Critical Structure Corruption - Windows 10

kalamarano · Oct 26, 2015

Hello everyone

I am getting this blue screen, Critical Structure Corruption.

I have tried to run resource and performance monitor, but got this error: " the operator or administrator has refused the request"

The System File Collection App zip is attached.

Could someone assist me on how to proceed with this and solve it?

Thanks in advance

· OS - Windows 8.1, 8, 7, Vista ? 8.1
· x86 (32-bit) or x64 ? x64
· What was original installed OS on system? Yes
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? OEM
· Age of system (hardware) 2 years
· Age of OS installation - have you re-installed the OS? About 4 months

· CPU i5 3330 3 ghz
· Video Card GTX 970 G1 Gaming
· MotherBoard - (if NOT a laptop) B75M-D3H
· Power Supply - brand & wattage (if laptop, skip this one) Corsair CS850M

· System Manufacturer
· Exact model number (if laptop, check label on bottom)

· Laptop or Desktop? Desktop

jcgriff2 · Oct 29, 2015

Hi. . .

The lone dump was of little help.

See if Driver Verifier flags any 3rd party drivers - https://www.sysnative.com/forums/bs...er-bsod-related-windows-10-8-1-8-7-vista.html

Regards. . .

jcgriff2

Code:

Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp2_SysnativeFileCollectionApp.zip\SysnativeFileCollectionApp\102615-17984-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.18066.amd64fre.winblue_ltsb.150928-1002
Machine Name:
Kernel base = 0xfffff802`62403000 PsLoadedModuleList = 0xfffff802`626d8630
Debug session time: Mon Oct 26 20:41:51.723 2015 (UTC - 4:00)
System Uptime: 0 days 1:58:00.462
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a01f5a2db6c70d, b3b72be080340970, fffff802627b1022, 1}

Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
Probably caused by : ntkrnlmp.exe ( nt!DbgkForwardException+14b6 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_STRUCTURE_CORRUPTION (109)
This bugcheck is generated when the kernel detects that critical kernel code or
data have been corrupted. There are generally three causes for a corruption:
1) A driver has inadvertently or deliberately modified critical kernel code
 or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
2) A developer attempted to set a normal kernel breakpoint using a kernel
 debugger that was not attached when the system was booted. Normal breakpoints,
 "bp", can only be set if the debugger is attached at boot time. Hardware
 breakpoints, "ba", can be set at any time.
3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
Arguments:
Arg1: a3a01f5a2db6c70d, Reserved
Arg2: b3b72be080340970, Reserved
Arg3: fffff802627b1022, Failure type dependent information
Arg4: 0000000000000001, Type of corrupted region, can be
	0 : A generic data region
	1 : Modification of a function or .pdata
	2 : A processor IDT
	3 : A processor GDT
	4 : Type 1 process list corruption
	5 : Type 2 process list corruption
	6 : Debug routine modification
	7 : Critical MSR modification

Debugging Details:
------------------


PG_MISMATCH:  1DD01EC1

FAULTING_IP: 
nt!DbgkForwardException+14b6
fffff802`627b1022 8bc3            mov     eax,ebx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x109

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

STACK_TEXT:  
ffffd000`23406088 00000000`00000000 : 00000000`00000109 a3a01f5a`2db6c70d b3b72be0`80340970 fffff802`627b1022 : nt!KeBugCheckEx


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!DbgkForwardException+14b6
fffff802`627b1022 8bc3            mov     eax,ebx

SYMBOL_NAME:  nt!DbgkForwardException+14b6

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  56098394

IMAGE_VERSION:  6.3.9600.18066

BUCKET_ID_FUNC_OFFSET:  14b6

FAILURE_BUCKET_ID:  0x109_1_nt!DbgkForwardException

BUCKET_ID:  0x109_1_nt!DbgkForwardException

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x109_1_nt!dbgkforwardexception

