Hello this are the 2 file result of the programs.View attachment Documents.rar
bsod
- Thread starter mmario66
- Start date
Hi -
Update your TP-LINK Wireless N Adapter driver -
The driver is written by Atheros - http://sysnative.com/drivers/driver.php?id=athurx.sys
Try TP-Link support - http://www.tp-link.com/en/support/download/
What other USB devices are plugged in?
Regards. . .
jcgriff2
`
BSOD SUMMARY
Update your TP-LINK Wireless N Adapter driver -
Code:
[font=lucida console]athurx.sys Wed Jul 28 08:01:39 2010 (4C501C23)[/font]Try TP-Link support - http://www.tp-link.com/en/support/download/
What other USB devices are plugged in?
Regards. . .
jcgriff2
`
BSOD SUMMARY
Code:
[font=lucida console]
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\072012-20467-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Fri Jul 20 11:11:07.909 2012 (GMT-4)
System Uptime: 0 days 0:10:43.752
BugCheck 1000009F, {4, 258, fffffa8006779b50, fffff800044013d0}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x9F
PROCESS_NAME: System
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT_LARGE
Bugcheck code 1000009F
Arguments 00000000`00000004 00000000`00000258 fffffa80`06779b50 fffff800`044013d0
BiosVersion = F3
BiosReleaseDate = 04/13/2011
SystemManufacturer = Gigabyte Technology Co., Ltd.
SystemProductName = PH67A-D3-B3
MaxSpeed: 3400
CurrentSpeed: 3392
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]
Code:
Opened log file 'C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\_99-dbug.txt'
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\PalmDesert\_jcgriff2_\dbug\__Kernel__\072012-20467-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?fffff8a0`00232722?
DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?fffff8a0`0a4f3a12?
Symbol search path is: a:\symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`0305a000 PsLoadedModuleList = 0xfffff800`0329e670
Debug session time: Fri Jul 20 11:11:07.909 2012 (GMT-4)
System Uptime: 0 days 0:10:43.752
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000009F, {4, 258, fffffa8006779b50, fffff800044013d0}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption
Followup: memory_corruption
---------
0: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck;!peb;!sysinfo cpuinfo;!sysinfo machineid; !sysinfo cpuspeed; !sysinfo smbios .logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
subsystem.
Arg2: 0000000000000258, Timeout in seconds.
Arg3: fffffa8006779b50, The thread currently holding on to the Pnp lock.
Arg4: fffff800044013d0
Debugging Details:
------------------
DRVPOWERSTATE_SUBCODE: 4
FAULTING_THREAD: fffffa8006779b50
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x9F
PROCESS_NAME: System
CURRENT_IRQL: 2
LOCK_ADDRESS: fffff800032d4b80 -- (!locks fffff800032d4b80)
!locks fffff800032d4b80
Resource @ nt!PiEngineLock (0xfffff800032d4b80) Available
WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.
WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.
1 total locks
PNP_TRIAGE:
Lock address : 0xfffff800032d4b80
Thread Count : 0
Thread address: 0x0000000000000000
Thread wait : 0x0
LAST_CONTROL_TRANSFER: from fffff800030cebd2 to fffff800030dc07a
STACK_TEXT:
fffff880`03369150 fffff800`030cebd2 : fffffa80`06779b50 fffffa80`06779b50 00000000`00000000 fffff880`00000004 : nt!KiSwapContext+0x7a
fffff880`03369290 fffff800`030def82 : fffffa80`0677a050 fffff880`04876f92 00000000`00000031 00000000`50747270 : nt!KiCommitThreadWait+0x1d2
fffff880`03369320 fffff880`04874a07 : 00000000`002dc6c0 00000000`74696177 fffff880`048b6100 fffffa80`00000031 : nt!KeDelayExecutionThread+0x186
fffff880`03369390 fffff880`048775e4 : 00000000`00000000 00000000`00000000 ffffffff`ffcfd7e0 fffff880`0487bec9 : usbhub!UsbhWait+0x4f
fffff880`033693d0 fffff880`04886140 : fffffa80`0677a050 fffff880`048b6110 fffffa80`0677a1a0 00000000`00000000 : usbhub!UsbhSyncPowerOnPorts+0xac
fffff880`03369410 fffff880`04898542 : fffffa80`0677a708 00000000`00000004 00000000`00000004 fffff880`04897556 : usbhub!UsbhFinishStart+0x70
fffff880`03369490 fffff880`048979b7 : 00000000`00000000 00000000`00000004 fffffa80`0677a708 fffffa80`0677a000 : usbhub!UsbhHubStart+0x24a
fffff880`033694e0 fffff880`04897fe6 : fffffa80`0677a1a0 fffffa80`0677a1a0 fffffa80`0677a708 fffffa80`09901b30 : usbhub!Usbh_FDO_WaitPnpStart+0x163
fffff880`03369530 fffff880`0489a03f : 00000000`00000000 fffffa80`09901b30 fffffa80`0676c0b8 00000000`0000009a : usbhub!Usbh_FDO_Pnp_State+0x6e
fffff880`03369570 fffff880`04898929 : fffffa80`0677a1a0 fffffa80`0677a050 fffffa80`09901df8 00000000`00000000 : usbhub!UsbhFdoPnp_StartDevice+0x143
fffff880`033695f0 fffff880`04874fdf : fffffa80`09901b30 00000001`03369600 fffffa80`097bd390 fffffa80`0677a050 : usbhub!UsbhFdoPnp+0x9d
fffff880`03369620 fffff800`0348f03e : 00000000`00000000 fffffa80`09da3060 fffffa80`097bd390 fffff880`009b3180 : usbhub!UsbhGenDispatch+0x7f
fffff880`03369650 fffff800`031c6e6d : fffffa80`09da3060 fffffa80`097bd390 fffff800`031d0590 00000000`00000000 : nt!PnpAsynchronousCall+0xce
fffff880`03369690 fffff800`0349e386 : fffff800`032d4940 fffffa80`074f77e0 fffffa80`097bd390 fffffa80`074f7988 : nt!PnpStartDevice+0x11d
fffff880`03369750 fffff800`0349e624 : fffffa80`074f77e0 fffffa80`06780024 fffffa80`06787d90 00000000`00000001 : nt!PnpStartDeviceNode+0x156
fffff880`033697e0 fffff800`034c1d56 : fffffa80`074f77e0 fffffa80`06787d90 00000000`00000002 00000000`00000000 : nt!PipProcessStartPhase1+0x74
fffff880`03369810 fffff800`034c22e8 : 00000000`00000000 fffff800`031cf536 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x296
fffff880`03369a80 fffff800`031d2ed7 : 00000001`00000003 00000000`00000000 00000000`00000001 fffffa80`00000084 : nt!PiProcessReenumeration+0x98
fffff880`03369ad0 fffff800`030e2841 : fffff800`031d2bb0 fffff800`033cb601 fffffa80`06779b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
fffff880`03369b70 fffff800`0336fe6a : 00000000`00000000 fffffa80`06779b50 00000000`00000080 fffffa80`06706040 : nt!ExpWorkerThread+0x111
fffff880`03369c00 fffff800`030c9ec6 : fffff880`03174180 fffffa80`06779b50 fffff880`0317f0c0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03369c40 00000000`00000000 : fffff880`0336a000 fffff880`03364000 fffff880`03367670 00000000`00000000 : nt!KxStartSystemThread+0x16
STACK_COMMAND: .thread 0xfffffa8006779b50 ; kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
!chkimg -lo 50 -d !nt
fffff800030dc3a2 - nt!SwapContext_PatchXSave+2
[ 01:21 ]
fffff800030dc486 - nt!SwapContext_PatchXRstor+2 (+0xe4)
[ 09:29 ]
