ieframe.dll, api-ms-win-downlevel-shlwapi-l2-1-0.dll and other errors.

duffmandula · Oct 31, 2013

Hello. I am currently running windows 7 Home Premium 64 bit and in the last 3-4 weeks have started having a few problems with my laptop. There is no major event that I think triggered the following problems (i.e. installing new drivers/programmes etc) but the following errors now occur:

1. When the computer turns on, before I log in I get the error saying "C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll is either not designed to run on windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support." This error box has a title that changes depending on which program has tried to run. It fires on DivxSetup.exe, div8999.tmp, Java Update.exe and a few others. Sometimes instead of the system32 folder it says the same error but from the sysWOW folder instead. Sometimes after clicking okay a few times it will run the program sometimes not. This also appears once I have logged in.

2. When I try to open Malware Bytes Anti Malware I get a "Component 'ieframe.dll' or one of its dependencies not correctly registered: a file is missing or invalid" error and the program will not start.

3. Internet explorer 10 does not open (although my usual browser Chrome does). I have tried to uninstall 10 but always get an error. I have also tried to install 11 and re-install 10 but this fails as well.

4. I did a malware scan a few weeks ago and one item was found. Unfortunately I cannot remember what this was, but it was cleaned up (by Spybot S&D) and not appeared in any results since.

5. MS Office stopped opening for a while but that now seems to have stopped and I can open all those programs now.

6. I did get a BSOD but this was only once and the computer seemed to recover no problems.

7. SFC /Scannow does work and detects some corrupt files but cannot repair all of them.

I would class myself as a fairly competent computer user but this has got me stumped:banghead:. If you could offer any help it would be greatly appreciated and if you need any extra information please let me know.

Thanks in advance,

Duff

jcgriff2 · Oct 31, 2013

Hi -

Please run - https://www.sysnative.com/forums/bs...structions-windows-8-7-and-windows-vista.html

Please attach the zip file(s) to your next post.

Regards. . .

jcgriff2

duffmandula · Nov 1, 2013

Thanks for the reply jcgriff2. Please find the attached zip file. Answers to the questions are:

· OS - Windows 7
· x64
· What was original installed OS on system? Windows 7
· OEM version (came pre-installed on system)
· Age of system (hardware) 1 - 1.5 years
· Age of OS installation - have you re-installed the OS? 1 - 1.5 years. No re-install.

· CPU - Intel Core i7-2630QM @ 2GHz
· Video Card - GeForce GTX 460M
· MotherBoard - Laptop, unsure.
· Power Supply - brand & wattage (if laptop, skip this one) Laptop

· System Manufacturer - Clevo from www.[B]pcs[/B]pecialist.co.uk/‎
· Exact model number (if laptop, check label on bottom) - Clevo P170HM, Vortex II 17

Any problems with what I have given you then let me know.

Thanks again!

niemiro · Nov 2, 2013

Hello :)

I would also like to check your SFC logfile. I suspect that most of your problems are caused by a couple of corrupt files. Theory is, if we replace those corrupt files, the problems might go away :)

Export CBS folder

Click the Start button

then click Computer.
Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
Find and double click on the Logs folder.
Right-click on the CBS folder, and select Copy.
Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
A new file, also called CBS (CBS.zip), but this time with a different icon, will be created. Please upload it here.

Thank you!

Richard

duffmandula · Nov 2, 2013

Hi Richard,

Please find attached the zipped CBS folder.

Thanks!

niemiro · Nov 2, 2013

Hello again :)

Situation extends deeper than I first thought it would.

System Update Readiness Tool

Please download and install the System Update Readiness Tool from here: What is the System Update Readiness Tool?
Save it somewhere convenient so we can use the same download again later if necessary.
Open it and allow it to run, and when complete (it may take up to an hour to do so), please carry on with the next step. You may use the computer whilst it is working.

Export CBS folder

Click the Start button

then click Computer.
Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
Find and double click on the Logs folder.
Right-click on the CBS folder, and select Copy.
Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
A new file, also called CBS (CBS.zip), but this time with a different icon, will be created. Please upload it here.

Thank you!

Richard

duffmandula · Nov 3, 2013

My internet connection is quite slow, so I am still downloading the tool. Once I have downloaded it and run it I will post back here (I anticipate this will be sometime tomorrow now) - I have not just disappeared off the face of the earth!
Duff

jcgriff2 · Nov 3, 2013

Hi. . .

You had 1 BSOD on 26 Oct 2013 -

Bugcheck = 0xa = driver attempted to access pageable memory at a time it should not have or hardware failure - such as bad RAM. It is unknown at this time whether software of hardware caused the sole BSOD.

Please remove Daemon Tools and any other virtual devices for now -

Code:

dtsoftbus01.sys Fri Jan 13 08:45:46 2012 (4F10358A)

http://www.sysnative.com/drivers/driver.php?id=dtsoftbus01.sys

Do you have a slow ISP? You have an Intel Centrino N-6230 wifi, which should have no problems with Internet speed. However, it is from 2011 and should be updated -

Code:

NETwNs64.sys Wed Aug 03 20:28:26 2011 (4E39E7AA)

http://www.sysnative.com/drivers/driver.php?id=NETwNs64.sys

Trusteer drivers are unloading from RAM rather often (more so than I usually see other drivers do so/ listed as such in a BSOD kernel dump). This app may may be contributing to your Internet slowness; not sure -

Code:

RapportCerberus64_56758.sys Thu Jul 04 07:31:02 2013 (51D55CF6)
RapportEI64.sys Tue Sep 10 16:15:55 2013 (522F7DFB)
rapportiaso64.sys Wed Jun 12 01:05:23 2013 (51B80193)
RapportKE64.sys Tue Sep 10 16:15:52 2013 (522F7DF8)
RapportPG64.sys Tue Sep 10 16:16:12 2013 (522F7E0C)

http://www.sysnative.com/drivers/driver.php?id=RapportCerberus64_56758.sys
http://www.sysnative.com/drivers/driver.php?id=RapportEI64.sys
http://www.sysnative.com/drivers/driver.php?id=rapportiaso64.sys
http://www.sysnative.com/drivers/driver.php?id=RapportKE64.sys
http://www.sysnative.com/drivers/driver.php?id=RapportPG64.sys

If you don't need it to run all of the time, prevent it from start-up by disabling it using AutoRuns from Microsoft TechNet -

http://technet.microsoft.com/en-us/sysinternals/bb963902

Please be sure to follow all instructions as given by niemiro.

Regards. . .

jcgriff2

.

