DRIVER_POWER_STATE_FAILURE nt!_KWAIT_BLOCK - Windows 7 x64

Zardoc · Jun 9, 2015

Hi,

I'm sorry, I tried to follow instructions to post BSOD. System collector stuck on ''Waiting for system info'' and Perfmon /report says I don't have the rights.

So here is the dump code and the dump file.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Lance\Mini dumps Windows\060815-23375-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is: H:\Windows 8.1 update 3  X64 Fra 2015-03-02
Windows 7 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17736.amd64fre.winblue_r9.150322-1500
Machine Name:
Kernel base = 0xfffff802`9828c000 PsLoadedModuleList = 0xfffff802`98565850
Debug session time: Mon Jun  8 23:25:56.178 2015 (GMT-4)
System Uptime: 0 days 15:08:33.868
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {4, 12c, ffffe00034ed1240, fffff8029a1b8980}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption

Followup: memory_corruption
---------

0: kd> !analyze -v;!thread;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
    subsystem.
Arg2: 000000000000012c, Timeout in seconds.
Arg3: ffffe00034ed1240, The thread currently holding on to the Pnp lock.
Arg4: fffff8029a1b8980

Debugging Details:
------------------


DRVPOWERSTATE_SUBCODE:  4

FAULTING_THREAD:  ffffe00034ed1240

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff802983dfb36

STACK_TEXT:  
ffffd001`42ecd060 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x76


STACK_COMMAND:  .thread 0xffffe00034ed1240 ; kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff802983dfe6c - nt!SwapContext_PatchXSave+2
    [ 01:31 ]
    fffff802983dfee8-fffff802983dfee9  2 bytes - nt!SwapContext_PatchLdt (+0x7c)
    [ 48 0f:eb 42 ]
    fffff802983dff6c - nt!SwapContext_PatchXRstor+2 (+0x84)
    [ 09:29 ]
4 errors : !nt (fffff802983dfe6c-fffff802983dff6c)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------

GetPointerFromAddress: unable to read from fffff802985ef000
THREAD fffff802985e8a00  Cid 0004.00ac  Teb: 0000000000000000 Win32Thread: 0000000000000000 WAIT: (UserRequest) KernelMode Non-Alertable
    ffffd00142ecd398  SynchronizationEvent
Cannot read nt!_KWAIT_BLOCK at 0000000000000000 - error 1
IRP List:
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
    ffffe00034ed1878: (1878,34ed) Flags: 00000001  Mdl: ffffe00034ed1878
    ffffe00039820a60: (0006,0598) Flags: 00000404  Mdl: 00000000
Not impersonating
GetUlongFromAddress: unable to read from fffff8029853bb00
Owning Process            ffffe00034a938c0       Image:         System
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      3469687      
Context Switch Count      84159  NoStackSwap
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0xfffff80298339430)
Stack Init ffffd00142ecdc90 Current ffffd00142ecd020
Base ffffd00142ece000 Limit ffffd00142ec8000 Call 0
Priority 15 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd001`42ecd060 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x76

rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff802983dfb36 rsp=ffffd00142ecd060 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl nz na pe nc
cs=0000  ss=0000  ds=0000  es=0000  fs=0000  gs=0000             efl=00000000
nt!KiSwapContext+0x76:
fffff802`983dfb36 488d8c2400010000 lea     rcx,[rsp+100h]
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd001`42ecd060 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x76
start             end                 module name
ffffe000`38b11000 ffffe000`38b18000   em015_64 em015_64.dat Fri Mar 01 08:27:56 2013 (5130ACDC)
ffffe000`38b46000 ffffe000`38b7a000   em006_64 em006_64.dat Wed May 20 07:28:33 2015 (555C6FE1)
ffffe000`38c00000 ffffe000`38c62000   em018_64 em018_64.dat Tue May 26 05:31:11 2015 (55643D5F)
fffff800`fbc00000 fffff800`fbc88000   CI       CI.dll       Fri Dec 05 22:23:28 2014 (548276B0)
fffff800`fbcb9000 fffff800`fbd36000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Fri Jul 04 08:59:36 2014 (53B6A538)
fffff800`fbd36000 fffff800`fbd44000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fbd44000 fffff800`fbda6000   CLFS     CLFS.SYS     Tue Mar 03 19:51:05 2015 (54F656F9)
fffff800`fbda6000 fffff800`fbdc8000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff800`fbdc8000 fffff800`fbddd000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff800`fbddd000 fffff800`fbde7000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`fbe00000 fffff800`fbecf000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff800`fbed9000 fffff800`fbf36000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff800`fbf36000 fffff800`fbf47000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`fbf47000 fffff800`fbf5f000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff800`fbf5f000 fffff800`fbf6a000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`fbf6a000 fffff800`fbff2000   ACPI     ACPI.sys     Mon Oct 06 23:29:50 2014 (54335E2E)
fffff800`fbff2000 fffff800`fbffc000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`fc000000 fffff800`fc069000   spaceport spaceport.sys Tue Oct 28 22:47:03 2014 (54505527)
fffff800`fc069000 fffff800`fc07e000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff800`fc07e000 fffff800`fc09e000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`fc09e000 fffff800`fc0ac000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff800`fc0ac000 fffff800`fc0c9000   NEOFLTR_807_32723 NEOFLTR_807_32723.SYS Sat Oct 18 05:38:12 2014 (54423504)
fffff800`fc0d0000 fffff800`fc15b000   cng      cng.sys      Sun Mar 29 18:22:05 2015 (55187B0D)
fffff800`fc15b000 fffff800`fc165000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`fc165000 fffff800`fc1ad000   pci      pci.sys      Thu Jul 24 07:45:24 2014 (53D0F1D4)
fffff800`fc1ad000 fffff800`fc1ba000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff800`fc1ba000 fffff800`fc1d6000   pdc      pdc.sys      Wed Oct 15 00:34:24 2014 (543DF950)
fffff800`fc1d6000 fffff800`fc1ee000   partmgr  partmgr.sys  Wed Oct 08 03:34:42 2014 (5434E912)
fffff800`fc200000 fffff800`fc2cf000   eamonm   eamonm.sys   Tue Jan 20 05:39:35 2015 (54BE3067)
fffff800`fc2d6000 fffff800`fc335000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`fc335000 fffff800`fc350000   mountmgr mountmgr.sys Mon Oct 06 21:18:16 2014 (54333F58)
fffff800`fc350000 fffff800`fc39f000   volsnap  volsnap.sys  Wed Jun 18 18:41:28 2014 (53A21598)
fffff800`fc39f000 fffff800`fc3f5000   CLASSPNP CLASSPNP.SYS Wed Oct 08 01:22:07 2014 (5434C9FF)
fffff800`fc400000 fffff800`fc469000   PGPwded  PGPwded.sys  Tue Aug 05 01:34:10 2014 (53E06CD2)
fffff800`fc469000 fffff800`fc4e1000   NETIO    NETIO.SYS    Sun Nov 09 21:58:13 2014 (546029C5)
fffff800`fc4eb000 fffff800`fc868000   iaStorA  iaStorA.sys  Fri Dec 05 07:49:22 2014 (5481A9D2)
fffff800`fc868000 fffff800`fc8c6000   storport storport.sys Wed Sep 24 22:47:07 2014 (5423822B)
fffff800`fc8e0000 fffff800`fc93c000   fltmgr   fltmgr.sys   Mon Aug 25 22:25:16 2014 (53FBF00C)
fffff800`fc93c000 fffff800`fc952000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff800`fc952000 fffff800`fc989000   PGPfsfd  PGPfsfd.sys  Tue Aug 05 01:34:20 2014 (53E06CDC)
fffff800`fc989000 fffff800`fc9b4000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff800`fc9b4000 fffff800`fc9bd000   Pgpwdefs Pgpwdefs.sys Tue Aug 05 01:33:43 2014 (53E06CB7)
fffff800`fc9bd000 fffff800`fc9ea000   ehdrv    ehdrv.sys    Tue Jan 20 05:39:52 2015 (54BE3078)
fffff800`fc9ea000 fffff800`fc9f6000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fca00000 fffff800`fca3f000   edevmon  edevmon.sys  Tue Jan 20 05:39:37 2015 (54BE3069)
fffff800`fca3f000 fffff800`fca53000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff800`fca54000 fffff800`fcc4e000   Ntfs     Ntfs.sys     Fri Oct 10 20:35:55 2014 (54387B6B)
fffff800`fcc4e000 fffff800`fcc6a000   ksecdd   ksecdd.sys   Tue Oct 28 22:47:36 2014 (54505548)
fffff800`fcc6a000 fffff800`fcc7a000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff800`fcc7a000 fffff800`fcc85000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff800`fcc85000 fffff800`fcd9c000   ndis     ndis.sys     Mon Feb 02 19:03:15 2015 (54D01043)
fffff800`fcd9c000 fffff800`fcdcd000   ksecpkg  ksecpkg.sys  Sun Jan 11 22:01:17 2015 (54B338FD)
fffff800`fcdcd000 fffff800`fcdeb280   ctxusbm  ctxusbm.sys  Wed Feb 25 04:37:43 2015 (54ED97E7)
fffff800`fcdec000 fffff800`fcdfe000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`fce00000 fffff800`fce0e000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff800`fce15000 fffff800`fd081000   tcpip    tcpip.sys    Sun Nov 09 21:59:03 2014 (546029F7)
fffff800`fd081000 fffff800`fd0ed000   fwpkclnt fwpkclnt.sys Sun Nov 09 21:57:40 2014 (546029A4)
fffff800`fd0ed000 fffff800`fd112000   wfplwfs  wfplwfs.sys  Sun Nov 09 21:57:28 2014 (54602998)
fffff800`fd112000 fffff800`fd145000   tib_mounter tib_mounter.sys Mon Sep 30 09:04:20 2013 (524976D4)
fffff800`fd145000 fffff800`fd1da000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff800`fd1da000 fffff800`fd1f8000   fltsrv   fltsrv.sys   Mon May 13 05:40:09 2013 (5190B4F9)
fffff800`fd1f8000 fffff800`fd200000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fd200000 fffff800`fd244000   snapman  snapman.sys  Wed Aug 14 08:17:26 2013 (520B7556)
fffff800`fd244000 fffff800`fd28a000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff800`fd28a000 fffff800`fd2a1000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff800`fd2a1000 fffff800`fd2b0000   intelpep intelpep.sys Wed Oct 15 02:29:44 2014 (543E1458)