fffff800030dc642 - nt!EnlightenedSwapContext_PatchXSave+2 (+0x1bc)
[ 01:21 ]
fffff800030dc728 - nt!EnlightenedSwapContext_PatchXRstor+2 (+0xe6)
[ 09:29 ]
4 errors : !nt (fffff800030dc3a2-fffff800030dc728)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BIT_LARGE
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT_LARGE
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT_LARGE
Followup: memory_corruption
---------
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030dc07a rsp=fffff88003369150 rbp=fffffa8006779b50
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di pl nz na pe nc
cs=0000 ss=0000 ds=0000 es=0000 fs=0000 gs=0000 efl=00000000
nt!KiSwapContext+0x7a:
fffff800`030dc07a 488d8c2400010000 lea rcx,[rsp+100h]
Child-SP RetAddr : Args to Child : Call Site
fffff880`03369150 fffff800`030cebd2 : fffffa80`06779b50 fffffa80`06779b50 00000000`00000000 fffff880`00000004 : nt!KiSwapContext+0x7a
fffff880`03369290 fffff800`030def82 : fffffa80`0677a050 fffff880`04876f92 00000000`00000031 00000000`50747270 : nt!KiCommitThreadWait+0x1d2
fffff880`03369320 fffff880`04874a07 : 00000000`002dc6c0 00000000`74696177 fffff880`048b6100 fffffa80`00000031 : nt!KeDelayExecutionThread+0x186
fffff880`03369390 fffff880`048775e4 : 00000000`00000000 00000000`00000000 ffffffff`ffcfd7e0 fffff880`0487bec9 : usbhub!UsbhWait+0x4f
fffff880`033693d0 fffff880`04886140 : fffffa80`0677a050 fffff880`048b6110 fffffa80`0677a1a0 00000000`00000000 : usbhub!UsbhSyncPowerOnPorts+0xac
fffff880`03369410 fffff880`04898542 : fffffa80`0677a708 00000000`00000004 00000000`00000004 fffff880`04897556 : usbhub!UsbhFinishStart+0x70
fffff880`03369490 fffff880`048979b7 : 00000000`00000000 00000000`00000004 fffffa80`0677a708 fffffa80`0677a000 : usbhub!UsbhHubStart+0x24a
fffff880`033694e0 fffff880`04897fe6 : fffffa80`0677a1a0 fffffa80`0677a1a0 fffffa80`0677a708 fffffa80`09901b30 : usbhub!Usbh_FDO_WaitPnpStart+0x163
fffff880`03369530 fffff880`0489a03f : 00000000`00000000 fffffa80`09901b30 fffffa80`0676c0b8 00000000`0000009a : usbhub!Usbh_FDO_Pnp_State+0x6e
fffff880`03369570 fffff880`04898929 : fffffa80`0677a1a0 fffffa80`0677a050 fffffa80`09901df8 00000000`00000000 : usbhub!UsbhFdoPnp_StartDevice+0x143
fffff880`033695f0 fffff880`04874fdf : fffffa80`09901b30 00000001`03369600 fffffa80`097bd390 fffffa80`0677a050 : usbhub!UsbhFdoPnp+0x9d
fffff880`03369620 fffff800`0348f03e : 00000000`00000000 fffffa80`09da3060 fffffa80`097bd390 fffff880`009b3180 : usbhub!UsbhGenDispatch+0x7f
fffff880`03369650 fffff800`031c6e6d : fffffa80`09da3060 fffffa80`097bd390 fffff800`031d0590 00000000`00000000 : nt!PnpAsynchronousCall+0xce
fffff880`03369690 fffff800`0349e386 : fffff800`032d4940 fffffa80`074f77e0 fffffa80`097bd390 fffffa80`074f7988 : nt!PnpStartDevice+0x11d
fffff880`03369750 fffff800`0349e624 : fffffa80`074f77e0 fffffa80`06780024 fffffa80`06787d90 00000000`00000001 : nt!PnpStartDeviceNode+0x156
fffff880`033697e0 fffff800`034c1d56 : fffffa80`074f77e0 fffffa80`06787d90 00000000`00000002 00000000`00000000 : nt!PipProcessStartPhase1+0x74
fffff880`03369810 fffff800`034c22e8 : 00000000`00000000 fffff800`031cf536 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x296
fffff880`03369a80 fffff800`031d2ed7 : 00000001`00000003 00000000`00000000 00000000`00000001 fffffa80`00000084 : nt!PiProcessReenumeration+0x98
fffff880`03369ad0 fffff800`030e2841 : fffff800`031d2bb0 fffff800`033cb601 fffffa80`06779b00 00000000`00000000 : nt!PnpDeviceActionWorker+0x327
fffff880`03369b70 fffff800`0336fe6a : 00000000`00000000 fffffa80`06779b50 00000000`00000080 fffffa80`06706040 : nt!ExpWorkerThread+0x111
start end module name
fffff800`00b9b000 fffff800`00ba5000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff800`03011000 fffff800`0305a000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff800`0305a000 fffff800`03642000 nt ntkrnlmp.exe Fri May 04 04:18:59 2012 (4FA390F3)
fffff880`00c00000 fffff880`00c09000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c09000 fffff880`00c33000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`00c33000 fffff880`00c3e000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`00c62000 fffff880`00cb1000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`00cb1000 fffff880`00cc5000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00cc5000 fffff880`00d23000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d23000 fffff880`00de3000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`00de3000 fffff880`00dfd000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`00e00000 fffff880`00e5c000 volmgrx volmgrx.sys Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`00e5e000 fffff880`00f02000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f02000 fffff880`00f11000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00f11000 fffff880`00f68000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`00f68000 fffff880`00f71000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00f71000 fffff880`00f7b000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00f7b000 fffff880`00fae000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00fae000 fffff880`00fbb000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00fbb000 fffff880`00fd0000 partmgr partmgr.sys Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00fd0000 fffff880`00fe5000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00fe5000 fffff880`00fec000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fec000 fffff880`00ffc000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01000000 fffff880`01043000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`0104c000 fffff880`01098000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01098000 fffff880`010ac000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010ac000 fffff880`0110a000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`0110a000 fffff880`0117c000 cng cng.sys Fri Jun 01 23:25:51 2012 (4FC987BF)
fffff880`0117c000 fffff880`0118d000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0118d000 fffff880`0119c000 avgfwd6a avgfwd6a.sys Sun May 22 18:33:25 2011 (4DD98F35)
fffff880`0119c000 fffff880`011be000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`011be000 fffff880`011cb000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`011cb000 fffff880`011f2000 SCDEmu SCDEmu.SYS Wed May 30 21:33:23 2012 (4FC6CA63)
fffff880`01200000 fffff880`0121b000 ksecdd ksecdd.sys Fri Jun 01 22:50:23 2012 (4FC97F6F)
