BSOD with utorrent 3.2

T

terrateck

Member
Joined
Aug 14, 2013
Posts
10
Hello,

Since the last time I went to reinstall Windows 7 I'm having blue screen problems. These occur only when running utorrent 3.2 and after a few hours downloading.
I find that happens with all versions 3 utorrent (3.0, 3.1, 3.2), but with version 2.0.4 there is no problem.

The blue screen displays in its description "driver-irql-not-less-or-equal" with the process Netio.sys.

I updated all drivers from the manufacturer's website. All available updates from Windows Update are installed.

Attached required information and files.

Can someone please help me?​

I really appreciate any help you can provide.


SYSTEM INFO:
OS - Windows 7 Ultimate 64-bit SP1
Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? Full retail version (Original disk image Windows 7 Ultimate SP1-U ISO Spanish x64)
Age of system (hardware) Essential components: 4 years
​
Age of OS installation - have you re-installed the OS? 1 week
​
CPU - Intel Core 2 Duo E8400 @ 3.00 Ghz
​
Video Card - ATI Radeon HD 5450
​
MotherBoard - Gigabyte GA-EP35C-DS3R
Power Supply - OCZ ModXStream-Pro 600 W
​
RAM - 8 GB(4x 2GB) KINGSTON HyperX KHX6400D2/2G
​
 

Attachments

Hi,

I unfortunately cannot read the perfmon as it's of another language. Onto the dumps however, they are all of the DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) bugcheck and are all faulting NETIO.sys which is the Network I/O Subsystem driver. It's not the true cause and is likely being caused by another device driver. I know and have seen uTorrent cause BSOD's when 3rd party firewalls and antiviruses don't play nice.

First off, let's enable Driver Verifier to see if we can catch any device driver conflicts:

Driver Verifier:

What is Driver Verifier?

Driver Verifier is included in Windows 8, 7, Windows Server 2008 R2, Windows Vista, Windows Server 2008, Windows 2000, Windows XP, and Windows Server 2003 to promote stability and reliability; you can use this tool to troubleshoot driver issues. Windows kernel-mode components can cause system corruption or system failures as a result of an improperly written driver, such as an earlier version of a Windows Driver Model (WDM) driver.

Essentially, if there's a 3rd party driver believed to be at issue, enabling Driver Verifier will help flush out the rogue driver if it detects a violation.

Before enabling Driver Verifier, it is recommended to create a System Restore Point:

Vista - START | type rstrui - create a restore point
Windows 7 - START | type create | select "Create a Restore Point"
Windows 8 - Restore Point - Create in Windows 8

How to enable Driver Verifier:

Start > type "verifier" without the quotes > Select the following options -

1. Select - "Create custom settings (for code developers)"
2. Select - "Select individual settings from a full list"
3. Check the following boxes -
- Special Pool
- Pool Tracking
- Force IRQL Checking
- Deadlock Detection
- Security Checks (Windows 7)
- Concurrentcy Stress Test (Windows 8)
- DDI compliance checking (Windows 8)
- Miscellaneous Checks
4. Select - "Select driver names from a list"
5. Click on the "Provider" tab. This will sort all of the drivers by the provider.
6. Check EVERY box that is NOT provided by Microsoft / Microsoft Corporation.
7. Click on Finish.
8. Restart.

Important information regarding Driver Verifier:

- If Driver Verifier finds a violation, the system will BSOD.

- After enabling Driver Verifier and restarting the system, depending on the culprit, if for example the driver is on start-up, you may not be able to get back into normal Windows because Driver Verifier will flag it, and as stated above, that will cause / force a BSOD.

If this happens, do not panic, do the following:

- Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.

- Once in Safe Mode - Start > type "system restore" without the quotes.

- Choose the restore point you created earlier.
If you did not set up a restore point, do not worry, you can still disable Driver Verifier to get back into normal Windows:

- Start > Search > type "cmd" without the quotes.

- To turn off Driver Verifier, type in cmd "verifier /reset" without the quotes.
・ Restart and boot into normal Windows.