fffff800`fd2bc000 fffff800`fd2d8000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff800`fd2d8000 fffff800`fd3eb000   tib      tib.sys      Wed Mar 20 05:00:38 2013 (51497AB6)
fffff800`fd3eb000 fffff800`fd400000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`fd641000 fffff800`fd66f000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`fd66f000 fffff800`fd9ec000   dump_iaStorA dump_iaStorA.sys Fri Dec 05 07:49:22 2014 (5481A9D2)
fffff800`fd9f3000 fffff800`fd9fc000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fda00000 fffff800`fda63000   dxgmms1  dxgmms1.sys  Tue Oct 28 22:46:30 2014 (54505506)
fffff800`fda69000 fffff800`fdbe9000   dxgkrnl  dxgkrnl.sys  Tue Oct 28 22:46:45 2014 (54505515)
fffff800`fdbe9000 fffff800`fdbfb000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff800`fdc0f000 fffff800`fdc5b000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff800`fdc5b000 fffff800`fdced000   afd      afd.sys      Thu May 29 23:03:01 2014 (5387F4E5)
fffff800`fdced000 fffff800`fdd17000   pacer    pacer.sys    Tue Oct 28 22:45:30 2014 (545054CA)
fffff800`fdd17000 fffff800`fdd28000   netbios  netbios.sys  Tue Oct 28 22:47:23 2014 (5450553B)
fffff800`fdd28000 fffff800`fdd98000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff800`fdd98000 fffff800`fdddf000   portcls  portcls.sys  Tue Oct 28 22:46:35 2014 (5450550B)
fffff800`fde1b000 fffff800`fdea9000   csc      csc.sys      Tue Oct 28 22:46:49 2014 (54505519)
fffff800`fdea9000 fffff800`fdec2000   wanarp   wanarp.sys   Mon Jan 05 21:59:31 2015 (54AB4F93)
fffff800`fdec2000 fffff800`fded2000   PGPsdk   PGPsdk.sys   Tue Aug 05 01:34:13 2014 (53E06CD5)
fffff800`fded2000 fffff800`fdee0000   nsiproxy nsiproxy.sys Tue Oct 28 22:46:03 2014 (545054EB)
fffff800`fdee0000 fffff800`fdeec000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff800`fdeec000 fffff800`fdef8000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff800`fdef8000 fffff800`fdf1e000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff800`fdf2f000 fffff800`fdf35000   AsIO     AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
fffff800`fdf35000 fffff800`fdf4e000   ahcache  ahcache.sys  Thu Mar 19 21:56:10 2015 (550B7E3A)
fffff800`fdf4e000 fffff800`fdf5c000   Hamdrv   Hamdrv.sys   Mon Mar 30 09:28:42 2015 (55194F8A)
fffff800`fdf5c000 fffff800`fdf6b000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff800`fdf6b000 fffff800`fdf76000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff800`fdf76000 fffff800`fdf87000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff800`fdf87000 fffff800`fdff6000   USBPORT  USBPORT.SYS  Sat May 31 02:30:25 2014 (53897701)
fffff800`fe000000 fffff800`fe023000   TeeDriverx64 TeeDriverx64.sys Tue Sep 23 16:01:14 2014 (5421D18A)
fffff800`fe023000 fffff800`fe03b000   usbehci  usbehci.sys  Sat May 31 02:29:54 2014 (538976E2)
fffff800`fe03b000 fffff800`fe06f000   nvhda64v nvhda64v.sys Thu Oct 09 13:02:27 2014 (5436BFA3)
fffff800`fe092000 fffff800`feb4d000   nvlddmkm nvlddmkm.sys Mon May 18 06:24:50 2015 (5559BDF2)
fffff800`feb4d000 fffff800`feb66000   HDAudBus HDAudBus.sys Thu Jul 24 07:45:39 2014 (53D0F1E3)
fffff800`feb66000 fffff800`febbb000   USBXHCI  USBXHCI.SYS  Thu Apr 09 22:08:27 2015 (5527309B)
fffff800`febbb000 fffff800`febed000   ucx01000 ucx01000.sys Tue Oct 07 01:00:55 2014 (54337387)
fffff800`fec00000 fffff800`fec12000   circlass circlass.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff800`fec12000 fffff800`fec1d000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`fec1d000 fffff800`fec87000   usbhub   usbhub.sys   Thu Jul 24 07:45:29 2014 (53D0F1D9)
fffff800`fec87000 fffff800`fed61000   Rt630x64 Rt630x64.sys Thu Jan 15 01:08:17 2015 (54B75951)
fffff800`fed61000 fffff800`fedaf000   ks       ks.sys       Fri Jul 04 08:58:59 2014 (53B6A513)
fffff800`fedaf000 fffff800`fedbb000   USBD     USBD.SYS     Sat May 31 02:31:17 2014 (53897735)
fffff800`fedbb000 fffff800`fedd7000   drmk     drmk.sys     Tue Oct 28 22:47:38 2014 (5450554A)
fffff800`fedec000 fffff800`fedf7000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff800`fee00000 fffff800`fee01600   swenum   swenum.sys   Tue Oct 28 22:47:41 2014 (5450554D)
fffff800`fee0a000 fffff800`fefba900   hcw89    hcw89.sys    Thu Nov 06 14:07:09 2014 (545BC6DD)
fffff800`fefbb000 fffff800`fefbef80   BdaSup   BdaSup.SYS   Thu Aug 22 07:39:23 2013 (5215F86B)
fffff800`fefbf000 fffff800`fefc4300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`fefc5000 fffff800`fefcbc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff800`fefcc000 fffff800`fefd6000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff800`fefd6000 fffff800`feff4000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`feff4000 fffff800`fefff000   UEFI     UEFI.sys     Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`ff000000 fffff800`ff04b000   mrxsmb10 mrxsmb10.sys Thu Mar 06 04:19:36 2014 (53183DA8)
fffff800`ff05a000 fffff800`ff0d2000   UsbHub3  UsbHub3.sys  Mon Mar 16 23:34:24 2015 (5507A0C0)
fffff800`ff0d2000 fffff800`ff0f8000   USBSTOR  USBSTOR.SYS  Sat Aug 30 18:49:23 2014 (540254F3)
fffff800`ff0f8000 fffff800`ff11f000   usbccgp  usbccgp.sys  Thu Jul 24 07:44:51 2014 (53D0F1B3)
fffff800`ff11f000 fffff800`ff133000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff800`ff133000 fffff800`ff14b000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`ff14b000 fffff800`ff183000   mrxsmb20 mrxsmb20.sys Sat Sep 27 00:59:28 2014 (54264430)
fffff800`ff183000 fffff800`ff1d2000   PGPdisk  PGPdisk.SYS  Tue Aug 05 01:34:24 2014 (53E06CE0)
fffff800`ff1d2000 fffff800`ff1ef000   Ndu      Ndu.sys      Tue Oct 28 22:45:16 2014 (545054BC)
fffff800`ff200000 fffff800`ff239000   fastfat  fastfat.SYS  Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`ff239000 fffff800`ff245000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`ff245000 fffff800`ff25b000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff800`ff25b000 fffff800`ff286000   dump_PGPwdeDumpFilter dump_PGPwdeDumpFilter.sys Tue Aug 05 01:34:17 2014 (53E06CD9)
fffff800`ff292000 fffff800`ff70f000   RTKVHD64 RTKVHD64.sys Tue Jun 02 06:47:59 2015 (556D89DF)
fffff800`ff70f000 fffff800`ff71d000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff800`ff71d000 fffff800`ff73c000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff800`ff73c000 fffff800`ff743f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`ff744000 fffff800`ff755000   usbscan  usbscan.sys  Tue Oct 28 22:47:57 2014 (5450555D)
fffff800`ff755000 fffff800`ff762000   usbprint usbprint.sys Thu Aug 22 07:36:32 2013 (5215F7C0)