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp1_Windows7
_Vista_jcgriff2.zip\Windows7_Vista_jcgriff2\102613-5919036-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*a:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`0384e000 PsLoadedModuleList = 0xfffff800`03a916d0
Debug session time: Sat Oct 26 10:30:15.196 2013 (UTC - 5:00)
System Uptime: 0 days 22:14:42.038
Loading Kernel Symbols
...............................................................
................................................................
...................................................
Loading User Symbols
Loading unloaded module list
..................................
ERROR: FindPlugIns 8007007b
ERROR: Some plugins may not be available [8007007b]
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {80, 2, 1, fffff800038ccf1f}

Probably caused by : ntkrnlmp.exe ( nt!KeAcquireInStackQueuedSpinLock+5f )

Followup: MachineOwner
---------

1: kd> !analyze -v
ERROR: FindPlugIns 8007007b
ERROR: Some plugins may not be available [8007007b]
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000080, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800038ccf1f, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80003afb100
GetUlongFromAddress: unable to read from fffff80003afb1c0
 0000000000000080 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeAcquireInStackQueuedSpinLock+5f
fffff800`038ccf1f 488717          xchg    rdx,qword ptr [rdi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  fffff880116c0ed0 -- (.trap 0xfffff880116c0ed0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff880116c10e0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800038ccf1f rsp=fffff880116c1060 rbp=fffffa800b8cd180
 r8=fffff880116c10e0  r9=0000000000000002 r10=0000000000000000
r11=0000058000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
nt!KeAcquireInStackQueuedSpinLock+0x5f:
fffff800`038ccf1f 488717          xchg    rdx,qword ptr [rdi] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800038c3169 to fffff800038c3bc0

STACK_TEXT:  
fffff880`116c0d88 fffff800`038c3169 : 00000000`0000000a 00000000`00000080 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`116c0d90 fffff800`038c1de0 : fffffa80`06fea010 fffff880`0124885c fffff8a0`1950f002 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`116c0ed0 fffff800`038ccf1f : 00000000`00000000 00000000`00000000 fffffa80`0b8cd180 fffff8a0`17b81600 : nt!KiPageFault+0x260
fffff880`116c1060 fffff800`03980c8e : fffffa80`0b8cd180 00000000`00000000 00000000`00000000 fffffa80`09aae708 : nt!KeAcquireInStackQueuedSpinLock+0x5f
fffff880`116c10b0 fffff800`0392d861 : 0c02c010`1003c010 00000000`00000000 0c02c010`1003c010 fffff800`039f730d : nt!MiReleaseConfirmedPageFileSpace+0x5e
fffff880`116c1130 fffff800`03b6458b : fffffa80`0b1b7a10 00000000`00000000 00000000`0008c081 fffffa80`0b1b7a10 : nt! ?? ::FNODOBFM::`string'+0x2ad5d
fffff880`116c1200 fffff800`0389115b : fffffa80`0b1b7a90 00000000`00000000 fffffa80`0b1b7a90 fffffa80`0b1b7a90 : nt!MiSegmentDelete+0x7b
fffff880`116c1240 fffff800`03891882 : 00000000`00000000 00000000`00000011 00000000`00000000 fffff880`01247c00 : nt!MmPurgeSection+0x71b
fffff880`116c1330 fffff880`012b37ef : fffffa80`06cd4e18 00000000`00000000 00000000`00000000 fffffa80`00000000 : nt!CcPurgeCacheSection+0x172
fffff880`116c13a0 fffff880`013b35d2 : fffffa80`0bf84810 fffffa80`0704e180 00000000`00000000 fffffa80`0704e101 : Ntfs!NtfsFlushVolume+0x5cf
fffff880`116c14d0 fffff880`01309ad8 : fffffa80`0a921b60 fffffa80`0704e180 fffffa80`0704e180 00000000`00005ef4 : Ntfs!NtfsPerformSurpriseRemoval+0x32
fffff880`116c1520 fffff880`0130a7ec : fffffa80`0bf84810 fffff880`116c16a8 fffff880`116c16b0 00000000`00000001 : Ntfs!NtfsCommonPnp+0x7eb
fffff880`116c1600 fffff880`01079bcf : fffffa80`0a921ba8 00000000`00000000 fffff880`116c1701 fffffa80`0bf84810 : Ntfs!NtfsFsdPnp+0x1f0
fffff880`116c16a0 fffff880`010786df : fffffa80`0b8cd180 00000000`c00000bb fffffa80`0b8cd100 fffffa80`0a9217c0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`116c1730 fffff800`03b30121 : fffffa80`0b8cd180 fffff880`116c1848 00000000`c00000bb fffffa80`0a9217c0 : fltmgr!FltpDispatch+0xcf
fffff880`116c1790 fffff800`03cb03a1 : fffffa80`0bd1ca20 fffffa80`0704e030 fffffa80`0bb868d0 fffffa80`0bd1ca20 : nt!IopSynchronousCall+0xe1
fffff880`116c1800 fffff800`03caad78 : fffff880`116c19c0 fffffa80`0bd1ca20 00000000`0000030a 00000000`00000308 : nt!IopRemoveDevice+0x101
fffff880`116c18c0 fffff800`03cafee7 : fffffa80`0bb868d0 00000000`00000000 00000000`00000003 00000000`000007ff : nt!PnpSurpriseRemoveLockedDeviceNode+0x128
fffff880`116c1900 fffff800`03cb0000 : 00000000`00000000 fffff8a0`16b2c000 fffff8a0`0202c220 fffff880`116c1a58 : nt!PnpDeleteLockedDeviceNode+0x37
fffff880`116c1930 fffff800`03d4097f : 00000000`00000002 00000000`00000000 fffffa80`0bb868d0 00000000`00000000 : nt!PnpDeleteLockedDeviceNodes+0xa0
fffff880`116c19a0 fffff800`03d4153c : fffff880`116c1b78 00000000`00000000 fffff8a0`0fd99e00 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0x6cf
fffff880`116c1ae0 fffff800`03c2a73e : 00000000`00000000 fffffa80`0a9ae680 fffff8a0`16b2c010 00000000`00000001 : nt!PnpProcessTargetDeviceEvent+0x4c
fffff880`116c1b10 fffff800`038cd261 : fffff800`03b2ef88 fffff8a0`16b2c010 fffff800`03a692d8 fffff880`012d04d0 : nt! ?? ::NNGAKEGL::`string'+0x54d9b
fffff880`116c1b70 fffff800`03b602ea : 00000000`00380038 fffffa80`0dc2db50 00000000`00000080 fffffa80`066ef840 : nt!ExpWorkerThread+0x111
fffff880`116c1c00 fffff800`038b48e6 : fffff800`03a3ee80 fffffa80`0dc2db50 fffff800`03a4ccc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`116c1c40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KeAcquireInStackQueuedSpinLock+5f
fffff800`038ccf1f 488717          xchg    rdx,qword ptr [rdi]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!KeAcquireInStackQueuedSpinLock+5f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  521ea035