How long should I keep Driver Verifier enabled for?

It varies, many experts and analysts have different recommendations. Personally, I recommend keeping it enabled for at least 24 hours. If you don't BSOD by then, disable Driver Verifier.

My system BSOD'd, where can I find the crash dumps?

They will be located in %systemroot%\Minidump

Any other questions can most likely be answered by this article:
Using Driver Verifier to identify issues with Windows drivers for advanced users

Regards,

Patrick
 
Hi Patrick,

Thanks for the response.

Driver Verifier enabled just as you have indicated, but since I rebooted the computer runs slowly. The process "system" consumes most of the CPU, is this normal?
About antivirus or firewalls, now I have none installed. I had installed Windows Security Essentials, but I uninstalled it in case the problem was caused by it. I have come to try even disabled the Windows firewall, but nothing changed.
 
Driver Verifier enabled just as you have indicated, but since I rebooted the computer runs slowly. The process "system" consumes most of the CPU, is this normal?
Click to expand...

Yes, it can be. Driver Verifier can stress the system heavily. Keep it enabled for at least ~24 hours. If no crashes, disable it and let me know.

Regards,

Patrick
 
Just to add, NETIO.sys being blamed, usually indicates problems with the network drivers or any third-party firewalls and Internet Security Suites. I've seen Kaspersky Internet Security 2013 a big cause of this kind of bugcheck at the moment.
 
x BlueRobot said:
Just to add, NETIO.sys being blamed, usually indicates problems with the network drivers or any third-party firewalls and Internet Security Suites. I've seen Kaspersky Internet Security 2013 a big cause of this kind of bugcheck at the moment.
Click to expand...


Hi, thanks for the help.
But in this case I am not using any firewall or antivirus suite, only Windows firewall.

Regards.
 
You may want to try installing a genuine version of Windows. Currently, your Windows installation is counterfeit with an ACER/GATEWAY/PACKARD Windows installation attached to a retail Gigabyte motherboard.

We will be unable to assist you further until you install a valid Windows operating system. If you were unaware that you were running non-genuine Windows, I would advise reporting the seller of the software to Microsoft.

 
writhziden said:
You may want to try installing a genuine version of Windows. Currently, your Windows installation is counterfeit with an ACER/GATEWAY/PACKARD Windows installation attached to a retail Gigabyte motherboard.

We will be unable to assist you further until you install a valid Windows operating system. If you were unaware that you were running non-genuine Windows, I would advise reporting the seller of the software to Microsoft.
Click to expand...

Hi,
Where it appears that the installation is ACER/GATEWAY/PACKARD?
I made the installation from an original disk of Windows 7 Ultimate SP1 x64 Spanish

Thanks
 
The product key you used was from one of those systems (ACER/PACKARD/GATEWAY). The product ID shows up in both your system info and the system health report info.
 
Last edited:
writhziden said:
The product key you used was from one of those systems (ACER/PACKARD/GATEWAY). The product ID shows up in both your system info and the system health report info.
Click to expand...

I removed the serial number system is improper. Now I have 30 days to contact Microsoft and activate my license. Meanwhile we try to solve the problem with the blue screen?


Regards.
 
Patrick said:
Driver Verifier enabled just as you have indicated, but since I rebooted the computer runs slowly. The process "system" consumes most of the CPU, is this normal?
Click to expand...

Yes, it can be. Driver Verifier can stress the system heavily. Keep it enabled for at least ~24 hours. If no crashes, disable it and let me know.

Regards,

Patrick
Click to expand...


Hi,

I have kept the system with Driver Verifier enabled for 30 hours with utorrent, but it didn't crash.
Strange, normally would have occurred as much in 12 hours.


Regards
 
Patrick said:
Hi,

Disable verifier now and keep me updated on the system's behavior.

Regards,

Patrick
Click to expand...


Hi,

I disabled the driver verifier, and about 20 hours later I had a blue screen. Same as always: "driver-irql-not-less-or-equal" with the process Netio.sys.

Regards
 
Hi,

Unfortunately, I cannot help you without the dump files. Please attach the latest.

