jcgriff2
Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)
On more than several occasions, I have caught OP's trying to obtain our help with patched version of Windows.
A Windbg Command !For_Each_Module with parms will provide you with the current version number and prior version of Windows modules/drivers.
It is easy to determine that if you see a Windows XP module number mixed in with other, future Windows version numbers, then something is wrong.
Here is the output from a Windows 7 dump -
Note - a file extension of *.sys is assumed for all except hal.dll
As you can see, all file version numbers are either 6.1.7600 (W7 SP0) or 6.1.7601 (W7 SP1)
Regards. . .
jcgriff2
A Windbg Command !For_Each_Module with parms will provide you with the current version number and prior version of Windows modules/drivers.
It is easy to determine that if you see a Windows XP module number mixed in with other, future Windows version numbers, then something is wrong.
Rich (BB code):
!for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersionHere is the output from a Windows 7 dump -
Rich (BB code):
4: kd> !for_each_module .echo @#ModuleName fver = @#FileVersion pver = @#ProductVersion
hal fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
nt fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
kdcom fver = 6.1.7601.17556 (win7sp1_gdr.110204-2120) pver = 6.1.7601.17556
Wdf01000 fver = 1.11.9200.16648 (win8_gdr.130621-1503) pver = 1.11.9200.16648
WDFLDR fver = 1.11.9200.16384 pver =
mcupdate_AuthenticAMD fver = pver =
PSHED fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
CLFS fver = 6.1.7601.24112 pver =
CI fver = 6.1.7601.24158 (win7sp1_ldr.180510-1403) pver = 6.1.7601.24158
volmgrx fver = 6.1.7601.23864 (win7sp1_ldr.170707-0600) pver = 6.1.7601.23864
mountmgr fver = 6.1.7601.24382 (win7sp1_ldr.190210-0600) pver = 6.1.7601.24382
atapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
ataport fver = 6.1.7601.18231 pver =
msahci fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
PCIIDEX fver = 6.1.7600.16385 pver =
amd_sata fver = pver =
ACPI fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
WMILIB fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msisadrv fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
pci fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
vdrvroot fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
partmgr fver = 6.1.7601.17796 pver =
volmgr fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
nvhda64v fver = pver =
cng fver = 6.1.7601.24144 (win7sp1_ldr_escrow.180510-1700) pver = 6.1.7601.24144
volsnap fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
storport fver = 6.1.7601.18386 pver =
amd_xata fver = pver =
amdxata fver = pver =
fltmgr fver = 6.1.7601.24000 (win7sp1_ldr.171231-1547) pver = 6.1.7601.24000
fileinfo fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
msrpc fver = 6.1.7601.24308 (win7sp1_ldr.181111-0600) pver = 6.1.7601.24308
ksecdd fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
pcw fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Fs_Rec fver = 6.1.7601.17787 (win7sp1_gdr.120229-1502) pver = 6.1.7601.17787
Ntfs fver = 6.1.7601.24382 (win7sp1_ldr.190210-0600) pver = 6.1.7601.24382
fwpkclnt fver = 6.1.7601.24233 (win7sp1_ldr.180812-0600) pver = 6.1.7601.24233
ndis fver = 6.1.7601.24203 (win7sp1_ldr.180706-0600) pver = 6.1.7601.24203
NETIO fver = 6.1.7601.24233 (win7sp1_ldr.180812-0600) pver = 6.1.7601.24233
ksecpkg fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
vmstorfl fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
spldr fver = pver =
tcpip fver = 6.1.7601.24233 (win7sp1_ldr.180812-0600) pver = 6.1.7601.24233
rdyboost fver = 6.1.7601.24000 pver =
mup fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
hwpolicy fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
fvevol fver = 6.1.7601.18062 pver =
dlkmdldr fver = pver =
disk fver = 6.1.7601.19133 pver =
CLASSPNP fver = 6.1.7601.17514 pver =
cmderd fver = pver =
cdrom fver = 6.1.7601.17514 pver =
afd fver = 6.1.7601.23761 (win7sp1_ldr.170404-0600) pver = 6.1.7601.23761
ks fver = 6.1.7601.24240 pver =
FLxHCIh fver = pver =
netbt fver = 6.1.7601.23889 (win7sp1_ldr.170810-1615) pver = 6.1.7601.23889
wfplwf fver = 6.1.7600.16385 pver =
pacer fver = 6.1.7601.24000 (win7sp1_ldr.171231-1547) pver = 6.1.7601.24000
vwififlt fver = 6.1.7600.16385 pver =
netbios fver = 6.1.7601.24000 (win7sp1_ldr.171231-1547) pver = 6.1.7601.24000
serial fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
wanarp fver = 6.1.7601.24330 (win7sp1_ldr.181207-1700) pver = 6.1.7601.24330
termdd fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
rdbss fver = 6.1.7601.23930 (win7sp1_ldr.171011-1526) pver = 6.1.7601.23930
nsiproxy fver = 6.1.7601.23889 (win7sp1_ldr.170810-1615) pver = 6.1.7601.23889
mssmbios fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
isedrv fver = pver =
ElbyCDIO fver = pver =
discache fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Msfs fver = 6.1.7601.24377 (win7sp1_ldr.190203-0600) pver = 6.1.7601.24377
Npfs fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