FAILURE_BUCKET_ID:  X64_0xA_nt!KeAcquireInStackQueuedSpinLock+5f

BUCKET_ID:  X64_0xA_nt!KeAcquireInStackQueuedSpinLock+5f

Followup: MachineOwner
---------

1: kd> lmvm nt
start             end                 module name
fffff800`0384e000 fffff800`03e33000   nt         (pdb symbols)          a:\symbols\ntkrnlmp.pdb\F69D000687EC491E87FC0425D4D378AC2\ntkrnlmp.pdb
    Loaded symbol image file: ntkrnlmp.exe
    Mapped memory image file: a:\symbols\ntoskrnl.exe\521EA0355e5000\ntoskrnl.exe
    Image path: ntkrnlmp.exe
    Image name: ntkrnlmp.exe
    Timestamp:        Wed Aug 28 21:13:25 2013 (521EA035)
    CheckSum:         0054CBB3
    ImageSize:        005E5000
    File version:     6.1.7601.18247
    Product version:  6.1.7601.18247
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ntkrnlmp.exe
    OriginalFilename: ntkrnlmp.exe
    ProductVersion:   6.1.7601.18247
    FileVersion:      6.1.7601.18247 (win7sp1_gdr.130828-1532)
    FileDescription:  NT Kernel & System
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
1: kd> k
Child-SP          RetAddr           Call Site
fffff880`116c0d88 fffff800`038c3169 nt!KeBugCheckEx
fffff880`116c0d90 fffff800`038c1de0 nt!KiBugCheckDispatch+0x69
fffff880`116c0ed0 fffff800`038ccf1f nt!KiPageFault+0x260
fffff880`116c1060 fffff800`03980c8e nt!KeAcquireInStackQueuedSpinLock+0x5f
fffff880`116c10b0 fffff800`0392d861 nt!MiReleaseConfirmedPageFileSpace+0x5e
fffff880`116c1130 fffff800`03b6458b nt! ?? ::FNODOBFM::`string'+0x2ad5d
fffff880`116c1200 fffff800`0389115b nt!MiSegmentDelete+0x7b
fffff880`116c1240 fffff800`03891882 nt!MmPurgeSection+0x71b
fffff880`116c1330 fffff880`012b37ef nt!CcPurgeCacheSection+0x172
fffff880`116c13a0 fffff880`013b35d2 Ntfs!NtfsFlushVolume+0x5cf
fffff880`116c14d0 fffff880`01309ad8 Ntfs!NtfsPerformSurpriseRemoval+0x32
fffff880`116c1520 fffff880`0130a7ec Ntfs!NtfsCommonPnp+0x7eb
fffff880`116c1600 fffff880`01079bcf Ntfs!NtfsFsdPnp+0x1f0
fffff880`116c16a0 fffff880`010786df fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`116c1730 fffff800`03b30121 fltmgr!FltpDispatch+0xcf
fffff880`116c1790 fffff800`03cb03a1 nt!IopSynchronousCall+0xe1
fffff880`116c1800 fffff800`03caad78 nt!IopRemoveDevice+0x101
fffff880`116c18c0 fffff800`03cafee7 nt!PnpSurpriseRemoveLockedDeviceNode+0x128
fffff880`116c1900 fffff800`03cb0000 nt!PnpDeleteLockedDeviceNode+0x37
fffff880`116c1930 fffff800`03d4097f nt!PnpDeleteLockedDeviceNodes+0xa0
fffff880`116c19a0 fffff800`03d4153c nt!PnpProcessQueryRemoveAndEject+0x6cf
fffff880`116c1ae0 fffff800`03c2a73e nt!PnpProcessTargetDeviceEvent+0x4c
fffff880`116c1b10 fffff800`038cd261 nt! ?? ::NNGAKEGL::`string'+0x54d9b
fffff880`116c1b70 fffff800`03b602ea nt!ExpWorkerThread+0x111
fffff880`116c1c00 fffff800`038b48e6 nt!PspSystemThreadStartup+0x5a
fffff880`116c1c40 00000000`00000000 nt!KxStartSystemThread+0x16
1: kd> lmnt;lmntsm
start             end                 module name
fffff800`00ba8000 fffff800`00bb2000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff800`03805000 fffff800`0384e000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff800`0384e000 fffff800`03e33000   nt       ntkrnlmp.exe Wed Aug 28 21:13:25 2013 (521EA035)
fffff880`00c1d000 fffff880`00c6c000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`00c6c000 fffff880`00c80000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`00c80000 fffff880`00cde000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00cde000 fffff880`00d9e000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`00d9e000 fffff880`00dfa000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00e6a000 fffff880`00e9d000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00e9d000 fffff880`00eaa000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`00eaa000 fffff880`00ebf000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00ebf000 fffff880`00ec8000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00ec8000 fffff880`00ed4000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`00ee6000 fffff880`00fa8000   Wdf01000 Wdf01000.sys Fri Jun 21 23:13:05 2013 (51C51641)
fffff880`00fa8000 fffff880`00fb8000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`00fb8000 fffff880`00fcd000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00fcd000 fffff880`00fe7000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`00fe7000 fffff880`00ff0000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01000000 fffff880`01014000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff880`01027000 fffff880`01051000   ataport  ataport.SYS  Sun Aug 04 21:02:45 2013 (51FEF9B5)
fffff880`01051000 fffff880`0105c000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`0105c000 fffff880`0106c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0106c000 fffff880`01077000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`01077000 fffff880`010c3000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`010c3000 fffff880`010d7000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`010d7000 fffff880`010e3040   PxHlpa64 PxHlpa64.sys Tue Oct 20 14:08:42 2009 (4ADDFCAA)
fffff880`010e4000 fffff880`01142000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`01142000 fffff880`011b4000   cng      cng.sys      Fri Aug 24 11:47:16 2012 (5037A204)
fffff880`011b4000 fffff880`01200000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`0121b000 fffff880`01236000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`01239000 fffff880`013db000   Ntfs     Ntfs.sys     Fri Apr 12 07:54:36 2013 (5167F5FC)
fffff880`013db000 fffff880`013f6000   ksecdd   ksecdd.sys   Fri Jun 01 22:50:23 2012 (4FC97F6F)
fffff880`01400000 fffff880`01408000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`01408000 fffff880`01432000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`01439000 fffff880`0152b000   ndis     ndis.sys     Wed Aug 22 11:11:46 2012 (5034F6B2)
fffff880`0152b000 fffff880`0158b000   NETIO    NETIO.SYS    Wed Aug 22 11:11:28 2012 (5034F6A0)
fffff880`0158b000 fffff880`015b6000   ksecpkg  ksecpkg.sys  Fri Aug 24 11:48:29 2012 (5037A24D)
fffff880`015b6000 fffff880`015ff000   fwpkclnt fwpkclnt.sys Wed Jan 02 22:06:48 2013 (50E4F5C8)
fffff880`01600000 fffff880`017ff000   tcpip    tcpip.sys    Sat Sep 07 21:11:52 2013 (522BCED8)
fffff880`01800000 fffff880`01849000   dtsoftbus01 dtsoftbus01.sys Fri Jan 13 08:45:46 2012 (4F10358A)
fffff880`01858000 fffff880`01892000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`01892000 fffff880`018d8020   RapportKE64 RapportKE64.sys Tue Sep 10 16:15:52 2013 (522F7DF8)
fffff880`018d9000 fffff880`018eb000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`018eb000 fffff880`018f4000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`018f4000 fffff880`0192e000   fvevol   fvevol.sys   Wed Jan 23 22:11:24 2013 (5100A65C)
fffff880`0192e000 fffff880`01944000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01944000 fffff880`01974000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`01974000 fffff880`019a8000   aswVmm   aswVmm.sys   Fri Aug 30 03:36:49 2013 (52204B91)
fffff880`019a8000 fffff880`019bb000   aswRvrt  aswRvrt.sys  Fri Aug 30 03:36:44 2013 (52204B8C)
fffff880`02a00000 fffff880`02a18000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02a18000 fffff880`02a45000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`02a53000 fffff880`02aa6000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02aa6000 fffff880`02ab9000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`02ab9000 fffff880`02ad1000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02ad1000 fffff880`02b07000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`02b07000 fffff880`02bd0000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`02bd0000 fffff880`02bee000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
fffff880`06200000 fffff880`062a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`062a6000 fffff880`062b1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`062b1000 fffff880`062e2000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`062e2000 fffff880`062f4000   tcpipreg tcpipreg.sys Wed Oct 03 12:07:26 2012 (506C62BE)
fffff880`062fa000 fffff880`06348000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`06348000 fffff880`0636c000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`0636c000 fffff880`06384000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`06384000 fffff880`063ad000   idmwfp   idmwfp.sys   Mon Apr 23 09:14:15 2012 (4F9555A7)
fffff880`06a00000 fffff880`06a89000   afd      afd.sys      Fri Sep 13 21:10:16 2013 (5233B778)
fffff880`06a8c000 fffff880`06b8c000   aswSnx   aswSnx.SYS   Fri Aug 30 03:38:17 2013 (52204BE9)
fffff880`06b8c000 fffff880`06bd1000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`06bd1000 fffff880`06bf7000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`06c00000 fffff880`06c0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`06c15000 fffff880`06ca2d40   RapportCerberus64_56758 RapportCerberus64_56758.sys Thu Jul 04 07:31:02 2013 (51D55CF6)
