[SOLVED] [Win8.1 x64] BSOD

Zardoc · Jun 4, 2014

Hi all,

Just got a bsod this morning and I'm not sure what it is :huh:. I sure could use some input.
Thanks.

Code:

Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Lance\Mini dumps Windows\060414-20953-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
OK                                             I:\Système Exploitation MS\Windows 8.1 Update 1 2014-04-10

************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is: I:\Système Exploitation MS\Windows 8.1 Update 1 2014-04-10
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
Machine Name:
Kernel base = 0xfffff802`37487000 PsLoadedModuleList = 0xfffff802`377512d0
Debug session time: Wed Jun  4 08:18:10.238 2014 (UTC - 4:00)
System Uptime: 0 days 0:01:21.879
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C000021A, {ffffc00160ac9010, 0, 0, 0}

----- ETW minidump data unavailable-----
Probably caused by : ntkrnlmp.exe ( nt! ?? ::OKHAJAOM::`string'+b69 )

Followup: MachineOwner
---------

6: kd> !analyze -v;!thread;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

WINLOGON_FATAL_ERROR (c000021a)
The Winlogon process terminated unexpectedly.
Arguments:
Arg1: ffffc00160ac9010, String that identifies the problem.
Arg2: 0000000000000000, Error Code.
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------

----- ETW minidump data unavailable-----

BUGCHECK_STR:  0xc000021a_0

ERROR_CODE: (NTSTATUS) 0xc000021a - {Erreur syst me irr cup rable}  Le processus syst me %hs s

EXCEPTION_CODE: (NTSTATUS) 0xc000021a - {Erreur syst me irr cup rable}  Le processus syst me %hs s

EXCEPTION_PARAMETER1:  ffffc00160ac9010

EXCEPTION_PARAMETER2:  0000000000000000

EXCEPTION_PARAMETER3:  0000000000000000

EXCEPTION_PARAMETER4: 0

ADDITIONAL_DEBUG_TEXT:  Windows doit maintenant redémarrer car le service Alimentation sest terminé de façon inattendue

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  services.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

LAST_CONTROL_TRANSFER:  from fffff80237804779 to fffff802375dafa0

STACK_TEXT:  
ffffd000`5d54c658 fffff802`37804779 : 00000000`0000004c 00000000`c000021a ffffd000`21d063f8 ffffe001`81ff6900 : nt!KeBugCheckEx
ffffd000`5d54c660 fffff802`377fc909 : ffffe001`7c966c00 ffffd000`5d54c7a0 00000000`00000000 00000000`00000002 : nt!PopGracefulShutdown+0x2c9
ffffd000`5d54c6a0 fffff802`375e67b3 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`7c966880 : nt! ?? ::OKHAJAOM::`string'+0xb69
ffffd000`5d54c840 fffff802`375dec00 : fffff802`37a16771 00000000`00000001 ffffd000`5d54ca58 00000000`c0000004 : nt!KiSystemServiceCopyEnd+0x13
ffffd000`5d54c9d8 fffff802`37a16771 : 00000000`00000001 ffffd000`5d54ca58 00000000`c0000004 ffffd000`5d283180 : nt!KiServiceLinkage
ffffd000`5d54c9e0 fffff802`3794c853 : 00000000`00000000 00000000`00000000 ffffd000`5d283180 ffffe001`7c9669c0 : nt! ?? ::NNGAKEGL::`string'+0x65101
ffffd000`5d54caa0 fffff802`374cefee : fffff802`374cef34 00000000`00000000 00000000`00000002 ffffe001`7c966880 : nt!PopPolicyWorkerAction+0x63
ffffd000`5d54cb10 fffff802`374daadb : fffff802`00000002 ffffd000`5d54cbd0 00000000`80000000 ffffe001`846cc230 : nt!PopPolicyWorkerThread+0xba
ffffd000`5d54cb50 fffff802`37556794 : 00000000`00000000 ffffe001`7c966880 ffffe001`7c966880 ffffe001`7c7eb7c0 : nt!ExpWorkerThread+0x293
ffffd000`5d54cc00 fffff802`375e15c6 : ffffd000`5d283180 ffffe001`7c966880 ffffd000`5d28f3c0 00000000`00000000 : nt!PspSystemThreadStartup+0x58
ffffd000`5d54cc60 00000000`00000000 : ffffd000`5d54d000 ffffd000`5d547000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::OKHAJAOM::`string'+b69
fffff802`377fc909 cc              int     3

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt! ?? ::OKHAJAOM::`string'+b69

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  53388e13

IMAGE_VERSION:  6.3.9600.17085

BUCKET_ID_FUNC_OFFSET:  b69

FAILURE_BUCKET_ID:  0xc000021a_0_nt!_??_::OKHAJAOM::_string_

BUCKET_ID:  0xc000021a_0_nt!_??_::OKHAJAOM::_string_

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0xc000021a_0_nt!_??_::okhajaom::_string_

FAILURE_ID_HASH:  {52ea3b67-e334-3513-2afe-d05f1a25cf5f}

Followup: MachineOwner
---------

GetPointerFromAddress: unable to read from fffff802377db000
THREAD ffffe0017c966880  Cid 0004.009c  Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 6
Not impersonating
GetUlongFromAddress: unable to read from fffff80237727300
Owning Process            ffffe0017c7eb7c0       Image:         <Unknown>
Attached Process          ffffe00183625900       Image:         services.exe
fffff78000000000: Unable to get shared data
Wait Start TickCount      5240         
Context Switch Count      18356          IdealProcessor: 5  NoStackSwap
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address nt!ExpWorkerThread (0xfffff802374da848)
Stack Init ffffd0005d54cc90 Current ffffd0005d54c2d0
Base ffffd0005d54d000 Limit ffffd0005d547000 Call 0
Priority 13 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`5d54c658 fffff802`37804779 : 00000000`0000004c 00000000`c000021a ffffd000`21d063f8 ffffe001`81ff6900 : nt!KeBugCheckEx
ffffd000`5d54c660 fffff802`377fc909 : ffffe001`7c966c00 ffffd000`5d54c7a0 00000000`00000000 00000000`00000002 : nt!PopGracefulShutdown+0x2c9
ffffd000`5d54c6a0 fffff802`375e67b3 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`7c966880 : nt! ?? ::OKHAJAOM::`string'+0xb69
ffffd000`5d54c840 fffff802`375dec00 : fffff802`37a16771 00000000`00000001 ffffd000`5d54ca58 00000000`c0000004 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ ffffd000`5d54c840)
ffffd000`5d54c9d8 fffff802`37a16771 : 00000000`00000001 ffffd000`5d54ca58 00000000`c0000004 ffffd000`5d283180 : nt!KiServiceLinkage
ffffd000`5d54c9e0 fffff802`3794c853 : 00000000`00000000 00000000`00000000 ffffd000`5d283180 ffffe001`7c9669c0 : nt! ?? ::NNGAKEGL::`string'+0x65101
ffffd000`5d54caa0 fffff802`374cefee : fffff802`374cef34 00000000`00000000 00000000`00000002 ffffe001`7c966880 : nt!PopPolicyWorkerAction+0x63
ffffd000`5d54cb10 fffff802`374daadb : fffff802`00000002 ffffd000`5d54cbd0 00000000`80000000 ffffe001`846cc230 : nt!PopPolicyWorkerThread+0xba
ffffd000`5d54cb50 fffff802`37556794 : 00000000`00000000 ffffe001`7c966880 ffffe001`7c966880 ffffe001`7c7eb7c0 : nt!ExpWorkerThread+0x293
ffffd000`5d54cc00 fffff802`375e15c6 : ffffd000`5d283180 ffffe001`7c966880 ffffd000`5d28f3c0 00000000`00000000 : nt!PspSystemThreadStartup+0x58
ffffd000`5d54cc60 00000000`00000000 : ffffd000`5d54d000 ffffd000`5d547000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16

rax=ffffe001853ed4f0 rbx=ffffe0017c966c00 rcx=000000000000004c
rdx=00000000c000021a rsi=0000000000000000 rdi=0000000000000002
rip=fffff802375dafa0 rsp=ffffd0005d54c658 rbp=0000000000000001
 r8=ffffd00021d063f8  r9=ffffe00181ff6900 r10=0000000000000006
r11=0000000000000006 r12=0000000000000000 r13=0000000000000001
r14=0000000000000000 r15=0000000000000004
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000282
nt!KeBugCheckEx:
fffff802`375dafa0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`5d54c660=000000000000004c
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`5d54c658 fffff802`37804779 : 00000000`0000004c 00000000`c000021a ffffd000`21d063f8 ffffe001`81ff6900 : nt!KeBugCheckEx
ffffd000`5d54c660 fffff802`377fc909 : ffffe001`7c966c00 ffffd000`5d54c7a0 00000000`00000000 00000000`00000002 : nt!PopGracefulShutdown+0x2c9
ffffd000`5d54c6a0 fffff802`375e67b3 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`7c966880 : nt! ?? ::OKHAJAOM::`string'+0xb69
ffffd000`5d54c840 fffff802`375dec00 : fffff802`37a16771 00000000`00000001 ffffd000`5d54ca58 00000000`c0000004 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ ffffd000`5d54c840)
ffffd000`5d54c9d8 fffff802`37a16771 : 00000000`00000001 ffffd000`5d54ca58 00000000`c0000004 ffffd000`5d283180 : nt!KiServiceLinkage
ffffd000`5d54c9e0 fffff802`3794c853 : 00000000`00000000 00000000`00000000 ffffd000`5d283180 ffffe001`7c9669c0 : nt! ?? ::NNGAKEGL::`string'+0x65101
ffffd000`5d54caa0 fffff802`374cefee : fffff802`374cef34 00000000`00000000 00000000`00000002 ffffe001`7c966880 : nt!PopPolicyWorkerAction+0x63
ffffd000`5d54cb10 fffff802`374daadb : fffff802`00000002 ffffd000`5d54cbd0 00000000`80000000 ffffe001`846cc230 : nt!PopPolicyWorkerThread+0xba
ffffd000`5d54cb50 fffff802`37556794 : 00000000`00000000 ffffe001`7c966880 ffffe001`7c966880 ffffe001`7c7eb7c0 : nt!ExpWorkerThread+0x293
ffffd000`5d54cc00 fffff802`375e15c6 : ffffd000`5d283180 ffffe001`7c966880 ffffd000`5d28f3c0 00000000`00000000 : nt!PspSystemThreadStartup+0x58
ffffd000`5d54cc60 00000000`00000000 : ffffd000`5d54d000 ffffd000`5d547000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
start             end                 module name
fffff800`e3033000 fffff800`e3099000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 07:40:16 2013 (5215F8A0)
fffff800`e3099000 fffff800`e30a7000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e30a7000 fffff800`e3108000   CLFS     CLFS.SYS     Wed Mar 19 04:12:20 2014 (53295164)
fffff800`e3108000 fffff800`e312a000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff800`e312a000 fffff800`e313f000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff800`e313f000 fffff800`e3149000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e3149000 fffff800`e31d1000   CI       CI.dll       Sat Feb 22 07:12:12 2014 (5308941C)
fffff800`e3200000 fffff800`e328a000   ACPI     ACPI.sys     Sat Feb 22 07:13:57 2014 (53089485)
fffff800`e328c000 fffff800`e32e9000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff800`e32e9000 fffff800`e33b8000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff800`e33b8000 fffff800`e33c9000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e33c9000 fffff800`e33e1000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff800`e33e1000 fffff800`e33ec000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`e33ec000 fffff800`e33f6000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e3400000 fffff800`e341c000   pdc      pdc.sys      Fri Nov 01 00:58:42 2013 (52733502)
fffff800`e341c000 fffff800`e3434000   partmgr  partmgr.sys  Thu Aug 22 07:40:20 2013 (5215F8A4)
fffff800`e3434000 fffff800`e3495000   spaceport spaceport.sys Tue Apr 01 00:16:52 2014 (533A3DB4)
fffff800`e3495000 fffff800`e34aa000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff800`e34aa000 fffff800`e34fa000   volsnap  volsnap.sys  Thu Mar 06 04:26:33 2014 (53183F49)
fffff800`e34fd000 fffff800`e3588000   cng      cng.sys      Sat Mar 08 04:25:08 2014 (531AE1F4)
fffff800`e3588000 fffff800`e3592000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e3592000 fffff800`e35da000   pci      pci.sys      Sat Feb 22 07:12:41 2014 (53089439)
fffff800`e35da000 fffff800`e35e7000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff800`e3600000 fffff800`e3695000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff800`e36a2000 fffff800`e3701000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e3701000 fffff800`e371c000   mountmgr mountmgr.sys Thu Aug 22 07:40:04 2013 (5215F894)
fffff800`e371c000 fffff800`e3747000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff800`e3747000 fffff800`e3767000   SamsungRapidFSFltr SamsungRapidFSFltr.sys Mon Jul 29 14:55:39 2013 (51F6BAAB)
fffff800`e3767000 fffff800`e37cf000   PGPwded  PGPwded.sys  Mon Apr 14 16:25:45 2014 (534C4449)
fffff800`e37cf000 fffff800`e3800000   ksecpkg  ksecpkg.sys  Sat Mar 08 04:24:07 2014 (531AE1B7)
fffff800`e3800000 fffff800`e3809000   Pgpwdefs Pgpwdefs.sys Mon Apr 14 16:25:18 2014 (534C442E)
fffff800`e3815000 fffff800`e3ade000   iaStorA  iaStorA.sys  Fri May 02 19:06:56 2014 (53642510)
fffff800`e3ade000 fffff800`e3b3d000   storport storport.sys Sun Apr 06 10:08:55 2014 (53415FF7)
fffff800`e3b57000 fffff800`e3bb3000   fltmgr   fltmgr.sys   Sun Apr 06 10:10:42 2014 (53416062)
fffff800`e3bb3000 fffff800`e3bc9000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff800`e3bc9000 fffff800`e3c00000   PGPfsfd  PGPfsfd.sys  Mon Apr 14 16:25:55 2014 (534C4453)
fffff800`e3c00000 fffff800`e3c79000   NETIO    NETIO.SYS    Thu Aug 22 07:37:08 2013 (5215F7E4)
fffff800`e3c94000 fffff800`e3e8a000   Ntfs     Ntfs.sys     Tue Mar 18 23:58:52 2014 (532915FC)
fffff800`e3e8a000 fffff800`e3ea6000   ksecdd   ksecdd.sys   Sat Sep 21 03:59:44 2013 (523D51F0)
fffff800`e3ea6000 fffff800`e3eb6000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff800`e3eb6000 fffff800`e3ec1000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff800`e3ec1000 fffff800`e3fd9000   ndis     ndis.sys     Sat Feb 22 07:12:58 2014 (5308944A)
fffff800`e4000000 fffff800`e403e000   SamsungRapidDiskFltr SamsungRapidDiskFltr.sys Mon Jul 29 14:55:38 2013 (51F6BAAA)
fffff800`e4089000 fffff800`e42fd000   tcpip    tcpip.sys    Sun Mar 30 21:42:44 2014 (5338C814)
fffff800`e42fd000 fffff800`e4369000   fwpkclnt fwpkclnt.sys Sun Mar 30 21:39:34 2014 (5338C756)
fffff800`e4369000 fffff800`e438e000   wfplwfs  wfplwfs.sys  Sat Mar 08 04:22:45 2014 (531AE165)
fffff800`e438e000 fffff800`e43ac000   fltsrv   fltsrv.sys   Mon May 13 05:40:09 2013 (5190B4F9)
fffff800`e43ac000 fffff800`e43e9000   edevmon  edevmon.sys  Mon Aug 19 09:00:54 2013 (52121706)
fffff800`e4400000 fffff800`e4444000   snapman  snapman.sys  Wed Aug 14 08:17:26 2013 (520B7556)
fffff800`e4444000 fffff800`e448a000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff800`e448a000 fffff800`e44a1000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff800`e44a1000 fffff800`e44b0000   intelpep intelpep.sys Sat Nov 09 03:45:55 2013 (527DF643)
fffff800`e44b6000 fffff800`e45c9000   tib      tib.sys      Wed Mar 20 05:00:38 2013 (51497AB6)
fffff800`e45d5000 fffff800`e45f1000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff800`e4600000 fffff800`e4670000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff800`e46af000 fffff800`e4704000   CLASSPNP CLASSPNP.SYS Wed Apr 09 02:53:25 2014 (5344EE65)
fffff800`e4704000 fffff800`e4719000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`e4725000 fffff800`e47f3000   eamonm   eamonm.sys   Thu Aug 15 10:53:50 2013 (520CEB7E)
fffff800`e4a00000 fffff800`e4cc9000   dump_iaStorA dump_iaStorA.sys Fri May 02 19:06:56 2014 (53642510)
fffff800`e4d6a000 fffff800`e4d98000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e4d98000 fffff800`e4da1000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e4da1000 fffff800`e4da9000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e4da9000 fffff800`e4dd6000   ehdrv    ehdrv.sys    Thu Aug 15 10:54:11 2013 (520CEB93)
fffff800`e4dd6000 fffff800`e4debf00   ctxusbm  ctxusbm.sys  Mon Sep 09 12:02:22 2013 (522DF10E)
fffff800`e4dec000 fffff800`e4dfa000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff800`e4e00000 fffff800`e4e92000   afd      afd.sys      Wed Apr 02 22:23:08 2014 (533CC60C)
fffff800`e4eb2000 fffff800`e5033000   dxgkrnl  dxgkrnl.sys  Thu Mar 06 04:22:58 2014 (53183E72)
fffff800`e5033000 fffff800`e5045000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff800`e5045000 fffff800`e50a6000   dxgmms1  dxgmms1.sys  Thu Mar 06 04:22:14 2014 (53183E46)
fffff800`e50a6000 fffff800`e50b8000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e50b8000 fffff800`e50cc000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff800`e50cc000 fffff800`e50d8000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e50d8000 fffff800`e50f8000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e50f8000 fffff800`e5106000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff800`e5106000 fffff800`e5123000   NEOFLTR_740_30599 NEOFLTR_740_30599.SYS Tue Apr 08 11:06:04 2014 (5344105C)
fffff800`e5123000 fffff800`e516f000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff800`e516f000 fffff800`e5199000   pacer    pacer.sys    Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff800`e5199000 fffff800`e51aa000   netbios  netbios.sys  Thu Aug 22 07:38:58 2013 (5215F852)
fffff800`e5200000 fffff800`e520b000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff800`e520b000 fffff800`e521c000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff800`e5251000 fffff800`e52df000   csc      csc.sys      Thu Aug 22 07:38:00 2013 (5215F818)
fffff800`e52df000 fffff800`e5320000   truecrypt truecrypt.sys Mon May 26 20:39:59 2014 (5383DEDF)
fffff800`e5320000 fffff800`e5330000   PGPsdk   PGPsdk.sys   Mon Apr 14 16:25:51 2014 (534C444F)
fffff800`e5330000 fffff800`e533e000   nsiproxy nsiproxy.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e533e000 fffff800`e534a000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff800`e534a000 fffff800`e5356000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff800`e5356000 fffff800`e537c000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff800`e538c000 fffff800`e5393000   AsUpIO   AsUpIO.sys   Mon Aug 02 22:47:59 2010 (4C57835F)
fffff800`e5393000 fffff800`e5399000   AsIO     AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
fffff800`e5399000 fffff800`e53b0000   ahcache  ahcache.sys  Thu Aug 22 07:39:54 2013 (5215F88A)
fffff800`e53b0000 fffff800`e53e3000   tib_mounter tib_mounter.sys Mon Sep 30 09:04:20 2013 (524976D4)
fffff800`e53e3000 fffff800`e53f1000   Hamdrv   Hamdrv.sys   Tue Apr 15 04:46:09 2014 (534CF1D1)
fffff800`e53f1000 fffff800`e5400000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff800`e5441000 fffff800`e60a5000   nvlddmkm nvlddmkm.sys Mon May 19 19:08:44 2014 (537A8EFC)
fffff800`e60a5000 fffff800`e60be000   HDAudBus HDAudBus.sys Tue Mar 18 04:19:14 2014 (53280182)
fffff800`e60be000 fffff800`e6113000   USBXHCI  USBXHCI.SYS  Sat Feb 22 07:11:27 2014 (530893EF)
fffff800`e6113000 fffff800`e6145000   ucx01000 ucx01000.sys Sat Feb 22 07:11:33 2014 (530893F5)
fffff800`e6145000 fffff800`e6168000   TeeDriverx64 TeeDriverx64.sys Wed May 14 16:22:24 2014 (5373D080)
fffff800`e6168000 fffff800`e6180000   usbehci  usbehci.sys  Thu Aug 22 07:39:15 2013 (5215F863)
fffff800`e6180000 fffff800`e61ef000   USBPORT  USBPORT.SYS  Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`e6264000 fffff800`e633b000   Rt630x64 Rt630x64.sys Thu May 08 07:01:57 2014 (536B6425)
fffff800`e633b000 fffff800`e63b3000   UsbHub3  UsbHub3.sys  Sat Mar 08 04:23:48 2014 (531AE1A4)
fffff800`e6400000 fffff800`e6447000   portcls  portcls.sys  Sat Feb 22 07:11:25 2014 (530893ED)
fffff800`e6447000 fffff800`e6463000   drmk     drmk.sys     Thu Aug 22 07:39:24 2013 (5215F86C)
fffff800`e64b5000 fffff800`e663d080   hcw89    hcw89.sys    Tue Jul 10 10:53:40 2012 (4FFC41F4)
fffff800`e663e000 fffff800`e668d000   ks       ks.sys       Sat Feb 22 07:14:40 2014 (530894B0)
fffff800`e668d000 fffff800`e6690f80   BdaSup   BdaSup.SYS   Thu Aug 22 07:39:23 2013 (5215F86B)
fffff800`e6691000 fffff800`e6696300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e6697000 fffff800`e669dc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff800`e669e000 fffff800`e66a8000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff800`e66e6000 fffff800`e6704000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e6704000 fffff800`e670f000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff800`e670f000 fffff800`e6710600   swenum   swenum.sys   Thu Aug 22 07:39:29 2013 (5215F871)
fffff800`e6711000 fffff800`e6723000   circlass circlass.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff800`e6723000 fffff800`e672e000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`e672e000 fffff800`e6799000   usbhub   usbhub.sys   Thu Aug 22 07:38:33 2013 (5215F839)
fffff800`e6799000 fffff800`e67a5000   USBD     USBD.SYS     Thu Aug 22 07:40:22 2013 (5215F8A6)
fffff800`e67a5000 fffff800`e67d9000   nvhda64v nvhda64v.sys Sun Jun 16 08:38:07 2013 (51BDB1AF)
fffff800`e6873000 fffff800`e6c38900   RTKVHD64 RTKVHD64.sys Wed May 14 06:28:52 2014 (53734564)
fffff800`e6c39000 fffff800`e6c40f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e6c41000 fffff800`e6c4d000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`e6c4d000 fffff800`e6c77000   usbccgp  usbccgp.sys  Wed Oct 23 04:17:41 2013 (52678625)
fffff800`e6c77000 fffff800`e6c8d000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff800`e6c8d000 fffff800`e6cb8000   dump_PGPwdeDumpFilter dump_PGPwdeDumpFilter.sys Mon Apr 14 16:25:52 2014 (534C4450)
fffff800`e6cb8000 fffff800`e6cc9000   usbscan  usbscan.sys  Thu Aug 22 07:39:58 2013 (5215F88E)
fffff800`e6cc9000 fffff800`e6cd6000   usbprint usbprint.sys Thu Aug 22 07:36:32 2013 (5215F7C0)
fffff800`e6cd6000 fffff800`e6cfc000   USBSTOR  USBSTOR.SYS  Sat Feb 22 07:12:08 2014 (53089418)
fffff800`e6cfc000 fffff800`e6d0a000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff800`e6d0a000 fffff800`e6d29000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff800`e6d29000 fffff800`e6d53000   epfwwfpr epfwwfpr.sys Thu Aug 15 10:55:17 2013 (520CEBD5)
fffff800`e6d53000 fffff800`e6d9e000   mrxsmb10 mrxsmb10.sys Thu Mar 06 04:19:36 2014 (53183DA8)
fffff800`e6e00000 fffff800`e6e4f000   PGPdisk  PGPdisk.SYS  Mon Apr 14 16:25:59 2014 (534C4457)
fffff800`e6e4f000 fffff800`e6e6c000   Ndu      Ndu.sys      Thu Aug 22 07:35:42 2013 (5215F78E)
fffff800`e6e6c000 fffff800`e72f3d80   lvuvc64  lvuvc64.sys  Mon Oct 22 22:12:08 2012 (5085FCF8)
fffff800`e72f4000 fffff800`e7311900   usbaudio usbaudio.sys Fri Dec 13 02:24:20 2013 (52AAB624)
fffff800`e7312000 fffff800`e7366000   lvrs64   lvrs64.sys   Mon Oct 22 22:11:24 2012 (5085FCCC)
fffff800`e7366000 fffff800`e7373000   mouhid   mouhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff800`e7373000 fffff800`e7383000   mouclass mouclass.sys Thu Aug 22 07:39:13 2013 (5215F861)
fffff800`e7383000 fffff800`e7391000   kbdhid   kbdhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff800`e7391000 fffff800`e73a1000   kbdclass kbdclass.sys Thu Aug 22 07:39:23 2013 (5215F86B)
fffff800`e73a1000 fffff800`e73c5000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff800`e73c5000 fffff800`e73d9000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff800`e73d9000 fffff800`e73f1000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e7600000 fffff800`e7639000   mrxsmb20 mrxsmb20.sys Mon Mar 24 18:58:59 2014 (5330B8B3)
fffff800`e7639000 fffff800`e7649000   condrv   condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`e7653000 fffff800`e774d000   HTTP     HTTP.sys     Mon Jan 27 14:48:02 2014 (52E6B7F2)
fffff800`e774d000 fffff800`e776d000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff800`e776d000 fffff800`e7784000   mpsdrv   mpsdrv.sys   Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff800`e7784000 fffff800`e77f0000   mrxsmb   mrxsmb.sys   Wed Apr 02 22:23:03 2014 (533CC607)
fffff800`e77f0000 fffff800`e77fe000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff800`e785b000 fffff800`e7904000   peauth   peauth.sys   Sat Feb 22 07:09:37 2014 (53089381)
fffff800`e7904000 fffff800`e790f000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff800`e790f000 fffff800`e7952000   srvnet   srvnet.sys   Thu Mar 27 02:16:13 2014 (5333C22D)
fffff800`e7952000 fffff800`e7964000   tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff800`e7964000 fffff800`e7985000   WudfPf   WudfPf.sys   Thu Aug 22 07:37:21 2013 (5215F7F1)
fffff800`e7985000 fffff800`e79c3000   WUDFRd   WUDFRd.sys   Thu Aug 22 07:36:50 2013 (5215F7D2)
fffff800`e79c3000 fffff800`e79f7000   rdpdr    rdpdr.sys    Thu Aug 22 07:36:46 2013 (5215F7CE)
fffff800`e7a00000 fffff800`e7a98000   srv      srv.sys      Sat Oct 05 07:01:15 2013 (524FF17B)
fffff800`e7a98000 fffff800`e7ac5000   tunnel   tunnel.sys   Thu Aug 22 07:35:45 2013 (5215F791)
fffff800`e7acb000 fffff800`e7b78000   srv2     srv2.sys     Wed Apr 02 22:53:54 2014 (533CCD42)
fffff800`e7b78000 fffff800`e7bd4000   afcdp    afcdp.sys    Wed Jul 20 10:46:03 2011 (4E26EA2B)
fffff800`e7bd4000 fffff800`e7bea000   mslldp   mslldp.sys   Thu Aug 22 07:36:07 2013 (5215F7A7)
fffff800`e7bea000 fffff800`e7bf5000   rdpvideominiport rdpvideominiport.sys Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`e7bf5000 fffff800`e7c00000   WpdUpFltr WpdUpFltr.sys Thu Aug 22 07:38:45 2013 (5215F845)
fffff802`36642000 fffff802`3664b000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff802`37417000 fffff802`37487000   hal      hal.dll      Sat Feb 22 07:15:53 2014 (530894F9)
fffff802`37487000 fffff802`37c10000   nt       ntkrnlmp.exe Sun Mar 30 17:35:15 2014 (53388E13)
fffff960`000fd000 fffff960`00516000   win32k   win32k.sys   Sun Apr 06 10:09:21 2014 (53416011)
fffff960`00782000 fffff960`0078b000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`00996000 fffff960`009d1000   cdd      cdd.dll      unavailable (00000000)
fffff960`00b98000 fffff960`00bf7000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff800`e3b3d000 fffff800`e3b57000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001A000
fffff800`e4719000 fffff800`e4725000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff800`e4a60000 fffff800`e4d29000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  002C9000
fffff800`e4d29000 fffff800`e4d3f000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff800`e4d3f000 fffff800`e4d6a000   dump_PGPwdeD
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002B000
fffff800`e66a8000 fffff800`e66e6000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003E000
fffff800`e537c000 fffff800`e538c000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff800`e45c9000 fffff800`e45d5000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
start             end                 module name
fffff800`e3200000 fffff800`e328a000   ACPI     ACPI.sys     Sat Feb 22 07:13:57 2014 (53089485)
fffff800`e33c9000 fffff800`e33e1000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff800`e7b78000 fffff800`e7bd4000   afcdp    afcdp.sys    Wed Jul 20 10:46:03 2011 (4E26EA2B)
fffff800`e4e00000 fffff800`e4e92000   afd      afd.sys      Wed Apr 02 22:23:08 2014 (533CC60C)
fffff800`e5399000 fffff800`e53b0000   ahcache  ahcache.sys  Thu Aug 22 07:39:54 2013 (5215F88A)
fffff800`e5393000 fffff800`e5399000   AsIO     AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
fffff800`e538c000 fffff800`e5393000   AsUpIO   AsUpIO.sys   Mon Aug 02 22:47:59 2010 (4C57835F)
fffff960`00b98000 fffff960`00bf7000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff800`e50a6000 fffff800`e50b8000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e4dec000 fffff800`e4dfa000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff800`e668d000 fffff800`e6690f80   BdaSup   BdaSup.SYS   Thu Aug 22 07:39:23 2013 (5215F86B)
fffff800`e4da1000 fffff800`e4da9000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e313f000 fffff800`e3149000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e774d000 fffff800`e776d000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff960`00996000 fffff960`009d1000   cdd      cdd.dll      unavailable (00000000)
fffff800`e4d6a000 fffff800`e4d98000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e3149000 fffff800`e31d1000   CI       CI.dll       Sat Feb 22 07:12:12 2014 (5308941C)
fffff800`e6711000 fffff800`e6723000   circlass circlass.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff800`e46af000 fffff800`e4704000   CLASSPNP CLASSPNP.SYS Wed Apr 09 02:53:25 2014 (5344EE65)
fffff800`e30a7000 fffff800`e3108000   CLFS     CLFS.SYS     Wed Mar 19 04:12:20 2014 (53295164)
fffff800`e34fd000 fffff800`e3588000   cng      cng.sys      Sat Mar 08 04:25:08 2014 (531AE1F4)
fffff800`e53f1000 fffff800`e5400000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff800`e7639000 fffff800`e7649000   condrv   condrv.sys   Thu Aug 22 07:40:17 2013 (5215F8A1)
fffff800`e4704000 fffff800`e4719000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff800`e5251000 fffff800`e52df000   csc      csc.sys      Thu Aug 22 07:38:00 2013 (5215F818)
fffff800`e4dd6000 fffff800`e4debf00   ctxusbm  ctxusbm.sys  Mon Sep 09 12:02:22 2013 (522DF10E)
fffff800`e5356000 fffff800`e537c000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff800`e45d5000 fffff800`e45f1000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff800`e6447000 fffff800`e6463000   drmk     drmk.sys     Thu Aug 22 07:39:24 2013 (5215F86C)
fffff800`e6c41000 fffff800`e6c4d000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff800`e6c77000 fffff800`e6c8d000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff800`e4a00000 fffff800`e4cc9000   dump_iaStorA dump_iaStorA.sys Fri May 02 19:06:56 2014 (53642510)
fffff800`e6c8d000 fffff800`e6cb8000   dump_PGPwdeDumpFilter dump_PGPwdeDumpFilter.sys Mon Apr 14 16:25:52 2014 (534C4450)
fffff800`e4eb2000 fffff800`e5033000   dxgkrnl  dxgkrnl.sys  Thu Mar 06 04:22:58 2014 (53183E72)
fffff800`e5045000 fffff800`e50a6000   dxgmms1  dxgmms1.sys  Thu Mar 06 04:22:14 2014 (53183E46)
fffff800`e4725000 fffff800`e47f3000   eamonm   eamonm.sys   Thu Aug 15 10:53:50 2013 (520CEB7E)
fffff800`e43ac000 fffff800`e43e9000   edevmon  edevmon.sys  Mon Aug 19 09:00:54 2013 (52121706)
fffff800`e4da9000 fffff800`e4dd6000   ehdrv    ehdrv.sys    Thu Aug 15 10:54:11 2013 (520CEB93)
fffff800`e6d29000 fffff800`e6d53000   epfwwfpr epfwwfpr.sys Thu Aug 15 10:55:17 2013 (520CEBD5)
fffff800`e3bb3000 fffff800`e3bc9000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff800`e3b57000 fffff800`e3bb3000   fltmgr   fltmgr.sys   Sun Apr 06 10:10:42 2014 (53416062)
fffff800`e438e000 fffff800`e43ac000   fltsrv   fltsrv.sys   Mon May 13 05:40:09 2013 (5190B4F9)
fffff800`e3eb6000 fffff800`e3ec1000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff800`e3600000 fffff800`e3695000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff800`e42fd000 fffff800`e4369000   fwpkclnt fwpkclnt.sys Sun Mar 30 21:39:34 2014 (5338C756)
fffff800`e6697000 fffff800`e669dc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff802`37417000 fffff802`37487000   hal      hal.dll      Sat Feb 22 07:15:53 2014 (530894F9)
fffff800`e53e3000 fffff800`e53f1000   Hamdrv   Hamdrv.sys   Tue Apr 15 04:46:09 2014 (534CF1D1)
fffff800`e64b5000 fffff800`e663d080   hcw89    hcw89.sys    Tue Jul 10 10:53:40 2012 (4FFC41F4)
fffff800`e60a5000 fffff800`e60be000   HDAudBus HDAudBus.sys Tue Mar 18 04:19:14 2014 (53280182)
fffff800`e6d0a000 fffff800`e6d29000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff800`e6c39000 fffff800`e6c40f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff800`e6cfc000 fffff800`e6d0a000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff800`e7653000 fffff800`e774d000   HTTP     HTTP.sys     Mon Jan 27 14:48:02 2014 (52E6B7F2)
fffff800`e3815000 fffff800`e3ade000   iaStorA  iaStorA.sys  Fri May 02 19:06:56 2014 (53642510)
fffff800`e44a1000 fffff800`e44b0000   intelpep intelpep.sys Sat Nov 09 03:45:55 2013 (527DF643)
fffff800`e66e6000 fffff800`e6704000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`e7391000 fffff800`e73a1000   kbdclass kbdclass.sys Thu Aug 22 07:39:23 2013 (5215F86B)
fffff800`e7383000 fffff800`e7391000   kbdhid   kbdhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff802`36642000 fffff802`3664b000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff800`e5200000 fffff800`e520b000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff800`e663e000 fffff800`e668d000   ks       ks.sys       Sat Feb 22 07:14:40 2014 (530894B0)
fffff800`e3e8a000 fffff800`e3ea6000   ksecdd   ksecdd.sys   Sat Sep 21 03:59:44 2013 (523D51F0)
fffff800`e37cf000 fffff800`e3800000   ksecpkg  ksecpkg.sys  Sat Mar 08 04:24:07 2014 (531AE1B7)
fffff800`e6691000 fffff800`e6696300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff800`e73c5000 fffff800`e73d9000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff800`e73a1000 fffff800`e73c5000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff800`e7312000 fffff800`e7366000   lvrs64   lvrs64.sys   Mon Oct 22 22:11:24 2012 (5085FCCC)
fffff800`e6e6c000 fffff800`e72f3d80   lvuvc64  lvuvc64.sys  Mon Oct 22 22:12:08 2012 (5085FCF8)
fffff800`e3033000 fffff800`e3099000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 07:40:16 2013 (5215F8A0)
fffff800`e77f0000 fffff800`e77fe000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff800`e7373000 fffff800`e7383000   mouclass mouclass.sys Thu Aug 22 07:39:13 2013 (5215F861)
fffff800`e7366000 fffff800`e7373000   mouhid   mouhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff800`e3701000 fffff800`e371c000   mountmgr mountmgr.sys Thu Aug 22 07:40:04 2013 (5215F894)
fffff800`e776d000 fffff800`e7784000   mpsdrv   mpsdrv.sys   Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff800`e7784000 fffff800`e77f0000   mrxsmb   mrxsmb.sys   Wed Apr 02 22:23:03 2014 (533CC607)
fffff800`e6d53000 fffff800`e6d9e000   mrxsmb10 mrxsmb10.sys Thu Mar 06 04:19:36 2014 (53183DA8)
fffff800`e7600000 fffff800`e7639000   mrxsmb20 mrxsmb20.sys Mon Mar 24 18:58:59 2014 (5330B8B3)
fffff800`e50cc000 fffff800`e50d8000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e3588000 fffff800`e3592000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e7bd4000 fffff800`e7bea000   mslldp   mslldp.sys   Thu Aug 22 07:36:07 2013 (5215F7A7)
fffff800`e328c000 fffff800`e32e9000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff800`e534a000 fffff800`e5356000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff800`e448a000 fffff800`e44a1000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff800`e3ec1000 fffff800`e3fd9000   ndis     ndis.sys     Sat Feb 22 07:12:58 2014 (5308944A)
fffff800`e6704000 fffff800`e670f000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff800`e6e4f000 fffff800`e6e6c000   Ndu      Ndu.sys      Thu Aug 22 07:35:42 2013 (5215F78E)
fffff800`e5106000 fffff800`e5123000   NEOFLTR_740_30599 NEOFLTR_740_30599.SYS Tue Apr 08 11:06:04 2014 (5344105C)
fffff800`e5199000 fffff800`e51aa000   netbios  netbios.sys  Thu Aug 22 07:38:58 2013 (5215F852)
fffff800`e5123000 fffff800`e516f000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff800`e3c00000 fffff800`e3c79000   NETIO    NETIO.SYS    Thu Aug 22 07:37:08 2013 (5215F7E4)
fffff800`e50b8000 fffff800`e50cc000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff800`e533e000 fffff800`e534a000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff800`e5330000 fffff800`e533e000   nsiproxy nsiproxy.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff802`37487000 fffff802`37c10000   nt       ntkrnlmp.exe Sun Mar 30 17:35:15 2014 (53388E13)
fffff800`e3c94000 fffff800`e3e8a000   Ntfs     Ntfs.sys     Tue Mar 18 23:58:52 2014 (532915FC)
fffff800`e4d98000 fffff800`e4da1000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e67a5000 fffff800`e67d9000   nvhda64v nvhda64v.sys Sun Jun 16 08:38:07 2013 (51BDB1AF)
fffff800`e5441000 fffff800`e60a5000   nvlddmkm nvlddmkm.sys Mon May 19 19:08:44 2014 (537A8EFC)
fffff800`e516f000 fffff800`e5199000   pacer    pacer.sys    Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff800`e341c000 fffff800`e3434000   partmgr  partmgr.sys  Thu Aug 22 07:40:20 2013 (5215F8A4)
fffff800`e3592000 fffff800`e35da000   pci      pci.sys      Sat Feb 22 07:12:41 2014 (53089439)
fffff800`e3ea6000 fffff800`e3eb6000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff800`e3400000 fffff800`e341c000   pdc      pdc.sys      Fri Nov 01 00:58:42 2013 (52733502)
fffff800`e785b000 fffff800`e7904000   peauth   peauth.sys   Sat Feb 22 07:09:37 2014 (53089381)
fffff800`e6e00000 fffff800`e6e4f000   PGPdisk  PGPdisk.SYS  Mon Apr 14 16:25:59 2014 (534C4457)
fffff800`e3bc9000 fffff800`e3c00000   PGPfsfd  PGPfsfd.sys  Mon Apr 14 16:25:55 2014 (534C4453)
fffff800`e5320000 fffff800`e5330000   PGPsdk   PGPsdk.sys   Mon Apr 14 16:25:51 2014 (534C444F)
fffff800`e3767000 fffff800`e37cf000   PGPwded  PGPwded.sys  Mon Apr 14 16:25:45 2014 (534C4449)
fffff800`e3800000 fffff800`e3809000   Pgpwdefs Pgpwdefs.sys Mon Apr 14 16:25:18 2014 (534C442E)
fffff800`e6400000 fffff800`e6447000   portcls  portcls.sys  Sat Feb 22 07:11:25 2014 (530893ED)
fffff800`e312a000 fffff800`e313f000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff800`e4600000 fffff800`e4670000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff800`e6723000 fffff800`e672e000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`e79c3000 fffff800`e79f7000   rdpdr    rdpdr.sys    Thu Aug 22 07:36:46 2013 (5215F7CE)
fffff800`e7bea000 fffff800`e7bf5000   rdpvideominiport rdpvideominiport.sys Thu Aug 22 07:38:52 2013 (5215F84C)
fffff800`e4444000 fffff800`e448a000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff800`e73d9000 fffff800`e73f1000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e6264000 fffff800`e633b000   Rt630x64 Rt630x64.sys Thu May 08 07:01:57 2014 (536B6425)
fffff800`e6873000 fffff800`e6c38900   RTKVHD64 RTKVHD64.sys Wed May 14 06:28:52 2014 (53734564)
fffff800`e4000000 fffff800`e403e000   SamsungRapidDiskFltr SamsungRapidDiskFltr.sys Mon Jul 29 14:55:38 2013 (51F6BAAA)
fffff800`e3747000 fffff800`e3767000   SamsungRapidFSFltr SamsungRapidFSFltr.sys Mon Jul 29 14:55:39 2013 (51F6BAAB)
fffff800`e7904000 fffff800`e790f000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff800`e4400000 fffff800`e4444000   snapman  snapman.sys  Wed Aug 14 08:17:26 2013 (520B7556)
fffff800`e3434000 fffff800`e3495000   spaceport spaceport.sys Tue Apr 01 00:16:52 2014 (533A3DB4)
fffff800`e7a00000 fffff800`e7a98000   srv      srv.sys      Sat Oct 05 07:01:15 2013 (524FF17B)
fffff800`e7acb000 fffff800`e7b78000   srv2     srv2.sys     Wed Apr 02 22:53:54 2014 (533CCD42)
fffff800`e790f000 fffff800`e7952000   srvnet   srvnet.sys   Thu Mar 27 02:16:13 2014 (5333C22D)
fffff800`e3ade000 fffff800`e3b3d000   storport storport.sys Sun Apr 06 10:08:55 2014 (53415FF7)
fffff800`e670f000 fffff800`e6710600   swenum   swenum.sys   Thu Aug 22 07:39:29 2013 (5215F871)
fffff800`e4089000 fffff800`e42fd000   tcpip    tcpip.sys    Sun Mar 30 21:42:44 2014 (5338C814)
fffff800`e7952000 fffff800`e7964000   tcpipreg tcpipreg.sys Thu Mar 06 04:19:59 2014 (53183DBF)
fffff800`e50f8000 fffff800`e5106000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff800`e50d8000 fffff800`e50f8000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`e6145000 fffff800`e6168000   TeeDriverx64 TeeDriverx64.sys Wed May 14 16:22:24 2014 (5373D080)
fffff800`e44b6000 fffff800`e45c9000   tib      tib.sys      Wed Mar 20 05:00:38 2013 (51497AB6)
fffff800`e53b0000 fffff800`e53e3000   tib_mounter tib_mounter.sys Mon Sep 30 09:04:20 2013 (524976D4)
fffff800`e3108000 fffff800`e312a000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff800`e52df000 fffff800`e5320000   truecrypt truecrypt.sys Mon May 26 20:39:59 2014 (5383DEDF)
fffff960`00782000 fffff960`0078b000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff800`e7a98000 fffff800`e7ac5000   tunnel   tunnel.sys   Thu Aug 22 07:35:45 2013 (5215F791)
fffff800`e6113000 fffff800`e6145000   ucx01000 ucx01000.sys Sat Feb 22 07:11:33 2014 (530893F5)
fffff800`e520b000 fffff800`e521c000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff800`e72f4000 fffff800`e7311900   usbaudio usbaudio.sys Fri Dec 13 02:24:20 2013 (52AAB624)
fffff800`e6c4d000 fffff800`e6c77000   usbccgp  usbccgp.sys  Wed Oct 23 04:17:41 2013 (52678625)
fffff800`e6799000 fffff800`e67a5000   USBD     USBD.SYS     Thu Aug 22 07:40:22 2013 (5215F8A6)
fffff800`e6168000 fffff800`e6180000   usbehci  usbehci.sys  Thu Aug 22 07:39:15 2013 (5215F863)
fffff800`e672e000 fffff800`e6799000   usbhub   usbhub.sys   Thu Aug 22 07:38:33 2013 (5215F839)
fffff800`e633b000 fffff800`e63b3000   UsbHub3  UsbHub3.sys  Sat Mar 08 04:23:48 2014 (531AE1A4)
fffff800`e6180000 fffff800`e61ef000   USBPORT  USBPORT.SYS  Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`e6cc9000 fffff800`e6cd6000   usbprint usbprint.sys Thu Aug 22 07:36:32 2013 (5215F7C0)
fffff800`e6cb8000 fffff800`e6cc9000   usbscan  usbscan.sys  Thu Aug 22 07:39:58 2013 (5215F88E)
fffff800`e6cd6000 fffff800`e6cfc000   USBSTOR  USBSTOR.SYS  Sat Feb 22 07:12:08 2014 (53089418)
fffff800`e60be000 fffff800`e6113000   USBXHCI  USBXHCI.SYS  Sat Feb 22 07:11:27 2014 (530893EF)
fffff800`e35da000 fffff800`e35e7000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff800`e3495000 fffff800`e34aa000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff800`e36a2000 fffff800`e3701000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e34aa000 fffff800`e34fa000   volsnap  volsnap.sys  Thu Mar 06 04:26:33 2014 (53183F49)
fffff800`e5033000 fffff800`e5045000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff800`e32e9000 fffff800`e33b8000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff800`e33b8000 fffff800`e33c9000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff800`e3099000 fffff800`e30a7000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff800`e4369000 fffff800`e438e000   wfplwfs  wfplwfs.sys  Sat Mar 08 04:22:45 2014 (531AE165)
fffff960`000fd000 fffff960`00516000   win32k   win32k.sys   Sun Apr 06 10:09:21 2014 (53416011)
fffff800`e669e000 fffff800`e66a8000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff800`e33ec000 fffff800`e33f6000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff800`e371c000 fffff800`e3747000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff800`e7bf5000 fffff800`e7c00000   WpdUpFltr WpdUpFltr.sys Thu Aug 22 07:38:45 2013 (5215F845)
fffff800`e33e1000 fffff800`e33ec000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff800`e7964000 fffff800`e7985000   WudfPf   WudfPf.sys   Thu Aug 22 07:37:21 2013 (5215F7F1)
fffff800`e7985000 fffff800`e79c3000   WUDFRd   WUDFRd.sys   Thu Aug 22 07:36:50 2013 (5215F7D2)

Unloaded modules:
fffff800`e3b3d000 fffff800`e3b57000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001A000
fffff800`e4719000 fffff800`e4725000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff800`e4a60000 fffff800`e4d29000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  002C9000
fffff800`e4d29000 fffff800`e4d3f000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff800`e4d3f000 fffff800`e4d6a000   dump_PGPwdeD
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002B000
fffff800`e66a8000 fffff800`e66e6000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003E000
fffff800`e537c000 fffff800`e538c000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff800`e45c9000 fffff800`e45d5000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
Bugcheck code C000021A
Arguments ffffc001`60ac9010 00000000`00000000 00000000`00000000 00000000`00000000

Patrick · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Hi,

Please refer to the following and reply back accordingly with the required information - https://www.sysnative.com/forums/bs...ctions-windows-8-1-8-7-and-windows-vista.html

Regards,

Patrick

Zardoc · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Hi Patrick,

Wow asking a lot of info.

First obstacle:
having an issue generating the perfmon report in 8.1. It always gives "The operator or administrator has refused the request." Tried running it through cmd prompt as admin, same error.

What's wrong?

Patrick · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Ignore the perfmon for now, it's not entirely necessary, but we like to include it in the instructions.

Regards,

Patrick

Zardoc · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Hi Patrick, it's been looping on ''waiting for system info'' BSOD_Windows7_Vista_v2.64_jcgriff2_ for about 10 minutes. Is that normal?

Patrick · Jun 4, 2014

Re: BSOD Windows 8.1 X64

No, it's not.

Fortunately we're currently going through with a new version of the collection app, so it should be okay upon release. However, for now, for time/convenience purposes, please just go ahead and manually navigate to C:\Windows\Minidump and zip up any crash dumps inside that directory. Once you've done that, please attach the zip file to your next post.

Regards,

Patrick

Zardoc · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Weel,

Here it is, I think :eek4: I added what had accumulated from the Extraction.

View attachment Windows7_Vista_jcgriff2.zip View attachment 8184

Patrick · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Thanks very much.

WINLOGON_FATAL_ERROR (c000021a)

The Winlogon process terminated unexpectedly.

Code:

BugCheck C000021A, {[COLOR=#ff0000]ffffc00160ac9010[/COLOR], 0, 0, 0}

Let's dump the string (1st parameter):

Code:

6: kd> db ffffc00160ac9010
ffffc001`60ac9010  57 69 6e 64 6f 77 73 20-64 6f 69 74 20 6d 61 69  Windows doit mai
ffffc001`60ac9020  6e 74 65 6e 61 6e 74 20-72 65 64 e9 6d 61 72 72  ntenant red.marr
ffffc001`60ac9030  65 72 20 63 61 72 20 6c-65 20 73 65 72 76 69 63  er car le servic
ffffc001`60ac9040  65 20 41 6c 69 6d 65 6e-74 61 74 69 6f 6e 20 73  e Alimentation s
ffffc001`60ac9050  92 65 73 74 20 74 65 72-6d 69 6e e9 20 64 65 20  .est termin. de 
ffffc001`60ac9060  66 61 e7 6f 6e 20 69 6e-61 74 74 65 6e 64 75 65  fa.on inattendue
ffffc001`60ac9070  00 67 ac 60 01 c0 ff ff-60 81 b0 60 01 c0 ff ff  .g.`....`..`....
ffffc001`60ac9080  08 01 04 03 4f 62 4e 6d-c0 12 80 7c 01 e0 ff ff  ....ObNm...|....

Code:

6: kd> da ffffc00160ac9010
ffffc001`60ac9010  "Windows doit maintenant red.marr"
ffffc001`60ac9030  "er car le service Alimentation s"
ffffc001`60ac9050  ".est termin. de fa.on inattendue"
ffffc001`60ac9070  ""

This is French! Luckily I can understand/speak French.

Essentially what's occurring here is the power service for Windows unexpectedly terminated. Why? Well, let's find out.

Generally the cause of this type of termination is malware, however, let's go over a few things:

1. Uninstall Symantec PGP ASAP as it may be causing conflicts with ESET. If you still crash after removing Symantec PGP, please also go ahead and remove and replace ESET with Windows Defender.

ESET removal - How do I uninstall or reinstall ESET Smart Security/ESET NOD32 Antivirus? - ESET Knowledgebase

Windows Defender (how to turn on after removal) - Windows Defender - Turn On or Off in Windows 8

2. Uninstall Samsung Rapid Disk ASAP, very buggy.

3. Uninstall Asus PC Probe as well as any other Asus utilities ASAP! They are all bloatware.

Regards,

Patrick

Zardoc · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Hi Patrick,

Thanks for the heads up. PGP has been installed for about a week so that sounds logical.

Removing it however is not an option because corporate encrypted files are in it. As for Eset, well.... I don't really want to remove it for windows defender. I'll check to see if I can find an alternate to PGP scanning. As for Samsung Rapid disk, even with verifier on I've never had issues with it. Are you sure about that one? :s13:

Thanks for your help!

Zardoc · Jun 4, 2014

Re: BSOD Windows 8.1 X64

Hi Patrick,

I ran verifier and I think that i nailed the problem software. ''Logmein Hamachi''

Does this sound right to you?

Thanks. :banghead:

Code:

Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Lance\Mini dumps Windows\060414-5328-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
OK                                             I:\Système Exploitation MS\Windows 8.1 Update 1 2014-04-10

************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is: I:\Système Exploitation MS\Windows 8.1 Update 1 2014-04-10
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
Machine Name:
Kernel base = 0xfffff800`3608f000 PsLoadedModuleList = 0xfffff800`363592d0
Debug session time: Wed Jun  4 12:33:40.098 2014 (UTC - 4:00)
System Uptime: 0 days 0:00:24.774
Loading Kernel Symbols
...............................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D6, {ffffcf8102617000, 0, ffffe001bd59bed0, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+20c37 )

Followup: MachineOwner
---------

1: kd> !analyze -v;!thread;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_PAGE_FAULT_BEYOND_END_OF_ALLOCATION (d6)
N bytes of memory was allocated and more than N bytes are being referenced.
This cannot be protected by try-except.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: ffffcf8102617000, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: ffffe001bd59bed0, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800363e3138
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 ffffcf8102617000 

FAULTING_IP: 
+c843f9d3c0
ffffe001`bd59bed0 66837c410200    cmp     word ptr [rcx+rax*2+2],0

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD6

PROCESS_NAME:  LMIGuardianSvc

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

TRAP_FRAME:  ffffd00022d46290 -- (.trap 0xffffd00022d46290)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=000000000000003b rbx=0000000000000000 rcx=ffffcf8102616f88
rdx=000000000000009e rsi=0000000000000000 rdi=0000000000000000
rip=ffffe001bd59bed0 rsp=ffffd00022d46420 rbp=ffffcf8102618f28
 r8=00000000000000ce  r9=0000000000000006 r10=ffffcf8102616ff8
r11=ffffcf8102616f88 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
ffffe001`bd59bed0 66837c410200    cmp     word ptr [rcx+rax*2+2],0 ds:ffffcf81`02617000=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800362140e7 to fffff800361e2fa0

STACK_TEXT:  
ffffd000`22d460a8 fffff800`362140e7 : 00000000`00000050 ffffcf81`02617000 00000000`00000000 ffffd000`22d46290 : nt!KeBugCheckEx
ffffd000`22d460b0 fffff800`360f69c9 : 00000000`00000000 ffffe001`beff5880 ffffd000`22d46290 fffff801`6e1c2443 : nt! ?? ::FNODOBFM::`string'+0x20c37
ffffd000`22d46150 fffff800`361ed22f : 00000000`00000000 ffffe001`bd5f71b4 00000000`00000000 ffffd000`22d46290 : nt!MmAccessFault+0x7a9
ffffd000`22d46290 ffffe001`bd59bed0 : ffffcf81`027d6fc8 ffffe001`bd5c6096 ffffcf81`027bcfd8 ffffd000`22d46230 : nt!KiPageFault+0x12f
ffffd000`22d46420 ffffcf81`027d6fc8 : ffffe001`bd5c6096 ffffcf81`027bcfd8 ffffd000`22d46230 00000000`00000104 : 0xffffe001`bd59bed0
ffffd000`22d46428 ffffe001`bd5c6096 : ffffcf81`027bcfd8 ffffd000`22d46230 00000000`00000104 ffffcf81`02616f88 : 0xffffcf81`027d6fc8
ffffd000`22d46430 ffffcf81`027bcfd8 : ffffd000`22d46230 00000000`00000104 ffffcf81`02616f88 00000000`0000009e : 0xffffe001`bd5c6096
ffffd000`22d46438 ffffd000`22d46230 : 00000000`00000104 ffffcf81`02616f88 00000000`0000009e 00000000`000000ce : 0xffffcf81`027bcfd8
ffffd000`22d46440 00000000`00000104 : ffffcf81`02616f88 00000000`0000009e 00000000`000000ce 00000000`00000006 : 0xffffd000`22d46230
ffffd000`22d46448 ffffcf81`02616f88 : 00000000`0000009e 00000000`000000ce 00000000`00000006 ffffe001`bd5abb3c : 0x104
ffffd000`22d46450 00000000`0000009e : 00000000`000000ce 00000000`00000006 ffffe001`bd5abb3c 00000000`00000000 : 0xffffcf81`02616f88
ffffd000`22d46458 00000000`000000ce : 00000000`00000006 ffffe001`bd5abb3c 00000000`00000000 ffffcf80`f64e8e68 : 0x9e
ffffd000`22d46460 00000000`00000006 : ffffe001`bd5abb3c 00000000`00000000 ffffcf80`f64e8e68 00000000`00000000 : 0xce
ffffd000`22d46468 ffffe001`bd5abb3c : 00000000`00000000 ffffcf80`f64e8e68 00000000`00000000 00000000`00000001 : 0x6
ffffd000`22d46470 00000000`00000000 : ffffcf80`f64e8e68 00000000`00000000 00000000`00000001 ffffe001`bd5f71b4 : 0xffffe001`bd5abb3c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+20c37
fffff800`362140e7 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+20c37

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  53388e13

IMAGE_VERSION:  6.3.9600.17085

BUCKET_ID_FUNC_OFFSET:  20c37

FAILURE_BUCKET_ID:  0xD6_VRF_nt!_??_::FNODOBFM::_string_

BUCKET_ID:  0xD6_VRF_nt!_??_::FNODOBFM::_string_

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0xd6_vrf_nt!_??_::fnodobfm::_string_

FAILURE_ID_HASH:  {2b0231ea-dff7-5fd8-a8f7-4cd554443273}

Followup: MachineOwner
---------

GetPointerFromAddress: unable to read from fffff800363e3000
THREAD ffffe001beff5880  Cid 0a3c.0a80  Teb: 00007ff741a69000 Win32Thread: 0000000000000000 RUNNING on processor 1
Not impersonating
GetUlongFromAddress: unable to read from fffff8003632f300
Owning Process            ffffe001befb9080       Image:         LMIGuardianSvc
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      1585         
Context Switch Count      52             IdealProcessor: 7             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x00007ffb4a1b81b0
Stack Init ffffd00022d46c90 Current ffffd00022d45b50
Base ffffd00022d47000 Limit ffffd00022d41000 Call 0
Priority 9 BasePriority 8 UnusualBoost 1 ForegroundBoost 0 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`22d460a8 fffff800`362140e7 : 00000000`00000050 ffffcf81`02617000 00000000`00000000 ffffd000`22d46290 : nt!KeBugCheckEx
ffffd000`22d460b0 fffff800`360f69c9 : 00000000`00000000 ffffe001`beff5880 ffffd000`22d46290 fffff801`6e1c2443 : nt! ?? ::FNODOBFM::`string'+0x20c37
ffffd000`22d46150 fffff800`361ed22f : 00000000`00000000 ffffe001`bd5f71b4 00000000`00000000 ffffd000`22d46290 : nt!MmAccessFault+0x7a9
ffffd000`22d46290 ffffe001`bd59bed0 : ffffcf81`027d6fc8 ffffe001`bd5c6096 ffffcf81`027bcfd8 ffffd000`22d46230 : nt!KiPageFault+0x12f (TrapFrame @ ffffd000`22d46290)
ffffd000`22d46420 ffffcf81`027d6fc8 : ffffe001`bd5c6096 ffffcf81`027bcfd8 ffffd000`22d46230 00000000`00000104 : 0xffffe001`bd59bed0
ffffd000`22d46428 ffffe001`bd5c6096 : ffffcf81`027bcfd8 ffffd000`22d46230 00000000`00000104 ffffcf81`02616f88 : 0xffffcf81`027d6fc8
ffffd000`22d46430 ffffcf81`027bcfd8 : ffffd000`22d46230 00000000`00000104 ffffcf81`02616f88 00000000`0000009e : 0xffffe001`bd5c6096
ffffd000`22d46438 ffffd000`22d46230 : 00000000`00000104 ffffcf81`02616f88 00000000`0000009e 00000000`000000ce : 0xffffcf81`027bcfd8
ffffd000`22d46440 00000000`00000104 : ffffcf81`02616f88 00000000`0000009e 00000000`000000ce 00000000`00000006 : 0xffffd000`22d46230
ffffd000`22d46448 ffffcf81`02616f88 : 00000000`0000009e 00000000`000000ce 00000000`00000006 ffffe001`bd5abb3c : 0x104
ffffd000`22d46450 00000000`0000009e : 00000000`000000ce 00000000`00000006 ffffe001`bd5abb3c 00000000`00000000 : 0xffffcf81`02616f88
ffffd000`22d46458 00000000`000000ce : 00000000`00000006 ffffe001`bd5abb3c 00000000`00000000 ffffcf80`f64e8e68 : 0x9e
ffffd000`22d46460 00000000`00000006 : ffffe001`bd5abb3c 00000000`00000000 ffffcf80`f64e8e68 00000000`00000000 : 0xce
ffffd000`22d46468 ffffe001`bd5abb3c : 00000000`00000000 ffffcf80`f64e8e68 00000000`00000000 00000000`00000001 : 0x6
ffffd000`22d46470 00000000`00000000 : ffffcf80`f64e8e68 00000000`00000000 00000000`00000001 ffffe001`bd5f71b4 : 0xffffe001`bd5abb3c

rax=0000000000000000 rbx=7800363460000000 rcx=0000000000000050
rdx=ffffcf8102617000 rsi=fffff6e7c08130b8 rdi=ffffe001befb9011
rip=fffff800361e2fa0 rsp=ffffd00022d460a8 rbp=0000000000000000
 r8=0000000000000000  r9=ffffd00022d46290 r10=0000000000000000
r11=ffffd00022d46290 r12=0000000000000000 r13=fffff800363dbec0
r14=fffff800363dbed0 r15=ffffcf8102617000
iopl=0         nv up ei ng nz ac po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000297
nt!KeBugCheckEx:
fffff800`361e2fa0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`22d460b0=0000000000000050
Child-SP          RetAddr           : Args to Child                                                           : Call Site
ffffd000`22d460a8 fffff800`362140e7 : 00000000`00000050 ffffcf81`02617000 00000000`00000000 ffffd000`22d46290 : nt!KeBugCheckEx
ffffd000`22d460b0 fffff800`360f69c9 : 00000000`00000000 ffffe001`beff5880 ffffd000`22d46290 fffff801`6e1c2443 : nt! ?? ::FNODOBFM::`string'+0x20c37
ffffd000`22d46150 fffff800`361ed22f : 00000000`00000000 ffffe001`bd5f71b4 00000000`00000000 ffffd000`22d46290 : nt!MmAccessFault+0x7a9
ffffd000`22d46290 ffffe001`bd59bed0 : ffffcf81`027d6fc8 ffffe001`bd5c6096 ffffcf81`027bcfd8 ffffd000`22d46230 : nt!KiPageFault+0x12f (TrapFrame @ ffffd000`22d46290)
ffffd000`22d46420 ffffcf81`027d6fc8 : ffffe001`bd5c6096 ffffcf81`027bcfd8 ffffd000`22d46230 00000000`00000104 : 0xffffe001`bd59bed0
ffffd000`22d46428 ffffe001`bd5c6096 : ffffcf81`027bcfd8 ffffd000`22d46230 00000000`00000104 ffffcf81`02616f88 : 0xffffcf81`027d6fc8
ffffd000`22d46430 ffffcf81`027bcfd8 : ffffd000`22d46230 00000000`00000104 ffffcf81`02616f88 00000000`0000009e : 0xffffe001`bd5c6096
ffffd000`22d46438 ffffd000`22d46230 : 00000000`00000104 ffffcf81`02616f88 00000000`0000009e 00000000`000000ce : 0xffffcf81`027bcfd8
ffffd000`22d46440 00000000`00000104 : ffffcf81`02616f88 00000000`0000009e 00000000`000000ce 00000000`00000006 : 0xffffd000`22d46230
ffffd000`22d46448 ffffcf81`02616f88 : 00000000`0000009e 00000000`000000ce 00000000`00000006 ffffe001`bd5abb3c : 0x104
ffffd000`22d46450 00000000`0000009e : 00000000`000000ce 00000000`00000006 ffffe001`bd5abb3c 00000000`00000000 : 0xffffcf81`02616f88
ffffd000`22d46458 00000000`000000ce : 00000000`00000006 ffffe001`bd5abb3c 00000000`00000000 ffffcf80`f64e8e68 : 0x9e
ffffd000`22d46460 00000000`00000006 : ffffe001`bd5abb3c 00000000`00000000 ffffcf80`f64e8e68 00000000`00000000 : 0xce
ffffd000`22d46468 ffffe001`bd5abb3c : 00000000`00000000 ffffcf80`f64e8e68 00000000`00000000 00000000`00000001 : 0x6
ffffd000`22d46470 00000000`00000000 : ffffcf80`f64e8e68 00000000`00000000 00000000`00000001 ffffe001`bd5f71b4 : 0xffffe001`bd5abb3c
start             end                 module name
fffff800`351fe000 fffff800`35207000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff800`3601f000 fffff800`3608f000   hal      hal.dll      Sat Feb 22 07:15:53 2014 (530894F9)
fffff800`3608f000 fffff800`36818000   nt       ntkrnlmp.exe Sun Mar 30 17:35:15 2014 (53388E13)
fffff801`6c200000 fffff801`6c288000   CI       CI.dll       Sat Feb 22 07:12:12 2014 (5308941C)
fffff801`6c2cb000 fffff801`6c331000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 07:40:16 2013 (5215F8A0)
fffff801`6c331000 fffff801`6c33f000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6c33f000 fffff801`6c3a0000   CLFS     CLFS.SYS     Wed Mar 19 04:12:20 2014 (53295164)
fffff801`6c3a0000 fffff801`6c3c2000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff801`6c3c2000 fffff801`6c3d7000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff801`6c3d7000 fffff801`6c3e1000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`6c410000 fffff801`6c46d000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff801`6c46d000 fffff801`6c4e1000   VerifierExt VerifierExt.sys Sat Sep 14 07:40:56 2013 (52344B48)
fffff801`6c4e1000 fffff801`6c5b0000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff801`6c5b0000 fffff801`6c5c1000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`6c5c1000 fffff801`6c5d9000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff801`6c5d9000 fffff801`6c5e4000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)
fffff801`6c600000 fffff801`6c61c000   pdc      pdc.sys      Fri Nov 01 00:58:42 2013 (52733502)
fffff801`6c61c000 fffff801`6c634000   partmgr  partmgr.sys  Thu Aug 22 07:40:20 2013 (5215F8A4)
fffff801`6c67c000 fffff801`6c706000   ACPI     ACPI.sys     Sat Feb 22 07:13:57 2014 (53089485)
fffff801`6c706000 fffff801`6c710000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`6c710000 fffff801`6c79b000   cng      cng.sys      Sat Mar 08 04:25:08 2014 (531AE1F4)
fffff801`6c79b000 fffff801`6c7a5000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`6c7a5000 fffff801`6c7ed000   pci      pci.sys      Sat Feb 22 07:12:41 2014 (53089439)
fffff801`6c7ed000 fffff801`6c7fa000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff801`6c863000 fffff801`6c8c4000   spaceport spaceport.sys Tue Apr 01 00:16:52 2014 (533A3DB4)
fffff801`6c8c4000 fffff801`6c8d9000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff801`6c8d9000 fffff801`6c938000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`6c938000 fffff801`6c953000   mountmgr mountmgr.sys Thu Aug 22 07:40:04 2013 (5215F894)
fffff801`6c953000 fffff801`6c97e000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff801`6c97e000 fffff801`6c99e000   SamsungRapidFSFltr SamsungRapidFSFltr.sys Mon Jul 29 14:55:39 2013 (51F6BAAB)
fffff801`6ca00000 fffff801`6ca5c000   fltmgr   fltmgr.sys   Sun Apr 06 10:10:42 2014 (53416062)
fffff801`6ca5c000 fffff801`6ca72000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff801`6ca72000 fffff801`6caa9000   PGPfsfd  PGPfsfd.sys  Mon Apr 14 16:25:55 2014 (534C4453)
fffff801`6caa9000 fffff801`6cab2000   Pgpwdefs Pgpwdefs.sys Mon Apr 14 16:25:18 2014 (534C442E)
fffff801`6cab8000 fffff801`6cd81000   iaStorA  iaStorA.sys  Fri May 02 19:06:56 2014 (53642510)
fffff801`6cd81000 fffff801`6cde0000   storport storport.sys Sun Apr 06 10:08:55 2014 (53415FF7)
fffff801`6ce00000 fffff801`6ce55000   CLASSPNP CLASSPNP.SYS Wed Apr 09 02:53:25 2014 (5344EE65)
fffff801`6ce55000 fffff801`6ce88000   tib_mounter tib_mounter.sys Mon Sep 30 09:04:20 2013 (524976D4)
fffff801`6ceb0000 fffff801`6cf18000   PGPwded  PGPwded.sys  Mon Apr 14 16:25:45 2014 (534C4449)
fffff801`6cf18000 fffff801`6cfad000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff801`6cfad000 fffff801`6cffd000   volsnap  volsnap.sys  Thu Mar 06 04:26:33 2014 (53183F49)
fffff801`6d000000 fffff801`6d079000   NETIO    NETIO.SYS    Thu Aug 22 07:37:08 2013 (5215F7E4)
fffff801`6d079000 fffff801`6d0aa000   ksecpkg  ksecpkg.sys  Sat Mar 08 04:24:07 2014 (531AE1B7)
fffff801`6d0b0000 fffff801`6d2a6000   Ntfs     Ntfs.sys     Tue Mar 18 23:58:52 2014 (532915FC)
fffff801`6d2a6000 fffff801`6d2c2000   ksecdd   ksecdd.sys   Sat Sep 21 03:59:44 2013 (523D51F0)
fffff801`6d2c2000 fffff801`6d2d2000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff801`6d2d2000 fffff801`6d2dd000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff801`6d2dd000 fffff801`6d3f5000   ndis     ndis.sys     Sat Feb 22 07:12:58 2014 (5308944A)
fffff801`6d400000 fffff801`6d43e000   SamsungRapidDiskFltr SamsungRapidDiskFltr.sys Mon Jul 29 14:55:38 2013 (51F6BAAA)
fffff801`6d43e000 fffff801`6d453000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff801`6d453000 fffff801`6d464000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff801`6d47e000 fffff801`6d6f2000   tcpip    tcpip.sys    Sun Mar 30 21:42:44 2014 (5338C814)
fffff801`6d6f2000 fffff801`6d75e000   fwpkclnt fwpkclnt.sys Sun Mar 30 21:39:34 2014 (5338C756)
fffff801`6d75e000 fffff801`6d783000   wfplwfs  wfplwfs.sys  Sat Mar 08 04:22:45 2014 (531AE165)
fffff801`6d783000 fffff801`6d7a1000   fltsrv   fltsrv.sys   Mon May 13 05:40:09 2013 (5190B4F9)
fffff801`6d7a1000 fffff801`6d7de000   edevmon  edevmon.sys  Mon Aug 19 09:00:54 2013 (52121706)
fffff801`6d800000 fffff801`6d844000   snapman  snapman.sys  Wed Aug 14 08:17:26 2013 (520B7556)
fffff801`6d844000 fffff801`6d88a000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff801`6d88a000 fffff801`6d8a1000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff801`6d8a1000 fffff801`6d8b0000   intelpep intelpep.sys Sat Nov 09 03:45:55 2013 (527DF643)
fffff801`6d8bd000 fffff801`6d9d0000   tib      tib.sys      Wed Mar 20 05:00:38 2013 (51497AB6)
fffff801`6d9d0000 fffff801`6d9ec000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff801`6dc00000 fffff801`6dc8e000   csc      csc.sys      Thu Aug 22 07:38:00 2013 (5215F818)
fffff801`6dc8e000 fffff801`6dca5000   ahcache  ahcache.sys  Thu Aug 22 07:39:54 2013 (5215F88A)
fffff801`6dca5000 fffff801`6dcb0000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff801`6dcb0000 fffff801`6df79000   dump_iaStorA dump_iaStorA.sys Fri May 02 19:06:56 2014 (53642510)
fffff801`6dfc6000 fffff801`6dff4000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff801`6e000000 fffff801`6e070000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff801`6e070000 fffff801`6e07c000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff801`6e07c000 fffff801`6e0a2000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff801`6e0a2000 fffff801`6e0b1000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff801`6e0b2000 fffff801`6e0b8000   AsIO     AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
fffff801`6e0b8000 fffff801`6e0c6000   Hamdrv   Hamdrv.sys   Tue Apr 15 04:46:09 2014 (534CF1D1)
fffff801`6e0c9000 fffff801`6e197000   eamonm   eamonm.sys   Thu Aug 15 10:53:50 2013 (520CEB7E)
fffff801`6e197000 fffff801`6e1a0000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6e1a0000 fffff801`6e1a8000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6e1a8000 fffff801`6e1d5000   ehdrv    ehdrv.sys    Thu Aug 15 10:54:11 2013 (520CEB93)
fffff801`6e1d5000 fffff801`6e1eaf00   ctxusbm  ctxusbm.sys  Mon Sep 09 12:02:22 2013 (522DF10E)
fffff801`6e1eb000 fffff801`6e1f9000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff801`6e200000 fffff801`6e292000   afd      afd.sys      Wed Apr 02 22:23:08 2014 (533CC60C)
fffff801`6e292000 fffff801`6e2a2000   PGPsdk   PGPsdk.sys   Mon Apr 14 16:25:51 2014 (534C444F)
fffff801`6e2a2000 fffff801`6e2b0000   nsiproxy nsiproxy.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`6e2b0000 fffff801`6e2b7000   AsUpIO   AsUpIO.sys   Mon Aug 02 22:47:59 2010 (4C57835F)
fffff801`6e2ba000 fffff801`6e43b000   dxgkrnl  dxgkrnl.sys  Thu Mar 06 04:22:58 2014 (53183E72)
fffff801`6e43b000 fffff801`6e44d000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff801`6e44d000 fffff801`6e4ae000   dxgmms1  dxgmms1.sys  Thu Mar 06 04:22:14 2014 (53183E46)
fffff801`6e4ae000 fffff801`6e4c0000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`6e4c0000 fffff801`6e4d4000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff801`6e4d4000 fffff801`6e4e0000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6e4e0000 fffff801`6e500000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`6e500000 fffff801`6e50e000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff801`6e50e000 fffff801`6e52b000   NEOFLTR_740_30599 NEOFLTR_740_30599.SYS Tue Apr 08 11:06:04 2014 (5344105C)
fffff801`6e52b000 fffff801`6e577000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff801`6e577000 fffff801`6e5a1000   pacer    pacer.sys    Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff801`6e5a1000 fffff801`6e5b2000   netbios  netbios.sys  Thu Aug 22 07:38:58 2013 (5215F852)
fffff801`6e5b2000 fffff801`6e5f3000   truecrypt truecrypt.sys Mon May 26 20:39:59 2014 (5383DEDF)
fffff801`6e5f3000 fffff801`6e5ff000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff801`6e600000 fffff801`6e66f000   USBPORT  USBPORT.SYS  Thu Aug 22 07:39:40 2013 (5215F87C)
fffff801`6e66f000 fffff801`6e6b6000   portcls  portcls.sys  Sat Feb 22 07:11:25 2014 (530893ED)
fffff801`6e6ba000 fffff801`6f31e000   nvlddmkm nvlddmkm.sys Mon May 19 19:08:44 2014 (537A8EFC)
fffff801`6f31e000 fffff801`6f337000   HDAudBus HDAudBus.sys Tue Mar 18 04:19:14 2014 (53280182)
fffff801`6f337000 fffff801`6f38c000   USBXHCI  USBXHCI.SYS  Sat Feb 22 07:11:27 2014 (530893EF)
fffff801`6f38c000 fffff801`6f3be000   ucx01000 ucx01000.sys Sat Feb 22 07:11:33 2014 (530893F5)
fffff801`6f3be000 fffff801`6f3e1000   TeeDriverx64 TeeDriverx64.sys Wed May 14 16:22:24 2014 (5373D080)
fffff801`6f3e1000 fffff801`6f3f9000   usbehci  usbehci.sys  Thu Aug 22 07:39:15 2013 (5215F863)
fffff801`6f400000 fffff801`6f434000   nvhda64v nvhda64v.sys Sun Jun 16 08:38:07 2013 (51BDB1AF)
fffff801`6f444000 fffff801`6f51b000   Rt630x64 Rt630x64.sys Thu May 08 07:01:57 2014 (536B6425)
fffff801`6f51b000 fffff801`6f56a000   ks       ks.sys       Sat Feb 22 07:14:40 2014 (530894B0)
fffff801`6f56a000 fffff801`6f5d5000   usbhub   usbhub.sys   Thu Aug 22 07:38:33 2013 (5215F839)
fffff801`6f5d5000 fffff801`6f5f1000   drmk     drmk.sys     Thu Aug 22 07:39:24 2013 (5215F86C)
fffff801`6f600000 fffff801`6f61e000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff801`6f61e000 fffff801`6f629000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff801`6f629000 fffff801`6f62a600   swenum   swenum.sys   Thu Aug 22 07:39:29 2013 (5215F871)
fffff801`6f62b000 fffff801`6f63d000   circlass circlass.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff801`6f642000 fffff801`6f7ca080   hcw89    hcw89.sys    Tue Jul 10 10:53:40 2012 (4FFC41F4)
fffff801`6f7cb000 fffff801`6f7cef80   BdaSup   BdaSup.SYS   Thu Aug 22 07:39:23 2013 (5215F86B)
fffff801`6f7cf000 fffff801`6f7d4300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`6f7d5000 fffff801`6f7dbc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff801`6f7dc000 fffff801`6f7e6000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff801`6f7e6000 fffff801`6f7f1000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff801`6f7f1000 fffff801`6f7fd000   USBD     USBD.SYS     Thu Aug 22 07:40:22 2013 (5215F8A6)
fffff801`6f8ae000 fffff801`6f926000   UsbHub3  UsbHub3.sys  Sat Mar 08 04:23:48 2014 (531AE1A4)
fffff801`6fa59000 fffff801`6fe1e900   RTKVHD64 RTKVHD64.sys Wed May 14 06:28:52 2014 (53734564)
fffff801`6fe1f000 fffff801`6fe26f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`6fe27000 fffff801`6fe33000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff801`6fe33000 fffff801`6fe5d000   usbccgp  usbccgp.sys  Wed Oct 23 04:17:41 2013 (52678625)
fffff801`6fe5d000 fffff801`6fe73000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff801`6fe73000 fffff801`6fe9e000   dump_PGPwdeDumpFilter dump_PGPwdeDumpFilter.sys Mon Apr 14 16:25:52 2014 (534C4450)
fffff801`6fe9e000 fffff801`6feac000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff801`6feac000 fffff801`6fecb000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff801`6fecb000 fffff801`6fed9000   kbdhid   kbdhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff801`6fed9000 fffff801`6fee9000   kbdclass kbdclass.sys Thu Aug 22 07:39:23 2013 (5215F86B)
fffff801`6fee9000 fffff801`6fef6000   mouhid   mouhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff801`6fef6000 fffff801`6ff06000   mouclass mouclass.sys Thu Aug 22 07:39:13 2013 (5215F861)
fffff801`6ff06000 fffff801`6ff17000   usbscan  usbscan.sys  Thu Aug 22 07:39:58 2013 (5215F88E)
fffff801`6ff17000 fffff801`6ff24000   usbprint usbprint.sys Thu Aug 22 07:36:32 2013 (5215F7C0)
fffff801`6ff24000 fffff801`6ff4a000   USBSTOR  USBSTOR.SYS  Sat Feb 22 07:12:08 2014 (53089418)
fffff801`70002000 fffff801`70489d80   lvuvc64  lvuvc64.sys  Mon Oct 22 22:12:08 2012 (5085FCF8)
fffff801`7048a000 fffff801`704a7900   usbaudio usbaudio.sys Fri Dec 13 02:24:20 2013 (52AAB624)
fffff801`704a8000 fffff801`704fc000   lvrs64   lvrs64.sys   Mon Oct 22 22:11:24 2012 (5085FCCC)
fffff801`704fc000 fffff801`70520000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff801`70520000 fffff801`7052e000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff801`7052e000 fffff801`70542000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff801`70542000 fffff801`7055a000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`7055a000 fffff801`705a9000   PGPdisk  PGPdisk.SYS  Mon Apr 14 16:25:59 2014 (534C4457)
fffff801`705a9000 fffff801`705d3000   epfwwfpr epfwwfpr.sys Thu Aug 15 10:55:17 2013 (520CEBD5)
fffff801`70800000 fffff801`7086c000   mrxsmb   mrxsmb.sys   Wed Apr 02 22:23:03 2014 (533CC607)
fffff801`7086c000 fffff801`708a5000   mrxsmb20 mrxsmb20.sys Mon Mar 24 18:58:59 2014 (5330B8B3)
fffff801`708bf000 fffff801`709b9000   HTTP     HTTP.sys     Mon Jan 27 14:48:02 2014 (52E6B7F2)
fffff801`709b9000 fffff801`709d9000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff801`709d9000 fffff801`709f0000   mpsdrv   mpsdrv.sys   Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff960`000ca000 fffff960`004e3000   win32k   win32k.sys   Sun Apr 06 10:09:21 2014 (53416011)
fffff960`00660000 fffff960`00669000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff960`008ba000 fffff960`008f5000   cdd      cdd.dll      unavailable (00000000)
fffff960`00aee000 fffff960`00b4d000   ATMFD    ATMFD.DLL    unavailable (00000000)

Unloaded modules:
fffff801`6cde0000 fffff801`6cdfa000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001A000
fffff801`6d9ec000 fffff801`6d9f8000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff801`6dcbc000 fffff801`6df85000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  002C9000
fffff801`6df85000 fffff801`6df9b000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff801`6df9b000 fffff801`6dfc6000   dump_PGPwdeD
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002B000
fffff801`6f600000 fffff801`6f63e000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003E000
fffff801`6e0a2000 fffff801`6e0b2000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff801`6d8b0000 fffff801`6d8bc000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
start             end                 module name
fffff801`6c67c000 fffff801`6c706000   ACPI     ACPI.sys     Sat Feb 22 07:13:57 2014 (53089485)
fffff801`6c5c1000 fffff801`6c5d9000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff801`6e200000 fffff801`6e292000   afd      afd.sys      Wed Apr 02 22:23:08 2014 (533CC60C)
fffff801`6dc8e000 fffff801`6dca5000   ahcache  ahcache.sys  Thu Aug 22 07:39:54 2013 (5215F88A)
fffff801`6e0b2000 fffff801`6e0b8000   AsIO     AsIO.sys     Wed Aug 22 05:54:47 2012 (5034AC67)
fffff801`6e2b0000 fffff801`6e2b7000   AsUpIO   AsUpIO.sys   Mon Aug 02 22:47:59 2010 (4C57835F)
fffff960`00aee000 fffff960`00b4d000   ATMFD    ATMFD.DLL    unavailable (00000000)
fffff801`6e4ae000 fffff801`6e4c0000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`6e1eb000 fffff801`6e1f9000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff801`6f7cb000 fffff801`6f7cef80   BdaSup   BdaSup.SYS   Thu Aug 22 07:39:23 2013 (5215F86B)
fffff801`6e1a0000 fffff801`6e1a8000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6c3d7000 fffff801`6c3e1000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`709b9000 fffff801`709d9000   bowser   bowser.sys   Thu Aug 22 07:38:38 2013 (5215F83E)
fffff960`008ba000 fffff960`008f5000   cdd      cdd.dll      unavailable (00000000)
fffff801`6dfc6000 fffff801`6dff4000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff801`6c200000 fffff801`6c288000   CI       CI.dll       Sat Feb 22 07:12:12 2014 (5308941C)
fffff801`6f62b000 fffff801`6f63d000   circlass circlass.sys Thu Aug 22 07:38:25 2013 (5215F831)
fffff801`6ce00000 fffff801`6ce55000   CLASSPNP CLASSPNP.SYS Wed Apr 09 02:53:25 2014 (5344EE65)
fffff801`6c33f000 fffff801`6c3a0000   CLFS     CLFS.SYS     Wed Mar 19 04:12:20 2014 (53295164)
fffff801`6c710000 fffff801`6c79b000   cng      cng.sys      Sat Mar 08 04:25:08 2014 (531AE1F4)
fffff801`6e0a2000 fffff801`6e0b1000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff801`6d43e000 fffff801`6d453000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff801`6dc00000 fffff801`6dc8e000   csc      csc.sys      Thu Aug 22 07:38:00 2013 (5215F818)
fffff801`6e1d5000 fffff801`6e1eaf00   ctxusbm  ctxusbm.sys  Mon Sep 09 12:02:22 2013 (522DF10E)
fffff801`6e07c000 fffff801`6e0a2000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff801`6d9d0000 fffff801`6d9ec000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff801`6f5d5000 fffff801`6f5f1000   drmk     drmk.sys     Thu Aug 22 07:39:24 2013 (5215F86C)
fffff801`6fe27000 fffff801`6fe33000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff801`6fe5d000 fffff801`6fe73000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff801`6dcb0000 fffff801`6df79000   dump_iaStorA dump_iaStorA.sys Fri May 02 19:06:56 2014 (53642510)
fffff801`6fe73000 fffff801`6fe9e000   dump_PGPwdeDumpFilter dump_PGPwdeDumpFilter.sys Mon Apr 14 16:25:52 2014 (534C4450)
fffff801`6e2ba000 fffff801`6e43b000   dxgkrnl  dxgkrnl.sys  Thu Mar 06 04:22:58 2014 (53183E72)
fffff801`6e44d000 fffff801`6e4ae000   dxgmms1  dxgmms1.sys  Thu Mar 06 04:22:14 2014 (53183E46)
fffff801`6e0c9000 fffff801`6e197000   eamonm   eamonm.sys   Thu Aug 15 10:53:50 2013 (520CEB7E)
fffff801`6d7a1000 fffff801`6d7de000   edevmon  edevmon.sys  Mon Aug 19 09:00:54 2013 (52121706)
fffff801`6e1a8000 fffff801`6e1d5000   ehdrv    ehdrv.sys    Thu Aug 15 10:54:11 2013 (520CEB93)
fffff801`705a9000 fffff801`705d3000   epfwwfpr epfwwfpr.sys Thu Aug 15 10:55:17 2013 (520CEBD5)
fffff801`6ca5c000 fffff801`6ca72000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff801`6ca00000 fffff801`6ca5c000   fltmgr   fltmgr.sys   Sun Apr 06 10:10:42 2014 (53416062)
fffff801`6d783000 fffff801`6d7a1000   fltsrv   fltsrv.sys   Mon May 13 05:40:09 2013 (5190B4F9)
fffff801`6d2d2000 fffff801`6d2dd000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff801`6cf18000 fffff801`6cfad000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff801`6d6f2000 fffff801`6d75e000   fwpkclnt fwpkclnt.sys Sun Mar 30 21:39:34 2014 (5338C756)
fffff801`6f7d5000 fffff801`6f7dbc00   GEARAspiWDM GEARAspiWDM.sys Thu May 03 15:56:17 2012 (4FA2E2E1)
fffff800`3601f000 fffff800`3608f000   hal      hal.dll      Sat Feb 22 07:15:53 2014 (530894F9)
fffff801`6e0b8000 fffff801`6e0c6000   Hamdrv   Hamdrv.sys   Tue Apr 15 04:46:09 2014 (534CF1D1)
fffff801`6f642000 fffff801`6f7ca080   hcw89    hcw89.sys    Tue Jul 10 10:53:40 2012 (4FFC41F4)
fffff801`6f31e000 fffff801`6f337000   HDAudBus HDAudBus.sys Tue Mar 18 04:19:14 2014 (53280182)
fffff801`6feac000 fffff801`6fecb000   HIDCLASS HIDCLASS.SYS Thu Mar 06 04:24:40 2014 (53183ED8)
fffff801`6fe1f000 fffff801`6fe26f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`6fe9e000 fffff801`6feac000   hidusb   hidusb.sys   Thu Mar 06 04:24:14 2014 (53183EBE)
fffff801`708bf000 fffff801`709b9000   HTTP     HTTP.sys     Mon Jan 27 14:48:02 2014 (52E6B7F2)
fffff801`6cab8000 fffff801`6cd81000   iaStorA  iaStorA.sys  Fri May 02 19:06:56 2014 (53642510)
fffff801`6d8a1000 fffff801`6d8b0000   intelpep intelpep.sys Sat Nov 09 03:45:55 2013 (527DF643)
fffff801`6f600000 fffff801`6f61e000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff801`6fed9000 fffff801`6fee9000   kbdclass kbdclass.sys Thu Aug 22 07:39:23 2013 (5215F86B)
fffff801`6fecb000 fffff801`6fed9000   kbdhid   kbdhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff800`351fe000 fffff800`35207000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff801`6dca5000 fffff801`6dcb0000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff801`6f51b000 fffff801`6f56a000   ks       ks.sys       Sat Feb 22 07:14:40 2014 (530894B0)
fffff801`6d2a6000 fffff801`6d2c2000   ksecdd   ksecdd.sys   Sat Sep 21 03:59:44 2013 (523D51F0)
fffff801`6d079000 fffff801`6d0aa000   ksecpkg  ksecpkg.sys  Sat Mar 08 04:24:07 2014 (531AE1B7)
fffff801`6f7cf000 fffff801`6f7d4300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`7052e000 fffff801`70542000   lltdio   lltdio.sys   Thu Aug 22 07:36:18 2013 (5215F7B2)
fffff801`704fc000 fffff801`70520000   luafv    luafv.sys    Sat Feb 22 07:14:25 2014 (530894A1)
fffff801`704a8000 fffff801`704fc000   lvrs64   lvrs64.sys   Mon Oct 22 22:11:24 2012 (5085FCCC)
fffff801`70002000 fffff801`70489d80   lvuvc64  lvuvc64.sys  Mon Oct 22 22:12:08 2012 (5085FCF8)
fffff801`6c2cb000 fffff801`6c331000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 07:40:16 2013 (5215F8A0)
fffff801`70520000 fffff801`7052e000   monitor  monitor.sys  Thu Aug 22 07:36:37 2013 (5215F7C5)
fffff801`6fef6000 fffff801`6ff06000   mouclass mouclass.sys Thu Aug 22 07:39:13 2013 (5215F861)
fffff801`6fee9000 fffff801`6fef6000   mouhid   mouhid.sys   Thu Aug 22 07:39:13 2013 (5215F861)
fffff801`6c938000 fffff801`6c953000   mountmgr mountmgr.sys Thu Aug 22 07:40:04 2013 (5215F894)
fffff801`709d9000 fffff801`709f0000   mpsdrv   mpsdrv.sys   Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff801`70800000 fffff801`7086c000   mrxsmb   mrxsmb.sys   Wed Apr 02 22:23:03 2014 (533CC607)
fffff801`7086c000 fffff801`708a5000   mrxsmb20 mrxsmb20.sys Mon Mar 24 18:58:59 2014 (5330B8B3)
fffff801`6e4d4000 fffff801`6e4e0000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6c79b000 fffff801`6c7a5000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`6c410000 fffff801`6c46d000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff801`6e070000 fffff801`6e07c000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff801`6d88a000 fffff801`6d8a1000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff801`6d2dd000 fffff801`6d3f5000   ndis     ndis.sys     Sat Feb 22 07:12:58 2014 (5308944A)
fffff801`6f61e000 fffff801`6f629000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff801`6e50e000 fffff801`6e52b000   NEOFLTR_740_30599 NEOFLTR_740_30599.SYS Tue Apr 08 11:06:04 2014 (5344105C)
fffff801`6e5a1000 fffff801`6e5b2000   netbios  netbios.sys  Thu Aug 22 07:38:58 2013 (5215F852)
fffff801`6e52b000 fffff801`6e577000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff801`6d000000 fffff801`6d079000   NETIO    NETIO.SYS    Thu Aug 22 07:37:08 2013 (5215F7E4)
fffff801`6e4c0000 fffff801`6e4d4000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff801`6e5f3000 fffff801`6e5ff000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff801`6e2a2000 fffff801`6e2b0000   nsiproxy nsiproxy.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`3608f000 fffff800`36818000   nt       ntkrnlmp.exe Sun Mar 30 17:35:15 2014 (53388E13)
fffff801`6d0b0000 fffff801`6d2a6000   Ntfs     Ntfs.sys     Tue Mar 18 23:58:52 2014 (532915FC)
fffff801`6e197000 fffff801`6e1a0000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6f400000 fffff801`6f434000   nvhda64v nvhda64v.sys Sun Jun 16 08:38:07 2013 (51BDB1AF)
fffff801`6e6ba000 fffff801`6f31e000   nvlddmkm nvlddmkm.sys Mon May 19 19:08:44 2014 (537A8EFC)
fffff801`6e577000 fffff801`6e5a1000   pacer    pacer.sys    Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff801`6c61c000 fffff801`6c634000   partmgr  partmgr.sys  Thu Aug 22 07:40:20 2013 (5215F8A4)
fffff801`6c7a5000 fffff801`6c7ed000   pci      pci.sys      Sat Feb 22 07:12:41 2014 (53089439)
fffff801`6d2c2000 fffff801`6d2d2000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff801`6c600000 fffff801`6c61c000   pdc      pdc.sys      Fri Nov 01 00:58:42 2013 (52733502)
fffff801`7055a000 fffff801`705a9000   PGPdisk  PGPdisk.SYS  Mon Apr 14 16:25:59 2014 (534C4457)
fffff801`6ca72000 fffff801`6caa9000   PGPfsfd  PGPfsfd.sys  Mon Apr 14 16:25:55 2014 (534C4453)
fffff801`6e292000 fffff801`6e2a2000   PGPsdk   PGPsdk.sys   Mon Apr 14 16:25:51 2014 (534C444F)
fffff801`6ceb0000 fffff801`6cf18000   PGPwded  PGPwded.sys  Mon Apr 14 16:25:45 2014 (534C4449)
fffff801`6caa9000 fffff801`6cab2000   Pgpwdefs Pgpwdefs.sys Mon Apr 14 16:25:18 2014 (534C442E)
fffff801`6e66f000 fffff801`6e6b6000   portcls  portcls.sys  Sat Feb 22 07:11:25 2014 (530893ED)
fffff801`6c3c2000 fffff801`6c3d7000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff801`6e000000 fffff801`6e070000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff801`6f7e6000 fffff801`6f7f1000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff801`6d844000 fffff801`6d88a000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff801`70542000 fffff801`7055a000   rspndr   rspndr.sys   Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`6f444000 fffff801`6f51b000   Rt630x64 Rt630x64.sys Thu May 08 07:01:57 2014 (536B6425)
fffff801`6fa59000 fffff801`6fe1e900   RTKVHD64 RTKVHD64.sys Wed May 14 06:28:52 2014 (53734564)
fffff801`6d400000 fffff801`6d43e000   SamsungRapidDiskFltr SamsungRapidDiskFltr.sys Mon Jul 29 14:55:38 2013 (51F6BAAA)
fffff801`6c97e000 fffff801`6c99e000   SamsungRapidFSFltr SamsungRapidFSFltr.sys Mon Jul 29 14:55:39 2013 (51F6BAAB)
fffff801`6d800000 fffff801`6d844000   snapman  snapman.sys  Wed Aug 14 08:17:26 2013 (520B7556)
fffff801`6c863000 fffff801`6c8c4000   spaceport spaceport.sys Tue Apr 01 00:16:52 2014 (533A3DB4)
fffff801`6cd81000 fffff801`6cde0000   storport storport.sys Sun Apr 06 10:08:55 2014 (53415FF7)
fffff801`6f629000 fffff801`6f62a600   swenum   swenum.sys   Thu Aug 22 07:39:29 2013 (5215F871)
fffff801`6d47e000 fffff801`6d6f2000   tcpip    tcpip.sys    Sun Mar 30 21:42:44 2014 (5338C814)
fffff801`6e500000 fffff801`6e50e000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff801`6e4e0000 fffff801`6e500000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`6f3be000 fffff801`6f3e1000   TeeDriverx64 TeeDriverx64.sys Wed May 14 16:22:24 2014 (5373D080)
fffff801`6d8bd000 fffff801`6d9d0000   tib      tib.sys      Wed Mar 20 05:00:38 2013 (51497AB6)
fffff801`6ce55000 fffff801`6ce88000   tib_mounter tib_mounter.sys Mon Sep 30 09:04:20 2013 (524976D4)
fffff801`6c3a0000 fffff801`6c3c2000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff801`6e5b2000 fffff801`6e5f3000   truecrypt truecrypt.sys Mon May 26 20:39:59 2014 (5383DEDF)
fffff960`00660000 fffff960`00669000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff801`6f38c000 fffff801`6f3be000   ucx01000 ucx01000.sys Sat Feb 22 07:11:33 2014 (530893F5)
fffff801`6d453000 fffff801`6d464000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff801`7048a000 fffff801`704a7900   usbaudio usbaudio.sys Fri Dec 13 02:24:20 2013 (52AAB624)
fffff801`6fe33000 fffff801`6fe5d000   usbccgp  usbccgp.sys  Wed Oct 23 04:17:41 2013 (52678625)
fffff801`6f7f1000 fffff801`6f7fd000   USBD     USBD.SYS     Thu Aug 22 07:40:22 2013 (5215F8A6)
fffff801`6f3e1000 fffff801`6f3f9000   usbehci  usbehci.sys  Thu Aug 22 07:39:15 2013 (5215F863)
fffff801`6f56a000 fffff801`6f5d5000   usbhub   usbhub.sys   Thu Aug 22 07:38:33 2013 (5215F839)
fffff801`6f8ae000 fffff801`6f926000   UsbHub3  UsbHub3.sys  Sat Mar 08 04:23:48 2014 (531AE1A4)
fffff801`6e600000 fffff801`6e66f000   USBPORT  USBPORT.SYS  Thu Aug 22 07:39:40 2013 (5215F87C)
fffff801`6ff17000 fffff801`6ff24000   usbprint usbprint.sys Thu Aug 22 07:36:32 2013 (5215F7C0)
fffff801`6ff06000 fffff801`6ff17000   usbscan  usbscan.sys  Thu Aug 22 07:39:58 2013 (5215F88E)
fffff801`6ff24000 fffff801`6ff4a000   USBSTOR  USBSTOR.SYS  Sat Feb 22 07:12:08 2014 (53089418)
fffff801`6f337000 fffff801`6f38c000   USBXHCI  USBXHCI.SYS  Sat Feb 22 07:11:27 2014 (530893EF)
fffff801`6c7ed000 fffff801`6c7fa000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff801`6c46d000 fffff801`6c4e1000   VerifierExt VerifierExt.sys Sat Sep 14 07:40:56 2013 (52344B48)
fffff801`6c8c4000 fffff801`6c8d9000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff801`6c8d9000 fffff801`6c938000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`6cfad000 fffff801`6cffd000   volsnap  volsnap.sys  Thu Mar 06 04:26:33 2014 (53183F49)
fffff801`6e43b000 fffff801`6e44d000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff801`6c4e1000 fffff801`6c5b0000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff801`6c5b0000 fffff801`6c5c1000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`6c331000 fffff801`6c33f000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`6d75e000 fffff801`6d783000   wfplwfs  wfplwfs.sys  Sat Mar 08 04:22:45 2014 (531AE165)
fffff960`000ca000 fffff960`004e3000   win32k   win32k.sys   Sun Apr 06 10:09:21 2014 (53416011)
fffff801`6f7dc000 fffff801`6f7e6000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff801`6c706000 fffff801`6c710000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`6c953000 fffff801`6c97e000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff801`6c5d9000 fffff801`6c5e4000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)

Unloaded modules:
fffff801`6cde0000 fffff801`6cdfa000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001A000
fffff801`6d9ec000 fffff801`6d9f8000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
fffff801`6dcbc000 fffff801`6df85000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  002C9000
fffff801`6df85000 fffff801`6df9b000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff801`6df9b000 fffff801`6dfc6000   dump_PGPwdeD
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0002B000
fffff801`6f600000 fffff801`6f63e000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0003E000
fffff801`6e0a2000 fffff801`6e0b2000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff801`6d8b0000 fffff801`6d8bc000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000
Bugcheck code 000000D6
Arguments ffffcf81`02617000 00000000`00000000 ffffe001`bd59bed0 00000000`00000000

Patrick · Jun 4, 2014

Re: BSOD Windows 8.1 X64

It wouldn't surprise me that LMI Hamachi is allocating an improper amount of memory. Go ahead and remove it and let's see where we are afterwards.

Regards,

Patrick

[SOLVED] [Win8.1 x64] BSOD

Zardoc

Contributor

Patrick

Sysnative Staff

Zardoc

Contributor

Patrick

Sysnative Staff

Zardoc

Contributor

Patrick

Sysnative Staff

Zardoc

Contributor

Patrick

Sysnative Staff

Zardoc

Contributor

Zardoc

Contributor

Patrick

Sysnative Staff