Regards,

Patrick
 
Hi there,

Please update your Realtek Driver - Driver Reference Table

Code: 
fffff880`02fd31c8  fffff880`02fd31c0
fffff880`02fd31d0  fffffa80`08697000
fffff880`02fd31d8  fffffa80`08697000
fffff880`02fd31e0  00000000`00000000
fffff880`02fd31e8  fffff880`02fd31e0
fffff880`02fd31f0  00000000`00000000
[B]fffff880`02fd31f8  fffff880`04089780Unable to load image \SystemRoot\system32\DRIVERS\Rt64win7.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
 Rt64win7+0x2780[/B]
fffff880`02fd3200  fffffa80`08c19000
fffff880`02fd3208  ffff0000`036bb0e6
fffff880`02fd3210  fffffa80`08690b00
fffff880`02fd3218  00000000`00000000
fffff880`02fd3220  fffffa80`08697000

Code: 
1: kd> lmvm Rt64win7
start             end                 module name
fffff880`04087000 fffff880`04127000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        Tue Sep 27 15:50:33 2011 (4E81E2B9)
    CheckSum:         0009FB77
    ImageSize:        000A0000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Kind regards,
Stephen
 
Hi,

I updated the Realtek PCIe GBE Family Controller to the last version like you said me (7.073 - 2013/8/1 for Windows 7), but after restarting I had two blue screen shortly (the same problem, netio.sys).
Attached the dumps files.

Regards.
 

Attachments

writhziden said:
You may want to try installing a genuine version of Windows. Currently, your Windows installation is counterfeit with an ACER/GATEWAY/PACKARD Windows installation attached to a retail Gigabyte motherboard.

We will be unable to assist you further until you install a valid Windows operating system. If you were unaware that you were running non-genuine Windows, I would advise reporting the seller of the software to Microsoft.

Click to expand...

Wipe your HDD (only - not SSD) with KillDisk - https://www.sysnative.com/forums/hardware-tutorials/449-format-hdd-low-level-format-killdisk.html

Try Windows Server 2008 R2 Evaluation (180 days) - same basic build as Windows 7 SP1 -

http://www.microsoft.com/en-us/download/details.aspx?id=11093

See if system is stable with Server 2008 R2.

It is very likely that your non-Genuine OS is the cause of your system BSODs.

Regards. . .

jcgriff2

Code: 
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\a1\AppData\Local\Temp\Temp1_4948d1376795561-blue-screen-death-utorrent-3-2-minidump-2-.zip\081813-6786-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18205.amd64fre.win7sp1_gdr.130708-1532
Machine Name:
Kernel base = 0xfffff800`03265000 PsLoadedModuleList = 0xfffff800`034a86d0
Debug session time: Sat Aug 17 18:31:00.268 2013 (UTC - 4:00)
System Uptime: 0 days 2:01:50.798
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {28, 2, 0, fffff880017196fd}

Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880017196fd, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003512100
GetUlongFromAddress: unable to read from fffff800035121c0
 0000000000000028 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`017196fd 448b5228        mov     r10d,dword ptr [rdx+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88002fd2830 -- (.trap 0xfffff88002fd2830)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88002fd2a50 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880017196fd rsp=fffff88002fd29c0 rbp=fffff88002fd2af0
 r8=00000000ffffffbc  r9=0000000000000044 r10=0000000000000000
r11=fffffa8009743220 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!RtlCopyBufferToMdl+0x1d:
fffff880`017196fd 448b5228        mov     r10d,dword ptr [rdx+28h] ds:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800032da129 to fffff800032dab80