fffff880`06ca3000 fffff880`06cfeac0   RapportPG64 RapportPG64.sys Tue Sep 10 16:16:12 2013 (522F7E0C)
fffff880`06cff000 fffff880`06d08000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`06d08000 fffff880`06d0f000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`06d0f000 fffff880`06d1d000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`06d1d000 fffff880`06d42000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`06d42000 fffff880`06d52000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`06d52000 fffff880`06d5b000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06d5b000 fffff880`06d64000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06d64000 fffff880`06d6d000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`06d6d000 fffff880`06d78000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`06d78000 fffff880`06d89000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`06d89000 fffff880`06dab000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`06dab000 fffff880`06db8000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`06db8000 fffff880`06dca000   aswTdi   aswTdi.SYS   Fri Aug 30 03:37:17 2013 (52204BAD)
fffff880`06dca000 fffff880`06dde000   aswrdr2  aswrdr2.sys  Fri Aug 30 03:37:32 2013 (52204BBC)
fffff880`06dde000 fffff880`06de7000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`06de7000 fffff880`06dfd000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`06e16000 fffff880`06e67000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`06e67000 fffff880`06ea5ba0   RapportEI64 RapportEI64.sys Tue Sep 10 16:15:55 2013 (522F7DFB)
fffff880`06ea6000 fffff880`06eb2000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff880`06eb2000 fffff880`06ebd000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`06ebd000 fffff880`06ecc000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`06ecc000 fffff880`06eea000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`06eea000 fffff880`06efb000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`06efb000 fffff880`06f5d000   aswSP    aswSP.SYS    Fri Aug 30 03:38:13 2013 (52204BE5)
fffff880`06f5d000 fffff880`06f83000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`06f83000 fffff880`06fa7000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`06fa7000 fffff880`06fb8000   usbehci  usbehci.sys  Wed Sep 04 08:11:43 2013 (5227237F)
fffff880`07200000 fffff880`072f4000   dxgkrnl  dxgkrnl.sys  Thu Aug 01 03:58:53 2013 (51FA153D)
fffff880`072f9000 fffff880`07da4000   nvlddmkm nvlddmkm.sys Thu Mar 14 21:37:00 2013 (51427B3C)
fffff880`07da4000 fffff880`07da9000   nvBridge nvBridge.kmd Fri May 20 23:58:23 2011 (4DD7385F)
fffff880`07da9000 fffff880`07def000   dxgmms1  dxgmms1.sys  Tue Apr 09 23:27:15 2013 (5164DC13)
fffff880`07def000 fffff880`07e00000   HECIx64  HECIx64.sys  Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`08013000 fffff880`08069000   USBPORT  USBPORT.SYS  Wed Sep 04 08:11:51 2013 (52272387)
fffff880`08069000 fffff880`0809a000   nusb3xhc nusb3xhc.sys Thu Nov 18 20:34:25 2010 (4CE5D421)
fffff880`0809a000 fffff880`0809be80   USBD     USBD.SYS     Wed Sep 04 08:11:40 2013 (5227237C)
fffff880`0809c000 fffff880`080bf000   JME      JME.sys      Fri Jan 14 00:24:42 2011 (4D2FDE1A)
fffff880`080bf000 fffff880`080ed000   jmcr     jmcr.sys     Mon Dec 06 02:55:51 2010 (4CFC9707)
fffff880`080ed000 fffff880`0811c000   SCSIPORT SCSIPORT.SYS Sat Nov 20 05:34:01 2010 (4CE7A419)
fffff880`0811c000 fffff880`0813d000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0813d000 fffff880`08157000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`08157000 fffff880`0819a000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`0819a000 fffff880`081ac000   circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`081ac000 fffff880`081be000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`08200000 fffff880`08216000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`08216000 fffff880`0823a000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0823a000 fffff880`08246000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`08246000 fffff880`08275000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`08275000 fffff880`08290000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`08290000 fffff880`0829d000   tap0901  tap0901.sys  Wed Nov 19 13:22:35 2008 (4924596B)
fffff880`082a1000 fffff880`08b27000   NETwNs64 NETwNs64.sys Wed Aug 03 20:28:26 2011 (4E39E7AA)
fffff880`08b27000 fffff880`08b34000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`08b34000 fffff880`08b72000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`08b72000 fffff880`08b90000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`08b90000 fffff880`08b9f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`08b9f000 fffff880`08bef000   AMPPAL   AMPPAL.sys   Mon Aug 08 10:32:06 2011 (4E3FF366)
fffff880`08bef000 fffff880`08bff000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`09000000 fffff880`09009000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`09009000 fffff880`0900a480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`09014000 fffff880`0916e000   SynTP    SynTP.sys    Thu Sep 16 21:19:32 2010 (4C92C224)
fffff880`0916e000 fffff880`0917d000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0917d000 fffff880`091df000   itecir   itecir.sys   Tue Jul 13 05:50:47 2010 (4C3C36F7)
fffff880`091df000 fffff880`091f5000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`091f5000 fffff880`091f9500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`09200000 fffff880`09228000   aswMonFlt aswMonFlt.sys Fri Aug 30 03:37:08 2013 (52204BA4)
fffff880`09228000 fffff880`0925e000   WUDFRd   WUDFRd.sys   Wed Jul 25 22:26:06 2012 (5010AABE)
fffff880`0925e000 fffff880`09273000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`092c0000 fffff880`0931a000   usbhub   usbhub.sys   Wed Sep 04 08:12:10 2013 (5227239A)
fffff880`0931a000 fffff880`09333000   nusb3hub nusb3hub.sys Thu Nov 18 20:34:24 2010 (4CE5D420)
fffff880`09333000 fffff880`09348000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`09348000 fffff880`0937b000   nvhda64v nvhda64v.sys Wed Dec 19 00:41:41 2012 (50D15395)
fffff880`0937b000 fffff880`093b8000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`093b8000 fffff880`093da000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`093da000 fffff880`093df200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0aa11000 fffff880`0acac180   RTKVHD64 RTKVHD64.sys Fri Feb 11 05:16:05 2011 (4D550C65)
fffff880`0acad000 fffff880`0acbe000   hidir    hidir.sys    Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0acbe000 fffff880`0acd7000   HIDCLASS HIDCLASS.SYS Wed Jul 03 00:05:05 2013 (51D3A2F1)
fffff880`0acd7000 fffff880`0acdf080   HIDPARSE HIDPARSE.SYS Wed Jul 03 00:05:04 2013 (51D3A2F0)
fffff880`0ace0000 fffff880`0acee000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff880`0acee000 fffff880`0acfb000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`0acfb000 fffff880`0ad07000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0ad07000 fffff880`0ad15000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0ad15000 fffff880`0ad21000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0ad21000 fffff880`0ad2c000   dump_msahci dump_msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`0ad2c000 fffff880`0ad3f000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0ad3f000 fffff880`0ad62000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`0ad62000 fffff880`0ad6d000   aswFsBlk aswFsBlk.SYS Fri Aug 30 03:36:58 2013 (52204B9A)
fffff880`0ad6d000 fffff880`0ad86000   WudfPf   WudfPf.sys   Wed Jul 25 22:26:45 2012 (5010AAE5)
fffff880`0ad94000 fffff880`0adb1000   usbccgp  usbccgp.sys  Wed Sep 04 08:11:49 2013 (52272385)
fffff880`0adb1000 fffff880`0adde400   usbvideo usbvideo.sys Fri Jul 12 06:41:34 2013 (51DFDD5E)
fffff880`0addf000 fffff880`0adf0000   WinUSB   WinUSB.sys   Sat Nov 20 05:43:56 2010 (4CE7A66C)
fffff880`0c234000 fffff880`0c251000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`0c2a8000 fffff880`0c311000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`0c311000 fffff880`0c3a9000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0c3a9000 fffff880`0c3d8000   ipnat    ipnat.sys    Mon Jul 13 20:10:03 2009 (4A5BCCDB)
fffff880`0c3d8000 fffff880`0c3e2000   vwifimp  vwifimp.sys  Mon Jul 13 20:07:28 2009 (4A5BCC40)
fffff880`11ad2000 fffff880`11add000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`11afc000 fffff880`11b2f340   rapportiaso64 rapportiaso64.sys Wed Jun 12 01:05:23 2013 (51B80193)
fffff880`11b30000 fffff880`11b3e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff960`00030000 fffff960`00347000   win32k   win32k.sys   unavailable (00000000)
fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`006f0000 fffff960`00717000   cdd      cdd.dll      unavailable (00000000)
fffff960`00830000 fffff960`00891000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff880`11add000 fffff880`11af8000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`11af8000 fffff880`11afc000   wdcsam64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00004000