fffff800`ff762000 fffff800`ff76f000   mouhid   mouhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff800`ff76f000 fffff800`ff77f000   mouclass mouclass.sys Tue Nov 04 01:54:47 2014 (54587837)
fffff800`ff77f000 fffff800`ff78d000   kbdhid   kbdhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff800`ff78d000 fffff800`ff79f000   kbdclass kbdclass.sys Tue Nov 04 01:54:54 2014 (5458783E)
fffff800`ff79f000 fffff800`ff7ad000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff800`ff7b9000 fffff800`ff7ca000   hidir    hidir.sys    Thu Aug 22 07:39:16 2013 (5215F864)
fffff800`ff7ca000 fffff800`ff7ee000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff800`ff80f000 fffff800`ff909000   HTTP     HTTP.sys     Mon Feb 23 19:40:28 2015 (54EBC87C)
fffff800`ff909000 fffff800`ff929000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff800`ff929000 fffff800`ff953000   epfwwfpr epfwwfpr.sys Wed Jan 28 08:02:44 2015 (54C8DDF4)
fffff800`ff953000 fffff800`ff96a000   mpsdrv   mpsdrv.sys   Tue Oct 28 22:45:31 2014 (545054CB)
fffff800`ff96a000 fffff800`ff9d7000   mrxsmb   mrxsmb.sys   Wed Oct 08 03:32:08 2014 (5434E878)
fffff800`ff9d7000 fffff800`ff9e7000   condrv   condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`ffc00000 fffff800`ffcad000   srv2     srv2.sys     Wed Oct 08 03:33:30 2014 (5434E8CA)
fffff800`ffcf6000 fffff800`ffd9f000   peauth   peauth.sys   Sat Feb 22 07:09:37 2014 (53089381)
fffff800`ffd9f000 fffff800`ffdaa000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff800`ffdaa000 fffff800`ffded000   srvnet   srvnet.sys   Fri Jun 27 02:22:21 2014 (53AD0D9D)
fffff800`ffded000 fffff800`ffdff000   tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff800`ffe00000 fffff800`ffe21000   WudfPf   WudfPf.sys   Tue Oct 28 22:46:27 2014 (54505503)
fffff800`ffe21000 fffff800`ffe5e000   WUDFRd   WUDFRd.sys   Tue Oct 28 22:46:13 2014 (545054F5)
fffff800`ffe5e000 fffff800`ffe69000   WpdUpFltr WpdUpFltr.sys Thu Aug 22 07:38:45 2013 (5215F845)
fffff800`ffe69000 fffff800`ffe73000   umpass   umpass.sys   Thu Aug 22 07:38:58 2013 (5215F852)
fffff800`ffecd000 fffff800`fff5b000   srv      srv.sys      Thu Jul 24 07:43:27 2014 (53D0F15F)
fffff800`fff5b000 fffff800`fff5ca80   MSPQM    MSPQM.sys    Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`fff5d000 fffff800`fff8a000   tunnel   tunnel.sys   Thu Aug 22 07:35:45 2013 (5215F791)
fffff800`fff8a000 fffff800`fffe6000   afcdp    afcdp.sys    Wed Jul 20 10:46:03 2011 (4E26EA2B)
fffff800`fffe6000 fffff800`ffffc000   mslldp   mslldp.sys   Tue Oct 28 22:45:39 2014 (545054D3)
fffff802`973a2000 fffff802`973ab000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff802`9821c000 fffff802`9828c000   hal      hal.dll      Sun Jun 01 18:49:12 2014 (538BADE8)
fffff802`9828c000 fffff802`98a20000   nt       ntkrnlmp.exe Sun Mar 22 18:26:46 2015 (550F41A6)
fffff960`00127000 fffff960`0053e000   win32k   win32k.sys   unavailable (00000000)
fffff960`00656000 fffff960`0065f000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`009b1000 fffff960`009eb000   cdd      cdd.dll      unavailable (00000000)
fffff960`00b3e000 fffff960`00b9d000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff800`fd2b0000 fffff800`fd2bc000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd676000 fffff800`fd9f3000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd600000 fffff800`fd616000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd616000 fffff800`fd641000   dump_PGPwdeD
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`ff79f000 fffff800`ff7b9000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fc8c6000 fffff800`fc8e0000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fedaf000 fffff800`fedec000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fdf1e000 fffff800`fdf2f000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd2b0000 fffff800`fd2bc000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start             end                 module name
fffff800`fbf6a000 fffff800`fbff2000   ACPI     ACPI.sys     Mon Oct 06 23:29:50 2014 (54335E2E)
fffff800`fbf47000 fffff800`fbf5f000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff800`fff8a000 fffff800`fffe6000   afcdp    afcdp.sys    Wed Jul 20 10:46:03 2011 (4E26EA2B)
fffff800`fdc5b000 fffff800`fdced000   afd      afd.sys      Thu May 29 23:03:01 2014 (5387F4E5)
fffff800`fdf35000 fffff800`fdf4e000   ahcache  ahcache.sys  Thu Mar 19 21:56:10 2015 (550B7E3A)
fffff800`fdf2f000 fffff800`fdf35000   AsIO     AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
fffff960`00b3e000 fffff960`00b9d000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff800`fcdec000 fffff800`fcdfe000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`fce00000 fffff800`fce0e000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff800`fefbb000 fffff800`fefbef80   BdaSup   BdaSup.SYS   Thu Aug 22 07:39:23 2013 (5215F86B)
fffff800`fd1f8000 fffff800`fd200000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fbddd000 fffff800`fbde7000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`ff909000 fffff800`ff929000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff960`009b1000 fffff960`009eb000   cdd      cdd.dll      unavailable (00000000)
fffff800`fd641000 fffff800`fd66f000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`fbc00000 fffff800`fbc88000   CI       CI.dll       Fri Dec 05 22:23:28 2014 (548276B0)
fffff800`fec00000 fffff800`fec12000   circlass circlass.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff800`fc39f000 fffff800`fc3f5000   CLASSPNP CLASSPNP.SYS Wed Oct 08 01:22:07 2014 (5434C9FF)
fffff800`fbd44000 fffff800`fbda6000   CLFS     CLFS.SYS     Tue Mar 03 19:51:05 2015 (54F656F9)
fffff800`fc0d0000 fffff800`fc15b000   cng      cng.sys      Sun Mar 29 18:22:05 2015 (55187B0D)
fffff800`fdf5c000 fffff800`fdf6b000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff800`ff9d7000 fffff800`ff9e7000   condrv   condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`fd3eb000 fffff800`fd400000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`fde1b000 fffff800`fdea9000   csc      csc.sys      Tue Oct 28 22:46:49 2014 (54505519)
fffff800`fcdcd000 fffff800`fcdeb280   ctxusbm  ctxusbm.sys  Wed Feb 25 04:37:43 2015 (54ED97E7)
fffff800`fdef8000 fffff800`fdf1e000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff800`fd2bc000 fffff800`fd2d8000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff800`fedbb000 fffff800`fedd7000   drmk     drmk.sys     Tue Oct 28 22:47:38 2014 (5450554A)