FAILURE_ID_HASH:  {a90469ed-577e-b75c-afd5-3297cd68eb2e}

Followup: MachineOwner
---------

rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000109
rdx=a3a01f5a2db6c70d rsi=fffff802625528a0 rdi=0000000000000000
rip=fffff802625528a0 rsp=ffffd00023406088 rbp=0000000000000000
 r8=b3b72be080340970  r9=fffff802627b1022 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000293
nt!KeBugCheckEx:
fffff802`625528a0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`23406090=0000000000000109
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`23406088 00000000`00000000 : 00000000`00000109 a3a01f5a`2db6c70d b3b72be0`80340970 fffff802`627b1022 : nt!KeBugCheckEx
start             end                 module name
fffff800`e0200000 fffff800`e0269000   spaceport spaceport.sys Tue Oct 28 22:47:03 2014 (54505527)
fffff800`e0283000 fffff800`e030e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon May 11 14:19:50 2015 (5550F2C6)
fffff800`e030e000 fffff800`e031c000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e031c000 fffff800`e037e000   CLFS     CLFS.SYS     Tue Mar 03 19:51:05 2015 (54F656F9)
fffff800`e037e000 fffff800`e03a0000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff800`e03a0000 fffff800`e03b5000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff800`e03b5000 fffff800`e03bf000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e0400000 fffff800`e0418000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff800`e0418000 fffff800`e0423000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`e0436000 fffff800`e04be000   CI       CI.dll       Fri Dec 05 22:23:28 2014 (548276B0)
fffff800`e04be000 fffff800`e051b000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff800`e051b000 fffff800`e05ea000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff800`e05ea000 fffff800`e05fb000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e0600000 fffff800`e0646000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff800`e065c000 fffff800`e06e4000   ACPI     ACPI.sys     Mon Oct 06 23:29:50 2014 (54335E2E)
fffff800`e06e4000 fffff800`e06ee000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e06ee000 fffff800`e0779000   cng      cng.sys      Sun Mar 29 18:22:05 2015 (55187B0D)
fffff800`e0784000 fffff800`e07e4000   cm_km    cm_km.sys    Wed Jul 01 14:08:29 2015 (55942C9D)
fffff800`e07e4000 fffff800`e07fc000   partmgr  partmgr.sys  Wed Oct 08 03:34:42 2014 (5434E912)
fffff800`e0800000 fffff800`e0848000   pci      pci.sys      Thu Jul 24 07:45:24 2014 (53D0F1D4)
fffff800`e0848000 fffff800`e0855000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff800`e0855000 fffff800`e0871000   pdc      pdc.sys      Wed Oct 15 00:34:24 2014 (543DF950)
fffff800`e087e000 fffff800`e0fe0000   kl1      kl1.sys      Thu Jun 18 14:58:13 2015 (558314C5)
fffff800`e0fe0000 fffff800`e0fea000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e0fea000 fffff800`e0fff000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff800`e1000000 fffff800`e105e000   storport storport.sys Wed Sep 24 22:47:07 2014 (5423822B)
fffff800`e105e000 fffff800`e1078000   EhStorClass EhStorClass.sys Thu Aug 22 07:38:15 2013 (5215F827)
fffff800`e1078000 fffff800`e108e000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff800`e108e000 fffff800`e10b9000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff800`e10b9000 fffff800`e10ea000   ksecpkg  ksecpkg.sys  Fri Jun 26 23:13:03 2015 (558E14BF)
fffff800`e10f9000 fffff800`e1158000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e1158000 fffff800`e1166000   klbackupdisk klbackupdisk.sys Tue Jun 02 16:18:33 2015 (556E0F99)
fffff800`e1166000 fffff800`e11c2000   FLTMGR   FLTMGR.SYS   Mon Aug 25 22:25:16 2014 (53FBF00C)
fffff800`e11c2000 fffff800`e11dd000   mountmgr mountmgr.sys Fri Jul 10 13:09:47 2015 (559FFC5B)
fffff800`e11dd000 fffff800`e11fa000   storahci storahci.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
fffff800`e120c000 fffff800`e1228000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff800`e1228000 fffff800`e1422000   Ntfs     Ntfs.sys     Fri Oct 10 20:35:55 2014 (54387B6B)
fffff800`e1422000 fffff800`e143e000   ksecdd   ksecdd.sys   Tue Oct 28 22:47:36 2014 (54505548)
fffff800`e143e000 fffff800`e144e000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff800`e144e000 fffff800`e1459000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff800`e1459000 fffff800`e1570000   ndis     ndis.sys     Fri Jul 10 15:08:18 2015 (55A01822)
fffff800`e1570000 fffff800`e15e8000   NETIO    NETIO.SYS    Sun Nov 09 21:58:13 2014 (546029C5)
fffff800`e15e8000 fffff800`e15f7000   intelpep intelpep.sys Wed Oct 15 02:29:44 2014 (543E1458)
fffff800`e1600000 fffff800`e1695000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff800`e1697000 fffff800`e1901000   tcpip    tcpip.sys    Thu Jun 11 15:24:09 2015 (5579E059)
fffff800`e1901000 fffff800`e196d000   fwpkclnt fwpkclnt.sys Thu Jun 11 15:22:50 2015 (5579E00A)
fffff800`e196d000 fffff800`e1992000   wfplwfs  wfplwfs.sys  Sun Nov 09 21:57:28 2014 (54602998)
fffff800`e1992000 fffff800`e19e1000   volsnap  volsnap.sys  Wed Jun 18 18:41:28 2014 (53A21598)
fffff800`e19e1000 fffff800`e19f8000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff800`e1a0a000 fffff800`e1a60000   CLASSPNP CLASSPNP.SYS Wed Oct 08 01:22:07 2014 (5434C9FF)
fffff800`e1a60000 fffff800`e1a75000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`e1ab4000 fffff800`e1ae2000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e1ae2000 fffff800`e1af4000   klbackupflt klbackupflt.sys Wed Apr 15 21:09:36 2015 (552F0BD0)