fffff880`11a9c000 fffff880`11ad0000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a68000 fffff880`11a9c000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a34000 fffff880`11a68000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a00000 fffff880`11a34000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11ba6000 fffff880`11bda000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b72000 fffff880`11ba6000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b3e000 fffff880`11b72000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0ad86000 fffff880`0ad94000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`11afc000 fffff880`11b30000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a9c000 fffff880`11ad0000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a68000 fffff880`11a9c000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a34000 fffff880`11a68000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a00000 fffff880`11a34000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11bcc000 fffff880`11c00000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b98000 fffff880`11bcc000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b64000 fffff880`11b98000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b30000 fffff880`11b64000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11afc000 fffff880`11b30000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a61000 fffff880`11ad2000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c251000 fffff880`0c285000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c251000 fffff880`0c285000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c251000 fffff880`0c285000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0ad3f000 fffff880`0ad50000   WinUSB.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`0ad50000 fffff880`0ad86000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00036000
fffff880`019bb000 fffff880`019c9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`019c9000 fffff880`019d5000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`019d5000 fffff880`019e0000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`019e0000 fffff880`019f3000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
start             end                 module name
fffff880`08b34000 fffff880`08b72000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`00e00000 fffff880`00e57000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`0636c000 fffff880`06384000   adfs     adfs.SYS     Thu Jun 26 16:52:37 2008 (48640195)
fffff880`06a00000 fffff880`06a89000   afd      afd.sys      Fri Sep 13 21:10:16 2013 (5233B778)
fffff880`08200000 fffff880`08216000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`0106c000 fffff880`01077000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`08b9f000 fffff880`08bef000   AMPPAL   AMPPAL.sys   Mon Aug 08 10:32:06 2011 (4E3FF366)
fffff880`0ad62000 fffff880`0ad6d000   aswFsBlk aswFsBlk.SYS Fri Aug 30 03:36:58 2013 (52204B9A)
fffff880`09200000 fffff880`09228000   aswMonFlt aswMonFlt.sys Fri Aug 30 03:37:08 2013 (52204BA4)
fffff880`06dca000 fffff880`06dde000   aswrdr2  aswrdr2.sys  Fri Aug 30 03:37:32 2013 (52204BBC)
fffff880`019a8000 fffff880`019bb000   aswRvrt  aswRvrt.sys  Fri Aug 30 03:36:44 2013 (52204B8C)
fffff880`06a8c000 fffff880`06b8c000   aswSnx   aswSnx.SYS   Fri Aug 30 03:38:17 2013 (52204BE9)
fffff880`06efb000 fffff880`06f5d000   aswSP    aswSP.SYS    Fri Aug 30 03:38:13 2013 (52204BE5)
fffff880`06db8000 fffff880`06dca000   aswTdi   aswTdi.SYS   Fri Aug 30 03:37:17 2013 (52204BAD)
fffff880`01974000 fffff880`019a8000   aswVmm   aswVmm.sys   Fri Aug 30 03:36:49 2013 (52204B91)
fffff880`11ad2000 fffff880`11add000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00fe7000 fffff880`00ff0000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`01027000 fffff880`01051000   ataport  ataport.SYS  Sun Aug 04 21:02:45 2013 (51FEF9B5)
fffff960`00830000 fffff960`00891000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff880`00ec8000 fffff880`00ed4000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`06d08000 fffff880`06d0f000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`06eea000 fffff880`06efb000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02bd0000 fffff880`02bee000   bowser   bowser.sys   Tue Feb 22 23:55:04 2011 (4D649328)
fffff960`006f0000 fffff960`00717000   cdd      cdd.dll      unavailable (00000000)
fffff880`0c234000 fffff880`0c251000   cdfs     cdfs.sys     Mon Jul 13 19:19:46 2009 (4A5BC112)
fffff880`01408000 fffff880`01432000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00cde000 fffff880`00d9e000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`0819a000 fffff880`081ac000   circlass circlass.sys Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`01944000 fffff880`01974000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c80000 fffff880`00cde000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`091f5000 fffff880`091f9500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`01142000 fffff880`011b4000   cng      cng.sys      Fri Aug 24 11:47:16 2012 (5037A204)
fffff880`00ebf000 fffff880`00ec8000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`08bef000 fffff880`08bff000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0ad07000 fffff880`0ad15000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`06ecc000 fffff880`06eea000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`06ebd000 fffff880`06ecc000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0192e000 fffff880`01944000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`093b8000 fffff880`093da000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`01800000 fffff880`01849000   dtsoftbus01 dtsoftbus01.sys Fri Jan 13 08:45:46 2012 (4F10358A)
fffff880`0ad15000 fffff880`0ad21000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0ad2c000 fffff880`0ad3f000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`0ad21000 fffff880`0ad2c000   dump_msahci dump_msahci.sys Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`0acfb000 fffff880`0ad07000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`07200000 fffff880`072f4000   dxgkrnl  dxgkrnl.sys  Thu Aug 01 03:58:53 2013 (51FA153D)
fffff880`07da9000 fffff880`07def000   dxgmms1  dxgmms1.sys  Tue Apr 09 23:27:15 2013 (5164DC13)
fffff880`02ad1000 fffff880`02b07000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`010c3000 fffff880`010d7000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01077000 fffff880`010c3000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01211000 fffff880`0121b000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 22:41:06 2012 (4F4EEFD2)
fffff880`018f4000 fffff880`0192e000   fvevol   fvevol.sys   Wed Jan 23 22:11:24 2013 (5100A65C)
fffff880`015b6000 fffff880`015ff000   fwpkclnt fwpkclnt.sys Wed Jan 02 22:06:48 2013 (50E4F5C8)
fffff800`03805000 fffff800`0384e000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`06f83000 fffff880`06fa7000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`07def000 fffff880`07e00000   HECIx64  HECIx64.sys  Tue Oct 19 19:33:43 2010 (4CBE2AD7)
fffff880`0acbe000 fffff880`0acd7000   HIDCLASS HIDCLASS.SYS Wed Jul 03 00:05:05 2013 (51D3A2F1)
fffff880`0acad000 fffff880`0acbe000   hidir    hidir.sys    Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`0acd7000 fffff880`0acdf080   HIDPARSE HIDPARSE.SYS Wed Jul 03 00:05:04 2013 (51D3A2F0)
fffff880`02b07000 fffff880`02bd0000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`018eb000 fffff880`018f4000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`08b72000 fffff880`08b90000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`06384000 fffff880`063ad000   idmwfp   idmwfp.sys   Mon Apr 23 09:14:15 2012 (4F9555A7)
fffff880`091df000 fffff880`091f5000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`0c3a9000 fffff880`0c3d8000   ipnat    ipnat.sys    Mon Jul 13 20:10:03 2009 (4A5BCCDB)
fffff880`0917d000 fffff880`091df000   itecir   itecir.sys   Tue Jul 13 05:50:47 2010 (4C3C36F7)
fffff880`080bf000 fffff880`080ed000   jmcr     jmcr.sys     Mon Dec 06 02:55:51 2010 (4CFC9707)
fffff880`0809c000 fffff880`080bf000   JME      JME.sys      Fri Jan 14 00:24:42 2011 (4D2FDE1A)
fffff880`08b90000 fffff880`08b9f000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0ace0000 fffff880`0acee000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00ba8000 fffff800`00bb2000   kdcom    kdcom.dll    Sat Feb 05 11:52:49 2011 (4D4D8061)
fffff880`08157000 fffff880`0819a000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013db000 fffff880`013f6000   ksecdd   ksecdd.sys   Fri Jun 01 22:50:23 2012 (4FC97F6F)
fffff880`0158b000 fffff880`015b6000   ksecpkg  ksecpkg.sys  Fri Aug 24 11:48:29 2012 (5037A24D)