fffff800`ff239000 fffff800`ff245000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`ff245000 fffff800`ff25b000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff800`fd66f000 fffff800`fd9ec000   dump_iaStorA dump_iaStorA.sys Fri Dec 05 07:49:22 2014 (5481A9D2)
fffff800`ff25b000 fffff800`ff286000   dump_PGPwdeDumpFilter dump_PGPwdeDumpFilter.sys Tue Aug 05 01:34:17 2014 (53E06CD9)
fffff800`fda69000 fffff800`fdbe9000   dxgkrnl  dxgkrnl.sys  Tue Oct 28 22:46:45 2014 (54505515)
fffff800`fda00000 fffff800`fda63000   dxgmms1  dxgmms1.sys  Tue Oct 28 22:46:30 2014 (54505506)
fffff800`fc200000 fffff800`fc2cf000   eamonm   eamonm.sys   Tue Jan 20 05:39:35 2015 (54BE3067)
fffff800`fca00000 fffff800`fca3f000   edevmon  edevmon.sys  Tue Jan 20 05:39:37 2015 (54BE3069)
fffff800`fc9bd000 fffff800`fc9ea000   ehdrv    ehdrv.sys    Tue Jan 20 05:39:52 2015 (54BE3078)
ffffe000`38b46000 ffffe000`38b7a000   em006_64 em006_64.dat Wed May 20 07:28:33 2015 (555C6FE1)
ffffe000`38b11000 ffffe000`38b18000   em015_64 em015_64.dat Fri Mar 01 08:27:56 2013 (5130ACDC)
ffffe000`38c00000 ffffe000`38c62000   em018_64 em018_64.dat Tue May 26 05:31:11 2015 (55643D5F)
fffff800`ff929000 fffff800`ff953000   epfwwfpr epfwwfpr.sys Wed Jan 28 08:02:44 2015 (54C8DDF4)
fffff800`ff200000 fffff800`ff239000   fastfat  fastfat.SYS  Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`fc93c000 fffff800`fc952000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff800`fc8e0000 fffff800`fc93c000   fltmgr   fltmgr.sys   Mon Aug 25 22:25:16 2014 (53FBF00C)
fffff800`fd1da000 fffff800`fd1f8000   fltsrv   fltsrv.sys   Mon May 13 05:40:09 2013 (5190B4F9)
fffff800`fcc7a000 fffff800`fcc85000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff800`fd145000 fffff800`fd1da000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff800`fd081000 fffff800`fd0ed000   fwpkclnt fwpkclnt.sys Sun Nov 09 21:57:40 2014 (546029A4)
fffff800`fefc5000 fffff800`fefcbc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff802`9821c000 fffff802`9828c000   hal      hal.dll      Sun Jun 01 18:49:12 2014 (538BADE8)
fffff800`fdf4e000 fffff800`fdf5c000   Hamdrv   Hamdrv.sys   Mon Mar 30 09:28:42 2015 (55194F8A)
fffff800`fee0a000 fffff800`fefba900   hcw89    hcw89.sys    Thu Nov 06 14:07:09 2014 (545BC6DD)
fffff800`feb4d000 fffff800`feb66000   HDAudBus HDAudBus.sys Thu Jul 24 07:45:39 2014 (53D0F1E3)
fffff800`ff71d000 fffff800`ff73c000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff800`ff7b9000 fffff800`ff7ca000   hidir    hidir.sys    Thu Aug 22 07:39:16 2013 (5215F864)
fffff800`ff73c000 fffff800`ff743f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`ff70f000 fffff800`ff71d000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff800`ff80f000 fffff800`ff909000   HTTP     HTTP.sys     Mon Feb 23 19:40:28 2015 (54EBC87C)
fffff800`fc4eb000 fffff800`fc868000   iaStorA  iaStorA.sys  Fri Dec 05 07:49:22 2014 (5481A9D2)
fffff800`fd2a1000 fffff800`fd2b0000   intelpep intelpep.sys Wed Oct 15 02:29:44 2014 (543E1458)
fffff800`fefd6000 fffff800`feff4000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`ff78d000 fffff800`ff79f000   kbdclass kbdclass.sys Tue Nov 04 01:54:54 2014 (5458783E)
fffff800`ff77f000 fffff800`ff78d000   kbdhid   kbdhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff802`973a2000 fffff802`973ab000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff800`fdf6b000 fffff800`fdf76000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff800`fed61000 fffff800`fedaf000   ks       ks.sys       Fri Jul 04 08:58:59 2014 (53B6A513)
fffff800`fcc4e000 fffff800`fcc6a000   ksecdd   ksecdd.sys   Tue Oct 28 22:47:36 2014 (54505548)
fffff800`fcd9c000 fffff800`fcdcd000   ksecpkg  ksecpkg.sys  Sun Jan 11 22:01:17 2015 (54B338FD)
fffff800`fefbf000 fffff800`fefc4300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`ff11f000 fffff800`ff133000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff800`ff7ca000 fffff800`ff7ee000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff800`fbcb9000 fffff800`fbd36000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Fri Jul 04 08:59:36 2014 (53B6A538)
fffff800`ff79f000 fffff800`ff7ad000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff800`ff76f000 fffff800`ff77f000   mouclass mouclass.sys Tue Nov 04 01:54:47 2014 (54587837)
fffff800`ff762000 fffff800`ff76f000   mouhid   mouhid.sys   Tue Nov 04 01:54:47 2014 (54587837)
fffff800`fc335000 fffff800`fc350000   mountmgr mountmgr.sys Mon Oct 06 21:18:16 2014 (54333F58)
fffff800`ff953000 fffff800`ff96a000   mpsdrv   mpsdrv.sys   Tue Oct 28 22:45:31 2014 (545054CB)
fffff800`ff96a000 fffff800`ff9d7000   mrxsmb   mrxsmb.sys   Wed Oct 08 03:32:08 2014 (5434E878)
fffff800`ff000000 fffff800`ff04b000   mrxsmb10 mrxsmb10.sys Thu Mar 06 04:19:36 2014 (53183DA8)
fffff800`ff14b000 fffff800`ff183000   mrxsmb20 mrxsmb20.sys Sat Sep 27 00:59:28 2014 (54264430)
fffff800`fc9ea000 fffff800`fc9f6000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fc15b000 fffff800`fc165000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`fffe6000 fffff800`ffffc000   mslldp   mslldp.sys   Tue Oct 28 22:45:39 2014 (545054D3)
fffff800`fff5b000 fffff800`fff5ca80   MSPQM    MSPQM.sys    Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`fbed9000 fffff800`fbf36000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff800`fdeec000 fffff800`fdef8000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff800`fd28a000 fffff800`fd2a1000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff800`fcc85000 fffff800`fcd9c000   ndis     ndis.sys     Mon Feb 02 19:03:15 2015 (54D01043)
fffff800`fedec000 fffff800`fedf7000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff800`ff1d2000 fffff800`ff1ef000   Ndu      Ndu.sys      Tue Oct 28 22:45:16 2014 (545054BC)
fffff800`fc0ac000 fffff800`fc0c9000   NEOFLTR_807_32723 NEOFLTR_807_32723.SYS Sat Oct 18 05:38:12 2014 (54423504)
fffff800`fdd17000 fffff800`fdd28000   netbios  netbios.sys  Tue Oct 28 22:47:23 2014 (5450553B)
fffff800`fdc0f000 fffff800`fdc5b000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff800`fc469000 fffff800`fc4e1000   NETIO    NETIO.SYS    Sun Nov 09 21:58:13 2014 (546029C5)
fffff800`fca3f000 fffff800`fca53000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff800`fdee0000 fffff800`fdeec000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff800`fded2000 fffff800`fdee0000   nsiproxy nsiproxy.sys Tue Oct 28 22:46:03 2014 (545054EB)
fffff802`9828c000 fffff802`98a20000   nt       ntkrnlmp.exe Sun Mar 22 18:26:46 2015 (550F41A6)
fffff800`fca54000 fffff800`fcc4e000   Ntfs     Ntfs.sys     Fri Oct 10 20:35:55 2014 (54387B6B)