fffff880`0121b000 fffff880`0122c000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`0122c000 fffff880`01236000 Fs_Rec Fs_Rec.sys Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`01236000 fffff880`0123f000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0123f000 fffff880`01248000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01248000 fffff880`01253000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0125d000 fffff880`01400000 Ntfs Ntfs.sys Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01400000 fffff880`01409000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`01409000 fffff880`01410000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`01410000 fffff880`0141c000 avgtpx64 avgtpx64.sys Tue Jul 03 08:33:58 2012 (4FF2E6B6)
fffff880`0141c000 fffff880`0142a000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0142a000 fffff880`0144f000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`0144f000 fffff880`0145f000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`0145f000 fffff880`01468000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01470000 fffff880`01563000 ndis ndis.sys Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`01563000 fffff880`015c3000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`015c3000 fffff880`015ed000 ksecpkg ksecpkg.sys Fri Jun 01 23:27:11 2012 (4FC9880F)
fffff880`015ed000 fffff880`015fd000 avgmfx64 avgmfx64.sys Sun Aug 07 23:41:46 2011 (4E3F5AFA)
fffff880`01600000 fffff880`01615000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`01628000 fffff880`01652000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`01655000 fffff880`01858000 tcpip tcpip.sys Fri Mar 30 04:34:26 2012 (4F757012)
fffff880`01858000 fffff880`018a2000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`018a2000 fffff880`018b2000 vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`018b2000 fffff880`018fe000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`018fe000 fffff880`01906000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01906000 fffff880`01940000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`01940000 fffff880`01952000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01952000 fffff880`0195b000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`0195b000 fffff880`01995000 fvevol fvevol.sys Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01995000 fffff880`019ab000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`019ab000 fffff880`019db000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`019db000 fffff880`019e7000 avgrkx64 avgrkx64.sys Tue Sep 13 00:02:34 2011 (4E6ED5DA)
fffff880`019e7000 fffff880`019f1000 AVGIDSEH AVGIDSEH.Sys Sun Jul 10 18:36:50 2011 (4E1A2982)
fffff880`02c00000 fffff880`02c26000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`02c26000 fffff880`02c3c000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02c3c000 fffff880`02c4b000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c4b000 fffff880`02c68000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`02c68000 fffff880`02c83000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`02c83000 fffff880`02c97000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`02c97000 fffff880`02ca6000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02ca6000 fffff880`02cb8000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`02cb8000 fffff880`02d18000 avgtdia avgtdia.sys Sun Jul 10 18:46:53 2011 (4E1A2BDD)
fffff880`02d18000 fffff880`02d5d000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`02d5d000 fffff880`02de6000 afd afd.sys Tue Dec 27 22:59:20 2011 (4EFA9418)
fffff880`02de6000 fffff880`02def000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`04000000 fffff880`04021000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04021000 fffff880`0403b000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04048000 fffff880`04099000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04099000 fffff880`040a5000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`040a5000 fffff880`040b0000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`040b0000 fffff880`040bf000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`040bf000 fffff880`04142000 csc csc.sys Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`04142000 fffff880`04160000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04160000 fffff880`04171000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`04171000 fffff880`041ba000 avgldx64 avgldx64.sys Thu Oct 06 23:55:41 2011 (4E8E783D)
fffff880`041ba000 fffff880`041c2000 AppleCharger AppleCharger.sys Tue Nov 01 22:46:00 2011 (4EB0AEE8)
fffff880`041c2000 fffff880`041e8000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`041e8000 fffff880`041fe000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04200000 fffff880`04211000 usbehci usbehci.sys Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`04211000 fffff880`04267000 USBPORT USBPORT.SYS Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`04267000 fffff880`0427bb00 EtronXHCI EtronXHCI.sys Fri Feb 03 06:23:49 2012 (4F2BC3C5)
fffff880`04283000 fffff880`04377000 dxgkrnl dxgkrnl.sys Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04377000 fffff880`043bd000 dxgmms1 dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`043bd000 fffff880`043e1000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`043e1000 fffff880`043f2000 HECIx64 HECIx64.sys Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`043f2000 fffff880`043fe000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`043fe000 fffff880`043ff480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`04800000 fffff880`04813000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04813000 fffff880`0481f000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0481f000 fffff880`0482d000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0482d000 fffff880`04850000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`04850000 fffff880`04871000 WudfPf WudfPf.sys Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`04873000 fffff880`048cd000 usbhub usbhub.sys Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`048cd000 fffff880`048db880 EtronHub3 EtronHub3.sys Fri Feb 03 06:23:55 2012 (4F2BC3CB)
fffff880`048dc000 fffff880`048ddf00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`048de000 fffff880`048f3000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`048f3000 fffff880`04925000 nvhda64v nvhda64v.sys Tue Jan 17 07:45:46 2012 (4F156D7A)
fffff880`04925000 fffff880`04962000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`04962000 fffff880`04984000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`04984000 fffff880`04989200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0498a000 fffff880`049a3000 HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`049a3000 fffff880`049c0000 usbccgp usbccgp.sys Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`049c0000 fffff880`049cd000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`049cd000 fffff880`049db000 kbdhid kbdhid.sys Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`049db000 fffff880`049f6000 USBSTOR USBSTOR.SYS Sat Nov 20 05:44:05 2010 (4CE7A675)
fffff880`04e00000 fffff880`04e0e000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04e0e000 fffff880`04e16080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04e17000 fffff880`04e23000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04e23000 fffff880`051f5b80 RTKVHD64 RTKVHD64.sys Tue Mar 27 05:01:50 2012 (4F7181FE)
fffff880`05200000 fffff880`053db000 athurx athurx.sys Wed Jul 28 08:01:39 2010 (4C501C23)
fffff880`053db000 fffff880`053e8000 vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`053e8000 fffff880`053f6000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`053f6000 fffff880`053ff000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05a00000 fffff880`05a2d000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`05a46000 fffff880`05a99000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`05a99000 fffff880`05aac000 ndisuio ndisuio.sys Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`05aac000 fffff880`05ac4000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`05ac4000 fffff880`05afa000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`05afa000 fffff880`05bc3000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`05bc3000 fffff880`05be1000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
fffff880`05be1000 fffff880`05bf9000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`06e00000 fffff880`06ea6000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`06ea6000 fffff880`06eb1000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`06eb1000 fffff880`06ee2000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`06ee6000 fffff880`06f34000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`06f34000 fffff880`06f58000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`06f58000 fffff880`06f63000 AVGIDSFilter AVGIDSFilter.Sys Sun Jul 10 18:37:05 2011 (4E1A2991)
fffff880`06f63000 fffff880`06f75000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`06f75000 fffff880`06fa0000 AVGIDSDriver AVGIDSDriver.Sys Sun Jul 10 18:36:37 2011 (4E1A2975)
fffff880`0745a000 fffff880`074c3000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`074c3000 fffff880`0755b000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0755b000 fffff880`0758c000 WUDFRd WUDFRd.sys Sat Nov 20 05:43:32 2010 (4CE7A654)
fffff880`0f000000 fffff880`0f02f000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`0f02f000 fffff880`0f04a000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0f04a000 fffff880`0f055000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0f056000 fffff880`0fd74000 nvlddmkm nvlddmkm.sys Wed Feb 29 13:04:52 2012 (4F4E68C4)
fffff880`0fd74000 fffff880`0fd91000 parport parport.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0fd91000 fffff880`0fda1000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0fda1000 fffff880`0fdb7000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0fdb7000 fffff880`0fddb000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0fddb000 fffff880`0fde7000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`0fde7000 fffff880`0fdf6000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff960`000e0000 fffff960`003f5000 win32k win32k.sys unavailable (00000000)
fffff960`00440000 fffff960`0044a000 TSDDD TSDDD.dll unavailable (00000000)
fffff960`00790000 fffff960`007b7000 cdd cdd.dll unavailable (00000000)
fffff960`00800000 fffff960`00861000 ATMFD ATMFD.DLL unavailable (00000000)
Unloaded modules:
fffff880`019f1000 fffff880`019ff000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01600000 fffff880`0160c000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0160c000 fffff880`01615000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01615000 fffff880`01628000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
start end module name
fffff880`00f11000 fffff880`00f68000 ACPI ACPI.sys Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`02d5d000 fffff880`02de6000 afd afd.sys Tue Dec 27 22:59:20 2011 (4EFA9418)
fffff880`0fda1000 fffff880`0fdb7000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00c33000 fffff880`00c3e000 amdxata amdxata.sys Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`041ba000 fffff880`041c2000 AppleCharger AppleCharger.sys Tue Nov 01 22:46:00 2011 (4EB0AEE8)
fffff880`00c00000 fffff880`00c09000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00c09000 fffff880`00c33000 ataport ataport.SYS Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`05200000 fffff880`053db000 athurx athurx.sys Wed Jul 28 08:01:39 2010 (4C501C23)
fffff960`00800000 fffff960`00861000 ATMFD ATMFD.DLL unavailable (00000000)
fffff880`0118d000 fffff880`0119c000 avgfwd6a avgfwd6a.sys Sun May 22 18:33:25 2011 (4DD98F35)
fffff880`06f75000 fffff880`06fa0000 AVGIDSDriver AVGIDSDriver.Sys Sun Jul 10 18:36:37 2011 (4E1A2975)
fffff880`019e7000 fffff880`019f1000 AVGIDSEH AVGIDSEH.Sys Sun Jul 10 18:36:50 2011 (4E1A2982)
fffff880`06f58000 fffff880`06f63000 AVGIDSFilter AVGIDSFilter.Sys Sun Jul 10 18:37:05 2011 (4E1A2991)
fffff880`04171000 fffff880`041ba000 avgldx64 avgldx64.sys Thu Oct 06 23:55:41 2011 (4E8E783D)
fffff880`015ed000 fffff880`015fd000 avgmfx64 avgmfx64.sys Sun Aug 07 23:41:46 2011 (4E3F5AFA)
fffff880`019db000 fffff880`019e7000 avgrkx64 avgrkx64.sys Tue Sep 13 00:02:34 2011 (4E6ED5DA)
fffff880`02cb8000 fffff880`02d18000 avgtdia avgtdia.sys Sun Jul 10 18:46:53 2011 (4E1A2BDD)
fffff880`01410000 fffff880`0141c000 avgtpx64 avgtpx64.sys Tue Jul 03 08:33:58 2012 (4FF2E6B6)
fffff880`01409000 fffff880`01410000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04160000 fffff880`04171000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`05bc3000 fffff880`05be1000 bowser bowser.sys Tue Feb 22 23:55:04 2011 (4D649328)
fffff960`00790000 fffff960`007b7000 cdd cdd.dll unavailable (00000000)
fffff880`01628000 fffff880`01652000 cdrom cdrom.sys Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00d23000 fffff880`00de3000 CI CI.dll Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`019ab000 fffff880`019db000 CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00cc5000 fffff880`00d23000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0110a000 fffff880`0117c000 cng cng.sys Fri Jun 01 23:25:51 2012 (4FC987BF)