fffff880`093da000 fffff880`093df200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0925e000 fffff880`09273000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0ad3f000 fffff880`0ad62000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c1d000 fffff880`00c6c000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`11b30000 fffff880`11b3e000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`0916e000 fffff880`0917d000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0acee000 fffff880`0acfb000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fcd000 fffff880`00fe7000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`02a00000 fffff880`02a18000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02a18000 fffff880`02a45000   mrxsmb   mrxsmb.sys   Tue Apr 26 22:40:38 2011 (4DB78226)
fffff880`062fa000 fffff880`06348000   mrxsmb10 mrxsmb10.sys Fri Jul 08 22:46:28 2011 (4E17C104)
fffff880`06348000 fffff880`0636c000   mrxsmb20 mrxsmb20.sys Tue Apr 26 22:39:37 2011 (4DB781E9)
fffff880`01051000 fffff880`0105c000   msahci   msahci.sys   Sat Nov 20 05:33:58 2010 (4CE7A416)
fffff880`06d6d000 fffff880`06d78000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e60000 fffff880`00e6a000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`010e4000 fffff880`01142000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`06eb2000 fffff880`06ebd000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`018d9000 fffff880`018eb000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01439000 fffff880`0152b000   ndis     ndis.sys     Wed Aug 22 11:11:46 2012 (5034F6B2)
fffff880`0823a000 fffff880`08246000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02aa6000 fffff880`02ab9000   ndisuio  ndisuio.sys  Sat Nov 20 05:50:08 2010 (4CE7A7E0)
fffff880`08246000 fffff880`08275000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`09333000 fffff880`09348000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`06c00000 fffff880`06c0f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`06b8c000 fffff880`06bd1000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`0152b000 fffff880`0158b000   NETIO    NETIO.SYS    Wed Aug 22 11:11:28 2012 (5034F6A0)
fffff880`082a1000 fffff880`08b27000   NETwNs64 NETwNs64.sys Wed Aug 03 20:28:26 2011 (4E39E7AA)
fffff880`06d78000 fffff880`06d89000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`06ea6000 fffff880`06eb2000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`0384e000 fffff800`03e33000   nt       ntkrnlmp.exe Wed Aug 28 21:13:25 2013 (521EA035)
fffff880`01239000 fffff880`013db000   Ntfs     Ntfs.sys     Fri Apr 12 07:54:36 2013 (5167F5FC)
fffff880`06cff000 fffff880`06d08000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`0931a000 fffff880`09333000   nusb3hub nusb3hub.sys Thu Nov 18 20:34:24 2010 (4CE5D420)
fffff880`08069000 fffff880`0809a000   nusb3xhc nusb3xhc.sys Thu Nov 18 20:34:25 2010 (4CE5D421)
fffff880`07da4000 fffff880`07da9000   nvBridge nvBridge.kmd Fri May 20 23:58:23 2011 (4DD7385F)
fffff880`09348000 fffff880`0937b000   nvhda64v nvhda64v.sys Wed Dec 19 00:41:41 2012 (50D15395)
fffff880`072f9000 fffff880`07da4000   nvlddmkm nvlddmkm.sys Thu Mar 14 21:37:00 2013 (51427B3C)
fffff880`02a53000 fffff880`02aa6000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`06bd1000 fffff880`06bf7000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`00eaa000 fffff880`00ebf000   partmgr  partmgr.sys  Sat Mar 17 01:06:09 2012 (4F641BC1)
fffff880`00e6a000 fffff880`00e9d000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`0105c000 fffff880`0106c000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01200000 fffff880`01211000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`06200000 fffff880`062a6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`0937b000 fffff880`093b8000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c6c000 fffff880`00c80000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`010d7000 fffff880`010e3040   PxHlpa64 PxHlpa64.sys Tue Oct 20 14:08:42 2009 (4ADDFCAA)
fffff880`06c15000 fffff880`06ca2d40   RapportCerberus64_56758 RapportCerberus64_56758.sys Thu Jul 04 07:31:02 2013 (51D55CF6)
fffff880`06e67000 fffff880`06ea5ba0   RapportEI64 RapportEI64.sys Tue Sep 10 16:15:55 2013 (522F7DFB)
fffff880`11afc000 fffff880`11b2f340   rapportiaso64 rapportiaso64.sys Wed Jun 12 01:05:23 2013 (51B80193)
fffff880`01892000 fffff880`018d8020   RapportKE64 RapportKE64.sys Tue Sep 10 16:15:52 2013 (522F7DF8)
fffff880`06ca3000 fffff880`06cfeac0   RapportPG64 RapportPG64.sys Tue Sep 10 16:16:12 2013 (522F7E0C)
fffff880`08216000 fffff880`0823a000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`08275000 fffff880`08290000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0811c000 fffff880`0813d000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0813d000 fffff880`08157000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`06e16000 fffff880`06e67000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`06d52000 fffff880`06d5b000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06d5b000 fffff880`06d64000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06d64000 fffff880`06d6d000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01858000 fffff880`01892000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`02ab9000 fffff880`02ad1000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0aa11000 fffff880`0acac180   RTKVHD64 RTKVHD64.sys Fri Feb 11 05:16:05 2011 (4D550C65)
fffff880`080ed000 fffff880`0811c000   SCSIPORT SCSIPORT.SYS Sat Nov 20 05:34:01 2010 (4CE7A419)
fffff880`062a6000 fffff880`062b1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`01400000 fffff880`01408000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0c311000 fffff880`0c3a9000   srv      srv.sys      Thu Apr 28 23:06:06 2011 (4DBA2B1E)
fffff880`0c2a8000 fffff880`0c311000   srv2     srv2.sys     Thu Apr 28 23:05:46 2011 (4DBA2B0A)
fffff880`062b1000 fffff880`062e2000   srvnet   srvnet.sys   Thu Apr 28 23:05:35 2011 (4DBA2AFF)
fffff880`09009000 fffff880`0900a480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`09014000 fffff880`0916e000   SynTP    SynTP.sys    Thu Sep 16 21:19:32 2010 (4C92C224)
fffff880`08290000 fffff880`0829d000   tap0901  tap0901.sys  Wed Nov 19 13:22:35 2008 (4924596B)
fffff880`01600000 fffff880`017ff000   tcpip    tcpip.sys    Sat Sep 07 21:11:52 2013 (522BCED8)
fffff880`062e2000 fffff880`062f4000   tcpipreg tcpipreg.sys Wed Oct 03 12:07:26 2012 (506C62BE)
fffff880`06dab000 fffff880`06db8000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`06d89000 fffff880`06dab000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`01000000 fffff880`01014000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00540000 fffff960`0054a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`06f5d000 fffff880`06f83000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`081ac000 fffff880`081be000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0ad94000 fffff880`0adb1000   usbccgp  usbccgp.sys  Wed Sep 04 08:11:49 2013 (52272385)
fffff880`0809a000 fffff880`0809be80   USBD     USBD.SYS     Wed Sep 04 08:11:40 2013 (5227237C)
fffff880`06fa7000 fffff880`06fb8000   usbehci  usbehci.sys  Wed Sep 04 08:11:43 2013 (5227237F)
fffff880`092c0000 fffff880`0931a000   usbhub   usbhub.sys   Wed Sep 04 08:12:10 2013 (5227239A)
fffff880`08013000 fffff880`08069000   USBPORT  USBPORT.SYS  Wed Sep 04 08:11:51 2013 (52272387)
fffff880`0adb1000 fffff880`0adde400   usbvideo usbvideo.sys Fri Jul 12 06:41:34 2013 (51DFDD5E)
fffff880`00e9d000 fffff880`00eaa000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`06d0f000 fffff880`06d1d000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`06d1d000 fffff880`06d42000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00fb8000 fffff880`00fcd000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00d9e000 fffff880`00dfa000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`011b4000 fffff880`01200000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`08b27000 fffff880`08b34000   vwifibus vwifibus.sys Mon Jul 13 20:07:21 2009 (4A5BCC39)
fffff880`06de7000 fffff880`06dfd000   vwififlt vwififlt.sys Mon Jul 13 20:07:22 2009 (4A5BCC3A)
fffff880`0c3d8000 fffff880`0c3e2000   vwifimp  vwifimp.sys  Mon Jul 13 20:07:28 2009 (4A5BCC40)
fffff880`0121b000 fffff880`01236000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`06d42000 fffff880`06d52000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00ee6000 fffff880`00fa8000   Wdf01000 Wdf01000.sys Fri Jun 21 23:13:05 2013 (51C51641)
fffff880`00fa8000 fffff880`00fb8000   WDFLDR   WDFLDR.SYS   Wed Jul 25 22:29:04 2012 (5010AB70)
fffff880`06dde000 fffff880`06de7000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00030000 fffff960`00347000   win32k   win32k.sys   unavailable (00000000)
fffff880`0addf000 fffff880`0adf0000   WinUSB   WinUSB.sys   Sat Nov 20 05:43:56 2010 (4CE7A66C)
fffff880`09000000 fffff880`09009000   wmiacpi  wmiacpi.sys  Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00e57000 fffff880`00e60000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`0ad6d000 fffff880`0ad86000   WudfPf   WudfPf.sys   Wed Jul 25 22:26:45 2012 (5010AAE5)
fffff880`09228000 fffff880`0925e000   WUDFRd   WUDFRd.sys   Wed Jul 25 22:26:06 2012 (5010AABE)