fffff800`fd9f3000 fffff800`fd9fc000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fe03b000 fffff800`fe06f000   nvhda64v nvhda64v.sys Thu Oct 09 13:02:27 2014 (5436BFA3)
fffff800`fe092000 fffff800`feb4d000   nvlddmkm nvlddmkm.sys Mon May 18 06:24:50 2015 (5559BDF2)
fffff800`fdced000 fffff800`fdd17000   pacer    pacer.sys    Tue Oct 28 22:45:30 2014 (545054CA)
fffff800`fc1d6000 fffff800`fc1ee000   partmgr  partmgr.sys  Wed Oct 08 03:34:42 2014 (5434E912)
fffff800`fc165000 fffff800`fc1ad000   pci      pci.sys      Thu Jul 24 07:45:24 2014 (53D0F1D4)
fffff800`fcc6a000 fffff800`fcc7a000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff800`fc1ba000 fffff800`fc1d6000   pdc      pdc.sys      Wed Oct 15 00:34:24 2014 (543DF950)
fffff800`ffcf6000 fffff800`ffd9f000   peauth   peauth.sys   Sat Feb 22 07:09:37 2014 (53089381)
fffff800`ff183000 fffff800`ff1d2000   PGPdisk  PGPdisk.SYS  Tue Aug 05 01:34:24 2014 (53E06CE0)
fffff800`fc952000 fffff800`fc989000   PGPfsfd  PGPfsfd.sys  Tue Aug 05 01:34:20 2014 (53E06CDC)
fffff800`fdec2000 fffff800`fded2000   PGPsdk   PGPsdk.sys   Tue Aug 05 01:34:13 2014 (53E06CD5)
fffff800`fc400000 fffff800`fc469000   PGPwded  PGPwded.sys  Tue Aug 05 01:34:10 2014 (53E06CD2)
fffff800`fc9b4000 fffff800`fc9bd000   Pgpwdefs Pgpwdefs.sys Tue Aug 05 01:33:43 2014 (53E06CB7)
fffff800`fdd98000 fffff800`fdddf000   portcls  portcls.sys  Tue Oct 28 22:46:35 2014 (5450550B)
fffff800`fbdc8000 fffff800`fbddd000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff800`fdd28000 fffff800`fdd98000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff800`fec12000 fffff800`fec1d000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`fd244000 fffff800`fd28a000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff800`ff133000 fffff800`ff14b000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`fec87000 fffff800`fed61000   Rt630x64 Rt630x64.sys Thu Jan 15 01:08:17 2015 (54B75951)
fffff800`ff292000 fffff800`ff70f000   RTKVHD64 RTKVHD64.sys Tue Jun 02 06:47:59 2015 (556D89DF)
fffff800`ffd9f000 fffff800`ffdaa000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff800`fd200000 fffff800`fd244000   snapman  snapman.sys  Wed Aug 14 08:17:26 2013 (520B7556)
fffff800`fc000000 fffff800`fc069000   spaceport spaceport.sys Tue Oct 28 22:47:03 2014 (54505527)
fffff800`ffecd000 fffff800`fff5b000   srv      srv.sys      Thu Jul 24 07:43:27 2014 (53D0F15F)
fffff800`ffc00000 fffff800`ffcad000   srv2     srv2.sys     Wed Oct 08 03:33:30 2014 (5434E8CA)
fffff800`ffdaa000 fffff800`ffded000   srvnet   srvnet.sys   Fri Jun 27 02:22:21 2014 (53AD0D9D)
fffff800`fc868000 fffff800`fc8c6000   storport storport.sys Wed Sep 24 22:47:07 2014 (5423822B)
fffff800`fee00000 fffff800`fee01600   swenum   swenum.sys   Tue Oct 28 22:47:41 2014 (5450554D)
fffff800`fce15000 fffff800`fd081000   tcpip    tcpip.sys    Sun Nov 09 21:59:03 2014 (546029F7)
fffff800`ffded000 fffff800`ffdff000   tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff800`fc09e000 fffff800`fc0ac000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff800`fc07e000 fffff800`fc09e000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`fe000000 fffff800`fe023000   TeeDriverx64 TeeDriverx64.sys Tue Sep 23 16:01:14 2014 (5421D18A)
fffff800`fd2d8000 fffff800`fd3eb000   tib      tib.sys      Wed Mar 20 05:00:38 2013 (51497AB6)
fffff800`fd112000 fffff800`fd145000   tib_mounter tib_mounter.sys Mon Sep 30 09:04:20 2013 (524976D4)
fffff800`fbda6000 fffff800`fbdc8000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff960`00656000 fffff960`0065f000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff800`fff5d000 fffff800`fff8a000   tunnel   tunnel.sys   Thu Aug 22 07:35:45 2013 (5215F791)
fffff800`febbb000 fffff800`febed000   ucx01000 ucx01000.sys Tue Oct 07 01:00:55 2014 (54337387)
fffff800`feff4000 fffff800`fefff000   UEFI     UEFI.sys     Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`fdf76000 fffff800`fdf87000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff800`ffe69000 fffff800`ffe73000   umpass   umpass.sys   Thu Aug 22 07:38:58 2013 (5215F852)
fffff800`ff0f8000 fffff800`ff11f000   usbccgp  usbccgp.sys  Thu Jul 24 07:44:51 2014 (53D0F1B3)
fffff800`fedaf000 fffff800`fedbb000   USBD     USBD.SYS     Sat May 31 02:31:17 2014 (53897735)
fffff800`fe023000 fffff800`fe03b000   usbehci  usbehci.sys  Sat May 31 02:29:54 2014 (538976E2)
fffff800`fec1d000 fffff800`fec87000   usbhub   usbhub.sys   Thu Jul 24 07:45:29 2014 (53D0F1D9)
fffff800`ff05a000 fffff800`ff0d2000   UsbHub3  UsbHub3.sys  Mon Mar 16 23:34:24 2015 (5507A0C0)
fffff800`fdf87000 fffff800`fdff6000   USBPORT  USBPORT.SYS  Sat May 31 02:30:25 2014 (53897701)
fffff800`ff755000 fffff800`ff762000   usbprint usbprint.sys Thu Aug 22 07:36:32 2013 (5215F7C0)
fffff800`ff744000 fffff800`ff755000   usbscan  usbscan.sys  Tue Oct 28 22:47:57 2014 (5450555D)
fffff800`ff0d2000 fffff800`ff0f8000   USBSTOR  USBSTOR.SYS  Sat Aug 30 18:49:23 2014 (540254F3)
fffff800`feb66000 fffff800`febbb000   USBXHCI  USBXHCI.SYS  Thu Apr 09 22:08:27 2015 (5527309B)
fffff800`fc1ad000 fffff800`fc1ba000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff800`fc069000 fffff800`fc07e000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff800`fc2d6000 fffff800`fc335000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`fc350000 fffff800`fc39f000   volsnap  volsnap.sys  Wed Jun 18 18:41:28 2014 (53A21598)
fffff800`fdea9000 fffff800`fdec2000   wanarp   wanarp.sys   Mon Jan 05 21:59:31 2015 (54AB4F93)
fffff800`fdbe9000 fffff800`fdbfb000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff800`fbe00000 fffff800`fbecf000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff800`fbf36000 fffff800`fbf47000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`fbd36000 fffff800`fbd44000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`fd0ed000 fffff800`fd112000   wfplwfs  wfplwfs.sys  Sun Nov 09 21:57:28 2014 (54602998)
fffff960`00127000 fffff960`0053e000   win32k   win32k.sys   unavailable (00000000)
fffff800`fefcc000 fffff800`fefd6000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff800`fbff2000 fffff800`fbffc000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`fc989000 fffff800`fc9b4000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff800`ffe5e000 fffff800`ffe69000   WpdUpFltr WpdUpFltr.sys Thu Aug 22 07:38:45 2013 (5215F845)
fffff800`fbf5f000 fffff800`fbf6a000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`ffe00000 fffff800`ffe21000   WudfPf   WudfPf.sys   Tue Oct 28 22:46:27 2014 (54505503)
fffff800`ffe21000 fffff800`ffe5e000   WUDFRd   WUDFRd.sys   Tue Oct 28 22:46:13 2014 (545054F5)