fffff800`e1af4000 fffff800`e1b2d000   klflt    klflt.sys    Thu Sep 24 07:48:42 2015 (5603E31A)
fffff800`e1b2d000 fffff800`e1b9d000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff800`e1e43000 fffff800`e1f2b000   klif     klif.sys     Thu Sep 24 08:45:40 2015 (5603F074)
fffff800`e1f2b000 fffff800`e1f79000   ks       ks.sys       Fri Jul 04 08:58:59 2014 (53B6A513)
fffff800`e1f79000 fffff800`e1fcf000   klhk     klhk.sys     Mon Jul 20 12:10:03 2015 (55AD1D5B)
fffff800`e1fcf000 fffff800`e1fd8000   klpd     klpd.sys     Wed Sep 23 07:10:31 2015 (560288A7)
fffff800`e1fd8000 fffff800`e1fe1000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e1fe1000 fffff800`e1fe9000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e1fe9000 fffff800`e1ff7000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff800`e2000000 fffff800`e2092000   afd      afd.sys      Thu May 29 23:03:01 2014 (5387F4E5)
fffff800`e2092000 fffff800`e20ad000   klwtp    klwtp.sys    Wed Jun 03 11:29:28 2015 (556F1D58)
fffff800`e20c5000 fffff800`e2245000   dxgkrnl  dxgkrnl.sys  Tue Oct 28 22:46:45 2014 (54505515)
fffff800`e2245000 fffff800`e2257000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff800`e2257000 fffff800`e22ba000   dxgmms1  dxgmms1.sys  Tue Oct 28 22:46:30 2014 (54505506)
fffff800`e22ba000 fffff800`e22cc000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e22cc000 fffff800`e22e0000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff800`e22e0000 fffff800`e22ec000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e22ec000 fffff800`e22ff000   klwfp    klwfp.sys    Mon Sep 28 09:35:13 2015 (56094211)
fffff800`e22ff000 fffff800`e231f000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e231f000 fffff800`e232d000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff800`e232d000 fffff800`e2379000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff800`e2379000 fffff800`e23a3000   pacer    pacer.sys    Tue Oct 28 22:45:30 2014 (545054CA)
fffff800`e23a3000 fffff800`e23ad000   klim6    klim6.sys    Mon Jun 08 04:49:57 2015 (55755735)
fffff800`e23ad000 fffff800`e23be000   netbios  netbios.sys  Tue Oct 28 22:47:23 2014 (5450553B)
fffff800`e2400000 fffff800`e2419000   ahcache  ahcache.sys  Thu Mar 19 21:56:10 2015 (550B7E3A)
fffff800`e2419000 fffff800`e2428000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff800`e2428000 fffff800`e2433000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff800`e2433000 fffff800`e2444000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff800`e2444000 fffff800`e24b3000   USBPORT  USBPORT.SYS  Sat May 31 02:30:25 2014 (53897701)
fffff800`e24ca000 fffff800`e2558000   csc      csc.sys      Tue Oct 28 22:46:49 2014 (54505519)
fffff800`e2558000 fffff800`e2566000   nsiproxy nsiproxy.sys Tue Oct 28 22:46:03 2014 (545054EB)
fffff800`e2566000 fffff800`e2572000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff800`e2572000 fffff800`e257e000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff800`e257e000 fffff800`e25ac000   kneps    kneps.sys    Fri Jun 19 08:22:49 2015 (55840999)
fffff800`e25ac000 fffff800`e25b6000   HWiNFO64A HWiNFO64A.SYS Tue Mar 31 05:51:32 2015 (551A6E24)
fffff800`e25b6000 fffff800`e25dc000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff800`e2600000 fffff800`e2619000   HDAudBus HDAudBus.sys Thu Jul 24 07:45:39 2014 (53D0F1E3)
fffff800`e2633000 fffff800`e30fc000   nvlddmkm nvlddmkm.sys Wed Jun 17 01:36:26 2015 (5581075A)
fffff800`e30fc000 fffff800`e3151000   USBXHCI  USBXHCI.SYS  Thu Apr 09 22:08:27 2015 (5527309B)
fffff800`e3151000 fffff800`e3183000   ucx01000 ucx01000.sys Tue Oct 07 01:00:55 2014 (54337387)
fffff800`e3183000 fffff800`e31a6000   TeeDriverx64 TeeDriverx64.sys Tue Sep 23 16:01:14 2014 (5421D18A)
fffff800`e31a6000 fffff800`e31be000   usbehci  usbehci.sys  Sat May 31 02:29:54 2014 (538976E2)
fffff800`e31be000 fffff800`e31f7000   fastfat  fastfat.SYS  Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`e3200000 fffff800`e326a000   usbhub   usbhub.sys   Thu Jul 24 07:45:29 2014 (53D0F1D9)
fffff800`e326a000 fffff800`e3276000   USBD     USBD.SYS     Sat May 31 02:31:17 2014 (53897735)
fffff800`e3288000 fffff800`e3362000   Rt630x64 Rt630x64.sys Thu Jan 15 01:08:17 2015 (54B75951)
fffff800`e3362000 fffff800`e337c000   serial   serial.sys   Thu Aug 22 07:40:08 2013 (5215F898)
fffff800`e337c000 fffff800`e3389000   serenum  serenum.sys  Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`e3389000 fffff800`e33a5000   parport  parport.sys  Thu Aug 22 07:40:02 2013 (5215F892)
fffff800`e33a5000 fffff800`e33c3000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e33c3000 fffff800`e33d3000   ISCTD    ISCTD.sys    Wed Jan 22 14:37:35 2014 (52E01DFF)
fffff800`e33d3000 fffff800`e33de000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff800`e33de000 fffff800`e33df600   swenum   swenum.sys   Tue Oct 28 22:47:41 2014 (5450554D)
fffff800`e33e0000 fffff800`e33e9000   dtlitescsibus dtlitescsibus.sys Thu Mar 26 22:05:54 2015 (5514BB02)
fffff800`e33e9000 fffff800`e33f4000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`e3400000 fffff800`e344c000   mrxsmb10 mrxsmb10.sys Fri Jun 26 23:12:06 2015 (558E1486)
fffff800`e344c000 fffff800`e3469000   Ndu      Ndu.sys      Tue Oct 28 22:45:16 2014 (545054BC)
fffff800`e34b2000 fffff800`e352a000   UsbHub3  UsbHub3.sys  Mon Mar 16 23:34:24 2015 (5507A0C0)
fffff800`e352a000 fffff800`e3537000   nvvadarm nvvadarm.sys Wed Jun 17 01:56:05 2015 (55810BF5)