fffff880`0fd91000 fffff880`0fda1000 CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`053e8000 fffff880`053f6000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`040bf000 fffff880`04142000 csc csc.sys Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`04142000 fffff880`04160000 dfsc dfsc.sys Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`040b0000 fffff880`040bf000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01995000 fffff880`019ab000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`04962000 fffff880`04984000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`053f6000 fffff880`053ff000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04e17000 fffff880`04e23000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`04800000 fffff880`04813000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04813000 fffff880`0481f000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04283000 fffff880`04377000 dxgkrnl dxgkrnl.sys Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`04377000 fffff880`043bd000 dxgmms1 dxgmms1.sys Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`048cd000 fffff880`048db880 EtronHub3 EtronHub3.sys Fri Feb 03 06:23:55 2012 (4F2BC3CB)
fffff880`04267000 fffff880`0427bb00 EtronXHCI EtronXHCI.sys Fri Feb 03 06:23:49 2012 (4F2BC3C5)
fffff880`05ac4000 fffff880`05afa000 fastfat fastfat.SYS Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`01098000 fffff880`010ac000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0104c000 fffff880`01098000 fltmgr fltmgr.sys Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`0122c000 fffff880`01236000 Fs_Rec Fs_Rec.sys Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`0195b000 fffff880`01995000 fvevol fvevol.sys Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01858000 fffff880`018a2000 fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`03011000 fffff800`0305a000 hal hal.dll Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`043bd000 fffff880`043e1000 HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`043e1000 fffff880`043f2000 HECIx64 HECIx64.sys Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`0498a000 fffff880`049a3000 HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`04e0e000 fffff880`04e16080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`04e00000 fffff880`04e0e000 hidusb hidusb.sys Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`05afa000 fffff880`05bc3000 HTTP HTTP.sys Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01952000 fffff880`0195b000 hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`041e8000 fffff880`041fe000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0fde7000 fffff880`0fdf6000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`049cd000 fffff880`049db000 kbdhid kbdhid.sys Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00b9b000 fffff800`00ba5000 kdcom kdcom.dll Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`01000000 fffff880`01043000 ks ks.sys Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`01200000 fffff880`0121b000 ksecdd ksecdd.sys Fri Jun 01 22:50:23 2012 (4FC97F6F)
fffff880`015c3000 fffff880`015ed000 ksecpkg ksecpkg.sys Fri Jun 01 23:27:11 2012 (4FC9880F)
fffff880`04984000 fffff880`04989200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`01600000 fffff880`01615000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0482d000 fffff880`04850000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c62000 fffff880`00cb1000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`0481f000 fffff880`0482d000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`02c97000 fffff880`02ca6000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`049c0000 fffff880`049cd000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00de3000 fffff880`00dfd000 mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`05be1000 fffff880`05bf9000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05a00000 fffff880`05a2d000 mrxsmb mrxsmb.sys Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`06ee6000 fffff880`06f34000 mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`06f34000 fffff880`06f58000 mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`01248000 fffff880`01253000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f71000 fffff880`00f7b000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010ac000 fffff880`0110a000 msrpc msrpc.sys Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`040a5000 fffff880`040b0000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01940000 fffff880`01952000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01470000 fffff880`01563000 ndis ndis.sys Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`0fddb000 fffff880`0fde7000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`05a99000 fffff880`05aac000 ndisuio ndisuio.sys Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`0f000000 fffff880`0f02f000 ndiswan ndiswan.sys Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`048de000 fffff880`048f3000 NDProxy NDProxy.SYS Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`02c3c000 fffff880`02c4b000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d18000 fffff880`02d5d000 netbt netbt.sys Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`01563000 fffff880`015c3000 NETIO NETIO.SYS Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`0117c000 fffff880`0118d000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04099000 fffff880`040a5000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`0305a000 fffff800`03642000 nt ntkrnlmp.exe Fri May 04 04:18:59 2012 (4FA390F3)
fffff880`0125d000 fffff880`01400000 Ntfs Ntfs.sys Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01400000 fffff880`01409000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`048f3000 fffff880`04925000 nvhda64v nvhda64v.sys Tue Jan 17 07:45:46 2012 (4F156D7A)
fffff880`0f056000 fffff880`0fd74000 nvlddmkm nvlddmkm.sys Wed Feb 29 13:04:52 2012 (4F4E68C4)
