Random BSOD's on Lenovo X201 Tablet

rashidjb

New member
Joined
Dec 2, 2012
Posts
2
We have a Lenovo X201 Tablet experiencing randoM BSOD's. It is running Windows 7 Professional SP1. From the memory dump we get the following:

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!MiRemoveNode+204
fffff800`02f01d34 49395808 cmp qword ptr [r8+8],rbx

CONTEXT: fffff8800aa110b0 -- (.cxr 0xfffff8800aa110b0)
rax=000007b80000b73d rbx=fffff8a00911e5b0 rcx=000007b80000b73d
rdx=fffff80003095dff rsi=fffff8a00911e5b0 rdi=fffff8a00911e5b0
rip=fffff80002f01d34 rsp=fffff8800aa11a90 rbp=fffff80003095da0
r8=000063cc007465c0 r9=0000000000000018 r10=fffffa8006c2dd50
r11=00000000001f0001 r12=0000000000000001 r13=0000000000000000
r14=00000000ffffffff r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!MiRemoveNode+0x204:
fffff800`02f01d34 49395808 cmp qword ptr [r8+8],rbx ds:002b:000063cc`007465c8=????????????????
Resetting default scope

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff8000313291b to fffff80002f01d34
STACK_TEXT:
fffff880`0aa11a90 fffff800`0313291b : fffffa80`0735f5d0 fffffa80`083ea060 00000000`00000001 fffff8a0`0911e5b0 : nt!MiRemoveNode+0x204
fffff880`0aa11ac0 fffff800`02ed93d4 : 00000000`00000000 00000000`00000000 fffffa80`06c628e0 00000000`00000701 : nt! ?? ::NNGAKEGL::`string'+0x3395d
fffff880`0aa11b00 fffff800`0316b075 : 00000000`00000000 fffff8a0`02753780 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObject+0xd4
fffff880`0aa11b60 fffff800`031d8a18 : fffff8a0`02753760 00000000`00000001 fffff8a0`02753780 00000000`00000000 : nt!AlpcpSectionDestroyProcedure+0x39
fffff880`0aa11b90 fffff800`0315dd9c : fffff8a0`02753780 00000000`ffffffff 00000000`ffffffff 00000000`00000000 : nt!AlpcpDestroyBlob+0x28
fffff880`0aa11bc0 fffff800`02ecf453 : fffffa80`083ea060 fffff880`0aa11ca0 00000000`03fa55f0 fffffa80`0a440950 : nt!NtAlpcDeletePortSection+0x110
fffff880`0aa11c20 00000000`77691aba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`04cdf4e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77691aba


FOLLOWUP_IP:
nt!MiRemoveNode+204
fffff800`02f01d34 49395808 cmp qword ptr [r8+8],rbx

SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiRemoveNode+204
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4fa390f3
STACK_COMMAND: .cxr 0xfffff8800aa110b0 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x3B_nt!MiRemoveNode+204
BUCKET_ID: X64_0x3B_nt!MiRemoveNode+204
Followup: MachineOwner
---------
 
Only 11 updates since SP1 - most systems have 130 to 140. Please visit Windows Update and get ALL available updates

These devices have problems:
Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter ROOT\AMPPAL\0000 39

PCI Simple Communications Controller PCI\VEN_8086&DEV_3B64&SUBSYS_215F17AA&REV_06\3&21436425&0&B0 The drivers for this device are not installed.
Please visit the PC manufacturer's website and update both of these devices. I believe that the second device may be the Intel Management Engine driver.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

mdmxsdk.sys Mon Jun 19 17:27:26 2006 (449716BE)
Conexant Modem Diagnostic Interface x86 Driver
http://www.carrona.org/drivers/driver.php?id=mdmxsdk.sys

wacommousefilter.sys Fri Feb 16 13:12:17 2007 (45D5F401)
Wacom(tablet) Mouse Filter
http://www.carrona.org/drivers/driver.php?id=wacommousefilter.sys

lmimirr.sys Tue Apr 10 18:32:45 2007 (461C108D)
RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver
http://www.carrona.org/drivers/driver.php?id=lmimirr.sys

ibmpmdrv.sys Thu May 31 05:51:31 2007 (465E9AA3)
ThinkPad Power Management Driver
http://www.carrona.org/drivers/driver.php?id=ibmpmdrv.sys