fffff800`e3537000 fffff800`e3545000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff800`e3545000 fffff800`e3551000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`e3551000 fffff800`e356e000   dump_storahci dump_storahci.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
fffff800`e356e000 fffff800`e3584000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff800`e3584000 fffff800`e35a8000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff800`e35a8000 fffff800`e35bc000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff800`e35bc000 fffff800`e35d4000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e3800000 fffff800`e380d000   mouhid   mouhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff800`e380d000 fffff800`e3840000   rzudd    rzudd.sys    Tue Aug 11 07:13:50 2015 (55C9D8EE)
fffff800`e3840000 fffff800`e3849000   imsevent imsevent.sys Fri Jan 10 12:52:53 2014 (52D03375)
fffff800`e3849000 fffff800`e3855000   klmouflt klmouflt.sys Tue Jun 02 08:36:12 2015 (556DA33C)
fffff800`e3855000 fffff800`e3865000   mouclass mouclass.sys Tue Nov 04 01:54:47 2014 (54587837)
fffff800`e3865000 fffff800`e3873000   kbdhid   kbdhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff800`e3873000 fffff800`e387c000   ikbevent ikbevent.sys Fri Jan 10 12:52:53 2014 (52D03375)
fffff800`e387c000 fffff800`e3888000   klkbdflt klkbdflt.sys Tue Jun 02 08:36:30 2015 (556DA34E)
fffff800`e3888000 fffff800`e389a000   kbdclass kbdclass.sys Tue Nov 04 01:54:54 2014 (5458783E)
fffff800`e38a0000 fffff800`e3d23000   RTKVHD64 RTKVHD64.sys Thu Jun 18 06:45:05 2015 (5582A131)
fffff800`e3d23000 fffff800`e3d6a000   portcls  portcls.sys  Tue Oct 28 22:46:35 2014 (5450550B)
fffff800`e3d6a000 fffff800`e3d86000   drmk     drmk.sys     Tue Oct 28 22:47:38 2014 (5450554A)
fffff800`e3d86000 fffff800`e3d8b300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e3d8c000 fffff800`e3d93f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e3d94000 fffff800`e3dbb000   usbccgp  usbccgp.sys  Thu Jul 24 07:44:51 2014 (53D0F1B3)
fffff800`e3dbb000 fffff800`e3dc9000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff800`e3dc9000 fffff800`e3de8000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff800`e3de8000 fffff800`e3df7000   rzendpt  rzendpt.sys  Tue Dec 30 04:32:47 2014 (54A2713F)
fffff800`e3e00000 fffff800`e3ead000   srv2     srv2.sys     Wed Oct 08 03:33:30 2014 (5434E8CA)
fffff800`e3eb1000 fffff800`e3f5a000   peauth   peauth.sys   Sat Feb 22 07:09:37 2014 (53089381)
fffff800`e3f5a000 fffff800`e3f61280   rzpmgrk  rzpmgrk.sys  Thu Jun 11 22:57:21 2015 (557A4A91)
fffff800`e3f62000 fffff800`e3f7fb00   rzpnk    rzpnk.sys    Thu May 28 15:22:11 2015 (55676AE3)
fffff800`e3f80000 fffff800`e3fc3000   srvnet   srvnet.sys   Fri Jun 27 02:22:21 2014 (53AD0D9D)
fffff800`e3fc3000 fffff800`e3fd5000   tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff800`e4000000 fffff800`e406c000   mrxsmb   mrxsmb.sys   Fri Jun 26 23:12:23 2015 (558E1497)
fffff800`e406c000 fffff800`e40a4000   mrxsmb20 mrxsmb20.sys Fri Jun 26 23:13:13 2015 (558E14C9)
fffff800`e40a4000 fffff800`e40b5000   kldisk   kldisk.sys   Tue Jun 02 08:49:29 2015 (556DA659)
fffff800`e40ce000 fffff800`e41c8000   HTTP     HTTP.sys     Mon Feb 23 19:40:28 2015 (54EBC87C)
fffff800`e41c8000 fffff800`e41e8000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff800`e41e8000 fffff800`e41ff000   mpsdrv   mpsdrv.sys   Tue Oct 28 22:45:31 2014 (545054CB)
fffff800`e4200000 fffff800`e423d000   WUDFRd   WUDFRd.sys   Tue Oct 28 22:46:13 2014 (545054F5)
fffff800`e423d000 fffff800`e426d200   ssudmdm  ssudmdm.sys  Thu Jan 02 04:51:26 2014 (52C5369E)
fffff800`e426e000 fffff800`e427d000   modem    modem.sys    Thu Aug 22 07:40:15 2013 (5215F89F)
fffff800`e427d000 fffff800`e429e000   WudfPf   WudfPf.sys   Tue Oct 28 22:46:27 2014 (54505503)
fffff800`e429e000 fffff800`e42a9000   WpdUpFltr WpdUpFltr.sys Thu Aug 22 07:38:45 2013 (5215F845)
fffff800`e42b3000 fffff800`e4341000   srv      srv.sys      Thu Jul 24 07:43:27 2014 (53D0F15F)
fffff800`e4341000 fffff800`e436e000   tunnel   tunnel.sys   Fri Sep 04 15:24:03 2015 (55E9EFD3)
fffff800`e436e000 fffff800`e4384000   mslldp   mslldp.sys   Tue Oct 28 22:45:39 2014 (545054D3)
fffff800`e4384000 fffff800`e438e000   umpass   umpass.sys   Thu Aug 22 07:38:58 2013 (5215F852)
fffff800`e438e000 fffff800`e439e000   condrv   condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`e43ab000 fffff800`e43b5000   INETMON  INETMON.sys  Thu Apr 03 12:50:43 2014 (533D9163)
fffff800`e43b5000 fffff800`e43c0000   WSDPrint WSDPrint.sys Thu Aug 22 07:39:58 2013 (5215F88E)
fffff800`e43c0000 fffff800`e43cb000   WSDScan  WSDScan.sys  Tue Oct 28 22:47:48 2014 (54505554)
fffff800`e43cb000 fffff800`e43e3600   ssudbus  ssudbus.sys  Thu Jan 02 04:51:22 2014 (52C5369A)
fffff800`e43e4000 fffff800`e43fd000   WinUsb   WinUsb.sys   Thu Aug 22 07:37:55 2013 (5215F813)
fffff802`616fb000 fffff802`61704000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff802`62403000 fffff802`62b92000   nt       ntkrnlmp.exe Mon Sep 28 14:14:44 2015 (56098394)
fffff802`62b92000 fffff802`62c02000   hal      hal.dll      Sun Jun 01 18:49:12 2014 (538BADE8)
fffff960`000fd000 fffff960`00513000   win32k   win32k.sys   unavailable (00000000)
fffff960`007bd000 fffff960`007c6000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`009a9000 fffff960`009e3000   cdd      cdd.dll      unavailable (00000000)
fffff960`00b37000 fffff960`00b96000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff800`e43e4000 fffff800`e43fd000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff800`e4200000 fffff800`e423d000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003D000