Unloaded modules:
fffff800`fd2b0000 fffff800`fd2bc000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd676000 fffff800`fd9f3000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd600000 fffff800`fd616000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd616000 fffff800`fd641000   dump_PGPwdeD
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`ff79f000 fffff800`ff7b9000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fc8c6000 fffff800`fc8e0000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fedaf000 fffff800`fedec000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fdf1e000 fffff800`fdf2f000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff800`fd2b0000 fffff800`fd2bc000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Bugcheck code 0000009F
Arguments 00000000`00000004 00000000`0000012c ffffe000`34ed1240 fffff802`9a1b8980

Thanks for your help.

Thanks for the help. :thumbsup2:

ASUS Z87 A ATX LGA1150 Z87DDR3 2PCI-E16 2PCI-E1 HDMI CrossFireX/SLI SATA3 USB3.0
Intel® 4th Generation Core™ 4770K Unlocked Quad Core Hyperthreading Processor LGA1155 3.5GHZ Haswell 8MB
Windows® 8.1 with Media Center
ASUS GeForce GTX 780 OC DirectCU II 941MHZ 3GB 6.0GHZ GDDR5 2xDVI HDMI DisplayPort PCI-E
G.SKILL Ripjaws X F3-12800CL9D-8GBXL 16GB 4X4GB DDR3-1600 CL9-9-9-24 Memory
Samsung 840 Pro 256 GB Solid-State Hard Drive
Samsung 840 Evo Series 250GB Solid-State Hard Drive
Western Digital Caviar Black 2x 1TB 6GB/S 7200RPM 64MB
Liteon 24X DVD Writer SATA Black Retail
Coolermaster Haf X EATX Tower Case Black INT Front USB3.0
Corsair Professional Series Gold AX850 CMPSU-850AX 850W ATX Fully Modular 80PLUS Gold Power Supply
Hauppauge WinTV HVR-2250 Media Center Kit Dual TUNER
Thermaltake CPU Cooler CLP0556 Intel® Core i7 (Socket LGA1155/1156/1150)