RaInfo.sys Fri Jan 4 13:57:14 2008 (477E818A)
LogMeIn/RemotelyAnywhere Kernel Information Provider
http://www.carrona.org/drivers/driver.php?id=RaInfo.sys

LMIRfsDriver.sys Mon Jul 14 12:26:56 2008 (487B7E50)
RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver
http://www.carrona.org/drivers/driver.php?id=LMIRfsDriver.sys

btwl2cap.sys Fri Apr 3 20:28:45 2009 (49D6A9BD)
Broadcom Bluetooth L2CAP Servicen
http://www.carrona.org/drivers/driver.php?id=btwl2cap.sys

XAudio64.sys Wed Apr 29 14:21:07 2009 (49F89A93)
Conexant Modem Audio
http://www.carrona.org/drivers/driver.php?id=XAudio64.sys

If the above things don't stop the BSOD's, then please start with these free hardware diagnostics: http://www.carrona.org/hwdiag.html

Analysis:
The following is for informational purposes only.
Code:
[font=lucida console]**************************Thu Nov 29 03:48:08.471 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112912-15834-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:07:02.704[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption ( nt!MiRemoveNode+204 )[/B]
BugCheck [B]3B, {c0000005, fffff80002f01d34, fffff8800aa110b0, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000003B]SYSTEM_SERVICE_EXCEPTION (3b)[/url]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002f01d34, Address of the instruction which caused the bugcheck
Arg3: fffff8800aa110b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]svchost.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_nt!MiRemoveNode+204[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Nov 26 20:39:48.378 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112612-19812-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:08:58.001[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+355e4 )[/B]
BugCheck [B]1A, {41790, fffffa800088d340, ffff, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001A]MEMORY_MANAGEMENT (1a)[/url]
Arguments: 
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
	contains the address of the PFN for the corrupted page table page.
	On a 32 bit OS, parameter 2 contains a pointer to the number of used
	PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa800088d340
Arg3: 000000000000ffff
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME: [B]explorer.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+355e4[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Nov 26 06:54:34.356 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\112612-12199-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:50:43.979[/B]
Probably caused by :[B]win32k.sys ( win32k+1da6a )[/B]
BugCheck [B]3B, {c0000005, fffff960000bda6a, fffff8800b6f3ca0, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000003B]SYSTEM_SERVICE_EXCEPTION (3b)[/url]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960000bda6a, Address of the instruction which caused the bugcheck
Arg3: fffff8800b6f3ca0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]Acrobat.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x3B_win32k+1da6a[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov  6 06:14:42.377 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\110612-13884-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:10:29.000[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption ( nt!MiRemoveNode+146 )[/B]
BugCheck [B]34, {50853, fffff880031857e8, fffff88003185040, fffff80002efec76}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000034]CACHE_MANAGER (34)[/url]
Arguments: 
Arg1: 0000000000050853
Arg2: fffff880031857e8
Arg3: fffff88003185040
Arg4: fffff80002efec76
PROCESS_NAME: [B]System[/B]
BUGCHECK_STR:  0x34
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
FAILURE_BUCKET_ID: [B]X64_0x34_nt!MiRemoveNode+146[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Oct 24 03:51:08.868 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102412-15553-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:22:17.491[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+355e4 )[/B]