fffff800`e439e000 fffff800`e43ab000   WinDivert.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff800`e1a75000 fffff800`e1a81000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff800`e1a81000 fffff800`e1a9e000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001D000
fffff800`e1a9e000 fffff800`e1ab4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff800`e25dc000 fffff800`e25ed000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff800`e0779000 fffff800`e0784000   klelam.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff800`e1200000 fffff800`e120c000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
start             end                 module name
fffff800`e065c000 fffff800`e06e4000   ACPI     ACPI.sys     Mon Oct 06 23:29:50 2014 (54335E2E)
fffff800`e0400000 fffff800`e0418000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff800`e2000000 fffff800`e2092000   afd      afd.sys      Thu May 29 23:03:01 2014 (5387F4E5)
fffff800`e2400000 fffff800`e2419000   ahcache  ahcache.sys  Thu Mar 19 21:56:10 2015 (550B7E3A)
fffff960`00b37000 fffff960`00b96000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff800`e22ba000 fffff800`e22cc000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e1fe9000 fffff800`e1ff7000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff800`e1fe1000 fffff800`e1fe9000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e03b5000 fffff800`e03bf000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e41c8000 fffff800`e41e8000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff960`009a9000 fffff960`009e3000   cdd      cdd.dll      unavailable (00000000)
fffff800`e1ab4000 fffff800`e1ae2000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e0436000 fffff800`e04be000   CI       CI.dll       Fri Dec 05 22:23:28 2014 (548276B0)
fffff800`e1a0a000 fffff800`e1a60000   CLASSPNP CLASSPNP.SYS Wed Oct 08 01:22:07 2014 (5434C9FF)
fffff800`e031c000 fffff800`e037e000   CLFS     CLFS.SYS     Tue Mar 03 19:51:05 2015 (54F656F9)
fffff800`e0784000 fffff800`e07e4000   cm_km    cm_km.sys    Wed Jul 01 14:08:29 2015 (55942C9D)
fffff800`e06ee000 fffff800`e0779000   cng      cng.sys      Sun Mar 29 18:22:05 2015 (55187B0D)
fffff800`e2419000 fffff800`e2428000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff800`e438e000 fffff800`e439e000   condrv   condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`e1a60000 fffff800`e1a75000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`e24ca000 fffff800`e2558000   csc      csc.sys      Tue Oct 28 22:46:49 2014 (54505519)
fffff800`e25b6000 fffff800`e25dc000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff800`e120c000 fffff800`e1228000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff800`e3d6a000 fffff800`e3d86000   drmk     drmk.sys     Tue Oct 28 22:47:38 2014 (5450554A)
fffff800`e33e0000 fffff800`e33e9000   dtlitescsibus dtlitescsibus.sys Thu Mar 26 22:05:54 2015 (5514BB02)
fffff800`e3545000 fffff800`e3551000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`e356e000 fffff800`e3584000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff800`e3551000 fffff800`e356e000   dump_storahci dump_storahci.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
fffff800`e20c5000 fffff800`e2245000   dxgkrnl  dxgkrnl.sys  Tue Oct 28 22:46:45 2014 (54505515)
fffff800`e2257000 fffff800`e22ba000   dxgmms1  dxgmms1.sys  Tue Oct 28 22:46:30 2014 (54505506)
fffff800`e105e000 fffff800`e1078000   EhStorClass EhStorClass.sys Thu Aug 22 07:38:15 2013 (5215F827)
fffff800`e31be000 fffff800`e31f7000   fastfat  fastfat.SYS  Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`e1078000 fffff800`e108e000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff800`e1166000 fffff800`e11c2000   FLTMGR   FLTMGR.SYS   Mon Aug 25 22:25:16 2014 (53FBF00C)
fffff800`e144e000 fffff800`e1459000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff800`e1600000 fffff800`e1695000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff800`e1901000 fffff800`e196d000   fwpkclnt fwpkclnt.sys Thu Jun 11 15:22:50 2015 (5579E00A)
fffff802`62b92000 fffff802`62c02000   hal      hal.dll      Sun Jun 01 18:49:12 2014 (538BADE8)
fffff800`e2600000 fffff800`e2619000   HDAudBus HDAudBus.sys Thu Jul 24 07:45:39 2014 (53D0F1E3)
fffff800`e3dc9000 fffff800`e3de8000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff800`e3d8c000 fffff800`e3d93f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e3dbb000 fffff800`e3dc9000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff800`e40ce000 fffff800`e41c8000   HTTP     HTTP.sys     Mon Feb 23 19:40:28 2015 (54EBC87C)
fffff800`e25ac000 fffff800`e25b6000   HWiNFO64A HWiNFO64A.SYS Tue Mar 31 05:51:32 2015 (551A6E24)
fffff800`e3873000 fffff800`e387c000   ikbevent ikbevent.sys Fri Jan 10 12:52:53 2014 (52D03375)
fffff800`e3840000 fffff800`e3849000   imsevent imsevent.sys Fri Jan 10 12:52:53 2014 (52D03375)
fffff800`e43ab000 fffff800`e43b5000   INETMON  INETMON.sys  Thu Apr 03 12:50:43 2014 (533D9163)
fffff800`e15e8000 fffff800`e15f7000   intelpep intelpep.sys Wed Oct 15 02:29:44 2014 (543E1458)
fffff800`e33a5000 fffff800`e33c3000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e33c3000 fffff800`e33d3000   ISCTD    ISCTD.sys    Wed Jan 22 14:37:35 2014 (52E01DFF)
fffff800`e3888000 fffff800`e389a000   kbdclass kbdclass.sys Tue Nov 04 01:54:54 2014 (5458783E)