STACK_TEXT:  
fffff880`02fd26e8 fffff800`032da129 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02fd26f0 fffff800`032d8da0 : 00000000`000b27e2 fffff880`01863a72 00000000`0000001e 00000000`00000044 : nt!KiBugCheckDispatch+0x69
fffff880`02fd2830 fffff880`017196fd : 00000000`0000003d fffff880`018169dc 00000000`0000000d fffffa80`06975888 : nt!KiPageFault+0x260
fffff880`02fd29c0 fffff880`018a60bc : 00000000`00000000 fffff880`01874876 00000000`00000000 00000000`ffffffff : NETIO!RtlCopyBufferToMdl+0x1d
fffff880`02fd2a20 fffff880`01872393 : fffffa80`09743220 00000000`00000000 fffffa80`0abd65d0 00000000`8f996d06 : tcpip! ?? ::FNODOBFM::`string'+0x1cadf
fffff880`02fd2a90 fffff880`018612c4 : fffff880`02fd2f48 fffffa80`00000029 fffffa80`0abd65d0 00000000`00000001 : tcpip!TcpTcbCarefulDatagram+0x1aa3
fffff880`02fd2c40 fffff880`0186075a : fffffa80`086cbd10 fffff880`01859634 fffffa80`0868c5a0 00000000`00000000 : tcpip!TcpTcbReceive+0x694
fffff880`02fd2df0 fffff880`01861cfb : fffff880`058d1452 fffffa80`086ba000 00000000`00000000 fffff880`02fd3100 : tcpip!TcpMatchReceive+0x1fa
fffff880`02fd2f40 fffff880`01859cc7 : fffffa80`086cbd10 fffffa80`086ce109 fffffa80`00009ea8 00000000`00009ea8 : tcpip!TcpPreValidatedReceive+0x36b
fffff880`02fd3010 fffff880`0185983a : 00000000`00000000 fffff880`01969800 fffff880`02fd31d0 fffff880`0445fc15 : tcpip!IppDeliverListToProtocol+0x97
fffff880`02fd30d0 fffff880`01858e39 : 00000000`00000002 00000000`00000000 fffffa80`069eb290 fffff880`02fd31c0 : tcpip!IppProcessDeliverList+0x5a
fffff880`02fd3170 fffff880`01856adf : 00000000`00000000 00000000`08a9c400 fffff880`01969800 fffff880`01969800 : tcpip!IppReceiveHeaderBatch+0x23a
fffff880`02fd3250 fffff880`018560b2 : fffffa80`08a9af80 00000000`00000000 fffffa80`08a9c400 00000000`00000001 : tcpip!IpFlcReceivePackets+0x64f
fffff880`02fd3450 fffff880`018ca93a : fffffa80`00000000 fffffa80`069eb290 fffffa80`08a9c490 fffff880`02fd3540 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`02fd3530 fffff800`032e6878 : fffffa80`069eb290 fffffa80`00000000 fffffa80`06714b50 00000000`00000001 : tcpip! ?? ::FNODOBFM::`string'+0x4c812
fffff880`02fd3580 fffff880`01855bd2 : fffff880`01855400 00000000`00000000 00000000`00000000 fffffa80`08c85201 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`02fd3660 fffff880`016d50eb : fffffa80`08a9d8d0 00000000`00000000 fffffa80`0897a1a0 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`02fd36d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`017196fd 448b5228        mov     r10d,dword ptr [rdx+28h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETIO!RtlCopyBufferToMdl+1d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  5034f6a0