fffff880`05a46000 fffff880`05a99000 nwifi nwifi.sys Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02c00000 fffff880`02c26000 pacer pacer.sys Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`0fd74000 fffff880`0fd91000 parport parport.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00fbb000 fffff880`00fd0000 partmgr partmgr.sys Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00f7b000 fffff880`00fae000 pci pci.sys Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00fe5000 fffff880`00fec000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fec000 fffff880`00ffc000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121b000 fffff880`0122c000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06e00000 fffff880`06ea6000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`04925000 fffff880`04962000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cb1000 fffff880`00cc5000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`0fdb7000 fffff880`0fddb000 rasl2tp rasl2tp.sys Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0f02f000 fffff880`0f04a000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04000000 fffff880`04021000 raspptp raspptp.sys Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`04021000 fffff880`0403b000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`04048000 fffff880`04099000 rdbss rdbss.sys Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`0f04a000 fffff880`0f055000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0145f000 fffff880`01468000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01236000 fffff880`0123f000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0123f000 fffff880`01248000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01906000 fffff880`01940000 rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`05aac000 fffff880`05ac4000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`04e23000 fffff880`051f5b80 RTKVHD64 RTKVHD64.sys Tue Mar 27 05:01:50 2012 (4F7181FE)
fffff880`011cb000 fffff880`011f2000 SCDEmu SCDEmu.SYS Wed May 30 21:33:23 2012 (4FC6CA63)
fffff880`06ea6000 fffff880`06eb1000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`043f2000 fffff880`043fe000 serenum serenum.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`02c4b000 fffff880`02c68000 serial serial.sys Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`018fe000 fffff880`01906000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`074c3000 fffff880`0755b000 srv srv.sys Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0745a000 fffff880`074c3000 srv2 srv2.sys Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`06eb1000 fffff880`06ee2000 srvnet srvnet.sys Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`043fe000 fffff880`043ff480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01655000 fffff880`01858000 tcpip tcpip.sys Fri Mar 30 04:34:26 2012 (4F757012)
fffff880`06f63000 fffff880`06f75000 tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`011be000 fffff880`011cb000 TDI TDI.SYS Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`0119c000 fffff880`011be000 tdx tdx.sys Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`02c83000 fffff880`02c97000 termdd termdd.sys Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00440000 fffff960`0044a000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`041c2000 fffff880`041e8000 tunnel tunnel.sys Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`02ca6000 fffff880`02cb8000 umbus umbus.sys Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`049a3000 fffff880`049c0000 usbccgp usbccgp.sys Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`048dc000 fffff880`048ddf00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04200000 fffff880`04211000 usbehci usbehci.sys Sat Nov 20 05:43:54 2010 (4CE7A66A)
fffff880`04873000 fffff880`048cd000 usbhub usbhub.sys Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`04211000 fffff880`04267000 USBPORT USBPORT.SYS Sat Nov 20 05:44:00 2010 (4CE7A670)
fffff880`049db000 fffff880`049f6000 USBSTOR USBSTOR.SYS Sat Nov 20 05:44:05 2010 (4CE7A675)
fffff880`00fae000 fffff880`00fbb000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0141c000 fffff880`0142a000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0142a000 fffff880`0144f000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`018a2000 fffff880`018b2000 vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`00fd0000 fffff880`00fe5000 volmgr volmgr.sys Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00e00000 fffff880`00e5c000 volmgrx volmgrx.sys Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`018b2000 fffff880`018fe000 volsnap volsnap.sys Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`053db000 fffff880`053e8000 vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`02c26000 fffff880`02c3c000 vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`02c68000 fffff880`02c83000 wanarp wanarp.sys Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`0144f000 fffff880`0145f000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e5e000 fffff880`00f02000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f02000 fffff880`00f11000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02de6000 fffff880`02def000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000e0000 fffff960`003f5000 win32k win32k.sys unavailable (00000000)
fffff880`00f68000 fffff880`00f71000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`04850000 fffff880`04871000 WudfPf WudfPf.sys Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`0755b000 fffff880`0758c000 WUDFRd WUDFRd.sys Sat Nov 20 05:43:32 2010 (4CE7A654)
Unloaded modules:
fffff880`019f1000 fffff880`019ff000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01600000 fffff880`0160c000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`0160c000 fffff880`01615000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
fffff880`01615000 fffff880`01628000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
Bugcheck code 1000009F
Arguments 00000000`00000004 00000000`00000258 fffffa80`06779b50 fffff800`044013d0
PEB NULL...
[CPU Information]
~MHz = REG_DWORD 3392
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ Intel64 Family 6 Model 42 Stepping 7
ProcessorNameString = REG_SZ Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
Update Signature = REG_BINARY 0,0,0,0,14,0,0,0
Update Status = REG_DWORD 2
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD 1400000000
Machine ID Information [From Smbios 2.4, DMIVersion 36, Size=1173]
BiosVendor = Award Software International, Inc.
BiosVersion = F3
BiosReleaseDate = 04/13/2011
SystemManufacturer = Gigabyte Technology Co., Ltd.
SystemProductName = PH67A-D3-B3
SystemFamily =
SystemVersion =
SystemSKU =
BaseBoardManufacturer = Gigabyte Technology Co., Ltd.
BaseBoardProduct = PH67A-D3-B3
BaseBoardVersion = x.x
CPUID: "Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz"
MaxSpeed: 3400
CurrentSpeed: 3392
dump smbios [-csv | -v | -headers | -devices | -memory | -power | -cpu | -system]
quit:
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``Hello and welcome to Sysnative!