fffff800`e3865000 fffff800`e3873000   kbdhid   kbdhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff802`616fb000 fffff802`61704000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff800`e2428000 fffff800`e2433000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff800`e087e000 fffff800`e0fe0000   kl1      kl1.sys      Thu Jun 18 14:58:13 2015 (558314C5)
fffff800`e1158000 fffff800`e1166000   klbackupdisk klbackupdisk.sys Tue Jun 02 16:18:33 2015 (556E0F99)
fffff800`e1ae2000 fffff800`e1af4000   klbackupflt klbackupflt.sys Wed Apr 15 21:09:36 2015 (552F0BD0)
fffff800`e40a4000 fffff800`e40b5000   kldisk   kldisk.sys   Tue Jun 02 08:49:29 2015 (556DA659)
fffff800`e1af4000 fffff800`e1b2d000   klflt    klflt.sys    Thu Sep 24 07:48:42 2015 (5603E31A)
fffff800`e1f79000 fffff800`e1fcf000   klhk     klhk.sys     Mon Jul 20 12:10:03 2015 (55AD1D5B)
fffff800`e1e43000 fffff800`e1f2b000   klif     klif.sys     Thu Sep 24 08:45:40 2015 (5603F074)
fffff800`e23a3000 fffff800`e23ad000   klim6    klim6.sys    Mon Jun 08 04:49:57 2015 (55755735)
fffff800`e387c000 fffff800`e3888000   klkbdflt klkbdflt.sys Tue Jun 02 08:36:30 2015 (556DA34E)
fffff800`e3849000 fffff800`e3855000   klmouflt klmouflt.sys Tue Jun 02 08:36:12 2015 (556DA33C)
fffff800`e1fcf000 fffff800`e1fd8000   klpd     klpd.sys     Wed Sep 23 07:10:31 2015 (560288A7)
fffff800`e22ec000 fffff800`e22ff000   klwfp    klwfp.sys    Mon Sep 28 09:35:13 2015 (56094211)
fffff800`e2092000 fffff800`e20ad000   klwtp    klwtp.sys    Wed Jun 03 11:29:28 2015 (556F1D58)
fffff800`e257e000 fffff800`e25ac000   kneps    kneps.sys    Fri Jun 19 08:22:49 2015 (55840999)
fffff800`e1f2b000 fffff800`e1f79000   ks       ks.sys       Fri Jul 04 08:58:59 2014 (53B6A513)
fffff800`e1422000 fffff800`e143e000   ksecdd   ksecdd.sys   Tue Oct 28 22:47:36 2014 (54505548)
fffff800`e10b9000 fffff800`e10ea000   ksecpkg  ksecpkg.sys  Fri Jun 26 23:13:03 2015 (558E14BF)
fffff800`e3d86000 fffff800`e3d8b300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e35a8000 fffff800`e35bc000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff800`e3584000 fffff800`e35a8000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff800`e0283000 fffff800`e030e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon May 11 14:19:50 2015 (5550F2C6)
fffff800`e426e000 fffff800`e427d000   modem    modem.sys    Thu Aug 22 07:40:15 2013 (5215F89F)
fffff800`e3537000 fffff800`e3545000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff800`e3855000 fffff800`e3865000   mouclass mouclass.sys Tue Nov 04 01:54:47 2014 (54587837)
fffff800`e3800000 fffff800`e380d000   mouhid   mouhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff800`e11c2000 fffff800`e11dd000   mountmgr mountmgr.sys Fri Jul 10 13:09:47 2015 (559FFC5B)
fffff800`e41e8000 fffff800`e41ff000   mpsdrv   mpsdrv.sys   Tue Oct 28 22:45:31 2014 (545054CB)
fffff800`e4000000 fffff800`e406c000   mrxsmb   mrxsmb.sys   Fri Jun 26 23:12:23 2015 (558E1497)
fffff800`e3400000 fffff800`e344c000   mrxsmb10 mrxsmb10.sys Fri Jun 26 23:12:06 2015 (558E1486)
fffff800`e406c000 fffff800`e40a4000   mrxsmb20 mrxsmb20.sys Fri Jun 26 23:13:13 2015 (558E14C9)
fffff800`e22e0000 fffff800`e22ec000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e0fe0000 fffff800`e0fea000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e436e000 fffff800`e4384000   mslldp   mslldp.sys   Tue Oct 28 22:45:39 2014 (545054D3)
fffff800`e04be000 fffff800`e051b000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff800`e2572000 fffff800`e257e000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff800`e19e1000 fffff800`e19f8000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff800`e1459000 fffff800`e1570000   ndis     ndis.sys     Fri Jul 10 15:08:18 2015 (55A01822)
fffff800`e33d3000 fffff800`e33de000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff800`e344c000 fffff800`e3469000   Ndu      Ndu.sys      Tue Oct 28 22:45:16 2014 (545054BC)
fffff800`e23ad000 fffff800`e23be000   netbios  netbios.sys  Tue Oct 28 22:47:23 2014 (5450553B)
fffff800`e232d000 fffff800`e2379000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff800`e1570000 fffff800`e15e8000   NETIO    NETIO.SYS    Sun Nov 09 21:58:13 2014 (546029C5)
fffff800`e22cc000 fffff800`e22e0000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff800`e2566000 fffff800`e2572000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff800`e2558000 fffff800`e2566000   nsiproxy nsiproxy.sys Tue Oct 28 22:46:03 2014 (545054EB)
fffff802`62403000 fffff802`62b92000   nt       ntkrnlmp.exe Mon Sep 28 14:14:44 2015 (56098394)
fffff800`e1228000 fffff800`e1422000   Ntfs     Ntfs.sys     Fri Oct 10 20:35:55 2014 (54387B6B)
fffff800`e1fd8000 fffff800`e1fe1000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e2633000 fffff800`e30fc000   nvlddmkm nvlddmkm.sys Wed Jun 17 01:36:26 2015 (5581075A)
fffff800`e352a000 fffff800`e3537000   nvvadarm nvvadarm.sys Wed Jun 17 01:56:05 2015 (55810BF5)
fffff800`e2379000 fffff800`e23a3000   pacer    pacer.sys    Tue Oct 28 22:45:30 2014 (545054CA)
fffff800`e3389000 fffff800`e33a5000   parport  parport.sys  Thu Aug 22 07:40:02 2013 (5215F892)
fffff800`e07e4000 fffff800`e07fc000   partmgr  partmgr.sys  Wed Oct 08 03:34:42 2014 (5434E912)
fffff800`e0800000 fffff800`e0848000   pci      pci.sys      Thu Jul 24 07:45:24 2014 (53D0F1D4)
fffff800`e143e000 fffff800`e144e000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff800`e0855000 fffff800`e0871000   pdc      pdc.sys      Wed Oct 15 00:34:24 2014 (543DF950)
fffff800`e3eb1000 fffff800`e3f5a000   peauth   peauth.sys   Sat Feb 22 07:09:37 2014 (53089381)