Unloaded modules:
fffff880`11add000 fffff880`11af8000   USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff880`11af8000 fffff880`11afc000   wdcsam64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00004000
fffff880`11a9c000 fffff880`11ad0000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a68000 fffff880`11a9c000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a34000 fffff880`11a68000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a00000 fffff880`11a34000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11ba6000 fffff880`11bda000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b72000 fffff880`11ba6000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b3e000 fffff880`11b72000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0ad86000 fffff880`0ad94000   monitor.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`11afc000 fffff880`11b30000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a9c000 fffff880`11ad0000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a68000 fffff880`11a9c000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a34000 fffff880`11a68000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a00000 fffff880`11a34000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11bcc000 fffff880`11c00000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b98000 fffff880`11bcc000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b64000 fffff880`11b98000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11b30000 fffff880`11b64000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11afc000 fffff880`11b30000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`11a61000 fffff880`11ad2000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c251000 fffff880`0c285000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c251000 fffff880`0c285000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c251000 fffff880`0c285000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0c200000 fffff880`0c234000   rapportiaso6
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00034000
fffff880`0ad3f000 fffff880`0ad50000   WinUSB.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00011000
fffff880`0ad50000 fffff880`0ad86000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00036000
fffff880`019bb000 fffff880`019c9000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`019c9000 fffff880`019d5000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff880`019d5000 fffff880`019e0000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff880`019e0000 fffff880`019f3000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