FAILURE_BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

Followup: MachineOwner
---------

0: kd> lmvm NETIO
start             end                 module name
fffff880`01709000 fffff880`01769000   NETIO      (pdb symbols)          c:\symbols\netio.pdb\76E292820E9A4B67A41B1C5BDB269DEE2\netio.pdb
    Loaded symbol image file: NETIO.SYS
    Mapped memory image file: c:\symbols\NETIO.SYS\5034F6A060000\NETIO.SYS
    Image path: \SystemRoot\system32\drivers\NETIO.SYS
    Image name: NETIO.SYS
    Timestamp:        Wed Aug 22 11:11:28 2012 (5034F6A0)
    CheckSum:         00067D76
    ImageSize:        00060000
    File version:     6.1.7601.17939
    Product version:  6.1.7601.17939
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.6 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     netio.sys
    OriginalFilename: netio.sys
    ProductVersion:   6.1.7601.17939
    FileVersion:      6.1.7601.17939 (win7sp1_gdr.120822-0331)
    FileDescription:  Network I/O Subsystem
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmntsm
start             end                 module name
fffff880`00f1f000 fffff880`00f76000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`03abf000 fffff880`03b48000   afd      afd.sys      Tue Dec 27 22:59:20 2011 (4EFA9418)
fffff880`04536000 fffff880`0454c000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011d6000 fffff880`011e1000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`01188000 fffff880`01191000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01191000 fffff880`011bb000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`04830000 fffff880`053a3000   atikmdag atikmdag.sys Thu Mar 28 22:27:04 2013 (5154FBF8)
fffff880`04061000 fffff880`040f5000   atikmpag atikmpag.sys Thu Mar 28 21:09:45 2013 (5154E9D9)
fffff960`00890000 fffff960`008f1000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`02c46000 fffff880`02c4d000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03d2f000 fffff880`03d40000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02800000 fffff880`0281e000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
fffff960`006c0000 fffff960`006e7000   cdd      cdd.dll      unavailable (00000000)
fffff880`00ccf000 fffff880`00d8f000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01000000 fffff880`01030000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c71000 fffff880`00ccf000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0134c000 fffff880`013be000   cng      cng.sys      Fri Aug 24 11:47:16 2012 (5037A204)
fffff880`0451f000 fffff880`0452f000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`067f1000 fffff880`067ff000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03c8e000 fffff880`03d11000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`03d11000 fffff880`03d2f000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`00e3c000 fffff880`00e4b000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`015ea000 fffff880`01600000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04039000 fffff880`0405b000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`041dc000 fffff880`041ef000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`02c99000 fffff880`02ded000   dump_iaStor dump_iaStor.sys Sat Nov 06 03:44:52 2010 (4CD50774)
fffff880`067e5000 fffff880`067f1000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04268000 fffff880`0435c000   dxgkrnl  dxgkrnl.sys  Tue Apr 09 23:28:09 2013 (5164DC49)
fffff880`0435c000 fffff880`043a2000   dxgmms1  dxgmms1.sys  Tue Apr 09 23:27:15 2013 (5164DC13)
fffff880`03be6000 fffff880`03bf2000   ElbyCDIO ElbyCDIO.sys Mon Mar 04 04:21:51 2013 (513467AF)
fffff880`040f5000 fffff880`0412a000   exfat    exfat.SYS    Mon Jul 13 19:23:29 2009 (4A5BC1F1)
fffff880`028e4000 fffff880`0291a000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`012da000 fffff880`012ee000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0128e000 fffff880`012da000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`0142c000 fffff880`01436000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`013be000 fffff880`013f8000   fvevol   fvevol.sys   Wed Jan 23 22:11:24 2013 (5100A65C)
fffff880`01794000 fffff880`017dd000   fwpkclnt fwpkclnt.sys Wed Jan 02 22:06:48 2013 (50E4F5C8)
fffff800`0321c000 fffff800`03265000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`043a2000 fffff880`043c6000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`03dd6000 fffff880`03def000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`053f5000 fffff880`053fd080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`041ef000 fffff880`041fd000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`0291a000 fffff880`029e3000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`017f5000 fffff880`017fe000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`01034000 fffff880`01188000   iaStor   iaStor.sys   Sat Nov 06 03:44:52 2010 (4CD50774)