fffff800`e3d23000 fffff800`e3d6a000   portcls  portcls.sys  Tue Oct 28 22:46:35 2014 (5450550B)
fffff800`e03a0000 fffff800`e03b5000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff800`e1b2d000 fffff800`e1b9d000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff800`e33e9000 fffff800`e33f4000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`e0600000 fffff800`e0646000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff800`e35bc000 fffff800`e35d4000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e3288000 fffff800`e3362000   Rt630x64 Rt630x64.sys Thu Jan 15 01:08:17 2015 (54B75951)
fffff800`e38a0000 fffff800`e3d23000   RTKVHD64 RTKVHD64.sys Thu Jun 18 06:45:05 2015 (5582A131)
fffff800`e3de8000 fffff800`e3df7000   rzendpt  rzendpt.sys  Tue Dec 30 04:32:47 2014 (54A2713F)
fffff800`e3f5a000 fffff800`e3f61280   rzpmgrk  rzpmgrk.sys  Thu Jun 11 22:57:21 2015 (557A4A91)
fffff800`e3f62000 fffff800`e3f7fb00   rzpnk    rzpnk.sys    Thu May 28 15:22:11 2015 (55676AE3)
fffff800`e380d000 fffff800`e3840000   rzudd    rzudd.sys    Tue Aug 11 07:13:50 2015 (55C9D8EE)
fffff800`e337c000 fffff800`e3389000   serenum  serenum.sys  Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`e3362000 fffff800`e337c000   serial   serial.sys   Thu Aug 22 07:40:08 2013 (5215F898)
fffff800`e0200000 fffff800`e0269000   spaceport spaceport.sys Tue Oct 28 22:47:03 2014 (54505527)
fffff800`e42b3000 fffff800`e4341000   srv      srv.sys      Thu Jul 24 07:43:27 2014 (53D0F15F)
fffff800`e3e00000 fffff800`e3ead000   srv2     srv2.sys     Wed Oct 08 03:33:30 2014 (5434E8CA)
fffff800`e3f80000 fffff800`e3fc3000   srvnet   srvnet.sys   Fri Jun 27 02:22:21 2014 (53AD0D9D)
fffff800`e43cb000 fffff800`e43e3600   ssudbus  ssudbus.sys  Thu Jan 02 04:51:22 2014 (52C5369A)
fffff800`e423d000 fffff800`e426d200   ssudmdm  ssudmdm.sys  Thu Jan 02 04:51:26 2014 (52C5369E)
fffff800`e11dd000 fffff800`e11fa000   storahci storahci.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
fffff800`e1000000 fffff800`e105e000   storport storport.sys Wed Sep 24 22:47:07 2014 (5423822B)
fffff800`e33de000 fffff800`e33df600   swenum   swenum.sys   Tue Oct 28 22:47:41 2014 (5450554D)
fffff800`e1697000 fffff800`e1901000   tcpip    tcpip.sys    Thu Jun 11 15:24:09 2015 (5579E059)
fffff800`e3fc3000 fffff800`e3fd5000   tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff800`e231f000 fffff800`e232d000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff800`e22ff000 fffff800`e231f000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e3183000 fffff800`e31a6000   TeeDriverx64 TeeDriverx64.sys Tue Sep 23 16:01:14 2014 (5421D18A)
fffff800`e037e000 fffff800`e03a0000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff960`007bd000 fffff960`007c6000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff800`e4341000 fffff800`e436e000   tunnel   tunnel.sys   Fri Sep 04 15:24:03 2015 (55E9EFD3)
fffff800`e3151000 fffff800`e3183000   ucx01000 ucx01000.sys Tue Oct 07 01:00:55 2014 (54337387)
fffff800`e2433000 fffff800`e2444000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff800`e4384000 fffff800`e438e000   umpass   umpass.sys   Thu Aug 22 07:38:58 2013 (5215F852)
fffff800`e3d94000 fffff800`e3dbb000   usbccgp  usbccgp.sys  Thu Jul 24 07:44:51 2014 (53D0F1B3)
fffff800`e326a000 fffff800`e3276000   USBD     USBD.SYS     Sat May 31 02:31:17 2014 (53897735)
fffff800`e31a6000 fffff800`e31be000   usbehci  usbehci.sys  Sat May 31 02:29:54 2014 (538976E2)
fffff800`e3200000 fffff800`e326a000   usbhub   usbhub.sys   Thu Jul 24 07:45:29 2014 (53D0F1D9)
fffff800`e34b2000 fffff800`e352a000   UsbHub3  UsbHub3.sys  Mon Mar 16 23:34:24 2015 (5507A0C0)
fffff800`e2444000 fffff800`e24b3000   USBPORT  USBPORT.SYS  Sat May 31 02:30:25 2014 (53897701)
fffff800`e30fc000 fffff800`e3151000   USBXHCI  USBXHCI.SYS  Thu Apr 09 22:08:27 2015 (5527309B)
fffff800`e0848000 fffff800`e0855000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff800`e0fea000 fffff800`e0fff000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff800`e10f9000 fffff800`e1158000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e1992000 fffff800`e19e1000   volsnap  volsnap.sys  Wed Jun 18 18:41:28 2014 (53A21598)
fffff800`e2245000 fffff800`e2257000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff800`e051b000 fffff800`e05ea000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff800`e05ea000 fffff800`e05fb000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e030e000 fffff800`e031c000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e196d000 fffff800`e1992000   wfplwfs  wfplwfs.sys  Sun Nov 09 21:57:28 2014 (54602998)
fffff960`000fd000 fffff960`00513000   win32k   win32k.sys   unavailable (00000000)
fffff800`e43e4000 fffff800`e43fd000   WinUsb   WinUsb.sys   Thu Aug 22 07:37:55 2013 (5215F813)
fffff800`e06e4000 fffff800`e06ee000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e108e000 fffff800`e10b9000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff800`e429e000 fffff800`e42a9000   WpdUpFltr WpdUpFltr.sys Thu Aug 22 07:38:45 2013 (5215F845)
fffff800`e0418000 fffff800`e0423000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`e43b5000 fffff800`e43c0000   WSDPrint WSDPrint.sys Thu Aug 22 07:39:58 2013 (5215F88E)
fffff800`e43c0000 fffff800`e43cb000   WSDScan  WSDScan.sys  Tue Oct 28 22:47:48 2014 (54505554)
fffff800`e427d000 fffff800`e429e000   WudfPf   WudfPf.sys   Tue Oct 28 22:46:27 2014 (54505503)
fffff800`e4200000 fffff800`e423d000   WUDFRd   WUDFRd.sys   Tue Oct 28 22:46:13 2014 (545054F5)