amdpsp fver = pver =
tdx fver = 6.1.7601.23880 (win7sp1_ldr.170729-0600) pver = 6.1.7601.23880
TDI fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
amdhub31 fver = pver =
cmdguard fver = pver =
Null fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
Beep fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
vga fver = 6.1.7600.16385 pver =
VIDEOPRT fver = 6.1.7601.24387 pver =
watchdog fver = 6.1.7600.16385 pver =
RDPCDD fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
rdpencdd fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
rdprefmp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
raspppoe fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
raspptp fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
Rt64win7 fver = pver =
FLxHCIc fver = pver =
USBD fver = 6.1.7601.24138 pver =
fastfat fver = 6.1.7601.24382 (win7sp1_ldr.190210-0600) pver = 6.1.7601.24382
ndiswan fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
chdrvr01 fver = pver =
csc fver = 6.1.7601.24197 (win7sp1_ldr.180629-0600) pver = 6.1.7601.24197
dfsc fver = 6.1.7601.24136 (win7sp1_ldr.180425-0600) pver = 6.1.7601.24136
blbdrive fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
amdxhc31 fver = pver =
rassstp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
kbdclass fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
mouclass fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
VClone fver = pver =
umbus fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
NDProxy fver = 6.1.7601.24330 (win7sp1_ldr.181207-1700) pver = 6.1.7601.24330
dlkmd fver = pver =
amdppm fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
CompositeBus fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
AgileVpn fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
nvlddmkm fver = pver =
rasl2tp fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
ndistapi fver = 6.1.7601.24330 (win7sp1_ldr.181207-1700) pver = 6.1.7601.24330
chdrvr03 fver = pver =
amdxhci fver = pver =
wmiacpi fver = 6.1.7601.24056 (win7sp1_ldr.180210-0600) pver = 6.1.7601.24056
rdpbus fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dxgkrnl fver = 6.1.7601.24260 (win7sp1_ldr.180908-0600) pver = 6.1.7601.24260
dxgmms1 fver = 6.1.7601.24260 (win7sp1_ldr.180908-0600) pver = 6.1.7601.24260
HDAudBus fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
AMDPCIDev fver = pver =
parport fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
serenum fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
swenum fver = 6.1.7601.24056 pver =
luafv fver = 6.1.7601.23930 (win7sp1_ldr.171011-1526) pver = 6.1.7601.23930
lltdio fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
portcls fver = 6.1.7601.19091 (win7sp1_gdr.151208-0600) pver = 6.1.7601.19091
drmk fver = pver =
ksthunk fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
amdhub3 fver = pver =
chdrvr02 fver = pver =
HIDCLASS fver = 6.1.7601.24386 (win7sp1_ldr_escrow.190304-1700) pver = 6.1.7601.24386
HIDPARSE fver = 6.1.7601.24386 (win7sp1_ldr_escrow.190304-1700) pver = 6.1.7601.24386
kbdhid fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
mouhid fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
DisplayLinkUsbIo_x64_9_0_1890_0 fver = pver =
usbccgp fver = 6.1.7601.24138 (win7sp1_ldr.180502-0600) pver = 6.1.7601.24138
Dxapi fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
cdfs fver = 6.1.7601.24382 (win7sp1_ldr.190210-0600) pver = 6.1.7601.24382
monitor fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
crashdmp fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
dump_dumpata fver = 6.1.7600.16385 pver =
dump_msahci fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
dump_dumpfve fver = 6.1.7600.16385 pver =
RTKVHD64 fver = pver =
hidusb fver = 6.1.7601.24386 (win7sp1_ldr_escrow.190304-1700) pver = 6.1.7601.24386
athurx fver = pver =
vwifibus fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
nwifi fver = 6.1.7601.23915 (win7sp1_ldr.170913-0600) pver = 6.1.7601.23915
ndisuio fver = 6.1.7601.17514 (win7sp1_rtm.101119-1850) pver = 6.1.7601.17514
rspndr fver = 6.1.7600.16385 (win7_rtm.090713-1255) pver = 6.1.7600.16385
HTTP fver = 6.1.7601.24000 (win7sp1_ldr.171231-1547) pver = 6.1.7601.24000
bowser fver = 6.1.7601.24219 (win7sp1_ldr.180718-0600) pver = 6.1.7601.24219
mpsdrv fver = 6.1.7601.24231 (win7sp1_ldr.180810-0600) pver = 6.1.7601.24231
mrxsmb fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
mrxsmb10 fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
mrxsmb20 fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
peauth fver = pver =
srvnet fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
tcpipreg fver = 6.1.7601.23496 (win7sp1_ldr.160707-0600) pver = 6.1.7601.23496
srv2 fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
srv fver = 6.1.7601.24387 (win7sp1_ldr_escrow.190305-1700) pver = 6.1.7601.24387
win32k fver = pver =
TSDDD fver = pver =
cdd fver = pver =
ATMFD fver = pver =Note - a file extension of *.sys is assumed for all except hal.dll
As you can see, all file version numbers are either 6.1.7600 (W7 SP0) or 6.1.7601 (W7 SP1)
Regards. . .
jcgriff2
Last edited: