[Win10] BSOD

Go The Power

Go The Power

Senior Administrator, Windows Update Expert, Contributor
Staff member
Joined
Mar 5, 2012
Posts
6,291
Location
Adelaide, South Australia
Hi all,

I have been experiencing random BSOD's for a few months now. In December last year I turned on my computer and got an error "boot media not found, please insert proper boot device and restart your computer". My OS is running on a Samsung Evo SSD, I was able to reinstall Windows on the SSD. Once windows was loaded back up I couldn't access my internal HDD, the HDD basically died. I was able to recover a few things from it but not much. My concern has been around what would cause my SSD to longer be able to find the boot media and my HDD to become dead at the same time, I dont know if the crash from one of them caused the issue to both or just a coincidence?

I have since replaced the dead HDD, but have received a BSOD since and a random restart.

The minidump is attached, there is a memory dump on my PC if needed too. I also have all the old BSOD's before the PC crashed.

Currently running Driver Verifier now.

SSD diagnostics and RAM diagnostics returned back fine.

Thank you
 

Attachments

Re: Windows 10 BSOD

Bugcheck on the lone new dump - 0x50 - invalid memory referenced. No 3rd party drivers named.

Let's see what Driver Verifier does.

Code: 
Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp1_SysnativeFileCollectionApp.zip\011816-4718-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 8 Kernel Version 10586 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10586.63.amd64fre.th2_release.160104-1513
Machine Name:
Kernel base = 0xfffff803`36000000 PsLoadedModuleList = 0xfffff803`362dec70
Debug session time: Mon Jan 18 03:14:26.500 2016 (UTC - 5:00)
System Uptime: 1 days 15:43:23.146
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff900c0580f38, 0, fffff9617d2daefc, 2}

*** WARNING: Unable to verify timestamp for win32kfull.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kfull.sys
*** WARNING: Unable to verify timestamp for win32kbase.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kbase.sys

Could not read faulting driver name
Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
Probably caused by : win32kfull.sys ( win32kfull+daefc )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff900c0580f38, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff9617d2daefc, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 fffff900c0580f38 

FAULTING_IP: 
win32kfull+daefc
fffff961`7d2daefc 8b8238080080    mov     eax,dword ptr [rdx-7FFFF7C8h]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  LockAppHost.ex

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

TRAP_FRAME:  ffffd00025b987c0 -- (.trap 0xffffd00025b987c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff9617d693f78 rbx=0000000000000000 rcx=fffff901406b07c0
rdx=fffff90140580700 rsi=0000000000000000 rdi=0000000000000000
rip=fffff9617d2daefc rsp=ffffd00025b98950 rbp=0000000000000000
 r8=0000000000000000  r9=ffffe001e8848430 r10=000000000000c044
r11=ffffd00025b98a00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
win32kfull+0xdaefc:
fffff961`7d2daefc 8b8238080080    mov     eax,dword ptr [rdx-7FFFF7C8h] ds:fffff900`c0580f38=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80336162285 to fffff80336142770

STACK_TEXT:  
ffffd000`25b98558 fffff803`36162285 : 00000000`00000050 fffff900`c0580f38 00000000`00000000 ffffd000`25b987c0 : nt!KeBugCheckEx
ffffd000`25b98560 fffff803`3603917c : 00000000`00000000 00000000`00000000 ffffd000`25b987c0 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x11185
ffffd000`25b98650 fffff803`3614b9bc : fffff6fc`b0be92a0 ffff1e52`d683aafa 00000000`00000000 fffff901`406b0828 : nt!MmAccessFault+0x62c
ffffd000`25b987c0 fffff961`7d2daefc : 00000000`00000014 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 : nt!KiPageFault+0x13c
ffffd000`25b98950 00000000`00000014 : 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 : win32kfull+0xdaefc
ffffd000`25b98958 00007ff9`80acac00 : ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 : 0x14
ffffd000`25b98960 ffffe001`ea87e840 : fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 : 0x00007ff9`80acac00
ffffd000`25b98968 fffff961`7d5a17f1 : ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 : 0xffffe001`ea87e840
ffffd000`25b98970 ffffd000`25b98b00 : fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 00000000`00000010 : win32kbase+0x117f1
ffffd000`25b98978 fffff961`7d254d45 : 00000000`00000010 fffff961`7d254cc8 00000000`00000010 00000000`00010246 : 0xffffd000`25b98b00
ffffd000`25b98980 00000000`00000010 : fffff961`7d254cc8 00000000`00000010 00000000`00010246 00000000`00000001 : win32kfull+0x54d45
ffffd000`25b98988 fffff961`7d254cc8 : 00000000`00000010 00000000`00010246 00000000`00000001 00000000`001308aa : 0x10
ffffd000`25b98990 00000000`00000010 : 00000000`00010246 00000000`00000001 00000000`001308aa 00000000`00000000 : win32kfull+0x54cc8
ffffd000`25b98998 00000000`00010246 : 00000000`00000001 00000000`001308aa 00000000`00000000 fffff961`7d2da624 : 0x10
ffffd000`25b989a0 00000000`00000001 : 00000000`001308aa 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 : 0x10246
ffffd000`25b989a8 00000000`001308aa : 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 : 0x1
ffffd000`25b989b0 00000000`00000000 : fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 fffff901`406c1640 : 0x1308aa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32kfull+daefc
fffff961`7d2daefc 8b8238080080    mov     eax,dword ptr [rdx-7FFFF7C8h]

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  win32kfull+daefc

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32kfull

IMAGE_NAME:  win32kfull.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  AV_win32kfull+daefc

BUCKET_ID:  AV_win32kfull+daefc

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:av_win32kfull+daefc

FAILURE_ID_HASH:  {f8187f2b-5af9-ccf9-bf6c-844e8fa2f351}

Followup: MachineOwner
---------

rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000050
rdx=fffff900c0580f38 rsi=ffffd00025b98748 rdi=0000000000000000
rip=fffff80336142770 rsp=ffffd00025b98558 rbp=ffffd00025b985c0
 r8=0000000000000000  r9=ffffd00025b987c0 r10=0000070000000000
r11=0000000000000000 r12=fffff900c0580f38 r13=fffff900c0580f38
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff803`36142770 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`25b98560=0000000000000050
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`25b98558 fffff803`36162285 : 00000000`00000050 fffff900`c0580f38 00000000`00000000 ffffd000`25b987c0 : nt!KeBugCheckEx
ffffd000`25b98560 fffff803`3603917c : 00000000`00000000 00000000`00000000 ffffd000`25b987c0 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x11185
ffffd000`25b98650 fffff803`3614b9bc : fffff6fc`b0be92a0 ffff1e52`d683aafa 00000000`00000000 fffff901`406b0828 : nt!MmAccessFault+0x62c
ffffd000`25b987c0 fffff961`7d2daefc : 00000000`00000014 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 : nt!KiPageFault+0x13c (TrapFrame @ ffffd000`25b987c0)
ffffd000`25b98950 00000000`00000014 : 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 : win32kfull+0xdaefc
ffffd000`25b98958 00007ff9`80acac00 : ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 : 0x14
ffffd000`25b98960 ffffe001`ea87e840 : fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 : 0x00007ff9`80acac00
ffffd000`25b98968 fffff961`7d5a17f1 : ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 : 0xffffe001`ea87e840
ffffd000`25b98970 ffffd000`25b98b00 : fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 00000000`00000010 : win32kbase+0x117f1
ffffd000`25b98978 fffff961`7d254d45 : 00000000`00000010 fffff961`7d254cc8 00000000`00000010 00000000`00010246 : 0xffffd000`25b98b00
ffffd000`25b98980 00000000`00000010 : fffff961`7d254cc8 00000000`00000010 00000000`00010246 00000000`00000001 : win32kfull+0x54d45
ffffd000`25b98988 fffff961`7d254cc8 : 00000000`00000010 00000000`00010246 00000000`00000001 00000000`001308aa : 0x10
ffffd000`25b98990 00000000`00000010 : 00000000`00010246 00000000`00000001 00000000`001308aa 00000000`00000000 : win32kfull+0x54cc8
ffffd000`25b98998 00000000`00010246 : 00000000`00000001 00000000`001308aa 00000000`00000000 fffff961`7d2da624 : 0x10
ffffd000`25b989a0 00000000`00000001 : 00000000`001308aa 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 : 0x10246
ffffd000`25b989a8 00000000`001308aa : 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 : 0x1
ffffd000`25b989b0 00000000`00000000 : fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 fffff901`406c1640 : 0x1308aa
start             end                 module name
ffffe001`e7257000 ffffe001`e725f000   em015_64 em015_64.dat Thu Aug 06 05:05:59 2015 (55C32377)
ffffe001`e728a000 ffffe001`e72c7000   em006_64 em006_64.dat Wed Dec 16 08:27:36 2015 (567166C8)
ffffe001`e735d000 ffffe001`e73c8000   em018_64 em018_64.dat Tue Dec 15 10:42:33 2015 (567034E9)
fffff800`9f200000 fffff800`9f225000   tm       tm.sys       Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f230000 fffff800`9f247000   PSHED    PSHED.dll    Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`9f250000 fffff800`9f25b000   BOOTVID  BOOTVID.dll  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`9f260000 fffff800`9f26e000   cmimcext cmimcext.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f270000 fffff800`9f27c000   ntosext  ntosext.sys  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`9f280000 fffff800`9f319000   CI       CI.dll       Thu Oct 29 22:35:19 2015 (5632D767)
fffff800`9f320000 fffff800`9f37c000   msrpc    msrpc.sys    Thu Oct 29 22:34:46 2015 (5632D746)
fffff800`9f380000 fffff800`9f3e2000   FLTMGR   FLTMGR.SYS   Thu Oct 29 22:09:58 2015 (5632D176)
fffff800`9f3f0000 fffff800`9f415000   ksecdd   ksecdd.sys   Thu Oct 29 22:38:43 2015 (5632D833)
fffff800`9f420000 fffff800`9f4c5000   clipsp   clipsp.sys   Thu Oct 29 22:37:15 2015 (5632D7DB)
fffff800`9f4d0000 fffff800`9f595000   Wdf01000 Wdf01000.sys Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`9f5a0000 fffff800`9f5b3000   WDFLDR   WDFLDR.SYS   Thu Oct 29 22:09:44 2015 (5632D168)
fffff800`9f5c0000 fffff800`9f5e3000   acpiex   acpiex.sys   Thu Oct 29 22:39:16 2015 (5632D854)
fffff800`9f5f0000 fffff800`9f5fd000   WppRecorder WppRecorder.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f600000 fffff800`9f698000   cng      cng.sys      Sun Nov 22 04:40:56 2015 (56518DA8)
fffff800`9f6a0000 fffff800`9f730000   ACPI     ACPI.sys     Thu Oct 29 22:10:07 2015 (5632D17F)
fffff800`9f730000 fffff800`9f73c000   WMILIB   WMILIB.SYS   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f740000 fffff800`9f75f000   WindowsTrustedRT WindowsTrustedRT.sys Thu Oct 29 22:38:30 2015 (5632D826)
fffff800`9f760000 fffff800`9f76b000   WindowsTrustedRTProxy WindowsTrustedRTProxy.sys Thu Oct 29 22:38:29 2015 (5632D825)
fffff800`9f770000 fffff800`9f782000   pcw      pcw.sys      Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f790000 fffff800`9f79b000   msisadrv msisadrv.sys Thu Oct 29 22:41:55 2015 (5632D8F3)
fffff800`9f7a0000 fffff800`9f7f6000   pci      pci.sys      Thu Oct 29 22:29:30 2015 (5632D60A)
fffff800`9f800000 fffff800`9f812000   vdrvroot vdrvroot.sys Thu Oct 29 22:39:01 2015 (5632D845)
fffff800`9f820000 fffff800`9f83e000   pdc      pdc.sys      Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`9f840000 fffff800`9f859000   CEA      CEA.sys      Thu Oct 29 22:42:10 2015 (5632D902)
fffff800`9f860000 fffff800`9f882000   partmgr  partmgr.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`9f890000 fffff800`9f916000   spaceport spaceport.sys Thu Oct 29 22:34:45 2015 (5632D745)
fffff800`9f920000 fffff800`9f938000   volmgr   volmgr.sys   Thu Oct 29 22:09:49 2015 (5632D16D)
fffff800`9f940000 fffff800`9f99e000   volmgrx  volmgrx.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`9f9a0000 fffff800`9f9bd000   mountmgr mountmgr.sys Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`9f9c0000 fffff800`9f9e5000   storahci storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`9f9f0000 fffff800`9fa68000   storport storport.sys Thu Oct 29 22:34:05 2015 (5632D71D)
fffff800`9fa90000 fffff800`9faa9000   fileinfo fileinfo.sys Thu Oct 29 22:37:17 2015 (5632D7DD)
fffff800`9fab0000 fffff800`9fae8000   Wof      Wof.sys      Thu Oct 29 22:38:16 2015 (5632D818)
fffff800`9faf0000 fffff800`9fd08000   NTFS     NTFS.sys     Tue Dec 01 00:46:27 2015 (565D3433)
fffff800`9fd10000 fffff800`9fd1d000   Fs_Rec   Fs_Rec.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9fd20000 fffff800`9fe40000   ndis     ndis.sys     Thu Oct 29 22:28:34 2015 (5632D5D2)
fffff800`9fe40000 fffff800`9feb8000   NETIO    NETIO.SYS    Thu Oct 29 22:33:57 2015 (5632D715)
fffff800`9fee0000 fffff800`9ff6e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Oct 29 22:42:26 2015 (5632D912)
fffff800`9ff70000 fffff800`9ff80000   werkernel werkernel.sys Thu Oct 29 22:42:19 2015 (5632D90B)
fffff800`9ff80000 fffff800`9ffe5000   CLFS     CLFS.SYS     Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`a0000000 fffff800`a0257000   tcpip    tcpip.sys    Thu Oct 29 22:26:39 2015 (5632D55F)
fffff800`a0260000 fffff800`a02c7000   fwpkclnt fwpkclnt.sys Thu Oct 29 22:10:03 2015 (5632D17B)
fffff800`a02d0000 fffff800`a02fa000   wfplwfs  wfplwfs.sys  Thu Oct 29 22:36:36 2015 (5632D7B4)
fffff800`a0300000 fffff800`a03a1000   fvevol   fvevol.sys   Thu Oct 29 22:31:17 2015 (5632D675)
fffff800`a03b0000 fffff800`a0419000   volsnap  volsnap.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a0420000 fffff800`a0464000   rdyboost rdyboost.sys Thu Oct 29 22:35:23 2015 (5632D76B)
fffff800`a0470000 fffff800`a0495000   mup      mup.sys      Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`a04b0000 fffff800`a04cf000   disk     disk.sys     Thu Oct 29 22:09:50 2015 (5632D16E)
fffff800`a04d0000 fffff800`a0530000   CLASSPNP CLASSPNP.SYS Thu Oct 29 22:09:57 2015 (5632D175)
fffff800`a0550000 fffff800`a0569000   crashdmp crashdmp.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a0570000 fffff800`a061f000   srv2     srv2.sys     Thu Oct 29 22:30:24 2015 (5632D640)
fffff800`a0630000 fffff800`a0661000   cdrom    cdrom.sys    Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`a0670000 fffff800`a068d000   filecrypt filecrypt.sys Thu Oct 29 22:37:49 2015 (5632D7FD)
fffff800`a0690000 fffff800`a069c000   tbs      tbs.sys      Thu Oct 29 22:41:53 2015 (5632D8F1)
fffff800`a06a0000 fffff800`a0771000   eamonm   eamonm.sys   Mon Sep 07 08:27:49 2015 (55ED82C5)
fffff800`a0780000 fffff800`a078a000   Null     Null.SYS     unavailable (00000000)
fffff800`a0790000 fffff800`a079a000   Beep     Beep.SYS     Thu Oct 29 22:41:57 2015 (5632D8F5)
fffff800`a07a0000 fffff800`a07d0000   ehdrv    ehdrv.sys    Fri Jul 17 07:29:16 2015 (55A8E70C)
fffff800`a07d0000 fffff800`a07e4000   BasicDisplay BasicDisplay.sys Thu Oct 29 22:40:28 2015 (5632D89C)
fffff800`a07f0000 fffff800`a0805000   watchdog watchdog.sys Thu Oct 29 22:39:37 2015 (5632D869)
fffff800`a0810000 fffff800`a09fd000   dxgkrnl  dxgkrnl.sys  Thu Oct 29 22:13:53 2015 (5632D261)
fffff800`a0a00000 fffff800`a0a12000   BasicRender BasicRender.sys Thu Oct 29 22:41:40 2015 (5632D8E4)
fffff800`a0a20000 fffff800`a0a39000   Npfs     Npfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0a40000 fffff800`a0a4f000   Msfs     Msfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0a50000 fffff800`a0a73000   tdx      tdx.sys      Thu Nov 05 04:56:13 2015 (563B27BD)
fffff800`a0a80000 fffff800`a0a8f000   TDI      TDI.SYS      Thu Oct 29 22:41:51 2015 (5632D8EF)
fffff800`a0a90000 fffff800`a0adb000   netbt    netbt.sys    Thu Oct 29 22:35:40 2015 (5632D77C)
fffff800`a0ae0000 fffff800`a0b1a000   mrxsmb20 mrxsmb20.sys Thu Oct 29 22:27:25 2015 (5632D58D)
fffff800`a0b20000 fffff800`a0b4a000   epfwwfpr epfwwfpr.sys Fri Jul 17 07:30:23 2015 (55A8E74F)
fffff800`a0b60000 fffff800`a0b8e000   ksecpkg  ksecpkg.sys  Sun Nov 22 04:50:35 2015 (56518FEB)
fffff800`a0b90000 fffff800`a0bd1000   srvnet   srvnet.sys   Thu Oct 29 22:29:28 2015 (5632D608)
fffff800`a0be0000 fffff800`a0bf4000   mmcss    mmcss.sys    Thu Oct 29 22:38:57 2015 (5632D841)
fffff800`a0e00000 fffff800`a0e12000   netbios  netbios.sys  Thu Oct 29 22:37:46 2015 (5632D7FA)
fffff800`a0e20000 fffff800`a0e91000   rdbss    rdbss.sys    Thu Oct 29 22:25:43 2015 (5632D527)
fffff800`a0ea0000 fffff800`a0f2e000   csc      csc.sys      Thu Oct 29 22:25:37 2015 (5632D521)
fffff800`a0f30000 fffff800`a0f40000   nsiproxy nsiproxy.sys Thu Oct 29 22:38:00 2015 (5632D808)
fffff800`a0f40000 fffff800`a0f4d000   npsvctrig npsvctrig.sys Thu Oct 29 22:40:23 2015 (5632D897)
fffff800`a0f50000 fffff800`a0f60000   mssmbios mssmbios.sys Thu Oct 29 22:38:07 2015 (5632D80F)
fffff800`a0f60000 fffff800`a0f6a000   gpuenergydrv gpuenergydrv.sys Thu Oct 29 22:39:54 2015 (5632D87A)
fffff800`a0f70000 fffff800`a0f9a000   dfsc     dfsc.sys     Thu Oct 29 22:25:22 2015 (5632D512)
fffff800`a0fa0000 fffff800`a0faa000   mbam     mbam.sys     Tue Aug 11 13:35:19 2015 (55CA3257)
fffff800`a0fc0000 fffff800`a0ffc000   ahcache  ahcache.sys  Thu Oct 29 22:09:45 2015 (5632D169)
fffff800`a1000000 fffff800`a1011000   CompositeBus CompositeBus.sys Thu Oct 29 22:41:36 2015 (5632D8E0)
fffff800`a1020000 fffff800`a102d000   kdnic    kdnic.sys    Thu Oct 29 22:41:45 2015 (5632D8E9)
fffff800`a1030000 fffff800`a1045000   umbus    umbus.sys    Thu Oct 29 22:37:25 2015 (5632D7E5)
fffff800`a1050000 fffff800`a1161000   HTTP     HTTP.sys     Thu Oct 29 22:29:26 2015 (5632D606)
fffff800`a1170000 fffff800`a1186000   lltdio   lltdio.sys   Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`a1190000 fffff800`a11aa000   rspndr   rspndr.sys   Thu Oct 29 22:39:46 2015 (5632D872)
fffff800`a11c0000 fffff800`a1252000   dxgmms2  dxgmms2.sys  Thu Oct 29 22:13:10 2015 (5632D236)
fffff800`a1260000 fffff800`a1272000   mouclass mouclass.sys Thu Oct 29 22:37:57 2015 (5632D805)
fffff800`a1280000 fffff800`a1290000   monitor  monitor.sys  Thu Oct 29 22:40:35 2015 (5632D8A3)
fffff800`a12a0000 fffff800`a12af000   dump_diskdump dump_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a12e0000 fffff800`a1305000   dump_storahci dump_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a1330000 fffff800`a134c000   dump_dumpfve dump_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff800`a1350000 fffff800`a1376000   luafv    luafv.sys    Thu Oct 29 22:34:43 2015 (5632D743)
fffff800`a1380000 fffff800`a13a3000   bowser   bowser.sys   Thu Oct 29 22:40:29 2015 (5632D89D)
fffff800`a13c0000 fffff800`a13d9000   storqosflt storqosflt.sys Thu Oct 29 22:37:39 2015 (5632D7F3)
fffff800`a13e0000 fffff800`a13fd000   WudfPf   WudfPf.sys   Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a1400000 fffff800`a143b000   WUDFRd   WUDFRd.sys   Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a1440000 fffff800`a144e000   WpdUpFltr WpdUpFltr.sys Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`a1450000 fffff800`a146a000   mslldp   mslldp.sys   Thu Oct 29 22:37:12 2015 (5632D7D8)
fffff800`a1470000 fffff800`a14e2000   mrxsmb   mrxsmb.sys   Thu Oct 29 22:26:42 2015 (5632D562)
fffff800`a14f0000 fffff800`a1509000   mpsdrv   mpsdrv.sys   Thu Oct 29 22:37:43 2015 (5632D7F7)
fffff800`a1510000 fffff800`a15a2000   afd      afd.sys      Thu Nov 05 04:28:03 2015 (563B2123)
fffff800`a15b0000 fffff800`a15c9000   vwififlt vwififlt.sys Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a15d0000 fffff800`a15fb000   pacer    pacer.sys    Thu Oct 29 22:36:02 2015 (5632D792)
fffff800`a2200000 fffff800`a2221000   drmk     drmk.sys     Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a2230000 fffff800`a2298000   ks       ks.sys       Thu Oct 29 22:33:56 2015 (5632D714)
fffff800`a22a0000 fffff800`a2a46000   igdkmd64 igdkmd64.sys Wed Nov 18 14:28:29 2015 (564CD15D)
fffff800`a2a50000 fffff800`a2ab1000   USBXHCI  USBXHCI.SYS  Thu Oct 29 22:32:00 2015 (5632D6A0)
fffff800`a2ac0000 fffff800`a2af8000   ucx01000 ucx01000.sys Thu Oct 29 22:34:40 2015 (5632D740)
fffff800`a2b00000 fffff800`a2b30000   TeeDriverW8x64 TeeDriverW8x64.sys Tue Jul 07 13:43:32 2015 (559C0FC4)
fffff800`a2b30000 fffff800`a2b4c000   usbehci  usbehci.sys  Thu Oct 29 22:27:04 2015 (5632D578)
fffff800`a2b50000 fffff800`a2bc5000   USBPORT  USBPORT.SYS  Thu Oct 29 22:27:18 2015 (5632D586)
fffff800`a2bd0000 fffff800`a2c64000   rt640x64 rt640x64.sys Wed Oct 07 11:03:55 2015 (5615345B)
fffff800`a2c70000 fffff800`a2c8b000   serial   serial.sys   Thu Oct 29 22:38:49 2015 (5632D839)
fffff800`a2c90000 fffff800`a2c9f000   serenum  serenum.sys  Thu Oct 29 22:42:13 2015 (5632D905)
fffff800`a2ca0000 fffff800`a2cbe000   parport  parport.sys  Thu Oct 29 22:38:05 2015 (5632D80D)
fffff800`a2cc0000 fffff800`a2ceb000   intelppm intelppm.sys Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a2cf0000 fffff800`a2d00000   XtuAcpiDriver XtuAcpiDriver.sys Thu Feb 26 07:51:57 2015 (54EF16ED)
fffff800`a2d00000 fffff800`a2d0d000   NdisVirtualBus NdisVirtualBus.sys Thu Oct 29 22:38:26 2015 (5632D822)
fffff800`a2d10000 fffff800`a2d1c000   swenum   swenum.sys   Thu Oct 29 22:42:20 2015 (5632D90C)
fffff800`a2d20000 fffff800`a2d2e000   rdpbus   rdpbus.sys   Thu Oct 29 22:10:15 2015 (5632D187)
fffff800`a2d30000 fffff800`a2db0000   usbhub   usbhub.sys   Thu Oct 29 22:30:56 2015 (5632D660)
fffff800`a2db0000 fffff800`a2dbe000   USBD     USBD.SYS     Thu Oct 29 22:41:54 2015 (5632D8F2)
fffff800`a2dc0000 fffff800`a2df4000   nvhda64v nvhda64v.sys Thu Apr 16 15:03:16 2015 (55300774)
fffff800`a2e00000 fffff800`a2e0e000   ksthunk  ksthunk.sys  Thu Oct 29 22:42:01 2015 (5632D8F9)
fffff800`a2e10000 fffff800`a2e84000   IntcDAud IntcDAud.sys Fri Jul 10 07:58:41 2015 (559FB371)
fffff800`a2e90000 fffff800`a2f17000   UsbHub3  UsbHub3.sys  Thu Oct 29 22:30:55 2015 (5632D65F)
fffff800`a2f20000 fffff800`a2f88000   HdAudio  HdAudio.sys  Thu Oct 29 22:34:23 2015 (5632D72F)
fffff800`a2f90000 fffff800`a2fa8000   uaspstor uaspstor.sys Thu Oct 29 22:41:41 2015 (5632D8E5)
fffff800`a2fb0000 fffff800`a2fc1000   HIDPARSE HIDPARSE.SYS Thu Oct 29 22:40:39 2015 (5632D8A7)
fffff800`a2fd0000 fffff800`a2ffb000   usbccgp  usbccgp.sys  Thu Oct 29 22:39:08 2015 (5632D84C)
fffff800`a3000000 fffff800`a3011000   hidusb   hidusb.sys   Thu Oct 29 22:41:44 2015 (5632D8E8)
fffff800`a3020000 fffff800`a304e000   HIDCLASS HIDCLASS.SYS Thu Oct 29 22:36:25 2015 (5632D7A9)
fffff800`a3050000 fffff800`a3060000   kbdhid   kbdhid.sys   Thu Oct 29 22:39:42 2015 (5632D86E)
fffff800`a3060000 fffff800`a3073000   kbdclass kbdclass.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a3080000 fffff800`a3b68000   nvlddmkm nvlddmkm.sys Thu Aug 06 19:16:04 2015 (55C3EAB4)
fffff800`a3b70000 fffff800`a3b8a000   HDAudBus HDAudBus.sys Thu Oct 29 22:37:21 2015 (5632D7E1)
fffff800`a3b90000 fffff800`a3be8000   portcls  portcls.sys  Thu Oct 29 22:33:27 2015 (5632D6F7)
fffff800`a3bf0000 fffff800`a3bff000   mouhid   mouhid.sys   Thu Oct 29 22:39:03 2015 (5632D847)
fffff800`a3c00000 fffff800`a3c8c000   srv      srv.sys      Thu Oct 29 22:30:28 2015 (5632D644)
fffff800`a3c90000 fffff800`a3ca4000   tcpipreg tcpipreg.sys Thu Oct 29 22:38:09 2015 (5632D811)
fffff800`a3cb0000 fffff800`a3cdf000   tunnel   tunnel.sys   Thu Oct 29 22:36:11 2015 (5632D79B)
fffff800`a3ce0000 fffff800`a3cf1000   condrv   condrv.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a3e40000 fffff800`a3e64000   USBSTOR  USBSTOR.SYS  Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a3e90000 fffff800`a3ee6000   fastfat  fastfat.SYS  Thu Oct 29 22:33:32 2015 (5632D6FC)
fffff800`a3fc0000 fffff800`a3ff3000   MBAMSwissArmy MBAMSwissArmy.sys Wed Jul 29 00:26:01 2015 (55B855D9)
fffff800`a4000000 fffff800`a4013000   mwac     mwac.sys     Tue Jun 17 22:07:00 2014 (53A0F444)
fffff800`a4020000 fffff800`a402f000   hiber_diskdump hiber_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a4030000 fffff800`a4055000   hiber_storahci hiber_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a4060000 fffff800`a40ae000   mrxsmb10 mrxsmb10.sys Thu Oct 29 22:27:22 2015 (5632D58A)
fffff800`a40b0000 fffff800`a40d6000   Ndu      Ndu.sys      Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a40e0000 fffff800`a41a0000   peauth   peauth.sys   Thu Oct 29 22:32:55 2015 (5632D6D7)
fffff800`a41a0000 fffff800`a41bc000   hiber_dumpfve hiber_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff803`34228000 fffff803`34233000   kd       kd.dll       Thu Oct 29 22:43:04 2015 (5632D938)
fffff803`36000000 fffff803`367cc000   nt       ntkrnlmp.exe Mon Jan 04 20:28:56 2016 (568B1C58)
fffff803`367cc000 fffff803`3683f000   hal      hal.dll      Thu Oct 29 22:10:02 2015 (5632D17A)
fffff961`7d200000 fffff961`7d582000   win32kfull win32kfull.sys unavailable (00000000)
fffff961`7d590000 fffff961`7d6f2000   win32kbase win32kbase.sys unavailable (00000000)
fffff961`7d710000 fffff961`7d71a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff961`7d720000 fffff961`7d75c000   cdd      cdd.dll      unavailable (00000000)
fffff961`7deb0000 fffff961`7ded3000   win32k   win32k.sys   unavailable (00000000)

Unloaded modules:
fffff800`a3e20000 fffff800`a3e33000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3de0000 fffff800`a3e13000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3f60000 fffff800`a3f6f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f70000 fffff800`a3f95000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3fa0000 fffff800`a3fbc000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3f50000 fffff800`a3f5b000   umpass.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff800`a3ef0000 fffff800`a3eff000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f00000 fffff800`a3f25000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3f30000 fffff800`a3f4c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3e70000 fffff800`a3e8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3d00000 fffff800`a3d13000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3d80000 fffff800`a3db3000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3dd0000 fffff800`a3dd7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3dc0000 fffff800`a3dc7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3d20000 fffff800`a3d2f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3d30000 fffff800`a3d55000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3d60000 fffff800`a3d7c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a1380000 fffff800`a13bb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003B000
fffff800`a0580000 fffff800`a058f000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a05c0000 fffff800`a05e5000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a0610000 fffff800`a062c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`9fa70000 fffff800`9fa8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a0fa0000 fffff800`a0fb3000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a04a0000 fffff800`a04ae000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
start             end                 module name
fffff800`9f6a0000 fffff800`9f730000   ACPI     ACPI.sys     Thu Oct 29 22:10:07 2015 (5632D17F)
fffff800`9f5c0000 fffff800`9f5e3000   acpiex   acpiex.sys   Thu Oct 29 22:39:16 2015 (5632D854)
fffff800`a1510000 fffff800`a15a2000   afd      afd.sys      Thu Nov 05 04:28:03 2015 (563B2123)
fffff800`a0fc0000 fffff800`a0ffc000   ahcache  ahcache.sys  Thu Oct 29 22:09:45 2015 (5632D169)
fffff800`a07d0000 fffff800`a07e4000   BasicDisplay BasicDisplay.sys Thu Oct 29 22:40:28 2015 (5632D89C)
fffff800`a0a00000 fffff800`a0a12000   BasicRender BasicRender.sys Thu Oct 29 22:41:40 2015 (5632D8E4)
fffff800`a0790000 fffff800`a079a000   Beep     Beep.SYS     Thu Oct 29 22:41:57 2015 (5632D8F5)
fffff800`9f250000 fffff800`9f25b000   BOOTVID  BOOTVID.dll  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`a1380000 fffff800`a13a3000   bowser   bowser.sys   Thu Oct 29 22:40:29 2015 (5632D89D)
fffff961`7d720000 fffff961`7d75c000   cdd      cdd.dll      unavailable (00000000)
fffff800`a0630000 fffff800`a0661000   cdrom    cdrom.sys    Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`9f840000 fffff800`9f859000   CEA      CEA.sys      Thu Oct 29 22:42:10 2015 (5632D902)
fffff800`9f280000 fffff800`9f319000   CI       CI.dll       Thu Oct 29 22:35:19 2015 (5632D767)
fffff800`a04d0000 fffff800`a0530000   CLASSPNP CLASSPNP.SYS Thu Oct 29 22:09:57 2015 (5632D175)
fffff800`9ff80000 fffff800`9ffe5000   CLFS     CLFS.SYS     Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`9f420000 fffff800`9f4c5000   clipsp   clipsp.sys   Thu Oct 29 22:37:15 2015 (5632D7DB)
fffff800`9f260000 fffff800`9f26e000   cmimcext cmimcext.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f600000 fffff800`9f698000   cng      cng.sys      Sun Nov 22 04:40:56 2015 (56518DA8)
fffff800`a1000000 fffff800`a1011000   CompositeBus CompositeBus.sys Thu Oct 29 22:41:36 2015 (5632D8E0)
fffff800`a3ce0000 fffff800`a3cf1000   condrv   condrv.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0550000 fffff800`a0569000   crashdmp crashdmp.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a0ea0000 fffff800`a0f2e000   csc      csc.sys      Thu Oct 29 22:25:37 2015 (5632D521)
fffff800`a0f70000 fffff800`a0f9a000   dfsc     dfsc.sys     Thu Oct 29 22:25:22 2015 (5632D512)
fffff800`a04b0000 fffff800`a04cf000   disk     disk.sys     Thu Oct 29 22:09:50 2015 (5632D16E)
fffff800`a2200000 fffff800`a2221000   drmk     drmk.sys     Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a12a0000 fffff800`a12af000   dump_diskdump dump_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a1330000 fffff800`a134c000   dump_dumpfve dump_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff800`a12e0000 fffff800`a1305000   dump_storahci dump_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a0810000 fffff800`a09fd000   dxgkrnl  dxgkrnl.sys  Thu Oct 29 22:13:53 2015 (5632D261)
fffff800`a11c0000 fffff800`a1252000   dxgmms2  dxgmms2.sys  Thu Oct 29 22:13:10 2015 (5632D236)
fffff800`a06a0000 fffff800`a0771000   eamonm   eamonm.sys   Mon Sep 07 08:27:49 2015 (55ED82C5)
fffff800`a07a0000 fffff800`a07d0000   ehdrv    ehdrv.sys    Fri Jul 17 07:29:16 2015 (55A8E70C)
ffffe001`e728a000 ffffe001`e72c7000   em006_64 em006_64.dat Wed Dec 16 08:27:36 2015 (567166C8)
ffffe001`e7257000 ffffe001`e725f000   em015_64 em015_64.dat Thu Aug 06 05:05:59 2015 (55C32377)
ffffe001`e735d000 ffffe001`e73c8000   em018_64 em018_64.dat Tue Dec 15 10:42:33 2015 (567034E9)
fffff800`a0b20000 fffff800`a0b4a000   epfwwfpr epfwwfpr.sys Fri Jul 17 07:30:23 2015 (55A8E74F)
fffff800`a3e90000 fffff800`a3ee6000   fastfat  fastfat.SYS  Thu Oct 29 22:33:32 2015 (5632D6FC)
fffff800`a0670000 fffff800`a068d000   filecrypt filecrypt.sys Thu Oct 29 22:37:49 2015 (5632D7FD)
fffff800`9fa90000 fffff800`9faa9000   fileinfo fileinfo.sys Thu Oct 29 22:37:17 2015 (5632D7DD)
fffff800`9f380000 fffff800`9f3e2000   FLTMGR   FLTMGR.SYS   Thu Oct 29 22:09:58 2015 (5632D176)
fffff800`9fd10000 fffff800`9fd1d000   Fs_Rec   Fs_Rec.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0300000 fffff800`a03a1000   fvevol   fvevol.sys   Thu Oct 29 22:31:17 2015 (5632D675)
fffff800`a0260000 fffff800`a02c7000   fwpkclnt fwpkclnt.sys Thu Oct 29 22:10:03 2015 (5632D17B)
fffff800`a0f60000 fffff800`a0f6a000   gpuenergydrv gpuenergydrv.sys Thu Oct 29 22:39:54 2015 (5632D87A)
fffff803`367cc000 fffff803`3683f000   hal      hal.dll      Thu Oct 29 22:10:02 2015 (5632D17A)
fffff800`a3b70000 fffff800`a3b8a000   HDAudBus HDAudBus.sys Thu Oct 29 22:37:21 2015 (5632D7E1)
fffff800`a2f20000 fffff800`a2f88000   HdAudio  HdAudio.sys  Thu Oct 29 22:34:23 2015 (5632D72F)
fffff800`a4020000 fffff800`a402f000   hiber_diskdump hiber_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a41a0000 fffff800`a41bc000   hiber_dumpfve hiber_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff800`a4030000 fffff800`a4055000   hiber_storahci hiber_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a3020000 fffff800`a304e000   HIDCLASS HIDCLASS.SYS Thu Oct 29 22:36:25 2015 (5632D7A9)
fffff800`a2fb0000 fffff800`a2fc1000   HIDPARSE HIDPARSE.SYS Thu Oct 29 22:40:39 2015 (5632D8A7)
fffff800`a3000000 fffff800`a3011000   hidusb   hidusb.sys   Thu Oct 29 22:41:44 2015 (5632D8E8)
fffff800`a1050000 fffff800`a1161000   HTTP     HTTP.sys     Thu Oct 29 22:29:26 2015 (5632D606)
fffff800`a22a0000 fffff800`a2a46000   igdkmd64 igdkmd64.sys Wed Nov 18 14:28:29 2015 (564CD15D)
fffff800`a2e10000 fffff800`a2e84000   IntcDAud IntcDAud.sys Fri Jul 10 07:58:41 2015 (559FB371)
fffff800`a2cc0000 fffff800`a2ceb000   intelppm intelppm.sys Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a3060000 fffff800`a3073000   kbdclass kbdclass.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a3050000 fffff800`a3060000   kbdhid   kbdhid.sys   Thu Oct 29 22:39:42 2015 (5632D86E)
fffff803`34228000 fffff803`34233000   kd       kd.dll       Thu Oct 29 22:43:04 2015 (5632D938)
fffff800`a1020000 fffff800`a102d000   kdnic    kdnic.sys    Thu Oct 29 22:41:45 2015 (5632D8E9)
fffff800`a2230000 fffff800`a2298000   ks       ks.sys       Thu Oct 29 22:33:56 2015 (5632D714)
fffff800`9f3f0000 fffff800`9f415000   ksecdd   ksecdd.sys   Thu Oct 29 22:38:43 2015 (5632D833)
fffff800`a0b60000 fffff800`a0b8e000   ksecpkg  ksecpkg.sys  Sun Nov 22 04:50:35 2015 (56518FEB)
fffff800`a2e00000 fffff800`a2e0e000   ksthunk  ksthunk.sys  Thu Oct 29 22:42:01 2015 (5632D8F9)
fffff800`a1170000 fffff800`a1186000   lltdio   lltdio.sys   Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`a1350000 fffff800`a1376000   luafv    luafv.sys    Thu Oct 29 22:34:43 2015 (5632D743)
fffff800`a0fa0000 fffff800`a0faa000   mbam     mbam.sys     Tue Aug 11 13:35:19 2015 (55CA3257)
fffff800`a3fc0000 fffff800`a3ff3000   MBAMSwissArmy MBAMSwissArmy.sys Wed Jul 29 00:26:01 2015 (55B855D9)
fffff800`9fee0000 fffff800`9ff6e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Oct 29 22:42:26 2015 (5632D912)
fffff800`a0be0000 fffff800`a0bf4000   mmcss    mmcss.sys    Thu Oct 29 22:38:57 2015 (5632D841)
fffff800`a1280000 fffff800`a1290000   monitor  monitor.sys  Thu Oct 29 22:40:35 2015 (5632D8A3)
fffff800`a1260000 fffff800`a1272000   mouclass mouclass.sys Thu Oct 29 22:37:57 2015 (5632D805)
fffff800`a3bf0000 fffff800`a3bff000   mouhid   mouhid.sys   Thu Oct 29 22:39:03 2015 (5632D847)
fffff800`9f9a0000 fffff800`9f9bd000   mountmgr mountmgr.sys Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`a14f0000 fffff800`a1509000   mpsdrv   mpsdrv.sys   Thu Oct 29 22:37:43 2015 (5632D7F7)
fffff800`a1470000 fffff800`a14e2000   mrxsmb   mrxsmb.sys   Thu Oct 29 22:26:42 2015 (5632D562)
fffff800`a4060000 fffff800`a40ae000   mrxsmb10 mrxsmb10.sys Thu Oct 29 22:27:22 2015 (5632D58A)
fffff800`a0ae0000 fffff800`a0b1a000   mrxsmb20 mrxsmb20.sys Thu Oct 29 22:27:25 2015 (5632D58D)
fffff800`a0a40000 fffff800`a0a4f000   Msfs     Msfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f790000 fffff800`9f79b000   msisadrv msisadrv.sys Thu Oct 29 22:41:55 2015 (5632D8F3)
fffff800`a1450000 fffff800`a146a000   mslldp   mslldp.sys   Thu Oct 29 22:37:12 2015 (5632D7D8)
fffff800`9f320000 fffff800`9f37c000   msrpc    msrpc.sys    Thu Oct 29 22:34:46 2015 (5632D746)
fffff800`a0f50000 fffff800`a0f60000   mssmbios mssmbios.sys Thu Oct 29 22:38:07 2015 (5632D80F)
fffff800`a0470000 fffff800`a0495000   mup      mup.sys      Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`a4000000 fffff800`a4013000   mwac     mwac.sys     Tue Jun 17 22:07:00 2014 (53A0F444)
fffff800`9fd20000 fffff800`9fe40000   ndis     ndis.sys     Thu Oct 29 22:28:34 2015 (5632D5D2)
fffff800`a2d00000 fffff800`a2d0d000   NdisVirtualBus NdisVirtualBus.sys Thu Oct 29 22:38:26 2015 (5632D822)
fffff800`a40b0000 fffff800`a40d6000   Ndu      Ndu.sys      Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a0e00000 fffff800`a0e12000   netbios  netbios.sys  Thu Oct 29 22:37:46 2015 (5632D7FA)
fffff800`a0a90000 fffff800`a0adb000   netbt    netbt.sys    Thu Oct 29 22:35:40 2015 (5632D77C)
fffff800`9fe40000 fffff800`9feb8000   NETIO    NETIO.SYS    Thu Oct 29 22:33:57 2015 (5632D715)
fffff800`a0a20000 fffff800`a0a39000   Npfs     Npfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0f40000 fffff800`a0f4d000   npsvctrig npsvctrig.sys Thu Oct 29 22:40:23 2015 (5632D897)
fffff800`a0f30000 fffff800`a0f40000   nsiproxy nsiproxy.sys Thu Oct 29 22:38:00 2015 (5632D808)
fffff803`36000000 fffff803`367cc000   nt       ntkrnlmp.exe Mon Jan 04 20:28:56 2016 (568B1C58)
fffff800`9faf0000 fffff800`9fd08000   NTFS     NTFS.sys     Tue Dec 01 00:46:27 2015 (565D3433)
fffff800`9f270000 fffff800`9f27c000   ntosext  ntosext.sys  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`a0780000 fffff800`a078a000   Null     Null.SYS     unavailable (00000000)
fffff800`a2dc0000 fffff800`a2df4000   nvhda64v nvhda64v.sys Thu Apr 16 15:03:16 2015 (55300774)
fffff800`a3080000 fffff800`a3b68000   nvlddmkm nvlddmkm.sys Thu Aug 06 19:16:04 2015 (55C3EAB4)
fffff800`a15d0000 fffff800`a15fb000   pacer    pacer.sys    Thu Oct 29 22:36:02 2015 (5632D792)
fffff800`a2ca0000 fffff800`a2cbe000   parport  parport.sys  Thu Oct 29 22:38:05 2015 (5632D80D)
fffff800`9f860000 fffff800`9f882000   partmgr  partmgr.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`9f7a0000 fffff800`9f7f6000   pci      pci.sys      Thu Oct 29 22:29:30 2015 (5632D60A)
fffff800`9f770000 fffff800`9f782000   pcw      pcw.sys      Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f820000 fffff800`9f83e000   pdc      pdc.sys      Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a40e0000 fffff800`a41a0000   peauth   peauth.sys   Thu Oct 29 22:32:55 2015 (5632D6D7)
fffff800`a3b90000 fffff800`a3be8000   portcls  portcls.sys  Thu Oct 29 22:33:27 2015 (5632D6F7)
fffff800`9f230000 fffff800`9f247000   PSHED    PSHED.dll    Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`a0e20000 fffff800`a0e91000   rdbss    rdbss.sys    Thu Oct 29 22:25:43 2015 (5632D527)
fffff800`a2d20000 fffff800`a2d2e000   rdpbus   rdpbus.sys   Thu Oct 29 22:10:15 2015 (5632D187)
fffff800`a0420000 fffff800`a0464000   rdyboost rdyboost.sys Thu Oct 29 22:35:23 2015 (5632D76B)
fffff800`a1190000 fffff800`a11aa000   rspndr   rspndr.sys   Thu Oct 29 22:39:46 2015 (5632D872)
fffff800`a2bd0000 fffff800`a2c64000   rt640x64 rt640x64.sys Wed Oct 07 11:03:55 2015 (5615345B)
fffff800`a2c90000 fffff800`a2c9f000   serenum  serenum.sys  Thu Oct 29 22:42:13 2015 (5632D905)
fffff800`a2c70000 fffff800`a2c8b000   serial   serial.sys   Thu Oct 29 22:38:49 2015 (5632D839)
fffff800`9f890000 fffff800`9f916000   spaceport spaceport.sys Thu Oct 29 22:34:45 2015 (5632D745)
fffff800`a3c00000 fffff800`a3c8c000   srv      srv.sys      Thu Oct 29 22:30:28 2015 (5632D644)
fffff800`a0570000 fffff800`a061f000   srv2     srv2.sys     Thu Oct 29 22:30:24 2015 (5632D640)
fffff800`a0b90000 fffff800`a0bd1000   srvnet   srvnet.sys   Thu Oct 29 22:29:28 2015 (5632D608)
fffff800`9f9c0000 fffff800`9f9e5000   storahci storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`9f9f0000 fffff800`9fa68000   storport storport.sys Thu Oct 29 22:34:05 2015 (5632D71D)
fffff800`a13c0000 fffff800`a13d9000   storqosflt storqosflt.sys Thu Oct 29 22:37:39 2015 (5632D7F3)
fffff800`a2d10000 fffff800`a2d1c000   swenum   swenum.sys   Thu Oct 29 22:42:20 2015 (5632D90C)
fffff800`a0690000 fffff800`a069c000   tbs      tbs.sys      Thu Oct 29 22:41:53 2015 (5632D8F1)
fffff800`a0000000 fffff800`a0257000   tcpip    tcpip.sys    Thu Oct 29 22:26:39 2015 (5632D55F)
fffff800`a3c90000 fffff800`a3ca4000   tcpipreg tcpipreg.sys Thu Oct 29 22:38:09 2015 (5632D811)
fffff800`a0a80000 fffff800`a0a8f000   TDI      TDI.SYS      Thu Oct 29 22:41:51 2015 (5632D8EF)
fffff800`a0a50000 fffff800`a0a73000   tdx      tdx.sys      Thu Nov 05 04:56:13 2015 (563B27BD)
fffff800`a2b00000 fffff800`a2b30000   TeeDriverW8x64 TeeDriverW8x64.sys Tue Jul 07 13:43:32 2015 (559C0FC4)
fffff800`9f200000 fffff800`9f225000   tm       tm.sys       Thu Oct 29 22:09:42 2015 (5632D166)
fffff961`7d710000 fffff961`7d71a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff800`a3cb0000 fffff800`a3cdf000   tunnel   tunnel.sys   Thu Oct 29 22:36:11 2015 (5632D79B)
fffff800`a2f90000 fffff800`a2fa8000   uaspstor uaspstor.sys Thu Oct 29 22:41:41 2015 (5632D8E5)
fffff800`a2ac0000 fffff800`a2af8000   ucx01000 ucx01000.sys Thu Oct 29 22:34:40 2015 (5632D740)
fffff800`a1030000 fffff800`a1045000   umbus    umbus.sys    Thu Oct 29 22:37:25 2015 (5632D7E5)
fffff800`a2fd0000 fffff800`a2ffb000   usbccgp  usbccgp.sys  Thu Oct 29 22:39:08 2015 (5632D84C)
fffff800`a2db0000 fffff800`a2dbe000   USBD     USBD.SYS     Thu Oct 29 22:41:54 2015 (5632D8F2)
fffff800`a2b30000 fffff800`a2b4c000   usbehci  usbehci.sys  Thu Oct 29 22:27:04 2015 (5632D578)
fffff800`a2d30000 fffff800`a2db0000   usbhub   usbhub.sys   Thu Oct 29 22:30:56 2015 (5632D660)
fffff800`a2e90000 fffff800`a2f17000   UsbHub3  UsbHub3.sys  Thu Oct 29 22:30:55 2015 (5632D65F)
fffff800`a2b50000 fffff800`a2bc5000   USBPORT  USBPORT.SYS  Thu Oct 29 22:27:18 2015 (5632D586)
fffff800`a3e40000 fffff800`a3e64000   USBSTOR  USBSTOR.SYS  Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a2a50000 fffff800`a2ab1000   USBXHCI  USBXHCI.SYS  Thu Oct 29 22:32:00 2015 (5632D6A0)
fffff800`9f800000 fffff800`9f812000   vdrvroot vdrvroot.sys Thu Oct 29 22:39:01 2015 (5632D845)
fffff800`9f920000 fffff800`9f938000   volmgr   volmgr.sys   Thu Oct 29 22:09:49 2015 (5632D16D)
fffff800`9f940000 fffff800`9f99e000   volmgrx  volmgrx.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a03b0000 fffff800`a0419000   volsnap  volsnap.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a15b0000 fffff800`a15c9000   vwififlt vwififlt.sys Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a07f0000 fffff800`a0805000   watchdog watchdog.sys Thu Oct 29 22:39:37 2015 (5632D869)
fffff800`9f4d0000 fffff800`9f595000   Wdf01000 Wdf01000.sys Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`9f5a0000 fffff800`9f5b3000   WDFLDR   WDFLDR.SYS   Thu Oct 29 22:09:44 2015 (5632D168)
fffff800`9ff70000 fffff800`9ff80000   werkernel werkernel.sys Thu Oct 29 22:42:19 2015 (5632D90B)
fffff800`a02d0000 fffff800`a02fa000   wfplwfs  wfplwfs.sys  Thu Oct 29 22:36:36 2015 (5632D7B4)
fffff961`7deb0000 fffff961`7ded3000   win32k   win32k.sys   unavailable (00000000)
fffff961`7d590000 fffff961`7d6f2000   win32kbase win32kbase.sys unavailable (00000000)
fffff961`7d200000 fffff961`7d582000   win32kfull win32kfull.sys unavailable (00000000)
fffff800`9f740000 fffff800`9f75f000   WindowsTrustedRT WindowsTrustedRT.sys Thu Oct 29 22:38:30 2015 (5632D826)
fffff800`9f760000 fffff800`9f76b000   WindowsTrustedRTProxy WindowsTrustedRTProxy.sys Thu Oct 29 22:38:29 2015 (5632D825)
fffff800`9f730000 fffff800`9f73c000   WMILIB   WMILIB.SYS   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9fab0000 fffff800`9fae8000   Wof      Wof.sys      Thu Oct 29 22:38:16 2015 (5632D818)
fffff800`a1440000 fffff800`a144e000   WpdUpFltr WpdUpFltr.sys Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`9f5f0000 fffff800`9f5fd000   WppRecorder WppRecorder.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a13e0000 fffff800`a13fd000   WudfPf   WudfPf.sys   Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a1400000 fffff800`a143b000   WUDFRd   WUDFRd.sys   Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a2cf0000 fffff800`a2d00000   XtuAcpiDriver XtuAcpiDriver.sys Thu Feb 26 07:51:57 2015 (54EF16ED)

Unloaded modules:
fffff800`a3e20000 fffff800`a3e33000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3de0000 fffff800`a3e13000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3f60000 fffff800`a3f6f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f70000 fffff800`a3f95000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3fa0000 fffff800`a3fbc000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3f50000 fffff800`a3f5b000   umpass.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff800`a3ef0000 fffff800`a3eff000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f00000 fffff800`a3f25000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3f30000 fffff800`a3f4c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3e70000 fffff800`a3e8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3d00000 fffff800`a3d13000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3d80000 fffff800`a3db3000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3dd0000 fffff800`a3dd7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3dc0000 fffff800`a3dc7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3d20000 fffff800`a3d2f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3d30000 fffff800`a3d55000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3d60000 fffff800`a3d7c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a1380000 fffff800`a13bb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003B000
fffff800`a0580000 fffff800`a058f000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a05c0000 fffff800`a05e5000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a0610000 fffff800`a062c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`9fa70000 fffff800`9fa8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a0fa0000 fffff800`a0fb3000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a04a0000 fffff800`a04ae000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
Bugcheck code 00000050
Arguments fffff900`c0580f38 00000000`00000000 fffff961`7d2daefc 00000000`00000002
 
Re: Windows 10 BSOD

Hi Alex ^_^,


Sorry for bumping in JC :)

That's a lot of coincidence for two different pieces of hardware to fail. Alex, any chance your system experienced a power surge? Is your system properly grounded? I haven't seen the reports yet but like JC said, Driver Verifier will help us a lot more.



-Pranav
 
Re: Windows 10 BSOD

The dump file hardly contains anything outside the time of the bugcheck, where driver module files, and symbol files aren't saved in the dump. So you'll not find much.

Very doubtful it's a driver issue.
From what I can see, and what you've said. I would assume your motherboard is failing. Or as Pranav said, a power surge.
Do the drives work on any other computers?
 
Last edited:
Re: Windows 10 BSOD

Thanks everyone for your replies.

jcgriff2 said:
Bugcheck on the lone new dump - 0x50 - invalid memory referenced. No 3rd party drivers named.

Let's see what Driver Verifier does.

Code: 
Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp1_SysnativeFileCollectionApp.zip\011816-4718-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 8 Kernel Version 10586 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10586.63.amd64fre.th2_release.160104-1513
Machine Name:
Kernel base = 0xfffff803`36000000 PsLoadedModuleList = 0xfffff803`362dec70
Debug session time: Mon Jan 18 03:14:26.500 2016 (UTC - 5:00)
System Uptime: 1 days 15:43:23.146
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff900c0580f38, 0, fffff9617d2daefc, 2}

*** WARNING: Unable to verify timestamp for win32kfull.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kfull.sys
*** WARNING: Unable to verify timestamp for win32kbase.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kbase.sys

Could not read faulting driver name
Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
Probably caused by : win32kfull.sys ( win32kfull+daefc )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff900c0580f38, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff9617d2daefc, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 fffff900c0580f38 

FAULTING_IP: 
win32kfull+daefc
fffff961`7d2daefc 8b8238080080    mov     eax,dword ptr [rdx-7FFFF7C8h]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  LockAppHost.ex

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

TRAP_FRAME:  ffffd00025b987c0 -- (.trap 0xffffd00025b987c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff9617d693f78 rbx=0000000000000000 rcx=fffff901406b07c0
rdx=fffff90140580700 rsi=0000000000000000 rdi=0000000000000000
rip=fffff9617d2daefc rsp=ffffd00025b98950 rbp=0000000000000000
 r8=0000000000000000  r9=ffffe001e8848430 r10=000000000000c044
r11=ffffd00025b98a00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
win32kfull+0xdaefc:
fffff961`7d2daefc 8b8238080080    mov     eax,dword ptr [rdx-7FFFF7C8h] ds:fffff900`c0580f38=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80336162285 to fffff80336142770

STACK_TEXT:  
ffffd000`25b98558 fffff803`36162285 : 00000000`00000050 fffff900`c0580f38 00000000`00000000 ffffd000`25b987c0 : nt!KeBugCheckEx
ffffd000`25b98560 fffff803`3603917c : 00000000`00000000 00000000`00000000 ffffd000`25b987c0 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x11185
ffffd000`25b98650 fffff803`3614b9bc : fffff6fc`b0be92a0 ffff1e52`d683aafa 00000000`00000000 fffff901`406b0828 : nt!MmAccessFault+0x62c
ffffd000`25b987c0 fffff961`7d2daefc : 00000000`00000014 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 : nt!KiPageFault+0x13c
ffffd000`25b98950 00000000`00000014 : 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 : win32kfull+0xdaefc
ffffd000`25b98958 00007ff9`80acac00 : ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 : 0x14
ffffd000`25b98960 ffffe001`ea87e840 : fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 : 0x00007ff9`80acac00
ffffd000`25b98968 fffff961`7d5a17f1 : ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 : 0xffffe001`ea87e840
ffffd000`25b98970 ffffd000`25b98b00 : fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 00000000`00000010 : win32kbase+0x117f1
ffffd000`25b98978 fffff961`7d254d45 : 00000000`00000010 fffff961`7d254cc8 00000000`00000010 00000000`00010246 : 0xffffd000`25b98b00
ffffd000`25b98980 00000000`00000010 : fffff961`7d254cc8 00000000`00000010 00000000`00010246 00000000`00000001 : win32kfull+0x54d45
ffffd000`25b98988 fffff961`7d254cc8 : 00000000`00000010 00000000`00010246 00000000`00000001 00000000`001308aa : 0x10
ffffd000`25b98990 00000000`00000010 : 00000000`00010246 00000000`00000001 00000000`001308aa 00000000`00000000 : win32kfull+0x54cc8
ffffd000`25b98998 00000000`00010246 : 00000000`00000001 00000000`001308aa 00000000`00000000 fffff961`7d2da624 : 0x10
ffffd000`25b989a0 00000000`00000001 : 00000000`001308aa 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 : 0x10246
ffffd000`25b989a8 00000000`001308aa : 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 : 0x1
ffffd000`25b989b0 00000000`00000000 : fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 fffff901`406c1640 : 0x1308aa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32kfull+daefc
fffff961`7d2daefc 8b8238080080    mov     eax,dword ptr [rdx-7FFFF7C8h]

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  win32kfull+daefc

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32kfull

IMAGE_NAME:  win32kfull.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  AV_win32kfull+daefc

BUCKET_ID:  AV_win32kfull+daefc

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:av_win32kfull+daefc

FAILURE_ID_HASH:  {f8187f2b-5af9-ccf9-bf6c-844e8fa2f351}

Followup: MachineOwner
---------

rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000050
rdx=fffff900c0580f38 rsi=ffffd00025b98748 rdi=0000000000000000
rip=fffff80336142770 rsp=ffffd00025b98558 rbp=ffffd00025b985c0
 r8=0000000000000000  r9=ffffd00025b987c0 r10=0000070000000000
r11=0000000000000000 r12=fffff900c0580f38 r13=fffff900c0580f38
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
nt!KeBugCheckEx:
fffff803`36142770 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`25b98560=0000000000000050
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`25b98558 fffff803`36162285 : 00000000`00000050 fffff900`c0580f38 00000000`00000000 ffffd000`25b987c0 : nt!KeBugCheckEx
ffffd000`25b98560 fffff803`3603917c : 00000000`00000000 00000000`00000000 ffffd000`25b987c0 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x11185
ffffd000`25b98650 fffff803`3614b9bc : fffff6fc`b0be92a0 ffff1e52`d683aafa 00000000`00000000 fffff901`406b0828 : nt!MmAccessFault+0x62c
ffffd000`25b987c0 fffff961`7d2daefc : 00000000`00000014 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 : nt!KiPageFault+0x13c (TrapFrame @ ffffd000`25b987c0)
ffffd000`25b98950 00000000`00000014 : 00007ff9`80acac00 ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 : win32kfull+0xdaefc
ffffd000`25b98958 00007ff9`80acac00 : ffffe001`ea87e840 fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 : 0x14
ffffd000`25b98960 ffffe001`ea87e840 : fffff961`7d5a17f1 ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 : 0x00007ff9`80acac00
ffffd000`25b98968 fffff961`7d5a17f1 : ffffd000`25b98b00 fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 : 0xffffe001`ea87e840
ffffd000`25b98970 ffffd000`25b98b00 : fffff961`7d254d45 00000000`00000010 fffff961`7d254cc8 00000000`00000010 : win32kbase+0x117f1
ffffd000`25b98978 fffff961`7d254d45 : 00000000`00000010 fffff961`7d254cc8 00000000`00000010 00000000`00010246 : 0xffffd000`25b98b00
ffffd000`25b98980 00000000`00000010 : fffff961`7d254cc8 00000000`00000010 00000000`00010246 00000000`00000001 : win32kfull+0x54d45
ffffd000`25b98988 fffff961`7d254cc8 : 00000000`00000010 00000000`00010246 00000000`00000001 00000000`001308aa : 0x10
ffffd000`25b98990 00000000`00000010 : 00000000`00010246 00000000`00000001 00000000`001308aa 00000000`00000000 : win32kfull+0x54cc8
ffffd000`25b98998 00000000`00010246 : 00000000`00000001 00000000`001308aa 00000000`00000000 fffff961`7d2da624 : 0x10
ffffd000`25b989a0 00000000`00000001 : 00000000`001308aa 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 : 0x10246
ffffd000`25b989a8 00000000`001308aa : 00000000`00000000 fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 : 0x1
ffffd000`25b989b0 00000000`00000000 : fffff961`7d2da624 fffff901`406b07c0 00000000`00000000 fffff901`406c1640 : 0x1308aa
start             end                 module name
ffffe001`e7257000 ffffe001`e725f000   em015_64 em015_64.dat Thu Aug 06 05:05:59 2015 (55C32377)
ffffe001`e728a000 ffffe001`e72c7000   em006_64 em006_64.dat Wed Dec 16 08:27:36 2015 (567166C8)
ffffe001`e735d000 ffffe001`e73c8000   em018_64 em018_64.dat Tue Dec 15 10:42:33 2015 (567034E9)
fffff800`9f200000 fffff800`9f225000   tm       tm.sys       Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f230000 fffff800`9f247000   PSHED    PSHED.dll    Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`9f250000 fffff800`9f25b000   BOOTVID  BOOTVID.dll  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`9f260000 fffff800`9f26e000   cmimcext cmimcext.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f270000 fffff800`9f27c000   ntosext  ntosext.sys  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`9f280000 fffff800`9f319000   CI       CI.dll       Thu Oct 29 22:35:19 2015 (5632D767)
fffff800`9f320000 fffff800`9f37c000   msrpc    msrpc.sys    Thu Oct 29 22:34:46 2015 (5632D746)
fffff800`9f380000 fffff800`9f3e2000   FLTMGR   FLTMGR.SYS   Thu Oct 29 22:09:58 2015 (5632D176)
fffff800`9f3f0000 fffff800`9f415000   ksecdd   ksecdd.sys   Thu Oct 29 22:38:43 2015 (5632D833)
fffff800`9f420000 fffff800`9f4c5000   clipsp   clipsp.sys   Thu Oct 29 22:37:15 2015 (5632D7DB)
fffff800`9f4d0000 fffff800`9f595000   Wdf01000 Wdf01000.sys Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`9f5a0000 fffff800`9f5b3000   WDFLDR   WDFLDR.SYS   Thu Oct 29 22:09:44 2015 (5632D168)
fffff800`9f5c0000 fffff800`9f5e3000   acpiex   acpiex.sys   Thu Oct 29 22:39:16 2015 (5632D854)
fffff800`9f5f0000 fffff800`9f5fd000   WppRecorder WppRecorder.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f600000 fffff800`9f698000   cng      cng.sys      Sun Nov 22 04:40:56 2015 (56518DA8)
fffff800`9f6a0000 fffff800`9f730000   ACPI     ACPI.sys     Thu Oct 29 22:10:07 2015 (5632D17F)
fffff800`9f730000 fffff800`9f73c000   WMILIB   WMILIB.SYS   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f740000 fffff800`9f75f000   WindowsTrustedRT WindowsTrustedRT.sys Thu Oct 29 22:38:30 2015 (5632D826)
fffff800`9f760000 fffff800`9f76b000   WindowsTrustedRTProxy WindowsTrustedRTProxy.sys Thu Oct 29 22:38:29 2015 (5632D825)
fffff800`9f770000 fffff800`9f782000   pcw      pcw.sys      Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f790000 fffff800`9f79b000   msisadrv msisadrv.sys Thu Oct 29 22:41:55 2015 (5632D8F3)
fffff800`9f7a0000 fffff800`9f7f6000   pci      pci.sys      Thu Oct 29 22:29:30 2015 (5632D60A)
fffff800`9f800000 fffff800`9f812000   vdrvroot vdrvroot.sys Thu Oct 29 22:39:01 2015 (5632D845)
fffff800`9f820000 fffff800`9f83e000   pdc      pdc.sys      Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`9f840000 fffff800`9f859000   CEA      CEA.sys      Thu Oct 29 22:42:10 2015 (5632D902)
fffff800`9f860000 fffff800`9f882000   partmgr  partmgr.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`9f890000 fffff800`9f916000   spaceport spaceport.sys Thu Oct 29 22:34:45 2015 (5632D745)
fffff800`9f920000 fffff800`9f938000   volmgr   volmgr.sys   Thu Oct 29 22:09:49 2015 (5632D16D)
fffff800`9f940000 fffff800`9f99e000   volmgrx  volmgrx.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`9f9a0000 fffff800`9f9bd000   mountmgr mountmgr.sys Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`9f9c0000 fffff800`9f9e5000   storahci storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`9f9f0000 fffff800`9fa68000   storport storport.sys Thu Oct 29 22:34:05 2015 (5632D71D)
fffff800`9fa90000 fffff800`9faa9000   fileinfo fileinfo.sys Thu Oct 29 22:37:17 2015 (5632D7DD)
fffff800`9fab0000 fffff800`9fae8000   Wof      Wof.sys      Thu Oct 29 22:38:16 2015 (5632D818)
fffff800`9faf0000 fffff800`9fd08000   NTFS     NTFS.sys     Tue Dec 01 00:46:27 2015 (565D3433)
fffff800`9fd10000 fffff800`9fd1d000   Fs_Rec   Fs_Rec.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9fd20000 fffff800`9fe40000   ndis     ndis.sys     Thu Oct 29 22:28:34 2015 (5632D5D2)
fffff800`9fe40000 fffff800`9feb8000   NETIO    NETIO.SYS    Thu Oct 29 22:33:57 2015 (5632D715)
fffff800`9fee0000 fffff800`9ff6e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Oct 29 22:42:26 2015 (5632D912)
fffff800`9ff70000 fffff800`9ff80000   werkernel werkernel.sys Thu Oct 29 22:42:19 2015 (5632D90B)
fffff800`9ff80000 fffff800`9ffe5000   CLFS     CLFS.SYS     Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`a0000000 fffff800`a0257000   tcpip    tcpip.sys    Thu Oct 29 22:26:39 2015 (5632D55F)
fffff800`a0260000 fffff800`a02c7000   fwpkclnt fwpkclnt.sys Thu Oct 29 22:10:03 2015 (5632D17B)
fffff800`a02d0000 fffff800`a02fa000   wfplwfs  wfplwfs.sys  Thu Oct 29 22:36:36 2015 (5632D7B4)
fffff800`a0300000 fffff800`a03a1000   fvevol   fvevol.sys   Thu Oct 29 22:31:17 2015 (5632D675)
fffff800`a03b0000 fffff800`a0419000   volsnap  volsnap.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a0420000 fffff800`a0464000   rdyboost rdyboost.sys Thu Oct 29 22:35:23 2015 (5632D76B)
fffff800`a0470000 fffff800`a0495000   mup      mup.sys      Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`a04b0000 fffff800`a04cf000   disk     disk.sys     Thu Oct 29 22:09:50 2015 (5632D16E)
fffff800`a04d0000 fffff800`a0530000   CLASSPNP CLASSPNP.SYS Thu Oct 29 22:09:57 2015 (5632D175)
fffff800`a0550000 fffff800`a0569000   crashdmp crashdmp.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a0570000 fffff800`a061f000   srv2     srv2.sys     Thu Oct 29 22:30:24 2015 (5632D640)
fffff800`a0630000 fffff800`a0661000   cdrom    cdrom.sys    Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`a0670000 fffff800`a068d000   filecrypt filecrypt.sys Thu Oct 29 22:37:49 2015 (5632D7FD)
fffff800`a0690000 fffff800`a069c000   tbs      tbs.sys      Thu Oct 29 22:41:53 2015 (5632D8F1)
fffff800`a06a0000 fffff800`a0771000   eamonm   eamonm.sys   Mon Sep 07 08:27:49 2015 (55ED82C5)
fffff800`a0780000 fffff800`a078a000   Null     Null.SYS     unavailable (00000000)
fffff800`a0790000 fffff800`a079a000   Beep     Beep.SYS     Thu Oct 29 22:41:57 2015 (5632D8F5)
fffff800`a07a0000 fffff800`a07d0000   ehdrv    ehdrv.sys    Fri Jul 17 07:29:16 2015 (55A8E70C)
fffff800`a07d0000 fffff800`a07e4000   BasicDisplay BasicDisplay.sys Thu Oct 29 22:40:28 2015 (5632D89C)
fffff800`a07f0000 fffff800`a0805000   watchdog watchdog.sys Thu Oct 29 22:39:37 2015 (5632D869)
fffff800`a0810000 fffff800`a09fd000   dxgkrnl  dxgkrnl.sys  Thu Oct 29 22:13:53 2015 (5632D261)
fffff800`a0a00000 fffff800`a0a12000   BasicRender BasicRender.sys Thu Oct 29 22:41:40 2015 (5632D8E4)
fffff800`a0a20000 fffff800`a0a39000   Npfs     Npfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0a40000 fffff800`a0a4f000   Msfs     Msfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0a50000 fffff800`a0a73000   tdx      tdx.sys      Thu Nov 05 04:56:13 2015 (563B27BD)
fffff800`a0a80000 fffff800`a0a8f000   TDI      TDI.SYS      Thu Oct 29 22:41:51 2015 (5632D8EF)
fffff800`a0a90000 fffff800`a0adb000   netbt    netbt.sys    Thu Oct 29 22:35:40 2015 (5632D77C)
fffff800`a0ae0000 fffff800`a0b1a000   mrxsmb20 mrxsmb20.sys Thu Oct 29 22:27:25 2015 (5632D58D)
fffff800`a0b20000 fffff800`a0b4a000   epfwwfpr epfwwfpr.sys Fri Jul 17 07:30:23 2015 (55A8E74F)
fffff800`a0b60000 fffff800`a0b8e000   ksecpkg  ksecpkg.sys  Sun Nov 22 04:50:35 2015 (56518FEB)
fffff800`a0b90000 fffff800`a0bd1000   srvnet   srvnet.sys   Thu Oct 29 22:29:28 2015 (5632D608)
fffff800`a0be0000 fffff800`a0bf4000   mmcss    mmcss.sys    Thu Oct 29 22:38:57 2015 (5632D841)
fffff800`a0e00000 fffff800`a0e12000   netbios  netbios.sys  Thu Oct 29 22:37:46 2015 (5632D7FA)
fffff800`a0e20000 fffff800`a0e91000   rdbss    rdbss.sys    Thu Oct 29 22:25:43 2015 (5632D527)
fffff800`a0ea0000 fffff800`a0f2e000   csc      csc.sys      Thu Oct 29 22:25:37 2015 (5632D521)
fffff800`a0f30000 fffff800`a0f40000   nsiproxy nsiproxy.sys Thu Oct 29 22:38:00 2015 (5632D808)
fffff800`a0f40000 fffff800`a0f4d000   npsvctrig npsvctrig.sys Thu Oct 29 22:40:23 2015 (5632D897)
fffff800`a0f50000 fffff800`a0f60000   mssmbios mssmbios.sys Thu Oct 29 22:38:07 2015 (5632D80F)
fffff800`a0f60000 fffff800`a0f6a000   gpuenergydrv gpuenergydrv.sys Thu Oct 29 22:39:54 2015 (5632D87A)
fffff800`a0f70000 fffff800`a0f9a000   dfsc     dfsc.sys     Thu Oct 29 22:25:22 2015 (5632D512)
fffff800`a0fa0000 fffff800`a0faa000   mbam     mbam.sys     Tue Aug 11 13:35:19 2015 (55CA3257)
fffff800`a0fc0000 fffff800`a0ffc000   ahcache  ahcache.sys  Thu Oct 29 22:09:45 2015 (5632D169)
fffff800`a1000000 fffff800`a1011000   CompositeBus CompositeBus.sys Thu Oct 29 22:41:36 2015 (5632D8E0)
fffff800`a1020000 fffff800`a102d000   kdnic    kdnic.sys    Thu Oct 29 22:41:45 2015 (5632D8E9)
fffff800`a1030000 fffff800`a1045000   umbus    umbus.sys    Thu Oct 29 22:37:25 2015 (5632D7E5)
fffff800`a1050000 fffff800`a1161000   HTTP     HTTP.sys     Thu Oct 29 22:29:26 2015 (5632D606)
fffff800`a1170000 fffff800`a1186000   lltdio   lltdio.sys   Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`a1190000 fffff800`a11aa000   rspndr   rspndr.sys   Thu Oct 29 22:39:46 2015 (5632D872)
fffff800`a11c0000 fffff800`a1252000   dxgmms2  dxgmms2.sys  Thu Oct 29 22:13:10 2015 (5632D236)
fffff800`a1260000 fffff800`a1272000   mouclass mouclass.sys Thu Oct 29 22:37:57 2015 (5632D805)
fffff800`a1280000 fffff800`a1290000   monitor  monitor.sys  Thu Oct 29 22:40:35 2015 (5632D8A3)
fffff800`a12a0000 fffff800`a12af000   dump_diskdump dump_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a12e0000 fffff800`a1305000   dump_storahci dump_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a1330000 fffff800`a134c000   dump_dumpfve dump_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff800`a1350000 fffff800`a1376000   luafv    luafv.sys    Thu Oct 29 22:34:43 2015 (5632D743)
fffff800`a1380000 fffff800`a13a3000   bowser   bowser.sys   Thu Oct 29 22:40:29 2015 (5632D89D)
fffff800`a13c0000 fffff800`a13d9000   storqosflt storqosflt.sys Thu Oct 29 22:37:39 2015 (5632D7F3)
fffff800`a13e0000 fffff800`a13fd000   WudfPf   WudfPf.sys   Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a1400000 fffff800`a143b000   WUDFRd   WUDFRd.sys   Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a1440000 fffff800`a144e000   WpdUpFltr WpdUpFltr.sys Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`a1450000 fffff800`a146a000   mslldp   mslldp.sys   Thu Oct 29 22:37:12 2015 (5632D7D8)
fffff800`a1470000 fffff800`a14e2000   mrxsmb   mrxsmb.sys   Thu Oct 29 22:26:42 2015 (5632D562)
fffff800`a14f0000 fffff800`a1509000   mpsdrv   mpsdrv.sys   Thu Oct 29 22:37:43 2015 (5632D7F7)
fffff800`a1510000 fffff800`a15a2000   afd      afd.sys      Thu Nov 05 04:28:03 2015 (563B2123)
fffff800`a15b0000 fffff800`a15c9000   vwififlt vwififlt.sys Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a15d0000 fffff800`a15fb000   pacer    pacer.sys    Thu Oct 29 22:36:02 2015 (5632D792)
fffff800`a2200000 fffff800`a2221000   drmk     drmk.sys     Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a2230000 fffff800`a2298000   ks       ks.sys       Thu Oct 29 22:33:56 2015 (5632D714)
fffff800`a22a0000 fffff800`a2a46000   igdkmd64 igdkmd64.sys Wed Nov 18 14:28:29 2015 (564CD15D)
fffff800`a2a50000 fffff800`a2ab1000   USBXHCI  USBXHCI.SYS  Thu Oct 29 22:32:00 2015 (5632D6A0)
fffff800`a2ac0000 fffff800`a2af8000   ucx01000 ucx01000.sys Thu Oct 29 22:34:40 2015 (5632D740)
fffff800`a2b00000 fffff800`a2b30000   TeeDriverW8x64 TeeDriverW8x64.sys Tue Jul 07 13:43:32 2015 (559C0FC4)
fffff800`a2b30000 fffff800`a2b4c000   usbehci  usbehci.sys  Thu Oct 29 22:27:04 2015 (5632D578)
fffff800`a2b50000 fffff800`a2bc5000   USBPORT  USBPORT.SYS  Thu Oct 29 22:27:18 2015 (5632D586)
fffff800`a2bd0000 fffff800`a2c64000   rt640x64 rt640x64.sys Wed Oct 07 11:03:55 2015 (5615345B)
fffff800`a2c70000 fffff800`a2c8b000   serial   serial.sys   Thu Oct 29 22:38:49 2015 (5632D839)
fffff800`a2c90000 fffff800`a2c9f000   serenum  serenum.sys  Thu Oct 29 22:42:13 2015 (5632D905)
fffff800`a2ca0000 fffff800`a2cbe000   parport  parport.sys  Thu Oct 29 22:38:05 2015 (5632D80D)
fffff800`a2cc0000 fffff800`a2ceb000   intelppm intelppm.sys Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a2cf0000 fffff800`a2d00000   XtuAcpiDriver XtuAcpiDriver.sys Thu Feb 26 07:51:57 2015 (54EF16ED)
fffff800`a2d00000 fffff800`a2d0d000   NdisVirtualBus NdisVirtualBus.sys Thu Oct 29 22:38:26 2015 (5632D822)
fffff800`a2d10000 fffff800`a2d1c000   swenum   swenum.sys   Thu Oct 29 22:42:20 2015 (5632D90C)
fffff800`a2d20000 fffff800`a2d2e000   rdpbus   rdpbus.sys   Thu Oct 29 22:10:15 2015 (5632D187)
fffff800`a2d30000 fffff800`a2db0000   usbhub   usbhub.sys   Thu Oct 29 22:30:56 2015 (5632D660)
fffff800`a2db0000 fffff800`a2dbe000   USBD     USBD.SYS     Thu Oct 29 22:41:54 2015 (5632D8F2)
fffff800`a2dc0000 fffff800`a2df4000   nvhda64v nvhda64v.sys Thu Apr 16 15:03:16 2015 (55300774)
fffff800`a2e00000 fffff800`a2e0e000   ksthunk  ksthunk.sys  Thu Oct 29 22:42:01 2015 (5632D8F9)
fffff800`a2e10000 fffff800`a2e84000   IntcDAud IntcDAud.sys Fri Jul 10 07:58:41 2015 (559FB371)
fffff800`a2e90000 fffff800`a2f17000   UsbHub3  UsbHub3.sys  Thu Oct 29 22:30:55 2015 (5632D65F)
fffff800`a2f20000 fffff800`a2f88000   HdAudio  HdAudio.sys  Thu Oct 29 22:34:23 2015 (5632D72F)
fffff800`a2f90000 fffff800`a2fa8000   uaspstor uaspstor.sys Thu Oct 29 22:41:41 2015 (5632D8E5)
fffff800`a2fb0000 fffff800`a2fc1000   HIDPARSE HIDPARSE.SYS Thu Oct 29 22:40:39 2015 (5632D8A7)
fffff800`a2fd0000 fffff800`a2ffb000   usbccgp  usbccgp.sys  Thu Oct 29 22:39:08 2015 (5632D84C)
fffff800`a3000000 fffff800`a3011000   hidusb   hidusb.sys   Thu Oct 29 22:41:44 2015 (5632D8E8)
fffff800`a3020000 fffff800`a304e000   HIDCLASS HIDCLASS.SYS Thu Oct 29 22:36:25 2015 (5632D7A9)
fffff800`a3050000 fffff800`a3060000   kbdhid   kbdhid.sys   Thu Oct 29 22:39:42 2015 (5632D86E)
fffff800`a3060000 fffff800`a3073000   kbdclass kbdclass.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a3080000 fffff800`a3b68000   nvlddmkm nvlddmkm.sys Thu Aug 06 19:16:04 2015 (55C3EAB4)
fffff800`a3b70000 fffff800`a3b8a000   HDAudBus HDAudBus.sys Thu Oct 29 22:37:21 2015 (5632D7E1)
fffff800`a3b90000 fffff800`a3be8000   portcls  portcls.sys  Thu Oct 29 22:33:27 2015 (5632D6F7)
fffff800`a3bf0000 fffff800`a3bff000   mouhid   mouhid.sys   Thu Oct 29 22:39:03 2015 (5632D847)
fffff800`a3c00000 fffff800`a3c8c000   srv      srv.sys      Thu Oct 29 22:30:28 2015 (5632D644)
fffff800`a3c90000 fffff800`a3ca4000   tcpipreg tcpipreg.sys Thu Oct 29 22:38:09 2015 (5632D811)
fffff800`a3cb0000 fffff800`a3cdf000   tunnel   tunnel.sys   Thu Oct 29 22:36:11 2015 (5632D79B)
fffff800`a3ce0000 fffff800`a3cf1000   condrv   condrv.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a3e40000 fffff800`a3e64000   USBSTOR  USBSTOR.SYS  Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a3e90000 fffff800`a3ee6000   fastfat  fastfat.SYS  Thu Oct 29 22:33:32 2015 (5632D6FC)
fffff800`a3fc0000 fffff800`a3ff3000   MBAMSwissArmy MBAMSwissArmy.sys Wed Jul 29 00:26:01 2015 (55B855D9)
fffff800`a4000000 fffff800`a4013000   mwac     mwac.sys     Tue Jun 17 22:07:00 2014 (53A0F444)
fffff800`a4020000 fffff800`a402f000   hiber_diskdump hiber_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a4030000 fffff800`a4055000   hiber_storahci hiber_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a4060000 fffff800`a40ae000   mrxsmb10 mrxsmb10.sys Thu Oct 29 22:27:22 2015 (5632D58A)
fffff800`a40b0000 fffff800`a40d6000   Ndu      Ndu.sys      Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a40e0000 fffff800`a41a0000   peauth   peauth.sys   Thu Oct 29 22:32:55 2015 (5632D6D7)
fffff800`a41a0000 fffff800`a41bc000   hiber_dumpfve hiber_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff803`34228000 fffff803`34233000   kd       kd.dll       Thu Oct 29 22:43:04 2015 (5632D938)
fffff803`36000000 fffff803`367cc000   nt       ntkrnlmp.exe Mon Jan 04 20:28:56 2016 (568B1C58)
fffff803`367cc000 fffff803`3683f000   hal      hal.dll      Thu Oct 29 22:10:02 2015 (5632D17A)
fffff961`7d200000 fffff961`7d582000   win32kfull win32kfull.sys unavailable (00000000)
fffff961`7d590000 fffff961`7d6f2000   win32kbase win32kbase.sys unavailable (00000000)
fffff961`7d710000 fffff961`7d71a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff961`7d720000 fffff961`7d75c000   cdd      cdd.dll      unavailable (00000000)
fffff961`7deb0000 fffff961`7ded3000   win32k   win32k.sys   unavailable (00000000)

Unloaded modules:
fffff800`a3e20000 fffff800`a3e33000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3de0000 fffff800`a3e13000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3f60000 fffff800`a3f6f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f70000 fffff800`a3f95000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3fa0000 fffff800`a3fbc000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3f50000 fffff800`a3f5b000   umpass.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff800`a3ef0000 fffff800`a3eff000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f00000 fffff800`a3f25000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3f30000 fffff800`a3f4c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3e70000 fffff800`a3e8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3d00000 fffff800`a3d13000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3d80000 fffff800`a3db3000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3dd0000 fffff800`a3dd7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3dc0000 fffff800`a3dc7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3d20000 fffff800`a3d2f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3d30000 fffff800`a3d55000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3d60000 fffff800`a3d7c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a1380000 fffff800`a13bb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003B000
fffff800`a0580000 fffff800`a058f000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a05c0000 fffff800`a05e5000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a0610000 fffff800`a062c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`9fa70000 fffff800`9fa8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a0fa0000 fffff800`a0fb3000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a04a0000 fffff800`a04ae000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
start             end                 module name
fffff800`9f6a0000 fffff800`9f730000   ACPI     ACPI.sys     Thu Oct 29 22:10:07 2015 (5632D17F)
fffff800`9f5c0000 fffff800`9f5e3000   acpiex   acpiex.sys   Thu Oct 29 22:39:16 2015 (5632D854)
fffff800`a1510000 fffff800`a15a2000   afd      afd.sys      Thu Nov 05 04:28:03 2015 (563B2123)
fffff800`a0fc0000 fffff800`a0ffc000   ahcache  ahcache.sys  Thu Oct 29 22:09:45 2015 (5632D169)
fffff800`a07d0000 fffff800`a07e4000   BasicDisplay BasicDisplay.sys Thu Oct 29 22:40:28 2015 (5632D89C)
fffff800`a0a00000 fffff800`a0a12000   BasicRender BasicRender.sys Thu Oct 29 22:41:40 2015 (5632D8E4)
fffff800`a0790000 fffff800`a079a000   Beep     Beep.SYS     Thu Oct 29 22:41:57 2015 (5632D8F5)
fffff800`9f250000 fffff800`9f25b000   BOOTVID  BOOTVID.dll  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`a1380000 fffff800`a13a3000   bowser   bowser.sys   Thu Oct 29 22:40:29 2015 (5632D89D)
fffff961`7d720000 fffff961`7d75c000   cdd      cdd.dll      unavailable (00000000)
fffff800`a0630000 fffff800`a0661000   cdrom    cdrom.sys    Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`9f840000 fffff800`9f859000   CEA      CEA.sys      Thu Oct 29 22:42:10 2015 (5632D902)
fffff800`9f280000 fffff800`9f319000   CI       CI.dll       Thu Oct 29 22:35:19 2015 (5632D767)
fffff800`a04d0000 fffff800`a0530000   CLASSPNP CLASSPNP.SYS Thu Oct 29 22:09:57 2015 (5632D175)
fffff800`9ff80000 fffff800`9ffe5000   CLFS     CLFS.SYS     Thu Oct 29 22:09:54 2015 (5632D172)
fffff800`9f420000 fffff800`9f4c5000   clipsp   clipsp.sys   Thu Oct 29 22:37:15 2015 (5632D7DB)
fffff800`9f260000 fffff800`9f26e000   cmimcext cmimcext.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f600000 fffff800`9f698000   cng      cng.sys      Sun Nov 22 04:40:56 2015 (56518DA8)
fffff800`a1000000 fffff800`a1011000   CompositeBus CompositeBus.sys Thu Oct 29 22:41:36 2015 (5632D8E0)
fffff800`a3ce0000 fffff800`a3cf1000   condrv   condrv.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0550000 fffff800`a0569000   crashdmp crashdmp.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a0ea0000 fffff800`a0f2e000   csc      csc.sys      Thu Oct 29 22:25:37 2015 (5632D521)
fffff800`a0f70000 fffff800`a0f9a000   dfsc     dfsc.sys     Thu Oct 29 22:25:22 2015 (5632D512)
fffff800`a04b0000 fffff800`a04cf000   disk     disk.sys     Thu Oct 29 22:09:50 2015 (5632D16E)
fffff800`a2200000 fffff800`a2221000   drmk     drmk.sys     Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a12a0000 fffff800`a12af000   dump_diskdump dump_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a1330000 fffff800`a134c000   dump_dumpfve dump_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff800`a12e0000 fffff800`a1305000   dump_storahci dump_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a0810000 fffff800`a09fd000   dxgkrnl  dxgkrnl.sys  Thu Oct 29 22:13:53 2015 (5632D261)
fffff800`a11c0000 fffff800`a1252000   dxgmms2  dxgmms2.sys  Thu Oct 29 22:13:10 2015 (5632D236)
fffff800`a06a0000 fffff800`a0771000   eamonm   eamonm.sys   Mon Sep 07 08:27:49 2015 (55ED82C5)
fffff800`a07a0000 fffff800`a07d0000   ehdrv    ehdrv.sys    Fri Jul 17 07:29:16 2015 (55A8E70C)
ffffe001`e728a000 ffffe001`e72c7000   em006_64 em006_64.dat Wed Dec 16 08:27:36 2015 (567166C8)
ffffe001`e7257000 ffffe001`e725f000   em015_64 em015_64.dat Thu Aug 06 05:05:59 2015 (55C32377)
ffffe001`e735d000 ffffe001`e73c8000   em018_64 em018_64.dat Tue Dec 15 10:42:33 2015 (567034E9)
fffff800`a0b20000 fffff800`a0b4a000   epfwwfpr epfwwfpr.sys Fri Jul 17 07:30:23 2015 (55A8E74F)
fffff800`a3e90000 fffff800`a3ee6000   fastfat  fastfat.SYS  Thu Oct 29 22:33:32 2015 (5632D6FC)
fffff800`a0670000 fffff800`a068d000   filecrypt filecrypt.sys Thu Oct 29 22:37:49 2015 (5632D7FD)
fffff800`9fa90000 fffff800`9faa9000   fileinfo fileinfo.sys Thu Oct 29 22:37:17 2015 (5632D7DD)
fffff800`9f380000 fffff800`9f3e2000   FLTMGR   FLTMGR.SYS   Thu Oct 29 22:09:58 2015 (5632D176)
fffff800`9fd10000 fffff800`9fd1d000   Fs_Rec   Fs_Rec.sys   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0300000 fffff800`a03a1000   fvevol   fvevol.sys   Thu Oct 29 22:31:17 2015 (5632D675)
fffff800`a0260000 fffff800`a02c7000   fwpkclnt fwpkclnt.sys Thu Oct 29 22:10:03 2015 (5632D17B)
fffff800`a0f60000 fffff800`a0f6a000   gpuenergydrv gpuenergydrv.sys Thu Oct 29 22:39:54 2015 (5632D87A)
fffff803`367cc000 fffff803`3683f000   hal      hal.dll      Thu Oct 29 22:10:02 2015 (5632D17A)
fffff800`a3b70000 fffff800`a3b8a000   HDAudBus HDAudBus.sys Thu Oct 29 22:37:21 2015 (5632D7E1)
fffff800`a2f20000 fffff800`a2f88000   HdAudio  HdAudio.sys  Thu Oct 29 22:34:23 2015 (5632D72F)
fffff800`a4020000 fffff800`a402f000   hiber_diskdump hiber_diskdump.sys Thu Oct 29 22:42:02 2015 (5632D8FA)
fffff800`a41a0000 fffff800`a41bc000   hiber_dumpfve hiber_dumpfve.sys Thu Oct 29 22:40:02 2015 (5632D882)
fffff800`a4030000 fffff800`a4055000   hiber_storahci hiber_storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`a3020000 fffff800`a304e000   HIDCLASS HIDCLASS.SYS Thu Oct 29 22:36:25 2015 (5632D7A9)
fffff800`a2fb0000 fffff800`a2fc1000   HIDPARSE HIDPARSE.SYS Thu Oct 29 22:40:39 2015 (5632D8A7)
fffff800`a3000000 fffff800`a3011000   hidusb   hidusb.sys   Thu Oct 29 22:41:44 2015 (5632D8E8)
fffff800`a1050000 fffff800`a1161000   HTTP     HTTP.sys     Thu Oct 29 22:29:26 2015 (5632D606)
fffff800`a22a0000 fffff800`a2a46000   igdkmd64 igdkmd64.sys Wed Nov 18 14:28:29 2015 (564CD15D)
fffff800`a2e10000 fffff800`a2e84000   IntcDAud IntcDAud.sys Fri Jul 10 07:58:41 2015 (559FB371)
fffff800`a2cc0000 fffff800`a2ceb000   intelppm intelppm.sys Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a3060000 fffff800`a3073000   kbdclass kbdclass.sys Thu Oct 29 22:38:20 2015 (5632D81C)
fffff800`a3050000 fffff800`a3060000   kbdhid   kbdhid.sys   Thu Oct 29 22:39:42 2015 (5632D86E)
fffff803`34228000 fffff803`34233000   kd       kd.dll       Thu Oct 29 22:43:04 2015 (5632D938)
fffff800`a1020000 fffff800`a102d000   kdnic    kdnic.sys    Thu Oct 29 22:41:45 2015 (5632D8E9)
fffff800`a2230000 fffff800`a2298000   ks       ks.sys       Thu Oct 29 22:33:56 2015 (5632D714)
fffff800`9f3f0000 fffff800`9f415000   ksecdd   ksecdd.sys   Thu Oct 29 22:38:43 2015 (5632D833)
fffff800`a0b60000 fffff800`a0b8e000   ksecpkg  ksecpkg.sys  Sun Nov 22 04:50:35 2015 (56518FEB)
fffff800`a2e00000 fffff800`a2e0e000   ksthunk  ksthunk.sys  Thu Oct 29 22:42:01 2015 (5632D8F9)
fffff800`a1170000 fffff800`a1186000   lltdio   lltdio.sys   Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`a1350000 fffff800`a1376000   luafv    luafv.sys    Thu Oct 29 22:34:43 2015 (5632D743)
fffff800`a0fa0000 fffff800`a0faa000   mbam     mbam.sys     Tue Aug 11 13:35:19 2015 (55CA3257)
fffff800`a3fc0000 fffff800`a3ff3000   MBAMSwissArmy MBAMSwissArmy.sys Wed Jul 29 00:26:01 2015 (55B855D9)
fffff800`9fee0000 fffff800`9ff6e000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Oct 29 22:42:26 2015 (5632D912)
fffff800`a0be0000 fffff800`a0bf4000   mmcss    mmcss.sys    Thu Oct 29 22:38:57 2015 (5632D841)
fffff800`a1280000 fffff800`a1290000   monitor  monitor.sys  Thu Oct 29 22:40:35 2015 (5632D8A3)
fffff800`a1260000 fffff800`a1272000   mouclass mouclass.sys Thu Oct 29 22:37:57 2015 (5632D805)
fffff800`a3bf0000 fffff800`a3bff000   mouhid   mouhid.sys   Thu Oct 29 22:39:03 2015 (5632D847)
fffff800`9f9a0000 fffff800`9f9bd000   mountmgr mountmgr.sys Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`a14f0000 fffff800`a1509000   mpsdrv   mpsdrv.sys   Thu Oct 29 22:37:43 2015 (5632D7F7)
fffff800`a1470000 fffff800`a14e2000   mrxsmb   mrxsmb.sys   Thu Oct 29 22:26:42 2015 (5632D562)
fffff800`a4060000 fffff800`a40ae000   mrxsmb10 mrxsmb10.sys Thu Oct 29 22:27:22 2015 (5632D58A)
fffff800`a0ae0000 fffff800`a0b1a000   mrxsmb20 mrxsmb20.sys Thu Oct 29 22:27:25 2015 (5632D58D)
fffff800`a0a40000 fffff800`a0a4f000   Msfs     Msfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f790000 fffff800`9f79b000   msisadrv msisadrv.sys Thu Oct 29 22:41:55 2015 (5632D8F3)
fffff800`a1450000 fffff800`a146a000   mslldp   mslldp.sys   Thu Oct 29 22:37:12 2015 (5632D7D8)
fffff800`9f320000 fffff800`9f37c000   msrpc    msrpc.sys    Thu Oct 29 22:34:46 2015 (5632D746)
fffff800`a0f50000 fffff800`a0f60000   mssmbios mssmbios.sys Thu Oct 29 22:38:07 2015 (5632D80F)
fffff800`a0470000 fffff800`a0495000   mup      mup.sys      Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`a4000000 fffff800`a4013000   mwac     mwac.sys     Tue Jun 17 22:07:00 2014 (53A0F444)
fffff800`9fd20000 fffff800`9fe40000   ndis     ndis.sys     Thu Oct 29 22:28:34 2015 (5632D5D2)
fffff800`a2d00000 fffff800`a2d0d000   NdisVirtualBus NdisVirtualBus.sys Thu Oct 29 22:38:26 2015 (5632D822)
fffff800`a40b0000 fffff800`a40d6000   Ndu      Ndu.sys      Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a0e00000 fffff800`a0e12000   netbios  netbios.sys  Thu Oct 29 22:37:46 2015 (5632D7FA)
fffff800`a0a90000 fffff800`a0adb000   netbt    netbt.sys    Thu Oct 29 22:35:40 2015 (5632D77C)
fffff800`9fe40000 fffff800`9feb8000   NETIO    NETIO.SYS    Thu Oct 29 22:33:57 2015 (5632D715)
fffff800`a0a20000 fffff800`a0a39000   Npfs     Npfs.SYS     Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a0f40000 fffff800`a0f4d000   npsvctrig npsvctrig.sys Thu Oct 29 22:40:23 2015 (5632D897)
fffff800`a0f30000 fffff800`a0f40000   nsiproxy nsiproxy.sys Thu Oct 29 22:38:00 2015 (5632D808)
fffff803`36000000 fffff803`367cc000   nt       ntkrnlmp.exe Mon Jan 04 20:28:56 2016 (568B1C58)
fffff800`9faf0000 fffff800`9fd08000   NTFS     NTFS.sys     Tue Dec 01 00:46:27 2015 (565D3433)
fffff800`9f270000 fffff800`9f27c000   ntosext  ntosext.sys  Thu Oct 29 22:09:41 2015 (5632D165)
fffff800`a0780000 fffff800`a078a000   Null     Null.SYS     unavailable (00000000)
fffff800`a2dc0000 fffff800`a2df4000   nvhda64v nvhda64v.sys Thu Apr 16 15:03:16 2015 (55300774)
fffff800`a3080000 fffff800`a3b68000   nvlddmkm nvlddmkm.sys Thu Aug 06 19:16:04 2015 (55C3EAB4)
fffff800`a15d0000 fffff800`a15fb000   pacer    pacer.sys    Thu Oct 29 22:36:02 2015 (5632D792)
fffff800`a2ca0000 fffff800`a2cbe000   parport  parport.sys  Thu Oct 29 22:38:05 2015 (5632D80D)
fffff800`9f860000 fffff800`9f882000   partmgr  partmgr.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`9f7a0000 fffff800`9f7f6000   pci      pci.sys      Thu Oct 29 22:29:30 2015 (5632D60A)
fffff800`9f770000 fffff800`9f782000   pcw      pcw.sys      Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9f820000 fffff800`9f83e000   pdc      pdc.sys      Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a40e0000 fffff800`a41a0000   peauth   peauth.sys   Thu Oct 29 22:32:55 2015 (5632D6D7)
fffff800`a3b90000 fffff800`a3be8000   portcls  portcls.sys  Thu Oct 29 22:33:27 2015 (5632D6F7)
fffff800`9f230000 fffff800`9f247000   PSHED    PSHED.dll    Thu Oct 29 22:09:48 2015 (5632D16C)
fffff800`a0e20000 fffff800`a0e91000   rdbss    rdbss.sys    Thu Oct 29 22:25:43 2015 (5632D527)
fffff800`a2d20000 fffff800`a2d2e000   rdpbus   rdpbus.sys   Thu Oct 29 22:10:15 2015 (5632D187)
fffff800`a0420000 fffff800`a0464000   rdyboost rdyboost.sys Thu Oct 29 22:35:23 2015 (5632D76B)
fffff800`a1190000 fffff800`a11aa000   rspndr   rspndr.sys   Thu Oct 29 22:39:46 2015 (5632D872)
fffff800`a2bd0000 fffff800`a2c64000   rt640x64 rt640x64.sys Wed Oct 07 11:03:55 2015 (5615345B)
fffff800`a2c90000 fffff800`a2c9f000   serenum  serenum.sys  Thu Oct 29 22:42:13 2015 (5632D905)
fffff800`a2c70000 fffff800`a2c8b000   serial   serial.sys   Thu Oct 29 22:38:49 2015 (5632D839)
fffff800`9f890000 fffff800`9f916000   spaceport spaceport.sys Thu Oct 29 22:34:45 2015 (5632D745)
fffff800`a3c00000 fffff800`a3c8c000   srv      srv.sys      Thu Oct 29 22:30:28 2015 (5632D644)
fffff800`a0570000 fffff800`a061f000   srv2     srv2.sys     Thu Oct 29 22:30:24 2015 (5632D640)
fffff800`a0b90000 fffff800`a0bd1000   srvnet   srvnet.sys   Thu Oct 29 22:29:28 2015 (5632D608)
fffff800`9f9c0000 fffff800`9f9e5000   storahci storahci.sys Thu Oct 29 22:35:25 2015 (5632D76D)
fffff800`9f9f0000 fffff800`9fa68000   storport storport.sys Thu Oct 29 22:34:05 2015 (5632D71D)
fffff800`a13c0000 fffff800`a13d9000   storqosflt storqosflt.sys Thu Oct 29 22:37:39 2015 (5632D7F3)
fffff800`a2d10000 fffff800`a2d1c000   swenum   swenum.sys   Thu Oct 29 22:42:20 2015 (5632D90C)
fffff800`a0690000 fffff800`a069c000   tbs      tbs.sys      Thu Oct 29 22:41:53 2015 (5632D8F1)
fffff800`a0000000 fffff800`a0257000   tcpip    tcpip.sys    Thu Oct 29 22:26:39 2015 (5632D55F)
fffff800`a3c90000 fffff800`a3ca4000   tcpipreg tcpipreg.sys Thu Oct 29 22:38:09 2015 (5632D811)
fffff800`a0a80000 fffff800`a0a8f000   TDI      TDI.SYS      Thu Oct 29 22:41:51 2015 (5632D8EF)
fffff800`a0a50000 fffff800`a0a73000   tdx      tdx.sys      Thu Nov 05 04:56:13 2015 (563B27BD)
fffff800`a2b00000 fffff800`a2b30000   TeeDriverW8x64 TeeDriverW8x64.sys Tue Jul 07 13:43:32 2015 (559C0FC4)
fffff800`9f200000 fffff800`9f225000   tm       tm.sys       Thu Oct 29 22:09:42 2015 (5632D166)
fffff961`7d710000 fffff961`7d71a000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff800`a3cb0000 fffff800`a3cdf000   tunnel   tunnel.sys   Thu Oct 29 22:36:11 2015 (5632D79B)
fffff800`a2f90000 fffff800`a2fa8000   uaspstor uaspstor.sys Thu Oct 29 22:41:41 2015 (5632D8E5)
fffff800`a2ac0000 fffff800`a2af8000   ucx01000 ucx01000.sys Thu Oct 29 22:34:40 2015 (5632D740)
fffff800`a1030000 fffff800`a1045000   umbus    umbus.sys    Thu Oct 29 22:37:25 2015 (5632D7E5)
fffff800`a2fd0000 fffff800`a2ffb000   usbccgp  usbccgp.sys  Thu Oct 29 22:39:08 2015 (5632D84C)
fffff800`a2db0000 fffff800`a2dbe000   USBD     USBD.SYS     Thu Oct 29 22:41:54 2015 (5632D8F2)
fffff800`a2b30000 fffff800`a2b4c000   usbehci  usbehci.sys  Thu Oct 29 22:27:04 2015 (5632D578)
fffff800`a2d30000 fffff800`a2db0000   usbhub   usbhub.sys   Thu Oct 29 22:30:56 2015 (5632D660)
fffff800`a2e90000 fffff800`a2f17000   UsbHub3  UsbHub3.sys  Thu Oct 29 22:30:55 2015 (5632D65F)
fffff800`a2b50000 fffff800`a2bc5000   USBPORT  USBPORT.SYS  Thu Oct 29 22:27:18 2015 (5632D586)
fffff800`a3e40000 fffff800`a3e64000   USBSTOR  USBSTOR.SYS  Thu Oct 29 22:38:44 2015 (5632D834)
fffff800`a2a50000 fffff800`a2ab1000   USBXHCI  USBXHCI.SYS  Thu Oct 29 22:32:00 2015 (5632D6A0)
fffff800`9f800000 fffff800`9f812000   vdrvroot vdrvroot.sys Thu Oct 29 22:39:01 2015 (5632D845)
fffff800`9f920000 fffff800`9f938000   volmgr   volmgr.sys   Thu Oct 29 22:09:49 2015 (5632D16D)
fffff800`9f940000 fffff800`9f99e000   volmgrx  volmgrx.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a03b0000 fffff800`a0419000   volsnap  volsnap.sys  Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a15b0000 fffff800`a15c9000   vwififlt vwififlt.sys Thu Oct 29 22:37:27 2015 (5632D7E7)
fffff800`a07f0000 fffff800`a0805000   watchdog watchdog.sys Thu Oct 29 22:39:37 2015 (5632D869)
fffff800`9f4d0000 fffff800`9f595000   Wdf01000 Wdf01000.sys Thu Oct 29 22:24:27 2015 (5632D4DB)
fffff800`9f5a0000 fffff800`9f5b3000   WDFLDR   WDFLDR.SYS   Thu Oct 29 22:09:44 2015 (5632D168)
fffff800`9ff70000 fffff800`9ff80000   werkernel werkernel.sys Thu Oct 29 22:42:19 2015 (5632D90B)
fffff800`a02d0000 fffff800`a02fa000   wfplwfs  wfplwfs.sys  Thu Oct 29 22:36:36 2015 (5632D7B4)
fffff961`7deb0000 fffff961`7ded3000   win32k   win32k.sys   unavailable (00000000)
fffff961`7d590000 fffff961`7d6f2000   win32kbase win32kbase.sys unavailable (00000000)
fffff961`7d200000 fffff961`7d582000   win32kfull win32kfull.sys unavailable (00000000)
fffff800`9f740000 fffff800`9f75f000   WindowsTrustedRT WindowsTrustedRT.sys Thu Oct 29 22:38:30 2015 (5632D826)
fffff800`9f760000 fffff800`9f76b000   WindowsTrustedRTProxy WindowsTrustedRTProxy.sys Thu Oct 29 22:38:29 2015 (5632D825)
fffff800`9f730000 fffff800`9f73c000   WMILIB   WMILIB.SYS   Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`9fab0000 fffff800`9fae8000   Wof      Wof.sys      Thu Oct 29 22:38:16 2015 (5632D818)
fffff800`a1440000 fffff800`a144e000   WpdUpFltr WpdUpFltr.sys Thu Oct 29 22:40:06 2015 (5632D886)
fffff800`9f5f0000 fffff800`9f5fd000   WppRecorder WppRecorder.sys Thu Oct 29 22:09:42 2015 (5632D166)
fffff800`a13e0000 fffff800`a13fd000   WudfPf   WudfPf.sys   Thu Oct 29 22:09:52 2015 (5632D170)
fffff800`a1400000 fffff800`a143b000   WUDFRd   WUDFRd.sys   Thu Oct 29 22:09:51 2015 (5632D16F)
fffff800`a2cf0000 fffff800`a2d00000   XtuAcpiDriver XtuAcpiDriver.sys Thu Feb 26 07:51:57 2015 (54EF16ED)

Unloaded modules:
fffff800`a3e20000 fffff800`a3e33000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3de0000 fffff800`a3e13000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3f60000 fffff800`a3f6f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f70000 fffff800`a3f95000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3fa0000 fffff800`a3fbc000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3f50000 fffff800`a3f5b000   umpass.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff800`a3ef0000 fffff800`a3eff000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3f00000 fffff800`a3f25000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3f30000 fffff800`a3f4c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3e70000 fffff800`a3e8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a3d00000 fffff800`a3d13000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a3d80000 fffff800`a3db3000   MBAMSwissArm
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00033000
fffff800`a3dd0000 fffff800`a3dd7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3dc0000 fffff800`a3dc7000   magdrvamd64.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00007000
fffff800`a3d20000 fffff800`a3d2f000   hiber_storpo
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a3d30000 fffff800`a3d55000   hiber_storah
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a3d60000 fffff800`a3d7c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a1380000 fffff800`a13bb000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003B000
fffff800`a0580000 fffff800`a058f000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff800`a05c0000 fffff800`a05e5000   dump_storahc
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff800`a0610000 fffff800`a062c000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`9fa70000 fffff800`9fa8c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff800`a0fa0000 fffff800`a0fb3000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff800`a04a0000 fffff800`a04ae000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
Bugcheck code 00000050
Arguments fffff900`c0580f38 00000000`00000000 fffff961`7d2daefc 00000000`00000002
Click to expand...

I started Driver Verifier around 36 hours ago, no dumps/restarts yet.

blueelvis said:
Hi Alex ^_^,


Sorry for bumping in JC :)

That's a lot of coincidence for two different pieces of hardware to fail. Alex, any chance your system experienced a power surge? Is your system properly grounded? I haven't seen the reports yet but like JC said, Driver Verifier will help us a lot more.



-Pranav
Click to expand...

I dont think so as it is plugged into a power surge protector, but the power board is a few years old now. Not sure if that makes a difference?

thanks :)

Jared said:
The dump file is pretty corrupt, and it's a minidump. So you'll not find much.

Very doubtful it's a driver issue.
From what I can see, and what you've said. I would assume your motherboard is failing. Or as Pranav said, a power surge.
Do the drives work on any other computers?
Click to expand...

How would I test the motherboard? The only drive left is the SSD and I dont have another PC I can plug it into, my spare PC has another issue (either dead RAM or CPU :p). If it is the SSD how could I tell? I ran Seatools and Samsung Magician they both reported fine. If there is a way of isolating the issue to the SSD I am happy to replace it. Just dont want to pay for it unless it is needed.
 
Re: Windows 10 BSOD

It would be best to get a Kernel, or complete, memory dump for trying to find the cause.
Motherboard testing cards are usually POST cards which display error codes for motherboards which won't boot, they won't just detect problems with missing drives, unless the problem is with the SATA connections on the board.
It may well just be a coincidence that both drives have started to fail.
But it's very difficult to isolate the cause with hardly anything to go on.
 
Re: Windows 10 BSOD

Had another reboot before.

Tested PSU with the tester and it come back fine.

No dumps have been produced from Driver Verfier. I will upload the MEMORY dump now, it will take a while with my connection. I will post a link once its up.
 
Re: Windows 10 BSOD

Hi! :)

New bios: F11 2014/08/13 (current: F8 2013/08/05)
If you didn't already modify them, I'd enable all the warnings in M.I.T - PC health status (CPU: 60C/140F degrees).

Did this happen when you was using handbrake, dvdvideosoft free youtube downloader or mcebuddy (or none of these)?
 
Last edited:
Re: Windows 10 BSOD

Hi xilolee, thanks for the reply.

I will upgrade the BIO's now.

At the time I has Handbrake running. I also received another BSOD the moment I launch handbrake yesterday. Please see attached.
 

Attachments

Re: Windows 10 BSOD

Hi Go The Power,

The last two minidumps you posted look indicative of ESET corruption to me, have you tried running Handbrake with your AV disabled, or uninstalled? The first one blames your video driver, nvlddmkm.sys, but there's an overlap present in both dumps: "WARNING: em042_64 overlaps em008_64".
 
Re: Windows 10 BSOD

Hi Xer,

Thanks for the reply.

I tried running handbrake with the AV disabled and it worked fine. A little backstory first. My wife's family asked if I could convert ~30 family DVD's to a format that can be played on a computer (as a back up). I have converted about 25 of them using handbrake. I have only had this issue twice. Not sure if this helps.

Thanks
 
Re: Windows 10 BSOD

My first thought would be to just do a full/clean uninstall of ESET and re-install it afterwards. They have their own removal tool which should do the trick. Typically AVs run with multiple services and components, so if ESET is to blame, it could be that it only occurs when something specific is happening, like a scan, remediation, etc. If the crash occurs again afterwards, upload the new minidump(s) and I'd be happy to take a look. Hopefully the issue is just limited to Handbrake, I remember its process being implicated in both when I looked at it this morning.
 
Re: Windows 10 BSOD

Hi Alex,

What version of ESET are you running?

-Stephen
 
Re: Windows 10 BSOD

Sorry for the delay. I had some free time last night so uninstalled ESET (using the tool), left the computer running all night. I got a crash this morning, I wasn't running handbrake. Please see attached


Tekno Venus said:
Hi Alex,

What version of ESET are you running?

-Stephen
Click to expand...

Hi Stephen,

It is ESET smart security version: 10.0.386.0
 

Attachments

Re: Windows 10 BSOD

This minidump blames the NVidia driver again:
Code: 
 # Child-SP          RetAddr           Call Site
00 fffff803`62faf348 fffff803`613d2572 nt!KeBugCheckEx
01 fffff803`62faf350 fffff803`61350aed nt!KiFatalExceptionHandler+0x22
02 fffff803`62faf390 fffff803`612931b1 nt!RtlpExecuteHandlerForException+0xd
03 fffff803`62faf3c0 fffff803`61291f64 nt!RtlDispatchException+0x421
04 fffff803`62fafac0 fffff803`61355902 nt!KiDispatchException+0x144
05 fffff803`62fb0190 fffff803`61353bbd nt!KiExceptionDispatch+0xc2
06 fffff803`62fb0370 fffff806`358315b0 nt!KiGeneralProtectionFault+0xfd
07 fffff803`62fb0500 00000000`00000000 [COLOR=#ff0000]nvlddmkm+0x3e15b0[/COLOR]

Have you done a clean re-install/update of your video drivers since this problem appeared again in November? The NVidia driver had appeared in one of the last ones I'd analyzed, but at the time the overlap suggested to me it was an issue with ESET instead.
 
Re: Windows 10 BSOD

fffff803`62faf3e8 fffff806`38c361e5*** WARNING: Unable to verify timestamp for epfwwfp.sys <--- ESET Personal Firewall Driver
*** ERROR: Module load completed but symbols could not be loaded for epfwwfp.sys
 
Re: Windows 10 BSOD

niknik said:
fffff803`62faf3e8 fffff806`38c361e5*** WARNING: Unable to verify timestamp for epfwwfp.sys <--- ESET Personal Firewall Driver
*** ERROR: Module load completed but symbols could not be loaded for epfwwfp.sys
Click to expand...

Microsoft has no Symbols, pretty simple?

and whats your story but in a new thread pls!
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top