duffmandula · Nov 6, 2013

Hi jcgriff2 and Richard,

Thanks for your help so far. It's a slow ISP that I have, but nevertheless I have:
1. Uninstalled Daemon tools.
2. Updated wifi card drivers.
3. Tried to update Rapport (hopefully this will solve the problems it was having, if not I'll disable it) but the shlwapi error came up again. It would still allow me to run the update but I chose to cancel it.
4. Have downloaded the system update readiness tool and ran it once and it applied only one hotfix. Resatarted and ran it again and again it only applied one hotfix - KB947821. After a reboot the shlwapi error still comes up with various programmes.

As requested here is my zipped CBS folder.

Thanks again!View attachment 5787

jcgriff2 · Nov 7, 2013

Hi -

Event Viewer logs show the one DLL in question belongs to Microsoft, but DivX is having issues with it -

Code:

Event[39]:
  Log Name: System
  Source: Application Popup
  Date: 2013-11-01T19:52:45.000
  Description: 
Application popup: [COLOR="#FF0000"]DivXUpdate.exe [/COLOR]- 
Bad Image : C:\Windows\system32\[COLOR="#FF0000"]api-ms-win-downlevel-shlwapi-l2-1-0.dll [/COLOR]
is either not designed to run on Windows or it contains an error. 
Try installing the program again using the original installation media or 
contact your system administrator or the software vendor for support.

Try reinstalling DivX for now - http://www.divx.com/

Regards. . .

jcgriff2

niemiro · Nov 7, 2013

Hello again :)

OK, I've looked over your logs. The corruptions themselves look fixable, but I am concerned because they match patterns I normally associate with hardware failure. Can you please test your memory for me: https://www.sysnative.com/forums/hardware-tutorials/3909-test-ram-with-memtest86.html

Thank you!

Richard

duffmandula · Nov 12, 2013

Hi jcgriff and Richard,

My CDs came today so I ran Memtest86+. It was on for about 7 hours today and did 4 passes but no errors were shown. I can try and run it for more passes if you think that might find errors.

I have tried to re-install DivX but I get the dll errors again and click ok. Then although the installer opens up, I click next and the installer just sits at the next step saying "initialising..." but it hasn't frozen as the periods at the end keep changing.

Any help greatly appreciated.

Thanks,

Duff

duffmandula · Nov 17, 2013

Hi Guys,Any more ideas on how to fix my corrupted files after the memory test came back with no problems?Thanks,Duff

RichardIII · Nov 21, 2013

Hi Duff,

EDIT: I just re-read your first post, maybe rendering my comment useless. However, I'm pretty sure IE 10 is the problem.

I just registered because I had a similar problem to the one you're having. I checked various forums and discovered that Internet Explorer 10 is the problem. Now, it might not be in yout case, but I guess it's worth trying.
Did you try and deinstall it this way?: start - control panel - windows update - view update history - In the review your update history click on installed updates and scroll down to IE10 and deinstall it.

duffmandula · Nov 21, 2013

Hi Richard III,

I had, but tried again just to check. It is in the list and when I click uninstall it starts to uninstall. After about 10 seconds it then stops and says "An error has occurred. Not all of the updates were successfully uninstalled."

I have tried to re-install IE10 and also IE11 but these don't work either so still stuck!?!?!

Thanks for registering and trying to help me out = much appreciated!

Duff

RichardIII · Nov 21, 2013

Hmmm okay. Affraid I can't help in that matter. Not sure if I'm allowed to post a link to another forum with a thread with people with the same problem. If not it'll get deleted, but I think it might be of help:

MS UPDATE FAIL causes api-ms-win-downlevel-user32-l1-1-0.dll MISSING - Microsoft Community
It has Microsoft employees involved and links like: Open the Windows Update troubleshooter - Microsoft Windows Help

Hope you'll find a solution soon.

All the best
Richard

duffmandula · Nov 24, 2013

Hi Richard,

Thanks again for your help; I had tried the MS Update fail link before but with no success. The Update trouble-shooter scanned and found errors, but couldn't fix them all automatically. Thanks for trying to help me out, but unfortunately still stuck.

Regards,

Duff

Tekno Venus · Nov 24, 2013

Hi,

Right, I will chip in here, since Richard is currently busy :)

Yes, MemTest86+ passed after 4 passes, however, we cannot rule out bad memory. Could you run it for a minimum of 8 passes (I know it will take a long time, not much I can do about that!)

Right, SURT is showing the following:

Code:

Summary:
Seconds executed: 313
 Found 15 errors
  CSI Manifest Failed Catalog Check Total count: 6
  CBS MUM Corrupt Total count: 6
  CBS Catalog Corrupt Total count: 3

Unavailable repair files:
    winsxs\manifests\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_9.4.8112.20593_none_604cc09ecdd3ea57.manifest
    winsxs\manifests\x86_microsoft-windows-p..age-codec.resources_31bf3856ad364e35_7.1.7601.16492_en-us_a29fc0a918aa884e.manifest
    winsxs\manifests\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_9.4.8112.16483_none_5fcdf3bfb4ae2e9c.manifest
    winsxs\manifests\x86_microsoft-windows-p..age-codec.resources_31bf3856ad364e35_7.1.7601.16492_el-gr_a245184318e1e517.manifest
    winsxs\manifests\amd64_2b0e667123e1a2cb87c57fab920f3ac3_31bf3856ad364e35_9.4.8112.20580_none_320b739d835c4185.manifest
    winsxs\manifests\amd64_2e593265346aaa0e2c22524425bacd6d_31bf3856ad364e35_9.4.8112.16450_none_99621c83ca96993b.manifest
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.mum
    servicing\packages\Package_147_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.mum
    servicing\packages\Package_1_for_KB2792100~31bf3856ad364e35~amd64~~9.4.1.0.mum
    servicing\packages\Package_1_for_KB2870699~31bf3856ad364e35~amd64~~10.2.1.0.mum
    servicing\packages\Package_for_KB2586448_RTM~31bf3856ad364e35~amd64~~9.4.1.2.mum
    servicing\packages\Package_for_KB2586448_RTM~31bf3856ad364e35~amd64~~9.4.1.2.mum
    servicing\packages\Package_for_KB2847204_RTM~31bf3856ad364e35~amd64~~9.4.1.0.mum
    servicing\packages\Package_for_KB2847204~31bf3856ad364e35~amd64~~9.4.1.0.mum
    servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~10.2.9200.16437.cat
    servicing\packages\Package_147_for_KB2633952~31bf3856ad364e35~amd64~~6.1.1.0.cat
    servicing\packages\Package_1_for_KB2792100~31bf3856ad364e35~amd64~~9.4.1.0.cat
    servicing\packages\Package_1_for_KB2870699~31bf3856ad364e35~amd64~~10.2.1.0.cat
    servicing\packages\Package_for_KB2586448_RTM~31bf3856ad364e35~amd64~~9.4.1.2.cat
    servicing\packages\Package_for_KB2586448_RTM~31bf3856ad364e35~amd64~~9.4.1.2.cat
    servicing\packages\Package_for_KB2847204_RTM~31bf3856ad364e35~amd64~~9.4.1.0.cat
    servicing\packages\Package_for_KB2847204~31bf3856ad364e35~amd64~~9.4.1.0.cat

The required files are downloading atm, but may take some time to complete.

I'll post back the fix when they're done :)

Regards,
Stephen

duffmandula · Nov 25, 2013

Hey Stephen,

Thanks for popping into the thread. I'll run memtest again then and will post the results back here in about 2-3 days!

Thanks,

Duff

duffmandula · Nov 27, 2013

Hey Stephen,

After a couple of days in the office Memtest had run for 34 hours, had completed 15 passes and found no errors:

Cheers for you help!

Duff

ieframe.dll, api-ms-win-downlevel-shlwapi-l2-1-0.dll and other errors.

Contributor

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Contributor

Senior Administrator, Windows Update Expert

Contributor

Senior Administrator, Windows Update Expert

Contributor

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Contributor

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Senior Administrator, Windows Update Expert

Contributor

Contributor

New member

Contributor

New member

Contributor

Senior Administrator, Developer

Contributor

Contributor

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)