fffff880`03d66000 fffff880`03d7c000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04425000 fffff880`04434000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03c17000 fffff880`03c25000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bb7000 fffff800`00bc1000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`0412a000 fffff880`0416d000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01400000 fffff880`0141b000   ksecdd   ksecdd.sys   Fri Jun 01 22:50:23 2012 (4FC97F6F)
fffff880`01769000 fffff880`01794000   ksecpkg  ksecpkg.sys  Fri Aug 24 11:48:29 2012 (5037A24D)
fffff880`045f8000 fffff880`045fd200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03c00000 fffff880`03c17000   LEqdUsb  LEqdUsb.Sys  Thu Jan 03 03:12:57 2013 (50E53D89)
fffff880`03c32000 fffff880`03c3a000   LHidEqd  LHidEqd.Sys  Thu Jan 03 03:12:59 2013 (50E53D8B)
fffff880`03c5a000 fffff880`03c72000   LHidFilt LHidFilt.Sys Thu Jan 03 03:13:04 2013 (50E53D90)
fffff880`028b7000 fffff880`028cc000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`03c72000 fffff880`03c86000   LMouFilt LMouFilt.Sys Thu Jan 03 03:13:07 2013 (50E53D93)
fffff880`02894000 fffff880`028b7000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c0e000 fffff880`00c5d000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`03c3a000 fffff880`03c48000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04434000 fffff880`04443000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`03c25000 fffff880`03c32000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00e00000 fffff880`00e1a000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`0281e000 fffff880`02836000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02836000 fffff880`02863000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`0688c000 fffff880`068da000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`068da000 fffff880`068fe000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`011bb000 fffff880`011c6000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`02c1c000 fffff880`02c27000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f7f000 fffff880`00f89000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`012ee000 fffff880`0134c000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`03ab2000 fffff880`03abd000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01600000 fffff880`01612000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01617000 fffff880`01709000   ndis     ndis.sys     Wed Aug 22 11:11:46 2012 (5034F6B2)
fffff880`04570000 fffff880`0457c000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0457c000 fffff880`045ab000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`041c7000 fffff880`041dc000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`03bbc000 fffff880`03bcb000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`03b48000 fffff880`03b8d000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01709000 fffff880`01769000   NETIO    NETIO.SYS    Wed Aug 22 11:11:28 2012 (5034F6A0)
fffff880`011ee000 fffff880`011fb000   networx  networx.sys  Wed Jul 10 09:05:07 2013 (51DD5C03)
fffff880`02c27000 fffff880`02c38000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03aa6000 fffff880`03ab2000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`03265000 fffff800`0384b000   nt       ntkrnlmp.exe Mon Jul 08 23:15:54 2013 (51DB806A)
fffff880`01448000 fffff880`015ea000   Ntfs     Ntfs.sys     Fri Apr 12 07:54:36 2013 (5167F5FC)
fffff880`02c3d000 fffff880`02c46000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`043e7000 fffff880`04400000   nusb3hub nusb3hub.sys Thu Dec 09 23:50:35 2010 (4D01B19B)
fffff880`053a3000 fffff880`053d4000   nusb3xhc nusb3xhc.sys Thu Dec 09 23:50:35 2010 (4D01B19B)
fffff880`03b96000 fffff880`03bbc000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00fc9000 fffff880`00fde000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00f89000 fffff880`00fbc000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`011c6000 fffff880`011d6000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0141b000 fffff880`0142c000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`068fe000 fffff880`069a4000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03d7c000 fffff880`03db9000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c5d000 fffff880`00c71000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0454c000 fffff880`04570000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`045ab000 fffff880`045c6000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`045c6000 fffff880`045e7000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04400000 fffff880`0441a000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03a55000 fffff880`03aa6000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`0441a000 fffff880`04425000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`02c90000 fffff880`02c99000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02df0000 fffff880`02df9000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`02c13000 fffff880`02c1c000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`0124c000 fffff880`01286000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`028cc000 fffff880`028e4000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04448000 fffff880`0451f000   Rt64win7 Rt64win7.sys Tue Jun 18 03:52:16 2013 (51C011B0)