BugCheck [B]1A, {41790, fffffa800088d370, ffff, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001A]MEMORY_MANAGEMENT (1a)[/url]
Arguments: 
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
	contains the address of the PFN for the corrupted page table page.
	On a 32 bit OS, parameter 2 contains a pointer to the number of used
	PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa800088d370
Arg3: 000000000000ffff
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME: [B]mbamservice.ex[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+355e4[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Oct 24 03:28:23.278 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\102412-14352-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:22:15.901[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]hardware ( nt!MiAgeWorkingSet+74 )[/B]
BugCheck [B]A, {0, 2, 1, fffff80002c709d4}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000000A]IRQL_NOT_LESS_OR_EQUAL (a)[/url]
Arguments: 
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002c709d4, address which referenced memory
BUGCHECK_STR:  0xA
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME: [B]System[/B]
FAILURE_BUCKET_ID: [B]X64_IP_MISALIGNED[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Oct 11 08:07:04.369 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\101112-21590-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 1:28:33.026[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+355e4 )[/B]
BugCheck [B]1A, {41790, fffffa800088d340, ffff, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001A]MEMORY_MANAGEMENT (1a)[/url]
Arguments: 
Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
	contains the address of the PFN for the corrupted page table page.
	On a 32 bit OS, parameter 2 contains a pointer to the number of used
	PTEs, and parameter 3 contains the number of used PTEs.
Arg2: fffffa800088d340
Arg3: 000000000000ffff
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41790
PROCESS_NAME: [B]MsMpEng.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+355e4[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Oct  9 15:59:14.684 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\100912-26208-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17835.amd64fre.win7sp1_gdr.120503-2030
System Uptime:[B]0 days 0:02:59.106[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+384b0 )[/B]
BugCheck [B]1A, {888a, fffff8a008628048, fffff68000000003, fffffa8000469c50}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001A]MEMORY_MANAGEMENT (1a)[/url]
Arguments: 
Arg1: 000000000000888a, Internal memory management structures (likely the PTE or PFN) are corrupt.
Arg2: fffff8a008628048
Arg3: fffff68000000003
Arg4: fffffa8000469c50
BUGCHECK_STR:  0x1a_888a
PROCESS_NAME: [B]mscorsvw.exe[/B]
FAILURE_BUCKET_ID: [B]X64_0x1a_888a_nt!_??_::FNODOBFM::_string_+384b0[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
Code:
[font=lucida console]**************************Thu Nov 29 03:48:08.471 2012 (UTC - 5:00)**************************
[COLOR=RED][B]mdmxsdk.sys                 Mon Jun 19 17:27:26 2006 (449716BE)[/B][/COLOR]
[COLOR=RED][B]wacommousefilter.sys        Fri Feb 16 13:12:17 2007 (45D5F401)[/B][/COLOR]
[COLOR=RED][B]lmimirr.sys                 Tue Apr 10 18:32:45 2007 (461C108D)[/B][/COLOR]
[COLOR=RED][B]ibmpmdrv.sys                Thu May 31 05:51:31 2007 (465E9AA3)[/B][/COLOR]
[COLOR=RED][B]RaInfo.sys                  Fri Jan  4 13:57:14 2008 (477E818A)[/B][/COLOR]
[COLOR=RED][B]LMIRfsDriver.sys            Mon Jul 14 12:26:56 2008 (487B7E50)[/B][/COLOR]
[COLOR=RED][B]btwl2cap.sys                Fri Apr  3 20:28:45 2009 (49D6A9BD)[/B][/COLOR]
[COLOR=RED][B]XAudio64.sys                Wed Apr 29 14:21:07 2009 (49F89A93)[/B][/COLOR]
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
NMgamingms.sys              Fri Jul 24 04:55:08 2009 (4A6976EC)