The dump attached is a 9F: DRIVER_POWER_STATE_FAILURE bugcheck that is pointing to memory corruption as the fault. Given that there are a few mentions of usbhub! in the stack:
and a lock:
I'm going to say this may be related to a device connected via USB. Do you happen to have any video devices such as a webcam or something connected via USB? As it's not a full kernel dump, I don't think it's possible to get what the object causing the lock is.
I do see mention of AppleCharger.sys in your drivers list, this is the Gigabyte on/off charge driver which is used to charge your iPhone / iPad / iPod Touch. Given that I believe this is done USB, and the fact that it's Gigabyte motherboard software which is generally very buggy and has caused issues in the past, I'd recommend uninstalling Gigabyte on/off as well as any other Gigabyte utilities / software you have installed.
Regards,
Patrick
The dump attached is a 9F: DRIVER_POWER_STATE_FAILURE bugcheck that is pointing to memory corruption as the fault. Given that there are a few mentions of usbhub! in the stack:
and a lock:
I'm going to say this may be related to a device connected via USB. Do you happen to have any video devices such as a webcam or something connected via USB? As it's not a full kernel dump, I don't think it's possible to get what the object causing the lock is.
I do see mention of AppleCharger.sys in your drivers list, this is the Gigabyte on/off charge driver which is used to charge your iPhone / iPad / iPod Touch. Given that I believe this is done USB, and the fact that it's Gigabyte motherboard software which is generally very buggy and has caused issues in the past, I'd recommend uninstalling Gigabyte on/off as well as any other Gigabyte utilities / software you have installed.
Regards,
Patrick
Vir Gnarus
BSOD Kernel Dump Expert
- Mar 2, 2012
- 474
Careful on the memory corruption thing. Granted, the analysis engine did determine there was corruption of the nt module, but when I opened it I found 0 errors on mine. Also I noticed JC has some missing and/or incorrect symbols errors in his output, so if you're basing your decision on the output that JC gave, then you may be thrown by a false positive generated by the improper symbols.
Anyways, I think I at least found the relevant IRP. It was awkward, given that apparently the TRIAGE_9F_PNP and TRIAGE_9F_POWER structures are private-only and are not available through the public MS symbol server, despite the MSDN article on DRIVER_POWER_STATE_FAILURE hinting otherwise:
So instead I just had to eyeball the raw data and try to get something relevant out of it, judging from what was posted in the article, which I'll paste here for easy viewing:
Again, the other structures listed in this one are probably private-only types not available to us, and this example is in x86, but I venture to guess x64 version isn't much different. So let me work with this template:
So I start with the completion queue structure and see what I got:
Ah, there we go! That last one looks like it matches up. When I checked the major function code 1b, it revealed itself as a PNP IRP, with the minor code being IRP_MN_START_DEVICE. As you can also tell, it's USB-related. Both these points match up with entries we saw in the callstack posted by !analyze -v. Last, but not least, the thread that owns the IRP matches up with the one that faulted.
Part of me thinks I was just lucky with this discovery, but it's nice to know sometimes you can trek through raw data muck and come up with something relevant. It also goes to show that access to symbols is VERY beneficial but not totally impossible to deal without.
Now to figure out where to go from here. It looks like the IRP got deferred but I can't tell much from here on. I think this may be as far as we can go with the minidump.
Anyways, I think I at least found the relevant IRP. It was awkward, given that apparently the TRIAGE_9F_PNP and TRIAGE_9F_POWER structures are private-only and are not available through the public MS symbol server, despite the MSDN article on DRIVER_POWER_STATE_FAILURE hinting otherwise:
Code:
0: kd> dt nt!TRIAGE_9F_POWER
Symbol nt!TRIAGE_9F_POWER not found.
0: kd> dt nt!_TRIAGE_9F_PNP
Symbol nt!_TRIAGE_9F_PNP not found.So instead I just had to eyeball the raw data and try to get something relevant out of it, judging from what was posted in the article, which I'll paste here for easy viewing:
Code:
kd>dt nt!TRIAGE_9F_PNP 82931b24
+0x000 Signature : 0x8001
+0x002 Revision : 1
+0x004 CompletionQueue : 0x82970e20 _TRIAGE_PNP_DEVICE_COMPLETION_QUEUE
+0x008 DelayedWorkQueue : 0x829455bc _TRIAGE_EX_WORK_QUEUEAgain, the other structures listed in this one are probably private-only types not available to us, and this example is in x86, but I venture to guess x64 version isn't much different. So let me work with this template:
Code:
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
Arguments:
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
subsystem.
Arg2: 0000000000000258, Timeout in seconds.
Arg3: fffffa8006779b50, The thread currently holding on to the Pnp lock.
Arg4: [COLOR=#008000]fffff800044013d0[/COLOR], nt!TRIAGE_9F_PNP on Win7
...
0: kd> dps fffff800044013d0
fffff800`044013d0 00000000`00018001
fffff800`044013d8 [COLOR=#ff8c00]fffff800`032d4940[/COLOR] nt!PnpDeviceCompletionQueue [COLOR=#008000]< Most likely _TRIAGE_PNP_DEVICE_COMPLETION_QUEUE[/COLOR]
fffff800`044013e0 [COLOR=#a52a2a]fffff800`032762d8[/COLOR] nt!ExWorkerQueue+0x58 [COLOR=#008000]< Most likely _TRIAGE_EX_WORK_QUEUE[/COLOR]
fffff800`044013e8 00000000`00000000
fffff800`044013f0 fffff800`04401508
fffff800`044013f8 fffff800`0331334c nt!PopBuildDeviceNotifyListWatchdog+0x1c
fffff800`04401400 00000000`00000000
fffff800`04401408 fffff800`00000000
fffff800`04401410 00000000`00000000
fffff800`04401418 fffff800`04401500
fffff800`04401420 fffff800`044014d8
fffff800`04401428 fffff800`030e3e3c nt!KiProcessTimerDpcTable+0x6c
fffff800`04401430 fffff800`044014c0
fffff800`04401438 fffff800`044014c0
fffff800`04401440 00000000`00000000
fffff800`04401448 fffff800`04401500So I start with the completion queue structure and see what I got:
Code:
0: kd> dps fffff800`032d4940
fffff800`032d4940 fffffa80`097bd390 [COLOR=#008000]< Looks like another memory address, let's take a look[/COLOR]
fffff800`032d4948 fffffa80`097bd390
fffff800`032d4950 ????????`????????