fffff880`04000000 fffff880`04038700   RtHDMIVX RtHDMIVX.sys Tue Jun 05 01:45:14 2012 (4FCD9CEA)
fffff880`06406000 fffff880`067e4d80   RTKVHD64 RTKVHD64.sys Tue Jun 19 04:50:56 2012 (4FE03D70)
fffff880`04800000 fffff880`0482f000   SCSIPORT SCSIPORT.SYS Sat Nov 20 05:34:01 2010 (4CE7A419)
fffff880`069a4000 fffff880`069af000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`017ed000 fffff880`017f5000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0a6c7000 fffff880`0a738000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`06c60000 fffff880`06cf8000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`06800000 fffff880`06869000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`069af000 fffff880`069e0000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`045f6000 fffff880`045f7480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01800000 fffff880`01a00000   tcpip    tcpip.sys    Fri Jul 05 23:12:44 2013 (51D78B2C)
fffff880`069e0000 fffff880`069f2000   tcpipreg tcpipreg.sys Wed Oct 03 12:07:26 2012 (506C62BE)
fffff880`011e1000 fffff880`011ee000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`00e1a000 fffff880`00e3c000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`03a41000 fffff880`03a55000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`053d4000 fffff880`053f5000   TplinkUDSMBus TplinkUDSMBus.sys Thu Sep 20 21:47:23 2012 (505BC72B)
fffff880`06d7d000 fffff880`06dae000   TplinkUDSTcpBus TplinkUDSTcpBus.sys Thu Sep 20 21:44:12 2012 (505BC66C)
fffff880`03a00000 fffff880`03a41000   truecrypt truecrypt.sys Tue Feb 07 04:09:36 2012 (4F30EA50)
fffff960`00500000 fffff960`0050a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03d40000 fffff880`03d66000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`043d5000 fffff880`043e7000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`03db9000 fffff880`03dd6000   usbccgp  usbccgp.sys  Thu Mar 24 23:29:14 2011 (4D8C0C0A)
fffff880`043d3000 fffff880`043d4f00   USBD     USBD.SYS     Thu Mar 24 23:28:59 2011 (4D8C0BFB)
fffff880`04256000 fffff880`04267000   usbehci  usbehci.sys  Thu Mar 24 23:29:04 2011 (4D8C0C00)
fffff880`0416d000 fffff880`041c7000   usbhub   usbhub.sys   Thu Mar 24 23:29:25 2011 (4D8C0C15)
fffff880`04200000 fffff880`04256000   USBPORT  USBPORT.SYS  Thu Mar 24 23:29:12 2011 (4D8C0C08)
fffff880`02879000 fffff880`02894000   USBSTOR  USBSTOR.SYS  Thu Mar 10 23:37:16 2011 (4D79A6FC)
fffff880`043c6000 fffff880`043d3000   usbuhci  usbuhci.sys  Thu Mar 24 23:29:03 2011 (4D8C0BFF)
fffff880`045e7000 fffff880`045f6000   VClone   VClone.sys   Sun Mar 10 20:49:12 2013 (513D2A08)
fffff880`00fbc000 fffff880`00fc9000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`02c4d000 fffff880`02c5b000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`02c5b000 fffff880`02c80000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017dd000 fffff880`017ed000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`0452f000 fffff880`04536000   vncmirror vncmirror.sys Fri Mar 14 13:43:05 2008 (47DAB929)
fffff880`00fde000 fffff880`00ff3000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00d8f000 fffff880`00deb000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01200000 fffff880`0124c000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`03bcb000 fffff880`03be6000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`02c80000 fffff880`02c90000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e4d000 fffff880`00f0f000   Wdf01000 Wdf01000.sys Wed Jul 25 22:25:13 2012 (5010AA89)
fffff880`00f0f000 fffff880`00f1f000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`03b8d000 fffff880`03b96000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00010000 fffff960`00327000   win32k   win32k.sys   unavailable (00000000)
fffff880`00f76000 fffff880`00f7f000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`06d2e000 fffff880`06d47000   WudfPf   WudfPf.sys   Wed Jul 25 22:26:45 2012 (5010AAE5)
fffff880`06d47000 fffff880`06d7d000   WUDFRd   WUDFRd.sys   Wed Jul 25 22:26:06 2012 (5010AABE)

Unloaded modules:
fffff880`03c48000 fffff880`03c5a000   usbaapl64.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00012000
fffff880`06cf8000 fffff880`06d2e000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00036000
fffff880`01436000 fffff880`01444000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`02c9c000 fffff880`02df0000   dump_iaStor.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00154000
fffff880`02c00000 fffff880`02c13000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`02c13000 fffff880`02c3d000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002A000
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top