wstbtndb.sys                Wed Jul 29 03:29:28 2009 (4A6FFA58)
wacomvhid.sys               Mon Sep 21 19:29:14 2009 (4AB80C4A)
btwavdt.sys                 Tue Jan 12 16:43:04 2010 (4B4CECE8)
btwaudio.sys                Tue Jan 12 16:44:18 2010 (4B4CED32)
btwrchid.sys                Tue Jan 12 16:44:35 2010 (4B4CED43)
Impcd.sys                   Fri Feb 26 18:32:11 2010 (4B8859FB)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
btusbflt.sys                Thu Apr  8 21:11:36 2010 (4BBE7EC8)
WacomVTHid.sys              Mon Jun 21 16:42:01 2010 (4C1FCE99)
CHDRT64.sys                 Thu Aug 26 04:45:24 2010 (4C7629A4)
CAX_CNXT.sys                Fri Dec  3 18:37:18 2010 (4CF97F2E)
CAXHWAZL.sys                Fri Dec  3 18:39:03 2010 (4CF97F97)
CAX_DPV.sys                 Fri Dec  3 18:43:57 2010 (4CF980BD)
wisdpen.sys                 Thu Jan 13 11:24:16 2011 (4D2F2730)
5U877.sys                   Mon May 23 02:33:31 2011 (4DD9FFBB)
Tvti2c.sys                  Sun May 29 21:36:58 2011 (4DE2F4BA)
smihlp.sys                  Mon May 30 12:21:37 2011 (4DE3C411)
e1k62x64.sys                Wed Jul 20 12:58:22 2011 (4E27092E)
psadd.sys                   Tue Jul 26 02:56:31 2011 (4E2E651F)
IntcDAud.sys                Tue Aug 23 09:12:57 2011 (4E53A759)
DzHDD64.sys                 Mon Oct 24 06:10:13 2011 (4EA53985)
Tppwr64v.sys                Mon Nov 28 23:08:06 2011 (4ED45AA6)
bpenum.sys                  Thu Dec  1 10:37:47 2011 (4ED79F4B)
igdkmd64.sys                Tue Jan 10 17:28:09 2012 (4F0CBB79)
AMPPAL.sys                  Thu Mar 15 09:02:45 2012 (4F61E875)
Netwsw00.sys                Sun Jun  3 11:33:40 2012 (4FCB83D4)
MpFilter.sys                Thu Aug 23 19:03:14 2012 (5036B6B2)
SynTP.sys                   Fri Sep  7 15:30:28 2012 (504A4B54)
Smb_driver_Intel.sys        Fri Sep  7 15:32:06 2012 (504A4BB6)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov  6 06:14:42.377 2012 (UTC - 5:00)**************************
mbam.sys                    Mon Aug 20 12:49:41 2012 (50326AA5)
[/font]
http://www.carrona.org/drivers/driver.php?id=mdmxsdk.sys
http://www.carrona.org/drivers/driver.php?id=wacommousefilter.sys
http://www.carrona.org/drivers/driver.php?id=lmimirr.sys
http://www.carrona.org/drivers/driver.php?id=ibmpmdrv.sys
http://www.carrona.org/drivers/driver.php?id=RaInfo.sys
http://www.carrona.org/drivers/driver.php?id=LMIRfsDriver.sys
http://www.carrona.org/drivers/driver.php?id=btwl2cap.sys
http://www.carrona.org/drivers/driver.php?id=XAudio64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=NMgamingms.sys
wstbtndb.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=wacomvhid.sys
http://www.carrona.org/drivers/driver.php?id=btwavdt.sys
http://www.carrona.org/drivers/driver.php?id=btwaudio.sys
http://www.carrona.org/drivers/driver.php?id=btwrchid.sys
http://www.carrona.org/drivers/driver.php?id=Impcd.sys
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
http://www.carrona.org/drivers/driver.php?id=btusbflt.sys
WacomVTHid.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=CHDRT64.sys
http://www.carrona.org/drivers/driver.php?id=CAX_CNXT.sys
http://www.carrona.org/drivers/driver.php?id=CAXHWAZL.sys
http://www.carrona.org/drivers/driver.php?id=CAX_DPV.sys
http://www.carrona.org/drivers/driver.php?id=wisdpen.sys
http://www.carrona.org/drivers/driver.php?id=5U877.sys
http://www.carrona.org/drivers/driver.php?id=Tvti2c.sys
http://www.carrona.org/drivers/driver.php?id=smihlp.sys
http://www.carrona.org/drivers/driver.php?id=e1k62x64.sys
http://www.carrona.org/drivers/driver.php?id=psadd.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=DzHDD64.sys
http://www.carrona.org/drivers/driver.php?id=Tppwr64v.sys
http://www.carrona.org/drivers/driver.php?id=bpenum.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=AMPPAL.sys
http://www.carrona.org/drivers/driver.php?id=Netwsw00.sys
http://www.carrona.org/drivers/driver.php?id=MpFilter.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
 
Back
Top