fffff800`032d4958 ????????`????????
fffff800`032d4960 ????????`????????
fffff800`032d4968 ????????`????????
fffff800`032d4970 ????????`????????
fffff800`032d4978 ????????`????????
fffff800`032d4980 ????????`????????
fffff800`032d4988 ????????`????????
fffff800`032d4990 ????????`????????
fffff800`032d4998 ????????`????????
fffff800`032d49a0 ????????`????????
fffff800`032d49a8 ????????`????????
fffff800`032d49b0 ????????`????????
fffff800`032d49b8 ????????`????????
0: kd> !irp fffffa80`097bd390
IRP signature does not match, probably not an IRP. Use any flag to force. [COLOR=#008000]< Ok, obviously not an IRP. Now let's dump it raw:[/COLOR]
0: kd> dps fffffa80`097bd390
fffffa80`097bd390 fffff800`032d4940 nt!PnpDeviceCompletionQueue
fffffa80`097bd398 fffff800`032d4940 nt!PnpDeviceCompletionQueue
fffffa80`097bd3a0 fffffa80`074f77e0 [COLOR=#008000]< While the other memory addresses bring us right back, this one looks different, let's look...[/COLOR]
fffffa80`097bd3a8 ????????`????????
fffffa80`097bd3b0 ????????`????????
fffffa80`097bd3b8 ????????`????????
fffffa80`097bd3c0 ????????`????????
fffffa80`097bd3c8 ????????`????????
fffffa80`097bd3d0 ????????`????????
fffffa80`097bd3d8 ????????`????????
fffffa80`097bd3e0 ????????`????????
fffffa80`097bd3e8 ????????`????????
fffffa80`097bd3f0 ????????`????????
fffffa80`097bd3f8 ????????`????????
fffffa80`097bd400 ????????`????????
fffffa80`097bd408 ????????`????????
0: kd> dps fffffa80`074f77e0
fffffa80`074f77e0 00000000`00000000
fffffa80`074f77e8 00000000`00000000
fffffa80`074f77f0 fffffa80`0839ad90
fffffa80`074f77f8 00000000`00000000
fffffa80`074f7800 fffffa80`09da3060
fffffa80`074f7808 00000000`004a0048
fffffa80`074f7810 fffffa80`09d1d720
fffffa80`074f7818 00000000`000e000c
fffffa80`074f7820 fffff8a0`08458260
fffffa80`074f7828 fffffa80`09901b30
fffffa80`074f7830 ????????`????????
fffffa80`074f7838 ????????`????????
fffffa80`074f7840 ????????`????????
fffffa80`074f7848 ????????`????????
fffffa80`074f7850 ????????`????????
fffffa80`074f7858 ????????`????????
[COLOR=#008000]Ok, we got some items here, let's try to run [I]!irp[/I] through each of those memory addresses:
[/COLOR]
0: kd> !irp fffffa80`0839ad90;!irp fffffa80`09da3060;!irp fffffa80`09d1d720;!irp fffff8a0`08458260;!irp fffffa80`09901b30
IRP signature does not match, probably not an IRP. Use any flag to force.
IRP signature does not match, probably not an IRP. Use any flag to force.
IRP signature does not match, probably not an IRP. Use any flag to force.
IRP signature does not match, probably not an IRP. Use any flag to force.
Irp is active with 8 stacks 8 is current (= 0xfffffa8009901df8)
No Mdl: No System Buffer: Thread fffffa8006779b50: Irp stack trace.
cmd flg cl Device File Completion-Context
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 1b, 0] 0 0 fffffa8009da3060 00000000 fffff88004876d80-fffff880033695c0
\Driver\usbhub usbhub!UsbhDeferIrpCompletion
Args: 00000000 00000000 00000000 00000000
>[ 1b, 0] 0 e0 fffffa800677a050 00000000 fffff800031d0590-fffffa80097bd390 Success Error Cancel
\Driver\usbhub nt!PnpDeviceCompletionRoutine
Args: 00000000 00000000 00000000 00000000Ah, there we go! That last one looks like it matches up. When I checked the major function code 1b, it revealed itself as a PNP IRP, with the minor code being IRP_MN_START_DEVICE. As you can also tell, it's USB-related. Both these points match up with entries we saw in the callstack posted by !analyze -v. Last, but not least, the thread that owns the IRP matches up with the one that faulted.
Part of me thinks I was just lucky with this discovery, but it's nice to know sometimes you can trek through raw data muck and come up with something relevant. It also goes to show that access to symbols is VERY beneficial but not totally impossible to deal without.
Now to figure out where to go from here. It looks like the IRP got deferred but I can't tell much from here on. I think this may be as far as we can go with the minidump.
Last edited:
Nice digging, VN. Now that we've ultimately come to the conclusion that it was caused by USB as I had guessed, we'll see soon whether or not the Gigabyte charging utility caused it. I've seen some trouble with that program in the past when it comes to charging phones.
Vir Gnarus
BSOD Kernel Dump Expert
- Mar 2, 2012
- 474
Oh yeah, especially when we're dealing with power IRPs and starting up a usb-powered device like what we're seeing here. Bloody thing wreaks havoc on those. I'd still like to see it actually involved some way or another with this but so far I haven't been able to do that just yet. I'm not quite sure if the minidump has retained the pertinent data.
Has Sysnative Forums helped you? Please consider donating to help us support the site!