Unloaded modules:
fffff800`e43e4000 fffff800`e43fd000   WinUsb.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00019000
fffff800`e4200000 fffff800`e423d000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003D000
fffff800`e439e000 fffff800`e43ab000   WinDivert.sy
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000D000
fffff800`e1a75000 fffff800`e1a81000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff800`e1a81000 fffff800`e1a9e000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001D000
fffff800`e1a9e000 fffff800`e1ab4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff800`e25dc000 fffff800`e25ed000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff800`e0779000 fffff800`e0784000   klelam.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff800`e1200000 fffff800`e120c000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
Bugcheck code 00000109
Arguments a3a01f5a`2db6c70d b3b72be0`80340970 fffff802`627b1022 00000000`00000001

blueelvis · Oct 30, 2015

Hi,

Sorry to bump in John.

@kalamarano - I tried analyzing the dump file.

I got different information as compared to the modules/symbols present on my system. There are few causes which I could think up of for this abnormal behavior -

Your copy of Windows is pirated (Which I see is. Please get a genuine license before we can proceed further)
There is malware/rootkit on your system which is causing this.
I don't have enough symbols even though I downloaded them again just to be sure.
Some kind of un-explained behavior.

I would suggest you to get a legitimate license for your copy of Windows before we can proceed further.

-Pranav

kalamarano · Nov 2, 2015

Thanks for your reply

I have to run this test for at least 24 hours? And how do I export to you guy after?

Thanks in advance

jcgriff2 · Nov 2, 2015

Yes - let Driver Verifier run for at least 24 hours.

If D/V detects a violation in a 3rd party driver, it will force a BSOD.

Upon BSOD, re-run the jcgriff2/Sysnative app which will provide us with the dump file - https://www.sysnative.com/forums/bs...ng-instructions-windows-10-8-1-8-7-vista.html

Regards. . .

jcgriff2

Jared · Nov 4, 2015

Can we get a Kernel memory dump?
From C:\Windows\MEMORY.dmp

Search

Search

Critical Structure Corruption - Windows 10

kalamarano

Member

Attachments

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

blueelvis

BSOD Kernel Dump Senior Analyst

kalamarano

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Jared

Sysnative Staff, BSOD Kernel Dump Expert

Critical Structure Corruption - Windows 10

kalamarano

Member

Attachments

jcgriff2

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

blueelvis

BSOD Kernel Dump Senior Analyst

kalamarano

Member

jcgriff2

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Jared

Sysnative Staff, BSOD Kernel Dump Expert

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)