Zardoc · Jun 9, 2015

WOW!!

No help?

Patrick · Jun 11, 2015

You posted this less than approximately 52 hours ago. We're unfortunately not robots.

Debugging this with a small dump = not possible, therefore I need a kernel-dump. Kernel-dumps are in C:\Windows and named MEMORY.DMP and must be uploaded 3rd party, paste link here afterwards.

Zardoc · Jun 11, 2015

Patrick said:
You posted this less than approximately 52 hours ago. We're unfortunately not robots.

Debugging this with a small dump = not possible, therefore I need a kernel-dump. Kernel-dumps are in C:\Windows and named MEMORY.DMP and must be uploaded 3rd party, paste link here afterwards.

I'm sorry Patrick. Please forgive my impatience:huh:

I can't seem to produce a kernel dump. Even if I force one, no files are created. I'm at a loss.

Got any ideas?

Thanks. :roll eyes (sarcasti

Patrick · Jun 11, 2015

It's okay, I wish after all I was a robot.

Regarding dumps - Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the system log'. Is kernel-dump also the set type?

Also, check WERS is enabled:

Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.

Zardoc · Jun 11, 2015

Hi Patrick,

Here is a kernel dump.

Patrick · Jun 11, 2015

That's not a kernel-dump.

Again, kernel-dumps are called MEMORY.DMP and are in the Windows folder, not the Minidump folder.

Zardoc · Jun 11, 2015

Well, That's what I also thought. I created a full memory dump. Problem is when I search for file it's nowhere to be found :noidea:

Patrick · Jun 12, 2015

Don't search, look for it. If you go to the literal Windows directory manually, is it there?

If not, follow the steps I outlined above. If they are already all set, then tell me.

jcgriff2 · Jun 12, 2015

You can also run this DIR command from an elevated Admin CMD prompt -

Code:

dir %windir%\memory.dmp >0 & start notepad 0

Press WIN+X keys; select "Command Prompt (Admin)" -- then paste the above command; press ENTER if necessary.

A Notepad will open; paste the results into your next post.

Regards. . .

John

Zardoc · Jun 12, 2015

Hi Patrick and John,

Patrick, all settings are as requested.

I must say, I'm at a loss. I can never use your tools because first, Script stalls on waiting for system info and as far as perfmon /report goes, I keep getting access denied.

Then I try to initiate a full memory manual crash. Report is created, but I can't find it on the machine. dir /S *.dmp NO FILES :banghead:

Got any ideas on how to fix all these issues?

Thanks guys. :thumbsup2:

Patrick · Jun 12, 2015

I must say, I'm at a loss. I can never use your tools because first, Script stalls on waiting for system info and as far as perfmon /report goes, I keep getting access denied.

This is being fixed currently.

Then I try to initiate a full memory manual crash.

What if you just let it crash by itself, like it was originally?

Zardoc · Jun 12, 2015

Patrick said:
I must say, I'm at a loss. I can never use your tools because first, Script stalls on waiting for system info and as far as perfmon /report goes, I keep getting access denied.

Click to expand...

This is being fixed currently.

Then I try to initiate a full memory manual crash.

Click to expand...

What if you just let it crash by itself, like it was originally?

Hi Patrick,

The problem is that I get sporadic crashes. I work in the health network. I can't always take time to start troubleshooting the system when a crash happens during working hours. So , I'm trying to force a crash in order to get the files that you want except I can initiate a crash but I don't get a report. I've never had any trouble creating a crash report as much as I have had with Windows 8.1 :shame2:

Patrick · Jun 12, 2015

How are you trying to force the crash? Are you literally trying to force the crash, i.e using something like NotMyFault, or are you simply just doing what you think may cause the system to crash based on prior crash scenarios?

If you're doing the former, that's likely why - as the dump isn't writing to disk. If you let it crash naturally, such as waiting for the crash to occur, the dump should write to disk so long as everything's in place properly.

Zardoc · Jun 12, 2015

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters]
"WorkNicely"=dword:00000000
"CrashOnCtrlScroll"=dword:00000001

CTRL LOCK scroll twice iniate crash.

Patrick · Jun 12, 2015

Okay... So that's why you're not getting any crash dumps, more specifically the ones we really even care about. By doing that, you're forcing the 0xDEADDEAD bug check.

Since you're forcing it, it's not really doing anything for us. All we'd be able to see is what was happening exactly as you crashed the system, that's it. Just let the system crash normally as it was before.

Zardoc · Jun 12, 2015

OK Patrick.

I set to full memory dump and hope that it reacts.

Thanks.

Patrick · Jun 12, 2015

We don't need a full dump for this crash, you're doing a lot of unnecessary things. Just follow what I am advising you to do, don't take any extra steps yourself.

Change it back from full dump to kernel-dump, and then wait for a crash to happen. Do not force one yourself.

jcgriff2 · Jun 16, 2015

See if Driver Verifier will help BSOD your system -

https://www.sysnative.com/forums/bs...er-bsod-related-windows-10-8-1-8-7-vista.html

Zardoc · Jun 17, 2015

Hi John,

Here is the dump file with verifier. (link)

PGPwded.sys seems to be an active participant in crashes. Can't dump PGP guess i'm stuck with it :huh:

Thanks for your input.

DRIVER_POWER_STATE_FAILURE nt!_KWAIT_BLOCK - Windows 7 x64

Contributor

Attachments

Contributor

Sysnative Staff

Contributor

Sysnative Staff

Contributor

Attachments

Sysnative Staff

Contributor

Sysnative Staff

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Contributor

Sysnative Staff

Contributor

Sysnative Staff

Contributor

Sysnative Staff

Contributor

Sysnative Staff

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Contributor

Attachments

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)