acc0000   lvupdtio.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00008000
fffff880`093da000 fffff880`093f2000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00018000
fffff880`0ac22000 fffff880`0ac93000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`02ea7000 fffff880`02f84000   em018_64.dll
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  000DD000
fffff880`01bb1000 fffff880`01bbf000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`03ec0000 fffff880`040ca000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0020A000
fffff880`040ca000 fffff880`040dd000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`063ad000 fffff880`063c6000   FLxHCIh.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff880`04a16000 fffff880`04a39000   VBoxNetAdp6.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00023000
fffff880`040dd000 fffff880`04107000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002A000
Bugcheck code 00000019
Arguments 00000000`00000003 fffff800`03666940 00000000`00000000 fffff800`03666940
 
Last edited:
OMG
Thank you very much!
will remove it right away..
(btw, how to contact them about this issue? so that they might resolve it in future releases)

THANK GOD THAT IT IS NOT A HARDWARE ISSUE! =D =D =D
i don't know how you managed to read that though.. :O

btw, how to disable the verifier? or should i leave it alone and it will take care of itself?

Thanks alot for your quick response! :D
 
OMG
Thank you very much!
will remove it right away..
(btw, how to contact them about this issue? so that they might resolve it in future releases)

Find a "contact us" type link and write to them if you wish. I guarantee you that they will blame either Microsoft or your hardware though - NOT their product.

HitmanPro.Alert Ransomware Scanner, Anti-Exploit Tool | Download HMP.Alert with CryptoGuard | hitmanpro.com

THANK GOD THAT IT IS NOT A HARDWARE ISSUE! =D =D =D
i don't know how you managed to read that though.. :O

No, I don't see this BSOD being hardware related. I used the Sysnative BSOD App written by Admin writhziden + Windbg to read the dump. The dump output is at the end of my last post in the code box. I've been processing other's kernel memory dumps for the last 10 years now.

btw, how to disable the verifier? or should i leave it alone and it will take care of itself?

Thanks alot for your quick response! :D

My pleasure to try and help.

Bring up a CMD prompt. Type/paste verifier /reset; re-boot your system. That will shut Driver Verifier down. You should not leave it running.

Regards. . .

jcgriff2
 
Last edited:
i removed HPA then restarted
after that i stopped the verifier then restarted

Thanks again for your help! :thumbsup2:
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top